@rubytech/create-maxy 1.0.0

package/payload/platform/plugins/telegram/mcp/dist/tools/message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.d.ts","sourceRoot":"","sources":["../../src/tools/message.ts"],"names":[],"mappings":"AAEA,UAAU,aAAa;IACrB,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,CAAC;IAC/C,cAAc,CAAC,EAAE,KAAK,CACpB,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAC7D,CAAC;CACH;AAED,UAAU,aAAa;IACrB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAoC3E"}

package/payload/platform/plugins/telegram/mcp/dist/tools/message.js

@@ -0,0 +1,34 @@
+import { sendMessage } from "../lib/telegram.js";
+export async function message(params) {
+    const botToken = process.env.TELEGRAM_PUBLIC_BOT_TOKEN;
+    if (!botToken) {
+        return {
+            sent: false,
+            channel: params.channel,
+            error: "TELEGRAM_PUBLIC_BOT_TOKEN not configured",
+        };
+    }
+    let replyMarkup;
+    if (params.inlineKeyboard) {
+        replyMarkup = {
+            inline_keyboard: params.inlineKeyboard.map((row) => row.map((btn) => ({
+                text: btn.text,
+                callback_data: btn.callbackData,
+                url: btn.url,
+            }))),
+        };
+    }
+    const result = await sendMessage(botToken, {
+        chatId: params.chatId,
+        text: params.text,
+        parseMode: params.parseMode,
+        replyMarkup,
+    });
+    return {
+        sent: result.ok,
+        channel: "telegram",
+        messageId: result.messageId,
+        error: result.error,
+    };
+}
+//# sourceMappingURL=message.js.map

package/payload/platform/plugins/telegram/mcp/dist/tools/message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.js","sourceRoot":"","sources":["../../src/tools/message.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA+B,MAAM,oBAAoB,CAAC;AAmB9E,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAqB;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,0CAA0C;SAClD,CAAC;IACJ,CAAC;IAED,IAAI,WAA+C,CAAC;IACpD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,WAAW,GAAG;YACZ,eAAe,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACjD,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,aAAa,EAAE,GAAG,CAAC,YAAY;gBAC/B,GAAG,EAAE,GAAG,CAAC,GAAG;aACb,CAAC,CAAC,CACJ;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE;QACzC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW;KACZ,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,EAAE;QACf,OAAO,EAAE,UAAU;QACnB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/telegram/mcp/package.json

@@ -0,0 +1,19 @@
+{
+  "name": "@maxy/messaging",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "main": "dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.1",
+    "neo4j-driver": "^5.28.1"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.0",
+    "@types/node": "^22.0.0"
+  }
+}

package/payload/platform/plugins/telegram/references/setup-guide.md

@@ -0,0 +1,50 @@
+# Telegram Setup Guide
+
+## Creating a Bot
+
+1. Open Telegram and search for **@BotFather**
+2. Start a chat and send `/newbot`
+3. Follow the prompts — choose a display name and a username (must end in `bot`)
+4. BotFather replies with a **bot token** (a long string like `123456:ABC-DEF...`)
+5. Copy the token — you'll paste it into Taskmaster's Setup page
+
+## Connecting the Bot to Taskmaster
+
+1. Open the Taskmaster control panel (Setup page)
+2. Find the **Telegram** row and click **Connect** (or open settings if already connected)
+3. Paste the bot token from BotFather
+4. The system probes the token to verify it — you'll see the bot's username confirmed
+5. Choose whether this is an **admin bot** or a **public bot** (see below)
+6. If it's a public bot, choose a DM policy (who can message it)
+7. Click **Save & Connect**
+
+## Admin Bot vs Public Bot
+
+Each Telegram bot has an **Admin routing** toggle:
+
+- **Admin bot** (toggle ON): Only users with admin bindings can message this bot. Everyone else is silently denied. Messages route to the admin agent. No DM policy applies — it's admin-only by design.
+- **Public bot** (toggle OFF): DM policy applies to everyone equally, including admins. Messages route to the public agent. Use this for customer-facing bots.
+
+A common setup is two bots: one admin bot for the business owner, one public bot for customers.
+
+## Finding Your Telegram User ID
+
+Admin bindings require your **numeric Telegram user ID** — not your username. Usernames can be changed or claimed by someone else, so they are not safe for admin access.
+
+To find your user ID:
+
+1. Open Telegram and search for **@userinfobot**
+2. Start the chat and send `/start`
+3. The bot instantly replies with your numeric ID (e.g. `123456789`), plus your name and language
+4. Use this numeric ID when setting up admin bindings
+
+## DM Policy Options (Public Bots Only)
+
+| Policy | Behaviour |
+|--------|-----------|
+| **Respond to everyone** | Any Telegram user can message the bot and get a response |
+| **Require approval** | Unknown senders receive a pairing code; an admin must approve them |
+| **Whitelist only** | Only users in the allowlist can message the bot |
+| **Disabled** | The bot ignores all DMs |
+
+"Require approval" (pairing) is the default and recommended for most setups — it lets you control who talks to the bot without pre-configuring an allowlist.

package/payload/platform/plugins/web/PLUGIN.md

@@ -0,0 +1,12 @@
+---
+name: web
+description: "Web plugin. Provides web search and browsing tools. Phase 1 — stub implementation."
+icon: 🌐
+tools: []
+always: false
+embed: false
+---
+
+# Web
+
+Web search and browsing. Phase 1 stub — not yet implemented.

package/payload/platform/plugins/web/mcp/dist/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/payload/platform/plugins/web/mcp/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/web/mcp/dist/index.js

@@ -0,0 +1,12 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+const server = new McpServer({
+    name: "maxy-web",
+    version: "0.1.0",
+});
+server.tool("web-search", "Search the web using multiple providers (Tavily, Brave, Perplexity)", { query: z.string(), provider: z.enum(["tavily", "brave", "perplexity"]).optional() }, async () => ({ content: [{ type: "text", text: "Web search is not available in Phase 0. This capability will be added in Phase 1." }] }));
+server.tool("web-fetch", "Fetch and extract content from a URL", { url: z.string() }, async () => ({ content: [{ type: "text", text: "Web fetching is not available in Phase 0. This capability will be added in Phase 1." }] }));
+const transport = new StdioServerTransport();
+await server.connect(transport);
+//# sourceMappingURL=index.js.map

package/payload/platform/plugins/web/mcp/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,MAAM,CAAC,IAAI,CACT,YAAY,EACZ,qEAAqE,EACrE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,EACrF,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mFAAmF,EAAE,CAAC,EAAE,CAAC,CAClJ,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,WAAW,EACX,sCAAsC,EACtC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EACnB,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,qFAAqF,EAAE,CAAC,EAAE,CAAC,CACpJ,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/payload/platform/plugins/web/mcp/package.json

@@ -0,0 +1,18 @@
+{
+  "name": "@maxy/web",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "main": "dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.1"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.0",
+    "@types/node": "^22.0.0"
+  }
+}

package/payload/platform/scripts/seed-neo4j.sh

@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+# ============================================================
+# seed-neo4j.sh — Phase 0 setup
+# Creates the account from templates and applies Neo4j schema.
+# Product knowledge is ingested post-installation via the admin
+# agent, not seeded as cypher.
+# ============================================================
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_DIR="$(dirname "$SCRIPT_DIR")"
+TEMPLATES_DIR="$PROJECT_DIR/templates"
+ACCOUNTS_DIR="$PROJECT_DIR/config/accounts"
+NEO4J_DIR="$PROJECT_DIR/neo4j"
+
+NEO4J_URI="${NEO4J_URI:-bolt://localhost:7687}"
+NEO4J_USER="${NEO4J_USER:-neo4j}"
+
+# Read password from the file created during setup
+NEO4J_PASSWORD_FILE="$PROJECT_DIR/config/.neo4j-password"
+if [ -n "${NEO4J_PASSWORD:-}" ]; then
+  : # Explicit env var takes precedence
+elif [ -f "$NEO4J_PASSWORD_FILE" ]; then
+  NEO4J_PASSWORD=$(cat "$NEO4J_PASSWORD_FILE")
+else
+  echo "Error: Neo4j password not found."
+  echo "  Expected at: $NEO4J_PASSWORD_FILE"
+  echo "  Or set NEO4J_PASSWORD environment variable."
+  exit 1
+fi
+
+CYPHER_SHELL="cypher-shell"
+
+# ------------------------------------------------------------------
+# 1. Create Phase 0 account from templates
+# ------------------------------------------------------------------
+ACCOUNT_ID="phase0-maxy"
+ACCOUNT_DIR="$ACCOUNTS_DIR/$ACCOUNT_ID"
+
+# Create account directory if it doesn't exist
+mkdir -p "$ACCOUNT_DIR/agents/admin" "$ACCOUNT_DIR/agents/public"
+
+# Always overwrite IDENTITY.md — Rubytech-controlled, pure behaviour.
+cp "$TEMPLATES_DIR/agents/admin/IDENTITY.md" "$ACCOUNT_DIR/agents/admin/IDENTITY.md"
+cp "$TEMPLATES_DIR/agents/public/IDENTITY.md" "$ACCOUNT_DIR/agents/public/IDENTITY.md"
+
+# SOUL.md — user-controlled personalisation. Only create if missing. Never overwrite.
+[ -f "$ACCOUNT_DIR/agents/admin/SOUL.md" ] || cp "$TEMPLATES_DIR/agents/admin/SOUL.md" "$ACCOUNT_DIR/agents/admin/SOUL.md"
+[ -f "$ACCOUNT_DIR/agents/public/SOUL.md" ] || cp "$TEMPLATES_DIR/agents/public/SOUL.md" "$ACCOUNT_DIR/agents/public/SOUL.md"
+
+# Create account.json only if it doesn't exist (business config is in the graph)
+if [ ! -f "$ACCOUNT_DIR/account.json" ]; then
+  echo '{"accountId":"phase0-maxy","tier":"solo"}' > "$ACCOUNT_DIR/account.json"
+fi
+
+echo "  Account at $ACCOUNT_DIR"
+
+# ------------------------------------------------------------------
+# 2. Apply Neo4j schema (constraints + indexes only)
+# ------------------------------------------------------------------
+if ! command -v "$CYPHER_SHELL" &> /dev/null; then
+    echo "Error: cypher-shell not found. Install Neo4j or add cypher-shell to PATH."
+    exit 1
+fi
+
+echo "==> Connecting to Neo4j at $NEO4J_URI as $NEO4J_USER"
+
+echo "==> Applying schema (constraints, indexes, vector indexes)..."
+"$CYPHER_SHELL" -u "$NEO4J_USER" -p "$NEO4J_PASSWORD" -a "$NEO4J_URI" \
+    -f "$NEO4J_DIR/schema.cypher"
+
+echo "  Done."

package/payload/platform/scripts/setup.sh

@@ -0,0 +1,177 @@
+#!/usr/bin/env bash
+# Maxy Phase 0 — Pi Setup Script
+# Run on a fresh Raspberry Pi 5 (16GB) with Raspberry Pi OS (64-bit)
+#
+# Usage: curl -fsSL https://raw.githubusercontent.com/aeon-neo/getmaxy/main/platform/scripts/setup.sh | bash
+#    or: git clone git@github.com:aeon-neo/getmaxy.git && cd getmaxy && bash platform/scripts/setup.sh
+
+set -euo pipefail
+
+REPO_URL="https://github.com/aeon-neo/getmaxy.git"
+INSTALL_DIR="$HOME/maxy"
+
+echo "================================================================"
+echo "  Maxy Phase 0 — Setup"
+echo "  AI for Productive People."
+echo "================================================================"
+echo ""
+
+# ------------------------------------------------------------------
+# 1. System dependencies + hostname + Avahi (mDNS)
+# ------------------------------------------------------------------
+echo "[1/8] Updating system packages and configuring network..."
+sudo apt-get update -qq
+sudo apt-get install -y -qq curl git unzip avahi-daemon avahi-utils
+
+# Set hostname to 'maxy' so device is reachable at maxy.local
+CURRENT_HOSTNAME=$(hostname)
+if [ "$CURRENT_HOSTNAME" != "maxy" ]; then
+  echo "  Setting hostname to 'maxy' (was '$CURRENT_HOSTNAME')..."
+  sudo hostnamectl set-hostname maxy
+  # Update /etc/hosts
+  sudo sed -i "s/127\.0\.1\.1.*$/127.0.1.1\tmaxy/" /etc/hosts
+fi
+
+# Create Avahi service file for LAN discovery
+sudo tee /etc/avahi/services/maxy.service > /dev/null <<AVAHI
+<?xml version="1.0" standalone='no'?>
+<!DOCTYPE service-group SYSTEM "avahi-service.dtd">
+<service-group>
+  <name replace-wildcards="yes">Maxy on %h</name>
+  <service>
+    <type>_http._tcp</type>
+    <port>19200</port>
+    <txt-record>role=maxy</txt-record>
+    <txt-record>path=/</txt-record>
+  </service>
+</service-group>
+AVAHI
+
+# Ensure Avahi is running
+sudo systemctl enable avahi-daemon
+sudo systemctl restart avahi-daemon
+echo "  Device reachable at http://maxy.local:19200"
+
+# ------------------------------------------------------------------
+# 2. Node.js 20+
+# ------------------------------------------------------------------
+if command -v node &>/dev/null && [[ "$(node -v | cut -d. -f1 | tr -d v)" -ge 20 ]]; then
+  echo "[2/8] Node.js $(node -v) already installed."
+else
+  echo "[2/8] Installing Node.js 22..."
+  curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash -
+  sudo apt-get install -y -qq nodejs
+fi
+
+# ------------------------------------------------------------------
+# 3. Neo4j Community Edition 5.x
+# ------------------------------------------------------------------
+if command -v neo4j &>/dev/null; then
+  echo "[3/8] Neo4j already installed."
+else
+  echo "[3/8] Installing Neo4j Community Edition 5..."
+
+  # Neo4j 5.x requires Java 17+
+  if ! java -version 2>&1 | grep -q '"17\.\|"21\.\|"22\.\|"23\.'; then
+    echo "  Installing OpenJDK 17..."
+    sudo apt-get install -y -qq openjdk-17-jre-headless
+  fi
+
+  # Add Neo4j repository
+  curl -fsSL https://debian.neo4j.com/neotechnology.gpg.key | sudo gpg --yes --dearmor -o /usr/share/keyrings/neo4j.gpg 2>/dev/null
+  echo "deb [signed-by=/usr/share/keyrings/neo4j.gpg] https://debian.neo4j.com stable 5" | sudo tee /etc/apt/sources.list.d/neo4j.list
+  sudo apt-get update -qq
+  sudo apt-get install -y -qq neo4j
+
+  # Configure Neo4j for local use
+  sudo sed -i 's/#server.default_listen_address=0.0.0.0/server.default_listen_address=127.0.0.1/' /etc/neo4j/neo4j.conf
+
+  # Generate a strong random password and store it
+  NEO4J_GENERATED_PASSWORD=$(openssl rand -base64 32 | tr -d '/+=' | head -c 32)
+  mkdir -p "$INSTALL_DIR/platform/config"
+  echo "$NEO4J_GENERATED_PASSWORD" > "$INSTALL_DIR/platform/config/.neo4j-password"
+  chmod 600 "$INSTALL_DIR/platform/config/.neo4j-password"
+  sudo neo4j-admin dbms set-initial-password "$NEO4J_GENERATED_PASSWORD"
+
+  # Start and enable
+  sudo systemctl enable neo4j
+  sudo systemctl start neo4j
+  echo "  Neo4j started. Password stored in platform/config/.neo4j-password"
+fi
+
+# ------------------------------------------------------------------
+# 4. Ollama (local embeddings)
+# ------------------------------------------------------------------
+if command -v ollama &>/dev/null; then
+  echo "[4/8] Ollama already installed."
+else
+  echo "[4/8] Installing Ollama..."
+  curl -fsSL https://ollama.ai/install.sh | sh
+fi
+
+# Pull the embedding model
+echo "  Pulling nomic-embed-text model (~300MB)..."
+ollama pull nomic-embed-text
+
+# ------------------------------------------------------------------
+# 5. Cloudflared (Cloudflare Tunnel)
+# ------------------------------------------------------------------
+if command -v cloudflared &>/dev/null; then
+  echo "[5/8] Cloudflared already installed."
+else
+  echo "[5/8] Installing cloudflared..."
+  curl -fsSL https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-arm64.deb -o /tmp/cloudflared.deb
+  sudo dpkg -i /tmp/cloudflared.deb
+  rm /tmp/cloudflared.deb
+fi
+
+# ------------------------------------------------------------------
+# 6. Clone or update Maxy
+# ------------------------------------------------------------------
+if [ -d "$INSTALL_DIR/.git" ]; then
+  echo "[6/8] Updating Maxy..."
+  cd "$INSTALL_DIR"
+  git pull --ff-only
+else
+  echo "[6/8] Cloning Maxy..."
+  git clone "$REPO_URL" "$INSTALL_DIR"
+  cd "$INSTALL_DIR"
+fi
+
+# ------------------------------------------------------------------
+# 7. Install dependencies and build
+# ------------------------------------------------------------------
+echo "[7/8] Installing dependencies and building..."
+
+# Platform MCP servers
+cd "$INSTALL_DIR/platform"
+npm install --quiet
+npm run build
+
+# Web app
+cd "$INSTALL_DIR/maxy"
+npm install --quiet
+npm run build
+
+# ------------------------------------------------------------------
+# 8. Create account and apply schema
+# ------------------------------------------------------------------
+cd "$INSTALL_DIR"
+if [ ! -f "$INSTALL_DIR/.seeded" ]; then
+  echo "[8/8] Creating account and applying schema..."
+  bash platform/scripts/seed-neo4j.sh
+  touch "$INSTALL_DIR/.seeded"
+fi
+
+# ------------------------------------------------------------------
+# Done
+# ------------------------------------------------------------------
+echo ""
+echo "================================================================"
+echo "  Maxy is installed."
+echo ""
+echo "  Open in your browser:"
+echo "    http://maxy.local:19200"
+echo ""
+echo "  Everything from here happens through conversation."
+echo "================================================================"

package/payload/platform/scripts/start.sh

@@ -0,0 +1,62 @@
+#!/usr/bin/env bash
+# Maxy Phase 0 — Start all services
+# Usage: bash platform/scripts/start.sh
+
+set -euo pipefail
+
+INSTALL_DIR="$(cd "$(dirname "$0")/../.." && pwd)"
+
+echo "Starting Maxy..."
+
+# ------------------------------------------------------------------
+# 1. Check Neo4j
+# ------------------------------------------------------------------
+if systemctl is-active --quiet neo4j 2>/dev/null; then
+  echo "  Neo4j: running"
+else
+  echo "  Neo4j: starting..."
+  sudo systemctl start neo4j
+  sleep 3
+fi
+
+# ------------------------------------------------------------------
+# 2. Check Ollama
+# ------------------------------------------------------------------
+if curl -sf http://localhost:11434/api/tags >/dev/null 2>&1; then
+  echo "  Ollama: running"
+else
+  echo "  Ollama: starting..."
+  ollama serve &
+  sleep 2
+fi
+
+# ------------------------------------------------------------------
+# 3. Start the web app on 0.0.0.0:19200
+# ------------------------------------------------------------------
+echo "  Web app: starting on port 19200..."
+cd "$INSTALL_DIR/maxy"
+
+if [ -f .env.local ]; then
+  set -a
+  . .env.local
+  set +a
+fi
+
+npm start &
+WEB_PID=$!
+
+# ------------------------------------------------------------------
+# Ready
+# ------------------------------------------------------------------
+echo ""
+echo "Maxy is running."
+echo "  Local: http://maxy.local:19200"
+echo ""
+echo "  Everything from here happens through conversation."
+echo "  Cloudflare Tunnel, Telegram, and all configuration"
+echo "  are set up via the admin agent."
+echo ""
+echo "Press Ctrl+C to stop."
+
+trap "kill $WEB_PID 2>/dev/null; exit 0" INT TERM
+wait $WEB_PID

package/payload/platform/templates/account.json

@@ -0,0 +1,4 @@
+{
+  "accountId": "",
+  "tier": ""
+}

package/payload/platform/templates/agents/admin/IDENTITY.md

@@ -0,0 +1,28 @@
+# Head of Operations
+
+You are the head of operations. Not an assistant waiting for instructions — a proactive operator who drives the business forward.
+
+At the start of every session, check the graph for business context. Your goal is to populate the graph efficiently and comprehensively to maximise value from business intelligence. 
+
+Your personalisation is in SOUL.md. Read it and apply it.
+
+## Boundaries
+
+- You are an AI. State this clearly if asked. Never impersonate a human.
+- You have full access to all platform tools and systems.
+- Professional, direct, action-oriented. Concise and precise. British English unless SOUL.md specifies otherwise.
+- Do not use emoji characters in any response. Plain text and punctuation only.
+
+## Behaviour
+
+- Be proactive. Identify what needs doing and do it. Don't wait to be asked.
+- On session start, assess the state of the business from the graph and report what needs attention.
+- On first setup (incomplete business data in graph), immediately begin onboarding: learn the business, understand the stage, gather customer details, build a comprehensive picture so you can drive operations forward - one step at a time. 
+- Write personalisation to your own SOUL.md. Also write the public agent's personalisation to agents/public/SOUL.md.
+- Think strategically. Help with planning, not just tasks.
+- Surface problems before they become urgent. Recommend actions based on what you know.
+- Store everything you learn about the business in the graph — not in files.
+
+## Plugins
+
+Your behaviour is defined by your loaded plugins. Follow them.

package/payload/platform/templates/agents/admin/SOUL.md

@@ -0,0 +1 @@
+# Soul

package/payload/platform/templates/agents/public/IDENTITY.md

@@ -0,0 +1,21 @@
+# Public Agent
+
+You are a public-facing agent. Check the graph for business context at the start of every session.
+
+Your personalisation is in SOUL.md. Read it and apply it.
+SOUL.md is written and maintained by the admin agent. You cannot write it.
+
+## Boundaries
+
+- You are an AI assistant. State this clearly if asked. Never impersonate a human.
+- You are completely read-only. You cannot create, modify, or delete any data.
+- Your tools are memory-search and plugin-read. Use memory-search before every response.
+- You answer ONLY from memory-search results. If the answer is not in the results, say you don't know.
+- You must NEVER use your training data to answer questions. No general knowledge. No improvising.
+- You must NEVER speak about topics outside your explicit scope. Decline all other requests.
+- You cannot spawn subagents, access files, run commands, or browse the web.
+- British English unless SOUL.md specifies otherwise. Conversational tone.
+
+## Plugins
+
+Your behaviour is defined by your loaded plugins. Follow them.

package/payload/platform/templates/agents/public/SOUL.md

@@ -0,0 +1 @@
+# Soul

package/payload/platform/tsconfig.base.json

@@ -0,0 +1,18 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "Node16",
+    "moduleResolution": "Node16",
+    "lib": ["ES2022"],
+    "outDir": "dist",
+    "rootDir": "src",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true
+  }
+}