@rubytech/create-siteoffice-code 0.1.256

package/payload/platform/plugins/admin/mcp/dist/lib/onboarding.js

@@ -0,0 +1,249 @@
+// Onboarding state management — graph-persisted workflow state.
+// Purpose-built for Phase 0; migrates to a Workflow node with Task 13.
+import { existsSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+const STEP_FIELDS = [
+    "step1CompletedAt",
+    "step2CompletedAt",
+    "step3CompletedAt",
+    "step4CompletedAt",
+    "step5CompletedAt",
+    "step6CompletedAt",
+    "step7CompletedAt",
+    "step8CompletedAt",
+    "step9CompletedAt",
+];
+// neo4j-driver v5 returns Integer objects for integer properties, not native
+// JS numbers. This converts them safely (values 0–9 are well within range).
+function toJsNumber(val) {
+    if (typeof val === "number")
+        return val;
+    if (val && typeof val === "object" && "toNumber" in val) {
+        return val.toNumber();
+    }
+    return 0;
+}
+function recordToState(record) {
+    return {
+        currentStep: toJsNumber(record.get("currentStep")),
+        step1CompletedAt: record.get("step1CompletedAt") ?? null,
+        step2CompletedAt: record.get("step2CompletedAt") ?? null,
+        step3CompletedAt: record.get("step3CompletedAt") ?? null,
+        step4CompletedAt: record.get("step4CompletedAt") ?? null,
+        step5CompletedAt: record.get("step5CompletedAt") ?? null,
+        step6CompletedAt: record.get("step6CompletedAt") ?? null,
+        step7CompletedAt: record.get("step7CompletedAt") ?? null,
+        step8CompletedAt: record.get("step8CompletedAt") ?? null,
+        step9CompletedAt: record.get("step9CompletedAt") ?? null,
+        createdAt: record.get("createdAt") ?? new Date().toISOString(),
+        updatedAt: record.get("updatedAt") ?? new Date().toISOString(),
+    };
+}
+function readMigrationStep(accountDir) {
+    try {
+        const raw = readFileSync(join(accountDir, "account.json"), "utf-8");
+        const config = JSON.parse(raw);
+        if (typeof config.onboardingStep === "number" && config.onboardingStep > 0) {
+            return config.onboardingStep;
+        }
+    }
+    catch {
+        // File missing, unreadable, or malformed — no migration data
+    }
+    return 0;
+}
+function removeOnboardingStepFromFile(accountDir) {
+    try {
+        const configPath = join(accountDir, "account.json");
+        const raw = readFileSync(configPath, "utf-8");
+        const config = JSON.parse(raw);
+        if ("onboardingStep" in config) {
+            delete config.onboardingStep;
+            writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
+        }
+    }
+    catch {
+        // Tolerate cleanup failure — graph is the authority now
+    }
+}
+/**
+ * Task 562: consume the step-7 completion flag written by setup-tunnel.sh
+ * before the service restart. The script runs inside ${BRAND}.service's
+ * cgroup and cannot complete the MCP call after dispatching the restart —
+ * so it drops a filesystem marker instead. The first read of onboarding
+ * state after the restart picks it up, advances the graph via the same
+ * CASE-WHEN-NULL cypher as completeOnboardingStep, and deletes the marker.
+ *
+ * Idempotent at every layer: a missing flag is a no-op; a flag present
+ * against an already-completed step is a no-op on the graph (CASE-WHEN-NULL
+ * preserves the existing timestamp); a crash between graph write and flag
+ * delete re-consumes on the next call with the same no-op outcome.
+ */
+export async function consumeStep7Flag(session, accountId, accountDir) {
+    const flagPath = join(accountDir, "onboarding", "step7-complete");
+    if (!existsSync(flagPath))
+        return false;
+    let completedAt = new Date().toISOString();
+    try {
+        const raw = readFileSync(flagPath, "utf-8").trim();
+        if (raw) {
+            const parsed = JSON.parse(raw);
+            if (typeof parsed.completedAt === "string") {
+                completedAt = parsed.completedAt;
+            }
+        }
+    }
+    catch {
+        // Malformed flag content still advances state — the flag's presence
+        // alone is the authoritative signal; the embedded timestamp is forensic.
+    }
+    // RETURN count(o) so we can detect the "no OnboardingState node" case
+    // where SET is a silent no-op. Without this check, rmSync below would
+    // delete the flag against a graph that never applied the write, silently
+    // losing the step-7 completion signal forever.
+    const result = await session.run(`MATCH (o:OnboardingState {accountId: $accountId})
+     SET o.step7CompletedAt = CASE WHEN o.step7CompletedAt IS NULL THEN $completedAt ELSE o.step7CompletedAt END,
+         o.currentStep = CASE WHEN 7 > o.currentStep THEN 7 ELSE o.currentStep END,
+         o.updatedAt = $completedAt
+     RETURN count(o) AS updated`, { accountId, completedAt });
+    const updatedRaw = result.records[0]?.get("updated");
+    const updated = toJsNumber(updatedRaw);
+    if (updated === 0) {
+        // No OnboardingState node yet — leave the flag in place so the next
+        // reader (after node creation via MERGE in this function's migration
+        // branch below) can still consume it.
+        console.log(`[onboarding-flag-consumed] accountId=${accountId.slice(0, 8)}… step=7 ` +
+            `source=filesystem flagPath=${flagPath} skipped=no-node`);
+        return false;
+    }
+    console.log(`[onboarding-flag-consumed] accountId=${accountId.slice(0, 8)}… step=7 ` +
+        `source=filesystem flagPath=${flagPath} completedAt=${completedAt}`);
+    try {
+        rmSync(flagPath);
+    }
+    catch (err) {
+        console.error(`[onboarding-flag-consumed] warn: failed to delete ${flagPath}: ` +
+            `${err instanceof Error ? err.message : String(err)}`);
+    }
+    return true;
+}
+const READ_STATE_QUERY = `MATCH (o:OnboardingState {accountId: $accountId})
+       RETURN o.currentStep AS currentStep,
+              o.step1CompletedAt AS step1CompletedAt,
+              o.step2CompletedAt AS step2CompletedAt,
+              o.step3CompletedAt AS step3CompletedAt,
+              o.step4CompletedAt AS step4CompletedAt,
+              o.step5CompletedAt AS step5CompletedAt,
+              o.step6CompletedAt AS step6CompletedAt,
+              o.step7CompletedAt AS step7CompletedAt,
+              o.step8CompletedAt AS step8CompletedAt,
+              o.step9CompletedAt AS step9CompletedAt,
+              o.createdAt AS createdAt,
+              o.updatedAt AS updatedAt`;
+export async function getOnboardingState(sessionFactory, accountId, accountDir) {
+    const session = sessionFactory();
+    try {
+        // Check for existing graph node
+        const existing = await session.run(READ_STATE_QUERY, { accountId });
+        const nodeExisted = existing.records.length > 0;
+        if (nodeExisted) {
+            // Task 562: consume setup-tunnel.sh step-7 flag against the existing
+            // node. loadOnboardingStep (UI side) usually does this first at session
+            // start; this call is defensive in case this read precedes it.
+            //
+            // Always re-read after the consume attempt. If a concurrent caller
+            // consumed the flag between our initial read and our consumeStep7Flag
+            // call, consumeStep7Flag returns false (flag gone) but the graph still
+            // advanced — returning `existing.records[0]` would hand back the stale
+            // pre-consumption record. One extra indexed MATCH is negligible and
+            // guarantees the caller sees the authoritative state.
+            await consumeStep7Flag(session, accountId, accountDir);
+            const refreshed = await session.run(READ_STATE_QUERY, { accountId });
+            return recordToState(refreshed.records[0]);
+        }
+        // No graph node — check for migration from account.json
+        const migratedStep = readMigrationStep(accountDir);
+        const now = new Date().toISOString();
+        // Build step completion timestamps for migrated steps.
+        // account.json only stored a step counter, not per-step timestamps,
+        // so migrated steps all get the current time — the original times
+        // were never recorded.
+        const stepProps = {};
+        for (let i = 0; i < STEP_FIELDS.length; i++) {
+            stepProps[STEP_FIELDS[i]] = i < migratedStep ? now : null;
+        }
+        // Create the node via MERGE (idempotent under concurrent access)
+        const result = await session.run(`MERGE (o:OnboardingState {accountId: $accountId})
+       ON CREATE SET
+         o.currentStep = $currentStep,
+         o.step1CompletedAt = $step1CompletedAt,
+         o.step2CompletedAt = $step2CompletedAt,
+         o.step3CompletedAt = $step3CompletedAt,
+         o.step4CompletedAt = $step4CompletedAt,
+         o.step5CompletedAt = $step5CompletedAt,
+         o.step6CompletedAt = $step6CompletedAt,
+         o.step7CompletedAt = $step7CompletedAt,
+         o.step8CompletedAt = $step8CompletedAt,
+         o.step9CompletedAt = $step9CompletedAt,
+         o.createdAt = $now,
+         o.updatedAt = $now
+       RETURN o.currentStep AS currentStep,
+              o.step1CompletedAt AS step1CompletedAt,
+              o.step2CompletedAt AS step2CompletedAt,
+              o.step3CompletedAt AS step3CompletedAt,
+              o.step4CompletedAt AS step4CompletedAt,
+              o.step5CompletedAt AS step5CompletedAt,
+              o.step6CompletedAt AS step6CompletedAt,
+              o.step7CompletedAt AS step7CompletedAt,
+              o.step8CompletedAt AS step8CompletedAt,
+              o.step9CompletedAt AS step9CompletedAt,
+              o.createdAt AS createdAt,
+              o.updatedAt AS updatedAt`, { accountId, currentStep: migratedStep, now, ...stepProps });
+        // Clean up account.json if migration happened
+        if (migratedStep > 0) {
+            removeOnboardingStepFromFile(accountDir);
+        }
+        return recordToState(result.records[0]);
+    }
+    finally {
+        await session.close();
+    }
+}
+export async function completeOnboardingStep(sessionFactory, accountId, step) {
+    if (!Number.isInteger(step) || step < 1 || step > 9) {
+        throw new Error("Step must be between 1 and 9");
+    }
+    const session = sessionFactory();
+    try {
+        const stepField = STEP_FIELDS[step - 1];
+        const now = new Date().toISOString();
+        // Single query: MATCH + SET. If no node exists, MATCH returns zero
+        // records and we detect that from the result — no separate check needed.
+        const result = await session.run(`MATCH (o:OnboardingState {accountId: $accountId})
+       SET o.${stepField} = CASE WHEN o.${stepField} IS NULL THEN $now ELSE o.${stepField} END,
+           o.currentStep = CASE WHEN $step > o.currentStep THEN $step ELSE o.currentStep END,
+           o.updatedAt = $now
+       RETURN o.currentStep AS currentStep,
+              o.step1CompletedAt AS step1CompletedAt,
+              o.step2CompletedAt AS step2CompletedAt,
+              o.step3CompletedAt AS step3CompletedAt,
+              o.step4CompletedAt AS step4CompletedAt,
+              o.step5CompletedAt AS step5CompletedAt,
+              o.step6CompletedAt AS step6CompletedAt,
+              o.step7CompletedAt AS step7CompletedAt,
+              o.step8CompletedAt AS step8CompletedAt,
+              o.step9CompletedAt AS step9CompletedAt,
+              o.createdAt AS createdAt,
+              o.updatedAt AS updatedAt`, { accountId, step, now });
+        if (result.records.length === 0) {
+            throw new Error("No onboarding state found for this account. Call onboarding-get first.");
+        }
+        console.log(`[onboarding-step-complete] accountId=${accountId.slice(0, 8)}… ` +
+            `step=${step} completedAt=${now}`);
+        return recordToState(result.records[0]);
+    }
+    finally {
+        await session.close();
+    }
+}
+//# sourceMappingURL=onboarding.js.map

package/payload/platform/plugins/admin/mcp/dist/lib/onboarding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.js","sourceRoot":"","sources":["../../src/lib/onboarding.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,uEAAuE;AAEvE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAwBjC,MAAM,WAAW,GAAG;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;CACV,CAAC;AAEX,6EAA6E;AAC7E,4EAA4E;AAC5E,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QACxD,OAAQ,GAA8B,CAAC,QAAQ,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,MAAqC;IAC1D,OAAO;QACL,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAClD,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,gBAAgB,EAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAmB,IAAI,IAAI;QAC3E,SAAS,EAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAY,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC1E,SAAS,EAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAY,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC3E,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAC3E,OAAO,MAAM,CAAC,cAAc,CAAC;QAC/B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAkB;IACtD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,gBAAgB,IAAI,MAAM,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,cAAc,CAAC;YAC7B,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAoB,EACpB,SAAiB,EACjB,UAAkB;IAElB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAExC,IAAI,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAC3C,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,yEAAyE;IAC3E,CAAC;IAED,sEAAsE;IACtE,sEAAsE;IACtE,yEAAyE;IACzE,+CAA+C;IAC/C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;gCAI4B,EAC5B,EAAE,SAAS,EAAE,WAAW,EAAE,CAC3B,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAEvC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,oEAAoE;QACpE,qEAAqE;QACrE,sCAAsC;QACtC,OAAO,CAAC,GAAG,CACT,wCAAwC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW;YACxE,8BAA8B,QAAQ,kBAAkB,CACzD,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CAAC,GAAG,CACT,wCAAwC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW;QACxE,8BAA8B,QAAQ,gBAAgB,WAAW,EAAE,CACpE,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,qDAAqD,QAAQ,IAAI;YACjE,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,gBAAgB,GAAG;;;;;;;;;;;;uCAYc,CAAC;AAExC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,cAAiC,EACjC,SAAiB,EACjB,UAAkB;IAElB,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,gCAAgC;QAChC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAEhD,IAAI,WAAW,EAAE,CAAC;YAChB,qEAAqE;YACrE,wEAAwE;YACxE,+DAA+D;YAC/D,EAAE;YACF,mEAAmE;YACnE,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,oEAAoE;YACpE,sDAAsD;YACtD,MAAM,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACrE,OAAO,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,wDAAwD;QACxD,MAAM,YAAY,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,uDAAuD;QACvD,oEAAoE;QACpE,kEAAkE;QAClE,uBAAuB;QACvB,MAAM,SAAS,GAAkC,EAAE,CAAC;QACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,CAAC;QAED,iEAAiE;QACjE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;;;;;;;;;;;;;;;;;;;;;;;;;uCAyBiC,EACjC,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,SAAS,EAAE,CAC5D,CAAC;QAEF,8CAA8C;QAC9C,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,4BAA4B,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,cAAiC,EACjC,SAAiB,EACjB,IAAY;IAEZ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,mEAAmE;QACnE,yEAAyE;QACzE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B;eACS,SAAS,kBAAkB,SAAS,6BAA6B,SAAS;;;;;;;;;;;;;;uCAclD,EACjC,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CACzB,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;QAED,OAAO,CAAC,GAAG,CACT,wCAAwC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI;YACjE,QAAQ,IAAI,gBAAgB,GAAG,EAAE,CAClC,CAAC;QAEF,OAAO,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}

package/payload/platform/plugins/admin/mcp/dist/lib/public-hostname.d.ts

@@ -0,0 +1,15 @@
+export type HostnameSource = "cloudflared-config.yml" | "alias-domains.json";
+export interface PublicHostnameHit {
+    hostname: string;
+    isApex: boolean;
+    source: HostnameSource;
+}
+export interface PublicHostnameMiss {
+    hostname: null;
+    isApex: null;
+    source: null;
+    reason: "no-tunnel";
+}
+export type PublicHostnameResult = PublicHostnameHit | PublicHostnameMiss;
+export declare function resolvePublicHostname(configDir: string): PublicHostnameResult;
+//# sourceMappingURL=public-hostname.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/lib/public-hostname.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-hostname.d.ts","sourceRoot":"","sources":["../../src/lib/public-hostname.ts"],"names":[],"mappings":"AAmBA,MAAM,MAAM,cAAc,GAAG,wBAAwB,GAAG,oBAAoB,CAAC;AAE7E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,IAAI,CAAC;IACf,MAAM,EAAE,IAAI,CAAC;IACb,MAAM,EAAE,IAAI,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,GAAG,kBAAkB,CAAC;AA8C1E,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,CAY7E"}

package/payload/platform/plugins/admin/mcp/dist/lib/public-hostname.js

@@ -0,0 +1,73 @@
+// public-hostname resolver reads filesystem (4th recurrence of
+// llm-framing-deterministic).
+//
+// Reads the same two files that already drive routing:
+//   - <configDir>/cloudflared/config.yml — the ingress map cloudflared itself
+//     reads to decide where to route a hostname.
+//   - <configDir>/alias-domains.json     — the alias list platform/ui/server's
+//     isPublicHost() watches via watchFile.
+// hasPublicEndpointConfigured() in admin/mcp/src/index.ts already parses both
+// with the same regex; this resolver is the read-only twin that returns the
+// chosen hostname instead of a boolean.
+//
+// Graph queries are gone. The previous version returned (none) on
+// any account that bootstrapped its tunnel without writing :CloudflareTunnel
+// nodes — exactly the laptop Real Agent state that produced this recurrence.
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+const INGRESS_RE = /^\s*-\s*hostname:\s*(\S+)/gm;
+function isExcluded(host) {
+    return host === "localhost" || host.endsWith(".local");
+}
+// Apex = single domain (e.g. "realagent.app"), with optional `www.` prefix
+// stripped. Subdomain = anything else ("public.realagent.app").
+function isApex(host) {
+    const stripped = host.startsWith("www.") ? host.slice(4) : host;
+    return stripped.split(".").length === 2;
+}
+function readIngressHostnames(configDir) {
+    const path = join(configDir, "cloudflared", "config.yml");
+    if (!existsSync(path))
+        return [];
+    try {
+        const yaml = readFileSync(path, "utf-8");
+        return [...yaml.matchAll(INGRESS_RE)].map((m) => m[1]).filter((h) => !isExcluded(h));
+    }
+    catch {
+        return [];
+    }
+}
+function readAliasDomains(configDir) {
+    const path = join(configDir, "alias-domains.json");
+    if (!existsSync(path))
+        return [];
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf-8"));
+        if (!Array.isArray(parsed))
+            return [];
+        return parsed.filter((h) => typeof h === "string" && h.length > 0 && !isExcluded(h));
+    }
+    catch {
+        return [];
+    }
+}
+// Tiebreak: apex wins over subdomain; otherwise first-in-file.
+function pickHostname(candidates) {
+    if (candidates.length === 0)
+        return null;
+    return candidates.find((h) => isApex(h)) ?? candidates[0];
+}
+export function resolvePublicHostname(configDir) {
+    const ingress = readIngressHostnames(configDir);
+    const chosen = pickHostname(ingress);
+    if (chosen !== null) {
+        return { hostname: chosen, isApex: isApex(chosen), source: "cloudflared-config.yml" };
+    }
+    const alias = readAliasDomains(configDir);
+    const aliasChosen = pickHostname(alias);
+    if (aliasChosen !== null) {
+        return { hostname: aliasChosen, isApex: isApex(aliasChosen), source: "alias-domains.json" };
+    }
+    return { hostname: null, isApex: null, source: null, reason: "no-tunnel" };
+}
+//# sourceMappingURL=public-hostname.js.map

package/payload/platform/plugins/admin/mcp/dist/lib/public-hostname.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-hostname.js","sourceRoot":"","sources":["../../src/lib/public-hostname.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,8BAA8B;AAC9B,EAAE;AACF,uDAAuD;AACvD,8EAA8E;AAC9E,iDAAiD;AACjD,+EAA+E;AAC/E,4CAA4C;AAC5C,8EAA8E;AAC9E,4EAA4E;AAC5E,wCAAwC;AACxC,EAAE;AACF,kEAAkE;AAClE,6EAA6E;AAC7E,6EAA6E;AAE7E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAmBjC,MAAM,UAAU,GAAG,6BAA6B,CAAC;AAEjD,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACzD,CAAC;AAED,2EAA2E;AAC3E,gEAAgE;AAChE,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAiB;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;IAC1D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CACrF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,SAAS,YAAY,CAAC,UAAoB;IACxC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC9F,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC7E,CAAC"}

package/payload/platform/plugins/admin/mcp/dist/skill-resolution.d.ts

@@ -0,0 +1,44 @@
+export interface SkillOwner {
+    pluginName: string;
+    file: string;
+}
+export type SkillFindResult = {
+    status: "unique";
+    candidates: [SkillOwner];
+} | {
+    status: "ambiguous";
+    candidates: SkillOwner[];
+} | {
+    status: "not-found";
+    candidates: [];
+};
+export interface PluginReadHint {
+    pluginName: string;
+    file: string;
+}
+export declare const CONTENT_PRODUCER_AUTHORING_SKILLS: ReadonlySet<string>;
+export declare const AUTHORING_DISPATCH_HINT = "This deliverable is owned by content-producer. Dispatch it with the Agent tool and subagent_type content-producer.";
+export interface SeatEnv {
+    MAXY_SESSION_ROLE?: string;
+    MAXY_SPECIALIST?: string;
+}
+export declare function isAdminSeat(env: SeatEnv): boolean;
+export declare function skillSlugFromReadArgs(pluginName: string, file: string): string | undefined;
+export declare function adminAuthoringSkillBlock(slug: string | undefined, env: SeatEnv): boolean;
+export declare function findSkillOwners(platformRoot: string, skillName: string): SkillFindResult;
+export declare function computePluginReadHint(platformRoot: string, pluginName: string, file: string): PluginReadHint | null;
+export type SkillLoadOutcome = {
+    status: "unique";
+    pluginName: string;
+    file: string;
+    absolutePath: string;
+    body: string;
+} | {
+    status: "ambiguous";
+    candidates: SkillOwner[];
+} | {
+    status: "not-found";
+};
+export declare function parseRequiredInputs(skillBody: string): string[][] | undefined;
+export declare function loadSkill(platformRoot: string, skillName: string): Promise<SkillLoadOutcome>;
+//# sourceMappingURL=skill-resolution.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/skill-resolution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-resolution.d.ts","sourceRoot":"","sources":["../src/skill-resolution.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,CAAC,UAAU,CAAC,CAAA;CAAE,GAC9C;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,UAAU,EAAE,CAAA;CAAE,GACjD;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,EAAE,CAAA;CAAE,CAAC;AAU5C,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAeD,eAAO,MAAM,iCAAiC,EAAE,WAAW,CAAC,MAAM,CAIhE,CAAC;AAKH,eAAO,MAAM,uBAAuB,uHACkF,CAAC;AAEvH,MAAM,WAAW,OAAO;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AASD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEjD;AAOD,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE1F;AAID,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAGxF;AAED,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,eAAe,CA4BxF;AAcD,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GACX,cAAc,GAAG,IAAI,CASvB;AAgBD,MAAM,MAAM,gBAAgB,GACxB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1F;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,UAAU,EAAE,CAAA;CAAE,GACjD;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC;AAwB5B,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,GAAG,SAAS,CAoB7E;AAED,wBAAsB,SAAS,CAC7B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,CAAC,CAY3B"}

package/payload/platform/plugins/admin/mcp/dist/skill-resolution.js

@@ -0,0 +1,187 @@
+// deterministic plugin-skill resolution.
+//
+// `findSkillOwners` walks `<platformRoot>/plugins/*/skills/<skillName>/SKILL.md`
+// once and returns every plugin that owns that skill. The `skill-find` MCP
+// tool wraps this directly; `plugin-read`'s "not found" branch uses
+// `computePluginReadHint` to surface the owning plugin when the agent
+// guessed the wrong `pluginName` for a known skill.
+//
+// Pure filesystem read — no network, no subprocess. The walk is two-level
+// (plugin dir → skill dir), never recursive, so deeper skill subtrees and
+// sibling references/ directories are ignored.
+import { existsSync, readdirSync, statSync } from "node:fs";
+import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+const SKILL_FILE_PATH = /^skills\/([a-z0-9][a-z0-9-]*)\//;
+// the symmetric misuse: skill slug buried inside `pluginName`
+// (e.g. `admin/skills/plainly`, `contacts/skills/plainly`) rather than the
+// file argument. Match anywhere inside the string, bounded by start or slash
+// on the left and slash or end on the right, so both `<plugin>/skills/<slug>`
+// and bare `skills/<slug>` forms surface the slug.
+const SKILL_IN_PLUGIN_NAME = /(?:^|\/)skills\/([a-z0-9][a-z0-9-]*)(?:\/|$)/;
+// Task 516 — content-producer-owned authoring/render/publish skills that the
+// admin seat must NOT load or read inline. The admin's job is to dispatch
+// content-producer (via the Agent tool, subagent_type content-producer) for
+// these deliverables, not author them from its own seat. Membership is each
+// skill's own SKILL.md "Invoked by" declaration:
+//   - professional-document — content-producer authoring (IDENTITY delegates
+//     document authoring to content-producer).
+//   - a4-print-documents     — content-producer's PDF render-constraints skill.
+//   - publish-site           — SKILL.md: "Invoked from specialists:content-producer".
+// Deliberately EXCLUDED because the admin invokes them directly:
+//   - unzip-attachment — SKILL.md: "Invoked by the admin agent directly.
+//     Admin owns all unzipping" (admin extracts, then routes to a specialist).
+//   - deck-pages       — admin-owned, a content-producer refusal target.
+export const CONTENT_PRODUCER_AUTHORING_SKILLS = new Set([
+    "professional-document",
+    "a4-print-documents",
+    "publish-site",
+]);
+// The verbatim refusal text the skill-load / plugin-read handlers relay when
+// the admin seat reaches for a content-producer-owned authoring skill. It
+// names the route so the agent's next action is the dispatch, not a dead end.
+export const AUTHORING_DISPATCH_HINT = "This deliverable is owned by content-producer. Dispatch it with the Agent tool and subagent_type content-producer.";
+// The admin seat is the operator's own `claude rc` session: role is `admin`
+// and no specialist is stamped. rc-daemon stamps MAXY_SESSION_ROLE=admin +
+// MAXY_SPECIALIST='' for it; pty-spawner stamps MAXY_SPECIALIST=<name> on
+// every dispatched specialist subagent (content-producer included), and
+// role=public on public spawns. So `role === 'admin' && no specialist`
+// uniquely identifies the admin seat. Any other / unidentified env fails
+// open (returns false) — the gate must never brick a legitimate load.
+export function isAdminSeat(env) {
+    return env.MAXY_SESSION_ROLE === "admin" && !(env.MAXY_SPECIALIST && env.MAXY_SPECIALIST.length > 0);
+}
+// Extract a skill slug from a plugin-read call's arguments. The slug may sit
+// in `file` (e.g. `skills/professional-document/SKILL.md` or a reference
+// under that dir) or be buried in `pluginName` (the same wrong-guess shape
+// computePluginReadHint handles). Returns undefined for PLUGIN.md and plain
+// reference reads that are not under a `skills/<slug>/` path.
+export function skillSlugFromReadArgs(pluginName, file) {
+    return file.match(SKILL_IN_PLUGIN_NAME)?.[1] ?? pluginName.match(SKILL_IN_PLUGIN_NAME)?.[1];
+}
+// True when the admin seat is reaching for a content-producer-owned authoring
+// skill — the signal both the skill-load and plugin-read handlers gate on.
+export function adminAuthoringSkillBlock(slug, env) {
+    if (!slug)
+        return false;
+    return isAdminSeat(env) && CONTENT_PRODUCER_AUTHORING_SKILLS.has(slug);
+}
+export function findSkillOwners(platformRoot, skillName) {
+    const owners = [];
+    const pluginsDir = resolve(platformRoot, "plugins");
+    if (!existsSync(pluginsDir)) {
+        return { status: "not-found", candidates: [] };
+    }
+    let entries;
+    try {
+        entries = readdirSync(pluginsDir);
+    }
+    catch {
+        return { status: "not-found", candidates: [] };
+    }
+    for (const pluginName of entries) {
+        const skillFile = resolve(pluginsDir, pluginName, "skills", skillName, "SKILL.md");
+        if (!existsSync(skillFile))
+            continue;
+        try {
+            if (!statSync(skillFile).isFile())
+                continue;
+        }
+        catch {
+            continue;
+        }
+        owners.push({ pluginName, file: `skills/${skillName}/SKILL.md` });
+    }
+    if (owners.length === 0)
+        return { status: "not-found", candidates: [] };
+    if (owners.length === 1)
+        return { status: "unique", candidates: [owners[0]] };
+    return { status: "ambiguous", candidates: owners };
+}
+// Returns the owning plugin and the canonical `skills/<slug>/SKILL.md`
+// path when exactly one sibling plugin holds the skill the agent was
+// trying to reach; null otherwise. Used by `plugin-read` to append
+// `Did you mean pluginName="<owner>", file="skills/<slug>/SKILL.md"?`
+// on wrong-guess errors.
+//
+// Two shapes of misuse are covered:
+//   1. skill slug appears in `file`     — e.g. file="skills/plainly/SKILL.md"
+//   2. skill slug appears in `pluginName` — e.g. pluginName="admin/skills/plainly"
+//
+// The file argument wins when both shapes match — it carries the more
+// specific intent (the agent named a file directly).
+export function computePluginReadHint(platformRoot, pluginName, file) {
+    const skillName = file.match(SKILL_FILE_PATH)?.[1] ?? pluginName.match(SKILL_IN_PLUGIN_NAME)?.[1];
+    if (!skillName)
+        return null;
+    const result = findSkillOwners(platformRoot, skillName);
+    if (result.status !== "unique")
+        return null;
+    const owner = result.candidates[0];
+    const correctedFile = `skills/${skillName}/SKILL.md`;
+    if (owner.pluginName === pluginName && correctedFile === file)
+        return null;
+    return { pluginName: owner.pluginName, file: correctedFile };
+}
+// parse the `requiredInputs:` list from a SKILL.md frontmatter.
+//
+// The doctrine in `platform/templates/agents/admin/IDENTITY.md` "Skill-input
+// resolution" routes a missing skill input through `AskUserQuestion` instead
+// of memory/conversation/graph/task search. To make that routing actionable,
+// the skill-load tool surfaces the declared `requiredInputs` as a notice
+// block prepended to the SKILL body, and `parseClaudeStream` keys its
+// `[skill-input-resolution]`/`[skill-input-missing]` emissions off the same
+// declaration.
+//
+// Shape: each list entry is a slot. Within a slot, `|`-separated tokens
+// declare alternative fields that satisfy the slot. Example for the
+// `property-brochure` skill:
+//
+//   requiredInputs:
+//     - propertyAssetsDir | listingURL
+//
+// Returns `[["propertyAssetsDir", "listingURL"]]`. Undefined when the
+// frontmatter is missing or the key is absent. The parser is intentionally
+// narrow: it scans only the leading `---\n...\n---\n` block, recognises the
+// `requiredInputs:` key at column 0, and reads dash-prefixed list items at
+// any indentation until the next column-0 key or the frontmatter close.
+export function parseRequiredInputs(skillBody) {
+    if (!skillBody.startsWith("---\n"))
+        return undefined;
+    const fmEnd = skillBody.indexOf("\n---\n", 4);
+    if (fmEnd < 0)
+        return undefined;
+    const frontmatter = skillBody.slice(4, fmEnd);
+    const lines = frontmatter.split("\n");
+    let inBlock = false;
+    const slots = [];
+    for (const line of lines) {
+        if (/^[A-Za-z][\w-]*:/.test(line)) {
+            inBlock = line.startsWith("requiredInputs:");
+            continue;
+        }
+        if (!inBlock)
+            continue;
+        const itemMatch = line.match(/^\s+-\s+(.+?)\s*$/);
+        if (!itemMatch)
+            continue;
+        const slot = itemMatch[1].split("|").map(s => s.trim()).filter(s => s.length > 0);
+        if (slot.length > 0)
+            slots.push(slot);
+    }
+    return slots.length > 0 ? slots : undefined;
+}
+export async function loadSkill(platformRoot, skillName) {
+    const result = findSkillOwners(platformRoot, skillName);
+    if (result.status === "ambiguous") {
+        return { status: "ambiguous", candidates: result.candidates };
+    }
+    if (result.status === "not-found") {
+        return { status: "not-found" };
+    }
+    const [{ pluginName, file }] = result.candidates;
+    const absolutePath = resolve(platformRoot, "plugins", pluginName, file);
+    const body = await readFile(absolutePath, "utf-8");
+    return { status: "unique", pluginName, file, absolutePath, body };
+}
+//# sourceMappingURL=skill-resolution.js.map

package/payload/platform/plugins/admin/mcp/dist/skill-resolution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-resolution.js","sourceRoot":"","sources":["../src/skill-resolution.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,iFAAiF;AACjF,2EAA2E;AAC3E,oEAAoE;AACpE,sEAAsE;AACtE,oDAAoD;AACpD,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAC1E,+CAA+C;AAC/C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYpC,MAAM,eAAe,GAAG,iCAAiC,CAAC;AAC1D,8DAA8D;AAC9D,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,mDAAmD;AACnD,MAAM,oBAAoB,GAAG,8CAA8C,CAAC;AAO5E,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,4EAA4E;AAC5E,iDAAiD;AACjD,6EAA6E;AAC7E,+CAA+C;AAC/C,gFAAgF;AAChF,sFAAsF;AACtF,iEAAiE;AACjE,yEAAyE;AACzE,+EAA+E;AAC/E,yEAAyE;AACzE,MAAM,CAAC,MAAM,iCAAiC,GAAwB,IAAI,GAAG,CAAC;IAC5E,uBAAuB;IACvB,oBAAoB;IACpB,cAAc;CACf,CAAC,CAAC;AAEH,6EAA6E;AAC7E,0EAA0E;AAC1E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAClC,oHAAoH,CAAC;AAOvH,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,wEAAwE;AACxE,uEAAuE;AACvE,yEAAyE;AACzE,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,OAAO,GAAG,CAAC,iBAAiB,KAAK,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,6EAA6E;AAC7E,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,8DAA8D;AAC9D,MAAM,UAAU,qBAAqB,CAAC,UAAkB,EAAE,IAAY;IACpE,OAAO,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,MAAM,UAAU,wBAAwB,CAAC,IAAwB,EAAE,GAAY;IAC7E,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,WAAW,CAAC,GAAG,CAAC,IAAI,iCAAiC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,YAAoB,EAAE,SAAiB;IACrE,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACnF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;gBAAE,SAAS;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,SAAS,WAAW,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACxE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACrD,CAAC;AAED,uEAAuE;AACvE,qEAAqE;AACrE,mEAAmE;AACnE,sEAAsE;AACtE,yBAAyB;AACzB,EAAE;AACF,oCAAoC;AACpC,8EAA8E;AAC9E,mFAAmF;AACnF,EAAE;AACF,sEAAsE;AACtE,qDAAqD;AACrD,MAAM,UAAU,qBAAqB,CACnC,YAAoB,EACpB,UAAkB,EAClB,IAAY;IAEZ,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,eAAe,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,aAAa,GAAG,UAAU,SAAS,WAAW,CAAC;IACrD,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AAC/D,CAAC;AAqBD,gEAAgE;AAChE,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,yEAAyE;AACzE,sEAAsE;AACtE,4EAA4E;AAC5E,eAAe;AACf,EAAE;AACF,wEAAwE;AACxE,oEAAoE;AACpE,6BAA6B;AAC7B,EAAE;AACF,oBAAoB;AACpB,uCAAuC;AACvC,EAAE;AACF,sEAAsE;AACtE,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC9C,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,YAAoB,EACpB,SAAiB;IAEjB,MAAM,MAAM,GAAG,eAAe,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;IACjD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACnD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AACpE,CAAC"}

package/payload/platform/plugins/admin/mcp/dist/tools/admin-identity-authenticate.d.ts

@@ -0,0 +1,6 @@
+export interface AuthenticateDeps {
+    fetchImpl?: typeof fetch;
+    uiPort?: string;
+}
+export declare function runAuthenticate(pin: string, deps?: AuthenticateDeps): Promise<string>;
+//# sourceMappingURL=admin-identity-authenticate.d.ts.map

package/payload/platform/plugins/admin/mcp/dist/tools/admin-identity-authenticate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-identity-authenticate.d.ts","sourceRoot":"","sources":["../../src/tools/admin-identity-authenticate.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AASD,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAuB/F"}