@rubytech/create-maxy 1.0.881 → 1.0.884

package/payload/platform/lib/graph-write/src/index.ts

@@ -3,6 +3,11 @@
 // `[graph-*]` log family colocated.
 export * from "./audit.js";
 
+// Task 997: re-export the conversation-provenance injector. MCP wrappers
+// (contacts, memory) import it from the package root so the helper, the
+// gate, and the label set live in one import surface.
+export * from "./conversation-provenance.js";
+
 /**
  * Write doctrine (Task 673): a node without at least one adjacency is noise,
  * not knowledge. `writeNodeWithEdges` is the single primitive every graph
@@ -13,21 +18,33 @@ export * from "./audit.js";
  * maps, and flat props are queryable — `MATCH (n) WHERE n.createdBySession
  * = $id RETURN n` is the forensic entry point).
  *
- * Process provenance doctrine (Task 885): writes targeting any label in
- * `ACTION_PROVENANCE_LABELS` (Person, UserProfile, AdminUser, Organization,
- * LocalBusiness, CloudflareTunnel, CloudflareHostname) must include exactly
- * one inbound `:PRODUCED` edge whose source is a `:Task` node. This makes
- * every durable LLM-tool-driven entity creation traversable from the Task
- * node that produced it, and forward from Task→Conversation via
- * `:RAISED_DURING`. Bootstrap writes (`createdBy.agent === 'system'`) are
- * exempt — installer / migration / lazy-create paths run as system writers.
+ * Process provenance doctrine (Task 885, widened by Task 997): writes
+ * targeting any label in `ACTION_PROVENANCE_LABELS` (Person, UserProfile,
+ * AdminUser, Organization, LocalBusiness, CloudflareTunnel,
+ * CloudflareHostname) must include at least one inbound `:PRODUCED` edge
+ * whose source carries one of `:Task`, `:Conversation`, or `:Message` (the
+ * label set is checked against the actual `labels()` of the target node, so
+ * subtype labels like `:AdminConversation`, `:UserMessage`, `:AssistantMessage`,
+ * and `:AdminMessage` all qualify). This makes every durable LLM-tool-driven
+ * entity creation traversable from either:
+ *   - the Task that produced it (autonomous workflows: onboarding skill,
+ *     cloudflare tunnel-login, etc.), or
+ *   - the Conversation/Message turn that triggered it (direct admin asks —
+ *     "add Anneke Roux as person" stamps a `:PRODUCED` edge from the active
+ *     `:AdminConversation` so the entity is traceable to its causal turn
+ *     without forcing the agent to mint a synthetic `:Task` per ask).
+ * Task 997 broadened the gate after the Task-only requirement created
+ * redundant-Task bloat for direct admin asks; the Task-mediated path stays
+ * canonical for autonomous workflows. Bootstrap writes
+ * (`createdBy.agent === 'system'`) are exempt — installer / migration /
+ * lazy-create paths run as system writers.
  *
  * Rejection paths (every one emits a stderr log the admin server pipes to
  * server.log, so orphan pressure is visible per-write not just in the
  * hourly [graph-health] signal):
  *   - zero relationships          → `[graph-write] reject reason=zero-relationships`
  *   - unresolved target id        → `[graph-write] reject reason=unresolved-target`
- *   - missing action provenance   → `[graph-write] reject reason=missing-action-provenance`
+ *   - missing provenance          → `[graph-write] reject reason=missing-provenance`
  *   - removed-feature write       → `[graph-write] reject reason=removed-feature`
  *     (`:ReviewAlert` and `:Event {actionTool:"review-digest-compose"}` are
  *     deleted features; the gate catches doctrine-compliant writers
@@ -42,16 +59,18 @@ export * from "./audit.js";
  */
 
 /**
- * Labels that require an inbound `:PRODUCED` edge from a `:Task` (Task 885).
- * Bootstrap writes with `createdBy.agent === 'system'` are exempt — that
- * carve-out covers PIN-setup `writeAdminUserAndPerson`, schema migrations,
- * and the lazy `loadUserProfile` MERGE path that bypasses this primitive
- * entirely (raw Cypher in `platform/ui/app/lib/neo4j-store.ts`).
+ * Labels that require an inbound `:PRODUCED` edge from a `:Task`,
+ * `:Conversation`, or `:Message` (Task 885, widened by Task 997). Bootstrap
+ * writes with `createdBy.agent === 'system'` are exempt — that carve-out
+ * covers PIN-setup `writeAdminUserAndPerson`, schema migrations, and the
+ * lazy `loadUserProfile` MERGE path that bypasses this primitive entirely
+ * (raw Cypher in `platform/ui/app/lib/neo4j-store.ts`).
  *
  * The set is intentionally not exhaustive — labels added here become a
  * blocking gate for every LLM-tool write of that label. Add a label only
- * after every legitimate writer of it can either (a) carry a Task-PRODUCED
- * edge, or (b) declare itself as `agent: 'system'`.
+ * after every legitimate writer of it can either (a) carry a PRODUCED edge
+ * from one of the accepted source families, or (b) declare itself as
+ * `agent: 'system'`.
  */
 export const ACTION_PROVENANCE_LABELS: ReadonlySet<string> = new Set([
   "Person",
@@ -63,6 +82,18 @@ export const ACTION_PROVENANCE_LABELS: ReadonlySet<string> = new Set([
   "CloudflareHostname",
 ]);
 
+/**
+ * Source labels that satisfy the inbound-PRODUCED gate. The check is
+ * performed against the full `labels()` array of the target node, so
+ * subtype labels (`:AdminConversation`, `:UserMessage`, etc.) qualify
+ * because they carry the parent `:Conversation` / `:Message` label too.
+ */
+export const PROVENANCE_SOURCE_LABELS: ReadonlySet<string> = new Set([
+  "Task",
+  "Conversation",
+  "Message",
+]);
+
 function requiresActionProvenance(labels: readonly string[]): boolean {
   for (const label of labels) {
     if (ACTION_PROVENANCE_LABELS.has(label)) return true;
@@ -70,7 +101,7 @@ function requiresActionProvenance(labels: readonly string[]): boolean {
   return false;
 }
 
-function findProducedFromTaskCandidates(
+function findProvenanceCandidates(
   relationships: readonly GraphRelationship[],
 ): GraphRelationship[] {
   return relationships.filter(
@@ -239,32 +270,42 @@ export async function writeNodeWithEdges(
       );
     }
 
-    // Process provenance gate (Task 885). Labels in
-    // ACTION_PROVENANCE_LABELS require a `:Task` source on at least one
-    // inbound :PRODUCED edge so every durable LLM-tool entity write is
-    // traversable from the Task that produced it. Bootstrap writes
-    // (createdBy.agent === 'system') are exempt — installer + migration
-    // paths predate any Task. The check runs INSIDE the transaction so
-    // the labels-by-target map is consistent with target resolution.
-    let producedByTaskId: string | null = null;
+    // Process provenance gate (Task 885, widened by Task 997). Labels in
+    // ACTION_PROVENANCE_LABELS require an inbound :PRODUCED edge from a
+    // node carrying one of PROVENANCE_SOURCE_LABELS (:Task, :Conversation,
+    // :Message — subtype labels qualify via the labels() array). This
+    // makes every durable LLM-tool entity write traversable to either the
+    // Task that produced it (autonomous workflows) or the
+    // Conversation/Message turn that triggered it (direct admin asks).
+    // Bootstrap writes (createdBy.agent === 'system') are exempt —
+    // installer + migration paths predate any provenance node. The check
+    // runs INSIDE the transaction so the labels-by-target map is
+    // consistent with target resolution.
+    let provenanceSourceId: string | null = null;
+    let provenanceSourceLabel: string | null = null;
     if (
       requiresActionProvenance(labels) &&
       (createdBy.agent ?? "") !== "system"
     ) {
-      const candidates = findProducedFromTaskCandidates(relationships);
-      const taskCandidates = candidates.filter((r) => {
-        const lbls = labelsByTarget.get(r.targetNodeId);
-        return Array.isArray(lbls) && lbls.includes("Task");
-      });
-      if (taskCandidates.length === 0) {
+      const candidates = findProvenanceCandidates(relationships);
+      const matched = candidates
+        .map((r) => {
+          const lbls = labelsByTarget.get(r.targetNodeId);
+          if (!Array.isArray(lbls)) return null;
+          const sourceLabel = lbls.find((l) => PROVENANCE_SOURCE_LABELS.has(l));
+          return sourceLabel ? { rel: r, sourceLabel } : null;
+        })
+        .filter((m): m is { rel: GraphRelationship; sourceLabel: string } => m !== null);
+      if (matched.length === 0) {
         process.stderr.write(
-          `[graph-write] reject reason=missing-action-provenance labels=${labelCsv} agent=${agentLabel}\n`
+          `[graph-write] reject reason=missing-provenance labels=${labelCsv} agent=${agentLabel}\n`
         );
         throw new Error(
-          `missing-action-provenance: write to ${labelCsv} requires an inbound :PRODUCED edge from a :Task (createdBy.agent='${agentLabel}'). Pass producedByTaskId on the write — call task-create at the start of the flow and thread the returned taskId through every subsequent memory-write for one of these labels.`
+          `missing-provenance: write to ${labelCsv} requires an inbound :PRODUCED edge from a :Task, :Conversation, or :Message (createdBy.agent='${agentLabel}'). Either pass producedByTaskId on the write (autonomous workflows: call task-create at the start of the flow and thread the returned taskId), or rely on the MCP wrapper's CONVERSATION_NODE_ID env-stamp injection (direct admin asks).`
         );
       }
-      producedByTaskId = taskCandidates[0].targetNodeId;
+      provenanceSourceId = matched[0].rel.targetNodeId;
+      provenanceSourceLabel = matched[0].sourceLabel;
     }
 
     let nodeRes;
@@ -337,7 +378,7 @@ export async function writeNodeWithEdges(
     }
 
     process.stderr.write(
-      `[graph-write] accepted labels=${labelCsv} edges=${edgesCreated} createdByAgent=${createdBy.agent ?? "unknown"} createdByTool=${createdBy.tool ?? createdBy.source ?? "unknown"} producedByTask=${producedByTaskId ?? "none"}\n`
+      `[graph-write] accepted labels=${labelCsv} edges=${edgesCreated} createdByAgent=${createdBy.agent ?? "unknown"} createdByTool=${createdBy.tool ?? createdBy.source ?? "unknown"} producedBy=${provenanceSourceLabel ?? "none"}:${provenanceSourceId ?? "none"}\n`
     );
 
     return { nodeId, labels: nodeLabels, edgesCreated };

package/payload/platform/lib/mcp-eager/dist/index.d.ts

@@ -0,0 +1,61 @@
+/**
+ * MCP eager-load helper (Task 1001).
+ *
+ * The Claude Code SDK marks every MCP tool as deferred-by-default: the model
+ * cannot invoke an MCP tool until it has first called `ToolSearch` to load
+ * the schema, which costs one extra turn per unique schema. The SDK's per-
+ * tool override is `_meta["anthropic/alwaysLoad"]: true` on the tool's
+ * `tools/list` entry, which `isDeferredTool` reads to flip the default.
+ *
+ * The MCP SDK exposes that channel only via `server.registerTool(name,
+ * config, handler)` (legacy `server.tool(name, desc, schema, handler)`
+ * has no `_meta` parameter). This helper wraps the registerTool call so
+ * every plugin's index.ts can opt a tool into eager-load with one line
+ * matching the shape of the existing four-arg `server.tool` overload.
+ *
+ * Use for every tool that appears in `ADMIN_CORE_TOOLS` — the permission
+ * allow-list IS the curation per the CEO review on Task 1001. Tools the
+ * admin should not see should be removed from the allow-list, not merely
+ * left deferred.
+ */
+/** Wire-format metadata key the Claude Code SDK reads. */
+export declare const ALWAYS_LOAD_META_KEY: "anthropic/alwaysLoad";
+/**
+ * Loose structural type for any object exposing a `registerTool` method. The
+ * MCP SDK ships dual ESM/CJS packages with conditional exports, so importing
+ * the concrete `McpServer` type here would force every consumer to compile
+ * under the same resolution mode — they don't. Keep this contract minimal:
+ * we only need the method to exist; we cast internally to drive the
+ * upstream generic overloads which differ between SDK versions.
+ */
+type EagerCapableServer = {
+    registerTool: (...args: any[]) => any;
+};
+/**
+ * Local structural type for a Zod raw shape. We deliberately do NOT import
+ * `ZodRawShape` from zod itself — plugin workspaces ship pinned zod v3 in
+ * their nested `node_modules/zod`, while `platform/node_modules/zod` is v4,
+ * and the two `ZodRawShape` types are structurally incompatible (v4
+ * introduced the `_zod` brand on `ZodType`). A typed-by-value `unknown`
+ * member is enough: TypeScript treats it as compatible with both v3 and v4
+ * shapes, while still constraining the generic to "an object whose values
+ * are zod-like" so the caller's destructured handler args stay typed via
+ * the SDK's own overload resolution downstream.
+ */
+type LocalZodRawShape = Record<string, unknown>;
+/**
+ * Register an MCP tool that the Claude Code SDK eager-loads into the
+ * model's prompt at session boot, bypassing the ToolSearch round-trip.
+ *
+ * Mirrors the four-arg `server.tool(name, description, inputSchema, handler)`
+ * call shape — the only overload in use across our plugins — so migration
+ * is mechanical: replace `server.tool(` with `eagerTool(server, `.
+ *
+ * The helper deliberately does not constrain handler-arg types itself; the
+ * downstream `server.registerTool` invocation inside this function passes
+ * the shape through, and the upstream MCP SDK's overload (resolved against
+ * the consumer's own zod version) infers the handler args.
+ */
+export declare function eagerTool<Args extends LocalZodRawShape>(server: EagerCapableServer, name: string, description: string, inputSchema: Args, handler: (...args: any[]) => any): void;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/payload/platform/lib/mcp-eager/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,0DAA0D;AAC1D,eAAO,MAAM,oBAAoB,EAAG,sBAA+B,CAAC;AAEpE;;;;;;;GAOG;AAEH,KAAK,kBAAkB,GAAG;IAAE,YAAY,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;CAAE,CAAC;AAEpE;;;;;;;;;;GAUG;AACH,KAAK,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,IAAI,SAAS,gBAAgB,EACrD,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,IAAI,EAEjB,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,GAC/B,IAAI,CAUN"}

package/payload/platform/lib/mcp-eager/dist/index.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ALWAYS_LOAD_META_KEY = void 0;
+exports.eagerTool = eagerTool;
+/**
+ * MCP eager-load helper (Task 1001).
+ *
+ * The Claude Code SDK marks every MCP tool as deferred-by-default: the model
+ * cannot invoke an MCP tool until it has first called `ToolSearch` to load
+ * the schema, which costs one extra turn per unique schema. The SDK's per-
+ * tool override is `_meta["anthropic/alwaysLoad"]: true` on the tool's
+ * `tools/list` entry, which `isDeferredTool` reads to flip the default.
+ *
+ * The MCP SDK exposes that channel only via `server.registerTool(name,
+ * config, handler)` (legacy `server.tool(name, desc, schema, handler)`
+ * has no `_meta` parameter). This helper wraps the registerTool call so
+ * every plugin's index.ts can opt a tool into eager-load with one line
+ * matching the shape of the existing four-arg `server.tool` overload.
+ *
+ * Use for every tool that appears in `ADMIN_CORE_TOOLS` — the permission
+ * allow-list IS the curation per the CEO review on Task 1001. Tools the
+ * admin should not see should be removed from the allow-list, not merely
+ * left deferred.
+ */
+/** Wire-format metadata key the Claude Code SDK reads. */
+exports.ALWAYS_LOAD_META_KEY = "anthropic/alwaysLoad";
+/**
+ * Register an MCP tool that the Claude Code SDK eager-loads into the
+ * model's prompt at session boot, bypassing the ToolSearch round-trip.
+ *
+ * Mirrors the four-arg `server.tool(name, description, inputSchema, handler)`
+ * call shape — the only overload in use across our plugins — so migration
+ * is mechanical: replace `server.tool(` with `eagerTool(server, `.
+ *
+ * The helper deliberately does not constrain handler-arg types itself; the
+ * downstream `server.registerTool` invocation inside this function passes
+ * the shape through, and the upstream MCP SDK's overload (resolved against
+ * the consumer's own zod version) infers the handler args.
+ */
+function eagerTool(server, name, description, inputSchema, 
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+handler) {
+    server.registerTool(name, {
+        description,
+        inputSchema,
+        _meta: { [exports.ALWAYS_LOAD_META_KEY]: true },
+    }, handler);
+}
+//# sourceMappingURL=index.js.map

package/payload/platform/lib/mcp-eager/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AA4DA,8BAiBC;AA7ED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,0DAA0D;AAC7C,QAAA,oBAAoB,GAAG,sBAA+B,CAAC;AA0BpE;;;;;;;;;;;;GAYG;AACH,SAAgB,SAAS,CACvB,MAA0B,EAC1B,IAAY,EACZ,WAAmB,EACnB,WAAiB;AACjB,8DAA8D;AAC9D,OAAgC;IAEhC,MAAM,CAAC,YAAY,CACjB,IAAI,EACJ;QACE,WAAW;QACX,WAAW;QACX,KAAK,EAAE,EAAE,CAAC,4BAAoB,CAAC,EAAE,IAAI,EAAE;KACxC,EACD,OAAO,CACR,CAAC;AACJ,CAAC"}

package/payload/platform/lib/mcp-eager/src/index.ts

@@ -0,0 +1,78 @@
+/**
+ * MCP eager-load helper (Task 1001).
+ *
+ * The Claude Code SDK marks every MCP tool as deferred-by-default: the model
+ * cannot invoke an MCP tool until it has first called `ToolSearch` to load
+ * the schema, which costs one extra turn per unique schema. The SDK's per-
+ * tool override is `_meta["anthropic/alwaysLoad"]: true` on the tool's
+ * `tools/list` entry, which `isDeferredTool` reads to flip the default.
+ *
+ * The MCP SDK exposes that channel only via `server.registerTool(name,
+ * config, handler)` (legacy `server.tool(name, desc, schema, handler)`
+ * has no `_meta` parameter). This helper wraps the registerTool call so
+ * every plugin's index.ts can opt a tool into eager-load with one line
+ * matching the shape of the existing four-arg `server.tool` overload.
+ *
+ * Use for every tool that appears in `ADMIN_CORE_TOOLS` — the permission
+ * allow-list IS the curation per the CEO review on Task 1001. Tools the
+ * admin should not see should be removed from the allow-list, not merely
+ * left deferred.
+ */
+/** Wire-format metadata key the Claude Code SDK reads. */
+export const ALWAYS_LOAD_META_KEY = "anthropic/alwaysLoad" as const;
+
+/**
+ * Loose structural type for any object exposing a `registerTool` method. The
+ * MCP SDK ships dual ESM/CJS packages with conditional exports, so importing
+ * the concrete `McpServer` type here would force every consumer to compile
+ * under the same resolution mode — they don't. Keep this contract minimal:
+ * we only need the method to exist; we cast internally to drive the
+ * upstream generic overloads which differ between SDK versions.
+ */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+type EagerCapableServer = { registerTool: (...args: any[]) => any };
+
+/**
+ * Local structural type for a Zod raw shape. We deliberately do NOT import
+ * `ZodRawShape` from zod itself — plugin workspaces ship pinned zod v3 in
+ * their nested `node_modules/zod`, while `platform/node_modules/zod` is v4,
+ * and the two `ZodRawShape` types are structurally incompatible (v4
+ * introduced the `_zod` brand on `ZodType`). A typed-by-value `unknown`
+ * member is enough: TypeScript treats it as compatible with both v3 and v4
+ * shapes, while still constraining the generic to "an object whose values
+ * are zod-like" so the caller's destructured handler args stay typed via
+ * the SDK's own overload resolution downstream.
+ */
+type LocalZodRawShape = Record<string, unknown>;
+
+/**
+ * Register an MCP tool that the Claude Code SDK eager-loads into the
+ * model's prompt at session boot, bypassing the ToolSearch round-trip.
+ *
+ * Mirrors the four-arg `server.tool(name, description, inputSchema, handler)`
+ * call shape — the only overload in use across our plugins — so migration
+ * is mechanical: replace `server.tool(` with `eagerTool(server, `.
+ *
+ * The helper deliberately does not constrain handler-arg types itself; the
+ * downstream `server.registerTool` invocation inside this function passes
+ * the shape through, and the upstream MCP SDK's overload (resolved against
+ * the consumer's own zod version) infers the handler args.
+ */
+export function eagerTool<Args extends LocalZodRawShape>(
+  server: EagerCapableServer,
+  name: string,
+  description: string,
+  inputSchema: Args,
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  handler: (...args: any[]) => any,
+): void {
+  server.registerTool(
+    name,
+    {
+      description,
+      inputSchema,
+      _meta: { [ALWAYS_LOAD_META_KEY]: true },
+    },
+    handler,
+  );
+}

package/payload/platform/lib/mcp-eager/tsconfig.json

@@ -0,0 +1,8 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "dist",
+    "rootDir": "src"
+  },
+  "include": ["src"]
+}

package/payload/platform/package.json

@@ -6,8 +6,8 @@
     "plugins/*/mcp"
   ],
   "scripts": {
-    "build": "tsc -p lib/models/tsconfig.json && tsc -p lib/anthropic-key/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
-    "build:lib": "tsc -p lib/models/tsconfig.json && tsc -p lib/anthropic-key/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json",
+    "build": "tsc -p lib/models/tsconfig.json && tsc -p lib/anthropic-key/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
+    "build:lib": "tsc -p lib/models/tsconfig.json && tsc -p lib/anthropic-key/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json",
     "build:memory": "tsc -p plugins/memory/mcp/tsconfig.json",
     "build:contacts": "tsc -p plugins/contacts/mcp/tsconfig.json",
     "build:telegram": "tsc -p plugins/telegram/mcp/tsconfig.json",

package/payload/platform/plugins/admin/mcp/dist/__tests__/plugin-read-skill-resolution.test.js

@@ -53,15 +53,39 @@ describe("findSkillOwners", () => {
     });
 });
 describe("computePluginReadHint", () => {
-    it("returns the owning plugin name when exactly one sibling owns the skill", () => {
+    it("returns the owner and canonical SKILL.md path when one sibling owns the skill referenced via file", () => {
         seedSkill("cloudflare", "setup-tunnel");
         const hint = computePluginReadHint(root, "admin", "skills/setup-tunnel/SKILL.md");
-        expect(hint).toBe("cloudflare");
+        expect(hint).toEqual({ pluginName: "cloudflare", file: "skills/setup-tunnel/SKILL.md" });
     });
     it("returns null when no plugin owns the requested skill", () => {
         seedSkill("admin", "onboarding");
         const hint = computePluginReadHint(root, "admin", "skills/imaginary/SKILL.md");
         expect(hint).toBeNull();
     });
+    // Task 1000 — wrong-`pluginName` shape: the skill slug is buried inside
+    // pluginName instead of the file path. The hint must still surface both
+    // the corrected pluginName and the canonical SKILL.md file path.
+    it("hints when skills/<slug> is buried in pluginName and file defaults to PLUGIN.md", () => {
+        seedSkill("admin", "plainly");
+        const hint = computePluginReadHint(root, "admin/skills/plainly", "PLUGIN.md");
+        expect(hint).toEqual({ pluginName: "admin", file: "skills/plainly/SKILL.md" });
+    });
+    it("hints when skills/<slug> is buried in pluginName and file is the bare SKILL.md", () => {
+        seedSkill("admin", "plainly");
+        const hint = computePluginReadHint(root, "admin/skills/plainly", "SKILL.md");
+        expect(hint).toEqual({ pluginName: "admin", file: "skills/plainly/SKILL.md" });
+    });
+    it("hints with the real owner when the pluginName prefix is wrong (contacts/skills/plainly → admin)", () => {
+        seedSkill("admin", "plainly");
+        const hint = computePluginReadHint(root, "contacts/skills/plainly", "PLUGIN.md");
+        expect(hint).toEqual({ pluginName: "admin", file: "skills/plainly/SKILL.md" });
+    });
+    it("returns null when the skill name extracted from pluginName is ambiguous across plugins", () => {
+        seedSkill("admin", "plainly");
+        seedSkill("contacts", "plainly");
+        const hint = computePluginReadHint(root, "admin/skills/plainly", "PLUGIN.md");
+        expect(hint).toBeNull();
+    });
 });
 //# sourceMappingURL=plugin-read-skill-resolution.test.js.map

package/payload/platform/plugins/admin/mcp/dist/__tests__/plugin-read-skill-resolution.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-read-skill-resolution.test.js","sourceRoot":"","sources":["../../src/__tests__/plugin-read-skill-resolution.test.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,sEAAsE;AACtE,qEAAqE;AACrE,oEAAoE;AACpE,6DAA6D;AAC7D,sCAAsC;AACtC,EAAE;AACF,sEAAsE;AACtE,mEAAmE;AACnE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEhF,IAAI,IAAY,CAAC;AAEjB,UAAU,CAAC,GAAG,EAAE;IACd,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,MAAc,EAAE,KAAa;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,SAAS,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QACxC,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAErD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;SACjF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAClC,SAAS,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACvC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAEpD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAErD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,SAAS,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAElF,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAEjC,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,2BAA2B,CAAC,CAAC;QAE/E,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"plugin-read-skill-resolution.test.js","sourceRoot":"","sources":["../../src/__tests__/plugin-read-skill-resolution.test.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,sEAAsE;AACtE,qEAAqE;AACrE,oEAAoE;AACpE,6DAA6D;AAC7D,sCAAsC;AACtC,EAAE;AACF,sEAAsE;AACtE,mEAAmE;AACnE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEhF,IAAI,IAAY,CAAC;AAEjB,UAAU,CAAC,GAAG,EAAE;IACd,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,MAAc,EAAE,KAAa;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,SAAS,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QACxC,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAErD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;SACjF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAClC,SAAS,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACvC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAEpD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAErD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,mGAAmG,EAAE,GAAG,EAAE;QAC3G,SAAS,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAExC,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAElF,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAEjC,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,2BAA2B,CAAC,CAAC;QAE/E,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,wEAAwE;IACxE,iEAAiE;IACjE,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,EAAE,sBAAsB,EAAE,WAAW,CAAC,CAAC;QAE9E,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,EAAE,sBAAsB,EAAE,UAAU,CAAC,CAAC;QAE7E,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,GAAG,EAAE;QACzG,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,EAAE,yBAAyB,EAAE,WAAW,CAAC,CAAC;QAEjF,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9B,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAEjC,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,EAAE,sBAAsB,EAAE,WAAW,CAAC,CAAC;QAE9E,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}