@rubytech/create-realagent-code 0.1.106 → 0.1.108

package/payload/server/{chunk-BVDLDM6O.js → chunk-AGFS3TVN.js}

@@ -2632,6 +2632,8 @@ import { resolve, join } from "path";
 import { existsSync, readFileSync } from "fs";
 var configDirName = ".maxy";
 var commercialMode = false;
+var bundleMode = "none";
+var bundleAllowlist = [];
 var vncDisplayNum = 99;
 var rfbPortNum = 5900;
 var websockifyPortNum = 6080;
@@ -2651,6 +2653,20 @@ if (platformRoot) {
     }
     if (typeof brand.configDir === "string") configDirName = brand.configDir;
     if (brand.commercialMode === true) commercialMode = true;
+    if (brand.shipsPremiumBundles === true) {
+      bundleMode = "all";
+    } else if (Array.isArray(brand.shipsPremiumBundles)) {
+      const arr = brand.shipsPremiumBundles;
+      for (const entry of arr) {
+        if (typeof entry !== "string" || entry.length === 0) {
+          throw new Error(
+            `brand.json at ${brandPath} shipsPremiumBundles array contains invalid entry: ${JSON.stringify(entry)}`
+          );
+        }
+      }
+      bundleMode = "allowlist";
+      bundleAllowlist = arr;
+    }
     if (typeof brand.vncDisplay === "number") vncDisplayNum = brand.vncDisplay;
     const brandLabel = configDirName.replace(/^\./, "");
     const required = [
@@ -2674,6 +2690,8 @@ if (platformRoot) {
 var MAXY_DIR = resolve(homedir(), configDirName);
 var BRAND_NAME = configDirName.replace(/^\./, "");
 var COMMERCIAL_MODE = commercialMode;
+var BUNDLE_MODE = bundleMode;
+var BUNDLE_ALLOWLIST = bundleAllowlist;
 var VNC_DISPLAY = `:${vncDisplayNum}`;
 var RFB_PORT = rfbPortNum;
 var WEBSOCKIFY_PORT = websockifyPortNum;
@@ -3429,6 +3447,38 @@ if (!existsSync4(PLATFORM_ROOT2)) {
 Set the MAXY_PLATFORM_ROOT environment variable to the absolute path of the platform directory.`
   );
 }
+var _stubDirsLoggedThisBoot = /* @__PURE__ */ new Set();
+function listValidAccounts() {
+  if (!existsSync4(ACCOUNTS_DIR)) return [];
+  const out = [];
+  const entries = readdirSync(ACCOUNTS_DIR, { withFileTypes: true });
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    if (entry.name.startsWith(".")) continue;
+    const accountDir = resolve3(ACCOUNTS_DIR, entry.name);
+    const configPath = resolve3(accountDir, "account.json");
+    if (!existsSync4(configPath)) {
+      if (!_stubDirsLoggedThisBoot.has(entry.name)) {
+        console.error(
+          `[platform] accounts-state STUB-DIR id=${entry.name} \u2014 onboarding leak; remove or repair`
+        );
+        _stubDirsLoggedThisBoot.add(entry.name);
+      }
+      continue;
+    }
+    let config;
+    try {
+      config = JSON.parse(readFileSync4(configPath, "utf-8"));
+    } catch {
+      console.error(
+        `[platform] accounts-state CORRUPT-JSON id=${entry.name} \u2014 account.json failed to parse; treating as stub`
+      );
+      continue;
+    }
+    out.push({ accountId: config.accountId, accountDir, config });
+  }
+  return out;
+}
 function resolveAccount() {
   if (!existsSync4(ACCOUNTS_DIR)) return null;
   let usersJsonUserId = null;
@@ -3622,7 +3672,26 @@ function readBundleSubPlugins(bundlePath) {
   return subs;
 }
 function walkPremiumBundles() {
-  if (BRAND_NAME === "maxy") return [];
+  const TAG = "[premium-auto-deliver]";
+  if (BUNDLE_MODE === "none") {
+    console.log(`${TAG} gate brand=${BRAND_NAME} mode=none bundles=[]`);
+    return [];
+  }
+  const onDisk = walkPremiumBundlesOnDisk();
+  if (BUNDLE_MODE === "all") {
+    console.log(`${TAG} gate brand=${BRAND_NAME} mode=all bundles=[${onDisk.map((b) => b.bundle).join(",")}]`);
+    return onDisk;
+  }
+  const allow = new Set(BUNDLE_ALLOWLIST);
+  const kept = onDisk.filter((b) => allow.has(b.bundle));
+  const onDiskNames = new Set(onDisk.map((b) => b.bundle));
+  const missing = BUNDLE_ALLOWLIST.filter((name) => !onDiskNames.has(name));
+  console.log(
+    `${TAG} gate brand=${BRAND_NAME} mode=allowlist bundles=[${kept.map((b) => b.bundle).join(",")}]` + (missing.length > 0 ? ` missing=[${missing.join(",")}]` : "")
+  );
+  return kept;
+}
+function walkPremiumBundlesOnDisk() {
   const stagingRoot = resolve4(PLATFORM_ROOT2, "../premium-plugins");
   if (!existsSync5(stagingRoot)) return [];
   let entries;
@@ -3695,7 +3764,7 @@ function autoDeliverPremiumPlugins() {
     }
   }
 }
-function reconcileEnabledPlugins(accountDir, config) {
+function reconcileEnabledPlugins(accountDir, config, accountId) {
   const TAG = "[premium-auto-deliver]";
   if (!accountDir || !config) return;
   const bundles = walkPremiumBundles();
@@ -3721,7 +3790,9 @@ function reconcileEnabledPlugins(accountDir, config) {
     currentSet.add(sub);
     added.push(sub);
   }
-  console.log(`${TAG} brand=${BRAND_NAME} bundles=[${bundleNames.join(",")}] subs=[${allSubs.join(",")}] stamped=${added.length}`);
+  console.log(
+    `${TAG} stamp accountId=${accountId ?? "unknown"} brand=${BRAND_NAME} mode=${BUNDLE_MODE} bundles=[${bundleNames.join(",")}] added=[${added.join(",")}]`
+  );
   if (added.length === 0) return;
   const merged = [...currentSet];
   const configPath = resolve4(accountDir, "account.json");
@@ -3735,6 +3806,38 @@ function reconcileEnabledPlugins(accountDir, config) {
     console.error(`${TAG} enabled-stamp write failed: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
+function cleanupLeakedPremiumSubs(accountDir, config, accountId) {
+  const TAG = "[premium-auto-deliver]";
+  if (!accountDir || !config) return;
+  if (BUNDLE_MODE === "all") return;
+  const current = Array.isArray(config.enabledPlugins) ? config.enabledPlugins : [];
+  if (current.length === 0) return;
+  const allow = new Set(BUNDLE_ALLOWLIST);
+  const leakedNames = /* @__PURE__ */ new Set();
+  for (const { bundle, subs } of walkPremiumBundlesOnDisk()) {
+    if (BUNDLE_MODE === "allowlist" && allow.has(bundle)) continue;
+    for (const sub of subs) leakedNames.add(sub);
+  }
+  if (leakedNames.size === 0) return;
+  const removed = [];
+  const kept = [];
+  for (const name of current) {
+    if (leakedNames.has(name)) removed.push(name);
+    else kept.push(name);
+  }
+  if (removed.length === 0) return;
+  const configPath = resolve4(accountDir, "account.json");
+  try {
+    const raw2 = readFileSync5(configPath, "utf-8");
+    const parsed = JSON.parse(raw2);
+    parsed.enabledPlugins = kept;
+    writeFileSync2(configPath, JSON.stringify(parsed, null, 2) + "\n");
+    config.enabledPlugins = kept;
+    console.log(`${TAG} cleanup accountId=${accountId ?? "unknown"} removed=[${removed.join(",")}]`);
+  } catch (err) {
+    console.error(`${TAG} cleanup write failed accountId=${accountId ?? "unknown"}: ${err instanceof Error ? err.message : String(err)}`);
+  }
+}
 
 // app/lib/claude-agent/logging.ts
 var emitMissingOnResolve = (..._args) => null;
@@ -4414,6 +4517,7 @@ export {
   parseCookieValue,
   PLATFORM_ROOT2 as PLATFORM_ROOT,
   ACCOUNTS_DIR,
+  listValidAccounts,
   resolveAccount,
   resolveUserAccounts,
   fingerprintSessionKey,
@@ -4432,6 +4536,7 @@ export {
   walkPremiumBundles,
   autoDeliverPremiumPlugins,
   reconcileEnabledPlugins,
+  cleanupLeakedPremiumSubs,
   emitMissingOnResolve,
   stripAttachmentMetaSuffix,
   requirePortEnv,

package/payload/server/maxy-edge.js

@@ -19,7 +19,7 @@ import {
   streamActionEvents,
   vncLog,
   websockifyLog
-} from "./chunk-BVDLDM6O.js";
+} from "./chunk-AGFS3TVN.js";
 import "./chunk-JRBCOVA4.js";
 import "./chunk-JSBRDJBE.js";
 

package/payload/server/server.js

@@ -18,6 +18,7 @@ import {
   browserViewerLog,
   canAccessAdmin,
   checkRateLimit,
+  cleanupLeakedPremiumSubs,
   clearRateLimit,
   clientIpMiddleware,
   createRemoteSession,
@@ -35,6 +36,7 @@ import {
   isPasswordValid,
   isRemoteAuthConfigured,
   launchAction,
+  listValidAccounts,
   reconcileEnabledPlugins,
   recordFailedAttempt,
   registerSession,
@@ -59,7 +61,7 @@ import {
   vncLog,
   waitForExit,
   walkPremiumBundles
-} from "./chunk-BVDLDM6O.js";
+} from "./chunk-AGFS3TVN.js";
 import {
   CLOUDFLARE_TASK_DIAGNOSTICS,
   appendCloudflareSteps,
@@ -14367,7 +14369,10 @@ var bootEntitlement = bootAccountConfig ? resolveEntitlement(
   }
 ) : null;
 autoDeliverPremiumPlugins();
-reconcileEnabledPlugins(bootAccount?.accountDir, bootAccount?.config);
+reconcileEnabledPlugins(bootAccount?.accountDir, bootAccount?.config, bootAccount?.accountId);
+for (const acct of listValidAccounts()) {
+  cleanupLeakedPremiumSubs(acct.accountDir, acct.config, acct.accountId);
+}
 (async () => {
   if (!bootAccount) return;
   try {

package/payload/platform/plugins/founder-pack/.claude-plugin/plugin.json

@@ -1,8 +0,0 @@
-{
-  "name": "founder-pack",
-  "description": "founder-pack plugin",
-  "version": "0.1.0",
-  "author": {
-    "name": "Rubytech LLC"
-  }
-}

package/payload/premium-plugins/founder-pack/.claude-plugin/plugin.json

@@ -1,8 +0,0 @@
-{
-  "name": "founder-pack",
-  "description": "founder-pack plugin",
-  "version": "0.1.0",
-  "author": {
-    "name": "Rubytech LLC"
-  }
-}