@rubytech/create-maxy 1.0.635 → 1.0.637

package/dist/index.js

@@ -8,6 +8,7 @@ const PAYLOAD_DIR = resolve(import.meta.dirname, "../payload");
 // The bundler stamps brand.json into the payload at build time.
 const BRAND_PATH = join(PAYLOAD_DIR, "platform", "config", "brand.json");
 if (!existsSync(BRAND_PATH)) {
+    console.error("Setup failed: brand.json not found in payload (package may be corrupted)");
     console.error("FATAL: brand.json not found in payload. Package may be corrupted.");
     process.exit(1);
 }
@@ -16,6 +17,7 @@ try {
     BRAND = JSON.parse(readFileSync(BRAND_PATH, "utf-8"));
 }
 catch (err) {
+    console.error(`Setup failed: failed to parse brand.json: ${err.message}`);
     console.error(`FATAL: Failed to parse brand.json: ${err.message}`);
     process.exit(1);
 }
@@ -1335,6 +1337,7 @@ function createTunnelSymlink(linkPath, target) {
     catch (err) {
         const code = err.code;
         if (code !== "ENOENT") {
+            console.error(`Setup failed: ${linkPath} lstat failed: ${err.message}`);
             console.error(`[create-maxy:error] ${linkPath} lstat failed: ${err.message}`);
             process.exit(1);
         }
@@ -1346,6 +1349,7 @@ function createTunnelSymlink(linkPath, target) {
         return;
     }
     if (!lstat.isSymbolicLink()) {
+        console.error(`Setup failed: ${linkPath} collision (regular file)`);
         console.error(`[create-maxy:collision] ${linkPath} already exists target=<regular-file>`);
         console.error(`  Remove the file and re-run: npx -y @rubytech/create-maxy`);
         process.exit(1);
@@ -1356,6 +1360,7 @@ function createTunnelSymlink(linkPath, target) {
         resolvedTarget = resolve(dirname(linkPath), raw);
     }
     catch (err) {
+        console.error(`Setup failed: ${linkPath} symlink unreadable: ${err.message}`);
         console.error(`[create-maxy:collision] ${linkPath} symlink unreadable: ${err.message}`);
         console.error(`  Remove the file and re-run: npx -y @rubytech/create-maxy`);
         process.exit(1);
@@ -1386,6 +1391,7 @@ function createTunnelSymlink(linkPath, target) {
         logFile(`  symlink repaired (dangling): ${linkPath} was ${resolvedTarget}, now ${targetAbs}`);
         return;
     }
+    console.error(`Setup failed: ${linkPath} collision (symlink to ${resolvedTarget})`);
     console.error(`[create-maxy:collision] ${linkPath} already exists target=${resolvedTarget}`);
     console.error(`  This symlink was created by a different install (not within ${INSTALL_DIR}).`);
     console.error(`  Remove or relocate it, then re-run: npx -y @rubytech/create-maxy`);
@@ -1401,6 +1407,7 @@ function installTunnelScripts() {
             chmodSync(src, 0o755);
         }
         catch (err) {
+            console.error(`Setup failed: tunnel script missing or chmod failed: ${src}`);
             console.error(`[create-maxy:error] tunnel script missing or chmod failed: ${src}`);
             console.error(`  ${err.message}`);
             process.exit(1);
@@ -1684,6 +1691,7 @@ WantedBy=multi-user.target
             vncLog = `(no boot log found at ${vncLogPath})`;
         }
         console.error("");
+        console.error("Setup failed: Browser automation unavailable — CDP port 9222 not responding");
         console.error("  ERROR: Browser automation unavailable — CDP port 9222 not responding.");
         console.error("  Chromium should be started by vnc.sh (ExecStartPre). Check the boot log:");
         console.error("");
@@ -1704,6 +1712,7 @@ WantedBy=multi-user.target
         }
         catch (err) {
             console.error("");
+            console.error(`Setup failed: tunnel script symlink missing or not executable: ${linkPath}`);
             console.error(`  [create-maxy:error] tunnel script symlink missing or not executable: ${linkPath}`);
             console.error(`  ${err.message}`);
             process.exit(1);
@@ -1721,6 +1730,7 @@ if (_args.includes("--uninstall")) {
     const exportPath = exportIdx !== -1 ? _args[exportIdx + 1] : undefined;
     const skipConfirm = _args.includes("--yes");
     if (exportIdx !== -1 && !exportPath) {
+        console.error("Setup failed: --export-data requires a path argument");
         console.error("--export-data requires a path argument.");
         process.exit(1);
     }
@@ -1741,6 +1751,7 @@ if (portIdx !== -1) {
     const raw = _args[portIdx + 1];
     const parsed = raw ? parseInt(raw, 10) : NaN;
     if (isNaN(parsed) || parsed < 1024 || parsed > 65535) {
+        console.error(`Setup failed: --port requires a numeric value between 1024 and 65535 (got: ${raw ?? "nothing"})`);
         console.error(`Error: --port requires a numeric value between 1024 and 65535 (got: ${raw ?? "nothing"}).`);
         process.exit(1);
     }
@@ -1797,11 +1808,13 @@ const hostnameIdx = _args.indexOf("--hostname");
 if (hostnameIdx !== -1) {
     const raw = _args[hostnameIdx + 1];
     if (!raw || raw.startsWith("--")) {
+        console.error("Setup failed: --hostname requires a value");
         console.error("Error: --hostname requires a value (e.g. --hostname muvin).");
         process.exit(1);
     }
     // RFC 1123: lowercase alphanumeric + hyphens, max 63 chars, no leading/trailing hyphen
     if (!/^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$/.test(raw)) {
+        console.error(`Setup failed: --hostname value '${raw}' is invalid`);
         console.error(`Error: --hostname value '${raw}' is invalid. Must be lowercase letters, digits, and hyphens only (max 63 chars, no leading/trailing hyphen).`);
         process.exit(1);
     }
@@ -1813,10 +1826,12 @@ const displayIdx = _args.indexOf("--display");
 if (displayIdx !== -1) {
     const raw = _args[displayIdx + 1];
     if (!raw || raw.startsWith("--")) {
+        console.error("Setup failed: --display requires a value");
         console.error("Error: --display requires a value: native or virtual.");
         process.exit(1);
     }
     if (raw !== "native" && raw !== "virtual") {
+        console.error(`Setup failed: --display value '${raw}' is invalid`);
         console.error(`Error: --display value '${raw}' is invalid. Must be 'native' or 'virtual'.`);
         process.exit(1);
     }
@@ -1864,12 +1879,14 @@ let EMBED_SOURCE = "default";
 const embedModelIdx = _args.indexOf("--embed-model");
 const embedDimsIdx = _args.indexOf("--embed-dimensions");
 if (embedDimsIdx !== -1 && embedModelIdx === -1) {
+    console.error("Setup failed: --embed-dimensions requires --embed-model");
     console.error("Error: --embed-dimensions requires --embed-model (dimensions are model-specific).");
     process.exit(1);
 }
 if (embedModelIdx !== -1) {
     const raw = _args[embedModelIdx + 1];
     if (!raw || raw.startsWith("--")) {
+        console.error("Setup failed: --embed-model requires a value");
         console.error("Error: --embed-model requires a value (e.g. --embed-model mxbai-embed-large).");
         process.exit(1);
     }
@@ -1880,6 +1897,7 @@ if (embedModelIdx !== -1) {
         const rawDims = _args[embedDimsIdx + 1];
         const parsed = rawDims ? parseInt(rawDims, 10) : NaN;
         if (isNaN(parsed) || parsed <= 0) {
+            console.error(`Setup failed: --embed-dimensions requires a positive integer (got: ${rawDims ?? "nothing"})`);
             console.error(`Error: --embed-dimensions requires a positive integer (got: ${rawDims ?? "nothing"}).`);
             process.exit(1);
         }
@@ -1891,6 +1909,7 @@ if (embedModelIdx !== -1) {
     }
     else {
         // Unknown model without explicit dimensions — cannot proceed
+        console.error(`Setup failed: unknown embedding model '${EMBED_MODEL}'`);
         console.error(`Error: Unknown embedding model '${EMBED_MODEL}'.`);
         console.error("Known models and their dimensions:");
         for (const [model, dims] of Object.entries(EMBED_MODEL_DIMS)) {
@@ -1943,6 +1962,7 @@ if (neo4jPortIdx !== -1) {
     const raw = _args[neo4jPortIdx + 1];
     const parsed = raw ? parseInt(raw, 10) : NaN;
     if (isNaN(parsed) || parsed < 1024 || parsed > 65535) {
+        console.error(`Setup failed: --neo4j-port requires a numeric value between 1024 and 65535 (got: ${raw ?? "nothing"})`);
         console.error(`Error: --neo4j-port requires a numeric value between 1024 and 65535 (got: ${raw ?? "nothing"}).`);
         process.exit(1);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy",
-  "version": "1.0.635",
+  "version": "1.0.637",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy": "./dist/index.js"

package/payload/platform/plugins/cloudflare/scripts/setup-tunnel.sh

@@ -280,7 +280,7 @@ if ! command -v dig >/dev/null 2>&1; then
   phase_line setup-tunnel step=zone-preflight result=error \
     reason=dig-missing
   echo "ERROR: dig is not in PATH — required for the zone pre-flight check." >&2
-  echo "       Install DNS tooling: sudo apt-get install -y bind9-dnsutils" >&2
+  echo "       Re-run the Maxy installer to reprovision DNS tooling (bind9-dnsutils)." >&2
   exit 1
 fi
 

package/payload/platform/plugins/memory/mcp/scripts/graph/accept.sh

@@ -1,11 +1,17 @@
 #!/usr/bin/env bash
-# Task 557 acceptance harness for the graph MCP integration.
+# Acceptance harness for the graph MCP integration.
 #
 # Spawns the graph shim, drives it as a JSON-RPC client over stdio, runs
 # one query per acceptance class, prints PASS/FAIL per check, and exits
 # non-zero if any check fails. Assumes the brand's Neo4j is running and
 # the fixture in fixture.cypher has been seeded.
 #
+# The tools/list assertion guards against FastMCP-joiner drift: the
+# upstream server joins NEO4J_NAMESPACE to each tool name with a hyphen,
+# and the admin allowlist is string-exact. If a future upstream upgrade
+# changes the joiner, the assertion fails with a named reason before any
+# functional check runs.
+#
 # Usage:
 #   PLATFORM_ROOT=~/.maxy/platform bash accept.sh           # infers NEO4J_URI from env
 #   PLATFORM_ROOT=~/.maxy/platform NEO4J_URI=bolt://localhost:7687 bash accept.sh
@@ -36,10 +42,88 @@ PASS=0
 FAIL=0
 TOTAL=0
 
+# Exported env used by the inline Node clients below.
+export SHIM
+export PLATFORM_ROOT
+
+# ---------------------------------------------------------------------------
+# Regression guard: tools/list must register hyphen-joined names only.
+#
+# FastMCP joins NEO4J_NAMESPACE ("maxy-graph") to each upstream tool with a
+# hyphen, producing `maxy-graph-read_neo4j_cypher` and
+# `maxy-graph-get_neo4j_schema`. Claude Code's MCP client adds `mcp__graph__`
+# on top when registering the server — the admin allowlist in
+# platform/ui/app/lib/claude-agent.ts must match those exact names.
+# A future upstream version that changes the joiner (e.g. to underscore)
+# silently re-introduces a class of denial unless this fires.
+# ---------------------------------------------------------------------------
+assert_tools_list() {
+  TOTAL=$(( TOTAL + 1 ))
+  local out
+  if ! out=$(
+    node -e "
+      const { spawn } = require('node:child_process');
+      const proc = spawn('node', [process.env.SHIM], { stdio: ['pipe', 'pipe', 'inherit'] });
+      let buf = '';
+      proc.stdout.on('data', (chunk) => { buf += chunk.toString('utf8'); });
+      const send = (obj) => proc.stdin.write(JSON.stringify(obj) + '\n');
+      send({ jsonrpc: '2.0', id: 1, method: 'initialize',
+             params: { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'accept.sh', version: '1.0' } } });
+      setTimeout(() => {
+        send({ jsonrpc: '2.0', method: 'notifications/initialized' });
+        send({ jsonrpc: '2.0', id: 2, method: 'tools/list', params: {} });
+      }, 1500);
+      setTimeout(() => {
+        proc.kill('SIGTERM');
+        const lines = buf.split('\n').filter(Boolean);
+        for (const line of lines) {
+          try { const m = JSON.parse(line); if (m.id === 2) {
+            if (m.error) { console.error('RPC_ERROR: ' + JSON.stringify(m.error)); process.exit(1); }
+            const names = (m.result && m.result.tools || []).map(t => t.name);
+            process.stdout.write(JSON.stringify(names));
+            process.exit(0);
+          } } catch (_) {}
+        }
+        console.error('NO_RESPONSE');
+        process.exit(1);
+      }, 10000);
+    " 2>/dev/null
+  ); then
+    echo "FAIL: tools/list RPC did not respond"
+    FAIL=$(( FAIL + 1 ))
+    return 1
+  fi
+
+  local missing=""
+  for expected in "maxy-graph-read_neo4j_cypher" "maxy-graph-get_neo4j_schema"; do
+    if ! grep -q "\"$expected\"" <<<"$out"; then
+      missing+=" $expected"
+    fi
+  done
+  if [[ -n "$missing" ]]; then
+    echo "FAIL: tools/list missing hyphen-joined names —${missing} (reason: missing-hyphen-tool)"
+    echo "       received: $out"
+    FAIL=$(( FAIL + 1 ))
+    return 1
+  fi
+
+  if grep -qE 'maxy-graph_(read|get|write)' <<<"$out"; then
+    local stray
+    stray=$(grep -oE 'maxy-graph_[a-z_]+' <<<"$out" | sort -u | tr '\n' ' ')
+    echo "FAIL: tools/list contains underscore-joined variant(s) — ${stray}(reason: stray-underscore-tool)"
+    FAIL=$(( FAIL + 1 ))
+    return 1
+  fi
+
+  echo "PASS: tools/list registers hyphen-joined names only (${#out}b response)"
+  PASS=$(( PASS + 1 ))
+  return 0
+}
+
 run_check() {
   local label="$1"
   local query="$2"
-  local tool="${3:-maxy-graph_read_neo4j_cypher}"
+  local tool="${3:-maxy-graph-read_neo4j_cypher}"
   TOTAL=$(( TOTAL + 1 ))
 
   # Drive the shim via a short Node inline client. Exits 0 with the response
@@ -58,7 +142,7 @@ run_check() {
              params: { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'accept.sh', version: '1.0' } } });
       setTimeout(() => {
         send({ jsonrpc: '2.0', method: 'notifications/initialized' });
-        const params = tool === 'maxy-graph_get_neo4j_schema' ? {} : { query };
+        const params = tool === 'maxy-graph-get_neo4j_schema' ? {} : { query };
         send({ jsonrpc: '2.0', id: 2, method: 'tools/call', params: { name: tool, arguments: params } });
       }, 1500);
       setTimeout(() => {
@@ -91,15 +175,19 @@ run_check() {
   fi
 }
 
-# Exported env used by the inline Node client above.
-export SHIM
-export PLATFORM_ROOT
+# Run the regression guard first. If it fails, abort early — running
+# functional queries with stale tool names produces misleading failures.
+if ! assert_tools_list; then
+  echo ""
+  echo "FAIL — tool registration contract violated; aborting functional checks"
+  exit 1
+fi
 
-export TOOL="maxy-graph_get_neo4j_schema"
+export TOOL="maxy-graph-get_neo4j_schema"
 export QUERY=""
 run_check "get_neo4j_schema returns labels" ""
 
-export TOOL="maxy-graph_read_neo4j_cypher"
+export TOOL="maxy-graph-read_neo4j_cypher"
 
 export QUERY="MATCH (n) RETURN labels(n)[0] AS type, count(*) AS n ORDER BY n DESC LIMIT 20"
 run_check "enumerate by label" "$QUERY"

package/payload/platform/plugins/memory/references/graph-primitives.md

@@ -1,5 +1,5 @@
 <!-- Injected into admin system prompt by claude-agent.ts when agentType === "admin". -->
-<!-- Consumed by the upstream mcp-neo4j-cypher server via `maxy-graph_read_neo4j_cypher`. -->
+<!-- Consumed by the upstream mcp-neo4j-cypher server via `maxy-graph-read_neo4j_cypher`. -->
 <!-- Source of truth for node labels and properties: platform/neo4j/schema.cypher + plugins/memory/references/schema-*.md. -->
 
 # Graph interrogation (read-only Cypher cookbook)
@@ -7,7 +7,7 @@
 When a user asks a relational question about their own graph — *"list all my
 people", "how many tasks do I have", "find the person with email X", "what's
 linked to this business", "show me the 20 most recently created nodes" — use
-`maxy-graph_read_neo4j_cypher` or `maxy-graph_get_neo4j_schema`, not
+`maxy-graph-read_neo4j_cypher` or `maxy-graph-get_neo4j_schema`, not
 `memory-search`. Vector search is for "things like this"; Cypher is for "the
 exact set where".
 
@@ -17,7 +17,7 @@ filter in the query.
 
 ## When the graph tools are absent
 
-If neither `maxy-graph_read_neo4j_cypher` nor `maxy-graph_get_neo4j_schema`
+If neither `maxy-graph-read_neo4j_cypher` nor `maxy-graph-get_neo4j_schema`
 appears in your tool list, the graph MCP server failed to start on this
 device. Reply once with exactly:
 
@@ -162,7 +162,7 @@ All relationship types:
 CALL db.relationshipTypes() YIELD relationshipType RETURN relationshipType ORDER BY relationshipType
 ```
 
-Or use `maxy-graph_get_neo4j_schema` for a richer one-shot structural summary.
+Or use `maxy-graph-get_neo4j_schema` for a richer one-shot structural summary.
 
 ### Fulltext
 

package/payload/platform/scripts/setup.sh

@@ -21,7 +21,7 @@ echo ""
 # ------------------------------------------------------------------
 echo "[1/8] Updating system packages and configuring network..."
 sudo apt-get update -qq
-sudo apt-get install -y -qq curl git unzip avahi-daemon avahi-utils
+sudo apt-get install -y -qq curl git unzip avahi-daemon avahi-utils bind9-dnsutils
 
 # Set hostname to 'maxy' so device is reachable at maxy.local
 CURRENT_HOSTNAME=$(hostname)

package/payload/server/chunk-LM5BMENF.js

@@ -0,0 +1,77 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __commonJS = (cb, mod) => function __require() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// app/lib/upgrade-progress-parser.ts
+import { existsSync, readFileSync } from "fs";
+var STEP_RE = /\[(\d+)\/(\d+)\]\s+(.+)/;
+var ANSI_RE = /\x1b\[[0-9;?]*[a-zA-Z]/g;
+var stripAnsi = (s) => s.replace(ANSI_RE, "").replace(/\r/g, "").trimEnd();
+var MAX_SUBSTEPS = 20;
+function parseUpgradeProgress(content) {
+  const rawLines = content.split("\n");
+  let step = 0;
+  let total = 0;
+  let label = "";
+  let markerIdx = -1;
+  for (let i = rawLines.length - 1; i >= 0; i--) {
+    const match = rawLines[i].match(STEP_RE);
+    if (match) {
+      step = parseInt(match[1], 10);
+      total = parseInt(match[2], 10);
+      label = match[3].replace(/\.{3}$/, "").trim();
+      markerIdx = i;
+      break;
+    }
+  }
+  const subSteps = markerIdx >= 0 ? rawLines.slice(markerIdx + 1).map(stripAnsi).filter((l) => l.length > 0).slice(-MAX_SUBSTEPS) : [];
+  const tail = rawLines.slice(-20).join("\n");
+  const finished = tail.includes("Open in your browser:");
+  const failed = tail.includes("Setup failed:");
+  return { step, total, label, started: true, finished, failed, subSteps };
+}
+function readProgressLog(path) {
+  if (!existsSync(path)) {
+    return { step: 0, total: 0, label: "", started: false, subSteps: [] };
+  }
+  let content;
+  try {
+    content = readFileSync(path, "utf-8");
+  } catch {
+    return { step: 0, total: 0, label: "", started: false, subSteps: [] };
+  }
+  return parseUpgradeProgress(content);
+}
+
+export {
+  __commonJS,
+  __export,
+  __toESM,
+  readProgressLog
+};