@knowsuchagency/fulcrum 2.6.7 → 2.7.0

package/README.md

@@ -170,7 +170,7 @@ Chat with the AI assistant from anywhere via your favorite messaging platform.
 
 | Platform | Auth Method |
 |----------|-------------|
-| **Email** | SMTP/IMAP credentials with sender allowlist |
+| **Email** | SMTP/IMAP credentials, collects all emails, allowlist controls AI responses |
 | **WhatsApp** | QR code scan, monitors all messages, replies only to "Message yourself" |
 | **Discord** | Bot token from Developer Portal |
 | **Telegram** | Bot token from @BotFather |
@@ -178,7 +178,7 @@ Chat with the AI assistant from anywhere via your favorite messaging platform.
 
 - **Persistent sessions** — Conversation context maintained across messages
 - **Email threading** — Each email thread is a separate conversation
-- **Privacy-respecting** — WhatsApp sees all messages but only replies to you
+- **Observe-first** — Email and WhatsApp collect all messages but only respond to authorized senders
 - **Commands** — `/reset` (new conversation), `/help`, `/status`
 
 Enable in Settings → Messaging and follow the setup instructions for each platform.

package/bin/fulcrum.js

@@ -45830,7 +45830,7 @@ async function runMcpServer(urlOverride, portOverride) {
   const client = new FulcrumClient(urlOverride, portOverride);
   const server = new McpServer({
     name: "fulcrum",
-    version: "2.6.7"
+    version: "2.7.0"
   });
   registerTools(server, client);
   const transport = new StdioServerTransport;
@@ -48179,7 +48179,7 @@ var marketplace_default = `{
       "name": "fulcrum",
       "source": "./",
       "description": "Task orchestration for Claude Code",
-      "version": "2.6.7",
+      "version": "2.7.0",
       "skills": [
         "./skills/fulcrum"
       ],
@@ -49367,7 +49367,7 @@ function compareVersions(v1, v2) {
 var package_default = {
   name: "@knowsuchagency/fulcrum",
   private: true,
-  version: "2.6.7",
+  version: "2.7.0",
   description: "Harness Attention. Orchestrate Agents. Ship.",
   license: "PolyForm-Perimeter-1.0.0",
   type: "module",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@knowsuchagency/fulcrum",
-  "version": "2.6.7",
+  "version": "2.7.0",
   "description": "Harness Attention. Orchestrate Agents. Ship.",
   "license": "PolyForm-Perimeter-1.0.0",
   "repository": {

package/server/index.js

@@ -71223,7 +71223,7 @@ You can read and modify all Fulcrum settings using the settings MCP tools. Setti
 - \`channels.email.smtp.*\` - SMTP server settings (host, port, secure, user, password)
 - \`channels.email.imap.*\` - IMAP server settings (host, port, secure, user, password)
 - \`channels.email.sendAs\` - Email address to send from
-- \`channels.email.allowedSenders\` - Sender allowlist patterns
+- \`channels.email.allowedSenders\` - Sender allowlist (controls AI responses, not collection)
 - \`channels.slack.enabled\` - Enable/disable Slack channel
 - \`channels.slack.botToken\` - Slack bot token (xoxb-...) [SENSITIVE]
 - \`channels.slack.appToken\` - Slack app token (xapp-...) [SENSITIVE]
@@ -409928,43 +409928,6 @@ async function sendEmail(transporter, connectionId, fromAddress, recipientId, co
     return false;
   }
 }
-async function sendUnauthorizedResponse(transporter, connectionId, fromAddress, headers, bcc) {
-  if (!headers.from)
-    return;
-  const response = `Sorry, I'm not able to respond to messages from your email address.
-
-If you believe this is an error, please contact the owner of this email address.`;
-  try {
-    const emailHeaders = {};
-    if (headers.messageId) {
-      emailHeaders["In-Reply-To"] = headers.messageId;
-      emailHeaders["References"] = headers.messageId;
-    }
-    let subject = "Unable to Process Your Request";
-    if (headers.subject) {
-      subject = headers.subject.startsWith("Re:") ? headers.subject : `Re: ${headers.subject}`;
-    }
-    await transporter.sendMail({
-      from: fromAddress,
-      to: headers.from,
-      bcc: bcc || undefined,
-      subject,
-      text: response,
-      html: `<div style="font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6;"><p>${response.replace(/\n/g, "<br>")}</p></div>`,
-      headers: emailHeaders
-    });
-    log2.messaging.info("Sent unauthorized response", {
-      connectionId,
-      to: headers.from
-    });
-  } catch (err) {
-    log2.messaging.error("Failed to send unauthorized response", {
-      connectionId,
-      to: headers.from,
-      error: String(err)
-    });
-  }
-}
 var init_email_sender = __esm(() => {
   init_nanoid();
   init_logger3();
@@ -409998,7 +409961,9 @@ class EmailChannel {
         user: this.credentials.imap.user,
         pass: this.credentials.imap.password
       },
-      logger: false
+      logger: false,
+      socketTimeout: 30000,
+      greetingTimeout: 15000
     });
     client3.on("error", (err) => {
       log2.messaging.error("IMAP client error", {
@@ -410084,8 +410049,9 @@ class EmailChannel {
   async pollForNewEmails() {
     if (this.isShuttingDown || !this.credentials)
       return;
+    let client3 = null;
     try {
-      const client3 = this.createImapClient();
+      client3 = this.createImapClient();
       await client3.connect();
       const lock = await client3.getMailboxLock("INBOX");
       try {
@@ -410105,33 +410071,38 @@ class EmailChannel {
           if (headers.from.toLowerCase() === fromAddress) {
             continue;
           }
-          const authResult = await checkAuthorization(this.connectionId, headers, this.credentials?.allowedSenders || [], this.credentials?.smtp.user.toLowerCase());
-          if (!authResult.authorized) {
-            const automatedCheck = isAutomatedEmail(headers);
-            if (automatedCheck.isAutomated) {
-              log2.messaging.info("Email skipped - automated sender", {
-                connectionId: this.connectionId,
-                from: headers.from,
-                subject: headers.subject,
-                reason: automatedCheck.reason
-              });
-            } else {
-              log2.messaging.info("Email rejected - not authorized", {
-                connectionId: this.connectionId,
-                from: headers.from,
-                subject: headers.subject,
-                reason: authResult.reason
-              });
-              if (this.transporter) {
-                await sendUnauthorizedResponse(this.transporter, this.connectionId, this.getFromAddress(), headers, this.credentials?.bcc);
-              }
-            }
-            await client3.messageFlagsAdd({ uid: message.uid }, ["\\Seen"]);
+          const automatedCheck = isAutomatedEmail(headers);
+          if (automatedCheck.isAutomated) {
+            log2.messaging.info("Email skipped - automated sender", {
+              connectionId: this.connectionId,
+              from: headers.from,
+              subject: headers.subject,
+              reason: automatedCheck.reason
+            });
             continue;
           }
           const content = await parseEmailContent(message.source, this.connectionId);
           if (!content)
             continue;
+          const authResult = await checkAuthorization(this.connectionId, headers, this.credentials?.allowedSenders || [], this.credentials?.smtp.user.toLowerCase());
+          if (headers.messageId) {
+            storeEmail({
+              connectionId: this.connectionId,
+              messageId: headers.messageId,
+              threadId: authResult.threadId,
+              inReplyTo: headers.inReplyTo ?? undefined,
+              references: headers.references.length > 0 ? headers.references : undefined,
+              direction: "incoming",
+              fromAddress: headers.from || "unknown",
+              fromName: headers.fromName ?? undefined,
+              toAddresses: headers.to.length > 0 ? headers.to : undefined,
+              ccAddresses: headers.cc.length > 0 ? headers.cc : undefined,
+              subject: headers.subject ?? undefined,
+              textContent: content,
+              emailDate: headers.date ?? undefined,
+              imapUid: message.uid
+            });
+          }
           const incomingMessage = {
             channelType: "email",
             connectionId: this.connectionId,
@@ -410144,7 +410115,8 @@ class EmailChannel {
               inReplyTo: headers.inReplyTo,
               references: headers.references,
               subject: headers.subject,
-              threadId: authResult.threadId
+              threadId: authResult.threadId,
+              observeOnly: !authResult.authorized
             }
           };
           log2.messaging.info("Email received", {
@@ -410153,26 +410125,9 @@ class EmailChannel {
             subject: headers.subject,
             contentLength: content.length,
             threadId: authResult.threadId,
+            authorized: authResult.authorized,
             authorizedBy: authResult.authorizedBy
           });
-          if (headers.messageId) {
-            storeEmail({
-              connectionId: this.connectionId,
-              messageId: headers.messageId,
-              threadId: authResult.threadId,
-              inReplyTo: headers.inReplyTo ?? undefined,
-              references: headers.references.length > 0 ? headers.references : undefined,
-              direction: "incoming",
-              fromAddress: headers.from || "unknown",
-              fromName: headers.fromName ?? undefined,
-              toAddresses: headers.to.length > 0 ? headers.to : undefined,
-              ccAddresses: headers.cc.length > 0 ? headers.cc : undefined,
-              subject: headers.subject ?? undefined,
-              textContent: content,
-              emailDate: headers.date ?? undefined,
-              imapUid: message.uid
-            });
-          }
           try {
             await this.events?.onMessage(incomingMessage);
           } catch (err) {
@@ -410194,6 +410149,11 @@ class EmailChannel {
       if (String(err).includes("AUTHENTICATIONFAILED") || String(err).includes("LOGIN")) {
         this.updateStatus("credentials_required");
       }
+      if (client3) {
+        try {
+          await client3.logout();
+        } catch {}
+      }
     }
   }
   async shutdown() {
@@ -466852,7 +466812,7 @@ mcpRoutes.all("/", async (c) => {
   });
   const server = new McpServer({
     name: "fulcrum",
-    version: "2.6.7"
+    version: "2.7.0"
   });
   const client = new FulcrumClient(`http://localhost:${port}`);
   registerTools(server, client);