@datasynx/agentic-crm 0.1.0 → 1.0.0

package/dist/mcp.js

@@ -1,9 +1,11 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { C as readMainFacts, S as listCustomerSlugs, a as enforceRbac, b as customerExists, c as filterAuditLog, d as writeAuditEntry, f as listBackupsInDir, i as canSeeCustomer, l as getActor, m as runBackup, n as getSession, p as readBackupLog, u as readAuditLog, w as writeMainFacts, x as ensureCustomerDir } from "./session-store-C8tEvMPw.js";
+import { A as writeMainFacts, C as writeJsonArray, D as ensureCustomerDir, E as customerExists, M as isSafePathSegment, O as listCustomerSlugs, S as readJsonFile, T as assertSafeSlug, a as customerVisibility, d as readAuditLog, f as writeAuditEntry, h as runBackup, i as canSeeCustomer, j as assertSafePathSegment, k as readMainFacts, l as filterAuditLog, m as readBackupLog, n as getSession, o as enforceRbac, p as listBackupsInDir, u as getActor, w as writeJsonFile, x as readJsonArray } from "./session-store-DWxJ5Pof.js";
+import { t as writeFileAtomic } from "./atomic-write-8yjqqLtS.js";
 import { t as withFileQueue } from "./write-queue-IbsAjUnh.js";
-import { n as formatInteractionEntry, t as appendInteraction } from "./interactions-writer-DO3KcSR3.js";
-import { n as readPipeline, r as upsertDeal } from "./pipeline-writer-eufx_0o1.js";
-import { i as guardIsoDate, t as callLlm } from "./llm-Z8RIYkpF.js";
+import { n as formatInteractionEntry, t as appendInteraction } from "./interactions-writer-BZzUIgJd.js";
+import { n as queryLogs, r as summarizeLogs, t as logger } from "./logger-UaF5p9d1.js";
+import { i as upsertDeal, n as readPipeline, r as readPipelineSync } from "./pipeline-writer-rDj-ni6q.js";
+import { i as guardIsoDate, t as callLlm } from "./llm-BnSUBisu.js";
 import path from "path";
 import fs from "fs";
 import matter from "gray-matter";
@@ -56,11 +58,10 @@ async function readSubscriptions(dataDir) {
 async function writeSubscriptions(dataDir, subs) {
 	const filePath = subscriptionsPath(dataDir);
 	fs.mkdirSync(path.dirname(filePath), { recursive: true });
-	const file = {
+	writeJsonFile(filePath, {
 		subscriptions: subs,
 		updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-	};
-	fs.writeFileSync(filePath, JSON.stringify(file, null, 2), "utf-8");
+	});
 }
 function expiresAtForProvider(provider) {
 	if (provider === "gmail") return new Date(Date.now() + 10080 * 60 * 1e3).toISOString();
@@ -91,23 +92,15 @@ function getSyncStatePath(dataDir) {
 	return path.join(dataDir, ".agentic", "sync-state.json");
 }
 function readSyncState(dataDir) {
-	const filePath = getSyncStatePath(dataDir);
-	if (!fs.existsSync(filePath)) return {};
-	try {
-		return JSON.parse(fs.readFileSync(filePath, "utf-8"));
-	} catch {
-		return {};
-	}
+	return readJsonFile(getSyncStatePath(dataDir), {});
 }
 function updateSlugSyncState(dataDir, slug, update) {
-	const filePath = getSyncStatePath(dataDir);
-	fs.mkdirSync(path.dirname(filePath), { recursive: true });
 	const state = readSyncState(dataDir);
 	state[slug] = {
 		...state[slug],
 		...update
 	};
-	fs.writeFileSync(filePath, JSON.stringify(state, null, 2), "utf-8");
+	writeJsonFile(getSyncStatePath(dataDir), state);
 }
 function getLastGmailSync(dataDir, slug) {
 	const ts = readSyncState(dataDir)[slug]?.lastGmailSync;
@@ -449,6 +442,7 @@ Config: \`.agentic/rbac.json\` | Actor: \`DXCRM_ACTOR\` env var
 | list_backups | List available backups with date, size, verification status, and customer count | any |
 | trigger_sync | Force immediate Gmail sync for one or all customers | rep+ |
 | get_audit_log | Read audit log — all write operations with actor, tool, customer | admin |
+| get_logs | Query/aggregate the structured application log (level, component, errors) | admin |
 | define_custom_object | Define a runtime custom object type with typed fields (no migration) | admin |
 | create_record | Create a record of a custom object (validated against its schema) | rep+ |
 | list_records | List records of a custom object | any |
@@ -1323,6 +1317,16 @@ function registerGetActiveSession(server) {
 	}, async () => handleGetActiveSession());
 }
 //#endregion
+//#region src/core/regex.ts
+/**
+* Escape a string so it can be embedded safely as a literal inside a `RegExp`.
+* Prevents both broken patterns and ReDoS/injection when interpolating
+* field names, section headers, or other dynamic values into a regex.
+*/
+function escapeRegExp(value) {
+	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//#endregion
 //#region src/core/context-builder.ts
 var context_builder_exports = /* @__PURE__ */ __exportAll({ buildContext: () => buildContext });
 const MAX_INTERACTIONS = 10;
@@ -1338,7 +1342,7 @@ function parsePipelineContent(filePath) {
 	return fs.readFileSync(filePath, "utf-8").trim();
 }
 function extractSection(content, sectionName) {
-	const match = new RegExp(`## ${sectionName}([\\s\\S]*?)(?=^## |$)`, "m").exec(content);
+	const match = new RegExp(`## ${escapeRegExp(sectionName)}([\\s\\S]*?)(?=^## |$)`, "m").exec(content);
 	return match ? (match[1] ?? "").trim() : "";
 }
 async function buildContext(dataDir, slug) {
@@ -1415,7 +1419,7 @@ async function buildContext(dataDir, slug) {
 }
 //#endregion
 //#region src/mcp/tools/get-customer-context.ts
-const DATA_DIR$51 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+const DATA_DIR$52 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
 function triggerOnQuerySync(dataDir, slug) {
 	const auth = getGmailAuth();
 	if (!auth) return;
@@ -1428,7 +1432,7 @@ function triggerOnQuerySync(dataDir, slug) {
 		const sources = JSON.parse(fs.readFileSync(sourcesPath, "utf-8"));
 		if (!sources.gmail?.enabled || !sources.gmail.query) return;
 		const query = sources.gmail.query;
-		import("./gmail-sync-rQaVqKWd.js").then(({ syncGmail }) => syncGmail({
+		import("./gmail-sync-C-NmibzS.js").then(({ syncGmail }) => syncGmail({
 			slug,
 			dataDir,
 			auth,
@@ -1436,7 +1440,7 @@ function triggerOnQuerySync(dataDir, slug) {
 		}).then(() => updateSlugSyncState(dataDir, slug, { lastGmailSync: (/* @__PURE__ */ new Date()).toISOString() })).catch(() => {})).catch(() => {});
 	} catch {}
 }
-async function handleGetCustomerContext(input, dataDir = DATA_DIR$51) {
+async function handleGetCustomerContext(input, dataDir = DATA_DIR$52) {
 	const targetSlug = input.slug ?? getSession()?.customerSlug;
 	if (!targetSlug) return {
 		content: [{
@@ -1552,7 +1556,7 @@ async function indexInLanceDB(dataDir, slug, text, sourceRef, meta) {
 		}]);
 		await table.mergeInsert("source_ref").whenMatchedUpdateAll().whenNotMatchedInsertAll().execute(data);
 	} catch (err) {
-		process.stderr.write(`[lancedb] indexInLanceDB failed: ${err.message}\n`);
+		logger.error("lancedb", "indexInLanceDB failed", { error: err.message });
 	}
 }
 async function searchKnowledge(dataDir, slug, query, limit) {
@@ -1572,8 +1576,8 @@ async function searchKnowledge(dataDir, slug, query, limit) {
 }
 //#endregion
 //#region src/mcp/tools/search-customer-knowledge.ts
-const DATA_DIR$50 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleSearchCustomerKnowledge(input, dataDir = DATA_DIR$50) {
+const DATA_DIR$51 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleSearchCustomerKnowledge(input, dataDir = DATA_DIR$51) {
 	const limit = input.limit ?? 5;
 	try {
 		const results = await searchKnowledge(dataDir, input.slug, input.query, limit);
@@ -1621,14 +1625,14 @@ If no results: returns empty array with a helpful sync suggestion.`,
 }
 //#endregion
 //#region src/mcp/tools/list-customers.ts
-const DATA_DIR$49 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+const DATA_DIR$50 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
 function extractLastInteractionDate(interactionsPath) {
 	if (!fs.existsSync(interactionsPath)) return void 0;
 	const content = fs.readFileSync(interactionsPath, "utf-8");
 	const match = /^## (\d{4}-\d{2}-\d{2})/m.exec(content);
 	return match ? match[1] : void 0;
 }
-async function handleListCustomers(input, dataDir = DATA_DIR$49) {
+async function handleListCustomers(input, dataDir = DATA_DIR$50) {
 	const customersDir = path.join(dataDir, "customers");
 	const customers = [];
 	if (!fs.existsSync(customersDir)) return { content: [{
@@ -1636,6 +1640,7 @@ async function handleListCustomers(input, dataDir = DATA_DIR$49) {
 		text: JSON.stringify([], null, 2)
 	}] };
 	const entries = fs.readdirSync(customersDir);
+	const canSee = customerVisibility(dataDir, process.env["DXCRM_ACTOR"] ?? "system");
 	for (const entry of entries) {
 		const customerDir = path.join(customersDir, entry);
 		try {
@@ -1662,7 +1667,7 @@ async function handleListCustomers(input, dataDir = DATA_DIR$49) {
 				const filterLower = input.filter.toLowerCase();
 				if (!(name.toLowerCase().includes(filterLower) || entry.toLowerCase().includes(filterLower) || stage.toLowerCase().includes(filterLower))) continue;
 			}
-			if (!canSeeCustomer(dataDir, process.env["DXCRM_ACTOR"] ?? "system", entry)) continue;
+			if (!canSee(entry)) continue;
 			customers.push(summary);
 		} catch {
 			continue;
@@ -1697,8 +1702,7 @@ async function withJsonFile(filePath, updater) {
 			current = null;
 		}
 		const next = await updater(current);
-		fs.mkdirSync(path.dirname(filePath), { recursive: true });
-		fs.writeFileSync(filePath, JSON.stringify(next, null, 2), "utf-8");
+		writeFileAtomic(filePath, JSON.stringify(next, null, 2));
 		return next;
 	});
 }
@@ -1722,7 +1726,7 @@ function readGraph(dataDir, slug) {
 	try {
 		return JSON.parse(fs.readFileSync(p, "utf-8"));
 	} catch {
-		process.stderr.write(`[graph] failed to parse ${p} — returning empty graph\n`);
+		logger.warn("graph", "failed to parse graph file — returning empty graph", { path: p });
 		return emptyGraph(slug);
 	}
 }
@@ -1975,23 +1979,13 @@ function healthPath(dataDir, slug) {
 	return path.join(dataDir, "customers", slug, "health.json");
 }
 function readHealth(dataDir, slug) {
-	const p = healthPath(dataDir, slug);
-	if (!fs.existsSync(p)) return null;
-	try {
-		return JSON.parse(fs.readFileSync(p, "utf-8"));
-	} catch {
-		return null;
-	}
+	return readJsonFile(healthPath(dataDir, slug), null);
 }
 function writeHealth(dataDir, slug, health) {
-	const p = healthPath(dataDir, slug);
-	const dir = path.dirname(p);
-	if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
-	const updated = {
+	writeJsonFile(healthPath(dataDir, slug), {
 		...health,
 		updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-	};
-	fs.writeFileSync(p, JSON.stringify(updated, null, 2), "utf-8");
+	});
 }
 function parseContactInteractions(content) {
 	const blocks = content.split(/(?=^## \d{4}-\d{2}-\d{2})/m).filter((b) => b.trim().length > 0);
@@ -2151,8 +2145,8 @@ async function updateHealthFromInteraction(dataDir, slug) {
 }
 //#endregion
 //#region src/mcp/tools/log-interaction.ts
-const DATA_DIR$48 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleLogInteraction(input, dataDir = DATA_DIR$48) {
+const DATA_DIR$49 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleLogInteraction(input, dataDir = DATA_DIR$49) {
 	const today = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
 	const interactionDate = input.date ?? today;
 	const sourceRef = input.source ?? `agent://log/${Date.now()}`;
@@ -2182,7 +2176,7 @@ async function handleLogInteraction(input, dataDir = DATA_DIR$48) {
 			raw.data.last_touchpoint = interactionDate;
 			let serialized = matter.stringify(raw.content, raw.data);
 			serialized = serialized.replace(/^(last_touchpoint:\s*)['"](\d{4}-\d{2}-\d{2})['"]/m, "$1$2");
-			fs.writeFileSync(mainFactsPath, serialized, "utf-8");
+			writeFileAtomic(mainFactsPath, serialized);
 		} catch {}
 		writeAuditEntry(dataDir, {
 			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
@@ -2261,8 +2255,8 @@ var update_deal_exports = /* @__PURE__ */ __exportAll({
 	handleUpdateDeal: () => handleUpdateDeal,
 	registerUpdateDeal: () => registerUpdateDeal
 });
-const DATA_DIR$47 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleUpdateDeal(input, dataDir = DATA_DIR$47) {
+const DATA_DIR$48 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleUpdateDeal(input, dataDir = DATA_DIR$48) {
 	const today = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
 	const deal = {
 		name: input.dealName,
@@ -2345,12 +2339,12 @@ Returns: { success: boolean, deal: object }`,
 }
 //#endregion
 //#region src/mcp/tools/export-customer.ts
-const DATA_DIR$46 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+const DATA_DIR$47 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
 function countInteractions(content) {
 	const matches = content.match(/^## \d{4}-\d{2}-\d{2}/gm);
 	return matches ? matches.length : 0;
 }
-async function handleExportCustomer(input, dataDir = DATA_DIR$46) {
+async function handleExportCustomer(input, dataDir = DATA_DIR$47) {
 	enforceRbac(dataDir, "export_customer");
 	const customerDir = path.join(dataDir, "customers", input.slug);
 	if (!fs.existsSync(customerDir)) return {
@@ -2443,8 +2437,8 @@ Returns:
 }
 //#endregion
 //#region src/mcp/tools/update-customer-facts.ts
-const DATA_DIR$45 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleUpdateCustomerFacts(input, dataDir = DATA_DIR$45) {
+const DATA_DIR$46 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleUpdateCustomerFacts(input, dataDir = DATA_DIR$46) {
 	const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 	try {
 		enforceRbac(dataDir, "update_customer_facts");
@@ -2594,10 +2588,36 @@ function scoreDeal(deal, signals) {
 		warnings
 	};
 }
+const MS_PER_DAY = 864e5;
+/**
+* Derive activity/close timing for a deal relative to `todayDate`. Centralizes
+* the day-diff math that deal-room and deal-agent each computed identically.
+* A blank/whitespace close_date yields `undefined` (not a NaN day count).
+*/
+function deriveDealTiming(deal, todayDate) {
+	const updatedDate = deal.updated ? new Date(deal.updated) : todayDate;
+	const daysSinceLastActivity = Math.floor((todayDate.getTime() - updatedDate.getTime()) / MS_PER_DAY);
+	const timing = {
+		daysSinceLastActivity,
+		daysInCurrentStage: daysSinceLastActivity
+	};
+	if (deal.close_date && deal.close_date.trim() !== "") timing.daysToClose = Math.floor((new Date(deal.close_date).getTime() - todayDate.getTime()) / MS_PER_DAY);
+	return timing;
+}
+/** Score a deal using timing derived from `todayDate` plus the deal's probability. */
+function scoreDealForToday(deal, todayDate) {
+	const timing = deriveDealTiming(deal, todayDate);
+	return scoreDeal(deal, {
+		daysSinceLastActivity: timing.daysSinceLastActivity,
+		daysInCurrentStage: timing.daysInCurrentStage,
+		...timing.daysToClose !== void 0 ? { daysToClose: timing.daysToClose } : {},
+		...deal.probability !== void 0 ? { probability: deal.probability } : {}
+	});
+}
 //#endregion
 //#region src/mcp/tools/get-deal-health.ts
-const DATA_DIR$44 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetDealHealth(input, dataDir = DATA_DIR$44) {
+const DATA_DIR$45 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetDealHealth(input, dataDir = DATA_DIR$45) {
 	try {
 		const deals = await readPipeline(dataDir, input.slug);
 		const today = /* @__PURE__ */ new Date();
@@ -2646,28 +2666,13 @@ Returns: { slug, deals: [{ deal, stage, score, grade, signals, warnings }] }`,
 }
 //#endregion
 //#region src/mcp/tools/get-pipeline-forecast.ts
-const DATA_DIR$43 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetPipelineForecast(input, dataDir = DATA_DIR$43) {
+const DATA_DIR$44 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetPipelineForecast(input, dataDir = DATA_DIR$44) {
 	try {
-		const customersDir = path.join(dataDir, "customers");
-		if (!fs.existsSync(customersDir)) return { content: [{
-			type: "text",
-			text: JSON.stringify({
-				deals: [],
-				totalWeightedValue: 0,
-				byStage: {}
-			}, null, 2)
-		}] };
-		const slugs = fs.readdirSync(customersDir).filter((d) => {
-			if (input.filter && !d.includes(input.filter)) return false;
-			return fs.statSync(path.join(customersDir, d)).isDirectory();
-		});
+		const slugs = listCustomerSlugs(dataDir).filter((d) => !input.filter || d.includes(input.filter));
 		const allDeals = [];
 		for (const slug of slugs) {
-			const pipelinePath = path.join(customersDir, slug, "pipeline.md");
-			if (!fs.existsSync(pipelinePath)) continue;
-			const { readPipeline } = await import("./pipeline-writer-eufx_0o1.js").then((n) => n.t);
-			const deals = await readPipeline(dataDir, slug).catch(() => []);
+			const deals = readPipelineSync(dataDir, slug);
 			for (const deal of deals) {
 				if (deal.stage === "won" || deal.stage === "lost") continue;
 				const prob = deal.probability ?? 50;
@@ -2723,13 +2728,13 @@ Returns: { deals: [...], totalWeightedValue: number, byStage: { stage: { count,
 }
 //#endregion
 //#region src/mcp/tools/summarize-meeting.ts
-const DATA_DIR$42 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleSummarizeMeeting(input, dataDir = DATA_DIR$42) {
+const DATA_DIR$43 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleSummarizeMeeting(input, dataDir = DATA_DIR$43) {
 	try {
 		let summary = input.transcript.slice(0, 400);
 		let nextSteps = [];
 		try {
-			const { callLlm } = await import("./llm-Z8RIYkpF.js").then((n) => n.n);
+			const { callLlm } = await import("./llm-BnSUBisu.js").then((n) => n.n);
 			const response = await callLlm(`Summarize this meeting transcript in 3-5 sentences and extract action items.\n\nTranscript:\n${input.transcript.slice(0, 3e3)}\n\nRespond as JSON: { "summary": "...", "nextSteps": ["..."] }`);
 			const parsed = JSON.parse(response);
 			summary = parsed.summary ?? summary;
@@ -2843,18 +2848,12 @@ function stagesPath(dataDir) {
 	return path.join(dataDir, ".agentic", "pipeline-stages.json");
 }
 function getPipelineStages(dataDir) {
-	const p = stagesPath(dataDir);
-	if (!fs.existsSync(p)) return DEFAULT_STAGES;
-	try {
-		return JSON.parse(fs.readFileSync(p, "utf-8"));
-	} catch {
-		return DEFAULT_STAGES;
-	}
+	return readJsonFile(stagesPath(dataDir), DEFAULT_STAGES);
 }
 //#endregion
 //#region src/mcp/tools/get-pipeline-stages.ts
-const DATA_DIR$41 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetPipelineStages(_input, dataDir = DATA_DIR$41) {
+const DATA_DIR$42 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetPipelineStages(_input, dataDir = DATA_DIR$42) {
 	const stages = getPipelineStages(dataDir);
 	return { content: [{
 		type: "text",
@@ -2872,21 +2871,18 @@ function registerGetPipelineStages(server) {
 //#region src/core/cross-customer.ts
 async function searchAcrossCustomers(dataDir, query, limit = 5, excludeSlug) {
 	const slugs = listCustomerSlugs(dataDir).filter((d) => d !== excludeSlug);
-	const allResults = [];
-	for (const slug of slugs) {
-		const results = await searchKnowledge(dataDir, slug, query, 2);
-		for (const r of results) allResults.push({
+	return (await Promise.all(slugs.map(async (slug) => {
+		return (await searchKnowledge(dataDir, slug, query, 2)).map((r) => ({
 			slug,
 			relevantContent: r.content.slice(0, 200),
 			score: r.score
-		});
-	}
-	return allResults.sort((a, b) => b.score - a.score).slice(0, limit);
+		}));
+	}))).flat().sort((a, b) => b.score - a.score).slice(0, limit);
 }
 //#endregion
 //#region src/mcp/tools/get-market-intelligence.ts
-const DATA_DIR$40 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetMarketIntelligence(input, dataDir = DATA_DIR$40) {
+const DATA_DIR$41 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetMarketIntelligence(input, dataDir = DATA_DIR$41) {
 	const excludeSlug = input.excludeCurrentCustomer ? input.slug : void 0;
 	const all = listCustomerSlugs(dataDir);
 	const totalCustomersSearched = excludeSlug ? all.filter((s) => s !== excludeSlug).length : all.length;
@@ -2917,7 +2913,7 @@ function registerGetMarketIntelligence(server) {
 }
 //#endregion
 //#region src/mcp/tools/get-relationship-graph.ts
-const DATA_DIR$39 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+const DATA_DIR$40 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
 function summarizeNode(n) {
 	return {
 		id: n.id,
@@ -2925,7 +2921,7 @@ function summarizeNode(n) {
 		email: n.properties["email"]
 	};
 }
-async function handleGetRelationshipGraph(input, dataDir = DATA_DIR$39) {
+async function handleGetRelationshipGraph(input, dataDir = DATA_DIR$40) {
 	try {
 		const graph = readGraph(dataDir, input.slug);
 		const stakeholders = getStakeholders(graph);
@@ -2993,9 +2989,9 @@ Returns: {
 }
 //#endregion
 //#region src/mcp/tools/get-relationship-health.ts
-const DATA_DIR$38 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+const DATA_DIR$39 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
 const MAX_HEALTH_AGE_MS = 3600 * 1e3;
-async function handleGetRelationshipHealth(input, dataDir = DATA_DIR$38) {
+async function handleGetRelationshipHealth(input, dataDir = DATA_DIR$39) {
 	try {
 		let health = readHealth(dataDir, input.slug);
 		if (health === null || Date.now() - new Date(health.updatedAt).getTime() > MAX_HEALTH_AGE_MS) {
@@ -3075,8 +3071,7 @@ async function writePlaybook(dataDir, slug, playbook) {
 	const filePath = path.join(dir, `${playbook.name}.md`);
 	await withFileQueue(filePath, async () => {
 		fs.mkdirSync(dir, { recursive: true });
-		const raw = matter.stringify(playbook.content, playbook.frontmatter);
-		fs.writeFileSync(filePath, raw, "utf-8");
+		writeFileAtomic(filePath, matter.stringify(playbook.content, playbook.frontmatter));
 	});
 }
 function toKebabCase(name) {
@@ -3278,11 +3273,10 @@ function writeAgentQueue(dataDir, slug, queue) {
 	const p = agentQueuePath(dataDir, slug);
 	const dir = path.dirname(p);
 	if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
-	const updated = {
+	writeJsonFile(p, {
 		...queue,
 		updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-	};
-	fs.writeFileSync(p, JSON.stringify(updated, null, 2), "utf-8");
+	});
 }
 function makeActionId() {
 	return `da_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
@@ -3317,17 +3311,9 @@ async function observeDeal(dataDir, slug, dealName, today) {
 	const deal = (await readPipeline(dataDir, slug).catch(() => [])).find((d) => d.name.toLowerCase() === dealName.toLowerCase());
 	if (!deal) return null;
 	const todayDate = new Date(today);
-	const updatedDate = deal.updated ? new Date(deal.updated) : todayDate;
-	const daysSinceLastActivity = Math.floor((todayDate.getTime() - updatedDate.getTime()) / 864e5);
-	const daysInCurrentStage = daysSinceLastActivity;
-	const daysToClose = deal.close_date && deal.close_date.trim() !== "" ? Math.floor((new Date(deal.close_date).getTime() - todayDate.getTime()) / 864e5) : void 0;
-	const dealHealthScore = scoreDeal(deal, {
-		daysSinceLastActivity,
-		daysInCurrentStage,
-		...daysToClose !== void 0 ? { daysToClose } : {},
-		...deal.probability !== void 0 ? { probability: deal.probability } : {}
-	});
-	const health = computeCustomerHealth(dataDir, slug, today);
+	const { daysSinceLastActivity, daysInCurrentStage, daysToClose } = deriveDealTiming(deal, todayDate);
+	const dealHealthScore = scoreDealForToday(deal, todayDate);
+	const health = readHealth(dataDir, slug) ?? computeCustomerHealth(dataDir, slug, today);
 	const atRiskContacts = health.contacts.filter((c) => c.riskFlags.length > 0).map((c) => c.email ?? c.contactId);
 	const coldContacts = health.contacts.filter((c) => c.trend === "cold").map((c) => c.email ?? c.contactId);
 	const stakeholders = getStakeholders(readGraph(dataDir, slug));
@@ -3555,7 +3541,7 @@ async function executeAction(action, dataDir) {
 	if (!slug) return "skipped";
 	switch (action.type) {
 		case "log_interaction": {
-			const { appendInteraction } = await import("./interactions-writer-DO3KcSR3.js").then((n) => n.r);
+			const { appendInteraction } = await import("./interactions-writer-BZzUIgJd.js").then((n) => n.r);
 			await appendInteraction(dataDir, slug, {
 				date: (/* @__PURE__ */ new Date()).toISOString().slice(0, 10),
 				type: action.payload["type"] ?? "Note",
@@ -3568,7 +3554,7 @@ async function executeAction(action, dataDir) {
 			return "executed";
 		}
 		case "schedule_meeting": {
-			const { appendInteraction } = await import("./interactions-writer-DO3KcSR3.js").then((n) => n.r);
+			const { appendInteraction } = await import("./interactions-writer-BZzUIgJd.js").then((n) => n.r);
 			await appendInteraction(dataDir, slug, {
 				date: (/* @__PURE__ */ new Date()).toISOString().slice(0, 10),
 				type: "Note",
@@ -3674,8 +3660,8 @@ async function runDealAgent(config, dataDir, llmFn = callLlm) {
 }
 //#endregion
 //#region src/mcp/tools/run-deal-agent.ts
-const DATA_DIR$37 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleRunDealAgent(input, dataDir = DATA_DIR$37) {
+const DATA_DIR$38 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleRunDealAgent(input, dataDir = DATA_DIR$38) {
 	try {
 		const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 		const result = await runDealAgent({
@@ -3742,8 +3728,8 @@ Returns: { assessment, riskLevel, plan[], actionsQueued[], actionsExecuted[], tr
 }
 //#endregion
 //#region src/mcp/tools/approve-agent-action.ts
-const DATA_DIR$36 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleApproveAgentAction(input, dataDir = DATA_DIR$36) {
+const DATA_DIR$37 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleApproveAgentAction(input, dataDir = DATA_DIR$37) {
 	try {
 		const queue = readAgentQueue(dataDir, input.slug);
 		const idx = queue.pendingActions.findIndex((a) => a.actionId === input.actionId);
@@ -4003,8 +3989,8 @@ async function buildSimulationInput(dataDir, horizon, today, externalSignals = [
 }
 //#endregion
 //#region src/mcp/tools/simulate-revenue.ts
-const DATA_DIR$35 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleSimulateRevenue(input, dataDir = DATA_DIR$35) {
+const DATA_DIR$36 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleSimulateRevenue(input, dataDir = DATA_DIR$36) {
 	try {
 		const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 		const horizon = input.horizon ?? "quarter";
@@ -4062,8 +4048,8 @@ Returns: { forecast: { p10, p50, p90, expected, stdDev, atRiskRevenue, byCloseMo
 }
 //#endregion
 //#region src/mcp/tools/get-playbook.ts
-const DATA_DIR$34 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetPlaybook(input, dataDir = DATA_DIR$34) {
+const DATA_DIR$35 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetPlaybook(input, dataDir = DATA_DIR$35) {
 	try {
 		const playbooks = listPlaybooks(dataDir, input.slug);
 		if (!(input.stage !== void 0 || input.value !== void 0 || input.healthScore !== void 0)) return { content: [{
@@ -4148,12 +4134,12 @@ Returns: { matches: [{ name, score, trigger, successRate, usedCount, content }],
 		...healthScore !== void 0 ? { healthScore } : {},
 		...daysSinceContact !== void 0 ? { daysSinceContact } : {},
 		...championPresent !== void 0 ? { championPresent } : {}
-	}, DATA_DIR$34));
+	}, DATA_DIR$35));
 }
 //#endregion
 //#region src/mcp/tools/create-playbook.ts
-const DATA_DIR$33 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleCreatePlaybook(input, dataDir = DATA_DIR$33) {
+const DATA_DIR$34 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleCreatePlaybook(input, dataDir = DATA_DIR$34) {
 	try {
 		const name = toKebabCase(input.name);
 		const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
@@ -4226,12 +4212,12 @@ Returns: { success: true, playbook: { name, trigger, successRate, path } }`,
 		trigger,
 		content,
 		...successRate !== void 0 ? { successRate } : {}
-	}, DATA_DIR$33));
+	}, DATA_DIR$34));
 }
 //#endregion
 //#region src/mcp/tools/list-playbooks.ts
-const DATA_DIR$32 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleListPlaybooks(input, dataDir = DATA_DIR$32) {
+const DATA_DIR$33 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleListPlaybooks(input, dataDir = DATA_DIR$33) {
 	try {
 		const playbooks = listPlaybooks(dataDir, input.slug);
 		return { content: [{
@@ -4270,12 +4256,12 @@ Args:
 
 Returns: { playbooks: [{ name, trigger, successRate, usedCount, lastUpdated }], count, slug }`,
 		inputSchema: z.object({ slug: z.string().describe("Customer ID") })
-	}, async ({ slug }) => handleListPlaybooks({ slug }, DATA_DIR$32));
+	}, async ({ slug }) => handleListPlaybooks({ slug }, DATA_DIR$33));
 }
 //#endregion
 //#region src/mcp/tools/distill-playbook.ts
-const DATA_DIR$31 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleDistillPlaybook(input, dataDir = DATA_DIR$31, llmFn = callLlm) {
+const DATA_DIR$32 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleDistillPlaybook(input, dataDir = DATA_DIR$32, llmFn = callLlm) {
 	try {
 		const result = await distillPlaybook(dataDir, input.slug, input.dealName, input.outcome, llmFn);
 		if (!result.ok) {
@@ -4334,7 +4320,7 @@ Returns: { success: true, playbook: { name, trigger, successRate, path }, reason
 		slug,
 		dealName,
 		outcome
-	}, DATA_DIR$31));
+	}, DATA_DIR$32));
 }
 //#endregion
 //#region src/core/goal-engine.ts
@@ -4552,8 +4538,8 @@ function getActiveGoals(dataDir) {
 }
 //#endregion
 //#region src/mcp/tools/pursue-goal.ts
-const DATA_DIR$30 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handlePursueGoal(input, dataDir = DATA_DIR$30, options = {}) {
+const DATA_DIR$31 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handlePursueGoal(input, dataDir = DATA_DIR$31, options = {}) {
 	try {
 		enforceRbac(dataDir, "pursue_goal");
 		const goal = await pursueGoal(dataDir, {
@@ -4616,12 +4602,12 @@ Returns: { goalId, description, target, deadline, decomposition: { analysis, cur
 		goal,
 		deadline,
 		...context !== void 0 ? { context } : {}
-	}, DATA_DIR$30));
+	}, DATA_DIR$31));
 }
 //#endregion
 //#region src/mcp/tools/get-goal-status.ts
-const DATA_DIR$29 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetGoalStatus(input, dataDir = DATA_DIR$29) {
+const DATA_DIR$30 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetGoalStatus(input, dataDir = DATA_DIR$30) {
 	try {
 		const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 		const allGoals = input.goalId ? readGoals(dataDir).filter((g) => g.id === input.goalId) : getActiveGoals(dataDir);
@@ -4680,17 +4666,17 @@ Args:
 
 Returns: { goals: [{ id, description, target, progress, status, deadline, daysRemaining, subGoals }], activeCount, completedCount }`,
 		inputSchema: z.object({ goalId: z.string().optional().describe("Specific goal ID (omit for all active goals)") })
-	}, async ({ goalId }) => handleGetGoalStatus({ ...goalId !== void 0 ? { goalId } : {} }, DATA_DIR$29));
+	}, async ({ goalId }) => handleGetGoalStatus({ ...goalId !== void 0 ? { goalId } : {} }, DATA_DIR$30));
 }
 //#endregion
 //#region src/mcp/tools/register-push-subscription.ts
-const DATA_DIR$28 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+const DATA_DIR$29 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
 const VALID_PROVIDERS = [
 	"gmail",
 	"microsoft-graph",
 	"slack"
 ];
-async function handleRegisterPushSubscription(input, dataDir = DATA_DIR$28) {
+async function handleRegisterPushSubscription(input, dataDir = DATA_DIR$29) {
 	try {
 		if (!VALID_PROVIDERS.includes(input.provider)) return { content: [{
 			type: "text",
@@ -4776,12 +4762,12 @@ Returns: { subscriptionId, provider, slug, status, expiresAt, createdAt, warning
 		...microsoftResource !== void 0 ? { microsoftResource } : {},
 		...slackTeamId !== void 0 ? { slackTeamId } : {},
 		...slackChannelId !== void 0 ? { slackChannelId } : {}
-	}, DATA_DIR$28));
+	}, DATA_DIR$29));
 }
 //#endregion
 //#region src/mcp/tools/get-push-status.ts
-const DATA_DIR$27 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetPushStatus(input, dataDir = DATA_DIR$27) {
+const DATA_DIR$28 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetPushStatus(input, dataDir = DATA_DIR$28) {
 	try {
 		let subs = await readSubscriptions(dataDir);
 		if (input.slug) subs = subs.filter((s) => s.slug === input.slug);
@@ -4853,7 +4839,7 @@ Returns: { subscriptions: [{ id, provider, slug, status, expiresAt, expiresInHou
 	}, async ({ slug, provider }) => handleGetPushStatus({
 		...slug !== void 0 ? { slug } : {},
 		...provider !== void 0 ? { provider } : {}
-	}, DATA_DIR$27));
+	}, DATA_DIR$28));
 }
 //#endregion
 //#region src/core/org-intelligence.ts
@@ -4919,8 +4905,8 @@ function deriveRecommendation(people, missingRoles) {
 }
 //#endregion
 //#region src/mcp/tools/get-org-intelligence.ts
-const DATA_DIR$26 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetOrgIntelligence(input, dataDir = DATA_DIR$26) {
+const DATA_DIR$27 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetOrgIntelligence(input, dataDir = DATA_DIR$27) {
 	try {
 		const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 		const map = buildStakeholderMap(dataDir, input.slug, today, input.dealName);
@@ -4971,15 +4957,7 @@ async function buildDealRoom(dataDir, slug, dealName, today) {
 	});
 	const todayDate = new Date(today);
 	const dealHealth = pipelineDeals.filter((d) => d.stage !== "won" && d.stage !== "lost").map((deal) => {
-		const updatedDate = deal.updated ? new Date(deal.updated) : todayDate;
-		const daysSinceLastActivity = Math.floor((todayDate.getTime() - updatedDate.getTime()) / 864e5);
-		const daysToClose = deal.close_date ? Math.floor((new Date(deal.close_date).getTime() - todayDate.getTime()) / 864e5) : void 0;
-		const scored = scoreDeal(deal, {
-			daysSinceLastActivity,
-			daysInCurrentStage: daysSinceLastActivity,
-			...daysToClose !== void 0 ? { daysToClose } : {},
-			...deal.probability !== void 0 ? { probability: deal.probability } : {}
-		});
+		const scored = scoreDealForToday(deal, todayDate);
 		return {
 			deal: deal.name,
 			stage: deal.stage,
@@ -5061,8 +5039,8 @@ function buildExecutiveSummary(slug, dealName, stakeholders, overallHealth, sim,
 }
 //#endregion
 //#region src/mcp/tools/open-deal-room.ts
-const DATA_DIR$25 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleOpenDealRoom(input, dataDir = DATA_DIR$25) {
+const DATA_DIR$26 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleOpenDealRoom(input, dataDir = DATA_DIR$26) {
 	try {
 		const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 		const brief = await buildDealRoom(dataDir, input.slug, input.dealName, today);
@@ -5145,8 +5123,8 @@ async function buildDailyBriefing(dataDir, today) {
 }
 //#endregion
 //#region src/mcp/tools/get-proactive-briefing.ts
-const DATA_DIR$24 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetProactiveBriefing(input, dataDir = DATA_DIR$24) {
+const DATA_DIR$25 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetProactiveBriefing(input, dataDir = DATA_DIR$25) {
 	try {
 		const briefing = await buildDailyBriefing(dataDir, input.date ?? (/* @__PURE__ */ new Date()).toISOString().slice(0, 10));
 		return { content: [{
@@ -5246,15 +5224,15 @@ function getTemplate(dataDir, id) {
 }
 //#endregion
 //#region src/mcp/tools/list-email-templates.ts
-const DATA_DIR$23 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleListEmailTemplates(input, dataDir = DATA_DIR$23) {
+const DATA_DIR$24 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleListEmailTemplates(input, dataDir = DATA_DIR$24) {
 	const summary = listTemplates(dataDir, input.category ? { category: input.category } : {}).map(({ body: _body, ...meta }) => meta);
 	return { content: [{
 		type: "text",
 		text: JSON.stringify(summary, null, 2)
 	}] };
 }
-function registerListEmailTemplates(server, dataDir = DATA_DIR$23) {
+function registerListEmailTemplates(server, dataDir = DATA_DIR$24) {
 	server.registerTool("list_email_templates", {
 		description: "List available email templates. Optionally filter by category (e.g. 'outreach', 'followup', 'support').",
 		inputSchema: z.object({ category: z.string().optional().describe("Filter by category") })
@@ -5288,8 +5266,8 @@ async function buildVariablesFromCustomer(dataDir, slug) {
 }
 //#endregion
 //#region src/mcp/tools/get-email-template.ts
-const DATA_DIR$22 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetEmailTemplate(input, dataDir = DATA_DIR$22) {
+const DATA_DIR$23 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetEmailTemplate(input, dataDir = DATA_DIR$23) {
 	const tmpl = getTemplate(dataDir, input.id);
 	if (!tmpl) return { content: [{
 		type: "text",
@@ -5305,7 +5283,7 @@ async function handleGetEmailTemplate(input, dataDir = DATA_DIR$22) {
 		}, null, 2)
 	}] };
 }
-function registerGetEmailTemplate(server, dataDir = DATA_DIR$22) {
+function registerGetEmailTemplate(server, dataDir = DATA_DIR$23) {
 	server.registerTool("get_email_template", {
 		description: "Get a specific email template by ID, including its body and detected variables.",
 		inputSchema: z.object({ id: z.string().describe("Template ID (e.g. 'enterprise-intro')") })
@@ -5313,8 +5291,8 @@ function registerGetEmailTemplate(server, dataDir = DATA_DIR$22) {
 }
 //#endregion
 //#region src/mcp/tools/draft-email.ts
-const DATA_DIR$21 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleDraftEmail(input, dataDir = DATA_DIR$21) {
+const DATA_DIR$22 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleDraftEmail(input, dataDir = DATA_DIR$22) {
 	const tmpl = getTemplate(dataDir, input.templateId);
 	if (!tmpl) return { content: [{
 		type: "text",
@@ -5328,17 +5306,17 @@ async function handleDraftEmail(input, dataDir = DATA_DIR$21) {
 	const interpolatedBody = interpolate(tmpl.body, vars);
 	let effectiveTone = input.tone;
 	if (!effectiveTone) {
-		const { resolveTone, toneInstruction } = await import("./tone-vNb2DAAD.js");
+		const { resolveTone, toneInstruction } = await import("./tone-mXSftvTn.js");
 		const instr = toneInstruction(resolveTone(dataDir, input.slug));
 		if (instr) effectiveTone = instr;
 	}
 	let body = interpolatedBody;
 	let polished = false;
 	if (effectiveTone) try {
-		const { callLlm } = await import("./llm-Z8RIYkpF.js").then((n) => n.n);
+		const { callLlm } = await import("./llm-BnSUBisu.js").then((n) => n.n);
 		const refined = await callLlm(`Rewrite the following email in a ${effectiveTone} tone. Keep the same language, preserve all names and facts, and do not invent details. Return ONLY the rewritten email body, no preamble.\n\n---\n${interpolatedBody}`);
 		if (refined && refined.trim()) {
-			const { labelAiContent } = await import("./compliance-B1kk5-YS.js").then((n) => n.t);
+			const { labelAiContent } = await import("./compliance-kq0xHRw3.js").then((n) => n.t);
 			body = labelAiContent(refined.trim());
 			polished = true;
 		}
@@ -5358,7 +5336,7 @@ async function handleDraftEmail(input, dataDir = DATA_DIR$21) {
 		}, null, 2)
 	}] };
 }
-function registerDraftEmail(server, dataDir = DATA_DIR$21) {
+function registerDraftEmail(server, dataDir = DATA_DIR$22) {
 	server.registerTool("draft_email", {
 		description: `Draft a personalized email for a customer using a stored template.
 Variables are auto-filled from the customer's main_facts.md. Override any variable manually.
@@ -5466,8 +5444,8 @@ async function updateEnrollment(dataDir, id, updates) {
 }
 //#endregion
 //#region src/mcp/tools/enroll-in-sequence.ts
-const DATA_DIR$20 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleEnrollInSequence(input, dataDir = DATA_DIR$20) {
+const DATA_DIR$21 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleEnrollInSequence(input, dataDir = DATA_DIR$21) {
 	const sequence = getSequence(dataDir, input.sequenceId);
 	if (!sequence) return { content: [{
 		type: "text",
@@ -5499,7 +5477,7 @@ async function handleEnrollInSequence(input, dataDir = DATA_DIR$20) {
 		})
 	}] };
 }
-function registerEnrollInSequence(server, dataDir = DATA_DIR$20) {
+function registerEnrollInSequence(server, dataDir = DATA_DIR$21) {
 	server.registerTool("enroll_in_sequence", {
 		description: `Enroll a contact in an email sequence. Validates that the sequence and its first template exist.
 Returns: { enrollmentId, sequenceName, totalSteps }`,
@@ -5516,8 +5494,8 @@ Returns: { enrollmentId, sequenceName, totalSteps }`,
 }
 //#endregion
 //#region src/mcp/tools/list-sequence-enrollments.ts
-const DATA_DIR$19 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleListSequenceEnrollments(input, dataDir = DATA_DIR$19) {
+const DATA_DIR$20 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleListSequenceEnrollments(input, dataDir = DATA_DIR$20) {
 	let enrollments = readEnrollments(dataDir);
 	if (input.slug !== void 0) enrollments = enrollments.filter((e) => e.slug === input.slug);
 	if (input.status !== void 0) enrollments = enrollments.filter((e) => e.status === input.status);
@@ -5526,7 +5504,7 @@ async function handleListSequenceEnrollments(input, dataDir = DATA_DIR$19) {
 		text: JSON.stringify({ enrollments }, null, 2)
 	}] };
 }
-function registerListSequenceEnrollments(server, dataDir = DATA_DIR$19) {
+function registerListSequenceEnrollments(server, dataDir = DATA_DIR$20) {
 	server.registerTool("list_sequence_enrollments", {
 		description: `List email sequence enrollments. Filter by customer slug or status.
 Returns: { enrollments: SequenceEnrollment[] }`,
@@ -5545,8 +5523,8 @@ Returns: { enrollments: SequenceEnrollment[] }`,
 }
 //#endregion
 //#region src/mcp/tools/unenroll-from-sequence.ts
-const DATA_DIR$18 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleUnenrollFromSequence(input, dataDir = DATA_DIR$18) {
+const DATA_DIR$19 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleUnenrollFromSequence(input, dataDir = DATA_DIR$19) {
 	if (!await updateEnrollment(dataDir, input.enrollmentId, { status: "paused" })) return { content: [{
 		type: "text",
 		text: JSON.stringify({
@@ -5559,7 +5537,7 @@ async function handleUnenrollFromSequence(input, dataDir = DATA_DIR$18) {
 		text: JSON.stringify({ success: true })
 	}] };
 }
-function registerUnenrollFromSequence(server, dataDir = DATA_DIR$18) {
+function registerUnenrollFromSequence(server, dataDir = DATA_DIR$19) {
 	server.registerTool("unenroll_from_sequence", {
 		description: `Unenroll (pause) a contact from an email sequence. Sets status to "paused" (soft delete).
 Returns: { success: boolean }`,
@@ -5568,8 +5546,8 @@ Returns: { success: boolean }`,
 }
 //#endregion
 //#region src/mcp/tools/list-sequences.ts
-const DATA_DIR$17 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleListSequences(_input, dataDir = DATA_DIR$17) {
+const DATA_DIR$18 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleListSequences(_input, dataDir = DATA_DIR$18) {
 	const sequences = listSequences(dataDir);
 	const enrollments = readEnrollments(dataDir);
 	const result = sequences.map((seq) => ({
@@ -5583,7 +5561,7 @@ async function handleListSequences(_input, dataDir = DATA_DIR$17) {
 		text: JSON.stringify({ sequences: result }, null, 2)
 	}] };
 }
-function registerListSequences(server, dataDir = DATA_DIR$17) {
+function registerListSequences(server, dataDir = DATA_DIR$18) {
 	server.registerTool("list_sequences", {
 		description: `List all email sequences with step count and enrollment count.
 Returns: { sequences: Array<{ id, name, stepCount, enrollmentCount }> }`,
@@ -5633,7 +5611,7 @@ function buildHtml(quote, config, customerName) {
 <p><strong>${config.companyName ?? ""}</strong><br>${config.companyAddress ?? ""}<br>${config.vatId ? `USt-IdNr.: ${config.vatId}` : ""}</p>
 <hr>
 <p><strong>An:</strong> ${customerName}</p>
-<p><strong>Datum:</strong> ${quote.createdAt.slice(0, 10)} &nbsp;&nbsp; <strong>Gültig bis:</strong> ${quote.validUntil}</p>
+<p><strong>Date:</strong> ${quote.createdAt.slice(0, 10)} &nbsp;&nbsp; <strong>Valid until:</strong> ${quote.validUntil}</p>
 <h2>Leistungen</h2>
 <table>
 <thead><tr><th>Beschreibung</th><th style="text-align:right">Menge</th><th style="text-align:right">Einzelpreis</th><th style="text-align:right">Gesamt</th></tr></thead>
@@ -5712,15 +5690,14 @@ async function generateQuote(dataDir, input) {
 		status: "draft",
 		htmlPath
 	};
-	fs.writeFileSync(path.join(dir, `${quoteNumber}.json`), JSON.stringify(quote, null, 2), "utf-8");
-	const html = buildHtml(quote, config, readCustomerName(dataDir, input.slug));
-	fs.writeFileSync(htmlPath, html, "utf-8");
+	writeFileAtomic(path.join(dir, `${quoteNumber}.json`), JSON.stringify(quote, null, 2));
+	writeFileAtomic(htmlPath, buildHtml(quote, config, readCustomerName(dataDir, input.slug)));
 	return quote;
 }
 //#endregion
 //#region src/mcp/tools/generate-quote.ts
-const DATA_DIR$16 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGenerateQuote(input, dataDir = DATA_DIR$16) {
+const DATA_DIR$17 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGenerateQuote(input, dataDir = DATA_DIR$17) {
 	try {
 		const quote = await generateQuote(dataDir, input);
 		return { content: [{
@@ -5744,7 +5721,7 @@ async function handleGenerateQuote(input, dataDir = DATA_DIR$16) {
 		}] };
 	}
 }
-function registerGenerateQuote(server, dataDir = DATA_DIR$16) {
+function registerGenerateQuote(server, dataDir = DATA_DIR$17) {
 	server.registerTool("generate_quote", {
 		description: `Generate a professional HTML quote/offer for a customer deal.
 Calculates subtotal, VAT, and total. Saves JSON + HTML to .agentic/quotes/.
@@ -5772,8 +5749,8 @@ Returns: { quoteNumber, htmlPath, total, currency, validUntil }`,
 }
 //#endregion
 //#region src/mcp/tools/get-quote-status.ts
-const DATA_DIR$15 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetQuoteStatus(input, dataDir = DATA_DIR$15) {
+const DATA_DIR$16 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetQuoteStatus(input, dataDir = DATA_DIR$16) {
 	if (input.quoteNumber) {
 		const quote = readQuote(dataDir, input.quoteNumber);
 		if (!quote) return { content: [{
@@ -5791,7 +5768,7 @@ async function handleGetQuoteStatus(input, dataDir = DATA_DIR$15) {
 		text: JSON.stringify({ quotes }, null, 2)
 	}] };
 }
-function registerGetQuoteStatus(server, dataDir = DATA_DIR$15) {
+function registerGetQuoteStatus(server, dataDir = DATA_DIR$16) {
 	server.registerTool("get_quote_status", {
 		description: `Get quote status and details. Filter by quoteNumber (single quote) or slug (all quotes for a customer).
 Returns quote with status: draft | sent | viewed | accepted | declined`,
@@ -5806,7 +5783,7 @@ Returns quote with status: draft | sent | viewed | accepted | declined`,
 }
 //#endregion
 //#region src/mcp/tools/get-booking-link.ts
-const DATA_DIR$14 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+const DATA_DIR$15 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
 function loadCalendlyConfig(dataDir) {
 	const p = path.join(dataDir, ".agentic", "integrations", "calendly.yaml");
 	if (!fs.existsSync(p)) return {};
@@ -5829,7 +5806,7 @@ function readCustomerFacts(dataDir, slug) {
 		...email ? { email } : {}
 	};
 }
-async function handleGetBookingLink(input, dataDir = DATA_DIR$14) {
+async function handleGetBookingLink(input, dataDir = DATA_DIR$15) {
 	const config = loadCalendlyConfig(dataDir);
 	const apiKey = config.apiKey ?? process.env["CALENDLY_API_KEY"] ?? "";
 	if (!apiKey) return { content: [{
@@ -5857,7 +5834,7 @@ async function handleGetBookingLink(input, dataDir = DATA_DIR$14) {
 		}] };
 	}
 }
-function registerGetBookingLink(server, dataDir = DATA_DIR$14) {
+function registerGetBookingLink(server, dataDir = DATA_DIR$15) {
 	server.registerTool("get_booking_link", {
 		description: `Get a Calendly booking link for a customer. Optionally pre-fills the customer's name/email.
 Requires CALENDLY_API_KEY env var or .agentic/integrations/calendly.yaml config.
@@ -5905,6 +5882,7 @@ const TICKET_HEADER = "# Tickets\n\n";
 const TABLE_HEADER = `| ID | Title | Status | Priority | Assignee | Created | SLA Due | Resolved |
 |----|-------|--------|----------|----------|---------|---------|---------|`;
 function ticketsPath(dataDir, slug) {
+	assertSafeSlug(slug);
 	return path.join(dataDir, "customers", slug, "tickets.md");
 }
 function escapeMd(s) {
@@ -5957,7 +5935,7 @@ async function upsertTicket(dataDir, slug, ticket) {
 	const idx = existing.findIndex((t) => t.id === ticket.id);
 	if (idx >= 0) existing[idx] = ticket;
 	else existing.push(ticket);
-	fs.writeFileSync(p, serializeTickets(existing), "utf-8");
+	writeFileAtomic(p, serializeTickets(existing));
 }
 function nextTicketId(tickets) {
 	const nums = tickets.map((t) => parseInt(t.id.replace("T-", ""), 10)).filter((n) => !isNaN(n));
@@ -5965,28 +5943,13 @@ function nextTicketId(tickets) {
 	return `T-${String(max + 1).padStart(3, "0")}`;
 }
 async function listAllTickets(dataDir, filter) {
-	const customersDir = path.join(dataDir, "customers");
-	if (!fs.existsSync(customersDir)) return [];
-	const slugs = filter?.slug ? [filter.slug] : fs.readdirSync(customersDir).filter((s) => {
-		try {
-			return fs.statSync(path.join(customersDir, s)).isDirectory();
-		} catch {
-			return false;
-		}
-	});
-	const results = [];
-	for (const slug of slugs) {
-		const tickets = await readTickets(dataDir, slug);
-		for (const ticket of tickets) {
-			if (filter?.status && ticket.status !== filter.status) continue;
-			if (filter?.priority && ticket.priority !== filter.priority) continue;
-			if (filter?.assignee && ticket.assignee !== filter.assignee) continue;
-			results.push({
-				slug,
-				ticket
-			});
-		}
-	}
+	const slugs = filter?.slug ? [filter.slug] : listCustomerSlugs(dataDir);
+	const results = (await Promise.all(slugs.map(async (slug) => {
+		return (await readTickets(dataDir, slug)).filter((ticket) => (!filter?.status || ticket.status === filter.status) && (!filter?.priority || ticket.priority === filter.priority) && (!filter?.assignee || ticket.assignee === filter.assignee)).map((ticket) => ({
+			slug,
+			ticket
+		}));
+	}))).flat();
 	const priorityOrder = {
 		urgent: 0,
 		high: 1,
@@ -6041,8 +6004,8 @@ function calcSlaDue(createdDate, priority, rules) {
 }
 //#endregion
 //#region src/mcp/tools/create-ticket.ts
-const DATA_DIR$13 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleCreateTicket(input, dataDir = DATA_DIR$13) {
+const DATA_DIR$14 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleCreateTicket(input, dataDir = DATA_DIR$14) {
 	const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 	const rules = loadSlaRules(dataDir);
 	const priority = input.priority ?? "normal";
@@ -6064,7 +6027,7 @@ async function handleCreateTicket(input, dataDir = DATA_DIR$13) {
 		text: JSON.stringify({ ticket }, null, 2)
 	}] };
 }
-function registerCreateTicket(server, dataDir = DATA_DIR$13) {
+function registerCreateTicket(server, dataDir = DATA_DIR$14) {
 	server.registerTool("create_ticket", {
 		description: `Create a support ticket for a customer. Auto-calculates SLA due date based on priority.
 Returns: { ticket } with id T-NNN, status=open, slaDue`,
@@ -6090,8 +6053,8 @@ Returns: { ticket } with id T-NNN, status=open, slaDue`,
 }
 //#endregion
 //#region src/mcp/tools/update-ticket.ts
-const DATA_DIR$12 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleUpdateTicket(input, dataDir = DATA_DIR$12) {
+const DATA_DIR$13 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleUpdateTicket(input, dataDir = DATA_DIR$13) {
 	const ticket = (await readTickets(dataDir, input.slug)).find((t) => t.id === input.ticketId);
 	if (!ticket) return { content: [{
 		type: "text",
@@ -6110,7 +6073,7 @@ async function handleUpdateTicket(input, dataDir = DATA_DIR$12) {
 		text: JSON.stringify({ ticket: updated }, null, 2)
 	}] };
 }
-function registerUpdateTicket(server, dataDir = DATA_DIR$12) {
+function registerUpdateTicket(server, dataDir = DATA_DIR$13) {
 	server.registerTool("update_ticket", {
 		description: `Update a ticket's status or assignee. Setting status=resolved auto-sets resolved date.
 Returns: { ticket }`,
@@ -6135,8 +6098,8 @@ Returns: { ticket }`,
 }
 //#endregion
 //#region src/mcp/tools/list-tickets.ts
-const DATA_DIR$11 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleListTickets(input, dataDir = DATA_DIR$11) {
+const DATA_DIR$12 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleListTickets(input, dataDir = DATA_DIR$12) {
 	const results = await listAllTickets(dataDir, {
 		...input.slug !== void 0 ? { slug: input.slug } : {},
 		...input.status !== void 0 ? { status: input.status } : {},
@@ -6148,7 +6111,7 @@ async function handleListTickets(input, dataDir = DATA_DIR$11) {
 		text: JSON.stringify({ tickets: results }, null, 2)
 	}] };
 }
-function registerListTickets(server, dataDir = DATA_DIR$11) {
+function registerListTickets(server, dataDir = DATA_DIR$12) {
 	server.registerTool("list_tickets", {
 		description: `List support tickets. Filter by customer, status, priority, or assignee. Sorted by priority then date.
 Returns: { tickets: Array<{ slug, ticket }> }`,
@@ -6178,8 +6141,8 @@ Returns: { tickets: Array<{ slug, ticket }> }`,
 }
 //#endregion
 //#region src/mcp/tools/close-ticket.ts
-const DATA_DIR$10 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleCloseTicket(input, dataDir = DATA_DIR$10) {
+const DATA_DIR$11 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleCloseTicket(input, dataDir = DATA_DIR$11) {
 	const ticket = (await readTickets(dataDir, input.slug)).find((t) => t.id === input.ticketId);
 	if (!ticket) return { content: [{
 		type: "text",
@@ -6206,7 +6169,7 @@ async function handleCloseTicket(input, dataDir = DATA_DIR$10) {
 		text: JSON.stringify({ ticket: updated }, null, 2)
 	}] };
 }
-function registerCloseTicket(server, dataDir = DATA_DIR$10) {
+function registerCloseTicket(server, dataDir = DATA_DIR$11) {
 	server.registerTool("close_ticket", {
 		description: `Close a support ticket. Optionally logs the resolution as an interaction.
 Returns: { ticket } with status=closed`,
@@ -6316,7 +6279,7 @@ async function recordSurveyResponse(dataDir, token, score, comment) {
 		const dir = responsesDir(dataDir, pending.surveyId);
 		fs.mkdirSync(dir, { recursive: true });
 		const filename = `${pending.slug}_${pending.contactEmail.replace("@", "_at_")}_${Date.now()}.json`;
-		fs.writeFileSync(path.join(dir, filename), JSON.stringify(response, null, 2), "utf-8");
+		writeFileAtomic(path.join(dir, filename), JSON.stringify(response, null, 2));
 		fs.unlinkSync(path.join(pendingDir, file));
 		return response;
 	} catch {
@@ -6356,12 +6319,12 @@ async function savePendingSurvey(dataDir, surveyId, slug, contactEmail, token) {
 		contactEmail,
 		sentAt: (/* @__PURE__ */ new Date()).toISOString()
 	};
-	fs.writeFileSync(path.join(pendingDir, filename), JSON.stringify(pending, null, 2), "utf-8");
+	writeFileAtomic(path.join(pendingDir, filename), JSON.stringify(pending, null, 2));
 }
 //#endregion
 //#region src/mcp/tools/send-nps-survey.ts
-const DATA_DIR$9 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleSendNpsSurvey(input, dataDir = DATA_DIR$9) {
+const DATA_DIR$10 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleSendNpsSurvey(input, dataDir = DATA_DIR$10) {
 	const survey = getSurvey(dataDir, input.surveyId);
 	if (!survey) return { content: [{
 		type: "text",
@@ -6382,7 +6345,7 @@ async function handleSendNpsSurvey(input, dataDir = DATA_DIR$9) {
 		}, null, 2)
 	}] };
 }
-function registerSendNpsSurvey(server, dataDir = DATA_DIR$9) {
+function registerSendNpsSurvey(server, dataDir = DATA_DIR$10) {
 	server.registerTool("send_nps_survey", {
 		description: `Generate an NPS/CSAT survey email for a customer contact. Returns subject, HTML body, and a token-based response URL.
 Does NOT send automatically — returns draft for review.
@@ -6402,8 +6365,8 @@ Returns: { token, subject, body, surveyUrl }`,
 }
 //#endregion
 //#region src/mcp/tools/get-survey-results.ts
-const DATA_DIR$8 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleGetSurveyResults(input, dataDir = DATA_DIR$8) {
+const DATA_DIR$9 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetSurveyResults(input, dataDir = DATA_DIR$9) {
 	const responses = loadSurveyResponses(dataDir, input.surveyId, input.slug);
 	const nps = calcNpsScore(responses);
 	const promoters = responses.filter((r) => r.score >= 9).length;
@@ -6429,7 +6392,7 @@ async function handleGetSurveyResults(input, dataDir = DATA_DIR$8) {
 		}, null, 2)
 	}] };
 }
-function registerGetSurveyResults(server, dataDir = DATA_DIR$8) {
+function registerGetSurveyResults(server, dataDir = DATA_DIR$9) {
 	server.registerTool("get_survey_results", {
 		description: `Get NPS/CSAT survey results with score breakdown. Calculates Net Promoter Score.
 Returns: { npsScore, totalResponses, promoters, passives, detractors, responses[] }`,
@@ -6459,18 +6422,21 @@ const KbArticleSchema = z.object({
 function kbDir(dataDir) {
 	return path.join(dataDir, ".agentic", "knowledge-base");
 }
-function listKbArticles(dataDir, opts) {
-	const dir = kbDir(dataDir);
+/** Category subdirectories of the knowledge base. */
+function kbCategories(dir) {
 	if (!fs.existsSync(dir)) return [];
-	const results = [];
-	const categories = fs.readdirSync(dir).filter((f) => {
+	return fs.readdirSync(dir).filter((f) => {
 		try {
 			return fs.statSync(path.join(dir, f)).isDirectory();
 		} catch {
 			return false;
 		}
 	});
-	for (const cat of categories) {
+}
+function listKbArticles(dataDir, opts) {
+	const dir = kbDir(dataDir);
+	const results = [];
+	for (const cat of kbCategories(dir)) {
 		const catDir = path.join(dir, cat);
 		const files = fs.readdirSync(catDir).filter((f) => f.endsWith(".md"));
 		for (const file of files) try {
@@ -6490,14 +6456,31 @@ function listKbArticles(dataDir, opts) {
 	return results;
 }
 function getKbArticle(dataDir, id) {
-	return listKbArticles(dataDir).find((a) => a.id === id) ?? null;
+	if (!isSafePathSegment(id)) return null;
+	const dir = kbDir(dataDir);
+	for (const cat of kbCategories(dir)) {
+		const filePath = path.join(dir, cat, `${id}.md`);
+		if (!fs.existsSync(filePath)) continue;
+		try {
+			const parsed = matter(fs.readFileSync(filePath, "utf-8"));
+			const meta = KbArticleSchema.safeParse(parsed.data);
+			if (!meta.success) return null;
+			return {
+				...meta.data,
+				body: parsed.content.trim()
+			};
+		} catch {
+			return null;
+		}
+	}
+	return null;
 }
 function writeKbArticle(dataDir, article) {
-	const dir = path.join(kbDir(dataDir), article.category);
-	fs.mkdirSync(dir, { recursive: true });
+	assertSafePathSegment(article.category, "knowledge-base category");
+	assertSafePathSegment(article.id, "knowledge-base article id");
 	const { body, ...meta } = article;
 	const content = matter.stringify(body, meta);
-	fs.writeFileSync(path.join(dir, `${article.id}.md`), content, "utf-8");
+	writeFileAtomic(path.join(kbDir(dataDir), article.category, `${article.id}.md`), content);
 }
 function searchKbSimple(dataDir, query, opts) {
 	const all = listKbArticles(dataDir, opts?.publicOnly ? { publicOnly: true } : {});
@@ -6510,8 +6493,8 @@ function getKbMetaForExport(article) {
 }
 //#endregion
 //#region src/mcp/tools/search-knowledge-base.ts
-const DATA_DIR$7 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleSearchKnowledgeBase(input, dataDir = DATA_DIR$7) {
+const DATA_DIR$8 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleSearchKnowledgeBase(input, dataDir = DATA_DIR$8) {
 	const results = searchKbSimple(dataDir, input.query, { ...input.publicOnly ? { publicOnly: true } : {} });
 	const limited = (input.category ? results.filter((a) => a.category === input.category) : results).slice(0, input.limit ?? 10);
 	return { content: [{
@@ -6526,7 +6509,7 @@ async function handleSearchKnowledgeBase(input, dataDir = DATA_DIR$7) {
 		}, null, 2)
 	}] };
 }
-function registerSearchKnowledgeBase(server, dataDir = DATA_DIR$7) {
+function registerSearchKnowledgeBase(server, dataDir = DATA_DIR$8) {
 	server.registerTool("search_knowledge_base", {
 		description: `Search the knowledge base for articles. Text search on title, body, and tags.
 Returns: { count, articles[] } with excerpts`,
@@ -6545,8 +6528,8 @@ Returns: { count, articles[] } with excerpts`,
 }
 //#endregion
 //#region src/mcp/tools/create-kb-article.ts
-const DATA_DIR$6 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleCreateKbArticle(input, dataDir = DATA_DIR$6) {
+const DATA_DIR$7 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleCreateKbArticle(input, dataDir = DATA_DIR$7) {
 	if (getKbArticle(dataDir, input.id)) return { content: [{
 		type: "text",
 		text: JSON.stringify({ error: `Article '${input.id}' already exists` })
@@ -6574,7 +6557,7 @@ async function handleCreateKbArticle(input, dataDir = DATA_DIR$6) {
 		}, null, 2)
 	}] };
 }
-function registerCreateKbArticle(server, dataDir = DATA_DIR$6) {
+function registerCreateKbArticle(server, dataDir = DATA_DIR$7) {
 	server.registerTool("create_kb_article", {
 		description: `Create a new knowledge base article. Articles are stored as Markdown files in .agentic/knowledge-base/.
 Returns: { id, title, category, path }`,
@@ -6599,8 +6582,8 @@ Returns: { id, title, category, path }`,
 }
 //#endregion
 //#region src/mcp/tools/backup-now.ts
-const DATA_DIR$5 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleBackupNow(input, dataDir = DATA_DIR$5) {
+const DATA_DIR$6 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleBackupNow(input, dataDir = DATA_DIR$6) {
 	const zipPath = path.join(dataDir, `dxcrm-backup-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19)}.zip`);
 	const manifest = await runBackup(zipPath, dataDir, { ...input.remote ? { remote: input.remote } : {} }).catch(() => null);
 	if (!manifest) return { content: [{
@@ -6637,8 +6620,8 @@ function registerBackupNow(server) {
 }
 //#endregion
 //#region src/mcp/tools/list-backups.ts
-const DATA_DIR$4 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
-async function handleListBackups(input, dataDir = DATA_DIR$4) {
+const DATA_DIR$5 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleListBackups(input, dataDir = DATA_DIR$5) {
 	const logEntries = readBackupLog(dataDir);
 	const fileEntries = listBackupsInDir(dataDir);
 	const entries = logEntries.length > 0 ? logEntries : fileEntries;
@@ -6672,8 +6655,8 @@ function registerListBackups(server) {
 }
 //#endregion
 //#region src/mcp/tools/trigger-sync.ts
-const DATA_DIR$3 = process.cwd();
-async function handleTriggerSync(input, dataDir = DATA_DIR$3) {
+const DATA_DIR$4 = process.cwd();
+async function handleTriggerSync(input, dataDir = DATA_DIR$4) {
 	const auth = getGmailAuth();
 	if (!auth) return { content: [{
 		type: "text",
@@ -6708,7 +6691,7 @@ async function handleTriggerSync(input, dataDir = DATA_DIR$3) {
 		try {
 			const sources = JSON.parse(fs.readFileSync(sourcesPath, "utf-8"));
 			if (!sources.gmail?.enabled || !sources.gmail.query) continue;
-			const { syncGmail } = await import("./gmail-sync-rQaVqKWd.js");
+			const { syncGmail } = await import("./gmail-sync-C-NmibzS.js");
 			const result = await syncGmail({
 				slug,
 				dataDir,
@@ -6767,8 +6750,8 @@ Returns: { success: boolean, synced: number, skipped: number, customers: [...],
 }
 //#endregion
 //#region src/mcp/tools/get-audit-log.ts
-const DATA_DIR$2 = process.cwd();
-async function handleGetAuditLog(input, dataDir = DATA_DIR$2) {
+const DATA_DIR$3 = process.cwd();
+async function handleGetAuditLog(input, dataDir = DATA_DIR$3) {
 	const entries = readAuditLog(dataDir);
 	const filterOpts = { limit: input.limit ?? 50 };
 	if (input.slug !== void 0) filterOpts.slug = input.slug;
@@ -6809,6 +6792,69 @@ Returns: { total: number, returned: number, entries: [{timestamp, actor, tool, s
 	});
 }
 //#endregion
+//#region src/mcp/tools/get-logs.ts
+const DATA_DIR$2 = process.env["DXCRM_DATA_DIR"] ?? process.cwd();
+async function handleGetLogs(input, dataDir = DATA_DIR$2) {
+	const query = {
+		...input.level !== void 0 ? { level: input.level } : {},
+		...input.component !== void 0 ? { component: input.component } : {},
+		...input.since !== void 0 ? { since: input.since } : {},
+		...input.contains !== void 0 ? { contains: input.contains } : {},
+		limit: input.limit ?? 100
+	};
+	const payload = input.summary ? summarizeLogs(dataDir, query) : (() => {
+		const entries = queryLogs(dataDir, query);
+		return {
+			returned: entries.length,
+			entries
+		};
+	})();
+	return { content: [{
+		type: "text",
+		text: JSON.stringify(payload, null, 2)
+	}] };
+}
+function registerGetLogs(server) {
+	server.registerTool("get_logs", {
+		title: "Get Logs",
+		description: `Read and analyze the structured application log (.agentic/logs.ndjson).
+Use to answer "what went wrong recently?", "show errors from gmail sync", or "summarize today's activity".
+
+Args:
+  level: Minimum level to include — debug | info | warn | error (optional)
+  component: Filter by component, e.g. "gmail-sync", "lancedb" (optional)
+  since: ISO timestamp; only entries at or after it (optional)
+  contains: Case-insensitive substring of the message (optional)
+  limit: Max entries to return (default 100, most recent)
+  summary: When true, return aggregated counts (by level + component) and recent errors instead of raw entries
+
+Returns (entries): { returned: number, entries: [{ts, level, component, message, context?}] }
+Returns (summary): { total, byLevel, byComponent, firstTs, lastTs, recentErrors }`,
+		inputSchema: z.object({
+			level: z.enum([
+				"debug",
+				"info",
+				"warn",
+				"error"
+			]).optional().describe("Minimum level"),
+			component: z.string().optional().describe("Filter by component"),
+			since: z.string().optional().describe("ISO timestamp lower bound"),
+			contains: z.string().optional().describe("Message substring filter"),
+			limit: z.number().int().min(1).max(1e3).optional().describe("Max entries (default 100)"),
+			summary: z.boolean().optional().describe("Return aggregated summary instead of entries")
+		})
+	}, async ({ level, component, since, contains, limit, summary }) => {
+		const input = {};
+		if (level !== void 0) input.level = level;
+		if (component !== void 0) input.component = component;
+		if (since !== void 0) input.since = since;
+		if (contains !== void 0) input.contains = contains;
+		if (limit !== void 0) input.limit = limit;
+		if (summary !== void 0) input.summary = summary;
+		return handleGetLogs(input);
+	});
+}
+//#endregion
 //#region src/mcp/prompts.ts
 /**
 * CRM playbook prompts exposed via MCP `prompts/list` + `prompts/get`.
@@ -6890,7 +6936,7 @@ function registerResources(server, dataDir = DATA_DIR$1) {
 		description: "Open and closed deals for a customer",
 		mimeType: "application/json"
 	}, async (uri, variables) => {
-		const { readPipeline } = await import("./pipeline-writer-eufx_0o1.js").then((n) => n.t);
+		const { readPipeline } = await import("./pipeline-writer-rDj-ni6q.js").then((n) => n.t);
 		const deals = await readPipeline(dataDir, String(variables["slug"]));
 		return { contents: [{
 			uri: uri.href,
@@ -6903,7 +6949,7 @@ function registerResources(server, dataDir = DATA_DIR$1) {
 		description: "Newest-first interaction history for a customer",
 		mimeType: "text/markdown"
 	}, async (uri, variables) => {
-		const { readInteractions } = await import("./interactions-writer-DO3KcSR3.js").then((n) => n.r);
+		const { readInteractions } = await import("./interactions-writer-BZzUIgJd.js").then((n) => n.r);
 		const text = await readInteractions(dataDir, String(variables["slug"]));
 		return { contents: [{
 			uri: uri.href,
@@ -6962,46 +7008,30 @@ function objectsSchemaPath(dataDir) {
 	return path.join(dataDir, ".agentic", "schema", "custom-objects.json");
 }
 function recordsPath(dataDir, name) {
+	assertSafePathSegment(name, "custom object name");
 	return path.join(dataDir, ".agentic", "objects", `${name}.json`);
 }
 function loadCustomObjects(dataDir) {
-	const p = objectsSchemaPath(dataDir);
-	if (!fs.existsSync(p)) return [];
-	try {
-		const data = JSON.parse(fs.readFileSync(p, "utf-8"));
-		return Array.isArray(data.objects) ? data.objects : [];
-	} catch {
-		return [];
-	}
+	return readJsonArray(objectsSchemaPath(dataDir), "objects");
 }
 function getObjectDefinition(dataDir, name) {
 	return loadCustomObjects(dataDir).find((o) => o.name === name);
 }
 /** Add or update (by name) a custom object definition. */
 function defineCustomObject(dataDir, def) {
+	assertSafePathSegment(def.name, "custom object name");
 	const objs = loadCustomObjects(dataDir);
 	const idx = objs.findIndex((o) => o.name === def.name);
 	if (idx >= 0) objs[idx] = def;
 	else objs.push(def);
-	const p = objectsSchemaPath(dataDir);
-	fs.mkdirSync(path.dirname(p), { recursive: true });
-	fs.writeFileSync(p, JSON.stringify({ objects: objs }, null, 2), "utf-8");
+	writeJsonArray(objectsSchemaPath(dataDir), "objects", objs);
 	return objs;
 }
 function listRecords(dataDir, name) {
-	const p = recordsPath(dataDir, name);
-	if (!fs.existsSync(p)) return [];
-	try {
-		const data = JSON.parse(fs.readFileSync(p, "utf-8"));
-		return Array.isArray(data.records) ? data.records : [];
-	} catch {
-		return [];
-	}
+	return readJsonArray(recordsPath(dataDir, name), "records");
 }
 function writeRecords(dataDir, name, records) {
-	const p = recordsPath(dataDir, name);
-	fs.mkdirSync(path.dirname(p), { recursive: true });
-	fs.writeFileSync(p, JSON.stringify({ records }, null, 2), "utf-8");
+	writeJsonArray(recordsPath(dataDir, name), "records", records);
 }
 function createRecord(dataDir, name, values) {
 	const def = getObjectDefinition(dataDir, name);
@@ -7059,7 +7089,7 @@ function handleCreateRecord(input, dataDir = DATA_DIR) {
 	enforceRbac(dataDir, "create_record");
 	const res = createRecord(dataDir, input.object, input.values);
 	if (!res.ok) return json({ error: (res.errors ?? []).join("; ") });
-	import("./webhooks-BO2UAnmn.js").then(({ emitEvent }) => emitEvent(dataDir, "record.created", {
+	import("./webhooks-sWZ8CJtR.js").then(({ emitEvent }) => emitEvent(dataDir, "record.created", {
 		object: input.object,
 		record: res.record
 	}));
@@ -7121,14 +7151,7 @@ function hashToken(token) {
 	return createHash("sha256").update(token).digest("hex");
 }
 function loadMcpTokens(dataDir) {
-	const p = tokensPath(dataDir);
-	if (!fs.existsSync(p)) return [];
-	try {
-		const data = JSON.parse(fs.readFileSync(p, "utf-8"));
-		return Array.isArray(data.tokens) ? data.tokens : [];
-	} catch {
-		return [];
-	}
+	return readJsonArray(tokensPath(dataDir), "tokens");
 }
 /**
 * Whether the HTTP MCP endpoint must require a bearer token.
@@ -7247,6 +7270,7 @@ function createMcpServer() {
 	registerListBackups(server);
 	registerTriggerSync(server);
 	registerGetAuditLog(server);
+	registerGetLogs(server);
 	registerCustomObjectTools(server);
 	registerPrompts(server);
 	registerResources(server);
@@ -7257,7 +7281,7 @@ async function startStdio() {
 	const server = createMcpServer();
 	const transport = new StdioServerTransport();
 	await server.connect(transport);
-	console.error("DatasynxOpenCRM MCP Server running via stdio");
+	logger.info("mcp-server", "running via stdio");
 }
 async function startHttp(port = 3847) {
 	await initOAuthFromDisk(process.cwd());
@@ -7297,7 +7321,7 @@ async function startHttp(port = 3847) {
 	});
 	app.get("/sessions", async (_req, res) => {
 		try {
-			const { readAllSessions } = await import("./session-D9ub6Wl1.js");
+			const { readAllSessions } = await import("./session-B6XaP83h.js");
 			const sessions = readAllSessions(dataDir);
 			res.json({ sessions });
 		} catch {
@@ -7431,15 +7455,15 @@ button{margin-top:12px;padding:12px 28px;background:#1a1a2e;color:#fff;border:no
 		res.send(surveyThankYouPage(numScore, commentText));
 	});
 	app.listen(port, () => {
-		console.error(`DatasynxOpenCRM MCP Server running on http://0.0.0.0:${port}/mcp`);
+		logger.info("mcp-server", "running over http", { url: `http://0.0.0.0:${port}/mcp` });
 	});
 }
 if ((process.env["DXCRM_MCP_MODE"] ?? "stdio") === "http") startHttp(parseInt(process.env["DXCRM_MCP_PORT"] ?? "3847", 10)).catch((err) => {
-	console.error("MCP Server fatal error:", err.message);
+	logger.error("mcp-server", "fatal error", { error: err.message });
 	process.exit(1);
 });
 else startStdio().catch((err) => {
-	console.error("MCP Server fatal error:", err.message);
+	logger.error("mcp-server", "fatal error", { error: err.message });
 	process.exit(1);
 });
 //#endregion