@datasynx/agentic-crm 0.1.0 → 1.0.0

package/dist/mcp.cjs

@@ -1,10 +1,12 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-DakpK96I.cjs");
-const require_session_store = require("./session-store-B0QZE8Bx.cjs");
+const require_session_store = require("./session-store-yfwnj0OC.cjs");
+const require_atomic_write = require("./atomic-write-BYmF-ThH.cjs");
 const require_write_queue = require("./write-queue-BDolUxfs.cjs");
-const require_interactions_writer = require("./interactions-writer-CrPStUll.cjs");
-const require_pipeline_writer = require("./pipeline-writer-N2omexxp.cjs");
-const require_llm = require("./llm-iijeXmgq.cjs");
+const require_interactions_writer = require("./interactions-writer-a2yzBd7T.cjs");
+const require_logger = require("./logger-BkInaGoV.cjs");
+const require_pipeline_writer = require("./pipeline-writer-B1tRAhuD.cjs");
+const require_llm = require("./llm-CXycmEl9.cjs");
 let path = require("path");
 path = require_chunk.__toESM(path, 1);
 let fs = require("fs");
@@ -63,11 +65,10 @@ async function readSubscriptions(dataDir) {
 async function writeSubscriptions(dataDir, subs) {
 	const filePath = subscriptionsPath(dataDir);
 	fs.default.mkdirSync(path.default.dirname(filePath), { recursive: true });
-	const file = {
+	require_session_store.writeJsonFile(filePath, {
 		subscriptions: subs,
 		updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-	};
-	fs.default.writeFileSync(filePath, JSON.stringify(file, null, 2), "utf-8");
+	});
 }
 function expiresAtForProvider(provider) {
 	if (provider === "gmail") return new Date(Date.now() + 10080 * 60 * 1e3).toISOString();
@@ -98,23 +99,15 @@ function getSyncStatePath(dataDir) {
 	return path.default.join(dataDir, ".agentic", "sync-state.json");
 }
 function readSyncState(dataDir) {
-	const filePath = getSyncStatePath(dataDir);
-	if (!fs.default.existsSync(filePath)) return {};
-	try {
-		return JSON.parse(fs.default.readFileSync(filePath, "utf-8"));
-	} catch {
-		return {};
-	}
+	return require_session_store.readJsonFile(getSyncStatePath(dataDir), {});
 }
 function updateSlugSyncState(dataDir, slug, update) {
-	const filePath = getSyncStatePath(dataDir);
-	fs.default.mkdirSync(path.default.dirname(filePath), { recursive: true });
 	const state = readSyncState(dataDir);
 	state[slug] = {
 		...state[slug],
 		...update
 	};
-	fs.default.writeFileSync(filePath, JSON.stringify(state, null, 2), "utf-8");
+	require_session_store.writeJsonFile(getSyncStatePath(dataDir), state);
 }
 function getLastGmailSync(dataDir, slug) {
 	const ts = readSyncState(dataDir)[slug]?.lastGmailSync;
@@ -456,6 +449,7 @@ Config: \`.agentic/rbac.json\` | Actor: \`DXCRM_ACTOR\` env var
 | list_backups | List available backups with date, size, verification status, and customer count | any |
 | trigger_sync | Force immediate Gmail sync for one or all customers | rep+ |
 | get_audit_log | Read audit log — all write operations with actor, tool, customer | admin |
+| get_logs | Query/aggregate the structured application log (level, component, errors) | admin |
 | define_custom_object | Define a runtime custom object type with typed fields (no migration) | admin |
 | create_record | Create a record of a custom object (validated against its schema) | rep+ |
 | list_records | List records of a custom object | any |
@@ -1330,6 +1324,16 @@ function registerGetActiveSession(server) {
 	}, async () => handleGetActiveSession());
 }
 //#endregion
+//#region src/core/regex.ts
+/**
+* Escape a string so it can be embedded safely as a literal inside a `RegExp`.
+* Prevents both broken patterns and ReDoS/injection when interpolating
+* field names, section headers, or other dynamic values into a regex.
+*/
+function escapeRegExp(value) {
+	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//#endregion
 //#region src/core/context-builder.ts
 var context_builder_exports = /* @__PURE__ */ require_chunk.__exportAll({ buildContext: () => buildContext });
 const MAX_INTERACTIONS = 10;
@@ -1345,7 +1349,7 @@ function parsePipelineContent(filePath) {
 	return fs.default.readFileSync(filePath, "utf-8").trim();
 }
 function extractSection(content, sectionName) {
-	const match = new RegExp(`## ${sectionName}([\\s\\S]*?)(?=^## |$)`, "m").exec(content);
+	const match = new RegExp(`## ${escapeRegExp(sectionName)}([\\s\\S]*?)(?=^## |$)`, "m").exec(content);
 	return match ? (match[1] ?? "").trim() : "";
 }
 async function buildContext(dataDir, slug) {
@@ -1422,7 +1426,7 @@ async function buildContext(dataDir, slug) {
 }
 //#endregion
 //#region src/mcp/tools/get-customer-context.ts
-const DATA_DIR$51 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+const DATA_DIR$52 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
 function triggerOnQuerySync(dataDir, slug) {
 	const auth = getGmailAuth();
 	if (!auth) return;
@@ -1435,7 +1439,7 @@ function triggerOnQuerySync(dataDir, slug) {
 		const sources = JSON.parse(fs.default.readFileSync(sourcesPath, "utf-8"));
 		if (!sources.gmail?.enabled || !sources.gmail.query) return;
 		const query = sources.gmail.query;
-		Promise.resolve().then(() => require("./gmail-sync-hHm9gaWd.cjs")).then(({ syncGmail }) => syncGmail({
+		Promise.resolve().then(() => require("./gmail-sync-GEy3oVvw.cjs")).then(({ syncGmail }) => syncGmail({
 			slug,
 			dataDir,
 			auth,
@@ -1443,7 +1447,7 @@ function triggerOnQuerySync(dataDir, slug) {
 		}).then(() => updateSlugSyncState(dataDir, slug, { lastGmailSync: (/* @__PURE__ */ new Date()).toISOString() })).catch(() => {})).catch(() => {});
 	} catch {}
 }
-async function handleGetCustomerContext(input, dataDir = DATA_DIR$51) {
+async function handleGetCustomerContext(input, dataDir = DATA_DIR$52) {
 	const targetSlug = input.slug ?? require_session_store.getSession()?.customerSlug;
 	if (!targetSlug) return {
 		content: [{
@@ -1559,7 +1563,7 @@ async function indexInLanceDB(dataDir, slug, text, sourceRef, meta) {
 		}]);
 		await table.mergeInsert("source_ref").whenMatchedUpdateAll().whenNotMatchedInsertAll().execute(data);
 	} catch (err) {
-		process.stderr.write(`[lancedb] indexInLanceDB failed: ${err.message}\n`);
+		require_logger.logger.error("lancedb", "indexInLanceDB failed", { error: err.message });
 	}
 }
 async function searchKnowledge(dataDir, slug, query, limit) {
@@ -1579,8 +1583,8 @@ async function searchKnowledge(dataDir, slug, query, limit) {
 }
 //#endregion
 //#region src/mcp/tools/search-customer-knowledge.ts
-const DATA_DIR$50 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleSearchCustomerKnowledge(input, dataDir = DATA_DIR$50) {
+const DATA_DIR$51 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleSearchCustomerKnowledge(input, dataDir = DATA_DIR$51) {
 	const limit = input.limit ?? 5;
 	try {
 		const results = await searchKnowledge(dataDir, input.slug, input.query, limit);
@@ -1628,14 +1632,14 @@ If no results: returns empty array with a helpful sync suggestion.`,
 }
 //#endregion
 //#region src/mcp/tools/list-customers.ts
-const DATA_DIR$49 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+const DATA_DIR$50 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
 function extractLastInteractionDate(interactionsPath) {
 	if (!fs.default.existsSync(interactionsPath)) return void 0;
 	const content = fs.default.readFileSync(interactionsPath, "utf-8");
 	const match = /^## (\d{4}-\d{2}-\d{2})/m.exec(content);
 	return match ? match[1] : void 0;
 }
-async function handleListCustomers(input, dataDir = DATA_DIR$49) {
+async function handleListCustomers(input, dataDir = DATA_DIR$50) {
 	const customersDir = path.default.join(dataDir, "customers");
 	const customers = [];
 	if (!fs.default.existsSync(customersDir)) return { content: [{
@@ -1643,6 +1647,7 @@ async function handleListCustomers(input, dataDir = DATA_DIR$49) {
 		text: JSON.stringify([], null, 2)
 	}] };
 	const entries = fs.default.readdirSync(customersDir);
+	const canSee = require_session_store.customerVisibility(dataDir, process.env["DXCRM_ACTOR"] ?? "system");
 	for (const entry of entries) {
 		const customerDir = path.default.join(customersDir, entry);
 		try {
@@ -1669,7 +1674,7 @@ async function handleListCustomers(input, dataDir = DATA_DIR$49) {
 				const filterLower = input.filter.toLowerCase();
 				if (!(name.toLowerCase().includes(filterLower) || entry.toLowerCase().includes(filterLower) || stage.toLowerCase().includes(filterLower))) continue;
 			}
-			if (!require_session_store.canSeeCustomer(dataDir, process.env["DXCRM_ACTOR"] ?? "system", entry)) continue;
+			if (!canSee(entry)) continue;
 			customers.push(summary);
 		} catch {
 			continue;
@@ -1704,8 +1709,7 @@ async function withJsonFile(filePath, updater) {
 			current = null;
 		}
 		const next = await updater(current);
-		fs.default.mkdirSync(path.default.dirname(filePath), { recursive: true });
-		fs.default.writeFileSync(filePath, JSON.stringify(next, null, 2), "utf-8");
+		require_atomic_write.writeFileAtomic(filePath, JSON.stringify(next, null, 2));
 		return next;
 	});
 }
@@ -1729,7 +1733,7 @@ function readGraph(dataDir, slug) {
 	try {
 		return JSON.parse(fs.default.readFileSync(p, "utf-8"));
 	} catch {
-		process.stderr.write(`[graph] failed to parse ${p} — returning empty graph\n`);
+		require_logger.logger.warn("graph", "failed to parse graph file — returning empty graph", { path: p });
 		return emptyGraph(slug);
 	}
 }
@@ -1982,23 +1986,13 @@ function healthPath(dataDir, slug) {
 	return path.default.join(dataDir, "customers", slug, "health.json");
 }
 function readHealth(dataDir, slug) {
-	const p = healthPath(dataDir, slug);
-	if (!fs.default.existsSync(p)) return null;
-	try {
-		return JSON.parse(fs.default.readFileSync(p, "utf-8"));
-	} catch {
-		return null;
-	}
+	return require_session_store.readJsonFile(healthPath(dataDir, slug), null);
 }
 function writeHealth(dataDir, slug, health) {
-	const p = healthPath(dataDir, slug);
-	const dir = path.default.dirname(p);
-	if (!fs.default.existsSync(dir)) fs.default.mkdirSync(dir, { recursive: true });
-	const updated = {
+	require_session_store.writeJsonFile(healthPath(dataDir, slug), {
 		...health,
 		updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-	};
-	fs.default.writeFileSync(p, JSON.stringify(updated, null, 2), "utf-8");
+	});
 }
 function parseContactInteractions(content) {
 	const blocks = content.split(/(?=^## \d{4}-\d{2}-\d{2})/m).filter((b) => b.trim().length > 0);
@@ -2158,8 +2152,8 @@ async function updateHealthFromInteraction(dataDir, slug) {
 }
 //#endregion
 //#region src/mcp/tools/log-interaction.ts
-const DATA_DIR$48 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleLogInteraction(input, dataDir = DATA_DIR$48) {
+const DATA_DIR$49 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleLogInteraction(input, dataDir = DATA_DIR$49) {
 	const today = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
 	const interactionDate = input.date ?? today;
 	const sourceRef = input.source ?? `agent://log/${Date.now()}`;
@@ -2189,7 +2183,7 @@ async function handleLogInteraction(input, dataDir = DATA_DIR$48) {
 			raw.data.last_touchpoint = interactionDate;
 			let serialized = gray_matter.default.stringify(raw.content, raw.data);
 			serialized = serialized.replace(/^(last_touchpoint:\s*)['"](\d{4}-\d{2}-\d{2})['"]/m, "$1$2");
-			fs.default.writeFileSync(mainFactsPath, serialized, "utf-8");
+			require_atomic_write.writeFileAtomic(mainFactsPath, serialized);
 		} catch {}
 		require_session_store.writeAuditEntry(dataDir, {
 			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
@@ -2268,8 +2262,8 @@ var update_deal_exports = /* @__PURE__ */ require_chunk.__exportAll({
 	handleUpdateDeal: () => handleUpdateDeal,
 	registerUpdateDeal: () => registerUpdateDeal
 });
-const DATA_DIR$47 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleUpdateDeal(input, dataDir = DATA_DIR$47) {
+const DATA_DIR$48 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleUpdateDeal(input, dataDir = DATA_DIR$48) {
 	const today = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
 	const deal = {
 		name: input.dealName,
@@ -2352,12 +2346,12 @@ Returns: { success: boolean, deal: object }`,
 }
 //#endregion
 //#region src/mcp/tools/export-customer.ts
-const DATA_DIR$46 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+const DATA_DIR$47 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
 function countInteractions(content) {
 	const matches = content.match(/^## \d{4}-\d{2}-\d{2}/gm);
 	return matches ? matches.length : 0;
 }
-async function handleExportCustomer(input, dataDir = DATA_DIR$46) {
+async function handleExportCustomer(input, dataDir = DATA_DIR$47) {
 	require_session_store.enforceRbac(dataDir, "export_customer");
 	const customerDir = path.default.join(dataDir, "customers", input.slug);
 	if (!fs.default.existsSync(customerDir)) return {
@@ -2450,8 +2444,8 @@ Returns:
 }
 //#endregion
 //#region src/mcp/tools/update-customer-facts.ts
-const DATA_DIR$45 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleUpdateCustomerFacts(input, dataDir = DATA_DIR$45) {
+const DATA_DIR$46 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleUpdateCustomerFacts(input, dataDir = DATA_DIR$46) {
 	const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 	try {
 		require_session_store.enforceRbac(dataDir, "update_customer_facts");
@@ -2601,10 +2595,36 @@ function scoreDeal(deal, signals) {
 		warnings
 	};
 }
+const MS_PER_DAY = 864e5;
+/**
+* Derive activity/close timing for a deal relative to `todayDate`. Centralizes
+* the day-diff math that deal-room and deal-agent each computed identically.
+* A blank/whitespace close_date yields `undefined` (not a NaN day count).
+*/
+function deriveDealTiming(deal, todayDate) {
+	const updatedDate = deal.updated ? new Date(deal.updated) : todayDate;
+	const daysSinceLastActivity = Math.floor((todayDate.getTime() - updatedDate.getTime()) / MS_PER_DAY);
+	const timing = {
+		daysSinceLastActivity,
+		daysInCurrentStage: daysSinceLastActivity
+	};
+	if (deal.close_date && deal.close_date.trim() !== "") timing.daysToClose = Math.floor((new Date(deal.close_date).getTime() - todayDate.getTime()) / MS_PER_DAY);
+	return timing;
+}
+/** Score a deal using timing derived from `todayDate` plus the deal's probability. */
+function scoreDealForToday(deal, todayDate) {
+	const timing = deriveDealTiming(deal, todayDate);
+	return scoreDeal(deal, {
+		daysSinceLastActivity: timing.daysSinceLastActivity,
+		daysInCurrentStage: timing.daysInCurrentStage,
+		...timing.daysToClose !== void 0 ? { daysToClose: timing.daysToClose } : {},
+		...deal.probability !== void 0 ? { probability: deal.probability } : {}
+	});
+}
 //#endregion
 //#region src/mcp/tools/get-deal-health.ts
-const DATA_DIR$44 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetDealHealth(input, dataDir = DATA_DIR$44) {
+const DATA_DIR$45 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetDealHealth(input, dataDir = DATA_DIR$45) {
 	try {
 		const deals = await require_pipeline_writer.readPipeline(dataDir, input.slug);
 		const today = /* @__PURE__ */ new Date();
@@ -2653,28 +2673,13 @@ Returns: { slug, deals: [{ deal, stage, score, grade, signals, warnings }] }`,
 }
 //#endregion
 //#region src/mcp/tools/get-pipeline-forecast.ts
-const DATA_DIR$43 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetPipelineForecast(input, dataDir = DATA_DIR$43) {
+const DATA_DIR$44 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetPipelineForecast(input, dataDir = DATA_DIR$44) {
 	try {
-		const customersDir = path.default.join(dataDir, "customers");
-		if (!fs.default.existsSync(customersDir)) return { content: [{
-			type: "text",
-			text: JSON.stringify({
-				deals: [],
-				totalWeightedValue: 0,
-				byStage: {}
-			}, null, 2)
-		}] };
-		const slugs = fs.default.readdirSync(customersDir).filter((d) => {
-			if (input.filter && !d.includes(input.filter)) return false;
-			return fs.default.statSync(path.default.join(customersDir, d)).isDirectory();
-		});
+		const slugs = require_session_store.listCustomerSlugs(dataDir).filter((d) => !input.filter || d.includes(input.filter));
 		const allDeals = [];
 		for (const slug of slugs) {
-			const pipelinePath = path.default.join(customersDir, slug, "pipeline.md");
-			if (!fs.default.existsSync(pipelinePath)) continue;
-			const { readPipeline } = await Promise.resolve().then(() => require("./pipeline-writer-N2omexxp.cjs")).then((n) => n.pipeline_writer_exports);
-			const deals = await readPipeline(dataDir, slug).catch(() => []);
+			const deals = require_pipeline_writer.readPipelineSync(dataDir, slug);
 			for (const deal of deals) {
 				if (deal.stage === "won" || deal.stage === "lost") continue;
 				const prob = deal.probability ?? 50;
@@ -2730,13 +2735,13 @@ Returns: { deals: [...], totalWeightedValue: number, byStage: { stage: { count,
 }
 //#endregion
 //#region src/mcp/tools/summarize-meeting.ts
-const DATA_DIR$42 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleSummarizeMeeting(input, dataDir = DATA_DIR$42) {
+const DATA_DIR$43 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleSummarizeMeeting(input, dataDir = DATA_DIR$43) {
 	try {
 		let summary = input.transcript.slice(0, 400);
 		let nextSteps = [];
 		try {
-			const { callLlm } = await Promise.resolve().then(() => require("./llm-iijeXmgq.cjs")).then((n) => n.llm_exports);
+			const { callLlm } = await Promise.resolve().then(() => require("./llm-CXycmEl9.cjs")).then((n) => n.llm_exports);
 			const response = await callLlm(`Summarize this meeting transcript in 3-5 sentences and extract action items.\n\nTranscript:\n${input.transcript.slice(0, 3e3)}\n\nRespond as JSON: { "summary": "...", "nextSteps": ["..."] }`);
 			const parsed = JSON.parse(response);
 			summary = parsed.summary ?? summary;
@@ -2850,18 +2855,12 @@ function stagesPath(dataDir) {
 	return path.default.join(dataDir, ".agentic", "pipeline-stages.json");
 }
 function getPipelineStages(dataDir) {
-	const p = stagesPath(dataDir);
-	if (!fs.default.existsSync(p)) return DEFAULT_STAGES;
-	try {
-		return JSON.parse(fs.default.readFileSync(p, "utf-8"));
-	} catch {
-		return DEFAULT_STAGES;
-	}
+	return require_session_store.readJsonFile(stagesPath(dataDir), DEFAULT_STAGES);
 }
 //#endregion
 //#region src/mcp/tools/get-pipeline-stages.ts
-const DATA_DIR$41 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetPipelineStages(_input, dataDir = DATA_DIR$41) {
+const DATA_DIR$42 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetPipelineStages(_input, dataDir = DATA_DIR$42) {
 	const stages = getPipelineStages(dataDir);
 	return { content: [{
 		type: "text",
@@ -2879,21 +2878,18 @@ function registerGetPipelineStages(server) {
 //#region src/core/cross-customer.ts
 async function searchAcrossCustomers(dataDir, query, limit = 5, excludeSlug) {
 	const slugs = require_session_store.listCustomerSlugs(dataDir).filter((d) => d !== excludeSlug);
-	const allResults = [];
-	for (const slug of slugs) {
-		const results = await searchKnowledge(dataDir, slug, query, 2);
-		for (const r of results) allResults.push({
+	return (await Promise.all(slugs.map(async (slug) => {
+		return (await searchKnowledge(dataDir, slug, query, 2)).map((r) => ({
 			slug,
 			relevantContent: r.content.slice(0, 200),
 			score: r.score
-		});
-	}
-	return allResults.sort((a, b) => b.score - a.score).slice(0, limit);
+		}));
+	}))).flat().sort((a, b) => b.score - a.score).slice(0, limit);
 }
 //#endregion
 //#region src/mcp/tools/get-market-intelligence.ts
-const DATA_DIR$40 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetMarketIntelligence(input, dataDir = DATA_DIR$40) {
+const DATA_DIR$41 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetMarketIntelligence(input, dataDir = DATA_DIR$41) {
 	const excludeSlug = input.excludeCurrentCustomer ? input.slug : void 0;
 	const all = require_session_store.listCustomerSlugs(dataDir);
 	const totalCustomersSearched = excludeSlug ? all.filter((s) => s !== excludeSlug).length : all.length;
@@ -2924,7 +2920,7 @@ function registerGetMarketIntelligence(server) {
 }
 //#endregion
 //#region src/mcp/tools/get-relationship-graph.ts
-const DATA_DIR$39 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+const DATA_DIR$40 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
 function summarizeNode(n) {
 	return {
 		id: n.id,
@@ -2932,7 +2928,7 @@ function summarizeNode(n) {
 		email: n.properties["email"]
 	};
 }
-async function handleGetRelationshipGraph(input, dataDir = DATA_DIR$39) {
+async function handleGetRelationshipGraph(input, dataDir = DATA_DIR$40) {
 	try {
 		const graph = readGraph(dataDir, input.slug);
 		const stakeholders = getStakeholders(graph);
@@ -3000,9 +2996,9 @@ Returns: {
 }
 //#endregion
 //#region src/mcp/tools/get-relationship-health.ts
-const DATA_DIR$38 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+const DATA_DIR$39 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
 const MAX_HEALTH_AGE_MS = 3600 * 1e3;
-async function handleGetRelationshipHealth(input, dataDir = DATA_DIR$38) {
+async function handleGetRelationshipHealth(input, dataDir = DATA_DIR$39) {
 	try {
 		let health = readHealth(dataDir, input.slug);
 		if (health === null || Date.now() - new Date(health.updatedAt).getTime() > MAX_HEALTH_AGE_MS) {
@@ -3082,8 +3078,7 @@ async function writePlaybook(dataDir, slug, playbook) {
 	const filePath = path.default.join(dir, `${playbook.name}.md`);
 	await require_write_queue.withFileQueue(filePath, async () => {
 		fs.default.mkdirSync(dir, { recursive: true });
-		const raw = gray_matter.default.stringify(playbook.content, playbook.frontmatter);
-		fs.default.writeFileSync(filePath, raw, "utf-8");
+		require_atomic_write.writeFileAtomic(filePath, gray_matter.default.stringify(playbook.content, playbook.frontmatter));
 	});
 }
 function toKebabCase(name) {
@@ -3285,11 +3280,10 @@ function writeAgentQueue(dataDir, slug, queue) {
 	const p = agentQueuePath(dataDir, slug);
 	const dir = path.default.dirname(p);
 	if (!fs.default.existsSync(dir)) fs.default.mkdirSync(dir, { recursive: true });
-	const updated = {
+	require_session_store.writeJsonFile(p, {
 		...queue,
 		updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-	};
-	fs.default.writeFileSync(p, JSON.stringify(updated, null, 2), "utf-8");
+	});
 }
 function makeActionId() {
 	return `da_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
@@ -3324,17 +3318,9 @@ async function observeDeal(dataDir, slug, dealName, today) {
 	const deal = (await require_pipeline_writer.readPipeline(dataDir, slug).catch(() => [])).find((d) => d.name.toLowerCase() === dealName.toLowerCase());
 	if (!deal) return null;
 	const todayDate = new Date(today);
-	const updatedDate = deal.updated ? new Date(deal.updated) : todayDate;
-	const daysSinceLastActivity = Math.floor((todayDate.getTime() - updatedDate.getTime()) / 864e5);
-	const daysInCurrentStage = daysSinceLastActivity;
-	const daysToClose = deal.close_date && deal.close_date.trim() !== "" ? Math.floor((new Date(deal.close_date).getTime() - todayDate.getTime()) / 864e5) : void 0;
-	const dealHealthScore = scoreDeal(deal, {
-		daysSinceLastActivity,
-		daysInCurrentStage,
-		...daysToClose !== void 0 ? { daysToClose } : {},
-		...deal.probability !== void 0 ? { probability: deal.probability } : {}
-	});
-	const health = computeCustomerHealth(dataDir, slug, today);
+	const { daysSinceLastActivity, daysInCurrentStage, daysToClose } = deriveDealTiming(deal, todayDate);
+	const dealHealthScore = scoreDealForToday(deal, todayDate);
+	const health = readHealth(dataDir, slug) ?? computeCustomerHealth(dataDir, slug, today);
 	const atRiskContacts = health.contacts.filter((c) => c.riskFlags.length > 0).map((c) => c.email ?? c.contactId);
 	const coldContacts = health.contacts.filter((c) => c.trend === "cold").map((c) => c.email ?? c.contactId);
 	const stakeholders = getStakeholders(readGraph(dataDir, slug));
@@ -3562,7 +3548,7 @@ async function executeAction(action, dataDir) {
 	if (!slug) return "skipped";
 	switch (action.type) {
 		case "log_interaction": {
-			const { appendInteraction } = await Promise.resolve().then(() => require("./interactions-writer-CrPStUll.cjs")).then((n) => n.interactions_writer_exports);
+			const { appendInteraction } = await Promise.resolve().then(() => require("./interactions-writer-a2yzBd7T.cjs")).then((n) => n.interactions_writer_exports);
 			await appendInteraction(dataDir, slug, {
 				date: (/* @__PURE__ */ new Date()).toISOString().slice(0, 10),
 				type: action.payload["type"] ?? "Note",
@@ -3575,7 +3561,7 @@ async function executeAction(action, dataDir) {
 			return "executed";
 		}
 		case "schedule_meeting": {
-			const { appendInteraction } = await Promise.resolve().then(() => require("./interactions-writer-CrPStUll.cjs")).then((n) => n.interactions_writer_exports);
+			const { appendInteraction } = await Promise.resolve().then(() => require("./interactions-writer-a2yzBd7T.cjs")).then((n) => n.interactions_writer_exports);
 			await appendInteraction(dataDir, slug, {
 				date: (/* @__PURE__ */ new Date()).toISOString().slice(0, 10),
 				type: "Note",
@@ -3681,8 +3667,8 @@ async function runDealAgent(config, dataDir, llmFn = require_llm.callLlm) {
 }
 //#endregion
 //#region src/mcp/tools/run-deal-agent.ts
-const DATA_DIR$37 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleRunDealAgent(input, dataDir = DATA_DIR$37) {
+const DATA_DIR$38 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleRunDealAgent(input, dataDir = DATA_DIR$38) {
 	try {
 		const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 		const result = await runDealAgent({
@@ -3749,8 +3735,8 @@ Returns: { assessment, riskLevel, plan[], actionsQueued[], actionsExecuted[], tr
 }
 //#endregion
 //#region src/mcp/tools/approve-agent-action.ts
-const DATA_DIR$36 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleApproveAgentAction(input, dataDir = DATA_DIR$36) {
+const DATA_DIR$37 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleApproveAgentAction(input, dataDir = DATA_DIR$37) {
 	try {
 		const queue = readAgentQueue(dataDir, input.slug);
 		const idx = queue.pendingActions.findIndex((a) => a.actionId === input.actionId);
@@ -4010,8 +3996,8 @@ async function buildSimulationInput(dataDir, horizon, today, externalSignals = [
 }
 //#endregion
 //#region src/mcp/tools/simulate-revenue.ts
-const DATA_DIR$35 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleSimulateRevenue(input, dataDir = DATA_DIR$35) {
+const DATA_DIR$36 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleSimulateRevenue(input, dataDir = DATA_DIR$36) {
 	try {
 		const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 		const horizon = input.horizon ?? "quarter";
@@ -4069,8 +4055,8 @@ Returns: { forecast: { p10, p50, p90, expected, stdDev, atRiskRevenue, byCloseMo
 }
 //#endregion
 //#region src/mcp/tools/get-playbook.ts
-const DATA_DIR$34 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetPlaybook(input, dataDir = DATA_DIR$34) {
+const DATA_DIR$35 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetPlaybook(input, dataDir = DATA_DIR$35) {
 	try {
 		const playbooks = listPlaybooks(dataDir, input.slug);
 		if (!(input.stage !== void 0 || input.value !== void 0 || input.healthScore !== void 0)) return { content: [{
@@ -4155,12 +4141,12 @@ Returns: { matches: [{ name, score, trigger, successRate, usedCount, content }],
 		...healthScore !== void 0 ? { healthScore } : {},
 		...daysSinceContact !== void 0 ? { daysSinceContact } : {},
 		...championPresent !== void 0 ? { championPresent } : {}
-	}, DATA_DIR$34));
+	}, DATA_DIR$35));
 }
 //#endregion
 //#region src/mcp/tools/create-playbook.ts
-const DATA_DIR$33 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleCreatePlaybook(input, dataDir = DATA_DIR$33) {
+const DATA_DIR$34 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleCreatePlaybook(input, dataDir = DATA_DIR$34) {
 	try {
 		const name = toKebabCase(input.name);
 		const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
@@ -4233,12 +4219,12 @@ Returns: { success: true, playbook: { name, trigger, successRate, path } }`,
 		trigger,
 		content,
 		...successRate !== void 0 ? { successRate } : {}
-	}, DATA_DIR$33));
+	}, DATA_DIR$34));
 }
 //#endregion
 //#region src/mcp/tools/list-playbooks.ts
-const DATA_DIR$32 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleListPlaybooks(input, dataDir = DATA_DIR$32) {
+const DATA_DIR$33 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleListPlaybooks(input, dataDir = DATA_DIR$33) {
 	try {
 		const playbooks = listPlaybooks(dataDir, input.slug);
 		return { content: [{
@@ -4277,12 +4263,12 @@ Args:
 
 Returns: { playbooks: [{ name, trigger, successRate, usedCount, lastUpdated }], count, slug }`,
 		inputSchema: zod.z.object({ slug: zod.z.string().describe("Customer ID") })
-	}, async ({ slug }) => handleListPlaybooks({ slug }, DATA_DIR$32));
+	}, async ({ slug }) => handleListPlaybooks({ slug }, DATA_DIR$33));
 }
 //#endregion
 //#region src/mcp/tools/distill-playbook.ts
-const DATA_DIR$31 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleDistillPlaybook(input, dataDir = DATA_DIR$31, llmFn = require_llm.callLlm) {
+const DATA_DIR$32 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleDistillPlaybook(input, dataDir = DATA_DIR$32, llmFn = require_llm.callLlm) {
 	try {
 		const result = await distillPlaybook(dataDir, input.slug, input.dealName, input.outcome, llmFn);
 		if (!result.ok) {
@@ -4341,7 +4327,7 @@ Returns: { success: true, playbook: { name, trigger, successRate, path }, reason
 		slug,
 		dealName,
 		outcome
-	}, DATA_DIR$31));
+	}, DATA_DIR$32));
 }
 //#endregion
 //#region src/core/goal-engine.ts
@@ -4559,8 +4545,8 @@ function getActiveGoals(dataDir) {
 }
 //#endregion
 //#region src/mcp/tools/pursue-goal.ts
-const DATA_DIR$30 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handlePursueGoal(input, dataDir = DATA_DIR$30, options = {}) {
+const DATA_DIR$31 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handlePursueGoal(input, dataDir = DATA_DIR$31, options = {}) {
 	try {
 		require_session_store.enforceRbac(dataDir, "pursue_goal");
 		const goal = await pursueGoal(dataDir, {
@@ -4623,12 +4609,12 @@ Returns: { goalId, description, target, deadline, decomposition: { analysis, cur
 		goal,
 		deadline,
 		...context !== void 0 ? { context } : {}
-	}, DATA_DIR$30));
+	}, DATA_DIR$31));
 }
 //#endregion
 //#region src/mcp/tools/get-goal-status.ts
-const DATA_DIR$29 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetGoalStatus(input, dataDir = DATA_DIR$29) {
+const DATA_DIR$30 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetGoalStatus(input, dataDir = DATA_DIR$30) {
 	try {
 		const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 		const allGoals = input.goalId ? readGoals(dataDir).filter((g) => g.id === input.goalId) : getActiveGoals(dataDir);
@@ -4687,17 +4673,17 @@ Args:
 
 Returns: { goals: [{ id, description, target, progress, status, deadline, daysRemaining, subGoals }], activeCount, completedCount }`,
 		inputSchema: zod.z.object({ goalId: zod.z.string().optional().describe("Specific goal ID (omit for all active goals)") })
-	}, async ({ goalId }) => handleGetGoalStatus({ ...goalId !== void 0 ? { goalId } : {} }, DATA_DIR$29));
+	}, async ({ goalId }) => handleGetGoalStatus({ ...goalId !== void 0 ? { goalId } : {} }, DATA_DIR$30));
 }
 //#endregion
 //#region src/mcp/tools/register-push-subscription.ts
-const DATA_DIR$28 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+const DATA_DIR$29 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
 const VALID_PROVIDERS = [
 	"gmail",
 	"microsoft-graph",
 	"slack"
 ];
-async function handleRegisterPushSubscription(input, dataDir = DATA_DIR$28) {
+async function handleRegisterPushSubscription(input, dataDir = DATA_DIR$29) {
 	try {
 		if (!VALID_PROVIDERS.includes(input.provider)) return { content: [{
 			type: "text",
@@ -4783,12 +4769,12 @@ Returns: { subscriptionId, provider, slug, status, expiresAt, createdAt, warning
 		...microsoftResource !== void 0 ? { microsoftResource } : {},
 		...slackTeamId !== void 0 ? { slackTeamId } : {},
 		...slackChannelId !== void 0 ? { slackChannelId } : {}
-	}, DATA_DIR$28));
+	}, DATA_DIR$29));
 }
 //#endregion
 //#region src/mcp/tools/get-push-status.ts
-const DATA_DIR$27 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetPushStatus(input, dataDir = DATA_DIR$27) {
+const DATA_DIR$28 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetPushStatus(input, dataDir = DATA_DIR$28) {
 	try {
 		let subs = await readSubscriptions(dataDir);
 		if (input.slug) subs = subs.filter((s) => s.slug === input.slug);
@@ -4860,7 +4846,7 @@ Returns: { subscriptions: [{ id, provider, slug, status, expiresAt, expiresInHou
 	}, async ({ slug, provider }) => handleGetPushStatus({
 		...slug !== void 0 ? { slug } : {},
 		...provider !== void 0 ? { provider } : {}
-	}, DATA_DIR$27));
+	}, DATA_DIR$28));
 }
 //#endregion
 //#region src/core/org-intelligence.ts
@@ -4926,8 +4912,8 @@ function deriveRecommendation(people, missingRoles) {
 }
 //#endregion
 //#region src/mcp/tools/get-org-intelligence.ts
-const DATA_DIR$26 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetOrgIntelligence(input, dataDir = DATA_DIR$26) {
+const DATA_DIR$27 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetOrgIntelligence(input, dataDir = DATA_DIR$27) {
 	try {
 		const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 		const map = buildStakeholderMap(dataDir, input.slug, today, input.dealName);
@@ -4978,15 +4964,7 @@ async function buildDealRoom(dataDir, slug, dealName, today) {
 	});
 	const todayDate = new Date(today);
 	const dealHealth = pipelineDeals.filter((d) => d.stage !== "won" && d.stage !== "lost").map((deal) => {
-		const updatedDate = deal.updated ? new Date(deal.updated) : todayDate;
-		const daysSinceLastActivity = Math.floor((todayDate.getTime() - updatedDate.getTime()) / 864e5);
-		const daysToClose = deal.close_date ? Math.floor((new Date(deal.close_date).getTime() - todayDate.getTime()) / 864e5) : void 0;
-		const scored = scoreDeal(deal, {
-			daysSinceLastActivity,
-			daysInCurrentStage: daysSinceLastActivity,
-			...daysToClose !== void 0 ? { daysToClose } : {},
-			...deal.probability !== void 0 ? { probability: deal.probability } : {}
-		});
+		const scored = scoreDealForToday(deal, todayDate);
 		return {
 			deal: deal.name,
 			stage: deal.stage,
@@ -5068,8 +5046,8 @@ function buildExecutiveSummary(slug, dealName, stakeholders, overallHealth, sim,
 }
 //#endregion
 //#region src/mcp/tools/open-deal-room.ts
-const DATA_DIR$25 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleOpenDealRoom(input, dataDir = DATA_DIR$25) {
+const DATA_DIR$26 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleOpenDealRoom(input, dataDir = DATA_DIR$26) {
 	try {
 		const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 		const brief = await buildDealRoom(dataDir, input.slug, input.dealName, today);
@@ -5152,8 +5130,8 @@ async function buildDailyBriefing(dataDir, today) {
 }
 //#endregion
 //#region src/mcp/tools/get-proactive-briefing.ts
-const DATA_DIR$24 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetProactiveBriefing(input, dataDir = DATA_DIR$24) {
+const DATA_DIR$25 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetProactiveBriefing(input, dataDir = DATA_DIR$25) {
 	try {
 		const briefing = await buildDailyBriefing(dataDir, input.date ?? (/* @__PURE__ */ new Date()).toISOString().slice(0, 10));
 		return { content: [{
@@ -5253,15 +5231,15 @@ function getTemplate(dataDir, id) {
 }
 //#endregion
 //#region src/mcp/tools/list-email-templates.ts
-const DATA_DIR$23 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleListEmailTemplates(input, dataDir = DATA_DIR$23) {
+const DATA_DIR$24 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleListEmailTemplates(input, dataDir = DATA_DIR$24) {
 	const summary = listTemplates(dataDir, input.category ? { category: input.category } : {}).map(({ body: _body, ...meta }) => meta);
 	return { content: [{
 		type: "text",
 		text: JSON.stringify(summary, null, 2)
 	}] };
 }
-function registerListEmailTemplates(server, dataDir = DATA_DIR$23) {
+function registerListEmailTemplates(server, dataDir = DATA_DIR$24) {
 	server.registerTool("list_email_templates", {
 		description: "List available email templates. Optionally filter by category (e.g. 'outreach', 'followup', 'support').",
 		inputSchema: zod.z.object({ category: zod.z.string().optional().describe("Filter by category") })
@@ -5295,8 +5273,8 @@ async function buildVariablesFromCustomer(dataDir, slug) {
 }
 //#endregion
 //#region src/mcp/tools/get-email-template.ts
-const DATA_DIR$22 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetEmailTemplate(input, dataDir = DATA_DIR$22) {
+const DATA_DIR$23 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetEmailTemplate(input, dataDir = DATA_DIR$23) {
 	const tmpl = getTemplate(dataDir, input.id);
 	if (!tmpl) return { content: [{
 		type: "text",
@@ -5312,7 +5290,7 @@ async function handleGetEmailTemplate(input, dataDir = DATA_DIR$22) {
 		}, null, 2)
 	}] };
 }
-function registerGetEmailTemplate(server, dataDir = DATA_DIR$22) {
+function registerGetEmailTemplate(server, dataDir = DATA_DIR$23) {
 	server.registerTool("get_email_template", {
 		description: "Get a specific email template by ID, including its body and detected variables.",
 		inputSchema: zod.z.object({ id: zod.z.string().describe("Template ID (e.g. 'enterprise-intro')") })
@@ -5320,8 +5298,8 @@ function registerGetEmailTemplate(server, dataDir = DATA_DIR$22) {
 }
 //#endregion
 //#region src/mcp/tools/draft-email.ts
-const DATA_DIR$21 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleDraftEmail(input, dataDir = DATA_DIR$21) {
+const DATA_DIR$22 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleDraftEmail(input, dataDir = DATA_DIR$22) {
 	const tmpl = getTemplate(dataDir, input.templateId);
 	if (!tmpl) return { content: [{
 		type: "text",
@@ -5335,17 +5313,17 @@ async function handleDraftEmail(input, dataDir = DATA_DIR$21) {
 	const interpolatedBody = interpolate(tmpl.body, vars);
 	let effectiveTone = input.tone;
 	if (!effectiveTone) {
-		const { resolveTone, toneInstruction } = await Promise.resolve().then(() => require("./tone-DRKlZgPr.cjs"));
+		const { resolveTone, toneInstruction } = await Promise.resolve().then(() => require("./tone-Cmc7O2Fx.cjs"));
 		const instr = toneInstruction(resolveTone(dataDir, input.slug));
 		if (instr) effectiveTone = instr;
 	}
 	let body = interpolatedBody;
 	let polished = false;
 	if (effectiveTone) try {
-		const { callLlm } = await Promise.resolve().then(() => require("./llm-iijeXmgq.cjs")).then((n) => n.llm_exports);
+		const { callLlm } = await Promise.resolve().then(() => require("./llm-CXycmEl9.cjs")).then((n) => n.llm_exports);
 		const refined = await callLlm(`Rewrite the following email in a ${effectiveTone} tone. Keep the same language, preserve all names and facts, and do not invent details. Return ONLY the rewritten email body, no preamble.\n\n---\n${interpolatedBody}`);
 		if (refined && refined.trim()) {
-			const { labelAiContent } = await Promise.resolve().then(() => require("./compliance-B91zNvCR.cjs")).then((n) => n.compliance_exports);
+			const { labelAiContent } = await Promise.resolve().then(() => require("./compliance-pAj9FcGI.cjs")).then((n) => n.compliance_exports);
 			body = labelAiContent(refined.trim());
 			polished = true;
 		}
@@ -5365,7 +5343,7 @@ async function handleDraftEmail(input, dataDir = DATA_DIR$21) {
 		}, null, 2)
 	}] };
 }
-function registerDraftEmail(server, dataDir = DATA_DIR$21) {
+function registerDraftEmail(server, dataDir = DATA_DIR$22) {
 	server.registerTool("draft_email", {
 		description: `Draft a personalized email for a customer using a stored template.
 Variables are auto-filled from the customer's main_facts.md. Override any variable manually.
@@ -5473,8 +5451,8 @@ async function updateEnrollment(dataDir, id, updates) {
 }
 //#endregion
 //#region src/mcp/tools/enroll-in-sequence.ts
-const DATA_DIR$20 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleEnrollInSequence(input, dataDir = DATA_DIR$20) {
+const DATA_DIR$21 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleEnrollInSequence(input, dataDir = DATA_DIR$21) {
 	const sequence = getSequence(dataDir, input.sequenceId);
 	if (!sequence) return { content: [{
 		type: "text",
@@ -5506,7 +5484,7 @@ async function handleEnrollInSequence(input, dataDir = DATA_DIR$20) {
 		})
 	}] };
 }
-function registerEnrollInSequence(server, dataDir = DATA_DIR$20) {
+function registerEnrollInSequence(server, dataDir = DATA_DIR$21) {
 	server.registerTool("enroll_in_sequence", {
 		description: `Enroll a contact in an email sequence. Validates that the sequence and its first template exist.
 Returns: { enrollmentId, sequenceName, totalSteps }`,
@@ -5523,8 +5501,8 @@ Returns: { enrollmentId, sequenceName, totalSteps }`,
 }
 //#endregion
 //#region src/mcp/tools/list-sequence-enrollments.ts
-const DATA_DIR$19 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleListSequenceEnrollments(input, dataDir = DATA_DIR$19) {
+const DATA_DIR$20 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleListSequenceEnrollments(input, dataDir = DATA_DIR$20) {
 	let enrollments = readEnrollments(dataDir);
 	if (input.slug !== void 0) enrollments = enrollments.filter((e) => e.slug === input.slug);
 	if (input.status !== void 0) enrollments = enrollments.filter((e) => e.status === input.status);
@@ -5533,7 +5511,7 @@ async function handleListSequenceEnrollments(input, dataDir = DATA_DIR$19) {
 		text: JSON.stringify({ enrollments }, null, 2)
 	}] };
 }
-function registerListSequenceEnrollments(server, dataDir = DATA_DIR$19) {
+function registerListSequenceEnrollments(server, dataDir = DATA_DIR$20) {
 	server.registerTool("list_sequence_enrollments", {
 		description: `List email sequence enrollments. Filter by customer slug or status.
 Returns: { enrollments: SequenceEnrollment[] }`,
@@ -5552,8 +5530,8 @@ Returns: { enrollments: SequenceEnrollment[] }`,
 }
 //#endregion
 //#region src/mcp/tools/unenroll-from-sequence.ts
-const DATA_DIR$18 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleUnenrollFromSequence(input, dataDir = DATA_DIR$18) {
+const DATA_DIR$19 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleUnenrollFromSequence(input, dataDir = DATA_DIR$19) {
 	if (!await updateEnrollment(dataDir, input.enrollmentId, { status: "paused" })) return { content: [{
 		type: "text",
 		text: JSON.stringify({
@@ -5566,7 +5544,7 @@ async function handleUnenrollFromSequence(input, dataDir = DATA_DIR$18) {
 		text: JSON.stringify({ success: true })
 	}] };
 }
-function registerUnenrollFromSequence(server, dataDir = DATA_DIR$18) {
+function registerUnenrollFromSequence(server, dataDir = DATA_DIR$19) {
 	server.registerTool("unenroll_from_sequence", {
 		description: `Unenroll (pause) a contact from an email sequence. Sets status to "paused" (soft delete).
 Returns: { success: boolean }`,
@@ -5575,8 +5553,8 @@ Returns: { success: boolean }`,
 }
 //#endregion
 //#region src/mcp/tools/list-sequences.ts
-const DATA_DIR$17 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleListSequences(_input, dataDir = DATA_DIR$17) {
+const DATA_DIR$18 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleListSequences(_input, dataDir = DATA_DIR$18) {
 	const sequences = listSequences(dataDir);
 	const enrollments = readEnrollments(dataDir);
 	const result = sequences.map((seq) => ({
@@ -5590,7 +5568,7 @@ async function handleListSequences(_input, dataDir = DATA_DIR$17) {
 		text: JSON.stringify({ sequences: result }, null, 2)
 	}] };
 }
-function registerListSequences(server, dataDir = DATA_DIR$17) {
+function registerListSequences(server, dataDir = DATA_DIR$18) {
 	server.registerTool("list_sequences", {
 		description: `List all email sequences with step count and enrollment count.
 Returns: { sequences: Array<{ id, name, stepCount, enrollmentCount }> }`,
@@ -5640,7 +5618,7 @@ function buildHtml(quote, config, customerName) {
 <p><strong>${config.companyName ?? ""}</strong><br>${config.companyAddress ?? ""}<br>${config.vatId ? `USt-IdNr.: ${config.vatId}` : ""}</p>
 <hr>
 <p><strong>An:</strong> ${customerName}</p>
-<p><strong>Datum:</strong> ${quote.createdAt.slice(0, 10)} &nbsp;&nbsp; <strong>Gültig bis:</strong> ${quote.validUntil}</p>
+<p><strong>Date:</strong> ${quote.createdAt.slice(0, 10)} &nbsp;&nbsp; <strong>Valid until:</strong> ${quote.validUntil}</p>
 <h2>Leistungen</h2>
 <table>
 <thead><tr><th>Beschreibung</th><th style="text-align:right">Menge</th><th style="text-align:right">Einzelpreis</th><th style="text-align:right">Gesamt</th></tr></thead>
@@ -5719,15 +5697,14 @@ async function generateQuote(dataDir, input) {
 		status: "draft",
 		htmlPath
 	};
-	fs.default.writeFileSync(path.default.join(dir, `${quoteNumber}.json`), JSON.stringify(quote, null, 2), "utf-8");
-	const html = buildHtml(quote, config, readCustomerName(dataDir, input.slug));
-	fs.default.writeFileSync(htmlPath, html, "utf-8");
+	require_atomic_write.writeFileAtomic(path.default.join(dir, `${quoteNumber}.json`), JSON.stringify(quote, null, 2));
+	require_atomic_write.writeFileAtomic(htmlPath, buildHtml(quote, config, readCustomerName(dataDir, input.slug)));
 	return quote;
 }
 //#endregion
 //#region src/mcp/tools/generate-quote.ts
-const DATA_DIR$16 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGenerateQuote(input, dataDir = DATA_DIR$16) {
+const DATA_DIR$17 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGenerateQuote(input, dataDir = DATA_DIR$17) {
 	try {
 		const quote = await generateQuote(dataDir, input);
 		return { content: [{
@@ -5751,7 +5728,7 @@ async function handleGenerateQuote(input, dataDir = DATA_DIR$16) {
 		}] };
 	}
 }
-function registerGenerateQuote(server, dataDir = DATA_DIR$16) {
+function registerGenerateQuote(server, dataDir = DATA_DIR$17) {
 	server.registerTool("generate_quote", {
 		description: `Generate a professional HTML quote/offer for a customer deal.
 Calculates subtotal, VAT, and total. Saves JSON + HTML to .agentic/quotes/.
@@ -5779,8 +5756,8 @@ Returns: { quoteNumber, htmlPath, total, currency, validUntil }`,
 }
 //#endregion
 //#region src/mcp/tools/get-quote-status.ts
-const DATA_DIR$15 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetQuoteStatus(input, dataDir = DATA_DIR$15) {
+const DATA_DIR$16 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetQuoteStatus(input, dataDir = DATA_DIR$16) {
 	if (input.quoteNumber) {
 		const quote = readQuote(dataDir, input.quoteNumber);
 		if (!quote) return { content: [{
@@ -5798,7 +5775,7 @@ async function handleGetQuoteStatus(input, dataDir = DATA_DIR$15) {
 		text: JSON.stringify({ quotes }, null, 2)
 	}] };
 }
-function registerGetQuoteStatus(server, dataDir = DATA_DIR$15) {
+function registerGetQuoteStatus(server, dataDir = DATA_DIR$16) {
 	server.registerTool("get_quote_status", {
 		description: `Get quote status and details. Filter by quoteNumber (single quote) or slug (all quotes for a customer).
 Returns quote with status: draft | sent | viewed | accepted | declined`,
@@ -5813,7 +5790,7 @@ Returns quote with status: draft | sent | viewed | accepted | declined`,
 }
 //#endregion
 //#region src/mcp/tools/get-booking-link.ts
-const DATA_DIR$14 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+const DATA_DIR$15 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
 function loadCalendlyConfig(dataDir) {
 	const p = path.default.join(dataDir, ".agentic", "integrations", "calendly.yaml");
 	if (!fs.default.existsSync(p)) return {};
@@ -5836,7 +5813,7 @@ function readCustomerFacts(dataDir, slug) {
 		...email ? { email } : {}
 	};
 }
-async function handleGetBookingLink(input, dataDir = DATA_DIR$14) {
+async function handleGetBookingLink(input, dataDir = DATA_DIR$15) {
 	const config = loadCalendlyConfig(dataDir);
 	const apiKey = config.apiKey ?? process.env["CALENDLY_API_KEY"] ?? "";
 	if (!apiKey) return { content: [{
@@ -5864,7 +5841,7 @@ async function handleGetBookingLink(input, dataDir = DATA_DIR$14) {
 		}] };
 	}
 }
-function registerGetBookingLink(server, dataDir = DATA_DIR$14) {
+function registerGetBookingLink(server, dataDir = DATA_DIR$15) {
 	server.registerTool("get_booking_link", {
 		description: `Get a Calendly booking link for a customer. Optionally pre-fills the customer's name/email.
 Requires CALENDLY_API_KEY env var or .agentic/integrations/calendly.yaml config.
@@ -5912,6 +5889,7 @@ const TICKET_HEADER = "# Tickets\n\n";
 const TABLE_HEADER = `| ID | Title | Status | Priority | Assignee | Created | SLA Due | Resolved |
 |----|-------|--------|----------|----------|---------|---------|---------|`;
 function ticketsPath(dataDir, slug) {
+	require_session_store.assertSafeSlug(slug);
 	return path.default.join(dataDir, "customers", slug, "tickets.md");
 }
 function escapeMd(s) {
@@ -5964,7 +5942,7 @@ async function upsertTicket(dataDir, slug, ticket) {
 	const idx = existing.findIndex((t) => t.id === ticket.id);
 	if (idx >= 0) existing[idx] = ticket;
 	else existing.push(ticket);
-	fs.default.writeFileSync(p, serializeTickets(existing), "utf-8");
+	require_atomic_write.writeFileAtomic(p, serializeTickets(existing));
 }
 function nextTicketId(tickets) {
 	const nums = tickets.map((t) => parseInt(t.id.replace("T-", ""), 10)).filter((n) => !isNaN(n));
@@ -5972,28 +5950,13 @@ function nextTicketId(tickets) {
 	return `T-${String(max + 1).padStart(3, "0")}`;
 }
 async function listAllTickets(dataDir, filter) {
-	const customersDir = path.default.join(dataDir, "customers");
-	if (!fs.default.existsSync(customersDir)) return [];
-	const slugs = filter?.slug ? [filter.slug] : fs.default.readdirSync(customersDir).filter((s) => {
-		try {
-			return fs.default.statSync(path.default.join(customersDir, s)).isDirectory();
-		} catch {
-			return false;
-		}
-	});
-	const results = [];
-	for (const slug of slugs) {
-		const tickets = await readTickets(dataDir, slug);
-		for (const ticket of tickets) {
-			if (filter?.status && ticket.status !== filter.status) continue;
-			if (filter?.priority && ticket.priority !== filter.priority) continue;
-			if (filter?.assignee && ticket.assignee !== filter.assignee) continue;
-			results.push({
-				slug,
-				ticket
-			});
-		}
-	}
+	const slugs = filter?.slug ? [filter.slug] : require_session_store.listCustomerSlugs(dataDir);
+	const results = (await Promise.all(slugs.map(async (slug) => {
+		return (await readTickets(dataDir, slug)).filter((ticket) => (!filter?.status || ticket.status === filter.status) && (!filter?.priority || ticket.priority === filter.priority) && (!filter?.assignee || ticket.assignee === filter.assignee)).map((ticket) => ({
+			slug,
+			ticket
+		}));
+	}))).flat();
 	const priorityOrder = {
 		urgent: 0,
 		high: 1,
@@ -6048,8 +6011,8 @@ function calcSlaDue(createdDate, priority, rules) {
 }
 //#endregion
 //#region src/mcp/tools/create-ticket.ts
-const DATA_DIR$13 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleCreateTicket(input, dataDir = DATA_DIR$13) {
+const DATA_DIR$14 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleCreateTicket(input, dataDir = DATA_DIR$14) {
 	const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 	const rules = loadSlaRules(dataDir);
 	const priority = input.priority ?? "normal";
@@ -6071,7 +6034,7 @@ async function handleCreateTicket(input, dataDir = DATA_DIR$13) {
 		text: JSON.stringify({ ticket }, null, 2)
 	}] };
 }
-function registerCreateTicket(server, dataDir = DATA_DIR$13) {
+function registerCreateTicket(server, dataDir = DATA_DIR$14) {
 	server.registerTool("create_ticket", {
 		description: `Create a support ticket for a customer. Auto-calculates SLA due date based on priority.
 Returns: { ticket } with id T-NNN, status=open, slaDue`,
@@ -6097,8 +6060,8 @@ Returns: { ticket } with id T-NNN, status=open, slaDue`,
 }
 //#endregion
 //#region src/mcp/tools/update-ticket.ts
-const DATA_DIR$12 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleUpdateTicket(input, dataDir = DATA_DIR$12) {
+const DATA_DIR$13 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleUpdateTicket(input, dataDir = DATA_DIR$13) {
 	const ticket = (await readTickets(dataDir, input.slug)).find((t) => t.id === input.ticketId);
 	if (!ticket) return { content: [{
 		type: "text",
@@ -6117,7 +6080,7 @@ async function handleUpdateTicket(input, dataDir = DATA_DIR$12) {
 		text: JSON.stringify({ ticket: updated }, null, 2)
 	}] };
 }
-function registerUpdateTicket(server, dataDir = DATA_DIR$12) {
+function registerUpdateTicket(server, dataDir = DATA_DIR$13) {
 	server.registerTool("update_ticket", {
 		description: `Update a ticket's status or assignee. Setting status=resolved auto-sets resolved date.
 Returns: { ticket }`,
@@ -6142,8 +6105,8 @@ Returns: { ticket }`,
 }
 //#endregion
 //#region src/mcp/tools/list-tickets.ts
-const DATA_DIR$11 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleListTickets(input, dataDir = DATA_DIR$11) {
+const DATA_DIR$12 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleListTickets(input, dataDir = DATA_DIR$12) {
 	const results = await listAllTickets(dataDir, {
 		...input.slug !== void 0 ? { slug: input.slug } : {},
 		...input.status !== void 0 ? { status: input.status } : {},
@@ -6155,7 +6118,7 @@ async function handleListTickets(input, dataDir = DATA_DIR$11) {
 		text: JSON.stringify({ tickets: results }, null, 2)
 	}] };
 }
-function registerListTickets(server, dataDir = DATA_DIR$11) {
+function registerListTickets(server, dataDir = DATA_DIR$12) {
 	server.registerTool("list_tickets", {
 		description: `List support tickets. Filter by customer, status, priority, or assignee. Sorted by priority then date.
 Returns: { tickets: Array<{ slug, ticket }> }`,
@@ -6185,8 +6148,8 @@ Returns: { tickets: Array<{ slug, ticket }> }`,
 }
 //#endregion
 //#region src/mcp/tools/close-ticket.ts
-const DATA_DIR$10 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleCloseTicket(input, dataDir = DATA_DIR$10) {
+const DATA_DIR$11 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleCloseTicket(input, dataDir = DATA_DIR$11) {
 	const ticket = (await readTickets(dataDir, input.slug)).find((t) => t.id === input.ticketId);
 	if (!ticket) return { content: [{
 		type: "text",
@@ -6213,7 +6176,7 @@ async function handleCloseTicket(input, dataDir = DATA_DIR$10) {
 		text: JSON.stringify({ ticket: updated }, null, 2)
 	}] };
 }
-function registerCloseTicket(server, dataDir = DATA_DIR$10) {
+function registerCloseTicket(server, dataDir = DATA_DIR$11) {
 	server.registerTool("close_ticket", {
 		description: `Close a support ticket. Optionally logs the resolution as an interaction.
 Returns: { ticket } with status=closed`,
@@ -6323,7 +6286,7 @@ async function recordSurveyResponse(dataDir, token, score, comment) {
 		const dir = responsesDir(dataDir, pending.surveyId);
 		fs.default.mkdirSync(dir, { recursive: true });
 		const filename = `${pending.slug}_${pending.contactEmail.replace("@", "_at_")}_${Date.now()}.json`;
-		fs.default.writeFileSync(path.default.join(dir, filename), JSON.stringify(response, null, 2), "utf-8");
+		require_atomic_write.writeFileAtomic(path.default.join(dir, filename), JSON.stringify(response, null, 2));
 		fs.default.unlinkSync(path.default.join(pendingDir, file));
 		return response;
 	} catch {
@@ -6363,12 +6326,12 @@ async function savePendingSurvey(dataDir, surveyId, slug, contactEmail, token) {
 		contactEmail,
 		sentAt: (/* @__PURE__ */ new Date()).toISOString()
 	};
-	fs.default.writeFileSync(path.default.join(pendingDir, filename), JSON.stringify(pending, null, 2), "utf-8");
+	require_atomic_write.writeFileAtomic(path.default.join(pendingDir, filename), JSON.stringify(pending, null, 2));
 }
 //#endregion
 //#region src/mcp/tools/send-nps-survey.ts
-const DATA_DIR$9 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleSendNpsSurvey(input, dataDir = DATA_DIR$9) {
+const DATA_DIR$10 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleSendNpsSurvey(input, dataDir = DATA_DIR$10) {
 	const survey = getSurvey(dataDir, input.surveyId);
 	if (!survey) return { content: [{
 		type: "text",
@@ -6389,7 +6352,7 @@ async function handleSendNpsSurvey(input, dataDir = DATA_DIR$9) {
 		}, null, 2)
 	}] };
 }
-function registerSendNpsSurvey(server, dataDir = DATA_DIR$9) {
+function registerSendNpsSurvey(server, dataDir = DATA_DIR$10) {
 	server.registerTool("send_nps_survey", {
 		description: `Generate an NPS/CSAT survey email for a customer contact. Returns subject, HTML body, and a token-based response URL.
 Does NOT send automatically — returns draft for review.
@@ -6409,8 +6372,8 @@ Returns: { token, subject, body, surveyUrl }`,
 }
 //#endregion
 //#region src/mcp/tools/get-survey-results.ts
-const DATA_DIR$8 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetSurveyResults(input, dataDir = DATA_DIR$8) {
+const DATA_DIR$9 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetSurveyResults(input, dataDir = DATA_DIR$9) {
 	const responses = loadSurveyResponses(dataDir, input.surveyId, input.slug);
 	const nps = calcNpsScore(responses);
 	const promoters = responses.filter((r) => r.score >= 9).length;
@@ -6436,7 +6399,7 @@ async function handleGetSurveyResults(input, dataDir = DATA_DIR$8) {
 		}, null, 2)
 	}] };
 }
-function registerGetSurveyResults(server, dataDir = DATA_DIR$8) {
+function registerGetSurveyResults(server, dataDir = DATA_DIR$9) {
 	server.registerTool("get_survey_results", {
 		description: `Get NPS/CSAT survey results with score breakdown. Calculates Net Promoter Score.
 Returns: { npsScore, totalResponses, promoters, passives, detractors, responses[] }`,
@@ -6466,18 +6429,21 @@ const KbArticleSchema = zod.z.object({
 function kbDir(dataDir) {
 	return path.default.join(dataDir, ".agentic", "knowledge-base");
 }
-function listKbArticles(dataDir, opts) {
-	const dir = kbDir(dataDir);
+/** Category subdirectories of the knowledge base. */
+function kbCategories(dir) {
 	if (!fs.default.existsSync(dir)) return [];
-	const results = [];
-	const categories = fs.default.readdirSync(dir).filter((f) => {
+	return fs.default.readdirSync(dir).filter((f) => {
 		try {
 			return fs.default.statSync(path.default.join(dir, f)).isDirectory();
 		} catch {
 			return false;
 		}
 	});
-	for (const cat of categories) {
+}
+function listKbArticles(dataDir, opts) {
+	const dir = kbDir(dataDir);
+	const results = [];
+	for (const cat of kbCategories(dir)) {
 		const catDir = path.default.join(dir, cat);
 		const files = fs.default.readdirSync(catDir).filter((f) => f.endsWith(".md"));
 		for (const file of files) try {
@@ -6497,14 +6463,31 @@ function listKbArticles(dataDir, opts) {
 	return results;
 }
 function getKbArticle(dataDir, id) {
-	return listKbArticles(dataDir).find((a) => a.id === id) ?? null;
+	if (!require_session_store.isSafePathSegment(id)) return null;
+	const dir = kbDir(dataDir);
+	for (const cat of kbCategories(dir)) {
+		const filePath = path.default.join(dir, cat, `${id}.md`);
+		if (!fs.default.existsSync(filePath)) continue;
+		try {
+			const parsed = (0, gray_matter.default)(fs.default.readFileSync(filePath, "utf-8"));
+			const meta = KbArticleSchema.safeParse(parsed.data);
+			if (!meta.success) return null;
+			return {
+				...meta.data,
+				body: parsed.content.trim()
+			};
+		} catch {
+			return null;
+		}
+	}
+	return null;
 }
 function writeKbArticle(dataDir, article) {
-	const dir = path.default.join(kbDir(dataDir), article.category);
-	fs.default.mkdirSync(dir, { recursive: true });
+	require_session_store.assertSafePathSegment(article.category, "knowledge-base category");
+	require_session_store.assertSafePathSegment(article.id, "knowledge-base article id");
 	const { body, ...meta } = article;
 	const content = gray_matter.default.stringify(body, meta);
-	fs.default.writeFileSync(path.default.join(dir, `${article.id}.md`), content, "utf-8");
+	require_atomic_write.writeFileAtomic(path.default.join(kbDir(dataDir), article.category, `${article.id}.md`), content);
 }
 function searchKbSimple(dataDir, query, opts) {
 	const all = listKbArticles(dataDir, opts?.publicOnly ? { publicOnly: true } : {});
@@ -6517,8 +6500,8 @@ function getKbMetaForExport(article) {
 }
 //#endregion
 //#region src/mcp/tools/search-knowledge-base.ts
-const DATA_DIR$7 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleSearchKnowledgeBase(input, dataDir = DATA_DIR$7) {
+const DATA_DIR$8 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleSearchKnowledgeBase(input, dataDir = DATA_DIR$8) {
 	const results = searchKbSimple(dataDir, input.query, { ...input.publicOnly ? { publicOnly: true } : {} });
 	const limited = (input.category ? results.filter((a) => a.category === input.category) : results).slice(0, input.limit ?? 10);
 	return { content: [{
@@ -6533,7 +6516,7 @@ async function handleSearchKnowledgeBase(input, dataDir = DATA_DIR$7) {
 		}, null, 2)
 	}] };
 }
-function registerSearchKnowledgeBase(server, dataDir = DATA_DIR$7) {
+function registerSearchKnowledgeBase(server, dataDir = DATA_DIR$8) {
 	server.registerTool("search_knowledge_base", {
 		description: `Search the knowledge base for articles. Text search on title, body, and tags.
 Returns: { count, articles[] } with excerpts`,
@@ -6552,8 +6535,8 @@ Returns: { count, articles[] } with excerpts`,
 }
 //#endregion
 //#region src/mcp/tools/create-kb-article.ts
-const DATA_DIR$6 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleCreateKbArticle(input, dataDir = DATA_DIR$6) {
+const DATA_DIR$7 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleCreateKbArticle(input, dataDir = DATA_DIR$7) {
 	if (getKbArticle(dataDir, input.id)) return { content: [{
 		type: "text",
 		text: JSON.stringify({ error: `Article '${input.id}' already exists` })
@@ -6581,7 +6564,7 @@ async function handleCreateKbArticle(input, dataDir = DATA_DIR$6) {
 		}, null, 2)
 	}] };
 }
-function registerCreateKbArticle(server, dataDir = DATA_DIR$6) {
+function registerCreateKbArticle(server, dataDir = DATA_DIR$7) {
 	server.registerTool("create_kb_article", {
 		description: `Create a new knowledge base article. Articles are stored as Markdown files in .agentic/knowledge-base/.
 Returns: { id, title, category, path }`,
@@ -6606,8 +6589,8 @@ Returns: { id, title, category, path }`,
 }
 //#endregion
 //#region src/mcp/tools/backup-now.ts
-const DATA_DIR$5 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleBackupNow(input, dataDir = DATA_DIR$5) {
+const DATA_DIR$6 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleBackupNow(input, dataDir = DATA_DIR$6) {
 	const zipPath = path.default.join(dataDir, `dxcrm-backup-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19)}.zip`);
 	const manifest = await require_session_store.runBackup(zipPath, dataDir, { ...input.remote ? { remote: input.remote } : {} }).catch(() => null);
 	if (!manifest) return { content: [{
@@ -6644,8 +6627,8 @@ function registerBackupNow(server) {
 }
 //#endregion
 //#region src/mcp/tools/list-backups.ts
-const DATA_DIR$4 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleListBackups(input, dataDir = DATA_DIR$4) {
+const DATA_DIR$5 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleListBackups(input, dataDir = DATA_DIR$5) {
 	const logEntries = require_session_store.readBackupLog(dataDir);
 	const fileEntries = require_session_store.listBackupsInDir(dataDir);
 	const entries = logEntries.length > 0 ? logEntries : fileEntries;
@@ -6679,8 +6662,8 @@ function registerListBackups(server) {
 }
 //#endregion
 //#region src/mcp/tools/trigger-sync.ts
-const DATA_DIR$3 = process.cwd();
-async function handleTriggerSync(input, dataDir = DATA_DIR$3) {
+const DATA_DIR$4 = process.cwd();
+async function handleTriggerSync(input, dataDir = DATA_DIR$4) {
 	const auth = getGmailAuth();
 	if (!auth) return { content: [{
 		type: "text",
@@ -6715,7 +6698,7 @@ async function handleTriggerSync(input, dataDir = DATA_DIR$3) {
 		try {
 			const sources = JSON.parse(fs.default.readFileSync(sourcesPath, "utf-8"));
 			if (!sources.gmail?.enabled || !sources.gmail.query) continue;
-			const { syncGmail } = await Promise.resolve().then(() => require("./gmail-sync-hHm9gaWd.cjs"));
+			const { syncGmail } = await Promise.resolve().then(() => require("./gmail-sync-GEy3oVvw.cjs"));
 			const result = await syncGmail({
 				slug,
 				dataDir,
@@ -6774,8 +6757,8 @@ Returns: { success: boolean, synced: number, skipped: number, customers: [...],
 }
 //#endregion
 //#region src/mcp/tools/get-audit-log.ts
-const DATA_DIR$2 = process.cwd();
-async function handleGetAuditLog(input, dataDir = DATA_DIR$2) {
+const DATA_DIR$3 = process.cwd();
+async function handleGetAuditLog(input, dataDir = DATA_DIR$3) {
 	const entries = require_session_store.readAuditLog(dataDir);
 	const filterOpts = { limit: input.limit ?? 50 };
 	if (input.slug !== void 0) filterOpts.slug = input.slug;
@@ -6816,6 +6799,69 @@ Returns: { total: number, returned: number, entries: [{timestamp, actor, tool, s
 	});
 }
 //#endregion
+//#region src/mcp/tools/get-logs.ts
+const DATA_DIR$2 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetLogs(input, dataDir = DATA_DIR$2) {
+	const query = {
+		...input.level !== void 0 ? { level: input.level } : {},
+		...input.component !== void 0 ? { component: input.component } : {},
+		...input.since !== void 0 ? { since: input.since } : {},
+		...input.contains !== void 0 ? { contains: input.contains } : {},
+		limit: input.limit ?? 100
+	};
+	const payload = input.summary ? require_logger.summarizeLogs(dataDir, query) : (() => {
+		const entries = require_logger.queryLogs(dataDir, query);
+		return {
+			returned: entries.length,
+			entries
+		};
+	})();
+	return { content: [{
+		type: "text",
+		text: JSON.stringify(payload, null, 2)
+	}] };
+}
+function registerGetLogs(server) {
+	server.registerTool("get_logs", {
+		title: "Get Logs",
+		description: `Read and analyze the structured application log (.agentic/logs.ndjson).
+Use to answer "what went wrong recently?", "show errors from gmail sync", or "summarize today's activity".
+
+Args:
+  level: Minimum level to include — debug | info | warn | error (optional)
+  component: Filter by component, e.g. "gmail-sync", "lancedb" (optional)
+  since: ISO timestamp; only entries at or after it (optional)
+  contains: Case-insensitive substring of the message (optional)
+  limit: Max entries to return (default 100, most recent)
+  summary: When true, return aggregated counts (by level + component) and recent errors instead of raw entries
+
+Returns (entries): { returned: number, entries: [{ts, level, component, message, context?}] }
+Returns (summary): { total, byLevel, byComponent, firstTs, lastTs, recentErrors }`,
+		inputSchema: zod.z.object({
+			level: zod.z.enum([
+				"debug",
+				"info",
+				"warn",
+				"error"
+			]).optional().describe("Minimum level"),
+			component: zod.z.string().optional().describe("Filter by component"),
+			since: zod.z.string().optional().describe("ISO timestamp lower bound"),
+			contains: zod.z.string().optional().describe("Message substring filter"),
+			limit: zod.z.number().int().min(1).max(1e3).optional().describe("Max entries (default 100)"),
+			summary: zod.z.boolean().optional().describe("Return aggregated summary instead of entries")
+		})
+	}, async ({ level, component, since, contains, limit, summary }) => {
+		const input = {};
+		if (level !== void 0) input.level = level;
+		if (component !== void 0) input.component = component;
+		if (since !== void 0) input.since = since;
+		if (contains !== void 0) input.contains = contains;
+		if (limit !== void 0) input.limit = limit;
+		if (summary !== void 0) input.summary = summary;
+		return handleGetLogs(input);
+	});
+}
+//#endregion
 //#region src/mcp/prompts.ts
 /**
 * CRM playbook prompts exposed via MCP `prompts/list` + `prompts/get`.
@@ -6897,7 +6943,7 @@ function registerResources(server, dataDir = DATA_DIR$1) {
 		description: "Open and closed deals for a customer",
 		mimeType: "application/json"
 	}, async (uri, variables) => {
-		const { readPipeline } = await Promise.resolve().then(() => require("./pipeline-writer-N2omexxp.cjs")).then((n) => n.pipeline_writer_exports);
+		const { readPipeline } = await Promise.resolve().then(() => require("./pipeline-writer-B1tRAhuD.cjs")).then((n) => n.pipeline_writer_exports);
 		const deals = await readPipeline(dataDir, String(variables["slug"]));
 		return { contents: [{
 			uri: uri.href,
@@ -6910,7 +6956,7 @@ function registerResources(server, dataDir = DATA_DIR$1) {
 		description: "Newest-first interaction history for a customer",
 		mimeType: "text/markdown"
 	}, async (uri, variables) => {
-		const { readInteractions } = await Promise.resolve().then(() => require("./interactions-writer-CrPStUll.cjs")).then((n) => n.interactions_writer_exports);
+		const { readInteractions } = await Promise.resolve().then(() => require("./interactions-writer-a2yzBd7T.cjs")).then((n) => n.interactions_writer_exports);
 		const text = await readInteractions(dataDir, String(variables["slug"]));
 		return { contents: [{
 			uri: uri.href,
@@ -6969,46 +7015,30 @@ function objectsSchemaPath(dataDir) {
 	return path.default.join(dataDir, ".agentic", "schema", "custom-objects.json");
 }
 function recordsPath(dataDir, name) {
+	require_session_store.assertSafePathSegment(name, "custom object name");
 	return path.default.join(dataDir, ".agentic", "objects", `${name}.json`);
 }
 function loadCustomObjects(dataDir) {
-	const p = objectsSchemaPath(dataDir);
-	if (!fs.default.existsSync(p)) return [];
-	try {
-		const data = JSON.parse(fs.default.readFileSync(p, "utf-8"));
-		return Array.isArray(data.objects) ? data.objects : [];
-	} catch {
-		return [];
-	}
+	return require_session_store.readJsonArray(objectsSchemaPath(dataDir), "objects");
 }
 function getObjectDefinition(dataDir, name) {
 	return loadCustomObjects(dataDir).find((o) => o.name === name);
 }
 /** Add or update (by name) a custom object definition. */
 function defineCustomObject(dataDir, def) {
+	require_session_store.assertSafePathSegment(def.name, "custom object name");
 	const objs = loadCustomObjects(dataDir);
 	const idx = objs.findIndex((o) => o.name === def.name);
 	if (idx >= 0) objs[idx] = def;
 	else objs.push(def);
-	const p = objectsSchemaPath(dataDir);
-	fs.default.mkdirSync(path.default.dirname(p), { recursive: true });
-	fs.default.writeFileSync(p, JSON.stringify({ objects: objs }, null, 2), "utf-8");
+	require_session_store.writeJsonArray(objectsSchemaPath(dataDir), "objects", objs);
 	return objs;
 }
 function listRecords(dataDir, name) {
-	const p = recordsPath(dataDir, name);
-	if (!fs.default.existsSync(p)) return [];
-	try {
-		const data = JSON.parse(fs.default.readFileSync(p, "utf-8"));
-		return Array.isArray(data.records) ? data.records : [];
-	} catch {
-		return [];
-	}
+	return require_session_store.readJsonArray(recordsPath(dataDir, name), "records");
 }
 function writeRecords(dataDir, name, records) {
-	const p = recordsPath(dataDir, name);
-	fs.default.mkdirSync(path.default.dirname(p), { recursive: true });
-	fs.default.writeFileSync(p, JSON.stringify({ records }, null, 2), "utf-8");
+	require_session_store.writeJsonArray(recordsPath(dataDir, name), "records", records);
 }
 function createRecord(dataDir, name, values) {
 	const def = getObjectDefinition(dataDir, name);
@@ -7066,7 +7096,7 @@ function handleCreateRecord(input, dataDir = DATA_DIR) {
 	require_session_store.enforceRbac(dataDir, "create_record");
 	const res = createRecord(dataDir, input.object, input.values);
 	if (!res.ok) return json({ error: (res.errors ?? []).join("; ") });
-	Promise.resolve().then(() => require("./webhooks-Xn6zO6kd.cjs")).then(({ emitEvent }) => emitEvent(dataDir, "record.created", {
+	Promise.resolve().then(() => require("./webhooks-CwW-3kvG.cjs")).then(({ emitEvent }) => emitEvent(dataDir, "record.created", {
 		object: input.object,
 		record: res.record
 	}));
@@ -7128,14 +7158,7 @@ function hashToken(token) {
 	return (0, crypto.createHash)("sha256").update(token).digest("hex");
 }
 function loadMcpTokens(dataDir) {
-	const p = tokensPath(dataDir);
-	if (!fs.default.existsSync(p)) return [];
-	try {
-		const data = JSON.parse(fs.default.readFileSync(p, "utf-8"));
-		return Array.isArray(data.tokens) ? data.tokens : [];
-	} catch {
-		return [];
-	}
+	return require_session_store.readJsonArray(tokensPath(dataDir), "tokens");
 }
 /**
 * Whether the HTTP MCP endpoint must require a bearer token.
@@ -7254,6 +7277,7 @@ function createMcpServer() {
 	registerListBackups(server);
 	registerTriggerSync(server);
 	registerGetAuditLog(server);
+	registerGetLogs(server);
 	registerCustomObjectTools(server);
 	registerPrompts(server);
 	registerResources(server);
@@ -7264,7 +7288,7 @@ async function startStdio() {
 	const server = createMcpServer();
 	const transport = new _modelcontextprotocol_sdk_server_stdio_js.StdioServerTransport();
 	await server.connect(transport);
-	console.error("DatasynxOpenCRM MCP Server running via stdio");
+	require_logger.logger.info("mcp-server", "running via stdio");
 }
 async function startHttp(port = 3847) {
 	await initOAuthFromDisk(process.cwd());
@@ -7304,7 +7328,7 @@ async function startHttp(port = 3847) {
 	});
 	app.get("/sessions", async (_req, res) => {
 		try {
-			const { readAllSessions } = await Promise.resolve().then(() => require("./session-D0qFkBla.cjs"));
+			const { readAllSessions } = await Promise.resolve().then(() => require("./session-Mm7GQbSH.cjs"));
 			const sessions = readAllSessions(dataDir);
 			res.json({ sessions });
 		} catch {
@@ -7438,15 +7462,15 @@ button{margin-top:12px;padding:12px 28px;background:#1a1a2e;color:#fff;border:no
 		res.send(surveyThankYouPage(numScore, commentText));
 	});
 	app.listen(port, () => {
-		console.error(`DatasynxOpenCRM MCP Server running on http://0.0.0.0:${port}/mcp`);
+		require_logger.logger.info("mcp-server", "running over http", { url: `http://0.0.0.0:${port}/mcp` });
 	});
 }
 if ((process.env["DXCRM_MCP_MODE"] ?? "stdio") === "http") startHttp(parseInt(process.env["DXCRM_MCP_PORT"] ?? "3847", 10)).catch((err) => {
-	console.error("MCP Server fatal error:", err.message);
+	require_logger.logger.error("mcp-server", "fatal error", { error: err.message });
 	process.exit(1);
 });
 else startStdio().catch((err) => {
-	console.error("MCP Server fatal error:", err.message);
+	require_logger.logger.error("mcp-server", "fatal error", { error: err.message });
 	process.exit(1);
 });
 //#endregion