@rubytech/create-maxy-code 0.1.570 → 0.1.572

package/payload/platform/plugins/dispatch/mcp/dist/tools/reads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reads.js","sourceRoot":"","sources":["../../src/tools/reads.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EACL,OAAO,EACP,QAAQ,EACR,eAAe,EACf,gBAAgB,EAChB,kBAAkB,GAEnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAmB,MAAM,aAAa,CAAC;AAEnE,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,CAK5B;IACC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,oBAAoB,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,QAAQ,CACb,IAAI,CAAC,SAAS,CACZ,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,EACxE,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,CAM7B;IACC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACnF,OAAO,SAAS,CACd,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,cAAc,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,sCAAsC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/I,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,OAAO,QAAQ,CACb,IAAI,CAAC,SAAS,CACZ;QACE,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU;QAC5B,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrB,GAAG,CAAC;YACJ,sEAAsE;YACtE,+DAA+D;YAC/D,OAAO,EACL,CAAC,CAAC,WAAW,KAAK,IAAI;gBACtB,CAAC,CAAC,WAAW,GAAG,MAAM;gBACtB,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC;SACtC,CAAC,CAAC;KACJ,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAMjC;IACC,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACpF,OAAO,QAAQ,CACb,IAAI,CAAC,SAAS,CACZ,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EACpF,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,CAKzB;IACC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,gBAAgB,CAAC;IACvC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,gBAAgB,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE;QACzD,eAAe,EAAE,IAAI;QACrB,KAAK,EAAE,GAAG;KACX,CAAC,CAAC;IAEH,8EAA8E;IAC9E,4EAA4E;IAC5E,6CAA6C;IAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC;KACxD,CAAC,CAAC,CAAC;IAEJ,OAAO,QAAQ,CACb,IAAI,CAAC,SAAS,CACZ;QACE,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU;QAC5B,OAAO;QACP,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,IAAI,EAAE,CAAC,CAAC,OAAO;YACf,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC;QACH,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC;KAC5D,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;AACJ,CAAC"}

package/payload/platform/plugins/dispatch/mcp/dist/tools/result.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The MCP tool-result shape, in one place.
+ *
+ * A refusal is `isError: true` with text naming what to do about it, never a
+ * throw: a thrown error inside a tool handler reaches the agent as a stack
+ * trace with no instruction in it.
+ */
+export interface ToolResult {
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    isError?: true;
+}
+export declare function toolText(text: string): ToolResult;
+export declare function toolError(text: string): ToolResult;
+//# sourceMappingURL=result.d.ts.map

package/payload/platform/plugins/dispatch/mcp/dist/tools/result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../src/tools/result.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,IAAI,CAAC;CAChB;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAEjD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAElD"}

package/payload/platform/plugins/dispatch/mcp/dist/tools/result.js

@@ -0,0 +1,7 @@
+export function toolText(text) {
+    return { content: [{ type: "text", text }] };
+}
+export function toolError(text) {
+    return { content: [{ type: "text", text }], isError: true };
+}
+//# sourceMappingURL=result.js.map

package/payload/platform/plugins/dispatch/mcp/dist/tools/result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../../src/tools/result.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC"}

package/payload/platform/plugins/dispatch/mcp/dist/tools/visit-record.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The MCP adapter for `dispatch-visit-record`.
+ *
+ * The write itself moved to `platform/lib/dispatch-write` so the field job
+ * sheet can call it without a second implementation. This file's only job is
+ * the shape: a domain outcome becomes a `ToolResult`, with the refusal text
+ * unchanged so the agent-facing wording does not drift.
+ */
+import { type VisitRecordParams } from "../../../../../lib/dispatch-write/dist/index.js";
+import { type ToolResult } from "./result.js";
+export type { VisitRecordParams } from "../../../../../lib/dispatch-write/dist/index.js";
+export declare function visitRecord(p: VisitRecordParams): Promise<ToolResult>;
+//# sourceMappingURL=visit-record.d.ts.map

package/payload/platform/plugins/dispatch/mcp/dist/tools/visit-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"visit-record.d.ts","sourceRoot":"","sources":["../../src/tools/visit-record.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAuB,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAEnE,YAAY,EAAE,iBAAiB,EAAE,MAAM,iDAAiD,CAAC;AAEzF,wBAAsB,WAAW,CAAC,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAG3E"}

package/payload/platform/plugins/dispatch/mcp/dist/tools/visit-record.js

@@ -0,0 +1,15 @@
+/**
+ * The MCP adapter for `dispatch-visit-record`.
+ *
+ * The write itself moved to `platform/lib/dispatch-write` so the field job
+ * sheet can call it without a second implementation. This file's only job is
+ * the shape: a domain outcome becomes a `ToolResult`, with the refusal text
+ * unchanged so the agent-facing wording does not drift.
+ */
+import { visitRecord as visitRecordWrite, } from "../../../../../lib/dispatch-write/dist/index.js";
+import { toolError, toolText } from "./result.js";
+export async function visitRecord(p) {
+    const out = await visitRecordWrite(p);
+    return out.ok ? toolText(JSON.stringify(out.value, null, 2)) : toolError(out.message);
+}
+//# sourceMappingURL=visit-record.js.map

package/payload/platform/plugins/dispatch/mcp/dist/tools/visit-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visit-record.js","sourceRoot":"","sources":["../../src/tools/visit-record.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,WAAW,IAAI,gBAAgB,GAEhC,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAmB,MAAM,aAAa,CAAC;AAInE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAoB;IACpD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACxF,CAAC"}

package/payload/platform/plugins/dispatch/mcp/dist/tools/visit-status-set.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The MCP adapter for `dispatch-visit-status-set`.
+ *
+ * The write itself moved to `platform/lib/dispatch-write` so the field job
+ * sheet can call it without a second implementation. This file's only job is
+ * the shape: a domain outcome becomes a `ToolResult`, with the refusal text
+ * unchanged so the agent-facing wording does not drift.
+ */
+import { type VisitStatusSetParams } from "../../../../../lib/dispatch-write/dist/index.js";
+import { type ToolResult } from "./result.js";
+export type { StatusSource, VisitStatusSetParams, } from "../../../../../lib/dispatch-write/dist/index.js";
+export declare function visitStatusSet(p: VisitStatusSetParams): Promise<ToolResult>;
+//# sourceMappingURL=visit-status-set.d.ts.map

package/payload/platform/plugins/dispatch/mcp/dist/tools/visit-status-set.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"visit-status-set.d.ts","sourceRoot":"","sources":["../../src/tools/visit-status-set.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAuB,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAEnE,YAAY,EACV,YAAY,EACZ,oBAAoB,GACrB,MAAM,iDAAiD,CAAC;AAEzD,wBAAsB,cAAc,CAAC,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC,CAGjF"}

package/payload/platform/plugins/dispatch/mcp/dist/tools/visit-status-set.js

@@ -0,0 +1,15 @@
+/**
+ * The MCP adapter for `dispatch-visit-status-set`.
+ *
+ * The write itself moved to `platform/lib/dispatch-write` so the field job
+ * sheet can call it without a second implementation. This file's only job is
+ * the shape: a domain outcome becomes a `ToolResult`, with the refusal text
+ * unchanged so the agent-facing wording does not drift.
+ */
+import { visitStatusSet as visitStatusSetWrite, } from "../../../../../lib/dispatch-write/dist/index.js";
+import { toolError, toolText } from "./result.js";
+export async function visitStatusSet(p) {
+    const out = await visitStatusSetWrite(p);
+    return out.ok ? toolText(JSON.stringify(out.value, null, 2)) : toolError(out.message);
+}
+//# sourceMappingURL=visit-status-set.js.map

package/payload/platform/plugins/dispatch/mcp/dist/tools/visit-status-set.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visit-status-set.js","sourceRoot":"","sources":["../../src/tools/visit-status-set.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,cAAc,IAAI,mBAAmB,GAEtC,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAmB,MAAM,aAAa,CAAC;AAOnE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,CAAuB;IAC1D,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACxF,CAAC"}

package/payload/platform/plugins/dispatch/mcp/package.json

@@ -0,0 +1,21 @@
+{
+  "name": "@maxy/dispatch",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "main": "dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.1",
+    "neo4j-driver": "^5.28.1"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.0",
+    "@types/node": "^22.0.0",
+    "vitest": "^4.1.2"
+  }
+}

package/payload/platform/plugins/dispatch/skills/dispatch-setup/SKILL.md

@@ -0,0 +1,64 @@
+---
+name: dispatch-setup
+description: "Use when an account is switching on dispatch and needs its config.json authored, or when its statuses, job types, worker roster, checklists or vocabulary need changing. Triggers include 'set up dispatch', 'add a job status', 'add an engineer to the roster', 'we call them drivers not engineers', 'why is nobody offered for this job type', and any dispatch tool refusing with reason=no-config."
+---
+
+# Dispatch setup
+
+Author `$ACCOUNT_DIR/dispatch/config.json`. Until it exists and validates, every dispatch tool
+registers and refuses with `reason=no-config`.
+
+## What success looks like
+
+A file that `dispatch-config-get` reads back without complaint, describing **this** operator's work
+in **this** operator's words. Six keys:
+
+| Key | What it holds |
+|---|---|
+| `statuses` | `job[]` and `visit[]`, each `{name, terminal}`; `jobTransitions[]` and `visitTransitions[]` as explicit `[from, to]` pairs |
+| `jobTypes` | `{name, requiredQualification, defaultDurationMin, slaTargetHours?}` |
+| `workers` | `{workerId, name, qualifications[], workingHours}` |
+| `records` | `checklists` keyed by job type; `requiredBeforeTerminal` keyed by terminal visit status, values from `notes`, `media`, `parts`, `checklist`, `signature` |
+| `vocabulary` | the operator's own noun for `job`, `visit`, `worker` |
+| `vehicles` | `{enabled, defaultGeofenceRadiusM?}` |
+
+## Two constraints the file must satisfy before it is written
+
+**Every status is reachable.** A status that is not the first of its kind and is not the `to` of any
+transition can never be entered. Nothing fails when this is wrong — no transition ever fires, and
+that is indistinguishable from a status nobody happens to use. `dispatch-config-get` reports it as
+`unreachable`.
+
+**Every job type has at least one qualified worker.** A type whose `requiredQualification` no worker
+holds offers nobody, for ever, with no error. `dispatch-config-get` reports it as
+`typesWithNoQualifiedWorker`.
+
+Both are reported rather than blocked, because an operator mid-way through hiring legitimately has a
+type nobody covers yet. Say so plainly rather than writing the file silently.
+
+## How to elicit it
+
+Ask what the operator already says, not what the schema wants. "What do you call the thing you send
+someone out to do?" gives you `vocabulary.job`. "Walk me through one from the phone ringing to the
+invoice" gives you the statuses in order, and the order gives you the transitions. "Who could do
+that one, and who couldn't?" gives you the qualification, which is usually a certificate or a
+licence they will name unprompted.
+
+Do not offer a default status set. A borrowed status list is how an operator ends up with statuses
+they never use and no status for the one thing they do daily.
+
+`workingHours` is `{ "mon": ["08:00", "17:00"] }` per day worked; an absent day means not working.
+A worker with no qualification recorded is accepted and reported, because a new starter is real.
+
+## Changing an existing config
+
+Read the current file first and change only what was asked. Removing a status that live jobs are
+sitting in strands them: nothing can move them, because no transition names a status that no longer
+exists. Check with `dispatch-job-list` before removing any status, and say what you found.
+
+## What this skill does not do
+
+It creates no `:Site`, `:Customer`, `:Person:Engineer` or `:Vehicle` node. A `workerId` in the
+roster must have a matching `:Person:Engineer` on the account before `dispatch-allocate` will use
+it, created with `memory-update`. Say this at the end of setup rather than letting the first
+allocation discover it.

package/payload/platform/plugins/docs/references/dispatch.md

@@ -0,0 +1,159 @@
+# Dispatch
+
+Field-work dispatch: create a job, allocate it to a qualified worker, move it through the account's
+own statuses, record what happened on site. Admin agent only, ten tools, ships inert.
+
+## Enabling it
+
+`dispatch` is in `plugins.available` on all four brands and in `defaultEnabled` on none. An account
+adds it to `enabledPlugins`, then runs the `dispatch-setup` skill to author
+`$ACCOUNT_DIR/dispatch/config.json`. Until that file exists and validates, every tool registers and
+refuses per call with `reason=no-config`.
+
+Enabling it also puts `schema-dispatch.md` in the account's resolved verticals, beside
+`schema-base` and the account's own businessType vertical. That is what makes `:Job`, `:Visit`,
+`:Site`, `:Customer`, `:Asset`, `:Part`, `:JobCost`, `:Contact`, job `:Note` and `:Engineer`
+writable from any businessType rather than from construction alone.
+
+## The config is the vocabulary and the rules
+
+Six keys in `$ACCOUNT_DIR/dispatch/config.json`: `statuses` (job and visit lists, each entry
+`{name, terminal}`, plus `jobTransitions` and `visitTransitions` as explicit `[from, to]` pairs),
+`jobTypes` (`{name, requiredQualification, defaultDurationMin, slaTargetHours?}`), `workers`
+(`{workerId, name, qualifications[], workingHours}`), `records` (`checklists` per job type,
+`requiredBeforeTerminal` per terminal visit status), `vocabulary` (`job`, `visit`, `worker`), and
+`vehicles` (`{enabled, defaultGeofenceRadiusM?}`).
+
+No status, job type, qualification, checklist, SLA target or operator noun appears in plugin source.
+A test walks every source file and fails if any string from either shipped fixture config appears in
+it.
+
+## The ten tools
+
+| Tool | Does | Refuses when |
+|---|---|---|
+| `dispatch-config-get` | Returns the vocabulary, statuses, transitions, job types, roster, checklists and the config audit | no config |
+| `dispatch-job-create` | Raises a job at a site for a customer, in the account's first job status, with `slaTargetAt` computed from the type | unknown job type; site or customer does not exist |
+| `dispatch-job-get` | One job with every visit, its times, who attended and what was recorded | job not on this account |
+| `dispatch-job-list` | Jobs filtered by status, type, worker, date window, or narrowed to never-allocated. `overdue` computed on every read | status not declared |
+| `dispatch-allocate-candidates` | Who could take this job in this window, with clashes shown and exclusions named | job unknown, untyped, or typed to something no longer declared |
+| `dispatch-allocate` | Creates the visit, attends it, moves the job along its own edge, attaches a vehicle | worker not on the roster; worker lacks the qualification; vehicle passed while `vehicles.enabled` is false; no `:Person:Engineer` node for the workerId |
+| `dispatch-visit-status-set` | Moves a visit; closes the job when its last visit reaches a terminal status | status not declared; transition not in the edge list; a required record missing |
+| `dispatch-visit-record` | Note, media reference, fitted part, checklist item, signature, arrival | visit unknown; nothing supplied to record |
+| `dispatch-site-history` | Every visit at one site, newest first, with notes | — |
+| `dispatch-day` | One day: every worker with the visits they hold, plus jobs nobody has been sent to | — |
+
+All ten are `adminAllowlist: true`, `publicAllowlist: false`.
+
+## Legality is data
+
+A move is legal when the account's own transition list contains that `[from, to]` pair. There is no
+state machine in the code. A refusal names both ends:
+`op=transition-refused … from=X to=Y reason=not-in-config`.
+
+A move into a terminal status is refused a second way when the visit is missing a field
+`records.requiredBeforeTerminal` demands there, and that refusal names the field:
+`reason=missing-required-field:notes`.
+
+Neither refusal is swallowed. A status that quietly failed to change cannot be told apart from one
+nobody tried to change.
+
+## A busy worker is offered, not hidden
+
+Only a missing qualification excludes a worker, and every exclusion is named:
+`exclusions=w1:missing-qualification`. A qualified worker already committed in the window is offered
+with the clash shown. Double-booking is the office's decision, and a tool that drops the busy option
+makes that decision for them with no trace.
+
+There is no travel-time estimate.
+
+## Arrival is two properties
+
+`arrivedPressedAt` and `arrivedObservedAt` are written by separate `SET` clauses, so recording
+either never clears the other. An observation with no press is stored and flagged. A pressed arrival
+is what somebody said; an observed one is what was measured, and a single `arrivedAt` cannot show
+them disagreeing.
+
+## The standing checks
+
+Six failure modes emit no event, because no action occurs: a job created and never allocated, a job
+past its SLA target, a status no transition reaches, a job type no worker is qualified for, a worker
+with no qualification, and visits closing hours after the work ended.
+
+- `[dispatch-census]`, per account, every 15 minutes: `jobs= unallocated= oldestUnallocatedAgeH=
+  overdue= visitsOpen= visitsOpenOver24h=`
+- `[dispatch-config-audit]`, on config load and each tick: `statuses= unreachable= terminal=
+  jobTypes= typesWithNoQualifiedWorker= workersWithNoQualification=`
+- `[dispatch-record-census]`, daily: `closedVisits= withNote= withMedia= medianRecordLagS=
+  p90RecordLagS=`
+
+They run in the UI server, not in the plugin, because a plugin only runs when somebody calls it.
+Accounts without a dispatch config are skipped silently.
+
+`overdue` is the count a typical incumbent system reports as zero because response-time targets were
+never configured. A non-zero, believable number is the feature working.
+
+The absence of `[dispatch-census]` is itself the signal: the check died, and every count is stale
+rather than zero.
+
+## The office planner
+
+`/dispatch` is an admin surface that renders a dispatch day: worker rows against days over a
+selectable range, a job list with true counts, and each visit's status with its pressed and
+observed arrival side by side. It reads; it does not yet re-time or re-allocate.
+
+It does not call these tools. Both it and this plugin read through `platform/lib/dispatch-read`,
+which owns its Neo4j session, so the planner's route holds no graph credentials and issues no
+Cypher — asserted by a test rather than trusted. This plugin's `mcp/src/lib/read.ts` is a
+re-export of that lib, so the tools and the planner cannot disagree about what a filter means.
+
+Two things the planner computes for itself. `dispatch-day` bounds a day in UTC, which misplaces a
+Europe/London visit near local midnight for the whole of British Summer Time, so the planner
+derives boundaries in the account's own timezone. And `dispatch-job-list` caps its rows, so the
+planner takes its counts from an aggregate instead of counting what it was given.
+
+It also names a defect it cannot fix. `dispatch-allocate` stores `startDate` exactly as the caller
+passed it (`allocate.ts:186`) while normalising `endDate` (`allocate.ts:51`). The window compare is
+lexical, so a start carrying a non-UTC offset reads correctly under GMT and an hour out under
+British Summer Time. The planner logs `op=nonzulu-start` with the offending visit ids; correcting
+it belongs at the writer.
+
+Full detail: [`.docs/dispatch-planner.md`](../../../.docs/dispatch-planner.md).
+
+## The field job sheet
+
+The engineer's surface is his phone, so the detailed record is made in a Telegram Mini App: the sheet
+opens inside the chat he is already in, with nothing installed and no second login.
+
+Set it up once per bot:
+
+1. Run `telegram-menu-button` with the bot's token and the account's public https origin. Give the
+   origin only — the tool appends `/field` and stamps the bot id on itself.
+2. Give each worker in `dispatch/config.json` a `telegramUserId` matching their numeric Telegram id.
+   Without one the sheet refuses them with "Ask the office to add you as an engineer."
+
+The worker then taps the menu button and sees today's visits, in the order they will be done, each
+card carrying the site, the customer, the contact and what was reported. Opening one shows the
+site's previous visits with their notes and photograph counts, then the checklist for that job type,
+parts, both signatures and a free note. Completion is refused, naming the one missing field, when
+the account's `requiredBeforeTerminal` is not satisfied.
+
+Every refusal is named and none of them shows a login form. `unbound-user` is the office's to fix;
+`bad-hash` and `duplicate-bot` mean something is wrong rather than missing.
+
+Two limits worth knowing before you deploy it. There is no offline queue yet, so an edit made out of
+signal is refused rather than held; the sheet says so rather than appearing to save it. And a site
+carries no address, because the ontology has none to carry, so a card names the site but cannot give
+a street. `sitesVisitedTodayWithoutAddress=` on the census counts what that costs each day. Both are
+tracked work, not permanent limits.
+
+Full detail: [`.docs/dispatch-field-app.md`](../../../.docs/dispatch-field-app.md).
+
+## Diagnostic path
+
+```
+journalctl --user -u <brand>-* | grep -E '\[dispatch\]|\[dispatch-census\]|\[dispatch-config-audit\]|\[dispatch-record-census\]|\[dispatch-field\]|\[dispatch-field-census\]'
+```
+
+Then filter by `jobId=` for one job's lifeline, `op=transition-refused` to audit rejected writes, or
+`exclusions=` to see why allocation offered whom.

package/payload/platform/plugins/email/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "email",
-  "description": "Email — one or more dedicated email mailboxes per account, each addressable by a `mailbox` selector. Retrieval: email-graph-query for stored email-thread history as :ConversationArchive {source:'email'} with :Section chunks (recall, search, 'threads about X', 'what did Y send?'); email-read / email-search for live IMAP inbox previews (with best-effort per-archive section hints from the graph); email-fetch-body for the COMPLETE decoded body of one message (by uid or message_id) when a preview is not enough; email-fetch-attachment for the extracted TEXT of one attachment (PDF via pdftotext, text/* by decode) when data sits inside a file rather than the body. Ingestion (operator-initiated, human-in-the-loop): email-fetch lists new messages, email-ingest writes the operator-approved subset via the conversation-archive pipeline. Sending: email-send (new), email-reply (threaded — resolves the original via IMAP Message-ID search), email-draft (compose to the mailbox Drafts folder, unsent, for operator review; pass messageId for a threaded draft-reply), email-draft-edit (revise a stored draft, located by its Drafts UID or, when Gmail has renumbered it, its draft Message-ID), email-draft-send (dispatch a stored draft by Drafts UID, then remove it), email-draft-list (read the Drafts folder back and confirm what is actually in it — the only tool that can verify a draft's presence). Deleting: email-delete (move named UIDs from email-read/email-search to the mailbox Trash — recoverable, never an expunge). Config: email-provider-info (pre-password host + app-password lookup from an address alone), email-setup, email-signature-set (install the signature every email-draft then appends automatically — never hand-write a signature into a draft body), email-sending-identity-set (designate which attached mailbox this account sends from, so a send or draft that names no mailbox resolves it from the account instead of being refused), email-status, email-otp-extract.",
+  "description": "Email — one or more dedicated email mailboxes per account, each addressable by a `mailbox` selector. Retrieval: email-graph-query for stored email-thread history as :ConversationArchive {source:'email'} with :Section chunks (recall, search, 'threads about X', 'what did Y send?'); email-read / email-search for live IMAP inbox previews (with best-effort per-archive section hints from the graph); email-fetch-body for the COMPLETE decoded body of one message (by uid or message_id) when a preview is not enough; email-fetch-attachment for the extracted TEXT of one attachment (PDF via pdftotext, text/* by decode) when data sits inside a file rather than the body. Ingestion (operator-initiated, human-in-the-loop): email-fetch lists new messages, email-ingest writes the operator-approved subset via the conversation-archive pipeline. Sending: email-send (new), email-reply (threaded — resolves the original via IMAP Message-ID search), email-draft (compose to the mailbox Drafts folder, unsent, for operator review; pass messageId for a threaded draft-reply), email-draft-edit (revise a stored draft, located by its Drafts UID or, when Gmail has renumbered it, its draft Message-ID), email-draft-send (dispatch a stored draft by Drafts UID, then remove it), email-draft-list (read the Drafts folder back and confirm what is actually in it — the only tool that can verify a draft's presence). Deleting: email-delete (move named UIDs to the mailbox Trash — recoverable, never an expunge; folder inbox/sent take UIDs from email-read/email-search, folder drafts takes them from email-draft-list and accepts a draftMessageId because a draft is renumbered on every edit). Config: email-provider-info (pre-password host + app-password lookup from an address alone), email-setup, email-signature-set (install the signature every email-draft then appends automatically — never hand-write a signature into a draft body), email-sending-identity-set (designate which attached mailbox this account sends from, so a send or draft that names no mailbox resolves it from the account instead of being refused), email-status, email-otp-extract.",
   "version": "0.1.0",
   "author": {
     "name": "Rubytech LLC"

package/payload/platform/plugins/email/PLUGIN.md

@@ -1,6 +1,6 @@
 ---
 name: email
-description: "Email — one or more dedicated email mailboxes per account, each addressable by a `mailbox` selector. Retrieval: email-graph-query for stored email-thread history as :ConversationArchive {source:'email'} with :Section chunks (recall, search, 'threads about X', 'what did Y send?'); email-read / email-search for live IMAP inbox previews (with best-effort per-archive section hints from the graph); email-fetch-body for the COMPLETE decoded body of one message (by uid or message_id) when a preview is not enough; email-fetch-attachment for the extracted TEXT of one attachment (PDF via pdftotext, text/* by decode) when data sits inside a file rather than the body. Ingestion (operator-initiated, human-in-the-loop): email-fetch lists new messages, email-ingest writes the operator-approved subset via the conversation-archive pipeline. Sending: email-send (new), email-reply (threaded — resolves the original via IMAP Message-ID search), email-draft (compose to the mailbox Drafts folder, unsent, for operator review; pass messageId for a threaded draft-reply), email-draft-edit (revise a stored draft, located by its Drafts UID or, when Gmail has renumbered it, its draft Message-ID), email-draft-send (dispatch a stored draft by Drafts UID, then remove it), email-draft-list (read the Drafts folder back and confirm what is actually in it — the only tool that can verify a draft's presence). Deleting: email-delete (move named UIDs from email-read/email-search to the mailbox Trash — recoverable, never an expunge). Config: email-provider-info (pre-password host + app-password lookup from an address alone), email-setup, email-signature-set (install the signature every email-draft then appends automatically — never hand-write a signature into a draft body), email-sending-identity-set (designate which attached mailbox this account sends from, so a send or draft that names no mailbox resolves it from the account instead of being refused), email-status, email-otp-extract."
+description: "Email — one or more dedicated email mailboxes per account, each addressable by a `mailbox` selector. Retrieval: email-graph-query for stored email-thread history as :ConversationArchive {source:'email'} with :Section chunks (recall, search, 'threads about X', 'what did Y send?'); email-read / email-search for live IMAP inbox previews (with best-effort per-archive section hints from the graph); email-fetch-body for the COMPLETE decoded body of one message (by uid or message_id) when a preview is not enough; email-fetch-attachment for the extracted TEXT of one attachment (PDF via pdftotext, text/* by decode) when data sits inside a file rather than the body. Ingestion (operator-initiated, human-in-the-loop): email-fetch lists new messages, email-ingest writes the operator-approved subset via the conversation-archive pipeline. Sending: email-send (new), email-reply (threaded — resolves the original via IMAP Message-ID search), email-draft (compose to the mailbox Drafts folder, unsent, for operator review; pass messageId for a threaded draft-reply), email-draft-edit (revise a stored draft, located by its Drafts UID or, when Gmail has renumbered it, its draft Message-ID), email-draft-send (dispatch a stored draft by Drafts UID, then remove it), email-draft-list (read the Drafts folder back and confirm what is actually in it — the only tool that can verify a draft's presence). Deleting: email-delete (move named UIDs to the mailbox Trash — recoverable, never an expunge; folder inbox/sent take UIDs from email-read/email-search, folder drafts takes them from email-draft-list and accepts a draftMessageId because a draft is renumbered on every edit). Config: email-provider-info (pre-password host + app-password lookup from an address alone), email-setup, email-signature-set (install the signature every email-draft then appends automatically — never hand-write a signature into a draft body), email-sending-identity-set (designate which attached mailbox this account sends from, so a send or draft that names no mailbox resolves it from the account instead of being refused), email-status, email-otp-extract."
 tools:
   - name: email-provider-info
     publicAllowlist: false
@@ -120,7 +120,7 @@ Manages the agent's own dedicated email account — IMAP for reading, SMTP for s
 - **Sending identity:** `email-sending-identity-set` — designate which attached mailbox is the account's own outbound address. Afterwards an `email-draft`, `email-send` or `email-reply` that names no `mailbox` composes from it, instead of being refused with a list of addresses. Exactly one mailbox carries the designation: the call clears it from every sibling in the same write, so uniqueness is a property of the write rather than of a later check. The address comes from the operator, never from inference — a routing rule, a signature or an inbound trigger names an address for a different purpose, and reading one of those as the sending address is what put a mailbox the operator never sends from into a draft brief. Re-running `email-setup` on a designated mailbox preserves the designation. `email-status` reports which mailbox holds it, and says so when a multi-mailbox account has none.
 - **Read inbox:** `email-read` — metadata only (UID, sender, subject, date), plus a best-effort `Archive`/`Archive-Section` hint when the IMAP message's `receivedAt` falls inside a stored `:ConversationArchive {source:'email'}` section, plus an `Attachments (N): filename (mime, size); …` footer when the message carries enclosures. Supports pagination (`before_uid`), folders (`inbox`/`sent`), filtering by sender/date/subject. Metadata is derived from IMAP `bodyStructure` — no bytes downloaded.
 - **Search inbox:** `email-search` — live IMAP search by sender, subject, body keyword, date range. Same per-archive hint and attachment footer as `email-read`.
-- **Delete (move to Trash):** `email-delete` — move the messages named by `uids` (from a prior `email-read`/`email-search`, scoped to a source `folder` of `inbox` or `sent`) into the mailbox's Trash folder. **Recoverable, never an expunge** — the message leaves the inbox and permanent removal is left to the operator's own mail client or the provider's Trash auto-purge; this tool never permanently deletes. Trash is resolved per provider: the `\Trash` special-use folder if advertised, else the first existing of `Trash`, `[Gmail]/Trash`, `Deleted Items`, `Deleted Messages`. `Junk` is never treated as Trash. A mailbox with no resolvable Trash yields a typed error and moves nothing — there is no silent expunge fallback. A `uid` that is already gone is counted not-moved without failing the rest; the result reports `Moved N of M message(s) to <Trash>`. It deletes only the UIDs you name, never by search criteria.
+- **Delete (move to Trash):** `email-delete` — move the messages named by `uids` (from a prior `email-read`/`email-search`, scoped to a source `folder` of `inbox`, `sent`, or `drafts`) into the mailbox's Trash folder. **Recoverable, never an expunge** — the message leaves the inbox and permanent removal is left to the operator's own mail client or the provider's Trash auto-purge; this tool never permanently deletes. Trash is resolved per provider: the `\Trash` special-use folder if advertised, else the first existing of `Trash`, `[Gmail]/Trash`, `Deleted Items`, `Deleted Messages`. `Junk` is never treated as Trash. A mailbox with no resolvable Trash yields a typed error and moves nothing — there is no silent expunge fallback. A `uid` that is already gone is counted not-moved without failing the rest; the result reports `Moved N of M message(s) to <Trash>`. It deletes only the UIDs you name, never by search criteria. Deleting a draft uses `folder: "drafts"` with a UID from `email-draft-list`; because a draft is renumbered every time it is edited, pass `draftMessageId` as well and the tool relocates by the draft's own Message-ID when the UID no longer resolves. The Drafts folder is resolved by the account's configured `draftsFolder` override when set, else by the `\Drafts` special-use flag.
 - **Read one attachment's text:** `email-fetch-attachment` — the extracted text of a single inbox attachment, addressed by `uid` plus an optional `index` (1-based, matching the `Attachments (N): …` footer order) or `filename`. With one attachment and no selector, that attachment is read; with more than one and no selector, or an ambiguous filename, the call is refused with a numbered listing. `application/pdf` is extracted via `pdftotext`, `text/*` by decode; any other type reports that it cannot be extracted, and a PDF with no text layer reports it is a scanned image (no OCR), so "no data in the attachment" never reads the same as "the attachment could not be read". Bytes are downloaded once through the 25 MB-capped fetch path; inbox only. A `text/calendar` part counts as an attachment whatever its disposition and whatever its name — a named one keeps its name, an unnamed one is listed as `invite-<part>.ics` — so a meeting invite whose message body is empty is still readable. A calendar part inside a forwarded `message/rfc822` wrapper is not listed (IMAP gives it the wrapper's part number, which fetches the whole encapsulated message). Use this when actionable data (a meeting date, an amount) may sit inside a file rather than the email body.
 - **Read one whole message:** `email-fetch-body` — the COMPLETE decoded body of a single message addressed by `uid` (with optional `folder`) or `message_id` (resolved across inbox and sent). No 500-char preview cap. Downloads the full RFC822 source and decodes it with `mailparser`, so every MIME shape — flat text, single-part HTML, `multipart/alternative`, and nested `multipart/related`/`multipart/mixed` (Outlook's inline-image house style) — yields a body; the preview tools above intentionally stay preview-only. Use this when the operator wants to read or act on a message's actual content.
 - **Send:** `email-send` — new outbound email. Pass `cc`/`bcc` (each an array of email addresses) to copy or blind-copy recipients — CC appears in the message header, BCC recipients receive the message without appearing in any header. Pass `attachments` (absolute file paths under the account directory, ≤25 MB each) to attach files as SMTP attachments; an invalid path fails the send with no email dispatched. The success message names the CC recipients and reports the BCC count without naming them.

package/payload/platform/plugins/email/mcp/dist/__tests__/email-delete.test.js

@@ -7,7 +7,8 @@ import { beforeEach, describe, expect, it, vi } from "vitest";
 const state = {
     folders: [],
     existingUids: [],
-    calls: { locked: null, searched: null, moves: [], released: false },
+    messageIdUids: {},
+    calls: { locked: null, searched: null, headerSearches: [], moves: [], released: false },
 };
 const mockClient = {
     connect: vi.fn(async () => { }),
@@ -18,6 +19,10 @@ const mockClient = {
     }),
     search: vi.fn(async (query) => {
         state.calls.searched = query;
+        if (query.header) {
+            state.calls.headerSearches.push(query.header);
+            return state.messageIdUids[query.header["message-id"]] ?? [];
+        }
         const requested = String(query.uid).split(",").map(Number);
         return requested.filter((u) => state.existingUids.includes(u));
     }),
@@ -54,7 +59,7 @@ const { loadCredentials, credConfig } = vi.hoisted(() => {
     return { loadCredentials, credConfig };
 });
 vi.mock("../lib/credentials.js", () => ({ loadCredentials }));
-import { moveToTrash, resolveTrashFolder } from "../lib/imap.js";
+import { moveToTrash, resolveTrashFolder, resetDraftsCensusForTest } from "../lib/imap.js";
 import { emailDelete, deleteLine } from "../tools/email-delete.js";
 const config = {
     email: "a@x.com",
@@ -66,12 +71,14 @@ const config = {
     smtpPort: 587,
     smtpSecurity: "starttls",
 };
-function reset(folders, existingUids) {
+function reset(folders, existingUids, messageIdUids = {}) {
     state.folders = folders;
     state.existingUids = existingUids;
-    state.calls = { locked: null, searched: null, moves: [], released: false };
+    state.messageIdUids = messageIdUids;
+    state.calls = { locked: null, searched: null, headerSearches: [], moves: [], released: false };
 }
 beforeEach(() => {
+    resetDraftsCensusForTest();
     reset([], []);
 });
 describe("resolveTrashFolder", () => {
@@ -119,6 +126,81 @@ describe("moveToTrash", () => {
         expect(state.calls.moves).toHaveLength(0);
     });
 });
+const DRAFT_FOLDERS = [
+    { path: "INBOX" },
+    { path: "Drafts", specialUse: "\\Drafts" },
+    { path: "Trash", specialUse: "\\Trash" },
+];
+describe("moveToTrash — drafts folder", () => {
+    it("locks the \\Drafts folder and moves the named UID to Trash", async () => {
+        reset(DRAFT_FOLDERS, [28381]);
+        const res = await moveToTrash(config, "pw", { folder: "drafts", uids: [28381] });
+        expect(res).toEqual({ moved: 1, requested: 1, trash: "Trash", addressing: "uid-hit" });
+        expect(state.calls.locked).toBe("Drafts");
+        expect(state.calls.moves[0].dest).toBe("Trash");
+        expect(state.calls.headerSearches).toHaveLength(0);
+    });
+    it("honours a configured draftsFolder override over the \\Drafts special-use folder", async () => {
+        reset([{ path: "INBOX" }, { path: "INBOX.Drafts" }, { path: "Drafts", specialUse: "\\Drafts" }, { path: "Trash", specialUse: "\\Trash" }], [7]);
+        const overridden = { ...config, draftsFolder: "INBOX.Drafts" };
+        const res = await moveToTrash(overridden, "pw", { folder: "drafts", uids: [7] });
+        expect(res.moved).toBe(1);
+        expect(state.calls.locked).toBe("INBOX.Drafts");
+    });
+    it("relocates by draft Message-ID when the supplied UID has gone stale", async () => {
+        reset(DRAFT_FOLDERS, [], { "<c65a28e4@glsmithandsons.co.uk>": [28402] });
+        const res = await moveToTrash(config, "pw", {
+            folder: "drafts",
+            uids: [28381],
+            draftMessageId: "c65a28e4@glsmithandsons.co.uk",
+        });
+        expect(res).toEqual({ moved: 1, requested: 1, trash: "Trash", addressing: "message-id-relocate" });
+        expect(state.calls.headerSearches).toEqual([{ "message-id": "<c65a28e4@glsmithandsons.co.uk>" }]);
+        expect(state.calls.moves[0].range).toEqual([28402]);
+    });
+    it("never searches by Message-ID when the UID still resolves", async () => {
+        reset(DRAFT_FOLDERS, [28381], { "<c65a28e4@x.com>": [99] });
+        const res = await moveToTrash(config, "pw", {
+            folder: "drafts",
+            uids: [28381],
+            draftMessageId: "c65a28e4@x.com",
+        });
+        expect(res.addressing).toBe("uid-hit");
+        expect(state.calls.headerSearches).toHaveLength(0);
+        expect(state.calls.moves[0].range).toEqual([28381]);
+    });
+    it("moves nothing and reports no addressing when neither the UID nor the Message-ID resolves", async () => {
+        reset(DRAFT_FOLDERS, [], {});
+        const res = await moveToTrash(config, "pw", {
+            folder: "drafts",
+            uids: [28381],
+            draftMessageId: "gone@x.com",
+        });
+        expect(res).toEqual({ moved: 0, requested: 1, trash: "Trash" });
+        expect(state.calls.moves).toHaveLength(0);
+    });
+    it("errors and never locks the source when the mailbox has no Trash", async () => {
+        reset([{ path: "INBOX" }, { path: "Drafts", specialUse: "\\Drafts" }, { path: "Junk" }], [28381]);
+        await expect(moveToTrash(config, "pw", { folder: "drafts", uids: [28381] })).rejects.toMatchObject({ code: "no-trash-folder" });
+        expect(state.calls.locked).toBeNull();
+        expect(state.calls.moves).toHaveLength(0);
+    });
+    it("throws before any lock when the server advertises no Drafts folder", async () => {
+        reset([{ path: "INBOX" }, { path: "Trash", specialUse: "\\Trash" }], [28381]);
+        await expect(moveToTrash(config, "pw", { folder: "drafts", uids: [28381] })).rejects.toThrow(/Drafts folder not found/);
+        expect(state.calls.locked).toBeNull();
+    });
+    it("leaves inbox and sent on resolveFolderName with no addressing", async () => {
+        reset([{ path: "INBOX" }, { path: "Sent", specialUse: "\\Sent" }, { path: "Trash", specialUse: "\\Trash" }], [5]);
+        const inbox = await moveToTrash(config, "pw", { folder: "inbox", uids: [5] });
+        expect(inbox).toEqual({ moved: 1, requested: 1, trash: "Trash" });
+        expect(state.calls.locked).toBe("INBOX");
+        reset([{ path: "INBOX" }, { path: "Sent", specialUse: "\\Sent" }, { path: "Trash", specialUse: "\\Trash" }], [6]);
+        const sent = await moveToTrash(config, "pw", { folder: "sent", uids: [6] });
+        expect(sent).toEqual({ moved: 1, requested: 1, trash: "Trash" });
+        expect(state.calls.locked).toBe("Sent");
+    });
+});
 describe("emailDelete tool", () => {
     it("resolves the credential by accountId (no password input) and moves via the resolved Trash", async () => {
         reset([{ path: "INBOX" }, { path: "Trash", specialUse: "\\Trash" }], [10, 11]);
@@ -130,6 +212,46 @@ describe("emailDelete tool", () => {
         expect(state.calls.moves[0].dest).toBe("Trash");
     });
 });
+describe("emailDelete tool — drafts", () => {
+    it("passes the drafts folder and draftMessageId through and reports the move", async () => {
+        reset(DRAFT_FOLDERS, [], { "<c65a28e4@x.com>": [28402] });
+        const text = await emailDelete({
+            accountId: "acct-1",
+            uids: [28381],
+            folder: "drafts",
+            draftMessageId: "c65a28e4@x.com",
+        });
+        expect(text).toBe("Moved 1 of 1 message(s) to Trash.");
+        expect(state.calls.locked).toBe("Drafts");
+        expect(state.calls.moves[0].range).toEqual([28402]);
+    });
+    it("reports a total miss as moved=0 without throwing", async () => {
+        reset(DRAFT_FOLDERS, [], {});
+        const text = await emailDelete({ accountId: "acct-1", uids: [28381], folder: "drafts" });
+        expect(text).toBe("Moved 0 of 1 message(s) to Trash.");
+        expect(state.calls.moves).toHaveLength(0);
+    });
+});
+describe("deleteLine — addressing", () => {
+    it("carries addressing on a drafts delete", () => {
+        const hit = deleteLine("owner@x.com", "drafts", 1, 1, "Trash", true, undefined, "uid-hit");
+        expect(hit).toContain("folder=drafts");
+        expect(hit).toContain("addressing=uid-hit");
+        const moved = deleteLine("owner@x.com", "drafts", 1, 1, "Trash", true, undefined, "message-id-relocate");
+        expect(moved).toContain("addressing=message-id-relocate");
+    });
+    it("omits addressing entirely for inbox and sent", () => {
+        expect(deleteLine("owner@x.com", "inbox", 1, 1, "Trash", true)).not.toContain("addressing=");
+        expect(deleteLine("owner@x.com", "sent", 1, 1, "Trash", true)).not.toContain("addressing=");
+    });
+    it("still records the typed refusal with no counts", () => {
+        const fail = deleteLine("owner@x.com", "drafts", 1, 0, null, false, "no-trash-folder");
+        expect(fail).toContain("ok=false");
+        expect(fail).toContain("reason=no-trash-folder");
+        expect(fail).not.toContain("moved=");
+        expect(fail).not.toContain("addressing=");
+    });
+});
 describe("deleteLine", () => {
     it("carries the mailbox, counts, trash, and ok — never a password", () => {
         const ok = deleteLine("owner@x.com", "inbox", 3, 2, "Trash", true);