@rubytech/create-maxy-code 0.1.551 → 0.1.553

package/payload/platform/plugins/scheduling/mcp/dist/lib/connector-freebusy.d.ts

@@ -0,0 +1,86 @@
+import { type CalendarConnector } from "./connector-sync-provision.js";
+export type ConnectorChoice = CalendarConnector | "none";
+export interface ResolvedConnector {
+    connector: ConnectorChoice;
+    /** Named on the resolution log line when two connectors are authorised and one
+     *  is unused. Null when there is nothing to skip. */
+    skipped: CalendarConnector | null;
+}
+/**
+ * The account's calendar connector, decided rather than chosen by a model.
+ *
+ * `detectCalendarConnectors` returns a sorted list, so google precedes m365 and
+ * the pick is deterministic. The stored `connector` is a single enum; an account
+ * holding both is real, and the skipped one is named on the resolution line so an
+ * ignored calendar is visible rather than silent.
+ */
+export declare function resolveConnector(accountDir: string): ResolvedConnector;
+/**
+ * The environment a provider MCP needs, assembled for the action rail.
+ *
+ * The heartbeat's cron line sets only `PLATFORM_ROOT`, `NEO4J_URI` and
+ * `MAXY_UI_INTERNAL_PORT` (create-maxy-code/src/cron-registration.ts), so a child
+ * spawned from it inherits none of the per-plugin credentials a session-manager
+ * spawn would stamp from the `PLUGIN.md` `mcp.env` block. They are read from
+ * `brand.json` instead, which is the same source those placeholders resolve from.
+ *
+ * A missing client id throws. Returning an env without one would let the provider
+ * boot, refuse the call for want of a vendor app, and be indistinguishable
+ * downstream from an account whose calendar is genuinely empty.
+ */
+export declare function providerEnv(platformRoot: string, accountId: string, connector: CalendarConnector): Record<string, string>;
+export interface BusyInterval {
+    start: string;
+    end: string;
+}
+/**
+ * Calls one tool on one provider plugin and returns its parsed payload.
+ *
+ * Injected rather than imported so the read path is testable without spawning a
+ * child process; `spawnProviderCall` below is the real implementation.
+ */
+export type ProviderCall = (plugin: "google" | "outlook", tool: string, args: Record<string, unknown>) => Promise<unknown>;
+export interface ReadBusyOptions {
+    connector: CalendarConnector;
+    platformRoot: string;
+    accountId: string;
+    /** Window start, canonical UTC ISO. */
+    from: string;
+    /** Window end, canonical UTC ISO. */
+    to: string;
+    call: ProviderCall;
+}
+/**
+ * Graph returns `scheduleItems[].start.dateTime` with a sibling `timeZone` field
+ * that the outlook plugin's tool drops, so what arrives here carries no zone
+ * designator. The window is requested in UTC, so a zone-less instant is UTC and
+ * is stamped as such. A string already carrying `Z` or an offset is left alone —
+ * re-stamping it would move the interval.
+ */
+export declare function normaliseGraphInstant(dateTime: string): string;
+/**
+ * The account's busy intervals over the window, read from its own connector.
+ *
+ * Every failure throws. Returning `[]` on a failed read would clear the stored
+ * busy set and publish the operator's booked time as free, and a booking page
+ * serving its last successful write looks correct either way — so an empty list
+ * must only ever mean the calendar is genuinely free.
+ */
+export declare function readConnectorBusy(opts: ReadBusyOptions): Promise<BusyInterval[]>;
+/**
+ * A `ProviderCall` that reaches the provider plugin's own MCP server.
+ *
+ * The transport is `callPluginTool`, the one Task 2378 extracted from
+ * `dispatchAction`. Sharing it rather than writing a second one is the point:
+ * this call is spawned from the same heartbeat, so it needs the same timeout,
+ * the same `ACCOUNT_ID` scoping, the same captured child stderr, and above all
+ * the same `PLATFORM_PORT` bridge — the cron line does not export that name and
+ * every plugin resolves its loopback base URL from it, so a transport without it
+ * throws on port resolution before the tool runs.
+ *
+ * It is a spawn rather than an import because no plugin in this tree imports
+ * another plugin's source, and because the provider owns the decryption of its
+ * own tokens.
+ */
+export declare function spawnProviderCall(platformRoot: string, accountId: string, connector: CalendarConnector): ProviderCall;
+//# sourceMappingURL=connector-freebusy.d.ts.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/connector-freebusy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-freebusy.d.ts","sourceRoot":"","sources":["../../src/lib/connector-freebusy.ts"],"names":[],"mappings":"AAiBA,OAAO,EAA4B,KAAK,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAGjG,MAAM,MAAM,eAAe,GAAG,iBAAiB,GAAG,MAAM,CAAC;AAEzD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,eAAe,CAAC;IAC3B;yDACqD;IACrD,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACnC;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,CAItE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CACzB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,iBAAiB,GAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA2BxB;AAMD,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,MAAM,EAAE,QAAQ,GAAG,SAAS,EAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC1B,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,YAAY,CAAC;CACpB;AAoCD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAG9D;AAsED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAGtF;AAMD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,iBAAiB,GAC3B,YAAY,CA4Bd"}

package/payload/platform/plugins/scheduling/mcp/dist/lib/connector-freebusy.js

@@ -0,0 +1,240 @@
+/**
+ * Task 2381 — reading the account's calendar free/busy without a model turn.
+ *
+ * The "Booking calendar connector sync" routine spawned a model every 30 minutes
+ * to do two mechanical things: work out which connector the account had
+ * authorised, and read 15 days of free/busy from it. Neither is a decision. This
+ * module does both deterministically so the routine can run on the headless
+ * `action` rail.
+ *
+ * The provider is reached by SPAWNING its own MCP server, not by importing it. No
+ * plugin in this tree imports another plugin's source (the only cross-boundary
+ * imports are built artifacts under `platform/lib`), the provider owns the
+ * decryption of its own tokens, and `dispatchAction` in `check-due-events.ts`
+ * already reaches plugins exactly this way.
+ */
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { detectCalendarConnectors } from "./connector-sync-provision.js";
+import { callPluginTool } from "./gate.js";
+/**
+ * The account's calendar connector, decided rather than chosen by a model.
+ *
+ * `detectCalendarConnectors` returns a sorted list, so google precedes m365 and
+ * the pick is deterministic. The stored `connector` is a single enum; an account
+ * holding both is real, and the skipped one is named on the resolution line so an
+ * ignored calendar is visible rather than silent.
+ */
+export function resolveConnector(accountDir) {
+    const found = detectCalendarConnectors(accountDir);
+    if (found.length === 0)
+        return { connector: "none", skipped: null };
+    return { connector: found[0], skipped: found[1] ?? null };
+}
+/**
+ * The environment a provider MCP needs, assembled for the action rail.
+ *
+ * The heartbeat's cron line sets only `PLATFORM_ROOT`, `NEO4J_URI` and
+ * `MAXY_UI_INTERNAL_PORT` (create-maxy-code/src/cron-registration.ts), so a child
+ * spawned from it inherits none of the per-plugin credentials a session-manager
+ * spawn would stamp from the `PLUGIN.md` `mcp.env` block. They are read from
+ * `brand.json` instead, which is the same source those placeholders resolve from.
+ *
+ * A missing client id throws. Returning an env without one would let the provider
+ * boot, refuse the call for want of a vendor app, and be indistinguishable
+ * downstream from an account whose calendar is genuinely empty.
+ */
+export function providerEnv(platformRoot, accountId, connector) {
+    const brandPath = join(platformRoot, "config", "brand.json");
+    let brand;
+    try {
+        brand = JSON.parse(readFileSync(brandPath, "utf-8"));
+    }
+    catch (err) {
+        throw new Error(`cannot read ${brandPath}: ${err.message}`);
+    }
+    const str = (v) => (typeof v === "string" ? v : "");
+    const env = { PLATFORM_ROOT: platformRoot, ACCOUNT_ID: accountId };
+    if (connector === "google") {
+        const id = str(brand.googleClientId);
+        const secret = str(brand.googleClientSecret);
+        if (!id || !secret) {
+            throw new Error("this brand ships no Google vendor app (client id and secret must both be present)");
+        }
+        env.GOOGLE_CLIENT_ID = id;
+        env.GOOGLE_CLIENT_SECRET = secret;
+        return env;
+    }
+    const id = str(brand.outlookClientId);
+    if (!id)
+        throw new Error("this brand ships no Outlook vendor app (outlookClientId is empty)");
+    env.OUTLOOK_CLIENT_ID = id;
+    env.OUTLOOK_TENANT_ID = str(brand.outlookTenantId) || "common";
+    return env;
+}
+function isInterval(v) {
+    const o = v;
+    return !!o && typeof o.start === "string" && typeof o.end === "string";
+}
+/** Google returns one busy list per requested calendar; with no `calendars`
+ *  argument that is the account's primary calendar alone. Every list is
+ *  flattened: the booking page blocks on any busy time, whichever calendar it
+ *  came from. */
+async function readGoogleBusy(opts) {
+    const raw = await opts.call("google", "google-calendar-freebusy", {
+        start: opts.from,
+        end: opts.to,
+    });
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+        throw new Error(`unexpected google-calendar-freebusy payload: ${JSON.stringify(raw).slice(0, 200)}`);
+    }
+    const out = [];
+    for (const slots of Object.values(raw)) {
+        if (!Array.isArray(slots)) {
+            throw new Error("unexpected google-calendar-freebusy payload: calendar value is not an array");
+        }
+        for (const s of slots) {
+            if (!isInterval(s)) {
+                throw new Error("unexpected google-calendar-freebusy payload: busy entry has no start/end");
+            }
+            out.push({ start: s.start, end: s.end });
+        }
+    }
+    return out;
+}
+/**
+ * Graph returns `scheduleItems[].start.dateTime` with a sibling `timeZone` field
+ * that the outlook plugin's tool drops, so what arrives here carries no zone
+ * designator. The window is requested in UTC, so a zone-less instant is UTC and
+ * is stamped as such. A string already carrying `Z` or an offset is left alone —
+ * re-stamping it would move the interval.
+ */
+export function normaliseGraphInstant(dateTime) {
+    if (/(Z|[+-]\d{2}:?\d{2})$/.test(dateTime))
+        return dateTime;
+    return `${dateTime}Z`;
+}
+/**
+ * The one mailbox whose schedule this account's busy sync reads.
+ *
+ * The mailbox directory name under `secrets/outlook/mailboxes/` is a sanitised
+ * `graphUserId` and the address lives inside the encrypted token blob, so it
+ * cannot be read off disk by a process that is not the outlook plugin. Zero or
+ * two-or-more addressable mailboxes both throw, mirroring the outlook plugin's
+ * own sole-mailbox rule: guessing one would publish the wrong person's free time.
+ */
+async function resolveM365Address(opts) {
+    const raw = await opts.call("outlook", "outlook-mailbox-list", {});
+    const rows = raw?.mailboxes;
+    const addressable = (Array.isArray(rows) ? rows : [])
+        .filter((m) => m.status === "ok" && typeof m.mail === "string" && m.mail.length > 0)
+        .map((m) => m.mail);
+    if (addressable.length === 0) {
+        throw new Error("no addressable Outlook mailbox for this account; run outlook-account-register");
+    }
+    if (addressable.length > 1) {
+        throw new Error(`two or more Outlook mailboxes are addressable (${addressable.join(", ")}); the busy sync cannot choose between them`);
+    }
+    return addressable[0];
+}
+async function readM365Busy(opts) {
+    const address = await resolveM365Address(opts);
+    const raw = await opts.call("outlook", "outlook-calendar-freebusy", {
+        schedules: [address],
+        start: { dateTime: opts.from, timeZone: "UTC" },
+        end: { dateTime: opts.to, timeZone: "UTC" },
+    });
+    const availability = raw?.availability;
+    if (!Array.isArray(availability)) {
+        throw new Error(`unexpected outlook-calendar-freebusy payload: ${JSON.stringify(raw).slice(0, 200)}`);
+    }
+    const out = [];
+    let loggedRaw = false;
+    for (const entry of availability) {
+        // An address Graph could not resolve comes back with an error and an EMPTY
+        // busy list, which is byte-identical to a free calendar. Reading it as free
+        // would publish the operator's booked time as available.
+        if (entry.error) {
+            throw new Error(`Graph could not resolve the mailbox schedule: ${String(entry.error)}`);
+        }
+        for (const b of Array.isArray(entry.busy) ? entry.busy : []) {
+            if (!isInterval(b)) {
+                throw new Error("unexpected outlook-calendar-freebusy payload: busy entry has no start/end");
+            }
+            if (!loggedRaw) {
+                // One raw line per read. The UTC reading above is an assumption about a
+                // Graph response this tree holds no fixture for; the unparsed value makes
+                // a wrong assumption visible in the log rather than silently shifting
+                // every slot on the booking page by the account's offset.
+                console.error(`[connector-busy-sync] op=m365-raw-interval start=${JSON.stringify(b.start)} end=${JSON.stringify(b.end)}`);
+                loggedRaw = true;
+            }
+            out.push({ start: normaliseGraphInstant(b.start), end: normaliseGraphInstant(b.end) });
+        }
+    }
+    return out;
+}
+/**
+ * The account's busy intervals over the window, read from its own connector.
+ *
+ * Every failure throws. Returning `[]` on a failed read would clear the stored
+ * busy set and publish the operator's booked time as free, and a booking page
+ * serving its last successful write looks correct either way — so an empty list
+ * must only ever mean the calendar is genuinely free.
+ */
+export async function readConnectorBusy(opts) {
+    if (opts.connector === "google")
+        return readGoogleBusy(opts);
+    return readM365Busy(opts);
+}
+// ---------------------------------------------------------------------------
+// The provider spawn
+// ---------------------------------------------------------------------------
+/**
+ * A `ProviderCall` that reaches the provider plugin's own MCP server.
+ *
+ * The transport is `callPluginTool`, the one Task 2378 extracted from
+ * `dispatchAction`. Sharing it rather than writing a second one is the point:
+ * this call is spawned from the same heartbeat, so it needs the same timeout,
+ * the same `ACCOUNT_ID` scoping, the same captured child stderr, and above all
+ * the same `PLATFORM_PORT` bridge — the cron line does not export that name and
+ * every plugin resolves its loopback base URL from it, so a transport without it
+ * throws on port resolution before the tool runs.
+ *
+ * It is a spawn rather than an import because no plugin in this tree imports
+ * another plugin's source, and because the provider owns the decryption of its
+ * own tokens.
+ */
+export function spawnProviderCall(platformRoot, accountId, connector) {
+    // Resolved once, outside the returned closure: a brand shipping no vendor app
+    // for this connector must fail before any child is spawned.
+    const credentials = providerEnv(platformRoot, accountId, connector);
+    return async (plugin, tool, args) => {
+        let call;
+        try {
+            call = await callPluginTool(plugin, tool, JSON.stringify(args), accountId, credentials);
+        }
+        catch (err) {
+            // A transport failure carries the child's stderr, which is where a
+            // provider's own refusal reason (an expired refresh token, a missing
+            // vendor app) is written. Dropping it would leave `op=read-failed`
+            // reporting only that something went wrong.
+            const e = err;
+            const detail = e.childStderr ? `${e.message} — child stderr: ${e.childStderr.trim()}` : String(e.message);
+            throw new Error(`${tool} failed: ${detail}`);
+        }
+        const text = (Array.isArray(call.result.content) ? call.result.content : [])
+            .filter((c) => c.type === "text")
+            .map((c) => String(c.text))
+            .join("\n");
+        if (call.result.isError === true)
+            throw new Error(`${tool} returned an error: ${text}`);
+        try {
+            return JSON.parse(text);
+        }
+        catch {
+            throw new Error(`${tool} returned a non-JSON payload: ${text.slice(0, 200)}`);
+        }
+    };
+}
+//# sourceMappingURL=connector-freebusy.js.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/connector-freebusy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-freebusy.js","sourceRoot":"","sources":["../../src/lib/connector-freebusy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAA0B,MAAM,+BAA+B,CAAC;AACjG,OAAO,EAAE,cAAc,EAAuB,MAAM,WAAW,CAAC;AAWhE;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,MAAM,KAAK,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACpE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CACzB,YAAoB,EACpB,SAAiB,EACjB,SAA4B;IAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC7D,IAAI,KAA8B,CAAC;IACnC,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAA4B,CAAC;IAClF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,eAAe,SAAS,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,GAAG,GAA2B,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IAC3F,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,gBAAgB,GAAG,EAAE,CAAC;QAC1B,GAAG,CAAC,oBAAoB,GAAG,MAAM,CAAC;QAClC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IAC9F,GAAG,CAAC,iBAAiB,GAAG,EAAE,CAAC;IAC3B,GAAG,CAAC,iBAAiB,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC;IAC/D,OAAO,GAAG,CAAC;AACb,CAAC;AAkCD,SAAS,UAAU,CAAC,CAAU;IAC5B,MAAM,CAAC,GAAG,CAA8C,CAAC;IACzD,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC;AACzE,CAAC;AAED;;;iBAGiB;AACjB,KAAK,UAAU,cAAc,CAAC,IAAqB;IACjD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,0BAA0B,EAAE;QAChE,KAAK,EAAE,IAAI,CAAC,IAAI;QAChB,GAAG,EAAE,IAAI,CAAC,EAAE;KACb,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,gDAAgD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACpF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,GAA8B,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;QACjG,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;YAC9F,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,IAAI,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC5D,OAAO,GAAG,QAAQ,GAAG,CAAC;AACxB,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,kBAAkB,CAAC,IAAqB;IACrD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAC;IACnE,MAAM,IAAI,GAAI,GAAsC,EAAE,SAAS,CAAC;IAChE,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAoD,CAAC,CAAC,CAAC,EAAE,CAAC;SACnG,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACnF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAc,CAAC,CAAC;IAChC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,kDAAkD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,6CAA6C,CACtH,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAqB;IAC/C,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,2BAA2B,EAAE;QAClE,SAAS,EAAE,CAAC,OAAO,CAAC;QACpB,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC/C,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;KAC5C,CAAC,CAAC;IACH,MAAM,YAAY,GAAI,GAAyC,EAAE,YAAY,CAAC;IAC9E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,iDAAiD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,MAAM,KAAK,IAAI,YAA0D,EAAE,CAAC;QAC/E,2EAA2E;QAC3E,4EAA4E;QAC5E,yDAAyD;QACzD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC5D,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;YAC/F,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,wEAAwE;gBACxE,0EAA0E;gBAC1E,sEAAsE;gBACtE,0DAA0D;gBAC1D,OAAO,CAAC,KAAK,CACX,oDAAoD,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAC3G,CAAC;gBACF,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAqB;IAC3D,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAC/B,YAAoB,EACpB,SAAiB,EACjB,SAA4B;IAE5B,8EAA8E;IAC9E,4DAA4D;IAC5D,MAAM,WAAW,GAAG,WAAW,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACpE,OAAO,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAClC,IAAI,IAAoB,CAAC;QACzB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mEAAmE;YACnE,qEAAqE;YACrE,mEAAmE;YACnE,4CAA4C;YAC5C,MAAM,CAAC,GAAG,GAAiD,CAAC;YAC5D,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,oBAAoB,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC1G,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,YAAY,MAAM,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;aACzE,MAAM,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;aACzD,GAAG,CAAC,CAAC,CAA0B,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aACnD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uBAAuB,IAAI,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iCAAiC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/scheduling/mcp/dist/lib/fires-per-day.d.ts

@@ -0,0 +1,2 @@
+export declare function firesPerDay(recurrence: string, timezone: string | null, reference: Date): number;
+//# sourceMappingURL=fires-per-day.d.ts.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/fires-per-day.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fires-per-day.d.ts","sourceRoot":"","sources":["../../src/lib/fires-per-day.ts"],"names":[],"mappings":"AAyBA,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,MAAM,CAwBhG"}

package/payload/platform/plugins/scheduling/mcp/dist/lib/fires-per-day.js

@@ -0,0 +1,47 @@
+import cronParser from "cron-parser";
+const { parseExpression } = cronParser;
+/**
+ * Task 2380 — how many times a cron fires on one calendar day, in the event's
+ * own timezone.
+ *
+ * The zone is not a detail. A rolling 24-hour window reports 24 for an hourly
+ * routine on every day of the year, including the two on which a British day is
+ * 23 or 25 hours long, so a cost figure built on it drifts twice a year and
+ * nothing says so. Here both day boundaries are themselves cron occurrences —
+ * `0 0 * * *` resolved in the same zone — so the window is the local day by
+ * construction and `cron-parser` does the clock-change arithmetic.
+ *
+ * `.prev()` is taken from one millisecond AFTER the reference so that a
+ * reference sitting exactly on local midnight yields that midnight rather than
+ * the previous day's.
+ *
+ * Throws when `recurrence` does not parse. Both callers catch: the tool reports
+ * `-` for the count, and the census names the row and drops it from the total.
+ */
+/** Runaway guard. A five-field cron tops out at 1,440 fires in a day. */
+const MAX_OCCURRENCES = 100_000;
+export function firesPerDay(recurrence, timezone, reference) {
+    const tz = timezone ?? undefined;
+    const start = parseExpression("0 0 * * *", {
+        currentDate: new Date(reference.getTime() + 1),
+        tz,
+    })
+        .prev()
+        .toDate();
+    const end = parseExpression("0 0 * * *", { currentDate: reference, tz }).next().toDate();
+    // One millisecond before the boundary, because `.next()` returns the first
+    // occurrence STRICTLY after `currentDate` and a routine firing at local
+    // midnight belongs to the day it opens.
+    const occurrences = parseExpression(recurrence, {
+        currentDate: new Date(start.getTime() - 1),
+        tz,
+    });
+    let count = 0;
+    for (let i = 0; i < MAX_OCCURRENCES; i++) {
+        if (occurrences.next().toDate() >= end)
+            break;
+        count++;
+    }
+    return count;
+}
+//# sourceMappingURL=fires-per-day.js.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/fires-per-day.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fires-per-day.js","sourceRoot":"","sources":["../../src/lib/fires-per-day.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,MAAM,EAAE,eAAe,EAAE,GAAG,UAAU,CAAC;AAEvC;;;;;;;;;;;;;;;;;GAiBG;AAEH,yEAAyE;AACzE,MAAM,eAAe,GAAG,OAAO,CAAC;AAEhC,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,QAAuB,EAAE,SAAe;IACtF,MAAM,EAAE,GAAG,QAAQ,IAAI,SAAS,CAAC;IACjC,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,EAAE;QACzC,WAAW,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9C,EAAE;KACH,CAAC;SACC,IAAI,EAAE;SACN,MAAM,EAAE,CAAC;IACZ,MAAM,GAAG,GAAG,eAAe,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;IAEzF,2EAA2E;IAC3E,wEAAwE;IACxE,wCAAwC;IACxC,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,EAAE;QAC9C,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1C,EAAE;KACH,CAAC,CAAC;IAEH,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,GAAG;YAAE,MAAM;QAC9C,KAAK,EAAE,CAAC;IACV,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/payload/platform/plugins/scheduling/mcp/dist/lib/gate.d.ts

@@ -0,0 +1,92 @@
+import type { EventGate } from "../scripts/agent-turn-dispatch.js";
+/**
+ * The 10-minute ceiling `dispatchAction` has always used. Re-exported here
+ * because `callPluginTool` now owns the timeout for both callers, so a gate and
+ * an action cannot drift apart on how long a plugin tool may run.
+ */
+export declare const DISPATCH_TIMEOUT_MS = 600000;
+/**
+ * A tool call's outcome, structurally typed rather than imported from the MCP
+ * SDK. The SDK ships dual ESM/CJS packages with conditional exports and the
+ * plugin workspaces pin their own copies, so importing its result type here
+ * would couple this module's compilation to the consumer's resolution mode —
+ * the same constraint `lib/mcp-eager/src/index.ts` records for `ZodRawShape`.
+ * Only three members are read anywhere in this plugin.
+ */
+export interface ToolCallResult {
+    isError?: boolean;
+    content?: unknown;
+    structuredContent?: Record<string, unknown>;
+}
+export interface PluginToolCall {
+    result: ToolCallResult;
+    /** Child stderr, capped at 4KB. Captured on every call, read on failure. */
+    childStderr: string;
+}
+/**
+ * A transport-level failure, distinct from a tool that ran and returned
+ * `isError`. `kind` separates the timeout from every other failure because the
+ * two are recorded differently: `dispatchAction` writes `timeout` rather than
+ * `error` to `lastDispatchResult`, and the gate's fail-open line names which of
+ * the two it was.
+ */
+export declare class PluginToolError extends Error {
+    readonly kind: "timeout" | "error";
+    readonly childStderr: string;
+    constructor(message: string, kind: "timeout" | "error", childStderr: string);
+}
+/**
+ * Spawn a plugin's MCP server over stdio, call one tool, close.
+ *
+ * Extracted from `dispatchAction` so the gate inherits the whole of its
+ * transport contract unchanged: the dispatch timeout, `ACCOUNT_ID` env scoping,
+ * and captured child stderr. Two callers sharing one body is the point — a gate
+ * that connected differently from an action would be a second transport to keep
+ * correct.
+ *
+ * Returns the raw result, including a result carrying `isError: true`. Deciding
+ * what an errored tool means belongs to the caller: an action treats it as a
+ * failed dispatch, a gate treats it as fail-open.
+ */
+export declare function callPluginTool(plugin: string, tool: string, args: string | null, accountId: string, extraEnv?: Record<string, string>): Promise<PluginToolCall>;
+/**
+ * What the dispatcher does about this fire.
+ *
+ * `has-work` and every `fail-open` variant dispatch; only `no-work` skips. They
+ * are separate cases rather than one boolean because the log line differs and
+ * because a fail-open must never be readable as a gate that returned false —
+ * that confusion is exactly how a silently muted routine would be missed.
+ */
+export type GateVerdict = {
+    kind: "has-work";
+} | {
+    kind: "no-work";
+} | {
+    kind: "fail-open";
+    reason: "error" | "timeout" | "no-structured-result";
+    detail: string;
+};
+/** Injectable for tests; production passes `callPluginTool`. */
+export type PluginToolCaller = (plugin: string, tool: string, args: string | null, accountId: string) => Promise<PluginToolCall>;
+/**
+ * Evaluate one gate and say whether this fire reaches the model.
+ *
+ * Reads `structuredContent.hasWork` and nothing else. `content[]` is prose and
+ * is never consulted for control flow: parsing a third-party tool's wording to
+ * decide whether to spend a model turn is the failure mode the plugin doctrine
+ * names outright.
+ *
+ * Fails OPEN on every unreadable outcome — a throw, a timeout, an errored
+ * result, an absent `structuredContent`, a `hasWork` that is not a boolean.
+ * Failing closed would silently mute a routine and produce the Task 2313
+ * "looks live and delivers nothing" class with no alarm; failing open costs at
+ * worst the fires that were already happening before this task.
+ *
+ * Emits exactly one line, `op=evaluated` or `op=fail-open`, never both and never
+ * neither. `op=skipped` is the caller's, because only the caller knows the skip
+ * actually happened.
+ *
+ * Never throws — the sweep's contract. One broken gate must not abort the tick.
+ */
+export declare function evaluateGate(gate: EventGate, eventId: string, accountId: string, call?: PluginToolCaller): Promise<GateVerdict>;
+//# sourceMappingURL=gate.d.ts.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../src/lib/gate.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,SAAU,CAAC;AAE3C;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,cAAc,CAAC;IACvB,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IAGtC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM;gBAF5B,OAAO,EAAE,MAAM,EACN,IAAI,EAAE,SAAS,GAAG,OAAO,EACzB,WAAW,EAAE,MAAM;CAK/B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GAAG,IAAI,EACnB,SAAS,EAAE,MAAM,EAOjB,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACpC,OAAO,CAAC,cAAc,CAAC,CAoFzB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,sBAAsB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhG,gEAAgE;AAChE,MAAM,MAAM,gBAAgB,GAAG,CAC7B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GAAG,IAAI,EACnB,SAAS,EAAE,MAAM,KACd,OAAO,CAAC,cAAc,CAAC,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,SAAS,EACf,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,gBAAiC,GACtC,OAAO,CAAC,WAAW,CAAC,CA4CtB"}