@rubytech/create-realagent-code 0.1.584 → 0.1.586

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-realagent-code",
-  "version": "0.1.584",
+  "version": "0.1.586",
   "description": "Install Real Agent — Built for agents. By agents.",
   "bin": {
     "create-realagent-code": "./dist/index.js"

package/payload/platform/config/brand.json

@@ -5,6 +5,7 @@
   "installDir": "realagent-code",
   "configDir": ".realagent-code",
   "tagline": "Built for agents. By agents.",
+  "productMandate": "You are the back office of an estate agency. Your work is the administration behind properties, listings, viewings, offers and applicants: records kept straight, correspondence answered, progress chased, deadlines met.",
   "marketingUrl": "https://realagent.network",
   "neo4jPort": 7688,
   "ttydPort": 7682,

package/payload/platform/lib/brand-templating/dist/index.d.ts

@@ -1,18 +1,24 @@
 /**
- * Brand templating — single source of truth for the operator-visible brand name.
+ * Brand templating — single source of truth for the operator-visible brand
+ * name and the admin agent's stated purpose.
  *
  * Skills, agent templates, plugin manifests, and reference content reference
- * the brand only via the literal `{{productName}}` placeholder. This module
- * substitutes at read time from `brand.json`. Same shadow-source defect class
- * as Tasks 787/788: there is no fallback; missing or empty `productName`
- * hard-fails so the wrong brand can never reach the system prompt or the
- * operator UI silently.
+ * the brand only via literal `{{field}}` placeholders, one per entry in
+ * `BRAND_FIELDS`. This module substitutes at read time from `brand.json`. Same
+ * shadow-source defect class as Tasks 787/788: there is no fallback; a missing
+ * or empty value hard-fails so the wrong brand can never reach the system
+ * prompt or the operator UI silently.
  *
  * Used by both `platform/ui` (admin/public agent system-prompt assembly) and
  * `platform/plugins/admin/mcp` (the `plugin-read` MCP tool). Both call sites
  * pass the absolute file path as `sourcePath` so the diagnostic line names
  * exactly which file was substituted.
  */
-export declare function getBrandProductName(): string;
+/** Every brand.json field a template may reference as `{{field}}`.
+ *  Task 2646 added `productMandate`, the admin agent's stated purpose. */
+declare const BRAND_FIELDS: readonly ["productName", "productMandate"];
+export type BrandField = (typeof BRAND_FIELDS)[number];
+export declare function getBrandValue(field: BrandField): string;
 export declare function substituteBrandPlaceholders(content: string, sourcePath: string): string;
+export {};
 //# sourceMappingURL=index.d.ts.map

package/payload/platform/lib/brand-templating/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAmBH,wBAAgB,mBAAmB,IAAI,MAAM,CAsB5C;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAkBvF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH;0EAC0E;AAC1E,QAAA,MAAM,YAAY,4CAA6C,CAAC;AAChE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAiBvD,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAwBvD;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAyBvF"}

package/payload/platform/lib/brand-templating/dist/index.js

@@ -1,13 +1,14 @@
 "use strict";
 /**
- * Brand templating — single source of truth for the operator-visible brand name.
+ * Brand templating — single source of truth for the operator-visible brand
+ * name and the admin agent's stated purpose.
  *
  * Skills, agent templates, plugin manifests, and reference content reference
- * the brand only via the literal `{{productName}}` placeholder. This module
- * substitutes at read time from `brand.json`. Same shadow-source defect class
- * as Tasks 787/788: there is no fallback; missing or empty `productName`
- * hard-fails so the wrong brand can never reach the system prompt or the
- * operator UI silently.
+ * the brand only via literal `{{field}}` placeholders, one per entry in
+ * `BRAND_FIELDS`. This module substitutes at read time from `brand.json`. Same
+ * shadow-source defect class as Tasks 787/788: there is no fallback; a missing
+ * or empty value hard-fails so the wrong brand can never reach the system
+ * prompt or the operator UI silently.
  *
  * Used by both `platform/ui` (admin/public agent system-prompt assembly) and
  * `platform/plugins/admin/mcp` (the `plugin-read` MCP tool). Both call sites
@@ -15,12 +16,17 @@
  * exactly which file was substituted.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getBrandProductName = getBrandProductName;
+exports.getBrandValue = getBrandValue;
 exports.substituteBrandPlaceholders = substituteBrandPlaceholders;
 const node_path_1 = require("node:path");
 const node_fs_1 = require("node:fs");
-const PLACEHOLDER = "{{productName}}";
-let cachedProductName = null;
+/** Every brand.json field a template may reference as `{{field}}`.
+ *  Task 2646 added `productMandate`, the admin agent's stated purpose. */
+const BRAND_FIELDS = ["productName", "productMandate"];
+/** Keyed by manifest path and field, not by field alone: a process that
+ *  changes MAXY_PLATFORM_ROOT (only tests do) must not read a previous root's
+ *  value back out of the cache. */
+const cache = new Map();
 function brandJsonPath() {
     const platformRoot = process.env.MAXY_PLATFORM_ROOT;
     if (!platformRoot) {
@@ -28,10 +34,12 @@ function brandJsonPath() {
     }
     return (0, node_path_1.join)(platformRoot, "config", "brand.json");
 }
-function getBrandProductName() {
-    if (cachedProductName !== null)
-        return cachedProductName;
+function getBrandValue(field) {
     const path = brandJsonPath();
+    const key = `${path}::${field}`;
+    const cached = cache.get(key);
+    if (cached !== undefined)
+        return cached;
     if (!(0, node_fs_1.existsSync)(path)) {
         throw new Error(`[skill-loader] brand.json missing at ${path}`);
     }
@@ -42,28 +50,35 @@ function getBrandProductName() {
     catch (err) {
         throw new Error(`[skill-loader] brand.json unreadable at ${path}: ${err instanceof Error ? err.message : String(err)}`);
     }
-    const value = parsed.productName;
+    const value = parsed[field];
     if (typeof value !== "string" || value.trim() === "") {
-        throw new Error(`[skill-loader] brand.json at ${path} has missing or empty productName`);
+        throw new Error(`[skill-loader] brand.json at ${path} has missing or empty ${field}`);
     }
-    cachedProductName = value;
+    cache.set(key, value);
     return value;
 }
 function substituteBrandPlaceholders(content, sourcePath) {
-    if (!content.includes(PLACEHOLDER))
-        return content;
-    let productName;
-    try {
-        productName = getBrandProductName();
-    }
-    catch (err) {
-        console.error(`[skill-loader] ERROR: brand.json missing — cannot resolve productName for skill ${sourcePath}`);
-        throw err;
+    let out = content;
+    for (const field of BRAND_FIELDS) {
+        const placeholder = `{{${field}}}`;
+        // Per-placeholder, not per-call: a file using only one placeholder must
+        // never read the other field, so a brand.json predating a field keeps
+        // rendering every file that does not use it.
+        if (!out.includes(placeholder))
+            continue;
+        let value;
+        try {
+            value = getBrandValue(field);
+        }
+        catch (err) {
+            console.error(`[skill-loader] ERROR: brand.json missing — cannot resolve ${field} for skill ${sourcePath}`);
+            throw err;
+        }
+        // split-length counts non-overlapping literal matches without regex-escape risk.
+        const occurrences = out.split(placeholder).length - 1;
+        out = out.split(placeholder).join(value);
+        console.log(`[skill-loader] brand-substituted ${field}=${value} skill=${sourcePath} occurrences=${occurrences}`);
     }
-    // split-length counts non-overlapping literal matches without regex-escape risk.
-    const occurrences = content.split(PLACEHOLDER).length - 1;
-    const substituted = content.split(PLACEHOLDER).join(productName);
-    console.log(`[skill-loader] brand-substituted productName=${productName} skill=${sourcePath} occurrences=${occurrences}`);
-    return substituted;
+    return out;
 }
 //# sourceMappingURL=index.js.map

package/payload/platform/lib/brand-templating/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;AAmBH,kDAsBC;AAED,kEAkBC;AA3DD,yCAAiC;AACjC,qCAAmD;AAEnD,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAEtC,IAAI,iBAAiB,GAAkB,IAAI,CAAC;AAE5C,SAAS,aAAa;IACpB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACpD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,gBAAI,EAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,mBAAmB;IACjC,IAAI,iBAAiB,KAAK,IAAI;QAAE,OAAO,iBAAiB,CAAC;IACzD,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,MAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,2CAA2C,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACvG,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,mCAAmC,CACxE,CAAC;IACJ,CAAC;IACD,iBAAiB,GAAG,KAAK,CAAC;IAC1B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,2BAA2B,CAAC,OAAe,EAAE,UAAkB;IAC7E,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,OAAO,CAAC;IACnD,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,mBAAmB,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,mFAAmF,UAAU,EAAE,CAChG,CAAC;QACF,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,iFAAiF;IACjF,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CACT,gDAAgD,WAAW,UAAU,UAAU,gBAAgB,WAAW,EAAE,CAC7G,CAAC;IACF,OAAO,WAAW,CAAC;AACrB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;AAyBH,sCAwBC;AAED,kEAyBC;AA1ED,yCAAiC;AACjC,qCAAmD;AAEnD;0EAC0E;AAC1E,MAAM,YAAY,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAU,CAAC;AAGhE;;mCAEmC;AACnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;AAExC,SAAS,aAAa;IACpB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACpD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,gBAAI,EAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,aAAa,CAAC,KAAiB;IAC7C,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,2CAA2C,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACvG,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,yBAAyB,KAAK,EAAE,CACrE,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,2BAA2B,CAAC,OAAe,EAAE,UAAkB;IAC7E,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,KAAK,KAAK,IAAI,CAAC;QACnC,wEAAwE;QACxE,sEAAsE;QACtE,6CAA6C;QAC7C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,SAAS;QACzC,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CACX,6DAA6D,KAAK,cAAc,UAAU,EAAE,CAC7F,CAAC;YACF,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,iFAAiF;QACjF,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACtD,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CACT,oCAAoC,KAAK,IAAI,KAAK,UAAU,UAAU,gBAAgB,WAAW,EAAE,CACpG,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/payload/platform/lib/brand-templating/src/__tests__/brand-templating.test.ts

@@ -0,0 +1,103 @@
+// Task 2646 — the admin identity carries a per-brand purpose, so brand.json now
+// supplies two fields rather than one. These cases pin the property that makes
+// that safe: each placeholder resolves independently, so a manifest predating a
+// field keeps rendering every file that does not use it.
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { getBrandValue, substituteBrandPlaceholders } from "../index";
+
+const roots: string[] = [];
+const previousRoot = process.env.MAXY_PLATFORM_ROOT;
+
+/** Seed a fresh platform root holding one brand.json and point the env at it.
+ *  Fresh per test, so the path-keyed cache never carries a value across. */
+function seedBrand(brand: Record<string, unknown>): string {
+  const root = mkdtempSync(join(tmpdir(), "brand-templating-"));
+  roots.push(root);
+  mkdirSync(join(root, "config"), { recursive: true });
+  writeFileSync(join(root, "config", "brand.json"), JSON.stringify(brand));
+  process.env.MAXY_PLATFORM_ROOT = root;
+  return root;
+}
+
+afterEach(() => {
+  for (const root of roots.splice(0)) rmSync(root, { recursive: true, force: true });
+  if (previousRoot === undefined) delete process.env.MAXY_PLATFORM_ROOT;
+  else process.env.MAXY_PLATFORM_ROOT = previousRoot;
+  vi.restoreAllMocks();
+});
+
+describe("substituteBrandPlaceholders", () => {
+  it("substitutes both placeholders in one pass", () => {
+    seedBrand({ productName: "Real Agent", productMandate: "You are the back office." });
+    const out = substituteBrandPlaceholders(
+      "{{productName}} — {{productMandate}}",
+      "/tmp/IDENTITY.md",
+    );
+    expect(out).toBe("Real Agent — You are the back office.");
+  });
+
+  it("never reads productMandate for content that only uses productName", () => {
+    // The regression this guards: a brand.json predating the new field must keep
+    // rendering every existing productName-only file.
+    seedBrand({ productName: "Maxy" });
+    expect(substituteBrandPlaceholders("Hello from {{productName}}", "/tmp/x.md")).toBe(
+      "Hello from Maxy",
+    );
+  });
+
+  it("returns content unchanged and logs nothing when no placeholder is present", () => {
+    seedBrand({ productName: "Maxy", productMandate: "m" });
+    const log = vi.spyOn(console, "log").mockImplementation(() => {});
+    const content = "no placeholders here";
+    expect(substituteBrandPlaceholders(content, "/tmp/x.md")).toBe(content);
+    expect(log).not.toHaveBeenCalled();
+  });
+
+  it("replaces every occurrence of the mandate placeholder", () => {
+    seedBrand({ productName: "Maxy", productMandate: "M" });
+    expect(substituteBrandPlaceholders("{{productMandate}}/{{productMandate}}", "/tmp/x.md")).toBe(
+      "M/M",
+    );
+  });
+
+  it("logs the substitution with field, value and occurrence count", () => {
+    seedBrand({ productName: "Maxy", productMandate: "M" });
+    const log = vi.spyOn(console, "log").mockImplementation(() => {});
+    substituteBrandPlaceholders("{{productMandate}} {{productMandate}}", "/tmp/IDENTITY.md");
+    expect(log).toHaveBeenCalledWith(
+      "[skill-loader] brand-substituted productMandate=M skill=/tmp/IDENTITY.md occurrences=2",
+    );
+  });
+
+  it("throws when the mandate placeholder is used and the field is missing", () => {
+    seedBrand({ productName: "Maxy" });
+    expect(() => substituteBrandPlaceholders("{{productMandate}}", "/tmp/x.md")).toThrow(
+      /missing or empty productMandate/,
+    );
+  });
+
+  it("throws when the mandate field is not a string", () => {
+    seedBrand({ productName: "Maxy", productMandate: 42 });
+    expect(() => substituteBrandPlaceholders("{{productMandate}}", "/tmp/x.md")).toThrow(
+      /missing or empty productMandate/,
+    );
+  });
+
+  it("throws when the mandate field is whitespace only", () => {
+    seedBrand({ productName: "Maxy", productMandate: "   " });
+    expect(() => substituteBrandPlaceholders("{{productMandate}}", "/tmp/x.md")).toThrow(
+      /missing or empty productMandate/,
+    );
+  });
+});
+
+describe("getBrandValue", () => {
+  it("reads each field independently from the same manifest", () => {
+    seedBrand({ productName: "SiteDesk", productMandate: "jobs" });
+    expect(getBrandValue("productName")).toBe("SiteDesk");
+    expect(getBrandValue("productMandate")).toBe("jobs");
+  });
+});

package/payload/platform/lib/brand-templating/src/index.ts

@@ -1,12 +1,13 @@
 /**
- * Brand templating — single source of truth for the operator-visible brand name.
+ * Brand templating — single source of truth for the operator-visible brand
+ * name and the admin agent's stated purpose.
  *
  * Skills, agent templates, plugin manifests, and reference content reference
- * the brand only via the literal `{{productName}}` placeholder. This module
- * substitutes at read time from `brand.json`. Same shadow-source defect class
- * as Tasks 787/788: there is no fallback; missing or empty `productName`
- * hard-fails so the wrong brand can never reach the system prompt or the
- * operator UI silently.
+ * the brand only via literal `{{field}}` placeholders, one per entry in
+ * `BRAND_FIELDS`. This module substitutes at read time from `brand.json`. Same
+ * shadow-source defect class as Tasks 787/788: there is no fallback; a missing
+ * or empty value hard-fails so the wrong brand can never reach the system
+ * prompt or the operator UI silently.
  *
  * Used by both `platform/ui` (admin/public agent system-prompt assembly) and
  * `platform/plugins/admin/mcp` (the `plugin-read` MCP tool). Both call sites
@@ -17,9 +18,15 @@
 import { join } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 
-const PLACEHOLDER = "{{productName}}";
+/** Every brand.json field a template may reference as `{{field}}`.
+ *  Task 2646 added `productMandate`, the admin agent's stated purpose. */
+const BRAND_FIELDS = ["productName", "productMandate"] as const;
+export type BrandField = (typeof BRAND_FIELDS)[number];
 
-let cachedProductName: string | null = null;
+/** Keyed by manifest path and field, not by field alone: a process that
+ *  changes MAXY_PLATFORM_ROOT (only tests do) must not read a previous root's
+ *  value back out of the cache. */
+const cache = new Map<string, string>();
 
 function brandJsonPath(): string {
   const platformRoot = process.env.MAXY_PLATFORM_ROOT;
@@ -31,13 +38,15 @@ function brandJsonPath(): string {
   return join(platformRoot, "config", "brand.json");
 }
 
-export function getBrandProductName(): string {
-  if (cachedProductName !== null) return cachedProductName;
+export function getBrandValue(field: BrandField): string {
   const path = brandJsonPath();
+  const key = `${path}::${field}`;
+  const cached = cache.get(key);
+  if (cached !== undefined) return cached;
   if (!existsSync(path)) {
     throw new Error(`[skill-loader] brand.json missing at ${path}`);
   }
-  let parsed: { productName?: unknown };
+  let parsed: Record<string, unknown>;
   try {
     parsed = JSON.parse(readFileSync(path, "utf-8"));
   } catch (err) {
@@ -45,32 +54,39 @@ export function getBrandProductName(): string {
       `[skill-loader] brand.json unreadable at ${path}: ${err instanceof Error ? err.message : String(err)}`,
     );
   }
-  const value = parsed.productName;
+  const value = parsed[field];
   if (typeof value !== "string" || value.trim() === "") {
     throw new Error(
-      `[skill-loader] brand.json at ${path} has missing or empty productName`,
+      `[skill-loader] brand.json at ${path} has missing or empty ${field}`,
     );
   }
-  cachedProductName = value;
+  cache.set(key, value);
   return value;
 }
 
 export function substituteBrandPlaceholders(content: string, sourcePath: string): string {
-  if (!content.includes(PLACEHOLDER)) return content;
-  let productName: string;
-  try {
-    productName = getBrandProductName();
-  } catch (err) {
-    console.error(
-      `[skill-loader] ERROR: brand.json missing — cannot resolve productName for skill ${sourcePath}`,
+  let out = content;
+  for (const field of BRAND_FIELDS) {
+    const placeholder = `{{${field}}}`;
+    // Per-placeholder, not per-call: a file using only one placeholder must
+    // never read the other field, so a brand.json predating a field keeps
+    // rendering every file that does not use it.
+    if (!out.includes(placeholder)) continue;
+    let value: string;
+    try {
+      value = getBrandValue(field);
+    } catch (err) {
+      console.error(
+        `[skill-loader] ERROR: brand.json missing — cannot resolve ${field} for skill ${sourcePath}`,
+      );
+      throw err;
+    }
+    // split-length counts non-overlapping literal matches without regex-escape risk.
+    const occurrences = out.split(placeholder).length - 1;
+    out = out.split(placeholder).join(value);
+    console.log(
+      `[skill-loader] brand-substituted ${field}=${value} skill=${sourcePath} occurrences=${occurrences}`,
     );
-    throw err;
   }
-  // split-length counts non-overlapping literal matches without regex-escape risk.
-  const occurrences = content.split(PLACEHOLDER).length - 1;
-  const substituted = content.split(PLACEHOLDER).join(productName);
-  console.log(
-    `[skill-loader] brand-substituted productName=${productName} skill=${sourcePath} occurrences=${occurrences}`,
-  );
-  return substituted;
+  return out;
 }

package/payload/platform/lib/brand-templating/tsconfig.json

@@ -4,5 +4,6 @@
     "outDir": "dist",
     "rootDir": "src"
   },
-  "include": ["src"]
+  "include": ["src"],
+  "exclude": ["src/__tests__"]
 }

package/payload/platform/lib/brand-templating/vitest.config.ts

@@ -0,0 +1,9 @@
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    environment: "node",
+    globals: false,
+    include: ["src/__tests__/**/*.test.ts"],
+  },
+});

package/payload/platform/plugins/admin/skills/platform-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: platform-architecture
 description: Use when grounding any documented-surface claim about what Real Agent ships — plugins, skills, specialists, install/deploy flows, internals. This is the install catalogue, not evidence of what is enabled on the current account. For install state on this account, call `capabilities-here`; for documented surface, cite the `Source:` URL inline.
-content-hash: sha256:7e2b1c49501690b9b6a3c556cde20a84f087d1d74bdafb3f2f00faf5e87c4b2f
+content-hash: sha256:066a1d70ab0a529e335c2ab02d19663d3fbe51032e58073c267f05f8c8a0de97
 brand: realagent-code
 product-name: Real Agent
 ---
@@ -146,6 +146,8 @@ Real Agent runs two agents simultaneously:
 
 **Admin agent (you)** — full access to all tools and plugins. This is the agent you interact with at your local or remote URL. It can read and write contacts, send Telegram messages, manage your account, and perform any task you have plugins for. Protected by your PIN. Your admin agent runs through your own Claude Code OAuth session — it never bills the Anthropic API. Authentication and SDK details are documented in the developer doc `.docs/platform.md` admin-agent section.
 
+Your admin agent has a stated purpose, set by your edition of the product. When you ask for something outside it, the agent says so first, names the nearest thing it does handle, and puts the request back to you. Ask again and it does the work; the decision is yours.
+
 **Public agent (visitors)** — read-only access. Handles enquiries from people who reach your public URL. It can answer questions about your business and collect prospect contact details, but it cannot access your private data or take actions.
 
 ## Plugins

package/payload/platform/plugins/admin/skills/whats-new/SKILL.md

@@ -9,6 +9,18 @@ Invoked by the admin agent directly.
 
 This is the platform's release timeline, newest first. Each entry shows the date it shipped and the version it shipped in, so you can tell the operator how current their install is. To compare, read the installed version from `capabilities-here` and match it against the versions below. Keep answers high level and in plain English; this is a summary, not a full commit log.
 
+## 2026-08-10 (0.1.586)
+
+- The remote browser no longer freezes and stay frozen. Its connection to the device browser drops for ordinary reasons several times a day, and nothing noticed: the picture stopped updating while your clicks and typing carried on going nowhere, so it looked like the browser had hung when the browser was fine. It now spots the dropped connection and reconnects on its own, usually within a few seconds.
+- The browser pane has a reload button, next to the back and forward arrows. There was no way to refresh before, so a frozen view meant reloading the whole dashboard.
+- If the picture ever does stop while you are working, the assistant can now see that from the logs. Before, a frozen pane and a healthy one looked identical in every record.
+
+## 2026-08-09 (0.1.585)
+
+- Your assistant now knows what it is for, and says so when you ask it to work outside that. Every edition used to boot the same anonymous "Business Assistant" with no stated purpose, so it accepted anything without comment. Ask it for something outside its remit and it names its purpose, offers the nearest thing it does handle, and puts the request back to you; ask again and it does the work.
+- The estate agency and building contractor editions each describe the work they actually do, while Real Agent stays a general personal assistant and second brain, tied to no trade or industry.
+- The assistant no longer assumes you run a business. Five places in its own description took that for granted, including the name it introduced itself by.
+
 ## 2026-08-09 (0.1.584)
 
 - The assistant can find the Telegram chats it is able to reach. It was looking for them in a different folder from the one they are saved in, so it reported having no way to message people it could in fact message.

package/payload/platform/plugins/docs/references/platform.md

@@ -19,6 +19,8 @@ The Pi runs the web interface, the AI agent, and all the plugin servers. When yo
 
 **Admin agent (you)** — full access to all tools and plugins. This is the agent you interact with at your local or remote URL. It can read and write contacts, send Telegram messages, manage your account, and perform any task you have plugins for. Protected by your PIN. Your admin agent runs through your own Claude Code OAuth session — it never bills the Anthropic API. Authentication and SDK details are documented in the developer doc `.docs/platform.md` admin-agent section.
 
+Your admin agent has a stated purpose, set by your edition of the product. When you ask for something outside it, the agent says so first, names the nearest thing it does handle, and puts the request back to you. Ask again and it does the work; the decision is yours.
+
 **Public agent (visitors)** — read-only access. Handles enquiries from people who reach your public URL. It can answer questions about your business and collect prospect contact details, but it cannot access your private data or take actions.
 
 ## Plugins

package/payload/platform/templates/agents/admin/IDENTITY.md

@@ -1,6 +1,6 @@
-# Business Assistant
+# {{productName}}
 
-Your job is to do useful work for the operator. How useful you can be depends on what you know about them and their business; both grow together, and every interaction is a chance to learn more.
+Your job is to do useful work for the operator. How useful you can be depends on what you know about them and their work; both grow together, and every interaction is a chance to learn more.
 
 ## Prime directives
 
@@ -8,9 +8,15 @@ Your job is to do useful work for the operator. How useful you can be depends on
 2. Be concise. Three sentences or fewer. If you cannot answer in three, ask in five words.
 3. Show your evidence. Gather it before forming a hypothesis. Never speculate.
 
+## Your purpose
+
+{{productMandate}}
+
+When a request falls outside that purpose, say so before you start it. Name what you are for, name the closest thing you do own, and put the request back to the operator. If they ask again, the decision is theirs and you do it. That is one exchange, not a refusal and not a negotiation.
+
 ## Before you speak
 
-If more than one admin works on this account, identify which one you are speaking with this session, purely as a convenience so you load the right person's profile and history. This is never a gate and never blocks any tool; with a single admin, skip it. Then, before your first message, do reconnaissance: read what is known about the operator and their business, today's calendar, active projects, open work, recent conversations. Infer the domain from the plugins and skills available. Then lead with what you found, and follow with a proposal suited to where the operator is in their day. Ask only the questions you could not answer through investigation. You are expected to drive the day, not solicit instructions for it.
+If more than one admin works on this account, identify which one you are speaking with this session, purely as a convenience so you load the right person's profile and history. This is never a gate and never blocks any tool; with a single admin, skip it. Then, before your first message, do reconnaissance: read what is known about the operator and their work, today's calendar, active projects, open work, recent conversations. Infer the domain from the plugins and skills available. Then lead with what you found, and follow with a proposal suited to where the operator is in their day. Ask only the questions you could not answer through investigation. You are expected to drive the day, not solicit instructions for it.
 
 When a turn needs you to ground a claim about what the product is, how the platform is built, how plugins or skills or specialists work, how install or deploy runs, or any other product-architecture fact, load the platform-architecture skill and answer from its body. Cite the source URL printed above the block you drew from. The platform-architecture skill is the install catalogue, not evidence of what is installed on this account. For questions about what is enabled here — which plugins are on, which specialists you can dispatch, which models are in use — call capabilities-here and answer from its JSON; never infer install state from the catalogue body.
 
@@ -20,13 +26,13 @@ When a request needs a skill and you do not already know its exact slug, resolve
 
 You may not act on a request until you know what is being asked, what is in scope and what is out, and what rules apply. When the operator's words are precise, all three are obvious and you act. When any is imprecise, stop and ask. Insist on the operator being precise and concise.
 
-How you route the work is decided per turn by the routing ladder injected with each prompt: delegate to the specialist that owns the deliverable, else load an admin-usable skill, else, when the deliverable is one the business issues repeatedly and no specialist or skill owns it, author its owning skill once via skill-builder (or a worker agent via agent-builder) and produce it through that, else author it directly. Authoring directly is the last resort for a genuine one-off, never for a repeatable document or process. That ladder, not this file, carries the live roster, the admin-usable list, and the outcome-only brief contract.
+How you route the work is decided per turn by the routing ladder injected with each prompt: delegate to the specialist that owns the deliverable, else load an admin-usable skill, else, when the deliverable is one that recurs and no specialist or skill owns it, author its owning skill once via skill-builder (or a worker agent via agent-builder) and produce it through that, else author it directly. Authoring directly is the last resort for a genuine one-off, never for a repeatable document or process. That ladder, not this file, carries the live roster, the admin-usable list, and the outcome-only brief contract.
 
 ## Working from the graph
 
 The graph is your brain. The first read of any turn that needs to know something is against the graph; outside lookups happen only after the graph has confirmed it does not hold the answer, and anything new an outside lookup produces is written back the same turn. Greetings and pure interaction turns do not need this loop. When something worth remembering comes out of a conversation, hand the write off to the specialist who owns graph writes; direct writes from this seat are reserved for one-line updates against a node already in context whose classification is unambiguous.
 
-Every factual claim you make in any turn, about the operator, their business, the product, the platform, the day, or the world, has a source you can name. The permissible sources are four: a graph read this session, a tool output returned this session, content the operator pasted into this conversation, and the body of the platform-architecture skill when it is loaded. Pretraining recall is not a source. If a claim does not trace to one of the four, you do not have it yet; read the graph, run the tool, load the skill, or ask the operator. This rule binds every factual sentence you emit, not only the ones about the graph.
+Every factual claim you make in any turn, about the operator, their work, the product, the platform, the day, or the world, has a source you can name. The permissible sources are four: a graph read this session, a tool output returned this session, content the operator pasted into this conversation, and the body of the platform-architecture skill when it is loaded. Pretraining recall is not a source. If a claim does not trace to one of the four, you do not have it yet; read the graph, run the tool, load the skill, or ask the operator. This rule binds every factual sentence you emit, not only the ones about the graph.
 
 When the operator asks for a previous workflow output by name, fetch the latest matching report directly rather than searching. Searching is for questions about the contents of reports, not for the reports themselves. When the operator asks how your understanding of a person, organisation, or concept has changed over time, walk the revision history of that entity and surface the deltas yourself.
 

package/payload/server/{chunk-CV6AEMKH.js → chunk-34FPJYHN.js}

@@ -8,7 +8,7 @@ import {
   getUserTimezone,
   isValidAccountId,
   registerLoop
-} from "./chunk-SKYZG6OT.js";
+} from "./chunk-6AQYMT6C.js";
 import {
   __commonJS,
   __require,

package/payload/server/{chunk-SKYZG6OT.js → chunk-6AQYMT6C.js}

@@ -115,8 +115,8 @@ import { readFileSync as readFileSync3, readdirSync, existsSync as existsSync3,
 // ../lib/brand-templating/src/index.ts
 import { join as join2 } from "path";
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
-var PLACEHOLDER = "{{productName}}";
-var cachedProductName = null;
+var BRAND_FIELDS = ["productName", "productMandate"];
+var cache = /* @__PURE__ */ new Map();
 function brandJsonPath() {
   const platformRoot2 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot2) {
@@ -126,9 +126,11 @@ function brandJsonPath() {
   }
   return join2(platformRoot2, "config", "brand.json");
 }
-function getBrandProductName() {
-  if (cachedProductName !== null) return cachedProductName;
+function getBrandValue(field) {
   const path = brandJsonPath();
+  const key = `${path}::${field}`;
+  const cached = cache.get(key);
+  if (cached !== void 0) return cached;
   if (!existsSync2(path)) {
     throw new Error(`[skill-loader] brand.json missing at ${path}`);
   }
@@ -140,32 +142,36 @@ function getBrandProductName() {
       `[skill-loader] brand.json unreadable at ${path}: ${err instanceof Error ? err.message : String(err)}`
     );
   }
-  const value = parsed.productName;
+  const value = parsed[field];
   if (typeof value !== "string" || value.trim() === "") {
     throw new Error(
-      `[skill-loader] brand.json at ${path} has missing or empty productName`
+      `[skill-loader] brand.json at ${path} has missing or empty ${field}`
     );
   }
-  cachedProductName = value;
+  cache.set(key, value);
   return value;
 }
 function substituteBrandPlaceholders(content, sourcePath) {
-  if (!content.includes(PLACEHOLDER)) return content;
-  let productName;
-  try {
-    productName = getBrandProductName();
-  } catch (err) {
-    console.error(
-      `[skill-loader] ERROR: brand.json missing \u2014 cannot resolve productName for skill ${sourcePath}`
+  let out = content;
+  for (const field of BRAND_FIELDS) {
+    const placeholder = `{{${field}}}`;
+    if (!out.includes(placeholder)) continue;
+    let value;
+    try {
+      value = getBrandValue(field);
+    } catch (err) {
+      console.error(
+        `[skill-loader] ERROR: brand.json missing \u2014 cannot resolve ${field} for skill ${sourcePath}`
+      );
+      throw err;
+    }
+    const occurrences = out.split(placeholder).length - 1;
+    out = out.split(placeholder).join(value);
+    console.log(
+      `[skill-loader] brand-substituted ${field}=${value} skill=${sourcePath} occurrences=${occurrences}`
     );
-    throw err;
   }
-  const occurrences = content.split(PLACEHOLDER).length - 1;
-  const substituted = content.split(PLACEHOLDER).join(productName);
-  console.log(
-    `[skill-loader] brand-substituted productName=${productName} skill=${sourcePath} occurrences=${occurrences}`
-  );
-  return substituted;
+  return out;
 }
 
 // app/lib/claude-agent/account.ts