autark-cli 0.2.0 → 0.3.1

package/README.md

@@ -1,6 +1,6 @@
 # autark-cli
 
-CLI for [autark](https://autark.kushalsm.com) — hypothesis-driven product runbooks.
+CLI for [autark](https://autark.sh) — hypothesis-driven product runbooks.
 
 A product has hypotheses. Each hypothesis has runs. Each run logs actions (emails sent, posts made, replies received). The dashboard shows it all.
 

package/autark.mjs

@@ -22,11 +22,42 @@ const CREDS_PATH = process.env.AUTARK_CREDENTIALS || path.join(AUTARK_HOME, 'cre
 // loop, so they need to be initialized at module-load time before the
 // main().catch() call below.
 const RAW_RUNTIME_BASE = process.env.AUTARK_RUNTIME_RAW_BASE
-  || 'https://autark.kushalsm.com/runtime'
+  || 'https://autark.sh/runtime'
 const SKILL_NAMES = ['autark', 'plumcake', 'chrome-relay', 'email', 'outreach', 'email-finder']
 const ECOSYSTEM_CLIS = ['autark-cli', 'plumcake-cli', 'chrome-relay']
 const PROGRAM_FILES = ['start.md', 'double-down.md', 'check.md', 'followup.md']
 
+// ============================================================ address reject
+// Two address shapes are bad enough to refuse at the CLI boundary, regardless
+// of what the agent prompted: RFC 2606 reserved domains (test@example.com — pure
+// bounce, hurts SES rep) and role-accounts (sales@, info@, hello@ — almost never
+// reach a human, waste of a thread). Reject mode is hard — surfaces an error so
+// the operator sees and the agent picks a different target. Lives up here, not
+// next to mailSend, because mailSend gets invoked via main() synchronously and
+// would TDZ on the Sets if they were declared after main()'s call site.
+const RFC2606_DOMAINS = new Set(['example.com', 'example.net', 'example.org', 'example', 'test', 'invalid', 'localhost'])
+const PLACEHOLDER_USERS = new Set(['test', 'foo', 'bar', 'x', 'y', 'sample', 'placeholder'])
+const ROLE_ACCOUNT_USERS = new Set([
+  'sales', 'info', 'hello', 'team', 'contact', 'support', 'press', 'marketing',
+  'admin', 'billing', 'careers', 'jobs', 'webmaster', 'postmaster', 'help',
+  'office', 'media', 'partners', 'enquiries', 'inquiries', 'general',
+  'noreply', 'no-reply', 'donotreply', 'do-not-reply',
+])
+
+function rejectUnsendableAddress(addresses) {
+  for (const raw of addresses || []) {
+    const addr = String(raw || '').trim().toLowerCase()
+    if (!addr) continue
+    const [user, domain] = addr.split('@')
+    if (!user || !domain) throw new Error(`malformed address: ${raw}`)
+    if (RFC2606_DOMAINS.has(domain)) throw new Error(`refusing to send to RFC2606 reserved domain: ${raw}`)
+    if (PLACEHOLDER_USERS.has(user)) throw new Error(`refusing to send to placeholder address: ${raw}`)
+    if (ROLE_ACCOUNT_USERS.has(user)) {
+      throw new Error(`refusing to send to role-account: ${raw}. Find a named person, or skip this target — role accounts almost never reply.`)
+    }
+  }
+}
+
 const args = process.argv.slice(2)
 main()
   .then(() => maybeNudge())
@@ -805,6 +836,10 @@ function deliverabilityUsage() {
   bounces don't tank your domain rep.`)
 }
 
+// rejectUnsendableAddress is defined near the top of the file (before main()
+// runs) so the const Sets it depends on are out of TDZ when mailSend invokes
+// it. See block tagged "address reject" up top.
+
 // ============================================================ mail
 
 async function mail(command, rest) {
@@ -853,6 +888,7 @@ async function mailSend(rest) {
   const opts = parseArgs(rest)
   const creds = requireAgentmailCredentials()
   const to = listOpt(opts.to, '--to')
+  rejectUnsendableAddress(to)
   const subject = opts.subject || ''
   const body = mailBody(opts, { to, subject })
   const result = await agentmailRequest('POST', `/inboxes/${encodeURIComponent(creds.inboxId)}/messages/send`, body)
@@ -1084,7 +1120,7 @@ function printProductContext(r) {
   console.log(`# ${r.product.slug} — ${r.product.name}\n`)
   if (r.product.tagline) console.log(`> ${r.product.tagline}\n`)
   console.log(`## Brief\n`)
-  console.log(r.product.brief?.trim() || '(no brief set — owner can add one at https://autark.kushalsm.com)')
+  console.log(r.product.brief?.trim() || '(no brief set — owner can add one at https://autark.sh)')
   if (!r.hypotheses?.length) {
     console.log(`\n## Hypotheses\n\n(none yet — create one with: autark hypothesis create --product-id <product_id> --md @hyp.md)`)
   } else {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "autark-cli",
-  "version": "0.2.0",
-  "description": "CLI for autark — hypothesis-driven product runbooks. Track products, hypotheses, runs, and actions from the terminal.",
+  "version": "0.3.1",
+  "description": "CLI for autark \u2014 hypothesis-driven product runbooks. Track products, hypotheses, runs, and actions from the terminal.",
   "type": "module",
   "license": "MIT",
   "bin": {
@@ -11,7 +11,7 @@
     "autark.mjs",
     "README.md"
   ],
-  "homepage": "https://autark.kushalsm.com",
+  "homepage": "https://autark.sh",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/kiluazen/autark.git"