@datasynx/agentic-crm 1.6.0 → 1.8.0

package/dist/{token-resolver-BRLOmRvF.js → token-resolver-D98qPOOf.js}

@@ -1,5 +1,6 @@
 import { n as logger } from "./logger-Dyl4VcLO.js";
-import { c as refreshGoogleToken, d as saveMailboxToken, l as isTokenExpired, n as refreshMicrosoftToken, u as loadMailboxToken } from "./microsoft-DgbVlHdT.js";
+import { i as saveMailboxToken, r as loadMailboxToken, t as isTokenExpired } from "./token-store-B0h0USqe.js";
+import { c as refreshGoogleToken, n as refreshMicrosoftToken } from "./microsoft-dsC1fQQG.js";
 //#region src/sync/oauth/token-resolver.ts
 /**
 * Return a valid access token for a stored mailbox account, transparently
@@ -47,4 +48,4 @@ async function getFreshAccessToken(dataDir, provider, user, deps = {}) {
 //#endregion
 export { getFreshAccessToken };
 
-//# sourceMappingURL=token-resolver-BRLOmRvF.js.map
+//# sourceMappingURL=token-resolver-D98qPOOf.js.map

package/dist/{token-resolver-BRLOmRvF.js.map → token-resolver-D98qPOOf.js.map}

@@ -1 +1 @@
-{"version":3,"file":"token-resolver-BRLOmRvF.js","names":[],"sources":["../src/sync/oauth/token-resolver.ts"],"sourcesContent":["// src/sync/oauth/token-resolver.ts\nimport {\n  loadMailboxToken,\n  saveMailboxToken,\n  isTokenExpired,\n  type MailboxProvider,\n} from \"./token-store.js\";\nimport { refreshGoogleToken } from \"./google.js\";\nimport { refreshMicrosoftToken } from \"./microsoft.js\";\nimport { logger } from \"../../core/logger.js\";\n\nexport interface ResolverDeps {\n  env?: NodeJS.ProcessEnv;\n  now?: () => number;\n  refreshGoogle?: typeof refreshGoogleToken;\n  refreshMicrosoft?: typeof refreshMicrosoftToken;\n}\n\n/**\n * Return a valid access token for a stored mailbox account, transparently\n * refreshing it (and persisting the new token) when it has expired. Throws a\n * clear error when no token is stored or a re-login is required.\n */\nexport async function getFreshAccessToken(\n  dataDir: string,\n  provider: MailboxProvider,\n  user: string,\n  deps: ResolverDeps = {}\n): Promise<string> {\n  const env = deps.env ?? process.env;\n  const now = deps.now ?? Date.now;\n\n  const token = loadMailboxToken(dataDir, provider, user);\n  if (!token) {\n    throw new Error(\n      `No stored ${provider} token for ${user}. Run 'dxcrm mailbox login ${provider}' first.`\n    );\n  }\n  if (!isTokenExpired(token, 60_000, now())) return token.accessToken;\n  if (!token.refreshToken) {\n    throw new Error(`${provider} token for ${user} expired and has no refresh token — re-login.`);\n  }\n\n  logger.info(\"oauth\", \"refreshing mailbox access token\", { provider, user });\n\n  if (provider === \"gmail\") {\n    const clientId = env[\"DXCRM_GOOGLE_CLIENT_ID\"];\n    const clientSecret = env[\"DXCRM_GOOGLE_CLIENT_SECRET\"];\n    if (!clientId || !clientSecret) {\n      throw new Error(\n        \"DXCRM_GOOGLE_CLIENT_ID / DXCRM_GOOGLE_CLIENT_SECRET are required to refresh.\"\n      );\n    }\n    const refresh = deps.refreshGoogle ?? refreshGoogleToken;\n    const fresh = await refresh(clientId, clientSecret, token.refreshToken);\n    saveMailboxToken(dataDir, {\n      ...token,\n      accessToken: fresh.accessToken,\n      expiresAt: fresh.expiresAt,\n    });\n    return fresh.accessToken;\n  }\n\n  if (provider === \"microsoft\") {\n    const clientId = env[\"DXCRM_MS_CLIENT_ID\"];\n    if (!clientId) throw new Error(\"DXCRM_MS_CLIENT_ID is required to refresh.\");\n    const tenant = env[\"DXCRM_MS_TENANT\"] ?? \"common\";\n    const refresh = deps.refreshMicrosoft ?? refreshMicrosoftToken;\n    const fresh = await refresh(clientId, token.refreshToken, tenant);\n    saveMailboxToken(dataDir, {\n      ...token,\n      accessToken: fresh.accessToken,\n      ...(fresh.refreshToken ? { refreshToken: fresh.refreshToken } : {}),\n      expiresAt: fresh.expiresAt,\n    });\n    return fresh.accessToken;\n  }\n\n  // \"imap\" provider uses a static password/token; nothing to refresh.\n  return token.accessToken;\n}\n"],"mappings":";;;;;;;;AAuBA,eAAsB,oBACpB,SACA,UACA,MACA,OAAqB,CAAC,GACL;CACjB,MAAM,MAAM,KAAK,OAAO,QAAQ;CAChC,MAAM,MAAM,KAAK,OAAO,KAAK;CAE7B,MAAM,QAAQ,iBAAiB,SAAS,UAAU,IAAI;CACtD,IAAI,CAAC,OACH,MAAM,IAAI,MACR,aAAa,SAAS,aAAa,KAAK,6BAA6B,SAAS,SAChF;CAEF,IAAI,CAAC,eAAe,OAAO,KAAQ,IAAI,CAAC,GAAG,OAAO,MAAM;CACxD,IAAI,CAAC,MAAM,cACT,MAAM,IAAI,MAAM,GAAG,SAAS,aAAa,KAAK,8CAA8C;CAG9F,OAAO,KAAK,SAAS,mCAAmC;EAAE;EAAU;CAAK,CAAC;CAE1E,IAAI,aAAa,SAAS;EACxB,MAAM,WAAW,IAAI;EACrB,MAAM,eAAe,IAAI;EACzB,IAAI,CAAC,YAAY,CAAC,cAChB,MAAM,IAAI,MACR,8EACF;EAGF,MAAM,QAAQ,OADE,KAAK,iBAAiB,oBACV,UAAU,cAAc,MAAM,YAAY;EACtE,iBAAiB,SAAS;GACxB,GAAG;GACH,aAAa,MAAM;GACnB,WAAW,MAAM;EACnB,CAAC;EACD,OAAO,MAAM;CACf;CAEA,IAAI,aAAa,aAAa;EAC5B,MAAM,WAAW,IAAI;EACrB,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,4CAA4C;EAC3E,MAAM,SAAS,IAAI,sBAAsB;EAEzC,MAAM,QAAQ,OADE,KAAK,oBAAoB,uBACb,UAAU,MAAM,cAAc,MAAM;EAChE,iBAAiB,SAAS;GACxB,GAAG;GACH,aAAa,MAAM;GACnB,GAAI,MAAM,eAAe,EAAE,cAAc,MAAM,aAAa,IAAI,CAAC;GACjE,WAAW,MAAM;EACnB,CAAC;EACD,OAAO,MAAM;CACf;CAGA,OAAO,MAAM;AACf"}
+{"version":3,"file":"token-resolver-D98qPOOf.js","names":[],"sources":["../src/sync/oauth/token-resolver.ts"],"sourcesContent":["// src/sync/oauth/token-resolver.ts\nimport {\n  loadMailboxToken,\n  saveMailboxToken,\n  isTokenExpired,\n  type MailboxProvider,\n} from \"./token-store.js\";\nimport { refreshGoogleToken } from \"./google.js\";\nimport { refreshMicrosoftToken } from \"./microsoft.js\";\nimport { logger } from \"../../core/logger.js\";\n\nexport interface ResolverDeps {\n  env?: NodeJS.ProcessEnv;\n  now?: () => number;\n  refreshGoogle?: typeof refreshGoogleToken;\n  refreshMicrosoft?: typeof refreshMicrosoftToken;\n}\n\n/**\n * Return a valid access token for a stored mailbox account, transparently\n * refreshing it (and persisting the new token) when it has expired. Throws a\n * clear error when no token is stored or a re-login is required.\n */\nexport async function getFreshAccessToken(\n  dataDir: string,\n  provider: MailboxProvider,\n  user: string,\n  deps: ResolverDeps = {}\n): Promise<string> {\n  const env = deps.env ?? process.env;\n  const now = deps.now ?? Date.now;\n\n  const token = loadMailboxToken(dataDir, provider, user);\n  if (!token) {\n    throw new Error(\n      `No stored ${provider} token for ${user}. Run 'dxcrm mailbox login ${provider}' first.`\n    );\n  }\n  if (!isTokenExpired(token, 60_000, now())) return token.accessToken;\n  if (!token.refreshToken) {\n    throw new Error(`${provider} token for ${user} expired and has no refresh token — re-login.`);\n  }\n\n  logger.info(\"oauth\", \"refreshing mailbox access token\", { provider, user });\n\n  if (provider === \"gmail\") {\n    const clientId = env[\"DXCRM_GOOGLE_CLIENT_ID\"];\n    const clientSecret = env[\"DXCRM_GOOGLE_CLIENT_SECRET\"];\n    if (!clientId || !clientSecret) {\n      throw new Error(\n        \"DXCRM_GOOGLE_CLIENT_ID / DXCRM_GOOGLE_CLIENT_SECRET are required to refresh.\"\n      );\n    }\n    const refresh = deps.refreshGoogle ?? refreshGoogleToken;\n    const fresh = await refresh(clientId, clientSecret, token.refreshToken);\n    saveMailboxToken(dataDir, {\n      ...token,\n      accessToken: fresh.accessToken,\n      expiresAt: fresh.expiresAt,\n    });\n    return fresh.accessToken;\n  }\n\n  if (provider === \"microsoft\") {\n    const clientId = env[\"DXCRM_MS_CLIENT_ID\"];\n    if (!clientId) throw new Error(\"DXCRM_MS_CLIENT_ID is required to refresh.\");\n    const tenant = env[\"DXCRM_MS_TENANT\"] ?? \"common\";\n    const refresh = deps.refreshMicrosoft ?? refreshMicrosoftToken;\n    const fresh = await refresh(clientId, token.refreshToken, tenant);\n    saveMailboxToken(dataDir, {\n      ...token,\n      accessToken: fresh.accessToken,\n      ...(fresh.refreshToken ? { refreshToken: fresh.refreshToken } : {}),\n      expiresAt: fresh.expiresAt,\n    });\n    return fresh.accessToken;\n  }\n\n  // \"imap\" provider uses a static password/token; nothing to refresh.\n  return token.accessToken;\n}\n"],"mappings":";;;;;;;;;AAuBA,eAAsB,oBACpB,SACA,UACA,MACA,OAAqB,CAAC,GACL;CACjB,MAAM,MAAM,KAAK,OAAO,QAAQ;CAChC,MAAM,MAAM,KAAK,OAAO,KAAK;CAE7B,MAAM,QAAQ,iBAAiB,SAAS,UAAU,IAAI;CACtD,IAAI,CAAC,OACH,MAAM,IAAI,MACR,aAAa,SAAS,aAAa,KAAK,6BAA6B,SAAS,SAChF;CAEF,IAAI,CAAC,eAAe,OAAO,KAAQ,IAAI,CAAC,GAAG,OAAO,MAAM;CACxD,IAAI,CAAC,MAAM,cACT,MAAM,IAAI,MAAM,GAAG,SAAS,aAAa,KAAK,8CAA8C;CAG9F,OAAO,KAAK,SAAS,mCAAmC;EAAE;EAAU;CAAK,CAAC;CAE1E,IAAI,aAAa,SAAS;EACxB,MAAM,WAAW,IAAI;EACrB,MAAM,eAAe,IAAI;EACzB,IAAI,CAAC,YAAY,CAAC,cAChB,MAAM,IAAI,MACR,8EACF;EAGF,MAAM,QAAQ,OADE,KAAK,iBAAiB,oBACV,UAAU,cAAc,MAAM,YAAY;EACtE,iBAAiB,SAAS;GACxB,GAAG;GACH,aAAa,MAAM;GACnB,WAAW,MAAM;EACnB,CAAC;EACD,OAAO,MAAM;CACf;CAEA,IAAI,aAAa,aAAa;EAC5B,MAAM,WAAW,IAAI;EACrB,IAAI,CAAC,UAAU,MAAM,IAAI,MAAM,4CAA4C;EAC3E,MAAM,SAAS,IAAI,sBAAsB;EAEzC,MAAM,QAAQ,OADE,KAAK,oBAAoB,uBACb,UAAU,MAAM,cAAc,MAAM;EAChE,iBAAiB,SAAS;GACxB,GAAG;GACH,aAAa,MAAM;GACnB,GAAI,MAAM,eAAe,EAAE,cAAc,MAAM,aAAa,IAAI,CAAC;GACjE,WAAW,MAAM;EACnB,CAAC;EACD,OAAO,MAAM;CACf;CAGA,OAAO,MAAM;AACf"}

package/dist/token-store-B0h0USqe.js

@@ -0,0 +1,43 @@
+import { t as writeFileAtomic } from "./atomic-write-8yjqqLtS.js";
+import path from "path";
+import fs from "fs";
+//#region src/sync/oauth/token-store.ts
+function tokensPath(dataDir) {
+	return path.join(dataDir, ".agentic", "mailbox-tokens.json");
+}
+function keyOf(provider, user) {
+	return `${provider}:${user.toLowerCase()}`;
+}
+function readAll(dataDir) {
+	const file = tokensPath(dataDir);
+	if (!fs.existsSync(file)) return {};
+	try {
+		return JSON.parse(fs.readFileSync(file, "utf-8"));
+	} catch {
+		return {};
+	}
+}
+/** Persist (upsert) a mailbox OAuth token. */
+function saveMailboxToken(dataDir, token) {
+	const all = readAll(dataDir);
+	all[keyOf(token.provider, token.user)] = token;
+	const file = tokensPath(dataDir);
+	fs.mkdirSync(path.dirname(file), { recursive: true });
+	writeFileAtomic(file, JSON.stringify(all, null, 2));
+}
+/** Load a stored token for a provider+user, or undefined. */
+function loadMailboxToken(dataDir, provider, user) {
+	return readAll(dataDir)[keyOf(provider, user)];
+}
+/** List all stored mailbox tokens. */
+function listMailboxTokens(dataDir) {
+	return Object.values(readAll(dataDir));
+}
+/** True when the access token is missing or expires within `skewMs` (default 60s). */
+function isTokenExpired(token, skewMs = 6e4, now = Date.now()) {
+	return !token.accessToken || token.expiresAt <= now + skewMs;
+}
+//#endregion
+export { saveMailboxToken as i, listMailboxTokens as n, loadMailboxToken as r, isTokenExpired as t };
+
+//# sourceMappingURL=token-store-B0h0USqe.js.map

package/dist/token-store-B0h0USqe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store-B0h0USqe.js","names":[],"sources":["../src/sync/oauth/token-store.ts"],"sourcesContent":["// src/sync/oauth/token-store.ts\nimport fs from \"fs\";\nimport path from \"path\";\nimport { writeFileAtomic } from \"../../fs/atomic-write.js\";\n\nexport type MailboxProvider = \"gmail\" | \"microsoft\" | \"imap\";\n\nexport interface MailboxToken {\n  provider: MailboxProvider;\n  /** Mailbox login (email address). */\n  user: string;\n  accessToken: string;\n  /** Long-lived refresh token used to mint new access tokens. */\n  refreshToken?: string;\n  /** Access-token expiry as epoch milliseconds. */\n  expiresAt: number;\n  scope?: string;\n}\n\nfunction tokensPath(dataDir: string): string {\n  return path.join(dataDir, \".agentic\", \"mailbox-tokens.json\");\n}\n\nfunction keyOf(provider: MailboxProvider, user: string): string {\n  return `${provider}:${user.toLowerCase()}`;\n}\n\nfunction readAll(dataDir: string): Record<string, MailboxToken> {\n  const file = tokensPath(dataDir);\n  if (!fs.existsSync(file)) return {};\n  try {\n    return JSON.parse(fs.readFileSync(file, \"utf-8\") as string) as Record<string, MailboxToken>;\n  } catch {\n    return {};\n  }\n}\n\n/** Persist (upsert) a mailbox OAuth token. */\nexport function saveMailboxToken(dataDir: string, token: MailboxToken): void {\n  const all = readAll(dataDir);\n  all[keyOf(token.provider, token.user)] = token;\n  const file = tokensPath(dataDir);\n  fs.mkdirSync(path.dirname(file), { recursive: true });\n  writeFileAtomic(file, JSON.stringify(all, null, 2));\n}\n\n/** Load a stored token for a provider+user, or undefined. */\nexport function loadMailboxToken(\n  dataDir: string,\n  provider: MailboxProvider,\n  user: string\n): MailboxToken | undefined {\n  return readAll(dataDir)[keyOf(provider, user)];\n}\n\n/** List all stored mailbox tokens. */\nexport function listMailboxTokens(dataDir: string): MailboxToken[] {\n  return Object.values(readAll(dataDir));\n}\n\n/** True when the access token is missing or expires within `skewMs` (default 60s). */\nexport function isTokenExpired(token: MailboxToken, skewMs = 60_000, now = Date.now()): boolean {\n  return !token.accessToken || token.expiresAt <= now + skewMs;\n}\n"],"mappings":";;;;AAmBA,SAAS,WAAW,SAAyB;CAC3C,OAAO,KAAK,KAAK,SAAS,YAAY,qBAAqB;AAC7D;AAEA,SAAS,MAAM,UAA2B,MAAsB;CAC9D,OAAO,GAAG,SAAS,GAAG,KAAK,YAAY;AACzC;AAEA,SAAS,QAAQ,SAA+C;CAC9D,MAAM,OAAO,WAAW,OAAO;CAC/B,IAAI,CAAC,GAAG,WAAW,IAAI,GAAG,OAAO,CAAC;CAClC,IAAI;EACF,OAAO,KAAK,MAAM,GAAG,aAAa,MAAM,OAAO,CAAW;CAC5D,QAAQ;EACN,OAAO,CAAC;CACV;AACF;;AAGA,SAAgB,iBAAiB,SAAiB,OAA2B;CAC3E,MAAM,MAAM,QAAQ,OAAO;CAC3B,IAAI,MAAM,MAAM,UAAU,MAAM,IAAI,KAAK;CACzC,MAAM,OAAO,WAAW,OAAO;CAC/B,GAAG,UAAU,KAAK,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;CACpD,gBAAgB,MAAM,KAAK,UAAU,KAAK,MAAM,CAAC,CAAC;AACpD;;AAGA,SAAgB,iBACd,SACA,UACA,MAC0B;CAC1B,OAAO,QAAQ,OAAO,EAAE,MAAM,UAAU,IAAI;AAC9C;;AAGA,SAAgB,kBAAkB,SAAiC;CACjE,OAAO,OAAO,OAAO,QAAQ,OAAO,CAAC;AACvC;;AAGA,SAAgB,eAAe,OAAqB,SAAS,KAAQ,MAAM,KAAK,IAAI,GAAY;CAC9F,OAAO,CAAC,MAAM,eAAe,MAAM,aAAa,MAAM;AACxD"}

package/dist/token-store-CEmz8d-0.js

@@ -0,0 +1,2 @@
+import { n as listMailboxTokens } from "./token-store-B0h0USqe.js";
+export { listMailboxTokens };

package/dist/velocity-BtX1l5Gh.js

@@ -0,0 +1,2 @@
+import { t as analyzeVelocity } from "./velocity-C2l4cW0K.js";
+export { analyzeVelocity };

package/dist/velocity-C2l4cW0K.js

@@ -0,0 +1,123 @@
+import { a as listSnapshots, o as loadSnapshot } from "./snapshots-CQSOaIMs.js";
+//#region src/core/velocity.ts
+const DEFAULT_STALLED_DAYS = 14;
+const OPEN_STAGES = [
+	"lead",
+	"qualified",
+	"proposal",
+	"negotiation"
+];
+function dealKey(d) {
+	return `${d.slug}::${d.name}`;
+}
+function isOpen(stage) {
+	return stage !== "won" && stage !== "lost";
+}
+/** Whole days between two YYYY-MM-DD ids (b - a). */
+function daysBetween(a, b) {
+	const ms = Date.parse(`${b}T00:00:00Z`) - Date.parse(`${a}T00:00:00Z`);
+	return Math.round(ms / 864e5);
+}
+function stalledThreshold(opts) {
+	if (opts?.stalledDays !== void 0) return opts.stalledDays;
+	const n = parseInt(process.env["DXCRM_STALLED_DAYS"] ?? "", 10);
+	return Number.isFinite(n) && n > 0 ? n : DEFAULT_STALLED_DAYS;
+}
+/** Per-deal chronological list of (date, stage) observations. */
+function buildTimelines(snaps) {
+	const timelines = /* @__PURE__ */ new Map();
+	for (const snap of snaps) for (const deal of snap.deals) {
+		const key = dealKey(deal);
+		const points = timelines.get(key) ?? [];
+		points.push({
+			date: snap.id,
+			stage: deal.stage,
+			deal
+		});
+		timelines.set(key, points);
+	}
+	return timelines;
+}
+function analyzeVelocity(dataDir, opts) {
+	const threshold = stalledThreshold(opts);
+	const metas = listSnapshots(dataDir);
+	if (metas.length === 0) return {
+		fromId: null,
+		toId: null,
+		snapshotCount: 0,
+		stageDurations: [],
+		avgSalesCycleDays: null,
+		wonCount: 0,
+		stalledDeals: [],
+		stalledThresholdDays: threshold
+	};
+	const snaps = metas.flatMap((m) => {
+		const s = loadSnapshot(dataDir, m.id);
+		return s ? [s] : [];
+	});
+	const latestId = snaps[snaps.length - 1].id;
+	const timelines = buildTimelines(snaps);
+	const dwellTotals = /* @__PURE__ */ new Map();
+	const cycleDurations = [];
+	let wonCount = 0;
+	const stalledDeals = [];
+	for (const points of timelines.values()) {
+		const firstSeen = points[0].date;
+		let stageEnteredAt = points[0].date;
+		let currentStage = points[0].stage;
+		for (let i = 1; i < points.length; i++) {
+			const p = points[i];
+			if (p.stage !== currentStage) {
+				const acc = dwellTotals.get(currentStage) ?? {
+					total: 0,
+					samples: 0
+				};
+				acc.total += daysBetween(stageEnteredAt, p.date);
+				acc.samples += 1;
+				dwellTotals.set(currentStage, acc);
+				if (p.stage === "won") {
+					wonCount += 1;
+					cycleDurations.push(daysBetween(firstSeen, p.date));
+				}
+				currentStage = p.stage;
+				stageEnteredAt = p.date;
+			}
+		}
+		const last = points[points.length - 1];
+		if (last.date === latestId && isOpen(last.stage)) {
+			const daysInStage = daysBetween(stageEnteredAt, latestId);
+			if (daysInStage > threshold) stalledDeals.push({
+				slug: last.deal.slug,
+				name: last.deal.name,
+				stage: last.stage,
+				daysInStage,
+				value: last.deal.value
+			});
+		}
+	}
+	const stageDurations = OPEN_STAGES.flatMap((stage) => {
+		const acc = dwellTotals.get(stage);
+		if (!acc || acc.samples === 0) return [];
+		return [{
+			stage,
+			avgDays: Math.round(acc.total / acc.samples),
+			samples: acc.samples
+		}];
+	});
+	const avgSalesCycleDays = cycleDurations.length > 0 ? Math.round(cycleDurations.reduce((a, b) => a + b, 0) / cycleDurations.length) : null;
+	stalledDeals.sort((a, b) => b.daysInStage - a.daysInStage);
+	return {
+		fromId: snaps[0].id,
+		toId: latestId,
+		snapshotCount: snaps.length,
+		stageDurations,
+		avgSalesCycleDays,
+		wonCount,
+		stalledDeals,
+		stalledThresholdDays: threshold
+	};
+}
+//#endregion
+export { analyzeVelocity as t };
+
+//# sourceMappingURL=velocity-C2l4cW0K.js.map

package/dist/velocity-C2l4cW0K.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"velocity-C2l4cW0K.js","names":[],"sources":["../src/core/velocity.ts"],"sourcesContent":["import { listSnapshots, loadSnapshot } from \"./snapshots.js\";\nimport type { PipelineSnapshot, SnapshotDeal } from \"./snapshots.js\";\nimport type { PipelineDeal } from \"../schemas/pipeline.js\";\n\n/**\n * Pipeline velocity analytics, reconstructed from the daily snapshot history\n * (see snapshots.ts). By walking each deal's stage over consecutive snapshots\n * we recover: how long deals dwell in each stage, the average sales cycle\n * (first-seen → won), and which open deals have stalled (no stage change for\n * longer than a threshold). This answers \"where do deals get stuck?\" and\n * \"which deals are rotting?\" — without any extra bookkeeping at write time.\n */\nexport type Stage = PipelineDeal[\"stage\"];\n\nexport interface StageDuration {\n  stage: Stage;\n  avgDays: number;\n  /** Number of completed dwells observed (a deal left this stage). */\n  samples: number;\n}\n\nexport interface StalledDeal {\n  slug: string;\n  name: string;\n  stage: Stage;\n  daysInStage: number;\n  value: number;\n}\n\nexport interface VelocityReport {\n  fromId: string | null;\n  toId: string | null;\n  snapshotCount: number;\n  stageDurations: StageDuration[];\n  avgSalesCycleDays: number | null;\n  wonCount: number;\n  stalledDeals: StalledDeal[];\n  stalledThresholdDays: number;\n}\n\nconst DEFAULT_STALLED_DAYS = 14;\nconst OPEN_STAGES: Stage[] = [\"lead\", \"qualified\", \"proposal\", \"negotiation\"];\n\nfunction dealKey(d: { slug: string; name: string }): string {\n  return `${d.slug}::${d.name}`;\n}\n\nfunction isOpen(stage: Stage): boolean {\n  return stage !== \"won\" && stage !== \"lost\";\n}\n\n/** Whole days between two YYYY-MM-DD ids (b - a). */\nfunction daysBetween(a: string, b: string): number {\n  const ms = Date.parse(`${b}T00:00:00Z`) - Date.parse(`${a}T00:00:00Z`);\n  return Math.round(ms / 86_400_000);\n}\n\nfunction stalledThreshold(opts?: { stalledDays?: number }): number {\n  if (opts?.stalledDays !== undefined) return opts.stalledDays;\n  const n = parseInt(process.env[\"DXCRM_STALLED_DAYS\"] ?? \"\", 10);\n  return Number.isFinite(n) && n > 0 ? n : DEFAULT_STALLED_DAYS;\n}\n\ninterface TimelinePoint {\n  date: string;\n  stage: Stage;\n  deal: SnapshotDeal;\n}\n\n/** Per-deal chronological list of (date, stage) observations. */\nfunction buildTimelines(snaps: PipelineSnapshot[]): Map<string, TimelinePoint[]> {\n  const timelines = new Map<string, TimelinePoint[]>();\n  for (const snap of snaps) {\n    for (const deal of snap.deals) {\n      const key = dealKey(deal);\n      const points = timelines.get(key) ?? [];\n      points.push({ date: snap.id, stage: deal.stage, deal });\n      timelines.set(key, points);\n    }\n  }\n  return timelines;\n}\n\nexport function analyzeVelocity(dataDir: string, opts?: { stalledDays?: number }): VelocityReport {\n  const threshold = stalledThreshold(opts);\n  const metas = listSnapshots(dataDir);\n  if (metas.length === 0) {\n    return {\n      fromId: null,\n      toId: null,\n      snapshotCount: 0,\n      stageDurations: [],\n      avgSalesCycleDays: null,\n      wonCount: 0,\n      stalledDeals: [],\n      stalledThresholdDays: threshold,\n    };\n  }\n\n  const snaps: PipelineSnapshot[] = metas.flatMap((m) => {\n    const s = loadSnapshot(dataDir, m.id);\n    return s ? [s] : [];\n  });\n  const latestId = snaps[snaps.length - 1]!.id;\n\n  const timelines = buildTimelines(snaps);\n\n  // Accumulate completed stage dwells and sales-cycle durations.\n  const dwellTotals = new Map<Stage, { total: number; samples: number }>();\n  const cycleDurations: number[] = [];\n  let wonCount = 0;\n  const stalledDeals: StalledDeal[] = [];\n\n  for (const points of timelines.values()) {\n    const firstSeen = points[0]!.date;\n    let stageEnteredAt = points[0]!.date;\n    let currentStage = points[0]!.stage;\n\n    for (let i = 1; i < points.length; i++) {\n      const p = points[i]!;\n      if (p.stage !== currentStage) {\n        // currentStage dwell completed at p.date.\n        const acc = dwellTotals.get(currentStage) ?? { total: 0, samples: 0 };\n        acc.total += daysBetween(stageEnteredAt, p.date);\n        acc.samples += 1;\n        dwellTotals.set(currentStage, acc);\n\n        if (p.stage === \"won\") {\n          wonCount += 1;\n          cycleDurations.push(daysBetween(firstSeen, p.date));\n        }\n        currentStage = p.stage;\n        stageEnteredAt = p.date;\n      }\n    }\n\n    // Stalled check: open deal still present in the latest snapshot.\n    const last = points[points.length - 1]!;\n    if (last.date === latestId && isOpen(last.stage)) {\n      const daysInStage = daysBetween(stageEnteredAt, latestId);\n      if (daysInStage > threshold) {\n        stalledDeals.push({\n          slug: last.deal.slug,\n          name: last.deal.name,\n          stage: last.stage,\n          daysInStage,\n          value: last.deal.value,\n        });\n      }\n    }\n  }\n\n  const stageDurations: StageDuration[] = OPEN_STAGES.flatMap((stage) => {\n    const acc = dwellTotals.get(stage);\n    if (!acc || acc.samples === 0) return [];\n    return [{ stage, avgDays: Math.round(acc.total / acc.samples), samples: acc.samples }];\n  });\n\n  const avgSalesCycleDays =\n    cycleDurations.length > 0\n      ? Math.round(cycleDurations.reduce((a, b) => a + b, 0) / cycleDurations.length)\n      : null;\n\n  stalledDeals.sort((a, b) => b.daysInStage - a.daysInStage);\n\n  return {\n    fromId: snaps[0]!.id,\n    toId: latestId,\n    snapshotCount: snaps.length,\n    stageDurations,\n    avgSalesCycleDays,\n    wonCount,\n    stalledDeals,\n    stalledThresholdDays: threshold,\n  };\n}\n"],"mappings":";;AAwCA,MAAM,uBAAuB;AAC7B,MAAM,cAAuB;CAAC;CAAQ;CAAa;CAAY;AAAa;AAE5E,SAAS,QAAQ,GAA2C;CAC1D,OAAO,GAAG,EAAE,KAAK,IAAI,EAAE;AACzB;AAEA,SAAS,OAAO,OAAuB;CACrC,OAAO,UAAU,SAAS,UAAU;AACtC;;AAGA,SAAS,YAAY,GAAW,GAAmB;CACjD,MAAM,KAAK,KAAK,MAAM,GAAG,EAAE,WAAW,IAAI,KAAK,MAAM,GAAG,EAAE,WAAW;CACrE,OAAO,KAAK,MAAM,KAAK,KAAU;AACnC;AAEA,SAAS,iBAAiB,MAAyC;CACjE,IAAI,MAAM,gBAAgB,KAAA,GAAW,OAAO,KAAK;CACjD,MAAM,IAAI,SAAS,QAAQ,IAAI,yBAAyB,IAAI,EAAE;CAC9D,OAAO,OAAO,SAAS,CAAC,KAAK,IAAI,IAAI,IAAI;AAC3C;;AASA,SAAS,eAAe,OAAyD;CAC/E,MAAM,4BAAY,IAAI,IAA6B;CACnD,KAAK,MAAM,QAAQ,OACjB,KAAK,MAAM,QAAQ,KAAK,OAAO;EAC7B,MAAM,MAAM,QAAQ,IAAI;EACxB,MAAM,SAAS,UAAU,IAAI,GAAG,KAAK,CAAC;EACtC,OAAO,KAAK;GAAE,MAAM,KAAK;GAAI,OAAO,KAAK;GAAO;EAAK,CAAC;EACtD,UAAU,IAAI,KAAK,MAAM;CAC3B;CAEF,OAAO;AACT;AAEA,SAAgB,gBAAgB,SAAiB,MAAiD;CAChG,MAAM,YAAY,iBAAiB,IAAI;CACvC,MAAM,QAAQ,cAAc,OAAO;CACnC,IAAI,MAAM,WAAW,GACnB,OAAO;EACL,QAAQ;EACR,MAAM;EACN,eAAe;EACf,gBAAgB,CAAC;EACjB,mBAAmB;EACnB,UAAU;EACV,cAAc,CAAC;EACf,sBAAsB;CACxB;CAGF,MAAM,QAA4B,MAAM,SAAS,MAAM;EACrD,MAAM,IAAI,aAAa,SAAS,EAAE,EAAE;EACpC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC;CACpB,CAAC;CACD,MAAM,WAAW,MAAM,MAAM,SAAS,GAAI;CAE1C,MAAM,YAAY,eAAe,KAAK;CAGtC,MAAM,8BAAc,IAAI,IAA+C;CACvE,MAAM,iBAA2B,CAAC;CAClC,IAAI,WAAW;CACf,MAAM,eAA8B,CAAC;CAErC,KAAK,MAAM,UAAU,UAAU,OAAO,GAAG;EACvC,MAAM,YAAY,OAAO,GAAI;EAC7B,IAAI,iBAAiB,OAAO,GAAI;EAChC,IAAI,eAAe,OAAO,GAAI;EAE9B,KAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;GACtC,MAAM,IAAI,OAAO;GACjB,IAAI,EAAE,UAAU,cAAc;IAE5B,MAAM,MAAM,YAAY,IAAI,YAAY,KAAK;KAAE,OAAO;KAAG,SAAS;IAAE;IACpE,IAAI,SAAS,YAAY,gBAAgB,EAAE,IAAI;IAC/C,IAAI,WAAW;IACf,YAAY,IAAI,cAAc,GAAG;IAEjC,IAAI,EAAE,UAAU,OAAO;KACrB,YAAY;KACZ,eAAe,KAAK,YAAY,WAAW,EAAE,IAAI,CAAC;IACpD;IACA,eAAe,EAAE;IACjB,iBAAiB,EAAE;GACrB;EACF;EAGA,MAAM,OAAO,OAAO,OAAO,SAAS;EACpC,IAAI,KAAK,SAAS,YAAY,OAAO,KAAK,KAAK,GAAG;GAChD,MAAM,cAAc,YAAY,gBAAgB,QAAQ;GACxD,IAAI,cAAc,WAChB,aAAa,KAAK;IAChB,MAAM,KAAK,KAAK;IAChB,MAAM,KAAK,KAAK;IAChB,OAAO,KAAK;IACZ;IACA,OAAO,KAAK,KAAK;GACnB,CAAC;EAEL;CACF;CAEA,MAAM,iBAAkC,YAAY,SAAS,UAAU;EACrE,MAAM,MAAM,YAAY,IAAI,KAAK;EACjC,IAAI,CAAC,OAAO,IAAI,YAAY,GAAG,OAAO,CAAC;EACvC,OAAO,CAAC;GAAE;GAAO,SAAS,KAAK,MAAM,IAAI,QAAQ,IAAI,OAAO;GAAG,SAAS,IAAI;EAAQ,CAAC;CACvF,CAAC;CAED,MAAM,oBACJ,eAAe,SAAS,IACpB,KAAK,MAAM,eAAe,QAAQ,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,eAAe,MAAM,IAC5E;CAEN,aAAa,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,WAAW;CAEzD,OAAO;EACL,QAAQ,MAAM,GAAI;EAClB,MAAM;EACN,eAAe,MAAM;EACrB;EACA;EACA;EACA;EACA,sBAAsB;CACxB;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@datasynx/agentic-crm",
-  "version": "1.6.0",
+  "version": "1.8.0",
   "description": "The CRM your AI agents actually run — local-first, MCP-native, one autonomous agent per customer. 59 MCP tools for Claude Code, Codex & Cursor.",
   "type": "module",
   "license": "MIT",

package/dist/index-BBAlKZg6.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index-BBAlKZg6.d.ts","names":[],"sources":["../src/schemas/sources.ts","../src/schemas/main-facts.ts","../src/schemas/interaction.ts","../src/schemas/pipeline.ts","../src/schemas/ticket.ts","../src/schemas/quote.ts","../src/schemas/kb-article.ts","../src/schemas/survey.ts","../src/commands/create.ts","../src/commands/backup.ts","../src/commands/audit.ts","../src/commands/validate.ts","../src/fs/customer-dir.ts","../src/fs/audit-log.ts","../src/core/rbac.ts","../src/core/session-store.ts","../src/version.ts"],"mappings":";;;;;cAea,qBAAmB,CAAA,CAAA;;;IAAA,KAAA,aAAA;IAAA,OAAA,cAAA,aAAA,CAAA;EAUpB,CAAA,EAAA,OAAA,cAAa,EAAA;IAAA,IAAA,EAAA,OAAA;IAAkB,KAAA,EAAA,MAAA;IAAf,OAAE,EAAA,OAAA;EAAK,CAAA,EAAA;;;;ECvBtB,CAAA,CAAA,CAAA;EAoBX,QAAA,eAAA,YAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;SApB0B,EAAA,MAAA;EAAA,KAAA,CAAA,EAAA;IAsBhB,IAAA,EAAA,OAAS;IAAA,KAAA,EAAA,MAAA;IAAkB,OAAA,EAAA,OAAA;MAAf,SAAE;EAAK,QAAA,CAAA,EAAA;;;;ICtBlB,IAAA,EAAA,YAAA;IAYX,OAAA,EAAA,OAAA;;;;;;;;;;;;;;;;;;IAZiC,UAAA,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;EAAA,CAAA,GAAA,SAAA;EAcvB,OAAA,CAAA,EAAA,MAAA,GAAgB,SAAA;CAAA,CAAA;AAAU,KFS1B,aAAA,GAAgB,CAAA,CAAE,KETQ,CAAA,OFSK,mBETL,CAAA;;;;cDdzB,iBAAe,CAAA,CAAA;;;EDaf,KAAA,eAAA,YAMX,CAAA;EAAA,KAAA,eAAA,YAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAN8B,CAAA,EAAA,MAAA,GAAA,SAAA;EAAA,KAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAUpB,KAAA,CAAA,EAAA,MAAA,GAAa,SAAA;EAAA,QAAA,CAAA,EAAA,MAAA,GAAA,SAAA;YAAkB,CAAA,EAAA,MAAA,GAAA,SAAA;UAAb,CAAA,EAAA,MAAA,GAAA,SAAA;EAAK,eAAA,CAAA,EAAA,MAAA,GAAA,SAAA;;;;ACvBnC,CAAA,CAAA;AAoBE,KAEU,SAAA,GAAY,CAAA,CAAE,KAFxB,CAAA,OAEqC,eAFrC,CAAA;;;;cCpBW,wBAAsB,CAAA,CAAA;;;EFatB,SAAA,eAMX,UAAA,CAAA,CAAA,SAAA,EAAA,UAAA,CAAA,CAAA,CAAA;EAAA,IAAA,aAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAN8B,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;EAAA,WAAA,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;AAUhC,CAAA,CAAA;AAAyB,KETb,gBAAA,GAAmB,CAAA,CAAE,KFSR,CAAA,OETqB,sBFSrB,CAAA;;;;cGvBZ,oBAAkB,CAAA,CAAA;;;EHalB,KAAA,eAAA,YAMX,CAAA;EAAA,QAAA,cAAA,YAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;KGLU,YAAA,GAAe,CAAA,CAAE,aAAa;;;;cCd7B,oBAAkB,CAAA,CAAA;cAClB,sBAAoB,CAAA,CAAA;cAEpB,cAAY,CAAA,CAAA;EJUZ,EAAA,aAAA;EAMX,KAAA,aAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAN8B,KIQpB,MAAA,GAAS,CAAA,CAAE,KJRS,CAAA,OIQI,YJRJ,CAAA;AAUpB,KIDA,YAAA,GAAe,CAAA,CAAE,KJCJ,CAAA,OIDiB,kBJCjB,CAAA;AAAA,KIAb,cAAA,GAAiB,CAAA,CAAE,KJAN,CAAA,OIAmB,oBJAnB,CAAA;;;;cKvBZ,qBAAmB,CAAA,CAAA;;;ELanB,SAAA,aAMX;EAAA,KAAA,aAAA;;;;;;;;;;;;cKZW,aAAW,CAAA,CAAA;;;;;;;;;;;;;;;;ILMQ,QAAA,EAAA,MAAA;IAAA,SAAA,EAAA,MAAA;IAUpB,KAAA,EAAA,MAAa;EAAA,CAAA,CAAA,EAAA,MAAA,CAAA;UAAkB,aAAA;YAAb,aAAA;EAAK,GAAA,aAAA;;;;ECvBtB,cAAA,cAoBX,YAAA,CAAA;EAAA,UAAA,aAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;EApB0B,KAAA,EAAA,MAAA;EAsBhB,WAAA,EAAS,MAAA;EAAA,IAAA,EAAA,MAAA;UAAkB,EAAA,MAAA;WAAb,EAAA;IAAK,WAAA,EAAA,MAAA;;;;ECtBlB,CAAA,EAAA;EAYX,QAAA,EAAA,MAAA;;;;;;;;;;;;KGcU,aAAA,GAAgB,CAAA,CAAE,aAAa;KAC/B,KAAA,GAAQ,CAAA,CAAE,aAAa;;;;cC3BtB,iBAAe,CAAA,CAAA;;;ENaf,QAAA,cAMX,YAAA,CAAA;EAAA,IAAA,cAAA,WAAA,YAAA,EAAA,MAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;KMRU,aAAA,GAAgB,CAAA,CAAE,aAAa;KAC/B,SAAA,GAAY;;;;;;cCZX,wBAAsB,CAAA,CAAA;;;EPatB,QAAA,aAAA;EAMX,KAAA,cAAA,YAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAN8B,CAAA,EAAA,KAAA,GAAA,MAAA,GAAA,KAAA,GAAA,SAAA;EAAA,KAAA,CAAA,EAAA;IAUpB,GAAA,CAAA,EAAA,MAAa,GAAA,SAAA;IAAA,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;MAAkB,SAAA;gBAAb,CAAA,EAAA,OAAA,GAAA,SAAA;EAAK,aAAA,CAAA,EAAA,MAAA,GAAA,SAAA;;cOXtB,sBAAoB,CAAA,CAAA;;ENZpB,IAAA,aAAA;EAoBX,YAAA,aAAA;;;;;;;;;;;;;;;;;;;;;;;;;KMGU,gBAAA,GAAmB,CAAA,CAAE,aAAa;KAClC,cAAA,GAAiB,CAAA,CAAE,aAAa;;;;iBCjBtB,cAAA;;;ERMT,KAAA,CAAA,EAAA,MAAA;EAMX,OAAA,CAAA,EAAA,MAAA;IQPE;;;;;;UCNa,cAAA;;;ETOJ,YAAA,EAAA,MAAA;EAMX,WAAA,EAAA,MAAA,EAAA;;;;;;;;AAIU,iBSuJU,SAAA,CTvJG,MAAA,CAAA,EAAA,MAAA,EAAA,OAAA,CAAA,EAAA,MAAA,EAAA,KAAA,EAAA;EAAA,OAAA,CAAA,EAAA,OAAA;QAAkB,CAAA,EAAA,MAAA;IS2JxC,OT3J2B,CS2JnB,cT3JmB,GAAA,IAAA,CAAA;;;iBUpBR,QAAA;;;EVUT,KAAA,CAAA,EAAA,MAAA;EAMX,IAAA,CAAA,EAAA,OAAA;sBURC;;;AVQD,iBWoBoB,WAAA,CXpBpB,IAAA,EAAA;;qBWoB2E;;;AXpB3E,iBYCc,cAAA,CZDd,OAAA,EAAA,MAAA,EAAA,IAAA,EAAA,MAAA,CAAA,EAAA,OAAA;;;iBYuCoB,aAAA,iCAA8C,QAAQ;;;;UCzD3D,UAAA;;;;EbYJ,IAAA,EAAA,MAAA;EAMX,OAAA,EAAA,MAAA;;iBacc,YAAA,mBAA+B;iBA6B/B,cAAA,UACL;;;;IAER;;;;KC/DS,IAAA;UAEK,UAAA;UACP,eAAe;YACb;EdOC,eAAA,CAAA,EcNO,MdYlB,CAAA,MAAA,EAAA,MAAA,EAAA,CAAA;EAAA;ccVY,eAAe;;iBAsBb,aAAA,mBAAgC;iBAUhC,OAAA,kCAAyC;iBAuBzC,cAAA;;;;;;;;UClEC,OAAA;;;;EfeJ,KAAA,CAAA,EAAA,MAAA;;iBeNG,UAAA,IAAc;iBAId,UAAA,CAAA,GAAc;iBAId,YAAA,CAAA;;;;cCjBH,OAAA"}

package/dist/knowledge-base-Cc0niBFf.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"knowledge-base-Cc0niBFf.js","names":[],"sources":["../src/mcp/capabilities.ts","../src/schemas/kb-article.ts","../src/fs/knowledge-base.ts"],"sourcesContent":["// src/mcp/capabilities.ts\n// Single Source of Truth for capability documentation.\n// Used by get_capabilities() MCP tool AND dxcrm guide CLI command.\n\nexport const CAPABILITIES_TEXT = `\n# DatasynxOpenCRM — Agent Guide\n\n## Product\nDatasynxOpenCRM is a local-first, MCP-native CRM. All customer data lives in markdown\nfiles on your machine. No cloud, no HubSpot, no per-seat pricing.\n\n## Agent Wake (Telegram Notifications)\n\\`dxcrm agent spawn\\` enables a wake-triggered agent for a customer. When new emails arrive,\nthe agent sends a Telegram notification so you never miss an inbound message.\n\\`\\`\\`\ndxcrm agent spawn acme-corp --channel telegram\n\\`\\`\\`\nRequires: \\`TELEGRAM_BOT_TOKEN\\` + \\`TELEGRAM_CHAT_ID\\` env vars.\n\n## Golden Path — Agent Session Workflow\n\nThe recommended sequence for a productive agent session:\n\n1. \\`get_capabilities()\\` — understand available tools (this guide)\n2. \\`get_active_session()\\` — check for an active customer session\n3. \\`get_customer_context({ slug })\\` — load full briefing for the customer\n4. \\`search_customer_knowledge({ slug, query })\\` — find specific historical information\n5. \\`log_interaction()\\` / \\`update_deal()\\` — write back what happened\n\n## RBAC — Role-Based Access Control\n\nTools enforce the \\`DXCRM_ACTOR\\` environment variable for identity. Configure roles with \\`dxcrm rbac set\\`.\n\n| Role | Permissions |\n|---|---|\n| admin | All tools, all customers |\n| manager | log_interaction, update_deal, pursue_goal + all read tools |\n| rep | log_interaction, update_deal (own customers only) + all read tools |\n\nDefault role: rep (when DXCRM_ACTOR is not set or has no assigned role).\n\nConfig: \\`.agentic/rbac.json\\` | Actor: \\`DXCRM_ACTOR\\` env var\n\n## Available Tools\n\n| Tool | Purpose | RBAC |\n|---|---|---|\n| get_capabilities | Returns this guide — understand what the CRM can do | any |\n| get_active_session | Check which customer session is currently active | any |\n| get_customer_context | Full LLM-ready briefing for a customer (last 10 interactions, pipeline, contacts) | any (rep: own only) |\n| search_customer_knowledge | Hybrid vector + full-text search across emails and transcripts for a customer | any |\n| list_customers | List all customers with stage, last interaction date, and deal value | any (rep: own only) |\n| log_interaction | Write a new interaction entry (call, email, meeting, note) — immediately searchable | rep+ |\n| update_deal | Create or update a deal in pipeline.md — upserts by deal name | rep+ |\n| update_customer_facts | Update fields in customer profile (domain, contact, stage, tags) | admin |\n| export_customer | Export all customer data (incl. attachment contents) as JSON or Markdown | admin |\n| get_deal_health | Score deal health 0–100 (A–F grade) based on activity, velocity, close date, probability | any |\n| get_pipeline_forecast | Aggregate weighted pipeline revenue across all customers grouped by stage | any |\n| get_pipeline_stages | List all configured pipeline stages (defaults: lead, qualified, proposal, negotiation, won, lost) | any |\n| summarize_meeting | LLM-summarize a transcript and log it as a Meeting interaction | rep+ |\n| get_market_intelligence | Semantic search across all customers for patterns and common topics | any |\n| get_relationship_graph | Stakeholder map: champions, blockers, economic buyers, warm intro paths | any |\n| get_relationship_health | Health scores (0–100, A–F, trend) per contact with decay detection and risk flags | any |\n| run_deal_agent | Analyze deal and generate prioritized action plan (observe/suggest/act autonomy levels) | rep+ |\n| approve_agent_action | Approve or reject a pending action from the deal agent queue | rep+ |\n| simulate_revenue | Monte Carlo pipeline forecast — P10/P50/P90, sensitivity map, at-risk revenue | any |\n| get_playbook | Retrieve playbooks matching current deal situation (trigger-matched, sorted by success rate) | any |\n| create_playbook | Create or update a playbook with trigger DSL encoding proven tactics | rep+ |\n| list_playbooks | List all playbooks for a customer (metadata only, no body) | any |\n| distill_playbook | LLM-extract a reusable playbook from a won or lost deal's interaction history | rep+ |\n| pursue_goal | Set a revenue/pipeline goal and get an AI-decomposed action plan with sub-goals | manager+ |\n| get_goal_status | Get all active goals or a specific goal with progress, days remaining, sub-goals | any |\n| register_push_subscription | Register real-time push subscription (Gmail Pub/Sub, MS Graph, Slack Events) | admin |\n| get_push_status | Show all push subscriptions: expiry, events processed, renewal needs | any |\n| get_org_intelligence | Stakeholder map with champions, buyers, blockers, health scores, risk flags, recommendation | any |\n| open_deal_room | Multi-agent deal brief: graph + health + deal health + simulation + playbook in one call | any |\n| get_proactive_briefing | Daily briefing: urgent alerts, opportunities, P50/P90 forecast, top action | any |\n| list_email_templates | List all saved email templates with id, name, category, subject | any |\n| get_email_template | Retrieve a single email template with full body and detected variables | any |\n| draft_email | Draft a personalized email from a template with auto-filled customer variables | rep+ |\n| enroll_in_sequence | Enroll a contact in a multi-step email sequence | rep+ |\n| list_sequence_enrollments | List active sequence enrollments filtered by customer or status | any |\n| unenroll_from_sequence | Pause (soft-unenroll) a contact from an active sequence | rep+ |\n| list_sequences | List all defined email sequences with step count and enrollment count | any |\n| generate_quote | Generate a professional HTML quote with line items, VAT, subtotal, total | rep+ |\n| get_quote_status | Retrieve a generated quote by number or list all quotes for a customer | any |\n| get_booking_link | Get a Calendly booking link for a customer — optionally pre-fills name/email | rep+ |\n| create_ticket | Create a support ticket with auto-calculated SLA due date based on priority | rep+ |\n| update_ticket | Update ticket status or assignee (resolved auto-sets resolution date) | rep+ |\n| list_tickets | List tickets filtered by customer, status, priority, or assignee | any |\n| close_ticket | Close a ticket and optionally log resolution as an interaction | rep+ |\n| send_nps_survey | Generate NPS/CSAT survey token + HTML email draft (does not send automatically) | rep+ |\n| get_survey_results | NPS score, promoter/passive/detractor breakdown, all responses for a survey | any |\n| search_knowledge_base | Full-text search across KB articles (title, body, tags) with category and public filters | any |\n| create_kb_article | Create a new knowledge base article stored as Markdown in .agentic/knowledge-base/ | rep+ |\n| backup_now | Trigger immediate backup of customers/ + .agentic/ with SHA-256 integrity check | admin |\n| list_backups | List available backups with date, size, verification status, and customer count | any |\n| trigger_sync | Force immediate Gmail sync for one or all customers | rep+ |\n| get_audit_log | Read audit log — all write operations with actor, tool, customer | admin |\n| get_logs | Query/aggregate the structured application log (level, component, errors) | admin |\n| get_diagnostics | Self-diagnostic health check (data integrity, temp files, log errors, backups) | admin |\n| get_pipeline_changes | Pipeline time-travel: what changed (won/lost/moved/value) since a date | any |\n| define_custom_object | Define a runtime custom object type with typed fields (no migration) | admin |\n| create_record | Create a record of a custom object (validated against its schema) | rep+ |\n| list_records | List records of a custom object | any |\n| list_custom_objects | List all defined custom objects and their schemas | any |\n\n## MCP Resources (read-only)\n\nBesides Tools, the server exposes read-only Resources you can fetch via resources/read:\n- crm://customers — list of all customer slugs (JSON)\n- crm://customer/{slug} — LLM-ready briefing (main facts, recent interactions, pipeline)\n- crm://pipeline/{slug} — deals for a customer (JSON)\n- crm://timeline/{slug} — newest-first interaction history (Markdown)\n\n## MCP Prompts (playbooks)\n\nReusable playbook prompts via prompts/get (argument: slug):\n- deal_risk_review — assess deal health and risk, recommend next steps\n- draft_follow_up — draft a personalized follow-up email\n- account_brief — concise executive account brief\n- pipeline_summary — pipeline + forecast summary\n\n## Tool Reference\n\n### get_capabilities()\nReturns all available MCP tools, their inputs, and the CRM workflow guide.\n- Input: none\n- Returns: This guide text\n\n### get_active_session()\nCheck which customer is currently active in the session store.\n- Input: none\n- Returns: { hasSession: boolean, customerSlug?, customerName?, startedAt?, owner? }\n\n### get_customer_context({ slug? })\nLoad complete briefing for a customer. Reads main_facts.md, last 10 interactions,\nand pipeline deals. Returns a structured markdown context block.\nAutomatically triggers a background Gmail sync if last sync was >30 minutes ago.\n- Input: { slug?: string } — Customer ID (e.g. \"acme-corp\"). Leave empty for active session.\n- Returns: Formatted markdown with Quick Reference, Contacts, Critical Context,\n  Recent Activity, Pipeline, and Open Questions\n- Performance: <3 seconds. Token budget: <3000 tokens.\n\n### search_customer_knowledge({ slug, query, limit? })\nHybrid vector + full-text search across all emails and transcripts for a customer.\nSearches the LanceDB docs table for the given customer.\n- Input: { slug: string, query: string, limit?: number (default 5, max 50) }\n- Returns: { results: Array<{ content, score, source }> }\n\n### list_customers({ filter? })\nList all customers with their stage, last interaction date, and deal value.\nRBAC: rep role only sees owned customers.\n- Input: { filter?: string } — Optional substring filter on name or slug (case-insensitive)\n- Returns: Array of { slug, name, stage, lastInteraction?, dealValue? }\n\n### log_interaction({ slug, type, summary, with, nextSteps?, direction?, source?, date? })\nWrite a new interaction entry to interactions.md. Immediately searchable.\nAlso auto-updates the relationship graph and health scores (fire-and-forget).\nUse after every call, meeting, or email.\nRBAC: rep+\n- Input:\n  slug: Customer ID\n  type: \"Email\" | \"Call\" | \"Meeting\" | \"Note\" | \"Demo\" | \"Proposal\" | \"Contract\" | \"Other\"\n  summary: 2-5 sentences describing what happened\n  with: Who was involved (name or email)\n  nextSteps?: Array of action items\n  direction?: \"inbound\" | \"outbound\"\n  source?: Source reference string (auto-generated if omitted)\n  date?: Interaction date YYYY-MM-DD (defaults to today)\n- Returns: { success: boolean, path: string, entry: string }\n\n### update_deal({ slug, dealName, stage?, value?, probability?, closeDate?, notes? })\nUpdate or create a deal in pipeline.md. Upserts by deal name.\nRBAC: rep+\n- Input:\n  slug: Customer ID\n  dealName: Deal name (used as unique key)\n  stage?: \"lead\" | \"qualified\" | \"proposal\" | \"negotiation\" | \"won\" | \"lost\"\n  value?: Deal value in euros\n  probability?: Win probability (0-100)\n  closeDate?: Expected close date (YYYY-MM-DD)\n  notes?: Free-text notes\n- Returns: { success: boolean, deal: object }\n\n### update_customer_facts({ slug, name?, domain?, email?, phone?, industry?, relationshipStage?, dealValue?, primaryContact?, timezone?, tags? })\nUpdate fields in a customer's main_facts.md profile. Merges patch into existing data. Sets updated = today.\nRBAC: admin\n- Input: slug (required) + any combination of the optional fields\n- Returns: { success: boolean, facts: object }\n\n### export_customer({ slug, format?, includeAttachmentContent? })\nExport all customer data (main_facts + interactions + pipeline + attachments).\nSet includeAttachmentContent to inline every attachment's converted Markdown —\na single sendable bundle of all conversations and documents for the customer.\nRBAC: admin\n- Input: { slug: string, format?: \"json\" | \"markdown\" (default \"json\"), includeAttachmentContent?: boolean (default false) }\n- Returns (JSON): { slug, exportedAt, mainFacts, interactionsCount, pipeline, attachments[, attachmentContents] }\n- Returns (Markdown): Formatted document with all sections (and attachment contents when requested)\n\n### get_deal_health({ slug })\nScore the health of all deals for a customer based on activity recency, stage velocity,\nclose date proximity, and probability.\n- Input: { slug: string }\n- Returns: { slug, deals: [{ deal, stage, score, grade, signals, warnings }] }\n\n### get_pipeline_forecast({ filter? })\nAggregate weighted pipeline revenue across all customers. Groups open deals by stage,\ncomputes probability-weighted expected revenue. Excludes won/lost deals.\n- Input: { filter?: string } — Optional filter by customer slug substring\n- Returns: { deals: [...], totalWeightedValue: number, byStage: { stage: { count, weightedValue } } }\n\n### get_pipeline_stages()\nReturns all configured pipeline stages. Falls back to default stages if no custom stages configured.\n- Input: none\n- Returns: { stages: [{ id, label, order, probability, color, final }] }\n\n### summarize_meeting({ slug, transcript, with?, date? })\nLLM-summarize a meeting transcript and log it as a Meeting interaction.\nFalls back to raw text slice if LLM unavailable.\nRBAC: rep+\n- Input:\n  slug: Customer ID\n  transcript: Full meeting transcript text\n  with?: Participant names\n  date?: Meeting date YYYY-MM-DD (defaults to today)\n- Returns: { success, summary, nextSteps, sourceRef }\n\n### get_market_intelligence({ query, excludeCurrentCustomer?, slug? })\nSearch across all customers to find patterns, common topics, or similar issues.\nUses semantic search (LanceDB) across all customer knowledge bases.\nResults use slug (not real names) for privacy.\n- Input: { query: string, excludeCurrentCustomer?: boolean, slug?: string }\n- Returns: { query, results: CrossCustomerResult[], totalCustomersSearched }\n\n### get_relationship_graph({ slug })\nReturns the knowledge graph for a customer: contacts, companies, and their relationships.\nAuto-populated from every log_interaction call. Shows stakeholder map with champions, blockers,\neconomic buyers, and warm intro paths.\n- Input: { slug: string }\n- Returns: { nodeCount, edgeCount, updatedAt, stakeholders: { champions[], blockers[], economicBuyers[], allContacts[], missingRoles[] }, warmIntroPaths[], nodes[], edges[] }\n\n### get_relationship_health({ slug })\nReturns health scores (0-100, A-F grade) for all contacts. Scores decay when cadence breaks.\nRisk flags: NO_CONTACT_14D, NO_CONTACT_30D, CHAMPION_SILENT.\nRecomputes automatically if stale (>1h) or missing.\n- Input: { slug: string }\n- Returns: { overallHealth, updatedAt, atRiskContacts[], coldContacts[], contacts: ContactHealth[] }\n\n### run_deal_agent({ slug, dealName, autonomyLevel?, instruction?, valueThreshold? })\nAnalyzes deal situation (health, relationships, stakeholder gaps) via LLM (rule-based fallback).\nReturns prioritized action plan with confidence scores and full reasoning trace.\nautonomyLevel: \"observe\" (read-only) | \"suggest\" (queue for review, default) | \"act\" (auto-execute if confidence ≥ 0.7 and value < valueThreshold)\nRBAC: rep+\n- Input: { slug, dealName, autonomyLevel?: \"observe\"|\"suggest\"|\"act\", instruction?, valueThreshold?: number (default 50000) }\n- Returns: { assessment, riskLevel, plan[], actionsQueued[], actionsExecuted[], trace }\n\n### approve_agent_action({ slug, actionId, approved })\nExecute (approved=true) or reject (approved=false) a pending deal agent action.\nFind actionId in run_deal_agent response.actionsQueued[].actionId\nRBAC: rep+\n- Input: { slug, actionId, approved: boolean }\n- Returns: { success, actionId, status }\n\n### simulate_revenue({ horizon?, iterations? })\nMonte Carlo simulation over all active deals. Adjusts probabilities via health score (D12) and\nchampion presence (D11). Returns P10/P50/P90 confidence interval + sensitivity map.\nhorizon: \"quarter\" (default) | \"year\"\n- Returns: { forecast: { p10, p50, p90, expected, stdDev, atRiskRevenue, byCloseMonth, topRisks, sensitivityMap }, confidence, dealCount, horizon }\n\n### get_playbook({ slug, stage?, value?, healthScore?, daysSinceContact?, championPresent? })\nReturns playbooks matching the current deal situation. Without deal context, returns all playbooks.\nPlaybooks are sorted by success rate (highest first). run_deal_agent uses playbooks automatically.\n- Input: slug (required) + optional deal context fields for trigger matching\n- Returns: { matches: [{ name, score, matchedConditions, trigger, successRate, usedCount, content }], totalPlaybooks, slug }\n\n### create_playbook({ slug, name, trigger, content, successRate? })\nCreate or update a playbook encoding proven tactics for a specific deal situation.\nTrigger DSL uses AND-only conditions: deal_stage_<s> | value > N | value < N | days_stalled > N | health < N | health > N | no_champion | has_champion\nRBAC: rep+\n- Input: slug, name, trigger (DSL string), content (markdown), successRate? (0–1, default 0.5)\n- Returns: { success: true, playbook: { name, trigger, successRate, usedCount, lastUpdated, path } }\n\n### list_playbooks({ slug })\nList all playbooks for a customer (metadata only — no body content for performance).\n- Input: { slug: string }\n- Returns: { playbooks: [{ name, trigger, successRate, usedCount, lastUpdated }], count, slug }\n\n### distill_playbook({ slug, dealName, outcome })\nLLM analyzes a deal's interaction history and extracts a reusable playbook.\nRun after every won or lost deal to build procedural memory.\nRBAC: rep+\noutcome: \"won\" | \"lost\"\n- Returns: { success: true, playbook: { name, trigger, successRate, path }, reasoning }\n\n### pursue_goal({ goal, deadline, context? })\nSet a revenue or pipeline goal and get an AI-decomposed action plan.\nAnalyzes current pipeline (P50 forecast) and decomposes the gap into prioritized sub-goals per deal.\nPersists goal to .agentic/goals.json for tracking.\nRBAC: manager+\n- Input: { goal: string, deadline: \"YYYY-MM-DD\", context?: string }\n- Returns: { goalId, description, target, deadline, decomposition: { analysis, currentPipeline, gap, subGoals, probabilisticOutcome } }\n\n### get_goal_status({ goalId? })\nGet the status of active goals. Without goalId, returns all active goals.\n- Input: { goalId?: string } — omit for all active goals\n- Returns: { goals: [{ id, description, target, progress, status, deadline, daysRemaining, subGoals }], activeCount, completedCount }\n\n### register_push_subscription({ provider, slug, webhookUrl, ... })\nRegister a real-time push subscription so providers send events in real-time (no polling).\nRBAC: admin only\n- Input:\n  provider: \"gmail\" | \"microsoft-graph\" | \"slack\"\n  slug: Customer slug to receive events for\n  webhookUrl: Public HTTPS URL for provider callbacks\n  gmailTopicName?: (Gmail) Cloud Pub/Sub topic name\n  microsoftClientState?: (MS Graph) Secret for HMAC verification\n  microsoftResource?: (MS Graph) Resource path\n  slackTeamId?: (Slack) Workspace team ID\n  slackChannelId?: (Slack) Optional specific channel\n- Returns: { subscriptionId, provider, slug, status, expiresAt, createdAt, warning? }\n\n### get_push_status({ slug?, provider? })\nShow all push subscriptions with expiry and event counts.\n- Input: { slug?: string, provider?: \"gmail\" | \"microsoft-graph\" | \"slack\" }\n- Returns: { subscriptions: [{ id, provider, slug, status, expiresAt, expiresInHours, needsRenewal, lastEventAt, eventsProcessed }], summary: { total, active, expiringSoon, expired } }\n\n### get_org_intelligence({ slug, dealName? })\nBuild a stakeholder map for a customer: champions, economic buyers, blockers, health scores, risk flags, and a prioritised recommendation.\n- Input: { slug: string, dealName?: string }\n- Returns: { slug, updatedAt, people: [{ name, email, role, healthScore, daysSinceContact, contactStrength, riskFlags }], missingRoles, riskAssessment, recommendation }\n\n### open_deal_room({ slug, dealName })\nMulti-agent deal brief: orchestrates relationship graph, health scores, deal health, Monte Carlo simulation, and playbook matching into a unified brief with executive summary, top priorities, and risk score (0–100).\n- Input: { slug: string, dealName: string }\n- Returns: { slug, dealName, generatedAt, stakeholders, relationshipHealth, dealHealth, revenueSimulation, recommendedPlaybook, executiveSummary, topPriorities, riskScore }\n\n### get_proactive_briefing({ date? })\nGenerate a proactive daily briefing: urgent alerts (relationship decay, deal risk, overdue close dates),\npipeline forecast (P50/P90), and a single top-action recommendation.\n- Input: { date?: \"YYYY-MM-DD\" } — defaults to today\n- Returns: { date, generatedAt, urgent: string[], opportunities: string[], forecast: string, topAction: string }\n\n### list_email_templates({ category? })\nList available email templates. Optionally filter by category.\n- Input: { category?: string } — e.g. \"outreach\", \"followup\", \"support\"\n- Returns: Array of { id, name, category, subject } (body excluded for performance)\n\n### get_email_template({ id })\nGet a specific email template with full body and detected template variables.\n- Input: { id: string } — Template ID (e.g. \"enterprise-intro\")\n- Returns: { id, name, category, subject, body, detectedVariables: string[] }\n\n### draft_email({ slug, templateId, overrides?, tone? })\nDraft a personalized email for a customer using a stored template.\nVariables are auto-filled from the customer's main_facts.md.\nOptional tone (e.g. \"formal\", \"friendly\", \"concise\") LLM-polishes the body;\nfalls back to plain template-fill without an ANTHROPIC_API_KEY.\nDoes NOT send automatically — returns the draft for review.\nRBAC: rep+\n- Input: { slug, templateId, overrides?: Record<string, string> }\n- Returns: { subject, body, to, slug, templateId, resolvedVariables }\n\n### enroll_in_sequence({ slug, contactEmail, sequenceId })\nEnroll a contact in an email sequence. Validates that the sequence and first template exist.\nRBAC: rep+\n- Input: { slug: string, contactEmail: string, sequenceId: string }\n- Returns: { enrollmentId, sequenceName, totalSteps }\n\n### list_sequence_enrollments({ slug?, status? })\nList email sequence enrollments. Filter by customer slug or status.\n- Input: { slug?: string, status?: \"active\" | \"paused\" | \"completed\" }\n- Returns: { enrollments: SequenceEnrollment[] }\n\n### unenroll_from_sequence({ enrollmentId })\nPause (soft-unenroll) a contact from an email sequence. Sets status to \"paused\".\nRBAC: rep+\n- Input: { enrollmentId: string }\n- Returns: { success: boolean }\n\n### list_sequences()\nList all defined email sequences with step count and current enrollment count.\n- Input: none\n- Returns: { sequences: [{ id, name, stepCount, enrollmentCount }] }\n\n### generate_quote({ slug, dealName, lineItems, vatPercent?, validUntilDays?, currency? })\nGenerate a professional HTML quote for a customer deal.\nCalculates subtotal, VAT, and total. Saves JSON + HTML to .agentic/quotes/.\nRBAC: rep+\n- Input:\n  slug: Customer slug\n  dealName: Deal name this quote is for\n  lineItems: Array<{ description, quantity, unitPrice }>\n  vatPercent?: VAT percentage (default 19)\n  validUntilDays?: Quote validity in days (default 30)\n  currency?: Currency code (default EUR)\n- Returns: { quoteNumber, htmlPath, total, subtotal, vat, vatPercent, currency, validUntil, status }\n\n### get_quote_status({ quoteNumber?, slug? })\nGet quote status and details. Filter by quoteNumber (single quote) or slug (all quotes for customer).\n- Input: { quoteNumber?: string, slug?: string }\n- Returns (single): Full quote object with status: draft | sent | viewed | accepted | declined\n- Returns (list): { quotes: [...] }\n\n### get_booking_link({ slug, eventType?, prefillName? })\nGet a Calendly booking link for a customer. Optionally pre-fills the customer's name/email.\nRequires CALENDLY_API_KEY env var or .agentic/integrations/calendly.yaml config.\nRBAC: rep+\n- Input: { slug, eventType?: string, prefillName?: boolean }\n- Returns: { bookingUrl, eventType, duration }\n\n### create_ticket({ slug, title, description?, priority?, assignee? })\nCreate a support ticket. Auto-calculates SLA due date based on priority.\nSLA defaults: urgent=4h, high=24h, normal=72h, low=168h.\nRBAC: rep+\n- Input:\n  slug: Customer slug\n  title: Ticket title\n  description?: Detailed description\n  priority?: \"urgent\" | \"high\" | \"normal\" | \"low\" (default: normal)\n  assignee?: Assignee name or email\n- Returns: { ticket } with id T-NNN, status=open, slaDue\n\n### update_ticket({ slug, ticketId, status?, assignee? })\nUpdate a ticket's status or assignee. Setting status=resolved auto-sets resolved date.\nRBAC: rep+\n- Input: { slug, ticketId, status?: \"open\"|\"in-progress\"|\"waiting\"|\"resolved\"|\"closed\", assignee?: string }\n- Returns: { ticket }\n\n### list_tickets({ slug?, status?, priority?, assignee? })\nList support tickets sorted by priority then date. Filter by any combination of fields.\n- Input: { slug?, status?: \"open\"|\"in-progress\"|\"waiting\"|\"resolved\"|\"closed\", priority?: \"urgent\"|\"high\"|\"normal\"|\"low\", assignee? }\n- Returns: { tickets: Array<{ slug, ticket }> }\n\n### close_ticket({ slug, ticketId, resolution? })\nClose a ticket and optionally log the resolution as an interaction in interactions.md.\nRBAC: rep+\n- Input: { slug, ticketId, resolution?: string }\n- Returns: { ticket } with status=closed\n\n### send_nps_survey({ slug, contactEmail, surveyId, serverUrl? })\nGenerate an NPS/CSAT survey email draft. Returns subject, HTML body, and a token-based response URL.\nDoes NOT send automatically — returns draft for review.\nRequires survey definition in .agentic/surveys/.\nRBAC: rep+\n- Input: { slug, contactEmail, surveyId, serverUrl?: string }\n- Returns: { token, subject, body, surveyUrl, note }\n\n### get_survey_results({ surveyId, slug? })\nCalculate NPS score and breakdown for a survey. Optionally filter to a single customer.\n- Input: { surveyId: string, slug?: string }\n- Returns: { surveyId, totalResponses, npsScore (-100 to 100), promoters, passives, detractors, responses: [{ slug, email, score, comment?, respondedAt }] }\n\n### search_knowledge_base({ query, category?, publicOnly?, limit? })\nFull-text search across all KB articles (title, body, tags).\n- Input: { query, category?: string, publicOnly?: boolean, limit?: number (default 10) }\n- Returns: { query, count, articles: [{ id, title, category, excerpt, public, tags }] }\n\n### create_kb_article({ id, title, body, category?, tags?, public?, sourceTicketId? })\nCreate a new knowledge base article. Articles are stored as Markdown in .agentic/knowledge-base/.\nReturns an error if an article with the same ID already exists.\nRBAC: rep+\n- Input:\n  id: Article slug (e.g. \"troubleshoot-api-timeout\")\n  title: Article title\n  body: Article body in Markdown\n  category?: Category (default: \"general\")\n  tags?: Array of tags for search\n  public?: Make publicly accessible (default: false)\n  sourceTicketId?: Ticket this article was created from\n- Returns: { id, title, category, path }\n\n### backup_now({ remote?, note? })\nTrigger an immediate backup of all CRM data (customers/ + .agentic/).\nCreates a timestamped ZIP with SHA-256 manifest. Optionally uploads to S3/rsync/local.\nRBAC: admin\n- Input: { remote?: string, note?: string }\n- Returns: { path, createdAt, customerCount, fileCount, sizeMb, directories, verified, uploadedTo? }\n\n### list_backups({ limit? })\nList available CRM backups with metadata. Shows log-tracked backups first, falls back to directory scan.\n- Input: { limit?: number (default 10, max 50) }\n- Returns: { count, totalAvailable, backups: [{ filename, createdAt, sizeMb, verified, encrypted, customerCount, fileCount }] }\n\n## Data Structure\n\nCustomer data lives in \\`customers/<slug>/\\`:\n- \\`main_facts.md\\` — YAML frontmatter + free-text sections\n- \\`interactions.md\\` — Chronological log (newest first)\n- \\`pipeline.md\\` — Deal table in Markdown\n- \\`sources.json\\` — Gmail/transcript sync config per customer\n\nAgentic data lives in \\`.agentic/\\`:\n- \\`goals.json\\` — Active goals and decompositions\n- \\`push-subscriptions.json\\` — Real-time push registrations\n- \\`backup-log.json\\` — Backup history\n- \\`rbac.json\\` — Role assignments\n- \\`audit.log\\` — Full audit trail\n- \\`knowledge-base/\\` — KB articles\n- \\`quotes/\\` — Generated quote files\n\n## Response Format\n\nAlways cite sources (gmail://thread/... or file://...) when available.\n\n## Framework Integration\n\n| Framework | Tier | Config |\n|---|---|---|\n| Claude Code | 1 | CLAUDE.md + ~/.claude.json + .claude/settings.json |\n| Codex CLI | 1 | AGENTS.md + ~/.codex/config.toml |\n| Grok Build (xAI) | 1 | AGENTS.md + ~/.grok/user-settings.json + .grok/settings.json |\n| OpenClaw | 1 | SOUL.md + AGENTS.md + TOOLS.md |\n| Hermes Agent | 1 | SOUL.md + Skill |\n| Antigravity CLI | 1 | GEMINI.md + AGENTS.md + SKILL.md |\n| Cursor | 2 | .cursor/rules/datasynx-crm.mdc |\n| Windsurf | 2 | MCP config only |\n| Cline | 2 | MCP config only |\n| Claude Desktop | 2 | MCP config only |\n\n### Manual Grok Build configuration\n\\`\\`\\`json\n// ~/.grok/user-settings.json  (mcpServers is an ARRAY in Grok, not a map)\n{\n  \"mcpServers\": [\n    {\n      \"name\": \"datasynx-opencrm\",\n      \"transport\": {\n        \"type\": \"stdio\",\n        \"command\": \"node\",\n        \"args\": [\"/path/to/node_modules/datasynx-opencrm/dist/mcp.js\"],\n        \"env\": { \"DXCRM_DATA_DIR\": \"~/.dxcrm\" }\n      }\n    }\n  ]\n}\n\\`\\`\\`\nRun \\`grok inspect\\` to verify the server is discovered.\n\n## CLI Reference (Phase 2)\n\n### dxcrm status\nShow daemon status, customer count, sync ages, and unmatched transcript queue.\n\\`\\`\\`\ndxcrm status\ndxcrm status --unmatched   # list full unmatched transcript queue\n\\`\\`\\`\n\n### dxcrm agent spawn <slug>\nSpawn a wake-triggered agent for a customer. Sends Telegram notifications on new email.\n\\`\\`\\`\ndxcrm agent spawn acme-corp --channel telegram\ndxcrm agent spawn acme-corp --channel telegram --chat-id 12345\ndxcrm agent status\ndxcrm agent remove acme-corp\n\\`\\`\\`\nRequires: \\`TELEGRAM_BOT_TOKEN\\` + \\`TELEGRAM_CHAT_ID\\` env vars.\n\n### dxcrm import <path>\nImport customers and interactions from HubSpot or generic CSV export.\n\\`\\`\\`\ndxcrm import contacts.csv --from csv\ndxcrm import hubspot-export.csv --from hubspot\ndxcrm import hubspot-export.csv --from hubspot --dry-run\n\\`\\`\\`\n- Two-pass: creates customers first, then imports activities\n- Idempotent: re-running skips already-imported rows\n- sourceRef format: \\`hubspot://activity/<id>\\` or \\`csv://row/<hash>\\`\n\n## CLI Reference (Phase 3 — Team)\n\n### dxcrm server start\nStart a shared HTTP MCP server. Multiple team members connect via URL.\n\\`\\`\\`\ndxcrm server start --data /mnt/crm-data --port 3847\ndxcrm server status\n\\`\\`\\`\nSet actor identity: \\`export DXCRM_ACTOR=alice\\`\n\n### dxcrm audit\nShow who changed what and when. Audit trail at \\`.agentic/audit.log\\`.\n\\`\\`\\`\ndxcrm audit                       # Last 20 entries\ndxcrm audit --slug acme-corp      # Filter by customer\ndxcrm audit --actor alice         # Filter by actor\n\\`\\`\\`\nLog format: \\`2026-06-01T09:14:00Z | alice | log_interaction | acme-corp | summary\\`\n\n### session ownership\n\\`\\`\\`\ndxcrm session open acme-corp --owner alice\n# or: DXCRM_ACTOR=alice dxcrm session open acme-corp\n\\`\\`\\`\n\\`get_active_session()\\` returns \\`{ owner: \"alice\", ... }\\` when owner is set.\n\n## CLI Reference (Phase 5 — Migration)\n\n### dxcrm import — Pipedrive API\n\\`\\`\\`\ndxcrm import --from pipedrive --mode api --token <tok> --url https://myco.pipedrive.com\n\\`\\`\\`\nTwo-pass: persons → customers, activities → interactions.\nsourceRef: \\`pipedrive://activity/<id>\\`\n\n### CSV LLM Field Mapping\nGeneric CSV imports now use LLM-assisted column detection (fallback to heuristics when ANTHROPIC_API_KEY is unset).\n\n## CLI Reference (Enterprise — Sprints R1–R5)\n\n### dxcrm stages\nManage custom pipeline stages.\n\\`\\`\\`\ndxcrm stages list                                    # List all stages\ndxcrm stages set <id> <label> [--order N] [--probability N] [--color #hex] [--final]\ndxcrm stages delete <id>                             # Remove a stage\ndxcrm stages reset                                   # Reset to defaults\n\\`\\`\\`\nDefault stages: lead → qualified → proposal → negotiation → won → lost\n\n### dxcrm rbac\nRole-based access control. Roles: admin > manager > rep.\n\\`\\`\\`\ndxcrm rbac set alice admin          # Assign role\ndxcrm rbac show                     # List all roles\ndxcrm rbac check alice update_deal  # Permission check\n\\`\\`\\`\nConfig: \\`.agentic/rbac.json\\` | Actor: \\`DXCRM_ACTOR\\` env var\nEnforcement: per MCP tool call | Default role: rep\n\n### dxcrm gdpr\nGDPR erasure with dry-run safety and audit trail.\n\\`\\`\\`\ndxcrm gdpr erase acme-corp           # Dry-run (shows plan)\ndxcrm gdpr erase acme-corp --confirm # Permanent deletion\ndxcrm gdpr list-erasures             # Erasure history\n\\`\\`\\`\nOn confirm: deletes customers/<slug>/, writes audit.log, appends gdpr-erasures.json\n\n### dxcrm security-report\nGenerate Markdown security questionnaire for procurement/SOC2 review.\n\\`\\`\\`\ndxcrm security-report\ndxcrm security-report --output sec-report.md\n\\`\\`\\`\n\n### Microsoft Outlook Sync\n\\`\\`\\`\ndxcrm sync --provider microsoft\n\\`\\`\\`\nPrerequisites: write \\`.agentic/microsoft-token.json\\` with \\`{ \"accessToken\": \"...\" }\\`\nsourceRef: \\`microsoft://message/<id>\\` | API: Microsoft Graph v1.0\n\n### Salesforce Import\n\\`\\`\\`\ndxcrm import --from salesforce --mode api --token <tok> --url https://myco.salesforce.com\n\\`\\`\\`\nTwo-pass: contacts → customers, tasks → interactions (WhoId attribution)\nsourceRef: \\`salesforce://task/<id>\\` | API: Salesforce REST v58.0\n\n## CLI Reference (D16 — Goal-Based Orchestration)\n\n### dxcrm goal set\nSet a goal and get a decomposed action plan based on current pipeline state.\n\\`\\`\\`\ndxcrm goal set \"Close €500k ARR this quarter\" --deadline 2026-09-30\n\\`\\`\\`\n\n### dxcrm goal status\nShow all active goals with progress bars and days remaining.\n\\`\\`\\`\ndxcrm goal status\n\\`\\`\\`\n\n### dxcrm goal update\nManually update goal progress (0–100%).\n\\`\\`\\`\ndxcrm goal update goal_abc123 --progress 45\n\\`\\`\\`\n\n### dxcrm goal cancel\nCancel an active goal.\n\\`\\`\\`\ndxcrm goal cancel goal_abc123\n\\`\\`\\`\n\n## CLI Reference (D17 — Real-Time Push Ingestion)\n\n### dxcrm push register\nRegister a push subscription so providers send events in real-time (no polling).\n\\`\\`\\`\ndxcrm push register acme-corp --provider gmail --webhook-url https://myserver.com/webhooks/gmail --topic-name projects/x/topics/gmail-push\ndxcrm push register acme-corp --provider microsoft-graph --webhook-url https://myserver.com/webhooks/microsoft --client-state <secret>\ndxcrm push register acme-corp --provider slack --webhook-url https://myserver.com/webhooks/slack --team-id T12345\n\\`\\`\\`\n\n### dxcrm push status\nShow all push subscriptions, expiry and events processed.\n\\`\\`\\`\ndxcrm push status\ndxcrm push status --slug acme-corp\ndxcrm push status --provider gmail\n\\`\\`\\`\n\n### dxcrm push revoke\nRevoke a push subscription by ID.\n\\`\\`\\`\ndxcrm push revoke psub_1716892800_a1b2c3\n\\`\\`\\`\n\n### dxcrm push renew\nRenew expiring push subscriptions (also runs automatically daily at 06:00).\n\\`\\`\\`\ndxcrm push renew --all\n\\`\\`\\`\n\n### register_push_subscription (MCP)\nRegister a real-time push subscription. Admin only.\n\\`\\`\\`\nregister_push_subscription({ provider: \"gmail\", slug: \"acme-corp\", webhookUrl: \"https://myserver.com/webhooks/gmail\", gmailTopicName: \"projects/x/topics/y\" })\n\\`\\`\\`\nReturns: { subscriptionId, provider, slug, status, expiresAt, warning? }\n\n### get_push_status (MCP)\nShow all push subscriptions with expiry and event counts.\n\\`\\`\\`\nget_push_status()                           // all subscriptions\nget_push_status({ slug: \"acme-corp\" })     // filter by customer\nget_push_status({ provider: \"gmail\" })     // filter by provider\n\\`\\`\\`\nReturns: { subscriptions: [...], summary: { total, active, expiringSoon, expired } }\n\n### get_org_intelligence (MCP)\nBuild a stakeholder map for a customer: champions, economic buyers, blockers, health scores, risk flags, and a prioritised recommendation.\n\\`\\`\\`\nget_org_intelligence({ slug: \"acme-corp\" })\nget_org_intelligence({ slug: \"acme-corp\", dealName: \"Enterprise License\" })\n\\`\\`\\`\nReturns: { slug, updatedAt, people: [{ name, email, role, healthScore, daysSinceContact, contactStrength, riskFlags }], missingRoles, riskAssessment, recommendation }\n\n### open_deal_room (MCP)\nMulti-agent deal brief: orchestrates stakeholder map, relationship health, deal health, Monte Carlo simulation, and playbook matching into a single structured brief.\n\\`\\`\\`\nopen_deal_room({ slug: \"acme-corp\", dealName: \"Enterprise License 2026\" })\n\\`\\`\\`\nReturns: { slug, dealName, generatedAt, stakeholders, relationshipHealth, dealHealth, revenueSimulation, recommendedPlaybook, executiveSummary, topPriorities, riskScore }\n\n### get_proactive_briefing (MCP)\nGenerate a proactive daily briefing: urgent alerts (relationship decay, imminent close dates), opportunities (high-health customers with active pipeline), P50/P90 forecast, and a single top-action recommendation.\n\\`\\`\\`\nget_proactive_briefing()                         // today\nget_proactive_briefing({ date: \"2026-05-28\" })   // specific date\n\\`\\`\\`\nReturns: { date, generatedAt, urgent: string[], opportunities: string[], forecast: string, topAction: string }\n\n## H2 — Email Templates\n\n### list_email_templates (MCP)\nList all saved email templates. Returns id, name, category, subject, and body preview.\n\\`\\`\\`\nlist_email_templates()\nlist_email_templates({ category: \"follow-up\" })\n\\`\\`\\`\nReturns: { templates: [{ id, name, category, subject, bodyPreview }] }\n\n### get_email_template (MCP)\nRetrieve a single email template with full body and all variables.\n\\`\\`\\`\nget_email_template({ id: \"proposal-follow-up\" })\n\\`\\`\\`\nReturns: { id, name, category, subject, body, variables: string[] }\n\n### draft_email (MCP)\nDraft a personalized email from a template, substituting variables from customer context.\n\\`\\`\\`\ndraft_email({ slug: \"acme-corp\", templateId: \"proposal-follow-up\", overrides: { subject: \"Following up on your proposal\" } })\n\\`\\`\\`\nReturns: { subject, body, suggestedTo, suggestedCc?, variables }\n\n## H1 — Email Sequences\n\n### enroll_in_sequence (MCP)\nEnroll a customer contact in a multi-step email sequence. Steps are sent automatically.\n\\`\\`\\`\nenroll_in_sequence({ slug: \"acme-corp\", sequenceId: \"onboarding-7day\", contactEmail: \"alice@acme.com\" })\n\\`\\`\\`\nReturns: { enrollmentId, slug, sequenceId, contactEmail, enrolledAt, nextStepDue, totalSteps }\n\n### list_sequence_enrollments (MCP)\nList active (and optionally completed) sequence enrollments.\n\\`\\`\\`\nlist_sequence_enrollments()\nlist_sequence_enrollments({ slug: \"acme-corp\", status: \"active\" })\n\\`\\`\\`\nReturns: { enrollments: [{ enrollmentId, slug, sequenceId, contactEmail, currentStep, nextStepDue, status }] }\n\n### unenroll_from_sequence (MCP)\nRemove a contact from an active sequence (marks as cancelled).\n\\`\\`\\`\nunenroll_from_sequence({ enrollmentId: \"enr_abc123\" })\n\\`\\`\\`\nReturns: { success: boolean, enrollmentId }\n\n### list_sequences (MCP)\nList all defined email sequences with step count and description.\n\\`\\`\\`\nlist_sequences()\n\\`\\`\\`\nReturns: { sequences: [{ id, name, description, steps: number, triggerOn? }] }\n\n## H4 — Quotes\n\n### generate_quote (MCP)\nGenerate a structured quote document for a customer deal.\n\\`\\`\\`\ngenerate_quote({ slug: \"acme-corp\", dealName: \"Enterprise License\", lineItems: [{ description: \"Platform (12 mo)\", quantity: 1, unitPrice: 24000 }], validDays: 30 })\n\\`\\`\\`\nReturns: { quoteId, slug, dealName, total, currency, validUntil, markdownTable, fullText }\n\n### get_quote_status (MCP)\nRetrieve a generated quote with full line items and total.\n\\`\\`\\`\nget_quote_status({ quoteId: \"Q-2026-001\" })\n\\`\\`\\`\nReturns: { quoteId, slug, dealName, lineItems, subtotal, total, validUntil, status }\n\n## H3 — Meeting Scheduler\n\n### get_booking_link (MCP)\nGet a scheduling link for a meeting with a customer. Configure via DXCRM_CALENDLY_URL or per-customer sources.json.\n\\`\\`\\`\nget_booking_link({ slug: \"acme-corp\", meetingType: \"demo\" })\n\\`\\`\\`\nReturns: { url, meetingType, calendarProvider, prefillEmail?, note? }\n\n## H6 — Ticket Management\n\n### create_ticket (MCP)\nCreate a support ticket. Auto-sets SLA due date: critical=4h, high=24h, medium=72h, low=168h.\n\\`\\`\\`\ncreate_ticket({ slug: \"acme-corp\", title: \"Login broken\", priority: \"high\", description: \"Cannot login since yesterday\", assignee: \"alice\" })\n\\`\\`\\`\nReturns: { ticketId, slug, title, priority, status, slaDue, assignee?, createdAt }\n\n### update_ticket (MCP)\nUpdate ticket status or assignee.\n\\`\\`\\`\nupdate_ticket({ slug: \"acme-corp\", ticketId: \"T-001\", status: \"in-progress\", assignee: \"bob\" })\n\\`\\`\\`\nReturns: { ticketId, status, updatedAt }\n\n### list_tickets (MCP)\nList tickets sorted by priority. Filter by customer, status, priority, or assignee.\n\\`\\`\\`\nlist_tickets()\nlist_tickets({ slug: \"acme-corp\", status: \"open\" })\nlist_tickets({ priority: \"high\", assignee: \"alice\" })\n\\`\\`\\`\nReturns: { tickets: [{ ticketId, slug, title, priority, status, slaDue, assignee?, createdAt }] }\n\n### close_ticket (MCP)\nClose a ticket and optionally log a resolution note to interactions.md.\n\\`\\`\\`\nclose_ticket({ slug: \"acme-corp\", ticketId: \"T-001\", resolution: \"Fixed by updating oauth token\" })\n\\`\\`\\`\nReturns: { ticketId, status: \"closed\", closedAt, resolution? }\n\n## H7 — NPS/CSAT Survey Engine\n\n### send_nps_survey (MCP)\nGenerate a survey token and HTML email body. Customers click a score button (0–10) which\nposts to your server's /survey/respond endpoint. Set DXCRM_SERVER_URL or pass serverUrl.\n\\`\\`\\`\nsend_nps_survey({ slug: \"acme-corp\", contactEmail: \"alice@acme.com\", surveyId: \"q1-nps\" })\nsend_nps_survey({ slug: \"acme-corp\", contactEmail: \"alice@acme.com\", surveyId: \"q1-nps\", serverUrl: \"https://crm.myco.com\" })\n\\`\\`\\`\nReturns: { token, emailSubject, emailBody (HTML), surveyId, expiresAt }\n\n### get_survey_results (MCP)\nCalculate NPS score and breakdown by promoter/passive/detractor.\n\\`\\`\\`\nget_survey_results({ surveyId: \"q1-nps\" })\nget_survey_results({ surveyId: \"q1-nps\", slug: \"acme-corp\" })\n\\`\\`\\`\nReturns: { surveyId, npsScore (-100 to 100), responseCount, promoters, passives, detractors, responses: [{ slug, contactEmail, score, comment?, respondedAt }] }\n\n## H8 — Knowledge Base\n\n### search_knowledge_base (MCP)\nFull-text search across all KB articles (title, body, tags).\n\\`\\`\\`\nsearch_knowledge_base({ query: \"password reset\" })\nsearch_knowledge_base({ query: \"billing\", publicOnly: true })\n\\`\\`\\`\nReturns: { results: [{ id, title, category, excerpt, public, tags }] }\n\n### create_kb_article (MCP)\nCreate or update a knowledge base article (upserts by ID).\n\\`\\`\\`\ncreate_kb_article({ id: \"password-reset\", title: \"How to reset your password\", body: \"## Steps\\\\n1. Go to login...\", category: \"account\", tags: [\"password\", \"auth\"], public: true })\n\\`\\`\\`\nReturns: { id, title, createdAt, updatedAt, public }\n\n## Enterprise Backup\n\n### backup_now (MCP)\nTrigger an immediate backup of customers/ + .agentic/. Creates a timestamped ZIP with\nSHA-256 manifest. Optionally encrypts (AES-256-GCM) and uploads to S3/rsync/local.\n\\`\\`\\`\nbackup_now({})\nbackup_now({ remote: \"s3://my-bucket/crm-backups/\", note: \"Pre-migration backup\" })\n\\`\\`\\`\nReturns: { path, createdAt, customerCount, fileCount, sizeMb, directories, verified, uploadedTo? }\n\n### list_backups (MCP)\nList available CRM backups with metadata from .agentic/backup-log.json.\nFalls back to directory scan if log unavailable.\n\\`\\`\\`\nlist_backups({ limit: 10 })\n\\`\\`\\`\nReturns: { count, totalAvailable, backups: [{ filename, createdAt, sizeMb, verified, encrypted, customerCount, fileCount }] }\n\n### trigger_sync (MCP)\nForce an immediate Gmail sync without waiting for the 30-minute daemon cycle.\n\\`\\`\\`\ntrigger_sync({ slug: \"acme-corp\" })        // sync one customer\ntrigger_sync({})                           // sync all customers\ntrigger_sync({ since: \"2026-06-01\" })      // sync from specific date\n\\`\\`\\`\nReturns: { success, synced, skipped, customers: [...], errors: [...] }\n\n### get_audit_log (MCP)\nRead the append-only CRM audit log of all write operations.\n\\`\\`\\`\nget_audit_log({})                              // last 50 entries\nget_audit_log({ slug: \"acme-corp\" })           // filtered by customer\nget_audit_log({ actor: \"alice\", limit: 20 })   // filtered by actor\n\\`\\`\\`\nReturns: { total, returned, entries: [{ timestamp, actor, tool, slug, summary }] }\n`.trim();\n","import { z } from \"zod\";\n\nexport const KbArticleSchema = z.object({\n  id: z.string().min(1),\n  title: z.string().min(1),\n  category: z.string().default(\"general\"),\n  tags: z.array(z.string()).default([]),\n  public: z.boolean().default(false),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n  sourceTicketId: z.string().optional(),\n});\n\nexport type KbArticleMeta = z.infer<typeof KbArticleSchema>;\nexport type KbArticle = KbArticleMeta & { body: string };\n","import fs from \"fs\";\nimport path from \"path\";\nimport matter from \"gray-matter\";\nimport { KbArticleSchema, type KbArticle, type KbArticleMeta } from \"../schemas/kb-article.js\";\nimport { writeFileAtomic } from \"./atomic-write.js\";\nimport { assertSafePathSegment, isSafePathSegment } from \"./safe-path.js\";\n\nexport function kbDir(dataDir: string): string {\n  return path.join(dataDir, \".agentic\", \"knowledge-base\");\n}\n\n/** Category subdirectories of the knowledge base. */\nfunction kbCategories(dir: string): string[] {\n  if (!fs.existsSync(dir)) return [];\n  return fs.readdirSync(dir).filter((f) => {\n    try {\n      return fs.statSync(path.join(dir, f)).isDirectory();\n    } catch {\n      return false;\n    }\n  });\n}\n\nexport function listKbArticles(\n  dataDir: string,\n  opts?: { category?: string; publicOnly?: boolean }\n): KbArticle[] {\n  const dir = kbDir(dataDir);\n  const results: KbArticle[] = [];\n\n  for (const cat of kbCategories(dir)) {\n    const catDir = path.join(dir, cat);\n    const files = fs.readdirSync(catDir).filter((f) => f.endsWith(\".md\"));\n    for (const file of files) {\n      try {\n        const content = fs.readFileSync(path.join(catDir, file), \"utf-8\") as string;\n        const parsed = matter(content);\n        const meta = KbArticleSchema.safeParse(parsed.data);\n        if (!meta.success) continue;\n        if (opts?.category && meta.data.category !== opts.category) continue;\n        if (opts?.publicOnly && !meta.data.public) continue;\n        results.push({ ...meta.data, body: parsed.content.trim() });\n      } catch {\n        continue;\n      }\n    }\n  }\n\n  return results;\n}\n\nexport function getKbArticle(dataDir: string, id: string): KbArticle | null {\n  if (!isSafePathSegment(id)) return null;\n  // Articles are stored as <category>/<id>.md, so locate the file directly\n  // instead of parsing the whole knowledge base to find one by id.\n  const dir = kbDir(dataDir);\n  for (const cat of kbCategories(dir)) {\n    const filePath = path.join(dir, cat, `${id}.md`);\n    if (!fs.existsSync(filePath)) continue;\n    try {\n      const parsed = matter(fs.readFileSync(filePath, \"utf-8\") as string);\n      const meta = KbArticleSchema.safeParse(parsed.data);\n      if (!meta.success) return null;\n      return { ...meta.data, body: parsed.content.trim() };\n    } catch {\n      return null;\n    }\n  }\n  return null;\n}\n\nexport function writeKbArticle(dataDir: string, article: KbArticle): void {\n  assertSafePathSegment(article.category, \"knowledge-base category\");\n  assertSafePathSegment(article.id, \"knowledge-base article id\");\n  const { body, ...meta } = article;\n  const content = matter.stringify(body, meta as Record<string, unknown>);\n  writeFileAtomic(path.join(kbDir(dataDir), article.category, `${article.id}.md`), content);\n}\n\nexport function deleteKbArticle(dataDir: string, id: string): boolean {\n  if (!isSafePathSegment(id)) return false;\n  // Locate <category>/<id>.md directly rather than parsing every article.\n  const dir = kbDir(dataDir);\n  for (const cat of kbCategories(dir)) {\n    const p = path.join(dir, cat, `${id}.md`);\n    if (fs.existsSync(p)) {\n      fs.unlinkSync(p);\n      return true;\n    }\n  }\n  return false;\n}\n\nexport function searchKbSimple(\n  dataDir: string,\n  query: string,\n  opts?: { publicOnly?: boolean }\n): KbArticle[] {\n  const all = listKbArticles(dataDir, opts?.publicOnly ? { publicOnly: true } : {});\n  const lower = query.toLowerCase();\n  return all.filter(\n    (a) =>\n      a.title.toLowerCase().includes(lower) ||\n      a.body.toLowerCase().includes(lower) ||\n      a.tags.some((t) => t.toLowerCase().includes(lower))\n  );\n}\n\nexport function getKbMetaForExport(article: KbArticle): KbArticleMeta {\n  const { body: _body, ...meta } = article;\n  return meta;\n}\n"],"mappings":";;;;;;;AAIA,MAAa,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAs6B/B,KAAK;;;ACx6BP,MAAa,kBAAkB,EAAE,OAAO;CACtC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;CACpB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;CACvB,UAAU,EAAE,OAAO,EAAE,QAAQ,SAAS;CACtC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;CACpC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,KAAK;CACjC,WAAW,EAAE,OAAO;CACpB,WAAW,EAAE,OAAO;CACpB,gBAAgB,EAAE,OAAO,EAAE,SAAS;AACtC,CAAC;;;ACJD,SAAgB,MAAM,SAAyB;CAC7C,OAAO,KAAK,KAAK,SAAS,YAAY,gBAAgB;AACxD;;AAGA,SAAS,aAAa,KAAuB;CAC3C,IAAI,CAAC,GAAG,WAAW,GAAG,GAAG,OAAO,CAAC;CACjC,OAAO,GAAG,YAAY,GAAG,EAAE,QAAQ,MAAM;EACvC,IAAI;GACF,OAAO,GAAG,SAAS,KAAK,KAAK,KAAK,CAAC,CAAC,EAAE,YAAY;EACpD,QAAQ;GACN,OAAO;EACT;CACF,CAAC;AACH;AAEA,SAAgB,eACd,SACA,MACa;CACb,MAAM,MAAM,MAAM,OAAO;CACzB,MAAM,UAAuB,CAAC;CAE9B,KAAK,MAAM,OAAO,aAAa,GAAG,GAAG;EACnC,MAAM,SAAS,KAAK,KAAK,KAAK,GAAG;EACjC,MAAM,QAAQ,GAAG,YAAY,MAAM,EAAE,QAAQ,MAAM,EAAE,SAAS,KAAK,CAAC;EACpE,KAAK,MAAM,QAAQ,OACjB,IAAI;GAEF,MAAM,SAAS,OADC,GAAG,aAAa,KAAK,KAAK,QAAQ,IAAI,GAAG,OAC7B,CAAC;GAC7B,MAAM,OAAO,gBAAgB,UAAU,OAAO,IAAI;GAClD,IAAI,CAAC,KAAK,SAAS;GACnB,IAAI,MAAM,YAAY,KAAK,KAAK,aAAa,KAAK,UAAU;GAC5D,IAAI,MAAM,cAAc,CAAC,KAAK,KAAK,QAAQ;GAC3C,QAAQ,KAAK;IAAE,GAAG,KAAK;IAAM,MAAM,OAAO,QAAQ,KAAK;GAAE,CAAC;EAC5D,QAAQ;GACN;EACF;CAEJ;CAEA,OAAO;AACT;AAEA,SAAgB,aAAa,SAAiB,IAA8B;CAC1E,IAAI,CAAC,kBAAkB,EAAE,GAAG,OAAO;CAGnC,MAAM,MAAM,MAAM,OAAO;CACzB,KAAK,MAAM,OAAO,aAAa,GAAG,GAAG;EACnC,MAAM,WAAW,KAAK,KAAK,KAAK,KAAK,GAAG,GAAG,IAAI;EAC/C,IAAI,CAAC,GAAG,WAAW,QAAQ,GAAG;EAC9B,IAAI;GACF,MAAM,SAAS,OAAO,GAAG,aAAa,UAAU,OAAO,CAAW;GAClE,MAAM,OAAO,gBAAgB,UAAU,OAAO,IAAI;GAClD,IAAI,CAAC,KAAK,SAAS,OAAO;GAC1B,OAAO;IAAE,GAAG,KAAK;IAAM,MAAM,OAAO,QAAQ,KAAK;GAAE;EACrD,QAAQ;GACN,OAAO;EACT;CACF;CACA,OAAO;AACT;AAEA,SAAgB,eAAe,SAAiB,SAA0B;CACxE,sBAAsB,QAAQ,UAAU,yBAAyB;CACjE,sBAAsB,QAAQ,IAAI,2BAA2B;CAC7D,MAAM,EAAE,MAAM,GAAG,SAAS;CAC1B,MAAM,UAAU,OAAO,UAAU,MAAM,IAA+B;CACtE,gBAAgB,KAAK,KAAK,MAAM,OAAO,GAAG,QAAQ,UAAU,GAAG,QAAQ,GAAG,IAAI,GAAG,OAAO;AAC1F;AAEA,SAAgB,gBAAgB,SAAiB,IAAqB;CACpE,IAAI,CAAC,kBAAkB,EAAE,GAAG,OAAO;CAEnC,MAAM,MAAM,MAAM,OAAO;CACzB,KAAK,MAAM,OAAO,aAAa,GAAG,GAAG;EACnC,MAAM,IAAI,KAAK,KAAK,KAAK,KAAK,GAAG,GAAG,IAAI;EACxC,IAAI,GAAG,WAAW,CAAC,GAAG;GACpB,GAAG,WAAW,CAAC;GACf,OAAO;EACT;CACF;CACA,OAAO;AACT;AAEA,SAAgB,eACd,SACA,OACA,MACa;CACb,MAAM,MAAM,eAAe,SAAS,MAAM,aAAa,EAAE,YAAY,KAAK,IAAI,CAAC,CAAC;CAChF,MAAM,QAAQ,MAAM,YAAY;CAChC,OAAO,IAAI,QACR,MACC,EAAE,MAAM,YAAY,EAAE,SAAS,KAAK,KACpC,EAAE,KAAK,YAAY,EAAE,SAAS,KAAK,KACnC,EAAE,KAAK,MAAM,MAAM,EAAE,YAAY,EAAE,SAAS,KAAK,CAAC,CACtD;AACF;AAEA,SAAgB,mBAAmB,SAAmC;CACpE,MAAM,EAAE,MAAM,OAAO,GAAG,SAAS;CACjC,OAAO;AACT"}

package/dist/microsoft-DgbVlHdT.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"microsoft-DgbVlHdT.js","names":[],"sources":["../src/sync/oauth/token-store.ts","../src/sync/oauth/google.ts","../src/sync/oauth/microsoft.ts"],"sourcesContent":["// src/sync/oauth/token-store.ts\nimport fs from \"fs\";\nimport path from \"path\";\nimport { writeFileAtomic } from \"../../fs/atomic-write.js\";\n\nexport type MailboxProvider = \"gmail\" | \"microsoft\" | \"imap\";\n\nexport interface MailboxToken {\n  provider: MailboxProvider;\n  /** Mailbox login (email address). */\n  user: string;\n  accessToken: string;\n  /** Long-lived refresh token used to mint new access tokens. */\n  refreshToken?: string;\n  /** Access-token expiry as epoch milliseconds. */\n  expiresAt: number;\n  scope?: string;\n}\n\nfunction tokensPath(dataDir: string): string {\n  return path.join(dataDir, \".agentic\", \"mailbox-tokens.json\");\n}\n\nfunction keyOf(provider: MailboxProvider, user: string): string {\n  return `${provider}:${user.toLowerCase()}`;\n}\n\nfunction readAll(dataDir: string): Record<string, MailboxToken> {\n  const file = tokensPath(dataDir);\n  if (!fs.existsSync(file)) return {};\n  try {\n    return JSON.parse(fs.readFileSync(file, \"utf-8\") as string) as Record<string, MailboxToken>;\n  } catch {\n    return {};\n  }\n}\n\n/** Persist (upsert) a mailbox OAuth token. */\nexport function saveMailboxToken(dataDir: string, token: MailboxToken): void {\n  const all = readAll(dataDir);\n  all[keyOf(token.provider, token.user)] = token;\n  const file = tokensPath(dataDir);\n  fs.mkdirSync(path.dirname(file), { recursive: true });\n  writeFileAtomic(file, JSON.stringify(all, null, 2));\n}\n\n/** Load a stored token for a provider+user, or undefined. */\nexport function loadMailboxToken(\n  dataDir: string,\n  provider: MailboxProvider,\n  user: string\n): MailboxToken | undefined {\n  return readAll(dataDir)[keyOf(provider, user)];\n}\n\n/** List all stored mailbox tokens. */\nexport function listMailboxTokens(dataDir: string): MailboxToken[] {\n  return Object.values(readAll(dataDir));\n}\n\n/** True when the access token is missing or expires within `skewMs` (default 60s). */\nexport function isTokenExpired(token: MailboxToken, skewMs = 60_000, now = Date.now()): boolean {\n  return !token.accessToken || token.expiresAt <= now + skewMs;\n}\n","// src/sync/oauth/google.ts\n//\n// Google OAuth2 for Gmail IMAP (XOAUTH2). IMAP requires the FULL mail scope\n// `https://mail.google.com/` — the gmail.readonly scope does NOT grant IMAP.\nimport { OAuth2Client } from \"google-auth-library\";\n\nexport const GMAIL_IMAP_SCOPE = \"https://mail.google.com/\";\n/** Loopback redirect for the desktop/installed-app flow. */\nexport const DEFAULT_REDIRECT = \"http://127.0.0.1\";\n\nexport interface GoogleTokens {\n  accessToken: string;\n  refreshToken?: string;\n  expiresAt: number;\n}\n\n/** Minimal slice of OAuth2Client we use (lets tests inject a fake). */\nexport interface GoogleOAuthClient {\n  generateAuthUrl(opts: {\n    access_type?: string;\n    scope?: string | string[];\n    prompt?: string;\n    redirect_uri?: string;\n  }): string;\n  getToken(code: string): Promise<{\n    tokens: {\n      access_token?: string | null;\n      refresh_token?: string | null;\n      expiry_date?: number | null;\n    };\n  }>;\n  setCredentials(creds: { refresh_token?: string }): void;\n  refreshAccessToken(): Promise<{\n    credentials: { access_token?: string | null; expiry_date?: number | null };\n  }>;\n}\n\n/** Build a real Google OAuth2 client for an installed/desktop app. */\nexport function createOAuthClient(\n  clientId: string,\n  clientSecret: string,\n  redirectUri: string = DEFAULT_REDIRECT\n): GoogleOAuthClient {\n  return new OAuth2Client(clientId, clientSecret, redirectUri) as unknown as GoogleOAuthClient;\n}\n\n/** The consent URL — offline access + forced consent so a refresh token is issued. */\nexport function buildAuthUrl(client: GoogleOAuthClient, redirectUri?: string): string {\n  return client.generateAuthUrl({\n    access_type: \"offline\",\n    prompt: \"consent\",\n    scope: GMAIL_IMAP_SCOPE,\n    ...(redirectUri ? { redirect_uri: redirectUri } : {}),\n  });\n}\n\n/** Exchange an authorization code for tokens. */\nexport async function exchangeCodeForTokens(\n  client: GoogleOAuthClient,\n  code: string,\n  now: () => number = Date.now\n): Promise<GoogleTokens> {\n  const { tokens } = await client.getToken(code);\n  if (!tokens.access_token) throw new Error(\"Google did not return an access token\");\n  return {\n    accessToken: tokens.access_token,\n    ...(tokens.refresh_token ? { refreshToken: tokens.refresh_token } : {}),\n    expiresAt: tokens.expiry_date ?? now() + 3600_000,\n  };\n}\n\n/** Mint a fresh access token from a stored refresh token. */\nexport async function refreshGoogleToken(\n  clientId: string,\n  clientSecret: string,\n  refreshToken: string,\n  clientFactory: (id: string, secret: string) => GoogleOAuthClient = createOAuthClient,\n  now: () => number = Date.now\n): Promise<GoogleTokens> {\n  const client = clientFactory(clientId, clientSecret);\n  client.setCredentials({ refresh_token: refreshToken });\n  const { credentials } = await client.refreshAccessToken();\n  if (!credentials.access_token) throw new Error(\"Google refresh did not return an access token\");\n  return {\n    accessToken: credentials.access_token,\n    refreshToken,\n    expiresAt: credentials.expiry_date ?? now() + 3600_000,\n  };\n}\n","// src/sync/oauth/microsoft.ts\n//\n// Microsoft OAuth2 *device code* flow for IMAP access (outlook.office365.com).\n// Device code suits a CLI: the user opens a URL on any device and enters a\n// short code — no local redirect server or client secret (public client).\n\nexport const MS_IMAP_SCOPE = \"offline_access https://outlook.office365.com/IMAP.AccessAsUser.All\";\n\ntype FetchFn = typeof fetch;\n\nfunction endpoint(tenant: string, kind: \"devicecode\" | \"token\"): string {\n  return `https://login.microsoftonline.com/${tenant}/oauth2/v2.0/${kind}`;\n}\n\nexport interface DeviceCodeResponse {\n  device_code: string;\n  user_code: string;\n  verification_uri: string;\n  expires_in: number;\n  interval: number;\n  message: string;\n}\n\nexport interface MicrosoftTokens {\n  accessToken: string;\n  refreshToken?: string;\n  expiresAt: number;\n}\n\n/** Start the device-code flow; returns the user code + verification URL to show. */\nexport async function requestDeviceCode(\n  clientId: string,\n  tenant = \"common\",\n  fetchFn: FetchFn = fetch\n): Promise<DeviceCodeResponse> {\n  const res = await fetchFn(endpoint(tenant, \"devicecode\"), {\n    method: \"POST\",\n    headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n    body: new URLSearchParams({ client_id: clientId, scope: MS_IMAP_SCOPE }).toString(),\n  });\n  if (!res.ok) throw new Error(`device code request failed: ${res.status} ${await res.text()}`);\n  return (await res.json()) as DeviceCodeResponse;\n}\n\ninterface TokenSuccess {\n  access_token: string;\n  refresh_token?: string;\n  expires_in: number;\n}\ninterface TokenError {\n  error: string;\n  error_description?: string;\n}\n\n/**\n * Poll the token endpoint until the user authorizes (or the code expires).\n * Honors `authorization_pending` (keep waiting) and `slow_down` (back off).\n */\nexport async function pollForToken(opts: {\n  clientId: string;\n  deviceCode: string;\n  tenant?: string;\n  interval?: number;\n  expiresIn?: number;\n  fetchFn?: FetchFn;\n  sleepFn?: (ms: number) => Promise<void>;\n  now?: () => number;\n}): Promise<MicrosoftTokens> {\n  const tenant = opts.tenant ?? \"common\";\n  const fetchFn = opts.fetchFn ?? fetch;\n  const sleepFn = opts.sleepFn ?? ((ms) => new Promise((r) => setTimeout(r, ms)));\n  const now = opts.now ?? Date.now;\n  let intervalMs = (opts.interval ?? 5) * 1000;\n  const deadline = now() + (opts.expiresIn ?? 900) * 1000;\n\n  for (;;) {\n    if (now() >= deadline) throw new Error(\"device code expired before authorization\");\n    await sleepFn(intervalMs);\n\n    const res = await fetchFn(endpoint(tenant, \"token\"), {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n      body: new URLSearchParams({\n        grant_type: \"urn:ietf:params:oauth:grant-type:device_code\",\n        client_id: opts.clientId,\n        device_code: opts.deviceCode,\n      }).toString(),\n    });\n\n    const data = (await res.json()) as TokenSuccess | TokenError;\n    if (res.ok && \"access_token\" in data) {\n      return tokensFromSuccess(data, now());\n    }\n    const err = (data as TokenError).error;\n    if (err === \"authorization_pending\") continue;\n    if (err === \"slow_down\") {\n      intervalMs += 5000;\n      continue;\n    }\n    throw new Error(`device flow failed: ${err}${describe(data as TokenError)}`);\n  }\n}\n\n/** Exchange a refresh token for a fresh access token. */\nexport async function refreshMicrosoftToken(\n  clientId: string,\n  refreshToken: string,\n  tenant = \"common\",\n  fetchFn: FetchFn = fetch,\n  now: () => number = Date.now\n): Promise<MicrosoftTokens> {\n  const res = await fetchFn(endpoint(tenant, \"token\"), {\n    method: \"POST\",\n    headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n    body: new URLSearchParams({\n      grant_type: \"refresh_token\",\n      client_id: clientId,\n      refresh_token: refreshToken,\n      scope: MS_IMAP_SCOPE,\n    }).toString(),\n  });\n  const data = (await res.json()) as TokenSuccess | TokenError;\n  if (!res.ok || !(\"access_token\" in data)) {\n    throw new Error(`token refresh failed: ${(data as TokenError).error ?? res.status}`);\n  }\n  return tokensFromSuccess(data, now());\n}\n\nfunction tokensFromSuccess(data: TokenSuccess, nowMs: number): MicrosoftTokens {\n  return {\n    accessToken: data.access_token,\n    ...(data.refresh_token ? { refreshToken: data.refresh_token } : {}),\n    expiresAt: nowMs + data.expires_in * 1000,\n  };\n}\n\nfunction describe(e: TokenError): string {\n  return e.error_description ? ` (${e.error_description.split(\"\\n\")[0]})` : \"\";\n}\n"],"mappings":";;;;;AAmBA,SAAS,WAAW,SAAyB;CAC3C,OAAO,KAAK,KAAK,SAAS,YAAY,qBAAqB;AAC7D;AAEA,SAAS,MAAM,UAA2B,MAAsB;CAC9D,OAAO,GAAG,SAAS,GAAG,KAAK,YAAY;AACzC;AAEA,SAAS,QAAQ,SAA+C;CAC9D,MAAM,OAAO,WAAW,OAAO;CAC/B,IAAI,CAAC,GAAG,WAAW,IAAI,GAAG,OAAO,CAAC;CAClC,IAAI;EACF,OAAO,KAAK,MAAM,GAAG,aAAa,MAAM,OAAO,CAAW;CAC5D,QAAQ;EACN,OAAO,CAAC;CACV;AACF;;AAGA,SAAgB,iBAAiB,SAAiB,OAA2B;CAC3E,MAAM,MAAM,QAAQ,OAAO;CAC3B,IAAI,MAAM,MAAM,UAAU,MAAM,IAAI,KAAK;CACzC,MAAM,OAAO,WAAW,OAAO;CAC/B,GAAG,UAAU,KAAK,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;CACpD,gBAAgB,MAAM,KAAK,UAAU,KAAK,MAAM,CAAC,CAAC;AACpD;;AAGA,SAAgB,iBACd,SACA,UACA,MAC0B;CAC1B,OAAO,QAAQ,OAAO,EAAE,MAAM,UAAU,IAAI;AAC9C;;AAQA,SAAgB,eAAe,OAAqB,SAAS,KAAQ,MAAM,KAAK,IAAI,GAAY;CAC9F,OAAO,CAAC,MAAM,eAAe,MAAM,aAAa,MAAM;AACxD;;;ACzDA,MAAa,mBAAmB;;AAEhC,MAAa,mBAAmB;;AA8BhC,SAAgB,kBACd,UACA,cACA,cAAsB,kBACH;CACnB,OAAO,IAAI,aAAa,UAAU,cAAc,WAAW;AAC7D;;AAGA,SAAgB,aAAa,QAA2B,aAA8B;CACpF,OAAO,OAAO,gBAAgB;EAC5B,aAAa;EACb,QAAQ;EACR,OAAO;EACP,GAAI,cAAc,EAAE,cAAc,YAAY,IAAI,CAAC;CACrD,CAAC;AACH;;AAGA,eAAsB,sBACpB,QACA,MACA,MAAoB,KAAK,KACF;CACvB,MAAM,EAAE,WAAW,MAAM,OAAO,SAAS,IAAI;CAC7C,IAAI,CAAC,OAAO,cAAc,MAAM,IAAI,MAAM,uCAAuC;CACjF,OAAO;EACL,aAAa,OAAO;EACpB,GAAI,OAAO,gBAAgB,EAAE,cAAc,OAAO,cAAc,IAAI,CAAC;EACrE,WAAW,OAAO,eAAe,IAAI,IAAI;CAC3C;AACF;;AAGA,eAAsB,mBACpB,UACA,cACA,cACA,gBAAmE,mBACnE,MAAoB,KAAK,KACF;CACvB,MAAM,SAAS,cAAc,UAAU,YAAY;CACnD,OAAO,eAAe,EAAE,eAAe,aAAa,CAAC;CACrD,MAAM,EAAE,gBAAgB,MAAM,OAAO,mBAAmB;CACxD,IAAI,CAAC,YAAY,cAAc,MAAM,IAAI,MAAM,+CAA+C;CAC9F,OAAO;EACL,aAAa,YAAY;EACzB;EACA,WAAW,YAAY,eAAe,IAAI,IAAI;CAChD;AACF;;;AClFA,MAAa,gBAAgB;AAI7B,SAAS,SAAS,QAAgB,MAAsC;CACtE,OAAO,qCAAqC,OAAO,eAAe;AACpE;;AAkBA,eAAsB,kBACpB,UACA,SAAS,UACT,UAAmB,OACU;CAC7B,MAAM,MAAM,MAAM,QAAQ,SAAS,QAAQ,YAAY,GAAG;EACxD,QAAQ;EACR,SAAS,EAAE,gBAAgB,oCAAoC;EAC/D,MAAM,IAAI,gBAAgB;GAAE,WAAW;GAAU,OAAO;EAAc,CAAC,EAAE,SAAS;CACpF,CAAC;CACD,IAAI,CAAC,IAAI,IAAI,MAAM,IAAI,MAAM,+BAA+B,IAAI,OAAO,GAAG,MAAM,IAAI,KAAK,GAAG;CAC5F,OAAQ,MAAM,IAAI,KAAK;AACzB;;;;;AAgBA,eAAsB,aAAa,MASN;CAC3B,MAAM,SAAS,KAAK,UAAU;CAC9B,MAAM,UAAU,KAAK,WAAW;CAChC,MAAM,UAAU,KAAK,aAAa,OAAO,IAAI,SAAS,MAAM,WAAW,GAAG,EAAE,CAAC;CAC7E,MAAM,MAAM,KAAK,OAAO,KAAK;CAC7B,IAAI,cAAc,KAAK,YAAY,KAAK;CACxC,MAAM,WAAW,IAAI,KAAK,KAAK,aAAa,OAAO;CAEnD,SAAS;EACP,IAAI,IAAI,KAAK,UAAU,MAAM,IAAI,MAAM,0CAA0C;EACjF,MAAM,QAAQ,UAAU;EAExB,MAAM,MAAM,MAAM,QAAQ,SAAS,QAAQ,OAAO,GAAG;GACnD,QAAQ;GACR,SAAS,EAAE,gBAAgB,oCAAoC;GAC/D,MAAM,IAAI,gBAAgB;IACxB,YAAY;IACZ,WAAW,KAAK;IAChB,aAAa,KAAK;GACpB,CAAC,EAAE,SAAS;EACd,CAAC;EAED,MAAM,OAAQ,MAAM,IAAI,KAAK;EAC7B,IAAI,IAAI,MAAM,kBAAkB,MAC9B,OAAO,kBAAkB,MAAM,IAAI,CAAC;EAEtC,MAAM,MAAO,KAAoB;EACjC,IAAI,QAAQ,yBAAyB;EACrC,IAAI,QAAQ,aAAa;GACvB,cAAc;GACd;EACF;EACA,MAAM,IAAI,MAAM,uBAAuB,MAAM,SAAS,IAAkB,GAAG;CAC7E;AACF;;AAGA,eAAsB,sBACpB,UACA,cACA,SAAS,UACT,UAAmB,OACnB,MAAoB,KAAK,KACC;CAC1B,MAAM,MAAM,MAAM,QAAQ,SAAS,QAAQ,OAAO,GAAG;EACnD,QAAQ;EACR,SAAS,EAAE,gBAAgB,oCAAoC;EAC/D,MAAM,IAAI,gBAAgB;GACxB,YAAY;GACZ,WAAW;GACX,eAAe;GACf,OAAO;EACT,CAAC,EAAE,SAAS;CACd,CAAC;CACD,MAAM,OAAQ,MAAM,IAAI,KAAK;CAC7B,IAAI,CAAC,IAAI,MAAM,EAAE,kBAAkB,OACjC,MAAM,IAAI,MAAM,yBAA0B,KAAoB,SAAS,IAAI,QAAQ;CAErF,OAAO,kBAAkB,MAAM,IAAI,CAAC;AACtC;AAEA,SAAS,kBAAkB,MAAoB,OAAgC;CAC7E,OAAO;EACL,aAAa,KAAK;EAClB,GAAI,KAAK,gBAAgB,EAAE,cAAc,KAAK,cAAc,IAAI,CAAC;EACjE,WAAW,QAAQ,KAAK,aAAa;CACvC;AACF;AAEA,SAAS,SAAS,GAAuB;CACvC,OAAO,EAAE,oBAAoB,KAAK,EAAE,kBAAkB,MAAM,IAAI,EAAE,GAAG,KAAK;AAC5E"}