@agenticmail/core 0.9.9 → 0.9.10

package/dist/index.cjs

@@ -713,6 +713,7 @@ __export(index_exports, {
   AgentDeletionService: () => AgentDeletionService,
   AgentMemoryStore: () => AgentMemoryStore,
   AgenticMailClient: () => AgenticMailClient,
+  BRIDGE_OPERATOR_LIVE_WINDOW_MS: () => BRIDGE_OPERATOR_LIVE_WINDOW_MS,
   CloudflareClient: () => CloudflareClient,
   DEFAULT_AGENT_NAME: () => DEFAULT_AGENT_NAME,
   DEFAULT_AGENT_ROLE: () => DEFAULT_AGENT_ROLE,
@@ -743,10 +744,14 @@ __export(index_exports, {
   UnsafeApiUrlError: () => UnsafeApiUrlError,
   WARNING_THRESHOLD: () => WARNING_THRESHOLD,
   assertWithinBase: () => assertWithinBase,
+  bridgeWakeErrorMessage: () => bridgeWakeErrorMessage,
+  bridgeWakeLastSeenAgeMs: () => bridgeWakeLastSeenAgeMs,
   buildApiUrl: () => buildApiUrl,
   buildInboundSecurityAdvisory: () => buildInboundSecurityAdvisory,
   classifyEmailRoute: () => classifyEmailRoute,
+  classifyResumeError: () => classifyResumeError,
   closeDatabase: () => closeDatabase,
+  composeBridgeWakePrompt: () => composeBridgeWakePrompt,
   createTestDatabase: () => createTestDatabase,
   debug: () => debug,
   debugWarn: () => debugWarn,
@@ -782,6 +787,7 @@ __export(index_exports, {
   scoreEmail: () => scoreEmail,
   setOperatorEmail: () => setOperatorEmail,
   setTelemetryVersion: () => setTelemetryVersion,
+  shouldSkipBridgeWakeForLiveOperator: () => shouldSkipBridgeWakeForLiveOperator,
   startRelayBridge: () => startRelayBridge,
   threadIdFor: () => threadIdFor,
   tryJoin: () => tryJoin,
@@ -805,8 +811,7 @@ var MailSender = class {
         pass: options.password
       },
       tls: {
-        rejectUnauthorized: false
-        // Local dev — no TLS
+        rejectUnauthorized: options.tlsRejectUnauthorized ?? true
       },
       connectionTimeout: 1e4,
       // 10s to establish TCP connection
@@ -7233,6 +7238,69 @@ function hostSessionStoragePath() {
   return storagePath();
 }
 
+// src/host-bridge.ts
+var BRIDGE_OPERATOR_LIVE_WINDOW_MS = 3e4;
+var DEFAULT_EXPIRED_MARKERS = [
+  "session not found",
+  "invalid session",
+  "session expired",
+  "no such session",
+  "unknown session",
+  "thread not found",
+  "invalid thread",
+  "thread expired",
+  "no such thread",
+  "unknown thread"
+];
+var DEFAULT_SDK_MISSING_MARKERS = [
+  "cannot find module",
+  "could not be found",
+  "command not found"
+];
+function bridgeWakeErrorMessage(err) {
+  return err?.message ?? String(err);
+}
+function classifyResumeError(err, options = {}) {
+  const msg = bridgeWakeErrorMessage(err).toLowerCase();
+  const expiredMarkers = options.expiredMarkers ?? DEFAULT_EXPIRED_MARKERS;
+  const sdkMissingMarkers = options.sdkMissingMarkers ?? DEFAULT_SDK_MISSING_MARKERS;
+  if (expiredMarkers.some((marker) => msg.includes(marker))) return "session-expired";
+  if (sdkMissingMarkers.some((marker) => msg.includes(marker))) return "sdk-missing";
+  return "other";
+}
+function bridgeWakeLastSeenAgeMs(session, nowMs = Date.now()) {
+  if (!session) return null;
+  return nowMs - session.lastSeenMs;
+}
+function shouldSkipBridgeWakeForLiveOperator(session, nowMs = Date.now(), liveWindowMs = BRIDGE_OPERATOR_LIVE_WINDOW_MS) {
+  const ageMs = bridgeWakeLastSeenAgeMs(session, nowMs);
+  return ageMs !== null && ageMs < liveWindowMs;
+}
+function composeBridgeWakePrompt(args) {
+  const subject = args.subject ?? "(no subject)";
+  const from = args.from ?? "unknown";
+  const preview = (args.preview ?? "").slice(0, 600);
+  return [
+    `\u{1F380} Bridge mail arrived \u2014 headless wake.`,
+    "",
+    `You are being resumed against your last session because new mail landed in your bridge inbox (${args.bridgeName}@localhost) and you weren't actively at the keyboard.`,
+    "",
+    `Trigger:`,
+    `  UID:     ${args.uid}`,
+    `  From:    ${from}`,
+    `  Subject: ${subject}`,
+    `  Preview: ${preview}`,
+    "",
+    `Read it with mcp__agenticmail__read_email({ uid: ${args.uid} }) and decide:`,
+    `  \xB7 Does it need a reply from YOU (the operator's session)? Reply via mcp__agenticmail__reply_email.`,
+    `  \xB7 Does it need a teammate to act? Forward / re-route by replying with wake: ["<teammate>"].`,
+    `  \xB7 Is it [NEEDS OPERATOR] / [BLOCKED]? Then it's actually for the human \u2014 mark it unread, and the operator will see it on their next keystroke.`,
+    `  \xB7 Is it FYI noise? mark_read and exit.`,
+    "",
+    `Keep this turn SHORT. You're being resumed to handle ONE piece of mail, not to continue the prior conversation.`
+  ].join("\n");
+}
+
 // src/util/safe-url.ts
 var UnsafeApiUrlError = class extends Error {
   constructor(raw, reason) {
@@ -8910,6 +8978,7 @@ function parse(raw) {
   AgentDeletionService,
   AgentMemoryStore,
   AgenticMailClient,
+  BRIDGE_OPERATOR_LIVE_WINDOW_MS,
   CloudflareClient,
   DEFAULT_AGENT_NAME,
   DEFAULT_AGENT_ROLE,
@@ -8940,10 +9009,14 @@ function parse(raw) {
   UnsafeApiUrlError,
   WARNING_THRESHOLD,
   assertWithinBase,
+  bridgeWakeErrorMessage,
+  bridgeWakeLastSeenAgeMs,
   buildApiUrl,
   buildInboundSecurityAdvisory,
   classifyEmailRoute,
+  classifyResumeError,
   closeDatabase,
+  composeBridgeWakePrompt,
   createTestDatabase,
   debug,
   debugWarn,
@@ -8979,6 +9052,7 @@ function parse(raw) {
   scoreEmail,
   setOperatorEmail,
   setTelemetryVersion,
+  shouldSkipBridgeWakeForLiveOperator,
   startRelayBridge,
   threadIdFor,
   tryJoin,

package/dist/index.d.cts

@@ -481,6 +481,7 @@ interface MailSenderOptions {
     password: string;
     authUser?: string;
     secure?: boolean;
+    tlsRejectUnauthorized?: boolean;
 }
 interface SendResultWithRaw extends SendResult {
     /** Raw RFC822 message bytes (for appending to Sent folder) */
@@ -1899,8 +1900,8 @@ declare function operatorPrefsStoragePath(): string;
  *
  * # What this is for
  *
- * When a sub-agent replies into the host bridge inbox
- * (`claudecode@localhost` / `codex@localhost`), the dispatcher
+ * When a sub-agent replies into a host bridge inbox
+ * (`claudecode@localhost` / `codex@localhost` / etc.), the dispatcher
  * historically had no way to react: bridges are skipped by
  * `shouldWatch` because they belong to the human operator's host CLI,
  * not to an automated worker. The mail would sit unread until the
@@ -1933,6 +1934,12 @@ declare function operatorPrefsStoragePath(): string;
  *       "sessionId": "019a2b3c-…",
  *       "workspace": "/Users/ope/Desktop/facebook-project",
  *       "lastSeenMs": 1778905100000
+ *     },
+ *     "openclaw": {
+ *       "sessionId": "openclaw-session-key",
+ *       "workspace": "/Users/ope/Desktop/facebook-project",
+ *       "lastSeenMs": 1778905000000,
+ *       "resumeMode": "wake"
  *     }
  *   }
  * }
@@ -1963,14 +1970,24 @@ declare function operatorPrefsStoragePath(): string;
  * that crashes the next reader. Same shape as `dispatcher-state.ts`.
  */
 /** Canonical names for the host integrations that own bridge inboxes. */
-type HostName = 'claudecode' | 'codex';
+type HostName = 'claudecode' | 'codex' | 'openclaw' | 'gemini' | 'hermes';
+/**
+ * How a host can be woken from a persisted session record.
+ *
+ * - `resume`: the host can resume a durable prior conversation/thread.
+ * - `wake`: the host can target a live or recently known session key, but does
+ *   not guarantee full headless resume semantics.
+ * - `wake-only`: the host can receive a wake notification, but the dispatcher
+ *   must not treat it as a resumed worker turn.
+ */
+type HostSessionResumeMode = 'resume' | 'wake' | 'wake-only';
 /**
  * A snapshot of one host CLI's last-known session. Persisted to disk
  * by the mail-hook on every fire; loaded by the dispatcher when
  * bridge mail arrives so a resume can be attempted.
  */
 interface HostSession {
-    /** Stable session_id from the host CLI (Claude Code or Codex). */
+    /** Stable session_id/thread_id/session key from the host CLI/runtime. */
     sessionId: string;
     /** Wall-clock timestamp of the last hook fire on this session. */
     lastSeenMs: number;
@@ -1980,6 +1997,10 @@ interface HostSession {
     /** Optional: model name the host session was using, surfaced
      *  in logs for diagnostic context. */
     model?: string;
+    /** Optional: describes whether this host supports true resume or only wake. */
+    resumeMode?: HostSessionResumeMode;
+    /** Optional host-specific metadata. Must not contain secrets. */
+    hostMetadata?: Record<string, unknown>;
 }
 /** Default freshness window — sessions older than this are skipped. */
 declare const DEFAULT_SESSION_MAX_AGE_MS: number;
@@ -2017,6 +2038,38 @@ declare function forgetHostSession(host: HostName): void;
 /** Exposed for tests + the `agenticmail status` diagnostic command. */
 declare function hostSessionStoragePath(): string;
 
+type BridgeWakeError = 'session-expired' | 'sdk-missing' | 'timeout' | 'other';
+interface BridgeWakeResult {
+    ok: boolean;
+    text?: string;
+    error?: BridgeWakeError;
+    errorMessage?: string;
+    durationMs?: number;
+}
+interface BridgeWakePromptArgs {
+    bridgeName: string;
+    uid: number;
+    subject?: string;
+    from?: string;
+    preview?: string;
+}
+interface ResumeErrorClassificationOptions {
+    expiredMarkers?: readonly string[];
+    sdkMissingMarkers?: readonly string[];
+}
+declare const BRIDGE_OPERATOR_LIVE_WINDOW_MS = 30000;
+declare function bridgeWakeErrorMessage(err: unknown): string;
+declare function classifyResumeError(err: unknown, options?: ResumeErrorClassificationOptions): BridgeWakeError;
+declare function bridgeWakeLastSeenAgeMs(session: Pick<HostSession, 'lastSeenMs'> | null | undefined, nowMs?: number): number | null;
+declare function shouldSkipBridgeWakeForLiveOperator(session: Pick<HostSession, 'lastSeenMs'> | null | undefined, nowMs?: number, liveWindowMs?: number): boolean;
+/**
+ * Build the prompt a host session sees on bridge wake. Host adapters
+ * keep their own SDK resume call, but share this operator-facing
+ * instruction shape so Claude Code, Codex, OpenClaw and later hosts
+ * do not drift semantically.
+ */
+declare function composeBridgeWakePrompt(args: BridgeWakePromptArgs): string;
+
 /**
  * SSRF-safe URL validation for the AgenticMail API base URL.
  *
@@ -2624,4 +2677,4 @@ declare class AgentMemoryStore {
     renderForPrompt(memory: AgentMemoryRead | null): string;
 }
 
-export { AGENT_ROLES, AccountManager, type AddressInfo, type Agent, AgentDeletionService, type AgentMemoryFields, type AgentMemoryOptions, type AgentMemoryRead, AgentMemoryStore, type AgentRole, AgenticMailClient, type AgenticMailClientOptions, type AgenticMailConfig, type ArchiveAndDeleteOptions, type ArchivedEmail, type Attachment, type AttachmentAdvisory, type CachedMessage, CloudflareClient, type CreateAgentOptions, DEFAULT_AGENT_NAME, DEFAULT_AGENT_ROLE, DEFAULT_SESSION_MAX_AGE_MS, DNSConfigurator, type Database, type DeletionReport, type DeletionSummary, DependencyChecker, DependencyInstaller, type DependencyStatus, type DnsRecord, type DnsSetupResult, type DomainInfo, DomainManager, type DomainModeConfig, type DomainPurchaseResult, DomainPurchaser, type DomainSearchResult, type DomainSetupResult, type EmailEnvelope, type EmailRouteAction, type EmailRouteClass, type EmailRouteClassification, type EmailRouteInput, EmailSearchIndex, type FolderInfo, type GatewayConfig, GatewayManager, type GatewayManagerOptions, type GatewayMode, type GatewayStatus, type HostName, type HostSession, type InboundEmail, type InboundSmsEvent, type InboxEvent, type InboxExpungeEvent, type InboxFlagsEvent, type InboxNewEvent, InboxWatcher, type InboxWatcherOptions, type InstallProgress, type LinkAdvisory, type LocalSmtpConfig, MailReceiver, type MailReceiverOptions, MailSender, type MailSenderOptions, type MailboxInfo, type OutboundCategory, type OutboundScanInput, type OutboundScanResult, type OutboundWarning, type ParsedAttachment, type ParsedEmail, type ParsedSms, PathTraversalError, type PurchasedDomain, REDACTED, RELAY_PRESETS, RelayBridge, type RelayBridgeOptions, type RelayConfig, RelayGateway, type RelayProvider, type RelaySearchResult, SPAM_THRESHOLD, type SafeJoinOptions, type SanitizeDetection, type SanitizeResult, type SearchCriteria, type SearchableEmail, type SecurityAdvisory, type SendMailOptions, type SendResult, type SendResultWithRaw, type SendSmsInput, type SendSmsResult, ServiceManager, type ServiceStatus, type SetupConfig, SetupManager, type SetupResult, type Severity, type SmsConfig, SmsManager, type SmsMessage, SmsPoller, type SmsProvider, type SpamCategory, type SpamResult, type SpamRuleMatch, StalwartAdmin, type StalwartAdminOptions, type StalwartPrincipal, ThreadCache, type ThreadCacheEntry, type ThreadCacheOptions, type ThreadIdInput, type TunnelConfig, TunnelManager, UnsafeApiUrlError, WARNING_THRESHOLD, type WatcherOptions, assertWithinBase, buildApiUrl, buildInboundSecurityAdvisory, classifyEmailRoute, closeDatabase, createTestDatabase, debug, debugWarn, ensureDataDir, extractVerificationCode, flushTelemetry, forgetHostSession, getDatabase, getOperatorEmail, getSmsProvider, hostSessionStoragePath, isInternalEmail, isSessionFresh, isValidPhoneNumber, loadHostSession, mapProviderSmsStatus, normalizeAddress, normalizePhoneNumber, normalizeSubject, operatorPrefsStoragePath, parseEmail, parseGoogleVoiceSms, recordToolCall, redactObject, redactSecret, redactSmsConfig, resolveConfig, safeJoin, sanitizeEmail, saveConfig, saveHostSession, scanOutboundEmail, scoreEmail, setOperatorEmail, setTelemetryVersion, startRelayBridge, threadIdFor, tryJoin, validateApiUrl };
+export { AGENT_ROLES, AccountManager, type AddressInfo, type Agent, AgentDeletionService, type AgentMemoryFields, type AgentMemoryOptions, type AgentMemoryRead, AgentMemoryStore, type AgentRole, AgenticMailClient, type AgenticMailClientOptions, type AgenticMailConfig, type ArchiveAndDeleteOptions, type ArchivedEmail, type Attachment, type AttachmentAdvisory, BRIDGE_OPERATOR_LIVE_WINDOW_MS, type BridgeWakeError, type BridgeWakePromptArgs, type BridgeWakeResult, type CachedMessage, CloudflareClient, type CreateAgentOptions, DEFAULT_AGENT_NAME, DEFAULT_AGENT_ROLE, DEFAULT_SESSION_MAX_AGE_MS, DNSConfigurator, type Database, type DeletionReport, type DeletionSummary, DependencyChecker, DependencyInstaller, type DependencyStatus, type DnsRecord, type DnsSetupResult, type DomainInfo, DomainManager, type DomainModeConfig, type DomainPurchaseResult, DomainPurchaser, type DomainSearchResult, type DomainSetupResult, type EmailEnvelope, type EmailRouteAction, type EmailRouteClass, type EmailRouteClassification, type EmailRouteInput, EmailSearchIndex, type FolderInfo, type GatewayConfig, GatewayManager, type GatewayManagerOptions, type GatewayMode, type GatewayStatus, type HostName, type HostSession, type HostSessionResumeMode, type InboundEmail, type InboundSmsEvent, type InboxEvent, type InboxExpungeEvent, type InboxFlagsEvent, type InboxNewEvent, InboxWatcher, type InboxWatcherOptions, type InstallProgress, type LinkAdvisory, type LocalSmtpConfig, MailReceiver, type MailReceiverOptions, MailSender, type MailSenderOptions, type MailboxInfo, type OutboundCategory, type OutboundScanInput, type OutboundScanResult, type OutboundWarning, type ParsedAttachment, type ParsedEmail, type ParsedSms, PathTraversalError, type PurchasedDomain, REDACTED, RELAY_PRESETS, RelayBridge, type RelayBridgeOptions, type RelayConfig, RelayGateway, type RelayProvider, type RelaySearchResult, type ResumeErrorClassificationOptions, SPAM_THRESHOLD, type SafeJoinOptions, type SanitizeDetection, type SanitizeResult, type SearchCriteria, type SearchableEmail, type SecurityAdvisory, type SendMailOptions, type SendResult, type SendResultWithRaw, type SendSmsInput, type SendSmsResult, ServiceManager, type ServiceStatus, type SetupConfig, SetupManager, type SetupResult, type Severity, type SmsConfig, SmsManager, type SmsMessage, SmsPoller, type SmsProvider, type SpamCategory, type SpamResult, type SpamRuleMatch, StalwartAdmin, type StalwartAdminOptions, type StalwartPrincipal, ThreadCache, type ThreadCacheEntry, type ThreadCacheOptions, type ThreadIdInput, type TunnelConfig, TunnelManager, UnsafeApiUrlError, WARNING_THRESHOLD, type WatcherOptions, assertWithinBase, bridgeWakeErrorMessage, bridgeWakeLastSeenAgeMs, buildApiUrl, buildInboundSecurityAdvisory, classifyEmailRoute, classifyResumeError, closeDatabase, composeBridgeWakePrompt, createTestDatabase, debug, debugWarn, ensureDataDir, extractVerificationCode, flushTelemetry, forgetHostSession, getDatabase, getOperatorEmail, getSmsProvider, hostSessionStoragePath, isInternalEmail, isSessionFresh, isValidPhoneNumber, loadHostSession, mapProviderSmsStatus, normalizeAddress, normalizePhoneNumber, normalizeSubject, operatorPrefsStoragePath, parseEmail, parseGoogleVoiceSms, recordToolCall, redactObject, redactSecret, redactSmsConfig, resolveConfig, safeJoin, sanitizeEmail, saveConfig, saveHostSession, scanOutboundEmail, scoreEmail, setOperatorEmail, setTelemetryVersion, shouldSkipBridgeWakeForLiveOperator, startRelayBridge, threadIdFor, tryJoin, validateApiUrl };

package/dist/index.d.ts

@@ -481,6 +481,7 @@ interface MailSenderOptions {
     password: string;
     authUser?: string;
     secure?: boolean;
+    tlsRejectUnauthorized?: boolean;
 }
 interface SendResultWithRaw extends SendResult {
     /** Raw RFC822 message bytes (for appending to Sent folder) */
@@ -1899,8 +1900,8 @@ declare function operatorPrefsStoragePath(): string;
  *
  * # What this is for
  *
- * When a sub-agent replies into the host bridge inbox
- * (`claudecode@localhost` / `codex@localhost`), the dispatcher
+ * When a sub-agent replies into a host bridge inbox
+ * (`claudecode@localhost` / `codex@localhost` / etc.), the dispatcher
  * historically had no way to react: bridges are skipped by
  * `shouldWatch` because they belong to the human operator's host CLI,
  * not to an automated worker. The mail would sit unread until the
@@ -1933,6 +1934,12 @@ declare function operatorPrefsStoragePath(): string;
  *       "sessionId": "019a2b3c-…",
  *       "workspace": "/Users/ope/Desktop/facebook-project",
  *       "lastSeenMs": 1778905100000
+ *     },
+ *     "openclaw": {
+ *       "sessionId": "openclaw-session-key",
+ *       "workspace": "/Users/ope/Desktop/facebook-project",
+ *       "lastSeenMs": 1778905000000,
+ *       "resumeMode": "wake"
  *     }
  *   }
  * }
@@ -1963,14 +1970,24 @@ declare function operatorPrefsStoragePath(): string;
  * that crashes the next reader. Same shape as `dispatcher-state.ts`.
  */
 /** Canonical names for the host integrations that own bridge inboxes. */
-type HostName = 'claudecode' | 'codex';
+type HostName = 'claudecode' | 'codex' | 'openclaw' | 'gemini' | 'hermes';
+/**
+ * How a host can be woken from a persisted session record.
+ *
+ * - `resume`: the host can resume a durable prior conversation/thread.
+ * - `wake`: the host can target a live or recently known session key, but does
+ *   not guarantee full headless resume semantics.
+ * - `wake-only`: the host can receive a wake notification, but the dispatcher
+ *   must not treat it as a resumed worker turn.
+ */
+type HostSessionResumeMode = 'resume' | 'wake' | 'wake-only';
 /**
  * A snapshot of one host CLI's last-known session. Persisted to disk
  * by the mail-hook on every fire; loaded by the dispatcher when
  * bridge mail arrives so a resume can be attempted.
  */
 interface HostSession {
-    /** Stable session_id from the host CLI (Claude Code or Codex). */
+    /** Stable session_id/thread_id/session key from the host CLI/runtime. */
     sessionId: string;
     /** Wall-clock timestamp of the last hook fire on this session. */
     lastSeenMs: number;
@@ -1980,6 +1997,10 @@ interface HostSession {
     /** Optional: model name the host session was using, surfaced
      *  in logs for diagnostic context. */
     model?: string;
+    /** Optional: describes whether this host supports true resume or only wake. */
+    resumeMode?: HostSessionResumeMode;
+    /** Optional host-specific metadata. Must not contain secrets. */
+    hostMetadata?: Record<string, unknown>;
 }
 /** Default freshness window — sessions older than this are skipped. */
 declare const DEFAULT_SESSION_MAX_AGE_MS: number;
@@ -2017,6 +2038,38 @@ declare function forgetHostSession(host: HostName): void;
 /** Exposed for tests + the `agenticmail status` diagnostic command. */
 declare function hostSessionStoragePath(): string;
 
+type BridgeWakeError = 'session-expired' | 'sdk-missing' | 'timeout' | 'other';
+interface BridgeWakeResult {
+    ok: boolean;
+    text?: string;
+    error?: BridgeWakeError;
+    errorMessage?: string;
+    durationMs?: number;
+}
+interface BridgeWakePromptArgs {
+    bridgeName: string;
+    uid: number;
+    subject?: string;
+    from?: string;
+    preview?: string;
+}
+interface ResumeErrorClassificationOptions {
+    expiredMarkers?: readonly string[];
+    sdkMissingMarkers?: readonly string[];
+}
+declare const BRIDGE_OPERATOR_LIVE_WINDOW_MS = 30000;
+declare function bridgeWakeErrorMessage(err: unknown): string;
+declare function classifyResumeError(err: unknown, options?: ResumeErrorClassificationOptions): BridgeWakeError;
+declare function bridgeWakeLastSeenAgeMs(session: Pick<HostSession, 'lastSeenMs'> | null | undefined, nowMs?: number): number | null;
+declare function shouldSkipBridgeWakeForLiveOperator(session: Pick<HostSession, 'lastSeenMs'> | null | undefined, nowMs?: number, liveWindowMs?: number): boolean;
+/**
+ * Build the prompt a host session sees on bridge wake. Host adapters
+ * keep their own SDK resume call, but share this operator-facing
+ * instruction shape so Claude Code, Codex, OpenClaw and later hosts
+ * do not drift semantically.
+ */
+declare function composeBridgeWakePrompt(args: BridgeWakePromptArgs): string;
+
 /**
  * SSRF-safe URL validation for the AgenticMail API base URL.
  *
@@ -2624,4 +2677,4 @@ declare class AgentMemoryStore {
     renderForPrompt(memory: AgentMemoryRead | null): string;
 }
 
-export { AGENT_ROLES, AccountManager, type AddressInfo, type Agent, AgentDeletionService, type AgentMemoryFields, type AgentMemoryOptions, type AgentMemoryRead, AgentMemoryStore, type AgentRole, AgenticMailClient, type AgenticMailClientOptions, type AgenticMailConfig, type ArchiveAndDeleteOptions, type ArchivedEmail, type Attachment, type AttachmentAdvisory, type CachedMessage, CloudflareClient, type CreateAgentOptions, DEFAULT_AGENT_NAME, DEFAULT_AGENT_ROLE, DEFAULT_SESSION_MAX_AGE_MS, DNSConfigurator, type Database, type DeletionReport, type DeletionSummary, DependencyChecker, DependencyInstaller, type DependencyStatus, type DnsRecord, type DnsSetupResult, type DomainInfo, DomainManager, type DomainModeConfig, type DomainPurchaseResult, DomainPurchaser, type DomainSearchResult, type DomainSetupResult, type EmailEnvelope, type EmailRouteAction, type EmailRouteClass, type EmailRouteClassification, type EmailRouteInput, EmailSearchIndex, type FolderInfo, type GatewayConfig, GatewayManager, type GatewayManagerOptions, type GatewayMode, type GatewayStatus, type HostName, type HostSession, type InboundEmail, type InboundSmsEvent, type InboxEvent, type InboxExpungeEvent, type InboxFlagsEvent, type InboxNewEvent, InboxWatcher, type InboxWatcherOptions, type InstallProgress, type LinkAdvisory, type LocalSmtpConfig, MailReceiver, type MailReceiverOptions, MailSender, type MailSenderOptions, type MailboxInfo, type OutboundCategory, type OutboundScanInput, type OutboundScanResult, type OutboundWarning, type ParsedAttachment, type ParsedEmail, type ParsedSms, PathTraversalError, type PurchasedDomain, REDACTED, RELAY_PRESETS, RelayBridge, type RelayBridgeOptions, type RelayConfig, RelayGateway, type RelayProvider, type RelaySearchResult, SPAM_THRESHOLD, type SafeJoinOptions, type SanitizeDetection, type SanitizeResult, type SearchCriteria, type SearchableEmail, type SecurityAdvisory, type SendMailOptions, type SendResult, type SendResultWithRaw, type SendSmsInput, type SendSmsResult, ServiceManager, type ServiceStatus, type SetupConfig, SetupManager, type SetupResult, type Severity, type SmsConfig, SmsManager, type SmsMessage, SmsPoller, type SmsProvider, type SpamCategory, type SpamResult, type SpamRuleMatch, StalwartAdmin, type StalwartAdminOptions, type StalwartPrincipal, ThreadCache, type ThreadCacheEntry, type ThreadCacheOptions, type ThreadIdInput, type TunnelConfig, TunnelManager, UnsafeApiUrlError, WARNING_THRESHOLD, type WatcherOptions, assertWithinBase, buildApiUrl, buildInboundSecurityAdvisory, classifyEmailRoute, closeDatabase, createTestDatabase, debug, debugWarn, ensureDataDir, extractVerificationCode, flushTelemetry, forgetHostSession, getDatabase, getOperatorEmail, getSmsProvider, hostSessionStoragePath, isInternalEmail, isSessionFresh, isValidPhoneNumber, loadHostSession, mapProviderSmsStatus, normalizeAddress, normalizePhoneNumber, normalizeSubject, operatorPrefsStoragePath, parseEmail, parseGoogleVoiceSms, recordToolCall, redactObject, redactSecret, redactSmsConfig, resolveConfig, safeJoin, sanitizeEmail, saveConfig, saveHostSession, scanOutboundEmail, scoreEmail, setOperatorEmail, setTelemetryVersion, startRelayBridge, threadIdFor, tryJoin, validateApiUrl };
+export { AGENT_ROLES, AccountManager, type AddressInfo, type Agent, AgentDeletionService, type AgentMemoryFields, type AgentMemoryOptions, type AgentMemoryRead, AgentMemoryStore, type AgentRole, AgenticMailClient, type AgenticMailClientOptions, type AgenticMailConfig, type ArchiveAndDeleteOptions, type ArchivedEmail, type Attachment, type AttachmentAdvisory, BRIDGE_OPERATOR_LIVE_WINDOW_MS, type BridgeWakeError, type BridgeWakePromptArgs, type BridgeWakeResult, type CachedMessage, CloudflareClient, type CreateAgentOptions, DEFAULT_AGENT_NAME, DEFAULT_AGENT_ROLE, DEFAULT_SESSION_MAX_AGE_MS, DNSConfigurator, type Database, type DeletionReport, type DeletionSummary, DependencyChecker, DependencyInstaller, type DependencyStatus, type DnsRecord, type DnsSetupResult, type DomainInfo, DomainManager, type DomainModeConfig, type DomainPurchaseResult, DomainPurchaser, type DomainSearchResult, type DomainSetupResult, type EmailEnvelope, type EmailRouteAction, type EmailRouteClass, type EmailRouteClassification, type EmailRouteInput, EmailSearchIndex, type FolderInfo, type GatewayConfig, GatewayManager, type GatewayManagerOptions, type GatewayMode, type GatewayStatus, type HostName, type HostSession, type HostSessionResumeMode, type InboundEmail, type InboundSmsEvent, type InboxEvent, type InboxExpungeEvent, type InboxFlagsEvent, type InboxNewEvent, InboxWatcher, type InboxWatcherOptions, type InstallProgress, type LinkAdvisory, type LocalSmtpConfig, MailReceiver, type MailReceiverOptions, MailSender, type MailSenderOptions, type MailboxInfo, type OutboundCategory, type OutboundScanInput, type OutboundScanResult, type OutboundWarning, type ParsedAttachment, type ParsedEmail, type ParsedSms, PathTraversalError, type PurchasedDomain, REDACTED, RELAY_PRESETS, RelayBridge, type RelayBridgeOptions, type RelayConfig, RelayGateway, type RelayProvider, type RelaySearchResult, type ResumeErrorClassificationOptions, SPAM_THRESHOLD, type SafeJoinOptions, type SanitizeDetection, type SanitizeResult, type SearchCriteria, type SearchableEmail, type SecurityAdvisory, type SendMailOptions, type SendResult, type SendResultWithRaw, type SendSmsInput, type SendSmsResult, ServiceManager, type ServiceStatus, type SetupConfig, SetupManager, type SetupResult, type Severity, type SmsConfig, SmsManager, type SmsMessage, SmsPoller, type SmsProvider, type SpamCategory, type SpamResult, type SpamRuleMatch, StalwartAdmin, type StalwartAdminOptions, type StalwartPrincipal, ThreadCache, type ThreadCacheEntry, type ThreadCacheOptions, type ThreadIdInput, type TunnelConfig, TunnelManager, UnsafeApiUrlError, WARNING_THRESHOLD, type WatcherOptions, assertWithinBase, bridgeWakeErrorMessage, bridgeWakeLastSeenAgeMs, buildApiUrl, buildInboundSecurityAdvisory, classifyEmailRoute, classifyResumeError, closeDatabase, composeBridgeWakePrompt, createTestDatabase, debug, debugWarn, ensureDataDir, extractVerificationCode, flushTelemetry, forgetHostSession, getDatabase, getOperatorEmail, getSmsProvider, hostSessionStoragePath, isInternalEmail, isSessionFresh, isValidPhoneNumber, loadHostSession, mapProviderSmsStatus, normalizeAddress, normalizePhoneNumber, normalizeSubject, operatorPrefsStoragePath, parseEmail, parseGoogleVoiceSms, recordToolCall, redactObject, redactSecret, redactSmsConfig, resolveConfig, safeJoin, sanitizeEmail, saveConfig, saveHostSession, scanOutboundEmail, scoreEmail, setOperatorEmail, setTelemetryVersion, shouldSkipBridgeWakeForLiveOperator, startRelayBridge, threadIdFor, tryJoin, validateApiUrl };

package/dist/index.js

@@ -24,8 +24,7 @@ var MailSender = class {
         pass: options.password
       },
       tls: {
-        rejectUnauthorized: false
-        // Local dev — no TLS
+        rejectUnauthorized: options.tlsRejectUnauthorized ?? true
       },
       connectionTimeout: 1e4,
       // 10s to establish TCP connection
@@ -6447,6 +6446,69 @@ function hostSessionStoragePath() {
   return storagePath();
 }
 
+// src/host-bridge.ts
+var BRIDGE_OPERATOR_LIVE_WINDOW_MS = 3e4;
+var DEFAULT_EXPIRED_MARKERS = [
+  "session not found",
+  "invalid session",
+  "session expired",
+  "no such session",
+  "unknown session",
+  "thread not found",
+  "invalid thread",
+  "thread expired",
+  "no such thread",
+  "unknown thread"
+];
+var DEFAULT_SDK_MISSING_MARKERS = [
+  "cannot find module",
+  "could not be found",
+  "command not found"
+];
+function bridgeWakeErrorMessage(err) {
+  return err?.message ?? String(err);
+}
+function classifyResumeError(err, options = {}) {
+  const msg = bridgeWakeErrorMessage(err).toLowerCase();
+  const expiredMarkers = options.expiredMarkers ?? DEFAULT_EXPIRED_MARKERS;
+  const sdkMissingMarkers = options.sdkMissingMarkers ?? DEFAULT_SDK_MISSING_MARKERS;
+  if (expiredMarkers.some((marker) => msg.includes(marker))) return "session-expired";
+  if (sdkMissingMarkers.some((marker) => msg.includes(marker))) return "sdk-missing";
+  return "other";
+}
+function bridgeWakeLastSeenAgeMs(session, nowMs = Date.now()) {
+  if (!session) return null;
+  return nowMs - session.lastSeenMs;
+}
+function shouldSkipBridgeWakeForLiveOperator(session, nowMs = Date.now(), liveWindowMs = BRIDGE_OPERATOR_LIVE_WINDOW_MS) {
+  const ageMs = bridgeWakeLastSeenAgeMs(session, nowMs);
+  return ageMs !== null && ageMs < liveWindowMs;
+}
+function composeBridgeWakePrompt(args) {
+  const subject = args.subject ?? "(no subject)";
+  const from = args.from ?? "unknown";
+  const preview = (args.preview ?? "").slice(0, 600);
+  return [
+    `\u{1F380} Bridge mail arrived \u2014 headless wake.`,
+    "",
+    `You are being resumed against your last session because new mail landed in your bridge inbox (${args.bridgeName}@localhost) and you weren't actively at the keyboard.`,
+    "",
+    `Trigger:`,
+    `  UID:     ${args.uid}`,
+    `  From:    ${from}`,
+    `  Subject: ${subject}`,
+    `  Preview: ${preview}`,
+    "",
+    `Read it with mcp__agenticmail__read_email({ uid: ${args.uid} }) and decide:`,
+    `  \xB7 Does it need a reply from YOU (the operator's session)? Reply via mcp__agenticmail__reply_email.`,
+    `  \xB7 Does it need a teammate to act? Forward / re-route by replying with wake: ["<teammate>"].`,
+    `  \xB7 Is it [NEEDS OPERATOR] / [BLOCKED]? Then it's actually for the human \u2014 mark it unread, and the operator will see it on their next keystroke.`,
+    `  \xB7 Is it FYI noise? mark_read and exit.`,
+    "",
+    `Keep this turn SHORT. You're being resumed to handle ONE piece of mail, not to continue the prior conversation.`
+  ].join("\n");
+}
+
 // src/util/safe-url.ts
 var UnsafeApiUrlError = class extends Error {
   constructor(raw, reason) {
@@ -8138,6 +8200,7 @@ export {
   AgentDeletionService,
   AgentMemoryStore,
   AgenticMailClient,
+  BRIDGE_OPERATOR_LIVE_WINDOW_MS,
   CloudflareClient,
   DEFAULT_AGENT_NAME,
   DEFAULT_AGENT_ROLE,
@@ -8168,10 +8231,14 @@ export {
   UnsafeApiUrlError,
   WARNING_THRESHOLD,
   assertWithinBase,
+  bridgeWakeErrorMessage,
+  bridgeWakeLastSeenAgeMs,
   buildApiUrl,
   buildInboundSecurityAdvisory,
   classifyEmailRoute,
+  classifyResumeError,
   closeDatabase,
+  composeBridgeWakePrompt,
   createTestDatabase,
   debug,
   debugWarn,
@@ -8207,6 +8274,7 @@ export {
   scoreEmail,
   setOperatorEmail,
   setTelemetryVersion,
+  shouldSkipBridgeWakeForLiveOperator,
   startRelayBridge,
   threadIdFor,
   tryJoin,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticmail/core",
-  "version": "0.9.9",
+  "version": "0.9.10",
   "description": "Core SDK for AgenticMail — email, SMS, and phone number access for AI agents",
   "type": "module",
   "main": "dist/index.js",