autark-cli 0.3.2 → 0.4.1

package/autark.mjs

@@ -856,10 +856,109 @@ async function mail(command, rest) {
   if (command === 'raw')       return mailRaw(rest)
   if (command === 'attachment') return mailAttachment(rest)
   if (command === 'request')   return mailRequest(rest)
+  if (command === 'suppress')   return mailSuppress(rest)
+  if (command === 'unsuppress') return mailUnsuppress(rest)
+  if (command === 'suppressed') return mailSuppressed(rest)
+  if (command === 'lint')       return mailLint(rest)
   mailUsage()
   process.exit(1)
 }
 
+// Read a draft from stdin or a @file path and grade against the AI-tells
+// rules defined in the outreach skill. Exits 0 on clean, 1 on violations.
+// The lint rules are intentionally aggressive and slightly opinionated —
+// the goal is to make agents abstain on slop, not to nitpick humans.
+async function mailLint(rest) {
+  const opts = parseArgs(rest)
+  let body = ''
+  if (opts.body && String(opts.body).startsWith('@')) {
+    body = fs.readFileSync(String(opts.body).slice(1), 'utf8')
+  } else if (opts._?.[0] && String(opts._[0]).startsWith('@')) {
+    body = fs.readFileSync(String(opts._[0]).slice(1), 'utf8')
+  } else if (!process.stdin.isTTY) {
+    body = await new Promise((resolve) => {
+      const chunks = []
+      process.stdin.on('data', (c) => chunks.push(c))
+      process.stdin.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')))
+    })
+  } else {
+    console.error('autark mail lint: pass a draft via --body @./draft.txt or pipe on stdin')
+    process.exit(2)
+  }
+
+  const STRUCTURE_WORDS = [
+    'structurally', 'structurally different', 'fundamentally', 'specifically',
+    'essentially', 'actually', 'notably',
+    'the key insight', 'what this means is', 'the answer is', 'the trick is',
+    'that\'s exactly', 'that\'s precisely', 'that\'s the whole point',
+  ]
+
+  const violations = []
+  const lower = body.toLowerCase()
+
+  // 1. structure-words
+  for (const w of STRUCTURE_WORDS) {
+    if (lower.includes(w)) violations.push({ rule: 'structure-word', detail: w })
+  }
+  // 2. em-dash
+  if (/—/.test(body)) violations.push({ rule: 'em-dash', detail: 'use a period or comma instead' })
+  // 3. URLs in body (allow only inside markdown anchor [text](url) or HTML <a href>)
+  const urlMatches = body.match(/https?:\/\/[^\s<>"')]+/g) || []
+  for (const u of urlMatches) {
+    const idx = body.indexOf(u)
+    const before = body.slice(Math.max(0, idx - 40), idx)
+    const after = body.slice(idx + u.length, idx + u.length + 10)
+    const insideMdAnchor = /\]\(\s*$/.test(before)
+    const insideHtmlAnchor = /href\s*=\s*["'][^"']*$/.test(before) || /<a\b[^>]*$/.test(before)
+    if (!insideMdAnchor && !insideHtmlAnchor) violations.push({ rule: 'body-url', detail: u })
+  }
+  // 4. multiple question marks (more than one ? in the body)
+  const qmarks = (body.match(/\?/g) || []).length
+  if (qmarks > 1) violations.push({ rule: 'too-many-questions', detail: `${qmarks} question marks; cold outreach gets one max` })
+  // 5. compound question with "or" connecting clauses
+  const compoundQ = /\b(are|is|do|does|did|will|would|can|could|should|have|has)\b[^?]{0,200}\bor\b[^?]{0,200}\?/i
+  if (compoundQ.test(body)) violations.push({ rule: 'compound-question', detail: 'a/b question with "or" splits attention; ask one thing' })
+  // 6. body length (excluding signature heuristically)
+  const sigSplit = body.split(/\n\s*\n(?:best|thanks|cheers|—|-)[\s,]*\n/i)[0] || body
+  const len = sigSplit.trim().length
+  if (len > 400) violations.push({ rule: 'too-long', detail: `${len} chars of body; cold outreach should fit in ~400` })
+  // 7. signature presence: should have `- <name>` and an anchor (md or html)
+  const hasMdAnchor = /\[[^\]]+\]\(https?:\/\/[^)]+\)/.test(body)
+  const hasHtmlAnchor = /<a\b[^>]*href\s*=\s*["']https?:\/\/[^"']+["'][^>]*>[^<]+<\/a>/i.test(body)
+  if (!hasMdAnchor && !hasHtmlAnchor) {
+    violations.push({ rule: 'no-anchor-sig', detail: 'signature must include a clickable link via [name](url) or <a href="url">name</a>' })
+  }
+
+  if (violations.length === 0) {
+    console.log(JSON.stringify({ clean: true, length: len }, null, 2))
+    return
+  }
+  console.error(JSON.stringify({ clean: false, length: len, violations }, null, 2))
+  process.exit(1)
+}
+
+async function mailSuppress(rest) {
+  const opts = parseArgs(rest)
+  const entry = required(opts.email || opts._[0], 'email')
+  const reason = opts.reason || 'manual'
+  const result = await api('POST', '/v1/suppression', { entry, reason })
+  printJson(result)
+}
+
+async function mailUnsuppress(rest) {
+  const opts = parseArgs(rest)
+  const entry = required(opts.email || opts._[0], 'email')
+  const result = await api('DELETE', `/v1/suppression/${encodeURIComponent(entry)}`)
+  printJson(result)
+}
+
+async function mailSuppressed(rest) {
+  const opts = parseArgs(rest)
+  const limit = opts.limit ? Number(opts.limit) : 100
+  const result = await api('GET', `/v1/suppression?limit=${limit}`)
+  printJson(result)
+}
+
 async function mailSetup(rest) {
   const opts = parseArgs(rest)
   const existing = loadCredentials() || {}
@@ -1304,7 +1403,7 @@ function mailUsage() {
   console.log(`autark mail
 
   setup       --prefix <name> [--force]
-  send        --to <email[,email]> --subject <s> --text @body.txt [--run-id <id>]
+  send        --to <email[,email]> --subject <s> --text @body.txt [--run-id <id>] [--dry-run]
   reply       --message-id <id> --text @reply.txt [--run-id <id>]
   reply-all   --message-id <id> --text @reply.txt [--run-id <id>]
   forward     --message-id <id> --to <email> [--text @body.txt] [--run-id <id>]
@@ -1315,8 +1414,15 @@ function mailUsage() {
   raw         <message_id>
   attachment  --message-id <id> --attachment-id <id> [--out file]
   request     <METHOD> <path> [--body @json] [--raw]
-
-Mail uses the inbox-scoped token in ~/.autark/credentials.json.`)
+  suppress    <email> [--reason "<text>"]    add to org-wide send-block list
+  unsuppress  <email>                         remove from send-block list
+  suppressed  [--limit N]                     list blocked addresses
+  lint        --body @draft.txt | <stdin>     grade a draft for AI-tells; exit 1 on violations
+
+Mail uses the inbox-scoped token in ~/.autark/credentials.json. Suppression
+verbs proxy through the autark worker (org-scoped). --dry-run prints the
+payload without hitting SES. lint is fully local — runs the outreach skill's
+hard-fail checks against a draft.`)
 }
 
 function usage() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "autark-cli",
-  "version": "0.3.2",
+  "version": "0.4.1",
   "description": "CLI for autark \u2014 hypothesis-driven product runbooks. Track products, hypotheses, runs, and actions from the terminal.",
   "type": "module",
   "license": "MIT",