@aitne/daemon 0.1.0

package/dist/services/mail-ingestion.d.ts

@@ -0,0 +1,139 @@
+/**
+ * Shared mail ingestion pipeline — provider-agnostic.
+ *
+ * Invoked by the unified {@link MailPoller} to persist categorized findings
+ * from a classified email batch. Centralising the logic here guarantees the
+ * same classification rules, idempotency contracts, and observation stats
+ * shape across every provider (gmail / outlook / yahoo / icloud).
+ *
+ * Scope of this module (uniform across providers):
+ *   - `travel_bookings` insertion on travel category
+ *   - `books` + `reading_highlights` insertion on kindle_notebook category
+ *     (HTML fetched via the caller-supplied `fetchHtml` callback)
+ *   - `parse_failures` for every classification/extraction miss, keyed by a
+ *     caller-supplied namespace so rows from different providers cannot
+ *     collide on the UNIQUE index.
+ *
+ * Intentionally NOT covered:
+ *   - Attachment *download* semantics. This pipeline only stores attachment
+ *     metadata for receipt candidates; actual bytes are fetched later by the
+ *     receipts route through the provider's `getAttachment` method (or the
+ *     shared-Google-OAuth Gmail route's `GmailService` fallback).
+ *
+ * The caller owns:
+ *   - Classification invocation (so Gmail can use the native `EmailInput`
+ *     shape and unified providers can use their `MailMessageSummary` adapter
+ *     in {@link mail-classifier}).
+ *   - Cursor / dedup management (poller-specific).
+ *   - Emitting the aggregate observation (payload shape differs per poller).
+ */
+import type Database from "better-sqlite3";
+import type { Logger } from "pino";
+import type { TravelExtraction, processEmailBatch } from "./gmail-classifier.js";
+import { type TriggerRoadmapRefresh } from "../core/roadmap-refresh-triggers.js";
+/**
+ * Identity of the source that produced the classified batch. Used to
+ * namespace `parse_failures.provider_msg_id` / `travel_bookings.provider_msg_id`
+ * so IMAP UIDs from different accounts cannot collide on the UNIQUE index,
+ * and to populate `receipts.account_id` for the provider-agnostic download
+ * route.
+ */
+export interface MailIngestionSource {
+    /**
+     * Prefix prepended to a message's provider id when writing
+     * `parse_failures` and `travel_bookings`. Pass an empty string for the
+     * shared-Google-OAuth Gmail path (raw Gmail message ids are globally
+     * unique there). For unified providers pass `mail:<kind>:<accountId>:`
+     * so two IMAP accounts cannot collide on the same UID.
+     */
+    parseFailureKeyPrefix: string;
+    /**
+     * Stored on each `receipts` row so the download route can resolve the
+     * right provider via the mail registry. `null` for the
+     * shared-Google-OAuth Gmail path (download falls back to `GmailService`
+     * in the route).
+     */
+    accountId: string | null;
+}
+export interface AttachmentLike {
+    attachmentId: string;
+    filename: string;
+    mimeType: string;
+    size: number;
+}
+export interface MailIngestionStats {
+    travelBookingsInserted: number;
+    receiptsDetected: number;
+    kindleNotebooks: number;
+    kindleBooksCreated: number;
+    kindleHighlightsInserted: number;
+    parseFailures: number;
+}
+export declare function emptyIngestionStats(): MailIngestionStats;
+export interface MailIngestionInputs {
+    db: Database.Database;
+    logger: Logger;
+    source: MailIngestionSource;
+    /** Output of `processEmailBatch` / `processMailBatch`. */
+    batch: ReturnType<typeof processEmailBatch>;
+    /**
+     * Fetches the HTML body for a message id. Return `null` when the provider
+     * has no HTML part available. Invoked only for kindle_notebook-classified
+     * messages — never for the broader batch, so there is no N+1 cost on
+     * unrelated mail.
+     */
+    fetchHtml: (providerMsgId: string) => Promise<string | null>;
+    /**
+     * Optional. When present, invoked once per travel-classified message to
+     * list its attachments; each attachment lands in `receipts` keyed on
+     * `(provider_msg_id, attachment_id)`. Omit to skip receipt scanning —
+     * the pipeline will still insert the travel booking itself.
+     *
+     * Gmail callers should pass a thin wrapper over `GmailService.listAttachments`
+     * (metadata-only call). Unified providers should pass a wrapper that
+     * returns `provider.get(id).then(m => m.attachments)`.
+     */
+    fetchAttachments?: (providerMsgId: string) => Promise<AttachmentLike[]>;
+    /**
+     * Optional. Invoked once per travel-booking INSERT whose `start_date`
+     * is more than 3 days out (ROADMAP-REDESIGN §3.4 RFC-C). The dispatcher
+     * side absorbs bursts via a 5-minute dedup, so firing this multiple times
+     * inside a batch (e.g. flight + hotel confirmations polled together)
+     * collapses into a single `routine.roadmap_refresh`.
+     */
+    triggerRoadmapRefresh?: TriggerRoadmapRefresh;
+}
+/**
+ * Process a classified batch: persist travel bookings, ingest Kindle
+ * notebook exports, and record every failure in `parse_failures`. Never
+ * throws — all per-message errors are captured as parse failures so one
+ * bad email cannot block the rest of the batch.
+ */
+export declare function processClassifiedMailBatch(inputs: MailIngestionInputs): Promise<MailIngestionStats>;
+/**
+ * Insert a travel booking. Returns true if a new row landed, false when
+ * the UNIQUE index skipped it (the message was already ingested on a prior
+ * tick and we're seeing it again).
+ */
+export declare function insertTravelBooking(db: Database.Database, providerMsgId: string, extraction: TravelExtraction): boolean;
+/**
+ * Insert (or de-duplicate) a parse_failures row. Returns true if a new
+ * row landed, false if the uniqueKey was already recorded.
+ *
+ * `provider_msg_id` holds any opaque unique key — callers namespace-prefix
+ * non-Gmail keys to keep the UNIQUE constraint well-defined across providers.
+ */
+export declare function recordParseFailure(db: Database.Database, failure: {
+    uniqueKey: string;
+    sender: string | null;
+    subject: string | null;
+    snippet: string;
+    errorReason: string;
+}): boolean;
+/**
+ * Insert a receipt row. Idempotent on (provider_msg_id, attachment_id).
+ * `accountId` is null for the shared-Google-OAuth Gmail path; the
+ * download route falls back to GmailService for those rows.
+ */
+export declare function insertReceipt(db: Database.Database, providerMsgId: string, attachment: AttachmentLike, category: string, accountId: string | null): boolean;
+//# sourceMappingURL=mail-ingestion.d.ts.map

package/dist/services/mail-ingestion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mail-ingestion.d.ts","sourceRoot":"","sources":["../../src/services/mail-ingestion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAKnC,OAAO,KAAK,EAEV,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,qCAAqC,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,wBAAwB,EAAE,MAAM,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,mBAAmB,IAAI,kBAAkB,CASxD;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,mBAAmB,CAAC;IAC5B,0DAA0D;IAC1D,KAAK,EAAE,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;IAC5C;;;;;OAKG;IACH,SAAS,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7D;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACxE;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;CAC/C;AAED;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,kBAAkB,CAAC,CAsD7B;AAiED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,gBAAgB,GAC3B,OAAO,CAuBT;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,OAAO,EAAE;IACP,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB,GACA,OAAO,CAkBT;AA6CD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,cAAc,EAC1B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,OAAO,CAoBT"}

package/dist/services/mail-ingestion.js

@@ -0,0 +1,223 @@
+/**
+ * Shared mail ingestion pipeline — provider-agnostic.
+ *
+ * Invoked by the unified {@link MailPoller} to persist categorized findings
+ * from a classified email batch. Centralising the logic here guarantees the
+ * same classification rules, idempotency contracts, and observation stats
+ * shape across every provider (gmail / outlook / yahoo / icloud).
+ *
+ * Scope of this module (uniform across providers):
+ *   - `travel_bookings` insertion on travel category
+ *   - `books` + `reading_highlights` insertion on kindle_notebook category
+ *     (HTML fetched via the caller-supplied `fetchHtml` callback)
+ *   - `parse_failures` for every classification/extraction miss, keyed by a
+ *     caller-supplied namespace so rows from different providers cannot
+ *     collide on the UNIQUE index.
+ *
+ * Intentionally NOT covered:
+ *   - Attachment *download* semantics. This pipeline only stores attachment
+ *     metadata for receipt candidates; actual bytes are fetched later by the
+ *     receipts route through the provider's `getAttachment` method (or the
+ *     shared-Google-OAuth Gmail route's `GmailService` fallback).
+ *
+ * The caller owns:
+ *   - Classification invocation (so Gmail can use the native `EmailInput`
+ *     shape and unified providers can use their `MailMessageSummary` adapter
+ *     in {@link mail-classifier}).
+ *   - Cursor / dedup management (poller-specific).
+ *   - Emitting the aggregate observation (payload shape differs per poller).
+ */
+import { parseKindleNotebookHtml, importKindleNotebook, } from "../api/routes/books.js";
+import { maybeTriggerRefreshForTravelBooking, } from "../core/roadmap-refresh-triggers.js";
+export function emptyIngestionStats() {
+    return {
+        travelBookingsInserted: 0,
+        receiptsDetected: 0,
+        kindleNotebooks: 0,
+        kindleBooksCreated: 0,
+        kindleHighlightsInserted: 0,
+        parseFailures: 0,
+    };
+}
+/**
+ * Process a classified batch: persist travel bookings, ingest Kindle
+ * notebook exports, and record every failure in `parse_failures`. Never
+ * throws — all per-message errors are captured as parse failures so one
+ * bad email cannot block the rest of the batch.
+ */
+export async function processClassifiedMailBatch(inputs) {
+    const { db, logger, source, batch, fetchHtml, fetchAttachments, triggerRoadmapRefresh } = inputs;
+    const stats = emptyIngestionStats();
+    for (const { email, extraction } of batch.travelBookings) {
+        const key = `${source.parseFailureKeyPrefix}${email.messageId}`;
+        if (insertTravelBooking(db, key, extraction)) {
+            stats.travelBookingsInserted += 1;
+            maybeTriggerRefreshForTravelBooking({ startDate: extraction.startDate }, triggerRoadmapRefresh);
+        }
+        if (fetchAttachments) {
+            stats.receiptsDetected += await scanTravelAttachments({
+                db,
+                logger,
+                source,
+                providerMsgId: email.messageId,
+                namespacedMsgId: key,
+                fetchAttachments,
+            });
+        }
+    }
+    stats.kindleNotebooks = batch.kindleNotebooks.length;
+    for (const notebook of batch.kindleNotebooks) {
+        const result = await ingestKindleNotebook({
+            db,
+            logger,
+            source,
+            email: notebook,
+            fetchHtml,
+        });
+        stats.kindleBooksCreated += result.booksCreated;
+        stats.kindleHighlightsInserted += result.highlightsInserted;
+        if (result.parseFailure)
+            stats.parseFailures += 1;
+    }
+    // Classifier-level parse failures (e.g. travel extraction returned null
+    // but the sender domain looked right). These arrive with raw provider
+    // ids — apply the namespace prefix here so the UNIQUE key is consistent.
+    for (const failure of batch.parseFailures) {
+        const ok = recordParseFailure(db, {
+            uniqueKey: `${source.parseFailureKeyPrefix}${failure.messageId}`,
+            sender: failure.sender,
+            subject: failure.subject,
+            snippet: failure.snippet,
+            errorReason: failure.errorReason,
+        });
+        if (ok)
+            stats.parseFailures += 1;
+    }
+    return stats;
+}
+/**
+ * Fetch + parse + import a single Kindle Notebook Export email.
+ * Records a `parse_failures` row for any miss; returns counts the caller
+ * merges into the batch-level stats.
+ */
+async function ingestKindleNotebook(args) {
+    const { db, logger, source, email, fetchHtml } = args;
+    const uniqueKey = `${source.parseFailureKeyPrefix}${email.messageId}`;
+    const recordFailure = (errorReason, snippet = "") => {
+        recordParseFailure(db, {
+            uniqueKey,
+            sender: email.sender,
+            subject: email.subject,
+            snippet,
+            errorReason,
+        });
+    };
+    try {
+        const html = await fetchHtml(email.messageId);
+        if (!html) {
+            recordFailure("kindle_notebook_no_html");
+            return { booksCreated: 0, highlightsInserted: 0, parseFailure: true };
+        }
+        const parsed = parseKindleNotebookHtml(html, {
+            subject: email.subject,
+            date: email.date,
+        });
+        if (!parsed) {
+            recordFailure("kindle_notebook_unrecognized_format");
+            return { booksCreated: 0, highlightsInserted: 0, parseFailure: true };
+        }
+        const imported = importKindleNotebook(db, parsed);
+        return {
+            booksCreated: imported.booksCreated,
+            highlightsInserted: imported.highlightsInserted,
+            parseFailure: false,
+        };
+    }
+    catch (err) {
+        logger.warn({ err, messageId: email.messageId, prefix: source.parseFailureKeyPrefix }, "Failed to ingest Kindle notebook email");
+        recordFailure(`kindle_notebook_error: ${err instanceof Error ? err.message : String(err)}`);
+        return { booksCreated: 0, highlightsInserted: 0, parseFailure: true };
+    }
+}
+/**
+ * Insert a travel booking. Returns true if a new row landed, false when
+ * the UNIQUE index skipped it (the message was already ingested on a prior
+ * tick and we're seeing it again).
+ */
+export function insertTravelBooking(db, providerMsgId, extraction) {
+    try {
+        db.prepare(`INSERT INTO travel_bookings
+         (type, provider, destination, start_date, end_date,
+          confirmation_number, amount, currency, provider_msg_id)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(extraction.type, extraction.provider, extraction.destination, extraction.startDate, extraction.endDate, extraction.confirmationNumber, extraction.amount, extraction.currency, providerMsgId);
+        return true;
+    }
+    catch (err) {
+        if (isUniqueConstraintError(err))
+            return false;
+        throw err;
+    }
+}
+/**
+ * Insert (or de-duplicate) a parse_failures row. Returns true if a new
+ * row landed, false if the uniqueKey was already recorded.
+ *
+ * `provider_msg_id` holds any opaque unique key — callers namespace-prefix
+ * non-Gmail keys to keep the UNIQUE constraint well-defined across providers.
+ */
+export function recordParseFailure(db, failure) {
+    try {
+        db.prepare(`INSERT INTO parse_failures
+         (provider_msg_id, sender, subject, snippet, error_reason)
+       VALUES (?, ?, ?, ?, ?)`).run(failure.uniqueKey, failure.sender, failure.subject, failure.snippet, failure.errorReason);
+        return true;
+    }
+    catch (err) {
+        if (isUniqueConstraintError(err))
+            return false;
+        throw err;
+    }
+}
+function isUniqueConstraintError(err) {
+    return (err instanceof Error && err.message.includes("UNIQUE constraint failed"));
+}
+/**
+ * Detect and record receipt attachments for a single travel-classified email.
+ * Attachment metadata only — bytes are downloaded on demand via the
+ * receipts API.
+ */
+async function scanTravelAttachments(args) {
+    const { db, logger, source, providerMsgId, namespacedMsgId, fetchAttachments } = args;
+    let detected = 0;
+    try {
+        const attachments = await fetchAttachments(providerMsgId);
+        for (const att of attachments) {
+            if (insertReceipt(db, namespacedMsgId, att, "travel", source.accountId)) {
+                detected += 1;
+            }
+        }
+    }
+    catch (err) {
+        logger.warn({ err, providerMsgId, namespacedMsgId }, "Failed to scan attachments for receipts");
+    }
+    return detected;
+}
+/**
+ * Insert a receipt row. Idempotent on (provider_msg_id, attachment_id).
+ * `accountId` is null for the shared-Google-OAuth Gmail path; the
+ * download route falls back to GmailService for those rows.
+ */
+export function insertReceipt(db, providerMsgId, attachment, category, accountId) {
+    try {
+        db.prepare(`INSERT INTO receipts
+         (provider_msg_id, attachment_id, filename, mime_type, size_bytes, category, account_id)
+       VALUES (?, ?, ?, ?, ?, ?, ?)`).run(providerMsgId, attachment.attachmentId, attachment.filename, attachment.mimeType, attachment.size, category, accountId);
+        return true;
+    }
+    catch (err) {
+        if (isUniqueConstraintError(err))
+            return false;
+        throw err;
+    }
+}
+//# sourceMappingURL=mail-ingestion.js.map

package/dist/services/mail-ingestion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mail-ingestion.js","sourceRoot":"","sources":["../../src/services/mail-ingestion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,EACL,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAMhC,OAAO,EACL,mCAAmC,GAEpC,MAAM,qCAAqC,CAAC;AA2C7C,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,sBAAsB,EAAE,CAAC;QACzB,gBAAgB,EAAE,CAAC;QACnB,eAAe,EAAE,CAAC;QAClB,kBAAkB,EAAE,CAAC;QACrB,wBAAwB,EAAE,CAAC;QAC3B,aAAa,EAAE,CAAC;KACjB,CAAC;AACJ,CAAC;AAoCD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAA2B;IAE3B,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,GAAG,MAAM,CAAC;IACjG,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,qBAAqB,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;QAChE,IAAI,mBAAmB,CAAC,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,sBAAsB,IAAI,CAAC,CAAC;YAClC,mCAAmC,CACjC,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,EACnC,qBAAqB,CACtB,CAAC;QACJ,CAAC;QACD,IAAI,gBAAgB,EAAE,CAAC;YACrB,KAAK,CAAC,gBAAgB,IAAI,MAAM,qBAAqB,CAAC;gBACpD,EAAE;gBACF,MAAM;gBACN,MAAM;gBACN,aAAa,EAAE,KAAK,CAAC,SAAS;gBAC9B,eAAe,EAAE,GAAG;gBACpB,gBAAgB;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC;IACrD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC;YACxC,EAAE;YACF,MAAM;YACN,MAAM;YACN,KAAK,EAAE,QAAQ;YACf,SAAS;SACV,CAAC,CAAC;QACH,KAAK,CAAC,kBAAkB,IAAI,MAAM,CAAC,YAAY,CAAC;QAChD,KAAK,CAAC,wBAAwB,IAAI,MAAM,CAAC,kBAAkB,CAAC;QAC5D,IAAI,MAAM,CAAC,YAAY;YAAE,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,yEAAyE;IACzE,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QAC1C,MAAM,EAAE,GAAG,kBAAkB,CAAC,EAAE,EAAE;YAChC,SAAS,EAAE,GAAG,MAAM,CAAC,qBAAqB,GAAG,OAAO,CAAC,SAAS,EAAE;YAChE,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC,CAAC;QACH,IAAI,EAAE;YAAE,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,oBAAoB,CAAC,IAMnC;IAKC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IACtD,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,qBAAqB,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;IAEtE,MAAM,aAAa,GAAG,CAAC,WAAmB,EAAE,OAAO,GAAG,EAAE,EAAQ,EAAE;QAChE,kBAAkB,CAAC,EAAE,EAAE;YACrB,SAAS;YACT,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO;YACP,WAAW;SACZ,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,aAAa,CAAC,yBAAyB,CAAC,CAAC;YACzC,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACxE,CAAC;QAED,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,EAAE;YAC3C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,aAAa,CAAC,qCAAqC,CAAC,CAAC;YACrD,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACxE,CAAC;QAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO;YACL,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;YAC/C,YAAY,EAAE,KAAK;SACpB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,qBAAqB,EAAE,EACzE,wCAAwC,CACzC,CAAC;QACF,aAAa,CACX,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7E,CAAC;QACF,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACxE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAqB,EACrB,aAAqB,EACrB,UAA4B;IAE5B,IAAI,CAAC;QACH,EAAE,CAAC,OAAO,CACR;;;0CAGoC,CACrC,CAAC,GAAG,CACH,UAAU,CAAC,IAAI,EACf,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,kBAAkB,EAC7B,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,QAAQ,EACnB,aAAa,CACd,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAqB,EACrB,OAMC;IAED,IAAI,CAAC;QACH,EAAE,CAAC,OAAO,CACR;;8BAEwB,CACzB,CAAC,GAAG,CACH,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,WAAW,CACpB,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAY;IAC3C,OAAO,CACL,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CACzE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,qBAAqB,CAAC,IAapC;IACC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC;IACtF,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAC1D,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,IAAI,aAAa,CAAC,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxE,QAAQ,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,aAAa,EAAE,eAAe,EAAE,EACvC,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,EAAqB,EACrB,aAAqB,EACrB,UAA0B,EAC1B,QAAgB,EAChB,SAAwB;IAExB,IAAI,CAAC;QACH,EAAE,CAAC,OAAO,CACR;;oCAE8B,CAC/B,CAAC,GAAG,CACH,aAAa,EACb,UAAU,CAAC,YAAY,EACvB,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,IAAI,EACf,QAAQ,EACR,SAAS,CACV,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,uBAAuB,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/services/mcp/auto-probe.d.ts

@@ -0,0 +1,76 @@
+import type Database from "better-sqlite3";
+import type { Observer } from "../../observers/manager.js";
+import type { EncryptedBlobStore } from "../../secrets/encrypted-blob-store.js";
+import { probeMcpServer } from "./probe.js";
+export interface McpAutoProbeOptions {
+    db: Database.Database;
+    blobStore: EncryptedBlobStore;
+    /** PA_DATA_DIR — forwarded to `probeMcpServer` for the sandbox cwd. */
+    dataDir: string;
+    /**
+     * Probe cadence in minutes. 0 disables the observer entirely (the timer
+     * is never scheduled; `start()` becomes a no-op after logging the decision
+     * so it's visible in operator logs).
+     */
+    intervalMinutes: number;
+    /** Override for tests — clock injection for the freshness skip check. */
+    now?: () => number;
+    /** Override for tests — per-server probe stagger. */
+    staggerMs?: number;
+    /** Override for tests — lets the test inject a fake probe runner. */
+    probe?: typeof probeMcpServer;
+    /**
+     * Override for tests — sleep helper. Default `setTimeout`. Tests replace
+     * with a fake so staggered probes run without real delay.
+     */
+    sleep?: (ms: number) => Promise<void>;
+}
+/**
+ * B-003 Phase 4.3 — auto-probe observer.
+ *
+ * Walks every row in `mcp_servers WHERE enabled = 1` once per
+ * `intervalMinutes`, re-runs the same `initialize + tools/list` probe the
+ * dashboard Probe button issues, and persists the result via
+ * `saveMcpProbeResult`. The persisted row drives:
+ *
+ *  - The `ConnectionCard` status dot (error / connected).
+ *  - The per-tool list the card renders for the allowlist toggles.
+ *  - The `## MCP tools available` section appended to the instruction file
+ *    at session materialization time (see `session-materializer.ts`),
+ *    which is how the agent knows what tools each server currently exposes.
+ *
+ * Failure handling is deliberately minimal: a failing probe writes the
+ * error to `last_probe_status` and moves on. We do NOT auto-disable —
+ * enabling / disabling an MCP server is an approve-tier mutation by design
+ * (§ Safety integration in B-003), so auto-flipping it from a polling
+ * observer would silently widen the safety surface. The card's error state
+ * surfaces the failure; the user decides.
+ *
+ * A manually-probed server (via `POST /api/mcp/servers/:id/probe`) is
+ * skipped for one tick when its `lastProbeAt` is younger than half the
+ * configured interval. This avoids double-probing a server the user just
+ * fixed and re-probed.
+ */
+export declare class McpAutoProbe implements Observer {
+    private readonly options;
+    readonly name = "mcp-auto-probe";
+    private timer;
+    private tickRunning;
+    private readonly intervalMs;
+    private readonly staggerMs;
+    private readonly now;
+    private readonly probeFn;
+    private readonly sleep;
+    constructor(options: McpAutoProbeOptions);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    /**
+     * Runs one pass over enabled servers. Exposed for tests; production callers
+     * should let the interval timer drive it. Re-entrancy is guarded so that a
+     * slow tick (e.g. 8 servers × stagger) cannot overlap the next timer fire.
+     */
+    tick(): Promise<void>;
+    private runTick;
+    private probeOne;
+}
+//# sourceMappingURL=auto-probe.d.ts.map

package/dist/services/mcp/auto-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-probe.d.ts","sourceRoot":"","sources":["../../../src/services/mcp/auto-probe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAEhF,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAkB5C,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,SAAS,EAAE,kBAAkB,CAAC;IAC9B,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,KAAK,CAAC,EAAE,OAAO,cAAc,CAAC;IAC9B;;;OAGG;IACH,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,YAAa,YAAW,QAAQ;IAW/B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAVpC,QAAQ,CAAC,IAAI,oBAAoB;IAEjC,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgC;gBAEzB,OAAO,EAAE,mBAAmB;IAUnD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAU3B;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAab,OAAO;YA8BP,QAAQ;CA8BvB"}

package/dist/services/mcp/auto-probe.js

@@ -0,0 +1,147 @@
+import { createLogger } from "../../logging.js";
+import { probeMcpServer } from "./probe.js";
+import { listMcpServers, resolveMcpSecrets, saveMcpProbeResult, } from "./registry.js";
+const logger = createLogger("mcp-auto-probe");
+/**
+ * Default stagger between consecutive server probes inside a single tick.
+ * Keeps ten enabled servers from sharing a 10-second probe timeout wall
+ * simultaneously (each probe is already bounded to 10 s, so a 2 s stagger
+ * means a full ten-server tick completes in < 30 s).
+ */
+const DEFAULT_STAGGER_MS = 2_000;
+/**
+ * B-003 Phase 4.3 — auto-probe observer.
+ *
+ * Walks every row in `mcp_servers WHERE enabled = 1` once per
+ * `intervalMinutes`, re-runs the same `initialize + tools/list` probe the
+ * dashboard Probe button issues, and persists the result via
+ * `saveMcpProbeResult`. The persisted row drives:
+ *
+ *  - The `ConnectionCard` status dot (error / connected).
+ *  - The per-tool list the card renders for the allowlist toggles.
+ *  - The `## MCP tools available` section appended to the instruction file
+ *    at session materialization time (see `session-materializer.ts`),
+ *    which is how the agent knows what tools each server currently exposes.
+ *
+ * Failure handling is deliberately minimal: a failing probe writes the
+ * error to `last_probe_status` and moves on. We do NOT auto-disable —
+ * enabling / disabling an MCP server is an approve-tier mutation by design
+ * (§ Safety integration in B-003), so auto-flipping it from a polling
+ * observer would silently widen the safety surface. The card's error state
+ * surfaces the failure; the user decides.
+ *
+ * A manually-probed server (via `POST /api/mcp/servers/:id/probe`) is
+ * skipped for one tick when its `lastProbeAt` is younger than half the
+ * configured interval. This avoids double-probing a server the user just
+ * fixed and re-probed.
+ */
+export class McpAutoProbe {
+    options;
+    name = "mcp-auto-probe";
+    timer = null;
+    tickRunning = false;
+    intervalMs;
+    staggerMs;
+    now;
+    probeFn;
+    sleep;
+    constructor(options) {
+        this.options = options;
+        this.intervalMs = options.intervalMinutes * 60_000;
+        this.staggerMs = options.staggerMs ?? DEFAULT_STAGGER_MS;
+        this.now = options.now ?? Date.now;
+        this.probeFn = options.probe ?? probeMcpServer;
+        this.sleep =
+            options.sleep ??
+                ((ms) => new Promise((r) => setTimeout(r, ms)));
+    }
+    async start() {
+        if (this.intervalMs <= 0) {
+            logger.info("MCP auto-probe disabled (mcpAutoProbeIntervalMinutes <= 0) — skipping registration");
+            return;
+        }
+        // First tick is scheduled, not immediate: avoid racing with the initial
+        // manual-probe flurry the user often runs right after setting servers up.
+        this.timer = setInterval(() => void this.tick(), this.intervalMs);
+        logger.info({ intervalMs: this.intervalMs }, "MCP auto-probe observer started");
+    }
+    async stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+        // In-flight tick is allowed to complete on its own — probes hold a
+        // 10 s timeout each and kill their own process trees / abort their
+        // fetches on timeout, so leaking the Promise here is bounded.
+    }
+    /**
+     * Runs one pass over enabled servers. Exposed for tests; production callers
+     * should let the interval timer drive it. Re-entrancy is guarded so that a
+     * slow tick (e.g. 8 servers × stagger) cannot overlap the next timer fire.
+     */
+    async tick() {
+        if (this.tickRunning) {
+            logger.debug("MCP auto-probe tick already running — skipping overlap");
+            return;
+        }
+        this.tickRunning = true;
+        try {
+            await this.runTick();
+        }
+        finally {
+            this.tickRunning = false;
+        }
+    }
+    async runTick() {
+        const servers = listMcpServers(this.options.db).filter((s) => s.enabled);
+        if (servers.length === 0)
+            return;
+        const now = this.now();
+        const freshnessMs = this.intervalMs / 2;
+        let probed = 0;
+        let skipped = 0;
+        let firstStagger = true;
+        for (const server of servers) {
+            // Skip if a recent manual probe already refreshed the status.
+            if (server.lastProbeAt != null && now - server.lastProbeAt < freshnessMs) {
+                skipped++;
+                continue;
+            }
+            if (!firstStagger) {
+                await this.sleep(this.staggerMs);
+            }
+            firstStagger = false;
+            await this.probeOne(server);
+            probed++;
+        }
+        logger.info({ probed, skipped, total: servers.length }, "MCP auto-probe tick finished");
+    }
+    async probeOne(server) {
+        try {
+            const rawSecrets = await resolveMcpSecrets(this.options.blobStore, server);
+            const secrets = {};
+            for (const [k, v] of Object.entries(rawSecrets)) {
+                if (v != null)
+                    secrets[k] = v;
+            }
+            const result = await this.probeFn(server, {
+                dataDir: this.options.dataDir,
+                secrets,
+            });
+            saveMcpProbeResult(this.options.db, server.id, result);
+            if (result.ok) {
+                logger.debug({ id: server.id, tools: result.toolCount }, "MCP auto-probe succeeded");
+            }
+            else {
+                logger.warn({ id: server.id, error: result.error }, "MCP auto-probe returned a failure result");
+            }
+        }
+        catch (err) {
+            // probeMcpServer is designed to return `{ok:false}` on transport errors,
+            // so reaching this catch means the probe runner itself threw — usually
+            // an invariant bug. Log and continue; the next tick will retry.
+            logger.error({ err, id: server.id }, "MCP auto-probe threw unexpectedly");
+        }
+    }
+}
+//# sourceMappingURL=auto-probe.js.map

package/dist/services/mcp/auto-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-probe.js","sourceRoot":"","sources":["../../../src/services/mcp/auto-probe.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,eAAe,CAAC;AAGvB,MAAM,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,KAAK,CAAC;AA0BjC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,OAAO,YAAY;IAWM;IAVpB,IAAI,GAAG,gBAAgB,CAAC;IAEzB,KAAK,GAA0C,IAAI,CAAC;IACpD,WAAW,GAAG,KAAK,CAAC;IACX,UAAU,CAAS;IACnB,SAAS,CAAS;IAClB,GAAG,CAAe;IAClB,OAAO,CAAwB;IAC/B,KAAK,CAAgC;IAEtD,YAA6B,OAA4B;QAA5B,YAAO,GAAP,OAAO,CAAqB;QACvD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,eAAe,GAAG,MAAM,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACzD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;QAC/C,IAAI,CAAC,KAAK;YACR,OAAO,CAAC,KAAK;gBACb,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CACT,oFAAoF,CACrF,CAAC;YACF,OAAO;QACT,CAAC;QACD,wEAAwE;QACxE,0EAA0E;QAC1E,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAClE,MAAM,CAAC,IAAI,CACT,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAC/B,iCAAiC,CAClC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,mEAAmE;QACnE,mEAAmE;QACnE,8DAA8D;IAChE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QAExC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,YAAY,GAAG,IAAI,CAAC;QAExB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,8DAA8D;YAC9D,IAAI,MAAM,CAAC,WAAW,IAAI,IAAI,IAAI,GAAG,GAAG,MAAM,CAAC,WAAW,GAAG,WAAW,EAAE,CAAC;gBACzE,OAAO,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YAED,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC;YACD,YAAY,GAAG,KAAK,CAAC;YAErB,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC5B,MAAM,EAAE,CAAC;QACX,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAC;IAC1F,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,MAAiB;QACtC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC3E,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChD,IAAI,CAAC,IAAI,IAAI;oBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;gBACxC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;gBAC7B,OAAO;aACR,CAAC,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,MAAM,CAAC,KAAK,CACV,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,EAC1C,0BAA0B,CAC3B,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CACT,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EACtC,0CAA0C,CAC3C,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yEAAyE;YACzE,uEAAuE;YACvE,gEAAgE;YAChE,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,mCAAmC,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;CACF"}

package/dist/services/mcp/generators/claude.d.ts

@@ -0,0 +1,18 @@
+import type { McpServer } from "../types.js";
+import { type GeneratedMcpConfig, type GeneratorOptions } from "./types.js";
+/**
+ * B-003 Phase 2 — Claude MCP config generator (.mcp.json).
+ *
+ * Claude Code / Agent SDK discovers MCP servers from `<workdir>/.mcp.json`.
+ * The SDK also accepts the same shape as the `mcpServers` option to `query()`.
+ *
+ * Spec reference: https://docs.claude.com/en/docs/claude-code/mcp.json
+ * — last reviewed 2026-04-18.
+ *
+ * Secrets are NOT inlined in the file. We emit `${MCP_<ID>_<KEY>}`
+ * placeholders and carry the value in the spawned-process env; Claude's
+ * config-file loader expands `${VAR}` references from that env at read time.
+ */
+export declare const SPEC_VERSION = "claude-2026-04-18";
+export declare function generateClaudeConfig(allServers: readonly McpServer[], options: GeneratorOptions): GeneratedMcpConfig;
+//# sourceMappingURL=claude.d.ts.map

package/dist/services/mcp/generators/claude.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../../../src/services/mcp/generators/claude.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACtB,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,YAAY,sBAAsB,CAAC;AAiDhD,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,SAAS,SAAS,EAAE,EAChC,OAAO,EAAE,gBAAgB,GACxB,kBAAkB,CAoCpB"}