@topy-ai/maggie 0.7.52 → 0.7.54

package/bundled-contracts/maggie-assistant-tools/booking-receptionist-example-v1.json

@@ -0,0 +1,161 @@
+{
+  "schemaVersion": "maggie-assistant-tool-registry.v1",
+  "description": "Booking receptionist and public discovery MCP for a multi-business booking marketplace. The receptionist answers visitors on one business's page from that business's facts only; it never books, cancels or takes card details \u2014 it opens the normal booking sheet at a real free time.",
+  "visitorPolicy": {
+    "enabledByDefault": false,
+    "dailyCaps": {
+      "perVisitor": 20,
+      "perBusiness": 300
+    },
+    "logAnswers": true,
+    "factsOnly": true,
+    "cardDetails": "never",
+    "handoff": "Show the business's phone and e-mail when the answer is not in its facts."
+  },
+  "mcpServers": [
+    {
+      "name": "discovery",
+      "auth": "none",
+      "rateLimit": {
+        "perIpPerMinute": 30,
+        "perIpPerDay": 2000
+      }
+    },
+    {
+      "name": "owner",
+      "auth": "oauth",
+      "resource": "https://example.com/mcp",
+      "audienceBinding": true
+    }
+  ],
+  "threads": {
+    "storage": "server",
+    "retentionDays": 90,
+    "supportAccess": "with-consent",
+    "deleteOnAccountDeletion": true
+  },
+  "tools": [
+    {
+      "name": "business_facts",
+      "description": "Return this business's treatments with prices and durations, opening hours, address, policies (cancellation, deposit, patch tests) and FAQs. Answer only from this data.",
+      "risk": "read",
+      "scope": "workspace",
+      "channels": [
+        "web-widget",
+        "in-app"
+      ],
+      "user": {
+        "label": "Answer from the business's details",
+        "detail": "Treatments, prices, opening hours and policies."
+      }
+    },
+    {
+      "name": "free_times_find",
+      "description": "Return up to 6 real free start times for a treatment (optionally a team member and a day) from the live availability engine.",
+      "risk": "read",
+      "scope": "workspace",
+      "channels": [
+        "web-widget",
+        "in-app",
+        "mcp"
+      ],
+      "mcpServers": [
+        "discovery",
+        "owner"
+      ],
+      "card": "slot-picker",
+      "user": {
+        "label": "Find free times",
+        "detail": "Real free times you can book."
+      }
+    },
+    {
+      "name": "booking_sheet_open",
+      "description": "Return a link that opens the business's normal booking sheet preselected at the chosen treatment and time. The visitor books and pays there; this tool never books.",
+      "risk": "read",
+      "scope": "workspace",
+      "channels": [
+        "web-widget",
+        "mcp"
+      ],
+      "mcpServers": [
+        "discovery"
+      ],
+      "user": {
+        "label": "Open the booking form",
+        "detail": "You finish the booking yourself."
+      }
+    },
+    {
+      "name": "business_search",
+      "description": "Search published businesses by treatment, town and name; returns names, towns, ratings and profile links.",
+      "risk": "read",
+      "scope": "workspace",
+      "channels": [
+        "mcp",
+        "chatgpt",
+        "claude"
+      ],
+      "mcpServers": [
+        "discovery"
+      ],
+      "card": "list",
+      "user": {
+        "label": "Search businesses",
+        "detail": "Published businesses only."
+      }
+    },
+    {
+      "name": "business_details",
+      "description": "Return one published business's profile: treatments and prices, hours, address, booking link.",
+      "risk": "read",
+      "scope": "workspace",
+      "channels": [
+        "mcp",
+        "chatgpt",
+        "claude"
+      ],
+      "mcpServers": [
+        "discovery"
+      ],
+      "card": "place",
+      "user": {
+        "label": "Show a business",
+        "detail": "Its treatments, prices and hours."
+      }
+    },
+    {
+      "name": "booking_reschedule",
+      "description": "Move one of the signed-in owner's bookings to a new free time after the owner approves the change preview.",
+      "risk": "write-reversible",
+      "scope": "workspace",
+      "channels": [
+        "in-app",
+        "mcp"
+      ],
+      "mcpServers": [
+        "owner"
+      ],
+      "card": "change-preview",
+      "user": {
+        "label": "Move a booking",
+        "detail": "Shows the old and new time first.",
+        "confirm": "Move this booking to the new time and tell the client?"
+      }
+    }
+  ],
+  "cantDo": [
+    {
+      "text": "Book, cancel or change an appointment for you in the chat.",
+      "instead": "Pick a time and finish in the booking form."
+    },
+    {
+      "text": "Take card details.",
+      "instead": "Pay securely in the booking form."
+    },
+    {
+      "text": "Give medical advice.",
+      "instead": "Ask the business, or your doctor."
+    }
+  ]
+}

package/bundled-contracts/maggie-assistant-tools/tool-registry-v1.schema.json

@@ -4,47 +4,295 @@
   "title": "Maggie assistant tool registry",
   "description": "One definition per tool, exported by the product and shared by the in-app agent, MCP server and ChatGPT/Claude apps. Model-facing description and user-facing copy are separate fields. Checked by `maggie assistant registry-validate`.",
   "type": "object",
-  "required": ["schemaVersion", "tools"],
+  "required": [
+    "schemaVersion",
+    "tools"
+  ],
   "properties": {
-    "schemaVersion": {"const": "maggie-assistant-tool-registry.v1"},
+    "schemaVersion": {
+      "const": "maggie-assistant-tool-registry.v1"
+    },
     "gates": {
       "description": "Preconditions a tool may require, e.g. credits, AI generation, verified site.",
       "type": "object",
-      "additionalProperties": {"type": "object", "required": ["label"], "properties": {"label": {"type": "string"}, "modelNote": {"type": "string"}}}
+      "additionalProperties": {
+        "type": "object",
+        "required": [
+          "label"
+        ],
+        "properties": {
+          "label": {
+            "type": "string"
+          },
+          "modelNote": {
+            "type": "string"
+          }
+        }
+      }
     },
     "tools": {
       "type": "array",
       "minItems": 1,
       "items": {
         "type": "object",
-        "required": ["name", "description", "risk", "scope", "channels", "user"],
+        "required": [
+          "name",
+          "description",
+          "risk",
+          "scope",
+          "channels",
+          "user"
+        ],
         "properties": {
-          "name": {"type": "string", "pattern": "^[a-z][a-z0-9_]*$", "maxLength": 64},
-          "description": {"type": "string", "minLength": 1, "description": "Model-facing; never shown to people."},
-          "risk": {"enum": ["read", "write-reversible", "write-spends", "write-public", "never", "R0", "W1", "W2", "W3", "W4"]},
-          "scope": {"enum": ["account", "workspace"]},
-          "channels": {"type": "array", "minItems": 1, "items": {"enum": ["in-app", "mcp", "chatgpt", "claude", "cli"]}},
-          "gates": {"type": "array", "items": {"type": "string"}},
-          "idempotent": {"type": "boolean"},
-          "openWorld": {"type": "boolean"},
-          "hidden": {"type": "boolean", "description": "Omit from the capability page (e.g. host-only helpers)."},
+          "name": {
+            "type": "string",
+            "pattern": "^[a-z][a-z0-9_]*$",
+            "maxLength": 64
+          },
+          "description": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Model-facing; never shown to people."
+          },
+          "risk": {
+            "enum": [
+              "read",
+              "write-reversible",
+              "write-spends",
+              "write-public",
+              "never",
+              "R0",
+              "W1",
+              "W2",
+              "W3",
+              "W4"
+            ]
+          },
+          "scope": {
+            "enum": [
+              "account",
+              "workspace"
+            ]
+          },
+          "channels": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "enum": [
+                "in-app",
+                "mcp",
+                "chatgpt",
+                "claude",
+                "cli",
+                "web-widget"
+              ]
+            }
+          },
+          "gates": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "idempotent": {
+            "type": "boolean"
+          },
+          "openWorld": {
+            "type": "boolean"
+          },
+          "hidden": {
+            "type": "boolean",
+            "description": "Omit from the capability page (e.g. host-only helpers)."
+          },
           "user": {
             "type": "object",
-            "required": ["label"],
+            "required": [
+              "label"
+            ],
+            "properties": {
+              "label": {
+                "type": "string",
+                "maxLength": 60
+              },
+              "detail": {
+                "type": "string"
+              },
+              "confirm": {
+                "type": "string",
+                "description": "Approval-card sentence; required for writes."
+              },
+              "status": {
+                "type": "string",
+                "description": "Shown while the tool runs."
+              }
+            }
+          },
+          "audit": {
+            "type": "object",
             "properties": {
-              "label": {"type": "string", "maxLength": 60},
-              "detail": {"type": "string"},
-              "confirm": {"type": "string", "description": "Approval-card sentence; required for writes."},
-              "status": {"type": "string", "description": "Shown while the tool runs."}
+              "scope": {
+                "enum": [
+                  "account",
+                  "workspace"
+                ]
+              }
             }
           },
-          "audit": {"type": "object", "properties": {"scope": {"enum": ["account", "workspace"]}}}
+          "card": {
+            "enum": [
+              "place",
+              "slot-picker",
+              "booking",
+              "voucher",
+              "change-preview",
+              "numbers",
+              "draft",
+              "list"
+            ],
+            "description": "Optional result card the app and ChatGPT/Claude widgets render from structured content; every other surface shows the text result. The tool must still return a readable text result."
+          },
+          "mcpServers": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Names from registry.mcpServers that expose this tool (default: the authenticated server when the tool lists the mcp channel)."
+          }
         }
       }
     },
     "cantDo": {
       "type": "array",
-      "items": {"type": "object", "required": ["text"], "properties": {"text": {"type": "string"}, "instead": {"type": "string"}}}
+      "items": {
+        "type": "object",
+        "required": [
+          "text"
+        ],
+        "properties": {
+          "text": {
+            "type": "string"
+          },
+          "instead": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "mcpServers": {
+      "type": "array",
+      "description": "MCP servers built from this registry. A public server is unauthenticated, read-only and rate-limited (AI-search distribution); an authenticated server binds tokens to its resource URL (RFC 8707 audience).",
+      "items": {
+        "type": "object",
+        "required": [
+          "name",
+          "auth"
+        ],
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "auth": {
+            "enum": [
+              "none",
+              "oauth"
+            ]
+          },
+          "resource": {
+            "type": "string",
+            "description": "Canonical server URL; OAuth tokens must carry it as audience (RFC 8707 resource indicator)."
+          },
+          "audienceBinding": {
+            "type": "boolean",
+            "description": "Default true for oauth servers; false needs audienceException."
+          },
+          "audienceException": {
+            "type": "string"
+          },
+          "rateLimit": {
+            "type": "object",
+            "properties": {
+              "perIpPerMinute": {
+                "type": "integer"
+              },
+              "perIpPerDay": {
+                "type": "integer"
+              }
+            }
+          }
+        }
+      }
+    },
+    "threads": {
+      "type": "object",
+      "description": "Where conversations live.",
+      "properties": {
+        "storage": {
+          "enum": [
+            "device",
+            "server"
+          ]
+        },
+        "retentionDays": {
+          "type": "integer"
+        },
+        "supportAccess": {
+          "enum": [
+            "none",
+            "with-consent"
+          ]
+        },
+        "deleteOnAccountDeletion": {
+          "type": "boolean"
+        }
+      }
+    },
+    "visitorPolicy": {
+      "type": "object",
+      "description": "Required when any tool lists the web-widget channel (a visitor-facing assistant such as an AI receptionist).",
+      "required": [
+        "enabledByDefault",
+        "dailyCaps",
+        "logAnswers",
+        "factsOnly",
+        "cardDetails"
+      ],
+      "properties": {
+        "enabledByDefault": {
+          "const": false
+        },
+        "dailyCaps": {
+          "type": "object",
+          "required": [
+            "perVisitor",
+            "perBusiness"
+          ],
+          "properties": {
+            "perVisitor": {
+              "type": "integer",
+              "minimum": 1
+            },
+            "perBusiness": {
+              "type": "integer",
+              "minimum": 1
+            }
+          }
+        },
+        "logAnswers": {
+          "const": true
+        },
+        "factsOnly": {
+          "const": true
+        },
+        "cardDetails": {
+          "const": "never"
+        },
+        "handoff": {
+          "type": "string"
+        }
+      }
+    },
+    "description": {
+      "type": "string"
     }
   }
 }

package/bundled-contracts/maggie-deployment/bridge-host-example-v1.json

@@ -1,29 +1,71 @@
 {
   "schemaVersion": "maggie-bridge-host.v1",
   "tenantsRoot": "/srv/bridge/tenants",
+  "workloads": [
+    "chat",
+    "photos",
+    "image-generation"
+  ],
   "isolation": {
     "uidPerTenant": true,
-    "uidRange": [20000, 29999],
+    "uidRange": [
+      20000,
+      29999
+    ],
     "tenantDirMode": "0700",
     "parentDirMode": "0711",
     "cleanEnvironment": true,
-    "envAllowlist": ["HOME", "PATH", "LANG", "TZ"],
+    "envAllowlist": [
+      "HOME",
+      "PATH",
+      "LANG",
+      "TZ"
+    ],
     "ownerPinning": true,
     "nonDumpable": true
   },
-  "network": {"proxy": "nginx", "publicBind": "127.0.0.1:3210", "adminBind": "127.0.0.1:3211", "adminProxied": false},
-  "capacity": {"maxSessions": 20, "eviction": "lru-idle", "idleTimeoutMinutes": 15},
-  "recycle": {"on": ["mcp", "skills", "cli"], "busySessions": "after-current-turn"},
+  "network": {
+    "proxy": "nginx",
+    "publicBind": "127.0.0.1:3210",
+    "adminBind": "127.0.0.1:3211",
+    "adminProxied": false,
+    "proxyLimits": {
+      "clientMaxBodySize": "25m",
+      "readTimeoutSeconds": 360
+    }
+  },
+  "capacity": {
+    "maxSessions": 20,
+    "eviction": "lru-idle",
+    "idleTimeoutMinutes": 15
+  },
+  "recycle": {
+    "on": [
+      "mcp",
+      "skills",
+      "cli"
+    ],
+    "busySessions": "after-current-turn"
+  },
   "image": {
     "label": "com.example.app=bridge-host",
     "retain": 2,
-    "healthcheck": {"path": "/health", "attempts": 30, "intervalSeconds": 2},
+    "healthcheck": {
+      "path": "/health",
+      "attempts": 30,
+      "intervalSeconds": 2
+    },
     "rollback": true,
     "readOnlyRootfs": true,
     "capDropAll": true,
     "noNewPrivileges": true
   },
   "providers": [
-    {"name": "assistant-cli", "accountType": "customer-own", "termsUrl": "https://example.com/terms", "termsReviewedAt": "2026-10-01"}
+    {
+      "name": "assistant-cli",
+      "accountType": "customer-own",
+      "termsUrl": "https://example.com/terms",
+      "termsReviewedAt": "2026-10-01"
+    }
   ]
 }