@vellumai/assistant 0.5.16 → 0.6.0

package/src/config/bundled-skills/outlook/TOOLS.json

@@ -0,0 +1,530 @@
+{
+  "version": 1,
+  "tools": [
+    {
+      "name": "outlook_rules",
+      "description": "List, create, or delete Outlook inbox message rules for automatic mail processing. Include a confidence score (0-1) for create and delete actions.",
+      "category": "outlook",
+      "risk": "medium",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "action": {
+            "type": "string",
+            "enum": ["list", "create", "delete"],
+            "description": "Rule action"
+          },
+          "display_name": {
+            "type": "string",
+            "description": "Display name for the rule (required for create)"
+          },
+          "from_contains": {
+            "oneOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              }
+            ],
+            "description": "Condition: sender contains (for create)"
+          },
+          "subject_contains": {
+            "oneOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              }
+            ],
+            "description": "Condition: subject contains (for create)"
+          },
+          "body_contains": {
+            "oneOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              }
+            ],
+            "description": "Condition: body contains (for create)"
+          },
+          "has_attachment": {
+            "type": "boolean",
+            "description": "Condition: message has attachment (for create)"
+          },
+          "importance": {
+            "type": "string",
+            "enum": ["low", "normal", "high"],
+            "description": "Condition: message importance level (for create)"
+          },
+          "move_to_folder": {
+            "type": "string",
+            "description": "Action: move to folder ID (for create)"
+          },
+          "delete": {
+            "type": "boolean",
+            "description": "Action: delete message (for create)"
+          },
+          "mark_as_read": {
+            "type": "boolean",
+            "description": "Action: mark as read (for create)"
+          },
+          "mark_importance": {
+            "type": "string",
+            "enum": ["low", "normal", "high"],
+            "description": "Action: set importance level (for create)"
+          },
+          "forward_to": {
+            "oneOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              }
+            ],
+            "description": "Action: forward to email address(es) (for create)"
+          },
+          "stop_processing": {
+            "type": "boolean",
+            "description": "Action: stop processing subsequent rules (for create)"
+          },
+          "rule_id": {
+            "type": "string",
+            "description": "Rule ID (required for delete)"
+          },
+          "confidence": {
+            "type": "number",
+            "description": "Confidence score (0-1) for this action"
+          },
+          "activity": {
+            "type": "string",
+            "description": "Brief non-technical explanation of why this tool is being called"
+          },
+          "account": {
+            "type": "string",
+            "description": "Email address of the Outlook account to use. Required when multiple Microsoft accounts are connected. If omitted, uses the most recently connected account."
+          }
+        },
+        "required": ["action"]
+      },
+      "executor": "tools/outlook-rules.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "outlook_vacation",
+      "description": "Get, enable, or disable Outlook automatic reply (out-of-office) settings. Include a confidence score (0-1) for enable and disable actions.",
+      "category": "outlook",
+      "risk": "medium",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "action": {
+            "type": "string",
+            "enum": ["get", "enable", "disable"],
+            "description": "Vacation action"
+          },
+          "internal_message": {
+            "type": "string",
+            "description": "Auto-reply message for internal (same organization) senders (required for enable)"
+          },
+          "external_message": {
+            "type": "string",
+            "description": "Auto-reply message for external senders (for enable)"
+          },
+          "external_audience": {
+            "type": "string",
+            "enum": ["none", "contactsOnly", "all"],
+            "description": "Who receives the external auto-reply: none, contactsOnly, or all (default none)"
+          },
+          "start_date": {
+            "type": "string",
+            "description": "Scheduled start date/time in ISO 8601 format (for enable with schedule)"
+          },
+          "end_date": {
+            "type": "string",
+            "description": "Scheduled end date/time in ISO 8601 format (for enable with schedule)"
+          },
+          "time_zone": {
+            "type": "string",
+            "description": "IANA time zone for scheduled dates (default: system timezone)"
+          },
+          "confidence": {
+            "type": "number",
+            "description": "Confidence score (0-1) for this action"
+          },
+          "activity": {
+            "type": "string",
+            "description": "Brief non-technical explanation of why this tool is being called"
+          },
+          "account": {
+            "type": "string",
+            "description": "Email address of the Outlook account to use. Required when multiple Microsoft accounts are connected. If omitted, uses the most recently connected account."
+          }
+        },
+        "required": ["action"]
+      },
+      "executor": "tools/outlook-vacation.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "outlook_sender_digest",
+      "description": "Scan Outlook inbox and group messages by sender to identify high-volume senders (e.g. newsletters). Returns top senders sorted by message count with metadata for bulk cleanup.",
+      "category": "outlook",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "query": {
+            "type": "string",
+            "description": "Optional search query to narrow results. If omitted, scans all inbox messages from the last 90 days."
+          },
+          "max_senders": {
+            "type": "number",
+            "description": "Maximum senders to return (default 50)"
+          },
+          "activity": {
+            "type": "string",
+            "description": "Brief non-technical explanation of why this tool is being called"
+          },
+          "account": {
+            "type": "string",
+            "description": "Email address of the Outlook account to use. Required when multiple Microsoft accounts are connected. If omitted, uses the most recently connected account."
+          }
+        }
+      },
+      "executor": "tools/outlook-sender-digest.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "outlook_outreach_scan",
+      "description": "Scan Outlook inbox for senders without List-Unsubscribe headers (potential cold outreach). Returns top senders with message counts and sample subjects. Read-only - use outlook_archive and outlook_mail_rules for cleanup.",
+      "category": "outlook",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "max_senders": {
+            "type": "number",
+            "description": "Maximum senders to return (default 30)"
+          },
+          "time_range": {
+            "type": "string",
+            "description": "Time range filter (default '90d'). Accepts values like '30d', '7d', '90d'."
+          },
+          "activity": {
+            "type": "string",
+            "description": "Brief non-technical explanation of why this tool is being called"
+          },
+          "account": {
+            "type": "string",
+            "description": "Email address of the Outlook account to use. Required when multiple Microsoft accounts are connected. If omitted, uses the most recently connected account."
+          }
+        }
+      },
+      "executor": "tools/outlook-outreach-scan.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "outlook_draft",
+      "description": "Create a draft email in Outlook. The draft will appear in Outlook Drafts for user review. Use in_reply_to with an Outlook message ID to create a reply draft.",
+      "category": "outlook",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "to": {
+            "type": "string",
+            "description": "Recipient email address (comma-separated for multiple)"
+          },
+          "subject": {
+            "type": "string",
+            "description": "Email subject line"
+          },
+          "body": {
+            "type": "string",
+            "description": "Email body (plain text)"
+          },
+          "in_reply_to": {
+            "type": "string",
+            "description": "Outlook message ID to reply to. Creates a reply draft that preserves the conversation thread."
+          },
+          "cc": {
+            "type": "string",
+            "description": "CC recipients (comma-separated email addresses)"
+          },
+          "bcc": {
+            "type": "string",
+            "description": "BCC recipients (comma-separated email addresses)"
+          },
+          "activity": {
+            "type": "string",
+            "description": "Brief non-technical explanation of why this tool is being called"
+          },
+          "account": {
+            "type": "string",
+            "description": "Email address of the Outlook account to use. Required when multiple Outlook accounts are connected. If omitted, uses the most recently connected account."
+          }
+        },
+        "required": ["to", "subject", "body"]
+      },
+      "executor": "tools/outlook-draft.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "outlook_send_draft",
+      "description": "Send an existing Outlook draft. Only use when the user has reviewed and explicitly approved sending.",
+      "category": "outlook",
+      "risk": "high",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "draft_id": {
+            "type": "string",
+            "description": "Outlook draft message ID to send"
+          },
+          "confidence": {
+            "type": "number",
+            "description": "Confidence score (0-1) for this action"
+          },
+          "activity": {
+            "type": "string",
+            "description": "Brief non-technical explanation of why this tool is being called"
+          },
+          "account": {
+            "type": "string",
+            "description": "Email address of the Outlook account to use. Required when multiple Outlook accounts are connected. If omitted, uses the most recently connected account."
+          }
+        },
+        "required": ["draft_id", "confidence"]
+      },
+      "executor": "tools/outlook-send-draft.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "outlook_forward",
+      "description": "Create a draft forwarding an Outlook message to another recipient, preserving attachments. Microsoft Graph handles attachment forwarding natively.",
+      "category": "outlook",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "message_id": {
+            "type": "string",
+            "description": "Outlook message ID to forward"
+          },
+          "to": {
+            "type": "string",
+            "description": "Recipient email address (comma-separated for multiple)"
+          },
+          "comment": {
+            "type": "string",
+            "description": "Optional text to include with the forwarded message"
+          },
+          "confidence": {
+            "type": "number",
+            "description": "Confidence score (0-1) for this action"
+          },
+          "activity": {
+            "type": "string",
+            "description": "Brief non-technical explanation of why this tool is being called"
+          },
+          "account": {
+            "type": "string",
+            "description": "Email address of the Outlook account to use. Required when multiple Outlook accounts are connected. If omitted, uses the most recently connected account."
+          }
+        },
+        "required": ["message_id", "to", "confidence"]
+      },
+      "executor": "tools/outlook-forward.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "outlook_trash",
+      "description": "Move an Outlook message to Deleted Items. Include a confidence score (0-1).",
+      "category": "outlook",
+      "risk": "medium",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "message_id": {
+            "type": "string",
+            "description": "Outlook message ID to move to Deleted Items"
+          },
+          "confidence": {
+            "type": "number",
+            "description": "Confidence score (0-1) for this action"
+          },
+          "activity": {
+            "type": "string",
+            "description": "Brief non-technical explanation of why this tool is being called"
+          },
+          "account": {
+            "type": "string",
+            "description": "Email address of the Outlook account to use. Required when multiple Outlook accounts are connected. If omitted, uses the most recently connected account."
+          }
+        },
+        "required": ["message_id", "confidence"]
+      },
+      "executor": "tools/outlook-trash.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "outlook_categories",
+      "description": "Add, remove, or list available categories on Outlook messages. Include a confidence score (0-1) for add/remove actions.",
+      "category": "outlook",
+      "risk": "medium",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "action": {
+            "type": "string",
+            "enum": ["add", "remove", "list_available"],
+            "description": "Category action"
+          },
+          "message_id": {
+            "type": "string",
+            "description": "Outlook message ID (required for add/remove)"
+          },
+          "categories": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Category names to add or remove"
+          },
+          "confidence": {
+            "type": "number",
+            "description": "Confidence score (0-1) for this action"
+          },
+          "activity": {
+            "type": "string",
+            "description": "Brief non-technical explanation of why this tool is being called"
+          },
+          "account": {
+            "type": "string",
+            "description": "Email address of the Outlook account to use. Required when multiple Outlook accounts are connected. If omitted, uses the most recently connected account."
+          }
+        },
+        "required": ["action", "confidence"]
+      },
+      "executor": "tools/outlook-categories.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "outlook_follow_up",
+      "description": "Track, list, untrack, or complete follow-up flags on Outlook messages using the native flag system. Include a confidence score (0-1) for track/complete/untrack actions.",
+      "category": "outlook",
+      "risk": "medium",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "action": {
+            "type": "string",
+            "enum": ["track", "list", "untrack", "complete"],
+            "description": "Follow-up action"
+          },
+          "message_id": {
+            "type": "string",
+            "description": "Outlook message ID (required for track/complete/untrack)"
+          },
+          "confidence": {
+            "type": "number",
+            "description": "Confidence score (0-1) for this action"
+          },
+          "activity": {
+            "type": "string",
+            "description": "Brief non-technical explanation of why this tool is being called"
+          },
+          "account": {
+            "type": "string",
+            "description": "Email address of the Outlook account to use. Required when multiple Outlook accounts are connected. If omitted, uses the most recently connected account."
+          }
+        },
+        "required": ["action", "confidence"]
+      },
+      "executor": "tools/outlook-follow-up.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "outlook_unsubscribe",
+      "description": "Unsubscribe from a mailing list by following the List-Unsubscribe header on an Outlook message. Include a confidence score (0-1).",
+      "category": "outlook",
+      "risk": "medium",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "message_id": {
+            "type": "string",
+            "description": "An Outlook message ID from the mailing list to unsubscribe from"
+          },
+          "confidence": {
+            "type": "number",
+            "description": "Confidence score (0-1) for this action"
+          },
+          "activity": {
+            "type": "string",
+            "description": "Brief non-technical explanation of why this tool is being called"
+          },
+          "account": {
+            "type": "string",
+            "description": "Email address of the Outlook account to use. Required when multiple Outlook accounts are connected. If omitted, uses the most recently connected account."
+          }
+        },
+        "required": ["message_id", "confidence"]
+      },
+      "executor": "tools/outlook-unsubscribe.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "outlook_attachments",
+      "description": "List or download Outlook email attachments. Use action 'list' to enumerate attachments on a message, then 'download' to save a specific attachment to disk.",
+      "category": "outlook",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "action": {
+            "type": "string",
+            "enum": ["list", "download"],
+            "description": "List attachments on a message, or download a specific attachment"
+          },
+          "message_id": {
+            "type": "string",
+            "description": "Outlook message ID"
+          },
+          "attachment_id": {
+            "type": "string",
+            "description": "Attachment ID (required for download, from a prior list call)"
+          },
+          "activity": {
+            "type": "string",
+            "description": "Brief non-technical explanation of why this tool is being called"
+          },
+          "account": {
+            "type": "string",
+            "description": "Email address of the Outlook account to use. Required when multiple Outlook accounts are connected. If omitted, uses the most recently connected account."
+          }
+        },
+        "required": ["action", "message_id"]
+      },
+      "executor": "tools/outlook-attachments.ts",
+      "execution_target": "host"
+    }
+  ]
+}

package/src/config/bundled-skills/outlook/tools/outlook-attachments.ts

@@ -0,0 +1,85 @@
+import { writeFile } from "node:fs/promises";
+import { basename, resolve } from "node:path";
+
+import {
+  getAttachment,
+  listAttachments,
+} from "../../../../messaging/providers/outlook/client.js";
+import { resolveOAuthConnection } from "../../../../oauth/connection-resolver.js";
+import type {
+  ToolContext,
+  ToolExecutionResult,
+} from "../../../../tools/types.js";
+import { err, ok } from "./shared.js";
+
+export async function run(
+  input: Record<string, unknown>,
+  context: ToolContext,
+): Promise<ToolExecutionResult> {
+  const account = input.account as string | undefined;
+  const action = input.action as string;
+  const messageId = input.message_id as string;
+
+  if (!action) return err("action is required.");
+  if (!messageId) return err("message_id is required.");
+
+  if (action === "list") {
+    try {
+      const connection = await resolveOAuthConnection("outlook", {
+        account,
+      });
+      const response = await listAttachments(connection, messageId);
+      const attachments = response.value ?? [];
+
+      if (attachments.length === 0) {
+        return ok("No attachments found on this message.");
+      }
+
+      const result = attachments.map((a) => ({
+        attachmentId: a.id,
+        name: a.name,
+        contentType: a.contentType,
+        size: a.size,
+        isInline: a.isInline,
+      }));
+
+      return ok(JSON.stringify(result, null, 2));
+    } catch (e) {
+      return err(e instanceof Error ? e.message : String(e));
+    }
+  }
+
+  if (action === "download") {
+    const attachmentId = input.attachment_id as string;
+
+    if (!attachmentId) return err("attachment_id is required for download.");
+
+    try {
+      const connection = await resolveOAuthConnection("outlook", {
+        account,
+      });
+      const attachment = await getAttachment(
+        connection,
+        messageId,
+        attachmentId,
+      );
+
+      // Outlook returns standard base64 in contentBytes
+      const buffer = Buffer.from(attachment.contentBytes, "base64");
+
+      const outputDir = context.workingDir ?? process.cwd();
+      // Sanitize filename: strip path separators to prevent traversal attacks
+      const safeName = basename(attachment.name).replace(/\.\./g, "_");
+      const outputPath = resolve(outputDir, safeName);
+      if (!outputPath.startsWith(outputDir))
+        return err("Invalid filename: path traversal detected.");
+      await writeFile(outputPath, buffer);
+
+      return ok(`Attachment saved to ${outputPath} (${buffer.length} bytes).`);
+    } catch (e) {
+      return err(e instanceof Error ? e.message : String(e));
+    }
+  }
+
+  return err(`Unknown action: ${action}. Expected "list" or "download".`);
+}

package/src/config/bundled-skills/outlook/tools/outlook-categories.ts

@@ -0,0 +1,77 @@
+import {
+  getMessage,
+  listMasterCategories,
+  updateMessageCategories,
+} from "../../../../messaging/providers/outlook/client.js";
+import { resolveOAuthConnection } from "../../../../oauth/connection-resolver.js";
+import type {
+  ToolContext,
+  ToolExecutionResult,
+} from "../../../../tools/types.js";
+import { err, ok } from "./shared.js";
+
+export async function run(
+  input: Record<string, unknown>,
+  _context: ToolContext,
+): Promise<ToolExecutionResult> {
+  const account = input.account as string | undefined;
+  const action = input.action as string;
+
+  if (!action) {
+    return err("action is required (add, remove, or list_available).");
+  }
+
+  try {
+    const connection = await resolveOAuthConnection("outlook", {
+      account,
+    });
+
+    switch (action) {
+      case "add": {
+        const messageId = input.message_id as string;
+        if (!messageId) return err("message_id is required for add action.");
+
+        const categories = input.categories as string[] | undefined;
+        if (!categories || categories.length === 0) {
+          return err("categories is required for add action.");
+        }
+
+        const message = await getMessage(connection, messageId, "categories");
+        const existing = message.categories ?? [];
+        const merged = [...new Set([...existing, ...categories])];
+        await updateMessageCategories(connection, messageId, merged);
+        return ok("Categories updated.");
+      }
+
+      case "remove": {
+        const messageId = input.message_id as string;
+        if (!messageId) return err("message_id is required for remove action.");
+
+        const categories = input.categories as string[] | undefined;
+        if (!categories || categories.length === 0) {
+          return err("categories is required for remove action.");
+        }
+
+        const removeSet = new Set(categories);
+        const message = await getMessage(connection, messageId, "categories");
+        const existing = message.categories ?? [];
+        const filtered = existing.filter((c) => !removeSet.has(c));
+        await updateMessageCategories(connection, messageId, filtered);
+        return ok("Categories updated.");
+      }
+
+      case "list_available": {
+        const resp = await listMasterCategories(connection);
+        const categories = resp.value ?? [];
+        return ok(JSON.stringify(categories, null, 2));
+      }
+
+      default:
+        return err(
+          `Unknown action "${action}". Use add, remove, or list_available.`,
+        );
+    }
+  } catch (e) {
+    return err(e instanceof Error ? e.message : String(e));
+  }
+}