@rubytech/create-sitedesk-code 0.1.340

package/payload/platform/plugins/admin/mcp/dist/skill-resolution.js

@@ -0,0 +1,358 @@
+// deterministic plugin-skill resolution.
+//
+// `findSkillOwners` walks `<platformRoot>/plugins/*/skills/<skillName>/SKILL.md`
+// once and returns every plugin that owns that skill. The `skill-find` MCP
+// tool wraps this directly; `plugin-read`'s "not found" branch uses
+// `computePluginReadHint` to surface the owning plugin when the agent
+// guessed the wrong `pluginName` for a known skill.
+//
+// Pure filesystem read — no network, no subprocess. The walk is two-level
+// (plugin dir → skill dir), never recursive, so deeper skill subtrees and
+// sibling references/ directories are ignored.
+import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
+import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { CONTENT_PRODUCER_AUTHORING_SKILL_SLUGS } from "./content-producer-authoring-skills.js";
+const SKILL_FILE_PATH = /^skills\/([a-z0-9][a-z0-9-]*)\//;
+// the symmetric misuse: skill slug buried inside `pluginName`
+// (e.g. `admin/skills/plainly`, `contacts/skills/plainly`) rather than the
+// file argument. Match anywhere inside the string, bounded by start or slash
+// on the left and slash or end on the right, so both `<plugin>/skills/<slug>`
+// and bare `skills/<slug>` forms surface the slug.
+const SKILL_IN_PLUGIN_NAME = /(?:^|\/)skills\/([a-z0-9][a-z0-9-]*)(?:\/|$)/;
+// Task 516 — content-producer-owned authoring/render/publish skills that the
+// admin seat must NOT load or read inline. The admin's job is to dispatch
+// content-producer (via the Agent tool, subagent_type content-producer) for
+// these deliverables, not author them from its own seat. Membership is each
+// skill's own SKILL.md "Invoked by" declaration:
+//   - professional-document — content-producer authoring (IDENTITY delegates
+//     document authoring to content-producer).
+//   - a4-print-documents     — content-producer's PDF render-constraints skill.
+//   - publish-site           — SKILL.md: "Invoked from specialists:content-producer".
+// Deliberately EXCLUDED because the admin invokes them directly:
+//   - unzip-attachment — SKILL.md: "Invoked by the admin agent directly.
+//     Admin owns all unzipping" (admin extracts, then routes to a specialist).
+//   - deck-pages       — admin-owned, a content-producer refusal target.
+export const CONTENT_PRODUCER_AUTHORING_SKILLS = new Set(CONTENT_PRODUCER_AUTHORING_SKILL_SLUGS);
+// The verbatim refusal text the skill-load / plugin-read handlers relay when
+// the admin seat reaches for a content-producer-owned authoring skill. It
+// names the route so the agent's next action is the dispatch, not a dead end.
+export const AUTHORING_DISPATCH_HINT = "This deliverable is owned by content-producer. Dispatch it with the Agent tool and subagent_type content-producer.";
+// The admin seat is the operator's own `claude rc` session: role is `admin`
+// and no specialist is stamped. rc-daemon stamps MAXY_SESSION_ROLE=admin +
+// MAXY_SPECIALIST='' for it; pty-spawner stamps MAXY_SPECIALIST=<name> on
+// every dispatched specialist subagent (content-producer included), and
+// role=public on public spawns. So `role === 'admin' && no specialist`
+// uniquely identifies the admin seat. Any other / unidentified env fails
+// open (returns false) — the gate must never brick a legitimate load.
+export function isAdminSeat(env) {
+    return env.MAXY_SESSION_ROLE === "admin" && !(env.MAXY_SPECIALIST && env.MAXY_SPECIALIST.length > 0);
+}
+// Extract a skill slug from a plugin-read call's arguments. The slug may sit
+// in `file` (e.g. `skills/professional-document/SKILL.md` or a reference
+// under that dir) or be buried in `pluginName` (the same wrong-guess shape
+// computePluginReadHint handles). Returns undefined for PLUGIN.md and plain
+// reference reads that are not under a `skills/<slug>/` path.
+export function skillSlugFromReadArgs(pluginName, file) {
+    return file.match(SKILL_IN_PLUGIN_NAME)?.[1] ?? pluginName.match(SKILL_IN_PLUGIN_NAME)?.[1];
+}
+// True when the admin seat is reaching for a content-producer-owned authoring
+// skill — the signal both the skill-load and plugin-read handlers gate on.
+export function adminAuthoringSkillBlock(slug, env) {
+    if (!slug)
+        return false;
+    return isAdminSeat(env) && CONTENT_PRODUCER_AUTHORING_SKILLS.has(slug);
+}
+export function findSkillOwners(platformRoot, skillName) {
+    const owners = [];
+    const pluginsDir = resolve(platformRoot, "plugins");
+    if (!existsSync(pluginsDir)) {
+        return { status: "not-found", candidates: [] };
+    }
+    let entries;
+    try {
+        entries = readdirSync(pluginsDir);
+    }
+    catch {
+        return { status: "not-found", candidates: [] };
+    }
+    for (const pluginName of entries) {
+        const skillFile = resolve(pluginsDir, pluginName, "skills", skillName, "SKILL.md");
+        if (!existsSync(skillFile))
+            continue;
+        try {
+            if (!statSync(skillFile).isFile())
+                continue;
+        }
+        catch {
+            continue;
+        }
+        owners.push({ pluginName, file: `skills/${skillName}/SKILL.md` });
+    }
+    if (owners.length === 0)
+        return { status: "not-found", candidates: [] };
+    if (owners.length === 1)
+        return { status: "unique", candidates: [owners[0]] };
+    return { status: "ambiguous", candidates: owners };
+}
+// Returns the owning plugin and the canonical `skills/<slug>/SKILL.md`
+// path when exactly one sibling plugin holds the skill the agent was
+// trying to reach; null otherwise. Used by `plugin-read` to append
+// `Did you mean pluginName="<owner>", file="skills/<slug>/SKILL.md"?`
+// on wrong-guess errors.
+//
+// Two shapes of misuse are covered:
+//   1. skill slug appears in `file`     — e.g. file="skills/plainly/SKILL.md"
+//   2. skill slug appears in `pluginName` — e.g. pluginName="admin/skills/plainly"
+//
+// The file argument wins when both shapes match — it carries the more
+// specific intent (the agent named a file directly).
+export function computePluginReadHint(platformRoot, pluginName, file) {
+    const skillName = file.match(SKILL_FILE_PATH)?.[1] ?? pluginName.match(SKILL_IN_PLUGIN_NAME)?.[1];
+    if (!skillName)
+        return null;
+    const result = findSkillOwners(platformRoot, skillName);
+    if (result.status !== "unique")
+        return null;
+    const owner = result.candidates[0];
+    const correctedFile = `skills/${skillName}/SKILL.md`;
+    if (owner.pluginName === pluginName && correctedFile === file)
+        return null;
+    return { pluginName: owner.pluginName, file: correctedFile };
+}
+// parse the `requiredInputs:` list from a SKILL.md frontmatter.
+//
+// The doctrine in `platform/templates/agents/admin/IDENTITY.md` "Skill-input
+// resolution" routes a missing skill input through `AskUserQuestion` instead
+// of memory/conversation/graph/task search. To make that routing actionable,
+// the skill-load tool surfaces the declared `requiredInputs` as a notice
+// block prepended to the SKILL body, and `parseClaudeStream` keys its
+// `[skill-input-resolution]`/`[skill-input-missing]` emissions off the same
+// declaration.
+//
+// Shape: each list entry is a slot. Within a slot, `|`-separated tokens
+// declare alternative fields that satisfy the slot. Example for the
+// `property-brochure` skill:
+//
+//   requiredInputs:
+//     - propertyAssetsDir | listingURL
+//
+// Returns `[["propertyAssetsDir", "listingURL"]]`. Undefined when the
+// frontmatter is missing or the key is absent. The parser is intentionally
+// narrow: it scans only the leading `---\n...\n---\n` block, recognises the
+// `requiredInputs:` key at column 0, and reads dash-prefixed list items at
+// any indentation until the next column-0 key or the frontmatter close.
+export function parseRequiredInputs(skillBody) {
+    if (!skillBody.startsWith("---\n"))
+        return undefined;
+    const fmEnd = skillBody.indexOf("\n---\n", 4);
+    if (fmEnd < 0)
+        return undefined;
+    const frontmatter = skillBody.slice(4, fmEnd);
+    const lines = frontmatter.split("\n");
+    let inBlock = false;
+    const slots = [];
+    for (const line of lines) {
+        if (/^[A-Za-z][\w-]*:/.test(line)) {
+            inBlock = line.startsWith("requiredInputs:");
+            continue;
+        }
+        if (!inBlock)
+            continue;
+        const itemMatch = line.match(/^\s+-\s+(.+?)\s*$/);
+        if (!itemMatch)
+            continue;
+        const slot = itemMatch[1].split("|").map(s => s.trim()).filter(s => s.length > 0);
+        if (slot.length > 0)
+            slots.push(slot);
+    }
+    return slots.length > 0 ? slots : undefined;
+}
+// Extract `name` and `description` from a SKILL.md frontmatter block. Handles
+// the three shapes present in the tree: single-line (`description: text`),
+// folded block scalar (`description: >`), and literal block scalar
+// (`description: |`). For a block scalar the value is every indented
+// continuation line up to the next column-0 key or the frontmatter close,
+// joined with single spaces. Only the leading `---\n...\n---` block is read;
+// returns empty strings for keys that are absent.
+export function parseSkillFrontmatter(skillBody) {
+    const empty = { name: "", description: "" };
+    const m = skillBody.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/);
+    if (!m)
+        return empty;
+    const lines = m[1].split(/\r?\n/);
+    const readValue = (key) => {
+        const head = new RegExp(`^${key}:[ \\t]*(.*)$`);
+        for (let i = 0; i < lines.length; i++) {
+            const hit = lines[i].match(head);
+            if (!hit)
+                continue;
+            const inline = hit[1].trim();
+            // A block scalar indicator is `|` or `>`, optionally with a chomping
+            // (`+`/`-`) and/or explicit-indent (`1`-`9`) modifier and a trailing
+            // comment — e.g. `>`, `|-`, `>2`, `| # note`. Anything else on the line
+            // is an inline value.
+            const isBlockScalar = /^[|>][+-]?[1-9]?[ \t]*(?:#.*)?$/.test(inline);
+            if (inline !== "" && !isBlockScalar) {
+                return stripQuotes(inline);
+            }
+            // block scalar — gather indented continuation lines.
+            const parts = [];
+            for (let j = i + 1; j < lines.length; j++) {
+                if (/^[A-Za-z][\w-]*:/.test(lines[j]))
+                    break; // next column-0 key
+                const trimmed = lines[j].trim();
+                if (trimmed === "")
+                    continue;
+                parts.push(trimmed);
+            }
+            return parts.join(" ");
+        }
+        return "";
+    };
+    return { name: readValue("name"), description: readValue("description") };
+}
+function stripQuotes(s) {
+    if ((s.startsWith('"') && s.endsWith('"')) || (s.startsWith("'") && s.endsWith("'"))) {
+        return s.slice(1, -1);
+    }
+    return s;
+}
+// Search every plugin skill by free-text query against frontmatter
+// `name` + `description`, returning the top `limit` owners ranked by relevance.
+//
+// Walk: the same two-level, non-recursive shape as `findSkillOwners`
+// (plugin dir → skill dir), but enumerating every skill rather than one named
+// slug. Only the frontmatter is read.
+//
+// Ranking is frequency-aware so distinctive terms dominate. The query is
+// tokenised on non-alphanumeric boundaries (tokens of length >= 2, deduped).
+// Each skill scores the sum, over query terms present in its haystack, of an
+// inverse-document-frequency weight `log((N+1)/(df+1)) + 1` — a term in nearly
+// every description (e.g. "create") contributes almost nothing, a rare term
+// (e.g. "quote", "algorithm") dominates. A name hit weighs double a
+// description hit. Without this weighting a bare term count ties the intended
+// skill against every skill that merely shares a common trigger word. Ties
+// break by slug ascending so the order is deterministic. A query that matches
+// nothing returns `[]` (not an error).
+export function searchSkills(platformRoot, query, limit = 5) {
+    const terms = Array.from(new Set(query
+        .toLowerCase()
+        .split(/[^a-z0-9]+/)
+        .filter(t => t.length >= 2)));
+    if (terms.length === 0)
+        return [];
+    // Match each term on a word boundary at the start of a word (`\bterm`), not
+    // as an arbitrary substring. This keeps stemming (`quote` matches `quotes`,
+    // `quote-generation`) while rejecting incidental infix hits (`id` must not
+    // match `video`/`guide`, `art` must not match `start`/`smart`) that would
+    // otherwise flood results and collapse a term's IDF weight toward 1. Terms
+    // are alphanumeric (the tokenizer split on everything else), so no regex
+    // metacharacters can appear and no escaping is needed. Reused, flagless
+    // RegExps are stateless under `.test`.
+    const termRe = new Map(terms.map(t => [t, new RegExp(`\\b${t}`)]));
+    const matches = (hay, term) => termRe.get(term).test(hay);
+    const pluginsDir = resolve(platformRoot, "plugins");
+    if (!existsSync(pluginsDir))
+        return [];
+    let plugins;
+    try {
+        plugins = readdirSync(pluginsDir);
+    }
+    catch {
+        return [];
+    }
+    const candidates = [];
+    for (const pluginName of plugins) {
+        const skillsDir = resolve(pluginsDir, pluginName, "skills");
+        if (!existsSync(skillsDir))
+            continue;
+        let skills;
+        try {
+            skills = readdirSync(skillsDir);
+        }
+        catch {
+            continue;
+        }
+        for (const skillName of skills) {
+            const skillFile = resolve(skillsDir, skillName, "SKILL.md");
+            if (!existsSync(skillFile))
+                continue;
+            try {
+                if (!statSync(skillFile).isFile())
+                    continue;
+            }
+            catch {
+                continue;
+            }
+            let body;
+            try {
+                body = readFileSync(skillFile, "utf-8");
+            }
+            catch {
+                continue;
+            }
+            const { name, description } = parseSkillFrontmatter(body);
+            candidates.push({
+                pluginName,
+                skillName,
+                description,
+                name,
+                nameHay: `${skillName} ${name}`.toLowerCase(),
+                descHay: description.toLowerCase(),
+            });
+        }
+    }
+    if (candidates.length === 0)
+        return [];
+    // document frequency per term across name+description haystacks.
+    const N = candidates.length;
+    const df = new Map();
+    for (const term of terms) {
+        let count = 0;
+        for (const c of candidates) {
+            if (matches(c.nameHay, term) || matches(c.descHay, term))
+                count++;
+        }
+        df.set(term, count);
+    }
+    const hits = [];
+    for (const c of candidates) {
+        let score = 0;
+        for (const term of terms) {
+            const inName = matches(c.nameHay, term);
+            const inDesc = matches(c.descHay, term);
+            if (!inName && !inDesc)
+                continue;
+            const idf = Math.log((N + 1) / ((df.get(term) ?? 0) + 1)) + 1;
+            score += idf * (inName ? 2 : 1);
+        }
+        if (score > 0) {
+            hits.push({
+                pluginName: c.pluginName,
+                skillName: c.skillName,
+                file: `skills/${c.skillName}/SKILL.md`,
+                description: c.description,
+                score,
+            });
+        }
+    }
+    hits.sort((a, b) => b.score - a.score ||
+        a.skillName.localeCompare(b.skillName) ||
+        a.pluginName.localeCompare(b.pluginName));
+    return hits.slice(0, limit);
+}
+export async function loadSkill(platformRoot, skillName) {
+    const result = findSkillOwners(platformRoot, skillName);
+    if (result.status === "ambiguous") {
+        return { status: "ambiguous", candidates: result.candidates };
+    }
+    if (result.status === "not-found") {
+        return { status: "not-found" };
+    }
+    const [{ pluginName, file }] = result.candidates;
+    const absolutePath = resolve(platformRoot, "plugins", pluginName, file);
+    const body = await readFile(absolutePath, "utf-8");
+    return { status: "unique", pluginName, file, absolutePath, body };
+}
+//# sourceMappingURL=skill-resolution.js.map

package/payload/platform/plugins/admin/mcp/dist/skill-resolution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-resolution.js","sourceRoot":"","sources":["../src/skill-resolution.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,iFAAiF;AACjF,2EAA2E;AAC3E,oEAAoE;AACpE,sEAAsE;AACtE,oDAAoD;AACpD,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAC1E,+CAA+C;AAC/C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,sCAAsC,EAAE,MAAM,wCAAwC,CAAC;AAYhG,MAAM,eAAe,GAAG,iCAAiC,CAAC;AAC1D,8DAA8D;AAC9D,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,mDAAmD;AACnD,MAAM,oBAAoB,GAAG,8CAA8C,CAAC;AAO5E,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,4EAA4E;AAC5E,iDAAiD;AACjD,6EAA6E;AAC7E,+CAA+C;AAC/C,gFAAgF;AAChF,sFAAsF;AACtF,iEAAiE;AACjE,yEAAyE;AACzE,+EAA+E;AAC/E,yEAAyE;AACzE,MAAM,CAAC,MAAM,iCAAiC,GAAwB,IAAI,GAAG,CAC3E,sCAAsC,CACvC,CAAC;AAEF,6EAA6E;AAC7E,0EAA0E;AAC1E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAClC,oHAAoH,CAAC;AAOvH,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,wEAAwE;AACxE,uEAAuE;AACvE,yEAAyE;AACzE,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,OAAO,GAAG,CAAC,iBAAiB,KAAK,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,6EAA6E;AAC7E,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,8DAA8D;AAC9D,MAAM,UAAU,qBAAqB,CAAC,UAAkB,EAAE,IAAY;IACpE,OAAO,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,MAAM,UAAU,wBAAwB,CAAC,IAAwB,EAAE,GAAY;IAC7E,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,iCAAiC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,YAAoB,EAAE,SAAiB;IACrE,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACnF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;gBAAE,SAAS;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,SAAS,WAAW,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACxE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACrD,CAAC;AAED,uEAAuE;AACvE,qEAAqE;AACrE,mEAAmE;AACnE,sEAAsE;AACtE,yBAAyB;AACzB,EAAE;AACF,oCAAoC;AACpC,8EAA8E;AAC9E,mFAAmF;AACnF,EAAE;AACF,sEAAsE;AACtE,qDAAqD;AACrD,MAAM,UAAU,qBAAqB,CACnC,YAAoB,EACpB,UAAkB,EAClB,IAAY;IAEZ,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,eAAe,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,aAAa,GAAG,UAAU,SAAS,WAAW,CAAC;IACrD,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AAC/D,CAAC;AAqBD,gEAAgE;AAChE,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,yEAAyE;AACzE,sEAAsE;AACtE,4EAA4E;AAC5E,eAAe;AACf,EAAE;AACF,wEAAwE;AACxE,oEAAoE;AACpE,6BAA6B;AAC7B,EAAE;AACF,oBAAoB;AACpB,uCAAuC;AACvC,EAAE;AACF,sEAAsE;AACtE,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC9C,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAmBD,8EAA8E;AAC9E,2EAA2E;AAC3E,mEAAmE;AACnE,qEAAqE;AACrE,0EAA0E;AAC1E,6EAA6E;AAC7E,kDAAkD;AAClD,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC5C,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACpE,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAElC,MAAM,SAAS,GAAG,CAAC,GAA2B,EAAU,EAAE;QACxD,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,eAAe,CAAC,CAAC;QAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7B,qEAAqE;YACrE,qEAAqE;YACrE,wEAAwE;YACxE,sBAAsB;YACtB,MAAM,aAAa,GAAG,iCAAiC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrE,IAAI,MAAM,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;gBACpC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;YACD,qDAAqD;YACrD,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC1C,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,oBAAoB;gBAClE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAChC,IAAI,OAAO,KAAK,EAAE;oBAAE,SAAS;gBAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACrF,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,mEAAmE;AACnE,gFAAgF;AAChF,EAAE;AACF,qEAAqE;AACrE,8EAA8E;AAC9E,sCAAsC;AACtC,EAAE;AACF,yEAAyE;AACzE,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,oEAAoE;AACpE,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAC9E,uCAAuC;AACvC,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,KAAa,EAAE,KAAK,GAAG,CAAC;IACzE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CACtB,IAAI,GAAG,CACL,KAAK;SACF,WAAW,EAAE;SACb,KAAK,CAAC,YAAY,CAAC;SACnB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAC9B,CACF,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAElC,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,uCAAuC;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,IAAY,EAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEpF,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAUD,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACrC,IAAI,MAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAC5D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,SAAS;YACrC,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;oBAAE,SAAS;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC1D,UAAU,CAAC,IAAI,CAAC;gBACd,UAAU;gBACV,SAAS;gBACT,WAAW;gBACX,IAAI;gBACJ,OAAO,EAAE,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC7C,OAAO,EAAE,WAAW,CAAC,WAAW,EAAE;aACnC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,iEAAiE;IACjE,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;IAC5B,MAAM,EAAE,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC;gBAAE,KAAK,EAAE,CAAC;QACpE,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;gBAAE,SAAS;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC9D,KAAK,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CAAC;gBACR,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,IAAI,EAAE,UAAU,CAAC,CAAC,SAAS,WAAW;gBACtC,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,KAAK;aACN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACjB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK;QACjB,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QACtC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CACzC,CAAC;IACF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,YAAoB,EACpB,SAAiB;IAEjB,MAAM,MAAM,GAAG,eAAe,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;IACjD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACnD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AACpE,CAAC"}

package/payload/platform/plugins/admin/mcp/dist/tools/__tests__/account-lifecycle.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=account-lifecycle.test.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/tools/__tests__/account-lifecycle.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-lifecycle.test.d.ts","sourceRoot":"","sources":["../../../src/tools/__tests__/account-lifecycle.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/admin/mcp/dist/tools/__tests__/account-lifecycle.test.js

@@ -0,0 +1,57 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { mkdtempSync, mkdirSync, writeFileSync, existsSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { listAccountsFromDir, isHouseAccount, archiveAccountDir } from "../account-lifecycle.js";
+const HOUSE = "11111111-1111-1111-1111-111111111111";
+const CLIENT = "22222222-2222-2222-2222-222222222222";
+function seed(root, id, role) {
+    mkdirSync(join(root, id), { recursive: true });
+    writeFileSync(join(root, id, "account.json"), JSON.stringify({ accountId: id, role }));
+}
+const mk = () => mkdtempSync(join(tmpdir(), "acct-lifecycle-"));
+test("listAccountsFromDir returns registered accounts with roles", () => {
+    const root = mk();
+    try {
+        seed(root, HOUSE, "house");
+        seed(root, CLIENT, "client");
+        mkdirSync(join(root, "not-a-uuid")); // ignored
+        const list = listAccountsFromDir(root).sort((a, b) => a.accountId.localeCompare(b.accountId));
+        assert.equal(list.length, 2);
+        assert.deepEqual(list.find((a) => a.accountId === HOUSE), { accountId: HOUSE, role: "house", isHouse: true });
+        assert.deepEqual(list.find((a) => a.accountId === CLIENT), { accountId: CLIENT, role: "client", isHouse: false });
+    }
+    finally {
+        rmSync(root, { recursive: true });
+    }
+});
+test("isHouseAccount distinguishes house from client", () => {
+    const root = mk();
+    try {
+        seed(root, HOUSE, "house");
+        seed(root, CLIENT, "client");
+        assert.equal(isHouseAccount(root, HOUSE), true);
+        assert.equal(isHouseAccount(root, CLIENT), false);
+    }
+    finally {
+        rmSync(root, { recursive: true });
+    }
+});
+test("archiveAccountDir moves the dir to .trash and reports it absent", () => {
+    const root = mk();
+    try {
+        seed(root, CLIENT, "client");
+        const { trashPath, dirAbsent } = archiveAccountDir(root, CLIENT, "20260618T000000Z");
+        assert.equal(dirAbsent, true);
+        assert.equal(existsSync(join(root, CLIENT)), false);
+        assert.equal(existsSync(trashPath), true);
+        assert.equal(existsSync(join(trashPath, "account.json")), true);
+        // archived account is no longer in the registry
+        assert.equal(listAccountsFromDir(root).length, 0);
+    }
+    finally {
+        rmSync(root, { recursive: true });
+    }
+});
+//# sourceMappingURL=account-lifecycle.test.js.map

package/payload/platform/plugins/admin/mcp/dist/tools/__tests__/account-lifecycle.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-lifecycle.test.js","sourceRoot":"","sources":["../../../src/tools/__tests__/account-lifecycle.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjG,MAAM,KAAK,GAAG,sCAAsC,CAAC;AACrD,MAAM,MAAM,GAAG,sCAAsC,CAAC;AAEtD,SAAS,IAAI,CAAC,IAAY,EAAE,EAAU,EAAE,IAAY;IAClD,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzF,CAAC;AACD,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAEhE,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;IACtE,MAAM,IAAI,GAAG,EAAE,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7B,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,UAAU;QAC/C,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9F,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9G,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACpH,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC1D,MAAM,IAAI,GAAG,EAAE,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,IAAI,GAAG,EAAE,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7B,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACrF,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAChE,gDAAgD;QAChD,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AAClD,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/admin/mcp/dist/tools/account-lifecycle.d.ts

@@ -0,0 +1,34 @@
+export interface AccountSummary {
+    accountId: string;
+    role: string;
+    isHouse: boolean;
+}
+/** Enumerate the registry: every UUID dir with a parseable account.json, with
+ *  its role. An unparseable account.json is excluded (corruption discipline,
+ *  mirrors account-enumeration). */
+export declare function listAccountsFromDir(accountsDir: string): AccountSummary[];
+/** True iff `id` is the house account. Used to refuse delete/purge of the house. */
+export declare function isHouseAccount(accountsDir: string, id: string): boolean;
+/** Move a live account dir into `data/accounts/.trash/<id>-<ts>/`. Graph rows are
+ *  retained (purge is a separate, typed-confirmation step). Returns the trash
+ *  path and whether the live dir is now absent (the verified post-condition). */
+export declare function archiveAccountDir(accountsDir: string, id: string, ts: string): {
+    trashPath: string;
+    dirAbsent: boolean;
+};
+/** Scaffold a new client account dir by invoking the shared
+ *  `provision_account_dir` shell function (the same path setup-account.sh uses
+ *  for the house). Synchronous — throws on non-zero exit, which the caller turns
+ *  into a tool error. */
+export declare function provisionClientAccount(opts: {
+    platformRoot: string;
+    accountsDir: string;
+    accountId: string;
+    usersFile: string;
+}): string;
+/** Cypher for the account-scoped node count and the irreversible purge. The
+ *  purge deletes every node carrying the accountId (account scope is a property,
+ *  never an edge — see CLAUDE.md), detaching its relationships. */
+export declare const ACCOUNT_NODE_COUNT_CYPHER = "MATCH (n) WHERE n.accountId = $id RETURN count(n) AS c";
+export declare const ACCOUNT_PURGE_CYPHER = "MATCH (n) WHERE n.accountId = $id DETACH DELETE n";
+//# sourceMappingURL=account-lifecycle.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/tools/account-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-lifecycle.d.ts","sourceRoot":"","sources":["../../src/tools/account-lifecycle.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;oCAEoC;AACpC,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,EAAE,CAoBzE;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAEvE;AAED;;iFAEiF;AACjF,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,MAAM,GACT;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAO3C;AAED;;;yBAGyB;AACzB,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,CAoBT;AAED;;mEAEmE;AACnE,eAAO,MAAM,yBAAyB,2DAA2D,CAAC;AAClG,eAAO,MAAM,oBAAoB,sDAAsD,CAAC"}

package/payload/platform/plugins/admin/mcp/dist/tools/account-lifecycle.js

@@ -0,0 +1,78 @@
+// Account lifecycle helpers (Task 983) — pure / side-effecting building blocks
+// for the admin-core account_create / account_list / account_delete /
+// account_purge tools. Kept out of index.ts (which connects its stdio transport
+// at import time and so cannot be imported by a unit test) so the enumeration,
+// house-guard, archive, and provision logic are testable in isolation.
+import { execFileSync } from "node:child_process";
+import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync } from "node:fs";
+import { join, resolve } from "node:path";
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/** Enumerate the registry: every UUID dir with a parseable account.json, with
+ *  its role. An unparseable account.json is excluded (corruption discipline,
+ *  mirrors account-enumeration). */
+export function listAccountsFromDir(accountsDir) {
+    let names;
+    try {
+        names = readdirSync(accountsDir);
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const name of names) {
+        if (!UUID_RE.test(name))
+            continue;
+        const configPath = resolve(accountsDir, name, "account.json");
+        try {
+            const cfg = JSON.parse(readFileSync(configPath, "utf-8"));
+            const role = typeof cfg.role === "string" ? cfg.role : "";
+            out.push({ accountId: name, role, isHouse: role === "house" });
+        }
+        catch {
+            // missing/unparseable account.json — not a registered account
+        }
+    }
+    return out;
+}
+/** True iff `id` is the house account. Used to refuse delete/purge of the house. */
+export function isHouseAccount(accountsDir, id) {
+    return listAccountsFromDir(accountsDir).some((a) => a.accountId === id && a.isHouse);
+}
+/** Move a live account dir into `data/accounts/.trash/<id>-<ts>/`. Graph rows are
+ *  retained (purge is a separate, typed-confirmation step). Returns the trash
+ *  path and whether the live dir is now absent (the verified post-condition). */
+export function archiveAccountDir(accountsDir, id, ts) {
+    const liveDir = join(accountsDir, id);
+    const trashRoot = join(accountsDir, ".trash");
+    mkdirSync(trashRoot, { recursive: true });
+    const trashPath = join(trashRoot, `${id}-${ts}`);
+    renameSync(liveDir, trashPath);
+    return { trashPath, dirAbsent: !existsSync(liveDir) };
+}
+/** Scaffold a new client account dir by invoking the shared
+ *  `provision_account_dir` shell function (the same path setup-account.sh uses
+ *  for the house). Synchronous — throws on non-zero exit, which the caller turns
+ *  into a tool error. */
+export function provisionClientAccount(opts) {
+    const accountDir = join(opts.accountsDir, opts.accountId);
+    execFileSync("bash", ["-c", '. "$SCRIPT_DIR/lib/provision-account-dir.sh"; provision_account_dir "$ACCT_DIR" "$ACCT_ID" client'], {
+        env: {
+            ...process.env,
+            TEMPLATES_DIR: join(opts.platformRoot, "templates"),
+            PROJECT_DIR: opts.platformRoot,
+            SCRIPT_DIR: join(opts.platformRoot, "scripts"),
+            USERS_FILE: opts.usersFile,
+            ACCT_DIR: accountDir,
+            ACCT_ID: opts.accountId,
+        },
+        encoding: "utf-8",
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+    return accountDir;
+}
+/** Cypher for the account-scoped node count and the irreversible purge. The
+ *  purge deletes every node carrying the accountId (account scope is a property,
+ *  never an edge — see CLAUDE.md), detaching its relationships. */
+export const ACCOUNT_NODE_COUNT_CYPHER = "MATCH (n) WHERE n.accountId = $id RETURN count(n) AS c";
+export const ACCOUNT_PURGE_CYPHER = "MATCH (n) WHERE n.accountId = $id DETACH DELETE n";
+//# sourceMappingURL=account-lifecycle.js.map

package/payload/platform/plugins/admin/mcp/dist/tools/account-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-lifecycle.js","sourceRoot":"","sources":["../../src/tools/account-lifecycle.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,sEAAsE;AACtE,gFAAgF;AAChF,+EAA+E;AAC/E,uEAAuE;AAEvE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAQlF;;oCAEoC;AACpC,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAClC,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAuB,CAAC;YAChF,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;QAChE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,WAAmB,EAAE,EAAU;IAC5D,OAAO,mBAAmB,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;AACvF,CAAC;AAED;;iFAEiF;AACjF,MAAM,UAAU,iBAAiB,CAC/B,WAAmB,EACnB,EAAU,EACV,EAAU;IAEV,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC9C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACjD,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC/B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;AACxD,CAAC;AAED;;;yBAGyB;AACzB,MAAM,UAAU,sBAAsB,CAAC,IAKtC;IACC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1D,YAAY,CACV,MAAM,EACN,CAAC,IAAI,EAAE,mGAAmG,CAAC,EAC3G;QACE,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC;YACnD,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC;YAC9C,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,IAAI,CAAC,SAAS;SACxB;QACD,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CACF,CAAC;IACF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;mEAEmE;AACnE,MAAM,CAAC,MAAM,yBAAyB,GAAG,wDAAwD,CAAC;AAClG,MAAM,CAAC,MAAM,oBAAoB,GAAG,mDAAmD,CAAC"}

package/payload/platform/plugins/admin/mcp/dist/tools/admin-identity-authenticate.d.ts

@@ -0,0 +1,6 @@
+export interface AuthenticateDeps {
+    fetchImpl?: typeof fetch;
+    uiPort?: string;
+}
+export declare function runAuthenticate(pin: string, deps?: AuthenticateDeps): Promise<string>;
+//# sourceMappingURL=admin-identity-authenticate.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/tools/admin-identity-authenticate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-identity-authenticate.d.ts","sourceRoot":"","sources":["../../src/tools/admin-identity-authenticate.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AASD,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAuB/F"}

package/payload/platform/plugins/admin/mcp/dist/tools/admin-identity-authenticate.js

@@ -0,0 +1,32 @@
+// Task 619 — admin-identity-authenticate tool.
+//
+// The agent-callable PIN-submit surface for native-CC admin sessions. The
+// PreToolUse identity gate validates the PIN, writes per-session auth state, and
+// only then allows this tool to run; the tool itself re-asks the same loopback
+// endpoint solely to fetch and return the authenticated operator's profile to
+// the agent. It never touches users.json or Neo4j directly — the endpoint is the
+// single resolution surface, so `loadUserProfile` is not duplicated here.
+export async function runAuthenticate(pin, deps = {}) {
+    const f = deps.fetchImpl ?? fetch;
+    const port = deps.uiPort ?? process.env.MAXY_UI_INTERNAL_PORT ?? "";
+    const url = `http://127.0.0.1:${port}/api/admin/identity/validate`;
+    let data;
+    try {
+        const r = await f(url, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({ pin }),
+        });
+        data = (await r.json());
+    }
+    catch {
+        return "Identity service unavailable; could not load your profile.";
+    }
+    if (data.kind !== "match")
+        return "Invalid PIN.";
+    const name = data.userName ?? "operator";
+    const profile = data.aboutOwner?.ok ? (data.aboutOwner.body ?? "") : "";
+    console.error(`[admin-identity] op=about-owner-loaded userId=${(data.userId ?? "").slice(0, 8)}`);
+    return `Authenticated as ${name}.\n\n${profile}`.trim();
+}
+//# sourceMappingURL=admin-identity-authenticate.js.map

package/payload/platform/plugins/admin/mcp/dist/tools/admin-identity-authenticate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-identity-authenticate.js","sourceRoot":"","sources":["../../src/tools/admin-identity-authenticate.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,EAAE;AACF,0EAA0E;AAC1E,iFAAiF;AACjF,+EAA+E;AAC/E,8EAA8E;AAC9E,iFAAiF;AACjF,0EAA0E;AAc1E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,OAAyB,EAAE;IAC5E,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAA;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAA;IACnE,MAAM,GAAG,GAAG,oBAAoB,IAAI,8BAA8B,CAAA;IAElE,IAAI,IAAsB,CAAA;IAC1B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;SAC9B,CAAC,CAAA;QACF,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAqB,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,4DAA4D,CAAC;IACtE,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,cAAc,CAAC;IAEjD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,OAAO,oBAAoB,IAAI,QAAQ,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC"}