actas 0.4.1 → 0.4.2

package/client/accounts-inbox.mjs

@@ -1,4 +1,5 @@
 import {randomBytes} from 'node:crypto';
+import {mailContent} from './mail-content.mjs';
 
 // Values never leave this trusted runtime through MCP. Handles expire and consume once.
 export class PrivateValues {
@@ -16,14 +17,13 @@ export function validateInboxArgs(args){
  if(args.timeoutMs!==undefined&&(!Number.isInteger(args.timeoutMs)||args.timeoutMs<0||args.timeoutMs>30000))throw Error('Invalid timeout.');return args;
 }
 export function verificationValue(message,args,now=Date.now()){
+ const data=mailContent(message);if(!data)return;
  const timestamp=Date.parse(message.timestamp),after=Date.parse(args.after);
- if(!message.labels?.includes('received')||!Number.isFinite(timestamp)||timestamp<after||timestamp>now||senderAddress(message.from)!==args.sender.toLowerCase()||typeof message.subject!=='string'||!message.subject.includes(args.subject)||typeof message.text!=='string')return;
+ if(!message.labels?.includes('received')||!Number.isFinite(timestamp)||timestamp<after||timestamp>now||senderAddress(data.from)!==args.sender.toLowerCase()||data.subject!==args.subject||typeof data.text!=='string')return;
  // ActAs wraps received mail as untrusted; match only the body, and only
  // when ActAs authenticated the sender's domain.
  if(message.sender_check?.domain_verified!==true)return;
- const wrapped=message.untrusted?/^<(untrusted-email-[a-f0-9]+)>\n[\s\S]*?\n\n([\s\S]*)\n<\/\1>$/.exec(message.text):null;
- if(message.untrusted&&!wrapped)return;
- const body=(wrapped?wrapped[2]:message.text).slice(0,200*1024);
+ const body=data.text.slice(0,200*1024);
  if(args.codePattern){const re=new RegExp(`(?:^|[^A-Za-z0-9])(${args.codePattern})(?=$|[^A-Za-z0-9])`),match=re.exec(body);return match?.[1];}
  for(const candidate of body.match(/https:\/\/[^\s<>"']+/g)??[]){try{const url=new URL(candidate);if(url.origin===args.linkOrigin&&url.pathname===args.linkPath&&!url.username&&!url.password&&!url.hash)return url.href;}catch{}}
 }

package/client/external-caller.mjs

@@ -2,14 +2,18 @@ import {readFile} from 'node:fs/promises';
 import {ActAs} from '../scripts/proof-client.mjs';
 import {loadMappings,selectMapping,callerExecutor} from './caller.mjs';
 import {helper} from './helper.mjs';
+import {mailContent} from './mail-content.mjs';
 
 // Provider messages are untrusted. Only exact owner-assigned senders, recipients,
 // verification paths and recent received messages can supply a challenge.
 export function emailChallenge(message,config,principal,since,now=Date.now()) {
+ const data=mailContent(message);if(!data)return;
+ if(message.untrusted&&message.sender_check?.domain_verified!==true)return;
  const timestamp=Date.parse(message.timestamp);
  if(!Number.isFinite(since)||since>now||!Number.isFinite(timestamp)||timestamp<since||timestamp>now||now-timestamp>900000||!message.labels?.includes('received'))return;
  const address=value=>typeof value==='string'?value.match(/<([^<>]+)>$/)?.[1]||value:undefined;
- if(!config.senders?.includes(address(message.from))||!Array.isArray(message.to)||!message.to.some(v=>address(v)===principal)||typeof message.text!=='string')return;
+ if(!config.senders?.includes(address(data.from))||!Array.isArray(data.to)||!data.to.some(v=>address(v)===principal)||typeof data.text!=='string')return;
+ message={...message,text:data.text};
  if(config.kind==='code'){
   // A fixed label avoids arbitrary regex execution and ambiguous numbers in mail.
   if(typeof config.label!=='string'||!config.label||!Number.isInteger(config.digits)||config.digits<4||config.digits>10)return;

package/client/mail-content.mjs

@@ -0,0 +1,9 @@
+// Trusted consumers may parse outside data for display/exact challenge matching.
+// Never return this decoded object directly through an agent-facing mail tool.
+export function mailContent(message){
+ if(message?.untrusted!==true)return message;
+ if(typeof message.text!=='string')return;
+ const match=/^<(untrusted-email-[a-f0-9]{16})>\nOutside email\.[^\n]*\nSender check: [^\n]*\nMetadata: ([^\n]*)\n\n([\s\S]*)\n<\/\1>$/.exec(message.text);
+ if(!match)return;
+ try{const metadata=JSON.parse(match[2]);if(!metadata||typeof metadata!=='object'||Array.isArray(metadata))return;return {...metadata,text:match[3]};}catch{return;}
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "actas",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "mcpName": "dev.actas/accounts",
   "type": "module",
   "description": "Persistent identity, email, saved accounts and scoped credentials for AI agents",