@agenticmail/core 0.9.8 → 0.9.10

package/dist/index.d.cts

@@ -481,6 +481,7 @@ interface MailSenderOptions {
     password: string;
     authUser?: string;
     secure?: boolean;
+    tlsRejectUnauthorized?: boolean;
 }
 interface SendResultWithRaw extends SendResult {
     /** Raw RFC822 message bytes (for appending to Sent folder) */
@@ -1442,13 +1443,13 @@ declare class RelayBridge {
 declare function startRelayBridge(options: RelayBridgeOptions): RelayBridge;
 
 /**
- * SMS Manager - Google Voice SMS integration
+ * SMS Manager - provider-backed SMS integration
  *
  * How it works:
- * 1. User sets up Google Voice with SMS-to-email forwarding
- * 2. Incoming SMS arrives at Google Voice -> forwarded to email -> lands in agent inbox
- * 3. Agent parses forwarded SMS from email body
- * 4. Outgoing SMS sent via Google Voice web interface (browser automation)
+ * 1. User chooses a provider for the agent phone number
+ * 2. Google Voice uses email forwarding/web instructions
+ * 3. 46elks uses direct API sends and inbound webhooks
+ * 4. All inbound/outbound messages are stored in the SMS table
  *
  * SMS config is stored in agent metadata under the "sms" key.
  */
@@ -1456,16 +1457,24 @@ declare function startRelayBridge(options: RelayBridgeOptions): RelayBridge;
 interface SmsConfig {
     /** Whether SMS is enabled for this agent */
     enabled: boolean;
-    /** Google Voice phone number (e.g. +12125551234) */
+    /** Phone number in E.164 format where possible */
     phoneNumber: string;
     /** The email address Google Voice forwards SMS to (the Gmail used for GV signup) */
-    forwardingEmail: string;
+    forwardingEmail?: string;
     /** App password for forwarding email (only needed if different from relay email) */
     forwardingPassword?: string;
     /** Whether the GV Gmail is the same as the relay email */
     sameAsRelay?: boolean;
-    /** Provider (currently only google_voice) */
-    provider: 'google_voice';
+    /** SMS provider */
+    provider: 'google_voice' | '46elks';
+    /** 46elks API username */
+    username?: string;
+    /** 46elks API password */
+    password?: string;
+    /** Provider API base URL override */
+    apiUrl?: string;
+    /** Secret required on inbound provider webhooks */
+    webhookSecret?: string;
     /** When SMS was configured */
     configuredAt: string;
 }
@@ -1485,6 +1494,37 @@ interface SmsMessage {
     createdAt: string;
     metadata?: Record<string, unknown>;
 }
+interface SendSmsInput {
+    to: string;
+    body: string;
+    dryRun?: boolean;
+}
+interface SendSmsResult {
+    provider: SmsConfig['provider'];
+    id?: string;
+    status: string;
+    from: string;
+    to: string;
+    body: string;
+    raw?: unknown;
+}
+interface InboundSmsEvent {
+    provider: SmsConfig['provider'];
+    id?: string;
+    from: string;
+    to: string;
+    body: string;
+    timestamp: string;
+    raw?: unknown;
+}
+interface SmsProvider {
+    id: SmsConfig['provider'];
+    sendSms(config: SmsConfig, input: SendSmsInput): Promise<SendSmsResult>;
+    parseInboundSms(payload: Record<string, unknown>): InboundSmsEvent | null;
+}
+declare function redactSmsConfig(config: SmsConfig): SmsConfig;
+declare function getSmsProvider(provider: SmsConfig['provider']): SmsProvider;
+declare function mapProviderSmsStatus(status: string): SmsMessage['status'];
 /** Normalize a phone number to E.164-ish format (+1XXXXXXXXXX) */
 declare function normalizePhoneNumber(raw: string): string | null;
 /** Validate a phone number (basic) */
@@ -1506,12 +1546,24 @@ declare function parseGoogleVoiceSms(emailBody: string, emailFrom: string): Pars
 declare function extractVerificationCode(smsBody: string): string | null;
 declare class SmsManager {
     private db;
+    private encryptionKey?;
     private initialized;
-    constructor(db: Database);
+    /**
+     * Optional master key used to encrypt SMS credentials at rest (same
+     * AES-256-GCM scheme GatewayManager uses for relay/domain secrets).
+     * When absent (e.g. tests, or a deployment with no master key) configs
+     * are stored as-is and reads tolerate plaintext — so upgrades and
+     * downgrades both stay safe.
+     */
+    constructor(db: Database, encryptionKey?: string | undefined);
+    /** Encrypt the credential fields of an SMS config before persisting. */
+    private encryptConfig;
+    /** Decrypt the credential fields of an SMS config after loading. */
+    private decryptConfig;
     private ensureTable;
-    /** Get SMS config from agent metadata */
+    /** Get SMS config from agent metadata (credential fields decrypted). */
     getSmsConfig(agentId: string): SmsConfig | null;
-    /** Save SMS config to agent metadata */
+    /** Save SMS config to agent metadata (credential fields encrypted). */
     saveSmsConfig(agentId: string, config: SmsConfig): void;
     /**
      * Resolve the operator's "where do I get pinged" address from an
@@ -1537,12 +1589,17 @@ declare class SmsManager {
     getAlertEmail(agentId: string): string | null;
     /** Remove SMS config from agent metadata */
     removeSmsConfig(agentId: string): void;
-    /** Record an inbound SMS (parsed from email) */
-    recordInbound(agentId: string, parsed: ParsedSms): SmsMessage;
+    /** Find the agent whose SMS config owns a phone number. */
+    findAgentBySmsNumber(phoneNumber: string, provider?: SmsConfig['provider']): {
+        agentId: string;
+        config: SmsConfig;
+    } | null;
+    /** Record an inbound SMS (parsed from email or provider webhook) */
+    recordInbound(agentId: string, parsed: ParsedSms, metadata?: Record<string, unknown>): SmsMessage;
     /** Record an outbound SMS attempt */
-    recordOutbound(agentId: string, phoneNumber: string, body: string, status?: 'pending' | 'sent' | 'failed'): SmsMessage;
-    /** Update SMS status */
-    updateStatus(id: string, status: SmsMessage['status']): void;
+    recordOutbound(agentId: string, phoneNumber: string, body: string, status?: 'pending' | 'sent' | 'failed', metadata?: Record<string, unknown>): SmsMessage;
+    /** Update SMS status and optional provider metadata */
+    updateStatus(id: string, status: SmsMessage['status'], metadata?: Record<string, unknown>): void;
     /** List SMS messages for an agent */
     listMessages(agentId: string, opts?: {
         direction?: 'inbound' | 'outbound';
@@ -1843,8 +1900,8 @@ declare function operatorPrefsStoragePath(): string;
  *
  * # What this is for
  *
- * When a sub-agent replies into the host bridge inbox
- * (`claudecode@localhost` / `codex@localhost`), the dispatcher
+ * When a sub-agent replies into a host bridge inbox
+ * (`claudecode@localhost` / `codex@localhost` / etc.), the dispatcher
  * historically had no way to react: bridges are skipped by
  * `shouldWatch` because they belong to the human operator's host CLI,
  * not to an automated worker. The mail would sit unread until the
@@ -1877,6 +1934,12 @@ declare function operatorPrefsStoragePath(): string;
  *       "sessionId": "019a2b3c-…",
  *       "workspace": "/Users/ope/Desktop/facebook-project",
  *       "lastSeenMs": 1778905100000
+ *     },
+ *     "openclaw": {
+ *       "sessionId": "openclaw-session-key",
+ *       "workspace": "/Users/ope/Desktop/facebook-project",
+ *       "lastSeenMs": 1778905000000,
+ *       "resumeMode": "wake"
  *     }
  *   }
  * }
@@ -1907,14 +1970,24 @@ declare function operatorPrefsStoragePath(): string;
  * that crashes the next reader. Same shape as `dispatcher-state.ts`.
  */
 /** Canonical names for the host integrations that own bridge inboxes. */
-type HostName = 'claudecode' | 'codex';
+type HostName = 'claudecode' | 'codex' | 'openclaw' | 'gemini' | 'hermes';
+/**
+ * How a host can be woken from a persisted session record.
+ *
+ * - `resume`: the host can resume a durable prior conversation/thread.
+ * - `wake`: the host can target a live or recently known session key, but does
+ *   not guarantee full headless resume semantics.
+ * - `wake-only`: the host can receive a wake notification, but the dispatcher
+ *   must not treat it as a resumed worker turn.
+ */
+type HostSessionResumeMode = 'resume' | 'wake' | 'wake-only';
 /**
  * A snapshot of one host CLI's last-known session. Persisted to disk
  * by the mail-hook on every fire; loaded by the dispatcher when
  * bridge mail arrives so a resume can be attempted.
  */
 interface HostSession {
-    /** Stable session_id from the host CLI (Claude Code or Codex). */
+    /** Stable session_id/thread_id/session key from the host CLI/runtime. */
     sessionId: string;
     /** Wall-clock timestamp of the last hook fire on this session. */
     lastSeenMs: number;
@@ -1924,6 +1997,10 @@ interface HostSession {
     /** Optional: model name the host session was using, surfaced
      *  in logs for diagnostic context. */
     model?: string;
+    /** Optional: describes whether this host supports true resume or only wake. */
+    resumeMode?: HostSessionResumeMode;
+    /** Optional host-specific metadata. Must not contain secrets. */
+    hostMetadata?: Record<string, unknown>;
 }
 /** Default freshness window — sessions older than this are skipped. */
 declare const DEFAULT_SESSION_MAX_AGE_MS: number;
@@ -1961,6 +2038,38 @@ declare function forgetHostSession(host: HostName): void;
 /** Exposed for tests + the `agenticmail status` diagnostic command. */
 declare function hostSessionStoragePath(): string;
 
+type BridgeWakeError = 'session-expired' | 'sdk-missing' | 'timeout' | 'other';
+interface BridgeWakeResult {
+    ok: boolean;
+    text?: string;
+    error?: BridgeWakeError;
+    errorMessage?: string;
+    durationMs?: number;
+}
+interface BridgeWakePromptArgs {
+    bridgeName: string;
+    uid: number;
+    subject?: string;
+    from?: string;
+    preview?: string;
+}
+interface ResumeErrorClassificationOptions {
+    expiredMarkers?: readonly string[];
+    sdkMissingMarkers?: readonly string[];
+}
+declare const BRIDGE_OPERATOR_LIVE_WINDOW_MS = 30000;
+declare function bridgeWakeErrorMessage(err: unknown): string;
+declare function classifyResumeError(err: unknown, options?: ResumeErrorClassificationOptions): BridgeWakeError;
+declare function bridgeWakeLastSeenAgeMs(session: Pick<HostSession, 'lastSeenMs'> | null | undefined, nowMs?: number): number | null;
+declare function shouldSkipBridgeWakeForLiveOperator(session: Pick<HostSession, 'lastSeenMs'> | null | undefined, nowMs?: number, liveWindowMs?: number): boolean;
+/**
+ * Build the prompt a host session sees on bridge wake. Host adapters
+ * keep their own SDK resume call, but share this operator-facing
+ * instruction shape so Claude Code, Codex, OpenClaw and later hosts
+ * do not drift semantically.
+ */
+declare function composeBridgeWakePrompt(args: BridgeWakePromptArgs): string;
+
 /**
  * SSRF-safe URL validation for the AgenticMail API base URL.
  *
@@ -2568,4 +2677,4 @@ declare class AgentMemoryStore {
     renderForPrompt(memory: AgentMemoryRead | null): string;
 }
 
-export { AGENT_ROLES, AccountManager, type AddressInfo, type Agent, AgentDeletionService, type AgentMemoryFields, type AgentMemoryOptions, type AgentMemoryRead, AgentMemoryStore, type AgentRole, AgenticMailClient, type AgenticMailClientOptions, type AgenticMailConfig, type ArchiveAndDeleteOptions, type ArchivedEmail, type Attachment, type AttachmentAdvisory, type CachedMessage, CloudflareClient, type CreateAgentOptions, DEFAULT_AGENT_NAME, DEFAULT_AGENT_ROLE, DEFAULT_SESSION_MAX_AGE_MS, DNSConfigurator, type Database, type DeletionReport, type DeletionSummary, DependencyChecker, DependencyInstaller, type DependencyStatus, type DnsRecord, type DnsSetupResult, type DomainInfo, DomainManager, type DomainModeConfig, type DomainPurchaseResult, DomainPurchaser, type DomainSearchResult, type DomainSetupResult, type EmailEnvelope, type EmailRouteAction, type EmailRouteClass, type EmailRouteClassification, type EmailRouteInput, EmailSearchIndex, type FolderInfo, type GatewayConfig, GatewayManager, type GatewayManagerOptions, type GatewayMode, type GatewayStatus, type HostName, type HostSession, type InboundEmail, type InboxEvent, type InboxExpungeEvent, type InboxFlagsEvent, type InboxNewEvent, InboxWatcher, type InboxWatcherOptions, type InstallProgress, type LinkAdvisory, type LocalSmtpConfig, MailReceiver, type MailReceiverOptions, MailSender, type MailSenderOptions, type MailboxInfo, type OutboundCategory, type OutboundScanInput, type OutboundScanResult, type OutboundWarning, type ParsedAttachment, type ParsedEmail, type ParsedSms, PathTraversalError, type PurchasedDomain, REDACTED, RELAY_PRESETS, RelayBridge, type RelayBridgeOptions, type RelayConfig, RelayGateway, type RelayProvider, type RelaySearchResult, SPAM_THRESHOLD, type SafeJoinOptions, type SanitizeDetection, type SanitizeResult, type SearchCriteria, type SearchableEmail, type SecurityAdvisory, type SendMailOptions, type SendResult, type SendResultWithRaw, ServiceManager, type ServiceStatus, type SetupConfig, SetupManager, type SetupResult, type Severity, type SmsConfig, SmsManager, type SmsMessage, SmsPoller, type SpamCategory, type SpamResult, type SpamRuleMatch, StalwartAdmin, type StalwartAdminOptions, type StalwartPrincipal, ThreadCache, type ThreadCacheEntry, type ThreadCacheOptions, type ThreadIdInput, type TunnelConfig, TunnelManager, UnsafeApiUrlError, WARNING_THRESHOLD, type WatcherOptions, assertWithinBase, buildApiUrl, buildInboundSecurityAdvisory, classifyEmailRoute, closeDatabase, createTestDatabase, debug, debugWarn, ensureDataDir, extractVerificationCode, flushTelemetry, forgetHostSession, getDatabase, getOperatorEmail, hostSessionStoragePath, isInternalEmail, isSessionFresh, isValidPhoneNumber, loadHostSession, normalizeAddress, normalizePhoneNumber, normalizeSubject, operatorPrefsStoragePath, parseEmail, parseGoogleVoiceSms, recordToolCall, redactObject, redactSecret, resolveConfig, safeJoin, sanitizeEmail, saveConfig, saveHostSession, scanOutboundEmail, scoreEmail, setOperatorEmail, setTelemetryVersion, startRelayBridge, threadIdFor, tryJoin, validateApiUrl };
+export { AGENT_ROLES, AccountManager, type AddressInfo, type Agent, AgentDeletionService, type AgentMemoryFields, type AgentMemoryOptions, type AgentMemoryRead, AgentMemoryStore, type AgentRole, AgenticMailClient, type AgenticMailClientOptions, type AgenticMailConfig, type ArchiveAndDeleteOptions, type ArchivedEmail, type Attachment, type AttachmentAdvisory, BRIDGE_OPERATOR_LIVE_WINDOW_MS, type BridgeWakeError, type BridgeWakePromptArgs, type BridgeWakeResult, type CachedMessage, CloudflareClient, type CreateAgentOptions, DEFAULT_AGENT_NAME, DEFAULT_AGENT_ROLE, DEFAULT_SESSION_MAX_AGE_MS, DNSConfigurator, type Database, type DeletionReport, type DeletionSummary, DependencyChecker, DependencyInstaller, type DependencyStatus, type DnsRecord, type DnsSetupResult, type DomainInfo, DomainManager, type DomainModeConfig, type DomainPurchaseResult, DomainPurchaser, type DomainSearchResult, type DomainSetupResult, type EmailEnvelope, type EmailRouteAction, type EmailRouteClass, type EmailRouteClassification, type EmailRouteInput, EmailSearchIndex, type FolderInfo, type GatewayConfig, GatewayManager, type GatewayManagerOptions, type GatewayMode, type GatewayStatus, type HostName, type HostSession, type HostSessionResumeMode, type InboundEmail, type InboundSmsEvent, type InboxEvent, type InboxExpungeEvent, type InboxFlagsEvent, type InboxNewEvent, InboxWatcher, type InboxWatcherOptions, type InstallProgress, type LinkAdvisory, type LocalSmtpConfig, MailReceiver, type MailReceiverOptions, MailSender, type MailSenderOptions, type MailboxInfo, type OutboundCategory, type OutboundScanInput, type OutboundScanResult, type OutboundWarning, type ParsedAttachment, type ParsedEmail, type ParsedSms, PathTraversalError, type PurchasedDomain, REDACTED, RELAY_PRESETS, RelayBridge, type RelayBridgeOptions, type RelayConfig, RelayGateway, type RelayProvider, type RelaySearchResult, type ResumeErrorClassificationOptions, SPAM_THRESHOLD, type SafeJoinOptions, type SanitizeDetection, type SanitizeResult, type SearchCriteria, type SearchableEmail, type SecurityAdvisory, type SendMailOptions, type SendResult, type SendResultWithRaw, type SendSmsInput, type SendSmsResult, ServiceManager, type ServiceStatus, type SetupConfig, SetupManager, type SetupResult, type Severity, type SmsConfig, SmsManager, type SmsMessage, SmsPoller, type SmsProvider, type SpamCategory, type SpamResult, type SpamRuleMatch, StalwartAdmin, type StalwartAdminOptions, type StalwartPrincipal, ThreadCache, type ThreadCacheEntry, type ThreadCacheOptions, type ThreadIdInput, type TunnelConfig, TunnelManager, UnsafeApiUrlError, WARNING_THRESHOLD, type WatcherOptions, assertWithinBase, bridgeWakeErrorMessage, bridgeWakeLastSeenAgeMs, buildApiUrl, buildInboundSecurityAdvisory, classifyEmailRoute, classifyResumeError, closeDatabase, composeBridgeWakePrompt, createTestDatabase, debug, debugWarn, ensureDataDir, extractVerificationCode, flushTelemetry, forgetHostSession, getDatabase, getOperatorEmail, getSmsProvider, hostSessionStoragePath, isInternalEmail, isSessionFresh, isValidPhoneNumber, loadHostSession, mapProviderSmsStatus, normalizeAddress, normalizePhoneNumber, normalizeSubject, operatorPrefsStoragePath, parseEmail, parseGoogleVoiceSms, recordToolCall, redactObject, redactSecret, redactSmsConfig, resolveConfig, safeJoin, sanitizeEmail, saveConfig, saveHostSession, scanOutboundEmail, scoreEmail, setOperatorEmail, setTelemetryVersion, shouldSkipBridgeWakeForLiveOperator, startRelayBridge, threadIdFor, tryJoin, validateApiUrl };

package/dist/index.d.ts

@@ -481,6 +481,7 @@ interface MailSenderOptions {
     password: string;
     authUser?: string;
     secure?: boolean;
+    tlsRejectUnauthorized?: boolean;
 }
 interface SendResultWithRaw extends SendResult {
     /** Raw RFC822 message bytes (for appending to Sent folder) */
@@ -1442,13 +1443,13 @@ declare class RelayBridge {
 declare function startRelayBridge(options: RelayBridgeOptions): RelayBridge;
 
 /**
- * SMS Manager - Google Voice SMS integration
+ * SMS Manager - provider-backed SMS integration
  *
  * How it works:
- * 1. User sets up Google Voice with SMS-to-email forwarding
- * 2. Incoming SMS arrives at Google Voice -> forwarded to email -> lands in agent inbox
- * 3. Agent parses forwarded SMS from email body
- * 4. Outgoing SMS sent via Google Voice web interface (browser automation)
+ * 1. User chooses a provider for the agent phone number
+ * 2. Google Voice uses email forwarding/web instructions
+ * 3. 46elks uses direct API sends and inbound webhooks
+ * 4. All inbound/outbound messages are stored in the SMS table
  *
  * SMS config is stored in agent metadata under the "sms" key.
  */
@@ -1456,16 +1457,24 @@ declare function startRelayBridge(options: RelayBridgeOptions): RelayBridge;
 interface SmsConfig {
     /** Whether SMS is enabled for this agent */
     enabled: boolean;
-    /** Google Voice phone number (e.g. +12125551234) */
+    /** Phone number in E.164 format where possible */
     phoneNumber: string;
     /** The email address Google Voice forwards SMS to (the Gmail used for GV signup) */
-    forwardingEmail: string;
+    forwardingEmail?: string;
     /** App password for forwarding email (only needed if different from relay email) */
     forwardingPassword?: string;
     /** Whether the GV Gmail is the same as the relay email */
     sameAsRelay?: boolean;
-    /** Provider (currently only google_voice) */
-    provider: 'google_voice';
+    /** SMS provider */
+    provider: 'google_voice' | '46elks';
+    /** 46elks API username */
+    username?: string;
+    /** 46elks API password */
+    password?: string;
+    /** Provider API base URL override */
+    apiUrl?: string;
+    /** Secret required on inbound provider webhooks */
+    webhookSecret?: string;
     /** When SMS was configured */
     configuredAt: string;
 }
@@ -1485,6 +1494,37 @@ interface SmsMessage {
     createdAt: string;
     metadata?: Record<string, unknown>;
 }
+interface SendSmsInput {
+    to: string;
+    body: string;
+    dryRun?: boolean;
+}
+interface SendSmsResult {
+    provider: SmsConfig['provider'];
+    id?: string;
+    status: string;
+    from: string;
+    to: string;
+    body: string;
+    raw?: unknown;
+}
+interface InboundSmsEvent {
+    provider: SmsConfig['provider'];
+    id?: string;
+    from: string;
+    to: string;
+    body: string;
+    timestamp: string;
+    raw?: unknown;
+}
+interface SmsProvider {
+    id: SmsConfig['provider'];
+    sendSms(config: SmsConfig, input: SendSmsInput): Promise<SendSmsResult>;
+    parseInboundSms(payload: Record<string, unknown>): InboundSmsEvent | null;
+}
+declare function redactSmsConfig(config: SmsConfig): SmsConfig;
+declare function getSmsProvider(provider: SmsConfig['provider']): SmsProvider;
+declare function mapProviderSmsStatus(status: string): SmsMessage['status'];
 /** Normalize a phone number to E.164-ish format (+1XXXXXXXXXX) */
 declare function normalizePhoneNumber(raw: string): string | null;
 /** Validate a phone number (basic) */
@@ -1506,12 +1546,24 @@ declare function parseGoogleVoiceSms(emailBody: string, emailFrom: string): Pars
 declare function extractVerificationCode(smsBody: string): string | null;
 declare class SmsManager {
     private db;
+    private encryptionKey?;
     private initialized;
-    constructor(db: Database);
+    /**
+     * Optional master key used to encrypt SMS credentials at rest (same
+     * AES-256-GCM scheme GatewayManager uses for relay/domain secrets).
+     * When absent (e.g. tests, or a deployment with no master key) configs
+     * are stored as-is and reads tolerate plaintext — so upgrades and
+     * downgrades both stay safe.
+     */
+    constructor(db: Database, encryptionKey?: string | undefined);
+    /** Encrypt the credential fields of an SMS config before persisting. */
+    private encryptConfig;
+    /** Decrypt the credential fields of an SMS config after loading. */
+    private decryptConfig;
     private ensureTable;
-    /** Get SMS config from agent metadata */
+    /** Get SMS config from agent metadata (credential fields decrypted). */
     getSmsConfig(agentId: string): SmsConfig | null;
-    /** Save SMS config to agent metadata */
+    /** Save SMS config to agent metadata (credential fields encrypted). */
     saveSmsConfig(agentId: string, config: SmsConfig): void;
     /**
      * Resolve the operator's "where do I get pinged" address from an
@@ -1537,12 +1589,17 @@ declare class SmsManager {
     getAlertEmail(agentId: string): string | null;
     /** Remove SMS config from agent metadata */
     removeSmsConfig(agentId: string): void;
-    /** Record an inbound SMS (parsed from email) */
-    recordInbound(agentId: string, parsed: ParsedSms): SmsMessage;
+    /** Find the agent whose SMS config owns a phone number. */
+    findAgentBySmsNumber(phoneNumber: string, provider?: SmsConfig['provider']): {
+        agentId: string;
+        config: SmsConfig;
+    } | null;
+    /** Record an inbound SMS (parsed from email or provider webhook) */
+    recordInbound(agentId: string, parsed: ParsedSms, metadata?: Record<string, unknown>): SmsMessage;
     /** Record an outbound SMS attempt */
-    recordOutbound(agentId: string, phoneNumber: string, body: string, status?: 'pending' | 'sent' | 'failed'): SmsMessage;
-    /** Update SMS status */
-    updateStatus(id: string, status: SmsMessage['status']): void;
+    recordOutbound(agentId: string, phoneNumber: string, body: string, status?: 'pending' | 'sent' | 'failed', metadata?: Record<string, unknown>): SmsMessage;
+    /** Update SMS status and optional provider metadata */
+    updateStatus(id: string, status: SmsMessage['status'], metadata?: Record<string, unknown>): void;
     /** List SMS messages for an agent */
     listMessages(agentId: string, opts?: {
         direction?: 'inbound' | 'outbound';
@@ -1843,8 +1900,8 @@ declare function operatorPrefsStoragePath(): string;
  *
  * # What this is for
  *
- * When a sub-agent replies into the host bridge inbox
- * (`claudecode@localhost` / `codex@localhost`), the dispatcher
+ * When a sub-agent replies into a host bridge inbox
+ * (`claudecode@localhost` / `codex@localhost` / etc.), the dispatcher
  * historically had no way to react: bridges are skipped by
  * `shouldWatch` because they belong to the human operator's host CLI,
  * not to an automated worker. The mail would sit unread until the
@@ -1877,6 +1934,12 @@ declare function operatorPrefsStoragePath(): string;
  *       "sessionId": "019a2b3c-…",
  *       "workspace": "/Users/ope/Desktop/facebook-project",
  *       "lastSeenMs": 1778905100000
+ *     },
+ *     "openclaw": {
+ *       "sessionId": "openclaw-session-key",
+ *       "workspace": "/Users/ope/Desktop/facebook-project",
+ *       "lastSeenMs": 1778905000000,
+ *       "resumeMode": "wake"
  *     }
  *   }
  * }
@@ -1907,14 +1970,24 @@ declare function operatorPrefsStoragePath(): string;
  * that crashes the next reader. Same shape as `dispatcher-state.ts`.
  */
 /** Canonical names for the host integrations that own bridge inboxes. */
-type HostName = 'claudecode' | 'codex';
+type HostName = 'claudecode' | 'codex' | 'openclaw' | 'gemini' | 'hermes';
+/**
+ * How a host can be woken from a persisted session record.
+ *
+ * - `resume`: the host can resume a durable prior conversation/thread.
+ * - `wake`: the host can target a live or recently known session key, but does
+ *   not guarantee full headless resume semantics.
+ * - `wake-only`: the host can receive a wake notification, but the dispatcher
+ *   must not treat it as a resumed worker turn.
+ */
+type HostSessionResumeMode = 'resume' | 'wake' | 'wake-only';
 /**
  * A snapshot of one host CLI's last-known session. Persisted to disk
  * by the mail-hook on every fire; loaded by the dispatcher when
  * bridge mail arrives so a resume can be attempted.
  */
 interface HostSession {
-    /** Stable session_id from the host CLI (Claude Code or Codex). */
+    /** Stable session_id/thread_id/session key from the host CLI/runtime. */
     sessionId: string;
     /** Wall-clock timestamp of the last hook fire on this session. */
     lastSeenMs: number;
@@ -1924,6 +1997,10 @@ interface HostSession {
     /** Optional: model name the host session was using, surfaced
      *  in logs for diagnostic context. */
     model?: string;
+    /** Optional: describes whether this host supports true resume or only wake. */
+    resumeMode?: HostSessionResumeMode;
+    /** Optional host-specific metadata. Must not contain secrets. */
+    hostMetadata?: Record<string, unknown>;
 }
 /** Default freshness window — sessions older than this are skipped. */
 declare const DEFAULT_SESSION_MAX_AGE_MS: number;
@@ -1961,6 +2038,38 @@ declare function forgetHostSession(host: HostName): void;
 /** Exposed for tests + the `agenticmail status` diagnostic command. */
 declare function hostSessionStoragePath(): string;
 
+type BridgeWakeError = 'session-expired' | 'sdk-missing' | 'timeout' | 'other';
+interface BridgeWakeResult {
+    ok: boolean;
+    text?: string;
+    error?: BridgeWakeError;
+    errorMessage?: string;
+    durationMs?: number;
+}
+interface BridgeWakePromptArgs {
+    bridgeName: string;
+    uid: number;
+    subject?: string;
+    from?: string;
+    preview?: string;
+}
+interface ResumeErrorClassificationOptions {
+    expiredMarkers?: readonly string[];
+    sdkMissingMarkers?: readonly string[];
+}
+declare const BRIDGE_OPERATOR_LIVE_WINDOW_MS = 30000;
+declare function bridgeWakeErrorMessage(err: unknown): string;
+declare function classifyResumeError(err: unknown, options?: ResumeErrorClassificationOptions): BridgeWakeError;
+declare function bridgeWakeLastSeenAgeMs(session: Pick<HostSession, 'lastSeenMs'> | null | undefined, nowMs?: number): number | null;
+declare function shouldSkipBridgeWakeForLiveOperator(session: Pick<HostSession, 'lastSeenMs'> | null | undefined, nowMs?: number, liveWindowMs?: number): boolean;
+/**
+ * Build the prompt a host session sees on bridge wake. Host adapters
+ * keep their own SDK resume call, but share this operator-facing
+ * instruction shape so Claude Code, Codex, OpenClaw and later hosts
+ * do not drift semantically.
+ */
+declare function composeBridgeWakePrompt(args: BridgeWakePromptArgs): string;
+
 /**
  * SSRF-safe URL validation for the AgenticMail API base URL.
  *
@@ -2568,4 +2677,4 @@ declare class AgentMemoryStore {
     renderForPrompt(memory: AgentMemoryRead | null): string;
 }
 
-export { AGENT_ROLES, AccountManager, type AddressInfo, type Agent, AgentDeletionService, type AgentMemoryFields, type AgentMemoryOptions, type AgentMemoryRead, AgentMemoryStore, type AgentRole, AgenticMailClient, type AgenticMailClientOptions, type AgenticMailConfig, type ArchiveAndDeleteOptions, type ArchivedEmail, type Attachment, type AttachmentAdvisory, type CachedMessage, CloudflareClient, type CreateAgentOptions, DEFAULT_AGENT_NAME, DEFAULT_AGENT_ROLE, DEFAULT_SESSION_MAX_AGE_MS, DNSConfigurator, type Database, type DeletionReport, type DeletionSummary, DependencyChecker, DependencyInstaller, type DependencyStatus, type DnsRecord, type DnsSetupResult, type DomainInfo, DomainManager, type DomainModeConfig, type DomainPurchaseResult, DomainPurchaser, type DomainSearchResult, type DomainSetupResult, type EmailEnvelope, type EmailRouteAction, type EmailRouteClass, type EmailRouteClassification, type EmailRouteInput, EmailSearchIndex, type FolderInfo, type GatewayConfig, GatewayManager, type GatewayManagerOptions, type GatewayMode, type GatewayStatus, type HostName, type HostSession, type InboundEmail, type InboxEvent, type InboxExpungeEvent, type InboxFlagsEvent, type InboxNewEvent, InboxWatcher, type InboxWatcherOptions, type InstallProgress, type LinkAdvisory, type LocalSmtpConfig, MailReceiver, type MailReceiverOptions, MailSender, type MailSenderOptions, type MailboxInfo, type OutboundCategory, type OutboundScanInput, type OutboundScanResult, type OutboundWarning, type ParsedAttachment, type ParsedEmail, type ParsedSms, PathTraversalError, type PurchasedDomain, REDACTED, RELAY_PRESETS, RelayBridge, type RelayBridgeOptions, type RelayConfig, RelayGateway, type RelayProvider, type RelaySearchResult, SPAM_THRESHOLD, type SafeJoinOptions, type SanitizeDetection, type SanitizeResult, type SearchCriteria, type SearchableEmail, type SecurityAdvisory, type SendMailOptions, type SendResult, type SendResultWithRaw, ServiceManager, type ServiceStatus, type SetupConfig, SetupManager, type SetupResult, type Severity, type SmsConfig, SmsManager, type SmsMessage, SmsPoller, type SpamCategory, type SpamResult, type SpamRuleMatch, StalwartAdmin, type StalwartAdminOptions, type StalwartPrincipal, ThreadCache, type ThreadCacheEntry, type ThreadCacheOptions, type ThreadIdInput, type TunnelConfig, TunnelManager, UnsafeApiUrlError, WARNING_THRESHOLD, type WatcherOptions, assertWithinBase, buildApiUrl, buildInboundSecurityAdvisory, classifyEmailRoute, closeDatabase, createTestDatabase, debug, debugWarn, ensureDataDir, extractVerificationCode, flushTelemetry, forgetHostSession, getDatabase, getOperatorEmail, hostSessionStoragePath, isInternalEmail, isSessionFresh, isValidPhoneNumber, loadHostSession, normalizeAddress, normalizePhoneNumber, normalizeSubject, operatorPrefsStoragePath, parseEmail, parseGoogleVoiceSms, recordToolCall, redactObject, redactSecret, resolveConfig, safeJoin, sanitizeEmail, saveConfig, saveHostSession, scanOutboundEmail, scoreEmail, setOperatorEmail, setTelemetryVersion, startRelayBridge, threadIdFor, tryJoin, validateApiUrl };
+export { AGENT_ROLES, AccountManager, type AddressInfo, type Agent, AgentDeletionService, type AgentMemoryFields, type AgentMemoryOptions, type AgentMemoryRead, AgentMemoryStore, type AgentRole, AgenticMailClient, type AgenticMailClientOptions, type AgenticMailConfig, type ArchiveAndDeleteOptions, type ArchivedEmail, type Attachment, type AttachmentAdvisory, BRIDGE_OPERATOR_LIVE_WINDOW_MS, type BridgeWakeError, type BridgeWakePromptArgs, type BridgeWakeResult, type CachedMessage, CloudflareClient, type CreateAgentOptions, DEFAULT_AGENT_NAME, DEFAULT_AGENT_ROLE, DEFAULT_SESSION_MAX_AGE_MS, DNSConfigurator, type Database, type DeletionReport, type DeletionSummary, DependencyChecker, DependencyInstaller, type DependencyStatus, type DnsRecord, type DnsSetupResult, type DomainInfo, DomainManager, type DomainModeConfig, type DomainPurchaseResult, DomainPurchaser, type DomainSearchResult, type DomainSetupResult, type EmailEnvelope, type EmailRouteAction, type EmailRouteClass, type EmailRouteClassification, type EmailRouteInput, EmailSearchIndex, type FolderInfo, type GatewayConfig, GatewayManager, type GatewayManagerOptions, type GatewayMode, type GatewayStatus, type HostName, type HostSession, type HostSessionResumeMode, type InboundEmail, type InboundSmsEvent, type InboxEvent, type InboxExpungeEvent, type InboxFlagsEvent, type InboxNewEvent, InboxWatcher, type InboxWatcherOptions, type InstallProgress, type LinkAdvisory, type LocalSmtpConfig, MailReceiver, type MailReceiverOptions, MailSender, type MailSenderOptions, type MailboxInfo, type OutboundCategory, type OutboundScanInput, type OutboundScanResult, type OutboundWarning, type ParsedAttachment, type ParsedEmail, type ParsedSms, PathTraversalError, type PurchasedDomain, REDACTED, RELAY_PRESETS, RelayBridge, type RelayBridgeOptions, type RelayConfig, RelayGateway, type RelayProvider, type RelaySearchResult, type ResumeErrorClassificationOptions, SPAM_THRESHOLD, type SafeJoinOptions, type SanitizeDetection, type SanitizeResult, type SearchCriteria, type SearchableEmail, type SecurityAdvisory, type SendMailOptions, type SendResult, type SendResultWithRaw, type SendSmsInput, type SendSmsResult, ServiceManager, type ServiceStatus, type SetupConfig, SetupManager, type SetupResult, type Severity, type SmsConfig, SmsManager, type SmsMessage, SmsPoller, type SmsProvider, type SpamCategory, type SpamResult, type SpamRuleMatch, StalwartAdmin, type StalwartAdminOptions, type StalwartPrincipal, ThreadCache, type ThreadCacheEntry, type ThreadCacheOptions, type ThreadIdInput, type TunnelConfig, TunnelManager, UnsafeApiUrlError, WARNING_THRESHOLD, type WatcherOptions, assertWithinBase, bridgeWakeErrorMessage, bridgeWakeLastSeenAgeMs, buildApiUrl, buildInboundSecurityAdvisory, classifyEmailRoute, classifyResumeError, closeDatabase, composeBridgeWakePrompt, createTestDatabase, debug, debugWarn, ensureDataDir, extractVerificationCode, flushTelemetry, forgetHostSession, getDatabase, getOperatorEmail, getSmsProvider, hostSessionStoragePath, isInternalEmail, isSessionFresh, isValidPhoneNumber, loadHostSession, mapProviderSmsStatus, normalizeAddress, normalizePhoneNumber, normalizeSubject, operatorPrefsStoragePath, parseEmail, parseGoogleVoiceSms, recordToolCall, redactObject, redactSecret, redactSmsConfig, resolveConfig, safeJoin, sanitizeEmail, saveConfig, saveHostSession, scanOutboundEmail, scoreEmail, setOperatorEmail, setTelemetryVersion, shouldSkipBridgeWakeForLiveOperator, startRelayBridge, threadIdFor, tryJoin, validateApiUrl };