actas 0.4.1 → 0.5.0

package/README.md

@@ -11,7 +11,7 @@ the token from your scoped ActAs connection in the Authorization bearer header,
 saved through your client's protected credential settings. Do not put the token
 in the endpoint URL, a prompt, or source control. OAuth is not offered.
 
-The remote endpoint shares the 19 stdio tool schemas and applies the same API
+The remote endpoint shares the 21 stdio tool schemas and applies the same API
 permissions and revocation checks on every call. Browser flows still need a
 local browser adapter. Private verification handles and registered executable
 consumers return `needs_local_runtime` remotely; use the local client below.

package/client/accounts-inbox.mjs

@@ -1,4 +1,5 @@
 import {randomBytes} from 'node:crypto';
+import {mailContent} from './mail-content.mjs';
 
 // Values never leave this trusted runtime through MCP. Handles expire and consume once.
 export class PrivateValues {
@@ -16,14 +17,13 @@ export function validateInboxArgs(args){
  if(args.timeoutMs!==undefined&&(!Number.isInteger(args.timeoutMs)||args.timeoutMs<0||args.timeoutMs>30000))throw Error('Invalid timeout.');return args;
 }
 export function verificationValue(message,args,now=Date.now()){
+ const data=mailContent(message);if(!data)return;
  const timestamp=Date.parse(message.timestamp),after=Date.parse(args.after);
- if(!message.labels?.includes('received')||!Number.isFinite(timestamp)||timestamp<after||timestamp>now||senderAddress(message.from)!==args.sender.toLowerCase()||typeof message.subject!=='string'||!message.subject.includes(args.subject)||typeof message.text!=='string')return;
+ if(!message.labels?.includes('received')||!Number.isFinite(timestamp)||timestamp<after||timestamp>now||senderAddress(data.from)!==args.sender.toLowerCase()||data.subject!==args.subject||typeof data.text!=='string')return;
  // ActAs wraps received mail as untrusted; match only the body, and only
  // when ActAs authenticated the sender's domain.
  if(message.sender_check?.domain_verified!==true)return;
- const wrapped=message.untrusted?/^<(untrusted-email-[a-f0-9]+)>\n[\s\S]*?\n\n([\s\S]*)\n<\/\1>$/.exec(message.text):null;
- if(message.untrusted&&!wrapped)return;
- const body=(wrapped?wrapped[2]:message.text).slice(0,200*1024);
+ const body=data.text.slice(0,200*1024);
  if(args.codePattern){const re=new RegExp(`(?:^|[^A-Za-z0-9])(${args.codePattern})(?=$|[^A-Za-z0-9])`),match=re.exec(body);return match?.[1];}
  for(const candidate of body.match(/https:\/\/[^\s<>"']+/g)??[]){try{const url=new URL(candidate);if(url.origin===args.linkOrigin&&url.pathname===args.linkPath&&!url.username&&!url.password&&!url.hash)return url.href;}catch{}}
 }

package/client/accounts-mcp-core.mjs

@@ -92,6 +92,8 @@ export function createAccountsRuntime({request,codesRequest=request,scope,identi
     const result=await codesRequest('/emails/'+encodeURIComponent(args.inboxId)+'/code','POST',{sender:args.sender,subject:args.subject,after:args.after,codePattern:args.pattern??'\\d{6}',timeoutMs:args.timeoutMs??30000});
     return result.status==='matched'?{status:'matched',code:result.code,receivedAt:result.receivedAt}:{status:'pending'};
    }
+   case 'actas_passkey_register':return request('/vault/passkeys/register','POST',{...args,...scope});
+   case 'actas_passkey_sign':return request('/vault/passkeys/sign','POST',{...args,...scope});
    case 'actas_vault_login':return vaultLogin(request,scope,args.path);
    case 'actas_totp_code':return request('/vault/read','POST',{...scope,path:args.path,action:'totp:code'});
    case 'actas_identity_accounts':{const id=args.identityId??identityId;if(!id)throw Error('Choose an identity for this registry.');return request('/identities/'+encodeURIComponent(id)+'/accounts','GET');}

package/client/accounts-server.mjs

@@ -8,6 +8,8 @@ export function createAccountsMcp(runtime){
  const definitions=[
   ['actas_identity_create','Create an identity with a permanently reserved chosen email name (management). inbox:true also allocates its inbox.',{name:z.string().min(1).max(80),localPart:z.string().min(3).max(40).optional(),domain:z.string().min(3).max(253).optional(),inbox:z.boolean().optional()}],
   ['actas_inbox_wait_for_code','Wait up to 60s for one sign-in code from an authenticated sender (emails:codes). Returns only the code.',{inboxId:z.string().min(1).max(160),sender:z.string().email().max(254),subject:z.string().min(1).max(200),after:z.string().datetime(),pattern:z.string().regex(/^(?:\\d|\[A-Z0-9\])\{(?:[4-9]|1[0-2])\}$/).optional(),timeoutMs:z.number().int().min(0).max(60000).optional()}],
+  ['actas_passkey_register','Create an ES256 passkey for a granted login; private key stays encrypted in hosted ActAs. Requires read, reveal and write grants.',{path,rpId:z.string().min(3).max(253),origin:z.string().url(),challenge:z.string().max(1368),userHandle:z.string().max(86),userVerification:z.enum(['required','preferred','discouraged']).optional()}],
+  ['actas_passkey_sign','Sign a WebAuthn assertion for a granted login; private key never leaves hosted ActAs. Requires read and reveal grants.',{path,rpId:z.string().min(3).max(253),origin:z.string().url(),challenge:z.string().max(1368),credentialId:z.string().max(128).optional(),allowCredentials:z.array(z.string().max(128)).max(64).optional(),userVerification:z.enum(['required','preferred','discouraged']).optional()}],
   ['actas_vault_login','Return a granted login item: username/email, password and a current TOTP code. Never the TOTP seed (secrets:reveal plus read, reveal and totp:code grants).',{path}],
   ['actas_domains_list','List workspace domains and exact DNS records (domain management).',{}],
   ['actas_domains_add','Claim a workspace mail domain (domain management); reconcile by checking the same domain.',{domain:z.string().min(3).max(253)}],

package/client/external-caller.mjs

@@ -2,14 +2,18 @@ import {readFile} from 'node:fs/promises';
 import {ActAs} from '../scripts/proof-client.mjs';
 import {loadMappings,selectMapping,callerExecutor} from './caller.mjs';
 import {helper} from './helper.mjs';
+import {mailContent} from './mail-content.mjs';
 
 // Provider messages are untrusted. Only exact owner-assigned senders, recipients,
 // verification paths and recent received messages can supply a challenge.
 export function emailChallenge(message,config,principal,since,now=Date.now()) {
+ const data=mailContent(message);if(!data)return;
+ if(message.untrusted&&message.sender_check?.domain_verified!==true)return;
  const timestamp=Date.parse(message.timestamp);
  if(!Number.isFinite(since)||since>now||!Number.isFinite(timestamp)||timestamp<since||timestamp>now||now-timestamp>900000||!message.labels?.includes('received'))return;
  const address=value=>typeof value==='string'?value.match(/<([^<>]+)>$/)?.[1]||value:undefined;
- if(!config.senders?.includes(address(message.from))||!Array.isArray(message.to)||!message.to.some(v=>address(v)===principal)||typeof message.text!=='string')return;
+ if(!config.senders?.includes(address(data.from))||!Array.isArray(data.to)||!data.to.some(v=>address(v)===principal)||typeof data.text!=='string')return;
+ message={...message,text:data.text};
  if(config.kind==='code'){
   // A fixed label avoids arbitrary regex execution and ambiguous numbers in mail.
   if(typeof config.label!=='string'||!config.label||!Number.isInteger(config.digits)||config.digits<4||config.digits>10)return;

package/client/mail-content.mjs

@@ -0,0 +1,9 @@
+// Trusted consumers may parse outside data for display/exact challenge matching.
+// Never return this decoded object directly through an agent-facing mail tool.
+export function mailContent(message){
+ if(message?.untrusted!==true)return message;
+ if(typeof message.text!=='string')return;
+ const match=/^<(untrusted-email-[a-f0-9]{16})>\nOutside email\.[^\n]*\nSender check: [^\n]*\nMetadata: ([^\n]*)\n\n([\s\S]*)\n<\/\1>$/.exec(message.text);
+ if(!match)return;
+ try{const metadata=JSON.parse(match[2]);if(!metadata||typeof metadata!=='object'||Array.isArray(metadata))return;return {...metadata,text:match[3]};}catch{return;}
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "actas",
-  "version": "0.4.1",
+  "version": "0.5.0",
   "mcpName": "dev.actas/accounts",
   "type": "module",
   "description": "Persistent identity, email, saved accounts and scoped credentials for AI agents",