@rubytech/create-realagent-code 0.1.604 → 0.1.606

package/payload/platform/plugins/connector/mcp/dist/lib/store.js

@@ -1,5 +1,35 @@
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
+const QUEUE_KINDS = ["operational", "accounting"];
+/**
+ * Validate a queue descriptor arriving off tool arguments.
+ *
+ * Returns `{}` for an absent queue, `{ queue }` for a valid one, and
+ * `{ refusal }` for anything else. A refusal string rather than a throw,
+ * because the tool answers a refusal as text and never as an exception.
+ */
+export function queueFromArgs(raw) {
+    if (raw === undefined || raw === null)
+        return {};
+    const q = raw;
+    if (!QUEUE_KINDS.includes(q.kind)) {
+        return { refusal: "queue.kind must be operational or accounting." };
+    }
+    for (const field of ["path", "changedSinceParam", "itemsField"]) {
+        const v = q[field];
+        if (typeof v !== "string" || v.trim() === "") {
+            return { refusal: `queue.${field} must not be blank.` };
+        }
+    }
+    return {
+        queue: {
+            kind: q.kind,
+            path: q.path,
+            changedSinceParam: q.changedSinceParam,
+            itemsField: q.itemsField,
+        },
+    };
+}
 /** Per-account secrets dir — the same location joblogic/quickbooks/cloudflare use. */
 function secretsDir(platformRoot, accountId) {
     return join(resolve(platformRoot, "..", "data/accounts"), accountId, "secrets");
@@ -58,6 +88,9 @@ export function listConnectors(platformRoot, accountId) {
     return Object.entries(readRegistry(platformRoot, accountId)).map(([name, r]) => ({
         name,
         baseUrl: r.baseUrl,
+        // Task 2688 — the descriptor carries no secret, and the scheduling gate
+        // reads it here rather than opening the registry file itself.
+        ...(r.queue ? { queue: r.queue } : {}),
     }));
 }
 //# sourceMappingURL=store.js.map

package/payload/platform/plugins/connector/mcp/dist/lib/store.js.map

@@ -1 +1 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/lib/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAenD,sFAAsF;AACtF,SAAS,UAAU,CAAC,YAAoB,EAAE,SAAiB;IACzD,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,eAAe,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAClF,CAAC;AACD,MAAM,YAAY,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACzF,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;AAE/F,wFAAwF;AACxF,SAAS,QAAQ,CAAI,IAAY;IAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAM,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,IAAY,EAAE,KAAc;IAC7C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,SAAiB;IAClE,OAAO,QAAQ,CAAW,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,YAAoB,EAAE,SAAiB;IACjE,OAAO,QAAQ,CAAU,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,YAAoB,EACpB,SAAiB,EACjB,IAAY,EACZ,GAAoB,EACpB,MAAc;IAEd,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAClD,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;IAChB,SAAS,CAAC,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACjD,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;IACnB,SAAS,CAAC,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CAAC,YAAoB,EAAE,SAAiB,EAAE,IAAY;IACvF,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC;IACvC,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,SAAS,CAAC,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,SAAS,CAAC,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,YAAoB,EACpB,SAAiB,EACjB,IAAY;IAEZ,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,YAAoB,EAAE,SAAiB;IACpE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI;QACJ,OAAO,EAAE,CAAC,CAAC,OAAO;KACnB,CAAC,CAAC,CAAC;AACN,CAAC"}
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/lib/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqCnD,MAAM,WAAW,GAAkC,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AAEjF;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAA0B,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;IACtE,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,mBAAmB,EAAE,YAAY,CAAU,EAAE,CAAC;QACzE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC7C,OAAO,EAAE,OAAO,EAAE,SAAS,KAAK,qBAAqB,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK,EAAE;YACL,IAAI,EAAE,CAAC,CAAC,IAA0B;YAClC,IAAI,EAAE,CAAC,CAAC,IAAc;YACtB,iBAAiB,EAAE,CAAC,CAAC,iBAA2B;YAChD,UAAU,EAAE,CAAC,CAAC,UAAoB;SACnC;KACF,CAAC;AACJ,CAAC;AAKD,sFAAsF;AACtF,SAAS,UAAU,CAAC,YAAoB,EAAE,SAAiB;IACzD,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,eAAe,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAClF,CAAC;AACD,MAAM,YAAY,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACzF,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;AAE/F,wFAAwF;AACxF,SAAS,QAAQ,CAAI,IAAY;IAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAM,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,IAAY,EAAE,KAAc;IAC7C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,SAAiB;IAClE,OAAO,QAAQ,CAAW,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,YAAoB,EAAE,SAAiB;IACjE,OAAO,QAAQ,CAAU,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,YAAoB,EACpB,SAAiB,EACjB,IAAY,EACZ,GAAoB,EACpB,MAAc;IAEd,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAClD,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;IAChB,SAAS,CAAC,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACjD,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;IACnB,SAAS,CAAC,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CAAC,YAAoB,EAAE,SAAiB,EAAE,IAAY;IACvF,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC;IACvC,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,SAAS,CAAC,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,SAAS,CAAC,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,YAAoB,EACpB,SAAiB,EACjB,IAAY;IAEZ,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,YAAoB,EACpB,SAAiB;IAEjB,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI;QACJ,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,wEAAwE;QACxE,8DAA8D;QAC9D,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvC,CAAC,CAAC,CAAC;AACN,CAAC"}

package/payload/platform/plugins/connector/mcp/package.json

@@ -6,7 +6,8 @@
   "main": "dist/index.js",
   "scripts": {
     "build": "tsc",
-    "start": "node dist/index.js"
+    "start": "node dist/index.js",
+    "test": "vitest run"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.12.1",
@@ -15,6 +16,7 @@
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
-    "typescript": "^5.7.0"
+    "typescript": "^5.7.0",
+    "vitest": "^4.1.2"
   }
 }

package/payload/platform/plugins/connector/mcp/vitest.config.ts

@@ -0,0 +1,8 @@
+import { defineConfig } from "vitest/config";
+
+export default defineConfig({
+  test: {
+    environment: "node",
+    include: ["src/**/__tests__/**/*.test.ts"],
+  },
+});

package/payload/platform/plugins/docs/references/admin-ui.md

@@ -37,6 +37,19 @@ which fails `prebuild` if any emoji codepoint appears in a `.ts`/`.tsx` file
 under `app/` (tests excluded). Inline an icon at the surrounding text size and
 colour (`size={14}` matches body text; Lucide inherits `currentColor`).
 
+**A long message shows its first 8 lines.** On `/chat`, the WhatsApp and
+Telegram readers and the public visitor chat, a message body taller than 8 lines
+is cut at 8 and carries a "Show more…" control that reveals the rest; "Show
+less" puts it back. The control appears only when there is genuinely more to
+see, so a short message looks exactly as it did before. Expanding one message
+expands only that message, and scrolling back through older messages does not
+carry an expansion onto a different one. Two things are never cut: an error the
+agent reports, and the map on a shared location. The reader's search also opens
+any message whose match would otherwise sit in the hidden part, so a search
+never finds something it then hides. See
+[`.docs/message-body-clamp.md`](../../../.docs/message-body-clamp.md) for the
+render sites and the census that watches it.
+
 ## Admin Hono routes
 
 Every admin sub-app is mounted by
@@ -294,9 +307,9 @@ one, over the same automation set the routes list. The roster seed's own
 `descNull` counter is its narrow twin, scoped to seeded rows and so blind to
 exactly the operator-created ones most likely to carry no caption.
 
-**The shipped roster.** Every account starts with fourteen routines —
+**The shipped roster.** Every account starts with thirteen routines —
 `start-of-day`, `inbound-check`, `telegram-inbound-check`, `end-of-day`,
-`appointment-reminder`, `commitment-chase`, `calendar-reconcile`,
+`commitment-chase`, `calendar-reconcile`,
 `contact-reconcile`, `crm-reconcile`, `finance-reconcile`, `weekly-digest`,
 `channel-link-check`, `graph-health`, `filesystem-health`, in `/routines`
 display order. `ROUTINE_ROSTER_KEYS.length`

package/payload/platform/plugins/docs/references/platform.md

@@ -198,4 +198,6 @@ If you suspect background processes are piling up, run `grep '\[reaper\]' ~/.{br
 
 Every install seeds `permissions.allow:[]` plus `defaultMode:"bypassPermissions"` into both the brand-scoped settings file (`~/.{brand}/.claude/settings.json`) and every account-scoped one (`<install>/data/accounts/<id>/.claude/settings.json`). `bypassPermissions` alone stops Claude Code from sending tool calls to its remote auto-classifier (it skips all permission checks), which would otherwise surface a permission prompt in the chat that an unattended session never answers. The `allow` array stays empty and **must never contain `"*"`**: Claude Code ≥ 2.1.167 rejects `"*"` as an allow token and renders a blocking Settings Warning that, under `--remote-control`, stops every `/rc-spawn` from binding. What each subagent is allowed to use is still controlled by the `tools:` line in its agent file, not by a top-level allowlist. To verify after an install: `cat ~/.{brand}/.claude/settings.json | jq '.permissions'` (expect `allow: []`). To repair an install seeded before this change: `bash <install>/platform/scripts/backfill-bypass-permissions.sh ~/.{brand}`.
 
+**Workspace trust.** Separate from permissions, and its own way to stop a spawn dead. Claude Code refuses to start in a directory it does not trust, and it scopes that trust to the **git repository root** of the working directory rather than to any trusted ancestor. Every account directory is its own repository (`provision-account-dir.sh` runs `git init` there so Claude Code finds the account's own `.claude/` hook set), so trusting the home directory does not reach them. Every install therefore seeds `projects[<dir>].hasTrustDialogAccepted: true` into `~/.{brand}/.claude/.claude.json` for the home directory **and for every directory under `<install>/data/accounts`**, preserving all other fields the CLI wrote. Without it the PTY-spawned session halts on "Quick safety check: Is this a project you created or one you trust?" and never binds, which surfaces as a session that starts and answers nothing, with no error in the interface. The seeding runs twice per install and both passes matter: the `deploy` pass trusts the accounts an upgrade already has, and the `post-account` pass, which runs straight after account setup, trusts the account a brand-new install has only just created. The install line is `[install] op=claude-trust-seed phase=<deploy|post-account> file=… accounts=<N> seeded=<n> alreadyTrusted=<n> stale=<n> error=<none|msg>`; `seeded + alreadyTrusted` equals `accounts`, and a re-run reads `seeded=0`. Because an account added *after* an install has an untrusted repository root that no event announces, the session manager reconciles the two every hour and logs `[claude-trust-census] accounts=<N> trusted=<n> untrusted=<n> untrustedDirs=<csv|none> homeTrusted=<bool> onboarded=<bool>` — a non-zero `untrusted` names the directories whose next session will hang. To verify after an install: `node -e 'const j=require(process.env.HOME+"/.{brand}/.claude/.claude.json");const p=j.projects||{};for(const k of Object.keys(p))if(k.includes("/data/accounts/"))console.log(k,p[k].hasTrustDialogAccepted)'` (expect `true` for every account directory that exists).
+
 **`autoMode` trust block.** The same brand-scoped writer ([`permissions-seed.ts`](../../../packages/create-maxy-code/src/permissions-seed.ts), `AUTO_MODE_BLOCK`) also seeds the harness `autoMode` block. `bypassPermissions` skips the auto-mode classifier entirely, so the block is **belt-and-suspenders**: it only matters when a session is toggled into `auto` mode, where the classifier otherwise soft-denies the doctrine-sanctioned Cloudflare scoped-token mint ("permission/credential escalation") because the install's own Cloudflare infra is not in the classifier's default trusted environment. The block keeps `"$defaults"` first in `environment` and `allow` (so the built-in Data-Exfiltration / force-push / prod-deploy guards stay intact) and adds prose declaring `api.cloudflare.com` the install's own provider endpoint plus an allow for minting/persisting narrow per-scope tokens. It is seeded **only** into the brand/user settings (`~/.{brand}/.claude/settings.json`) — the classifier never reads `autoMode` from the shared project (account-scoped) settings, so `setup-account.sh` does not carry it. An auto-mode agent cannot seed this itself (the default `hard_deny` "Auto-Mode Bypass" blocks any agent editing `.claude/settings*.json`); installer seed is the only path. To verify after an install: `CLAUDE_CONFIG_DIR=~/.{brand}/.claude claude auto-mode config | jq '.environment, .allow'` (expect the Cloudflare entries, `$defaults` expanded) and `jq '.autoMode' ~/.{brand}/.claude/settings.json`.

package/payload/platform/plugins/email/PLUGIN.md

@@ -156,6 +156,10 @@ There are two independent paths into the graph, both writing `:ConversationArchi
 
   A mailbox with no cursor backfills 7 days on its first cycle, on both arms. Mail older than that window is never sampled. The Outlook arm is not yet proven on a live install.
 
+  **Retention.** The same service sweeps once per cycle, after both arms. It deletes a `:Section {source:'email'}` only when every routine on that account holding a `graph-unflagged` check has flagged it processed and it is older than `EMAIL_RETENTION_DAYS` whole days, measured from ingest. Two rules keep the sweep safe rather than destructive: an unset, zero, negative or unparseable `EMAIL_RETENTION_DAYS` prunes nothing, and an account where NO routine holds such a check prunes nothing, because an empty interested set means nobody has consented to the data being processed rather than everybody. A routine counts whether it is enabled or suspended, so enabling a parked routine never finds its backlog deleted. `:ConversationArchive` nodes are never pruned: they are merged per correspondent set and a reply bumps them, so they never age past a cutoff. A period above 36500 days is refused like any other unreadable value, because a larger one overflows the cutoff date. One line per account per cycle, `op=email-retention account=<id> interested=<k> pruned=<n> kept-outstanding=<m> repaired=<r> ageDays=<N|unset>`, with `capped=true` when the candidate batch hit its 5000-row ceiling. `pruned=0` is healthy; `interested>0` with `kept-outstanding` rising across cycles is a routine that is not processing its backlog, and `pruned>0 repaired=0` on a span taken from the middle of a thread is a `:NEXT` chain left broken. No shipped routine carries a `graph-unflagged` check yet, so every install currently logs `interested=0` and deletes nothing.
+
+  The chain repair and the delete run in ONE write transaction. Between them the surviving predecessor holds both its old edge to the doomed section and its new edge to the target, so a failure landing between the two would commit that fork, and a routine added before the next cycle would make those sections outstanding again with nothing left to repair them.
+
 - **Operator-initiated ingest — human-in-the-loop.** When the operator says "check my emails", `email-fetch` lists new messages and the operator approves each one; only the approved subset is written via `email-ingest`, which also fetches and archives attachment bytes. See `skills/email-ingest/SKILL.md` for the conversation flow and `skills/email-composition/SKILL.md` for drafting replies once a thread is stored.
 
 The two watermarks are independent by design, so a message may be seen by both; `dispatch` uses MERGE, so a double write is idempotent and never duplicates a node.

package/payload/platform/plugins/email/mcp/dist/sampler/__tests__/retention.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=retention.test.d.ts.map

package/payload/platform/plugins/email/mcp/dist/sampler/__tests__/retention.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.test.d.ts","sourceRoot":"","sources":["../../../src/sampler/__tests__/retention.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/email/mcp/dist/sampler/__tests__/retention.test.js

@@ -0,0 +1,233 @@
+import { describe, it, expect, vi } from "vitest";
+import { resolveRetentionDays, cutoffIso, interestedSets, partitionAged, runRetention, sweepAccount, RETENTION_CANDIDATE_CAP, RETENTION_MAX_DAYS, } from "../retention.js";
+describe("resolveRetentionDays", () => {
+    it("returns null when unset", () => {
+        expect(resolveRetentionDays({})).toBeNull();
+    });
+    it("returns null for zero, negative, fractional and unparseable values", () => {
+        for (const v of ["0", "-1", "30.5", "abc", "", " "]) {
+            expect(resolveRetentionDays({ EMAIL_RETENTION_DAYS: v })).toBeNull();
+        }
+    });
+    it("returns the positive integer day count", () => {
+        expect(resolveRetentionDays({ EMAIL_RETENTION_DAYS: "30" })).toBe(30);
+    });
+    it("refuses a period large enough to overflow the cutoff date", () => {
+        expect(resolveRetentionDays({ EMAIL_RETENTION_DAYS: "100000000000" })).toBeNull();
+        expect(resolveRetentionDays({ EMAIL_RETENTION_DAYS: String(RETENTION_MAX_DAYS + 1) })).toBeNull();
+        expect(resolveRetentionDays({ EMAIL_RETENTION_DAYS: String(RETENTION_MAX_DAYS) })).toBe(RETENTION_MAX_DAYS);
+    });
+    it("keeps every accepted period inside the range cutoffIso can express", () => {
+        expect(() => cutoffIso(new Date("2026-08-13T09:00:00.000Z"), RETENTION_MAX_DAYS)).not.toThrow();
+    });
+});
+describe("cutoffIso", () => {
+    it("subtracts whole days from the clock in the ISO shape createdAt uses", () => {
+        expect(cutoffIso(new Date("2026-08-13T09:00:00.000Z"), 30)).toBe("2026-07-14T09:00:00.000Z");
+    });
+});
+describe("interestedSets", () => {
+    const args = (checks) => JSON.stringify({ eventId: "ignored", checks });
+    it("splits routines by the label their graph-unflagged check names", () => {
+        const rows = [
+            { eventId: "ev-sec", gateArgs: args([{ type: "graph-unflagged", label: "Section" }]) },
+            { eventId: "ev-arc", gateArgs: args([{ type: "graph-unflagged", label: "ConversationArchive" }]) },
+        ];
+        expect(interestedSets(rows)).toEqual({ section: ["ev-sec"], archive: ["ev-arc"] });
+    });
+    it("puts a routine holding both checks in both sets", () => {
+        const rows = [
+            {
+                eventId: "ev-both",
+                gateArgs: args([
+                    { type: "graph-unflagged", label: "Section" },
+                    { type: "graph-unflagged", label: "ConversationArchive" },
+                ]),
+            },
+        ];
+        expect(interestedSets(rows)).toEqual({ section: ["ev-both"], archive: ["ev-both"] });
+    });
+    it("ignores checks of other types and labels outside the accepted pair", () => {
+        const rows = [
+            { eventId: "ev-mail", gateArgs: args([{ type: "mail", mailbox: "a@b.c" }]) },
+            { eventId: "ev-odd", gateArgs: args([{ type: "graph-unflagged", label: "Person" }]) },
+        ];
+        expect(interestedSets(rows)).toEqual({ section: [], archive: [] });
+    });
+    it("contributes nothing and does not throw on absent or malformed gateArgs", () => {
+        const rows = [
+            { eventId: "ev-null", gateArgs: null },
+            { eventId: "ev-bad", gateArgs: "{not json" },
+            { eventId: "ev-nochecks", gateArgs: JSON.stringify({ eventId: "x" }) },
+            { eventId: "ev-checksnotarray", gateArgs: JSON.stringify({ checks: "Section" }) },
+        ];
+        expect(interestedSets(rows)).toEqual({ section: [], archive: [] });
+    });
+    it("names a routine once per set even when it repeats the same check", () => {
+        const rows = [
+            {
+                eventId: "ev-dup",
+                gateArgs: args([
+                    { type: "graph-unflagged", label: "Section" },
+                    { type: "graph-unflagged", label: "Section" },
+                ]),
+            },
+        ];
+        expect(interestedSets(rows)).toEqual({ section: ["ev-dup"], archive: [] });
+    });
+});
+describe("partitionAged", () => {
+    const aged = (over = {}) => ({
+        id: "s1",
+        processedBy: [],
+        parentProcessedBy: [],
+        ...over,
+    });
+    it("prunes a section every interested routine has flagged", () => {
+        const rows = [aged({ processedBy: ["ev-a", "ev-b"], parentProcessedBy: ["ev-c"] })];
+        expect(partitionAged(rows, { section: ["ev-a", "ev-b"], archive: ["ev-c"] })).toEqual({
+            prunable: ["s1"],
+            keptOutstanding: 0,
+        });
+    });
+    it("keeps a section with one section-gated routine still outstanding", () => {
+        const rows = [aged({ processedBy: ["ev-a"] })];
+        expect(partitionAged(rows, { section: ["ev-a", "ev-b"], archive: [] })).toEqual({
+            prunable: [],
+            keptOutstanding: 1,
+        });
+    });
+    it("keeps a fully section-flagged node whose parent archive is outstanding", () => {
+        const rows = [aged({ processedBy: ["ev-a"], parentProcessedBy: [] })];
+        expect(partitionAged(rows, { section: ["ev-a"], archive: ["ev-c"] })).toEqual({
+            prunable: [],
+            keptOutstanding: 1,
+        });
+    });
+    it("keeps a section that has no parent archive", () => {
+        const rows = [aged({ processedBy: ["ev-a"], parentProcessedBy: null })];
+        expect(partitionAged(rows, { section: ["ev-a"], archive: [] })).toEqual({
+            prunable: [],
+            keptOutstanding: 1,
+        });
+    });
+    it("ignores a flag from a routine that is not interested", () => {
+        const rows = [aged({ processedBy: ["ev-a", "ev-stale"] })];
+        expect(partitionAged(rows, { section: ["ev-a"], archive: [] })).toEqual({
+            prunable: ["s1"],
+            keptOutstanding: 0,
+        });
+    });
+});
+const NOW = new Date("2026-08-13T09:00:00.000Z");
+function deps(over = {}) {
+    return {
+        listEmailAccountIds: vi.fn(async () => ["acc-1"]),
+        listGateArgs: vi.fn(async () => []),
+        listAgedSections: vi.fn(async () => []),
+        pruneSections: vi.fn(async () => ({ repaired: 0, pruned: 0 })),
+        now: () => NOW,
+        log: vi.fn(),
+        ...over,
+    };
+}
+const lines = (d) => d.log.mock.calls.map((c) => c[0]);
+const sectionGate = (eventId) => ({
+    eventId,
+    gateArgs: JSON.stringify({ checks: [{ type: "graph-unflagged", label: "Section" }] }),
+});
+describe("runRetention", () => {
+    it("prunes nothing and names the period unset when EMAIL_RETENTION_DAYS is absent", async () => {
+        const d = deps();
+        await runRetention(d, {});
+        expect(d.listEmailAccountIds).not.toHaveBeenCalled();
+        expect(lines(d)).toEqual([
+            "op=email-retention account=- interested=0 pruned=0 kept-outstanding=0 repaired=0 ageDays=unset",
+        ]);
+    });
+    it("sweeps every account holding email sections when a period is set", async () => {
+        const d = deps({ listEmailAccountIds: vi.fn(async () => ["acc-1", "acc-2"]) });
+        await runRetention(d, { EMAIL_RETENTION_DAYS: "30" });
+        expect(d.listGateArgs).toHaveBeenCalledTimes(2);
+    });
+    it("reports one account's failure and continues to the next", async () => {
+        const d = deps({
+            listEmailAccountIds: vi.fn(async () => ["acc-1", "acc-2"]),
+            listGateArgs: vi.fn(async (accountId) => {
+                if (accountId === "acc-1")
+                    throw new Error("neo4j down");
+                return [];
+            }),
+        });
+        await runRetention(d, { EMAIL_RETENTION_DAYS: "30" });
+        expect(lines(d)[0]).toBe("op=email-retention-error account=acc-1 detail=neo4j down");
+        expect(lines(d)[1]).toBe("op=email-retention account=acc-2 interested=0 pruned=0 kept-outstanding=0 repaired=0 ageDays=30");
+    });
+});
+describe("sweepAccount", () => {
+    it("deletes nothing and reports interested=0 when no routine holds the check", async () => {
+        const d = deps({ listGateArgs: vi.fn(async () => [{ eventId: "ev-1", gateArgs: null }]) });
+        await sweepAccount(d, "acc-1", 30);
+        expect(d.listAgedSections).not.toHaveBeenCalled();
+        expect(d.pruneSections).not.toHaveBeenCalled();
+        expect(lines(d)).toEqual([
+            "op=email-retention account=acc-1 interested=0 pruned=0 kept-outstanding=0 repaired=0 ageDays=30",
+        ]);
+    });
+    it("prunes only the flagged section and reports every count", async () => {
+        const d = deps({
+            listGateArgs: vi.fn(async () => [sectionGate("ev-a")]),
+            listAgedSections: vi.fn(async () => [
+                { id: "s1", processedBy: ["ev-a"], parentProcessedBy: [] },
+                { id: "s2", processedBy: [], parentProcessedBy: [] },
+            ]),
+            pruneSections: vi.fn(async () => ({ repaired: 2, pruned: 1 })),
+        });
+        await sweepAccount(d, "acc-1", 30);
+        expect(d.listAgedSections.mock.calls[0]).toEqual([
+            "acc-1",
+            "2026-07-14T09:00:00.000Z",
+            RETENTION_CANDIDATE_CAP,
+        ]);
+        expect(d.pruneSections).toHaveBeenCalledWith("acc-1", ["s1"]);
+        expect(lines(d)).toEqual([
+            "op=email-retention account=acc-1 interested=1 pruned=1 kept-outstanding=1 repaired=2 ageDays=30",
+        ]);
+    });
+    it("reports repaired=0 beside a non-zero prune, the broken-chain signature", async () => {
+        const d = deps({
+            listGateArgs: vi.fn(async () => [sectionGate("ev-a")]),
+            listAgedSections: vi.fn(async () => [
+                { id: "s1", processedBy: ["ev-a"], parentProcessedBy: [] },
+            ]),
+            pruneSections: vi.fn(async () => ({ repaired: 0, pruned: 1 })),
+        });
+        await sweepAccount(d, "acc-1", 30);
+        expect(lines(d)[0]).toContain("pruned=1 kept-outstanding=0 repaired=0");
+    });
+    it("skips the repair and the delete when nothing is prunable", async () => {
+        const d = deps({
+            listGateArgs: vi.fn(async () => [sectionGate("ev-a")]),
+            listAgedSections: vi.fn(async () => [{ id: "s1", processedBy: [], parentProcessedBy: [] }]),
+        });
+        await sweepAccount(d, "acc-1", 30);
+        expect(d.pruneSections).not.toHaveBeenCalled();
+        expect(lines(d)).toEqual([
+            "op=email-retention account=acc-1 interested=1 pruned=0 kept-outstanding=1 repaired=0 ageDays=30",
+        ]);
+    });
+    it("names a capped candidate batch so a truncated sweep is never silent", async () => {
+        const rows = Array.from({ length: RETENTION_CANDIDATE_CAP }, (_, i) => ({
+            id: `s${i}`,
+            processedBy: [],
+            parentProcessedBy: [],
+        }));
+        const d = deps({
+            listGateArgs: vi.fn(async () => [sectionGate("ev-a")]),
+            listAgedSections: vi.fn(async () => rows),
+        });
+        await sweepAccount(d, "acc-1", 30);
+        expect(lines(d)[0]).toContain("capped=true");
+    });
+});
+//# sourceMappingURL=retention.test.js.map

package/payload/platform/plugins/email/mcp/dist/sampler/__tests__/retention.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention.test.js","sourceRoot":"","sources":["../../../src/sampler/__tests__/retention.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,SAAS,EACT,cAAc,EACd,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,uBAAuB,EACvB,kBAAkB,GAInB,MAAM,iBAAiB,CAAC;AAEzB,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClF,MAAM,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,EAAE,MAAM,CAAC,kBAAkB,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClG,MAAM,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,EAAE,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CACrF,kBAAkB,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,0BAA0B,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAClG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,0BAA0B,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,MAAM,IAAI,GAAG,CAAC,MAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAEnF,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,IAAI,GAAc;YACtB,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE;YACtF,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC,EAAE;SACnG,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,IAAI,GAAc;YACtB;gBACE,OAAO,EAAE,SAAS;gBAClB,QAAQ,EAAE,IAAI,CAAC;oBACb,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE;oBAC7C,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,qBAAqB,EAAE;iBAC1D,CAAC;aACH;SACF,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,IAAI,GAAc;YACtB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE;YAC5E,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE;SACtF,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,IAAI,GAAc;YACtB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;YACtC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE;YAC5C,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE;YACtE,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE;SAClF,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,IAAI,GAAc;YACtB;gBACE,OAAO,EAAE,QAAQ;gBACjB,QAAQ,EAAE,IAAI,CAAC;oBACb,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE;oBAC7C,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE;iBAC9C,CAAC;aACH;SACF,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,MAAM,IAAI,GAAG,CAAC,OAA6B,EAAE,EAAe,EAAE,CAAC,CAAC;QAC9D,EAAE,EAAE,IAAI;QACR,WAAW,EAAE,EAAE;QACf,iBAAiB,EAAE,EAAE;QACrB,GAAG,IAAI;KACR,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACpF,QAAQ,EAAE,CAAC,IAAI,CAAC;YAChB,eAAe,EAAE,CAAC;SACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9E,QAAQ,EAAE,EAAE;YACZ,eAAe,EAAE,CAAC;SACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACtE,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5E,QAAQ,EAAE,EAAE;YACZ,eAAe,EAAE,CAAC;SACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACtE,QAAQ,EAAE,EAAE;YACZ,eAAe,EAAE,CAAC;SACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACtE,QAAQ,EAAE,CAAC,IAAI,CAAC;YAChB,eAAe,EAAE,CAAC;SACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAEjD,SAAS,IAAI,CAAC,OAA+B,EAAE;IAC7C,OAAO;QACL,mBAAmB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QACjD,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACnC,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACvC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9D,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;QACd,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;QACZ,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,CAAgB,EAAE,EAAE,CAAE,CAAC,CAAC,GAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzF,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO;IACP,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;CACtF,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjB,MAAM,YAAY,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,MAAM,CAAC,CAAC,CAAC,mBAA0B,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACvB,gGAAgG;SACjG,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,mBAAmB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/E,MAAM,YAAY,CAAC,CAAC,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,CAAC,CAAC,YAAmB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,CAAC,GAAG,IAAI,CAAC;YACb,mBAAmB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC1D,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,SAAiB,EAAE,EAAE;gBAC9C,IAAI,SAAS,KAAK,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;gBACzD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;SACH,CAAC,CAAC;QACH,MAAM,YAAY,CAAC,CAAC,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QACrF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACtB,iGAAiG,CAClG,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3F,MAAM,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,gBAAuB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzD,MAAM,CAAC,CAAC,CAAC,aAAoB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACvB,iGAAiG;SAClG,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,CAAC,GAAG,IAAI,CAAC;YACb,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACtD,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;gBAClC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE;gBAC1D,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE;aACrD,CAAC;YACF,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;SAC/D,CAAC,CAAC;QACH,MAAM,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,CAAE,CAAC,CAAC,gBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACxD,OAAO;YACP,0BAA0B;YAC1B,uBAAuB;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,aAAoB,CAAC,CAAC,oBAAoB,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACvB,iGAAiG;SAClG,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,CAAC,GAAG,IAAI,CAAC;YACb,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACtD,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;gBAClC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE;aAC3D,CAAC;YACF,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;SAC/D,CAAC,CAAC;QACH,MAAM,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,CAAC,GAAG,IAAI,CAAC;YACb,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACtD,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC;SAC5F,CAAC,CAAC;QACH,MAAM,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,aAAoB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACvB,iGAAiG;SAClG,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACtE,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,WAAW,EAAE,EAAc;YAC3B,iBAAiB,EAAE,EAAc;SAClC,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,GAAG,IAAI,CAAC;YACb,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACtD,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;SAC1C,CAAC,CAAC;QACH,MAAM,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/email/mcp/dist/sampler/main.js

@@ -5,6 +5,8 @@ import { fetchSinceUid, resolveDefaultRecipients } from "../lib/imap.js";
 import { dispatchEmailMessagesToConversationArchive } from "../lib/conversation-archive-dispatch.js";
 import { listAllImapAccounts, readSamplerCursor, advanceSamplerCursor } from "../lib/credentials.js";
 import { sampleMailbox } from "./sample-mailbox.js";
+import { runRetention } from "./retention.js";
+import { retentionSources } from "./retention-sources.js";
 // The standing email-sampler (Task 2682): a per-brand systemd user unit that
 // each cycle enumerates every IMAP mailbox on the install and writes new
 // inbound messages to the graph via the plugin's own dispatch, independent of
@@ -46,6 +48,23 @@ const deps = {
 async function cycle() {
     await imapArm();
     await outlookArm();
+    await retentionPass();
+}
+/**
+ * The retention sweep (Task 2685). Runs AFTER both arms so a cycle never deletes
+ * before it has written, and in its own try for the reason each arm has one: a
+ * retention failure must cost no ingest.
+ *
+ * `runRetention` reads `EMAIL_RETENTION_DAYS` itself and prunes nothing when it
+ * is unset, which is every install until an operator sets it.
+ */
+async function retentionPass() {
+    try {
+        await runRetention(retentionSources(() => new Date(), logLine), process.env);
+    }
+    catch (e) {
+        logLine(`op=email-retention-error account=<sweep> detail=${e instanceof Error ? e.message : String(e)}`);
+    }
 }
 /** The IMAP arm (Task 2682). An enumeration failure ends this arm only; the
  *  Outlook arm reads a different store and must still run. */

package/payload/platform/plugins/email/mcp/dist/sampler/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/sampler/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,yCAAyC,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACrG,OAAO,EAAE,aAAa,EAAoB,MAAM,qBAAqB,CAAC;AAEtE,6EAA6E;AAC7E,yEAAyE;AACzE,8EAA8E;AAC9E,sEAAsE;AACtE,iEAAiE;AAEjE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,wBAAwB,CAAC;AAChF,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;AAC1F,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,UAAU,CAAC,IAAI,QAAQ,CAAC;AAE1F;0EAC0E;AAC1E,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,oBAAoB,IAAI,IAAI,CAAC;IACxE,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClC,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YACnC,yEAAyE;YACzE,sEAAsE;YACtE,yBAAyB;YACzB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1C,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAgB;IACxB,UAAU,EAAE,aAAa;IACzB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,0CAA0C,CAAC,CAAC,CAAC;IAC3D,UAAU,EAAE,iBAAiB;IAC7B,aAAa,EAAE,oBAAoB;IACnC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC9C,GAAG,EAAE,OAAO;CACb,CAAC;AAEF,KAAK,UAAU,KAAK;IAClB,MAAM,OAAO,EAAE,CAAC;IAChB,MAAM,UAAU,EAAE,CAAC;AACrB,CAAC;AAED;8DAC8D;AAC9D,KAAK,UAAU,OAAO;IACpB,IAAI,QAAyD,CAAC;IAC9D,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CACL,8DAA8D,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC3G,CAAC;QACF,OAAO;IACT,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CACL,2BAA2B,OAAO,CAAC,MAAM,CAAC,KAAK,yBAAyB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACrH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,UAAU;IACvB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC/C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,4DAA4D,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAC3B,OAAO,CAAC,YAAY,EAAE,yCAAyC,CAAC,CACjE,CAAC,IAAI,CAAC;IAEP,IAAI,GAAuE,CAAC;IAC5E,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAe,CAAC;IAC9C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CACL,0DAA0D,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACvG,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QAC5C,OAAO,CAAC,2DAA2D,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CACL,iEAAiE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC9G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,qBAAqB,WAAW,GAAG,IAAI,QAAQ,QAAQ,EAAE,CAAC,CAAC;IACnE,iDAAiD;IACjD,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,CAAC,0CAA0C,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/sampler/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,0CAA0C,EAAE,MAAM,yCAAyC,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACrG,OAAO,EAAE,aAAa,EAAoB,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,6EAA6E;AAC7E,yEAAyE;AACzE,8EAA8E;AAC9E,sEAAsE;AACtE,iEAAiE;AAEjE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,wBAAwB,CAAC;AAChF,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;AAC1F,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,UAAU,CAAC,IAAI,QAAQ,CAAC;AAE1F;0EAC0E;AAC1E,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,oBAAoB,IAAI,IAAI,CAAC;IACxE,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClC,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YACnC,yEAAyE;YACzE,sEAAsE;YACtE,yBAAyB;YACzB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1C,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAgB;IACxB,UAAU,EAAE,aAAa;IACzB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,0CAA0C,CAAC,CAAC,CAAC;IAC3D,UAAU,EAAE,iBAAiB;IAC7B,aAAa,EAAE,oBAAoB;IACnC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC9C,GAAG,EAAE,OAAO;CACb,CAAC;AAEF,KAAK,UAAU,KAAK;IAClB,MAAM,OAAO,EAAE,CAAC;IAChB,MAAM,UAAU,EAAE,CAAC;IACnB,MAAM,aAAa,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,aAAa;IAC1B,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CACL,mDAAmD,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAChG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;8DAC8D;AAC9D,KAAK,UAAU,OAAO;IACpB,IAAI,QAAyD,CAAC;IAC9D,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CACL,8DAA8D,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC3G,CAAC;QACF,OAAO;IACT,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CACL,2BAA2B,OAAO,CAAC,MAAM,CAAC,KAAK,yBAAyB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACrH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,UAAU;IACvB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC/C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,4DAA4D,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAC3B,OAAO,CAAC,YAAY,EAAE,yCAAyC,CAAC,CACjE,CAAC,IAAI,CAAC;IAEP,IAAI,GAAuE,CAAC;IAC5E,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAe,CAAC;IAC9C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CACL,0DAA0D,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACvG,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QAC5C,OAAO,CAAC,2DAA2D,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CACL,iEAAiE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC9G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,qBAAqB,WAAW,GAAG,IAAI,QAAQ,QAAQ,EAAE,CAAC,CAAC;IACnE,iDAAiD;IACjD,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,CAAC,0CAA0C,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/email/mcp/dist/sampler/retention-sources.d.ts

@@ -0,0 +1,3 @@
+import type { RetentionDeps } from "./retention.js";
+export declare function retentionSources(now: () => Date, log: (line: string) => void): RetentionDeps;
+//# sourceMappingURL=retention-sources.d.ts.map

package/payload/platform/plugins/email/mcp/dist/sampler/retention-sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retention-sources.d.ts","sourceRoot":"","sources":["../../src/sampler/retention-sources.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAwB,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAuB1E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,aAAa,CAkJ5F"}

package/payload/platform/plugins/email/mcp/dist/sampler/retention-sources.js

@@ -0,0 +1,146 @@
+import neo4j from "neo4j-driver";
+import { getSession } from "../lib/neo4j.js";
+// The real graph behind `RetentionDeps` (Task 2685). Split from `retention.ts`
+// so the predicate, the parsing and the sweep stay testable without Neo4j —
+// the same division `scheduling-gate.ts` draws between its probe and
+// `REAL_SOURCES`.
+/**
+ * The longest deleted span the chain repair walks. A bound rather than `*0..`
+ * because an unbounded variable-length match over a long conversation is the one
+ * statement here that can run away; a span longer than this leaves the chain
+ * broken, which costs a later ingest a wrong tail and never costs data.
+ */
+const RETENTION_CHAIN_HOPS = 500;
+/** Neo4j returns list properties as-is; this narrows a `gateProcessedBy` value
+ *  to the string list the predicate expects, treating an absent or wrong-typed
+ *  property as "flagged by nobody". */
+function flagList(value) {
+    return Array.isArray(value) ? value.filter((v) => typeof v === "string") : [];
+}
+export function retentionSources(now, log) {
+    return {
+        now,
+        log,
+        listEmailAccountIds: async () => {
+            const session = getSession();
+            try {
+                const res = await session.run(`MATCH (s:Section)
+           WHERE s.source = 'email' AND s.accountId IS NOT NULL
+           RETURN DISTINCT s.accountId AS accountId`);
+                return res.records.map((r) => r.get("accountId"));
+            }
+            finally {
+                await session.close();
+            }
+        },
+        // Every gate-bearing :Event on the account, enabled or suspended. A
+        // suspended routine counts as interested (operator decision 2026-08-13), so
+        // enabling a parked routine never finds its backlog already deleted — hence
+        // no `eventStatus` predicate here.
+        //
+        // `e.eventId`, never `elementId(e)`: the dispatcher passes the eventId
+        // PROPERTY as the flag key (agent-turn-dispatch.ts:506), so joining on the
+        // element id would compare against a value `gateProcessedBy` never holds and
+        // every section would look outstanding for ever.
+        listGateArgs: async (accountId) => {
+            const session = getSession();
+            try {
+                const res = await session.run(`MATCH (e:Event)
+           WHERE e.accountId = $accountId AND e.gateArgs IS NOT NULL
+           RETURN e.eventId AS eventId, e.gateArgs AS gateArgs`, { accountId });
+                return res.records
+                    .filter((r) => typeof r.get("eventId") === "string")
+                    .map((r) => ({
+                    eventId: r.get("eventId"),
+                    gateArgs: r.get("gateArgs") ?? null,
+                }));
+            }
+            finally {
+                await session.close();
+            }
+        },
+        // `s.createdAt < $cutoff` is lexical, which equals chronological because
+        // every value on both sides is a `toISOString()` string of fixed width. A
+        // createdAt of any other type compares as null in Cypher, so the row drops
+        // out of the candidate set and the section is KEPT.
+        listAgedSections: async (accountId, cutoff, limit) => {
+            const session = getSession();
+            try {
+                const res = await session.run(`MATCH (s:Section)
+           WHERE s.accountId = $accountId AND s.source = 'email'
+             AND s.createdAt < $cutoff
+           OPTIONAL MATCH (a:ConversationArchive)-[:HAS_SECTION]->(s)
+           RETURN elementId(s) AS id,
+                  s.gateProcessedBy AS processedBy,
+                  CASE WHEN a IS NULL THEN NULL ELSE coalesce(a.gateProcessedBy, []) END
+                    AS parentProcessedBy
+           ORDER BY s.createdAt ASC
+           LIMIT $limit`, { accountId, cutoff, limit: neo4j.int(limit) });
+                return res.records.map((r) => {
+                    const parent = r.get("parentProcessedBy");
+                    return {
+                        id: r.get("id"),
+                        processedBy: flagList(r.get("processedBy")),
+                        parentProcessedBy: parent === null || parent === undefined ? null : flagList(parent),
+                    };
+                });
+            }
+            finally {
+                await session.close();
+            }
+        },
+        // The repair and the delete, in ONE write transaction.
+        //
+        // Sections are chained by :NEXT, and the next ingest finds the tail by
+        // looking for one with no outgoing :NEXT, LIMIT 1
+        // (memory-ingest.ts:1734-1742). Deleting from the middle of a chain leaves
+        // TWO such nodes, so a later ingest could chain new content onto a middle
+        // section. The repair connects each surviving predecessor to the first
+        // surviving section after the deleted span, shortest span first.
+        //
+        // It must run BEFORE the delete, because it walks the very edges the delete
+        // removes — and therefore inside the same transaction as the delete, because
+        // between the two the predecessor holds an edge to the doomed section AND
+        // its new edge to the target. A failure between them would leave that fork
+        // committed, and a routine added before the next cycle would make the
+        // sections outstanding again, so nothing would ever come back to repair it.
+        //
+        // Both statements carry `accountId` beside the element ids, the way
+        // `flagProcessedNodes` does (scheduling/mcp/src/lib/gate-flag.ts:100-104).
+        // The ids are already account-scoped by `listAgedSections`; the predicate is
+        // here so the scope is a property of the DELETE itself and not of the
+        // caller's discipline.
+        pruneSections: async (accountId, ids) => {
+            const session = getSession();
+            try {
+                return await session.executeWrite(async (tx) => {
+                    const repair = await tx.run(`MATCH (p:Section)-[:NEXT]->(first:Section)
+             WHERE first.accountId = $accountId
+               AND elementId(first) IN $ids AND NOT elementId(p) IN $ids
+             MATCH path = (first)-[:NEXT*0..${RETENTION_CHAIN_HOPS}]->(q:Section)
+             WHERE NOT elementId(q) IN $ids
+               AND all(n IN nodes(path)[0..-1] WHERE elementId(n) IN $ids)
+             WITH p, q, length(path) AS len
+             ORDER BY len ASC
+             WITH p, head(collect(q)) AS target
+             MERGE (p)-[r:NEXT]->(target)
+             ON CREATE SET r.createdByAgent = 'email-retention', r.createdAt = $now
+             RETURN count(r) AS repaired`, { accountId, ids, now: now().toISOString() });
+                    const del = await tx.run(`MATCH (s:Section)
+             WHERE s.accountId = $accountId AND s.source = 'email'
+               AND elementId(s) IN $ids
+             DETACH DELETE s
+             RETURN count(s) AS pruned`, { accountId, ids });
+                    return {
+                        repaired: repair.records[0]?.get("repaired")?.toNumber?.() ?? 0,
+                        pruned: del.records[0]?.get("pruned")?.toNumber?.() ?? 0,
+                    };
+                });
+            }
+            finally {
+                await session.close();
+            }
+        },
+    };
+}
+//# sourceMappingURL=retention-sources.js.map