agent-bober 0.17.1 → 0.19.0

package/dist/hub/finding-store.js

@@ -0,0 +1,122 @@
+import { createHash } from "node:crypto";
+import { FindingSchema } from "./finding.js";
+import { HUB_SCOPE } from "./finding-source.js";
+import { writeFact } from "../state/facts.js";
+// ── writeFinding ──────────────────────────────────────────────────────
+/**
+ * Persist a Finding into the hub pool via the reconcile layer.
+ * Routes through writeFact (not raw insertFact) so dedup/supersede works.
+ *
+ * PURE: never reads the clock; `now` is injected by the CLI boundary.
+ */
+export async function writeFinding(store, finding, { now }) {
+    return writeFact(store, {
+        scope: HUB_SCOPE,
+        subject: finding.id,
+        predicate: "finding",
+        value: JSON.stringify(finding),
+        confidence: 1,
+        sourceRunId: null,
+        tValid: now,
+        tCreated: now,
+    }, { now });
+}
+// ── readFindings ──────────────────────────────────────────────────────
+/**
+ * Read all active hub Findings from the store.
+ * Uses FindingSchema.parse — throws on malformed rows (unlike the
+ * safeParse+skip approach in FactStoreFindingSource).
+ */
+export function readFindings(store) {
+    return store
+        .getActiveFacts(HUB_SCOPE, undefined, "finding")
+        .map((r) => FindingSchema.parse(JSON.parse(r.value)));
+}
+// ── transitionFinding ─────────────────────────────────────────────────
+/**
+ * Read the active Finding for `id`, apply `newStatus` (+ optional field
+ * mutation), and write it back via writeFinding. Because subject=id and
+ * predicate='finding' are unchanged but the value differs, reconcileFact
+ * takes the UPDATE branch (supersede old + insert new), preserving the
+ * prior row as bitemporal history (reconcile.ts:70-78).
+ *
+ * Returns the new Finding, or null if no active Finding has that id.
+ * PURE: never reads the clock — `now` is injected at the CLI boundary.
+ */
+export async function transitionFinding(store, id, newStatus, { now, mutate }) {
+    const current = readFindings(store).find((f) => f.id === id);
+    if (current === undefined)
+        return null;
+    const next = { ...current, ...mutate, status: newStatus };
+    await writeFinding(store, next, { now });
+    return next;
+}
+// ── Snooze helpers ────────────────────────────────────────────────────
+/** Tag prefix used to encode the wake time on a snoozed Finding. */
+export const SNOOZE_TAG_PREFIX = "snooze-until:";
+/**
+ * Extract the wake-time ISO string from a Finding's tags, or null if absent
+ * or if no valid snooze-until tag exists.
+ * PURE: no clock read; tag parsing only.
+ */
+export function snoozeUntil(finding) {
+    const tag = finding.tags.find((t) => t.startsWith(SNOOZE_TAG_PREFIX));
+    return tag !== undefined ? tag.slice(SNOOZE_TAG_PREFIX.length) : null;
+}
+/**
+ * Returns true when a Finding should appear in the default task list.
+ *
+ * Visibility rules:
+ *  - open / in-progress → always visible
+ *  - snoozed + valid wake time in the future (wake > now) → hidden
+ *  - snoozed + wake time <= now (past or present) → visible again
+ *  - snoozed + no snooze-until tag → visible (user must re-triage)
+ *  - done / dropped → not visible
+ *
+ * PURE: `now` is injected; no Date.now() or new Date() inside.
+ * Lexicographic ISO compare is safe because both sides are toISOString()
+ * output (YYYY-MM-DDTHH:mm:ss.sssZ — fixed-width, lexicographically ordered).
+ */
+export function isVisibleInDefaultList(finding, now) {
+    if (finding.status === "open" || finding.status === "in-progress") {
+        return true;
+    }
+    if (finding.status === "snoozed") {
+        const wake = snoozeUntil(finding);
+        // No tag → treat as visible so the user can re-triage
+        if (wake === null)
+            return true;
+        return wake <= now;
+    }
+    return false;
+}
+// ── ingestFinding ─────────────────────────────────────────────────────
+/** Content-stable id: hash of domain|title|kind (no clock — mirrors factId). */
+function deriveFindingId(domain, title, kind) {
+    return createHash("sha256")
+        .update(`${domain}|${title}|${kind}`)
+        .digest("hex")
+        .slice(0, 16);
+}
+/** Input shape: id + surfacedAt are optional (ingest fills them); everything else required. */
+const IngestInputSchema = FindingSchema.partial({ id: true, surfacedAt: true });
+/**
+ * Validate + normalize a domain-supplied Finding payload, then persist it via
+ * writeFinding so reconcile dedups a re-surfaced finding to a single active row.
+ *
+ * - Validates with .parse — THROWS on a missing required field (caught at the CLI boundary).
+ * - Derives a content-stable id from domain|title|kind when absent (supplied id is kept).
+ * - Sets surfacedAt = now when absent. PURE: never reads the clock; `now` is injected.
+ * Returns the ReconcileAction (add | update | delete | noop).
+ */
+export async function ingestFinding(store, input, { now }) {
+    const parsed = IngestInputSchema.parse(input); // validate BEFORE any write
+    const id = parsed.id ?? deriveFindingId(parsed.domain, parsed.title, parsed.kind);
+    const finding = FindingSchema.parse({
+        ...parsed,
+        id,
+        surfacedAt: parsed.surfacedAt ?? now,
+    });
+    return writeFinding(store, finding, { now }); // reuse — reconcile dedups
+}
+//# sourceMappingURL=finding-store.js.map

package/dist/hub/finding-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-store.js","sourceRoot":"","sources":["../../src/hub/finding-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAG9C,yEAAyE;AAEzE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAgB,EAChB,OAAgB,EAChB,EAAE,GAAG,EAAmB;IAExB,OAAO,SAAS,CACd,KAAK,EACL;QACE,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,OAAO,CAAC,EAAE;QACnB,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QAC9B,UAAU,EAAE,CAAC;QACb,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,GAAG;QACX,QAAQ,EAAE,GAAG;KACd,EACD,EAAE,GAAG,EAAE,CACR,CAAC;AACJ,CAAC;AAED,yEAAyE;AAEzE;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAgB;IAC3C,OAAO,KAAK;SACT,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;SAC/C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAY,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,yEAAyE;AAEzE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAgB,EAChB,EAAU,EACV,SAA4B,EAC5B,EAAE,GAAG,EAAE,MAAM,EAA8C;IAE3D,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,IAAI,GAAY,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACnE,MAAM,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yEAAyE;AAEzE,oEAAoE;AACpE,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAEjD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,OAAgB;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACtE,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgB,EAAE,GAAW;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,sDAAsD;QACtD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/B,OAAO,IAAI,IAAI,GAAG,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yEAAyE;AAEzE,gFAAgF;AAChF,SAAS,eAAe,CAAC,MAAc,EAAE,KAAa,EAAE,IAAY;IAClE,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,GAAG,MAAM,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;SACpC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,+FAA+F;AAC/F,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AAEhF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAgB,EAChB,KAAc,EACd,EAAE,GAAG,EAAmB;IAExB,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,4BAA4B;IAC3E,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAClF,MAAM,OAAO,GAAY,aAAa,CAAC,KAAK,CAAC;QAC3C,GAAG,MAAM;QACT,EAAE;QACF,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG;KACrC,CAAC,CAAC;IACH,OAAO,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,2BAA2B;AAC3E,CAAC"}

package/dist/hub/finding.d.ts

@@ -0,0 +1,54 @@
+import { z } from "zod";
+/**
+ * Canonical Finding schema — the hub owns this definition.
+ * All other modules that produce or consume Findings MUST import from here.
+ * Do NOT redefine Finding anywhere else in the codebase.
+ */
+export declare const FindingSchema: z.ZodObject<{
+    id: z.ZodString;
+    domain: z.ZodString;
+    title: z.ZodString;
+    kind: z.ZodEnum<["action", "watch", "risk", "question"]>;
+    urgency: z.ZodNumber;
+    severity: z.ZodNumber;
+    evidence: z.ZodArray<z.ZodString, "many">;
+    surfacedAt: z.ZodString;
+    dueBy: z.ZodOptional<z.ZodString>;
+    tags: z.ZodArray<z.ZodString, "many">;
+    estDurationMin: z.ZodOptional<z.ZodNumber>;
+    calendarSafeTitle: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<["open", "in-progress", "snoozed", "done", "dropped"]>;
+    promotesTo: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    status: "in-progress" | "open" | "snoozed" | "done" | "dropped";
+    tags: string[];
+    severity: number;
+    id: string;
+    kind: "question" | "action" | "watch" | "risk";
+    title: string;
+    evidence: string[];
+    domain: string;
+    urgency: number;
+    surfacedAt: string;
+    dueBy?: string | undefined;
+    estDurationMin?: number | undefined;
+    calendarSafeTitle?: string | undefined;
+    promotesTo?: string | undefined;
+}, {
+    status: "in-progress" | "open" | "snoozed" | "done" | "dropped";
+    tags: string[];
+    severity: number;
+    id: string;
+    kind: "question" | "action" | "watch" | "risk";
+    title: string;
+    evidence: string[];
+    domain: string;
+    urgency: number;
+    surfacedAt: string;
+    dueBy?: string | undefined;
+    estDurationMin?: number | undefined;
+    calendarSafeTitle?: string | undefined;
+    promotesTo?: string | undefined;
+}>;
+export type Finding = z.infer<typeof FindingSchema>;
+//# sourceMappingURL=finding.d.ts.map

package/dist/hub/finding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding.d.ts","sourceRoot":"","sources":["../../src/hub/finding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAexB,CAAC;AAEH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC"}

package/dist/hub/finding.js

@@ -0,0 +1,24 @@
+import { z } from "zod";
+// ── Schema ───────────────────────────────────────────────────────────
+/**
+ * Canonical Finding schema — the hub owns this definition.
+ * All other modules that produce or consume Findings MUST import from here.
+ * Do NOT redefine Finding anywhere else in the codebase.
+ */
+export const FindingSchema = z.object({
+    id: z.string().min(1),
+    domain: z.string().min(1),
+    title: z.string().min(1),
+    kind: z.enum(["action", "watch", "risk", "question"]),
+    urgency: z.number().int().min(1).max(5),
+    severity: z.number().int().min(1).max(5),
+    evidence: z.array(z.string()),
+    surfacedAt: z.string().datetime(),
+    dueBy: z.string().datetime().optional(),
+    tags: z.array(z.string()),
+    estDurationMin: z.number().int().optional(),
+    calendarSafeTitle: z.string().optional(),
+    status: z.enum(["open", "in-progress", "snoozed", "done", "dropped"]),
+    promotesTo: z.string().optional(),
+});
+//# sourceMappingURL=finding.js.map

package/dist/hub/finding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding.js","sourceRoot":"","sources":["../../src/hub/finding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,wEAAwE;AAExE;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACrE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC"}

package/dist/hub/gmail-to-task.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Gmail-to-task bridge — egress-gated.
+ *
+ * Provides:
+ *   - parseGmailThread (PURE — no clock, no network)
+ *   - sanitizeConnectorError (replicates external-client.ts:69 regex)
+ *   - fromGmailTask (DI: egressAllowed + injected MCP + store + now)
+ *
+ * Egress guarantee: when egressAllowed=false, fromGmailTask throws BEFORE
+ * calling mcp.start() or mcp.callTool() — the stub callTool stays uncalled.
+ *
+ * Write path: captureTask (from task-inbox.ts) is the ONLY write path.
+ * This module never calls writeFinding/ingestFinding directly.
+ */
+import type { Finding } from "./finding.js";
+import type { FactStore } from "../state/facts.js";
+/**
+ * Minimal MCP surface fromGmailTask needs. ExternalMcpServer matches it
+ * structurally; tests inject a fake whose callTool is a vi.fn() spy.
+ */
+export interface GmailMcpLike {
+    start(): Promise<void>;
+    callTool(name: string, args: unknown): Promise<unknown>;
+    stop(): Promise<void>;
+}
+/** Default MCP tool name to read one Gmail thread. Override per connector. */
+export declare const DEFAULT_GMAIL_READ_TOOL = "gmail_read_thread";
+/** The clock-independent, id-independent subset of a Finding a thread yields. */
+export interface ParsedGmailThread {
+    title: string;
+    kind: "action";
+    status: "open";
+    tags: string[];
+}
+/**
+ * Parse a raw Gmail thread payload into a Finding-shaped record.
+ * PURE: never calls the network, never reads the clock.
+ */
+export declare function parseGmailThread(payload: unknown): ParsedGmailThread;
+/**
+ * Strip KEY=VALUE env assignments so connector tokens never surface in
+ * error messages. Matches UPPERCASE_KEY=anything-without-whitespace.
+ * Replicates the inline regex from src/mcp/external-client.ts:69 —
+ * there is no exported sanitizer to import.
+ */
+export declare function sanitizeConnectorError(msg: string): string;
+/**
+ * Fetch a Gmail thread via the injected MCP connector, parse it locally,
+ * and capture it as an open action Finding through captureTask.
+ *
+ * sc-6-2 contract: when egressAllowed is false, this function throws BEFORE
+ * calling mcp.start() or mcp.callTool() — zero network, zero MCP construction.
+ *
+ * @param args.egressAllowed - resolved from config.taskInbox?.gmailEgress
+ * @param args.mcp           - injected MCP connector (stubbed in tests)
+ * @param args.threadRef     - opaque thread reference passed to the connector
+ * @param args.store         - open FactStore for persistence
+ * @param args.now           - ISO timestamp injected at the CLI boundary (never internal)
+ * @param args.toolName      - override tool name (defaults to DEFAULT_GMAIL_READ_TOOL)
+ */
+export declare function fromGmailTask(args: {
+    egressAllowed: boolean;
+    mcp: GmailMcpLike;
+    threadRef: string;
+    store: FactStore;
+    now: string;
+    toolName?: string;
+}): Promise<Finding>;
+//# sourceMappingURL=gmail-to-task.d.ts.map

package/dist/hub/gmail-to-task.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gmail-to-task.d.ts","sourceRoot":"","sources":["../../src/hub/gmail-to-task.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAKnD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAID,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAI3D,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAyCD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,iBAAiB,CAGpE;AAID;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1D;AAID;;;;;;;;;;;;;GAaG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,aAAa,EAAE,OAAO,CAAC;IACvB,GAAG,EAAE,YAAY,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,OAAO,CAAC,CAiBnB"}

package/dist/hub/gmail-to-task.js

@@ -0,0 +1,102 @@
+/**
+ * Gmail-to-task bridge — egress-gated.
+ *
+ * Provides:
+ *   - parseGmailThread (PURE — no clock, no network)
+ *   - sanitizeConnectorError (replicates external-client.ts:69 regex)
+ *   - fromGmailTask (DI: egressAllowed + injected MCP + store + now)
+ *
+ * Egress guarantee: when egressAllowed=false, fromGmailTask throws BEFORE
+ * calling mcp.start() or mcp.callTool() — the stub callTool stays uncalled.
+ *
+ * Write path: captureTask (from task-inbox.ts) is the ONLY write path.
+ * This module never calls writeFinding/ingestFinding directly.
+ */
+import { captureTask } from "./task-inbox.js";
+// ── Constants ─────────────────────────────────────────────────────────
+/** Default MCP tool name to read one Gmail thread. Override per connector. */
+export const DEFAULT_GMAIL_READ_TOOL = "gmail_read_thread";
+/**
+ * Extract the subject from a raw Gmail thread payload.
+ * Tolerant: accepts { subject }, { messages: [{ subject }] }, or
+ * an SDK envelope { content: [{ text: '<json>' }] }.
+ * Returns "(no subject)" when nothing parseable is found.
+ */
+function extractSubject(payload) {
+    if (payload === null || typeof payload !== "object")
+        return "(no subject)";
+    const p = payload;
+    // Direct subject field
+    if (typeof p["subject"] === "string" && p["subject"].length > 0) {
+        return p["subject"];
+    }
+    // messages array
+    if (Array.isArray(p["messages"]) && p["messages"].length > 0) {
+        const first = p["messages"][0];
+        if (typeof first["subject"] === "string" && first["subject"].length > 0) {
+            return first["subject"];
+        }
+    }
+    // MCP SDK envelope: { content: [{ type: "text", text: "<json>" }] }
+    if (Array.isArray(p["content"]) && p["content"].length > 0) {
+        const item = p["content"][0];
+        if (typeof item["text"] === "string") {
+            try {
+                const inner = JSON.parse(item["text"]);
+                return extractSubject(inner);
+            }
+            catch {
+                // not JSON — ignore
+            }
+        }
+    }
+    return "(no subject)";
+}
+/**
+ * Parse a raw Gmail thread payload into a Finding-shaped record.
+ * PURE: never calls the network, never reads the clock.
+ */
+export function parseGmailThread(payload) {
+    const subject = extractSubject(payload);
+    return { title: subject, kind: "action", status: "open", tags: ["source:gmail"] };
+}
+// ── Error sanitization (replicates external-client.ts:69) ─────────────
+/**
+ * Strip KEY=VALUE env assignments so connector tokens never surface in
+ * error messages. Matches UPPERCASE_KEY=anything-without-whitespace.
+ * Replicates the inline regex from src/mcp/external-client.ts:69 —
+ * there is no exported sanitizer to import.
+ */
+export function sanitizeConnectorError(msg) {
+    return msg.replace(/\b[A-Z_][A-Z0-9_]*=\S+/g, "[redacted]");
+}
+// ── fromGmailTask ─────────────────────────────────────────────────────
+/**
+ * Fetch a Gmail thread via the injected MCP connector, parse it locally,
+ * and capture it as an open action Finding through captureTask.
+ *
+ * sc-6-2 contract: when egressAllowed is false, this function throws BEFORE
+ * calling mcp.start() or mcp.callTool() — zero network, zero MCP construction.
+ *
+ * @param args.egressAllowed - resolved from config.taskInbox?.gmailEgress
+ * @param args.mcp           - injected MCP connector (stubbed in tests)
+ * @param args.threadRef     - opaque thread reference passed to the connector
+ * @param args.store         - open FactStore for persistence
+ * @param args.now           - ISO timestamp injected at the CLI boundary (never internal)
+ * @param args.toolName      - override tool name (defaults to DEFAULT_GMAIL_READ_TOOL)
+ */
+export async function fromGmailTask(args) {
+    // sc-6-2: refuse BEFORE touching mcp — the stub's callTool must stay unused.
+    if (!args.egressAllowed) {
+        throw new Error("Gmail egress not enabled — set taskInbox.gmailEgress: true in bober.config.json to opt in.");
+    }
+    await args.mcp.start();
+    const raw = await args.mcp.callTool(args.toolName ?? DEFAULT_GMAIL_READ_TOOL, {
+        thread: args.threadRef,
+    });
+    const parsed = parseGmailThread(raw);
+    // captureTask is the ONLY write path (contract non-goal). It sets kind=action/
+    // status=open and stamps id/surfacedAt from `now`. Provenance via domain tag.
+    return captureTask(args.store, parsed.title, { domain: "gmail", now: args.now });
+}
+//# sourceMappingURL=gmail-to-task.js.map

package/dist/hub/gmail-to-task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gmail-to-task.js","sourceRoot":"","sources":["../../src/hub/gmail-to-task.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAc9C,yEAAyE;AAEzE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAY3D;;;;;GAKG;AACH,SAAS,cAAc,CAAC,OAAgB;IACtC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC;IAC3E,MAAM,CAAC,GAAG,OAAkC,CAAC;IAE7C,uBAAuB;IACvB,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC;IACtB,CAAC;IAED,iBAAiB;IACjB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAA4B,CAAC;QAC1D,IAAI,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxE,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAA4B,CAAC;QACxD,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAY,CAAC;gBAClD,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,yEAAyE;AAEzE;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,OAAO,GAAG,CAAC,OAAO,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;AAC9D,CAAC;AAED,yEAAyE;AAEzE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAOnC;IACC,6EAA6E;IAC7E,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,uBAAuB,EAAE;QAC5E,MAAM,EAAE,IAAI,CAAC,SAAS;KACvB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAErC,+EAA+E;IAC/E,8EAA8E;IAC9E,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AACnF,CAAC"}

package/dist/hub/hub-config.d.ts

@@ -0,0 +1,18 @@
+/**
+ * kb-hub output vault path resolution.
+ *
+ * Reads config.hub.outVault from the raw config file (bypassing Zod which
+ * strips unknown keys). Falls back to <parentOfProjectRoot>/kb-hub.
+ * Never throws.
+ */
+/**
+ * Resolve the kb-hub output vault to an ABSOLUTE path.
+ * Reads config.hub.outVault if present (resolved against projectRoot), else
+ * falls back to <parentOfProjectRoot>/kb-hub. Never throws.
+ *
+ * @param projectRoot  Absolute path to the current project root.
+ */
+export declare function resolveOutVault(projectRoot: string): Promise<string>;
+/** Target priority.md path inside the resolved out vault. */
+export declare function priorityMdPath(outVault: string): string;
+//# sourceMappingURL=hub-config.d.ts.map

package/dist/hub/hub-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-config.d.ts","sourceRoot":"","sources":["../../src/hub/hub-config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAc1E;AAID,6DAA6D;AAC7D,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvD"}

package/dist/hub/hub-config.js

@@ -0,0 +1,40 @@
+/**
+ * kb-hub output vault path resolution.
+ *
+ * Reads config.hub.outVault from the raw config file (bypassing Zod which
+ * strips unknown keys). Falls back to <parentOfProjectRoot>/kb-hub.
+ * Never throws.
+ */
+import { dirname, join, resolve } from "node:path";
+import { readJson } from "../utils/fs.js";
+// ── Config candidates ─────────────────────────────────────────────────
+const CONFIG_CANDIDATES = ["bober.config.json", ".bober/config.json"];
+// ── resolveOutVault ───────────────────────────────────────────────────
+/**
+ * Resolve the kb-hub output vault to an ABSOLUTE path.
+ * Reads config.hub.outVault if present (resolved against projectRoot), else
+ * falls back to <parentOfProjectRoot>/kb-hub. Never throws.
+ *
+ * @param projectRoot  Absolute path to the current project root.
+ */
+export async function resolveOutVault(projectRoot) {
+    for (const candidate of CONFIG_CANDIDATES) {
+        try {
+            const raw = await readJson(join(projectRoot, candidate));
+            const ov = raw.hub?.outVault;
+            if (typeof ov === "string" && ov.length > 0)
+                return resolve(projectRoot, ov);
+            break; // config existed but no outVault → fall to default
+        }
+        catch {
+            /* not found / invalid JSON → try next candidate */
+        }
+    }
+    return join(dirname(projectRoot), "kb-hub");
+}
+// ── priorityMdPath ────────────────────────────────────────────────────
+/** Target priority.md path inside the resolved out vault. */
+export function priorityMdPath(outVault) {
+    return join(outVault, "priority.md");
+}
+//# sourceMappingURL=hub-config.js.map

package/dist/hub/hub-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-config.js","sourceRoot":"","sources":["../../src/hub/hub-config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,yEAAyE;AAEzE,MAAM,iBAAiB,GAAG,CAAC,mBAAmB,EAAE,oBAAoB,CAAU,CAAC;AAE/E,yEAAyE;AAEzE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,WAAmB;IACvD,KAAK,MAAM,SAAS,IAAI,iBAAiB,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAC7B,CAAC;YACF,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC;YAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC7E,MAAM,CAAC,mDAAmD;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,yEAAyE;AAEzE,6DAA6D;AAC7D,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,OAAO,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AACvC,CAAC"}

package/dist/hub/judge.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Two-pass hub prioritization judge.
+ *
+ * Pass 1 (relevance): For filtered scope, applies pure-JS applyFilter with zero LLM calls.
+ * For general/decision scopes, calls the injected LLM per finding and parses with
+ * validateRelevanceVerdict (fail-closed: null drops the finding; decision scope additionally
+ * drops findings whose relevantTo is "neither" or undefined).
+ *
+ * Pass 2 (prioritization): For each survivor, fans out the four hub lenses (urgency, impact,
+ * effort, deadline-risk). Aggregate score = SUM of per-lens scores (0–40; 4 × 0–10). Reconcile:
+ * STRICT MAJORITY, FAIL-CLOSED ON TIE: passVotes > failVotes → normal ranking;
+ * passVotes ≤ failVotes → kept but tagged "flagged-for-review" (immutable copy, never mutate input).
+ *
+ * Final order: deterministic JS sort — aggregate score DESC, urgency DESC, severity DESC,
+ * dueBy ASC (undefined LAST, treated as +Infinity), id ASC. LLM never emits the final order.
+ */
+import type { LLMClient } from "../providers/types.js";
+import type { Finding } from "./finding.js";
+import { type Scope } from "./scope.js";
+/**
+ * Two-pass hub prioritization judge.
+ *
+ * @param findings  Pool of Finding[] to rank (input array and Finding objects are never mutated).
+ * @param scope     Ephemeral query scope — not persisted anywhere.
+ * @param llm       Injected LLMClient. Tests pass a ScriptedClient fake; Sprint 4 passes a real client.
+ * @param now       Injected clock for dueWithinDays math in filtered mode. Never call Date.now() here.
+ * @returns         Ranked Finding[]; tie-voted findings carry the "flagged-for-review" tag.
+ */
+export declare function rankFindings(findings: Finding[], scope: Scope, llm: LLMClient, now: Date): Promise<Finding[]>;
+//# sourceMappingURL=judge.d.ts.map

package/dist/hub/judge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"judge.d.ts","sourceRoot":"","sources":["../../src/hub/judge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,KAAK,KAAK,EAAe,MAAM,YAAY,CAAC;AAkJrD;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,OAAO,EAAE,EACnB,KAAK,EAAE,KAAK,EACZ,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,IAAI,GACR,OAAO,CAAC,OAAO,EAAE,CAAC,CAmDpB"}