@molecule/api-emails-inbound-agentmail 1.0.0

package/dist/provider.d.ts

@@ -0,0 +1,117 @@
+/**
+ * AgentMail inbound-email provider implementation.
+ *
+ * AgentMail gives an application its own inbox and POSTs a JSON
+ * `message.received` event to a registered webhook URL for every message
+ * that lands there. Deliveries are signed by Svix: the `svix-id`,
+ * `svix-timestamp` and `svix-signature` headers carry an HMAC-SHA256 over
+ * `${id}.${timestamp}.${rawBody}` keyed by the webhook's `whsec_` secret.
+ *
+ * The webhook is deliberately incomplete on the wire — attachments arrive
+ * as metadata only, and `text`/`html` are dropped once the payload would
+ * exceed 1 MB — so `parseWebhookPayload` hydrates what is missing through
+ * the API (`api.ts`). Replies go through AgentMail's own reply endpoint
+ * from the inbox that received the message.
+ *
+ * @see https://docs.agentmail.to/webhooks
+ * @see https://docs.agentmail.to/webhook-verification
+ * @see https://docs.svix.com/receiving/verifying-payloads/how-manual
+ *
+ * @module
+ */
+import './secrets.js';
+import type { InboundEmail, InboundEmailProvider, InboundEmailReply, InboundEmailReplyResult } from '@molecule/api-emails-inbound';
+/**
+ * Clears the in-process inbox record. Exposed for tests.
+ */
+export declare const _resetInboxMemo: () => void;
+/**
+ * Verifies an AgentMail (Svix) webhook signature: HMAC-SHA256 over
+ * `${svix-id}.${svix-timestamp}.${rawBody}` keyed by the base64-decoded
+ * `whsec_` secret, base64-encoded, matched against ANY `v1,…` entry of the
+ * `svix-signature` header in constant time. The Standard-Webhooks aliases
+ * `webhook-id` / `webhook-timestamp` / `webhook-signature` are accepted
+ * too. Timestamps outside the replay window are rejected.
+ *
+ * `body` MUST be the exact bytes received — a parsed-then-re-serialized
+ * JSON body will not verify.
+ *
+ * Distinguishes SERVER MISCONFIGURATION from a genuinely invalid webhook:
+ * an unset `AGENTMAIL_WEBHOOK_SECRET` THROWS the tagged
+ * `config.notConfigured` error (mapped by the API error middleware to a
+ * clean 503) instead of returning `false`. Missing signature headers, a
+ * stale timestamp and a tampered signature all resolve `false` (401) —
+ * those ARE the "this request is not from AgentMail" class.
+ *
+ * @param headers - HTTP headers; the three `svix-*` signing headers.
+ * @param body - Raw HTTP request body (JSON bytes, unchanged).
+ * @returns `true` when the signature verifies and the timestamp is fresh;
+ *   `false` for a malformed/stale/forged webhook.
+ * @throws {Error} The tagged `config.notConfigured` error when
+ *   `AGENTMAIL_WEBHOOK_SECRET` is unset — a caller MUST NOT treat this as
+ *   `false` (that would 401-with-no-trace every inbound webhook instead of
+ *   surfacing the actionable 503).
+ */
+export declare const verifySignature: (headers: Record<string, string | string[] | undefined>, body: Buffer | string) => Promise<boolean>;
+/**
+ * Parses an AgentMail `message.received` webhook payload into a normalized
+ * {@link InboundEmail}, hydrating through the API whatever the webhook
+ * left out:
+ *
+ * - **Bodies.** When BOTH `text` and `html` are absent (AgentMail drops
+ *   them once the payload would exceed 1 MB), the message is fetched via
+ *   `GET /v0/inboxes/{inbox_id}/messages/{message_id}`.
+ * - **Attachments.** The webhook carries metadata only; each attachment's
+ *   bytes are downloaded (metadata → presigned URL → bytes).
+ *
+ * Either needs `AGENTMAIL_API_KEY`; a message that needs neither makes no
+ * network call at all. When `AGENTMAIL_INBOX_ID` is set, an event for any
+ * other inbox is rejected.
+ *
+ * `id` is AgentMail's `message_id` VERBATIM (the Message-ID with its angle
+ * brackets — the exact string every per-message endpoint takes as its path
+ * parameter); `messageId` is the same value without the brackets, for
+ * threading headers. Both are stable across Svix redeliveries, so dedupe
+ * on `id`.
+ *
+ * @param _headers - HTTP headers (unused — AgentMail puts everything in the body).
+ * @param body - The raw JSON body, a string, or an already-parsed object.
+ * @returns The normalized inbound email.
+ * @throws {Error} When the body is not JSON, is not a `message.received*`
+ *   event, lacks the message ids, or is for a different inbox than
+ *   `AGENTMAIL_INBOX_ID`.
+ * @throws {AgentMailApiError} When hydration (message fetch / attachment
+ *   download) fails — let it propagate as a 5xx so AgentMail retries.
+ * @throws {Error} The tagged `config.notConfigured` error when hydration
+ *   is needed and `AGENTMAIL_API_KEY` is unset.
+ */
+export declare const parseWebhookPayload: (_headers: Record<string, string | string[] | undefined>, body: Buffer | string | Record<string, unknown>) => Promise<InboundEmail>;
+/**
+ * Dispatches a reply through AgentMail's reply endpoint from the inbox
+ * that received the original message. AgentMail threads the reply itself
+ * (`In-Reply-To`, `References`, subject), so `reply.subject` and
+ * `reply.from` have no effect — the reply always comes from the inbox,
+ * under the original subject.
+ *
+ * @param email - The original inbound email being replied to.
+ * @param reply - The reply payload.
+ * @returns The reply dispatch result (`id` = the new message's Message-ID).
+ * @throws {Error} When the inbox cannot be resolved (see
+ *   {@link parseWebhookPayload} for the two sources).
+ * @throws {AgentMailApiError} On a non-2xx API response.
+ */
+export declare const replyTo: (email: InboundEmail, reply: InboundEmailReply) => Promise<InboundEmailReplyResult>;
+/**
+ * Indicates that this provider supports outbound reply dispatch via
+ * {@link replyTo}. Replies use AgentMail's own API — no outbound
+ * `@molecule/api-emails` transport is involved.
+ *
+ * @returns Always `true`.
+ */
+export declare const supportsReply: () => boolean;
+/**
+ * The AgentMail inbound-email provider implementing the
+ * {@link InboundEmailProvider} interface.
+ */
+export declare const provider: InboundEmailProvider;
+//# sourceMappingURL=provider.d.ts.map

package/dist/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH,OAAO,cAAc,CAAA;AAErB,OAAO,KAAK,EACV,YAAY,EAEZ,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,EACxB,MAAM,8BAA8B,CAAA;AA4CrC;;GAEG;AACH,eAAO,MAAM,eAAe,QAAO,IAElC,CAAA;AAwDD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,eAAe,GAC1B,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,EACtD,MAAM,MAAM,GAAG,MAAM,KACpB,OAAO,CAAC,OAAO,CAiCjB,CAAA;AAiHD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,mBAAmB,GAC9B,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,EACvD,MAAM,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC9C,OAAO,CAAC,YAAY,CA2DtB,CAAA;AAqBD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,OAAO,GAClB,OAAO,YAAY,EACnB,OAAO,iBAAiB,KACvB,OAAO,CAAC,uBAAuB,CAyBjC,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,QAAO,OAAe,CAAA;AAEhD;;;GAGG;AACH,eAAO,MAAM,QAAQ,EAAE,oBAKtB,CAAA"}

package/dist/provider.js

@@ -0,0 +1,417 @@
+/**
+ * AgentMail inbound-email provider implementation.
+ *
+ * AgentMail gives an application its own inbox and POSTs a JSON
+ * `message.received` event to a registered webhook URL for every message
+ * that lands there. Deliveries are signed by Svix: the `svix-id`,
+ * `svix-timestamp` and `svix-signature` headers carry an HMAC-SHA256 over
+ * `${id}.${timestamp}.${rawBody}` keyed by the webhook's `whsec_` secret.
+ *
+ * The webhook is deliberately incomplete on the wire — attachments arrive
+ * as metadata only, and `text`/`html` are dropped once the payload would
+ * exceed 1 MB — so `parseWebhookPayload` hydrates what is missing through
+ * the API (`api.ts`). Replies go through AgentMail's own reply endpoint
+ * from the inbox that received the message.
+ *
+ * @see https://docs.agentmail.to/webhooks
+ * @see https://docs.agentmail.to/webhook-verification
+ * @see https://docs.svix.com/receiving/verifying-payloads/how-manual
+ *
+ * @module
+ */
+import { createHmac } from 'node:crypto';
+// Side-effect import: registers this bond's secret definitions so the
+// runtime registry is populated even when provider.js is imported directly
+// (not through the package barrel).
+import './secrets.js';
+import { configNotConfiguredError } from '@molecule/api-secrets';
+import { downloadAttachment, getMessage, replyToMessage } from './api.js';
+import { buildSignedContent, decodeWebhookSecret, DEFAULT_REPLAY_WINDOW_SECONDS, getHeader, isRecord, lowercaseHeaderMap, normalizeAddressList, parseJsonBody, parseSignatureHeader, parseTimestamp, safeEqualBase64, unwrapMessageId, } from './utilities.js';
+/** Event-type prefix shared by every inbound-message event AgentMail emits. */
+const INBOUND_EVENT_PREFIX = 'message.received';
+/**
+ * Upper bound on the in-process `email.id → inbox_id` record kept by
+ * {@link parseWebhookPayload} for {@link replyTo}. Oldest entries are
+ * evicted first.
+ */
+const INBOX_MEMO_LIMIT = 1000;
+/**
+ * `email.id` → `inbox_id` for messages parsed in this process, so a reply
+ * issued from the same webhook handler (the agent-auto-responder case)
+ * needs no configuration. Cross-process/after-restart replies use
+ * `AGENTMAIL_INBOX_ID` instead.
+ */
+const inboxByEmailId = new Map();
+/**
+ * Clears the in-process inbox record. Exposed for tests.
+ */
+export const _resetInboxMemo = () => {
+    inboxByEmailId.clear();
+};
+/**
+ * Records which inbox a parsed message belongs to, evicting the oldest
+ * entry once the record is full.
+ *
+ * @param emailId - The normalized email's `id`.
+ * @param inboxId - AgentMail's `inbox_id`.
+ */
+const rememberInbox = (emailId, inboxId) => {
+    if (inboxByEmailId.size >= INBOX_MEMO_LIMIT) {
+        const oldest = inboxByEmailId.keys().next();
+        if (!oldest.done)
+            inboxByEmailId.delete(oldest.value);
+    }
+    inboxByEmailId.set(emailId, inboxId);
+};
+/**
+ * Reads the webhook signing secret from the environment, throwing the
+ * tagged `config.notConfigured` error (never revealing any value) when unset.
+ *
+ * @returns The signing secret.
+ */
+const getWebhookSecret = () => {
+    const secret = process.env.AGENTMAIL_WEBHOOK_SECRET;
+    if (!secret) {
+        // Tagged config-missing error → clean 503 + 'config.notConfigured', with the
+        // registered definition's description + setup URL (see classifyTaggedError).
+        throw configNotConfiguredError('AGENTMAIL_WEBHOOK_SECRET', 'inbound email');
+    }
+    return secret;
+};
+/**
+ * Reads the configured replay window (seconds) for inbound webhooks. Falls
+ * back to {@link DEFAULT_REPLAY_WINDOW_SECONDS} when unset or invalid.
+ *
+ * @returns The replay window in seconds.
+ */
+const getReplayWindowSeconds = () => {
+    const raw = process.env.AGENTMAIL_INBOUND_REPLAY_WINDOW_SECONDS;
+    if (!raw)
+        return DEFAULT_REPLAY_WINDOW_SECONDS;
+    const parsed = Number.parseInt(raw, 10);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_REPLAY_WINDOW_SECONDS;
+};
+/**
+ * The optional inbox this deployment owns.
+ *
+ * @returns `AGENTMAIL_INBOX_ID` when set and non-empty, else `undefined`.
+ */
+const getConfiguredInboxId = () => {
+    const raw = process.env.AGENTMAIL_INBOX_ID?.trim();
+    return raw && raw.length > 0 ? raw : undefined;
+};
+/**
+ * Verifies an AgentMail (Svix) webhook signature: HMAC-SHA256 over
+ * `${svix-id}.${svix-timestamp}.${rawBody}` keyed by the base64-decoded
+ * `whsec_` secret, base64-encoded, matched against ANY `v1,…` entry of the
+ * `svix-signature` header in constant time. The Standard-Webhooks aliases
+ * `webhook-id` / `webhook-timestamp` / `webhook-signature` are accepted
+ * too. Timestamps outside the replay window are rejected.
+ *
+ * `body` MUST be the exact bytes received — a parsed-then-re-serialized
+ * JSON body will not verify.
+ *
+ * Distinguishes SERVER MISCONFIGURATION from a genuinely invalid webhook:
+ * an unset `AGENTMAIL_WEBHOOK_SECRET` THROWS the tagged
+ * `config.notConfigured` error (mapped by the API error middleware to a
+ * clean 503) instead of returning `false`. Missing signature headers, a
+ * stale timestamp and a tampered signature all resolve `false` (401) —
+ * those ARE the "this request is not from AgentMail" class.
+ *
+ * @param headers - HTTP headers; the three `svix-*` signing headers.
+ * @param body - Raw HTTP request body (JSON bytes, unchanged).
+ * @returns `true` when the signature verifies and the timestamp is fresh;
+ *   `false` for a malformed/stale/forged webhook.
+ * @throws {Error} The tagged `config.notConfigured` error when
+ *   `AGENTMAIL_WEBHOOK_SECRET` is unset — a caller MUST NOT treat this as
+ *   `false` (that would 401-with-no-trace every inbound webhook instead of
+ *   surfacing the actionable 503).
+ */
+export const verifySignature = async (headers, body) => {
+    // Deliberately NOT caught here: an unconfigured secret is a server
+    // misconfiguration, not "signature invalid," and must propagate as the
+    // tagged config error so the caller (the API error middleware) can 503
+    // instead of silently 401ing every webhook. See @throws above.
+    const secret = getWebhookSecret();
+    const id = getHeader(headers, 'svix-id') ?? getHeader(headers, 'webhook-id');
+    const timestamp = getHeader(headers, 'svix-timestamp') ?? getHeader(headers, 'webhook-timestamp');
+    const signatureHeader = getHeader(headers, 'svix-signature') ?? getHeader(headers, 'webhook-signature');
+    if (!id || !timestamp || !signatureHeader)
+        return false;
+    // Reject stale timestamps to defend against replay.
+    if (!/^\d+$/u.test(timestamp))
+        return false;
+    const ts = Number.parseInt(timestamp, 10);
+    const nowSeconds = Math.floor(Date.now() / 1000);
+    if (Math.abs(nowSeconds - ts) > getReplayWindowSeconds())
+        return false;
+    const key = decodeWebhookSecret(secret);
+    if (key.length === 0)
+        return false;
+    const expected = createHmac('sha256', key)
+        .update(buildSignedContent(id, timestamp, body))
+        .digest('base64');
+    // Compare against every v1 entry: Svix sends several during a secret
+    // rotation. `some` short-circuits on the first MATCH only, and each
+    // comparison is itself constant-time.
+    return parseSignatureHeader(signatureHeader).some((candidate) => safeEqualBase64(expected, candidate));
+};
+/**
+ * Type guard for the subset of {@link AgentMailMessage} this bond requires
+ * (`inbox_id` + `message_id` strings). Every other field is optional in the
+ * schema and read defensively downstream.
+ *
+ * @param value - Candidate `message` object.
+ * @returns `true` when `value` carries the required ids.
+ */
+const isAgentMailMessage = (value) => {
+    if (!isRecord(value))
+        return false;
+    return (typeof value.inbox_id === 'string' &&
+        value.inbox_id.length > 0 &&
+        typeof value.message_id === 'string' &&
+        value.message_id.length > 0);
+};
+/**
+ * Validates a parsed webhook body as an inbound-message event.
+ *
+ * @param parsed - The parsed JSON body.
+ * @returns The typed event.
+ * @throws {Error} When the body is not an object, has no `event_type`, is
+ *   an event other than `message.received*`, or lacks a usable `message`.
+ */
+const asInboundEvent = (parsed) => {
+    if (!isRecord(parsed)) {
+        throw new Error('AgentMail webhook payload is not a JSON object.');
+    }
+    const eventType = parsed.event_type;
+    if (typeof eventType !== 'string' || eventType.length === 0) {
+        throw new Error('AgentMail webhook payload has no `event_type`.');
+    }
+    if (!eventType.startsWith(INBOUND_EVENT_PREFIX)) {
+        throw new Error(`AgentMail event "${eventType}" is not an inbound message — register this webhook URL for ` +
+            `\`message.received\` (and, if wanted, its .spam/.blocked/.unauthenticated variants) only.`);
+    }
+    const message = parsed.message;
+    if (!isAgentMailMessage(message)) {
+        throw new Error('AgentMail webhook payload has no `message` with string `inbox_id` and `message_id`.');
+    }
+    const event = { event_type: eventType, message };
+    if (typeof parsed.event_id === 'string')
+        event.event_id = parsed.event_id;
+    if (typeof parsed.type === 'string')
+        event.type = parsed.type;
+    return event;
+};
+/**
+ * Maps one attachment's metadata + downloaded bytes onto the normalized
+ * shape.
+ *
+ * @param meta - Attachment metadata (webhook or API).
+ * @param contentBase64 - The downloaded bytes, base64-encoded.
+ * @returns The normalized attachment.
+ */
+const toInboundAttachment = (meta, contentBase64) => {
+    const attachment = {
+        name: typeof meta.filename === 'string' && meta.filename.length > 0
+            ? meta.filename
+            : meta.attachment_id,
+        contentType: typeof meta.content_type === 'string' && meta.content_type.length > 0
+            ? meta.content_type
+            : 'application/octet-stream',
+        contentBase64,
+    };
+    if (typeof meta.size === 'number' && Number.isFinite(meta.size))
+        attachment.sizeBytes = meta.size;
+    if (typeof meta.content_id === 'string' && meta.content_id.length > 0) {
+        attachment.contentId = meta.content_id;
+    }
+    return attachment;
+};
+/**
+ * Downloads every attachment of a message — the webhook carries metadata
+ * only. Sequential on purpose: AgentMail rate-limits per API key, and a
+ * `429` here must surface (so the webhook is retried later), not fan out.
+ *
+ * @param message - The message whose attachments to fetch.
+ * @returns Normalized attachments (empty when the message has none).
+ */
+const fetchAttachments = async (message) => {
+    const out = [];
+    const metas = Array.isArray(message.attachments) ? message.attachments : [];
+    for (const meta of metas) {
+        if (!isRecord(meta) ||
+            typeof meta.attachment_id !== 'string' ||
+            meta.attachment_id.length === 0) {
+            continue;
+        }
+        const { content } = await downloadAttachment(message.inbox_id, message.message_id, meta.attachment_id);
+        out.push(toInboundAttachment(meta, content.toString('base64')));
+    }
+    return out;
+};
+/**
+ * Parses an AgentMail `message.received` webhook payload into a normalized
+ * {@link InboundEmail}, hydrating through the API whatever the webhook
+ * left out:
+ *
+ * - **Bodies.** When BOTH `text` and `html` are absent (AgentMail drops
+ *   them once the payload would exceed 1 MB), the message is fetched via
+ *   `GET /v0/inboxes/{inbox_id}/messages/{message_id}`.
+ * - **Attachments.** The webhook carries metadata only; each attachment's
+ *   bytes are downloaded (metadata → presigned URL → bytes).
+ *
+ * Either needs `AGENTMAIL_API_KEY`; a message that needs neither makes no
+ * network call at all. When `AGENTMAIL_INBOX_ID` is set, an event for any
+ * other inbox is rejected.
+ *
+ * `id` is AgentMail's `message_id` VERBATIM (the Message-ID with its angle
+ * brackets — the exact string every per-message endpoint takes as its path
+ * parameter); `messageId` is the same value without the brackets, for
+ * threading headers. Both are stable across Svix redeliveries, so dedupe
+ * on `id`.
+ *
+ * @param _headers - HTTP headers (unused — AgentMail puts everything in the body).
+ * @param body - The raw JSON body, a string, or an already-parsed object.
+ * @returns The normalized inbound email.
+ * @throws {Error} When the body is not JSON, is not a `message.received*`
+ *   event, lacks the message ids, or is for a different inbox than
+ *   `AGENTMAIL_INBOX_ID`.
+ * @throws {AgentMailApiError} When hydration (message fetch / attachment
+ *   download) fails — let it propagate as a 5xx so AgentMail retries.
+ * @throws {Error} The tagged `config.notConfigured` error when hydration
+ *   is needed and `AGENTMAIL_API_KEY` is unset.
+ */
+export const parseWebhookPayload = async (_headers, body) => {
+    let parsed;
+    try {
+        parsed = parseJsonBody(body);
+    }
+    catch (error) {
+        throw new Error('AgentMail webhook body is not valid JSON.', { cause: error });
+    }
+    const event = asInboundEvent(parsed);
+    let message = event.message;
+    const configuredInboxId = getConfiguredInboxId();
+    if (configuredInboxId !== undefined && message.inbox_id !== configuredInboxId) {
+        throw new Error(`AgentMail webhook is for inbox "${message.inbox_id}", not the configured AGENTMAIL_INBOX_ID — ` +
+            'scope the webhook to this inbox (inbox_ids on the webhook) or unset AGENTMAIL_INBOX_ID.');
+    }
+    if (typeof message.text !== 'string' && typeof message.html !== 'string') {
+        // Payload cap (1 MB): AgentMail omitted both bodies — fetch them. The
+        // ids come from the webhook (authoritative); everything else from the
+        // full message.
+        const full = await getMessage(message.inbox_id, message.message_id);
+        message = { ...message, ...full, inbox_id: message.inbox_id, message_id: message.message_id };
+    }
+    const from = normalizeAddressList(message.from ?? message.from_)[0] ?? '';
+    const subject = typeof message.subject === 'string' ? message.subject : '';
+    const messageId = unwrapMessageId(message.message_id);
+    const email = {
+        id: message.message_id,
+        from,
+        to: normalizeAddressList(message.to),
+        subject,
+        headers: lowercaseHeaderMap(message.headers),
+        receivedAt: parseTimestamp(message.timestamp) ?? parseTimestamp(message.created_at) ?? new Date(),
+    };
+    const cc = normalizeAddressList(message.cc);
+    if (cc.length > 0)
+        email.cc = cc;
+    if (typeof message.text === 'string')
+        email.textBody = message.text;
+    if (typeof message.html === 'string')
+        email.htmlBody = message.html;
+    const attachments = await fetchAttachments(message);
+    if (attachments.length > 0)
+        email.attachments = attachments;
+    if (messageId)
+        email.messageId = messageId;
+    const inReplyTo = unwrapMessageId(message.in_reply_to);
+    if (inReplyTo)
+        email.inReplyTo = inReplyTo;
+    const references = normalizeAddressList(message.references)
+        .map((ref) => unwrapMessageId(ref))
+        .filter((ref) => ref !== undefined);
+    if (references.length > 0)
+        email.references = references;
+    rememberInbox(email.id, message.inbox_id);
+    return email;
+};
+/**
+ * Resolves the inbox a reply must be sent from: `AGENTMAIL_INBOX_ID` when
+ * set, else the inbox recorded when this process parsed the message.
+ *
+ * @param email - The original inbound email.
+ * @returns The inbox id.
+ * @throws {Error} When neither source knows the inbox.
+ */
+const resolveInboxId = (email) => {
+    const inboxId = getConfiguredInboxId() ?? inboxByEmailId.get(email.id);
+    if (!inboxId) {
+        throw new Error(`Cannot reply to AgentMail message ${email.id}: its inbox is unknown in this process. ` +
+            'Set AGENTMAIL_INBOX_ID to the inbox_id that receives mail (required for replies sent from a later request or after a restart).');
+    }
+    return inboxId;
+};
+/**
+ * Dispatches a reply through AgentMail's reply endpoint from the inbox
+ * that received the original message. AgentMail threads the reply itself
+ * (`In-Reply-To`, `References`, subject), so `reply.subject` and
+ * `reply.from` have no effect — the reply always comes from the inbox,
+ * under the original subject.
+ *
+ * @param email - The original inbound email being replied to.
+ * @param reply - The reply payload.
+ * @returns The reply dispatch result (`id` = the new message's Message-ID).
+ * @throws {Error} When the inbox cannot be resolved (see
+ *   {@link parseWebhookPayload} for the two sources).
+ * @throws {AgentMailApiError} On a non-2xx API response.
+ */
+export const replyTo = async (email, reply) => {
+    const inboxId = resolveInboxId(email);
+    const request = {};
+    if (email.from.length > 0)
+        request.to = email.from;
+    if (reply.textBody !== undefined)
+        request.text = reply.textBody;
+    if (reply.htmlBody !== undefined)
+        request.html = reply.htmlBody;
+    if (reply.headers && Object.keys(reply.headers).length > 0)
+        request.headers = { ...reply.headers };
+    if (reply.attachments && reply.attachments.length > 0) {
+        request.attachments = reply.attachments.map((a) => {
+            const attachment = {
+                filename: a.name,
+                content_type: a.contentType,
+                content: a.contentBase64,
+            };
+            if (a.contentId !== undefined) {
+                attachment.content_id = a.contentId;
+                attachment.content_disposition = 'inline';
+            }
+            return attachment;
+        });
+    }
+    const result = await replyToMessage(inboxId, email.id, request);
+    return { id: result.message_id };
+};
+/**
+ * Indicates that this provider supports outbound reply dispatch via
+ * {@link replyTo}. Replies use AgentMail's own API — no outbound
+ * `@molecule/api-emails` transport is involved.
+ *
+ * @returns Always `true`.
+ */
+export const supportsReply = () => true;
+/**
+ * The AgentMail inbound-email provider implementing the
+ * {@link InboundEmailProvider} interface.
+ */
+export const provider = {
+    parseWebhookPayload,
+    verifySignature,
+    replyTo,
+    supportsReply,
+};
+//# sourceMappingURL=provider.js.map

package/dist/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,sEAAsE;AACtE,2EAA2E;AAC3E,oCAAoC;AACpC,OAAO,cAAc,CAAA;AASrB,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAEhE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAQzE,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,6BAA6B,EAC7B,SAAS,EACT,QAAQ,EACR,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACb,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,eAAe,GAChB,MAAM,gBAAgB,CAAA;AAEvB,+EAA+E;AAC/E,MAAM,oBAAoB,GAAG,kBAAkB,CAAA;AAE/C;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,IAAI,CAAA;AAE7B;;;;;GAKG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAA;AAEhD;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAS,EAAE;IACxC,cAAc,CAAC,KAAK,EAAE,CAAA;AACxB,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,OAAe,EAAQ,EAAE;IAC/D,IAAI,cAAc,CAAC,IAAI,IAAI,gBAAgB,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAA;QAC3C,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACvD,CAAC;IACD,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;AACtC,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,GAAW,EAAE;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAA;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,6EAA6E;QAC7E,6EAA6E;QAC7E,MAAM,wBAAwB,CAAC,0BAA0B,EAAE,eAAe,CAAC,CAAA;IAC7E,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,GAAW,EAAE;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAA;IAC/D,IAAI,CAAC,GAAG;QAAE,OAAO,6BAA6B,CAAA;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IACvC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,6BAA6B,CAAA;AACvF,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,GAAuB,EAAE;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAA;IAClD,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;AAChD,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,OAAsD,EACtD,IAAqB,EACH,EAAE;IACpB,mEAAmE;IACnE,uEAAuE;IACvE,uEAAuE;IACvE,+DAA+D;IAC/D,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAA;IAEjC,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;IAC5E,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;IACjG,MAAM,eAAe,GACnB,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;IAEjF,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,CAAC,eAAe;QAAE,OAAO,KAAK,CAAA;IAEvD,oDAAoD;IACpD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IAChD,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,GAAG,sBAAsB,EAAE;QAAE,OAAO,KAAK,CAAA;IAEtE,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;IACvC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAElC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;SACvC,MAAM,CAAC,kBAAkB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;SAC/C,MAAM,CAAC,QAAQ,CAAC,CAAA;IAEnB,qEAAqE;IACrE,oEAAoE;IACpE,sCAAsC;IACtC,OAAO,oBAAoB,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC9D,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CACrC,CAAA;AACH,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,kBAAkB,GAAG,CAAC,KAAc,EAA6B,EAAE;IACvE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAClC,OAAO,CACL,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACzB,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAC5B,CAAA;AACH,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,cAAc,GAAG,CAAC,MAAe,EAAyB,EAAE;IAChE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAA;IACnC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,oBAAoB,SAAS,8DAA8D;YACzF,2FAA2F,CAC9F,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;IAC9B,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAA0B,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;IACvE,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IACzE,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;IAC7D,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,mBAAmB,GAAG,CAC1B,IAA6B,EAC7B,aAAqB,EACG,EAAE;IAC1B,MAAM,UAAU,GAA2B;QACzC,IAAI,EACF,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC3D,CAAC,CAAC,IAAI,CAAC,QAAQ;YACf,CAAC,CAAC,IAAI,CAAC,aAAa;QACxB,WAAW,EACT,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YACnE,CAAC,CAAC,IAAI,CAAC,YAAY;YACnB,CAAC,CAAC,0BAA0B;QAChC,aAAa;KACd,CAAA;IACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAA;IACjG,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAA;IACxC,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAAG,KAAK,EAAE,OAAyB,EAAqC,EAAE;IAC9F,MAAM,GAAG,GAA6B,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAA;IAC3E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IACE,CAAC,QAAQ,CAAC,IAAI,CAAC;YACf,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;YACtC,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAC/B,CAAC;YACD,SAAQ;QACV,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,kBAAkB,CAC1C,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,UAAU,EAClB,IAAI,CAAC,aAAa,CACnB,CAAA;QACD,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IACjE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,QAAuD,EACvD,IAA+C,EACxB,EAAE;IACzB,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;IACpC,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;IAE3B,MAAM,iBAAiB,GAAG,oBAAoB,EAAE,CAAA;IAChD,IAAI,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CACb,mCAAmC,OAAO,CAAC,QAAQ,6CAA6C;YAC9F,yFAAyF,CAC5F,CAAA;IACH,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzE,sEAAsE;QACtE,sEAAsE;QACtE,gBAAgB;QAChB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;QACnE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAA;IAC/F,CAAC;IAED,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACzE,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1E,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAErD,MAAM,KAAK,GAAiB;QAC1B,EAAE,EAAE,OAAO,CAAC,UAAU;QACtB,IAAI;QACJ,EAAE,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO;QACP,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5C,UAAU,EACR,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,EAAE;KACxF,CAAA;IAED,MAAM,EAAE,GAAG,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC3C,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,EAAE,GAAG,EAAE,CAAA;IAEhC,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAA;IACnE,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAA;IAEnE,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAA;IACnD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,WAAW,GAAG,WAAW,CAAA;IAE3D,IAAI,SAAS;QAAE,KAAK,CAAC,SAAS,GAAG,SAAS,CAAA;IAC1C,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IACtD,IAAI,SAAS;QAAE,KAAK,CAAC,SAAS,GAAG,SAAS,CAAA;IAC1C,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC;SACxD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;SAClC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAA;IACpD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,UAAU,GAAG,UAAU,CAAA;IAExD,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IACzC,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,cAAc,GAAG,CAAC,KAAmB,EAAU,EAAE;IACrD,MAAM,OAAO,GAAG,oBAAoB,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACtE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,qCAAqC,KAAK,CAAC,EAAE,0CAA0C;YACrF,gIAAgI,CACnI,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,EAC1B,KAAmB,EACnB,KAAwB,EACU,EAAE;IACpC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IAErC,MAAM,OAAO,GAA0B,EAAE,CAAA;IACzC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAA;IAClD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAA;IAC/D,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAA;IAC/D,IAAI,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,OAAO,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAA;IAClG,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAA4B,EAAE;YAC1E,MAAM,UAAU,GAA6B;gBAC3C,QAAQ,EAAE,CAAC,CAAC,IAAI;gBAChB,YAAY,EAAE,CAAC,CAAC,WAAW;gBAC3B,OAAO,EAAE,CAAC,CAAC,aAAa;aACzB,CAAA;YACD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC9B,UAAU,CAAC,UAAU,GAAG,CAAC,CAAC,SAAS,CAAA;gBACnC,UAAU,CAAC,mBAAmB,GAAG,QAAQ,CAAA;YAC3C,CAAC;YACD,OAAO,UAAU,CAAA;QACnB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAC/D,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,CAAA;AAClC,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,GAAY,EAAE,CAAC,IAAI,CAAA;AAEhD;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAyB;IAC5C,mBAAmB;IACnB,eAAe;IACf,OAAO;IACP,aAAa;CACd,CAAA"}

package/dist/secrets.d.ts

@@ -0,0 +1,17 @@
+/**
+ * AgentMail secret definitions (inbound webhooks + API) — self-registered at
+ * import time so the runtime secrets registry (`@molecule/api-secrets`) can
+ * drive boot-time configuration reports and actionable "not configured"
+ * errors.
+ *
+ * Content is derived MECHANICALLY from this package's mlcl registry secrets
+ * entry (label/instructions/setupUrl/example) via the fleet formula, so
+ * packages sharing a key register byte-identical definitions and
+ * registration order never matters.
+ *
+ * @module
+ */
+import type { SecretDefinition } from '@molecule/api-secrets';
+/** Secret definitions required by the AgentMail inbound-email bond. */
+export declare const agentMailInboundSecretDefinitions: SecretDefinition[];
+//# sourceMappingURL=secrets.d.ts.map

package/dist/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAG7D,uEAAuE;AACvE,eAAO,MAAM,iCAAiC,EAAE,gBAAgB,EAuC/D,CAAA"}

package/dist/secrets.js

@@ -0,0 +1,52 @@
+/**
+ * AgentMail secret definitions (inbound webhooks + API) — self-registered at
+ * import time so the runtime secrets registry (`@molecule/api-secrets`) can
+ * drive boot-time configuration reports and actionable "not configured"
+ * errors.
+ *
+ * Content is derived MECHANICALLY from this package's mlcl registry secrets
+ * entry (label/instructions/setupUrl/example) via the fleet formula, so
+ * packages sharing a key register byte-identical definitions and
+ * registration order never matters.
+ *
+ * @module
+ */
+import { registerSecrets } from '@molecule/api-secrets';
+/** Secret definitions required by the AgentMail inbound-email bond. */
+export const agentMailInboundSecretDefinitions = [
+    {
+        key: 'AGENTMAIL_API_KEY',
+        description: 'AgentMail API key — AgentMail console → create an account and generate an API key from the dashboard.',
+        helpUrl: 'https://console.agentmail.to',
+        required: true,
+        example: 'am_...',
+    },
+    {
+        key: 'AGENTMAIL_WEBHOOK_SECRET',
+        description: 'AgentMail webhook signing secret — The `secret` returned when the webhook is created (also readable from the console); verifies inbound webhook signatures.',
+        helpUrl: 'https://docs.agentmail.to/webhook-verification',
+        required: true,
+        example: 'whsec_...',
+    },
+    {
+        key: 'AGENTMAIL_INBOX_ID',
+        description: 'AgentMail inbox ID — The `inbox_id` of the inbox that receives mail; when set, webhooks for other inboxes are rejected and replies are sent from this inbox.',
+        helpUrl: 'https://docs.agentmail.to/api-reference/inboxes/create',
+        required: false,
+    },
+    {
+        key: 'AGENTMAIL_BASE_URL',
+        description: 'AgentMail API base URL — Only set for a regional endpoint (EU: https://api.agentmail.eu); the default is fine.',
+        required: false,
+        example: 'https://api.agentmail.to',
+        default: 'https://api.agentmail.to',
+    },
+    {
+        key: 'AGENTMAIL_INBOUND_REPLAY_WINDOW_SECONDS',
+        description: 'AgentMail inbound replay window — Max age (seconds) of accepted inbound webhook signatures — replay protection; the default is fine.',
+        required: false,
+        example: '300',
+    },
+];
+registerSecrets(agentMailInboundSecretDefinitions);
+//# sourceMappingURL=secrets.js.map

package/dist/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,uEAAuE;AACvE,MAAM,CAAC,MAAM,iCAAiC,GAAuB;IACnE;QACE,GAAG,EAAE,mBAAmB;QACxB,WAAW,EACT,uGAAuG;QACzG,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,QAAQ;KAClB;IACD;QACE,GAAG,EAAE,0BAA0B;QAC/B,WAAW,EACT,6JAA6J;QAC/J,OAAO,EAAE,gDAAgD;QACzD,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,WAAW;KACrB;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,WAAW,EACT,8JAA8J;QAChK,OAAO,EAAE,wDAAwD;QACjE,QAAQ,EAAE,KAAK;KAChB;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,WAAW,EACT,gHAAgH;QAClH,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,0BAA0B;QACnC,OAAO,EAAE,0BAA0B;KACpC;IACD;QACE,GAAG,EAAE,yCAAyC;QAC9C,WAAW,EACT,sIAAsI;QACxI,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,KAAK;KACf;CACF,CAAA;AAED,eAAe,CAAC,iCAAiC,CAAC,CAAA"}