@rubytech/create-maxy-code 0.1.475 → 0.1.477

package/payload/platform/plugins/scheduling/mcp/dist/lib/booking-reconcile.js

@@ -47,19 +47,95 @@ export async function reconcileOne(session, accountId, booking) {
        ON CREATE SET r.role = 'booker', r.createdAt = datetime(), r.createdBySource = 'booking-reconcile'`, { meetingId, email: booking.email, accountId, name: booking.name });
     return { created, meetingId };
 }
+// ---------------------------------------------------------------------------
+// Task 1806 — one eligibility predicate, shared by the sweep and the audit
+// ---------------------------------------------------------------------------
 /**
- * Compare D1's accepted booking ids against the account's booking :Meeting set.
- *   pendingUnreconciled — accepted in D1 but no :Meeting yet (reconcile lagging).
- *   orphanMeetings      — a booking :Meeting with no backing D1 row.
+ * The single definition of a row the reconcile loop acts on.
+ *
+ * `status='accepted'` is the row the booking page captured. `kind='booking'` is
+ * the row that must become a :Meeting — a `kind='block'` row only reserves a
+ * slot and has no meeting by design, so counting it as unreconciled is a false
+ * positive that is indistinguishable in the log from a genuinely lost booking.
+ *
+ * Both call sites build their statements from this constant. Two literals is
+ * the defect: the sweep and the audit disagreed about what needed reconciling,
+ * and only the sweep's opinion could act.
  */
-export async function auditCounts(session, accountId, d1AcceptedIds) {
+export const ELIGIBLE_BOOKING_PREDICATE = "status='accepted' AND kind='booking'";
+/** The one D1 read that serves both the sweep and the audit. */
+export const ELIGIBLE_BOOKING_SELECT = `SELECT bookingId, slotStart, slotEnd, name, email, note, attempts FROM bookings WHERE ${ELIGIBLE_BOOKING_PREDICATE} ORDER BY id`;
+/** This account's booking :Meeting uids. Read once per run and used for both
+ *  the sweep's claim decision and the audit's counts. */
+export async function fetchBookingMeetingUids(session, accountId) {
     const res = await session.run(`MATCH (m:Meeting {accountId: $accountId, source: 'booking'}) RETURN collect(m.uid) AS uids`, { accountId });
-    const uids = res.records[0]?.get("uids") ?? [];
-    const uidSet = new Set(uids);
-    const idSet = new Set(d1AcceptedIds);
-    const pendingUnreconciled = d1AcceptedIds.filter((id) => !uidSet.has(bookingUid(id))).length;
-    const orphanMeetings = uids.filter((uid) => !idSet.has(uid.replace(/^booking-/, ""))).length;
-    return { pendingUnreconciled, orphanMeetings };
+    return res.records[0]?.get("uids") ?? [];
+}
+/**
+ * The rows the sweep must claim: eligible, and with no :Meeting carrying their
+ * uid.
+ *
+ * Task 1807 — this deliberately does not consult `swept`. `swept` records that
+ * a write was attempted, not that a meeting exists; gating retry on it made a
+ * booking whose meeting later went missing permanently unreachable, while the
+ * audit reported it every tick. Re-entry is safe because `reconcileOne` is
+ * idempotent on (accountId, uid) and returns created=false on a re-run.
+ */
+export function selectUnreconciled(rows, meetingUids) {
+    return rows.filter((r) => !meetingUids.has(bookingUid(String(r.bookingId))));
+}
+/**
+ * Compare D1's eligible booking ids against the account's booking :Meeting set.
+ *   pendingUnreconciled — eligible in D1 but no :Meeting (reconcile lagging or lost).
+ *   orphanMeetings      — a booking :Meeting with no backing eligible D1 row.
+ *
+ * Pure: both inputs are read by the caller, which uses the same two lists for
+ * the sweep, so the sweep and the audit cannot disagree about the population.
+ */
+export function auditCounts(eligibleIds, meetingUids) {
+    const uidSet = new Set(meetingUids);
+    const idSet = new Set(eligibleIds);
+    return {
+        eligibleExamined: eligibleIds.length,
+        pendingUnreconciled: eligibleIds.filter((id) => !uidSet.has(bookingUid(id))).length,
+        orphanMeetings: meetingUids.filter((uid) => !idSet.has(uid.replace(/^booking-/, ""))).length,
+    };
+}
+// ---------------------------------------------------------------------------
+// Task 1806/1807 — lazy schema migration
+// ---------------------------------------------------------------------------
+/**
+ * Statements that bring an already-provisioned bookings table up to the schema
+ * the sweep needs. Run once, on the first tick after upgrade, triggered by the
+ * eligible-row read failing on the missing column.
+ *
+ * A template schema change alone cannot reach an existing install: schema.sql
+ * is CREATE TABLE IF NOT EXISTS and is applied once at provisioning, so
+ * re-applying it to a live database is a no-op. Without this the first
+ * kind-qualified read would throw on every existing install and reconcile would
+ * stop entirely — strictly worse than the defect being fixed.
+ *
+ * The third statement classifies rows that predate the column. It is the only
+ * place the platform reads a block row's note: the marker is a free-text string
+ * owned by an out-of-tree script (Task 1811 absorbs that writer, after which
+ * kind='block' is set natively), so it may be used to interpret legacy rows once
+ * but never to decide control flow. It is safe to re-run.
+ */
+export const BOOKING_SCHEMA_MIGRATION = [
+    "ALTER TABLE bookings ADD COLUMN kind TEXT NOT NULL DEFAULT 'booking'",
+    "ALTER TABLE bookings ADD COLUMN attempts INTEGER NOT NULL DEFAULT 0",
+    "UPDATE bookings SET kind='block' WHERE note='Auto-block: Google Calendar'",
+];
+/** True when a D1 failure is the absent-column case the migration answers.
+ *  Every other failure must stay a failure. */
+export function isMissingColumnError(message) {
+    return /no such column/i.test(message);
+}
+/** True when an ALTER failed because the column is already there. SQLite has no
+ *  ADD COLUMN IF NOT EXISTS, so each statement tolerates this independently and
+ *  a half-migrated table completes rather than aborting. */
+export function isDuplicateColumnError(message) {
+    return /duplicate column name/i.test(message);
 }
 // ---------------------------------------------------------------------------
 // Task 1654 — connector calendar → booking availability sync
@@ -76,10 +152,15 @@ export const CONNECTOR_SYNC_PROMPT = "Keep your booking page in step with your r
 /**
  * Create-only provisioning of the recurring connector-sync :Event. Idempotent:
  * the existence probe keys on the `connectorSync` marker so a re-run never
- * duplicates the event nor resets its advancing nextRun. Returns 'created' on the
- * first arming, 'exists' thereafter.
+ * duplicates the event nor resets its advancing nextRun. Returns 'provisioned'
+ * on the first arming, 'already-provisioned' thereafter.
+ *
+ * Task 1809 — `dispatch` is the resolved EXCEPTION destination, not a gate. The
+ * caller decides whether to provision from the presence of a calendar
+ * connector (the sync's actual input) and resolves where an exception is
+ * reported separately; this function writes whichever channel it is handed.
  */
-export async function ensureConnectorSyncEvent(session, accountId, adminPhone) {
+export async function ensureConnectorSyncEvent(session, accountId, dispatch) {
     const probe = await session.run(`MATCH (e:Event {accountId: $accountId, connectorSync: true})
      WHERE e.eventStatus IN ['scheduled', 'due']
      RETURN count(e) AS n`, { accountId });
@@ -88,7 +169,7 @@ export async function ensureConnectorSyncEvent(session, accountId, adminPhone) {
         ? raw.toNumber()
         : Number(raw ?? 0);
     if (n > 0)
-        return "exists";
+        return "already-provisioned";
     const now = new Date().toISOString();
     const eventId = randomUUID();
     await session.run(`CREATE (e:Event {
@@ -111,11 +192,11 @@ export async function ensureConnectorSyncEvent(session, accountId, adminPhone) {
         accountId,
         recurrence: "*/30 * * * *",
         now,
-        agentChannel: "whatsapp",
-        agentDestination: adminPhone,
+        agentChannel: dispatch.channel,
+        agentDestination: dispatch.destination,
         agentPrompt: CONNECTOR_SYNC_PROMPT,
     });
-    return "created";
+    return "provisioned";
 }
 /** Half-open overlap: [aStart,aEnd) intersects [bStart,bEnd). Edge-touching
  *  intervals (a.end === b.start) do NOT overlap. Any unparseable bound is
@@ -128,16 +209,124 @@ function intervalsOverlap(a, b) {
     return aS < bE && bS < aE;
 }
 /**
- * Count published-open booking slots that overlap any connector-busy interval —
- * the drift the standing audit reports. A nonzero result means the booking page
- * is currently offering a slot the connector shows busy.
+ * Classify published-open booking slots against the connector-busy set — the
+ * drift the standing audit reports. `outcome: "verified"` with a nonzero
+ * `conflicts` means the booking page is currently offering a slot the connector
+ * shows busy. An empty published set reports `no-published-slots` even when the
+ * busy set is also empty: the site never publishing is the upstream condition.
  */
-export function countPublishedConflicts(published, busy) {
+export function classifyPublishedDrift(published, busy) {
     let conflicts = 0;
     for (const slot of published) {
         if (busy.some((b) => intervalsOverlap(slot, b)))
             conflicts++;
     }
-    return conflicts;
+    const outcome = published.length === 0 ? "no-published-slots" : busy.length === 0 ? "no-busy-data" : "verified";
+    return { outcome, published: published.length, busy: busy.length, conflicts };
+}
+/**
+ * The published slots to block, given the connector-busy set.
+ *
+ * The returned slots are drawn from `published` verbatim, never synthesised
+ * from `busy`: the edge free/busy Function subtracts taken slots by an exact
+ * `slotStart` string match, so a block row keyed on a busy-interval boundary
+ * would block nothing.
+ *
+ * Two exclusions, both carried over from the out-of-tree script this replaces:
+ * a slot that has already started (the edge filters past slots anyway, so a
+ * row for one is inert churn), and a slot already taken by a real booking
+ * (already subtracted at the edge by that booking).
+ */
+export function selectBlockedSlots(published, busy, taken, nowMs) {
+    return published.filter((slot) => {
+        const startMs = Date.parse(slot.start);
+        // `<` not `<=`: the edge serves slots with `t >= lower` where lower is now,
+        // so a slot starting exactly now IS still offered and must still be blocked.
+        if (Number.isNaN(startMs) || startMs < nowMs)
+            return false;
+        if (taken.has(slot.start))
+            return false;
+        return busy.some((b) => intervalsOverlap(slot, b));
+    });
+}
+/**
+ * Reconcile the held block rows to the desired set, keyed on slot start.
+ *
+ * This replaces the out-of-tree script's delete-and-reinsert. That form
+ * rewrote every row on every run and left a window in which a still-busy slot
+ * was unblocked; this one writes nothing in the steady state and never
+ * unblocks a slot that is staying blocked.
+ *
+ * A slot held by more than one row (possible after an interrupted run) keeps
+ * one and deletes the rest, so a duplicate converges instead of persisting.
+ */
+export function diffBlockRows(desired, current) {
+    const desiredStarts = new Set(desired.map((s) => s.start));
+    const kept = new Set();
+    const toDelete = [];
+    for (const row of current) {
+        if (desiredStarts.has(row.slotStart) && !kept.has(row.slotStart)) {
+            kept.add(row.slotStart);
+            continue;
+        }
+        toDelete.push(row.bookingId);
+    }
+    return { toInsert: desired.filter((s) => !kept.has(s.start)), toDelete };
+}
+/** The block rows this dispatcher owns. `kind='block'` is the whole identity —
+ *  no free-text marker is consulted, which is the defect Task 1811 removes. */
+export const BLOCK_ROWS_SELECT = "SELECT bookingId, slotStart FROM bookings WHERE kind='block'";
+/** `status='accepted'` so the edge free/busy Function subtracts the slot;
+ *  `kind='block'` so 1806's sweep and audit both exclude it by construction. */
+export const BLOCK_ROW_INSERT = "INSERT INTO bookings (bookingId,slotStart,slotEnd,name,email,note,status,kind,createdAt) " +
+    "VALUES (?1,?2,?3,?4,?5,'','accepted','block',?6)";
+/** The `kind` qualifier is a safety belt, not a filter: even handed the id of a
+ *  real booking this statement cannot delete it. */
+export const BLOCK_ROW_DELETE = "DELETE FROM bookings WHERE bookingId=?1 AND kind='block'";
+/** Positional parameters for BLOCK_ROW_INSERT. The slot bounds are copied from
+ *  the published snapshot verbatim — the edge matches `slotStart` exactly. */
+export function blockInsertParams(slot, bookingId, nowIso) {
+    return [bookingId, slot.start, slot.end, "Connector busy", "", nowIso];
+}
+/** An interval usable for blocking: both ends parse and start precedes end.
+ *  `busy.length > 0` is NOT a sufficient liveness test — a set of unparseable
+ *  intervals overlaps nothing, which would compute an empty desired set and
+ *  delete every held row. That is the same mass-unblock the empty-set rule
+ *  exists to prevent, reached with garbage instead of emptiness. */
+function isUsableInterval(iv) {
+    const s = Date.parse(iv.start);
+    const e = Date.parse(iv.end);
+    return !Number.isNaN(s) && !Number.isNaN(e) && s < e;
+}
+const NO_WRITES = { toInsert: [], toDelete: [] };
+/**
+ * Decide what the blocking step should write. Pure, so the safety rule below is
+ * testable without a live D1 or Neo4j — the rule is the highest-consequence
+ * line in this feature and was previously enforced only by an `if` at the call
+ * site that no test could reach.
+ *
+ * Writes happen ONLY on `verified`: the snapshot was read, it holds slots, and
+ * the busy set holds at least one usable interval. Every degraded outcome
+ * returns no writes, which means an absent or unreadable busy set RETAINS the
+ * rows already held rather than clearing them.
+ *
+ * That asymmetry is deliberate. An empty busy set is ambiguous between a
+ * genuinely clear calendar and a sync that failed, never ran, or was
+ * deauthorised — `syncConnectorBusy` writes an empty set on the documented
+ * deauthorise path. Over-blocking is recoverable by the operator; under-blocking
+ * double-books a customer against a real commitment. The retained rows are
+ * reported on the `op=cal-block` line so the condition is visible, not silent.
+ */
+export function planBlockWrites(input) {
+    if (!input.publishedReadable)
+        return { outcome: "snapshot-unreadable", diff: NO_WRITES };
+    if (!input.busyReadable)
+        return { outcome: "error", diff: NO_WRITES };
+    if (input.published.length === 0)
+        return { outcome: "no-published-slots", diff: NO_WRITES };
+    if (!input.busy.some(isUsableInterval))
+        return { outcome: "no-busy-data", diff: NO_WRITES };
+    const desired = selectBlockedSlots(input.published, input.busy, input.taken, input.nowMs);
+    return { outcome: "verified", diff: diffBlockRows(desired, input.current) };
 }
 //# sourceMappingURL=booking-reconcile.js.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/booking-reconcile.js.map

@@ -1 +1 @@
-{"version":3,"file":"booking-reconcile.js","sourceRoot":"","sources":["../../src/lib/booking-reconcile.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAgBzC,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC1C,OAAO,WAAW,SAAS,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAgB,EAChB,SAAiB,EACjB,OAAmB;IAEnB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE1C,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAClC;;;;;;;;;;;;;;;;;;+CAkB2C,EAC3C;QACE,SAAS;QACT,GAAG;QACH,KAAK,EAAE,YAAY,OAAO,CAAC,IAAI,EAAE;QACjC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;KACzB,CACF,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;IAChE,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAW,CAAC;IAEnE,qEAAqE;IACrE,yEAAyE;IACzE,wEAAwE;IACxE,oBAAoB;IACpB,MAAM,OAAO,CAAC,GAAG,CACf;;;;;;;0GAOsG,EACtG,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CACnE,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAgB,EAChB,SAAiB,EACjB,aAAuB;IAEvB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B,4FAA4F,EAC5F,EAAE,SAAS,EAAE,CACd,CAAC;IACF,MAAM,IAAI,GAAa,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACrC,MAAM,mBAAmB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7F,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7F,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,CAAC;AACjD,CAAC;AAED,8EAA8E;AAC9E,6DAA6D;AAC7D,8EAA8E;AAE9E;;qFAEqF;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAChC,yFAAyF;IACzF,8FAA8F;IAC9F,+FAA+F;IAC/F,iGAAiG;IACjG,iGAAiG;IACjG,mDAAmD,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAgB,EAChB,SAAiB,EACjB,UAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B;;0BAEsB,EACtB,EAAE,SAAS,EAAE,CACd,CAAC;IACF,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAY,CAAC;IAClD,MAAM,CAAC,GACL,GAAG,IAAI,OAAQ,GAAmC,CAAC,QAAQ,KAAK,UAAU;QACxE,CAAC,CAAE,GAAkC,CAAC,QAAQ,EAAE;QAChD,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAE3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,OAAO,CAAC,GAAG,CACf;;;;;;;;;;;;;;;QAeI,EACJ;QACE,OAAO;QACP,SAAS;QACT,UAAU,EAAE,cAAc;QAC1B,GAAG;QACH,YAAY,EAAE,UAAU;QACxB,gBAAgB,EAAE,UAAU;QAC5B,WAAW,EAAE,qBAAqB;KACnC,CACF,CAAC;IACF,OAAO,SAAS,CAAC;AACnB,CAAC;AAOD;;+EAE+E;AAC/E,SAAS,gBAAgB,CAAC,CAAe,EAAE,CAAe;IACxD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAC5B,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAC5B,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAyB,EAAE,IAAoB;IACrF,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAAE,SAAS,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"booking-reconcile.js","sourceRoot":"","sources":["../../src/lib/booking-reconcile.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAiBzC,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC1C,OAAO,WAAW,SAAS,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAgB,EAChB,SAAiB,EACjB,OAAmB;IAEnB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAE1C,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAClC;;;;;;;;;;;;;;;;;;+CAkB2C,EAC3C;QACE,SAAS;QACT,GAAG;QACH,KAAK,EAAE,YAAY,OAAO,CAAC,IAAI,EAAE;QACjC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;KACzB,CACF,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAY,CAAC;IAChE,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAW,CAAC;IAEnE,qEAAqE;IACrE,yEAAyE;IACzE,wEAAwE;IACxE,oBAAoB;IACpB,MAAM,OAAO,CAAC,GAAG,CACf;;;;;;;0GAOsG,EACtG,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CACnE,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,sCAAsC,CAAC;AAEjF,gEAAgE;AAChE,MAAM,CAAC,MAAM,uBAAuB,GAClC,yFAAyF,0BAA0B,cAAc,CAAC;AAEpI;yDACyD;AACzD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAgB,EAAE,SAAiB;IAC/E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B,4FAA4F,EAC5F,EAAE,SAAS,EAAE,CACd,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAS,EACT,WAAwB;IAExB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAWD;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,WAAqB,EAAE,WAAqB;IACtE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACnC,OAAO;QACL,gBAAgB,EAAE,WAAW,CAAC,MAAM;QACpC,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM;QACnF,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM;KAC7F,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,yCAAyC;AACzC,8EAA8E;AAE9E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAa;IAChD,sEAAsE;IACtE,qEAAqE;IACrE,2EAA2E;CAC5E,CAAC;AAEF;+CAC+C;AAC/C,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED;;4DAE4D;AAC5D,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,6DAA6D;AAC7D,8EAA8E;AAE9E;;qFAEqF;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAChC,yFAAyF;IACzF,8FAA8F;IAC9F,+FAA+F;IAC/F,iGAAiG;IACjG,iGAAiG;IACjG,mDAAmD,CAAC;AAEtD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAgB,EAChB,SAAiB,EACjB,QAA6B;IAE7B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B;;0BAEsB,EACtB,EAAE,SAAS,EAAE,CACd,CAAC;IACF,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAY,CAAC;IAClD,MAAM,CAAC,GACL,GAAG,IAAI,OAAQ,GAAmC,CAAC,QAAQ,KAAK,UAAU;QACxE,CAAC,CAAE,GAAkC,CAAC,QAAQ,EAAE;QAChD,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAExC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,OAAO,CAAC,GAAG,CACf;;;;;;;;;;;;;;;QAeI,EACJ;QACE,OAAO;QACP,SAAS;QACT,UAAU,EAAE,cAAc;QAC1B,GAAG;QACH,YAAY,EAAE,QAAQ,CAAC,OAAO;QAC9B,gBAAgB,EAAE,QAAQ,CAAC,WAAW;QACtC,WAAW,EAAE,qBAAqB;KACnC,CACF,CAAC;IACF,OAAO,aAAa,CAAC;AACvB,CAAC;AAOD;;+EAE+E;AAC/E,SAAS,gBAAgB,CAAC,CAAe,EAAE,CAAe;IACxD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAC5B,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAC5B,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAC5B,CAAC;AAkBD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAyB,EAAE,IAAoB;IACpF,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAAE,SAAS,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,OAAO,GACX,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC;IAClG,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AAChF,CAAC;AAYD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAA0B,EAC1B,IAAoB,EACpB,KAAkB,EAClB,KAAa;IAEb,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,4EAA4E;QAC5E,6EAA6E;QAC7E,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,KAAK;YAAE,OAAO,KAAK,CAAC;QAC3D,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAaD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,OAAmB;IACzE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;AAC3E,CAAC;AAED;+EAC+E;AAC/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,8DAA8D,CAAC;AAEhG;gFACgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAC3B,2FAA2F;IAC3F,kDAAkD,CAAC;AAErD;oDACoD;AACpD,MAAM,CAAC,MAAM,gBAAgB,GAAG,0DAA0D,CAAC;AAE3F;8EAC8E;AAC9E,MAAM,UAAU,iBAAiB,CAAC,IAAmB,EAAE,SAAiB,EAAE,MAAc;IACtF,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AACzE,CAAC;AAYD;;;;oEAIoE;AACpE,SAAS,gBAAgB,CAAC,EAAgB;IACxC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,SAAS,GAAc,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAE5D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,eAAe,CAAC,KAW/B;IACC,IAAI,CAAC,KAAK,CAAC,iBAAiB;QAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACzF,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACtE,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5F,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5F,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1F,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;AAC9E,CAAC"}

package/payload/platform/plugins/scheduling/mcp/dist/lib/connector-sync-provision.d.ts

@@ -0,0 +1,109 @@
+import { type AgentChannel } from "./agent-dispatch.js";
+/** A calendar the connector-sync turn can read free/busy from. */
+export type CalendarConnector = "google" | "m365";
+/**
+ * The outcome of one account's provisioning pass.
+ *  - `not-applicable`     — no calendar connector, so there is nothing to sync.
+ *  - `provisioned`        — the recurring :Event was created by this pass.
+ *  - `already-provisioned`— a live :Event was already armed.
+ *  - `unconfigured`       — a connector exists but no exception destination does.
+ *  - `error`              — the pass threw; the reason is on the log line.
+ */
+export type ProvisionOutcome = "not-applicable" | "provisioned" | "already-provisioned" | "unconfigured" | "error";
+/** Where a provisioned turn sends an exception it needs the operator to see. */
+export interface DispatchDestination {
+    channel: AgentChannel;
+    destination: string;
+}
+/**
+ * The calendar connectors currently authorised for an account, sorted. An
+ * authorised identity is one whose directory holds a `tokens.enc` — a
+ * half-registered identity (directory created, consent never completed) is
+ * deliberately NOT counted, so provisioning does not arm a turn that has
+ * nothing to read.
+ */
+export declare function detectCalendarConnectors(accountDir: string): CalendarConnector[];
+/**
+ * Why no destination could be resolved. The platform computes the true cause
+ * (Task 1439 gave `validateAgentDestination` reason codes precisely so the
+ * diagnosis is not guessed); discarding it one frame below the log statement
+ * would leave the operator reading `unconfigured` at an account whose
+ * `account.json` visibly holds a phone number.
+ *
+ *  - `none-configured`     — no WhatsApp phone and no Telegram admin on the account.
+ *  - `not-registered`      — a candidate exists but is in no authoritative list.
+ *  - `cross-account`       — a candidate is registered, but to another account.
+ *  - `house-unresolvable`  — the socket-owning house could not be resolved. This
+ *    is an INSTALL-WIDE fault, not a per-account configuration gap.
+ *  - `unreadable-config`   — `account.json` is present but unreadable or malformed.
+ */
+export type DestinationRefusal = "none-configured" | "not-registered" | "cross-account" | "house-unresolvable" | "unreadable-config";
+export type DispatchResolution = {
+    destination: DispatchDestination;
+    reason: null;
+} | {
+    destination: null;
+    reason: DestinationRefusal;
+};
+/**
+ * Where this account's connector-sync turn reports an exception, or the reason
+ * no channel destination is reachable.
+ *
+ * WhatsApp is preferred, Telegram is the fallback. Every candidate is passed
+ * through `validateAgentDestination` — the same authority the dispatcher's
+ * standing audit applies at fire time — so provisioning can never arm a binding
+ * the audit would immediately report as stale. `accountsDir` is the parent
+ * accounts directory (`$PLATFORM_ROOT/../data/accounts`).
+ */
+export declare function resolveDispatchDestination(accountsDir: string, accountId: string): DispatchResolution;
+/** The last outcome reported for one account, and when it was reported.
+ *
+ *  `signature` is the value the change detector compares, not `outcome`: an
+ *  `error` carries a prefix of its message, so a CHANGED error is reported
+ *  immediately while an unchanged one heartbeats like any other steady state.
+ *  Without it a persistently failing account would log every 120 s forever,
+ *  reproducing the noise this task removes, and its eventual recovery would be
+ *  invisible because the state map would still hold the pre-error outcome. */
+export interface ProvisionStateEntry {
+    outcome: ProvisionOutcome;
+    signature: string;
+    loggedAtMs: number;
+}
+/** The comparison key for one observation. */
+export declare function provisionSignature(outcome: ProvisionOutcome, detail?: string): string;
+export type ProvisionState = Record<string, ProvisionStateEntry>;
+/**
+ * Whether this tick reports the account's outcome.
+ *
+ * A permanent condition reported at tick rate is noise that hides its own
+ * meaning: the evidence for the Task 1809 defect was 5,688 identical lines that
+ * everyone read as benign. So a line is emitted when the outcome CHANGES, when
+ * the account has never been reported, or when the heartbeat window has
+ * elapsed — the heartbeat being what keeps "inert on every account" and "steady
+ * state" distinguishable without counting log lines by hand.
+ */
+export declare function shouldEmitProvisionLine(prev: ProvisionStateEntry | undefined, nextSignature: string, nowMs: number, heartbeatMs: number): boolean;
+/** How this observation is labelled on the log line. `first` is NOT `change`:
+ *  labelling a first observation as a change means that any state loss produces
+ *  a synchronised fleet-wide burst of `emit=change`, indistinguishable from
+ *  every account genuinely flipping outcome at once — which is a real
+ *  emergency, and the one moment the label most needs to be trustworthy. */
+export declare function emitLabel(prev: ProvisionStateEntry | undefined, nextSignature: string): "first" | "change" | "heartbeat";
+/** Read the persisted state. An absent or corrupt file reads as empty, which
+ *  costs one redundant line per account and never suppresses one. A corrupt
+ *  file is reported: it is the trigger for a fleet-wide `emit=first` burst, and
+ *  that burst must carry its own explanation. */
+export declare function readProvisionState(path: string): ProvisionState;
+/**
+ * Persist the state. Written to a temp path and renamed, so a kill or a hard
+ * freeze mid-write cannot leave truncated JSON — which would read back as empty
+ * and produce the fleet-wide burst described above.
+ *
+ * A failed write must never abort the reconcile pass, but it must not be silent
+ * either: every realistic cause (disk full, filesystem remounted read-only,
+ * mode drift) is PERSISTENT, so the failure degrades emit-on-change back to
+ * per-tick logging indefinitely — worse than what it replaced, because every
+ * line then falsely claims to be a first observation.
+ */
+export declare function writeProvisionState(path: string, state: ProvisionState): void;
+//# sourceMappingURL=connector-sync-provision.d.ts.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/connector-sync-provision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-sync-provision.d.ts","sourceRoot":"","sources":["../../src/lib/connector-sync-provision.ts"],"names":[],"mappings":"AAuBA,OAAO,EAA4B,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAElF,kEAAkE;AAClE,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,MAAM,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GACxB,gBAAgB,GAChB,aAAa,GACb,qBAAqB,GACrB,cAAc,GACd,OAAO,CAAC;AAEZ,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,YAAY,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AASD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAwBhF;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,kBAAkB,GAC1B,iBAAiB,GACjB,gBAAgB,GAChB,eAAe,GACf,oBAAoB,GACpB,mBAAmB,CAAC;AAExB,MAAM,MAAM,kBAAkB,GAC1B;IAAE,WAAW,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GAClD;IAAE,WAAW,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAYtD;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,kBAAkB,CAkCpB;AA0BD;;;;;;;8EAO8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,8CAA8C;AAC9C,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAErF;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAEjE;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,mBAAmB,GAAG,SAAS,EACrC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAST;AAED;;;;4EAI4E;AAC5E,wBAAgB,SAAS,CAAC,IAAI,EAAE,mBAAmB,GAAG,SAAS,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,CAGxH;AAED;;;iDAGiD;AACjD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAiB/D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,IAAI,CAW7E"}

package/payload/platform/plugins/scheduling/mcp/dist/lib/connector-sync-provision.js

@@ -0,0 +1,213 @@
+/**
+ * Task 1809 — the connector-sync provisioning gate.
+ *
+ * Task 1654 armed the recurring connector-sync turn only when the account
+ * carried an admin WhatsApp number, and read that number from a top-level
+ * `account.json` `adminPhones` key that exists on no account (the authoritative
+ * key is `whatsapp.adminPhones`). The two defects stacked: measured on the
+ * laptop on 2026-07-19, the provisioning block had logged `skipped` 7,868 times
+ * across four brands and had never once created an event.
+ *
+ * The gate was also on the wrong thing. The WhatsApp number is where the turn
+ * reports an EXCEPTION; it is not an input to the sync. So provisioning is
+ * gated here on the presence of a calendar connector — the work's actual input
+ * — and the exception destination is resolved separately.
+ *
+ * Where an account has a connector but no reachable exception destination, it
+ * is reported `unconfigured` rather than provisioned: a sync that fails and
+ * cannot report is not a clean sync, and arming one would reproduce the silence
+ * this task exists to remove. Making that case provisionable needs a
+ * destination-free operator route, which is Task 1812 (admin-webchat dispatch).
+ */
+import { existsSync, readdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { validateAgentDestination } from "./agent-dispatch.js";
+/** One entry per connector: the directory under `secrets/` whose per-identity
+ *  subdirectories each hold a `tokens.enc` once that identity is authorised. */
+const CONNECTOR_TOKEN_DIRS = [
+    { connector: "google", rel: ["google", "accounts"] },
+    { connector: "m365", rel: ["outlook", "mailboxes"] },
+];
+/**
+ * The calendar connectors currently authorised for an account, sorted. An
+ * authorised identity is one whose directory holds a `tokens.enc` — a
+ * half-registered identity (directory created, consent never completed) is
+ * deliberately NOT counted, so provisioning does not arm a turn that has
+ * nothing to read.
+ */
+export function detectCalendarConnectors(accountDir) {
+    const found = [];
+    for (const { connector, rel } of CONNECTOR_TOKEN_DIRS) {
+        const dir = join(accountDir, "secrets", ...rel);
+        // An ABSENT directory means the connector was never registered, which is
+        // the benign case. A directory that exists but cannot be read means the
+        // gate's input is unknown, NOT empty — reporting that as `not-applicable`
+        // would dress a real fault as the boring expected state, which is exactly
+        // the pathology Task 1809 exists to remove. So it throws, and the caller
+        // reports `error`.
+        if (!existsSync(dir))
+            continue;
+        let identities;
+        try {
+            identities = readdirSync(dir);
+        }
+        catch (err) {
+            throw new Error(`calendar connector directory ${dir} exists but is unreadable: ${err.message}`);
+        }
+        if (identities.some((id) => existsSync(join(dir, id, "tokens.enc")))) {
+            found.push(connector);
+        }
+    }
+    return found.sort();
+}
+/** Most actionable first: an install-wide fault outranks a per-account one, and
+ *  a specific rejection outranks the absence of any candidate at all. */
+const REFUSAL_PRECEDENCE = [
+    "house-unresolvable",
+    "unreadable-config",
+    "cross-account",
+    "not-registered",
+    "none-configured",
+];
+/**
+ * Where this account's connector-sync turn reports an exception, or the reason
+ * no channel destination is reachable.
+ *
+ * WhatsApp is preferred, Telegram is the fallback. Every candidate is passed
+ * through `validateAgentDestination` — the same authority the dispatcher's
+ * standing audit applies at fire time — so provisioning can never arm a binding
+ * the audit would immediately report as stale. `accountsDir` is the parent
+ * accounts directory (`$PLATFORM_ROOT/../data/accounts`).
+ */
+export function resolveDispatchDestination(accountsDir, accountId) {
+    let config;
+    try {
+        config = JSON.parse(readFileSync(join(accountsDir, accountId, "account.json"), "utf-8"));
+    }
+    catch {
+        // `main` enumerates accounts by the presence of this very file, so by the
+        // time we read it "absent" is the least likely cause and "malformed or
+        // unreadable" the most likely — the inverse of the obvious reading.
+        return { destination: null, reason: "unreadable-config" };
+    }
+    const refusals = [];
+    const wa = config.whatsapp ?? {};
+    const phones = Array.isArray(wa.adminPhones) ? wa.adminPhones : [];
+    for (const phone of phones) {
+        if (typeof phone !== "string" || phone.length === 0)
+            continue;
+        const check = classify(accountsDir, accountId, "whatsapp", phone);
+        if (check === null)
+            return { destination: { channel: "whatsapp", destination: phone }, reason: null };
+        refusals.push(check);
+    }
+    const tg = config.telegram ?? {};
+    const users = Array.isArray(tg.adminUsers) ? tg.adminUsers : [];
+    for (const user of users) {
+        if (typeof user !== "number" || !Number.isInteger(user))
+            continue;
+        const destination = String(user);
+        const check = classify(accountsDir, accountId, "telegram", destination);
+        if (check === null)
+            return { destination: { channel: "telegram", destination }, reason: null };
+        refusals.push(check);
+    }
+    const reason = REFUSAL_PRECEDENCE.find((r) => refusals.includes(r)) ?? "none-configured";
+    return { destination: null, reason };
+}
+/** null when the destination validates; otherwise why it did not.
+ *  `validateAgentDestination` resolves the house from disk and throws when the
+ *  house is unresolvable. That means "cannot confirm this destination", which
+ *  fails closed — but it is reported as its own install-wide reason rather than
+ *  collapsing into a per-account configuration gap. */
+function classify(accountsDir, accountId, channel, destination) {
+    let check;
+    try {
+        check = validateAgentDestination(accountsDir, accountId, channel, destination);
+    }
+    catch {
+        return "house-unresolvable";
+    }
+    return check.valid ? null : check.reason;
+}
+/** The comparison key for one observation. */
+export function provisionSignature(outcome, detail) {
+    return detail ? `${outcome}:${detail.slice(0, 80)}` : outcome;
+}
+/**
+ * Whether this tick reports the account's outcome.
+ *
+ * A permanent condition reported at tick rate is noise that hides its own
+ * meaning: the evidence for the Task 1809 defect was 5,688 identical lines that
+ * everyone read as benign. So a line is emitted when the outcome CHANGES, when
+ * the account has never been reported, or when the heartbeat window has
+ * elapsed — the heartbeat being what keeps "inert on every account" and "steady
+ * state" distinguishable without counting log lines by hand.
+ */
+export function shouldEmitProvisionLine(prev, nextSignature, nowMs, heartbeatMs) {
+    if (!prev)
+        return true;
+    if (prev.signature !== nextSignature)
+        return true;
+    const elapsed = nowMs - prev.loggedAtMs;
+    // A negative elapsed means the clock stepped backwards (an NTP correction on
+    // a Pi with no battery-backed RTC). Emitting is the safe side: the heartbeat
+    // is the only signal distinguishing "steady state" from "this loop stopped",
+    // and suppressing it for hours would hide precisely that.
+    return elapsed < 0 || elapsed >= heartbeatMs;
+}
+/** How this observation is labelled on the log line. `first` is NOT `change`:
+ *  labelling a first observation as a change means that any state loss produces
+ *  a synchronised fleet-wide burst of `emit=change`, indistinguishable from
+ *  every account genuinely flipping outcome at once — which is a real
+ *  emergency, and the one moment the label most needs to be trustworthy. */
+export function emitLabel(prev, nextSignature) {
+    if (!prev)
+        return "first";
+    return prev.signature === nextSignature ? "heartbeat" : "change";
+}
+/** Read the persisted state. An absent or corrupt file reads as empty, which
+ *  costs one redundant line per account and never suppresses one. A corrupt
+ *  file is reported: it is the trigger for a fleet-wide `emit=first` burst, and
+ *  that burst must carry its own explanation. */
+export function readProvisionState(path) {
+    let raw;
+    try {
+        raw = readFileSync(path, "utf-8");
+    }
+    catch {
+        return {}; // absent — the normal first-run case
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        return parsed && typeof parsed === "object" ? parsed : {};
+    }
+    catch (err) {
+        console.error(`[calendar-availability] op=cal-sync-state result=unreadable path=${path} ` +
+            `reason=${JSON.stringify(err.message)} impact=every-account-reports-first`);
+        return {};
+    }
+}
+/**
+ * Persist the state. Written to a temp path and renamed, so a kill or a hard
+ * freeze mid-write cannot leave truncated JSON — which would read back as empty
+ * and produce the fleet-wide burst described above.
+ *
+ * A failed write must never abort the reconcile pass, but it must not be silent
+ * either: every realistic cause (disk full, filesystem remounted read-only,
+ * mode drift) is PERSISTENT, so the failure degrades emit-on-change back to
+ * per-tick logging indefinitely — worse than what it replaced, because every
+ * line then falsely claims to be a first observation.
+ */
+export function writeProvisionState(path, state) {
+    const tmp = `${path}.tmp`;
+    try {
+        writeFileSync(tmp, JSON.stringify(state));
+        renameSync(tmp, path);
+    }
+    catch (err) {
+        console.error(`[calendar-availability] op=cal-sync-state result=write-failed path=${path} ` +
+            `reason=${JSON.stringify(err.message)} impact=emit-on-change-degraded-to-per-tick`);
+    }
+}
+//# sourceMappingURL=connector-sync-provision.js.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/connector-sync-provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-sync-provision.js","sourceRoot":"","sources":["../../src/lib/connector-sync-provision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAqB,MAAM,qBAAqB,CAAC;AA0BlF;gFACgF;AAChF,MAAM,oBAAoB,GAAmE;IAC3F,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE;IACpD,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE;CACrD,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAAkB;IACzD,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,KAAK,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,oBAAoB,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,CAAC;QAChD,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,mBAAmB;QACnB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,IAAI,UAAoB,CAAC;QACzB,IAAI,CAAC;YACH,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,gCAAgC,GAAG,8BAA+B,GAAa,CAAC,OAAO,EAAE,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AA2BD;yEACyE;AACzE,MAAM,kBAAkB,GAAyB;IAC/C,oBAAoB;IACpB,mBAAmB;IACnB,eAAe;IACf,gBAAgB;IAChB,iBAAiB;CAClB,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,WAAmB,EACnB,SAAiB;IAEjB,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,uEAAuE;QACvE,oEAAoE;QACpE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAE1C,MAAM,EAAE,GAAI,MAAM,CAAC,QAAgD,IAAI,EAAE,CAAC;IAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAClE,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACtG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,EAAE,GAAI,MAAM,CAAC,QAAgD,IAAI,EAAE,CAAC;IAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,SAAS;QAClE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QACxE,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC/F,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC;IACzF,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED;;;;uDAIuD;AACvD,SAAS,QAAQ,CACf,WAAmB,EACnB,SAAiB,EACjB,OAAqB,EACrB,WAAmB;IAEnB,IAAI,KAAkD,CAAC;IACvD,IAAI,CAAC;QACH,KAAK,GAAG,wBAAwB,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;AAC3C,CAAC;AAoBD,8CAA8C;AAC9C,MAAM,UAAU,kBAAkB,CAAC,OAAyB,EAAE,MAAe;IAC3E,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAChE,CAAC;AAID;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAqC,EACrC,aAAqB,EACrB,KAAa,EACb,WAAmB;IAEnB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,IAAI,CAAC,SAAS,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,OAAO,GAAG,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC;IACxC,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,0DAA0D;IAC1D,OAAO,OAAO,GAAG,CAAC,IAAI,OAAO,IAAI,WAAW,CAAC;AAC/C,CAAC;AAED;;;;4EAI4E;AAC5E,MAAM,UAAU,SAAS,CAAC,IAAqC,EAAE,aAAqB;IACpF,IAAI,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC;IAC1B,OAAO,IAAI,CAAC,SAAS,KAAK,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnE,CAAC;AAED;;;iDAGiD;AACjD,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,qCAAqC;IAClD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,oEAAoE,IAAI,GAAG;YACzE,UAAU,IAAI,CAAC,SAAS,CAAE,GAAa,CAAC,OAAO,CAAC,qCAAqC,CACxF,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAqB;IACrE,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,sEAAsE,IAAI,GAAG;YAC3E,UAAU,IAAI,CAAC,SAAS,CAAE,GAAa,CAAC,OAAO,CAAC,6CAA6C,CAChG,CAAC;IACJ,CAAC;AACH,CAAC"}