@rubytech/create-realagent 1.0.406

package/payload/platform/neo4j/migrations/001-backfill-scope.cypher

@@ -0,0 +1,30 @@
+// ============================================================
+// Migration 001: Backfill scope property on all existing nodes
+//
+// Sets scope on every node that participates in memory-search.
+// Product knowledge → 'public', internal data → 'admin'.
+// Safe to re-run: only touches nodes where scope IS NULL.
+//
+// Run via: cypher-shell -u neo4j -p <password> -f 001-backfill-scope.cypher
+// ============================================================
+
+// --- Product knowledge (public agent can see) ---
+
+MATCH (n:Question) WHERE n.scope IS NULL SET n.scope = 'public';
+MATCH (n:DefinedTerm) WHERE n.scope IS NULL SET n.scope = 'public';
+MATCH (n:Service) WHERE n.scope IS NULL SET n.scope = 'public';
+MATCH (n:Review) WHERE n.scope IS NULL SET n.scope = 'public';
+MATCH (n:PriceSpecification) WHERE n.scope IS NULL SET n.scope = 'public';
+MATCH (n:LocalBusiness) WHERE n.scope IS NULL SET n.scope = 'public';
+MATCH (n:KnowledgeDocument) WHERE n.scope IS NULL SET n.scope = 'public';
+MATCH (n:Section) WHERE n.scope IS NULL SET n.scope = 'public';
+MATCH (n:Chunk) WHERE n.scope IS NULL SET n.scope = 'public';
+MATCH (n:DigitalDocument) WHERE n.scope IS NULL SET n.scope = 'public';
+
+// --- Internal data (admin agent only) ---
+
+MATCH (n:CreativeWork) WHERE n.scope IS NULL SET n.scope = 'admin';
+MATCH (n:Task) WHERE n.scope IS NULL SET n.scope = 'admin';
+MATCH (n:Person) WHERE n.scope IS NULL SET n.scope = 'admin';
+MATCH (n:Event) WHERE n.scope IS NULL SET n.scope = 'admin';
+MATCH (n:OnboardingState) WHERE n.scope IS NULL SET n.scope = 'admin';

package/payload/platform/neo4j/schema.cypher

@@ -0,0 +1,557 @@
+// ============================================================
+// Maxy Phase 0 — Neo4j Graph Schema
+// Schema.org compliant node types
+// ============================================================
+
+// ----------------------------------------------------------
+// Constraints
+// ----------------------------------------------------------
+
+// Person.email must be unique (waitlist signups, future users)
+CREATE CONSTRAINT person_email_unique IF NOT EXISTS
+FOR (p:Person) REQUIRE p.email IS UNIQUE;
+
+// Service.serviceId must be unique within the Maxy account
+CREATE CONSTRAINT service_id_unique IF NOT EXISTS
+FOR (s:Service) REQUIRE s.serviceId IS UNIQUE;
+
+// LocalBusiness.accountId must be unique
+CREATE CONSTRAINT local_business_account_unique IF NOT EXISTS
+FOR (b:LocalBusiness) REQUIRE b.accountId IS UNIQUE;
+
+// ----------------------------------------------------------
+// accountId enforcement — multi-tenancy boundary
+// Property existence constraints (IS NOT NULL) require Neo4j
+// Enterprise Edition. Community Edition enforces accountId via
+// the memory-write MCP tool (injects accountId at write time)
+// and agent schema reference files.
+// Drop any leftover existence constraints from prior seeds.
+// ----------------------------------------------------------
+DROP CONSTRAINT person_account_id_exists IF EXISTS;
+DROP CONSTRAINT order_account_id_exists IF EXISTS;
+DROP CONSTRAINT invoice_account_id_exists IF EXISTS;
+DROP CONSTRAINT event_account_id_exists IF EXISTS;
+DROP CONSTRAINT service_account_id_exists IF EXISTS;
+DROP CONSTRAINT task_account_id_exists IF EXISTS;
+
+// ----------------------------------------------------------
+// Indexes
+// ----------------------------------------------------------
+
+// LocalBusiness.businessType — determines which vertical schema to load
+CREATE INDEX local_business_type IF NOT EXISTS
+FOR (b:LocalBusiness) ON (b.businessType);
+
+// Question (schema:Question) — FAQ/Q&A nodes
+CREATE INDEX question_category IF NOT EXISTS
+FOR (q:Question) ON (q.category);
+
+// DefinedTerm (schema:DefinedTerm) — product feature/capability descriptions
+CREATE INDEX defined_term_category IF NOT EXISTS
+FOR (d:DefinedTerm) ON (d.category);
+
+CREATE INDEX person_status IF NOT EXISTS
+FOR (p:Person) ON (p.status);
+
+// Review (schema:Review) — competitor comparison assessments
+CREATE INDEX review_item_reviewed IF NOT EXISTS
+FOR (r:Review) ON (r.itemReviewed);
+
+// ----------------------------------------------------------
+// Vector index — 768 dimensions (nomic-embed-text via Ollama)
+// HNSW algorithm for approximate nearest-neighbour search
+// ----------------------------------------------------------
+
+// One vector index per label that participates in semantic search.
+// memory-search queries the index matching the label filter,
+// or queries all indexes when no label filter is given.
+
+CREATE VECTOR INDEX question_embedding IF NOT EXISTS
+FOR (q:Question) ON (q.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+CREATE VECTOR INDEX defined_term_embedding IF NOT EXISTS
+FOR (d:DefinedTerm) ON (d.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+CREATE VECTOR INDEX review_embedding IF NOT EXISTS
+FOR (r:Review) ON (r.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+CREATE VECTOR INDEX service_embedding IF NOT EXISTS
+FOR (s:Service) ON (s.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+CREATE VECTOR INDEX person_embedding IF NOT EXISTS
+FOR (p:Person) ON (p.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+CREATE VECTOR INDEX business_embedding IF NOT EXISTS
+FOR (b:LocalBusiness) ON (b.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+CREATE VECTOR INDEX price_embedding IF NOT EXISTS
+FOR (p:PriceSpecification) ON (p.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+// ----------------------------------------------------------
+// Task node — graph-backed task management (Phase 0)
+// Schema.org: schema:Action (semantic mapping; label stays Task)
+// ----------------------------------------------------------
+
+CREATE CONSTRAINT task_id_unique IF NOT EXISTS
+FOR (t:Task) REQUIRE t.taskId IS UNIQUE;
+
+CREATE INDEX task_status IF NOT EXISTS
+FOR (t:Task) ON (t.status);
+
+CREATE INDEX task_account IF NOT EXISTS
+FOR (t:Task) ON (t.accountId);
+
+CREATE VECTOR INDEX task_embedding IF NOT EXISTS
+FOR (t:Task) ON (t.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+// ----------------------------------------------------------
+// CreativeWork node — agent-authored documents (session summaries etc.)
+// Schema.org: schema.org/CreativeWork
+// Session summaries use `abstract` (schema.org/abstract) for the briefing text
+// and `title` (schema.org/name) for a human-readable label.
+// Written by the admin agent during context compaction via session-compact.
+// ----------------------------------------------------------
+
+CREATE VECTOR INDEX creative_work_embedding IF NOT EXISTS
+FOR (c:CreativeWork) ON (c.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+// ----------------------------------------------------------
+// DigitalDocument node — uploaded files ingested into the graph
+// Schema.org: schema.org/DigitalDocument (subtype of CreativeWork)
+// Written by the document-specialist via document-ingest tool
+// ----------------------------------------------------------
+
+CREATE CONSTRAINT digital_document_id_unique IF NOT EXISTS
+FOR (d:DigitalDocument) REQUIRE d.attachmentId IS UNIQUE;
+
+CREATE INDEX digital_document_account IF NOT EXISTS
+FOR (d:DigitalDocument) ON (d.accountId);
+
+CREATE INDEX digital_document_encoding_format IF NOT EXISTS
+FOR (d:DigitalDocument) ON (d.encodingFormat);
+
+CREATE VECTOR INDEX digital_document_embedding IF NOT EXISTS
+FOR (d:DigitalDocument) ON (d.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+// ----------------------------------------------------------
+// KnowledgeDocument / Section / Chunk — hierarchical document ingestion
+// PRD §7: three-level hierarchy with LLM-generated summaries
+//
+// KnowledgeDocument -[HAS_SECTION]-> Section -[HAS_CHUNK]-> Chunk
+// KnowledgeDocument -[REFERENCES]-> (any entity node)
+//
+// Summaries are embedded (not raw text). Raw chunk content is stored
+// on Chunk.content for retrieval. Full-text BM25 index spans all three
+// levels for hybrid search (0.7 vector + 0.3 BM25).
+// ----------------------------------------------------------
+
+CREATE CONSTRAINT knowledge_doc_id_unique IF NOT EXISTS
+FOR (k:KnowledgeDocument) REQUIRE k.attachmentId IS UNIQUE;
+
+CREATE INDEX knowledge_doc_account IF NOT EXISTS
+FOR (k:KnowledgeDocument) ON (k.accountId);
+
+// sourceUrl — lookup index for duplicate detection when re-ingesting a URL.
+// Not unique: user may re-ingest the same URL to get updated content.
+CREATE INDEX knowledge_doc_source_url IF NOT EXISTS
+FOR (k:KnowledgeDocument) ON (k.sourceUrl);
+
+CREATE VECTOR INDEX knowledge_doc_embedding IF NOT EXISTS
+FOR (k:KnowledgeDocument) ON (k.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+CREATE VECTOR INDEX section_embedding IF NOT EXISTS
+FOR (s:Section) ON (s.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+CREATE VECTOR INDEX chunk_embedding IF NOT EXISTS
+FOR (c:Chunk) ON (c.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+// Full-text BM25 index for hybrid keyword search across all document levels.
+// Indexes summaries (KnowledgeDocument.summary, Section.summary) and raw
+// chunk content (Chunk.content) for keyword matching alongside vector search.
+CREATE FULLTEXT INDEX knowledge_fulltext IF NOT EXISTS
+FOR (k:KnowledgeDocument|Section|Chunk)
+ON EACH [k.summary, k.content];
+
+// ----------------------------------------------------------
+// Conversation node — persistent conversation sessions
+// One Conversation per sessionKey. Scoped to an account via
+// (Conversation)-[:BELONGS_TO]->(LocalBusiness).
+// Public conversations carry a visitorId (browser cookie) and
+// agentSlug for session resume across page reloads and server restarts.
+// ----------------------------------------------------------
+
+CREATE CONSTRAINT conversation_id_unique IF NOT EXISTS
+FOR (c:Conversation) REQUIRE c.conversationId IS UNIQUE;
+
+CREATE CONSTRAINT conversation_session_key_unique IF NOT EXISTS
+FOR (c:Conversation) REQUIRE c.sessionKey IS UNIQUE;
+
+CREATE INDEX conversation_account IF NOT EXISTS
+FOR (c:Conversation) ON (c.accountId);
+
+CREATE INDEX conversation_agent_type IF NOT EXISTS
+FOR (c:Conversation) ON (c.agentType);
+
+CREATE INDEX conversation_visitor IF NOT EXISTS
+FOR (c:Conversation) ON (c.visitorId);
+
+CREATE VECTOR INDEX conversation_embedding IF NOT EXISTS
+FOR (c:Conversation) ON (c.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+// ----------------------------------------------------------
+// Message node — individual messages within a Conversation
+// Linked via (Message)-[:PART_OF]->(Conversation).
+// Vector-indexed for semantic search over conversation history.
+// ----------------------------------------------------------
+
+CREATE CONSTRAINT message_id_unique IF NOT EXISTS
+FOR (m:Message) REQUIRE m.messageId IS UNIQUE;
+
+CREATE INDEX message_conversation IF NOT EXISTS
+FOR (m:Message) ON (m.conversationId);
+
+CREATE VECTOR INDEX message_embedding IF NOT EXISTS
+FOR (m:Message) ON (m.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+// ----------------------------------------------------------
+// OnboardingState node — per-account onboarding progress
+// Tracks which setup steps have been completed and when.
+// Purpose-built for Phase 0; migrates to a Workflow node
+// when Task 13 (Workflow Builder) ships.
+// ----------------------------------------------------------
+
+CREATE CONSTRAINT onboarding_state_account_unique IF NOT EXISTS
+FOR (o:OnboardingState) REQUIRE o.accountId IS UNIQUE;
+// No separate index needed — the unique constraint creates a backing index.
+
+// ----------------------------------------------------------
+// Event node — scheduling and calendar (Phase 0)
+// Schema.org: schema:Event
+// One-time events (recurrence null) and recurring triggers
+// (recurrence = cron expression) share the same node type.
+// ----------------------------------------------------------
+
+CREATE CONSTRAINT event_id_unique IF NOT EXISTS
+FOR (e:Event) REQUIRE e.eventId IS UNIQUE;
+
+CREATE INDEX event_status IF NOT EXISTS
+FOR (e:Event) ON (e.eventStatus);
+
+CREATE INDEX event_account IF NOT EXISTS
+FOR (e:Event) ON (e.accountId);
+
+CREATE INDEX event_next_run IF NOT EXISTS
+FOR (e:Event) ON (e.nextRun);
+
+CREATE VECTOR INDEX event_embedding IF NOT EXISTS
+FOR (e:Event) ON (e.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+// ----------------------------------------------------------
+// Workflow node — persistent named workflows with structured
+// executable steps. Each workflow has WorkflowStep children
+// for validated, machine-executable step definitions.
+// ----------------------------------------------------------
+
+CREATE CONSTRAINT workflow_id_unique IF NOT EXISTS
+FOR (w:Workflow) REQUIRE w.workflowId IS UNIQUE;
+
+CREATE INDEX workflow_account IF NOT EXISTS
+FOR (w:Workflow) ON (w.accountId);
+
+CREATE INDEX workflow_status IF NOT EXISTS
+FOR (w:Workflow) ON (w.status);
+
+CREATE VECTOR INDEX workflow_embedding IF NOT EXISTS
+FOR (w:Workflow) ON (w.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+// ----------------------------------------------------------
+// WorkflowStep — individual executable steps within a workflow.
+// Each step references a plugin tool with parameter templates.
+// ----------------------------------------------------------
+
+CREATE CONSTRAINT workflow_step_id_unique IF NOT EXISTS
+FOR (s:WorkflowStep) REQUIRE s.stepId IS UNIQUE;
+
+CREATE INDEX workflow_step_workflow IF NOT EXISTS
+FOR (s:WorkflowStep) ON (s.workflowId);
+
+CREATE INDEX workflow_step_account IF NOT EXISTS
+FOR (s:WorkflowStep) ON (s.accountId);
+
+// ----------------------------------------------------------
+// WorkflowRun — execution history for a workflow run.
+// Records trigger, status, timing, and context.
+// ----------------------------------------------------------
+
+CREATE CONSTRAINT workflow_run_id_unique IF NOT EXISTS
+FOR (r:WorkflowRun) REQUIRE r.runId IS UNIQUE;
+
+CREATE INDEX workflow_run_workflow IF NOT EXISTS
+FOR (r:WorkflowRun) ON (r.workflowId);
+
+CREATE INDEX workflow_run_account IF NOT EXISTS
+FOR (r:WorkflowRun) ON (r.accountId);
+
+// ----------------------------------------------------------
+// StepResult — per-step outcome within a workflow run.
+// ----------------------------------------------------------
+
+CREATE INDEX step_result_run IF NOT EXISTS
+FOR (sr:StepResult) ON (sr.runId);
+
+// ----------------------------------------------------------
+// UserProfile node — structured knowledge about the business owner
+// Platform-native (no Schema.org equivalent). One per account.
+// Linked via (UserProfile)-[:BELONGS_TO]->(LocalBusiness).
+//
+// Created automatically on first admin session start via MERGE.
+// Properties populated progressively through conversation and
+// session-end reflection. Injected into admin system prompt at
+// session start so the agent never starts from zero.
+//
+// No vector index — UserProfile is always queried by accountId
+// (unique constraint). Vector search deferred to Phase 1 if
+// multi-account similarity becomes a use case.
+// ----------------------------------------------------------
+
+CREATE CONSTRAINT user_profile_account_unique IF NOT EXISTS
+FOR (up:UserProfile) REQUIRE up.accountId IS UNIQUE;
+
+// ----------------------------------------------------------
+// Preference node — individual observed or stated user preference
+// Platform-native. Each Preference represents a single preference
+// with confidence scoring and evidence trails.
+//
+// Relationships:
+//   (UserProfile)-[:HAS_PREFERENCE]->(Preference)
+//   (Preference)-[:OBSERVED_IN]->(Conversation)  — evidence trail
+//
+// Categories: communication, scheduling, decision, workflow,
+//             content, interaction
+// ----------------------------------------------------------
+
+CREATE CONSTRAINT preference_id_unique IF NOT EXISTS
+FOR (pref:Preference) REQUIRE pref.preferenceId IS UNIQUE;
+
+CREATE INDEX preference_account IF NOT EXISTS
+FOR (pref:Preference) ON (pref.accountId);
+
+CREATE INDEX preference_category IF NOT EXISTS
+FOR (pref:Preference) ON (pref.accountId, pref.category);
+
+CREATE VECTOR INDEX preference_embedding IF NOT EXISTS
+FOR (pref:Preference) ON (pref.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+// ----------------------------------------------------------
+// EmailAccount — managed by the email plugin (credentials.ts)
+// Created via MERGE by email-setup. Properties:
+//   accountId, email, agentAddress, imapHost, imapPort,
+//   imapSecurity, smtpHost, smtpPort, smtpSecurity, updatedAt
+//
+// Auto-respond properties (added by email-auto-respond-config):
+//   autoRespond (boolean), respondingAgentSlug (string),
+//   pollIntervalMinutes (integer, default 5),
+//   lastRespondedUid (integer — IMAP UID high-water mark),
+//   lastPollAt (ISO 8601), consecutiveFailures (integer)
+// ----------------------------------------------------------
+
+// ----------------------------------------------------------
+// Email node — persisted inbound email messages
+// Platform-native. Each Email represents a single received
+// message, scoped to a specific recipient address (the agent's
+// agentAddress). Linked to EmailAccount via RECEIVED_BY.
+//
+// Properties:
+//   emailId          — deterministic SHA-256 (primary key for dedup)
+//   messageId        — RFC 2822 Message-ID (nullable, used for threading)
+//   inReplyTo        — RFC 2822 In-Reply-To header (nullable, parent message)
+//   toAddresses      — string[] of TO recipients
+//   ccAddresses      — string[] of CC recipients
+//   recipientAddress — partition key (the agent's agentAddress)
+//   fromAddress, fromName, subject, bodyPreview
+//   receivedAt, fetchedAt, accountId
+//   scope: "admin"   — always admin
+//   screening        — "clean" | "suspicious" | "discarded" (Haiku classification)
+//   screeningReason  — one-line explanation from classifier
+//   promptInjectionFlag — true if body targets an AI agent
+//   embedding        — 768-dim vector (subject + bodyPreview) — absent for discarded
+//
+// Deduplication: emailId derived from RFC 2822 Message-ID
+// (primary) or SHA-256(uidValidity:uid:mailbox:recipientAddress)
+// when Message-ID is absent. MERGE on emailId is idempotent.
+//
+// Relationships:
+//   (Email)-[:RECEIVED_BY]->(EmailAccount)
+// ----------------------------------------------------------
+
+CREATE CONSTRAINT email_id_unique IF NOT EXISTS
+FOR (e:Email) REQUIRE e.emailId IS UNIQUE;
+
+// Composite uniqueness: one Email per messageId + accountId.
+// Database-level safety net for the application-level messageId pre-check
+// in storeEmail. Null messageId values are excluded by Neo4j constraint
+// semantics — UID-based fallback emails are not affected.
+CREATE CONSTRAINT email_message_id_account_unique IF NOT EXISTS
+FOR (e:Email) REQUIRE (e.messageId, e.accountId) IS UNIQUE;
+
+CREATE INDEX email_message_id IF NOT EXISTS
+FOR (e:Email) ON (e.messageId);
+
+CREATE INDEX email_recipient IF NOT EXISTS
+FOR (e:Email) ON (e.recipientAddress);
+
+CREATE INDEX email_account IF NOT EXISTS
+FOR (e:Email) ON (e.accountId);
+
+CREATE INDEX email_received IF NOT EXISTS
+FOR (e:Email) ON (e.receivedAt);
+
+CREATE INDEX email_screening IF NOT EXISTS
+FOR (e:Email) ON (e.screening);
+
+CREATE VECTOR INDEX email_embedding IF NOT EXISTS
+FOR (e:Email) ON (e.embedding)
+OPTIONS {
+  indexConfig: {
+    `vector.dimensions`: 768,
+    `vector.similarity_function`: 'cosine'
+  }
+};
+
+// ----------------------------------------------------------
+// AccessGrant node — per-agent, time-bound access credentials
+// Platform-native. Each AccessGrant represents a single
+// person's access to a single gated public agent.
+//
+// Relationships:
+//   (Person)-[:HAS_ACCESS]->(AccessGrant)
+//
+// One Person can have multiple AccessGrants (different agents,
+// different time windows). Grants are created by the admin
+// agent via memory-write and consumed by the access gate API.
+//
+// No vector index — AccessGrant is always queried
+// deterministically (by token, by contact+agent, by status).
+// ----------------------------------------------------------
+
+// Composite uniqueness: one grant per contact+agent+account.
+// Prevents duplicate invitations for the same person to the
+// same agent. Also serves as a lookup index for login.
+CREATE CONSTRAINT access_grant_unique IF NOT EXISTS
+FOR (ag:AccessGrant) REQUIRE (ag.contactValue, ag.agentSlug, ag.accountId) IS UNIQUE;
+
+// Magic link token lookup — one-time use tokens for email invitations.
+CREATE INDEX access_grant_token IF NOT EXISTS
+FOR (ag:AccessGrant) ON (ag.magicToken);
+
+// Status filtering — admin listing of active/expired/revoked grants.
+CREATE INDEX access_grant_status IF NOT EXISTS
+FOR (ag:AccessGrant) ON (ag.status);