@rubytech/create-maxy-code 0.1.280 → 0.1.281

package/payload/platform/lib/mcp-spawn-tee/src/index.ts

@@ -1,53 +1,41 @@
 #!/usr/bin/env node
 /**
- * MCP spawn-tee — parent-side stderr capture wrapper.
+ * MCP spawn-tee — parent-side stderr capture + lifecycle observability.
  *
- * Claude Code's `--mcp-config` accepts `{command, args, env}` descriptors and
- * spawns each MCP server itself; the platform never holds a ChildProcess
- * handle. The in-process `mcp-stderr-tee` patches `process.stderr.write` from
- * inside the MCP server, but its writes go through `createWriteStream` —
- * async, buffered. A synchronous module-load throw (e.g. schema-loader's
- * line-168 width check on memory) calls `process.exit(1)` before the buffer
- * flushes, so the per-server log file is empty and the platform's
- * `[mcp-init-error] tail="(no stderr file)"` probe is operationally useless.
- * That class shipped as the chronic memory-MCP silent-fail loop fixed by
- * (and hit graph — solved there with per-plugin
- * `appendFileSync` discipline that this wrapper now generalises).
+ * Claude Code spawns each MCP server itself; the platform never holds a
+ * ChildProcess handle. This wrapper sits between Claude Code and the real
+ * MCP server: Claude Code runs `node <this> <real-entry>`, and the wrapper
+ * spawns the real entry with `stdio:['inherit','inherit','pipe']` so stdin
+ * and stdout (the JSON-RPC channel) pass through byte-identical. Only stderr
+ * is intercepted, and only for logging.
  *
- * The wrapper sits between Claude Code and the real MCP server: it spawns
- * the real entry with `stdio: ['inherit', 'inherit', 'pipe']`, then
- * synchronously appends every child stderr chunk to
- * `${LOG_DIR}/mcp-${name}-stderr-<date>.log`. Synchronous writes survive
- * `process.exit` because the kernel queues the syscall before the call
- * returns. The chunk is also written to the wrapper's own stderr so
- * Claude Code's existing stderr consumer is unchanged — the mechanism is
- * additive, not interceptive.
+ * Because the wrapper IS the helper's parent, it observes the helper's true
+ * exit code, signal, and lifetime for every death mode — including a SIGKILL
+ * or a transport-layer crash that an in-process handler would miss.
  *
- *   Claude Code CLI
- *        │ spawns
- *        ▼
- *   wrapper (this file) — argv[2] = real entry, env.MCP_SPAWN_TEE_NAME = name
- *        │ spawns child with stdio:['inherit','inherit','pipe']
- *        ▼
- *   child = node <real-entry>
- *        │
- *        ├──▶ stdin/stdout: inherited from wrapper (Claude Code pipe)
- *        └──▶ stderr → wrapper.on('data', chunk =>)
- *               ├──▶ appendFileSync(${LOG_DIR}/mcp-${name}-stderr-<date>.log)
- *               └──▶ process.stderr.write(chunk)  → Claude Code consumer
+ *   Claude Code CLI → wrapper (this file) → child = node <real-entry>
+ *        child stdin/stdout : inherited (Claude Code pipe, untouched)
+ *        child stderr       : piped → per-date log + per-session log + passthrough
  *
- * The wrapper catches:
- *   - MODULE_NOT_FOUND on the entry script itself (success criterion #3:
- *     `mv plugins/memory/mcp/dist plugins/memory/mcp/dist-broken && reboot`
- *     leaves the cause on disk).
- *   - Synchronous throws during module load before the in-process tee runs.
- *   - Any stderr a normally-running plugin emits (steady-state telemetry
- *     remains visible too — the in-process tee handles per-line stream-log
- *     prefixing; this wrapper handles the raw per-server file).
+ * Destinations (Task 706):
+ *   - `${LOG_DIR}/mcp-<name>-stderr-<date>.log`  — per-date raw (back-compat;
+ *     the in-process mcp-stderr-tee and the [mcp-init-error] probe read it).
+ *   - `${LOG_DIR}/mcp-<name>-<SESSION_ID>.log`   — per-session raw + lifecycle
+ *     lines; wrapper-only, so it never mixes the enumeration copy with the
+ *     live copy. Authoritative sink. Absent when SESSION_ID is unset
+ *     (enumeration spawn) — then the per-date file is the fallback.
+ *   - `server.log` via the loopback log-ingest route — best-effort mirror of
+ *     the [mcp-helper] lifecycle lines. A dropped POST loses nothing because
+ *     the per-session file already holds the line (written synchronously).
  *
- * SIGTERM/SIGINT propagation: forwarded to the child so a Claude Code
- * shutdown does not orphan the MCP server. Child exit code is propagated
- * verbatim so upstream (Claude Code) sees the real outcome.
+ * Lifecycle lines, correlation key `session=<id8> server=<name>`:
+ *   [mcp-helper] op=spawn ... pid= entry=
+ *   [mcp-helper] op=boot  ... head=<first stderr bytes>
+ *   [mcp-helper] op=exit  ... code= signal= lifetimeMs= stderr-tail=   (always)
+ *
+ * The wrapper never writes to fd 1 (stdout) — that is the JSON-RPC channel.
+ * SIGTERM/SIGINT are forwarded to the child so a Claude Code shutdown does
+ * not orphan it; the child exit code/signal is propagated verbatim.
  */
 
 import { spawn } from "node:child_process";
@@ -56,31 +44,71 @@ import { resolve } from "node:path";
 
 const SERVER_NAME = process.env.MCP_SPAWN_TEE_NAME ?? "unknown";
 const LOG_DIR = process.env.LOG_DIR;
+const SESSION_ID = process.env.SESSION_ID;
+const PLATFORM_PORT = process.env.PLATFORM_PORT;
 const ENTRY = process.argv[2];
 
-// Sync-emit: appendFileSync to per-server log + stderr passthrough. Used for
-// wrapper-internal diagnostics (attach line, errors) and for forwarding child
-// stderr chunks. Each destination wrapped independently — an unwritable log
-// must not mask the primary output.
-function syncEmitLine(line: string): void {
-  if (LOG_DIR) {
-    try {
-      mkdirSync(LOG_DIR, { recursive: true });
-      const date = new Date().toISOString().slice(0, 10);
-      appendFileSync(resolve(LOG_DIR, `mcp-${SERVER_NAME}-stderr-${date}.log`), line);
-    } catch {
-      /* unwritable destination — preserve primary failure */
-    }
+const SESSION_ID8 = SESSION_ID ? SESSION_ID.slice(0, 8) : "—";
+const spawnStamp = Date.now();
+
+// Per-session raw + lifecycle log (Task 706). Wrapper-only. Empty SESSION_ID
+// (enumeration spawn) → undefined, and the per-date file is the fallback.
+const perSessionPath = LOG_DIR && SESSION_ID
+  ? resolve(LOG_DIR, `mcp-${SERVER_NAME}-${SESSION_ID}.log`)
+  : undefined;
+const perDatePath = LOG_DIR
+  ? resolve(LOG_DIR, `mcp-${SERVER_NAME}-stderr-${new Date(spawnStamp).toISOString().slice(0, 10)}.log`)
+  : undefined;
+
+// Rolling tail of child stderr for op=exit. Capped so a chatty child cannot
+// grow the buffer without bound.
+const TAIL_CAP = 2048;
+let stderrTail = "";
+let bootEmitted = false;
+
+function appendSafe(path: string | undefined, data: string | Uint8Array): void {
+  if (!path || !LOG_DIR) return;
+  try {
+    mkdirSync(LOG_DIR, { recursive: true });
+    appendFileSync(path, data);
+  } catch {
+    /* unwritable destination — never mask primary output */
   }
+}
+
+// Best-effort mirror of a lifecycle line to server.log via the loopback
+// log-ingest route. Fire-and-forget: the per-session file is authoritative,
+// so a dropped POST (unreachable port, process exiting) loses nothing.
+function postToServerLog(suffix: string, level: "info" | "error"): void {
+  if (!PLATFORM_PORT) return;
   try {
-    process.stderr.write(line);
+    const ctrl = new AbortController();
+    const t = setTimeout(() => ctrl.abort(), 500);
+    t.unref?.(); // never let the abort timer keep the wrapper's event loop alive
+    void fetch(`http://127.0.0.1:${PLATFORM_PORT}/api/admin/log-ingest`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ tag: "mcp-helper", level, line: suffix }),
+      signal: ctrl.signal,
+    }).then(() => clearTimeout(t)).catch(() => clearTimeout(t));
   } catch {
-    /* stderr closed — nothing else to do */
+    /* fetch threw synchronously — best-effort only */
   }
 }
 
+// Emit one [mcp-helper] lifecycle line: authoritative per-session file (sync,
+// survives process.exit), the wrapper's own stderr (journald / Claude Code
+// visibility), and a best-effort server.log mirror. `suffix` is the line body
+// after the tag and carries no newline (the log-ingest route rejects newlines).
+function emitLifecycle(suffix: string, level: "info" | "error"): void {
+  const line = `[mcp-helper] ${suffix}\n`;
+  appendSafe(perSessionPath, line);
+  try { process.stderr.write(line); } catch { /* stderr closed */ }
+  postToServerLog(suffix, level);
+}
+
 if (!ENTRY) {
-  syncEmitLine(`[mcp-spawn-tee-error] server=${SERVER_NAME} reason="no entry given (argv[2] missing)"\n`);
+  emitLifecycle(`op=error session=${SESSION_ID8} server=${SERVER_NAME} reason="no entry given (argv[2] missing)"`, "error");
   process.exit(2);
 }
 
@@ -89,46 +117,47 @@ const child = spawn(process.execPath, [ENTRY], {
   env: process.env,
 });
 
-syncEmitLine(`[mcp-spawn-tee-attached] server=${SERVER_NAME} pid=${child.pid ?? -1} entry=${ENTRY}\n`);
+emitLifecycle(`op=spawn session=${SESSION_ID8} server=${SERVER_NAME} pid=${child.pid ?? -1} entry=${ENTRY}`, "info");
 
 child.on("error", (err) => {
   const msg = err instanceof Error ? err.message : String(err);
-  syncEmitLine(`[mcp-spawn-tee-error] server=${SERVER_NAME} reason=${JSON.stringify(`spawn error: ${msg}`)}\n`);
+  emitLifecycle(`op=error session=${SESSION_ID8} server=${SERVER_NAME} reason=${JSON.stringify(`spawn error: ${msg}`)}`, "error");
   process.exit(127);
 });
 
 if (child.stderr) {
   child.stderr.on("data", (chunk: Buffer) => {
-    if (LOG_DIR) {
-      try {
-        const date = new Date().toISOString().slice(0, 10);
-        appendFileSync(resolve(LOG_DIR, `mcp-${SERVER_NAME}-stderr-${date}.log`), chunk);
-      } catch {
-        /* unwritable destination — preserve passthrough */
-      }
-    }
-    try {
-      process.stderr.write(chunk);
-    } catch {
-      /* stderr closed — nothing else to do */
+    appendSafe(perDatePath, chunk);     // per-date raw (back-compat)
+    appendSafe(perSessionPath, chunk);  // per-session raw (Task 706)
+    try { process.stderr.write(chunk); } catch { /* stderr closed */ } // passthrough
+    stderrTail = (stderrTail + chunk.toString("utf8")).slice(-TAIL_CAP);
+    if (!bootEmitted) {
+      bootEmitted = true;
+      const head = chunk.toString("utf8").split("\n")[0].slice(0, 200);
+      emitLifecycle(`op=boot session=${SESSION_ID8} server=${SERVER_NAME} head=${JSON.stringify(head)}`, "info");
     }
   });
 }
 
-// Forward SIGTERM/SIGINT so Claude Code shutdown doesn't orphan the child.
-const forward = (signal: NodeJS.Signals) => {
-  if (!child.killed) child.kill(signal);
-};
+const forward = (signal: NodeJS.Signals) => { if (!child.killed) child.kill(signal); };
 process.on("SIGTERM", () => forward("SIGTERM"));
 process.on("SIGINT", () => forward("SIGINT"));
 
+// Signal → number, so a signal-killed child propagates as 128+signum (the
+// shell convention). `code` is null on a signal exit, so `128 + (code ?? 0)`
+// would collapse every signal to 128 and lose the signal identity in the
+// wrapper's own exit status.
+const SIGNUM: Record<string, number> = { SIGHUP: 1, SIGINT: 2, SIGQUIT: 3, SIGKILL: 9, SIGTERM: 15 };
+
 child.on("exit", (code, signal) => {
-  if (signal) {
-    syncEmitLine(`[mcp-spawn-tee-exit] server=${SERVER_NAME} pid=${child.pid ?? -1} signal=${signal}\n`);
-    process.exit(128 + (code ?? 0));
-  }
-  if (code !== 0) {
-    syncEmitLine(`[mcp-spawn-tee-exit] server=${SERVER_NAME} pid=${child.pid ?? -1} code=${code}\n`);
-  }
+  const lifetimeMs = Date.now() - spawnStamp;
+  const tail = stderrTail.slice(-200);
+  const level: "info" | "error" = signal || (code ?? 0) !== 0 ? "error" : "info";
+  emitLifecycle(
+    `op=exit session=${SESSION_ID8} server=${SERVER_NAME} pid=${child.pid ?? -1} ` +
+    `code=${code ?? "—"} signal=${signal ?? "—"} lifetimeMs=${lifetimeMs} stderr-tail=${JSON.stringify(tail)}`,
+    level,
+  );
+  if (signal) process.exit(128 + (SIGNUM[signal] ?? 0));
   process.exit(code ?? 0);
 });

package/payload/platform/lib/mcp-spawn-tee/tsconfig.json

@@ -4,5 +4,6 @@
     "outDir": "dist",
     "rootDir": "src"
   },
-  "include": ["src"]
+  "include": ["src"],
+  "exclude": ["src/__tests__"]
 }

package/payload/platform/plugins/admin/skills/platform-architecture/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: platform-architecture
 description: Use when grounding any documented-surface claim about what Maxy ships — plugins, skills, specialists, install/deploy flows, internals. This is the install catalogue, not evidence of what is enabled on the current account. For install state on this account, call `capabilities-here`; for documented surface, cite the `Source:` URL inline.
-content-hash: sha256:2002a63079af7332d583e86fd68fe798a5736452310f3412e20b99320194b383
+content-hash: sha256:137ecdb03fdbb733f6150e0d931f4e5f30bf7daafcf738398d8c2768b868936e
 brand: maxy-code
 product-name: Maxy
 ---
@@ -145,6 +145,8 @@ Everything Maxy can do is provided by a plugin. Each plugin is a self-contained
 
 **How tools and roles reach the session.** Each `claude` PTY spawn registers every plugin's MCP server and every bundled subagent directory before the operator's first turn — a per-spawn `mcp-config.json` written by the session manager and passed as `--mcp-config` on the PTY argv, plus one `--add-dir` per agents directory. Admin sessions see every plugin and every role; public sessions see only plugins with at least one public-allowlisted tool. The manager refuses to start when a plugin's `PLUGIN.md` declares tools without a matching `mcp:` block (forensic signal: `boot-failed reason=mcp-allowlist-without-server …`). See `internals.md` "Spawn-time MCP and subagent registration" for the full mechanism and `internals.md` "Tool Eagerness" for the separate ToolSearch-vs-eager registration concern.
 
+**MCP helper death observability (Task 706).** `claude` spawns each plugin MCP helper as its own child, so the manager cannot see a helper die. Every spawn-capable plugin therefore wraps its `mcp:` command with `lib/mcp-spawn-tee`, a parent-side node wrapper that is the helper's real parent and observes its true exit code, signal, and lifetime (including SIGKILL / transport crashes). The wrapper tees the helper's stderr to a wrapper-only per-session file `~/.{brand}/logs/mcp-<server>-<sessionId>.log` — never mixed with the admin-server enumeration copy — and emits lifecycle lines keyed `session=<id8> server=<name>`: `[mcp-helper] op=spawn … pid= entry=`, `[mcp-helper] op=boot … head=<first stderr bytes>`, and `[mcp-helper] op=exit … code= signal= lifetimeMs= stderr-tail=` on every exit (including a clean one). Lines are written synchronously to the per-session file and best-effort mirrored to `server.log` via the loopback log-ingest route. Diagnose a dead helper by `grep '\[mcp-helper\]' ~/.{brand}/logs/server.log` filtered by `session=<id8>`, then read the per-session file for its last output. Full contract and diagnostic path in [`.docs/mcp-helper-observability.md`](../../../.docs/mcp-helper-observability.md). The alive-but-wedged case (no process exit) is the deferred `[mcp-helper-census]` reconciler (Task 710).
+
 **Where premium bundle subs live.** Bundle subs (`loop`, `property-data`, `brochures`, etc. inside `real-agent`) live exclusively at `premium-plugins/<bundle>/plugins/<sub>/` and are registered via the resolver's bundle-descent walk. Standalone premiums (no `BUNDLE.md`, e.g. `writer-craft`, `teaching`, `venture-studio`) live exclusively at `premium-plugins/<name>/` and are registered via the resolver's dual-root scan (`platform/plugins/` and `premium-plugins/` are both `pluginsRoots`). Neither shape is flat-copied into `platform/plugins/<name>/`. A divergent flat copy of a bundle sub is treated as an operator override: the resolver refuses to boot with `boot-failed reason=mcp-plugin-duplicate <plugin> declared by more than one plugins root: <pathA> (sha=…) vs <pathB> (sha=…)` so the operator can `sha256sum` both paths and remove the stale one. Byte-identical bundle-sub flat copies left over from installer versions that flat-copied bundle subs are reaped on the first post-upgrade boot (`[premium-auto-deliver] reaped sub=<name> reason=duplicate-of-premium-tree`). Standalone flat copies (leaked by the pre-fix `autoDeliverPremiumPlugins` standalone branch) are reaped unconditionally — there is no documented override path for standalones at `platform/plugins/<name>/` — and the reaper logs `[premium-auto-deliver] reaped standalone=<name> matches-source=<true|false>` so divergent reaps leave a forensic trail.
 
 Plugins are installed and managed through conversation. You can add marketplace plugins (like Stripe) or use Maxy's built-in ones (contacts, memory, Telegram).

package/payload/platform/plugins/docs/references/platform.md

@@ -31,6 +31,8 @@ Everything {{productName}} can do is provided by a plugin. Each plugin is a self
 
 **How tools and roles reach the session.** Each `claude` PTY spawn registers every plugin's MCP server and every bundled subagent directory before the operator's first turn — a per-spawn `mcp-config.json` written by the session manager and passed as `--mcp-config` on the PTY argv, plus one `--add-dir` per agents directory. Admin sessions see every plugin and every role; public sessions see only plugins with at least one public-allowlisted tool. The manager refuses to start when a plugin's `PLUGIN.md` declares tools without a matching `mcp:` block (forensic signal: `boot-failed reason=mcp-allowlist-without-server …`). See `internals.md` "Spawn-time MCP and subagent registration" for the full mechanism and `internals.md` "Tool Eagerness" for the separate ToolSearch-vs-eager registration concern.
 
+**MCP helper death observability (Task 706).** `claude` spawns each plugin MCP helper as its own child, so the manager cannot see a helper die. Every spawn-capable plugin therefore wraps its `mcp:` command with `lib/mcp-spawn-tee`, a parent-side node wrapper that is the helper's real parent and observes its true exit code, signal, and lifetime (including SIGKILL / transport crashes). The wrapper tees the helper's stderr to a wrapper-only per-session file `~/.{brand}/logs/mcp-<server>-<sessionId>.log` — never mixed with the admin-server enumeration copy — and emits lifecycle lines keyed `session=<id8> server=<name>`: `[mcp-helper] op=spawn … pid= entry=`, `[mcp-helper] op=boot … head=<first stderr bytes>`, and `[mcp-helper] op=exit … code= signal= lifetimeMs= stderr-tail=` on every exit (including a clean one). Lines are written synchronously to the per-session file and best-effort mirrored to `server.log` via the loopback log-ingest route. Diagnose a dead helper by `grep '\[mcp-helper\]' ~/.{brand}/logs/server.log` filtered by `session=<id8>`, then read the per-session file for its last output. Full contract and diagnostic path in [`.docs/mcp-helper-observability.md`](../../../.docs/mcp-helper-observability.md). The alive-but-wedged case (no process exit) is the deferred `[mcp-helper-census]` reconciler (Task 710).
+
 **Where premium bundle subs live.** Bundle subs (`loop`, `property-data`, `brochures`, etc. inside `real-agent`) live exclusively at `premium-plugins/<bundle>/plugins/<sub>/` and are registered via the resolver's bundle-descent walk. Standalone premiums (no `BUNDLE.md`, e.g. `writer-craft`, `teaching`, `venture-studio`) live exclusively at `premium-plugins/<name>/` and are registered via the resolver's dual-root scan (`platform/plugins/` and `premium-plugins/` are both `pluginsRoots`). Neither shape is flat-copied into `platform/plugins/<name>/`. A divergent flat copy of a bundle sub is treated as an operator override: the resolver refuses to boot with `boot-failed reason=mcp-plugin-duplicate <plugin> declared by more than one plugins root: <pathA> (sha=…) vs <pathB> (sha=…)` so the operator can `sha256sum` both paths and remove the stale one. Byte-identical bundle-sub flat copies left over from installer versions that flat-copied bundle subs are reaped on the first post-upgrade boot (`[premium-auto-deliver] reaped sub=<name> reason=duplicate-of-premium-tree`). Standalone flat copies (leaked by the pre-fix `autoDeliverPremiumPlugins` standalone branch) are reaped unconditionally — there is no documented override path for standalones at `platform/plugins/<name>/` — and the reaper logs `[premium-auto-deliver] reaped standalone=<name> matches-source=<true|false>` so divergent reaps leave a forensic trail.
 
 Plugins are installed and managed through conversation. You can add marketplace plugins (like Stripe) or use {{productName}}'s built-in ones (contacts, memory, Telegram).

package/payload/platform/plugins/email/PLUGIN.md

@@ -58,7 +58,7 @@ Manages the agent's own dedicated email account — IMAP for reading, SMTP for s
 
 **Identity boundary (operator-identity fix).** This plugin manages the AGENT's email channel: an `:EmailAccount` node with IMAP/SMTP credentials, polling state, and the agent's `agentAddress`. It is NOT the operator-identity store. The operator's own email lives on the OWNS-bound `:Person` (`Person.email`) and is captured via `profile-update` with `personFields`. Confusing the two surfaces (writing the operator's personal email to `EmailAccount.agentAddress`, or vice versa) breaks routing AND identity coverage. See [.docs/agents.md § Coverage-driven elicitation bias] for the operator-identity contract.
 
-**Login vs alias — the default recipient set.** A config carries two addresses. `email` is the IMAP login: the address you authenticate as, and an address this mailbox owns. `agentAddress` is an *additional* alias to surface (often a per-agent address on a shared catch-all mailbox). When they differ, `email-read`, `email-search`, and `email-otp-extract` default to surfacing mail addressed to **either** — not the alias alone — because replies commonly arrive at the login address (a proposal sent from `info@` is answered to `info@`, not the `maxy@` alias). When no distinct alias is configured, no recipient filter is applied. Pass an explicit `to=` to narrow to a single address. Whenever the default filter hides messages from the fetched window, `email-read`/`email-search` append a `Recipient filter: kept N, hid M (to ∈ {…}); pass to="…" to change.` line — including when every message was hidden — so "I can't see it" is never indistinguishable from "it isn't there".
+**Login vs alias — the default recipient set.** A config carries two addresses. `email` is the IMAP login: the address you authenticate as, and an address this mailbox owns. `agentAddress` is an *additional* alias to surface (often a per-agent address on a shared catch-all mailbox). When they differ, `email-read`, `email-search`, `email-otp-extract`, and `email-fetch` default to surfacing mail whose **To or Cc** carries **either** address — not the alias alone — because replies commonly arrive at the login address, and a reply or multi-party thread routinely Cc's the alias rather than To'ing it (a proposal sent from `info@` is answered to `info@`, not the `maxy@` alias; a thread copies `maxy@` on Cc). When no distinct alias is configured, no recipient filter is applied. Pass an explicit `to=` to narrow to a single address. Whenever the default filter hides messages from the fetched window, `email-read`/`email-search` append a `Recipient filter: kept N, hid M (to ∈ {…}); pass to="…" to change.` line — including when every message was hidden — so "I can't see it" is never indistinguishable from "it isn't there". `email-fetch` has no tool-output filter line; its kept-vs-hidden split is recorded in the stderr `diag("fetchSinceUid", "filter applied", …)` log instead.
 
 ## Capabilities
 

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-resolve.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=attachment-resolve.test.d.ts.map

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-resolve.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-resolve.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/attachment-resolve.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-resolve.test.js

@@ -0,0 +1,68 @@
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { mkdtempSync, mkdirSync, writeFileSync, rmSync, realpathSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { resolveOutboundAttachments, accountDirFor } from '../lib/attachment-resolve.js';
+describe('Task 714 — attachment-resolve account-dir resolution', () => {
+    let root = ''; // stands in for dirname(PLATFORM_ROOT)
+    let platformRoot = '';
+    const accountId = 'acc-1';
+    let accountDir = '';
+    let inFile = '';
+    const saved = { ...process.env };
+    beforeEach(() => {
+        // realpath up front so realpathSync() inside the resolver (which canonicalizes
+        // /var → /private/var on macOS) matches the paths we assert against.
+        root = realpathSync(mkdtempSync(join(tmpdir(), 't714-')));
+        platformRoot = join(root, 'platform');
+        mkdirSync(platformRoot, { recursive: true });
+        accountDir = join(root, 'data', 'accounts', accountId);
+        mkdirSync(accountDir, { recursive: true });
+        inFile = join(accountDir, 'doc.pdf');
+        writeFileSync(inFile, 'x');
+        delete process.env.ACCOUNT_DIR;
+        delete process.env.PLATFORM_ROOT;
+        delete process.env.ACCOUNT_ID;
+    });
+    afterEach(() => {
+        process.env = { ...saved };
+        if (root)
+            rmSync(root, { recursive: true, force: true });
+    });
+    it('accountDirFor derives PLATFORM_ROOT/../data/accounts/<id>', () => {
+        process.env.PLATFORM_ROOT = platformRoot;
+        expect(accountDirFor(accountId)).toBe(accountDir);
+    });
+    it('accountDirFor returns undefined when PLATFORM_ROOT is absent', () => {
+        expect(accountDirFor(accountId)).toBeUndefined();
+    });
+    it('explicit accountDir validates an in-account file', () => {
+        const out = resolveOutboundAttachments(accountDir, [inFile]);
+        expect(out).toHaveLength(1);
+        expect(out[0].path).toBe(inFile);
+    });
+    it('falls back to PLATFORM_ROOT+ACCOUNT_ID when ACCOUNT_DIR is unset', () => {
+        process.env.PLATFORM_ROOT = platformRoot;
+        process.env.ACCOUNT_ID = accountId;
+        const out = resolveOutboundAttachments(undefined, [inFile]);
+        expect(out).toHaveLength(1);
+    });
+    it('uses ACCOUNT_DIR directly when present', () => {
+        process.env.ACCOUNT_DIR = accountDir;
+        const out = resolveOutboundAttachments(undefined, [inFile]);
+        expect(out).toHaveLength(1);
+    });
+    it('throws a precise error when neither source resolves', () => {
+        expect(() => resolveOutboundAttachments(undefined, [inFile])).toThrow(/no account context/);
+    });
+    it('still rejects a path outside the account directory', () => {
+        const outside = join(root, 'outside.pdf');
+        writeFileSync(outside, 'x');
+        expect(() => resolveOutboundAttachments(accountDir, [outside])).toThrow(/outside the account directory/);
+    });
+    it('returns [] for empty paths without needing any account context', () => {
+        expect(resolveOutboundAttachments(undefined, [])).toEqual([]);
+        expect(resolveOutboundAttachments(undefined, undefined)).toEqual([]);
+    });
+});
+//# sourceMappingURL=attachment-resolve.test.js.map

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-resolve.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-resolve.test.js","sourceRoot":"","sources":["../../src/__tests__/attachment-resolve.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACpE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,0BAA0B,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAExF,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACpE,IAAI,IAAI,GAAG,EAAE,CAAA,CAAC,uCAAuC;IACrD,IAAI,YAAY,GAAG,EAAE,CAAA;IACrB,MAAM,SAAS,GAAG,OAAO,CAAA;IACzB,IAAI,UAAU,GAAG,EAAE,CAAA;IACnB,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAA;IAEhC,UAAU,CAAC,GAAG,EAAE;QACd,+EAA+E;QAC/E,qEAAqE;QACrE,IAAI,GAAG,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;QACzD,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;QACrC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5C,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAA;QACtD,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1C,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;QACpC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAA;QAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;QAChC,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,CAAA;IAC/B,CAAC,CAAC,CAAA;IACF,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,CAAA;QAC1B,IAAI,IAAI;YAAE,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,YAAY,CAAA;QACxC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,GAAG,GAAG,0BAA0B,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5D,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,YAAY,CAAA;QACxC,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,SAAS,CAAA;QAClC,MAAM,GAAG,GAAG,0BAA0B,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QAC3D,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,UAAU,CAAA;QACpC,MAAM,GAAG,GAAG,0BAA0B,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QAC3D,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;QACzC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;QAC3B,MAAM,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CACrE,+BAA+B,CAChC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,0BAA0B,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC7D,MAAM,CAAC,0BAA0B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/payload/platform/plugins/email/mcp/dist/__tests__/email-setup.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=email-setup.test.d.ts.map

package/payload/platform/plugins/email/mcp/dist/__tests__/email-setup.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-setup.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/email-setup.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/email/mcp/dist/__tests__/email-setup.test.js

@@ -0,0 +1,55 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+// Mock the MX surface so an M365 custom domain can be driven deterministically,
+// and the heavy IMAP/SMTP/credentials deps so emailSetup is exercised in
+// isolation. The Microsoft short-circuit must return BEFORE any of these run.
+const { resolveMx } = vi.hoisted(() => ({ resolveMx: vi.fn() }));
+vi.mock("node:dns/promises", () => ({ resolveMx }));
+const imap = vi.hoisted(() => ({ testConnection: vi.fn(), getInboxCount: vi.fn() }));
+const smtp = vi.hoisted(() => ({ testConnection: vi.fn() }));
+vi.mock("../lib/imap.js", () => imap);
+vi.mock("../lib/smtp.js", () => smtp);
+vi.mock("../lib/credentials.js", () => ({
+    writeConfig: vi.fn(),
+    writePassword: vi.fn(),
+    removeConfig: vi.fn(),
+    checkAddressBinding: vi.fn().mockResolvedValue(null),
+    writeBindingConfig: vi.fn(),
+}));
+const { emailSetup } = await import("../tools/email-setup.js");
+describe("email-setup short-circuits Microsoft addresses", () => {
+    beforeEach(() => {
+        resolveMx.mockReset();
+        imap.testConnection.mockReset();
+        smtp.testConnection.mockReset();
+    });
+    it("refuses a static Microsoft address without attempting a connection", async () => {
+        const result = await emailSetup({
+            email: "agent@outlook.com",
+            password: "irrelevant",
+            accountId: "acct-1",
+        });
+        expect(result.success).toBe(false);
+        expect(result.message).toMatch(/outlook-account-register/);
+        expect(result.message).toMatch(/outlook plugin/i);
+        expect(imap.testConnection).not.toHaveBeenCalled();
+        expect(smtp.testConnection).not.toHaveBeenCalled();
+        expect(resolveMx).not.toHaveBeenCalled();
+    });
+    it("refuses an M365 custom domain detected by MX, even with hosts supplied", async () => {
+        resolveMx.mockResolvedValue([
+            { exchange: "contoso-com.mail.protection.outlook.com", priority: 0 },
+        ]);
+        const result = await emailSetup({
+            email: "ceo@contoso.com",
+            password: "irrelevant",
+            imapHost: "outlook.office365.com",
+            smtpHost: "smtp.office365.com",
+            accountId: "acct-1",
+        });
+        expect(result.success).toBe(false);
+        expect(result.message).toMatch(/outlook-account-register/);
+        expect(imap.testConnection).not.toHaveBeenCalled();
+        expect(smtp.testConnection).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=email-setup.test.js.map

package/payload/platform/plugins/email/mcp/dist/__tests__/email-setup.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-setup.test.js","sourceRoot":"","sources":["../../src/__tests__/email-setup.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE9D,gFAAgF;AAChF,yEAAyE;AACzE,8EAA8E;AAC9E,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AACjE,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AAEpD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AACrF,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC7D,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AACtC,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AACtC,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;IACpB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;IACtB,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE;IACrB,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;IACpD,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC5B,CAAC,CAAC,CAAC;AAEJ,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;AAE/D,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,UAAU,CAAC,GAAG,EAAE;QACd,SAAS,CAAC,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;YAC9B,KAAK,EAAE,mBAAmB;YAC1B,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACnD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,SAAS,CAAC,iBAAiB,CAAC;YAC1B,EAAE,QAAQ,EAAE,yCAAyC,EAAE,QAAQ,EAAE,CAAC,EAAE;SACrE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;YAC9B,KAAK,EAAE,iBAAiB;YACxB,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,uBAAuB;YACjC,QAAQ,EAAE,oBAAoB;YAC9B,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/email/mcp/dist/__tests__/providers.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=providers.test.d.ts.map

package/payload/platform/plugins/email/mcp/dist/__tests__/providers.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/providers.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/email/mcp/dist/__tests__/providers.test.js

@@ -0,0 +1,110 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+const { resolveMx } = vi.hoisted(() => ({ resolveMx: vi.fn() }));
+vi.mock("node:dns/promises", () => ({ resolveMx }));
+// Import AFTER the mock is registered.
+const { describeProvider, inferProvider, getProviderNotes } = await import("../lib/providers.js");
+describe("provider MX fallback", () => {
+    beforeEach(() => resolveMx.mockReset());
+    it("static-map domains resolve without an MX lookup", async () => {
+        const info = await describeProvider("someone@gmail.com");
+        expect(info.status).toBe("known");
+        if (info.status === "known")
+            expect(info.defaults.imapHost).toBe("imap.gmail.com");
+        expect(resolveMx).not.toHaveBeenCalled();
+    });
+    it("a Google-hosted custom domain resolves to the gmail entry via MX", async () => {
+        resolveMx.mockResolvedValue([
+            { exchange: "aspmx.l.google.com", priority: 1 },
+            { exchange: "alt1.aspmx.l.google.com", priority: 5 },
+        ]);
+        const info = await describeProvider("dale@glsmithandsons.co.uk");
+        expect(info.status).toBe("known");
+        if (info.status === "known") {
+            expect(info.defaults.imapHost).toBe("imap.gmail.com");
+            expect(info.defaults.smtpHost).toBe("smtp.gmail.com");
+            expect(info.notes).toMatch(/app/i);
+        }
+        expect(resolveMx).toHaveBeenCalledWith("glsmithandsons.co.uk");
+    });
+    it("inferProvider routes a Google-MX custom domain to gmail hosts", async () => {
+        resolveMx.mockResolvedValue([{ exchange: "ASPMX.L.GOOGLE.COM.", priority: 1 }]);
+        const d = await inferProvider("x@glsmithandsons.co.uk");
+        expect(d?.imapHost).toBe("imap.gmail.com");
+    });
+    it("getProviderNotes returns the gmail app-password note for a Google-MX domain", async () => {
+        resolveMx.mockResolvedValue([{ exchange: "aspmx.l.google.com", priority: 1 }]);
+        const notes = await getProviderNotes("x@glsmithandsons.co.uk");
+        expect(notes).toMatch(/app password/i);
+    });
+    it("a non-Google MX domain stays unknown", async () => {
+        resolveMx.mockResolvedValue([{ exchange: "mx.lcn.com", priority: 10 }]);
+        const info = await describeProvider("dale@somethingelse.co.uk");
+        expect(info.status).toBe("unknown");
+    });
+    it("an MX resolution failure falls back to unknown", async () => {
+        // A malformed resolveMx result drives resolveByMx into the same catch
+        // branch a real DNS rejection (NXDOMAIN/SERVFAIL) takes — both end in
+        // the `[email] mx-lookup ... outcome=error` line and an `unknown`
+        // fallback. The error is thrown inside resolveByMx (records.map on a
+        // non-array), not by the spy itself, so vitest does not surface a
+        // separately-tracked spy rejection.
+        resolveMx.mockResolvedValue(null);
+        const info = await describeProvider("nobody@no-such-domain-xyz.test");
+        expect(info.status).toBe("unknown");
+    });
+    it("an unsupported domain never triggers an MX lookup", async () => {
+        const info = await describeProvider("user@tuta.com");
+        expect(info.status).toBe("unsupported");
+        expect(resolveMx).not.toHaveBeenCalled();
+    });
+});
+describe("Microsoft → outlook Graph plugin redirect", () => {
+    beforeEach(() => resolveMx.mockReset());
+    it("a static Microsoft domain redirects to the outlook plugin without an MX lookup", async () => {
+        const info = await describeProvider("someone@outlook.com");
+        expect(info.status).toBe("redirect");
+        if (info.status === "redirect") {
+            expect(info.plugin).toBe("outlook");
+            expect(info.registerTool).toBe("outlook-account-register");
+            // The redirect reason carries the retired-auth wording (also the
+            // in-source outlook note — one shared constant).
+            expect(info.reason).toMatch(/1 March 2026/);
+            expect(info.reason).toMatch(/basic auth/i);
+            expect(info.reason).not.toMatch(/app password if 2FA/);
+        }
+        expect(resolveMx).not.toHaveBeenCalled();
+    });
+    it("the hotmail.co.uk alias also redirects", async () => {
+        const info = await describeProvider("user@hotmail.co.uk");
+        expect(info.status).toBe("redirect");
+        expect(resolveMx).not.toHaveBeenCalled();
+    });
+    it("an M365 custom domain redirects via MX (mail.protection.outlook.com)", async () => {
+        resolveMx.mockResolvedValue([
+            { exchange: "contoso-com.mail.protection.outlook.com", priority: 0 },
+        ]);
+        const info = await describeProvider("ceo@contoso.com");
+        expect(info.status).toBe("redirect");
+        if (info.status === "redirect") {
+            expect(info.plugin).toBe("outlook");
+            expect(info.registerTool).toBe("outlook-account-register");
+        }
+        expect(resolveMx).toHaveBeenCalledWith("contoso.com");
+    });
+    it("inferProvider returns null for a Microsoft address (no usable IMAP defaults)", async () => {
+        const d = await inferProvider("someone@outlook.com");
+        expect(d).toBeNull();
+    });
+});
+describe("gmail notes currency", () => {
+    it("requires an app password and drops the stale enable-IMAP line", async () => {
+        const info = await describeProvider("someone@gmail.com");
+        if (info.status !== "known")
+            throw new Error("expected known");
+        const notes = info.defaults.notes ?? "";
+        expect(notes).toMatch(/app password/i);
+        expect(notes).toMatch(/2-step verification/i);
+        expect(notes).not.toMatch(/IMAP must be enabled in Gmail settings/i);
+    });
+});
+//# sourceMappingURL=providers.test.js.map

package/payload/platform/plugins/email/mcp/dist/__tests__/providers.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.test.js","sourceRoot":"","sources":["../../src/__tests__/providers.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE9D,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AACjE,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AAEpD,uCAAuC;AACvC,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAElG,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;IAExC,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACnF,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,SAAS,CAAC,iBAAiB,CAAC;YAC1B,EAAE,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,EAAE;YAC/C,EAAE,QAAQ,EAAE,yBAAyB,EAAE,QAAQ,EAAE,CAAC,EAAE;SACrD,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,sBAAsB,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,SAAS,CAAC,iBAAiB,CAAC,CAAC,EAAE,QAAQ,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,wBAAwB,CAAC,CAAC;QACxD,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,SAAS,CAAC,iBAAiB,CAAC,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,wBAAwB,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,SAAS,CAAC,iBAAiB,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,0BAA0B,CAAC,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,sEAAsE;QACtE,sEAAsE;QACtE,kEAAkE;QAClE,qEAAqE;QACrE,kEAAkE;QAClE,oCAAoC;QACpC,SAAS,CAAC,iBAAiB,CAAC,IAAa,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,gCAAgC,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACxC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;IAExC,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC3D,iEAAiE;YACjE,iDAAiD;YACjD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,SAAS,CAAC,iBAAiB,CAAC;YAC1B,EAAE,QAAQ,EAAE,yCAAyC,EAAE,QAAQ,EAAE,CAAC,EAAE;SACrE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,qBAAqB,CAAC,CAAC;QACrD,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/email/mcp/dist/__tests__/recipient-filter.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=recipient-filter.test.d.ts.map

package/payload/platform/plugins/email/mcp/dist/__tests__/recipient-filter.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipient-filter.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/recipient-filter.test.ts"],"names":[],"mappings":""}