@vellumai/assistant 0.6.4 → 0.6.5

package/src/config/bundled-skills/gmail/tools/gmail-archive.ts

@@ -1,256 +0,0 @@
-import {
-  batchModifyMessages,
-  listMessages,
-  modifyMessage,
-} from "../../../../messaging/providers/gmail/client.js";
-import { resolveOAuthConnection } from "../../../../oauth/connection-resolver.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { addToBlocklist } from "./gmail-preferences.js";
-import { getSenderMessageIds } from "./scan-result-store.js";
-import { err, ok } from "./shared.js";
-
-const BATCH_MODIFY_LIMIT = 1000;
-const MAX_MESSAGES = 5000;
-
-function decodeSenderEmail(senderId: string): string | null {
-  try {
-    return Buffer.from(senderId, "base64url").toString("utf-8");
-  } catch {
-    return null;
-  }
-}
-
-/**
- * Persist archived sender emails to the blocklist for future sessions.
- * Only runs when the archive was initiated via a validated scan_id path
- * (not bare message_ids) to prevent unverified emails from being recorded.
- */
-function recordBlocklist(
-  scanId: string | undefined,
-  senderIds: string[] | undefined,
-): void {
-  if (!scanId || !senderIds?.length) return;
-  const archivedEmails: string[] = [];
-  for (const sid of senderIds) {
-    try {
-      const email = Buffer.from(sid, "base64url").toString("utf-8");
-      if (email.includes("@")) archivedEmails.push(email);
-    } catch {
-      // Skip undecodable sender IDs
-    }
-  }
-  if (archivedEmails.length > 0) {
-    try {
-      addToBlocklist(archivedEmails);
-    } catch {
-      // Non-fatal — preferences are best-effort
-    }
-  }
-}
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const account = input.account as string | undefined;
-  const query = input.query as string | undefined;
-  const scanId = input.scan_id as string | undefined;
-  const senderIds = input.sender_ids as string[] | undefined;
-  let messageIds = input.message_ids as string[] | undefined;
-  const messageId = input.message_id as string | undefined;
-
-  // Resolve message IDs via priority: query → scan_id+sender_ids → message_ids → message_id
-  if (query) {
-    // Query path requires surface action confirmation
-    if (!context.triggeredBySurfaceAction && !context.batchAuthorizedByTask) {
-      return err(
-        "This tool requires either a surface action or a scheduled task run with this tool in required_tools. Present results in a selection table with action buttons and wait for the user to click before proceeding.",
-      );
-    }
-
-    try {
-      const connection = await resolveOAuthConnection("google", {
-        account,
-      });
-      const allMessageIds: string[] = [];
-      let pageToken: string | undefined;
-      let truncated = false;
-
-      while (allMessageIds.length < MAX_MESSAGES) {
-        const listResp = await listMessages(
-          connection,
-          query,
-          Math.min(500, MAX_MESSAGES - allMessageIds.length),
-          pageToken,
-        );
-        const ids = (listResp.messages ?? []).map((m) => m.id);
-        if (ids.length === 0) break;
-        allMessageIds.push(...ids);
-        pageToken = listResp.nextPageToken ?? undefined;
-        if (!pageToken) break;
-      }
-
-      if (allMessageIds.length >= MAX_MESSAGES && pageToken) {
-        truncated = true;
-      }
-
-      if (allMessageIds.length === 0) {
-        return ok("No messages matched the query. Nothing archived.");
-      }
-
-      for (let i = 0; i < allMessageIds.length; i += BATCH_MODIFY_LIMIT) {
-        const chunk = allMessageIds.slice(i, i + BATCH_MODIFY_LIMIT);
-        await batchModifyMessages(connection, chunk, {
-          removeLabelIds: ["INBOX"],
-        });
-      }
-
-      const summary = `Archived ${allMessageIds.length} message(s) matching query: ${query}`;
-      if (truncated) {
-        return ok(
-          `${summary}\n\nNote: this operation was capped at ${MAX_MESSAGES} messages. Additional messages matching the query may remain in the inbox. Run the command again to archive more.`,
-        );
-      }
-      return ok(summary);
-    } catch (e) {
-      return err(e instanceof Error ? e.message : String(e));
-    }
-  } else if (scanId && senderIds?.length) {
-    // Scan path requires surface action confirmation
-    if (!context.triggeredBySurfaceAction && !context.batchAuthorizedByTask) {
-      return err(
-        "This tool requires either a surface action or a scheduled task run with this tool in required_tools. Present results in a selection table with action buttons and wait for the user to click before proceeding.",
-      );
-    }
-
-    const resolved = getSenderMessageIds(scanId, senderIds);
-    if (resolved !== null && resolved.length > 0) {
-      messageIds = resolved;
-    } else if (resolved === null) {
-      // Scan expired or sender IDs unresolved — fall back to query-based archiving
-      const emails: string[] = [];
-      const undecodable: string[] = [];
-      for (const sid of senderIds) {
-        const email = decodeSenderEmail(sid);
-        if (email && email.includes("@")) {
-          emails.push(email);
-        } else {
-          undecodable.push(sid);
-        }
-      }
-
-      if (emails.length === 0) {
-        return err(
-          "Scan results have expired and sender IDs could not be decoded. Please re-run the scan.",
-        );
-      }
-
-      try {
-        const connection = await resolveOAuthConnection("google", {
-          account,
-        });
-        const allMessageIds: string[] = [];
-
-        for (const email of emails) {
-          const fallbackQuery = `from:"${email.replace(/"/g, "")}" in:inbox`;
-          let pageToken: string | undefined;
-          while (allMessageIds.length < MAX_MESSAGES) {
-            const listResp = await listMessages(
-              connection,
-              fallbackQuery,
-              Math.min(500, MAX_MESSAGES - allMessageIds.length),
-              pageToken,
-            );
-            const ids = (listResp.messages ?? []).map((m) => m.id);
-            if (ids.length === 0) break;
-            allMessageIds.push(...ids);
-            pageToken = listResp.nextPageToken ?? undefined;
-            if (!pageToken) break;
-          }
-          if (allMessageIds.length >= MAX_MESSAGES) break;
-        }
-
-        if (allMessageIds.length === 0) {
-          return ok("No inbox messages found for the selected senders.");
-        }
-
-        for (let i = 0; i < allMessageIds.length; i += BATCH_MODIFY_LIMIT) {
-          const chunk = allMessageIds.slice(i, i + BATCH_MODIFY_LIMIT);
-          await batchModifyMessages(connection, chunk, {
-            removeLabelIds: ["INBOX"],
-          });
-        }
-
-        const parts = [
-          `Archived ${allMessageIds.length} message(s) via query fallback (scan results had expired).`,
-        ];
-        if (undecodable.length > 0) {
-          parts.push(
-            `${undecodable.length} sender ID(s) could not be decoded and were skipped.`,
-          );
-        }
-        return ok(parts.join(" "));
-      } catch (e) {
-        return err(e instanceof Error ? e.message : String(e));
-      }
-    } else {
-      return err(
-        "The provided sender IDs do not match the scan results. Please re-run the scan.",
-      );
-    }
-  } else if (messageIds?.length) {
-    // Batch message_ids path requires surface action confirmation
-    if (!context.triggeredBySurfaceAction && !context.batchAuthorizedByTask) {
-      return err(
-        "This tool requires either a surface action or a scheduled task run with this tool in required_tools. Present results in a selection table with action buttons and wait for the user to click before proceeding.",
-      );
-    }
-  } else if (messageId) {
-    // Single message path
-    try {
-      const connection = await resolveOAuthConnection("google", {
-        account,
-      });
-      await modifyMessage(connection, messageId, { removeLabelIds: ["INBOX"] });
-      return ok("Message archived.");
-    } catch (e) {
-      return err(e instanceof Error ? e.message : String(e));
-    }
-  } else {
-    return err(
-      "Provide message_id, message_ids, scan_id + sender_ids, or query.",
-    );
-  }
-
-  // Batch path for scan_id+sender_ids and message_ids
-  if (!messageIds?.length) {
-    return err("Resolved message list is empty - no messages to archive.");
-  }
-
-  try {
-    const connection = await resolveOAuthConnection("google", {
-      account,
-    });
-    if (messageIds.length === 1) {
-      await modifyMessage(connection, messageIds[0], {
-        removeLabelIds: ["INBOX"],
-      });
-      recordBlocklist(scanId, senderIds);
-      return ok("Message archived.");
-    }
-
-    for (let i = 0; i < messageIds.length; i += BATCH_MODIFY_LIMIT) {
-      const chunk = messageIds.slice(i, i + BATCH_MODIFY_LIMIT);
-      await batchModifyMessages(connection, chunk, {
-        removeLabelIds: ["INBOX"],
-      });
-    }
-    recordBlocklist(scanId, senderIds);
-    return ok(`Archived ${messageIds.length} message(s).`);
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/gmail/tools/gmail-attachments.ts

@@ -1,112 +0,0 @@
-import { writeFile } from "node:fs/promises";
-import { basename, resolve } from "node:path";
-
-import {
-  getAttachment,
-  getMessage,
-} from "../../../../messaging/providers/gmail/client.js";
-import type { GmailMessagePart } from "../../../../messaging/providers/gmail/types.js";
-import { resolveOAuthConnection } from "../../../../oauth/connection-resolver.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-interface AttachmentInfo {
-  partId: string;
-  filename: string;
-  mimeType: string;
-  size: number;
-  attachmentId: string;
-}
-
-/** Recursively walk the MIME parts tree to find attachments. */
-function collectAttachments(
-  parts: GmailMessagePart[] | undefined,
-): AttachmentInfo[] {
-  if (!parts) return [];
-  const result: AttachmentInfo[] = [];
-  for (const part of parts) {
-    if (part.filename && part.body?.attachmentId) {
-      result.push({
-        partId: part.partId ?? "",
-        filename: part.filename,
-        mimeType: part.mimeType ?? "application/octet-stream",
-        size: part.body.size ?? 0,
-        attachmentId: part.body.attachmentId,
-      });
-    }
-    if (part.parts) {
-      result.push(...collectAttachments(part.parts));
-    }
-  }
-  return result;
-}
-
-export async function run(
-  input: Record<string, unknown>,
-  context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const account = input.account as string | undefined;
-  const action = input.action as string;
-  const messageId = input.message_id as string;
-
-  if (!action) return err("action is required.");
-  if (!messageId) return err("message_id is required.");
-
-  if (action === "list") {
-    try {
-      const connection = await resolveOAuthConnection("google", {
-        account,
-      });
-      const message = await getMessage(connection, messageId, "full");
-      const attachments = collectAttachments(message.payload?.parts);
-
-      if (attachments.length === 0) {
-        return ok("No attachments found on this message.");
-      }
-
-      return ok(JSON.stringify(attachments, null, 2));
-    } catch (e) {
-      return err(e instanceof Error ? e.message : String(e));
-    }
-  }
-
-  if (action === "download") {
-    const attachmentId = input.attachment_id as string;
-    const filename = input.filename as string;
-
-    if (!attachmentId) return err("attachment_id is required for download.");
-    if (!filename) return err("filename is required for download.");
-
-    try {
-      const connection = await resolveOAuthConnection("google", {
-        account,
-      });
-      const attachment = await getAttachment(
-        connection,
-        messageId,
-        attachmentId,
-      );
-
-      // Gmail returns base64url; convert to standard base64 then to Buffer
-      const base64 = attachment.data.replace(/-/g, "+").replace(/_/g, "/");
-      const buffer = Buffer.from(base64, "base64");
-
-      const outputDir = context.workingDir ?? process.cwd();
-      // Sanitize filename: strip path separators to prevent traversal attacks from crafted MIME filenames
-      const safeName = basename(filename).replace(/\.\./g, "_");
-      const outputPath = resolve(outputDir, safeName);
-      if (!outputPath.startsWith(outputDir))
-        return err("Invalid filename: path traversal detected.");
-      await writeFile(outputPath, buffer);
-
-      return ok(`Attachment saved to ${outputPath} (${buffer.length} bytes).`);
-    } catch (e) {
-      return err(e instanceof Error ? e.message : String(e));
-    }
-  }
-
-  return err(`Unknown action: ${action}. Expected "list" or "download".`);
-}

package/src/config/bundled-skills/gmail/tools/gmail-draft.ts

@@ -1,44 +0,0 @@
-import { createDraft } from "../../../../messaging/providers/gmail/client.js";
-import { resolveOAuthConnection } from "../../../../oauth/connection-resolver.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  _context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const account = input.account as string | undefined;
-  const to = input.to as string;
-  const subject = input.subject as string;
-  const body = input.body as string;
-  const inReplyTo = input.in_reply_to as string | undefined;
-  const cc = input.cc as string | undefined;
-  const bcc = input.bcc as string | undefined;
-
-  if (!to) return err("to is required.");
-  if (!subject) return err("subject is required.");
-  if (!body) return err("body is required.");
-
-  try {
-    const connection = await resolveOAuthConnection("google", {
-      account,
-    });
-    const draft = await createDraft(
-      connection,
-      to,
-      subject,
-      body,
-      inReplyTo,
-      cc,
-      bcc,
-    );
-    return ok(
-      `Draft created (ID: ${draft.id}). It will appear in your Gmail Drafts.`,
-    );
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/gmail/tools/gmail-filters.ts

@@ -1,81 +0,0 @@
-import {
-  createFilter,
-  deleteFilter,
-  listFilters,
-} from "../../../../messaging/providers/gmail/client.js";
-import type {
-  GmailFilterAction,
-  GmailFilterCriteria,
-} from "../../../../messaging/providers/gmail/types.js";
-import { resolveOAuthConnection } from "../../../../oauth/connection-resolver.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-export async function run(
-  input: Record<string, unknown>,
-  _context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const account = input.account as string | undefined;
-  const action = input.action as string;
-
-  if (!action) {
-    return err("action is required (list, create, or delete).");
-  }
-
-  try {
-    const connection = await resolveOAuthConnection("google", {
-      account,
-    });
-    switch (action) {
-      case "list": {
-        const filters = await listFilters(connection);
-        if (filters.length === 0) {
-          return ok("No filters configured.");
-        }
-        return ok(JSON.stringify(filters, null, 2));
-      }
-
-      case "create": {
-        const criteria: GmailFilterCriteria = {};
-        if (input.from) criteria.from = input.from as string;
-        if (input.to) criteria.to = input.to as string;
-        if (input.subject) criteria.subject = input.subject as string;
-        if (input.query) criteria.query = input.query as string;
-        if (input.has_attachment !== undefined)
-          criteria.hasAttachment = input.has_attachment as boolean;
-
-        const filterAction: GmailFilterAction = {};
-        if (input.add_label_ids)
-          filterAction.addLabelIds = input.add_label_ids as string[];
-        if (input.remove_label_ids)
-          filterAction.removeLabelIds = input.remove_label_ids as string[];
-        if (input.forward) filterAction.forward = input.forward as string;
-
-        if (Object.keys(criteria).length === 0) {
-          return err(
-            "At least one filter criteria is required (from, to, subject, query, or has_attachment).",
-          );
-        }
-
-        const filter = await createFilter(connection, criteria, filterAction);
-        return ok(`Filter created (ID: ${filter.id}).`);
-      }
-
-      case "delete": {
-        const filterId = input.filter_id as string;
-        if (!filterId) return err("filter_id is required for delete action.");
-
-        await deleteFilter(connection, filterId);
-        return ok("Filter deleted.");
-      }
-
-      default:
-        return err(`Unknown action "${action}". Use list, create, or delete.`);
-    }
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}

package/src/config/bundled-skills/gmail/tools/gmail-follow-up.ts

@@ -1,108 +0,0 @@
-import {
-  batchGetMessages,
-  createLabel,
-  listLabels,
-  listMessages,
-  modifyMessage,
-} from "../../../../messaging/providers/gmail/client.js";
-import type { OAuthConnection } from "../../../../oauth/connection.js";
-import { resolveOAuthConnection } from "../../../../oauth/connection-resolver.js";
-import type {
-  ToolContext,
-  ToolExecutionResult,
-} from "../../../../tools/types.js";
-import { err, ok } from "./shared.js";
-
-const FOLLOW_UP_LABEL_NAME = "Follow-up";
-
-async function getOrCreateFollowUpLabel(
-  connection: OAuthConnection,
-): Promise<string> {
-  const labels = await listLabels(connection);
-  const existing = labels.find((l) => l.name === FOLLOW_UP_LABEL_NAME);
-  if (existing) return existing.id;
-
-  const created = await createLabel(connection, FOLLOW_UP_LABEL_NAME);
-  return created.id;
-}
-
-export async function run(
-  input: Record<string, unknown>,
-  _context: ToolContext,
-): Promise<ToolExecutionResult> {
-  const account = input.account as string | undefined;
-  const action = input.action as string;
-
-  if (!action) {
-    return err("action is required (track, list, or untrack).");
-  }
-
-  try {
-    const connection = await resolveOAuthConnection("google", {
-      account,
-    });
-    switch (action) {
-      case "track": {
-        const messageId = input.message_id as string;
-        if (!messageId) return err("message_id is required for track action.");
-
-        const labelId = await getOrCreateFollowUpLabel(connection);
-        await modifyMessage(connection, messageId, { addLabelIds: [labelId] });
-        return ok("Message marked for follow-up.");
-      }
-
-      case "list": {
-        const labelId = await getOrCreateFollowUpLabel(connection);
-        const listResp = await listMessages(
-          connection,
-          undefined,
-          50,
-          undefined,
-          [labelId],
-        );
-        const messageIds = (listResp.messages ?? []).map((m) => m.id);
-
-        if (messageIds.length === 0) {
-          return ok("No messages are currently tracked for follow-up.");
-        }
-
-        const messages = await batchGetMessages(
-          connection,
-          messageIds,
-          "metadata",
-          ["From", "Subject", "Date"],
-        );
-        const items = messages.map((m) => {
-          const headers = m.payload?.headers ?? [];
-          const from =
-            headers.find((h) => h.name.toLowerCase() === "from")?.value ?? "";
-          const subject =
-            headers.find((h) => h.name.toLowerCase() === "subject")?.value ??
-            "";
-          const date =
-            headers.find((h) => h.name.toLowerCase() === "date")?.value ?? "";
-          return { id: m.id, threadId: m.threadId, from, subject, date };
-        });
-
-        return ok(JSON.stringify(items, null, 2));
-      }
-
-      case "untrack": {
-        const messageId = input.message_id as string;
-        if (!messageId)
-          return err("message_id is required for untrack action.");
-
-        const labelId = await getOrCreateFollowUpLabel(connection);
-        await modifyMessage(connection, messageId, {
-          removeLabelIds: [labelId],
-        });
-        return ok("Follow-up tracking removed from message.");
-      }
-
-      default:
-        return err(`Unknown action "${action}". Use track, list, or untrack.`);
-    }
-  } catch (e) {
-    return err(e instanceof Error ? e.message : String(e));
-  }
-}