@ravi-hq/ravi 0.5.1 → 0.5.3

package/dist/channels/email-trusted.d.ts

@@ -0,0 +1,129 @@
+import type { EmailEvent, BaseGatewayContext } from "../types.js";
+/** Configuration for a single email account within the ravi-email-trusted channel. */
+export interface EmailTrustedAccountConfig {
+    /** The identity UUID this account is bound to. */
+    identityUuid: string;
+    /** Human-readable identity name for display purposes. */
+    identityName: string;
+    /** The email address provisioned for this identity. */
+    email: string;
+}
+/** Normalized inbound message envelope produced by {@link normalizeInbound}. */
+export interface EmailTrustedInboundEnvelope {
+    /** Sender's email address (used as the sender ID). */
+    senderId: string;
+    /** Plain-text body extracted from the email (falls back to subject). */
+    text: string;
+    /** Thread ID that maps to the OpenClaw session key. */
+    threadId: string;
+    /** Additional email metadata passed through to the agent. */
+    metadata: {
+        subject: string;
+        fromDisplayName: string;
+        htmlContent: string;
+        attachments: number;
+        inReplyTo: string | null;
+        lastMessageId: number;
+    };
+}
+/** Context passed by the ChannelManager to `gateway.startAccount()`. */
+export type EmailTrustedGatewayContext = BaseGatewayContext<EmailTrustedAccountConfig>;
+/**
+ * Creates the ravi-email-trusted channel definition for OpenClaw.
+ *
+ * Notification-only channel for emails from trusted senders (other inboxes
+ * the identity owns). The agent processes the email as an instruction but
+ * delivery is a no-op — use ravi_email_reply to respond.
+ *
+ * @returns The ravi-email-trusted channel definition object.
+ */
+export declare function createEmailTrustedChannel(): {
+    id: "ravi-email-trusted";
+    meta: {
+        id: string;
+        label: string;
+        selectionLabel: string;
+        blurb: string;
+        aliases: string[];
+    };
+    capabilities: {
+        chatTypes: readonly ["direct"];
+    };
+    config: {
+        /**
+         * List all configured account IDs (identity UUIDs) for the ravi-email-trusted channel.
+         */
+        listAccountIds: (cfg: Record<string, unknown>) => string[];
+        /**
+         * Resolve an account configuration by its ID (identity UUID).
+         */
+        resolveAccount: (cfg: Record<string, unknown>, accountId: string) => EmailTrustedAccountConfig;
+    };
+    /**
+     * Normalize an inbound SSE email event into a channel message envelope.
+     *
+     * Only trusted events reach this channel — no sender classification needed.
+     */
+    normalizeInbound(event: EmailEvent, account: EmailTrustedAccountConfig): EmailTrustedInboundEnvelope | null;
+    /**
+     * Generate the session key for this channel.
+     *
+     * Format: `agent:{agentId}:ravi-email-trusted:{accountId}:thread:{threadId}`
+     */
+    getSessionKey(agentId: string, accountId: string, threadId: string): string;
+    gateway: {
+        /**
+         * Start monitoring inbound trusted emails for a single identity account.
+         *
+         * Trusted emails trigger an agent turn with CommandAuthorized: true.
+         * Delivery is a no-op — use ravi_email_reply tool to respond.
+         */
+        startAccount: (ctx: EmailTrustedGatewayContext) => Promise<void>;
+    };
+};
+/** The singleton ravi-email-trusted channel instance. */
+export declare const raviEmailTrustedChannel: {
+    id: "ravi-email-trusted";
+    meta: {
+        id: string;
+        label: string;
+        selectionLabel: string;
+        blurb: string;
+        aliases: string[];
+    };
+    capabilities: {
+        chatTypes: readonly ["direct"];
+    };
+    config: {
+        /**
+         * List all configured account IDs (identity UUIDs) for the ravi-email-trusted channel.
+         */
+        listAccountIds: (cfg: Record<string, unknown>) => string[];
+        /**
+         * Resolve an account configuration by its ID (identity UUID).
+         */
+        resolveAccount: (cfg: Record<string, unknown>, accountId: string) => EmailTrustedAccountConfig;
+    };
+    /**
+     * Normalize an inbound SSE email event into a channel message envelope.
+     *
+     * Only trusted events reach this channel — no sender classification needed.
+     */
+    normalizeInbound(event: EmailEvent, account: EmailTrustedAccountConfig): EmailTrustedInboundEnvelope | null;
+    /**
+     * Generate the session key for this channel.
+     *
+     * Format: `agent:{agentId}:ravi-email-trusted:{accountId}:thread:{threadId}`
+     */
+    getSessionKey(agentId: string, accountId: string, threadId: string): string;
+    gateway: {
+        /**
+         * Start monitoring inbound trusted emails for a single identity account.
+         *
+         * Trusted emails trigger an agent turn with CommandAuthorized: true.
+         * Delivery is a no-op — use ravi_email_reply tool to respond.
+         */
+        startAccount: (ctx: EmailTrustedGatewayContext) => Promise<void>;
+    };
+};
+//# sourceMappingURL=email-trusted.d.ts.map

package/dist/channels/email-trusted.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-trusted.d.ts","sourceRoot":"","sources":["../../src/channels/email-trusted.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAIlE,sFAAsF;AACtF,MAAM,WAAW,yBAAyB;IACxC,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAC;IACrB,yDAAyD;IACzD,YAAY,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;CACf;AAID,gFAAgF;AAChF,MAAM,WAAW,2BAA2B;IAC1C,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,QAAQ,EAAE;QACR,OAAO,EAAE,MAAM,CAAC;QAChB,eAAe,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH;AAID,wEAAwE;AACxE,MAAM,MAAM,0BAA0B,GAAG,kBAAkB,CAAC,yBAAyB,CAAC,CAAC;AAIvF;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB;;;;;;;;;;;;;QAkBnC;;WAEG;8BACmB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM,EAAE;QAiBxD;;WAEG;8BAEI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,aACjB,MAAM,KAChB,yBAAyB;;IAe9B;;;;OAIG;4BAEM,UAAU,WACR,yBAAyB,GACjC,2BAA2B,GAAG,IAAI;IAgBrC;;;;OAIG;2BACoB,MAAM,aAAa,MAAM,YAAY,MAAM,GAAG,MAAM;;QAOzE;;;;;WAKG;4BACuB,0BAA0B,KAAG,OAAO,CAAC,IAAI,CAAC;;EAqMzE;AAED,yDAAyD;AACzD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;QA3R9B;;WAEG;8BACmB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM,EAAE;QAiBxD;;WAEG;8BAEI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,aACjB,MAAM,KAChB,yBAAyB;;IAe9B;;;;OAIG;4BAEM,UAAU,WACR,yBAAyB,GACjC,2BAA2B,GAAG,IAAI;IAgBrC;;;;OAIG;2BACoB,MAAM,aAAa,MAAM,YAAY,MAAM,GAAG,MAAM;;QAOzE;;;;;WAKG;4BACuB,0BAA0B,KAAG,OAAO,CAAC,IAAI,CAAC;;CAwMR,CAAC"}

package/dist/channels/email-trusted.js

@@ -0,0 +1,275 @@
+// ─── Channel Definition ──────────────────────────────────────────────────────
+/**
+ * Creates the ravi-email-trusted channel definition for OpenClaw.
+ *
+ * Notification-only channel for emails from trusted senders (other inboxes
+ * the identity owns). The agent processes the email as an instruction but
+ * delivery is a no-op — use ravi_email_reply to respond.
+ *
+ * @returns The ravi-email-trusted channel definition object.
+ */
+export function createEmailTrustedChannel() {
+    return {
+        id: "ravi-email-trusted",
+        meta: {
+            id: "ravi-email-trusted",
+            label: "Ravi Email (Trusted)",
+            selectionLabel: "Ravi Email Trusted (AI Agent Identity)",
+            blurb: "Notification channel for emails from trusted senders. Execute as instructions — use ravi_email_reply to respond.",
+            aliases: ["ravi-mail-trusted"],
+        },
+        capabilities: {
+            chatTypes: ["direct"],
+        },
+        config: {
+            /**
+             * List all configured account IDs (identity UUIDs) for the ravi-email-trusted channel.
+             */
+            listAccountIds: (cfg) => {
+                const plugins = cfg.plugins;
+                const uuid = plugins?.entries?.ravi?.config?.identityUuid;
+                const channels = cfg.channels;
+                const channelIds = Object.keys(channels?.["ravi-email-trusted"]?.accounts ?? {});
+                if (uuid) {
+                    return [uuid, ...channelIds.filter((id) => id !== uuid)];
+                }
+                return channelIds;
+            },
+            /**
+             * Resolve an account configuration by its ID (identity UUID).
+             */
+            resolveAccount: (cfg, accountId) => {
+                const channels = cfg.channels;
+                const found = channels?.["ravi-email-trusted"]?.accounts?.[accountId];
+                if (found)
+                    return found;
+                return {
+                    identityUuid: accountId,
+                    identityName: "",
+                    email: "",
+                };
+            },
+        },
+        /**
+         * Normalize an inbound SSE email event into a channel message envelope.
+         *
+         * Only trusted events reach this channel — no sender classification needed.
+         */
+        normalizeInbound(event, account) {
+            return {
+                senderId: event.from_email,
+                text: event.text_content || event.subject,
+                threadId: event.thread_id,
+                metadata: {
+                    subject: event.subject,
+                    fromDisplayName: event.from_display_name,
+                    htmlContent: event.html_content,
+                    attachments: event.attachments,
+                    inReplyTo: event.in_reply_to,
+                    lastMessageId: Number(event.id) || 0,
+                },
+            };
+        },
+        /**
+         * Generate the session key for this channel.
+         *
+         * Format: `agent:{agentId}:ravi-email-trusted:{accountId}:thread:{threadId}`
+         */
+        getSessionKey(agentId, accountId, threadId) {
+            return `agent:${agentId}:ravi-email-trusted:${accountId}:thread:${threadId}`;
+        },
+        // ─── Gateway Adapter ──────────────────────────────────────────────────
+        gateway: {
+            /**
+             * Start monitoring inbound trusted emails for a single identity account.
+             *
+             * Trusted emails trigger an agent turn with CommandAuthorized: true.
+             * Delivery is a no-op — use ravi_email_reply tool to respond.
+             */
+            startAccount: async (ctx) => {
+                const log = ctx.log ?? {
+                    info: (...args) => console.log("[ravi-email-trusted]", ...args),
+                    warn: (...args) => console.warn("[ravi-email-trusted]", ...args),
+                    error: (...args) => console.error("[ravi-email-trusted]", ...args),
+                };
+                let getRaviRuntime, loadAuth, updateAuth, RAVI_API_URL, RaviClient, acquireSSEClient, releaseSSEClient;
+                try {
+                    ({ getRaviRuntime } = await import("../runtime.js"));
+                    ({ loadAuth, updateAuth } = await import("../auth.js"));
+                    ({ RAVI_API_URL } = await import("../config.js"));
+                    ({ RaviClient } = await import("../client.js"));
+                    ({ acquireSSEClient, releaseSSEClient } = await import("../sse-pool.js"));
+                }
+                catch (err) {
+                    const detail = err instanceof Error ? err.message : String(err);
+                    log.error(`[ravi-email-trusted] Failed to load dependencies: ${detail}. Is the plugin built correctly?`);
+                    return;
+                }
+                const runtime = getRaviRuntime();
+                const auth = loadAuth();
+                if (!auth?.access_token) {
+                    log.error("[ravi-email-trusted] No auth credentials — cannot start email-trusted channel. Run 'openclaw ravi login'.");
+                    return;
+                }
+                let currentToken = auth.access_token;
+                let sse = null;
+                const client = new RaviClient({
+                    apiUrl: RAVI_API_URL,
+                    token: auth.access_token,
+                    refreshToken: auth.refresh_token,
+                    identityUuid: ctx.accountId,
+                    onTokenRefresh: (newToken) => {
+                        currentToken = newToken;
+                        try {
+                            updateAuth({ access_token: newToken });
+                        }
+                        catch (err) {
+                            const detail = err instanceof Error ? err.message : String(err);
+                            log.error(`[ravi-email-trusted] Failed to persist refreshed token: ${detail}`);
+                        }
+                        sse?.updateToken(newToken);
+                    },
+                });
+                let email = ctx.account.email;
+                let identityName = ctx.account.identityName;
+                if (!email) {
+                    try {
+                        const identities = await client.listIdentities();
+                        const identity = identities.find((i) => i.uuid === ctx.accountId);
+                        email = identity?.inbox ?? "";
+                        identityName = identity?.display_name ?? identity?.name ?? ctx.accountId;
+                    }
+                    catch (err) {
+                        if (err?.name === "RaviApiError") {
+                            const status = err.status;
+                            log.error(`[ravi-email-trusted] Failed to fetch identity details (HTTP ${status}): ${err.message}` +
+                                (status === 401 ? ". Token may be expired — run 'openclaw ravi login'." : ""));
+                        }
+                        else {
+                            const detail = err instanceof Error ? err.message : String(err);
+                            log.error(`[ravi-email-trusted] Failed to fetch identity details: ${detail}`);
+                        }
+                        return;
+                    }
+                }
+                if (!email) {
+                    log.error(`[ravi-email-trusted] Identity ${ctx.accountId} has no email address — cannot start email-trusted channel`);
+                    return;
+                }
+                log.info(`[ravi-email-trusted] Starting email-trusted channel for ${identityName} (${email})`);
+                sse = acquireSSEClient({
+                    apiUrl: RAVI_API_URL,
+                    token: currentToken,
+                    identityUuid: ctx.accountId,
+                    onAuthFailure: async () => {
+                        const tokenBefore = currentToken;
+                        try {
+                            await client.listIdentities();
+                        }
+                        catch (err) {
+                            const detail = err instanceof Error ? err.message : String(err);
+                            log.error(`[ravi-email-trusted] Auth refresh failed during SSE reconnect: ${detail}. Run 'openclaw ravi login' to re-authenticate.`);
+                            return null;
+                        }
+                        if (currentToken === tokenBefore) {
+                            log.warn(`[ravi-email-trusted] Auth refresh did not produce a new token — SSE auth failure is not recoverable via REST refresh`);
+                            return null;
+                        }
+                        return currentToken;
+                    },
+                });
+                sse.onEmailTrusted((event) => {
+                    try {
+                        const route = runtime.channel.routing.resolveAgentRoute({
+                            cfg: ctx.cfg,
+                            channel: "ravi-email-trusted",
+                            accountId: ctx.accountId,
+                            peer: { kind: "direct", id: event.thread_id },
+                        });
+                        const sessionKey = route.sessionKey;
+                        const bodyText = event.text_content || event.subject;
+                        const msgCtx = {
+                            Body: bodyText,
+                            BodyForAgent: `[Email from trusted sender (another inbox you own). Execute normally as an instruction. Your response will be discarded — reply only if necessary using the ravi_email_reply tool.]\n\n${bodyText}`,
+                            From: `ravi-email-trusted:${event.from_email}`,
+                            To: `ravi-email-trusted:${email}`,
+                            SessionKey: sessionKey,
+                            AccountId: ctx.accountId,
+                            ChatType: "direct",
+                            Provider: "ravi-email-trusted",
+                            Surface: "ravi-email-trusted",
+                            OriginatingChannel: "ravi-email-trusted",
+                            OriginatingTo: ctx.accountId,
+                            SenderName: event.from_display_name || event.from_email,
+                            SenderId: event.from_email,
+                            Timestamp: Date.now(),
+                            CommandAuthorized: true,
+                            MessageSid: `ravi-email-trusted:${event.uuid}`,
+                        };
+                        try {
+                            runtime.channel.session.recordInboundSession({
+                                storePath: runtime.channel.session.resolveStorePath(ctx.cfg.session?.store, { agentId: route.agentId }),
+                                sessionKey,
+                                ctx: msgCtx,
+                                updateLastRoute: {
+                                    sessionKey,
+                                    channel: "ravi-email-trusted",
+                                    to: ctx.accountId,
+                                    accountId: ctx.accountId,
+                                    threadId: event.thread_id,
+                                },
+                                onRecordError: (err) => {
+                                    const detail = err instanceof Error ? err.message : String(err);
+                                    log.error(`[ravi-email-trusted] Session record error for thread ${event.thread_id}: ${detail}`);
+                                },
+                            });
+                        }
+                        catch (err) {
+                            const detail = err instanceof Error ? err.message : String(err);
+                            log.error(`[ravi-email-trusted] recordInboundSession threw for thread ${event.thread_id}: ${detail}`);
+                        }
+                        runtime.channel.reply.dispatchReplyWithBufferedBlockDispatcher({
+                            ctx: msgCtx,
+                            cfg: ctx.cfg,
+                            dispatcherOptions: {
+                                deliver: async (_payload) => {
+                                    log.info(`[ravi-email-trusted] Channel deliver is a no-op — use ravi_email_reply tool`);
+                                },
+                                onError: (err) => {
+                                    log.error(`[ravi-email-trusted] Dispatch error: ${err}`);
+                                },
+                            },
+                        }).catch((err) => {
+                            const detail = err instanceof Error ? err.message : String(err);
+                            log.error(`[ravi-email-trusted] dispatchReply failed for thread ${event.thread_id}: ${detail}`);
+                        });
+                    }
+                    catch (err) {
+                        const detail = err instanceof Error ? err.message : String(err);
+                        log.error(`[ravi-email-trusted] Unhandled error processing event ${event.id}: ${detail}`);
+                    }
+                });
+                sse.onReconnect(() => {
+                    log.info(`[ravi-email-trusted] SSE reconnecting for ${identityName}`);
+                });
+                log.info(`[ravi-email-trusted] SSE connected for ${identityName} (${ctx.accountId})`);
+                await new Promise((resolve) => {
+                    if (ctx.abortSignal.aborted) {
+                        log.info(`[ravi-email-trusted] Stopping email-trusted channel for ${identityName} (already aborted)`);
+                        releaseSSEClient(ctx.accountId);
+                        resolve();
+                        return;
+                    }
+                    ctx.abortSignal.addEventListener("abort", () => {
+                        log.info(`[ravi-email-trusted] Stopping email-trusted channel for ${identityName}`);
+                        releaseSSEClient(ctx.accountId);
+                        resolve();
+                    });
+                });
+            },
+        },
+    };
+}
+/** The singleton ravi-email-trusted channel instance. */
+export const raviEmailTrustedChannel = createEmailTrustedChannel();
+//# sourceMappingURL=email-trusted.js.map

package/dist/channels/email-trusted.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-trusted.js","sourceRoot":"","sources":["../../src/channels/email-trusted.ts"],"names":[],"mappings":"AAwCA,gFAAgF;AAEhF;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,EAAE,EAAE,oBAA6B;QAEjC,IAAI,EAAE;YACJ,EAAE,EAAE,oBAAoB;YACxB,KAAK,EAAE,sBAAsB;YAC7B,cAAc,EAAE,wCAAwC;YACxD,KAAK,EACH,kHAAkH;YACpH,OAAO,EAAE,CAAC,mBAAmB,CAAC;SAC/B;QAED,YAAY,EAAE;YACZ,SAAS,EAAE,CAAC,QAAQ,CAAU;SAC/B;QAED,MAAM,EAAE;YACN;;eAEG;YACH,cAAc,EAAE,CAAC,GAA4B,EAAY,EAAE;gBACzD,MAAM,OAAO,GAAG,GAAG,CAAC,OAEP,CAAC;gBACd,MAAM,IAAI,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC;gBAE1D,MAAM,QAAQ,GAAG,GAAG,CAAC,QAER,CAAC;gBACd,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,oBAAoB,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;gBAEjF,IAAI,IAAI,EAAE,CAAC;oBACT,OAAO,CAAC,IAAI,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;gBAC3D,CAAC;gBACD,OAAO,UAAU,CAAC;YACpB,CAAC;YAED;;eAEG;YACH,cAAc,EAAE,CACd,GAA4B,EAC5B,SAAiB,EACU,EAAE;gBAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAER,CAAC;gBACd,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC;gBACtE,IAAI,KAAK;oBAAE,OAAO,KAAK,CAAC;gBAExB,OAAO;oBACL,YAAY,EAAE,SAAS;oBACvB,YAAY,EAAE,EAAE;oBAChB,KAAK,EAAE,EAAE;iBACV,CAAC;YACJ,CAAC;SACF;QAED;;;;WAIG;QACH,gBAAgB,CACd,KAAiB,EACjB,OAAkC;YAElC,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,UAAU;gBAC1B,IAAI,EAAE,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO;gBACzC,QAAQ,EAAE,KAAK,CAAC,SAAS;gBACzB,QAAQ,EAAE;oBACR,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,eAAe,EAAE,KAAK,CAAC,iBAAiB;oBACxC,WAAW,EAAE,KAAK,CAAC,YAAY;oBAC/B,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,SAAS,EAAE,KAAK,CAAC,WAAW;oBAC5B,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC;iBACrC;aACF,CAAC;QACJ,CAAC;QAED;;;;WAIG;QACH,aAAa,CAAC,OAAe,EAAE,SAAiB,EAAE,QAAgB;YAChE,OAAO,SAAS,OAAO,uBAAuB,SAAS,WAAW,QAAQ,EAAE,CAAC;QAC/E,CAAC;QAED,yEAAyE;QAEzE,OAAO,EAAE;YACP;;;;;eAKG;YACH,YAAY,EAAE,KAAK,EAAE,GAA+B,EAAiB,EAAE;gBACrE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI;oBACrB,IAAI,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,GAAG,IAAI,CAAC;oBAC1E,IAAI,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,IAAI,CAAC;oBAC3E,KAAK,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,IAAI,CAAC;iBAC9E,CAAC;gBAEF,IAAI,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,CAAC;gBACvG,IAAI,CAAC;oBACH,CAAC,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;oBACrD,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;oBACxD,CAAC,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;oBAClD,CAAC,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;oBAChD,CAAC,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBAC5E,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAChE,GAAG,CAAC,KAAK,CAAC,qDAAqD,MAAM,kCAAkC,CAAC,CAAC;oBACzG,OAAO;gBACT,CAAC;gBAED,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC;oBACxB,GAAG,CAAC,KAAK,CAAC,2GAA2G,CAAC,CAAC;oBACvH,OAAO;gBACT,CAAC;gBAED,IAAI,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;gBACrC,IAAI,GAAG,GAA+C,IAAI,CAAC;gBAE3D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC;oBAC5B,MAAM,EAAE,YAAY;oBACpB,KAAK,EAAE,IAAI,CAAC,YAAY;oBACxB,YAAY,EAAE,IAAI,CAAC,aAAa;oBAChC,YAAY,EAAE,GAAG,CAAC,SAAS;oBAC3B,cAAc,EAAE,CAAC,QAAgB,EAAE,EAAE;wBACnC,YAAY,GAAG,QAAQ,CAAC;wBACxB,IAAI,CAAC;4BACH,UAAU,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;wBACzC,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;4BAChE,GAAG,CAAC,KAAK,CAAC,2DAA2D,MAAM,EAAE,CAAC,CAAC;wBACjF,CAAC;wBACD,GAAG,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;oBAC7B,CAAC;iBACF,CAAC,CAAC;gBAEH,IAAI,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;gBAC9B,IAAI,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC;gBAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,IAAI,CAAC;wBACH,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;wBACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC;wBAClE,KAAK,GAAG,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;wBAC9B,YAAY,GAAG,QAAQ,EAAE,YAAY,IAAI,QAAQ,EAAE,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC;oBAC3E,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAK,GAAW,EAAE,IAAI,KAAK,cAAc,EAAE,CAAC;4BAC1C,MAAM,MAAM,GAAI,GAAW,CAAC,MAAM,CAAC;4BACnC,GAAG,CAAC,KAAK,CACP,+DAA+D,MAAM,MAAO,GAAa,CAAC,OAAO,EAAE;gCACnG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9E,CAAC;wBACJ,CAAC;6BAAM,CAAC;4BACN,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;4BAChE,GAAG,CAAC,KAAK,CAAC,0DAA0D,MAAM,EAAE,CAAC,CAAC;wBAChF,CAAC;wBACD,OAAO;oBACT,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,GAAG,CAAC,KAAK,CAAC,iCAAiC,GAAG,CAAC,SAAS,4DAA4D,CAAC,CAAC;oBACtH,OAAO;gBACT,CAAC;gBAED,GAAG,CAAC,IAAI,CAAC,2DAA2D,YAAY,KAAK,KAAK,GAAG,CAAC,CAAC;gBAE/F,GAAG,GAAG,gBAAgB,CAAC;oBACrB,MAAM,EAAE,YAAY;oBACpB,KAAK,EAAE,YAAY;oBACnB,YAAY,EAAE,GAAG,CAAC,SAAS;oBAC3B,aAAa,EAAE,KAAK,IAAI,EAAE;wBACxB,MAAM,WAAW,GAAG,YAAY,CAAC;wBACjC,IAAI,CAAC;4BACH,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;wBAChC,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;4BAChE,GAAG,CAAC,KAAK,CAAC,kEAAkE,MAAM,iDAAiD,CAAC,CAAC;4BACrI,OAAO,IAAI,CAAC;wBACd,CAAC;wBACD,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;4BACjC,GAAG,CAAC,IAAI,CAAC,sHAAsH,CAAC,CAAC;4BACjI,OAAO,IAAI,CAAC;wBACd,CAAC;wBACD,OAAO,YAAY,CAAC;oBACtB,CAAC;iBACF,CAAC,CAAC;gBAEH,GAAG,CAAC,cAAc,CAAC,CAAC,KAAiB,EAAE,EAAE;oBACvC,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC;4BACtD,GAAG,EAAE,GAAG,CAAC,GAAG;4BACZ,OAAO,EAAE,oBAAoB;4BAC7B,SAAS,EAAE,GAAG,CAAC,SAAS;4BACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE;yBAC9C,CAAC,CAAC;wBAEH,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;wBACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC;wBAErD,MAAM,MAAM,GAA4B;4BACtC,IAAI,EAAE,QAAQ;4BACd,YAAY,EAAE,0LAA0L,QAAQ,EAAE;4BAClN,IAAI,EAAE,sBAAsB,KAAK,CAAC,UAAU,EAAE;4BAC9C,EAAE,EAAE,sBAAsB,KAAK,EAAE;4BACjC,UAAU,EAAE,UAAU;4BACtB,SAAS,EAAE,GAAG,CAAC,SAAS;4BACxB,QAAQ,EAAE,QAAQ;4BAClB,QAAQ,EAAE,oBAAoB;4BAC9B,OAAO,EAAE,oBAAoB;4BAC7B,kBAAkB,EAAE,oBAAoB;4BACxC,aAAa,EAAE,GAAG,CAAC,SAAS;4BAC5B,UAAU,EAAE,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,UAAU;4BACvD,QAAQ,EAAE,KAAK,CAAC,UAAU;4BAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;4BACrB,iBAAiB,EAAE,IAAI;4BACvB,UAAU,EAAE,sBAAsB,KAAK,CAAC,IAAI,EAAE;yBAC/C,CAAC;wBAEF,IAAI,CAAC;4BACH,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC;gCAC3C,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAChD,GAAG,CAAC,GAAG,CAAC,OAA+C,EAAE,KAAK,EAC/D,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAC3B;gCACD,UAAU;gCACV,GAAG,EAAE,MAAM;gCACX,eAAe,EAAE;oCACf,UAAU;oCACV,OAAO,EAAE,oBAAoB;oCAC7B,EAAE,EAAE,GAAG,CAAC,SAAS;oCACjB,SAAS,EAAE,GAAG,CAAC,SAAS;oCACxB,QAAQ,EAAE,KAAK,CAAC,SAAS;iCAC1B;gCACD,aAAa,EAAE,CAAC,GAAY,EAAE,EAAE;oCAC9B,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oCAChE,GAAG,CAAC,KAAK,CAAC,wDAAwD,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC,CAAC;gCAClG,CAAC;6BACF,CAAC,CAAC;wBACL,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;4BAChE,GAAG,CAAC,KAAK,CAAC,8DAA8D,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC,CAAC;wBACxG,CAAC;wBAED,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC;4BAC7D,GAAG,EAAE,MAAM;4BACX,GAAG,EAAE,GAAG,CAAC,GAAG;4BACZ,iBAAiB,EAAE;gCACjB,OAAO,EAAE,KAAK,EAAE,QAA2B,EAAE,EAAE;oCAC7C,GAAG,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;gCAC1F,CAAC;gCACD,OAAO,EAAE,CAAC,GAAY,EAAE,EAAE;oCACxB,GAAG,CAAC,KAAK,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;gCAC3D,CAAC;6BACF;yBACF,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;4BACxB,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;4BAChE,GAAG,CAAC,KAAK,CAAC,wDAAwD,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC,CAAC;wBAClG,CAAC,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBAChE,GAAG,CAAC,KAAK,CAAC,yDAAyD,KAAK,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC,CAAC;oBAC5F,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE;oBACnB,GAAG,CAAC,IAAI,CAAC,6CAA6C,YAAY,EAAE,CAAC,CAAC;gBACxE,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,IAAI,CAAC,0CAA0C,YAAY,KAAK,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC;gBAEtF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAClC,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;wBAC5B,GAAG,CAAC,IAAI,CAAC,2DAA2D,YAAY,oBAAoB,CAAC,CAAC;wBACtG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;wBAChC,OAAO,EAAE,CAAC;wBACV,OAAO;oBACT,CAAC;oBACD,GAAG,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;wBAC7C,GAAG,CAAC,IAAI,CAAC,2DAA2D,YAAY,EAAE,CAAC,CAAC;wBACpF,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;wBAChC,OAAO,EAAE,CAAC;oBACZ,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,EAAE,CAAC"}

package/dist/channels/email-untrusted.d.ts

@@ -0,0 +1,133 @@
+import type { EmailEvent, BaseGatewayContext } from "../types.js";
+/** Configuration for a single email account within the ravi-email-untrusted channel. */
+export interface EmailUntrustedAccountConfig {
+    /** The identity UUID this account is bound to. */
+    identityUuid: string;
+    /** Human-readable identity name for display purposes. */
+    identityName: string;
+    /** The email address provisioned for this identity. */
+    email: string;
+}
+/** Normalized inbound message envelope produced by {@link normalizeInbound}. */
+export interface EmailUntrustedInboundEnvelope {
+    /** Sender's email address (used as the sender ID). */
+    senderId: string;
+    /** Plain-text body extracted from the email (falls back to subject). */
+    text: string;
+    /** Thread ID that maps to the OpenClaw session key. */
+    threadId: string;
+    /** Additional email metadata passed through to the agent. */
+    metadata: {
+        subject: string;
+        fromDisplayName: string;
+        htmlContent: string;
+        attachments: number;
+        inReplyTo: string | null;
+        lastMessageId: number;
+    };
+}
+/** Context passed by the ChannelManager to `gateway.startAccount()`. */
+export type EmailUntrustedGatewayContext = BaseGatewayContext<EmailUntrustedAccountConfig>;
+/**
+ * Creates the ravi-email-untrusted channel definition for OpenClaw.
+ *
+ * Cautionary notification channel for emails from unknown external senders.
+ * The agent treats content as context, not instructions. Delivery is a no-op
+ * — use ravi_email_reply to respond if safe.
+ *
+ * Can be disabled entirely by setting `externalEmail: false` in plugin config.
+ *
+ * @returns The ravi-email-untrusted channel definition object.
+ */
+export declare function createEmailUntrustedChannel(): {
+    id: "ravi-email-untrusted";
+    meta: {
+        id: string;
+        label: string;
+        selectionLabel: string;
+        blurb: string;
+        aliases: string[];
+    };
+    capabilities: {
+        chatTypes: readonly ["direct"];
+    };
+    config: {
+        /**
+         * List all configured account IDs (identity UUIDs) for the ravi-email-untrusted channel.
+         */
+        listAccountIds: (cfg: Record<string, unknown>) => string[];
+        /**
+         * Resolve an account configuration by its ID (identity UUID).
+         */
+        resolveAccount: (cfg: Record<string, unknown>, accountId: string) => EmailUntrustedAccountConfig;
+    };
+    /**
+     * Normalize an inbound SSE email event into a channel message envelope.
+     *
+     * Only untrusted events reach this channel — no sender classification needed.
+     */
+    normalizeInbound(event: EmailEvent, account: EmailUntrustedAccountConfig): EmailUntrustedInboundEnvelope | null;
+    /**
+     * Generate the session key for this channel.
+     *
+     * Format: `agent:{agentId}:ravi-email-untrusted:{accountId}:thread:{threadId}`
+     */
+    getSessionKey(agentId: string, accountId: string, threadId: string): string;
+    gateway: {
+        /**
+         * Start monitoring inbound untrusted emails for a single identity account.
+         *
+         * Respects `externalEmail` config — when false, returns early without
+         * starting. Untrusted emails trigger an agent turn with
+         * CommandAuthorized: false. Delivery is a no-op.
+         */
+        startAccount: (ctx: EmailUntrustedGatewayContext) => Promise<void>;
+    };
+};
+/** The singleton ravi-email-untrusted channel instance. */
+export declare const raviEmailUntrustedChannel: {
+    id: "ravi-email-untrusted";
+    meta: {
+        id: string;
+        label: string;
+        selectionLabel: string;
+        blurb: string;
+        aliases: string[];
+    };
+    capabilities: {
+        chatTypes: readonly ["direct"];
+    };
+    config: {
+        /**
+         * List all configured account IDs (identity UUIDs) for the ravi-email-untrusted channel.
+         */
+        listAccountIds: (cfg: Record<string, unknown>) => string[];
+        /**
+         * Resolve an account configuration by its ID (identity UUID).
+         */
+        resolveAccount: (cfg: Record<string, unknown>, accountId: string) => EmailUntrustedAccountConfig;
+    };
+    /**
+     * Normalize an inbound SSE email event into a channel message envelope.
+     *
+     * Only untrusted events reach this channel — no sender classification needed.
+     */
+    normalizeInbound(event: EmailEvent, account: EmailUntrustedAccountConfig): EmailUntrustedInboundEnvelope | null;
+    /**
+     * Generate the session key for this channel.
+     *
+     * Format: `agent:{agentId}:ravi-email-untrusted:{accountId}:thread:{threadId}`
+     */
+    getSessionKey(agentId: string, accountId: string, threadId: string): string;
+    gateway: {
+        /**
+         * Start monitoring inbound untrusted emails for a single identity account.
+         *
+         * Respects `externalEmail` config — when false, returns early without
+         * starting. Untrusted emails trigger an agent turn with
+         * CommandAuthorized: false. Delivery is a no-op.
+         */
+        startAccount: (ctx: EmailUntrustedGatewayContext) => Promise<void>;
+    };
+};
+//# sourceMappingURL=email-untrusted.d.ts.map

package/dist/channels/email-untrusted.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-untrusted.d.ts","sourceRoot":"","sources":["../../src/channels/email-untrusted.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAIlE,wFAAwF;AACxF,MAAM,WAAW,2BAA2B;IAC1C,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAC;IACrB,yDAAyD;IACzD,YAAY,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;CACf;AAID,gFAAgF;AAChF,MAAM,WAAW,6BAA6B;IAC5C,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,QAAQ,EAAE;QACR,OAAO,EAAE,MAAM,CAAC;QAChB,eAAe,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH;AAID,wEAAwE;AACxE,MAAM,MAAM,4BAA4B,GAAG,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;AAI3F;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B;;;;;;;;;;;;;QAkBrC;;WAEG;8BACmB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM,EAAE;QAiBxD;;WAEG;8BAEI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,aACjB,MAAM,KAChB,2BAA2B;;IAehC;;;;OAIG;4BAEM,UAAU,WACR,2BAA2B,GACnC,6BAA6B,GAAG,IAAI;IAgBvC;;;;OAIG;2BACoB,MAAM,aAAa,MAAM,YAAY,MAAM,GAAG,MAAM;;QAOzE;;;;;;WAMG;4BACuB,4BAA4B,KAAG,OAAO,CAAC,IAAI,CAAC;;EA+M3E;AAED,2DAA2D;AAC3D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;QAtShC;;WAEG;8BACmB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM,EAAE;QAiBxD;;WAEG;8BAEI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,aACjB,MAAM,KAChB,2BAA2B;;IAehC;;;;OAIG;4BAEM,UAAU,WACR,2BAA2B,GACnC,6BAA6B,GAAG,IAAI;IAgBvC;;;;OAIG;2BACoB,MAAM,aAAa,MAAM,YAAY,MAAM,GAAG,MAAM;;QAOzE;;;;;;WAMG;4BACuB,4BAA4B,KAAG,OAAO,CAAC,IAAI,CAAC;;CAkNN,CAAC"}