feat(ai): pin cloud-profile wake boundaries (#11725) (#11758)

Co-authored-by: tobiu <tobiasuhlig78@gmail.com>

Author: neo-gpt

ai/deploy/docker-compose.yml

@@ -79,6 +79,7 @@ services:
     environment:
       - NEO_TRANSPORT=sse
       - NEO_MC_PRIMARY=false
+      - NEO_MAILBOX_DEFAULT_REPLY_POLICY=blocked
       - NEO_AUTO_SUMMARIZE=false
       - NEO_MEM_AUTO_START_DATABASE=false
       - NEO_MEM_AUTO_START_INFERENCE=false
@@ -125,6 +126,11 @@ services:
         SERVICE_ENTRYPOINT: ai/scripts/orchestrator-daemon.mjs
     environment:
       - NEO_AI_DEPLOYMENT_MODE=cloud
+      - NEO_ORCHESTRATOR_PRIMARY_DEV_SYNC_ENABLED=false
+      - NEO_ORCHESTRATOR_KB_SYNC_ENABLED=false
+      - NEO_ORCHESTRATOR_BRIDGE_DAEMON_ENABLED=false
+      - NEO_ORCHESTRATOR_GOLDEN_PATH_REPO_ENRICHMENT_ENABLED=false
+      - NEO_ORCHESTRATOR_MLX_ENABLED=false
       - NEO_CHROMA_HOST=chroma
       - NEO_CHROMA_PORT=8000
       - NEO_MEMORY_DB_PATH=/app/.neo-ai-data/sqlite/memory-core-graph.sqlite

learn/agentos/DeploymentCookbook.md

@@ -54,6 +54,7 @@ lane back in. The explicit env overrides are:
 | `NEO_ORCHESTRATOR_BRIDGE_DAEMON_ENABLED=false` | Prevents desktop wake delivery through `osascript` / `tmux`. A2A message storage remains Memory Core behavior. |
 | `NEO_ORCHESTRATOR_GOLDEN_PATH_REPO_ENRICHMENT_ENABLED=false` | Keeps tenant deployments from emitting Neo-maintainer repo backlog/PR enrichment sections. |
 | `NEO_ORCHESTRATOR_MLX_ENABLED=false` | Keeps Apple-Silicon local inference out of the cloud profile unless a local-model variant explicitly opts in. |
+| `NEO_MAILBOX_DEFAULT_REPLY_POLICY=blocked` | Keeps cloud A2A message writes tenant-bound through the Memory Core `CAN_REPLY_TO` / reachable-counterparty policy; local wake delivery remains disabled by the orchestrator bridge toggle. |
 
 Sub D (#11725) owns the CI-safe negative proof that the cloud profile cannot run
 the forbidden local-only behavior. The current unit substrate already asserts
@@ -147,6 +148,7 @@ Supply these values per service/profile as needed:
 | `NEO_MEMORY_DB_PATH` | KB, MC, Orchestrator | Shared SQLite graph path or mounted graph-store path. |
 | `NEO_AUTH_TRUST_PROXY_IDENTITY=true` | KB, MC | Enables the trusted reverse-proxy identity-header path. |
 | `NEO_AUTH_ISSUER_URL`, `NEO_OAUTH_CLIENT_ID`, `NEO_OAUTH_CLIENT_SECRET` | KB, MC | Direct OIDC/OAuth mode inputs when the MCP server handles auth instead of a trusted proxy. |
+| `NEO_MAILBOX_DEFAULT_REPLY_POLICY=blocked` | MC | Enables the strict A2A reply policy for multi-tenant deployments. |
 | `NEO_AI_DEPLOYMENT_MODE=cloud` | Orchestrator | Selects the cloud maintenance profile. |
 | `NEO_ORCHESTRATOR_PRIMARY_DEV_SYNC_ENABLED=false` | Orchestrator | Disables local maintainer checkout sync. |
 | `NEO_ORCHESTRATOR_KB_SYNC_ENABLED=false` | Orchestrator | Disables local full-corpus KB sync. |

test/playwright/unit/ai/buildScripts/mcpHealthcheck.spec.mjs

@@ -7,6 +7,14 @@ test.describe('buildScripts/ai/mcpHealthcheck (#11725)', () => {
     let buildHeaders;
     let readToolJson;
     let runHealthcheck;
+    const readProductionCompose = () => yaml.load(fs.readFileSync(
+        new URL('../../../../../ai/deploy/docker-compose.yml', import.meta.url),
+        'utf8'
+    ));
+
+    function environmentMap(service) {
+        return Object.fromEntries(service.environment.map(entry => entry.split('=')));
+    }
 
     test.beforeAll(async () => {
         const mod = await import('../../../../../buildScripts/ai/mcpHealthcheck.mjs');
@@ -144,10 +152,7 @@ test.describe('buildScripts/ai/mcpHealthcheck (#11725)', () => {
     });
 
     test('production compose wires KB/MC MCP healthchecks before cloud orchestrator startup', () => {
-        const compose = yaml.load(fs.readFileSync(
-            new URL('../../../../../ai/deploy/docker-compose.yml', import.meta.url),
-            'utf8'
-        ));
+        const compose = readProductionCompose();
 
         expect(compose.services['kb-server'].healthcheck.test).toEqual([
             'CMD',
@@ -172,4 +177,21 @@ test.describe('buildScripts/ai/mcpHealthcheck (#11725)', () => {
         expect(compose.services.orchestrator.depends_on['kb-server']).toEqual({condition: 'service_healthy'});
         expect(compose.services.orchestrator.depends_on['mc-server']).toEqual({condition: 'service_healthy'});
     });
+
+    test('production compose pins cloud-profile local wake and mailbox boundaries', () => {
+        const compose           = readProductionCompose();
+        const orchestratorEnv   = environmentMap(compose.services.orchestrator);
+        const memoryCoreEnv     = environmentMap(compose.services['mc-server']);
+
+        expect(orchestratorEnv).toMatchObject({
+            NEO_AI_DEPLOYMENT_MODE: 'cloud',
+            NEO_ORCHESTRATOR_PRIMARY_DEV_SYNC_ENABLED: 'false',
+            NEO_ORCHESTRATOR_KB_SYNC_ENABLED: 'false',
+            NEO_ORCHESTRATOR_BRIDGE_DAEMON_ENABLED: 'false',
+            NEO_ORCHESTRATOR_GOLDEN_PATH_REPO_ENRICHMENT_ENABLED: 'false',
+            NEO_ORCHESTRATOR_MLX_ENABLED: 'false'
+        });
+
+        expect(memoryCoreEnv.NEO_MAILBOX_DEFAULT_REPLY_POLICY).toBe('blocked');
+    });
 });