@rubytech/create-sitedesk-code 0.1.437 → 0.1.439

package/payload/platform/services/claude-session-manager/dist/redundant-operator-seat-audit.js

@@ -0,0 +1,127 @@
+// Task 1568 — standing redundant-operator-seat audit. A role:"client" sub-account
+// carries exactly one identity node, its business owner (AdminUser{role:'owner'}).
+// Any other AdminUser{accountId} on a client account is a redundant operator seat:
+// since Task 999 admin access is install-wide, so the seat grants nothing an
+// install-wide admin does not already have, and it fragments identity. admin-add
+// no longer creates one going forward; this periodic read is the only signal for
+// seats persisted before that fix, because a redundant seat emits no error and
+// does not reproduce on demand. Detector only — removal is a deliberate
+// remediation (Task 1569), never an automatic timer-driven delete.
+//
+// admin-add seats carry no au.role (role 'admin' lives on the ADMIN_OF edge), so
+// the predicate is not-the-owner rather than a role:'admin' match. Best-effort by
+// construction: a Neo4j-unreachable read logs `op=unavailable` rather than
+// crashing the manager (Neo4j may not be up at boot). Shape mirrors
+// rootless-client-audit.ts: a pure predicate + formatter (unit-tested) + an
+// impure collector + a start/stop factory whose setInterval is unref'd.
+import neo4j from 'neo4j-driver';
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+const TAG = '[identity-audit]';
+/** The redundant-seat invariant, read side: an AdminUser on a client account is a
+ *  redundant operator seat unless it is the owner. admin-add seats carry no
+ *  au.role, so the predicate is not-the-owner, never a role:'admin' match. */
+export function isRedundantOperatorSeat(role) {
+    return (role ?? '').trim() !== 'owner';
+}
+/** One alarm line per flagged seat; ids truncated to 8 for readability. */
+export function formatRedundantSeatLine(f) {
+    return `${TAG} op=redundant-operator-seat account=${f.accountId.slice(0, 8)} adminUserId=${f.adminUserId.slice(0, 8)}`;
+}
+/** Return every non-owner AdminUser seated on the given client accounts. One
+ *  round-trip: the cypher returns all AdminUser{accountId} rows for the client
+ *  ids and the not-owner filter is applied in JS (same predicate the audit
+ *  exposes). Empty input issues no query. */
+export async function auditRedundantOperatorSeats(session, clientIds) {
+    if (clientIds.length === 0)
+        return [];
+    const res = await session.run(`UNWIND $ids AS id
+     MATCH (au:AdminUser {accountId: id})
+     RETURN id AS accountId, coalesce(au.userId, '') AS adminUserId, au.role AS role`, { ids: clientIds });
+    const findings = [];
+    for (const rec of res.records) {
+        if (isRedundantOperatorSeat(rec.get('role'))) {
+            findings.push({
+                accountId: String(rec.get('accountId')),
+                adminUserId: String(rec.get('adminUserId')),
+            });
+        }
+    }
+    return findings;
+}
+/** Enumerate role:"client" accountIds under the accounts root (filesystem). */
+function clientAccountIds(accountsRoot) {
+    let entries;
+    try {
+        entries = readdirSync(accountsRoot);
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const entry of entries) {
+        const cfgPath = join(accountsRoot, entry, 'account.json');
+        if (!existsSync(cfgPath))
+            continue;
+        try {
+            const cfg = JSON.parse(readFileSync(cfgPath, 'utf-8'));
+            if (cfg.role === 'client')
+                out.push(entry);
+        }
+        catch {
+            // unparseable account.json — excluded
+        }
+    }
+    return out;
+}
+/** Run one audit pass and log an alarm line per flagged seat. Best-effort Neo4j:
+ *  absent env or an unreachable/erroring read logs `op=unavailable` and never
+ *  throws. A clean pass logs a single `op=ok` line so the audit's own liveness is
+ *  visible. */
+export async function emitRedundantOperatorSeatAudit(deps) {
+    if (!deps.neo4jUri || !deps.neo4jPassword) {
+        deps.logger(`${TAG} op=unavailable reason=no-neo4j-env`);
+        return;
+    }
+    const driver = neo4j.driver(deps.neo4jUri, neo4j.auth.basic(deps.neo4jUser, deps.neo4jPassword));
+    const session = driver.session();
+    try {
+        const findings = await auditRedundantOperatorSeats(session, clientAccountIds(deps.accountsRoot));
+        if (findings.length === 0) {
+            deps.logger(`${TAG} op=ok redundant-operator-seats=0`);
+            return;
+        }
+        for (const f of findings)
+            deps.logger(formatRedundantSeatLine(f));
+    }
+    catch (err) {
+        deps.logger(`${TAG} op=unavailable reason=${err instanceof Error ? err.message : String(err)}`);
+    }
+    finally {
+        await session.close();
+        await driver.close();
+    }
+}
+/** Standing periodic audit. Unref'd interval so it never holds the process open;
+ *  each tick re-emits best-effort. */
+export function createRedundantOperatorSeatAudit(deps) {
+    let timer = null;
+    return {
+        start() {
+            if (timer)
+                return;
+            timer = setInterval(() => {
+                void emitRedundantOperatorSeatAudit(deps);
+            }, deps.intervalMs);
+            if (typeof timer.unref === 'function')
+                timer.unref();
+        },
+        stop() {
+            if (timer) {
+                clearInterval(timer);
+                timer = null;
+            }
+        },
+    };
+}
+//# sourceMappingURL=redundant-operator-seat-audit.js.map

package/payload/platform/services/claude-session-manager/dist/redundant-operator-seat-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redundant-operator-seat-audit.js","sourceRoot":"","sources":["../src/redundant-operator-seat-audit.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,mFAAmF;AACnF,mFAAmF;AACnF,6EAA6E;AAC7E,iFAAiF;AACjF,iFAAiF;AACjF,+EAA+E;AAC/E,wEAAwE;AACxE,mEAAmE;AACnE,EAAE;AACF,iFAAiF;AACjF,kFAAkF;AAClF,2EAA2E;AAC3E,oEAAoE;AACpE,4EAA4E;AAC5E,wEAAwE;AAExE,OAAO,KAAK,MAAM,cAAc,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,MAAM,GAAG,GAAG,kBAAkB,CAAA;AAc9B;;8EAE8E;AAC9E,MAAM,UAAU,uBAAuB,CAAC,IAAmB;IACzD,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,OAAO,CAAA;AACxC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,uBAAuB,CAAC,CAAuB;IAC7D,OAAO,GAAG,GAAG,uCAAuC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;AACxH,CAAC;AAED;;;6CAG6C;AAC7C,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAyB,EACzB,SAAmB;IAEnB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACrC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;;qFAEiF,EACjF,EAAE,GAAG,EAAE,SAAS,EAAE,CACnB,CAAA;IACD,MAAM,QAAQ,GAA2B,EAAE,CAAA;IAC3C,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAkB,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACvC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;aAC5C,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,+EAA+E;AAC/E,SAAS,gBAAgB,CAAC,YAAoB;IAC5C,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,cAAc,CAAC,CAAA;QACzD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAQ;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAuB,CAAA;YAC5E,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAUD;;;eAGe;AACf,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,IAA4B;IAC/E,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,qCAAqC,CAAC,CAAA;QACxD,OAAM;IACR,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAA;IAChG,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;IAChC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAA;QAChG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,mCAAmC,CAAC,CAAA;YACtD,OAAM;QACR,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAA;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACjG,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;QACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;AACH,CAAC;AAOD;sCACsC;AACtC,MAAM,UAAU,gCAAgC,CAC9C,IAAqD;IAErD,IAAI,KAAK,GAA0B,IAAI,CAAA;IACvC,OAAO;QACL,KAAK;YACH,IAAI,KAAK;gBAAE,OAAM;YACjB,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;gBACvB,KAAK,8BAA8B,CAAC,IAAI,CAAC,CAAA;YAC3C,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YACnB,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;gBAAE,KAAK,CAAC,KAAK,EAAE,CAAA;QACtD,CAAC;QACD,IAAI;YACF,IAAI,KAAK,EAAE,CAAC;gBACV,aAAa,CAAC,KAAK,CAAC,CAAA;gBACpB,KAAK,GAAG,IAAI,CAAA;YACd,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/payload/platform/services/claude-session-manager/dist/tool-registration-drift.d.ts

@@ -0,0 +1,57 @@
+export type ToolRegistrationDriftReason = 'not-installed' | 'no-mcpServers-manifest' | 'dist-missing';
+/** The generated-manifest disposition of one tool-plugin on disk. A tool-plugin
+ *  declares tools and ships an mcp/ directory (an mcpServers descriptor in the
+ *  tool surface) — the plugins whose server must mount for their tools to be
+ *  callable, whether admin- or specialist-facing. */
+export interface ToolPluginManifestState {
+    manifestPresent: boolean;
+    hasMcpServers: boolean;
+    distPresent: boolean;
+}
+export interface ToolRegistrationDriftDefect {
+    accountId: string;
+    /** Tool-plugin dir name as it appears in account.json enabledPlugins. */
+    plugin: string;
+    /** The MCP server the mounted plugin would expose (== plugin dir name). */
+    expectedServer: string;
+    reason: ToolRegistrationDriftReason;
+}
+export interface ToolRegistrationDriftResult {
+    ok: boolean;
+    defects: ToolRegistrationDriftDefect[];
+    /** Count of (account, tool-plugin) pairs checked. */
+    inspected: number;
+}
+/** Classify one tool-plugin's manifest state into a drift reason, or null when
+ *  the server would mount (manifest present, carries mcpServers, dist on disk). */
+export declare function classifyToolRegistration(state: ToolPluginManifestState): ToolRegistrationDriftReason | null;
+/** Cross-check each account's enabled tool-plugins against their generated
+ *  manifests. `toolPlugins` maps a tool-plugin dir name to its on-disk manifest
+ *  state; an enabledPlugins entry absent from that map is not a tool-plugin
+ *  (platform non-tool plugin, skill-only premium sub, leaked foreign sub) and is
+ *  out of scope here. */
+export declare function assertToolRegistrationDrift(accounts: ReadonlyArray<{
+    accountId: string;
+    enabledPlugins: readonly string[];
+}>, toolPlugins: ReadonlyMap<string, ToolPluginManifestState>): ToolRegistrationDriftResult;
+/** Index plugin dirs across the roots, keyed by dir basename — the same key
+ *  loadToolSurface and account.json enabledPlugins use. Platform plugins live at
+ *  `<root>/<name>`; premium subs at `<premiumRoot>/<bundle>/plugins/<sub>`;
+ *  standalone premium bundles at `<premiumRoot>/<bundle>`. */
+export declare function indexPluginDirs(pluginRoots: readonly string[]): Map<string, string>;
+/** Read the generated-manifest state of every named tool-plugin. A name with no
+ *  dir on disk is reported as manifestPresent:false (→ not-installed), so a
+ *  tool-plugin that vanished from disk is still surfaced rather than skipped. A
+ *  present-but-corrupt manifest reads as manifestPresent:true, hasMcpServers:
+ *  false (→ no-mcpServers-manifest).
+ *
+ *  A tool-plugin whose `mcp:` server is a shared `platform/lib/<name>` binary
+ *  rather than a plugin-local `mcp/` dir (e.g. `graph`, served by
+ *  `platform/lib/graph-mcp`) is EXCLUDED from the result — the manifest
+ *  generator only emits `mcpServers` for plugins that ship a plugin-local `mcp/`
+ *  (its `hasMcp` predicate), so a shared-lib plugin's generated manifest carries
+ *  no `mcpServers` by architecture, not by a `skip` flag. Judging it by the
+ *  generated-manifest criterion would false-FATAL on every boot. This mirrors
+ *  the generator's `hasMcp` check exactly. */
+export declare function readToolPluginManifestStates(pluginRoots: readonly string[], toolPluginNames: Iterable<string>): Map<string, ToolPluginManifestState>;
+//# sourceMappingURL=tool-registration-drift.d.ts.map

package/payload/platform/services/claude-session-manager/dist/tool-registration-drift.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registration-drift.d.ts","sourceRoot":"","sources":["../src/tool-registration-drift.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,2BAA2B,GACnC,eAAe,GACf,wBAAwB,GACxB,cAAc,CAAA;AAElB;;;qDAGqD;AACrD,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,OAAO,CAAA;IACxB,aAAa,EAAE,OAAO,CAAA;IACtB,WAAW,EAAE,OAAO,CAAA;CACrB;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAA;IACjB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAA;IACd,2EAA2E;IAC3E,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,2BAA2B,CAAA;CACpC;AAED,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,OAAO,CAAA;IACX,OAAO,EAAE,2BAA2B,EAAE,CAAA;IACtC,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;mFACmF;AACnF,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,2BAA2B,GAAG,IAAI,CAKpC;AAED;;;;yBAIyB;AACzB,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,aAAa,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,EACjF,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,uBAAuB,CAAC,GACxD,2BAA2B,CAe7B;AAED;;;8DAG8D;AAC9D,wBAAgB,eAAe,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAkCnF;AAED;;;;;;;;;;;;;8CAa8C;AAC9C,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,GAChC,GAAG,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAmCtC"}

package/payload/platform/services/claude-session-manager/dist/tool-registration-drift.js

@@ -0,0 +1,147 @@
+// Boot-time tool-availability reconciliation. Maxy enables a tool-bearing plugin
+// per account (account.json enabledPlugins) and the plugin's PLUGIN.md declares
+// tools plus an `mcp:` block — but only the GENERATED `.claude-plugin/plugin.json`
+// mcpServers block makes Claude Code spawn the server. A plugin on
+// `mcp-manifest: skip` keeps its PLUGIN.md `mcp:` block (so the source-level
+// `mcp-allowlist-without-server` gate passes) while the generator drops mcpServers
+// from the artifact CC consumes — the server never mounts and every tool it owns
+// is "listed but not live", silent until an operator complains. This module names
+// that gap at manager boot.
+//
+// Twin of skill-registration-drift.ts (which does the same for a sub-plugin's
+// SKILLS). Like that check this one does NOT refuse boot — an unmounted
+// tool-plugin must not brick the whole install; the manager logs a standing
+// FATAL line per defect and continues (Task 1574).
+import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+/** Classify one tool-plugin's manifest state into a drift reason, or null when
+ *  the server would mount (manifest present, carries mcpServers, dist on disk). */
+export function classifyToolRegistration(state) {
+    if (!state.manifestPresent)
+        return 'not-installed';
+    if (!state.hasMcpServers)
+        return 'no-mcpServers-manifest';
+    if (!state.distPresent)
+        return 'dist-missing';
+    return null;
+}
+/** Cross-check each account's enabled tool-plugins against their generated
+ *  manifests. `toolPlugins` maps a tool-plugin dir name to its on-disk manifest
+ *  state; an enabledPlugins entry absent from that map is not a tool-plugin
+ *  (platform non-tool plugin, skill-only premium sub, leaked foreign sub) and is
+ *  out of scope here. */
+export function assertToolRegistrationDrift(accounts, toolPlugins) {
+    const defects = [];
+    let inspected = 0;
+    for (const account of accounts) {
+        for (const plugin of account.enabledPlugins) {
+            const state = toolPlugins.get(plugin);
+            if (!state)
+                continue; // not a tool-plugin on disk — out of scope
+            inspected += 1;
+            const reason = classifyToolRegistration(state);
+            if (reason) {
+                defects.push({ accountId: account.accountId, plugin, expectedServer: plugin, reason });
+            }
+        }
+    }
+    return { ok: defects.length === 0, defects, inspected };
+}
+/** Index plugin dirs across the roots, keyed by dir basename — the same key
+ *  loadToolSurface and account.json enabledPlugins use. Platform plugins live at
+ *  `<root>/<name>`; premium subs at `<premiumRoot>/<bundle>/plugins/<sub>`;
+ *  standalone premium bundles at `<premiumRoot>/<bundle>`. */
+export function indexPluginDirs(pluginRoots) {
+    const out = new Map();
+    const addIfPlugin = (name, dir) => {
+        if (name.startsWith('.'))
+            return;
+        try {
+            if (!statSync(dir).isDirectory())
+                return;
+        }
+        catch {
+            return;
+        }
+        if (existsSync(join(dir, 'PLUGIN.md')))
+            out.set(name, dir);
+    };
+    for (const root of pluginRoots) {
+        let entries;
+        try {
+            entries = readdirSync(root);
+        }
+        catch {
+            continue;
+        }
+        for (const name of entries) {
+            const dir = join(root, name);
+            addIfPlugin(name, dir); // platform plugin / standalone premium bundle
+            const subDir = join(dir, 'plugins'); // premium bundle subs
+            if (existsSync(subDir)) {
+                let subs;
+                try {
+                    subs = readdirSync(subDir);
+                }
+                catch {
+                    subs = [];
+                }
+                for (const sub of subs)
+                    addIfPlugin(sub, join(subDir, sub));
+            }
+        }
+    }
+    return out;
+}
+/** Read the generated-manifest state of every named tool-plugin. A name with no
+ *  dir on disk is reported as manifestPresent:false (→ not-installed), so a
+ *  tool-plugin that vanished from disk is still surfaced rather than skipped. A
+ *  present-but-corrupt manifest reads as manifestPresent:true, hasMcpServers:
+ *  false (→ no-mcpServers-manifest).
+ *
+ *  A tool-plugin whose `mcp:` server is a shared `platform/lib/<name>` binary
+ *  rather than a plugin-local `mcp/` dir (e.g. `graph`, served by
+ *  `platform/lib/graph-mcp`) is EXCLUDED from the result — the manifest
+ *  generator only emits `mcpServers` for plugins that ship a plugin-local `mcp/`
+ *  (its `hasMcp` predicate), so a shared-lib plugin's generated manifest carries
+ *  no `mcpServers` by architecture, not by a `skip` flag. Judging it by the
+ *  generated-manifest criterion would false-FATAL on every boot. This mirrors
+ *  the generator's `hasMcp` check exactly. */
+export function readToolPluginManifestStates(pluginRoots, toolPluginNames) {
+    const dirs = indexPluginDirs(pluginRoots);
+    const out = new Map();
+    for (const name of toolPluginNames) {
+        const dir = dirs.get(name);
+        if (!dir) {
+            out.set(name, { manifestPresent: false, hasMcpServers: false, distPresent: false });
+            continue;
+        }
+        // Mirror generate-plugin-manifests.mjs `hasMcp`: only a plugin-local mcp/
+        // dir yields a generated mcpServers block. Shared-lib-server plugins are a
+        // different mount architecture, out of this gate's remit.
+        const hasLocalMcp = existsSync(join(dir, 'mcp', 'dist', 'index.js')) ||
+            existsSync(join(dir, 'mcp', 'package.json'));
+        if (!hasLocalMcp)
+            continue;
+        const manifestPath = join(dir, '.claude-plugin', 'plugin.json');
+        const manifestPresent = existsSync(manifestPath);
+        let hasMcpServers = false;
+        if (manifestPresent) {
+            try {
+                const parsed = JSON.parse(readFileSync(manifestPath, 'utf-8'));
+                hasMcpServers =
+                    !!parsed.mcpServers &&
+                        typeof parsed.mcpServers === 'object' &&
+                        !Array.isArray(parsed.mcpServers) &&
+                        Object.keys(parsed.mcpServers).length > 0;
+            }
+            catch {
+                /* corrupt manifest → hasMcpServers stays false → no-mcpServers-manifest */
+            }
+        }
+        const distPresent = existsSync(join(dir, 'mcp', 'dist', 'index.js'));
+        out.set(name, { manifestPresent, hasMcpServers, distPresent });
+    }
+    return out;
+}
+//# sourceMappingURL=tool-registration-drift.js.map

package/payload/platform/services/claude-session-manager/dist/tool-registration-drift.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registration-drift.js","sourceRoot":"","sources":["../src/tool-registration-drift.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,gFAAgF;AAChF,mFAAmF;AACnF,mEAAmE;AACnE,6EAA6E;AAC7E,mFAAmF;AACnF,iFAAiF;AACjF,kFAAkF;AAClF,4BAA4B;AAC5B,EAAE;AACF,8EAA8E;AAC9E,wEAAwE;AACxE,4EAA4E;AAC5E,mDAAmD;AAEnD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAiChC;mFACmF;AACnF,MAAM,UAAU,wBAAwB,CACtC,KAA8B;IAE9B,IAAI,CAAC,KAAK,CAAC,eAAe;QAAE,OAAO,eAAe,CAAA;IAClD,IAAI,CAAC,KAAK,CAAC,aAAa;QAAE,OAAO,wBAAwB,CAAA;IACzD,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,cAAc,CAAA;IAC7C,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;yBAIyB;AACzB,MAAM,UAAU,2BAA2B,CACzC,QAAiF,EACjF,WAAyD;IAEzD,MAAM,OAAO,GAAkC,EAAE,CAAA;IACjD,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACrC,IAAI,CAAC,KAAK;gBAAE,SAAQ,CAAC,2CAA2C;YAChE,SAAS,IAAI,CAAC,CAAA;YACd,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAA;YAC9C,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;YACxF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;AACzD,CAAC;AAED;;;8DAG8D;AAC9D,MAAM,UAAU,eAAe,CAAC,WAA8B;IAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAA;IACrC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,GAAW,EAAQ,EAAE;QACtD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAM;QAChC,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;gBAAE,OAAM;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC5D,CAAC,CAAA;IACD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAQ;QACV,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YAC5B,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA,CAAC,8CAA8C;YACrE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA,CAAC,sBAAsB;YAC1D,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,IAAI,IAAc,CAAA;gBAClB,IAAI,CAAC;oBACH,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,GAAG,EAAE,CAAA;gBACX,CAAC;gBACD,KAAK,MAAM,GAAG,IAAI,IAAI;oBAAE,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;;;;;8CAa8C;AAC9C,MAAM,UAAU,4BAA4B,CAC1C,WAA8B,EAC9B,eAAiC;IAEjC,MAAM,IAAI,GAAG,eAAe,CAAC,WAAW,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAmC,CAAA;IACtD,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;YACnF,SAAQ;QACV,CAAC;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,0DAA0D;QAC1D,MAAM,WAAW,GACf,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YAChD,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAA;QAC9C,IAAI,CAAC,WAAW;YAAE,SAAQ;QAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAA;QAC/D,MAAM,eAAe,GAAG,UAAU,CAAC,YAAY,CAAC,CAAA;QAChD,IAAI,aAAa,GAAG,KAAK,CAAA;QACzB,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAA6B,CAAA;gBAC1F,aAAa;oBACX,CAAC,CAAC,MAAM,CAAC,UAAU;wBACnB,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;wBACrC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;wBACjC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAqC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;YACxE,CAAC;YAAC,MAAM,CAAC;gBACP,2EAA2E;YAC7E,CAAC;QACH,CAAC;QACD,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAA;QACpE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAA;IAChE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/payload/premium-plugins/sitedesk/plugins/sitedesk-job/.claude-plugin/plugin.json

@@ -4,5 +4,18 @@
   "version": "0.1.0",
   "author": {
     "name": "Rubytech LLC"
+  },
+  "mcpServers": {
+    "sitedesk-job": {
+      "type": "stdio",
+      "command": "node",
+      "args": [
+        "${CLAUDE_PLUGIN_ROOT}/lib/mcp-spawn-tee/index.js",
+        "${CLAUDE_PLUGIN_ROOT}/mcp/dist/index.js"
+      ],
+      "env": {
+        "MCP_SPAWN_TEE_NAME": "sitedesk-job"
+      }
+    }
   }
 }

package/payload/premium-plugins/sitedesk/plugins/sitedesk-job/PLUGIN.md

@@ -12,7 +12,7 @@ mcp:
     PLATFORM_ROOT: ${PLATFORM_ROOT}
     ACCOUNT_ID: ${ACCOUNT_ID}
     SESSION_ID: ${SESSION_ID}
-mcp-manifest: skip
+mcp-manifest: auto
 tools:
   - name: quote-engine-run
     publicAllowlist: false

package/payload/premium-plugins/sitedesk/plugins/sitedesk-job/lib/mcp-spawn-tee/index.js

@@ -0,0 +1,193 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * MCP spawn-tee — in-process stderr capture + lifecycle observability.
+ *
+ * Claude Code spawns each MCP server itself; the platform never holds a
+ * ChildProcess handle. This shim sits between Claude Code and the real MCP
+ * server: Claude Code runs `node <this> <real-entry>`, and the shim runs the
+ * real entry IN ITS OWN PROCESS via dynamic import() — one node runtime, not
+ * two. Before importing, it replaces process.stderr.write with a tee so every
+ * stderr byte the server writes is mirrored to the log sinks; stdin and stdout
+ * (the JSON-RPC channel) are never touched.
+ *
+ *   Claude Code CLI → shim (this file) = node running <real-entry> in-process
+ *        stdin/stdout : untouched (JSON-RPC channel)
+ *        stderr       : process.stderr.write teed → per-date + per-session + passthrough
+ *
+ * Destinations (Task 706) — unchanged:
+ *   - `${LOG_DIR}/mcp-<name>-stderr-<date>.log`  — per-date raw (back-compat;
+ *     the in-process mcp-stderr-tee and the [mcp-init-error] probe read it).
+ *   - `${LOG_DIR}/mcp-<name>-<SESSION_ID>.log`   — per-session raw + lifecycle
+ *     lines. Authoritative sink. Absent when SESSION_ID is unset (enumeration
+ *     spawn) — then the per-date file is the fallback.
+ *   - `server.log` via the loopback log-ingest route — best-effort mirror of
+ *     the [mcp-helper] lifecycle lines.
+ *
+ * Lifecycle lines, correlation key `session=<id8> server=<name>` — unchanged:
+ *   [mcp-helper] op=spawn ... pid= entry=
+ *   [mcp-helper] op=boot  ... head=<first stderr bytes>
+ *   [mcp-helper] op=exit  ... code= signal= lifetimeMs= stderr-tail=
+ *
+ * Process model (Task 989): the shim IS the server's process. op=exit fires
+ * from process.on("exit"), so it covers a normal exit, a non-zero exit, an
+ * uncaught throw (code 1), and a catchable-signal exit (SIGTERM/SIGINT/SIGHUP,
+ * whose handlers record the signal name). An external SIGKILL is uncatchable
+ * and leaves no op=exit line — the per-session stderr tail already on disk and
+ * Claude Code's own transport-drop are the evidence for that death mode.
+ *
+ * The shim never writes to fd 1 (stdout) — that is the JSON-RPC channel.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const node_url_1 = require("node:url");
+const SERVER_NAME = process.env.MCP_SPAWN_TEE_NAME ?? "unknown";
+const LOG_DIR = process.env.LOG_DIR;
+const SESSION_ID = process.env.SESSION_ID;
+const PLATFORM_PORT = process.env.PLATFORM_PORT;
+const ENTRY = process.argv[2];
+const SESSION_ID8 = SESSION_ID ? SESSION_ID.slice(0, 8) : "—";
+const spawnStamp = Date.now();
+// Per-session raw + lifecycle log (Task 706). Empty SESSION_ID (enumeration
+// spawn) → undefined, and the per-date file is the fallback.
+const perSessionPath = LOG_DIR && SESSION_ID
+    ? (0, node_path_1.resolve)(LOG_DIR, `mcp-${SERVER_NAME}-${SESSION_ID}.log`)
+    : undefined;
+const perDatePath = LOG_DIR
+    ? (0, node_path_1.resolve)(LOG_DIR, `mcp-${SERVER_NAME}-stderr-${new Date(spawnStamp).toISOString().slice(0, 10)}.log`)
+    : undefined;
+// Rolling tail of entry stderr for op=exit. Capped so a chatty server cannot
+// grow the buffer without bound.
+const TAIL_CAP = 2048;
+let stderrTail = "";
+let bootEmitted = false;
+let exitEmitted = false;
+let exitSignal;
+// The real stderr writer, captured before the tee replaces it. Lifecycle lines
+// and stderr passthrough both go through this so they are never re-teed into
+// the per-date sink nor recursed back into the patched writer.
+const rawStderrWrite = process.stderr.write.bind(process.stderr);
+// LOG_DIR is created once, lazily, on the first successful append — not per
+// chunk. teeWrite runs on the server's own stderr hot path now, so a per-call
+// mkdirSync would be two syscalls per log line for nothing.
+let logDirReady = false;
+function appendSafe(path, data) {
+    if (!path || !LOG_DIR)
+        return;
+    try {
+        if (!logDirReady) {
+            (0, node_fs_1.mkdirSync)(LOG_DIR, { recursive: true });
+            logDirReady = true;
+        }
+        (0, node_fs_1.appendFileSync)(path, data);
+    }
+    catch {
+        /* unwritable destination — never mask primary output */
+    }
+}
+// Best-effort mirror of a lifecycle line to server.log via the loopback
+// log-ingest route. Fire-and-forget: the per-session file is authoritative, so
+// a dropped POST loses nothing. On the "exit" event the loop is stopping, so
+// the op=exit mirror may not flush — the per-session line, written sync, holds.
+function postToServerLog(suffix, level) {
+    if (!PLATFORM_PORT)
+        return;
+    try {
+        const ctrl = new AbortController();
+        const t = setTimeout(() => ctrl.abort(), 500);
+        t.unref?.(); // never let the abort timer keep the shim's event loop alive
+        void fetch(`http://127.0.0.1:${PLATFORM_PORT}/api/admin/log-ingest`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({ tag: "mcp-helper", level, line: suffix }),
+            signal: ctrl.signal,
+        }).then(() => clearTimeout(t)).catch(() => clearTimeout(t));
+    }
+    catch {
+        /* fetch threw synchronously — best-effort only */
+    }
+}
+// Emit one [mcp-helper] lifecycle line: authoritative per-session file (sync,
+// survives process.exit), the shim's own stderr via the RAW writer (journald /
+// Claude Code visibility, never re-teed), and a best-effort server.log mirror.
+// `suffix` is the line body after the tag and carries no newline (the
+// log-ingest route rejects newlines).
+function emitLifecycle(suffix, level) {
+    const line = `[mcp-helper] ${suffix}\n`;
+    appendSafe(perSessionPath, line);
+    try {
+        rawStderrWrite(line);
+    }
+    catch { /* stderr closed */ }
+    postToServerLog(suffix, level);
+}
+if (!ENTRY) {
+    emitLifecycle(`op=error session=${SESSION_ID8} server=${SERVER_NAME} reason="no entry given (argv[2] missing)"`, "error");
+    process.exit(2);
+}
+// Replace process.stderr.write with a tee: mirror every server stderr byte to
+// the per-date and per-session sinks, keep a rolling tail for op=exit, emit
+// op=boot on the first bytes, then pass the write through to the real stderr.
+const teeWrite = ((...args) => {
+    const chunk = args[0];
+    appendSafe(perDatePath, chunk); // per-date raw (back-compat)
+    appendSafe(perSessionPath, chunk); // per-session raw (Task 706)
+    const text = typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8");
+    stderrTail = (stderrTail + text).slice(-TAIL_CAP);
+    if (!bootEmitted) {
+        bootEmitted = true;
+        const head = text.split("\n")[0].slice(0, 200);
+        emitLifecycle(`op=boot session=${SESSION_ID8} server=${SERVER_NAME} head=${JSON.stringify(head)}`, "info");
+    }
+    return rawStderrWrite(...args); // passthrough
+});
+process.stderr.write = teeWrite;
+// Catchable-signal handling. The shim drives the exit ONLY when it is the sole
+// listener for the signal — i.e. the imported entry installed no handler of its
+// own. In that case it records the signal (so op=exit carries signal=<sig>) and
+// exits with 128+signum, mirroring the prior wrapper's exit-status convention.
+//
+// When the entry DID install a handler, the shim defers entirely and records
+// nothing: the entry's handler decides the exit code, and op=exit reflects that
+// exit verbatim. This matches the prior two-process model, where a child that
+// caught the signal and exited cleanly was observed as code=0 signal=— (a clean
+// self-exit), not as a signal death. Setting exitSignal here unconditionally
+// would mislabel every graceful signal-driven shutdown as a signal kill.
+function onSignal(sig, code) {
+    return () => {
+        if (process.listenerCount(sig) === 1) {
+            exitSignal = sig;
+            process.exit(code);
+        }
+    };
+}
+process.on("SIGTERM", onSignal("SIGTERM", 143));
+process.on("SIGINT", onSignal("SIGINT", 130));
+process.on("SIGHUP", onSignal("SIGHUP", 129));
+// op=exit, emitted once from the process "exit" event. Sync-only — the loop is
+// stopping. When a catchable signal caused the exit, report code=— signal=<sig>
+// to match the prior wrapper's format; otherwise code=<exit code> signal=—.
+process.on("exit", (code) => {
+    if (exitEmitted)
+        return;
+    exitEmitted = true;
+    const lifetimeMs = Date.now() - spawnStamp;
+    const tail = stderrTail.slice(-200);
+    const codeField = exitSignal ? "—" : String(code);
+    const level = exitSignal || code !== 0 ? "error" : "info";
+    emitLifecycle(`op=exit session=${SESSION_ID8} server=${SERVER_NAME} pid=${process.pid} ` +
+        `code=${codeField} signal=${exitSignal ?? "—"} lifetimeMs=${lifetimeMs} stderr-tail=${JSON.stringify(tail)}`, level);
+});
+emitLifecycle(`op=spawn session=${SESSION_ID8} server=${SERVER_NAME} pid=${process.pid} entry=${ENTRY}`, "info");
+// Run the real MCP server in THIS process. Dynamic import() (not top-level
+// await — this file compiles to CommonJS) loads the ESM entry; a load-time
+// failure mirrors the old child spawn-error path (op=error, exit 127). The
+// op=exit handler is suppressed on this path so op=error stays the sole record.
+import((0, node_url_1.pathToFileURL)(ENTRY).href).catch((err) => {
+    const msg = err instanceof Error ? err.message : String(err);
+    exitEmitted = true;
+    emitLifecycle(`op=error session=${SESSION_ID8} server=${SERVER_NAME} reason=${JSON.stringify(`import error: ${msg}`)}`, "error");
+    process.exit(127);
+});
+//# sourceMappingURL=index.js.map

package/payload/premium-plugins/sitedesk/plugins/sitedesk-job/lib/mcp-spawn-tee/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "commonjs"
+}