@migma/mcp 1.9.0 → 1.9.1-automations.1

package/build/tools/send-confirmation.js

@@ -1,150 +0,0 @@
-import { createHash, createHmac, timingSafeEqual } from "node:crypto";
-/**
- * Sending is a two-call handshake the server enforces: a call without
- * confirmationToken only returns a summary built from live data (audience,
- * recipient count, sender, subject, timing) and a short-lived token; mail goes
- * out only when the same call is repeated with that token. Each MCP request
- * may run on a fresh server instance, so the token is self-validating: an HMAC,
- * keyed by the caller's API key, over its expiry and a hash of everything that
- * decides who gets what, from whom, and when. Any change in between voids it.
- */
-export const CONFIRMATION_TTL_MS = 10 * 60_000;
-export const CONFIRMATION_TOKEN_DESCRIPTION = "Leave empty first: the call then sends nothing and returns a summary plus confirmationToken. Show the summary to the user; after they approve it in this chat, repeat the same call with the token. The token expires in 10 minutes and stops working if any detail changes.";
-function signingKey(apiKey) {
-    if (!apiKey)
-        throw new Error("Sending needs a Migma API key.");
-    return createHash("sha256").update(`migma-mcp-send-confirmation:${apiKey}`).digest();
-}
-/** JSON with object keys sorted at every level, so a reordered argument hashes the same. */
-function canonical(value) {
-    if (Array.isArray(value))
-        return `[${value.map(canonical).join(",")}]`;
-    if (value && typeof value === "object") {
-        const record = value;
-        return `{${Object.keys(record).sort().filter((k) => record[k] !== undefined)
-            .map((k) => `${JSON.stringify(k)}:${canonical(record[k])}`).join(",")}}`;
-    }
-    return JSON.stringify(value ?? null);
-}
-function sign(apiKey, action, expiresAt, facts) {
-    const hash = createHash("sha256").update(canonical(facts)).digest("hex");
-    return createHmac("sha256", signingKey(apiKey))
-        .update(`${action}.${expiresAt}.${hash}`)
-        .digest("base64url");
-}
-export function issueConfirmationToken(apiKey, action, facts, now = Date.now()) {
-    const expiresAt = now + CONFIRMATION_TTL_MS;
-    return {
-        token: `${expiresAt}.${sign(apiKey, action, expiresAt, facts)}`,
-        expiresAt: new Date(expiresAt).toISOString(),
-    };
-}
-/** Null when the token was issued for exactly these facts and is still valid, else why not. */
-export function checkConfirmationToken(apiKey, token, action, facts, now = Date.now()) {
-    const [rawExpiry, signature = ""] = token.split(".");
-    const expiresAt = Number(rawExpiry);
-    if (!Number.isSafeInteger(expiresAt) || !signature) {
-        return "confirmationToken is not valid. Call again without it to get a new summary.";
-    }
-    if (expiresAt <= now) {
-        return "confirmationToken expired. Call again without it to get a new summary for the user.";
-    }
-    const expected = Buffer.from(sign(apiKey, action, expiresAt, facts));
-    const given = Buffer.from(signature);
-    if (expected.length !== given.length || !timingSafeEqual(expected, given)) {
-        return "Nothing was sent: the details differ from the approved summary, or the token belongs to another send. Call again without confirmationToken to get a new summary.";
-    }
-    return null;
-}
-/** A repeated confirmed call replays the first result instead of sending again. */
-export function confirmedIdempotencyKey(token, idempotencyKey) {
-    return idempotencyKey || `confirm-${createHash("sha256").update(token).digest("hex").slice(0, 48)}`;
-}
-export function previewResult(apiKey, tool, action, facts, summary) {
-    const { token, expiresAt } = issueConfirmationToken(apiKey, action, facts);
-    return {
-        content: [
-            {
-                type: "text",
-                text: JSON.stringify({
-                    sent: false,
-                    confirmationRequired: true,
-                    summary,
-                    confirmationToken: token,
-                    expiresAt,
-                    next: `Nothing was sent. After the user approves this summary, call ${tool} again with the same arguments and confirmationToken.`,
-                }, null, 2),
-            },
-        ],
-    };
-}
-const rootOf = (d) => (d.rootDomain || d.domain).toLowerCase();
-const isApex = (d) => !!d.rootDomain && d.rootDomain.toLowerCase() === d.domain.toLowerCase();
-/**
- * Mirrors the backend's send-time sender resolution (SesTenantService
- * resolveSendableFrom, and the transactional identity check in v1 sending):
- * a From on a sendable domain or its root sends as is; otherwise Migma sends
- * from the account's verified managed domain; with neither, nothing can send.
- * Transactional mail needs a verified transactional identity for the From's
- * root domain, so unsubscribed contacts are only ever reached through one.
- */
-export async function checkSender(client, from, options = {}) {
-    const { data, error } = await client.domains.list();
-    if (error?.statusCode === 403 && !options.transactional) {
-        // A send-only connection cannot read domains; the send path still checks the sender.
-        return { ok: true, from, warnings: ["The sender domain was not checked: this connection cannot read sending domains. Migma checks it when sending."] };
-    }
-    if (error)
-        return { ok: false, error: `Could not check the sender: ${error.message}` };
-    const domains = (data ?? []);
-    const fromDomain = (from.split("@")[1] || "").toLowerCase();
-    const sendable = domains.filter((d) => d.isVerified === true);
-    const warnings = [];
-    let effectiveFrom = from;
-    const matches = (d) => d.domain.toLowerCase() === fromDomain || rootOf(d) === fromDomain;
-    if (!sendable.some(matches)) {
-        const managed = domains.find((d) => d.isManagedDomain && d.status === "verified");
-        if (!managed) {
-            return {
-                ok: false,
-                error: `${fromDomain || from} is not a verified sending domain in this account. Use a From address on a verified domain from migma_list_domains, or set one up first.`,
-            };
-        }
-        effectiveFrom = `${from.includes("@") ? from.split("@")[0] : "noreply"}@${managed.domain}`;
-        warnings.push(`${fromDomain} is not verified yet, so this sends from ${effectiveFrom}.`);
-    }
-    if (options.transactional) {
-        const effectiveDomain = effectiveFrom.split("@")[1].toLowerCase();
-        const identity = domains.find((d) => d.domain.toLowerCase() === effectiveDomain);
-        const root = identity ? rootOf(identity) : effectiveDomain;
-        const hasTransactionalIdentity = sendable.some((d) => rootOf(d) === root && (isApex(d) || (d.stream === "transactional")));
-        if (!hasTransactionalIdentity) {
-            return {
-                ok: false,
-                error: `transactional: true needs a verified transactional sending identity for ${root} (notify.${root}). Set it up with migma_provision_stream, or send without transactional so unsubscribes are respected.`,
-            };
-        }
-    }
-    return { ok: true, from: effectiveFrom, warnings };
-}
-export function formatWhen(scheduledAt, timezone) {
-    if (!scheduledAt)
-        return "Now";
-    const zone = timezone || "UTC";
-    try {
-        const local = new Intl.DateTimeFormat("en-CA", {
-            timeZone: zone,
-            year: "numeric",
-            month: "2-digit",
-            day: "2-digit",
-            hour: "2-digit",
-            minute: "2-digit",
-            hour12: false,
-        }).format(new Date(scheduledAt));
-        return `${local.replace(",", "")} (${zone})`;
-    }
-    catch {
-        return `${scheduledAt} (${zone})`;
-    }
-}
-//# sourceMappingURL=send-confirmation.js.map

package/build/tools/send-confirmation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"send-confirmation.js","sourceRoot":"","sources":["../../src/tools/send-confirmation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGtE;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,MAAM,CAAC;AAE/C,MAAM,CAAC,MAAM,8BAA8B,GACzC,8QAA8Q,CAAC;AAcjR,SAAS,UAAU,CAAC,MAAc;IAChC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC/D,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACvF,CAAC;AAED,4FAA4F;AAC5F,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;aACzE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,IAAI,CAAC,MAAc,EAAE,MAAkB,EAAE,SAAiB,EAAE,KAAc;IACjF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzE,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;SAC5C,MAAM,CAAC,GAAG,MAAM,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;SACxC,MAAM,CAAC,WAAW,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,MAAkB,EAClB,KAAc,EACd,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,SAAS,GAAG,GAAG,GAAG,mBAAmB,CAAC;IAC5C,OAAO;QACL,KAAK,EAAE,GAAG,SAAS,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE;QAC/D,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;KAC7C,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,KAAa,EACb,MAAkB,EAClB,KAAc,EACd,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,CAAC,SAAS,EAAE,SAAS,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACnD,OAAO,6EAA6E,CAAC;IACvF,CAAC;IACD,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;QACrB,OAAO,qFAAqF,CAAC;IAC/F,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;QAC1E,OAAO,kKAAkK,CAAC;IAC5K,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CAAC,KAAa,EAAE,cAAuB;IAC5E,OAAO,cAAc,IAAI,WAAW,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACtG,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,MAAc,EACd,IAAY,EACZ,MAAkB,EAClB,KAAc,EACd,OAAoB;IAEpB,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3E,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;oBACE,IAAI,EAAE,KAAK;oBACX,oBAAoB,EAAE,IAAI;oBAC1B,OAAO;oBACP,iBAAiB,EAAE,KAAK;oBACxB,SAAS;oBACT,IAAI,EAAE,gEAAgE,IAAI,uDAAuD;iBAClI,EACD,IAAI,EACJ,CAAC,CACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAWD,MAAM,MAAM,GAAG,CAAC,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;AAC1E,MAAM,MAAM,GAAG,CAAC,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;AAMzG;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAa,EACb,IAAY,EACZ,UAAuC,EAAE;IAEzC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,KAAK,EAAE,UAAU,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACxD,qFAAqF;QACrF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,+GAA+G,CAAC,EAAE,CAAC;IACzJ,CAAC;IACD,IAAI,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IACvF,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAA2B,CAAC;IACvD,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,aAAa,GAAG,IAAI,CAAC;IACzB,MAAM,OAAO,GAAG,CAAC,CAAY,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,UAAU,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC;IACpG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAClF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,UAAU,IAAI,IAAI,0IAA0I;aACvK,CAAC;QACJ,CAAC;QACD,aAAa,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC3F,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,4CAA4C,aAAa,GAAG,CAAC,CAAC;IAC3F,CAAC;IAED,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;QAC3D,MAAM,wBAAwB,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACnD,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CACpE,CAAC;QACF,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,2EAA2E,IAAI,YAAY,IAAI,wGAAwG;aAC/M,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,WAA+B,EAAE,QAA4B;IACtF,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,IAAI,GAAG,QAAQ,IAAI,KAAK,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;YAC7C,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,KAAK;SACd,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACjC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,IAAI,GAAG,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,WAAW,KAAK,IAAI,GAAG,CAAC;IACpC,CAAC;AACH,CAAC"}