@aitne/daemon 0.1.7 → 0.1.9

package/dist/services/mail/imap/query-translator.d.ts

@@ -10,4 +10,3 @@ export interface TranslateImapOptions {
     now?: () => Date;
 }
 export declare function translateImapQuery(q: string | null, opts?: TranslateImapOptions): ImapQueryTranslation;
-//# sourceMappingURL=query-translator.d.ts.map

package/dist/services/mail/imap/query-translator.js

@@ -111,4 +111,3 @@ function formatImapDate(date) {
 function containsNonAscii(value) {
     return /[^\x00-\x7F]/.test(value);
 }
-//# sourceMappingURL=query-translator.js.map

package/dist/services/mail/imap/reconcile-planner.d.ts

@@ -53,4 +53,3 @@ export interface ReconcilePlan {
  * Deterministic and side-effect-free.
  */
 export declare function planImapReconcile(input: ReconcilePlanInput): ReconcilePlan;
-//# sourceMappingURL=reconcile-planner.d.ts.map

package/dist/services/mail/imap/reconcile-planner.js

@@ -49,4 +49,3 @@ export function planImapReconcile(input) {
     }
     return { missingIds, skippedIds };
 }
-//# sourceMappingURL=reconcile-planner.js.map

package/dist/services/mail/imap/reply-mime.d.ts

@@ -21,4 +21,3 @@ export interface BuiltReplyBodies {
 }
 export declare function buildReplyBodies(input: ReplyBodyInput): BuiltReplyBodies;
 export declare function dedupeReferences(references: string[]): string[];
-//# sourceMappingURL=reply-mime.d.ts.map

package/dist/services/mail/imap/reply-mime.js

@@ -74,4 +74,3 @@ function escapeHtml(value) {
         .replaceAll(">", ">")
         .replaceAll('"', """);
 }
-//# sourceMappingURL=reply-mime.js.map

package/dist/services/mail/imap/yahoo-provider.d.ts

@@ -2,4 +2,3 @@ import { ImapProviderBase } from "./imap-provider-base.js";
 export declare class YahooImapProvider extends ImapProviderBase {
     readonly kind: "yahoo";
 }
-//# sourceMappingURL=yahoo-provider.d.ts.map

package/dist/services/mail/imap/yahoo-provider.js

@@ -2,4 +2,3 @@ import { ImapProviderBase } from "./imap-provider-base.js";
 export class YahooImapProvider extends ImapProviderBase {
     kind = "yahoo";
 }
-//# sourceMappingURL=yahoo-provider.js.map

package/dist/services/mail/mail-search.d.ts

@@ -32,4 +32,3 @@ export interface SearchMailOptions {
     limit?: number;
 }
 export declare function searchMail(db: Database.Database, query: string, options?: SearchMailOptions): SearchMailHit[];
-//# sourceMappingURL=mail-search.d.ts.map

package/dist/services/mail/mail-search.js

@@ -56,4 +56,3 @@ export function searchMail(db, query, options = {}) {
         isRead: r.isRead !== 0,
     }));
 }
-//# sourceMappingURL=mail-search.js.map

package/dist/services/mail/outlook/auth-failure-classifier.d.ts

@@ -35,4 +35,3 @@ export declare const TRANSIENT_BACKOFF_THRESHOLD = 10;
  */
 export declare function shouldEscalateToDegraded(consecutiveErrorCount: number, threshold?: number): boolean;
 export declare function effectiveAuthStatus(classified: ClassifiedFailure, consecutiveErrorCount: number): AuthStatus | null;
-//# sourceMappingURL=auth-failure-classifier.d.ts.map

package/dist/services/mail/outlook/auth-failure-classifier.js

@@ -88,4 +88,3 @@ export function effectiveAuthStatus(classified, consecutiveErrorCount) {
         return "degraded";
     return null;
 }
-//# sourceMappingURL=auth-failure-classifier.js.map

package/dist/services/mail/outlook/client-config.d.ts

@@ -31,4 +31,3 @@ export declare const OUTLOOK_SCOPES: readonly string[];
 export declare const OUTLOOK_LOOPBACK_REDIRECT_HOST = "127.0.0.1";
 export declare const OUTLOOK_LOOPBACK_REDIRECT_PATH = "/callback";
 export declare function buildLoopbackRedirectUri(port: number): string;
-//# sourceMappingURL=client-config.d.ts.map

package/dist/services/mail/outlook/client-config.js

@@ -55,4 +55,3 @@ export const OUTLOOK_LOOPBACK_REDIRECT_PATH = "/callback";
 export function buildLoopbackRedirectUri(port) {
     return `http://${OUTLOOK_LOOPBACK_REDIRECT_HOST}:${port}${OUTLOOK_LOOPBACK_REDIRECT_PATH}`;
 }
-//# sourceMappingURL=client-config.js.map

package/dist/services/mail/outlook/delta-cursor.d.ts

@@ -63,4 +63,3 @@ export interface RemovedAnnotation {
 export declare function isRemovedItem(item: RemovedAnnotation): boolean;
 export declare function parseGraphCursorJson(raw: string | null | undefined): GraphCursor | null;
 export declare function serializeGraphCursor(cursor: GraphCursor): string;
-//# sourceMappingURL=delta-cursor.d.ts.map

package/dist/services/mail/outlook/delta-cursor.js

@@ -82,4 +82,3 @@ export function parseGraphCursorJson(raw) {
 export function serializeGraphCursor(cursor) {
     return JSON.stringify(cursor);
 }
-//# sourceMappingURL=delta-cursor.js.map

package/dist/services/mail/outlook/graph-client.d.ts

@@ -95,4 +95,3 @@ export declare class GraphClient {
     private executeWithRetries;
 }
 export {};
-//# sourceMappingURL=graph-client.d.ts.map

package/dist/services/mail/outlook/graph-client.js

@@ -195,4 +195,3 @@ function safeParseJson(text) {
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
-//# sourceMappingURL=graph-client.js.map

package/dist/services/mail/outlook/msal-app-factory.d.ts

@@ -17,4 +17,3 @@ export declare function createBootstrapMsalApp(clientConfig: OutlookClientConfig
  * per-account blob on every acquireTokenSilent — MSAL handles refresh.
  */
 export declare function createRuntimeMsalApp(clientConfig: OutlookClientConfig, accountId: string, blobStore: EncryptedBlobStore): PublicClientApplication;
-//# sourceMappingURL=msal-app-factory.d.ts.map

package/dist/services/mail/outlook/msal-app-factory.js

@@ -59,4 +59,3 @@ export function createRuntimeMsalApp(clientConfig, accountId, blobStore) {
     };
     return new PublicClientApplication(config);
 }
-//# sourceMappingURL=msal-app-factory.js.map

package/dist/services/mail/outlook/msal-cache-plugin.d.ts

@@ -16,4 +16,3 @@ export declare class EncryptedBlobCachePlugin implements ICachePlugin {
     beforeCacheAccess(context: TokenCacheContext): Promise<void>;
     afterCacheAccess(context: TokenCacheContext): Promise<void>;
 }
-//# sourceMappingURL=msal-cache-plugin.d.ts.map

package/dist/services/mail/outlook/msal-cache-plugin.js

@@ -27,4 +27,3 @@ export class EncryptedBlobCachePlugin {
         }
     }
 }
-//# sourceMappingURL=msal-cache-plugin.js.map

package/dist/services/mail/outlook/oauth-device-code.d.ts

@@ -23,4 +23,3 @@ export interface DeviceCodeOAuthResult {
  * the eventual AuthenticationResult.
  */
 export declare function runDeviceCodeOAuth(deps: DeviceCodeOAuthDeps): Promise<DeviceCodeOAuthResult>;
-//# sourceMappingURL=oauth-device-code.d.ts.map

package/dist/services/mail/outlook/oauth-device-code.js

@@ -29,4 +29,3 @@ export async function runDeviceCodeOAuth(deps) {
         email: authResult.account.username,
     };
 }
-//# sourceMappingURL=oauth-device-code.js.map

package/dist/services/mail/outlook/oauth-loopback.d.ts

@@ -38,4 +38,3 @@ export interface LoopbackOAuthDeps {
  * is single-use and validated via constant-time-ish equality.
  */
 export declare function runLoopbackOAuth(deps: LoopbackOAuthDeps): Promise<LoopbackOAuthResult>;
-//# sourceMappingURL=oauth-loopback.d.ts.map

package/dist/services/mail/outlook/oauth-loopback.js

@@ -220,4 +220,3 @@ async function defaultOpenBrowser(url) {
     const open = (await import("open")).default;
     await open(url);
 }
-//# sourceMappingURL=oauth-loopback.js.map

package/dist/services/mail/outlook/outlook-provider.d.ts

@@ -97,4 +97,3 @@ export declare class OutlookGraphProvider implements MailProvider {
     private toFullMessage;
     private toSummary;
 }
-//# sourceMappingURL=outlook-provider.d.ts.map

package/dist/services/mail/outlook/outlook-provider.js

@@ -616,4 +616,3 @@ function addressFromGraph(raw) {
 function escapeODataLiteral(value) {
     return value.replace(/'/g, "''");
 }
-//# sourceMappingURL=outlook-provider.js.map

package/dist/services/mail/outlook/query-translator.d.ts

@@ -7,4 +7,3 @@ export interface TranslateOptions {
     now?: () => Date;
 }
 export declare function translateQueryFilters(q: string | null, opts?: TranslateOptions): QueryTranslation;
-//# sourceMappingURL=query-translator.d.ts.map

package/dist/services/mail/outlook/query-translator.js

@@ -100,4 +100,3 @@ function isoDaysAgo(days, now) {
 function escapeOdata(value) {
     return value.replaceAll("'", "''");
 }
-//# sourceMappingURL=query-translator.js.map

package/dist/services/mail/provider.d.ts

@@ -264,4 +264,3 @@ export declare class MailOperationNotSupportedError extends Error {
     readonly code = "not_implemented";
     constructor(kind: MailProviderKind, operation: string, reason?: string);
 }
-//# sourceMappingURL=provider.d.ts.map

package/dist/services/mail/provider.js

@@ -31,4 +31,3 @@ export class MailOperationNotSupportedError extends Error {
         this.name = "MailOperationNotSupportedError";
     }
 }
-//# sourceMappingURL=provider.js.map

package/dist/services/mail/query-utils.d.ts

@@ -10,4 +10,3 @@
  * silent skip and a `unsupported_token:<raw>` warning.
  */
 export declare function parseDays(input: string): number | null;
-//# sourceMappingURL=query-utils.d.ts.map

package/dist/services/mail/query-utils.js

@@ -15,4 +15,3 @@ export function parseDays(input) {
         return null;
     return Number.parseInt(match[1], 10);
 }
-//# sourceMappingURL=query-utils.js.map

package/dist/services/mail-classifier.d.ts

@@ -22,4 +22,3 @@ export declare function toClassifierInput(msg: MailMessageSummary, body?: string
 export declare function classifyMailMessage(msg: MailMessageSummary, body?: string | null): ClassifiedEmail;
 export declare function extractMailTravel(msg: MailMessage): TravelExtraction | null;
 export declare function processMailBatch(messages: Iterable<MailMessageSummary>): ReturnType<typeof processEmailBatch>;
-//# sourceMappingURL=mail-classifier.d.ts.map

package/dist/services/mail-classifier.js

@@ -49,4 +49,3 @@ export function processMailBatch(messages) {
     const inputs = Array.from(messages, (m) => toClassifierInput(m));
     return processEmailBatch(inputs);
 }
-//# sourceMappingURL=mail-classifier.js.map

package/dist/services/mail-ingestion.d.ts

@@ -136,4 +136,3 @@ export declare function recordParseFailure(db: Database.Database, failure: {
  * download route falls back to GmailService for those rows.
  */
 export declare function insertReceipt(db: Database.Database, providerMsgId: string, attachment: AttachmentLike, category: string, accountId: string | null): boolean;
-//# sourceMappingURL=mail-ingestion.d.ts.map

package/dist/services/mail-ingestion.js

@@ -220,4 +220,3 @@ export function insertReceipt(db, providerMsgId, attachment, category, accountId
         throw err;
     }
 }
-//# sourceMappingURL=mail-ingestion.js.map

package/dist/services/mcp/auto-probe.d.ts

@@ -73,4 +73,3 @@ export declare class McpAutoProbe implements Observer {
     private runTick;
     private probeOne;
 }
-//# sourceMappingURL=auto-probe.d.ts.map

package/dist/services/mcp/auto-probe.js

@@ -144,4 +144,3 @@ export class McpAutoProbe {
         }
     }
 }
-//# sourceMappingURL=auto-probe.js.map

package/dist/services/mcp/generators/claude.d.ts

@@ -15,4 +15,3 @@ import { type GeneratedMcpConfig, type GeneratorOptions } from "./types.js";
  */
 export declare const SPEC_VERSION = "claude-2026-04-18";
 export declare function generateClaudeConfig(allServers: readonly McpServer[], options: GeneratorOptions): GeneratedMcpConfig;
-//# sourceMappingURL=claude.d.ts.map

package/dist/services/mcp/generators/claude.js

@@ -87,4 +87,3 @@ export function generateClaudeConfig(allServers, options) {
         env: buildEnvFromServers(servers, options, allKeys),
     };
 }
-//# sourceMappingURL=claude.js.map

package/dist/services/mcp/generators/codex.d.ts

@@ -19,4 +19,3 @@ import { type GeneratedMcpConfig, type GeneratorOptions } from "./types.js";
  */
 export declare const SPEC_VERSION = "codex-2026-04-18";
 export declare function generateCodexConfig(allServers: readonly McpServer[], options: GeneratorOptions): GeneratedMcpConfig;
-//# sourceMappingURL=codex.d.ts.map

package/dist/services/mcp/generators/codex.js

@@ -99,4 +99,3 @@ export function generateCodexConfig(allServers, options) {
         env,
     };
 }
-//# sourceMappingURL=codex.js.map

package/dist/services/mcp/generators/gemini.d.ts

@@ -17,4 +17,3 @@ import { type GeneratedMcpConfig, type GeneratorOptions } from "./types.js";
  */
 export declare const SPEC_VERSION = "gemini-2026-04-18";
 export declare function generateGeminiConfig(allServers: readonly McpServer[], options: GeneratorOptions): GeneratedMcpConfig;
-//# sourceMappingURL=gemini.d.ts.map

package/dist/services/mcp/generators/gemini.js

@@ -94,4 +94,3 @@ export function generateGeminiConfig(allServers, options) {
         env: buildEnvFromServers(servers, options, allKeys),
     };
 }
-//# sourceMappingURL=gemini.js.map

package/dist/services/mcp/generators/index.d.ts

@@ -14,7 +14,7 @@ export declare const GENERATOR_SPEC_VERSIONS: {
     readonly claude: "claude-2026-04-18";
     readonly codex: "codex-2026-04-18";
     readonly gemini: "gemini-2026-04-18";
+    readonly opencode: "deferred";
 };
 /** Dispatch to the generator for the given backend. */
 export declare function generateMcpConfig(backend: BackendId, servers: readonly McpServer[], options: GeneratorOptions): GeneratedMcpConfig;
-//# sourceMappingURL=index.d.ts.map

package/dist/services/mcp/generators/index.js

@@ -10,6 +10,7 @@ export const GENERATOR_SPEC_VERSIONS = {
     claude: CLAUDE_SPEC_VERSION,
     codex: CODEX_SPEC_VERSION,
     gemini: GEMINI_SPEC_VERSION,
+    opencode: "deferred",
 };
 /** Dispatch to the generator for the given backend. */
 export function generateMcpConfig(backend, servers, options) {
@@ -20,10 +21,11 @@ export function generateMcpConfig(backend, servers, options) {
             return generateCodexConfig(servers, options);
         case "gemini":
             return generateGeminiConfig(servers, options);
+        case "opencode":
+            throw new Error("MCP generation for OpenCode is deferred until OpenCode runtime integration is enabled.");
         default: {
             const never = backend;
             throw new Error(`Unsupported backend for MCP generation: ${String(never)}`);
         }
     }
 }
-//# sourceMappingURL=index.js.map

package/dist/services/mcp/generators/types.d.ts

@@ -44,4 +44,3 @@ export declare function scopedEnvVarName(serverId: string, keyName: string): str
  */
 export declare function buildEnvFromServers(servers: readonly McpServer[], options: GeneratorOptions, keySelector: (server: McpServer) => readonly string[]): Record<string, string>;
 export declare function serversForBackend(servers: readonly McpServer[], backend: BackendId): McpServer[];
-//# sourceMappingURL=types.d.ts.map

package/dist/services/mcp/generators/types.js

@@ -37,4 +37,3 @@ export function buildEnvFromServers(servers, options, keySelector) {
 export function serversForBackend(servers, backend) {
     return servers.filter((s) => s.enabled && s.backends.includes(backend));
 }
-//# sourceMappingURL=types.js.map

package/dist/services/mcp/probe.d.ts

@@ -28,4 +28,3 @@ export interface McpProbeOptions {
     now?: () => number;
 }
 export declare function probeMcpServer(server: Pick<McpServer, "id" | "transport" | "command" | "args" | "cwd" | "url" | "envKeys" | "headerKeys">, options: McpProbeOptions): Promise<McpProbeResult>;
-//# sourceMappingURL=probe.d.ts.map

package/dist/services/mcp/probe.js

@@ -104,6 +104,13 @@ async function probeStdio(server, options, timeoutMs) {
         // hidden-window helps avoid a flashing console for child binaries.
         detached: process.platform !== "win32",
         windowsHide: true,
+        // MCP stdio commands are overwhelmingly npx/uvx/pnpm launchers, which
+        // resolve to .cmd/.ps1 batch shims on Windows; those need a shell to
+        // launch (shell:false spawn of a bare `npx` ENOENTs). POSIX keeps
+        // shell:false — bare npx/node resolve via PATH+exec-bit there. Same
+        // win32-gated pattern as scripts/run-node.mjs / bin/aitne.mjs spawns;
+        // the taskkill /T parent-pid walk above reaps the added cmd.exe wrapper.
+        shell: process.platform === "win32",
     });
     let settled = false;
     const stderrBuf = [];
@@ -434,4 +441,3 @@ function createProbeRunner(io) {
         },
     };
 }
-//# sourceMappingURL=probe.js.map

package/dist/services/mcp/registry.d.ts

@@ -81,4 +81,3 @@ export declare function deleteAllMcpSecrets(blobStore: EncryptedBlobStore, serve
  * for probe consumption, which only ever sees one server at a time.
  */
 export declare function resolveMcpSecrets(blobStore: EncryptedBlobStore, server: Pick<McpServer, "id" | "envKeys" | "headerKeys">): Promise<Record<string, string | null>>;
-//# sourceMappingURL=registry.d.ts.map

package/dist/services/mcp/registry.js

@@ -384,4 +384,3 @@ export async function resolveMcpSecrets(blobStore, server) {
     }));
     return out;
 }
-//# sourceMappingURL=registry.js.map

package/dist/services/mcp/risk.d.ts

@@ -76,7 +76,6 @@ export interface BuildMcpDisallowedToolsInput {
  * allowlisted tools. The known trade-off: a tool added to the server after
  * the last probe is NOT in this list, so the autonomous strip is weaker
  * than a wildcard would be. Operationally the user re-probes after
- * changing tools; the `rules/mcp.md` policy layer is the soft backstop.
+ * changing tools; the `policies/mcp.md` policy layer is the soft backstop.
  */
 export declare function buildMcpDisallowedTools(input: BuildMcpDisallowedToolsInput): string[];
-//# sourceMappingURL=risk.d.ts.map

package/dist/services/mcp/risk.js

@@ -98,7 +98,7 @@ export function parseMcpToolName(name) {
  * allowlisted tools. The known trade-off: a tool added to the server after
  * the last probe is NOT in this list, so the autonomous strip is weaker
  * than a wildcard would be. Operationally the user re-probes after
- * changing tools; the `rules/mcp.md` policy layer is the soft backstop.
+ * changing tools; the `policies/mcp.md` policy layer is the soft backstop.
  */
 export function buildMcpDisallowedTools(input) {
     const out = [];
@@ -123,4 +123,3 @@ export function buildMcpDisallowedTools(input) {
     }
     return out;
 }
-//# sourceMappingURL=risk.js.map

package/dist/services/mcp/sdk-observations-server.d.ts

@@ -0,0 +1,59 @@
+/**
+ * In-process SDK MCP server that exposes the `submit_observations` tool
+ * to Claude Code sessions. The tool is a structured-JSON replacement for
+ * `curl -X POST http://localhost:<apiPort>/api/observations/batch …` and
+ * exists for one reason: the Claude Code SDK's bash preflight (`Ae6` in
+ * `cli.js`) flags any command containing a Unicode-whitespace character
+ * (NBSP, ZWS, IDEOGRAPHIC SPACE, BOM, …) as `too-complex` and denies it
+ * under `permissionMode: "dontAsk"`. Mail subjects/snippets from
+ * promotional senders routinely contain those characters, so any
+ * curl-with-inline-JSON path is fragile in a way that can't be fixed
+ * by tweaking the curl pattern, hooks, or retry policy.
+ *
+ * The MCP transport carries the JSON as structured data, never converts it
+ * to a shell command string, and therefore bypasses the preflight
+ * entirely. The handler delegates to {@link processObservationsBatch} so
+ * the per-item validation, flip-lock check, normalization, and recordObservation
+ * loop are identical to the HTTP `/observations/batch` route.
+ *
+ * Gating: the server is constructed once at daemon boot, but its tool
+ * (`mcp__aitne-observations__submit_observations`) is only included in
+ * the per-session `allowedTools` list for the pre-pass
+ * (`composePrePassAllowedTools` adds it for claude backend). Other Claude
+ * sessions cannot invoke it because the SDK's `dontAsk` mode denies any
+ * tool not in `allowedTools`.
+ */
+import type Database from "better-sqlite3";
+import { type McpSdkServerConfigWithInstance } from "@anthropic-ai/claude-agent-sdk";
+/**
+ * Server name surfaced to the SDK. Tools live under
+ * `mcp__<server-name>__<tool-name>` in the agent's view — so the gmail
+ * partial references `mcp__aitne-observations__submit_observations`. The
+ * server name uses an underscore-free `aitne-observations` form so the
+ * derived MCP tool name has exactly one `__` boundary (matches the
+ * convention the SDK uses for `mcp__claude_ai_*` connectors).
+ */
+export declare const OBSERVATIONS_MCP_SERVER_NAME = "aitne-observations";
+/**
+ * Fully-qualified tool name the agent invokes. Exported for
+ * `composePrePassAllowedTools` so the allow-list and the server stay in
+ * lock-step (renaming either side without updating both would silently
+ * deny the tool under dontAsk).
+ */
+export declare const OBSERVATIONS_MCP_TOOL_NAME = "mcp__aitne-observations__submit_observations";
+/**
+ * Construct the in-process MCP server. Returns the SDK's config object,
+ * which is meant to be passed verbatim into `query({ options: {
+ * mcpServers: { [name]: <return value> } } })`.
+ *
+ * The handler is sync-ish (one transaction, no IO beyond SQLite) so the
+ * tool feels instantaneous to the agent and doesn't burn a stream-event
+ * round-trip per observation.
+ *
+ * Errors thrown by `processObservationsBatch` are caught here and
+ * returned as a tool-result text block (the MCP convention). The agent
+ * receives the same `{results, fetched, posted, duplicates, errors}`
+ * envelope as the HTTP route so the partial body's `<fetch_report>`
+ * arithmetic doesn't have to branch on transport.
+ */
+export declare function createObservationsMcpServer(db: Database.Database): McpSdkServerConfigWithInstance;

package/dist/services/mcp/sdk-observations-server.js

@@ -0,0 +1,160 @@
+/**
+ * In-process SDK MCP server that exposes the `submit_observations` tool
+ * to Claude Code sessions. The tool is a structured-JSON replacement for
+ * `curl -X POST http://localhost:<apiPort>/api/observations/batch …` and
+ * exists for one reason: the Claude Code SDK's bash preflight (`Ae6` in
+ * `cli.js`) flags any command containing a Unicode-whitespace character
+ * (NBSP, ZWS, IDEOGRAPHIC SPACE, BOM, …) as `too-complex` and denies it
+ * under `permissionMode: "dontAsk"`. Mail subjects/snippets from
+ * promotional senders routinely contain those characters, so any
+ * curl-with-inline-JSON path is fragile in a way that can't be fixed
+ * by tweaking the curl pattern, hooks, or retry policy.
+ *
+ * The MCP transport carries the JSON as structured data, never converts it
+ * to a shell command string, and therefore bypasses the preflight
+ * entirely. The handler delegates to {@link processObservationsBatch} so
+ * the per-item validation, flip-lock check, normalization, and recordObservation
+ * loop are identical to the HTTP `/observations/batch` route.
+ *
+ * Gating: the server is constructed once at daemon boot, but its tool
+ * (`mcp__aitne-observations__submit_observations`) is only included in
+ * the per-session `allowedTools` list for the pre-pass
+ * (`composePrePassAllowedTools` adds it for claude backend). Other Claude
+ * sessions cannot invoke it because the SDK's `dontAsk` mode denies any
+ * tool not in `allowedTools`.
+ */
+import { z } from "zod";
+import { createSdkMcpServer, tool, } from "@anthropic-ai/claude-agent-sdk";
+import { BATCH_MAX_OBSERVATIONS, processObservationsBatch, } from "../observations-batch.js";
+import { createLogger } from "../../logging.js";
+const logger = createLogger("sdk-observations-mcp");
+/**
+ * Server name surfaced to the SDK. Tools live under
+ * `mcp__<server-name>__<tool-name>` in the agent's view — so the gmail
+ * partial references `mcp__aitne-observations__submit_observations`. The
+ * server name uses an underscore-free `aitne-observations` form so the
+ * derived MCP tool name has exactly one `__` boundary (matches the
+ * convention the SDK uses for `mcp__claude_ai_*` connectors).
+ */
+export const OBSERVATIONS_MCP_SERVER_NAME = "aitne-observations";
+/**
+ * Fully-qualified tool name the agent invokes. Exported for
+ * `composePrePassAllowedTools` so the allow-list and the server stay in
+ * lock-step (renaming either side without updating both would silently
+ * deny the tool under dontAsk).
+ */
+export const OBSERVATIONS_MCP_TOOL_NAME = `mcp__${OBSERVATIONS_MCP_SERVER_NAME}__submit_observations`;
+/** zod schema for a single observation row — mirrors the shapes
+ *  validated by {@link validateBatchItem}. Kept loose on `payload`
+ *  (z.any) because integration partials emit per-kind shapes that
+ *  evolve independently; the daemon validates the structural fields
+ *  here and trusts the rest. */
+const OBSERVATION_ITEM_SCHEMA = {
+    source: z
+        .string()
+        .min(1)
+        .describe("Integration prefix, e.g. 'gmail:<accountId>', 'google_calendar:<calendarId>', 'notion:<dbId>'. Use 'default' for the accountId placeholder when the integration is bound through a single-user MCP connector."),
+    ref: z
+        .string()
+        .min(1)
+        .describe("Stable provider-side id (message id, event id, page id). The daemon dedupes on (source, ref)."),
+    changeType: z
+        .enum(["created", "modified", "deleted"])
+        .default("created")
+        .describe("created | modified | deleted — default created."),
+    actor: z
+        .enum(["agent", "system"])
+        .default("agent")
+        .describe("Who originated the observation. Pre-pass sessions emit 'agent'."),
+    payload: z
+        .any()
+        .describe("Integration-shaped payload. For mail: { kind:'mail', providerId, raw:{ subject, from, snippet, date } }. For calendar: { kind:'calendar', providerId, raw:{ title, start, end, ... } }. For notion: { kind:'notion', raw:{...} }. Other integrations follow their partial's documented shape."),
+};
+/**
+ * Construct the in-process MCP server. Returns the SDK's config object,
+ * which is meant to be passed verbatim into `query({ options: {
+ * mcpServers: { [name]: <return value> } } })`.
+ *
+ * The handler is sync-ish (one transaction, no IO beyond SQLite) so the
+ * tool feels instantaneous to the agent and doesn't burn a stream-event
+ * round-trip per observation.
+ *
+ * Errors thrown by `processObservationsBatch` are caught here and
+ * returned as a tool-result text block (the MCP convention). The agent
+ * receives the same `{results, fetched, posted, duplicates, errors}`
+ * envelope as the HTTP route so the partial body's `<fetch_report>`
+ * arithmetic doesn't have to branch on transport.
+ */
+export function createObservationsMcpServer(db) {
+    return createSdkMcpServer({
+        name: OBSERVATIONS_MCP_SERVER_NAME,
+        version: "1.0.0",
+        tools: [
+            tool("submit_observations", [
+                "Submit a batch of pre-pass observations to the daemon. PREFERRED over",
+                "`curl -X POST http://localhost:<apiPort>/api/observations/batch` because",
+                "the MCP transport bypasses the SDK's bash preflight — Unicode whitespace",
+                "in mail subjects (NBSP, ZWS, IDEOGRAPHIC SPACE) and other shell-fragile",
+                "content land cleanly.",
+                "",
+                "Returns the same envelope as `POST /observations/batch`:",
+                "`{results: [{index, status, source, ref, contentHash?, id?, error?, hint?}],",
+                " fetched, posted, duplicates, errors}`. Per-item `status` values:",
+                "`created` | `modified` | `duplicate` | `flip_locked` | `validation_error`.",
+                "",
+                `Cap: up to ${BATCH_MAX_OBSERVATIONS} items per call. Split larger windows`,
+                "into chunks — the daemon rejects oversized batches with `batch_too_large`.",
+            ].join("\n"), {
+                observations: z
+                    .array(z.object(OBSERVATION_ITEM_SCHEMA))
+                    .min(0)
+                    .max(BATCH_MAX_OBSERVATIONS)
+                    .describe(`Batch of observations to submit. Empty array is a documented no-op (returns fetched=0/posted=0). Max ${BATCH_MAX_OBSERVATIONS} per call.`),
+            }, async ({ observations }) => {
+                // `processObservationsBatch` is the source of truth for both
+                // the empty-batch contract ({fetched:0,posted:0,...} on []) and
+                // the per-item validation / flip-lock / record loop — see its
+                // tests in `services/observations-batch.test.ts`. This MCP
+                // handler is a thin transport wrapper: structured input in,
+                // JSON envelope out, isError on hard failure so the partial's
+                // `<fetch_report>` can branch.
+                try {
+                    const result = processObservationsBatch(db, observations);
+                    logger.info({
+                        count: observations.length,
+                        posted: result.posted,
+                        duplicates: result.duplicates,
+                        errors: result.errors,
+                    }, "Observations batch recorded via SDK MCP tool");
+                    return {
+                        content: [
+                            { type: "text", text: JSON.stringify(result) },
+                        ],
+                    };
+                }
+                catch (err) {
+                    // Hard failures (e.g. SQLite write error) are rare and indicate
+                    // daemon-level breakage. Surface as an MCP `isError` result so
+                    // the agent sees the failure in its tool_use loop AND so the
+                    // partial's `<fetch_report>` can record a `pre-pass-failed`
+                    // row instead of silently posting zero.
+                    const message = err instanceof Error ? err.message : String(err);
+                    logger.error({ err, count: observations.length }, "Observations batch failed via SDK MCP tool");
+                    return {
+                        isError: true,
+                        content: [
+                            {
+                                type: "text",
+                                text: JSON.stringify({
+                                    error: "submit_observations_failed",
+                                    message,
+                                    count: observations.length,
+                                }),
+                            },
+                        ],
+                    };
+                }
+            }),
+        ],
+    });
+}