@rubytech/create-realagent-code 0.1.24 → 0.1.27

package/payload/platform/plugins/cloudflare/scripts/tunnel-ingress.ts

@@ -0,0 +1,291 @@
+// Task 009 — Pure tunnel-ingress rendering + state I/O.
+//
+// Mirror of `samba-provision.ts`: pure decision functions in this file with
+// no side effects; `setup-tunnel.sh` orchestrates I/O around them. Invoked
+// from bash via `node --experimental-strip-types`. The CLI shim at the
+// bottom of this file takes a JSON spec on argv and prints rendered YAML
+// (or the requested state snippet) on stdout so the shell can `>` it into
+// the brand's config.yml or tunnel.state.
+//
+// Why a pure module:
+//  - The existing setup-tunnel.sh rebuilds config.yml from scratch every
+//    run. Adding SSH and SMB conditionally inline doubles the rewrite
+//    logic and makes it untestable. Extracting to a pure function with a
+//    test grid locks the YAML shape against future drift.
+//  - tunnel.state needs additive sshHostname / smbHostname fields so a
+//    re-run with no env vars rehydrates the ingress instead of silently
+//    dropping it. The persistence shape lives here so the test grid
+//    covers round-trip parity.
+//
+// Out of scope:
+//  - Cloudflare API calls (banned per `feedback_cf_api_total_eradication`).
+//  - Access policy creation (operator authors it in the dashboard).
+//  - DNS routing (the bash wrapper invokes `cloudflared tunnel route dns`).
+
+import { readFileSync, existsSync, appendFileSync } from "node:fs";
+
+// Task 054 — STREAM_LOG_PATH writer (Task 598/600 contract). The four CLI
+// subcommands invoked from setup-tunnel.sh (probe-samba, render-config,
+// render-state, action-req) emit a `phase=<cmd>-start` line on entry and
+// `phase=<cmd>-ok` / `phase=<cmd>-fail` on exit. Pattern ported verbatim
+// from list-cf-domains.ts:94-133: sticky-flag on first write failure to
+// avoid stderr spam if STREAM_LOG_PATH is unwritable; observability
+// failure must not mask the subcommand's real signal.
+let streamLogWriteFailed = false;
+
+function logPhase(line: string): void {
+  const streamLogPath = process.env.STREAM_LOG_PATH;
+  if (!streamLogPath || streamLogWriteFailed) return;
+  try {
+    appendFileSync(
+      streamLogPath,
+      `[${new Date().toISOString()}] [script:tunnel-ingress] ${line}\n`,
+    );
+  } catch (err) {
+    streamLogWriteFailed = true;
+    const detail = (err instanceof Error ? err.message : String(err))
+      .slice(0, 200)
+      .replace(/"/g, "'");
+    process.stderr.write(
+      `[tunnel-ingress] phase=stream-log-write-failed detail="${detail}"\n`,
+    );
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Types
+// ---------------------------------------------------------------------------
+
+export interface IngressSpec {
+  tunnelId: string;
+  credentialsPath: string;
+  httpPort: number;
+  httpHostnames: string[];
+  sshHostname?: string | null;
+  smbHostname?: string | null;
+}
+
+export interface TunnelState {
+  tunnelId: string;
+  tunnelName: string;
+  domain: string;
+  configPath: string;
+  credentialsPath: string;
+  sshHostname?: string | null;
+  smbHostname?: string | null;
+}
+
+// ---------------------------------------------------------------------------
+// Pure renderer
+// ---------------------------------------------------------------------------
+
+/**
+ * Render config.yml from a fully-resolved IngressSpec. Order matters:
+ * cloudflared matches ingress rules top-to-bottom, so the catch-all
+ * `http_status:404` MUST be last. SSH and SMB are inserted between the
+ * HTTPS hostnames and the catch-all — they carry non-HTTP services, so
+ * placing them after HTTPS keeps the existing HTTP routing behaviour
+ * unchanged when no SSH/SMB hostname is configured.
+ */
+export function renderConfigYml(spec: IngressSpec): string {
+  const lines: string[] = [];
+  lines.push(`tunnel: ${spec.tunnelId}`);
+  lines.push(`credentials-file: ${spec.credentialsPath}`);
+  lines.push(`ingress:`);
+  for (const h of spec.httpHostnames) {
+    lines.push(`  - hostname: ${h}`);
+    lines.push(`    service: http://localhost:${spec.httpPort}`);
+  }
+  if (spec.sshHostname) {
+    lines.push(`  - hostname: ${spec.sshHostname}`);
+    lines.push(`    service: ssh://localhost:22`);
+  }
+  if (spec.smbHostname) {
+    lines.push(`  - hostname: ${spec.smbHostname}`);
+    lines.push(`    service: tcp://localhost:445`);
+  }
+  lines.push(`  - service: http_status:404`);
+  lines.push(``);
+  return lines.join("\n");
+}
+
+/**
+ * Render the tunnel.state JSON, preserving SSH/SMB hostnames as additive
+ * fields so re-runs can rehydrate them. The shape stays a superset of the
+ * pre-Task-009 JSON (tunnelId, tunnelName, domain, configPath,
+ * credentialsPath) — consumers that don't know about ssh/smb keep working.
+ */
+export function renderTunnelState(state: TunnelState): string {
+  const out: Record<string, string> = {
+    tunnelId: state.tunnelId,
+    tunnelName: state.tunnelName,
+    domain: state.domain,
+    configPath: state.configPath,
+    credentialsPath: state.credentialsPath,
+  };
+  if (state.sshHostname) out.sshHostname = state.sshHostname;
+  if (state.smbHostname) out.smbHostname = state.smbHostname;
+  return JSON.stringify(out, null, 2) + "\n";
+}
+
+/**
+ * Read an existing tunnel.state from disk, returning the persisted
+ * sshHostname / smbHostname if present. Used to rehydrate on re-runs
+ * where the operator did not pass the env vars again. Missing file or
+ * malformed JSON returns nulls — the caller decides whether to fail.
+ */
+export function readPersistedHostnames(statePath: string): {
+  sshHostname: string | null;
+  smbHostname: string | null;
+} {
+  if (!existsSync(statePath)) return { sshHostname: null, smbHostname: null };
+  try {
+    const raw = readFileSync(statePath, "utf8");
+    const parsed = JSON.parse(raw) as Partial<TunnelState>;
+    return {
+      sshHostname: typeof parsed.sshHostname === "string" ? parsed.sshHostname : null,
+      smbHostname: typeof parsed.smbHostname === "string" ? parsed.smbHostname : null,
+    };
+  } catch {
+    return { sshHostname: null, smbHostname: null };
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Samba presence probe
+// ---------------------------------------------------------------------------
+
+/**
+ * Probe whether Task 034's per-brand Samba stanza exists in /etc/samba/smb.conf.
+ * The brand stanza header is `[<brand>]` at the start of a line (Task 034's
+ * `renderBrandStanza` output). Source of truth is the Pi filesystem, not
+ * brand.json — Samba is provisioned by the installer's post-install step,
+ * not declared up-front.
+ */
+export function probeSambaStanza(brand: string, smbConfPath = "/etc/samba/smb.conf"): boolean {
+  if (!existsSync(smbConfPath)) return false;
+  try {
+    const raw = readFileSync(smbConfPath, "utf8");
+    const re = new RegExp(`^\\[${escapeRegex(brand)}\\]\\s*$`, "m");
+    return re.test(raw);
+  } catch {
+    return false;
+  }
+}
+
+function escapeRegex(s: string): string {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+
+// ---------------------------------------------------------------------------
+// ACTION REQUIRED block
+// ---------------------------------------------------------------------------
+
+/**
+ * Render the dashboard click-path the operator follows to author the Access
+ * policy. Same shape as the existing apex-CNAME ACTION REQUIRED block in
+ * setup-tunnel.sh. The script does NOT create the policy — Cloudflare API
+ * is banned (`feedback_cf_api_total_eradication`) and `cloudflared` CLI
+ * has no Access-application create subcommand. The operator clicks through
+ * Zero Trust → Access → Applications → Add → Self-hosted.
+ */
+export function renderAccessPolicyActionRequired(input: {
+  sshHostname?: string | null;
+  smbHostname?: string | null;
+  operatorEmail: string;
+}): string {
+  const hosts: Array<{ kind: "SSH" | "SMB"; hostname: string }> = [];
+  if (input.sshHostname) hosts.push({ kind: "SSH", hostname: input.sshHostname });
+  if (input.smbHostname) hosts.push({ kind: "SMB", hostname: input.smbHostname });
+  if (hosts.length === 0) return "";
+
+  const lines: string[] = [];
+  lines.push("");
+  lines.push("============================================================");
+  lines.push("ACTION REQUIRED — Cloudflare Zero Trust Access policy");
+  lines.push("============================================================");
+  for (const { kind, hostname } of hosts) {
+    lines.push(`  ${kind}: ${hostname}`);
+    lines.push(`    Cloudflare dashboard → Zero Trust → Access → Applications`);
+    lines.push(`    Add → Self-hosted`);
+    lines.push(`      Application name: ${hostname}`);
+    lines.push(`      Application domain: ${hostname}`);
+    lines.push(`      Policy → Action: Allow`);
+    lines.push(`      Include → Emails: ${input.operatorEmail}`);
+    lines.push("");
+  }
+  lines.push("Until each Access application is created, off-LAN clients see");
+  lines.push("Cloudflare's identity-rejection page and bytes never reach the Pi.");
+  lines.push("============================================================");
+  return lines.join("\n");
+}
+
+// ---------------------------------------------------------------------------
+// CLI shim
+// ---------------------------------------------------------------------------
+
+// Bash invokes this file with one of three subcommands:
+//   render-config <spec.json>          → stdout YAML
+//   render-state  <state.json>         → stdout JSON
+//   read-state    <state-path>         → stdout JSON {sshHostname,smbHostname}
+//   probe-samba   <brand> [smb.conf]   → exit 0 if present, 1 if absent
+//   action-req    <input.json>         → stdout ACTION REQUIRED block
+
+function readJsonArg(path: string): unknown {
+  const raw = readFileSync(path, "utf8");
+  return JSON.parse(raw);
+}
+
+const isCli =
+  typeof process !== "undefined" &&
+  Array.isArray(process.argv) &&
+  process.argv[1] !== undefined &&
+  /tunnel-ingress\.(ts|js|mjs|mts)$/.test(process.argv[1]);
+
+if (isCli) {
+  const [, , cmd, ...rest] = process.argv;
+  // Track which subcommands carry the Task 054 stream-log contract — for these
+  // we emit start/ok/fail phase pairs. Unknown subcommands and read-state are
+  // out of scope per the task (read-state has no setup-tunnel.sh caller line).
+  const instrumented = new Set(["probe-samba", "render-config", "render-state", "action-req"]);
+  if (instrumented.has(cmd)) logPhase(`phase=${cmd}-start`);
+  try {
+    if (cmd === "render-config") {
+      const spec = readJsonArg(rest[0]) as IngressSpec;
+      process.stdout.write(renderConfigYml(spec));
+      logPhase(`phase=${cmd}-ok`);
+    } else if (cmd === "render-state") {
+      const state = readJsonArg(rest[0]) as TunnelState;
+      process.stdout.write(renderTunnelState(state));
+      logPhase(`phase=${cmd}-ok`);
+    } else if (cmd === "read-state") {
+      const persisted = readPersistedHostnames(rest[0]);
+      process.stdout.write(JSON.stringify(persisted));
+    } else if (cmd === "probe-samba") {
+      const brand = rest[0];
+      const smbConf = rest[1] ?? "/etc/samba/smb.conf";
+      const present = probeSambaStanza(brand, smbConf);
+      logPhase(`phase=${cmd}-ok brand=${brand} present=${present}`);
+      process.exit(present ? 0 : 1);
+    } else if (cmd === "action-req") {
+      const input = readJsonArg(rest[0]) as {
+        sshHostname?: string | null;
+        smbHostname?: string | null;
+        operatorEmail: string;
+      };
+      process.stdout.write(renderAccessPolicyActionRequired(input));
+      logPhase(`phase=${cmd}-ok`);
+    } else {
+      process.stderr.write(`tunnel-ingress: unknown subcommand: ${cmd}\n`);
+      process.exit(2);
+    }
+  } catch (err) {
+    const msg = (err as Error).message;
+    if (instrumented.has(cmd)) {
+      const detail = msg.slice(0, 200).replace(/"/g, "'");
+      logPhase(`phase=${cmd}-fail error="${detail}"`);
+    }
+    process.stderr.write(`tunnel-ingress: ${msg}\n`);
+    process.exit(1);
+  }
+}

package/payload/platform/plugins/cloudflare/skills/setup-tunnel/SKILL.md

@@ -46,6 +46,48 @@ Example ({{productName}} on `maxy.bot` with a public subdomain and the `maxy.cha
 ~/setup-tunnel.sh maxy 19200 admin.maxy.bot public.maxy.bot maxy.chat
 ```
 
+### Optional SSH and SMB ingress (Task 009)
+
+The same script also wires the off-LAN SSH and SMB ingress when the
+corresponding hostnames are passed via environment variables (NOT positional
+argv — the positional contract is preserved for the form/endpoint caller):
+
+```
+SSH_HOSTNAME=ssh.maxy.bot \
+SMB_HOSTNAME=smb.maxy.bot \
+OPERATOR_EMAIL=joel@example.com \
+~/setup-tunnel.sh maxy 19200 admin.maxy.bot public.maxy.bot
+```
+
+Behaviour:
+
+- HTTPS hostnames are routed and config.yml rewritten FIRST. SSH and SMB
+  DNS routes happen in a second pass; a failure on SSH or SMB emits
+  `[tunnel-install] {ssh,smb}-ingress-deferred` and leaves the HTTPS
+  ingress durable (no rollback, no `exit 1`).
+- `SSH_HOSTNAME` adds an ingress entry `service: ssh://localhost:22`.
+- `SMB_HOSTNAME` adds `service: tcp://localhost:445`, gated on Task 034's
+  Samba stanza being present in `/etc/samba/smb.conf`. Absent stanza →
+  `[tunnel-install] smb-ingress-skipped reason=samba-not-provisioned` and
+  the SMB pass is skipped entirely.
+- Re-run with env vars unset rehydrates `sshHostname` / `smbHostname` from
+  `tunnel.state` so previously configured ingress is not silently dropped.
+- The Cloudflare Zero Trust Access policy that gates these hostnames is
+  authored by the operator in the dashboard — the script prints an
+  `ACTION REQUIRED` click-path with the resolved hostnames and operator
+  email (CF API is banned per `feedback_cf_api_total_eradication`). Phase
+  lines: `[tunnel-install] ssh-access-policy-required` and
+  `[tunnel-install] smb-access-policy-required` (named `-required`, not
+  `-set`, because the script does not create the policy).
+- Dry-run: `SETUP_TUNNEL_DRY_RUN=1` short-circuits before any cloudflared
+  mutation and prints the rendered `config.yml` and `tunnel.state` so the
+  operator can preview changes.
+
+The YAML and JSON rendering live in a pure Node helper at
+`platform/plugins/cloudflare/scripts/tunnel-ingress.ts`, unit-tested under
+`scripts/__tests__/tunnel-ingress.test.ts` and invoked from the shell via
+`node --experimental-strip-types`.
+
 The agent does not invoke the script directly during onboarding — the endpoint does. The agent's responsibility is to render the form and relay the endpoint's script output verbatim when `_componentDone` arrives. If an `ACTION REQUIRED` block appears, quote it exactly — the operator needs the specific dashboard instructions it contains.
 
 ### When the script exits non-zero

package/payload/platform/plugins/contacts/PLUGIN.md

@@ -2,15 +2,24 @@
 name: contacts
 description: "CRM contacts plugin. Provides contact-create, contact-lookup, contact-update, contact-delete, contact-list, contact-export, contact-erase, group-create, and group-manage tools for managing the customer contact graph and group conversations."
 tools:
-  - contact-create
-  - contact-lookup
-  - contact-update
-  - contact-delete
-  - contact-list
-  - contact-export
-  - contact-erase
-  - group-create
-  - group-manage
+  - name: contact-create
+    publicAllowlist: false
+  - name: contact-lookup
+    publicAllowlist: false
+  - name: contact-update
+    publicAllowlist: false
+  - name: contact-delete
+    publicAllowlist: false
+  - name: contact-list
+    publicAllowlist: false
+  - name: contact-export
+    publicAllowlist: false
+  - name: contact-erase
+    publicAllowlist: false
+  - name: group-create
+    publicAllowlist: false
+  - name: group-manage
+    publicAllowlist: false
 always: false
 embed: false
 metadata: {"platform":{}}

package/payload/platform/plugins/docs/references/platform.md

@@ -69,6 +69,8 @@ The admin interface is a three-pane layout: a sidebar on the left with your bran
 
 Page titles are brand-aware: the browser tab shows your product name (e.g. `Real Agent` instead of `Maxy`) on every shell — chat, graph, and data — so a non-default brand never leaks the default name in tab strips or browser history.
 
+**Sidebar sessions list — 3s poll contract.** The sidebar Sessions list and the ConversationsModal share one fetch loop (`useAdminSessions`). It hits `/api/admin/claude-sessions` every 3s while the operator is signed in, but the poll path is render-quiet: `setLoading` is not toggled, and the sessions array is only re-committed when the projection `{ sessionId, displayName, lastMessageAt, status }` actually changes. Byte-identical responses do nothing visible to React. Each tick emits exactly one diagnostic line: `[admin-ui] sessions-poll outcome=<unchanged|changed|error> count=<n> cacheKey=<8>` (in the browser DevTools console; mirrored to `~/.maxy/logs/admin-ui-console.log` where the operator forwards them). The explicit operator-initiated paths — first load (`ensureLoaded`) and post-action `refetch()` (after spawn / delete) — still toggle `loading` so consumers can show a spinner. The 3s manager-truth reconciliation is unchanged; only the React-side noise was removed.
+
 The Data search panel ranks results by combining vector similarity with keyword (BM25) matching. Each row shows a one-line score breakdown — `vector 0.NN · bm25 0.NN · combined 0.NN` — so you can tell whether a row surfaced because of meaning, exact-keyword match, or both. A bm25 column of `0.00` across every row means your search term wasn't in the keyword index, so ranking fell back to pure vector similarity (this can produce surprising results — the breakdown tells you when to interpret with caution). Above the result list, a chip row shows the unique types in your current results — click one to filter, click again to clear. Click any row to jump straight to that node's neighbourhood in the Graph; from the artefact pane the graph opens alongside chat, from the standalone Data page it opens in place.
 
 ## Software Update and Cloudflare Setup

package/payload/platform/plugins/docs/references/troubleshooting.md

@@ -530,3 +530,15 @@ sudo systemctl --user start maxy-ui
 **Installer aborted with "identity-match FAILED":** Multi-account installs where no sibling matches `users.json[0].userId` abort loud — the installer refuses to pick one and refuses to sweep. Resolution: inspect `account.json` in each candidate dir (listed in the abort output), identify the correct owner, move the other(s) aside manually, then re-run the installer.
 
 **A chat turn looks broken — assistant bubble never rendered:** Open `claude-agent-stream-<sessionKey>.log` and grep for `[sse-client]`. The five phases (`connected`, `event_received`, `render_complete`, `error`, `close`) tell the story in order. Missing `connected` = the chat fetch never returned 200; missing `event_received` = the server emitted nothing or the client lost the stream before the first frame; missing `render_complete` = the reducer never committed the assistant bubble (persist_ack never arrived). The operator can also click "Report this turn" in the chat menu to append a `[failure-report]` line carrying the same sessionKey + conversationId + clientSnapshot, plus copy the payload to the clipboard.
+
+## Admin DevTools console floods with `onboarding-banner-mount` or unsorted `sessions-poll` lines
+
+**Symptom:** Open DevTools on the admin shell at `/` with `onboardingComplete=false`, leave the page idle for a minute or two, then scroll back through the console. Pre-Task-050 you would see thousands of `[admin-ui] onboarding-banner-mount onboardingComplete=false` lines (one per AdminShell render — roughly 40/min from the 3s sessions poll alone) and no per-tick poll telemetry at all.
+
+**Post-Task-050 invariants (steady-state idle at `/`):**
+
+- `grep -c '\[admin-ui\] onboarding-banner-mount' ~/.maxy/logs/admin-ui-console.log` equals page-load count plus onboarding-flip count, not the render count. Sustained climb at idle ⇒ the banner mount log regressed back into the render body.
+- `grep -c '\[admin-ui\] sessions-poll' ~/.maxy/logs/admin-ui-console.log` grows ~20/min (one per 3s tick) and `outcome=unchanged` dominates `outcome=changed` once the cache is warm. `outcome=changed` every idle tick ⇒ the `useAdminSessions` projection (`sessionId / displayName / lastMessageAt / status`) is missing a field that is churning on every fetch, or a downstream component is mutating the response in place before comparison.
+- `outcome=error` lines name a real fetch failure — they do NOT update sidebar state and do NOT set the `error` field (the operator-initiated `refetch()` still owns that channel).
+
+**Why this matters.** The render-body log was misleading: it read as "the admin agent is checking onboarding state continuously", when in fact `onboardingComplete` had not changed at all — it was just the sessions poll re-rendering AdminShell twice per tick. With the structured poll line in place, the console is a faithful record of what the page actually did each tick.

package/payload/platform/plugins/email/PLUGIN.md

@@ -2,15 +2,24 @@
 name: email
 description: "Email — dedicated email account. Retrieval: email-graph-query for stored email history, recall, and search ('what emails are in memory?', 'emails about X', 'what did Y send?'); email-read / email-search for live IMAP inbox. Sending: email-send (new), email-reply (threaded). Config: email-setup, email-status, email-auto-respond-config, email-otp-extract."
 tools:
-  - email-setup
-  - email-read
-  - email-send
-  - email-reply
-  - email-search
-  - email-graph-query
-  - email-otp-extract
-  - email-status
-  - email-auto-respond-config
+  - name: email-setup
+    publicAllowlist: false
+  - name: email-read
+    publicAllowlist: false
+  - name: email-send
+    publicAllowlist: false
+  - name: email-reply
+    publicAllowlist: false
+  - name: email-search
+    publicAllowlist: false
+  - name: email-graph-query
+    publicAllowlist: false
+  - name: email-otp-extract
+    publicAllowlist: false
+  - name: email-status
+    publicAllowlist: false
+  - name: email-auto-respond-config
+    publicAllowlist: false
 always: false
 embed: ["admin"]
 metadata: {"platform":{}}

package/payload/platform/plugins/email/mcp/dist/lib/claude-bridge.d.ts

@@ -0,0 +1,17 @@
+export interface DispatchInput {
+    accountId: string;
+    senderEmail: string;
+    text: string;
+    timeoutMs: number;
+}
+export type DispatchResult = {
+    turnText: string;
+} | {
+    error: string;
+};
+/** Send an email body to the per-sender claude PTY session, await the
+ *  next assistant end_turn, return the response text. Reuses the session
+ *  across cron invocations via the manager's senderId index. */
+export declare function dispatchEmailToClaude(input: DispatchInput): Promise<DispatchResult>;
+export declare function emailTurnTimeoutMs(): number;
+//# sourceMappingURL=claude-bridge.d.ts.map

package/payload/platform/plugins/email/mcp/dist/lib/claude-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-bridge.d.ts","sourceRoot":"","sources":["../../src/lib/claude-bridge.ts"],"names":[],"mappings":"AAmDA,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,cAAc,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AA8HtE;;gEAEgE;AAChE,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAqCzF;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C"}

package/payload/platform/plugins/email/mcp/dist/lib/claude-bridge.js

@@ -0,0 +1,185 @@
+// Email → claude PTY bridge.
+//
+// Task 004 Track B. The email-auto-respond cron script dispatches each
+// inbound email through this module: find-or-spawn a per-sender PTY
+// session via the loopback claude-session-manager, write the email text
+// to the session's PTY stdin, follow claude's per-session JSONL until
+// `stop_reason: "end_turn"`, return the assistant turn text. The cron
+// script then SMTPs the response.
+//
+// This module lives inside the email plugin's MCP source (not under
+// platform/ui/app/lib/) because the cron script is a separate Node
+// process — it cannot share in-process state with the platform/ui
+// channel-pty-bridge instance. Each cron invocation queries the manager
+// for the existing session via `GET /list?senderId=...` rather than
+// caching it in memory.
+//
+// Doctrine references:
+// - Manager HTTP contract: ../../../../services/claude-session-manager/src/http-server.ts
+// - Shared bridge core (in-process, used by whatsapp / webchat):
+//   ../../../../../ui/app/lib/channel-pty-bridge/
+// - Task 004 brief: maxy-code/.tasks/004-channel-adaptors-rest.md
+const TAG = "[email-adaptor]";
+function managerBase() {
+    const port = Number(process.env.CLAUDE_SESSION_MANAGER_PORT ?? "19400");
+    return `http://127.0.0.1:${port}`;
+}
+// ─── Manager HTTP ─────────────────────────────────────────────────────
+async function findExistingSession(senderId) {
+    try {
+        const res = await fetch(`${managerBase()}/list?senderId=${encodeURIComponent(senderId)}`);
+        if (!res.ok)
+            return null;
+        const sessions = (await res.json());
+        const alive = sessions.find((s) => s.status === "alive" && s.channel === "email");
+        return alive?.sessionId ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+async function spawnSession(opts) {
+    try {
+        const res = await fetch(`${managerBase()}/spawn`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({
+                senderId: opts.senderId,
+                role: "public",
+                channel: "email",
+                accountId: opts.accountId,
+            }),
+        });
+        if (!res.ok) {
+            console.error(`${TAG} reject reason=spawn-failed senderId=${opts.senderId} status=${res.status}`);
+            return null;
+        }
+        const body = (await res.json());
+        return body.sessionId;
+    }
+    catch (err) {
+        const m = err instanceof Error ? err.message : String(err);
+        console.error(`${TAG} reject reason=spawn-unreachable senderId=${opts.senderId} message=${m}`);
+        return null;
+    }
+}
+async function writeInput(sessionId, text) {
+    try {
+        const res = await fetch(`${managerBase()}/${sessionId}/input`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({ text }),
+        });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
+}
+// ─── JSONL follower (one-shot, waits for next end_turn) ──────────────
+async function awaitNextTurn(sessionId, timeoutMs) {
+    const abort = new AbortController();
+    const timeoutHandle = setTimeout(() => abort.abort(), timeoutMs);
+    try {
+        const res = await fetch(`${managerBase()}/${sessionId}/log?follow=1`, { signal: abort.signal });
+        if (!res.ok || !res.body) {
+            return { error: `follow-status-${res.status}` };
+        }
+        const reader = res.body.getReader();
+        const decoder = new TextDecoder("utf8");
+        let buffered = "";
+        let turnText = "";
+        while (!abort.signal.aborted) {
+            const { value, done } = await reader.read();
+            if (done)
+                break;
+            buffered += decoder.decode(value, { stream: true });
+            let nl = buffered.indexOf("\n");
+            while (nl !== -1) {
+                const line = buffered.slice(0, nl);
+                buffered = buffered.slice(nl + 1);
+                nl = buffered.indexOf("\n");
+                if (!line)
+                    continue;
+                let event;
+                try {
+                    event = JSON.parse(line);
+                }
+                catch {
+                    continue;
+                }
+                if (event.type === "user") {
+                    turnText = "";
+                    continue;
+                }
+                if (event.type !== "assistant")
+                    continue;
+                const msg = event.message;
+                if (!msg)
+                    continue;
+                if (Array.isArray(msg.content)) {
+                    for (const block of msg.content) {
+                        if (block?.type === "text" && typeof block.text === "string") {
+                            turnText += block.text;
+                        }
+                    }
+                }
+                if (msg.stop_reason === "end_turn") {
+                    if (turnText.trim()) {
+                        // Abort the stream so the manager closes the follower
+                        // immediately; we have our turn.
+                        abort.abort();
+                        return { turnText };
+                    }
+                    turnText = "";
+                }
+            }
+        }
+        return { error: abort.signal.aborted ? "timeout" : "stream-closed" };
+    }
+    catch (err) {
+        if (abort.signal.aborted)
+            return { error: "timeout" };
+        return { error: err instanceof Error ? err.message : String(err) };
+    }
+    finally {
+        clearTimeout(timeoutHandle);
+    }
+}
+// ─── Public dispatch ─────────────────────────────────────────────────
+/** Send an email body to the per-sender claude PTY session, await the
+ *  next assistant end_turn, return the response text. Reuses the session
+ *  across cron invocations via the manager's senderId index. */
+export async function dispatchEmailToClaude(input) {
+    if (!input.text.trim())
+        return { error: "empty-text" };
+    const bytes = Buffer.byteLength(input.text, "utf8");
+    console.error(`${TAG} inbound from=${input.senderEmail} bytes=${bytes} accountId=${input.accountId}`);
+    let sessionId = await findExistingSession(input.senderEmail);
+    let action = "reuse";
+    if (!sessionId) {
+        action = "spawn";
+        sessionId = await spawnSession({ senderId: input.senderEmail, accountId: input.accountId });
+        if (!sessionId)
+            return { error: "spawn-failed" };
+    }
+    console.error(`${TAG} session-resolved senderId=${input.senderEmail} action=${action} sessionId=${sessionId.slice(0, 8)}`);
+    const writeOk = await writeInput(sessionId, input.text);
+    if (!writeOk) {
+        console.error(`${TAG} reject reason=input-failed senderId=${input.senderEmail} sessionId=${sessionId.slice(0, 8)}`);
+        return { error: "input-failed" };
+    }
+    const startedAt = Date.now();
+    const result = await awaitNextTurn(sessionId, input.timeoutMs);
+    const idleMs = Date.now() - startedAt;
+    if ("error" in result) {
+        console.error(`${TAG} reject reason=turn-${result.error} senderId=${input.senderEmail} sessionId=${sessionId.slice(0, 8)} idle-ms=${idleMs}`);
+        return result;
+    }
+    console.error(`${TAG} outbound to=${input.senderEmail} bytes=${Buffer.byteLength(result.turnText, "utf8")} sessionId=${sessionId.slice(0, 8)} idle-ms=${idleMs}`);
+    return result;
+}
+export function emailTurnTimeoutMs() {
+    return Number(process.env.EMAIL_POLL_TURN_TIMEOUT_MS ?? String(10 * 60_000));
+}
+//# sourceMappingURL=claude-bridge.js.map

package/payload/platform/plugins/email/mcp/dist/lib/claude-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-bridge.js","sourceRoot":"","sources":["../../src/lib/claude-bridge.ts"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,EAAE;AACF,uEAAuE;AACvE,oEAAoE;AACpE,wEAAwE;AACxE,sEAAsE;AACtE,sEAAsE;AACtE,kCAAkC;AAClC,EAAE;AACF,oEAAoE;AACpE,mEAAmE;AACnE,kEAAkE;AAClE,wEAAwE;AACxE,oEAAoE;AACpE,wBAAwB;AACxB,EAAE;AACF,uBAAuB;AACvB,0FAA0F;AAC1F,iEAAiE;AACjE,kDAAkD;AAClD,kEAAkE;AAElE,MAAM,GAAG,GAAG,iBAAiB,CAAC;AAE9B,SAAS,WAAW;IAClB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,OAAO,CAAC,CAAC;IACxE,OAAO,oBAAoB,IAAI,EAAE,CAAC;AACpC,CAAC;AAiCD,yEAAyE;AAEzE,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,EAAE,kBAAkB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqB,CAAC;QACxD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QAClF,OAAO,KAAK,EAAE,SAAS,IAAI,IAAI,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAG3B;IACC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,EAAE,QAAQ,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,OAAO;gBAChB,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,wCAAwC,IAAI,CAAC,QAAQ,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAClG,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;QACzD,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3D,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,6CAA6C,IAAI,CAAC,QAAQ,YAAY,CAAC,EAAE,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAE,IAAY;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,EAAE,IAAI,SAAS,QAAQ,EAAE;YAC7D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;SAC/B,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,wEAAwE;AAExE,KAAK,UAAU,aAAa,CAC1B,SAAiB,EACjB,SAAiB;IAEjB,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,EAAE,IAAI,SAAS,eAAe,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,iBAAiB,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QAClD,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,IAAI,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAClC,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC5B,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,KAAiB,CAAC;gBACtB,IAAI,CAAC;oBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;gBACzC,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC1B,QAAQ,GAAG,EAAE,CAAC;oBACd,SAAS;gBACX,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;oBAAE,SAAS;gBACzC,MAAM,GAAG,GAAI,KAA6B,CAAC,OAAO,CAAC;gBACnD,IAAI,CAAC,GAAG;oBAAE,SAAS;gBACnB,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC/B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;wBAChC,IAAI,KAAK,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;4BAC7D,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC;wBACzB,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,IAAI,GAAG,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;oBACnC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;wBACpB,sDAAsD;wBACtD,iCAAiC;wBACjC,KAAK,CAAC,KAAK,EAAE,CAAC;wBACd,OAAO,EAAE,QAAQ,EAAE,CAAC;oBACtB,CAAC;oBACD,QAAQ,GAAG,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACtD,OAAO,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,aAAa,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,wEAAwE;AAExE;;gEAEgE;AAChE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAoB;IAC9D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpD,OAAO,CAAC,KAAK,CACX,GAAG,GAAG,iBAAiB,KAAK,CAAC,WAAW,UAAU,KAAK,cAAc,KAAK,CAAC,SAAS,EAAE,CACvF,CAAC;IAEF,IAAI,SAAS,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7D,IAAI,MAAM,GAAsB,OAAO,CAAC;IACxC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,GAAG,OAAO,CAAC;QACjB,SAAS,GAAG,MAAM,YAAY,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,CAAC,KAAK,CACX,GAAG,GAAG,8BAA8B,KAAK,CAAC,WAAW,WAAW,MAAM,cAAc,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAC5G,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,wCAAwC,KAAK,CAAC,WAAW,cAAc,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACpH,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACtC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CACX,GAAG,GAAG,uBAAuB,MAAM,CAAC,KAAK,aAAa,KAAK,CAAC,WAAW,cAAc,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE,CAC/H,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,CAAC,KAAK,CACX,GAAG,GAAG,gBAAgB,KAAK,CAAC,WAAW,UAAU,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,cAAc,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE,CACnJ,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;AAC/E,CAAC"}