@rubytech/create-realagent-code 0.1.582 → 0.1.584

package/payload/platform/plugins/contacts/mcp/dist/tools/contact-lookup.js

@@ -10,11 +10,16 @@ export function normalizeNameQuery(name) {
     return name.trim().replace(/\s+/g, " ");
 }
 export async function contactLookup(params) {
-    const { email, telephone, name, accountId, limit = 10 } = params;
+    const { email, telephone, telegramUserId, name, accountId, limit = 10 } = params;
     const session = getSession();
     try {
         let query;
         let queryParams;
+        // Set ONLY by the branch below that actually matches on the id. A caller
+        // that passes both an email and a telegramUserId takes the email branch, and
+        // logging a hit for a key the query never touched would report the
+        // telegramUserId path as working on the day it stopped.
+        let matchedOnTelegramUserId = false;
         const trashFilter = notTrashed("p");
         const prefFilter = `${notTrashed("pref")} AND coalesce(pref.notApplicable, false) = false`;
         if (email) {
@@ -41,6 +46,19 @@ export async function contactLookup(params) {
       `;
             queryParams = { telephone: telephone.trim(), accountId, limit: neo4j.int(limit) };
         }
+        else if (telegramUserId !== undefined) {
+            query = `
+        MATCH (p:Person {accountId: $accountId})
+        WHERE p.telegramUserId = $telegramUserId AND ${trashFilter}
+        WITH p, elementId(p) AS nodeId
+        LIMIT $limit
+        OPTIONAL MATCH (p)-[:HAS_PREFERENCE]->(pref:Preference)
+        WHERE ${prefFilter}
+        RETURN p, nodeId, collect(pref) AS prefs
+      `;
+            queryParams = { telegramUserId, accountId, limit: neo4j.int(limit) };
+            matchedOnTelegramUserId = true;
+        }
         else if (name) {
             query = `
         MATCH (p:Person {accountId: $accountId})
@@ -68,6 +86,15 @@ export async function contactLookup(params) {
             queryParams = { accountId, limit: neo4j.int(limit) };
         }
         const result = await session.run(query, queryParams);
+        // Task 2625 — a write with no read is the failure this line catches: an id
+        // stored on every Telegram contact and never matched means the lookup branch
+        // is missing or the property name drifted, and neither of those throws.
+        // Emitted only when the query actually matched on the id, so neither a
+        // lookup by email nor one that merely carried the field can dilute the hit
+        // rate this is read as.
+        if (matchedOnTelegramUserId) {
+            console.error(`[contacts] op=lookup key=telegramUserId hit=${result.records.length > 0}`);
+        }
         return result.records.map((record) => {
             const p = record.get("p").properties;
             const prefNodes = record.get("prefs") ?? [];
@@ -84,6 +111,7 @@ export async function contactLookup(params) {
                 familyName: p.familyName,
                 email: p.email,
                 telephone: p.telephone,
+                telegramUserId: p.telegramUserId,
                 jobTitle: p.jobTitle,
                 source: p.source,
                 status: p.status,

package/payload/platform/plugins/contacts/mcp/dist/tools/contact-lookup.js.map

@@ -1 +1 @@
-{"version":3,"file":"contact-lookup.js","sourceRoot":"","sources":["../../src/tools/contact-lookup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,cAAc,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,8CAA8C,CAAC;AAU1E,yEAAyE;AACzE,gFAAgF;AAChF,0EAA0E;AAC1E,8EAA8E;AAC9E,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAwBD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAA2B;IAE3B,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC;IAEjE,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAE7B,IAAI,CAAC;QACH,IAAI,KAAa,CAAC;QAClB,IAAI,WAAoC,CAAC;QAEzC,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,kDAAkD,CAAC;QAC3F,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,GAAG;;qCAEuB,WAAW;;;;gBAIhC,UAAU;;OAEnB,CAAC;YACF,WAAW,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACnF,CAAC;aAAM,IAAI,SAAS,EAAE,CAAC;YACrB,KAAK,GAAG;;6CAE+B,WAAW;;;;gBAIxC,UAAU;;OAEnB,CAAC;YACF,WAAW,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpF,CAAC;aAAM,IAAI,IAAI,EAAE,CAAC;YAChB,KAAK,GAAG;;;iBAGG,WAAW;;;;gBAIZ,UAAU;;OAEnB,CAAC;YACF,WAAW,GAAG,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvF,CAAC;aAAM,CAAC;YACN,KAAK,GAAG;;gBAEE,WAAW;;;;;gBAKX,UAAU;;OAEnB,CAAC;YACF,WAAW,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAErD,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACnC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;YACrC,MAAM,SAAS,GAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAoD,IAAI,EAAE,CAAC;YAChG,MAAM,WAAW,GAAuB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5D,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,QAAkB;gBACzC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,GAAa;gBAC/B,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,KAAe;gBACnC,UAAU,EAAG,CAAC,CAAC,UAAU,CAAC,UAA4B,IAAI,IAAI;gBAC9D,UAAU,EAAG,CAAC,CAAC,UAAU,CAAC,UAA4B,IAAI,IAAI;aAC/D,CAAC,CAAC,CAAC;YACJ,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAW;gBACtC,SAAS,EAAE,CAAC,CAAC,SAAmB;gBAChC,UAAU,EAAE,CAAC,CAAC,UAAgC;gBAC9C,KAAK,EAAE,CAAC,CAAC,KAA2B;gBACpC,SAAS,EAAE,CAAC,CAAC,SAA+B;gBAC5C,QAAQ,EAAE,CAAC,CAAC,QAA8B;gBAC1C,MAAM,EAAE,CAAC,CAAC,MAAgB;gBAC1B,MAAM,EAAE,CAAC,CAAC,MAAgB;gBAC1B,SAAS,EAAE,CAAC,CAAC,SAAmB;gBAChC,UAAU,EAAE,CAA4B;gBACxC,WAAW;aACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,iFAAiF;AACjF,+DAA+D;AAC/D,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU;IAC3D,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW;CAC7C,CAAC,CAAC;AAEH,MAAM,UAAU,oBAAoB,CAAC,OAAwB;IAC3D,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK;YAC5B,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG;YAChB,CAAC,CAAC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG;gBACpB,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,cAAc,MAAM,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC;QAC1I,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CACrD,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CACT,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC;YAClC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS,CAAC,CAC7E,CAAC;QACF,MAAM,SAAS,GACb,WAAW,CAAC,MAAM,GAAG,CAAC;YACpB,CAAC,CAAC,oBAAoB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAClF,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,SAAS,GACb,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,CAAC,qBAAqB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAChF,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,GAAG,IAAI,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;IACrD,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}
+{"version":3,"file":"contact-lookup.js","sourceRoot":"","sources":["../../src/tools/contact-lookup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,cAAc,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,8CAA8C,CAAC;AAc1E,yEAAyE;AACzE,gFAAgF;AAChF,0EAA0E;AAC1E,8EAA8E;AAC9E,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAyBD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAA2B;IAE3B,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC;IAEjF,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAE7B,IAAI,CAAC;QACH,IAAI,KAAa,CAAC;QAClB,IAAI,WAAoC,CAAC;QACzC,yEAAyE;QACzE,6EAA6E;QAC7E,mEAAmE;QACnE,wDAAwD;QACxD,IAAI,uBAAuB,GAAG,KAAK,CAAC;QAEpC,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,kDAAkD,CAAC;QAC3F,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,GAAG;;qCAEuB,WAAW;;;;gBAIhC,UAAU;;OAEnB,CAAC;YACF,WAAW,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACnF,CAAC;aAAM,IAAI,SAAS,EAAE,CAAC;YACrB,KAAK,GAAG;;6CAE+B,WAAW;;;;gBAIxC,UAAU;;OAEnB,CAAC;YACF,WAAW,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpF,CAAC;aAAM,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACxC,KAAK,GAAG;;uDAEyC,WAAW;;;;gBAIlD,UAAU;;OAEnB,CAAC;YACF,WAAW,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,uBAAuB,GAAG,IAAI,CAAC;QACjC,CAAC;aAAM,IAAI,IAAI,EAAE,CAAC;YAChB,KAAK,GAAG;;;iBAGG,WAAW;;;;gBAIZ,UAAU;;OAEnB,CAAC;YACF,WAAW,GAAG,EAAE,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvF,CAAC;aAAM,CAAC;YACN,KAAK,GAAG;;gBAEE,WAAW;;;;;gBAKX,UAAU;;OAEnB,CAAC;YACF,WAAW,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAErD,2EAA2E;QAC3E,6EAA6E;QAC7E,wEAAwE;QACxE,uEAAuE;QACvE,2EAA2E;QAC3E,wBAAwB;QACxB,IAAI,uBAAuB,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,+CAA+C,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;QAED,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACnC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;YACrC,MAAM,SAAS,GAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAoD,IAAI,EAAE,CAAC;YAChG,MAAM,WAAW,GAAuB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5D,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,QAAkB;gBACzC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,GAAa;gBAC/B,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,KAAe;gBACnC,UAAU,EAAG,CAAC,CAAC,UAAU,CAAC,UAA4B,IAAI,IAAI;gBAC9D,UAAU,EAAG,CAAC,CAAC,UAAU,CAAC,UAA4B,IAAI,IAAI;aAC/D,CAAC,CAAC,CAAC;YACJ,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAW;gBACtC,SAAS,EAAE,CAAC,CAAC,SAAmB;gBAChC,UAAU,EAAE,CAAC,CAAC,UAAgC;gBAC9C,KAAK,EAAE,CAAC,CAAC,KAA2B;gBACpC,SAAS,EAAE,CAAC,CAAC,SAA+B;gBAC5C,cAAc,EAAE,CAAC,CAAC,cAAoC;gBACtD,QAAQ,EAAE,CAAC,CAAC,QAA8B;gBAC1C,MAAM,EAAE,CAAC,CAAC,MAAgB;gBAC1B,MAAM,EAAE,CAAC,CAAC,MAAgB;gBAC1B,SAAS,EAAE,CAAC,CAAC,SAAmB;gBAChC,UAAU,EAAE,CAA4B;gBACxC,WAAW;aACZ,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,iFAAiF;AACjF,+DAA+D;AAC/D,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU;IAC3D,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW;CAC7C,CAAC,CAAC;AAEH,MAAM,UAAU,oBAAoB,CAAC,OAAwB;IAC3D,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK;YAC5B,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG;YAChB,CAAC,CAAC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG;gBACpB,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,cAAc,MAAM,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC;QAC1I,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CACrD,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CACT,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC;YAClC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS,CAAC,CAC7E,CAAC;QACF,MAAM,SAAS,GACb,WAAW,CAAC,MAAM,GAAG,CAAC;YACpB,CAAC,CAAC,oBAAoB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAClF,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,SAAS,GACb,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,CAAC,qBAAqB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAChF,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,GAAG,IAAI,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;IACrD,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/payload/platform/plugins/contacts/mcp/vitest.config.ts

@@ -0,0 +1,14 @@
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    environment: "node",
+    // Scoped to src, matching plugins/telegram/mcp: without it vitest also
+    // collects dist/__tests__/*.test.js, which `tsc -p` emits because this
+    // plugin's tsconfig includes src/__tests__. Every test would then run twice,
+    // and a stale compiled copy can pass while the source it was built from
+    // fails.
+    include: ["src/**/__tests__/**/*.test.ts"],
+    testTimeout: 10_000,
+  },
+});

package/payload/platform/plugins/docs/references/admin-ui.md

@@ -805,17 +805,31 @@ another account's directory, for every session including a house-scoped one, and
 the Bash snapshot pair watches the account's own layout. All of them live in the
 account's `.claude/settings.json`, and a hook that is not registered there runs
 never and emits nothing, so the silence reads identical to a clean account. The
-same pass therefore checks the five registrations per account and reports any
+same pass therefore checks the six registrations per account and reports any
 absence as
 `[fs-reconcile] op=hook-registration account=<id8> missing=<matcher>:<hook>,…`,
 with `hooks-missing=0 hooks-unaudited=0` on the summary line as the per-cycle
 proof the fence is wired everywhere. An account whose settings cannot be read
 counts as unaudited rather than clean, so an install where none of them can be
-read never reports itself as fenced. The refusal itself is agent-facing and lands
-in the session's own child log as
+read never reports itself as fenced. The sixth row is the per-turn filing
+directive, whose template entry carries no matcher at all, so that row is
+reported by its event as `UserPromptSubmit:preference-consult-directive.sh`. The
+refusal itself is agent-facing and lands in the session's own child log as
 `[fs-guard] blocked path=<abs> reason=cross-account target=<id8>`, not in
 `server.log`.
 
+The same pass also emits
+`[fs-reconcile] op=entity-subdirs account=<id8> entities=<n> archive=<m> stray=<s>`
+for every account on every cycle, not only on drift: `archive/` is the one folder
+permitted under an entity folder, a write that wrongly succeeds emits nothing,
+and `stray` above zero is the only signature an over-wide rule leaves.
+`entities` is on the same line because `stray=0` cannot otherwise be told from a
+walker that read nothing. The `file-write` and `file-edit` tools carry the same
+five-reason fence as the native route; their refusals log the same
+`[fs-guard] blocked` line into `mcp-filesystem-<sessionId>.log`, the plugin
+server's own tee sink, because `lib/mcp-spawn-tee` mirrors only its
+`[mcp-helper]` lifecycle lines into `server.log`.
+
 ### Graph
 
 | Mount | Purpose |

package/payload/platform/plugins/docs/references/channel-wake-and-prompt.md

@@ -111,6 +111,21 @@ for that door alone.
 census prints every cycle, including when the counts agree: an absent line means
 the census stopped, never that delivery is healthy.
 
+## Which channels can start a conversation
+
+Answering an inbound and starting a new conversation are different powers, and
+only the first is available on every door.
+
+| Channel | Can start a conversation with | Cannot |
+|---|---|---|
+| WhatsApp | a registered admin phone, a registered account manager, or a registered party, through `whatsapp-send-admin` | any other number. The cold-send tools were removed after one such send tripped WhatsApp's anti-automation enforcement and restricted the account, and no setting re-enables them. |
+| Telegram | any chat that has already messaged the bot | a chat that has not. Telegram itself refuses it. |
+| Email | any address, once a mailbox is attached | nothing, once a mailbox is attached |
+| Admin webchat | nobody. It is a browser chat the operator opens | anything outbound |
+
+The admin identity carries the same rule under its `## Channel reality` section,
+so an agent that has loaded no plugin skill still knows it. The two must agree.
+
 ## Which door an answer reaches
 
 The door the message arrived on, and no other. A question asked on WhatsApp is

package/payload/platform/plugins/docs/references/telegram-guide.md

@@ -10,6 +10,24 @@ The Telegram plugin connects {{productName}} to a Telegram bot. Once set up, you
 
 ## Setup
 
+### Adding a second bot: no BotFather at all
+
+Once you have one working admin bot, you never need BotFather again to add another. Tell
+{{productName}}: "create a new Telegram bot." It sends you a single button. Tap it, give the bot a
+name, and Telegram hands the bot straight to {{productName}} — it stores the credentials, locks the
+bot so only you can reach it, and connects it. No token is shown to anyone and nothing is copied or
+pasted.
+
+One thing has to be switched on first, once per managing bot: open @BotFather, go to its Mini App,
+select your admin bot and turn on management of other bots. {{productName}} checks this before
+sending the button and tells you if it is missing, so you never end up with a button that does
+nothing.
+
+A bot made this way arrives switched off: it answers nobody until you tell {{productName}} which
+assistant should run on it.
+
+Your **first** bot still comes from BotFather, below, and so does any bot you already own.
+
 ### Step 1: Create a Telegram bot
 
 1. Open Telegram and search for `@BotFather`
@@ -21,11 +39,59 @@ The Telegram plugin connects {{productName}} to a Telegram bot. Once set up, you
 
 Tell {{productName}}: "Set up Telegram" or "Configure the Telegram bot." Setup runs entirely in the admin chat — there is no settings page.
 
-{{productName}} asks for your bot token, then asks whether this is an **admin bot** (only your numeric Telegram IDs may message it) or a **public bot** (customer-facing, with a DM policy). It verifies the token, registers the bot's webhook on your brand's edge, stores the token under your brand's config (never in a shared system directory), and — for a public bot — sets the agent that will answer. The bot is now connected.
+{{productName}} asks for your bot token, then asks what kind of bot this is:
+
+- an **admin bot** — only your numeric Telegram IDs may message it, and it answers as your admin agent;
+- a **public bot** — customer-facing, with a DM policy, answering as one of your account's agents;
+- a **specialist bot** — bound to one of your own specialists, so messaging it runs that specialist with its own instructions and its own tools rather than your admin agent. You name the specialist and the numeric IDs allowed to reach it. Both are required: there is no open setting for this kind, because the specialist has real tools rather than the reply-only surface a public bot gets.
+
+It verifies the token, registers the bot's webhook on your brand's edge, stores the token under your brand's config (never in a shared system directory), and sets whichever agent or specialist will answer. The bot is now connected.
 
 ### Step 3: Start the bot
 
-In Telegram, open your bot and send `/start`, then a message. {{productName}} receives it and replies in the same chat. Admin-bot messages from your registered IDs reach the admin agent; public-bot messages reach the public agent you selected.
+In Telegram, open your bot and send `/start`, then a message. {{productName}} receives it and replies in the same chat. Admin-bot messages from your registered IDs reach the admin agent; public-bot messages reach the public agent you selected; specialist-bot messages reach that specialist, in a conversation that stays the same one from one day to the next.
+
+### Step 4 (optional): Use the bot in a group
+
+Only a **public** bot can work in a group. An admin bot added to a group answers nobody, on purpose: it runs your own agent, with your own standing rules and tools, and a group is a room other people read.
+
+Three things have to be true:
+
+1. **Group privacy is on.** In BotFather: `/mybots`, pick the bot, Bot Settings, Group Privacy, Turn on. With privacy on the bot sees only messages that name it — a command, an @mention, or a reply to something it said. It cannot read the rest of the conversation. {{productName}} refuses to connect a bot with privacy off and tells you this step.
+2. **The bot is in the group.** A group admin adds it, the same way any member is added.
+3. **You allowlist the group.** Tell {{productName}}: "Let the bot answer in this group," and give it the group's chat ID (see Getting a Chat ID below). Until you do, the bot stays silent there.
+
+Once a group is allowlisted, **anyone in that group can talk to the bot** — not only the people on your DM allowlist. Allowlisting a room is a decision about the room, not about its members.
+
+Everyone in the group shares one conversation, and each message tells {{productName}} who sent it. If the group uses topics, an answer comes back inside the topic the question was asked in.
+
+### Step 5 (optional): Use the bot in a channel
+
+A channel is a broadcast: a post goes to every subscriber, and it cannot be taken back. So this one
+is worth reading twice before you set it up.
+
+Only a **public** bot can work in a channel, for the same reason only a public bot can work in a
+group.
+
+Two things have to be true:
+
+1. **The bot is a channel admin with permission to post.** A channel admin adds it and ticks "Post
+   Messages". Without that tick the bot can still read the channel but every attempt to post fails
+   quietly.
+2. **You allowlist the channel.** Tell {{productName}}: "Let the bot use this channel," and give it
+   the channel's chat ID. Until you do, the bot neither reads that channel nor posts to it.
+
+Unlike a group, allowlisting a channel decides **both directions at once**. Once a channel is on the
+list, {{productName}} can post to it. A channel that is not on the list is refused before anything
+is sent, and you are told which channel and why.
+
+Posts in a channel have no author — Telegram does not say who wrote one — so {{productName}} sees
+the post as coming from the channel itself, by name.
+
+**Comments.** If your channel has a linked discussion group, people can comment under each post.
+Allowlist that group too (Step 4) and {{productName}} can read the comments and answer them under
+the right post. Somebody who comments anonymously shows up as the group rather than as a person,
+because that is all Telegram sends.
 
 ## Sending Messages via {{productName}}
 
@@ -37,13 +103,32 @@ Once connected, tell {{productName}} to send messages on your behalf:
 
 {{productName}} needs a chat ID or username to target a specific person or group. For groups, you'll need to add the bot to the group first.
 
+## Who your bot can message
+
+Telegram does not let a bot start a conversation. Anyone who has messaged one of your bots can be
+messaged back at any time; anyone who never has must write to the bot first. That is Telegram's own
+rule and nothing here can get around it.
+
+Ask {{productName}}: "Who can you reach on Telegram?" It lists every bot you have registered, the
+people who have messaged each one and when they last wrote, and anyone on a bot's admin list who has
+never messaged. Being on the admin list is not the same as having opened the chat, so those people
+are listed separately as not reachable yet.
+
+That list is built from the messages already stored on this machine. Every message that arrives is
+written down, and both the answer to "who can you reach" and the hourly self-check read that same
+store, so what {{productName}} tells you and what actually arrived cannot drift apart.
+
+If {{productName}} ever says a Telegram message cannot be sent, ask it to check that list first.
+
 ## Getting a Chat ID
 
 To message a specific person or group, {{productName}} needs their chat ID. The easiest way:
 
 1. Have the person (or yourself) send any message to your bot
-2. Ask {{productName}}: "What chat IDs have messaged the bot recently?"
-3. {{productName}} will look up the message history and show you the IDs
+2. Ask {{productName}}: "Who can you reach on Telegram?"
+3. {{productName}} will show you every chat that has messaged, with its ID
+
+A group's ID is a long negative number, like `-1001234567890`. To find it, @mention the bot once in the group and then ask {{productName}} the same question — the group will be in the list even though the bot is not yet allowed to answer there.
 
 ## Message History
 
@@ -55,6 +140,10 @@ Ask {{productName}}: "What messages has the bot received?" or "Show recent Teleg
 
 **Can't send to a group:** The bot must be a member of the group. Add it via the group settings in Telegram, then try again.
 
+**"That channel isn't on the allowlist":** {{productName}} refuses to post to a channel or group you haven't allowlisted, and it refuses before anything is sent. Give it the chat ID and say you want the bot to use it. This applies to public bots only — an admin bot cannot post to any channel or group at all.
+
+**The bot reads a channel but can't post to it:** It is a channel admin without the "Post Messages" permission. Turn that on in the channel's admin settings.
+
 **Messages not arriving:** Make sure the bot hasn't been blocked. Try sending `/start` to the bot directly.
 
 ## Sending from the dashboard
@@ -136,6 +225,26 @@ One limit, and it is Telegram's. A message sent on behalf of a business account
 that opens a small web page, so a checklist and a job-sheet button arrive as two messages rather than
 one.
 
+## Your customers' messages
+
+Connecting the bot to your business account does more than unlock checklists. From that moment,
+messages your customers send to the business account reach {{productName}} too, and it can answer
+them in the customer's own chat.
+
+Those conversations are kept entirely separate from your own. A customer talking to your business
+account never lands in the chat you use with {{productName}}, even if it is somebody who also
+messages you directly, and {{productName}} answers a customer as your public assistant rather than as
+your personal one. Your own notes and standing instructions are never visible in a customer's
+conversation.
+
+When a customer edits a message, the message you are looking at changes to match. When they delete
+one, it stays in view but crossed out and marked deleted, so you can still see what was withdrawn.
+
+**The one thing worth knowing: Telegram gives you 24 hours.** You may reply to a customer only within
+24 hours of their last message. After that Telegram closes the door and there is no way to reopen it
+except for the customer to write again. {{productName}} will refuse a late reply and tell you the
+window has closed, rather than letting it fail silently.
+
 Five of the 185 are deliberately refused, because they would break your own
 inbound messages: setting or deleting the webhook by hand, polling Telegram for
 updates instead, and the two that move the bot off Telegram's cloud servers.

package/payload/platform/plugins/filesystem/PLUGIN.md

@@ -71,8 +71,8 @@ Every path is confined to the resolved account directory. A path that escapes it
 ## Tools
 
 - `file-read` — Read a UTF-8 file. Args: `path`, optional `targetAccountId`.
-- `file-write` — Create or overwrite a UTF-8 file, making parent directories. Args: `path`, `content`, optional `targetAccountId`.
-- `file-edit` — Replace one unique occurrence of `oldString` with `newString`. Fails if `oldString` is missing or not unique. Args: `path`, `oldString`, `newString`, optional `targetAccountId`.
+- `file-write` — Create or overwrite a UTF-8 file, making parent directories. Args: `path`, `content`, optional `targetAccountId`. Refused before anything is created when the path breaks the target account's own `SCHEMA.md`: an unlisted top-level entry, one of the account's machinery entries, a plugin-declared file, a path deeper than the bucket allows, or a name outside `[a-z0-9-]`. The five reasons are the ones the native write guard gives, and each refusal logs `[fs-guard] blocked path=<rel> reason=<r>` to this server's own `mcp-filesystem-<sessionId>.log`. An account with no `SCHEMA.md`, and the shared folder (which is not an account), are exempt.
+- `file-edit` — Replace one unique occurrence of `oldString` with `newString`. Fails if `oldString` is missing or not unique. Args: `path`, `oldString`, `newString`, optional `targetAccountId`. Carries the same five schema refusals as `file-write`, so a file already sitting at a path the schema forbids is not editable here either.
 - `file-list` — List a directory's entries with their type. Args: optional `path` (defaults to the account root), optional `targetAccountId`.
 - `file-glob` — List files matching a glob (`**`, `*`, `?`). Args: `pattern`, optional `targetAccountId`.
 - `file-grep` — Search file contents for a JavaScript regular expression, returning `file:line:preview`. Args: `pattern`, optional `path`, optional `targetAccountId`.

package/payload/platform/plugins/filesystem/mcp/dist/lib/__tests__/account-schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=account-schema.test.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/lib/__tests__/account-schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-schema.test.d.ts","sourceRoot":"","sources":["../../../src/lib/__tests__/account-schema.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/filesystem/mcp/dist/lib/__tests__/account-schema.test.js

@@ -0,0 +1,108 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { mkdtempSync, writeFileSync, rmSync, readFileSync, realpathSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { checkAccountSchema } from "../account-schema.js";
+let root;
+// Six levels up from src/lib/__tests__/ reaches platform/. Counted from this
+// file's own URL, not from cwd, because vitest runs from the package dir.
+const TEMPLATE = fileURLToPath(new URL("../../../../../../templates/account-schema/SCHEMA.md", import.meta.url));
+beforeEach(() => {
+    root = mkdtempSync(join(tmpdir(), "acct-schema-"));
+});
+afterEach(() => rmSync(root, { recursive: true, force: true }));
+const seed = () => writeFileSync(join(root, "SCHEMA.md"), readFileSync(TEMPLATE, "utf-8"));
+describe("checkAccountSchema — fail-open", () => {
+    it("allows every path when SCHEMA.md is absent", () => {
+        expect(checkAccountSchema(root, "nonsense/x.md")).toBeNull();
+        expect(checkAccountSchema(root, "projects/acme/insights/x.md")).toBeNull();
+    });
+    it("allows every path when the allowed fence is empty", () => {
+        writeFileSync(join(root, "SCHEMA.md"), "# empty\n\n```allowed-top-level\n```\n");
+        expect(checkAccountSchema(root, "nonsense/x.md")).toBeNull();
+    });
+});
+describe("checkAccountSchema — the five refusals", () => {
+    beforeEach(seed);
+    it("refuses a first segment outside the allowed set", () => {
+        expect(checkAccountSchema(root, "nonsense/x.md")?.reason).toBe("top-level");
+    });
+    it("refuses the account's own machinery and quotes the fence reason", () => {
+        const r = checkAccountSchema(root, "secrets/x");
+        expect(r?.reason).toBe("account-machinery");
+        expect(r?.message).toContain("provisioned credentials");
+    });
+    it("refuses an over-deep entity path", () => {
+        expect(checkAccountSchema(root, "projects/acme-corp/insights/x.md")?.reason).toBe("over-deep");
+    });
+    it("refuses a bad name", () => {
+        expect(checkAccountSchema(root, "projects/ACME Corp/x.md")?.reason).toBe("bad-name");
+    });
+    it("allows a flat entity file and an archived one", () => {
+        expect(checkAccountSchema(root, "projects/acme-corp/quote.pdf")).toBeNull();
+        expect(checkAccountSchema(root, "projects/acme-corp/archive/quote-v1.pdf")).toBeNull();
+        expect(checkAccountSchema(root, "contacts/jane-doe/archive/profile.pdf")).toBeNull();
+    });
+    it("refuses a second folder beneath archive", () => {
+        expect(checkAccountSchema(root, "projects/acme-corp/archive/old/quote.pdf")?.reason).toBe("over-deep");
+    });
+    it("refuses any other entity subfolder at the same depth", () => {
+        expect(checkAccountSchema(root, "projects/acme-corp/invoices/quote.pdf")?.reason).toBe("over-deep");
+    });
+    it("keeps documents at one folder deep", () => {
+        expect(checkAccountSchema(root, "documents/site-survey/notes.md")).toBeNull();
+        expect(checkAccountSchema(root, "documents/a/b/notes.md")?.reason).toBe("over-deep");
+    });
+    it("leaves tool-owned buckets unbounded", () => {
+        expect(checkAccountSchema(root, "output/deep/nested/x.png")).toBeNull();
+    });
+    // The hook resolves its target before counting segments, so a dot segment or a
+    // doubled slash never inflates the depth there. Counting raw segments here
+    // would refuse a legitimate flat write.
+    it("normalises a dot segment rather than counting it as depth", () => {
+        expect(checkAccountSchema(root, "projects/acme-corp/./quote.pdf")).toBeNull();
+        expect(checkAccountSchema(root, "./projects/acme-corp/quote.pdf")).toBeNull();
+    });
+    // An absolute path inside the account passes containedPath on a real install,
+    // where the accounts root is not a symlink, and reaches this check. Splitting
+    // it raw makes the first segment a filesystem root name and refuses a
+    // legitimate write with a message naming 'Users'. The absolute path is built
+    // from the REAL root because that is what containedPath roots the write at,
+    // and os.tmpdir() is a symlink on macOS.
+    it("judges an absolute in-account path by its in-account portion", () => {
+        const real = realpathSync(root);
+        expect(checkAccountSchema(root, join(real, "projects/acme-corp/quote.pdf"))).toBeNull();
+        expect(checkAccountSchema(root, join(real, "projects/acme-corp/insights/x.md"))?.reason).toBe("over-deep");
+    });
+    // A path that resolves outside the account is containedPath's refusal, not
+    // this module's; judging it here would produce a second, differently-worded
+    // verdict for one condition.
+    it("leaves an escaping path to the containment check", () => {
+        expect(checkAccountSchema(root, "../elsewhere/x.md")).toBeNull();
+    });
+    it("emits one [fs-guard] blocked line per refusal", () => {
+        const seen = [];
+        const orig = process.stderr.write;
+        process.stderr.write = ((s) => {
+            seen.push(String(s));
+            return true;
+        });
+        try {
+            checkAccountSchema(root, "nonsense/x.md");
+        }
+        finally {
+            process.stderr.write = orig;
+        }
+        expect(seen.join("")).toContain("[fs-guard] blocked path=nonsense/x.md reason=top-level");
+    });
+});
+describe("checkAccountSchema — declared files", () => {
+    it("refuses a first segment named in the declared-files fence", () => {
+        writeFileSync(join(root, "SCHEMA.md"), "```allowed-top-level\nprojects\nportal.json\n```\n\n```declared-files\nportal.json\tdata-portal\n```\n");
+        const r = checkAccountSchema(root, "portal.json");
+        expect(r?.reason).toBe("declared-file");
+        expect(r?.message).toContain("data-portal");
+    });
+});
+//# sourceMappingURL=account-schema.test.js.map

package/payload/platform/plugins/filesystem/mcp/dist/lib/__tests__/account-schema.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-schema.test.js","sourceRoot":"","sources":["../../../src/lib/__tests__/account-schema.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,IAAI,IAAY,CAAC;AACjB,6EAA6E;AAC7E,0EAA0E;AAC1E,MAAM,QAAQ,GAAG,aAAa,CAC5B,IAAI,GAAG,CAAC,sDAAsD,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CACjF,CAAC;AAEF,UAAU,CAAC,GAAG,EAAE;IACd,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAEhE,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAE3F,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7D,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,wCAAwC,CAAC,CAAC;QACjF,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,UAAU,CAAC,IAAI,CAAC,CAAC;IAEjB,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,kCAAkC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,yBAAyB,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5E,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,yCAAyC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvF,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,uCAAuC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,0CAA0C,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CACvF,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,uCAAuC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CACpF,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9E,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAC/E,2EAA2E;IAC3E,wCAAwC;IACxC,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9E,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,8EAA8E;IAC9E,sEAAsE;IACtE,6EAA6E;IAC7E,4EAA4E;IAC5E,yCAAyC;IACzC,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxF,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAC3F,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,4EAA4E;IAC5E,6BAA6B;IAC7B,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QAClC,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE;YACpC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC,CAAgB,CAAC;QAClB,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,wDAAwD,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,aAAa,CACX,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EACvB,wGAAwG,CACzG,CAAC;QACF,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/filesystem/mcp/dist/lib/account-schema.d.ts

@@ -0,0 +1,17 @@
+export type SchemaReason = "top-level" | "account-machinery" | "declared-file" | "over-deep" | "bad-name";
+export interface SchemaRefusal {
+    reason: SchemaReason;
+    /** Agent-facing text, with no leading label; each tool prefixes its own name. */
+    message: string;
+}
+/**
+ * Apply the account's own file schema to the caller's `path`. Returns null to
+ * allow.
+ *
+ * `root` is the resolved ACCOUNT directory, so a cross-account write is checked
+ * against the target account's SCHEMA.md, which is the layout that governs where
+ * the bytes land. Callers skip this entirely for the shared root: data/shared is
+ * not an account and carries no account layout contract.
+ */
+export declare function checkAccountSchema(root: string, requestedPath: string): SchemaRefusal | null;
+//# sourceMappingURL=account-schema.d.ts.map

package/payload/platform/plugins/filesystem/mcp/dist/lib/account-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-schema.d.ts","sourceRoot":"","sources":["../../src/lib/account-schema.ts"],"names":[],"mappings":"AAyBA,MAAM,MAAM,YAAY,GACpB,WAAW,GACX,mBAAmB,GACnB,eAAe,GACf,WAAW,GACX,UAAU,CAAC;AAEf,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC;CACjB;AAoED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAqF5F"}