autark-cli 0.3.0 → 0.3.2

package/README.md

@@ -1,6 +1,6 @@
 # autark-cli
 
-CLI for [autark](https://autark.kushalsm.com) — hypothesis-driven product runbooks.
+CLI for [autark](https://autark.sh) — hypothesis-driven product runbooks.
 
 A product has hypotheses. Each hypothesis has runs. Each run logs actions (emails sent, posts made, replies received). The dashboard shows it all.
 

package/autark.mjs

@@ -27,6 +27,37 @@ const SKILL_NAMES = ['autark', 'plumcake', 'chrome-relay', 'email', 'outreach',
 const ECOSYSTEM_CLIS = ['autark-cli', 'plumcake-cli', 'chrome-relay']
 const PROGRAM_FILES = ['start.md', 'double-down.md', 'check.md', 'followup.md']
 
+// ============================================================ address reject
+// Two address shapes are bad enough to refuse at the CLI boundary, regardless
+// of what the agent prompted: RFC 2606 reserved domains (test@example.com — pure
+// bounce, hurts SES rep) and role-accounts (sales@, info@, hello@ — almost never
+// reach a human, waste of a thread). Reject mode is hard — surfaces an error so
+// the operator sees and the agent picks a different target. Lives up here, not
+// next to mailSend, because mailSend gets invoked via main() synchronously and
+// would TDZ on the Sets if they were declared after main()'s call site.
+const RFC2606_DOMAINS = new Set(['example.com', 'example.net', 'example.org', 'example', 'test', 'invalid', 'localhost'])
+const PLACEHOLDER_USERS = new Set(['test', 'foo', 'bar', 'x', 'y', 'sample', 'placeholder'])
+const ROLE_ACCOUNT_USERS = new Set([
+  'sales', 'info', 'hello', 'team', 'contact', 'support', 'press', 'marketing',
+  'admin', 'billing', 'careers', 'jobs', 'webmaster', 'postmaster', 'help',
+  'office', 'media', 'partners', 'enquiries', 'inquiries', 'general',
+  'noreply', 'no-reply', 'donotreply', 'do-not-reply',
+])
+
+function rejectUnsendableAddress(addresses) {
+  for (const raw of addresses || []) {
+    const addr = String(raw || '').trim().toLowerCase()
+    if (!addr) continue
+    const [user, domain] = addr.split('@')
+    if (!user || !domain) throw new Error(`malformed address: ${raw}`)
+    if (RFC2606_DOMAINS.has(domain)) throw new Error(`refusing to send to RFC2606 reserved domain: ${raw}`)
+    if (PLACEHOLDER_USERS.has(user)) throw new Error(`refusing to send to placeholder address: ${raw}`)
+    if (ROLE_ACCOUNT_USERS.has(user)) {
+      throw new Error(`refusing to send to role-account: ${raw}. Find a named person, or skip this target — role accounts almost never reply.`)
+    }
+  }
+}
+
 const args = process.argv.slice(2)
 main()
   .then(() => maybeNudge())
@@ -805,6 +836,10 @@ function deliverabilityUsage() {
   bounces don't tank your domain rep.`)
 }
 
+// rejectUnsendableAddress is defined near the top of the file (before main()
+// runs) so the const Sets it depends on are out of TDZ when mailSend invokes
+// it. See block tagged "address reject" up top.
+
 // ============================================================ mail
 
 async function mail(command, rest) {
@@ -853,8 +888,14 @@ async function mailSend(rest) {
   const opts = parseArgs(rest)
   const creds = requireAgentmailCredentials()
   const to = listOpt(opts.to, '--to')
+  rejectUnsendableAddress(to)
   const subject = opts.subject || ''
   const body = mailBody(opts, { to, subject })
+  const dryRun = opts['dry-run'] === true || opts.dry_run === true
+  if (dryRun) {
+    printJson({ dry_run: true, would_send: { inbox: creds.inboxId, to, subject, body } })
+    return
+  }
   const result = await agentmailRequest('POST', `/inboxes/${encodeURIComponent(creds.inboxId)}/messages/send`, body)
   const action = await maybeLogMailAction(opts, {
     kind: 'send',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "autark-cli",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "CLI for autark \u2014 hypothesis-driven product runbooks. Track products, hypotheses, runs, and actions from the terminal.",
   "type": "module",
   "license": "MIT",
@@ -11,7 +11,7 @@
     "autark.mjs",
     "README.md"
   ],
-  "homepage": "https://autark.kushalsm.com",
+  "homepage": "https://autark.sh",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/kiluazen/autark.git"