@rubytech/create-maxy 1.0.643 → 1.0.644

package/payload/server/public/index.html

@@ -5,12 +5,12 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/admin-BTfeGAIg.js"></script>
+  <script type="module" crossorigin src="/assets/admin-k3A7-7ra.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-lgnzUk6H.js">
-  <link rel="modulepreload" crossorigin href="/assets/jsx-runtime-SjVUZj3J.js">
+  <link rel="modulepreload" crossorigin href="/assets/jsx-runtime-57sjl-2n.js">
   <link rel="modulepreload" crossorigin href="/assets/preload-helper-DWTEM3RW.js">
-  <link rel="modulepreload" crossorigin href="/assets/useVoiceRecorder-t2l8eU6m.js">
-  <link rel="modulepreload" crossorigin href="/assets/search-BzKUsdMm.js">
+  <link rel="modulepreload" crossorigin href="/assets/useVoiceRecorder-BMxkndFD.js">
+  <link rel="modulepreload" crossorigin href="/assets/share-2-CQp5pId4.js">
   <link rel="stylesheet" crossorigin href="/assets/jsx-runtime-BNLXzSN4.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>

package/payload/server/public/public.html

@@ -5,11 +5,11 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/public-C-nsHZgC.js"></script>
+  <script type="module" crossorigin src="/assets/public-BjWvJQTw.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-lgnzUk6H.js">
-  <link rel="modulepreload" crossorigin href="/assets/jsx-runtime-SjVUZj3J.js">
+  <link rel="modulepreload" crossorigin href="/assets/jsx-runtime-57sjl-2n.js">
   <link rel="modulepreload" crossorigin href="/assets/preload-helper-DWTEM3RW.js">
-  <link rel="modulepreload" crossorigin href="/assets/useVoiceRecorder-t2l8eU6m.js">
+  <link rel="modulepreload" crossorigin href="/assets/useVoiceRecorder-BMxkndFD.js">
   <link rel="stylesheet" crossorigin href="/assets/jsx-runtime-BNLXzSN4.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>

package/payload/server/server.js

@@ -3840,23 +3840,32 @@ var HOP_BY_HOP2 = /* @__PURE__ */ new Set([
   "transfer-encoding",
   "upgrade"
 ]);
+var cachedUpstreamPort = null;
 function resolveUpstreamPort() {
-  const uri = process.env.NEO4J_URI ?? "bolt://localhost:7687";
+  if (cachedUpstreamPort !== null) return cachedUpstreamPort;
+  const uri = process.env.NEO4J_URI;
+  if (!uri) {
+    throw new Error(
+      "[ui/graph-proxy] NEO4J_URI unset \u2014 refusing to default to bolt://localhost:7687 (Task 580)"
+    );
+  }
   const m = uri.match(/:(\d+)$/);
   const boltPort = m ? parseInt(m[1], 10) : 7687;
-  return boltPort - 213;
+  cachedUpstreamPort = boltPort - 213;
+  console.error(`[ui/graph-proxy] resolved neo4j_uri=${uri} http_port=${cachedUpstreamPort}`);
+  return cachedUpstreamPort;
 }
 var UPSTREAM_HOST = "127.0.0.1";
-var UPSTREAM_PORT = resolveUpstreamPort();
 function attachGraphHttpRoutes(app2) {
   const handler = async (c) => {
     const raw2 = c.req.raw;
     const url = new URL(raw2.url);
+    const upstreamPort = resolveUpstreamPort();
     const pathAfterPrefix = url.pathname.slice(GRAPH_PREFIX.length) || "/";
-    const upstreamUrl = `http://${UPSTREAM_HOST}:${UPSTREAM_PORT}${pathAfterPrefix}${url.search}`;
+    const upstreamUrl = `http://${UPSTREAM_HOST}:${upstreamPort}${pathAfterPrefix}${url.search}`;
     const upstreamHeaders = new Headers(raw2.headers);
     for (const h of HOP_BY_HOP2) upstreamHeaders.delete(h);
-    upstreamHeaders.set("host", `${UPSTREAM_HOST}:${UPSTREAM_PORT}`);
+    upstreamHeaders.set("host", `${UPSTREAM_HOST}:${upstreamPort}`);
     try {
       const upstream = await fetch(upstreamUrl, {
         method: raw2.method,
@@ -3869,6 +3878,11 @@ function attachGraphHttpRoutes(app2) {
       });
       const resHeaders = new Headers(upstream.headers);
       for (const h of HOP_BY_HOP2) resHeaders.delete(h);
+      const loc = resHeaders.get("location");
+      if (loc) {
+        const rewritten = rewriteLocation(loc);
+        if (rewritten !== loc) resHeaders.set("location", rewritten);
+      }
       return new Response(upstream.body, {
         status: upstream.status,
         statusText: upstream.statusText,
@@ -3920,13 +3934,14 @@ function attachGraphWsProxy(server, opts) {
       }
       const rewrittenPath = pathname === GRAPH_PREFIX ? "/" : pathname.slice(GRAPH_PREFIX.length);
       const rewrittenUrl = qsIndex === -1 ? rewrittenPath : rewrittenPath + url.slice(qsIndex);
-      const upstream = createConnection2({ host: UPSTREAM_HOST, port: UPSTREAM_PORT });
+      const upstreamPort = resolveUpstreamPort();
+      const upstream = createConnection2({ host: UPSTREAM_HOST, port: upstreamPort });
       upstream.setTimeout(UPSTREAM_TIMEOUT_MS2);
       upstream.once("connect", () => {
         upstream.setTimeout(0);
         const lines = [];
         lines.push(`${req.method ?? "GET"} ${rewrittenUrl} HTTP/${req.httpVersion}`);
-        lines.push(`host: ${UPSTREAM_HOST}:${UPSTREAM_PORT}`);
+        lines.push(`host: ${UPSTREAM_HOST}:${upstreamPort}`);
         for (const [name, value] of Object.entries(req.headers)) {
           if (name === "host") continue;
           if (HOP_BY_HOP2.has(name)) continue;
@@ -3998,6 +4013,21 @@ function headerString2(value) {
   if (value == null) return void 0;
   return Array.isArray(value) ? value[0] : value;
 }
+function rewriteLocation(location) {
+  try {
+    const parsed = new URL(location);
+    if (parsed.hostname === UPSTREAM_HOST && parsed.port === String(resolveUpstreamPort())) {
+      const pathWithQuery = parsed.pathname + parsed.search + parsed.hash;
+      return pathWithQuery.startsWith(GRAPH_PREFIX) ? pathWithQuery : `${GRAPH_PREFIX}${pathWithQuery}`;
+    }
+    return location;
+  } catch {
+    if (location.startsWith("/") && !location.startsWith(`${GRAPH_PREFIX}/`) && location !== GRAPH_PREFIX) {
+      return `${GRAPH_PREFIX}${location}`;
+    }
+    return location;
+  }
+}
 function parseOriginHost2(origin) {
   if (!origin) return null;
   try {
@@ -4679,9 +4709,15 @@ function readPassword() {
 }
 function getDriver() {
   if (!driver) {
-    const uri = process.env.NEO4J_URI ?? "bolt://localhost:7687";
+    const uri = process.env.NEO4J_URI;
+    if (!uri) {
+      throw new Error(
+        "[ui/neo4j-store] NEO4J_URI unset \u2014 refusing to default to bolt://localhost:7687 (Task 580)"
+      );
+    }
     const user = process.env.NEO4J_USER ?? "neo4j";
     const password = readPassword();
+    console.error(`[ui/neo4j-store] resolved neo4j_uri=${uri}`);
     driver = neo4j.driver(uri, neo4j.auth.basic(user, password), {
       maxConnectionPoolSize: 5
     });
@@ -7862,12 +7898,33 @@ function readBrandHostname() {
   }
   return cachedBrandHostname;
 }
+function requireNeo4jUri() {
+  const uri = process.env.NEO4J_URI;
+  if (!uri) {
+    throw new Error(
+      "NEO4J_URI unset \u2014 refusing to default to bolt://localhost:7687. Set NEO4J_URI in the gateway's env (systemd EnvironmentFile or shell .env). (Task 580)"
+    );
+  }
+  const brand = readBrandHostname();
+  if (brand === "realagent" && /:7687([/?]|$)/.test(uri)) {
+    throw new Error(
+      `NEO4J_URI=${uri} points at :7687 on a realagent install \u2014 realagent owns :7688. This would silently write into Maxy's DB (Task 577 vector). (Task 580)`
+    );
+  }
+  return uri;
+}
 function getMcpServers(accountId, conversationId, userId, enabledPlugins) {
   if (!conversationId) {
     throw new Error(`getMcpServers: conversationId is required (accountId=${accountId.slice(0, 8)})`);
   }
   const { logDir: LOG_DIR2, streamLogPath: STREAM_LOG_PATH } = streamLogPathFor(accountId, conversationId);
-  const baseEnv = { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4, LOG_DIR: LOG_DIR2, STREAM_LOG_PATH };
+  const baseEnv = {
+    ACCOUNT_ID: accountId,
+    PLATFORM_ROOT: PLATFORM_ROOT4,
+    LOG_DIR: LOG_DIR2,
+    STREAM_LOG_PATH,
+    NEO4J_URI: requireNeo4jUri()
+  };
   const servers = {
     "memory": {
       command: "node",
@@ -7938,7 +7995,6 @@ function getMcpServers(accountId, conversationId, userId, enabledPlugins) {
       env: {
         ...baseEnv,
         BRAND: readBrandHostname(),
-        NEO4J_URI: process.env.NEO4J_URI ?? "bolt://localhost:7687",
         NEO4J_USERNAME: process.env.NEO4J_USERNAME ?? process.env.NEO4J_USER ?? "neo4j",
         NEO4J_NAMESPACE: "maxy-graph",
         NEO4J_READ_ONLY: "true",
@@ -15766,9 +15822,15 @@ function readPassword2() {
 }
 function getDriver2() {
   if (!driver2) {
-    const uri = process.env.NEO4J_URI ?? "bolt://localhost:7687";
+    const uri = process.env.NEO4J_URI;
+    if (!uri) {
+      throw new Error(
+        "[ui/access-gate] NEO4J_URI unset \u2014 refusing to default to bolt://localhost:7687 (Task 580)"
+      );
+    }
     const user = process.env.NEO4J_USER ?? "neo4j";
     const password = readPassword2();
+    console.error(`[ui/access-gate] resolved neo4j_uri=${uri}`);
     driver2 = neo4j2.driver(uri, neo4j2.auth.basic(user, password), {
       maxConnectionPoolSize: 5
     });
@@ -19750,7 +19812,7 @@ async function POST33(req) {
 }
 
 // app/api/admin/files/route.ts
-import { readdir as readdir2, stat as stat4 } from "fs/promises";
+import { readdir as readdir2, readFile as readFile4, stat as stat4 } from "fs/promises";
 import { join as join14 } from "path";
 
 // app/lib/data-path.ts
@@ -19796,6 +19858,39 @@ function resolveDataPath(raw2) {
 }
 
 // app/api/admin/files/route.ts
+var UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+async function readMeta(absDir, baseName) {
+  try {
+    const raw2 = await readFile4(join14(absDir, `${baseName}.meta.json`), "utf8");
+    const parsed = JSON.parse(raw2);
+    if (typeof parsed?.filename === "string") {
+      return { filename: parsed.filename, mimeType: typeof parsed.mimeType === "string" ? parsed.mimeType : void 0 };
+    }
+  } catch {
+  }
+  return null;
+}
+async function enrich(absolute, entry) {
+  if (entry.kind === "directory" && UUID_RE2.test(entry.name)) {
+    const meta = await readMeta(join14(absolute, entry.name), entry.name);
+    if (meta?.filename) {
+      entry.displayName = meta.filename;
+      entry.mimeType = meta.mimeType;
+    }
+    return;
+  }
+  if (entry.kind === "file") {
+    const dot = entry.name.lastIndexOf(".");
+    const base = dot === -1 ? entry.name : entry.name.slice(0, dot);
+    if (UUID_RE2.test(base)) {
+      const meta = await readMeta(absolute, base);
+      if (meta?.filename) {
+        entry.displayName = meta.filename;
+        entry.mimeType = meta.mimeType;
+      }
+    }
+  }
+}
 async function GET17(req) {
   const url = new URL(req.url);
   const sessionKey = url.searchParams.get("session_key");
@@ -19828,6 +19923,9 @@ async function GET17(req) {
     const names = await readdir2(absolute);
     const entries = [];
     for (const name of names) {
+      if (UUID_RE2.test(name.replace(/\.meta\.json$/, "")) && name.endsWith(".meta.json")) {
+        continue;
+      }
       try {
         const entryPath = join14(absolute, name);
         const s = await stat4(entryPath);
@@ -19841,9 +19939,12 @@ async function GET17(req) {
         entries.push({ name, kind: "other", sizeBytes: null, modifiedAt: (/* @__PURE__ */ new Date(0)).toISOString() });
       }
     }
+    await Promise.all(entries.map((e) => enrich(absolute, e)));
     entries.sort((a, b) => {
       if (a.kind !== b.kind) return a.kind === "directory" ? -1 : 1;
-      return a.name.localeCompare(b.name);
+      const aKey = a.displayName ?? a.name;
+      const bKey = b.displayName ?? b.name;
+      return aKey.localeCompare(bKey);
     });
     console.error(`[data] file-list path="${relPath}" entries=${entries.length}`);
     return Response.json({ path: relPath, entries });