@topy-ai/maggie 0.7.52 → 0.7.53

package/bundled-contracts/maggie-assistant-tools/tool-registry-v1.schema.json

@@ -4,47 +4,295 @@
   "title": "Maggie assistant tool registry",
   "description": "One definition per tool, exported by the product and shared by the in-app agent, MCP server and ChatGPT/Claude apps. Model-facing description and user-facing copy are separate fields. Checked by `maggie assistant registry-validate`.",
   "type": "object",
-  "required": ["schemaVersion", "tools"],
+  "required": [
+    "schemaVersion",
+    "tools"
+  ],
   "properties": {
-    "schemaVersion": {"const": "maggie-assistant-tool-registry.v1"},
+    "schemaVersion": {
+      "const": "maggie-assistant-tool-registry.v1"
+    },
     "gates": {
       "description": "Preconditions a tool may require, e.g. credits, AI generation, verified site.",
       "type": "object",
-      "additionalProperties": {"type": "object", "required": ["label"], "properties": {"label": {"type": "string"}, "modelNote": {"type": "string"}}}
+      "additionalProperties": {
+        "type": "object",
+        "required": [
+          "label"
+        ],
+        "properties": {
+          "label": {
+            "type": "string"
+          },
+          "modelNote": {
+            "type": "string"
+          }
+        }
+      }
     },
     "tools": {
       "type": "array",
       "minItems": 1,
       "items": {
         "type": "object",
-        "required": ["name", "description", "risk", "scope", "channels", "user"],
+        "required": [
+          "name",
+          "description",
+          "risk",
+          "scope",
+          "channels",
+          "user"
+        ],
         "properties": {
-          "name": {"type": "string", "pattern": "^[a-z][a-z0-9_]*$", "maxLength": 64},
-          "description": {"type": "string", "minLength": 1, "description": "Model-facing; never shown to people."},
-          "risk": {"enum": ["read", "write-reversible", "write-spends", "write-public", "never", "R0", "W1", "W2", "W3", "W4"]},
-          "scope": {"enum": ["account", "workspace"]},
-          "channels": {"type": "array", "minItems": 1, "items": {"enum": ["in-app", "mcp", "chatgpt", "claude", "cli"]}},
-          "gates": {"type": "array", "items": {"type": "string"}},
-          "idempotent": {"type": "boolean"},
-          "openWorld": {"type": "boolean"},
-          "hidden": {"type": "boolean", "description": "Omit from the capability page (e.g. host-only helpers)."},
+          "name": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9_]*$",
+            "maxLength": 64
+          },
+          "description": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Model-facing; never shown to people."
+          },
+          "risk": {
+            "enum": [
+              "read",
+              "write-reversible",
+              "write-spends",
+              "write-public",
+              "never",
+              "R0",
+              "W1",
+              "W2",
+              "W3",
+              "W4"
+            ]
+          },
+          "scope": {
+            "enum": [
+              "account",
+              "workspace"
+            ]
+          },
+          "channels": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "enum": [
+                "in-app",
+                "mcp",
+                "chatgpt",
+                "claude",
+                "cli",
+                "web-widget"
+              ]
+            }
+          },
+          "gates": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "idempotent": {
+            "type": "boolean"
+          },
+          "openWorld": {
+            "type": "boolean"
+          },
+          "hidden": {
+            "type": "boolean",
+            "description": "Omit from the capability page (e.g. host-only helpers)."
+          },
           "user": {
             "type": "object",
-            "required": ["label"],
+            "required": [
+              "label"
+            ],
+            "properties": {
+              "label": {
+                "type": "string",
+                "maxLength": 60
+              },
+              "detail": {
+                "type": "string"
+              },
+              "confirm": {
+                "type": "string",
+                "description": "Approval-card sentence; required for writes."
+              },
+              "status": {
+                "type": "string",
+                "description": "Shown while the tool runs."
+              }
+            }
+          },
+          "audit": {
+            "type": "object",
             "properties": {
-              "label": {"type": "string", "maxLength": 60},
-              "detail": {"type": "string"},
-              "confirm": {"type": "string", "description": "Approval-card sentence; required for writes."},
-              "status": {"type": "string", "description": "Shown while the tool runs."}
+              "scope": {
+                "enum": [
+                  "account",
+                  "workspace"
+                ]
+              }
             }
           },
-          "audit": {"type": "object", "properties": {"scope": {"enum": ["account", "workspace"]}}}
+          "card": {
+            "enum": [
+              "place",
+              "slot-picker",
+              "booking",
+              "voucher",
+              "change-preview",
+              "numbers",
+              "draft",
+              "list"
+            ],
+            "description": "Optional result card the app and ChatGPT/Claude widgets render from structured content; every other surface shows the text result. The tool must still return a readable text result."
+          },
+          "mcpServers": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Names from registry.mcpServers that expose this tool (default: the authenticated server when the tool lists the mcp channel)."
+          }
         }
       }
     },
     "cantDo": {
       "type": "array",
-      "items": {"type": "object", "required": ["text"], "properties": {"text": {"type": "string"}, "instead": {"type": "string"}}}
+      "items": {
+        "type": "object",
+        "required": [
+          "text"
+        ],
+        "properties": {
+          "text": {
+            "type": "string"
+          },
+          "instead": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "mcpServers": {
+      "type": "array",
+      "description": "MCP servers built from this registry. A public server is unauthenticated, read-only and rate-limited (AI-search distribution); an authenticated server binds tokens to its resource URL (RFC 8707 audience).",
+      "items": {
+        "type": "object",
+        "required": [
+          "name",
+          "auth"
+        ],
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "auth": {
+            "enum": [
+              "none",
+              "oauth"
+            ]
+          },
+          "resource": {
+            "type": "string",
+            "description": "Canonical server URL; OAuth tokens must carry it as audience (RFC 8707 resource indicator)."
+          },
+          "audienceBinding": {
+            "type": "boolean",
+            "description": "Default true for oauth servers; false needs audienceException."
+          },
+          "audienceException": {
+            "type": "string"
+          },
+          "rateLimit": {
+            "type": "object",
+            "properties": {
+              "perIpPerMinute": {
+                "type": "integer"
+              },
+              "perIpPerDay": {
+                "type": "integer"
+              }
+            }
+          }
+        }
+      }
+    },
+    "threads": {
+      "type": "object",
+      "description": "Where conversations live.",
+      "properties": {
+        "storage": {
+          "enum": [
+            "device",
+            "server"
+          ]
+        },
+        "retentionDays": {
+          "type": "integer"
+        },
+        "supportAccess": {
+          "enum": [
+            "none",
+            "with-consent"
+          ]
+        },
+        "deleteOnAccountDeletion": {
+          "type": "boolean"
+        }
+      }
+    },
+    "visitorPolicy": {
+      "type": "object",
+      "description": "Required when any tool lists the web-widget channel (a visitor-facing assistant such as an AI receptionist).",
+      "required": [
+        "enabledByDefault",
+        "dailyCaps",
+        "logAnswers",
+        "factsOnly",
+        "cardDetails"
+      ],
+      "properties": {
+        "enabledByDefault": {
+          "const": false
+        },
+        "dailyCaps": {
+          "type": "object",
+          "required": [
+            "perVisitor",
+            "perBusiness"
+          ],
+          "properties": {
+            "perVisitor": {
+              "type": "integer",
+              "minimum": 1
+            },
+            "perBusiness": {
+              "type": "integer",
+              "minimum": 1
+            }
+          }
+        },
+        "logAnswers": {
+          "const": true
+        },
+        "factsOnly": {
+          "const": true
+        },
+        "cardDetails": {
+          "const": "never"
+        },
+        "handoff": {
+          "type": "string"
+        }
+      }
+    },
+    "description": {
+      "type": "string"
     }
   }
 }

package/bundled-contracts/maggie-deployment/bridge-host-example-v1.json

@@ -1,29 +1,71 @@
 {
   "schemaVersion": "maggie-bridge-host.v1",
   "tenantsRoot": "/srv/bridge/tenants",
+  "workloads": [
+    "chat",
+    "photos",
+    "image-generation"
+  ],
   "isolation": {
     "uidPerTenant": true,
-    "uidRange": [20000, 29999],
+    "uidRange": [
+      20000,
+      29999
+    ],
     "tenantDirMode": "0700",
     "parentDirMode": "0711",
     "cleanEnvironment": true,
-    "envAllowlist": ["HOME", "PATH", "LANG", "TZ"],
+    "envAllowlist": [
+      "HOME",
+      "PATH",
+      "LANG",
+      "TZ"
+    ],
     "ownerPinning": true,
     "nonDumpable": true
   },
-  "network": {"proxy": "nginx", "publicBind": "127.0.0.1:3210", "adminBind": "127.0.0.1:3211", "adminProxied": false},
-  "capacity": {"maxSessions": 20, "eviction": "lru-idle", "idleTimeoutMinutes": 15},
-  "recycle": {"on": ["mcp", "skills", "cli"], "busySessions": "after-current-turn"},
+  "network": {
+    "proxy": "nginx",
+    "publicBind": "127.0.0.1:3210",
+    "adminBind": "127.0.0.1:3211",
+    "adminProxied": false,
+    "proxyLimits": {
+      "clientMaxBodySize": "25m",
+      "readTimeoutSeconds": 360
+    }
+  },
+  "capacity": {
+    "maxSessions": 20,
+    "eviction": "lru-idle",
+    "idleTimeoutMinutes": 15
+  },
+  "recycle": {
+    "on": [
+      "mcp",
+      "skills",
+      "cli"
+    ],
+    "busySessions": "after-current-turn"
+  },
   "image": {
     "label": "com.example.app=bridge-host",
     "retain": 2,
-    "healthcheck": {"path": "/health", "attempts": 30, "intervalSeconds": 2},
+    "healthcheck": {
+      "path": "/health",
+      "attempts": 30,
+      "intervalSeconds": 2
+    },
     "rollback": true,
     "readOnlyRootfs": true,
     "capDropAll": true,
     "noNewPrivileges": true
   },
   "providers": [
-    {"name": "assistant-cli", "accountType": "customer-own", "termsUrl": "https://example.com/terms", "termsReviewedAt": "2026-10-01"}
+    {
+      "name": "assistant-cli",
+      "accountType": "customer-own",
+      "termsUrl": "https://example.com/terms",
+      "termsReviewedAt": "2026-10-01"
+    }
   ]
 }

package/bundled-contracts/maggiedash/booking-email-templates-v1.json

@@ -9,21 +9,189 @@
     "emailPassword": true,
     "passkeys": false
   },
-  "roles": ["owner", "admin", "manager"],
+  "roles": [
+    "owner",
+    "admin",
+    "manager"
+  ],
   "events": [
-    { "id": "booking.confirmed", "variables": ["customerName", "serviceName", "when", "locationName", "bookingId", "manageUrl", "siteName", "arrivalNote"] },
-    { "id": "booking.rescheduled", "variables": ["customerName", "serviceName", "when", "locationName", "bookingId", "manageUrl", "siteName"] },
-    { "id": "booking.cancelled", "variables": ["customerName", "serviceName", "when", "locationName", "bookingId", "reason", "siteName"] },
-    { "id": "booking.reminder", "variables": ["customerName", "serviceName", "when", "locationName", "bookingId", "manageUrl", "siteName"] },
-    { "id": "payment.action_required", "variables": ["customerName", "serviceName", "bookingId", "actionUrl", "siteName"] },
-    { "id": "payment.refunded", "variables": ["customerName", "serviceName", "bookingId", "siteName"] },
-    { "id": "payment.no_show_fee", "variables": ["customerName", "serviceName", "bookingId", "amount", "siteName"] },
-    { "id": "package.purchase.confirmed", "variables": ["customerName", "packageName", "amount", "expiresAt", "siteName"] },
-    { "id": "package.purchase.refunded", "variables": ["customerName", "packageName", "amount", "siteName"] },
-    { "id": "booking.waitlist.available", "variables": ["customerName", "serviceName", "when", "locationName", "bookingUrl", "siteName"] }
+    {
+      "id": "booking.confirmed",
+      "variables": [
+        "customerName",
+        "serviceName",
+        "when",
+        "locationName",
+        "bookingId",
+        "manageUrl",
+        "siteName",
+        "arrivalNote"
+      ]
+    },
+    {
+      "id": "booking.rescheduled",
+      "variables": [
+        "customerName",
+        "serviceName",
+        "when",
+        "locationName",
+        "bookingId",
+        "manageUrl",
+        "siteName"
+      ]
+    },
+    {
+      "id": "booking.cancelled",
+      "variables": [
+        "customerName",
+        "serviceName",
+        "when",
+        "locationName",
+        "bookingId",
+        "reason",
+        "cancelledBy",
+        "siteName"
+      ]
+    },
+    {
+      "id": "booking.reminder",
+      "variables": [
+        "customerName",
+        "serviceName",
+        "when",
+        "locationName",
+        "bookingId",
+        "manageUrl",
+        "siteName"
+      ]
+    },
+    {
+      "id": "payment.action_required",
+      "variables": [
+        "customerName",
+        "serviceName",
+        "bookingId",
+        "actionUrl",
+        "siteName"
+      ]
+    },
+    {
+      "id": "payment.refunded",
+      "variables": [
+        "customerName",
+        "serviceName",
+        "bookingId",
+        "siteName"
+      ]
+    },
+    {
+      "id": "payment.no_show_fee",
+      "variables": [
+        "customerName",
+        "serviceName",
+        "bookingId",
+        "amount",
+        "siteName"
+      ]
+    },
+    {
+      "id": "package.purchase.confirmed",
+      "variables": [
+        "customerName",
+        "packageName",
+        "amount",
+        "expiresAt",
+        "siteName"
+      ]
+    },
+    {
+      "id": "package.purchase.refunded",
+      "variables": [
+        "customerName",
+        "packageName",
+        "amount",
+        "siteName"
+      ]
+    },
+    {
+      "id": "payment.late_refund_pending",
+      "variables": [
+        "customerName",
+        "serviceName",
+        "bookingId",
+        "amount",
+        "siteName"
+      ]
+    },
+    {
+      "id": "business.booking_cancelled",
+      "variables": [
+        "customerName",
+        "serviceName",
+        "when",
+        "bookingId",
+        "reason",
+        "cancelledBy",
+        "siteName"
+      ]
+    },
+    {
+      "id": "business.booking_rescheduled",
+      "variables": [
+        "customerName",
+        "serviceName",
+        "when",
+        "previousWhen",
+        "bookingId",
+        "siteName"
+      ]
+    },
+    {
+      "id": "business.late_payment_refund_required",
+      "variables": [
+        "customerName",
+        "serviceName",
+        "bookingId",
+        "amount",
+        "siteName"
+      ]
+    },
+    {
+      "id": "booking.waitlist.available",
+      "variables": [
+        "customerName",
+        "serviceName",
+        "when",
+        "locationName",
+        "bookingUrl",
+        "siteName"
+      ]
+    }
+  ],
+  "variables": [
+    "customerName",
+    "serviceName",
+    "when",
+    "locationName",
+    "bookingId",
+    "manageUrl",
+    "bookingUrl",
+    "reason",
+    "actionUrl",
+    "packageName",
+    "amount",
+    "expiresAt",
+    "siteName",
+    "arrivalNote",
+    "cancelledBy",
+    "previousWhen"
+  ],
+  "endpointIds": [
+    "booking.email-templates.read",
+    "booking.email-templates.draft",
+    "booking.email-templates.publish",
+    "booking.email-templates.rollback"
   ],
-  "variables": ["customerName", "serviceName", "when", "locationName", "bookingId", "manageUrl", "bookingUrl", "reason", "actionUrl", "packageName", "amount", "expiresAt", "siteName", "arrivalNote"],
-  "endpointIds": ["booking.email-templates.read", "booking.email-templates.draft", "booking.email-templates.publish", "booking.email-templates.rollback"],
   "canonicalRoutes": {
     "booking.email-templates.read": "GET /email-templates.json",
     "booking.email-templates.draft": "PATCH /email-templates.json?action=draft",