@rubytech/create-maxy 1.0.768 → 1.0.770

package/dist/index.js

@@ -1541,25 +1541,23 @@ function setupVncViewer() {
 }
 function setupAccount() {
     log("10", TOTAL, "Setting up...");
+    // Tasks 787 + 788 — both seed-neo4j.sh and embed-backfill.sh hard-exit
+    // without NEO4J_URI. The installer owns the brand-correct URI and password,
+    // so we derive them once and pass to both call sites. Missing password file
+    // is a hard error: ensureNeo4jPassword() ran upstream and would have thrown
+    // already if it couldn't reach the brand's Neo4j.
+    const passwordFile = join(INSTALL_DIR, "platform/config/.neo4j-password");
+    if (!existsSync(passwordFile)) {
+        throw new Error(`Neo4j password file missing at ${passwordFile} — required by setup step.`);
+    }
+    const password = readFileSync(passwordFile, "utf-8").trim();
+    const neo4jUri = `bolt://localhost:${NEO4J_PORT}`;
+    const neo4jEnv = { ...process.env, NEO4J_URI: neo4jUri, NEO4J_PASSWORD: password };
     const seedScript = join(INSTALL_DIR, "platform/scripts/seed-neo4j.sh");
     if (existsSync(seedScript)) {
-        // Task 787 — explicit env to seed. The script no longer falls back to
-        // bolt://localhost:7687, so the installer is responsible for naming the
-        // brand-correct URI and providing the password. Missing password file is
-        // a hard error: ensureNeo4jPassword() ran upstream and would have thrown
-        // already if it couldn't reach the brand's Neo4j.
-        const passwordFile = join(INSTALL_DIR, "platform/config/.neo4j-password");
-        if (!existsSync(passwordFile)) {
-            throw new Error(`Neo4j password file missing at ${passwordFile} — required by seed step.`);
-        }
-        const password = readFileSync(passwordFile, "utf-8").trim();
-        const neo4jUri = `bolt://localhost:${NEO4J_PORT}`;
         console.log(`  [neo4j] passing NEO4J_URI=${neo4jUri} to seed`);
         logFile(`  [neo4j] passing NEO4J_URI=${neo4jUri} to seed`);
-        shell("bash", [seedScript], {
-            cwd: INSTALL_DIR,
-            env: { ...process.env, NEO4J_URI: neo4jUri, NEO4J_PASSWORD: password },
-        });
+        shell("bash", [seedScript], { cwd: INSTALL_DIR, env: neo4jEnv });
     }
     // Task 748 — universal embedding coverage backfill. Run after seed so the
     // entity_search index is in place and any pre-Task-748 nodes (e.g. the
@@ -1581,6 +1579,7 @@ function setupAccount() {
             stdio: "inherit",
             timeout: 30 * 60_000,
             cwd: INSTALL_DIR,
+            env: neo4jEnv,
         });
         const dur = ((Date.now() - start) / 1000).toFixed(1);
         if (result.status !== 0 || result.signal) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy",
-  "version": "1.0.768",
+  "version": "1.0.770",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy": "./dist/index.js"

package/payload/server/server.js

@@ -5471,8 +5471,11 @@ app3.post("/", async (c) => {
     } else {
       message = body.message ?? "";
     }
-    if (!message || !session_key) {
-      return c.json({ error: "message and session_key required" }, 400);
+    if (!session_key) {
+      return c.json({ error: "session_key required" }, 400);
+    }
+    if (!message) {
+      return c.json({ error: "message required" }, 400);
     }
     if (!validateSession(session_key, "public")) {
       return c.json({ error: "Invalid or expired session" }, 401);
@@ -8156,10 +8159,10 @@ app11.post("/", requireAdminSession, async (c) => {
     }
     message = formData.get("message") ?? "";
     userTimestamp = formData.get("timestamp") || void 0;
-    if (!message) {
-      return chatReject(400, "message and session_key required", session_key);
-    }
     const files = formData.getAll("attachments");
+    if (!message && files.length === 0) {
+      return chatReject(400, "message required", session_key);
+    }
     if (files.length > MAX_FILES_PER_MESSAGE) {
       return chatReject(422, `Maximum ${MAX_FILES_PER_MESSAGE} files per message.`, session_key);
     }
@@ -8199,6 +8202,10 @@ app11.post("/", requireAdminSession, async (c) => {
         return chatReject(422, err instanceof Error ? err.message : "File storage failed", session_key);
       }
     }
+    if (!message && storedAttachments.length > 0) {
+      const names = storedAttachments.map((a) => a.filename.replace(/[\[\]\r\n]/g, "_")).join(", ");
+      message = `[attachments: ${names}]`;
+    }
   } else {
     let body;
     try {
@@ -8211,7 +8218,7 @@ app11.post("/", requireAdminSession, async (c) => {
     topicChangeAction = body.topicChangeAction;
     heldMessage = body.heldMessage;
     if (!message) {
-      return chatReject(400, "message and session_key required", session_key);
+      return chatReject(400, "message required", session_key);
     }
   }
   try {