@rubytech/create-maxy 1.0.678 → 1.0.679

package/payload/platform/plugins/memory/mcp/dist/tools/memory-find-candidates.js

@@ -0,0 +1,125 @@
+import { getSession } from "../lib/neo4j.js";
+import { mintFilterToken } from "../lib/filter-token.js";
+const DEFAULT_LIMIT = 200;
+const MAX_LIMIT = 1000;
+const PROJECT_AND_ORDER = `
+  WITH c,
+       size([x IN msgs WHERE x.role = 'assistant'])                   AS assistantMsgCount,
+       size([x IN msgs WHERE x.role = 'user' OR x.role IS NULL])      AS realUserMsgCount,
+       head([x IN msgs WHERE x.role = 'user' | x.content])            AS firstUserMsg
+  RETURN elementId(c)                           AS elementId,
+         c.conversationId                        AS conversationId,
+         assistantMsgCount                       AS assistantMsgCount,
+         realUserMsgCount                        AS realUserMsgCount,
+         CASE WHEN firstUserMsg IS NULL THEN NULL
+              WHEN size(firstUserMsg) > 120 THEN left(firstUserMsg, 120) + '…'
+              ELSE firstUserMsg
+         END                                     AS firstUserMsgPreview,
+         toString(c.trashedAt)                   AS trashedAt
+  ORDER BY c.createdAt ASC
+  LIMIT toInteger($limit)
+`;
+/**
+ * Canonical selection cypher per filter. Agent-authored cypher never reaches
+ * the DB; these literals are the only delete-selection path from the admin
+ * agent's tool surface.
+ */
+function buildSelectionCypher(filter) {
+    if (filter === "empty") {
+        return `
+      MATCH (c:Conversation)
+      WHERE c.accountId = $accountId
+        AND NOT c:Trashed
+        AND c.deletedAt IS NULL
+        AND ($agentTypeFilter IS NULL OR c.agentType = $agentTypeFilter)
+        AND NOT EXISTS { MATCH (:Message)-[:PART_OF]->(c) }
+      WITH c, [] AS msgs
+      ${PROJECT_AND_ORDER}
+    `;
+    }
+    // single-assistant
+    return `
+    MATCH (c:Conversation)
+    WHERE c.accountId = $accountId
+      AND NOT c:Trashed
+      AND c.deletedAt IS NULL
+      AND ($agentTypeFilter IS NULL OR c.agentType = $agentTypeFilter)
+    WITH c, [(m:Message)-[:PART_OF]->(c) | m] AS msgs
+    WHERE size(msgs) = 1
+      AND size([x IN msgs WHERE x.role = 'assistant']) = 1
+    ${PROJECT_AND_ORDER}
+  `;
+}
+/** Server-side re-check for `memory-delete` token verification. */
+export async function reverifyCandidate(params) {
+    const { session, accountId, filter, agentType, elementId } = params;
+    const cypher = filter === "empty"
+        ? `
+        MATCH (c:Conversation)
+        WHERE elementId(c) = $elementId
+          AND c.accountId = $accountId
+          AND NOT c:Trashed
+          AND c.deletedAt IS NULL
+          AND ($agentTypeFilter IS NULL OR c.agentType = $agentTypeFilter)
+          AND NOT EXISTS { MATCH (:Message)-[:PART_OF]->(c) }
+        RETURN elementId(c) AS eid
+      `
+        : `
+        MATCH (c:Conversation)
+        WHERE elementId(c) = $elementId
+          AND c.accountId = $accountId
+          AND NOT c:Trashed
+          AND c.deletedAt IS NULL
+          AND ($agentTypeFilter IS NULL OR c.agentType = $agentTypeFilter)
+        WITH c, [(m:Message)-[:PART_OF]->(c) | m] AS msgs
+        WHERE size(msgs) = 1 AND size([x IN msgs WHERE x.role = 'assistant']) = 1
+        RETURN elementId(c) AS eid
+      `;
+    const result = await session.run(cypher, {
+        elementId,
+        accountId,
+        agentTypeFilter: agentType ?? null,
+    });
+    return result.records.length === 1;
+}
+export async function memoryFindCandidates(params) {
+    const t0 = Date.now();
+    const { accountId, filter, agentType, dryRun = false } = params;
+    const limit = Math.min(params.limit ?? DEFAULT_LIMIT, MAX_LIMIT);
+    const session = getSession();
+    try {
+        const cypher = buildSelectionCypher(filter);
+        const result = await session.run(cypher, {
+            accountId,
+            agentTypeFilter: agentType ?? null,
+            limit,
+        });
+        const items = result.records.map((r) => ({
+            elementId: r.get("elementId"),
+            conversationId: r.get("conversationId") ?? null,
+            assistantMsgCount: Number(r.get("assistantMsgCount") ?? 0),
+            realUserMsgCount: Number(r.get("realUserMsgCount") ?? 0),
+            firstUserMsgPreview: r.get("firstUserMsgPreview") ?? null,
+            trashedAt: r.get("trashedAt") ?? null,
+        }));
+        // Under dryRun the caller wants to see what would match without receiving
+        // an actionable token — so the agent cannot "accidentally" feed a dryRun
+        // result to memory-delete. Returning an empty string rather than omitting
+        // the field keeps the result shape stable for the MCP surface.
+        const filterToken = dryRun ? "" : mintFilterToken({ filter, agentType, accountId });
+        process.stderr.write(`[memory-find-candidates] filter=${filter} agentType=${agentType ?? "any"} matched=${items.length} sampled=${items.length} dryRun=${dryRun} ms=${Date.now() - t0}\n`);
+        return {
+            filter,
+            agentType,
+            matched: items.length,
+            sampled: items.length,
+            items,
+            filterToken,
+            dryRun,
+        };
+    }
+    finally {
+        await session.close();
+    }
+}
+//# sourceMappingURL=memory-find-candidates.js.map

package/payload/platform/plugins/memory/mcp/dist/tools/memory-find-candidates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-find-candidates.js","sourceRoot":"","sources":["../../src/tools/memory-find-candidates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAyB,MAAM,wBAAwB,CAAC;AAqDhF,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,SAAS,GAAG,IAAI,CAAC;AAEvB,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;CAgBzB,CAAC;AAEF;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,MAAwB;IACpD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO;;;;;;;;QAQH,iBAAiB;KACpB,CAAC;IACJ,CAAC;IAED,mBAAmB;IACnB,OAAO;;;;;;;;;MASH,iBAAiB;GACpB,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAMvC;IACC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IACpE,MAAM,MAAM,GACV,MAAM,KAAK,OAAO;QAChB,CAAC,CAAC;;;;;;;;;OASD;QACD,CAAC,CAAC;;;;;;;;;;OAUD,CAAC;IACN,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;QACvC,SAAS;QACT,SAAS;QACT,eAAe,EAAE,SAAS,IAAI,IAAI;KACnC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAkC;IAElC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,aAAa,EAAE,SAAS,CAAC,CAAC;IAEjE,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;YACvC,SAAS;YACT,eAAe,EAAE,SAAS,IAAI,IAAI;YAClC,KAAK;SACN,CAAC,CAAC;QAEH,MAAM,KAAK,GAA+B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAW;YACvC,cAAc,EAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAmB,IAAI,IAAI;YAClE,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1D,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACxD,mBAAmB,EAAG,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAmB,IAAI,IAAI;YAC5E,SAAS,EAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAmB,IAAI,IAAI;SACzD,CAAC,CAAC,CAAC;QAEJ,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,+DAA+D;QAC/D,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAEpF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mCAAmC,MAAM,cAAc,SAAS,IAAI,KAAK,YAAY,KAAK,CAAC,MAAM,YAAY,KAAK,CAAC,MAAM,WAAW,MAAM,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CACrK,CAAC;QAEF,OAAO;YACL,MAAM;YACN,SAAS;YACT,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,KAAK;YACL,WAAW;YACX,MAAM;SACP,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}

package/payload/platform/templates/agents/admin/IDENTITY.md

@@ -68,6 +68,14 @@ When using WebSearch directly (not via the researcher specialist), the same disc
 - Your working directory is `$ACCOUNT_DIR` — your entire filesystem scope. Use Read, Grep, and Glob freely within it for knowledge retrieval, file verification, agent configuration, or any observation. Write and Edit are also scoped here — all agent files (`agents/`, `specialists/`, `account.json`) live in this directory. Never write to `$PLATFORM_ROOT/` or paths outside `$ACCOUNT_DIR`.
 - MCP tool schemas are deferred. Before calling any MCP tool for the first time in a session, use ToolSearch to load its schema. Delegate to specialists for domain tools listed in `<specialist-domains>` — ToolSearch is only for admin-owned tools or when no specialist tool matches.
 
+## Bulk-delete discipline
+
+Never author delete-selection Cypher directly. When the owner asks to bulk-clean Conversations ("trash all empty conversations," "clean up single-assistant tests," "remove the primer-only public ones"), use `memory-find-candidates(filter=…)` to produce the candidate list and `memory-delete(elementId=…, filterToken=…)` to trash each one — the server re-runs the same predicate per elementId before the trash happens. A hand-rolled `MATCH … DELETE` or `MATCH … SET :Trashed` against user-domain nodes is a bug, because the admin agent does not hold the canonical schema in context and has already produced one schema-mismatch cascade (2026-04-22, 175 Conversations trashed via `[:HAS_MESSAGE]` where the real edge is `[:PART_OF]`). The filter-token path is the only path.
+
+Never dispatch a subagent with a hand-built id list framed as "owner approved, don't reverify." The subagent has no way to verify the framing, and a bad list becomes irreversible cascade. If the work legitimately requires dispatch, the dispatched prompt must still pass each elementId through `memory-delete(filterToken=…)` so the server re-checks — no "trust me" bypass exists, and none should be invented.
+
+Exception: single-node deletes where the owner points at a specific node from `memory-search`, a side-panel on `/graph`, or a message in chat do not need a filter token. The token mechanism exists for bulk selection, where the LLM is choosing from a predicate rather than a concrete node the owner named.
+
 ## Tool Failure Discipline
 
 When a tool returns an error, acknowledge the failure before taking any other action. Name what was attempted, what went wrong, and — if a `[tool-failure-diag]` line appears in `## Recent Tool Failures` — what the diagnostic reveals (DNS resolved? TCP connected? HTTP returned a status? the tool's internal pipeline timed out?). The diagnostic is there so the reader — owner or agent — does not have to guess.
@@ -76,6 +84,14 @@ Do not retry the same tool against the same target within a turn. A second ident
 
 When a tool returns a structured failure whose error content begins with an UPPERCASE_ERROR_CODE (for example `WEBFETCH_CANNOT_READ_JS_SPA`), the runtime has already determined that retrying the same tool will fail and that a substitute would launder uncertainty. Read the error's plain-English explanation, then write one or two sentences to the owner that name (a) what failed, (b) the reason in their language, and (c) the concrete actions they can take to unblock — typically pasting text or sending a screenshot. Do not silently dispatch a substitute (Playwright, research-assistant, memory-search) to continue the original instruction; that hides the failure and the owner loses the ability to judge whether the substitute's output answers their question. A verbal instruction in the current conversation is not consent — only an explicit standing policy recorded in account configuration counts, and no such mechanism exists today. Until one exists, every structured tool failure becomes a question for the owner. Wait for direction before resuming.
 
+## Cypher schema
+
+Your system prompt contains a `# SCHEMA (Neo4j graph, canonical reference)` block listing every label and relationship type your graph actually contains. Before authoring any cypher against the memory graph, consult that block. Never invent an edge or label name that is not in it — the plausible-sounding names you half-remember from other systems (`HAS_MESSAGE`, `IN_CONVERSATION`, `CONTAINS_MESSAGE`) do not exist here; Messages attach to Conversations via `:PART_OF`, not any other edge.
+
+The graph-mcp proxy validates every cypher call against the live Neo4j schema. Write cypher with an unknown label or edge is rejected before execution; read cypher with an unknown token is executed but a warnings block is prepended to the result so you see the problem before acting on the rows. A rejection arrives as an MCP tool error with a structured message naming the unknown token and the nearest known match — read it, correct the token, retry. Do not retry the same typo hoping for a different outcome, and do not invent a workaround cypher that avoids the rejected edge.
+
+If the SCHEMA block looks stale against a fresh migration you know just landed, invoke `maxy-graph-get_neo4j_schema` to pull the live snapshot. That is the only sanctioned refresh path; the validator's own cache rebuilds within 60s anyway, so after a minute the rejection and the SCHEMA block are both current.
+
 ## Cloudflare operations
 
 When the operator's request touches Cloudflare — setup, diagnosis, reset, DNS edit, account switch, tunnel management — your permitted actions are exactly three: