@rubytech/create-sitedesk-code 0.1.524 → 0.1.526

package/dist/__tests__/samba-provision.test.js

@@ -6,7 +6,7 @@
 // style and runs under `node --test dist/__tests__/*.test.js` after build.
 import test from "node:test";
 import assert from "node:assert/strict";
-import { renderBrandStanza, renderGlobalSection, renderFullSmbConf, isPrivateIPv4, pickBindDecision, pickEdgeBindDecision, formatEdgeBindDecision, mergeSmbConf, removeBrandStanza, hasAnyBrandStanza, formatSambaMarker, SAMBA_STEPS, SAMBA_ENABLE_UNITS, } from "../samba-provision.js";
+import { renderBrandStanza, renderGlobalSection, renderFullSmbConf, isPrivateIPv4, pickBindDecision, pickEdgeBindDecision, formatEdgeBindDecision, pickWebsockifyBind, formatWebsockifyBindFile, mergeSmbConf, removeBrandStanza, hasAnyBrandStanza, formatSambaMarker, SAMBA_STEPS, SAMBA_ENABLE_UNITS, } from "../samba-provision.js";
 // ---------------------------------------------------------------------------
 // Fixtures
 // ---------------------------------------------------------------------------
@@ -384,6 +384,51 @@ test("formatSambaMarker emits the `[install-invariant] samba-provision-<step> <s
     assert.equal(formatSambaMarker("units", "fail: Job for smbd.service failed"), "[install-invariant] samba-provision-units fail: Job for smbd.service failed");
 });
 // ---------------------------------------------------------------------------
+// pickWebsockifyBind — the noVNC transport's host bind posture (Task 2089)
+//
+// The mapper reads the edge decision and nothing else, so a host can never end
+// up with a public noVNC page behind a loopback edge. The `kind` passthrough is
+// what lets the runtime log line distinguish `loopback-only` from `none`, which
+// map to the same address.
+// ---------------------------------------------------------------------------
+test("pickWebsockifyBind: LAN host keeps the wildcard bind", () => {
+    // Byte-identical to the pre-2089 behaviour. The Pi's `.local` noVNC page is
+    // reached over whichever family avahi resolved, so the wildcard stays `[::]`
+    // rather than narrowing to `0.0.0.0`.
+    assert.deepEqual(pickWebsockifyBind(pickEdgeBindDecision(PI_WLAN0_ONLY)), {
+        bind: "[::]",
+        kind: "lan",
+    });
+});
+test("pickWebsockifyBind: public-only host binds loopback", () => {
+    assert.deepEqual(pickWebsockifyBind(pickEdgeBindDecision(HETZNER_PUBLIC_ETH0_ONLY)), {
+        bind: "127.0.0.1",
+        kind: "loopback-only",
+    });
+});
+test("pickWebsockifyBind: dual-homed cloud host binds loopback despite a private iface", () => {
+    // The fail-open Task 2082 closed for the edge, closed here too: a provider
+    // private network alongside a public address must not keep a public bind.
+    // `kind` stays `lan` because pickBindDecision keys on the private interface;
+    // the bind address is what the edge decision, not `kind`, dictates.
+    assert.deepEqual(pickWebsockifyBind(pickEdgeBindDecision(HETZNER_CLOUD_PUBLIC_PLUS_PRIVNET)), {
+        bind: "127.0.0.1",
+        kind: "lan",
+    });
+});
+test("pickWebsockifyBind: no non-loopback IPv4 binds loopback", () => {
+    assert.deepEqual(pickWebsockifyBind(pickEdgeBindDecision(PI_LO_ONLY)), {
+        bind: "127.0.0.1",
+        kind: "none",
+    });
+});
+test("formatWebsockifyBindFile: one parseable line, trailing newline", () => {
+    // vnc.sh parses this with `head -n1` + two sed captures, so the shape is
+    // load-bearing: two `key=value` pairs, space-separated, one line.
+    assert.equal(formatWebsockifyBindFile({ bind: "127.0.0.1", kind: "loopback-only" }), "bind=127.0.0.1 kind=loopback-only\n");
+    assert.equal(formatWebsockifyBindFile({ bind: "[::]", kind: "lan" }), "bind=[::] kind=lan\n");
+});
+// ---------------------------------------------------------------------------
 // SAMBA_ENABLE_UNITS — the units step must never enable nmbd (Task 755)
 // ---------------------------------------------------------------------------
 test("SAMBA_ENABLE_UNITS enables smbd only — nmbd is never started", () => {

package/dist/__tests__/websockify-bind-wiring.test.js

@@ -0,0 +1,47 @@
+// Nothing else in the repo ties vnc.sh's websockify invocation to the installer
+// that writes the file it reads, so either half could ship alone with the whole
+// suite green. Two silent failures this closes:
+//
+//   - installer writes the file, vnc.sh still hardcodes `[::]` → the Task 2089
+//     fix ships inert on every host, with every pickWebsockifyBind test passing;
+//   - vnc.sh reads the file, installer never writes it → resolve_websockify_bind
+//     exits 1 and the whole VNC stack is down on every host, not just cloud ones.
+//
+// Both files are read from disk at runtime, the same pattern as
+// edge-bind-template-wiring.test.ts, which closes the equivalent gap for Task
+// 2082's edge unit.
+import test from "node:test";
+import assert from "node:assert/strict";
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { dirname, resolve } from "node:path";
+// dist/__tests__/websockify-bind-wiring.test.js → ../../src/index.ts
+const here = dirname(fileURLToPath(import.meta.url));
+const INDEX_TS = resolve(here, "../../src/index.ts");
+// dist/__tests__ → up four is the maxy-code root that holds platform/.
+const VNC_SH = resolve(here, "../../../../platform/scripts/vnc.sh");
+const SRC = readFileSync(INDEX_TS, "utf-8");
+const VNC = readFileSync(VNC_SH, "utf-8");
+test("vnc.sh no longer hardcodes the wildcard websockify bind", () => {
+    assert.doesNotMatch(VNC, /websockify --web \S+ "\[::\]:\$\{WEBSOCKIFY_PORT\}"/, "vnc.sh must take the websockify bind from platform/config/websockify-bind, not a literal [::]");
+});
+test("vnc.sh binds the resolved address and logs the decision", () => {
+    assert.match(VNC, /websockify --web \S+ "\$\{WEBSOCKIFY_BIND\}:\$\{WEBSOCKIFY_PORT\}"/, "the websockify invocation must interpolate the resolved bind address");
+    assert.match(VNC, /log "websockify-bind address=\$\{WEBSOCKIFY_BIND\} kind=\$\{WEBSOCKIFY_BIND_KIND\}/, "the websockify-bind token is the task's diagnostic grep — it must survive any edit");
+});
+test("vnc.sh resolves the bind before starting websockify", () => {
+    const resolveAt = VNC.indexOf("resolve_websockify_bind\n");
+    const startAt = VNC.indexOf("websockify --web");
+    assert.ok(resolveAt > 0, "vnc.sh must call resolve_websockify_bind");
+    assert.ok(resolveAt < startAt, "resolve_websockify_bind must run before the websockify invocation, or WEBSOCKIFY_BIND is unset");
+});
+test("vnc.sh refuses a bind address outside the two the mapper can produce", () => {
+    // The allow-list is what stops a hand-edited or half-written file handing
+    // websockify a wildcard on a cloud host.
+    assert.match(VNC, /"\[::\]"\|"127\.0\.0\.1"\) ;;/, "resolve_websockify_bind must allow-list the two addresses pickWebsockifyBind can emit");
+});
+test("the installer writes the file vnc.sh reads", () => {
+    assert.match(VNC, /config\/websockify-bind/, "vnc.sh must read platform/config/websockify-bind");
+    assert.match(SRC, /join\(configDir, "websockify-bind"\)/, "index.ts must write that same filename");
+    assert.match(SRC, /^\s*writeWebsockifyBindFile\(\);$/m, "index.ts defines the writer but never calls it — the file would never be written");
+});

package/dist/index.js

@@ -29,7 +29,7 @@ import { classifyPortHolder } from "./preflight-port-classifier.js";
 import { memoryControllerMissing, cmdlineAlreadyPatched, patchCmdline } from "./cgroup-memory-controller.js";
 import { parsePluginList, computeInstallActions, parseExternalPlugins, findUnregisteredResyncs, discoverMarketplaceCandidateDirs, } from "./lib/plugin-install.js";
 import { findPremiumMcpDirs } from "./lib/premium-mcp-discover.js";
-import { pickBindDecision, pickEdgeBindDecision, formatEdgeBindDecision, mergeSmbConf, formatSambaMarker, SAMBA_ENABLE_UNITS, } from "./samba-provision.js";
+import { pickBindDecision, pickEdgeBindDecision, formatEdgeBindDecision, pickWebsockifyBind, formatWebsockifyBindFile, mergeSmbConf, formatSambaMarker, SAMBA_ENABLE_UNITS, } from "./samba-provision.js";
 import { networkInterfaces, userInfo, cpus } from "node:os";
 const PAYLOAD_DIR = resolve(import.meta.dirname, "../payload");
 // Brand manifest — read from payload to derive all brand-specific installation values.
@@ -641,6 +641,41 @@ function writeChromiumBinaryPathFile() {
     console.log(`  Wrote ${target} → ${RESOLVED_CHROMIUM_BIN}`);
     logFile(`  [snap-chromium] wrote ${target} contents=${RESOLVED_CHROMIUM_BIN}`);
 }
+/**
+ * Write the websockify bind address to
+ * `<INSTALL_DIR>/platform/config/websockify-bind` so vnc.sh gives the noVNC
+ * transport the same host posture the edge got in Task 2082. Task 2089.
+ *
+ * The carrier is a file rather than a unit environment variable because
+ * `vnc.sh start` has two callers and only one of them is the edge. The other is
+ * `ensureVnc()` (platform/ui/app/lib/vnc.ts), which shells the script from the
+ * maxy-ui process; the maxy-ui unit carries no EDGE_HOSTNAME, so an env-var
+ * carrier would silently restore a wildcard bind on every X-down recovery. A
+ * file is also correct for a hand-run `bash vnc.sh start`, which no unit
+ * environment reaches at all.
+ *
+ * Called immediately after writeChromiumBinaryPathFile for the same reason it
+ * is: platform/config is a payload subdirectory, so this must run after
+ * deployPayload. Linux-only — darwin runs no VNC stack (installServiceDarwin
+ * excludes every VNC/X11 variable for that reason).
+ *
+ * Idempotent: re-running the installer on an unchanged host rewrites the same
+ * bytes. A host that gains or loses an interface gets the new decision on the
+ * next install, which the console and install-log lines below make visible.
+ */
+function writeWebsockifyBindFile() {
+    if (process.platform !== "linux") {
+        logFile(`  writeWebsockifyBindFile skipped: platform=${process.platform}`);
+        return;
+    }
+    const decision = pickWebsockifyBind(pickEdgeBindDecision(networkInterfaces()));
+    const configDir = resolve(INSTALL_DIR, "platform/config");
+    mkdirSync(configDir, { recursive: true });
+    const target = join(configDir, "websockify-bind");
+    writeFileSync(target, formatWebsockifyBindFile(decision), { mode: 0o644 });
+    console.log(`  Wrote ${target} → bind=${decision.bind} kind=${decision.kind}`);
+    logFile(`  [websockify-bind] wrote ${target} bind=${decision.bind} kind=${decision.kind}`);
+}
 // Scrub any hardware-watchdog drop-in this installer (or an earlier version)
 // left on the box, then daemon-reexec so the live RuntimeWatchdogUSec returns
 // to systemd's default (0 = off). The hardware-watchdog feature is retired:
@@ -5333,6 +5368,9 @@ try {
     // value. Must run after deployPayload (config dir is
     // a payload subdirectory). Linux-only; no-op on darwin/non-linux.
     writeChromiumBinaryPathFile();
+    // Same install-time-file pattern and the same post-deployPayload
+    // requirement: vnc.sh reads this to decide the websockify bind. Task 2089.
+    writeWebsockifyBindFile();
     // scrub plaintext neo4j passwords from any pre-fix install-*.log.
     // Idempotent — re-running on already-redacted logs is a no-op. Runs after
     // payload deploy so the bundled redact-install-logs.sh is on disk.

package/dist/samba-provision.js

@@ -224,6 +224,43 @@ export function formatEdgeBindDecision(d) {
     return `[edge-bind-decision] kind=${d.kind} iface=${d.iface ?? "none"} ` +
         `private=${list(d.privateAddresses)} public=${list(d.publicAddresses)} EDGE_HOSTNAME=${d.hostname}`;
 }
+/**
+ * Map the edge's bind decision onto websockify. Task 2089.
+ *
+ * This deliberately takes `EdgeBindDecision` rather than the interface table:
+ * the noVNC page and the admin edge must never disagree about whether the box
+ * is publicly reachable, and reading the same decision is the only way to
+ * guarantee that. It is not a third classifier — `pickBindDecision` (Samba) and
+ * `pickEdgeBindDecision` (edge) remain the only two.
+ *
+ * The LAN outcome is the literal `[::]`, which is what shipped before this
+ * task, not `0.0.0.0`. avahi publishes an AAAA for `.local` names, so a client
+ * may reach the page over IPv6; narrowing the family would be a behaviour
+ * change this task did not ask for. `[::]` accepts IPv4 as well under the
+ * default `net.ipv6.bindv6only=0`, which is exactly why the loopback outcome
+ * has to be an explicit `127.0.0.1`.
+ *
+ * The loopback outcome binds `127.0.0.1` only, not `[::1]` and not both.
+ * websockify takes one bind address per process, so "both" would mean two
+ * processes. Measured on the netcup box 2026-07-29: `localhost` there resolves
+ * `::1` first (its image ships no `localhost` line in `/etc/hosts`), and a
+ * listener bound to `127.0.0.1` alone still served a request forwarded by
+ * `ssh -L <port>:localhost:<port>` — OpenSSH falls back from the refused `::1`.
+ * So the SSH-forward recovery path the installer prints keeps working.
+ */
+export function pickWebsockifyBind(d) {
+    return { bind: d.hostname === "0.0.0.0" ? "[::]" : "127.0.0.1", kind: d.kind };
+}
+/**
+ * Render the install-time carrier file read by `platform/scripts/vnc.sh`.
+ *
+ * The shape is load-bearing: vnc.sh takes `head -n1` and captures `bind=` and
+ * `kind=` with two seds, so this must stay one line of space-separated
+ * `key=value` pairs with a trailing newline.
+ */
+export function formatWebsockifyBindFile(d) {
+    return `bind=${d.bind} kind=${d.kind}\n`;
+}
 // ---------------------------------------------------------------------------
 // smb.conf merge / remove
 // ---------------------------------------------------------------------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-sitedesk-code",
-  "version": "0.1.524",
+  "version": "0.1.526",
   "description": "Install SiteDesk — automated back office for independent building contractors",
   "bin": {
     "create-sitedesk-code": "./dist/index.js"

package/payload/platform/plugins/admin/skills/platform-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: platform-architecture
 description: Use when grounding any documented-surface claim about what SiteDesk ships — plugins, skills, specialists, install/deploy flows, internals. This is the install catalogue, not evidence of what is enabled on the current account. For install state on this account, call `capabilities-here`; for documented surface, cite the `Source:` URL inline.
-content-hash: sha256:c1dc0d24b2faa821b80ec583a83b5828393886fbda1963cfb874401d4137cd03
+content-hash: sha256:15f533911e93c443dda2624cad785b44ee24ca5bcf5b992fbd96932226abd055
 brand: sitedesk-code
 product-name: SiteDesk
 ---
@@ -1215,7 +1215,7 @@ npx -y @rubytech/create-realagent-code@latest --uninstall
 - **No SCP / rsync.** Updates are `npx -y @rubytech/create-maxy-code@latest …` again, never a file push from the operator's laptop.
 - **Tunnel auth is OAuth; the API is permitted for the rest.** The tunnel's only auth path is `cloudflared tunnel login` in the noVNC browser over SSH forward. DNS, Pages, and D1 use the Cloudflare API with a short-lived narrow token the agent mints from an operator-provisioned master token (see the `cloudflare` plugin).
 - **No shared state across brands.** Two brands on one server each have their own Neo4j port, systemd unit, VNC display, websockify port, tunnel, and persist directory.
-- **No public IPv4 exposure.** The Hetzner firewall opens port 22 only; every operator-facing surface is fronted by the Cloudflare tunnel. The provider firewall is no longer the only thing making that true for the admin edge: this host carries a public IPv4, so the installer writes `EDGE_HOSTNAME=127.0.0.1` into the edge unit and the edge port is loopback-only by construction. That holds whether or not the box also has a Cloud Network attached. It covers the edge port only; see [netcup.md](netcup.md) for what a host without a provider firewall still depends on `ufw` for.
+- **No public IPv4 exposure.** The Hetzner firewall opens port 22 only; every operator-facing surface is fronted by the Cloudflare tunnel. The provider firewall is no longer the only thing making that true for the operator surfaces: this host carries a public IPv4, so the installer writes `EDGE_HOSTNAME=127.0.0.1` into the edge unit and records the same decision in `platform/config/websockify-bind`, which `vnc.sh` reads to bind the noVNC websockify transport. Both are loopback-only by construction, and that holds whether or not the box also has a Cloud Network attached. Confirm with `grep -E 'bind-decision|EDGE_HOSTNAME' $HOME/.<brand>/logs/install-*.log` and `grep websockify-bind $HOME/.<brand>/logs/vnc-boot.log`. Other listeners on the box are not covered; see [netcup.md](netcup.md) for what a host without a provider firewall still depends on `ufw` for.
 
 ## Smoke checklist
 
@@ -1415,21 +1415,22 @@ This stops and disables the systemd user-service, removes the unit file, removes
 - **No SCP / rsync.** Updates are `npx -y @rubytech/create-maxy-code@latest …` again, never a file push from the operator's laptop.
 - **Tunnel auth is OAuth; the API is permitted for the rest.** As on Hetzner.
 - **No shared state across brands.** Two brands on one server each have their own Neo4j port, systemd unit, VNC display, websockify port, tunnel, and persist directory.
-- **No provider firewall, so `ufw` is the only network-level layer.** On Hetzner Cloud the provider firewall opens 22 only; netcup has nothing in front of the server. What keeps the admin edge private here is the bind itself: the installer classifies the host from its interface table and, because this box carries a public IPv4, writes `EDGE_HOSTNAME=127.0.0.1` into the edge unit, so the edge port is loopback-only by construction and `ufw` is the backstop rather than the single control. Confirm which was written with `grep -E 'bind-decision|EDGE_HOSTNAME' $HOME/.<brand>/logs/install-*.log`. This covers the **edge port only**, not the whole box: the noVNC websockify transport still binds all interfaces, so `ufw` remains load-bearing for that port, and anything that clears the ruleset — a flushed nftables set after a kernel change, `ufw disable` during debugging, a CCP image reinstall — exposes it. Verify from **off** the box, not with `ufw status` on it.
+- **No provider firewall, so `ufw` is the only network-level layer.** On Hetzner Cloud the provider firewall opens 22 only; netcup has nothing in front of the server. What keeps the operator surfaces private here is the bind itself. The installer classifies the host from its interface table and, because this box carries a public IPv4, binds **both** operator-facing listeners to loopback: it writes `EDGE_HOSTNAME=127.0.0.1` into the edge unit, and it records the same decision in `platform/config/websockify-bind`, which `vnc.sh` reads to bind the noVNC websockify transport. Neither surface is reachable from off the box by construction, so `ufw` is the backstop rather than the single control. Confirm both with `grep -E 'bind-decision|EDGE_HOSTNAME' $HOME/.<brand>/logs/install-*.log` and `grep websockify-bind $HOME/.<brand>/logs/vnc-boot.log`; on this host class they read `EDGE_HOSTNAME=127.0.0.1` and `address=127.0.0.1`. Other services on the box still bind all interfaces and still depend on `ufw` — Samba and CUPS among them — so anything that clears the ruleset (a flushed nftables set after a kernel change, `ufw disable` during debugging, a CCP image reinstall) exposes those. Verify from **off** the box, not with `ufw status` on it.
 
 ## Smoke checklist
 
 Fresh-netcup smoke pass criteria:
 
 1. Provision an RS 8000 G12 with Ubuntu 24.04 x86_64 and an SSH key; SSH in as `root`, create `admin`, switch.
-2. **From a machine off the server**, port 22 answers and the edge port does not. Two independent things make that true here: the edge binds loopback on this host class, and `ufw` denies inbound. `ufw status` on the box states the intention; only an external probe confirms the outcome:
+2. **From a machine off the server**, port 22 answers and neither the edge port nor the noVNC websockify port does. Two independent things make that true here: both listeners bind loopback on this host class, and `ufw` denies inbound. `ufw status` on the box states the intention; only an external probe confirms the outcome:
 
    ```bash
    nc -z -w 5 <ipv4> 22 && echo "22 open (expected)"
-   nc -z -w 5 <ipv4> 19200 && echo "EDGE EXPOSED — check the bind, then ufw"
+   nc -z -w 5 <ipv4> <edge port> && echo "EDGE EXPOSED — check the bind, then ufw"
+   nc -z -w 5 <ipv4> <websockify port> && echo "noVNC EXPOSED — check the bind, then ufw"
    ```
 
-   If the edge port answers, read the bind first: `grep -E 'bind-decision|EDGE_HOSTNAME' $HOME/.<brand>/logs/install-*.log` should show `EDGE_HOSTNAME=127.0.0.1` on this host, and `ss -lntp` should show the edge on `127.0.0.1:19200`. A public bind there is a classification fault, not a firewall fault.
+   If either answers, read the bind before the firewall. `grep -E 'bind-decision|EDGE_HOSTNAME' $HOME/.<brand>/logs/install-*.log` should show `EDGE_HOSTNAME=127.0.0.1`, `grep websockify-bind $HOME/.<brand>/logs/vnc-boot.log` should show `address=127.0.0.1`, and `ss -lntp` should show both on `127.0.0.1`. A wildcard or public address on either line is a classification fault, not a firewall fault.
 
    Re-run this after every reboot, after any brand install, and after any CCP image reinstall.
 3. Snapshot taken with the OS prepared and nothing installed.
@@ -1437,7 +1438,7 @@ Fresh-netcup smoke pass criteria:
 5. `logs-read.sh --tail server 200 | grep 'op=capacity-resolved'` returns one line reporting `capacity=40`, with `totalMemGiB` matching the provisioned RAM. A `capacity=10` on a 64 GB box means the host resolved below the 56 GiB step and needs investigating before load.
 6. The noVNC page reached over `ssh -L` displays the admin UI.
 7. Cloudflare setup ends with `curl -I https://<hostname>.<your-zone>` returning `HTTP/2 200` from the operator's laptop.
-8. Reboot; both units come back up; the public URL is reachable again without any manual action; the step-2 external probe still shows the edge port closed.
+8. Reboot; both units come back up; the public URL is reachable again without any manual action; the step-2 external probe still shows the edge and noVNC ports closed.
 9. Install a second brand with a different `--hostname`; both admin UIs are reachable on their own public hostnames and neither has touched the other's state.
 10. Uninstall removes the systemd unit and the persist directory.
 

package/payload/platform/plugins/admin/skills/superpowers-sprint/SKILL.md

@@ -11,6 +11,23 @@ A structured workflow for executing development work — features, bug fixes, re
 
 This skill is the maxy-code counterpart to `sprint`. The phase chain is identical in spirit; the difference is the skill at each phase. If both `gstack` and superpowers are installed and the project is set up for it, prefer `sprint` — its plan reviews are richer. Use this skill when `gstack` is not available.
 
+## Execution model: inline only, never subagents
+
+Every phase of this sprint runs in the current session, in the main agent's own context. No phase dispatches a subagent, and no phase delegates work to the Agent tool, `superpowers:subagent-driven-development`, or `superpowers:dispatching-parallel-agents`.
+
+Several of the chained superpowers skills offer or recommend a subagent path. In this sprint, take the inline path at each of them:
+
+| Chained skill | Its subagent offer | What this sprint does |
+|---|---|---|
+| `superpowers:brainstorming` | dispatches a spec document reviewer subagent | review the spec yourself, against the same template |
+| `superpowers:writing-plans` | dispatches a plan document reviewer subagent, and offers "Subagent-Driven (recommended)" as the implementation mode | review the plan yourself; choose the `superpowers:executing-plans` mode, never subagent-driven |
+| `superpowers:executing-plans` | tells you to switch to `superpowers:subagent-driven-development` where subagents exist | ignore that instruction and stay in `executing-plans` |
+| `superpowers:requesting-code-review` | dispatches a `general-purpose` code reviewer subagent | apply the reviewer template to the diff yourself, in this session |
+
+A review done inline still uses the chained skill's reviewer template verbatim — the checklist is what makes the review real, not the isolation. The cost of inline is that the reviewer shares the sprint's context and therefore its assumptions; the operator accepts that in exchange for a single visible transcript.
+
+Dispatching a subagent from any phase is a defect, not an optimisation.
+
 ## Output discipline (applies to every emission in this skill)
 
 Every message the sprint writes — plan summaries, change logs, status tables, the final summary — is written `/plainly`. That means:
@@ -54,18 +71,24 @@ Read the task file or operator brief first, then enter brainstorming with what y
 
 If the operator hands over a fully-formed plan that is already broken into specific files and behaviours, brainstorming can be a fast confirmation rather than an open exploration — but it still runs, because skipping it is the failure mode the phase exists to prevent.
 
+When the skill reaches its spec document review, run that review inline against `spec-document-reviewer-prompt.md`. Do not dispatch the reviewer subagent.
+
 ### Phase 2: Plan — `superpowers:writing-plans`
 
 Invoke `superpowers:writing-plans` against the brainstorm output. The skill produces a single written plan: the files to touch, the behaviours to add or change, the edge cases, the test coverage, the deployment story. This is the artefact Phase 6 (Plan Conformity) checks the implementation against.
 
 This is a deliberate downgrade from `sprint`'s separate CEO and Eng reviews — multi-approach architecture review is out of scope for the superpowers chain. One reviewed plan is the baseline.
 
+Two of the skill's steps offer a subagent; take neither. Review the finished plan inline against `plan-document-reviewer-prompt.md`. When the skill asks which implementation mode to use, choose `superpowers:executing-plans`, never "Subagent-Driven".
+
 Present the final plan to the operator and get explicit confirmation before writing any production code.
 
 ### Phase 3: Implement — `superpowers:executing-plans` + `superpowers:test-driven-development`
 
 Invoke `superpowers:executing-plans` to drive execution against the Phase 2 plan. Within each step, follow `superpowers:test-driven-development` — RED-GREEN-REFACTOR for every behaviour change.
 
+`superpowers:executing-plans` opens by telling you to switch to `superpowers:subagent-driven-development` when subagents are available. Ignore that line; this sprint runs every task inline in the current session.
+
 Tests are ephemeral: design and run them to prove the implementation works during the sprint, then discard them. They are not committed to the repository unless the project's own test suite already lives in the tree and the new behaviour belongs in it. Their purpose is to enforce thinking through behaviour before writing production code, not to build a permanent regression suite.
 
 - **Test first.** Write a failing test for each behaviour before implementing it. Watch it fail. Write minimal code to pass. Refactor.
@@ -94,6 +117,8 @@ If verification fails, return to Phase 3.
 
 Invoke `superpowers:requesting-code-review` to frame the review request. Then run `code-review:code-review` against the sprint's diff. Process the response through `superpowers:receiving-code-review`, which gates whether each finding is accepted, contested, or filed as follow-up.
 
+`superpowers:requesting-code-review` dispatches a `general-purpose` reviewer subagent. Do not dispatch it. Fill its `code-reviewer.md` template with the sprint's context and diff, then work through it inline as the reviewer. `code-review:code-review` likewise runs in this session against the diff, not as a delegated agent.
+
 Findings that are accepted and trivial are fixed before proceeding. Findings that are accepted but out-of-scope for this sprint become new `.tasks/NNN-*.md` files (the same deferral rule as Phase 6 — prose deferrals are banned). Findings that are contested get a one-line rebuttal in the debrief.
 
 ### Phase 6: Land
@@ -355,6 +380,7 @@ Session: <session-id>
 
 ## Principles
 
+- **Inline, always.** Every phase runs in the current session. No subagents, no parallel agent dispatch, no delegated reviewers, whatever the chained skills recommend.
 - **Ship complete.** A sprint is not done until the debrief and the final-status block are delivered. Code without documentation is unfinished work.
 - **Explain the why.** Every change has a reason. "Refactored for clarity" is not a reason. "Extracted to avoid duplicate route derivation across WhatsApp and iMessage" is.
 - **Operator perspective.** Testing instructions are written for the person running the product. If the operator is non-technical, instructions are UI-based.

package/payload/platform/plugins/admin/skills/whats-new/SKILL.md

@@ -9,6 +9,18 @@ Invoked by the admin agent directly.
 
 This is the platform's release timeline, newest first. Each entry shows the date it shipped and the version it shipped in, so you can tell the operator how current their install is. To compare, read the installed version from `capabilities-here` and match it against the versions below. Keep answers high level and in plain English; this is a summary, not a full commit log.
 
+## 2026-07-30 (0.1.526)
+
+- Asking WhatsApp to reconnect now answers as soon as the reconnect starts, instead of waiting on the old connection to die and leaving you with no reply at all.
+- The remote screen viewer is no longer reachable from every network the device sits on. It is now bound to the same posture chosen when the device was set up, and that choice is recorded so it stays put.
+- A repeating routine that has lost its next run time is now reported by a standing check, so a routine that has quietly stopped being scheduled shows up instead of staying invisible.
+
+## 2026-07-29 (0.1.525)
+
+- A repeating routine whose start date had already gone by now runs on its next due occurrence instead of sitting silent forever. There is also a standing check that tells you when a routine has a start date that never fired.
+- Saving a memory no longer rewrites the date and time on a meeting into plain text, so meeting times stay comparable and sortable afterwards.
+- Internal engineering documents are no longer included in what gets installed on a customer device, and the check that scans installed text now reads exactly what ships rather than an out-of-date copy of the list.
+
 ## 2026-07-29 (0.1.524)
 
 - Routines are properly editable now. You can pick where a routine sends its result from the routine window, which previously could not be set at all, so the routines that ship with the platform were impossible to make work from the dashboard. Stopping a routine from chat also no longer means cancelling it outright.

package/payload/platform/plugins/memory/PLUGIN.md

@@ -239,6 +239,16 @@ The memory tools whose Neo4j read/write re-scopes on the resolved account accept
 
 Tools that do **not** take `targetAccountId` fall into three groups. **Not account-scoped:** `image-fetch` fetches image bytes by URL; `graph-prune-denylist-add/remove/list` mutate a brand-global deny-list; `memory-ingest-extract` stages a temp file — none read or write a sub-account subgraph. **Bound to the caller's own live session:** `session-compact` compacts the caller's `SESSION_ID` Conversation, which belongs to the house account the operator sits in — re-scoping `accountId` to a sub-account matches nothing and "compact a sub-account's live session" has no referent. **Scheduled, not interactive:** the dream-cycle **cron** (`lib/dream-cycle/*`) takes its account from the scheduler context, not a tool argument; only the interactive `memory-dream-run` tool is house-targetable. These tools keep their own-account no-account guard.
 
+## `memory-update` cannot change a property's Neo4j type
+
+An update reads the node's own `valueType()` for every key it is about to write. Keys the node already holds as a temporal type (`DATE`, `ZONED DATETIME`, `LOCAL DATETIME`, `ZONED TIME`, `LOCAL TIME`, `DURATION`) are rebuilt with the matching Cypher constructor; everything else rides in the `n += $props` bag as before. `updatedAt` follows the same rule rather than one fixed type — `memory-write` stamps it as an ISO string and the graph tooltip reads it as one, while `:Meeting` nodes hold it as a `ZONED DATETIME`.
+
+Each temporal value is vetted by Neo4j's own parser in a read-only probe **before** the update statement runs, so a value the constructor rejects aborts the whole update and leaves every property untouched, including the ones that would have succeeded. Vetting against the database rather than a JS reimplementation matters in both directions: a hand-rolled check would be stricter than Neo4j and reject values it accepts. The refusal is `Update blocked (type-preserving): <key> holds <type> and "<value>" is not a valid <type>`, logged as `reason=type-preserving` — its own slug, not the write-gate's, so a type refusal and a denylist refusal are never read as one thing. Only a `Neo.ClientError` counts as a verdict on the value; a disconnect or a timeout propagates unchanged rather than accusing a timestamp that was correct.
+
+Setting a property to `null` still removes it. Removal changes no type, so it is outside this rule — refusing it would take away the only way to clear a nullable temporal property such as `:Meeting.endsAt`.
+
+This exists because `SET n += $props` wrote every value verbatim. An agent updating a `:Meeting` with an ISO string replaced its `ZONED DATETIME` `startsAt` with a `STRING`, and a `STRING`-to-`DATETIME` comparison in Neo4j is NULL rather than false — so every calendar reader dropped the row with no error and no log line, and one account's booking page published a busy afternoon as open time for two days. `memory-update-by-name` delegates its whole write to `memory-update` and inherits this; it owns only the lookup.
+
 ## Graph Hygiene
 
 Graph hygiene is **agent-directed, case by case** — no autonomous rule engine, no cron. The Neo4j graph degrades into a landfill if pollution from prior agent errors (wrong-account hostnames, fabricated identifiers, raw monologue dumps) is allowed to compound. Cleanup happens when the admin agent observes a match against the operator-curated deny-list (or the user directly asks) and applies discretion using `memory-update`, `memory-delete`, or `conversation-memory-expunge`.

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/compiled-truth-revision.test.js

@@ -29,7 +29,11 @@ describe("compiled-truth-revision helper", () => {
         const templateEnd = src.indexOf("`", templateStart + "const updateQuery = `".length);
         expect(templateEnd).toBeGreaterThan(templateStart);
         const template = src.slice(templateStart, templateEnd);
-        expect(template).toContain("SET n += $props, n.updatedAt = $updatedAt");
+        // Task 2148 replaced the literal `n += $props, n.updatedAt = $updatedAt`
+        // with a clause compiled against the node's own property types. The
+        // single-TX invariant is unchanged: the SET and the revision CREATE still
+        // share one template.
+        expect(template).toContain("SET ${compiled.setClause}");
         expect(template).toContain("${revisionClause}");
         // And the revisionClause itself embeds the UNWIND fragment.
         const clauseIdx = src.indexOf("const revisionClause =");

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/compiled-truth-revision.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"compiled-truth-revision.test.js","sourceRoot":"","sources":["../../../src/lib/__tests__/compiled-truth-revision.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAEhF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,wGAAwG,EAAE,GAAG,EAAE;QAChH,iEAAiE;QACjE,kEAAkE;QAClE,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAC9E,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QAC5E,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACnE,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAC9E,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAC3E,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACtE,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACpE,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACxE,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,GAAG,EAAE;QACxG,wEAAwE;QACxE,gEAAgE;QAChE,uEAAuE;QACvE,kEAAkE;QAClE,sEAAsE;QACtE,oCAAoC;QACpC,MAAM,GAAG,GAAG,YAAY,CACtB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,8BAA8B,CAAC,EAC5D,OAAO,CACR,CAAC;QACF,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC3D,MAAM,CAAC,aAAa,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACrF,MAAM,CAAC,WAAW,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,2CAA2C,CAAC,CAAC;QACxE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAEhD,4DAA4D;QAC5D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACxD,MAAM,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACpD,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,+DAA+D;QAC/D,gEAAgE;QAChE,oEAAoE;QACpE,MAAM,GAAG,GAAG,YAAY,CACtB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,8BAA8B,CAAC,EAC5D,OAAO,CACR,CAAC;QACF,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mEAAmE,EAAE,GAAG,EAAE;IACjF,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,GAAG,GAAG,YAAY,CACtB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,+BAA+B,CAAC,EAC7D,OAAO,CACR,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,GAAG,EAAE;QACzG,MAAM,GAAG,GAAG,YAAY,CACtB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,+BAA+B,CAAC,EAC7D,OAAO,CACR,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"compiled-truth-revision.test.js","sourceRoot":"","sources":["../../../src/lib/__tests__/compiled-truth-revision.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAEhF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,wGAAwG,EAAE,GAAG,EAAE;QAChH,iEAAiE;QACjE,kEAAkE;QAClE,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAC9E,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QAC5E,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACnE,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAC9E,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAC3E,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACtE,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACpE,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACxE,MAAM,CAAC,+BAA+B,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,GAAG,EAAE;QACxG,wEAAwE;QACxE,gEAAgE;QAChE,uEAAuE;QACvE,kEAAkE;QAClE,sEAAsE;QACtE,oCAAoC;QACpC,MAAM,GAAG,GAAG,YAAY,CACtB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,8BAA8B,CAAC,EAC5D,OAAO,CACR,CAAC;QACF,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC3D,MAAM,CAAC,aAAa,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACrF,MAAM,CAAC,WAAW,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACvD,yEAAyE;QACzE,oEAAoE;QACpE,0EAA0E;QAC1E,sBAAsB;QACtB,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACxD,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAEhD,4DAA4D;QAC5D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACxD,MAAM,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACpD,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,+DAA+D;QAC/D,gEAAgE;QAChE,oEAAoE;QACpE,MAAM,GAAG,GAAG,YAAY,CACtB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,8BAA8B,CAAC,EAC5D,OAAO,CACR,CAAC;QACF,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mEAAmE,EAAE,GAAG,EAAE;IACjF,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,GAAG,GAAG,YAAY,CACtB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,+BAA+B,CAAC,EAC7D,OAAO,CACR,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,GAAG,EAAE;QACzG,MAAM,GAAG,GAAG,YAAY,CACtB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,+BAA+B,CAAC,EAC7D,OAAO,CACR,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/temporal-type-preserve.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=temporal-type-preserve.test.d.ts.map

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/temporal-type-preserve.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"temporal-type-preserve.test.d.ts","sourceRoot":"","sources":["../../../src/lib/__tests__/temporal-type-preserve.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/temporal-type-preserve.test.js

@@ -0,0 +1,141 @@
+// Task 2148 — the SET compiler that stops `memory-update` retyping a temporal
+// property to a string. `SET n += $props` writes every value verbatim, so an
+// ISO string aimed at a `ZONED DATETIME` silently became a `STRING`, and every
+// `m.startsAt < datetime(...)` comparison against it is NULL rather than false.
+//
+// The compiler is pure: it takes the node's own `valueType()` reading per key
+// and returns the SET clause, the params, and the list of values Neo4j's own
+// temporal parser must vet before the write runs.
+import { describe, it, expect } from "vitest";
+import { normaliseValueType, temporalConstructorFor, compileTypePreservingSet, typePreserveRejection, } from "../temporal-type-preserve.js";
+describe("normaliseValueType", () => {
+    it("strips the nullability suffix valueType() appends", () => {
+        expect(normaliseValueType("ZONED DATETIME NOT NULL")).toBe("ZONED DATETIME");
+        expect(normaliseValueType("STRING NOT NULL")).toBe("STRING");
+        expect(normaliseValueType("  DATE  ")).toBe("DATE");
+    });
+});
+describe("temporalConstructorFor", () => {
+    it("maps every Neo4j temporal type to its constructor", () => {
+        expect(temporalConstructorFor("DATE NOT NULL")).toBe("date");
+        expect(temporalConstructorFor("ZONED DATETIME NOT NULL")).toBe("datetime");
+        expect(temporalConstructorFor("LOCAL DATETIME NOT NULL")).toBe("localdatetime");
+        expect(temporalConstructorFor("ZONED TIME NOT NULL")).toBe("time");
+        expect(temporalConstructorFor("LOCAL TIME NOT NULL")).toBe("localtime");
+        expect(temporalConstructorFor("DURATION NOT NULL")).toBe("duration");
+    });
+    it("returns null for every non-temporal type", () => {
+        for (const t of ["STRING NOT NULL", "INTEGER NOT NULL", "FLOAT", "BOOLEAN", "LIST<STRING>", "POINT"]) {
+            expect(temporalConstructorFor(t)).toBeNull();
+        }
+    });
+});
+const NOW_ISO = "2026-07-29T12:00:00.000Z";
+function compile(existingTypes, props) {
+    return compileTypePreservingSet({
+        alias: "n",
+        existingTypes,
+        props,
+        now: { key: "updatedAt", isoValue: NOW_ISO },
+    });
+}
+describe("compileTypePreservingSet — scalar keys", () => {
+    it("leaves untyped and non-temporal keys in the n += $props bag", () => {
+        const c = compile({ title: "STRING NOT NULL" }, { title: "Golf", note: "back nine" });
+        expect(c.setClause).toBe("n += $props, n.`updatedAt` = $tp0");
+        expect(c.params).toEqual({ props: { title: "Golf", note: "back nine" }, tp0: NOW_ISO });
+        expect(c.probes).toEqual([]);
+    });
+});
+describe("compileTypePreservingSet — temporal keys", () => {
+    it("emits an explicit constructor assignment for a key the node holds as ZONED DATETIME", () => {
+        const c = compile({ startsAt: "ZONED DATETIME NOT NULL", title: "STRING NOT NULL" }, { startsAt: "2026-07-29T13:30:00Z", title: "Golf" });
+        expect(c.setClause).toBe("n += $props, n.`startsAt` = datetime($tp0), n.`updatedAt` = $tp1");
+        expect(c.params.props).toEqual({ title: "Golf" });
+        expect(c.params.tp0).toBe("2026-07-29T13:30:00Z");
+        expect(c.probes).toEqual([
+            {
+                key: "startsAt",
+                constructorName: "datetime",
+                paramName: "tp0",
+                value: "2026-07-29T13:30:00Z",
+                existingType: "ZONED DATETIME",
+            },
+        ]);
+    });
+    it("covers each temporal type with its own constructor", () => {
+        const c = compile({
+            d: "DATE NOT NULL",
+            ldt: "LOCAL DATETIME NOT NULL",
+            zt: "ZONED TIME NOT NULL",
+            lt: "LOCAL TIME NOT NULL",
+            dur: "DURATION NOT NULL",
+        }, { d: "2026-07-29", ldt: "2026-07-29T13:30:00", zt: "13:30:00Z", lt: "13:30:00", dur: "PT1H" });
+        expect(c.setClause).toBe("n += $props, n.`d` = date($tp0), n.`ldt` = localdatetime($tp1), " +
+            "n.`zt` = time($tp2), n.`lt` = localtime($tp3), n.`dur` = duration($tp4), " +
+            "n.`updatedAt` = $tp5");
+        expect(c.params.props).toEqual({});
+        expect(c.probes.map((p) => p.constructorName)).toEqual([
+            "date",
+            "localdatetime",
+            "time",
+            "localtime",
+            "duration",
+        ]);
+    });
+    it("escapes a backtick in a property key rather than breaking out of the quoting", () => {
+        const c = compile({ "we`ird": "ZONED DATETIME NOT NULL" }, { "we`ird": "2026-07-29T13:30:00Z" });
+        expect(c.setClause).toContain("n.`we``ird` = datetime($tp0)");
+    });
+});
+describe("compileTypePreservingSet — the updatedAt stamp", () => {
+    it("writes an ISO string when the node holds updatedAt as a string", () => {
+        const c = compile({ updatedAt: "STRING NOT NULL" }, { title: "Golf" });
+        expect(c.setClause).toBe("n += $props, n.`updatedAt` = $tp0");
+        expect(c.params.tp0).toBe(NOW_ISO);
+    });
+    it("writes an ISO string when the node has no updatedAt yet", () => {
+        const c = compile({}, { title: "Golf" });
+        expect(c.setClause).toBe("n += $props, n.`updatedAt` = $tp0");
+        expect(c.params.tp0).toBe(NOW_ISO);
+    });
+    it("calls the zero-argument constructor when the node holds updatedAt as a datetime", () => {
+        const c = compile({ updatedAt: "ZONED DATETIME NOT NULL" }, { title: "Golf" });
+        expect(c.setClause).toBe("n += $props, n.`updatedAt` = datetime()");
+        expect(c.params).toEqual({ props: { title: "Golf" } });
+    });
+    it("never lets a caller-supplied updatedAt reach the props bag or a probe", () => {
+        const c = compile({ updatedAt: "ZONED DATETIME NOT NULL" }, { updatedAt: "not-a-datetime-at-all", title: "Golf" });
+        expect(c.params.props).toEqual({ title: "Golf" });
+        expect(c.probes).toEqual([]);
+        expect(c.setClause).toBe("n += $props, n.`updatedAt` = datetime()");
+    });
+    it("rejects when the node holds updatedAt as a DURATION, which has no now form", () => {
+        expect(() => compile({ updatedAt: "DURATION NOT NULL" }, { title: "Golf" })).toThrow(/Update blocked \(type-preserving\): updatedAt holds DURATION/);
+    });
+});
+describe("compileTypePreservingSet — rejections", () => {
+    it("rejects a non-string value for a temporal key and applies nothing", () => {
+        expect(() => compile({ startsAt: "ZONED DATETIME NOT NULL", title: "STRING NOT NULL" }, { startsAt: 1754000000000, title: "Golf" })).toThrow(/Update blocked \(type-preserving\): startsAt holds ZONED DATETIME and "1754000000000" is not a valid ZONED DATETIME/);
+    });
+    it("rejects an empty string for a temporal key", () => {
+        expect(() => compile({ startsAt: "ZONED DATETIME NOT NULL" }, { startsAt: "" })).toThrow(/Update blocked \(type-preserving\): startsAt holds ZONED DATETIME/);
+    });
+    it("still lets null clear a temporal property", () => {
+        // Removal changes no type, so it is not this module's business. `:Meeting`
+        // carries a nullable `endsAt` by schema, and refusing null here would take
+        // away the only way to clear one.
+        const c = compile({ endsAt: "ZONED DATETIME NOT NULL" }, { endsAt: null });
+        expect(c.params.props).toEqual({ endsAt: null });
+        expect(c.probes).toEqual([]);
+        expect(c.setClause).toBe("n += $props, n.`updatedAt` = $tp0");
+    });
+});
+describe("typePreserveRejection", () => {
+    it("names the key, the held type and the offending value", () => {
+        const err = typePreserveRejection("startsAt", "ZONED DATETIME", "not a date");
+        expect(err.message).toBe('Update blocked (type-preserving): startsAt holds ZONED DATETIME and "not a date" is not a valid ZONED DATETIME. ' +
+            "The whole update was rejected — no property was changed.");
+    });
+});
+//# sourceMappingURL=temporal-type-preserve.test.js.map

package/payload/platform/plugins/memory/mcp/dist/lib/__tests__/temporal-type-preserve.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"temporal-type-preserve.test.js","sourceRoot":"","sources":["../../../src/lib/__tests__/temporal-type-preserve.test.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,kDAAkD;AAElD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AAEtC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7E,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,sBAAsB,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3E,MAAM,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChF,MAAM,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxE,MAAM,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,KAAK,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC;YACrG,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAE3C,SAAS,OAAO,CAAC,aAAqC,EAAE,KAA8B;IACpF,OAAO,wBAAwB,CAAC;QAC9B,KAAK,EAAE,GAAG;QACV,aAAa;QACb,KAAK;QACL,GAAG,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAEtF,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAC9D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,CAAC,GAAG,OAAO,CACf,EAAE,QAAQ,EAAE,yBAAyB,EAAE,KAAK,EAAE,iBAAiB,EAAE,EACjE,EAAE,QAAQ,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE,CACpD,CAAC;QAEF,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QAC7F,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACvB;gBACE,GAAG,EAAE,UAAU;gBACf,eAAe,EAAE,UAAU;gBAC3B,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,sBAAsB;gBAC7B,YAAY,EAAE,gBAAgB;aAC/B;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,OAAO,CACf;YACE,CAAC,EAAE,eAAe;YAClB,GAAG,EAAE,yBAAyB;YAC9B,EAAE,EAAE,qBAAqB;YACzB,EAAE,EAAE,qBAAqB;YACzB,GAAG,EAAE,mBAAmB;SACzB,EACD,EAAE,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,qBAAqB,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,CAC9F,CAAC;QAEF,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CACtB,kEAAkE;YAChE,2EAA2E;YAC3E,sBAAsB,CACzB,CAAC;QACF,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;YACrD,MAAM;YACN,eAAe;YACf,MAAM;YACN,WAAW;YACX,UAAU;SACX,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,yBAAyB,EAAE,EAAE,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAC9D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAC9D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,yBAAyB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACpE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,GAAG,OAAO,CACf,EAAE,SAAS,EAAE,yBAAyB,EAAE,EACxC,EAAE,SAAS,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,EAAE,CACtD,CAAC;QACF,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAClF,8DAA8D,CAC/D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,GAAG,EAAE,CACV,OAAO,CACL,EAAE,QAAQ,EAAE,yBAAyB,EAAE,KAAK,EAAE,iBAAiB,EAAE,EACjE,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,CAC3C,CACF,CAAC,OAAO,CAAC,qHAAqH,CAAC,CAAC;IACnI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,yBAAyB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CACtF,mEAAmE,CACpE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,2EAA2E;QAC3E,2EAA2E;QAC3E,kCAAkC;QAClC,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,GAAG,GAAG,qBAAqB,CAAC,UAAU,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAC9E,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CACtB,kHAAkH;YAChH,0DAA0D,CAC7D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/memory/mcp/dist/lib/log-ingest.d.ts

@@ -1,4 +1,4 @@
-export type WriteEventReason = "invalid-input" | "schema-unknown-label" | "schema-property-naming" | "account-isolation" | "producedby-task-not-found" | "constraint-violation" | "conflicting-element-id" | "invalid-target-node-id" | "gate-blocked" | "neo4j-driver-error";
+export type WriteEventReason = "invalid-input" | "schema-unknown-label" | "schema-property-naming" | "account-isolation" | "producedby-task-not-found" | "constraint-violation" | "conflicting-element-id" | "invalid-target-node-id" | "gate-blocked" | "type-preserving" | "neo4j-driver-error";
 interface SuccessEvent {
     tool: string;
     result: "ok";