@agenticmail/cli 0.9.38 → 0.9.40

package/README.md

@@ -118,6 +118,15 @@ Uses your existing Gmail or Outlook account. You provide your email address and
 
 Agent emails go out as sub-addresses like `yourname+agentname@gmail.com`. Replies come back through the same account.
 
+> **Before you hit enter on `setup-email`, know what you're signing up for.** Once the relay is connected, every sub-agent on this machine is reachable from the public internet via plus-addressing:
+>
+> - Anyone who guesses `yourname+secretary@gmail.com`, `yourname+kepler@gmail.com`, … can email that agent and the dispatcher will wake a Claude / Codex turn to process the message. The `+sub` part is publicly guessable (`+secretary`, `+kepler`), not a secret.
+> - External mail wakes the dispatcher identically to internal `@localhost` mail. Source doesn't matter; a new-mail SSE event is a new-mail SSE event.
+> - The host bridges (`yourname+claudecode@gmail.com`, `yourname+codex@gmail.com`) take a special path — they route to `handleBridgeMail` which uses the host SDK's `resume` option to wake your last session headlessly, falling through to the bridge-escalation email at `setup_operator_email` if resume fails.
+> - **Watch for spam.** Scrapers that find a plus-address can drive worker turns at your expense. The `wake-budget` guard in `dispatcher.handleEvent` is the automatic throttle; relay-level spam filtering is the cleaner long-term answer. For agents that should stay internal-only, leave them off the relay or fence them with `metadata.host`.
+>
+> If you'd rather keep everything local for now, skip `setup-email` entirely — agents talking to each other over `*@localhost` works fully without a relay.
+
 ### Domain Mode (For Professional Use)
 
 Uses a custom domain with Cloudflare for DNS, email routing, and tunneling. The wizard:

package/dist/bin-claudecode.js

@@ -2,6 +2,7 @@
 import {
   runHostBin
 } from "./chunk-2LR3AJRX.js";
+import "./chunk-EHUD3MJT.js";
 
 // src/bin-claudecode.ts
 runHostBin("@agenticmail/claudecode", "agenticmail-claudecode");

package/dist/bin-codex.js

@@ -2,6 +2,7 @@
 import {
   runHostBin
 } from "./chunk-2LR3AJRX.js";
+import "./chunk-EHUD3MJT.js";
 
 // src/bin-codex.ts
 runHostBin("@agenticmail/codex", "agenticmail-codex");

package/dist/chunk-EHUD3MJT.js

@@ -0,0 +1,10 @@
+// src/suppress-experimental-warnings.ts
+{
+  const originalEmit = process.emit.bind(process);
+  process.emit = function(name, ...args) {
+    if (name === "warning" && args[0] && typeof args[0] === "object" && "name" in args[0] && args[0].name === "ExperimentalWarning" && "message" in args[0] && typeof args[0].message === "string" && /\bSQLite\b/i.test(args[0].message)) {
+      return false;
+    }
+    return originalEmit(name, ...args);
+  };
+}

package/dist/cli.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import "./chunk-EHUD3MJT.js";
 
 // src/cli.ts
 import { createInterface as createInterface2, emitKeypressEvents as emitKeypressEvents2 } from "readline";
@@ -5067,15 +5068,27 @@ async function cmdSetupEmail() {
     }
   } catch {
   }
-  const email = (await ask(`  ${c2.cyan("Your email address:")} `)).trim();
-  if (!email || !email.includes("@")) {
-    log2("");
-    fail2("That doesn't look like a valid email address.");
-    process.exit(1);
-  }
-  const domain = email.split("@")[1].toLowerCase();
   const GMAIL_DOMAINS = /* @__PURE__ */ new Set(["gmail.com", "googlemail.com"]);
   const OUTLOOK_DOMAINS = /* @__PURE__ */ new Set(["outlook.com", "hotmail.com", "live.com", "msn.com"]);
+  const EMAIL_SHAPE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+  const MAX_EMAIL_ATTEMPTS = 5;
+  let email = "";
+  for (let attempt = 1; attempt <= MAX_EMAIL_ATTEMPTS; attempt++) {
+    const raw = (await ask(`  ${c2.cyan("Your email address:")} `)).trim();
+    if (EMAIL_SHAPE.test(raw)) {
+      email = raw;
+      break;
+    }
+    fail2(`That doesn't look like a valid email address${raw ? ` (${raw})` : ""}.`);
+    if (attempt === MAX_EMAIL_ATTEMPTS) {
+      log2("");
+      info2("Too many invalid attempts \u2014 exiting. Re-run `agenticmail setup-email` when ready.");
+      log2("");
+      process.exit(1);
+    }
+    info2(`Try again ${c2.dim(`(attempt ${attempt + 1} of ${MAX_EMAIL_ATTEMPTS})`)}`);
+  }
+  const domain = email.split("@")[1].toLowerCase();
   let provider;
   let smtpHost;
   let smtpPort;
@@ -5117,60 +5130,89 @@ async function cmdSetupEmail() {
   if (appPasswordHint) log2(`  ${c2.dim(appPasswordHint)}`);
   log2(`  ${c2.dim("Spaces in the password are fine \u2014 we'll strip them.")}`);
   log2("");
-  const rawPassword = await askSecret(`  ${c2.cyan("Password:")} `);
-  const password = rawPassword.replace(/\s+/g, "");
-  if (!password) {
+  const MAX_PASSWORD_ATTEMPTS = 3;
+  for (let attempt = 1; attempt <= MAX_PASSWORD_ATTEMPTS; attempt++) {
+    const rawPassword = await askSecret(`  ${c2.cyan("Password:")} `);
+    const password = rawPassword.replace(/\s+/g, "");
+    if (!password) {
+      fail2("No password entered.");
+      if (attempt === MAX_PASSWORD_ATTEMPTS) {
+        info2("Exiting \u2014 re-run `agenticmail setup-email` when ready.");
+        log2("");
+        process.exit(1);
+      }
+      info2(`Try again ${c2.dim(`(attempt ${attempt + 1} of ${MAX_PASSWORD_ATTEMPTS})`)}`);
+      continue;
+    }
     log2("");
-    fail2("No password entered.");
-    process.exit(1);
-  }
-  log2("");
-  const spinner = new Spinner("relay");
-  spinner.start();
-  try {
-    const response = await fetch(`${apiBase}/api/agenticmail/gateway/relay`, {
-      method: "POST",
-      headers: {
-        "Authorization": `Bearer ${config.masterKey}`,
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify({
-        provider,
-        email,
-        password,
-        agentName,
-        smtpHost,
-        smtpPort,
-        imapHost,
-        imapPort
-      }),
-      signal: AbortSignal.timeout(3e4)
-    });
-    if (!response.ok) {
-      const text = await response.text();
-      const friendly = parseFriendlyError(text);
-      spinner.fail(friendly.message);
-      log2("");
-      if (friendly.isAuthError) {
-        info2("Check the email + password and run `agenticmail setup-email` again.");
+    const spinner = new Spinner("relay");
+    spinner.start();
+    let response;
+    try {
+      response = await fetch(`${apiBase}/api/agenticmail/gateway/relay`, {
+        method: "POST",
+        headers: {
+          "Authorization": `Bearer ${config.masterKey}`,
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify({
+          provider,
+          email,
+          password,
+          agentName,
+          smtpHost,
+          smtpPort,
+          imapHost,
+          imapPort
+        }),
+        signal: AbortSignal.timeout(9e4)
+      });
+    } catch (err) {
+      const msg = err.message;
+      const isTimeout = msg.includes("aborted due to timeout") || err.name === "TimeoutError" || err.name === "AbortError";
+      if (isTimeout) {
+        spinner.fail("Mail server took too long to respond (>90 s).");
+        if (attempt < MAX_PASSWORD_ATTEMPTS) {
+          log2(`  ${c2.yellow("Could be a flaky link or a slow IMAP handshake. Try again.")} ${c2.dim(`(attempt ${attempt + 1} of ${MAX_PASSWORD_ATTEMPTS})`)}`);
+          log2("");
+          continue;
+        }
+        log2("");
+        info2("If this keeps happening, check the API logs at ~/.agenticmail/logs/server.log");
+        log2("");
+        process.exit(1);
       }
+      spinner.fail(`Couldn't reach the API: ${msg}`);
       log2("");
       process.exit(1);
     }
-    const data = await response.json();
-    spinner.succeed(`Mailbox connected \u2014 ${c2.bold(email)} ${c2.dim("via " + provider)}`);
-    if (data?.agent?.subAddress) {
+    if (response.ok) {
+      const data = await response.json();
+      spinner.succeed(`Mailbox connected \u2014 ${c2.bold(email)} ${c2.dim("via " + provider)}`);
+      if (data?.agent?.subAddress) {
+        log2("");
+        ok2(`Agent ${c2.bold('"' + (data.agent.name ?? agentName) + '"')} ready at ${c2.cyan(data.agent.subAddress)}`);
+      }
+      log2("");
+      log2(`  ${c2.bold("Next:")} point bridge-escalation alerts at your personal email:`);
       log2("");
-      ok2(`Agent ${c2.bold('"' + (data.agent.name ?? agentName) + '"')} ready at ${c2.cyan(data.agent.subAddress)}`);
+      log2(`    ${c2.cyan("Option A")} \u2014 tell your host agent: "set my operator notification email to <you@example.com>"`);
+      log2(`    ${c2.cyan("Option B")} \u2014 open the web UI \u2192 click your avatar \u2192 ${c2.bold("Alert email")} \u2192 type, Save`);
+      log2("");
+      return;
+    }
+    const text = await response.text();
+    const friendly = parseFriendlyError(text);
+    spinner.fail(friendly.message);
+    if (friendly.isAuthError && attempt < MAX_PASSWORD_ATTEMPTS) {
+      log2(`  ${c2.yellow("Wrong password \u2014 try again.")} ${c2.dim(`(attempt ${attempt + 1} of ${MAX_PASSWORD_ATTEMPTS})`)}`);
+      log2("");
+      continue;
     }
     log2("");
-    log2(`  ${c2.bold("Next:")} point bridge-escalation alerts at your personal email:`);
-    log2("");
-    log2(`    ${c2.cyan("Option A")} \u2014 tell your host agent: "set my operator notification email to <you@example.com>"`);
-    log2(`    ${c2.cyan("Option B")} \u2014 open the web UI \u2192 click your avatar \u2192 ${c2.bold("Alert email")} \u2192 type, Save`);
-    log2("");
-  } catch (err) {
-    spinner.fail(`Setup-email failed: ${err.message}`);
+    if (friendly.isAuthError) {
+      info2("Check the email + password and re-run `agenticmail setup-email`.");
+    }
     log2("");
     process.exit(1);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/cli",
-  "version": "0.9.38",
+  "version": "0.9.40",
   "description": "Email and SMS infrastructure for AI agents — the first platform to give agents real email addresses and phone numbers",
   "type": "module",
   "main": "dist/index.js",
@@ -31,12 +31,12 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@agenticmail/api": "^0.9.27",
+    "@agenticmail/api": "^0.9.28",
     "@agenticmail/core": "^0.9.7",
     "json5": "^2.2.3"
   },
   "optionalDependencies": {
-    "@agenticmail/claudecode": "^0.2.21",
+    "@agenticmail/claudecode": "^0.2.22",
     "@agenticmail/codex": "^0.1.16"
   },
   "devDependencies": {