@rubytech/create-realagent-code 0.1.255 → 0.1.257

package/payload/platform/neo4j/schema.cypher

@@ -451,6 +451,7 @@ DROP INDEX entity_search_public IF EXISTS;
 CREATE FULLTEXT INDEX entity_search_admin IF NOT EXISTS
 FOR (n:LocalBusiness|Service|PriceSpecification|OpeningHoursSpecification|Organization
     |Listing|Property|Viewing|Offer|PostalAddress
+    |Job|LineItem|Valuation|Milestone|QuoteDocument|VariationNote|InboundInvoice|SubContractor|TimeLog|SubInvoice|WhatsAppGroup
     |Person|UserProfile|Preference|AdminUser|AccessGrant
     |KnowledgeDocument|ConversationArchive|Section|Chunk|DigitalDocument|CreativeWork|Question|FAQPage|DefinedTerm|Review|ImageObject
     |Conversation|AdminConversation|PublicConversation|Message|UserMessage|AssistantMessage|ToolCall
@@ -467,11 +468,13 @@ ON EACH [n.name, n.firstName, n.lastName, n.givenName, n.familyName,
          n.subject, n.bodyPreview, n.fromName, n.fromAddress, n.agentAddress, n.screeningReason,
          n.authority, n.contactValue, n.toolName,
          n.displayName, n.slug, n.role,
+         n.client, n.address, n.supplier, n.clientName,
          n.compiledTruth];
 
 CREATE FULLTEXT INDEX entity_search_public IF NOT EXISTS
 FOR (n:LocalBusiness|Service|PriceSpecification|OpeningHoursSpecification|Organization
     |Listing|Property|Viewing|Offer|PostalAddress
+    |Job|LineItem|Valuation|Milestone|QuoteDocument|VariationNote|InboundInvoice|SubContractor|TimeLog|SubInvoice|WhatsAppGroup
     |Person|UserProfile|Preference|AdminUser|AccessGrant
     |KnowledgeDocument|ConversationArchive|Section|Chunk|DigitalDocument|CreativeWork|Question|FAQPage|DefinedTerm|Review|ImageObject
     |Conversation|AdminConversation|PublicConversation|Message|UserMessage|AssistantMessage|ToolCall
@@ -1310,6 +1313,129 @@ FOR (i:ImageObject) ON (i.accountId);
 CREATE INDEX postal_address_postcode IF NOT EXISTS
 FOR (a:PostalAddress) ON (a.postalCode);
 
+// ----------------------------------------------------------
+// Construction ontology (Task 650) — Job-centric model for the
+// siteoffice-code brand, documented at
+// platform/plugins/memory/references/schema-construction.md.
+//
+// Active vertical: brand.json#vertical = "schema-construction". Declared
+// here so a fresh deploy registers each label before its first write
+// (same fresh-install bootstrap contract as the estate-agent block above).
+//
+// Uniqueness constraints where a clean natural key exists; accountId-index-
+// only for child nodes whose uniqueness is a write-time MERGE (LineItem,
+// Milestone, TimeLog) — mirrors :ImageObject.
+//
+// Search quality (Task 652). The four text-bearing labels — :Job (client +
+// address), :LineItem (trade + description), :QuoteDocument, :VariationNote
+// (description) — carry a vector index on `.embedding` (below), so the
+// graph-write chokepoint auto-embeds them on write and they rank in the
+// vector half of memory-search. The four are mirrored in
+// graph-write's VECTOR_INDEXED_LABELS (pinned by the memory-plugin
+// vector-indexed-labels-drift test). The distinctive back-office text fields
+// (Job.client, Job.address, InboundInvoice.supplier, WhatsAppGroup.clientName)
+// are added to the entity_search_admin ON EACH list ONLY — they are operator
+// data, deliberately kept out of the public-agent BM25 surface. The
+// construction labels remain in the public union, so a public read still
+// matches them on generic name/description.
+// ----------------------------------------------------------
+
+CREATE CONSTRAINT job_account_jobid_unique IF NOT EXISTS
+FOR (j:Job) REQUIRE (j.accountId, j.jobId) IS UNIQUE;
+
+CREATE INDEX job_account IF NOT EXISTS
+FOR (j:Job) ON (j.accountId);
+
+CREATE INDEX job_status IF NOT EXISTS
+FOR (j:Job) ON (j.status);
+
+CREATE VECTOR INDEX job_embedding IF NOT EXISTS
+FOR (j:Job) ON (j.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+CREATE INDEX line_item_account IF NOT EXISTS
+FOR (li:LineItem) ON (li.accountId);
+
+CREATE VECTOR INDEX line_item_embedding IF NOT EXISTS
+FOR (li:LineItem) ON (li.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+CREATE CONSTRAINT valuation_account_job_num_unique IF NOT EXISTS
+FOR (v:Valuation) REQUIRE (v.accountId, v.jobId, v.valuationNumber) IS UNIQUE;
+
+CREATE INDEX valuation_account IF NOT EXISTS
+FOR (v:Valuation) ON (v.accountId);
+
+CREATE INDEX milestone_account IF NOT EXISTS
+FOR (m:Milestone) ON (m.accountId);
+
+CREATE CONSTRAINT quote_document_account_ref_unique IF NOT EXISTS
+FOR (q:QuoteDocument) REQUIRE (q.accountId, q.ref) IS UNIQUE;
+
+CREATE INDEX quote_document_account IF NOT EXISTS
+FOR (q:QuoteDocument) ON (q.accountId);
+
+CREATE VECTOR INDEX quote_document_embedding IF NOT EXISTS
+FOR (q:QuoteDocument) ON (q.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+CREATE CONSTRAINT variation_note_account_job_num_unique IF NOT EXISTS
+FOR (vn:VariationNote) REQUIRE (vn.accountId, vn.jobId, vn.variationNumber) IS UNIQUE;
+
+CREATE INDEX variation_note_account IF NOT EXISTS
+FOR (vn:VariationNote) ON (vn.accountId);
+
+CREATE VECTOR INDEX variation_note_embedding IF NOT EXISTS
+FOR (vn:VariationNote) ON (vn.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+CREATE CONSTRAINT inbound_invoice_account_supplier_num_unique IF NOT EXISTS
+FOR (ii:InboundInvoice) REQUIRE (ii.accountId, ii.supplier, ii.invoiceNumber) IS UNIQUE;
+
+CREATE INDEX inbound_invoice_account IF NOT EXISTS
+FOR (ii:InboundInvoice) ON (ii.accountId);
+
+CREATE CONSTRAINT subcontractor_account_whatsapp_unique IF NOT EXISTS
+FOR (sc:SubContractor) REQUIRE (sc.accountId, sc.whatsappNumber) IS UNIQUE;
+
+CREATE INDEX subcontractor_account IF NOT EXISTS
+FOR (sc:SubContractor) ON (sc.accountId);
+
+CREATE INDEX time_log_account IF NOT EXISTS
+FOR (tl:TimeLog) ON (tl.accountId);
+
+CREATE CONSTRAINT sub_invoice_account_sub_period_unique IF NOT EXISTS
+FOR (si:SubInvoice) REQUIRE (si.accountId, si.subContractorId, si.period) IS UNIQUE;
+
+CREATE INDEX sub_invoice_account IF NOT EXISTS
+FOR (si:SubInvoice) ON (si.accountId);
+
+CREATE CONSTRAINT whatsapp_group_account_groupid_unique IF NOT EXISTS
+FOR (wg:WhatsAppGroup) REQUIRE (wg.accountId, wg.groupId) IS UNIQUE;
+
+CREATE INDEX whatsapp_group_account IF NOT EXISTS
+FOR (wg:WhatsAppGroup) ON (wg.accountId);
+
 // ----------------------------------------------------------
 // Voice Mirror (Task 356 + Task 462) — authorial-voice capture + application
 // ----------------------------------------------------------

package/payload/platform/plugins/.claude-plugin/marketplace.json

@@ -114,6 +114,11 @@
       "source": "./scheduling",
       "version": "0.1.0"
     },
+    {
+      "name": "slides",
+      "source": "./slides",
+      "version": "0.1.0"
+    },
     {
       "name": "substack-import",
       "source": "./substack-import",

package/payload/platform/plugins/admin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "admin",
-  "description": "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, capabilities-here (deterministic install-introspection — returns enabledPlugins, tier, models, installed platform + premium specialists, registered Claude Code agent types, and the brand block as a single JSON object; the canonical tool for grounding any claim about what is enabled on the current account), account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), session-retrospective-mark-complete (the deterministic sentinel admin calls once it has run an on-demand `/insight` pass — it records that the four passes completed and does not block or end the session), and admin-identity-authenticate (native-CC PIN identity gate — the operator submits their PIN as the first action of every session to bind their authenticated userId; the PreToolUse pin-identity-gate hook blocks all other tools until this succeeds) for managing the Maxy platform.",
+  "description": "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, capabilities-here (deterministic install-introspection — returns enabledPlugins, tier, models, installed platform + premium specialists, registered Claude Code agent types, and the brand block as a single JSON object; the canonical tool for grounding any claim about what is enabled on the current account), account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), and admin-identity-authenticate (native-CC PIN identity gate — the operator submits their PIN as the first action of every session to bind their authenticated userId; the PreToolUse pin-identity-gate hook blocks all other tools until this succeeds) for managing the Maxy platform.",
   "version": "0.1.0",
   "author": {
     "name": "Rubytech LLC"

package/payload/platform/plugins/admin/PLUGIN.md

@@ -1,7 +1,7 @@
 ---
 name: admin
 surface: platform
-description: "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, capabilities-here (deterministic install-introspection — returns enabledPlugins, tier, models, installed platform + premium specialists, registered Claude Code agent types, and the brand block as a single JSON object; the canonical tool for grounding any claim about what is enabled on the current account), account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), session-retrospective-mark-complete (the deterministic sentinel admin calls once it has run an on-demand `/insight` pass — it records that the four passes completed and does not block or end the session), and admin-identity-authenticate (native-CC PIN identity gate — the operator submits their PIN as the first action of every session to bind their authenticated userId; the PreToolUse pin-identity-gate hook blocks all other tools until this succeeds) for managing the Maxy platform."
+description: "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), publish-site (move an extracted static-site tree under <accountDir>/sites/<slug>/, emit one canonical path slug, and refresh llms.txt at the site root — typed refusal taxonomy replaces the prior skill-prose contract), brand-settings, account-manage, capabilities-here (deterministic install-introspection — returns enabledPlugins, tier, models, installed platform + premium specialists, registered Claude Code agent types, and the brand block as a single JSON object; the canonical tool for grounding any claim about what is enabled on the current account), account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, wifi, action-approval tools (action-pending, action-approve, action-reject, action-edit), and admin-identity-authenticate (native-CC PIN identity gate — the operator submits their PIN as the first action of every session to bind their authenticated userId; the PreToolUse pin-identity-gate hook blocks all other tools until this succeeds) for managing the Maxy platform."
 tools:
   - name: system-status
     publicAllowlist: false
@@ -72,9 +72,6 @@ tools:
   - name: action-edit
     publicAllowlist: false
     adminAllowlist: true
-  - name: session-retrospective-mark-complete
-    publicAllowlist: false
-    adminAllowlist: true
   - name: admin-identity-authenticate
     publicAllowlist: false
     adminAllowlist: true
@@ -139,16 +136,16 @@ Tools are available via the `admin` MCP server.
 | Run a structured sprint without `gstack` | User asks to run a sprint, execute a `.tasks/NNN-*.md`, or invokes "superpowers sprint" / "sprint without gstack" | `skills/superpowers-sprint/SKILL.md` |
 | Investigate a bug or unexpected behaviour | User asks to debug, fix a bug, find the root cause, or investigate an error | `skills/investigate/SKILL.md` |
 | Capture work as a task before implementing | User asks to "task it", create a task, or describes work that should be a task file before a sprint | `skills/task/SKILL.md` |
+| Run an insight pass on this session | Operator asks to run an insight pass, review this session, capture what we learned, or do a retrospective on the conversation | `skills/insight/SKILL.md` |
 
 ## Hooks
 
 - `hooks/webfetch-preflight.mjs` — short-circuits WebFetch on JS-SPA shells with a structured `WEBFETCH_CANNOT_READ_JS_SPA` error so the agent surfaces a loud failure to the owner instead of paying the 60s extraction timeout. Fail-open on any internal error.
 - `hooks/askuserquestion-investigate-gate.sh` — PreToolUse matcher=`AskUserQuestion`. Blocks the question (exit 2) when no read-only investigation tool has fired since the latest real user turn in the session JSONL. The structural fix for the failure class where the agent fabricates a menu before evidence-gathering (session `c085ec2c-46fb-4b73-8865-68cf85866ea8` 2026-05-22 — "change remote access password" → invented options "Admin PIN / Cloudflare tunnel / WiFi password" with zero prior tool_use; post-correction the agent immediately fired `remote-auth-status` → `ToolSearch` → `remote-auth-set-password`, proving it knew the moves). **Allowlist** (exact, with trailing `__<tool>` suffix-match for namespaced `mcp__plugin_<plugin>_<server>__<tool>` aliases): `ToolSearch`, `Grep`, `Glob`, `Read`, `LS`, `NotebookRead`, `Bash`, `WebFetch`, `WebSearch`, plus the read-only admin / memory MCP tools (`*-status`, `*-list`, `*-read`, `skill-find`, `memory-find-candidates`, `profile-read`, `conversation-list`, `memory-list-attachments`, `memory-read-attachment`). **Block message:** `Blocked: AskUserQuestion requires at least one investigation tool (ToolSearch, Grep, Read, *-list, *-status, *-read, skill-find, ...) earlier in this turn. Search the operator's literal phrase first.` **Log line** (stderr, one per call): `[ask-gate] decision=<allow|block> sessionId=<id8> seen=<csv|-> reason=<allowlist-hit|no-investigation|fail-open-no-transcript|fail-open-parse-error>`. **Fail-open** on missing transcript or parse error — nudges, never bricks the UI.
-- `hooks/insight.sh` — **UserPromptSubmit hook.** Fires on every prompt but exits 0 with `trigger-skipped reason=<role-not-admin|is-specialist|empty-stdin|missing-transcript|no-insight-token>` on every path EXCEPT when the operator's `prompt` field carries the literal `/insight` token (case-insensitive, must match the whole message or a standalone line — not embedded in prose). On that path it emits `[insight] trigger sessionId=<id> token=/insight`, prints the four-pass instruction to **stdout** (UserPromptSubmit stdout is injected as turn context), and exits 0 — the turn is never blocked, and the agent runs the four passes over the session so far then keeps working. There is no exit-2 path, no stderr instruction, and no gate. Standing reconciliation: on every invocation the hook scans the transcript (`transcript_path`) for the latest real-user `/insight` turn that has no subsequent `session-retrospective-mark-complete` tool_use and emits `[insight] prior-incomplete sessionId=<id> triggered-turn=<idx>` — the no-event detector for an `/insight` that was triggered but never completed ([[feedback_no_stdout_parsing_for_control_flow]], [[feedback_doctrine_paragraph_is_not_a_gate]]). Recursion guard: any session whose `MAXY_SPECIALIST` env is set (specialist subagent dispatched via Task tool) skips. All structured emits go through `POST /api/admin/log-ingest`; stdout carries only the instruction block. The passes run as one or more additional turns inside the operator's existing admin session — Task-tool delegation to `database-operator` is the existing IDENTITY.md "Recording" route, not a parallel admin session ([[feedback_deterministic_means_remove_llm]]).
 - `hooks/mcp-tool-missing.sh` — **PostToolUse hook on `mcp__.*` (Task 502, directive 3).** Defence-in-depth for the `No such tool available: mcp__…` failure class that the Task 502 name-binding is built to eliminate. Fires on any MCP tool call; no-op unless the `tool_response` carries `No such tool available` AND the qualified name resolves to a maxy plugin (read from the generated `hooks/lib/maxy-mcp-plugins.txt`). On a maxy match it logs one deterministic `[mcp-tool-missing] server=<server> tool=<tool>` line and exits 2 with a fixed envelope on stderr, so the agent relays a named server-unavailable failure instead of narrating "warming up" or blind-retrying. A missing non-maxy bridge tool (Playwright etc., upstream-owned) passes through (exit 0). The maxy-plugin list is regenerated and gate-diffed by `platform/scripts/check-canonical-tool-names.mjs`.
 - `hooks/post-tool-use-agent.sh` — **PostToolUse hook on `Agent` (Task 560).** Drains any subagent hook-decision buffers under `~/.maxy-code/logs/hook-decisions/` modified since this parent's previous PostToolUse-Agent fire (cursor file keyed by parent session id), prints one `[hook-propagate]` line per record to stdout — Claude Code attaches the stdout as a `hook_success` attachment on the parent JSONL, making the records grep-queryable from the parent session alone (Task 559 motivating case). Rotates consumed buffers to `consumed/`. Emits one `[hook-propagate-census] parentSession=<…> subagentHooksObserved=<N> attachmentsEmitted=<M>` line per fire to stdout and server.log; `N != M` is the propagation regression signal. The companion emitter library `hooks/lib/hook-emit.sh` is sourced by `post-tool-use-agent.sh` and any other hook that records a block decision (4 KB stderr truncation, `truncated=true` set on the record).
 - `hooks/admin-authoring-observer.sh` — **PostToolUse hook on Write and Edit (Task 486).** Observation only — never blocks; exits 0 on every path. Fires when the admin agent (not a specialist subagent — gated by `MAXY_SPECIALIST` env) writes or edits a file under `<accountDir>/output/`. Walks the session transcript from the latest real-user turn forward to detect any prior `Task` `tool_use` whose `subagent_type` starts with `specialists:`. Emits one stderr line `[admin-authoring] inline-write path=<rel> priorSpecialistSpawnInTurn=<true|false|unknown>`. A `false` value on a long-form prose file is the regression signal Task 486 was designed to make visible — the BioSymm proposal session (admin authored a customer-facing proposal inline despite content-producer being installed) is the failure mode this surfaces mechanically. Mechanical enforcement (refuse the write, force a re-spawn) is deferred per the task spec.
-- **Turn recorder — removed entirely (Task 626).** The `turn-completed-graph-write.sh` Stop hook, the `/api/admin/claude-sessions` loopback bypass it relied on, the `[turn-recorder]` emitters, the envelope walker, and the recorder-auto-archive subscriber are deleted. It had been dormant since Task 214 (never re-registered in settings.json); the admin now writes to the graph by delegating to `database-operator` via the Task tool inside the live session, and the on-demand `/insight` pass (`insight.sh`) is the per-session review. There is no per-turn spawn.
+- **Turn recorder — removed entirely (Task 626).** The `turn-completed-graph-write.sh` Stop hook, the `/api/admin/claude-sessions` loopback bypass it relied on, the `[turn-recorder]` emitters, the envelope walker, and the recorder-auto-archive subscriber are deleted. It had been dormant since Task 214 (never re-registered in settings.json); the admin now writes to the graph by delegating to `database-operator` via the Task tool inside the live session, and the on-demand `/insight` pass (`skills/insight/SKILL.md`, a registered admin skill — Task 641) is the per-session review. There is no per-turn spawn.
 
 ## Session identifiers (Task 135)
 

package/payload/platform/plugins/admin/mcp/dist/index.js

@@ -3101,66 +3101,6 @@ eagerTool(server, "action-edit", "Edit a pending action's input and then execute
         };
     }
 });
-// ===================================================================
-// Insight-pass completion sentinel (Task 282, retriggered on-demand by Task 634)
-// ===================================================================
-//
-// Deterministic completion signal for the on-demand `/insight` pass
-// (`platform/plugins/admin/hooks/insight.sh`, a UserPromptSubmit hook). The
-// hook injects the four-pass instruction when the operator types `/insight`;
-// this tool_use is the agent's record that all four passes ran. Calling it
-// does not block, release, or end anything — the session continues. Its
-// absence after an `/insight` turn is what the hook's standing reconciliation
-// surfaces as `[insight] prior-incomplete`
-// ([[feedback_doctrine_paragraph_is_not_a_gate]]).
-//
-// The tool's only side-effect is one structured log line through
-// /api/admin/log-ingest so server.log carries the full chain
-//   trigger → complete   (and, on failure, trigger with no following complete)
-// against one operator sessionId.
-server.tool("session-retrospective-mark-complete", "Marks an on-demand insight pass complete. Call this AFTER walking the session for technical learnings, operator-relationship updates, missing graph writes, and the typed-edge auto-extraction pass — and persisting each one (Task-tool delegations to database-operator for graph writes and the typed-edge pass, Write to SOUL.md for tonal updates). The counts you pass are the number of items you actually persisted in each pass. Calling it records that the insight pass ran; it does not block or end the session — keep working afterward.", {
-    learningsCount: z.number().int().nonnegative().describe("Technical-learning / correction nodes you delegated to database-operator in this insight pass."),
-    preferencesCount: z.number().int().nonnegative().describe("SOUL.md writes you made for tonal / working-style observations in this insight pass."),
-    graphWriteCount: z.number().int().nonnegative().describe("Graph nodes/edges/commitments you delegated to database-operator for content that surfaced in the session but was not written in-flight."),
-    typedEdgesCount: z.number().int().nonnegative().describe("Typed edges accepted (MERGEd) by the typed-edge auto-extraction pass that database-operator ran in this insight pass. 0 is valid (no prose nodes touched or none yielded edges)."),
-    nodesProcessed: z.number().int().nonnegative().describe("Prose-bearing nodes the typed-edge pass enumerated and scanned in this insight pass. 0 is valid (no prose nodes since the session started)."),
-}, async ({ learningsCount, preferencesCount, graphWriteCount, typedEdgesCount, nodesProcessed }) => {
-    const sessionId = process.env.SESSION_ID || "unknown";
-    const line = `complete sessionId=${sessionId} learningsCount=${learningsCount} preferencesCount=${preferencesCount} graphWriteCount=${graphWriteCount} typedEdgesCount=${typedEdgesCount} nodesProcessed=${nodesProcessed}`;
-    if (!PLATFORM_PORT) {
-        // Module-init deliberately tolerates a missing PLATFORM_PORT
-        // (lines ~62-71) so the MCP server does not loud-fail on plugin-
-        // system spawn enumeration. The hook's release decision is the
-        // JSONL tool_use entry, not this POST — so we still return success
-        // to the caller and emit the line on stderr so it lands in the
-        // MCP server's stderr log instead of disappearing into a NaN URL.
-        console.error(`[insight] log-ingest-skipped sessionId=${sessionId} reason=missing-env env=PLATFORM_PORT line=${JSON.stringify(line)}`);
-    }
-    else {
-        try {
-            const port = parseInt(PLATFORM_PORT, 10);
-            await fetch(`http://127.0.0.1:${port}/api/admin/log-ingest`, {
-                method: "POST",
-                headers: { "Content-Type": "application/json" },
-                body: JSON.stringify({ tag: "insight", level: "info", line }),
-                signal: AbortSignal.timeout(2000),
-            });
-        }
-        catch (err) {
-            // Falling back to stderr keeps the event in the MCP server's
-            // stderr log even when the loopback POST fails. The hook's
-            // release decision is JSONL-based and does not depend on this
-            // POST succeeding.
-            console.error(`[insight] log-ingest-failed sessionId=${sessionId} err=${err instanceof Error ? err.message : String(err)}`);
-        }
-    }
-    return {
-        content: [{
-                type: "text",
-                text: `Insight pass marked complete (learnings=${learningsCount} preferences=${preferencesCount} graphWrites=${graphWriteCount} typedEdges=${typedEdgesCount} nodesProcessed=${nodesProcessed}). The session continues — carry on with the operator's work.`,
-            }],
-    };
-});
 // Task 619 — native-CC admin PIN identity gate. Eager-loaded so it is visible
 // from the first turn: the operator must authenticate before any other tool is
 // reachable (the PreToolUse pin-identity-gate hook enforces that; this tool is