@aitne/daemon 0.1.8 → 0.1.10

package/dist/services/mail/imap/reconcile-planner.d.ts

@@ -53,4 +53,3 @@ export interface ReconcilePlan {
  * Deterministic and side-effect-free.
  */
 export declare function planImapReconcile(input: ReconcilePlanInput): ReconcilePlan;
-//# sourceMappingURL=reconcile-planner.d.ts.map

package/dist/services/mail/imap/reconcile-planner.js

@@ -49,4 +49,3 @@ export function planImapReconcile(input) {
     }
     return { missingIds, skippedIds };
 }
-//# sourceMappingURL=reconcile-planner.js.map

package/dist/services/mail/imap/reply-mime.d.ts

@@ -21,4 +21,3 @@ export interface BuiltReplyBodies {
 }
 export declare function buildReplyBodies(input: ReplyBodyInput): BuiltReplyBodies;
 export declare function dedupeReferences(references: string[]): string[];
-//# sourceMappingURL=reply-mime.d.ts.map

package/dist/services/mail/imap/reply-mime.js

@@ -74,4 +74,3 @@ function escapeHtml(value) {
         .replaceAll(">", ">")
         .replaceAll('"', """);
 }
-//# sourceMappingURL=reply-mime.js.map

package/dist/services/mail/imap/yahoo-provider.d.ts

@@ -2,4 +2,3 @@ import { ImapProviderBase } from "./imap-provider-base.js";
 export declare class YahooImapProvider extends ImapProviderBase {
     readonly kind: "yahoo";
 }
-//# sourceMappingURL=yahoo-provider.d.ts.map

package/dist/services/mail/imap/yahoo-provider.js

@@ -2,4 +2,3 @@ import { ImapProviderBase } from "./imap-provider-base.js";
 export class YahooImapProvider extends ImapProviderBase {
     kind = "yahoo";
 }
-//# sourceMappingURL=yahoo-provider.js.map

package/dist/services/mail/mail-search.d.ts

@@ -32,4 +32,3 @@ export interface SearchMailOptions {
     limit?: number;
 }
 export declare function searchMail(db: Database.Database, query: string, options?: SearchMailOptions): SearchMailHit[];
-//# sourceMappingURL=mail-search.d.ts.map

package/dist/services/mail/mail-search.js

@@ -56,4 +56,3 @@ export function searchMail(db, query, options = {}) {
         isRead: r.isRead !== 0,
     }));
 }
-//# sourceMappingURL=mail-search.js.map

package/dist/services/mail/outlook/auth-failure-classifier.d.ts

@@ -35,4 +35,3 @@ export declare const TRANSIENT_BACKOFF_THRESHOLD = 10;
  */
 export declare function shouldEscalateToDegraded(consecutiveErrorCount: number, threshold?: number): boolean;
 export declare function effectiveAuthStatus(classified: ClassifiedFailure, consecutiveErrorCount: number): AuthStatus | null;
-//# sourceMappingURL=auth-failure-classifier.d.ts.map

package/dist/services/mail/outlook/auth-failure-classifier.js

@@ -88,4 +88,3 @@ export function effectiveAuthStatus(classified, consecutiveErrorCount) {
         return "degraded";
     return null;
 }
-//# sourceMappingURL=auth-failure-classifier.js.map

package/dist/services/mail/outlook/client-config.d.ts

@@ -31,4 +31,3 @@ export declare const OUTLOOK_SCOPES: readonly string[];
 export declare const OUTLOOK_LOOPBACK_REDIRECT_HOST = "127.0.0.1";
 export declare const OUTLOOK_LOOPBACK_REDIRECT_PATH = "/callback";
 export declare function buildLoopbackRedirectUri(port: number): string;
-//# sourceMappingURL=client-config.d.ts.map

package/dist/services/mail/outlook/client-config.js

@@ -55,4 +55,3 @@ export const OUTLOOK_LOOPBACK_REDIRECT_PATH = "/callback";
 export function buildLoopbackRedirectUri(port) {
     return `http://${OUTLOOK_LOOPBACK_REDIRECT_HOST}:${port}${OUTLOOK_LOOPBACK_REDIRECT_PATH}`;
 }
-//# sourceMappingURL=client-config.js.map

package/dist/services/mail/outlook/delta-cursor.d.ts

@@ -63,4 +63,3 @@ export interface RemovedAnnotation {
 export declare function isRemovedItem(item: RemovedAnnotation): boolean;
 export declare function parseGraphCursorJson(raw: string | null | undefined): GraphCursor | null;
 export declare function serializeGraphCursor(cursor: GraphCursor): string;
-//# sourceMappingURL=delta-cursor.d.ts.map

package/dist/services/mail/outlook/delta-cursor.js

@@ -82,4 +82,3 @@ export function parseGraphCursorJson(raw) {
 export function serializeGraphCursor(cursor) {
     return JSON.stringify(cursor);
 }
-//# sourceMappingURL=delta-cursor.js.map

package/dist/services/mail/outlook/graph-client.d.ts

@@ -95,4 +95,3 @@ export declare class GraphClient {
     private executeWithRetries;
 }
 export {};
-//# sourceMappingURL=graph-client.d.ts.map

package/dist/services/mail/outlook/graph-client.js

@@ -195,4 +195,3 @@ function safeParseJson(text) {
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
-//# sourceMappingURL=graph-client.js.map

package/dist/services/mail/outlook/msal-app-factory.d.ts

@@ -17,4 +17,3 @@ export declare function createBootstrapMsalApp(clientConfig: OutlookClientConfig
  * per-account blob on every acquireTokenSilent — MSAL handles refresh.
  */
 export declare function createRuntimeMsalApp(clientConfig: OutlookClientConfig, accountId: string, blobStore: EncryptedBlobStore): PublicClientApplication;
-//# sourceMappingURL=msal-app-factory.d.ts.map

package/dist/services/mail/outlook/msal-app-factory.js

@@ -59,4 +59,3 @@ export function createRuntimeMsalApp(clientConfig, accountId, blobStore) {
     };
     return new PublicClientApplication(config);
 }
-//# sourceMappingURL=msal-app-factory.js.map

package/dist/services/mail/outlook/msal-cache-plugin.d.ts

@@ -16,4 +16,3 @@ export declare class EncryptedBlobCachePlugin implements ICachePlugin {
     beforeCacheAccess(context: TokenCacheContext): Promise<void>;
     afterCacheAccess(context: TokenCacheContext): Promise<void>;
 }
-//# sourceMappingURL=msal-cache-plugin.d.ts.map

package/dist/services/mail/outlook/msal-cache-plugin.js

@@ -27,4 +27,3 @@ export class EncryptedBlobCachePlugin {
         }
     }
 }
-//# sourceMappingURL=msal-cache-plugin.js.map

package/dist/services/mail/outlook/oauth-device-code.d.ts

@@ -23,4 +23,3 @@ export interface DeviceCodeOAuthResult {
  * the eventual AuthenticationResult.
  */
 export declare function runDeviceCodeOAuth(deps: DeviceCodeOAuthDeps): Promise<DeviceCodeOAuthResult>;
-//# sourceMappingURL=oauth-device-code.d.ts.map

package/dist/services/mail/outlook/oauth-device-code.js

@@ -29,4 +29,3 @@ export async function runDeviceCodeOAuth(deps) {
         email: authResult.account.username,
     };
 }
-//# sourceMappingURL=oauth-device-code.js.map

package/dist/services/mail/outlook/oauth-loopback.d.ts

@@ -38,4 +38,3 @@ export interface LoopbackOAuthDeps {
  * is single-use and validated via constant-time-ish equality.
  */
 export declare function runLoopbackOAuth(deps: LoopbackOAuthDeps): Promise<LoopbackOAuthResult>;
-//# sourceMappingURL=oauth-loopback.d.ts.map

package/dist/services/mail/outlook/oauth-loopback.js

@@ -220,4 +220,3 @@ async function defaultOpenBrowser(url) {
     const open = (await import("open")).default;
     await open(url);
 }
-//# sourceMappingURL=oauth-loopback.js.map

package/dist/services/mail/outlook/outlook-provider.d.ts

@@ -97,4 +97,3 @@ export declare class OutlookGraphProvider implements MailProvider {
     private toFullMessage;
     private toSummary;
 }
-//# sourceMappingURL=outlook-provider.d.ts.map

package/dist/services/mail/outlook/outlook-provider.js

@@ -616,4 +616,3 @@ function addressFromGraph(raw) {
 function escapeODataLiteral(value) {
     return value.replace(/'/g, "''");
 }
-//# sourceMappingURL=outlook-provider.js.map

package/dist/services/mail/outlook/query-translator.d.ts

@@ -7,4 +7,3 @@ export interface TranslateOptions {
     now?: () => Date;
 }
 export declare function translateQueryFilters(q: string | null, opts?: TranslateOptions): QueryTranslation;
-//# sourceMappingURL=query-translator.d.ts.map

package/dist/services/mail/outlook/query-translator.js

@@ -100,4 +100,3 @@ function isoDaysAgo(days, now) {
 function escapeOdata(value) {
     return value.replaceAll("'", "''");
 }
-//# sourceMappingURL=query-translator.js.map

package/dist/services/mail/provider.d.ts

@@ -264,4 +264,3 @@ export declare class MailOperationNotSupportedError extends Error {
     readonly code = "not_implemented";
     constructor(kind: MailProviderKind, operation: string, reason?: string);
 }
-//# sourceMappingURL=provider.d.ts.map

package/dist/services/mail/provider.js

@@ -31,4 +31,3 @@ export class MailOperationNotSupportedError extends Error {
         this.name = "MailOperationNotSupportedError";
     }
 }
-//# sourceMappingURL=provider.js.map

package/dist/services/mail/query-utils.d.ts

@@ -10,4 +10,3 @@
  * silent skip and a `unsupported_token:<raw>` warning.
  */
 export declare function parseDays(input: string): number | null;
-//# sourceMappingURL=query-utils.d.ts.map

package/dist/services/mail/query-utils.js

@@ -15,4 +15,3 @@ export function parseDays(input) {
         return null;
     return Number.parseInt(match[1], 10);
 }
-//# sourceMappingURL=query-utils.js.map

package/dist/services/mail-classifier.d.ts

@@ -22,4 +22,3 @@ export declare function toClassifierInput(msg: MailMessageSummary, body?: string
 export declare function classifyMailMessage(msg: MailMessageSummary, body?: string | null): ClassifiedEmail;
 export declare function extractMailTravel(msg: MailMessage): TravelExtraction | null;
 export declare function processMailBatch(messages: Iterable<MailMessageSummary>): ReturnType<typeof processEmailBatch>;
-//# sourceMappingURL=mail-classifier.d.ts.map

package/dist/services/mail-classifier.js

@@ -49,4 +49,3 @@ export function processMailBatch(messages) {
     const inputs = Array.from(messages, (m) => toClassifierInput(m));
     return processEmailBatch(inputs);
 }
-//# sourceMappingURL=mail-classifier.js.map

package/dist/services/mail-ingestion.d.ts

@@ -136,4 +136,3 @@ export declare function recordParseFailure(db: Database.Database, failure: {
  * download route falls back to GmailService for those rows.
  */
 export declare function insertReceipt(db: Database.Database, providerMsgId: string, attachment: AttachmentLike, category: string, accountId: string | null): boolean;
-//# sourceMappingURL=mail-ingestion.d.ts.map

package/dist/services/mail-ingestion.js

@@ -220,4 +220,3 @@ export function insertReceipt(db, providerMsgId, attachment, category, accountId
         throw err;
     }
 }
-//# sourceMappingURL=mail-ingestion.js.map

package/dist/services/mcp/auto-probe.d.ts

@@ -73,4 +73,3 @@ export declare class McpAutoProbe implements Observer {
     private runTick;
     private probeOne;
 }
-//# sourceMappingURL=auto-probe.d.ts.map

package/dist/services/mcp/auto-probe.js

@@ -144,4 +144,3 @@ export class McpAutoProbe {
         }
     }
 }
-//# sourceMappingURL=auto-probe.js.map

package/dist/services/mcp/generators/claude.d.ts

@@ -15,4 +15,3 @@ import { type GeneratedMcpConfig, type GeneratorOptions } from "./types.js";
  */
 export declare const SPEC_VERSION = "claude-2026-04-18";
 export declare function generateClaudeConfig(allServers: readonly McpServer[], options: GeneratorOptions): GeneratedMcpConfig;
-//# sourceMappingURL=claude.d.ts.map

package/dist/services/mcp/generators/claude.js

@@ -87,4 +87,3 @@ export function generateClaudeConfig(allServers, options) {
         env: buildEnvFromServers(servers, options, allKeys),
     };
 }
-//# sourceMappingURL=claude.js.map

package/dist/services/mcp/generators/codex.d.ts

@@ -19,4 +19,3 @@ import { type GeneratedMcpConfig, type GeneratorOptions } from "./types.js";
  */
 export declare const SPEC_VERSION = "codex-2026-04-18";
 export declare function generateCodexConfig(allServers: readonly McpServer[], options: GeneratorOptions): GeneratedMcpConfig;
-//# sourceMappingURL=codex.d.ts.map

package/dist/services/mcp/generators/codex.js

@@ -99,4 +99,3 @@ export function generateCodexConfig(allServers, options) {
         env,
     };
 }
-//# sourceMappingURL=codex.js.map

package/dist/services/mcp/generators/gemini.d.ts

@@ -17,4 +17,3 @@ import { type GeneratedMcpConfig, type GeneratorOptions } from "./types.js";
  */
 export declare const SPEC_VERSION = "gemini-2026-04-18";
 export declare function generateGeminiConfig(allServers: readonly McpServer[], options: GeneratorOptions): GeneratedMcpConfig;
-//# sourceMappingURL=gemini.d.ts.map

package/dist/services/mcp/generators/gemini.js

@@ -94,4 +94,3 @@ export function generateGeminiConfig(allServers, options) {
         env: buildEnvFromServers(servers, options, allKeys),
     };
 }
-//# sourceMappingURL=gemini.js.map

package/dist/services/mcp/generators/index.d.ts

@@ -18,4 +18,3 @@ export declare const GENERATOR_SPEC_VERSIONS: {
 };
 /** Dispatch to the generator for the given backend. */
 export declare function generateMcpConfig(backend: BackendId, servers: readonly McpServer[], options: GeneratorOptions): GeneratedMcpConfig;
-//# sourceMappingURL=index.d.ts.map

package/dist/services/mcp/generators/index.js

@@ -29,4 +29,3 @@ export function generateMcpConfig(backend, servers, options) {
         }
     }
 }
-//# sourceMappingURL=index.js.map

package/dist/services/mcp/generators/types.d.ts

@@ -44,4 +44,3 @@ export declare function scopedEnvVarName(serverId: string, keyName: string): str
  */
 export declare function buildEnvFromServers(servers: readonly McpServer[], options: GeneratorOptions, keySelector: (server: McpServer) => readonly string[]): Record<string, string>;
 export declare function serversForBackend(servers: readonly McpServer[], backend: BackendId): McpServer[];
-//# sourceMappingURL=types.d.ts.map

package/dist/services/mcp/generators/types.js

@@ -37,4 +37,3 @@ export function buildEnvFromServers(servers, options, keySelector) {
 export function serversForBackend(servers, backend) {
     return servers.filter((s) => s.enabled && s.backends.includes(backend));
 }
-//# sourceMappingURL=types.js.map

package/dist/services/mcp/probe.d.ts

@@ -28,4 +28,3 @@ export interface McpProbeOptions {
     now?: () => number;
 }
 export declare function probeMcpServer(server: Pick<McpServer, "id" | "transport" | "command" | "args" | "cwd" | "url" | "envKeys" | "headerKeys">, options: McpProbeOptions): Promise<McpProbeResult>;
-//# sourceMappingURL=probe.d.ts.map

package/dist/services/mcp/probe.js

@@ -3,6 +3,7 @@ import { mkdir } from "node:fs/promises";
 import { join } from "node:path";
 import { randomUUID } from "node:crypto";
 import { toSafeErrorMessage } from "../../logging.js";
+import { resolveWin32Invocation } from "../../core/backends/cli-utils.js";
 const PROBE_TIMEOUT_MS = 10_000;
 /**
  * MCP protocol version we send in `initialize`. The three official clients
@@ -93,7 +94,32 @@ async function probeStdio(server, options, timeoutMs) {
     // required arrays, but the DB row can carry `args` as null, so only that
     // path is genuinely observable from tests.
     const env = buildStdioEnv(server.envKeys, options.secrets);
-    const child = spawn(server.command, server.args ?? [], {
+    // MCP stdio commands are overwhelmingly npx/uvx/pnpm launchers, which
+    // resolve to .cmd/.ps1 batch shims on Windows. The earlier stopgap used
+    // `shell: process.platform === "win32"`, which let cmd.exe re-parse
+    // metacharacters in the registered command/args (a corruption + injection
+    // surface for any DB-registered server whose command/args contain
+    // %VAR%/&/|/^). Instead route through the same injection-safe path
+    // runLineCommand uses: resolve the bare name via PATHEXT and launch a
+    // resolved `.cmd`/`.bat` through an explicit, hand-escaped `cmd.exe`
+    // wrapper with windowsVerbatimArguments. POSIX is byte-identical
+    // (resolveWin32Invocation is win32-only; the block below never runs, and
+    // windowsVerbatimArguments:false is inert there). The taskkill /T
+    // parent-pid walk in killTree still reaps the added cmd.exe wrapper.
+    let spawnCommand = server.command;
+    let spawnArgs = server.args ?? [];
+    let windowsVerbatim = false;
+    /* c8 ignore start — Windows-only .cmd/.bat shim resolution, untestable on POSIX CI. */
+    if (process.platform === "win32") {
+        const win = resolveWin32Invocation(server.command, server.args ?? []);
+        if (win) {
+            spawnCommand = win.command;
+            spawnArgs = win.args;
+            windowsVerbatim = win.windowsVerbatimArguments;
+        }
+    }
+    /* c8 ignore stop */
+    const child = spawn(spawnCommand, spawnArgs, {
         cwd: server.cwd ?? sandboxCwd,
         env,
         stdio: ["pipe", "pipe", "pipe"],
@@ -104,6 +130,9 @@ async function probeStdio(server, options, timeoutMs) {
         // hidden-window helps avoid a flashing console for child binaries.
         detached: process.platform !== "win32",
         windowsHide: true,
+        // The cmd.exe wrapper's args are pre-escaped for cmd.exe; tell Node not
+        // to re-quote them. Inert/false on POSIX and the direct-.exe path.
+        windowsVerbatimArguments: windowsVerbatim,
     });
     let settled = false;
     const stderrBuf = [];
@@ -434,4 +463,3 @@ function createProbeRunner(io) {
         },
     };
 }
-//# sourceMappingURL=probe.js.map

package/dist/services/mcp/registry.d.ts

@@ -81,4 +81,3 @@ export declare function deleteAllMcpSecrets(blobStore: EncryptedBlobStore, serve
  * for probe consumption, which only ever sees one server at a time.
  */
 export declare function resolveMcpSecrets(blobStore: EncryptedBlobStore, server: Pick<McpServer, "id" | "envKeys" | "headerKeys">): Promise<Record<string, string | null>>;
-//# sourceMappingURL=registry.d.ts.map

package/dist/services/mcp/registry.js

@@ -384,4 +384,3 @@ export async function resolveMcpSecrets(blobStore, server) {
     }));
     return out;
 }
-//# sourceMappingURL=registry.js.map

package/dist/services/mcp/risk.d.ts

@@ -76,7 +76,6 @@ export interface BuildMcpDisallowedToolsInput {
  * allowlisted tools. The known trade-off: a tool added to the server after
  * the last probe is NOT in this list, so the autonomous strip is weaker
  * than a wildcard would be. Operationally the user re-probes after
- * changing tools; the `rules/mcp.md` policy layer is the soft backstop.
+ * changing tools; the `policies/mcp.md` policy layer is the soft backstop.
  */
 export declare function buildMcpDisallowedTools(input: BuildMcpDisallowedToolsInput): string[];
-//# sourceMappingURL=risk.d.ts.map

package/dist/services/mcp/risk.js

@@ -98,7 +98,7 @@ export function parseMcpToolName(name) {
  * allowlisted tools. The known trade-off: a tool added to the server after
  * the last probe is NOT in this list, so the autonomous strip is weaker
  * than a wildcard would be. Operationally the user re-probes after
- * changing tools; the `rules/mcp.md` policy layer is the soft backstop.
+ * changing tools; the `policies/mcp.md` policy layer is the soft backstop.
  */
 export function buildMcpDisallowedTools(input) {
     const out = [];
@@ -123,4 +123,3 @@ export function buildMcpDisallowedTools(input) {
     }
     return out;
 }
-//# sourceMappingURL=risk.js.map

package/dist/services/mcp/sdk-observations-server.d.ts

@@ -57,4 +57,3 @@ export declare const OBSERVATIONS_MCP_TOOL_NAME = "mcp__aitne-observations__subm
  * arithmetic doesn't have to branch on transport.
  */
 export declare function createObservationsMcpServer(db: Database.Database): McpSdkServerConfigWithInstance;
-//# sourceMappingURL=sdk-observations-server.d.ts.map

package/dist/services/mcp/sdk-observations-server.js

@@ -158,4 +158,3 @@ export function createObservationsMcpServer(db) {
         ],
     });
 }
-//# sourceMappingURL=sdk-observations-server.js.map

package/dist/services/mcp/session-materializer.d.ts

@@ -44,7 +44,7 @@ export interface MaterializeMcpParams {
     /**
      * Resolved vault context dir (result of `getContextDir(config)`). Used
      * only to decide whether the agent-facing MCP section should mention
-     * `rules/mcp.md`. Optional so tests and internal callers without a
+     * `policies/mcp.md`. Optional so tests and internal callers without a
      * config handle can still materialize; when omitted the reference is
      * silently dropped instead of pointing at a non-existent file.
      */
@@ -84,7 +84,7 @@ export interface RenderMcpSectionOptions {
      */
     autonomous?: boolean;
     /**
-     * Whether `<contextDir>/rules/mcp.md` exists. When false, the agent-facing
+     * Whether `<contextDir>/policies/mcp.md` exists. When false, the agent-facing
      * section no longer tells the model to consult a file that doesn't exist —
      * prevents spurious `curl` hunts in DMs and routines.
      */
@@ -120,4 +120,3 @@ export { scopedEnvVarName };
  * it is tightly coupled to the generator's placeholder format.
  */
 export declare function resolvePlaceholdersDeep<T>(value: T, env: Record<string, string>): T;
-//# sourceMappingURL=session-materializer.d.ts.map

package/dist/services/mcp/session-materializer.js

@@ -114,7 +114,7 @@ export async function materializeMcpForSession(params) {
     const absConfigPath = join(params.sessionDir, generated.path);
     writeAtomic(absConfigPath, generated.contents);
     const rulesFileExists = params.contextDir
-        ? existsSync(join(params.contextDir, "rules/mcp.md"))
+        ? existsSync(join(params.contextDir, "policies/mcp.md"))
         : false;
     appendMcpSection(params.sessionDir, params.backendId, forBackend, {
         backendId: params.backendId,
@@ -220,7 +220,7 @@ export function renderMcpSection(servers, options = {}) {
         ? `The following MCP servers are enabled for this session (backend: \`${backendId}\`).`
         : "The following MCP servers are enabled.");
     if (rulesFileExists) {
-        push("Consult `rules/mcp.md` for per-server usage rules.");
+        push("Consult `policies/mcp.md` for per-server usage rules.");
     }
     push("");
     let truncatedServers = 0;
@@ -362,4 +362,3 @@ export function resolvePlaceholdersDeep(value, env) {
     }
     return value;
 }
-//# sourceMappingURL=session-materializer.js.map

package/dist/services/mcp/tool-audit.d.ts

@@ -50,4 +50,3 @@ export declare function listMcpToolCalls(db: Database.Database, serverId: string
  * string), so comparison uses integer arithmetic rather than datetime().
  */
 export declare function pruneOldMcpToolCalls(db: Database.Database, days: number): number;
-//# sourceMappingURL=tool-audit.d.ts.map

package/dist/services/mcp/tool-audit.js

@@ -71,4 +71,3 @@ export function pruneOldMcpToolCalls(db, days) {
         return 0;
     }
 }
-//# sourceMappingURL=tool-audit.js.map

package/dist/services/mcp/types.d.ts

@@ -86,4 +86,3 @@ export declare function validateTransportShape(input: Pick<McpServer, "transport
 };
 /** Encrypted blob name convention for a per-server secret value. */
 export declare function mcpSecretBlobName(serverId: string, keyName: string): string;
-//# sourceMappingURL=types.d.ts.map

package/dist/services/mcp/types.js

@@ -91,4 +91,3 @@ export function validateTransportShape(input) {
 export function mcpSecretBlobName(serverId, keyName) {
     return `mcp:${serverId}:${keyName}`;
 }
-//# sourceMappingURL=types.js.map

package/dist/services/notion.d.ts

@@ -113,9 +113,7 @@ export declare class NotionService {
      * `maxPages` defaults to {@link NOTION_DEFAULT_MAX_PAGES} so a Notion
      * data source with millions of edited rows since the seeded cursor
      * (e.g. cold-cursor on a flip back to direct mode) cannot pin the
-     * poller forever — the audit (2026-05-17) found this loop unbounded
-     * and composed with the missing PollGuard on NotionPoller for an
-     * uncapped fan-out.
+     * poller indefinitely walking the backlog.
      */
     queryUpdatedSince(databaseId: string, lastEditedTime: string, opts?: {
         inTrash?: boolean;
@@ -149,4 +147,3 @@ export declare class NotionService {
 }
 export declare function simplifyPage(page: PageObjectResponse): SimplifiedPage;
 export declare function flattenProperties(props: PageObjectResponse["properties"]): Record<string, unknown>;
-//# sourceMappingURL=notion.d.ts.map

package/dist/services/notion.js

@@ -121,9 +121,7 @@ export class NotionService {
      * `maxPages` defaults to {@link NOTION_DEFAULT_MAX_PAGES} so a Notion
      * data source with millions of edited rows since the seeded cursor
      * (e.g. cold-cursor on a flip back to direct mode) cannot pin the
-     * poller forever — the audit (2026-05-17) found this loop unbounded
-     * and composed with the missing PollGuard on NotionPoller for an
-     * uncapped fan-out.
+     * poller indefinitely walking the backlog.
      */
     async *queryUpdatedSince(databaseId, lastEditedTime, opts = {}) {
         const client = this.requireClient();
@@ -386,4 +384,3 @@ function buildMarkdownUpdateArgs(pageId, mode) {
             };
     }
 }
-//# sourceMappingURL=notion.js.map

package/dist/services/observations-batch.d.ts

@@ -18,12 +18,11 @@
 `,
  * ` `, ` `, `　`, ``) as `too-complex` and falls through
  * to ask-mode — which under `permissionMode: "dontAsk"` is denied. Mail
- * subjects/snippets from promotional senders (Amazon, marketing lists) and
- * Japanese content routinely contain these characters, which produced a
- * deterministic gmail pre-pass failure on 2026-05-18 (3 attempts, ~$0.16
- * burned, visible as `budget-cap`). The in-process MCP tool sends
- * observations as structured JSON over the MCP transport, completely
- * bypassing the shell parser.
+ * subjects/snippets from promotional senders and non-ASCII content
+ * routinely contain these characters, producing deterministic pre-pass
+ * failures (visible as `budget-cap` after retries). The in-process MCP
+ * tool sends observations as structured JSON over the MCP transport,
+ * completely bypassing the shell parser.
  */
 import type Database from "better-sqlite3";
 import { type IntegrationKey } from "@aitne/shared";
@@ -58,9 +57,9 @@ export interface ProcessBatchResult {
  */
 export declare function inferIntegrationKeyFromSource(source: string): IntegrationKey | null;
 /**
- * HOURLY_CHECK_GATE_REDESIGN_PLAN.md Phase 3 — normalize pre-pass mail
- * payloads at the ingest chokepoint. See the longer comment in the route
- * for the full rationale; the rules:
+ * Normalize pre-pass mail payloads at the ingest chokepoint so the
+ * hourly-check gate can read a canonical shape regardless of mode. See
+ * HOURLY_CHECK_GATE_REDESIGN_PLAN.md for the full rationale; the rules:
  *   - mail integration source AND `payload.raw.from` is a string → set
  *     `is_read = 0` and `from_email = <lowercased extracted address>`
  *     (unless already present, in which case respect the caller).
@@ -97,4 +96,3 @@ export declare function validateBatchItem(item: unknown, index: number): Validat
  */
 export declare function processObservationsBatch(db: Database.Database, observations: readonly unknown[]): ProcessBatchResult;
 export {};
-//# sourceMappingURL=observations-batch.d.ts.map

package/dist/services/observations-batch.js

@@ -18,12 +18,11 @@
 `,
  * ` `, ` `, `　`, ``) as `too-complex` and falls through
  * to ask-mode — which under `permissionMode: "dontAsk"` is denied. Mail
- * subjects/snippets from promotional senders (Amazon, marketing lists) and
- * Japanese content routinely contain these characters, which produced a
- * deterministic gmail pre-pass failure on 2026-05-18 (3 attempts, ~$0.16
- * burned, visible as `budget-cap`). The in-process MCP tool sends
- * observations as structured JSON over the MCP transport, completely
- * bypassing the shell parser.
+ * subjects/snippets from promotional senders and non-ASCII content
+ * routinely contain these characters, producing deterministic pre-pass
+ * failures (visible as `budget-cap` after retries). The in-process MCP
+ * tool sends observations as structured JSON over the MCP transport,
+ * completely bypassing the shell parser.
  */
 import { INTEGRATION_DESCRIPTORS, INTEGRATION_KEYS, isIntegrationKey, } from "@aitne/shared";
 import { readIntegrationFlipLock } from "../core/integration-lifecycle.js";
@@ -65,9 +64,9 @@ function extractEmailAddress(raw) {
     return (match[1] ?? match[2] ?? "").trim().toLowerCase() || null;
 }
 /**
- * HOURLY_CHECK_GATE_REDESIGN_PLAN.md Phase 3 — normalize pre-pass mail
- * payloads at the ingest chokepoint. See the longer comment in the route
- * for the full rationale; the rules:
+ * Normalize pre-pass mail payloads at the ingest chokepoint so the
+ * hourly-check gate can read a canonical shape regardless of mode. See
+ * HOURLY_CHECK_GATE_REDESIGN_PLAN.md for the full rationale; the rules:
  *   - mail integration source AND `payload.raw.from` is a string → set
  *     `is_read = 0` and `from_email = <lowercased extracted address>`
  *     (unless already present, in which case respect the caller).
@@ -255,4 +254,3 @@ export function processObservationsBatch(db, observations) {
         errors: errorCount,
     };
 }
-//# sourceMappingURL=observations-batch.js.map

package/dist/services/obsidian.d.ts

@@ -113,4 +113,3 @@ export declare class ObsidianService {
     /** Parse the CLI search output into structured results */
     private parseSearchResult;
 }
-//# sourceMappingURL=obsidian.d.ts.map

package/dist/services/obsidian.js

@@ -302,4 +302,3 @@ export class ObsidianService {
         return results;
     }
 }
-//# sourceMappingURL=obsidian.js.map