engine7 7.1.119 → 7.1.121

package/templates/skills/email/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "engine7-email-skill",
+  "version": "2.0.0",
+  "description": "IMAP/SMTP email skill for engine7 agents. Reads credentials from stateDir config (tools.email), falls back to .env. Supports QQ Mail, 163/126/188 series, Gmail, Outlook.",
+  "license": "MIT",
+  "dependencies": {
+    "dotenv": "^16.6.1",
+    "imapflow": "^1.2.10",
+    "mailparser": "^3.9.3",
+    "nodemailer": "^7.0.13"
+  }
+}

package/templates/skills/email/scripts/email-config.js

@@ -0,0 +1,114 @@
+// email-config.js — 邮件凭证/配置解析（imap.js、smtp.js 共用）
+// 优先级：stateDir config 的 tools.email 块 → skill 目录 .env（妹妹存量形态兼容）。
+// 面板最简形态只需 address+pass，host 按邮箱域名自动映射（providerHostsFor）。
+const fs = require('node:fs')
+const path = require('node:path')
+
+// 域名 → 服务器映射（设计 §3.2；QQ/163/126/188/vip 系/Gmail/Outlook）
+const PROVIDER_MAP = {
+  'qq.com': { imap: ['imap.qq.com', 993], smtp: ['smtp.qq.com', 465, true] },
+  'foxmail.com': { imap: ['imap.qq.com', 993], smtp: ['smtp.qq.com', 465, true] },
+  '163.com': { imap: ['imap.163.com', 993], smtp: ['smtp.163.com', 465, true] },
+  'vip.163.com': { imap: ['imap.vip.163.com', 993], smtp: ['smtp.vip.163.com', 465, true] },
+  '126.com': { imap: ['imap.126.com', 993], smtp: ['smtp.126.com', 465, true] },
+  'vip.126.com': { imap: ['imap.vip.126.com', 993], smtp: ['smtp.vip.126.com', 465, true] },
+  '188.com': { imap: ['imap.188.com', 993], smtp: ['smtp.188.com', 465, true] },
+  'vip.188.com': { imap: ['imap.vip.188.com', 993], smtp: ['smtp.vip.188.com', 465, true] },
+  'yeah.net': { imap: ['imap.yeah.net', 993], smtp: ['smtp.yeah.net', 465, true] },
+  'gmail.com': { imap: ['imap.gmail.com', 993], smtp: ['smtp.gmail.com', 587, false] },
+  'outlook.com': { imap: ['outlook.office365.com', 993], smtp: ['smtp.office365.com', 587, false] },
+  'hotmail.com': { imap: ['outlook.office365.com', 993], smtp: ['smtp.office365.com', 587, false] },
+}
+
+/** 按邮箱地址返回 {imap:{host,port}, smtp:{host,port,secure}}；未知域名返回 null（不猜） */
+function providerHostsFor(address) {
+  const domain = String(address || '').toLowerCase().split('@')[1]
+  if (!domain) return null
+  const p = PROVIDER_MAP[domain]
+  if (!p) return null
+  return {
+    imap: { host: p.imap[0], port: p.imap[1] },
+    smtp: { host: p.smtp[0], port: p.smtp[1], secure: p.smtp[2] },
+  }
+}
+
+/** 从 stateDir config 的 tools.email 块 + .env 兜底解析出统一配置。
+ * 返回 {address?, imap:{host,port,user,pass}, smtp:{host,port,secure,user,pass}, source:'config'|'env'} 或 null */
+function resolveEmailConfig(opts = {}) {
+  const stateDir = opts.stateDir
+    || process.env.ENGINE_STATE_DIR
+    || process.env.ENGINE7_STATE_DIR
+    || null
+
+  // 1) stateDir config 的 tools.email
+  if (stateDir) {
+    for (const name of ['main.json', 'configs/main.json']) {
+      const p = path.join(stateDir, name.startsWith('configs') ? name : path.join('configs', name))
+      try {
+        if (!fs.existsSync(p)) continue
+        const cfg = JSON.parse(fs.readFileSync(p, 'utf8'))
+        const block = cfg?.tools?.email
+        if (block && block.address) {
+          const hosts = providerHostsFor(block.address)
+          const imapBlock = block.imap || {}
+          const smtpBlock = block.smtp || {}
+          const out = {
+            address: block.address,
+            imap: {
+              host: imapBlock.host || hosts?.imap.host,
+              port: imapBlock.port || hosts?.imap.port || 993,
+              user: imapBlock.user || block.address,
+              pass: imapBlock.pass || block.pass || '',
+            },
+            smtp: {
+              host: smtpBlock.host || hosts?.smtp.host,
+              port: smtpBlock.port || hosts?.smtp.port || 465,
+              secure: smtpBlock.secure !== undefined ? smtpBlock.secure : (hosts ? hosts.smtp.secure : true),
+              user: smtpBlock.user || block.address,
+              // 授权码优先级：smtp 块自带 > 顶层 smtpPass（IMAP/SMTP 两个码）> 顶层 pass（最简形态一个码）
+              pass: smtpBlock.pass || block.smtpPass || block.pass || '',
+            },
+            source: 'config',
+          }
+          if (out.imap.host && out.imap.pass && out.smtp.host) return out
+        }
+      } catch { /* config 损坏 → 落到 .env */ }
+    }
+  }
+
+  // 2) .env 兜底（存量妹妹形态）
+  const envFile = opts.envFile || path.join(__dirname, '..', '.env')
+  if (fs.existsSync(envFile)) {
+    const parsed = {}
+    for (const line of fs.readFileSync(envFile, 'utf8').split(/\r?\n/)) {
+      const m = line.match(/^\s*([A-Z_]+)\s*=\s*(.*)\s*$/)
+      if (m && !process.env[m[1]]) parsed[m[1]] = m[2]
+    }
+    const g = (k) => process.env[k] || parsed[k]
+    if (g('IMAP_HOST') && g('IMAP_USER')) {
+      return {
+        address: g('IMAP_USER'),
+        imap: { host: g('IMAP_HOST'), port: parseInt(g('IMAP_PORT')) || 993, user: g('IMAP_USER'), pass: g('IMAP_PASS') || '' },
+        smtp: {
+          host: g('SMTP_HOST') || g('IMAP_HOST'), port: parseInt(g('SMTP_PORT')) || 465,
+          secure: g('SMTP_SECURE') !== 'false', user: g('SMTP_USER') || g('IMAP_USER'), pass: g('SMTP_PASS') || g('IMAP_PASS') || '',
+        },
+        source: 'env',
+      }
+    }
+  }
+  return null
+}
+
+/** 错误分类 → --json 的 reason 枚举（设计 §4.1；239 事故防线：连接失败≠邮箱空≠认证失败） */
+function classifyError(err) {
+  const text = `${err?.message || ''} ${err?.response?.text || err?.responseText || ''}`
+  if (/缺少|Missing IMAP_USER|Missing.*PASS|no email config/i.test(text)) return 'config_missing'
+  if (err?.authenticationFailed || /AUTHENTICATIONFAILED|authentication failed|Login error|LOGIN failed|invalid login|auth.*denied/i.test(text)) return 'auth_failed'
+  if (/RATELIMITED|rate limit|too many|频繁/i.test(text)) return 'rate_limited'
+  if (/ETIMEDOUT|timed?\s*out|timeout/i.test(text)) return 'timeout'
+  if (/ENOTFOUND|ECONNREFUSED|ECONNRESET|EPIPE|EAI_AGAIN|network|socket hang up/i.test(text)) return 'network'
+  return 'unknown'
+}
+
+module.exports = { PROVIDER_MAP, providerHostsFor, resolveEmailConfig, classifyError }

package/templates/skills/email/scripts/email-config.test.js

@@ -0,0 +1,93 @@
+// email-config.test.js — 配置解析/域名映射/错误分类 单测（node 直跑）
+// 运行：node scripts/email-config.test.js
+const assert = require('node:assert/strict')
+const fs = require('node:fs')
+const os = require('node:os')
+const path = require('node:path')
+const { resolveEmailConfig, providerHostsFor, classifyError } = require('./email-config.js')
+
+// === providerHostsFor：域名 → IMAP/SMTP 映射 ===
+{
+  const qq = providerHostsFor('user@qq.com')
+  assert.equal(qq.imap.host, 'imap.qq.com')
+  assert.equal(qq.imap.port, 993)
+  assert.equal(qq.smtp.host, 'smtp.qq.com')
+  assert.equal(qq.smtp.port, 465)
+  assert.equal(qq.smtp.secure, true)
+
+  const netease = providerHostsFor('a@163.com')
+  assert.equal(netease.imap.host, 'imap.163.com')
+  const vip = providerHostsFor('a@vip.126.com')
+  assert.equal(vip.imap.host, 'imap.vip.126.com')
+
+  const gmail = providerHostsFor('x@gmail.com')
+  assert.equal(gmail.imap.host, 'imap.gmail.com')
+  assert.equal(gmail.smtp.port, 587)
+  assert.equal(gmail.smtp.secure, false, 'gmail 走 587 STARTTLS')
+
+  const unknown = providerHostsFor('x@some-corp.cn')
+  assert.equal(unknown, null, '未知域名返回 null（面板/用户手动填），不猜')
+}
+
+// === resolveEmailConfig：config 块优先，.env 回退，地址自动补 host ===
+{
+  const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'e7-email-cfg-'))
+  // 1) 无 config 无 .env → null
+  assert.equal(resolveEmailConfig({ stateDir: tmp }), null)
+
+  // 2) config tools.email 完整 → 直接用
+  fs.mkdirSync(path.join(tmp, 'configs'), { recursive: true })
+  fs.writeFileSync(path.join(tmp, 'configs', 'main.json'), JSON.stringify({
+    tools: { email: { address: 'a@qq.com',
+      imap: { host: 'imap.qq.com', port: 993, user: 'a@qq.com', pass: 'k1' },
+      smtp: { host: 'smtp.qq.com', port: 465, secure: true, user: 'a@qq.com', pass: 'k1' } } },
+  }))
+  let cfg = resolveEmailConfig({ stateDir: tmp })
+  assert.equal(cfg.imap.pass, 'k1')
+  assert.equal(cfg.source, 'config')
+
+  // 3) config 只给 address+pass（面板最简形态）→ 域名映射自动补 host
+  fs.writeFileSync(path.join(tmp, 'configs', 'main.json'), JSON.stringify({
+    tools: { email: { address: 'b@163.com', pass: 'k2' } },
+  }))
+  cfg = resolveEmailConfig({ stateDir: tmp })
+  assert.equal(cfg.source, 'config')
+  assert.equal(cfg.imap.host, 'imap.163.com')
+  assert.equal(cfg.imap.user, 'b@163.com')
+  assert.equal(cfg.imap.pass, 'k2')
+  assert.equal(cfg.smtp.host, 'smtp.163.com')
+  assert.equal(cfg.smtp.secure, true)
+  // 独立授权码可覆盖（IMAP/SMTP 授权码可能是两个）
+  fs.writeFileSync(path.join(tmp, 'configs', 'main.json'), JSON.stringify({
+    tools: { email: { address: 'b@163.com', pass: 'k2', smtpPass: 'k3' } },
+  }))
+  cfg = resolveEmailConfig({ stateDir: tmp })
+  assert.equal(cfg.imap.pass, 'k2')
+  assert.equal(cfg.smtp.pass, 'k3')
+
+  // 4) 无 config → 回退 skill 目录 .env（妹妹存量形态，不破坏）
+  const tmp2 = fs.mkdtempSync(path.join(os.tmpdir(), 'e7-email-env-'))
+  fs.writeFileSync(path.join(tmp2, '.env'), 'IMAP_HOST=imap.qq.com\nIMAP_PORT=993\nIMAP_USER=c@qq.com\nIMAP_PASS=k4\nSMTP_HOST=smtp.qq.com\nSMTP_PORT=465\nSMTP_SECURE=true\nSMTP_USER=c@qq.com\nSMTP_PASS=k4\n')
+  const cfg2 = resolveEmailConfig({ stateDir: tmp2, envFile: path.join(tmp2, '.env') })
+  assert.equal(cfg2.source, 'env')
+  assert.equal(cfg2.imap.user, 'c@qq.com')
+  fs.rmSync(tmp, { recursive: true, force: true })
+  fs.rmSync(tmp2, { recursive: true, force: true })
+}
+
+// === classifyError：错误分类（--json 的 reason 枚举） ===
+{
+  const auth = new Error('AUTHENTICATIONFAILED Authentication failed')
+  auth.authenticationFailed = true
+  assert.equal(classifyError(auth), 'auth_failed')
+  assert.equal(classifyError(new Error('NO Login error. (163)')), 'auth_failed')
+  assert.equal(classifyError(new Error('getaddrinfo ENOTFOUND imap.qq.com')), 'network')
+  assert.equal(classifyError(new Error('connect ECONNREFUSED 1.2.3.4:993')), 'network')
+  assert.equal(classifyError(new Error('read ECONNRESET')), 'network')
+  assert.equal(classifyError(new Error('connect ETIMEDOUT')), 'timeout')
+  assert.equal(classifyError(new Error('NO [RATELIMITED]')), 'rate_limited')
+  assert.equal(classifyError(new Error('缺少 IMAP_USER 或 IMAP_PASS 配置')), 'config_missing')
+  assert.equal(classifyError(new Error('别的什么错')), 'unknown')
+}
+
+console.log('email-config.test ALL PASS')

package/templates/skills/email/scripts/email-gate.js

@@ -0,0 +1,124 @@
+// email-gate.js — 发信分级闸（设计 v2 §3.2：候选/已验证两级 + 逐收件人判定）
+// 协议层实现：agent 发信前必须先跑本判定（CLI 或 require），凭 verdict 组装话术。
+//   node email-gate.js check --to a@x.com,b@y.com [--cc ...] [--bcc ...] [--attach] [--ext-link]
+//   → {"action":"send"|"confirm","reasons":{...}}
+const fs = require('node:fs')
+const path = require('node:path')
+
+/** "Name <a@b.c>" / "a@b.c" / 大小写 → 归一地址 */
+function normalizeAddress(addr) {
+  const m = String(addr || '').match(/<([^>]+)>/) || [null, String(addr || '')]
+  return m[1].trim().toLowerCase()
+}
+
+/**
+ * @param {{to:string[], cc?:string[], bcc?:string[], hasAttachment?:boolean, hasExternalLink?:boolean,
+ *          verified:Set<string>, policy?:'tiered'|'confirm-all'|'auto'}} input
+ * @returns {{action:'send'|'confirm'|'invalid', reasons?:{unverified:string[], requiresReview:string[]}}}
+ */
+function gateCheck({ to = [], cc = [], bcc = [], hasAttachment = false, hasExternalLink = false, verified, policy = 'tiered' }) {
+  if (policy === 'auto') return { action: 'send' }
+  if (policy === 'confirm-all') return { action: 'confirm', reasons: { unverified: [], requiresReview: ['policy'] } }
+
+  const all = [...to, ...cc, ...bcc].map(normalizeAddress).filter(Boolean)
+  if (all.length === 0) return { action: 'invalid' }
+
+  const unverified = all.filter(a => !verified.has(a))
+  const requiresReview = []
+  if (hasAttachment) requiresReview.push('attachment')
+  if (hasExternalLink) requiresReview.push('external_link')
+  if (unverified.length > 0 || requiresReview.length > 0) {
+    return { action: 'confirm', reasons: { unverified, requiresReview } }
+  }
+  return { action: 'send' }
+}
+
+/** 攒批规划：direct=免确认直发；batchable=仅因陌生收件人待确认（≤3 封一批）；
+ *  singles=带附件/外链必须单独过（设计 §3.2） */
+function planBatch(mails) {
+  const direct = []
+  const batchable = []
+  const singles = []
+  for (const m of mails) {
+    const v = gateCheck(m)
+    if (v.action === 'send') { direct.push(m); continue }
+    if (v.reasons?.requiresReview?.length) singles.push(m)
+    else batchable.push(m)
+  }
+  return { direct, batchable: batchable.slice(0, 3), nextBatch: batchable.slice(3), singles }
+}
+
+// === 联系人名单（candidates 来信自动入册 / verified 用户确认后升级）===
+function contactsPath() {
+  const stateDir = process.env.ENGINE_STATE_DIR || process.env.ENGINE7_STATE_DIR
+  return stateDir ? path.join(stateDir, 'email-contacts.json') : path.join(__dirname, '..', 'email-contacts.json')
+}
+
+function loadContacts() {
+  try { return JSON.parse(fs.readFileSync(contactsPath(), 'utf8')) } catch { return { candidates: [], verified: [] } }
+}
+
+function saveContacts(c) {
+  fs.mkdirSync(path.dirname(contactsPath()), { recursive: true })
+  fs.writeFileSync(contactsPath(), JSON.stringify(c, null, 2))
+}
+
+/** 来信地址入候选（幂等；已在 verified 不降级） */
+function addCandidate(address) {
+  const a = normalizeAddress(address)
+  if (!a) return loadContacts()
+  const c = loadContacts()
+  if (!c.verified.includes(a) && !c.candidates.includes(a)) c.candidates.push(a)
+  saveContacts(c)
+  return c
+}
+
+/** 用户确认 → 升已验证（直发权） */
+function verifyAddress(address) {
+  const a = normalizeAddress(address)
+  const c = loadContacts()
+  if (a && !c.verified.includes(a)) c.verified.push(a)
+  c.candidates = c.candidates.filter(x => x !== a)
+  saveContacts(c)
+  return c
+}
+
+function verifiedSet() {
+  return new Set(loadContacts().verified)
+}
+
+// === CLI ===
+if (require.main === module) {
+  const args = process.argv.slice(2)
+  const cmd = args[0]
+  const flag = (name) => args.includes(`--${name}`)
+  const val = (name) => {
+    const i = args.indexOf(`--${name}`)
+    return i >= 0 && args[i + 1] && !args[i + 1].startsWith('--') ? args[i + 1] : null
+  }
+  const list = (name) => (val(name) ? val(name).split(',').map(s => s.trim()).filter(Boolean) : [])
+
+  if (cmd === 'check') {
+    const verdict = gateCheck({
+      to: list('to'), cc: list('cc'), bcc: list('bcc'),
+      hasAttachment: flag('attach'), hasExternalLink: flag('ext-link'),
+      verified: verifiedSet(),
+      policy: (val('policy') || 'tiered'),
+    })
+    console.log(JSON.stringify(verdict))
+  } else if (cmd === 'add-candidate') {
+    addCandidate(val('addr'))
+    console.log(JSON.stringify(loadContacts()))
+  } else if (cmd === 'verify') {
+    verifyAddress(val('addr'))
+    console.log(JSON.stringify(loadContacts()))
+  } else if (cmd === 'list') {
+    console.log(JSON.stringify(loadContacts(), null, 2))
+  } else {
+    console.error('Usage: email-gate.js check --to a@x.com[,b@y.com] [--cc ...] [--bcc ...] [--attach] [--ext-link] [--policy tiered|confirm-all|auto]')
+    console.error('       email-gate.js add-candidate --addr a@x.com | verify --addr a@x.com | list')
+    process.exit(1)
+  }
+}
+
+module.exports = { gateCheck, planBatch, normalizeAddress, addCandidate, verifyAddress, verifiedSet, loadContacts, saveContacts }

package/templates/skills/email/scripts/email-gate.test.js

@@ -0,0 +1,62 @@
+// email-gate.test.js — 分级闸判定单测（node 直跑）
+const assert = require('node:assert/strict')
+const { gateCheck, normalizeAddress, planBatch } = require('./email-gate.js')
+
+const V = new Set(['mom@qq.com', 'teacher@163.com'])
+
+// 1. 全部已验证、无附件无外链 → 直发
+assert.equal(gateCheck({ to: ['mom@qq.com'], verified: V }).action, 'send')
+
+// 2. to 里有陌生 → confirm（reason 点名）
+{
+  const r = gateCheck({ to: ['mom@qq.com', 'stranger@x.com'], verified: V })
+  assert.equal(r.action, 'confirm')
+  assert.deepEqual(r.reasons.unverified, ['stranger@x.com'])
+}
+
+// 3. cc/bcc 逐收件人判——夹带的陌生地址也会把整封降级
+assert.equal(gateCheck({ to: ['mom@qq.com'], cc: ['b@x.com'], verified: V }).action, 'confirm')
+assert.equal(gateCheck({ to: ['mom@qq.com'], bcc: ['b@x.com'], verified: V }).action, 'confirm')
+
+// 4. 全已验证但带附件 → confirm
+{
+  const r = gateCheck({ to: ['mom@qq.com'], verified: V, hasAttachment: true })
+  assert.equal(r.action, 'confirm')
+  assert.ok(r.reasons.requiresReview.includes('attachment'))
+}
+
+// 5. 全已验证但正文含外链 → confirm
+assert.equal(gateCheck({ to: ['mom@qq.com'], verified: V, hasExternalLink: true }).action, 'confirm')
+
+// 6. sendPolicy 三档
+assert.equal(gateCheck({ to: ['a@x.com'], verified: V, policy: 'auto' }).action, 'send', 'auto 档永远直发')
+assert.equal(gateCheck({ to: ['mom@qq.com'], verified: V, policy: 'confirm-all' }).action, 'confirm', 'confirm-all 档永远确认')
+
+// 7. 地址归一化：显示名、尖括号、大小写
+assert.equal(normalizeAddress('"张老师" <Teacher@163.com>'), 'teacher@163.com')
+assert.equal(normalizeAddress('MOM@QQ.COM'), 'mom@qq.com')
+{
+  const r = gateCheck({ to: ['"妈妈" <MOM@qq.com>'], verified: V })
+  assert.equal(r.action, 'send', '归一化后命中已验证')
+}
+
+// 8. 无收件人 → invalid（调用方错误，明确不猜）
+assert.equal(gateCheck({ to: [], verified: V }).action, 'invalid')
+
+// 9. 攒批规划：待确认件 ≤3 封一批；带附件/外链单独过；全 verified 直接发
+{
+  const plan = planBatch([
+    { id: 'd1', to: ['mom@qq.com'], verified: V },                      // 直发
+    { id: 'm1', to: ['c1@x.com'], verified: V },                        // 陌生→可攒批
+    { id: 'm2', to: ['c2@x.com'], verified: V },
+    { id: 'm3', to: ['c3@x.com'], verified: V },
+    { id: 'm4', to: ['c4@x.com'], verified: V },                        // 第 4 封 → 下一批
+    { id: 'm5', to: ['mom@qq.com'], verified: V, hasAttachment: true }, // 附件 → 单过
+  ])
+  assert.deepEqual(plan.direct.map(m => m.id), ['d1'])
+  assert.deepEqual(plan.batchable.map(m => m.id), ['m1', 'm2', 'm3'])
+  assert.deepEqual(plan.nextBatch.map(m => m.id), ['m4'])
+  assert.deepEqual(plan.singles.map(m => m.id), ['m5'], '附件件不参与攒批')
+}
+
+console.log('email-gate.test ALL PASS')