@rubytech/create-siteoffice-code 0.1.256

package/payload/platform/plugins/memory/mcp/dist/lib/graph-prune.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-prune.js","sourceRoot":"","sources":["../../src/lib/graph-prune.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAQlC,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,OAAO,OAAO,CAAC,SAAS,EAAE,2BAA2B,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;YAC9G,SAAS,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;SACzF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtI,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,IAAc;IAC5D,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,aAAa,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC/C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,oCAAoC,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,iBAAiB,SAAS,iCAAiC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC;AAoBD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAc,EACd,SAAiB,EACjB,SAAiB,EACjB,OAAe;IAEf,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC;;;;;;;;;8DASwD,EACxD,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,CAClC,CAAC;QAEF,IAAI,gBAAgB,GAAG,CAAC,CAAC;QACzB,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACjC,YAAY,IAAI,CAAC,CAAC;YAClB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAa,CAAC;YACvC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAChC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;gBAChC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,OAAO;gBACtB,SAAS;aACV,CAAC,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CACf;eACO,UAAU;+EACsD,EACvE,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAC3B,CAAC;YACF,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC;QAClC,CAAC;QAED,OAAO;YACL,SAAS;YACT,OAAO;YACP,YAAY;YACZ,gBAAgB;YAChB,eAAe;SAChB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}

package/payload/platform/plugins/memory/mcp/dist/lib/graph-write-gate.d.ts

@@ -0,0 +1,76 @@
+export interface SessionLike {
+    run(query: string, params?: Record<string, unknown>): Promise<{
+        records: Array<{
+            get(key: string): unknown;
+        }>;
+    }>;
+}
+export interface GateArgs {
+    session: SessionLike;
+    accountId: string;
+    labels: string[];
+}
+/**
+ * Gate result.
+ *
+ * The `reason` discriminator stays narrow for backward compatibility: existing
+ * callers (error UI, SKILL.md prose) key on `"no-admin-user"` / `"no-local-business"`
+ * and continue working unchanged. The `subReason` field is the
+ * additive observability surface — it distinguishes the two sub-cases of
+ * `"no-admin-user"` (no node at all vs node with null accountId) and the two
+ * sub-cases of `"no-local-business"` (kept generic for now since no consumer
+ * needs the split). Loud diagnostic for operators reading the reject log line.
+ *
+ * After the seed-stamping + boot-time self-heal land, the
+ * `"admin-user-no-accountid"` subReason should never fire in production —
+ * it remains as a defensive surface in case a future regression resurrects
+ * null-accountId state.
+ */
+export type GateResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: "no-admin-user" | "no-local-business";
+    subReason: "no-admin-user-node" | "admin-user-no-accountid" | "no-business-or-personal-profile";
+    message: string;
+};
+/** Compiled-truth cap. ≤2000 chars ≈ 300 words — forces the rewriter to summarise, not transcribe. */
+export declare const COMPILED_TRUTH_MAX_CHARS = 2000;
+export type PropertyGateResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: "compiled-truth-too-long";
+    message: string;
+};
+/**
+ * Property-level write gate (Task 306, extended Task 392). The cap applies
+ * to both `compiledTruth` and its public twin `compiledTruthPublic`; either
+ * field exceeding COMPILED_TRUTH_MAX_CHARS rejects the write. Used by both
+ * `memory-write` and `memory-update`; the rewriter calls it before writing too.
+ *
+ * Pure / synchronous on purpose — no session needed. Loud-fail on
+ * violation so an over-producing rewriter surfaces immediately instead
+ * of silently truncating the operator's summary.
+ */
+export declare function checkPropertyWriteGate(args: {
+    properties: Record<string, unknown>;
+}): PropertyGateResult;
+export type LabelGateResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: "forbidden-label";
+    forbiddenLabel: string;
+    message: string;
+};
+/**
+ * Label-level write gate (compiled-truth rewriter). Rejects any agent-side write
+ * whose labels include a FORBIDDEN_LABEL. Pure / synchronous — no
+ * session needed.
+ */
+export declare function checkLabelWriteGate(args: {
+    labels: string[];
+}): LabelGateResult;
+export declare function checkGraphWriteGate(args: GateArgs): Promise<GateResult>;
+//# sourceMappingURL=graph-write-gate.d.ts.map

package/payload/platform/plugins/memory/mcp/dist/lib/graph-write-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-write-gate.d.ts","sourceRoot":"","sources":["../../src/lib/graph-write-gate.ts"],"names":[],"mappings":"AAuCA,MAAM,WAAW,WAAW;IAC1B,GAAG,CACD,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,CAAC;YAAE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,eAAe,GAAG,mBAAmB,CAAC;IAC9C,SAAS,EACL,oBAAoB,GACpB,yBAAyB,GACzB,iCAAiC,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN,sGAAsG;AACtG,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAE7C,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,yBAAyB,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC,GAAG,kBAAkB,CAiBrB;AAqBD,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,iBAAiB,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,GAAG,eAAe,CAiBlB;AAOD,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAuD7E"}

package/payload/platform/plugins/memory/mcp/dist/lib/graph-write-gate.js

@@ -0,0 +1,148 @@
+// Graph-write precondition gate.
+//
+// Refuses any `memory-write` / `memory-update` against a non-exempt node
+// label until the account's AdminUser exists AND at least one of
+// (LocalBusiness, personal-profile Person) exists. The purpose is doctrine
+// enforcement: SOUL is personality, factual user/business data lives in the
+// graph, and the agent must establish operator identity before writing
+// user-domain nodes (WebSite, Service, etc.). Prose rules drifted across past
+// sessions; this gate removes the LLM from the decision path entirely
+// (feedback_deterministic_means_remove_llm.md).
+//
+// Two satisfaction shapes:
+//   1. Business-owner mode — AdminUser + LocalBusiness
+//   2. Personal mode — AdminUser + Person {role: "admin-personal"}
+//
+// The personal-profile bootstrap exists because Maxy's Solo licence target is
+// individual operators with no business at all; forcing them through a
+// business-profile flow created a silent failure where someone with an
+// employer registered that employer as a `LocalBusiness`.
+//
+// The exempt set is the base case that breaks the chicken-and-egg: the agent
+// must be able to write Person, LocalBusiness, and AdminUser *before* anything
+// else — otherwise no onboarding can ever complete. Public-agent customer
+// capture writes `Person`, so exempting it keeps that flow working even when
+// the admin side has not run business-profile.
+//
+// Cypher safety: COUNT subqueries return 0 for missing matches, which is the
+// correct semantic here — no MATCH-SET silent-no-op risk (sprint-learning #5
+// applies to mutations, not COUNTs).
+//
+// Scope: this gate lives only in the MCP memory-write/update path the agent
+// calls. Server-side writers (neo4j-store, workflow-execute, admin/index)
+// are owned by the provenance doctrine — disjoint enforcement.
+//
+// TODO (perf, post-Phase-0): once Person counts grow into the thousands per
+// account, add a composite index on Person(accountId, role) so the
+// hasPersonalProfile subquery doesn't full-scan. Same scaling concern applies
+// to LocalBusiness(accountId) and AdminUser(accountId). Not in 704 scope.
+/** Compiled-truth cap. ≤2000 chars ≈ 300 words — forces the rewriter to summarise, not transcribe. */
+export const COMPILED_TRUTH_MAX_CHARS = 2000;
+/**
+ * Property-level write gate (Task 306, extended Task 392). The cap applies
+ * to both `compiledTruth` and its public twin `compiledTruthPublic`; either
+ * field exceeding COMPILED_TRUTH_MAX_CHARS rejects the write. Used by both
+ * `memory-write` and `memory-update`; the rewriter calls it before writing too.
+ *
+ * Pure / synchronous on purpose — no session needed. Loud-fail on
+ * violation so an over-producing rewriter surfaces immediately instead
+ * of silently truncating the operator's summary.
+ */
+export function checkPropertyWriteGate(args) {
+    for (const field of ["compiledTruth", "compiledTruthPublic"]) {
+        const value = args.properties[field];
+        if (typeof value === "string" && value.length > COMPILED_TRUTH_MAX_CHARS) {
+            console.log(`[graph-write-gate] reject reason=compiled-truth-too-long field=${field} len=${value.length} cap=${COMPILED_TRUTH_MAX_CHARS}`);
+            return {
+                ok: false,
+                reason: "compiled-truth-too-long",
+                message: `${field} length ${value.length} exceeds cap of ${COMPILED_TRUTH_MAX_CHARS} chars. ` +
+                    `The rewriter must produce a tighter summary.`,
+            };
+        }
+    }
+    return { ok: true };
+}
+const EXEMPT_LABELS = new Set([
+    "Person",
+    "LocalBusiness",
+    "AdminUser",
+]);
+/**
+ * Labels the agent must never write directly via memory-write /
+ * memory-update. `:CompiledTruthRevision` (compiled-truth rewriter) is read-only after
+ * write: the only writer is the rewriter (composed via the revision
+ * helper, in the same transaction as the live `compiledTruth` SET), and
+ * the only mutation path is the dream-cycle prune. Direct writes from
+ * the agent would let an LLM forge or rewrite audit history — defeating
+ * the point of having it.
+ */
+const FORBIDDEN_LABELS = new Set([
+    "CompiledTruthRevision",
+]);
+/**
+ * Label-level write gate (compiled-truth rewriter). Rejects any agent-side write
+ * whose labels include a FORBIDDEN_LABEL. Pure / synchronous — no
+ * session needed.
+ */
+export function checkLabelWriteGate(args) {
+    for (const label of args.labels) {
+        if (FORBIDDEN_LABELS.has(label)) {
+            console.log(`[graph-write-gate] reject reason=forbidden-label label=${label}`);
+            return {
+                ok: false,
+                reason: "forbidden-label",
+                forbiddenLabel: label,
+                message: `:${label} is read-only and may not be written via memory-write or memory-update. ` +
+                    `It is produced by the compiled-truth rewriter (compiled-truth rewriter) and pruned by the dream-cycle.`,
+            };
+        }
+    }
+    return { ok: true };
+}
+const NEXT_MOVE = "Run the business-profile skill to establish the admin user and business " +
+    "identity, or complete the personal-profile bootstrap (onboarding step 9 " +
+    "personal mode), before writing this node.";
+export async function checkGraphWriteGate(args) {
+    const { session, accountId, labels } = args;
+    if (labels.some((l) => EXEMPT_LABELS.has(l))) {
+        return { ok: true };
+    }
+    // COUNT subquery form — one query, no cartesian-product surprises,
+    // account-scoped so multi-account installs don't cross-contaminate.
+    // Four subqueries: AdminUser-with-accountId, AdminUser-any (subReason
+    // discriminator), LocalBusiness, Person-with-admin-role.
+    const result = await session.run(`RETURN
+       COUNT { MATCH (au:AdminUser {accountId: $accountId}) } > 0 AS hasAdmin,
+       COUNT { MATCH (au:AdminUser) } > 0 AS hasAnyAdminUser,
+       COUNT { MATCH (lb:LocalBusiness {accountId: $accountId}) } > 0 AS hasBusiness,
+       COUNT { MATCH (p:Person {accountId: $accountId, role: "admin-personal"}) } > 0 AS hasPersonalProfile`, { accountId });
+    const record = result.records[0];
+    const hasAdmin = Boolean(record?.get("hasAdmin"));
+    const hasAnyAdminUser = Boolean(record?.get("hasAnyAdminUser"));
+    const hasBusiness = Boolean(record?.get("hasBusiness"));
+    const hasPersonalProfile = Boolean(record?.get("hasPersonalProfile"));
+    if (hasAdmin && (hasBusiness || hasPersonalProfile)) {
+        return { ok: true };
+    }
+    // Reason stays backward-compatible. subReason is the additive
+    // discriminator that distinguishes the two no-admin-user sub-cases —
+    // critical for operator diagnosis: "no-admin-user-node" means a clean DB
+    // (run seed); "admin-user-no-accountid" means legacy install where the seed
+    // ran pre-912 (boot-time self-heal repairs this; if the subReason still
+    // fires post-912, the heal didn't run).
+    let reason;
+    let subReason;
+    if (!hasAdmin) {
+        reason = "no-admin-user";
+        subReason = hasAnyAdminUser ? "admin-user-no-accountid" : "no-admin-user-node";
+    }
+    else {
+        reason = "no-local-business";
+        subReason = "no-business-or-personal-profile";
+    }
+    console.log(`[graph-write-gate] reject accountId=${accountId.slice(0, 8)}… ` +
+        `reason=${reason} subReason=${subReason} nodeLabels=${labels.join(",")}`);
+    return { ok: false, reason, subReason, message: NEXT_MOVE };
+}
+//# sourceMappingURL=graph-write-gate.js.map

package/payload/platform/plugins/memory/mcp/dist/lib/graph-write-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-write-gate.js","sourceRoot":"","sources":["../../src/lib/graph-write-gate.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,EAAE;AACF,yEAAyE;AACzE,iEAAiE;AACjE,2EAA2E;AAC3E,4EAA4E;AAC5E,uEAAuE;AACvE,8EAA8E;AAC9E,sEAAsE;AACtE,gDAAgD;AAChD,EAAE;AACF,2BAA2B;AAC3B,uDAAuD;AACvD,mEAAmE;AACnE,EAAE;AACF,8EAA8E;AAC9E,uEAAuE;AACvE,uEAAuE;AACvE,0DAA0D;AAC1D,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,0EAA0E;AAC1E,6EAA6E;AAC7E,+CAA+C;AAC/C,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,qCAAqC;AACrC,EAAE;AACF,4EAA4E;AAC5E,0EAA0E;AAC1E,+DAA+D;AAC/D,EAAE;AACF,4EAA4E;AAC5E,mEAAmE;AACnE,8EAA8E;AAC9E,0EAA0E;AA2C1E,sGAAsG;AACtG,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAU7C;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAEtC;IACC,KAAK,MAAM,KAAK,IAAI,CAAC,eAAe,EAAE,qBAAqB,CAAU,EAAE,CAAC;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;YACzE,OAAO,CAAC,GAAG,CACT,kEAAkE,KAAK,QAAQ,KAAK,CAAC,MAAM,QAAQ,wBAAwB,EAAE,CAC9H,CAAC;YACF,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,yBAAyB;gBACjC,OAAO,EACL,GAAG,KAAK,WAAW,KAAK,CAAC,MAAM,mBAAmB,wBAAwB,UAAU;oBACpF,8CAA8C;aACjD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,QAAQ;IACR,eAAe;IACf,WAAW;CACZ,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IACpD,uBAAuB;CACxB,CAAC,CAAC;AAWH;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAEnC;IACC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CACT,0DAA0D,KAAK,EAAE,CAClE,CAAC;YACF,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,iBAAiB;gBACzB,cAAc,EAAE,KAAK;gBACrB,OAAO,EACL,IAAI,KAAK,0EAA0E;oBACnF,wGAAwG;aAC3G,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,SAAS,GACb,0EAA0E;IAC1E,0EAA0E;IAC1E,2CAA2C,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAc;IACtD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAE5C,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,mEAAmE;IACnE,oEAAoE;IACpE,sEAAsE;IACtE,yDAAyD;IACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;4GAIwG,EACxG,EAAE,SAAS,EAAE,CACd,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAClD,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACxD,MAAM,kBAAkB,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAEtE,IAAI,QAAQ,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,8DAA8D;IAC9D,qEAAqE;IACrE,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,wCAAwC;IACxC,IAAI,MAA6C,CAAC;IAClD,IAAI,SAGiC,CAAC;IACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,GAAG,eAAe,CAAC;QACzB,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACjF,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,mBAAmB,CAAC;QAC7B,SAAS,GAAG,iCAAiC,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,GAAG,CACT,uCAAuC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI;QAC9D,UAAU,MAAM,cAAc,SAAS,eAAe,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC3E,CAAC;IAEF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAC9D,CAAC"}

package/payload/platform/plugins/memory/mcp/dist/lib/kd-classify-gate.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Body-growth threshold above which a reclassify is allowed. Below this the
+ * gate returns "skip" because section topology is unlikely to have shifted.
+ * Picked to fire on roughly 2-3 new messages in a 10-message thread.
+ */
+export declare const KD_CLASSIFY_GROWTH_THRESHOLD = 0.25;
+export interface GateInputs {
+    bodyLen: number;
+    /** Body length at the previous successful classify; 0 / null means never classified. */
+    lastClassifiedBodyLength: number;
+}
+export interface GateDecision {
+    action: "skip" | "proceed";
+    growthPct: number;
+    /** Human-readable skip reason when action === "skip". */
+    reason: string | null;
+}
+/** Decide whether a classify call should proceed based on body-length delta. */
+export declare function decideGate({ bodyLen, lastClassifiedBodyLength }: GateInputs): GateDecision;
+/**
+ * Write the KD's body to a deterministic temp-file path so the librarian can
+ * feed it through memory-ingest-extract → memory-ingest unchanged. Deterministic
+ * path = idempotent under repeat calls; the file is overwritten if it exists.
+ */
+export declare function writeClassifyTempFile(accountDir: string, attachmentId: string, body: string): Promise<string>;
+/**
+ * Build the dispatch envelope the operator-visible tool returns. Admin reads
+ * the envelope and uses the Task tool to dispatch the librarian specialist;
+ * librarian runs the document-ingest skill against `tempFilePath` with the
+ * named `attachmentId` so the resulting :Section children land under the
+ * pre-existing :KnowledgeDocument (memory-ingest is keyed on attachmentId).
+ */
+export declare function buildDispatchEnvelope(opts: {
+    attachmentId: string;
+    source: string;
+    tempFilePath: string;
+    bodyLen: number;
+    lastClassifiedBodyLength: number;
+    growthPct: number;
+}): string;
+//# sourceMappingURL=kd-classify-gate.d.ts.map

package/payload/platform/plugins/memory/mcp/dist/lib/kd-classify-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kd-classify-gate.d.ts","sourceRoot":"","sources":["../../src/lib/kd-classify-gate.ts"],"names":[],"mappings":"AAaA;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAEjD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,wFAAwF;IACxF,wBAAwB,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,gFAAgF;AAChF,wBAAgB,UAAU,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE,UAAU,GAAG,YAAY,CAe1F;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,CAAC,CAKjB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB,EAAE,MAAM,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,CAeT"}

package/payload/platform/plugins/memory/mcp/dist/lib/kd-classify-gate.js

@@ -0,0 +1,69 @@
+import { mkdir, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+// ---------------------------------------------------------------------------
+// Reclassify gate for :KnowledgeDocument operator-solicited classification.
+//
+// Sole consumer today: kd-classify (memory plugin, generic). Email no longer
+// ships a per-thread reclassify wrapper — the conversation-archive ingest
+// pipeline writes sections at archive time (Task 445).
+//
+// Task 401.
+// ---------------------------------------------------------------------------
+/**
+ * Body-growth threshold above which a reclassify is allowed. Below this the
+ * gate returns "skip" because section topology is unlikely to have shifted.
+ * Picked to fire on roughly 2-3 new messages in a 10-message thread.
+ */
+export const KD_CLASSIFY_GROWTH_THRESHOLD = 0.25;
+/** Decide whether a classify call should proceed based on body-length delta. */
+export function decideGate({ bodyLen, lastClassifiedBodyLength }) {
+    if (lastClassifiedBodyLength <= 0) {
+        // First-time classify — no prior stamp.
+        return { action: "proceed", growthPct: 1, reason: null };
+    }
+    const growth = (bodyLen - lastClassifiedBodyLength) / lastClassifiedBodyLength;
+    if (growth >= KD_CLASSIFY_GROWTH_THRESHOLD) {
+        return { action: "proceed", growthPct: growth, reason: null };
+    }
+    const pctRounded = Math.round(growth * 100);
+    return {
+        action: "skip",
+        growthPct: growth,
+        reason: `no classification needed (body grew ${pctRounded}% since last ingest; threshold ${Math.round(KD_CLASSIFY_GROWTH_THRESHOLD * 100)}%)`,
+    };
+}
+/**
+ * Write the KD's body to a deterministic temp-file path so the librarian can
+ * feed it through memory-ingest-extract → memory-ingest unchanged. Deterministic
+ * path = idempotent under repeat calls; the file is overwritten if it exists.
+ */
+export async function writeClassifyTempFile(accountDir, attachmentId, body) {
+    const path = `${accountDir}/tmp/kd-classify-${attachmentId}.txt`;
+    await mkdir(dirname(path), { recursive: true });
+    await writeFile(path, body, "utf-8");
+    return path;
+}
+/**
+ * Build the dispatch envelope the operator-visible tool returns. Admin reads
+ * the envelope and uses the Task tool to dispatch the librarian specialist;
+ * librarian runs the document-ingest skill against `tempFilePath` with the
+ * named `attachmentId` so the resulting :Section children land under the
+ * pre-existing :KnowledgeDocument (memory-ingest is keyed on attachmentId).
+ */
+export function buildDispatchEnvelope(opts) {
+    const growthLabel = opts.lastClassifiedBodyLength > 0
+        ? `${Math.round(opts.growthPct * 100)}% growth since last ingest`
+        : "first classify";
+    return [
+        `Ready to classify ${opts.source} :KnowledgeDocument into sections.`,
+        `attachmentId: ${opts.attachmentId}`,
+        `bodyLen: ${opts.bodyLen} chars (${growthLabel})`,
+        `tempFilePath: ${opts.tempFilePath}`,
+        ``,
+        `Next: dispatch the \`librarian\` specialist via the Task tool with this brief —`,
+        `  "Ingest the document at ${opts.tempFilePath} using mode=document, attachmentId=${opts.attachmentId},`,
+        `   anchor=LocalBusiness. The :KnowledgeDocument already exists and has source=${opts.source};`,
+        `   memory-ingest will MERGE by attachmentId and write :Section children, replacing any prior."`,
+    ].join("\n");
+}
+//# sourceMappingURL=kd-classify-gate.js.map

package/payload/platform/plugins/memory/mcp/dist/lib/kd-classify-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kd-classify-gate.js","sourceRoot":"","sources":["../../src/lib/kd-classify-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,8EAA8E;AAC9E,4EAA4E;AAC5E,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,uDAAuD;AACvD,EAAE;AACF,YAAY;AACZ,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAejD,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAc;IAC1E,IAAI,wBAAwB,IAAI,CAAC,EAAE,CAAC;QAClC,wCAAwC;QACxC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,OAAO,GAAG,wBAAwB,CAAC,GAAG,wBAAwB,CAAC;IAC/E,IAAI,MAAM,IAAI,4BAA4B,EAAE,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IAC5C,OAAO;QACL,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,uCAAuC,UAAU,kCAAkC,IAAI,CAAC,KAAK,CAAC,4BAA4B,GAAG,GAAG,CAAC,IAAI;KAC9I,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAkB,EAClB,YAAoB,EACpB,IAAY;IAEZ,MAAM,IAAI,GAAG,GAAG,UAAU,oBAAoB,YAAY,MAAM,CAAC;IACjE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAOrC;IACC,MAAM,WAAW,GAAG,IAAI,CAAC,wBAAwB,GAAG,CAAC;QACnD,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,4BAA4B;QACjE,CAAC,CAAC,gBAAgB,CAAC;IACrB,OAAO;QACL,qBAAqB,IAAI,CAAC,MAAM,oCAAoC;QACpE,iBAAiB,IAAI,CAAC,YAAY,EAAE;QACpC,YAAY,IAAI,CAAC,OAAO,WAAW,WAAW,GAAG;QACjD,iBAAiB,IAAI,CAAC,YAAY,EAAE;QACpC,EAAE;QACF,iFAAiF;QACjF,6BAA6B,IAAI,CAAC,YAAY,sCAAsC,IAAI,CAAC,YAAY,GAAG;QACxG,iFAAiF,IAAI,CAAC,MAAM,GAAG;QAC/F,gGAAgG;KACjG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/payload/platform/plugins/memory/mcp/dist/lib/label-delete-gate.d.ts

@@ -0,0 +1,18 @@
+export declare const RESERVED_LABEL_DELETE_REFUSAL: string;
+interface DeleteGateArgs {
+    labels: string[];
+    origin?: string;
+    accountId?: string;
+    elementId?: string;
+    tool: "memory-delete" | "memory-empty-trash";
+}
+export type DeleteGateResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: "reserved-label";
+    message: string;
+};
+export declare function checkLabelDeleteGate(args: DeleteGateArgs): DeleteGateResult;
+export {};
+//# sourceMappingURL=label-delete-gate.d.ts.map

package/payload/platform/plugins/memory/mcp/dist/lib/label-delete-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"label-delete-gate.d.ts","sourceRoot":"","sources":["../../src/lib/label-delete-gate.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,6BAA6B,QAGgB,CAAC;AAE3D,UAAU,cAAc;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,eAAe,GAAG,oBAAoB,CAAC;CAC9C;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,cAAc,GAAG,gBAAgB,CAqB3E"}

package/payload/platform/plugins/memory/mcp/dist/lib/label-delete-gate.js

@@ -0,0 +1,31 @@
+// Task 443 — Refuse agent-origin deletes targeting the per-account root
+// `:LocalBusiness`. Mirrors the write-side gate in `label-origin-gate.ts`
+// (Task 350): the installer's seed-neo4j.sh writes the single root via raw
+// cypher (system origin); resets that need to remove + re-seed call the
+// memory-delete primitive with `origin: "system"`. Without this gate an
+// agent or specialist can soft-delete the immutable per-account root via
+// `memory-delete`, and a subsequent `memory-empty-trash` will DETACH DELETE
+// it from the graph.
+const RESERVED_LABEL = "LocalBusiness";
+const SYSTEM_ORIGIN = "system";
+export const RESERVED_LABEL_DELETE_REFUSAL = `Delete blocked (reserved-label): ${RESERVED_LABEL} is the per-account root ` +
+    `seeded by the installer and held immutable. ` +
+    `See platform/plugins/memory/references/schema-base.md.`;
+export function checkLabelDeleteGate(args) {
+    const { labels, origin, accountId, elementId, tool } = args;
+    if (!labels.includes(RESERVED_LABEL)) {
+        return { ok: true };
+    }
+    if ((origin ?? "") === SYSTEM_ORIGIN) {
+        return { ok: true };
+    }
+    const acctPrefix = accountId ? accountId.slice(0, 8) : "<none>";
+    const eidPrefix = elementId ? elementId.slice(0, 16) : "<none>";
+    process.stderr.write(`[label-delete-gate] reject accountId=${acctPrefix} elementId=${eidPrefix} label=${RESERVED_LABEL} tool=${tool}\n`);
+    return {
+        ok: false,
+        reason: "reserved-label",
+        message: RESERVED_LABEL_DELETE_REFUSAL,
+    };
+}
+//# sourceMappingURL=label-delete-gate.js.map

package/payload/platform/plugins/memory/mcp/dist/lib/label-delete-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"label-delete-gate.js","sourceRoot":"","sources":["../../src/lib/label-delete-gate.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,0EAA0E;AAC1E,2EAA2E;AAC3E,wEAAwE;AACxE,wEAAwE;AACxE,yEAAyE;AACzE,4EAA4E;AAC5E,qBAAqB;AAErB,MAAM,cAAc,GAAG,eAAe,CAAC;AACvC,MAAM,aAAa,GAAG,QAAQ,CAAC;AAE/B,MAAM,CAAC,MAAM,6BAA6B,GACxC,oCAAoC,cAAc,2BAA2B;IAC7E,8CAA8C;IAC9C,wDAAwD,CAAC;AAc3D,MAAM,UAAU,oBAAoB,CAAC,IAAoB;IACvD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAE5D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,KAAK,aAAa,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChE,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wCAAwC,UAAU,cAAc,SAAS,UAAU,cAAc,SAAS,IAAI,IAAI,CACnH,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,6BAA6B;KACvC,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/memory/mcp/dist/lib/label-origin-gate.d.ts

@@ -0,0 +1,18 @@
+import type { CreatedBy } from "../../../../../lib/graph-write/dist/index.js";
+export declare const RESERVED_LABEL_REFUSAL: string;
+interface OriginGateArgs {
+    labels: string[];
+    createdBy: CreatedBy;
+    accountId?: string;
+    tool: "memory-write";
+}
+type OriginGateResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: "reserved-label";
+    message: string;
+};
+export declare function checkLabelOriginGate(args: OriginGateArgs): OriginGateResult;
+export {};
+//# sourceMappingURL=label-origin-gate.d.ts.map

package/payload/platform/plugins/memory/mcp/dist/lib/label-origin-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"label-origin-gate.d.ts","sourceRoot":"","sources":["../../src/lib/label-origin-gate.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8CAA8C,CAAC;AAK9E,eAAO,MAAM,sBAAsB,QAIoC,CAAC;AAExE,UAAU,cAAc;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,cAAc,CAAC;CACtB;AAED,KAAK,gBAAgB,GACjB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,cAAc,GAAG,gBAAgB,CAqB3E"}

package/payload/platform/plugins/memory/mcp/dist/lib/label-origin-gate.js

@@ -0,0 +1,35 @@
+// Task 350 + Task 448 — Refuse agent-origin *creates* of a second
+// `:LocalBusiness`. The installer's seed-neo4j.sh writes the single root node
+// via raw cypher (createdBy.agent === 'system' by convention); third-party
+// companies must go to `:Organization` per schema-base.md. Without this gate
+// an agent mislabel either silently corrupts the operator's root via MERGE
+// or trips the UNIQUE constraint on LocalBusiness.accountId.
+//
+// Scope is creates only (`memory-write`). Property updates against the
+// existing root (`memory-update`, elementId-resolved + accountId-scoped)
+// cannot create a new node, so the gate does not apply there — they are
+// guarded by checkLabelWriteGate + checkGraphWriteGate + property restriction.
+const RESERVED_LABEL = "LocalBusiness";
+const SYSTEM_AGENT = "system";
+export const RESERVED_LABEL_REFUSAL = `Creating a second ${RESERVED_LABEL} is refused — it is the per-account root ` +
+    `seeded by the installer. Use Organization for third-party companies — see ` +
+    `platform/plugins/memory/references/schema-base.md. ` +
+    `To edit the existing root, use memory-update against its elementId.`;
+export function checkLabelOriginGate(args) {
+    const { labels, createdBy, accountId, tool } = args;
+    if (!labels.includes(RESERVED_LABEL)) {
+        return { ok: true };
+    }
+    if ((createdBy.agent ?? "") === SYSTEM_AGENT) {
+        return { ok: true };
+    }
+    const acctPrefix = accountId ? accountId.slice(0, 8) : "<none>";
+    const agent = createdBy.agent ?? "<unset>";
+    console.error(`[label-origin-gate] reject accountId=${acctPrefix} label=${RESERVED_LABEL} agent=${agent} tool=${tool}`);
+    return {
+        ok: false,
+        reason: "reserved-label",
+        message: RESERVED_LABEL_REFUSAL,
+    };
+}
+//# sourceMappingURL=label-origin-gate.js.map

package/payload/platform/plugins/memory/mcp/dist/lib/label-origin-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"label-origin-gate.js","sourceRoot":"","sources":["../../src/lib/label-origin-gate.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,6DAA6D;AAC7D,EAAE;AACF,uEAAuE;AACvE,yEAAyE;AACzE,wEAAwE;AACxE,+EAA+E;AAI/E,MAAM,cAAc,GAAG,eAAe,CAAC;AACvC,MAAM,YAAY,GAAG,QAAQ,CAAC;AAE9B,MAAM,CAAC,MAAM,sBAAsB,GACjC,qBAAqB,cAAc,2CAA2C;IAC9E,4EAA4E;IAC5E,qDAAqD;IACrD,qEAAqE,CAAC;AAaxE,MAAM,UAAU,oBAAoB,CAAC,IAAoB;IACvD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAEpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,YAAY,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAChE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC;IAC3C,OAAO,CAAC,KAAK,CACX,wCAAwC,UAAU,UAAU,cAAc,UAAU,KAAK,SAAS,IAAI,EAAE,CACzG,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,sBAAsB;KAChC,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/memory/mcp/dist/lib/live-schema-source.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Live schema source for the memory-write / memory-update validator.
+ *
+ * Three sources, one decision rule:
+ *
+ *   liveLabels      — `db.labels()` snapshot from Neo4j (refreshed every 60s
+ *                     by SchemaCache from platform/lib/graph-mcp).
+ *   declaredLabels  — labels declared in `platform/neo4j/schema.cypher`
+ *                     (constraint + index FOR (alias:Label) forms).
+ *   markdownLabels  — labels with documented required-property groups in
+ *                     `platform/plugins/memory/references/schema-*.md`.
+ *
+ *   recognised = liveLabels ∪ declaredLabels         ← gates label existence
+ *   markdown documented? → run required-property check, else skip
+ *
+ * Why a per-process cache rather than a shared one. The graph-mcp proxy and
+ * the memory plugin run as separate stdio MCP servers spawned by Claude Code
+ * (each with its own Neo4j driver). "In-process" brief means
+ * "no per-decision tool round-trip" — *not* a shared cache instance, which
+ * would require IPC. Two SchemaCache instances polling the same Neo4j every
+ * 60s costs roughly two `db.labels()` calls per minute and avoids the IPC
+ * surface entirely.
+ *
+ * Why drift runs from the cache's emit hook. SchemaCache uses single-flight
+ * refresh — concurrent `refresh()` calls share an in-flight promise. A
+ * parallel timer could race against an in-progress refresh and read a stale
+ * snapshot during the comparison. The cache's own `emit()` callback fires
+ * synchronously after a successful refresh swap, so tapping it guarantees
+ * the snapshot we read is the one the refresh just produced.
+ *
+ * Bootstrap posture. Fresh installs have no nodes yet, so `db.labels()`
+ * returns []. The validator must still accept the very first
+ * `LocalBusiness` write because that label is *declared* in schema.cypher
+ * even when no node carries it. The recognised-set union resolves this
+ * directly; no fail-open branch needed for that case.
+ *
+ *   db.labels()     declared in cypher    recognised?
+ *   ─────────       ──────────────────    ───────────
+ *   []              [LocalBusiness]       LocalBusiness  ✓ (bootstrap)
+ *   [LocalBusiness] [LocalBusiness]       LocalBusiness  ✓ (steady state)
+ *   [Person]        [LocalBusiness]       Person + LocalBusiness  ✓
+ *   []              []                    {}             reject all (Neo4j
+ *                                                         unreachable AND
+ *                                                         schema.cypher
+ *                                                         unreadable — both
+ *                                                         logged loudly)
+ */
+import { SchemaCache, neo4jSchemaFetcher, type SchemaFetcher } from "../../../../../lib/graph-mcp/dist/schema-cache.js";
+export type DriftKind = "live-not-declared" | "declared-not-live" | "markdown-orphan";
+export interface DriftEntry {
+    kind: DriftKind;
+    token: string;
+}
+export interface LiveSchemaSource {
+    /** live ∪ declared — used for label existence */
+    recognisedLabels(): Set<string>;
+    /** Just `db.labels()` — for drift comparison and observability */
+    liveLabels(): Set<string>;
+    /** Just schema.cypher constraint+index declarations */
+    declaredLabels(): Set<string>;
+    /** Whether the live snapshot has resolved at least once */
+    liveReady(): boolean;
+}
+interface BuildLiveSchemaSourceOptions {
+    schemaCypherPath: string;
+    /**
+     * Markdown-documented label set (the renamed `LoadedSchema.markdownLabels`).
+     * Used only for boot/refresh drift comparison — not for the per-write
+     * decision path.
+     */
+    markdownLabels: Iterable<string>;
+    fetcher: SchemaFetcher;
+    /** Override default 60s refresh in tests. */
+    refreshIntervalMs?: number;
+    /** Test-injectable log emitter. Default: process.stderr. */
+    emit?: (line: string) => void;
+}
+export interface LiveSchemaRuntime {
+    source: LiveSchemaSource;
+    cache: SchemaCache;
+    /**
+     * Resolves once the boot refresh has completed (success or failure).
+     * Callers that want drift logged at boot should `await runtime.ready`.
+     * Validators do not block on this — they fail-open against an empty live
+     * snapshot, which (combined with the declared set) still accepts the
+     * bootstrap labels on a fresh install.
+     */
+    ready: Promise<void>;
+}
+/**
+ * Build the live schema source plus its backing cache.
+ *
+ * The caller (memory MCP `index.ts`) owns lifecycle: it must `await
+ * runtime.ready` (or fire-and-forget) and call `runtime.cache.stop()` on
+ * shutdown. Tests pass a stub fetcher and a synthetic interval.
+ */
+export declare function buildLiveSchemaSource(options: BuildLiveSchemaSourceOptions): LiveSchemaRuntime;
+/** Re-export the fetcher factory so index.ts can wire one up cleanly. */
+export { neo4jSchemaFetcher };
+interface DriftCheckInput {
+    live: ReadonlySet<string>;
+    declared: ReadonlySet<string>;
+    markdown: ReadonlySet<string>;
+    emit: (line: string) => void;
+}
+export declare function runDriftCheck(input: DriftCheckInput): DriftEntry[];
+/**
+ * Resolve the absolute path to `platform/neo4j/schema.cypher`.
+ *
+ * Layout (compiled and source paths are siblings, so the offset is the same):
+ *   platform/plugins/memory/mcp/{src,dist}/lib/live-schema-source.{ts,js}
+ *   platform/neo4j/schema.cypher
+ *
+ * From `import.meta.dirname` (mcp/{src,dist}/lib/) the relative path is
+ * `../../../../../neo4j/schema.cypher` — 5 hops to platform/, then down.
+ * `PLATFORM_ROOT` overrides for production where the layout may differ.
+ */
+export declare function defaultSchemaCypherPath(): string;
+//# sourceMappingURL=live-schema-source.d.ts.map

package/payload/platform/plugins/memory/mcp/dist/lib/live-schema-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-schema-source.d.ts","sourceRoot":"","sources":["../../src/lib/live-schema-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAIH,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,KAAK,aAAa,EACnB,MAAM,mDAAmD,CAAC;AAG3D,MAAM,MAAM,SAAS,GACjB,mBAAmB,GACnB,mBAAmB,GACnB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,iDAAiD;IACjD,gBAAgB,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,kEAAkE;IAClE,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,uDAAuD;IACvD,cAAc,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,2DAA2D;IAC3D,SAAS,IAAI,OAAO,CAAC;CACtB;AAED,UAAU,4BAA4B;IACpC,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,EAAE,aAAa,CAAC;IACvB,6CAA6C;IAC7C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,4DAA4D;IAC5D,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,WAAW,CAAC;IACnB;;;;;;OAMG;IACH,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,4BAA4B,GACpC,iBAAiB,CAwCnB;AAED,yEAAyE;AACzE,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAM9B,UAAU,eAAe;IACvB,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1B,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAmCD,wBAAgB,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,UAAU,EAAE,CA2ClE;AAuBD;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAKhD"}