@rubytech/create-realagent-code 0.1.29 → 0.1.31

package/dist/__tests__/init-logging.test.js

@@ -0,0 +1,85 @@
+// Coverage for runInitLogging's success and failure branches via injected
+// fs / stderr / exit impls. Task 062 (maxy-code).
+//
+// Brief asked for vitest. Codebase convention is node:test (matches
+// apt-resolve.test.ts, peer-brand-detect.test.ts, etc); the package has no
+// vitest dep and the test runner stanza in package.json invokes
+// `node --test 'dist/__tests__/*.test.js'`.
+import test from "node:test";
+import assert from "node:assert/strict";
+import { runInitLogging } from "../init-logging.js";
+const LOG_DIR = "/tmp/test-task-062-logs";
+const LOG_FILE = "/tmp/test-task-062-logs/install-2026-01-01T00-00-00-000Z.log";
+const PERSIST_DIR = "/tmp/test-task-062-persist";
+test("success path: header written via injected impls, no stderr, no exit", () => {
+    const appendCalls = [];
+    let stderrOut = "";
+    let exitCode = null;
+    runInitLogging({
+        logDir: LOG_DIR,
+        logFile: LOG_FILE,
+        persistDir: PERSIST_DIR,
+        headerLines: ["", "===", "  Maxy Code Install Log", "==="],
+        mkdirSyncImpl: () => { },
+        appendFileSyncImpl: (p, d) => { appendCalls.push([p, d]); },
+        stderrWriteImpl: (c) => { stderrOut += c; },
+        exitImpl: (c) => { exitCode = c; },
+    });
+    assert.equal(appendCalls.length, 1);
+    assert.equal(appendCalls[0][0], LOG_FILE);
+    assert.equal(appendCalls[0][1], "\n===\n  Maxy Code Install Log\n===\n");
+    assert.equal(stderrOut, "");
+    assert.equal(exitCode, null);
+});
+test("failure path: appendFileSync throws → stderr emits FAILED line, exit(1) called", () => {
+    let stderrOut = "";
+    let exitCode = null;
+    runInitLogging({
+        logDir: LOG_DIR,
+        logFile: LOG_FILE,
+        persistDir: PERSIST_DIR,
+        headerLines: ["a"],
+        mkdirSyncImpl: () => { },
+        appendFileSyncImpl: () => { throw new Error("EACCES: permission denied"); },
+        stderrWriteImpl: (c) => { stderrOut += c; },
+        exitImpl: (c) => { exitCode = c; },
+    });
+    assert.ok(stderrOut.includes("[create-maxy] init-logging FAILED reason=EACCES"), `stderr should contain init-logging FAILED line; got: ${JSON.stringify(stderrOut)}`);
+    assert.ok(stderrOut.includes(`log=${LOG_FILE}`));
+    assert.ok(stderrOut.includes(`persist=${PERSIST_DIR}`));
+    assert.equal(exitCode, 1);
+});
+test("failure path: mkdirSync throws → stderr emits FAILED line, exit(1) called", () => {
+    let stderrOut = "";
+    let exitCode = null;
+    let appendCalled = false;
+    runInitLogging({
+        logDir: LOG_DIR,
+        logFile: LOG_FILE,
+        persistDir: PERSIST_DIR,
+        headerLines: ["a"],
+        mkdirSyncImpl: () => { throw new Error("EROFS: read-only file system"); },
+        appendFileSyncImpl: () => { appendCalled = true; },
+        stderrWriteImpl: (c) => { stderrOut += c; },
+        exitImpl: (c) => { exitCode = c; },
+    });
+    assert.equal(appendCalled, false, "appendFileSync must not be invoked when mkdirSync throws");
+    assert.ok(stderrOut.includes("[create-maxy] init-logging FAILED reason=EROFS"));
+    assert.equal(exitCode, 1);
+});
+test("failure path: non-Error thrown value still surfaces as reason", () => {
+    let stderrOut = "";
+    let exitCode = null;
+    runInitLogging({
+        logDir: LOG_DIR,
+        logFile: LOG_FILE,
+        persistDir: PERSIST_DIR,
+        headerLines: ["a"],
+        mkdirSyncImpl: () => { },
+        appendFileSyncImpl: () => { throw "raw-string"; },
+        stderrWriteImpl: (c) => { stderrOut += c; },
+        exitImpl: (c) => { exitCode = c; },
+    });
+    assert.ok(stderrOut.includes("reason=raw-string"));
+    assert.equal(exitCode, 1);
+});

package/dist/index.js

@@ -7,6 +7,7 @@ import { resolveInstallPortFromFs, buildMaxyUnitFile, buildClaudeSessionManagerU
 import { classifyOnboardingReadBack } from "./onboarding-readback.js";
 import { parseOsRelease, isUbuntuLike as isUbuntuLikePure, parseAptCacheCandidate, decideAptResolution, } from "./apt-resolve.js";
 import { findPeerBrandOnDefaultNeo4jPort } from "./peer-brand-detect.js";
+import { runInitLogging } from "./init-logging.js";
 import { requireSupportedPlatform } from "./platform-detect.js";
 import { renderPlist } from "./launchd-plist.js";
 import { installAllBrewPackages } from "./brew-install.js";
@@ -82,15 +83,19 @@ const NPM_NET_FLAGS = [
 // Logging — timestamped to console AND persistent log file
 // ---------------------------------------------------------------------------
 function initLogging() {
-    mkdirSync(LOG_DIR, { recursive: true });
-    appendFileSync(LOG_FILE, [
-        "",
-        "=".repeat(64),
-        `  ${BRAND.productName} Install Log — ${new Date().toISOString()}`,
-        `  Node ${process.version} | ${process.platform} ${process.arch}`,
-        "=".repeat(64),
-        "",
-    ].join("\n") + "\n");
+    runInitLogging({
+        logDir: LOG_DIR,
+        logFile: LOG_FILE,
+        persistDir: PERSIST_DIR,
+        headerLines: [
+            "",
+            "=".repeat(64),
+            `  ${BRAND.productName} Install Log — ${new Date().toISOString()}`,
+            `  Node ${process.version} | ${process.platform} ${process.arch}`,
+            "=".repeat(64),
+            "",
+        ],
+    });
 }
 function logFile(msg) {
     try {
@@ -3596,8 +3601,14 @@ if (PLATFORM === "darwin") {
 const PLATFORM_HEADER = `[create-maxy] platform=${PLATFORM} arch=${process.arch}` +
     (MACOS_VERSION ? ` macos=${MACOS_VERSION}` : ``) +
     ` version=${PKG_VERSION}`;
-initLogging();
+// Task 062 — emit platform header and the resolved log/persist paths to
+// stdout BEFORE the log file is opened. If initLogging's mkdir or first
+// appendFileSync throws, the operator still sees brand/version/arch and the
+// exact path the log file SHOULD live at, instead of a silent exit between
+// the LOG_DIR mkdir and the first log write.
 console.log(PLATFORM_HEADER);
+console.log(`[create-maxy] log=${LOG_FILE} persist=${PERSIST_DIR}`);
+initLogging();
 console.log("================================================================");
 console.log(`  ${BRAND.productName} — ${BRAND.tagline}.  (${BRAND.hostname} v${PKG_VERSION})`);
 console.log("================================================================");

package/dist/init-logging.js

@@ -0,0 +1,28 @@
+// Installer log-file initialization with diagnostic stderr emission on
+// failure. Extracted from index.ts so the failure path can be covered by
+// node:test without bringing in the rest of the installer's import-time side
+// effects.
+//
+// Task 062 (maxy-code) — operator-observed silent exit between
+// `mkdirSync(LOG_DIR)` and the first `appendFileSync(LOG_FILE, header)`.
+// Both writes are guarded inside the same try/catch; a failure emits a
+// literal `[create-maxy] init-logging FAILED reason=<msg> log=<path>
+// persist=<path>` line to stderr and exits 1 so the operator always has a
+// forensic surface regardless of whether the log file ever opened.
+import { mkdirSync as realMkdirSync, appendFileSync as realAppendFileSync, } from "node:fs";
+export function runInitLogging(opts) {
+    const mkdir = opts.mkdirSyncImpl ?? ((p, o) => { realMkdirSync(p, o); });
+    const append = opts.appendFileSyncImpl ?? ((p, d) => { realAppendFileSync(p, d); });
+    const stderr = opts.stderrWriteImpl ?? ((c) => { process.stderr.write(c); });
+    const exit = opts.exitImpl ?? ((c) => { process.exit(c); });
+    try {
+        mkdir(opts.logDir, { recursive: true });
+        append(opts.logFile, opts.headerLines.join("\n") + "\n");
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        stderr(`[create-maxy] init-logging FAILED reason=${msg} log=${opts.logFile} persist=${opts.persistDir}\n`);
+        exit(1);
+        return;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-realagent-code",
-  "version": "0.1.29",
+  "version": "0.1.31",
   "description": "Install Real Agent — Built for agents. By agents.",
   "bin": {
     "create-realagent-code": "./dist/index.js"

package/payload/platform/lib/persistent-components/dist/index.d.ts

@@ -1,17 +1,16 @@
 /**
- * The component names that the platform UI treats as long-lived editor
- * surfaces (not single-shot prompts). They survive multiple `onSubmit`
- * fires because the operator may auto-save mid-edit, and they are also
- * the **server-side commitment surface** for Task 942: when the admin
- * agent emits one of these names via `render-component`, the live
- * stream-parser materialises the inline content as a sibling
- * `:KnowledgeDocument` artefact so the row appears in the artefacts
- * panel and survives session compaction.
+ * The historical persistent-component names. Pre-Task-066 the admin
+ * agent could emit a component tool_use carrying one of these names,
+ * and the live stream-parser materialised the inline content as a
+ * sibling `:KnowledgeDocument` artefact so the row appeared in the
+ * artefacts panel and survived session compaction.
  *
- * Single source of truth — the platform UI (`app/admin-types.ts`) and
- * the admin MCP server (`plugins/admin/mcp/src/index.ts`) both import
- * from this module. Any drift here is an account-isolation /
- * persistence-doctrine bug; keep the constant in one place.
+ * The emitting tool is gone on native Claude Code (Task 066); the
+ * constant is preserved so the rehydration path can still recognise
+ * `:Component` rows written by older conversations. New conversations
+ * never produce these rows. The single-source-of-truth contract still
+ * holds: `app/admin-types.ts` and any consumer that needs to classify
+ * a stored component name imports from here.
  */
 export declare const PERSISTENT_COMPONENTS: Set<string>;
 /**

package/payload/platform/lib/persistent-components/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,qBAAqB,aAKhC,CAAC;AAEH;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAE9E"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,qBAAqB,aAKhC,CAAC;AAEH;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAE9E"}

package/payload/platform/lib/persistent-components/dist/index.js

@@ -3,19 +3,18 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.PERSISTENT_COMPONENTS = void 0;
 exports.isPersistentComponent = isPersistentComponent;
 /**
- * The component names that the platform UI treats as long-lived editor
- * surfaces (not single-shot prompts). They survive multiple `onSubmit`
- * fires because the operator may auto-save mid-edit, and they are also
- * the **server-side commitment surface** for Task 942: when the admin
- * agent emits one of these names via `render-component`, the live
- * stream-parser materialises the inline content as a sibling
- * `:KnowledgeDocument` artefact so the row appears in the artefacts
- * panel and survives session compaction.
+ * The historical persistent-component names. Pre-Task-066 the admin
+ * agent could emit a component tool_use carrying one of these names,
+ * and the live stream-parser materialised the inline content as a
+ * sibling `:KnowledgeDocument` artefact so the row appeared in the
+ * artefacts panel and survived session compaction.
  *
- * Single source of truth — the platform UI (`app/admin-types.ts`) and
- * the admin MCP server (`plugins/admin/mcp/src/index.ts`) both import
- * from this module. Any drift here is an account-isolation /
- * persistence-doctrine bug; keep the constant in one place.
+ * The emitting tool is gone on native Claude Code (Task 066); the
+ * constant is preserved so the rehydration path can still recognise
+ * `:Component` rows written by older conversations. New conversations
+ * never produce these rows. The single-source-of-truth contract still
+ * holds: `app/admin-types.ts` and any consumer that needs to classify
+ * a stored component name imports from here.
  */
 exports.PERSISTENT_COMPONENTS = new Set([
     'action-list',

package/payload/platform/lib/persistent-components/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAyBA,sDAEC;AA3BD;;;;;;;;;;;;;;GAcG;AACU,QAAA,qBAAqB,GAAG,IAAI,GAAG,CAAS;IACnD,aAAa;IACb,iBAAiB;IACjB,qBAAqB;IACrB,aAAa;CACd,CAAC,CAAC;AAEH;;GAEG;AACH,SAAgB,qBAAqB,CAAC,IAA+B;IACnE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,6BAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAwBA,sDAEC;AA1BD;;;;;;;;;;;;;GAaG;AACU,QAAA,qBAAqB,GAAG,IAAI,GAAG,CAAS;IACnD,aAAa;IACb,iBAAiB;IACjB,qBAAqB;IACrB,aAAa;CACd,CAAC,CAAC;AAEH;;GAEG;AACH,SAAgB,qBAAqB,CAAC,IAA+B;IACnE,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,6BAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC"}

package/payload/platform/lib/persistent-components/src/index.ts

@@ -1,17 +1,16 @@
 /**
- * The component names that the platform UI treats as long-lived editor
- * surfaces (not single-shot prompts). They survive multiple `onSubmit`
- * fires because the operator may auto-save mid-edit, and they are also
- * the **server-side commitment surface** for Task 942: when the admin
- * agent emits one of these names via `render-component`, the live
- * stream-parser materialises the inline content as a sibling
- * `:KnowledgeDocument` artefact so the row appears in the artefacts
- * panel and survives session compaction.
+ * The historical persistent-component names. Pre-Task-066 the admin
+ * agent could emit a component tool_use carrying one of these names,
+ * and the live stream-parser materialised the inline content as a
+ * sibling `:KnowledgeDocument` artefact so the row appeared in the
+ * artefacts panel and survived session compaction.
  *
- * Single source of truth — the platform UI (`app/admin-types.ts`) and
- * the admin MCP server (`plugins/admin/mcp/src/index.ts`) both import
- * from this module. Any drift here is an account-isolation /
- * persistence-doctrine bug; keep the constant in one place.
+ * The emitting tool is gone on native Claude Code (Task 066); the
+ * constant is preserved so the rehydration path can still recognise
+ * `:Component` rows written by older conversations. New conversations
+ * never produce these rows. The single-source-of-truth contract still
+ * holds: `app/admin-types.ts` and any consumer that needs to classify
+ * a stored component name imports from here.
  */
 export const PERSISTENT_COMPONENTS = new Set<string>([
   'action-list',

package/payload/platform/neo4j/schema.cypher

@@ -911,9 +911,12 @@ FOR (tc:ToolCall) ON (tc.accountId, tc.startedAt);
 // ----------------------------------------------------------
 // Component — Task 815 admin-resume rehydration.
 //
-// Every render-component event emitted on an assistant turn
-// produces one Component node linked to its parent Message via
-// (Message)-[:HAS_COMPONENT]->(Component). The agent's narrative
+// Each legacy component event emitted on an assistant turn (pre-066
+// admin agent surface only) produced one Component node linked to its
+// parent Message via (Message)-[:HAS_COMPONENT]->(Component). New
+// conversations never write to this table; the rehydration path keeps
+// the rows in place so historical conversations replay intact. The
+// agent's narrative
 // text stays on Message.content; component name + data JSON +
 // position-relative-to-text live here. Sibling-node design (not
 // JSON-on-Message) avoids Neo4j's 128KB property soft-limit when

package/payload/platform/plugins/admin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "admin",
-  "description": "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver — single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), brand-settings, account-manage, account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name — the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), render-component, session-reset, session-resume, file-attach, wifi, and action-approval tools (action-pending, action-approve, action-reject, action-edit) for managing the Maxy platform.",
+  "description": "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), brand-settings, account-manage, account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, file-attach, wifi, and action-approval tools (action-pending, action-approve, action-reject, action-edit) for managing the Maxy platform.",
   "version": "0.1.0",
   "author": {
     "name": "Rubytech LLC"

package/payload/platform/plugins/admin/PLUGIN.md

@@ -1,6 +1,6 @@
 ---
 name: admin
-description: "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver — single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), brand-settings, account-manage, account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name — the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), render-component, session-reset, session-resume, file-attach, wifi, and action-approval tools (action-pending, action-approve, action-reject, action-edit) for managing the Maxy platform."
+description: "Platform administration plugin. Provides system-status, public-hostname (deterministic Cloudflare public-URL resolver, single call returning the operator's canonical hostname so agents never guess property names on :CloudflareHostname nodes), brand-settings, account-manage, account-update, admin-add, admin-remove, admin-list, admin-update-pin, agent-list, agent-config-read, logs-read, plugin-read, skill-load (one-call resolve+read for SKILL.md by skill name, the canonical primitive for loading a named skill; plugin-read remains the reader for references/* and PLUGIN.md), store-skill (deterministic write counterpart to plugin-read; persists operator-authored skills as plugin files under the active account), session-reset, session-resume, file-attach, wifi, and action-approval tools (action-pending, action-approve, action-reject, action-edit) for managing the Maxy platform."
 tools:
   - name: system-status
     publicAllowlist: false
@@ -32,8 +32,6 @@ tools:
     publicAllowlist: false
   - name: store-skill
     publicAllowlist: false
-  - name: render-component
-    publicAllowlist: false
   - name: session-reset
     publicAllowlist: false
   - name: session-resume

package/payload/platform/plugins/admin/hooks/onboarding-skill-drift.sh

@@ -1,100 +1,103 @@
 #!/usr/bin/env bash
-# Task 038 Outcome E1 — Stop-event hook that flags the admin agent's
-# onboarding-skill drift pattern: the prior /input carried an
-# `<onboarding-state>` block, but the latest assistant turn did not call
-# `render-component` AND did not end with a `?`-terminated sentence.
+# Task 063 / 066. Stop-event hook that flags admin agent onboarding
+# drift on the native Claude Code (PTY) surface. The contract is "the
+# assistant ends its turn on a prompt the operator can answer" — no
+# named tool, no per-turn imperative, just a chat-surface end-state
+# check.
 #
 # Behaviour:
-#   1. Read the transcript_path from the Stop event JSON on stdin.
+#   1. Read transcript_path from the Stop event JSON on stdin.
 #   2. Walk the JSONL backwards. Find the most recent user event whose
-#      `message.content` (string or text-block array) contains the literal
-#      `<onboarding-state ` marker — that is the injection signature.
+#      `message.content` contains the literal `<onboarding-state ` marker.
 #   3. If no such user event exists in this transcript, fail-open (exit 0).
-#   4. Otherwise, find the most recent assistant event after that injection
-#      event. Extract its tool-use names and the trailing text characters.
-#   5. If the tool-use list does NOT contain `render-component` AND the
-#      trailing prose does NOT end with `?`, the agent has drifted — log
-#      one `[precision-check] rule=onboarding-skill-drift` line to the
-#      admin-side log directory and exit 0.
+#   4. Otherwise, find the most recent assistant event after that injection.
+#      Count assistant turns since the injection so the log line carries a turn number.
+#   5. Evaluate the ends-with-prompt contract on the assistant text:
+#        - PASS when the last non-whitespace character is `?`, OR
+#        - PASS when the trailing block (last ~8 lines) contains a numbered
+#          or bulleted list item (`1. `, `2) `, `- `, `* `).
+#        - FAIL otherwise.
+#   6. Emit `[onboarding-skill-drift] turn=<N> contract=ends-with-prompt
+#      result=<pass|fail> reason=<reason>` on stderr.
 #
-# Exit 0 always — this hook is observation, not enforcement. The
-# precision-check ledger increments via the log line; no retry is forced.
-# Infrastructure failures (jq missing, transcript unreadable) also exit 0
-# so a hook bug never blocks the agent's response.
+# Exit 0 always: this hook is observation, not enforcement. Infrastructure
+# failures (jq missing, transcript unreadable) also exit 0 so a hook bug
+# never blocks the agent's response.
 
 set -uo pipefail
-LOG_TAG="[precision-check]"
+LOG_TAG="[onboarding-skill-drift]"
 
-# fail-open if jq is unavailable — the transcript shape demands JSON parse
 if ! command -v jq >/dev/null 2>&1; then
-  echo "$LOG_TAG rule=onboarding-skill-drift result=skip reason=jq-missing" >&2
+  echo "$LOG_TAG turn=0 contract=ends-with-prompt result=skip reason=jq-missing" >&2
   exit 0
 fi
 
 INPUT=$(cat 2>/dev/null || echo '{}')
 TRANSCRIPT=$(echo "$INPUT" | jq -r '.transcript_path // empty' 2>/dev/null)
 if [ -z "$TRANSCRIPT" ] || [ ! -f "$TRANSCRIPT" ]; then
-  echo "$LOG_TAG rule=onboarding-skill-drift result=skip reason=no-transcript" >&2
+  echo "$LOG_TAG turn=0 contract=ends-with-prompt result=skip reason=no-transcript" >&2
   exit 0
 fi
 
-# Locate the most recent injection signature in user events. The injection
-# block is prepended verbatim to the operator's input on the first /input
-# of an eligible session, so it appears as the leading bytes of a user
-# event's message text. Search backwards to find the last one in this
-# transcript window.
+# Locate the most recent <onboarding-state ...> injection in a user event.
+# The injection block is prepended verbatim to the operator's input on the
+# first /input of an eligible session, so it appears as the leading bytes of
+# the user event's message text. Search backwards for the last one.
 INJECTION_LINE=$(grep -n '<onboarding-state ' "$TRANSCRIPT" 2>/dev/null \
   | grep '"type":"user"' \
   | tail -n 1 \
   | cut -d: -f1)
 
 if [ -z "$INJECTION_LINE" ]; then
-  # No injection in this transcript window — nothing to enforce.
+  # No injection in this transcript window. Nothing to evaluate.
   exit 0
 fi
 
-# Slice the file from just after the injection line to the end; the
-# assistant's response sits in that suffix.
+# Slice the file from just after the injection line.
 TAIL=$(tail -n "+$((INJECTION_LINE + 1))" "$TRANSCRIPT" 2>/dev/null)
 
-# Last assistant message in the suffix.
-ASSISTANT=$(echo "$TAIL" \
-  | grep '"type":"assistant"' \
-  | tail -n 1)
+# Count assistant turns since the injection and pick the most recent.
+ASSISTANT_TURNS=$(echo "$TAIL" | grep -c '"type":"assistant"')
+ASSISTANT=$(echo "$TAIL" | grep '"type":"assistant"' | tail -n 1)
 
 if [ -z "$ASSISTANT" ]; then
-  echo "$LOG_TAG rule=onboarding-skill-drift result=skip reason=no-assistant-turn" >&2
+  echo "$LOG_TAG turn=0 contract=ends-with-prompt result=skip reason=no-assistant-turn" >&2
   exit 0
 fi
 
-# Tool-use names from the assistant event.
-TOOL_USES=$(echo "$ASSISTANT" | jq -r '
-  .message.content // []
-  | map(select(.type == "tool_use") | .name)
-  | join(",")
-' 2>/dev/null)
-
-# Concatenated text content (final character matters for the `?` check).
+# Concatenated text content (final character matters for the `?` check; final
+# block matters for the enumerated-list check).
 ASSISTANT_TEXT=$(echo "$ASSISTANT" | jq -r '
   .message.content // []
   | map(select(.type == "text") | .text)
-  | join(" ")
+  | join("\n")
 ' 2>/dev/null)
 
-HAS_RENDER_COMPONENT=0
-case "$TOOL_USES" in
-  *render-component*) HAS_RENDER_COMPONENT=1 ;;
-esac
-
-# Trim trailing whitespace and check the last non-whitespace character.
+# Trim trailing whitespace and find the last non-whitespace character.
 TRIMMED=$(echo "$ASSISTANT_TEXT" | sed -E 's/[[:space:]]+$//')
 LAST_CHAR=$(echo -n "$TRIMMED" | tail -c 1)
 
-if [ "$HAS_RENDER_COMPONENT" = "0" ] && [ "$LAST_CHAR" != "?" ]; then
-  # Drift detected. Sample is the first 80 chars of the assistant text so
-  # the log line tells the operator what shape of drift fired.
-  SAMPLE=$(echo "$TRIMMED" | head -c 80 | tr '\n' ' ')
-  echo "$LOG_TAG rule=onboarding-skill-drift result=block class=PRECISION sample='${SAMPLE}'" >&2
+# Evaluate the ends-with-prompt contract.
+ENDS_WITH_PROMPT=0
+ENDS_WITH_PROMPT_REASON="neither-question-nor-list"
+
+if [ "$LAST_CHAR" = "?" ]; then
+  ENDS_WITH_PROMPT=1
+  ENDS_WITH_PROMPT_REASON="trailing-question-mark"
+else
+  # Take the last 8 lines and look for a numbered/bulleted list item.
+  TRAIL_LINES=$(echo "$TRIMMED" | tail -n 8)
+  if echo "$TRAIL_LINES" | grep -qE '^[[:space:]]*([0-9]+[.)]|[-*])[[:space:]]+'; then
+    ENDS_WITH_PROMPT=1
+    ENDS_WITH_PROMPT_REASON="trailing-enumerated-list"
+  fi
+fi
+
+if [ "$ENDS_WITH_PROMPT" = "1" ]; then
+  echo "$LOG_TAG turn=$ASSISTANT_TURNS contract=ends-with-prompt result=pass reason=$ENDS_WITH_PROMPT_REASON" >&2
+else
+  SAMPLE=$(echo "$TRIMMED" | tail -c 120 | tr '\n' ' ' | sed 's/[[:space:]]\+/ /g')
+  echo "$LOG_TAG turn=$ASSISTANT_TURNS contract=ends-with-prompt result=fail reason=$ENDS_WITH_PROMPT_REASON sample='${SAMPLE}'" >&2
 fi
 
 exit 0

package/payload/platform/plugins/admin/mcp/dist/index.js

@@ -10,7 +10,6 @@ import { execFileSync } from "node:child_process";
 import { appendFileSync, cpSync, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { writeKey, validateKey, hasKey, keyFilePath, deleteKey } from "../../../../lib/anthropic-key/dist/index.js";
 import { writeAdminEntry, removeAdminFromAccount } from "../../../../lib/admins-write/dist/index.js";
-import { isPersistentComponent } from "../../../../lib/persistent-components/dist/index.js";
 import { deviceUrlBlock } from "../../../../lib/device-url/dist/index.js";
 import { substituteBrandPlaceholders } from "../../../../lib/brand-templating/dist/index.js";
 import { resolveEntitlement } from "../../../../lib/entitlement/dist/index.js";
@@ -507,7 +506,7 @@ const PLUGIN_DISPLAY = {
     waitlist: { value: "waitlist", label: "waitlist", description: "Waitlist lifecycle — extract sign-ups, review, schedule automation." },
     replicate: { value: "replicate", label: "replicate", description: "Image generation — photorealistic, design, and fast draft images via Replicate. Enhances: content-producer, research-assistant" },
 };
-server.tool("onboarding-plugin-options", "Return the fully-assembled multi-select options array for onboarding Step 1. Classification (core/recommended/available) is derived from brand.json — the agent renders the result directly via render-component without further transformation.", {}, async () => {
+server.tool("onboarding-plugin-options", "Return the fully-assembled plugin options array for onboarding Step 1. Classification (core/recommended/available) is derived from brand.json — the agent presents the entries to the operator as a numbered list in plain chat without further transformation.", {}, async () => {
     try {
         const brandPath = resolve(PLATFORM_ROOT, "config", "brand.json");
         if (!existsSync(brandPath)) {
@@ -1769,50 +1768,15 @@ eagerTool(server, "skill-load", "Load a plugin skill's SKILL.md body by skill na
         };
     }
 });
-// Task 940 — `"rendered"` is a sentinel, not a persistence ack. The platform
-// UI's stream-parser intercepts this tool_use upstream of the SDK reply
-// (platform/ui/app/lib/claude-agent/stream-parser.ts:362) and emits a typed
-// `component` event that admin-agent.ts's persistMessage flushes to Neo4j as
-// a sibling :Component node.
-//
-// Task 942 — render-component is also the *server commitment surface* for
-// PERSISTENT_COMPONENTS (action-list, document-editor, rich-content-editor,
-// grid-editor). The actual file write + :KnowledgeDocument projection lives
-// in the admin server process (stream-parser path) because the SDK delivers
-// `tool_use.input` to the UI in the assistant message but the MCP handler's
-// return reaches only the agent — there is no path back to persistMessage
-// from here. This handler emits a one-line observability marker per
-// persistence-eligible call so operators can grep for the commitment, and
-// returns richer JSON so the doctrine grep
-// `render-component.*"rendered"` resolves to a persistence-aware handler
-// rather than a bare stub.
-eagerTool(server, "render-component", "Render a pre-built UI component inline in the conversation. " +
-    "Call this instead of describing a UI — the component handles input collection. " +
-    "Wait for the user's response before continuing.", {
-    name: z.string().describe("Component name from the UI suite (e.g. single-select, confirm, info-card, form, progress)"),
-    data: z.record(z.string(), z.unknown()),
-}, async ({ name, data }) => {
-    if (isPersistentComponent(name)) {
-        // Persistence-eligible: log the commitment so the live + audit grep
-        // (`[render-component-persist]`) can correlate the MCP call against
-        // the downstream :KnowledgeDocument MERGE. Byte counts come from
-        // data.html (preferred) or data.content; both being absent is a
-        // legitimate render of an empty editor and the projection is skipped
-        // server-side.
-        const html = typeof data?.html === "string" ? data.html : "";
-        const content = typeof data?.content === "string" ? data.content : "";
-        const bytes = html.length > 0 ? html.length : content.length;
-        const mimeType = html.length > 0 ? "text/html" : (content.length > 0 ? "text/markdown" : "");
-        console.error(`[render-component-persist] componentName=${name} bytes=${bytes} mimeType=${mimeType || "none"}`);
-        return {
-            content: [{
-                    type: "text",
-                    text: JSON.stringify({ rendered: true, name, persistent: true, bytes, mimeType }),
-                }],
-        };
-    }
-    return { content: [{ type: "text", text: "rendered" }] };
-});
+// Task 066 — the inline UI-component tool is gone from the admin surface
+// on native Claude Code. The PTY runtime has no host bridge for the UI
+// primitives the legacy tool wrapped; calling it logged a "rendered"
+// sentinel that read like a successful render to the agent while the
+// chat surface saw nothing. Admin flows now use plain markdown for
+// reviewable artefacts (`skills/file-presentation/SKILL.md`) and
+// `file-attach` for downloadable artefacts. The :Component / :KnowledgeDocument
+// persistence pipeline is preserved for historical conversations that
+// already carry the rows; no new conversations write to it.
 eagerTool(server, "session-reset", "Reset the current session. Compacts conversation history to memory, clears the visible conversation, " +
     "and starts a fresh session with a new greeting. Call when the user asks to start a new session, " +
     "clear the conversation, or start fresh.", {}, async () => ({ content: [{ type: "text", text: "reset" }] }));
@@ -2984,10 +2948,11 @@ server.tool("premium-deliver", "Deliver a purchased premium plugin. Copies plugi
 // file-attach — copy a generated file into the attachment store for download
 // ---------------------------------------------------------------------------
 eagerTool(server, "file-attach", "Attach a file from the account directory for delivery to the user. " +
-    "Copies the file into the attachment store and returns metadata for rendering " +
-    "a download component. The file must be within the account directory tree. " +
-    "After calling this tool, call render-component with name 'file-attachment' " +
-    "and pass the returned metadata as data.", {
+    "Copies the file into the attachment store and returns metadata the chat " +
+    "surface uses to present the download. The file must be within the account " +
+    "directory tree. The returned metadata is the operator-visible record of the " +
+    "attachment; quote it back to the user in plain text so they have the filename " +
+    "and size on screen.", {
     filePath: z.string().describe("Absolute path to the file to attach"),
 }, async ({ filePath }) => {
     const TAG = "[file-attach]";