nothumanallowed 13.5.121 → 13.5.123

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "13.5.121",
+  "version": "13.5.123",
   "description": "NotHumanAllowed — 38 AI agents, 80 tools, Studio (visual agentic workflows). Email, calendar, browser automation, screen capture, canvas, cron/heartbeat, Alexandria E2E messaging, GitHub, Notion, Slack, voice chat, free AI (Liara), 28 languages. Zero-dependency CLI.",
   "type": "module",
   "bin": {

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '13.5.121';
+export const VERSION = '13.5.123';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/email-db.mjs

@@ -18,7 +18,7 @@ const DB_PATH = join(NHA_DIR, 'email.db');
 let _db = null;
 
 export function getDb() {
-  if (_db) return _db;
+  if (_db && _db.open) return _db;
   mkdirSync(NHA_DIR, { recursive: true });
   _db = new Database(DB_PATH);
   _db.pragma('journal_mode = WAL');

package/src/services/email-smtp.mjs

@@ -56,14 +56,16 @@ export async function sendEmail(accountId, opts) {
   const msgId = `<${randomUUID()}@nha.local>`;
   const fromLine = creds.from_name ? `${creds.from_name} <${creds.email_address}>` : creds.email_address;
 
+  const toList = toArray(opts.to);
+  if (!toList.length) throw new Error('At least one recipient (To) is required');
+
   const mailOpts = {
     messageId: msgId,
     from: fromLine,
-    to: Array.isArray(opts.to) ? opts.to.join(', ') : opts.to,
+    to: toList.join(', '),
     subject: opts.subject || '',
     html: opts.bodyHtml || '',
     text: opts.bodyText || stripHtml(opts.bodyHtml || ''),
-    envelope: { from: creds.email_address, to: toArray(opts.to) },
   };
 
   if (opts.cc?.length)         mailOpts.cc  = Array.isArray(opts.cc)  ? opts.cc.join(', ')  : opts.cc;

package/src/services/tool-executor.mjs

@@ -67,6 +67,10 @@ export const DESTRUCTIVE_ACTIONS = new Set([
   'gmail_reply',
   'gmail_delete',
   'imap_send',
+  'imap_reply',
+  'imap_bulk_send',
+  'imap_send_template',
+  'imap_trash',
   'calendar_create',
   'calendar_move',
   'calendar_update',
@@ -400,6 +404,42 @@ TOOLS:
 70. imap_mark_read(messageId: string, isRead?: boolean)
     Mark a local message as read or unread. Does NOT touch the IMAP server. Default isRead=true.
 
+71. imap_reply(accountId: string, messageId: string, bodyHtml: string, cc?: string)
+    Reply to an existing email. Automatically sets In-Reply-To and References headers for proper threading.
+    Fetches the original message from DB to build correct subject (Re: ...) and recipient.
+    ALWAYS confirm with user before sending.
+
+72. imap_thread(accountId: string, threadId: string)
+    Read all messages in a thread. Returns them in chronological order with subject, from, date, body.
+    Use imap_read() to get the threadId from a message.
+
+73. imap_search(accountId: string, query: string, limit?: number)
+    Full-text search across all synced emails (subject, body, from, to). Returns matching messages.
+    query is a plain text string. limit defaults to 20.
+
+74. imap_mark_starred(messageId: string, isStarred?: boolean)
+    Star or unstar a message locally. Default isStarred=true.
+
+75. imap_trash(messageId: string)
+    Move a message to local Trash (soft delete — does NOT touch IMAP server). ALWAYS confirm.
+
+76. imap_draft(accountId: string, to: string, subject: string, bodyHtml: string)
+    Save a draft locally. Safe — does not send anything.
+
+77. imap_send_template(accountId: string, to: string, templateId: string, vars: object)
+    Send an email using a built-in marketing template. templateId is one of:
+    "promo_product" | "newsletter" | "follow_up" | "offerta" | "evento" | "ringraziamento"
+    vars is a key-value object to replace [PLACEHOLDERS] in the template, e.g.:
+    {"AZIENDA": "Zeli Srl", "TITOLO OFFERTA": "Sconto 20%", "LINK_CTA": "https://..."}
+    ALWAYS confirm with user before sending.
+
+78. imap_bulk_send(accountId: string, recipients: string[], subject: string, templateId: string, vars: object, perRecipientVars?: object)
+    Send a templated email to multiple recipients (marketing campaign).
+    recipients: array of email addresses.
+    vars: global placeholders applied to all.
+    perRecipientVars: optional object keyed by email with per-recipient overrides, e.g. {"mario@co.it": {"NOME": "Mario"}}.
+    Sends one-by-one with 1s delay to avoid spam filters. ALWAYS confirm with user — shows recipient count.
+
 --- CANVAS ---
 
 71. canvas_render(html: string, title?: string)
@@ -940,6 +980,124 @@ export async function executeTool(action, params, config) {
       return `Message marked as ${params.isRead !== false ? 'read' : 'unread'}.`;
     }
 
+    case 'imap_reply': {
+      if (!params.accountId || !params.messageId || !params.bodyHtml) return 'accountId, messageId, bodyHtml required.';
+      const { getMessage: imapGetMsg2 } = await import('./email-db.mjs');
+      const { sendEmail: imapSendReply } = await import('./email-smtp.mjs');
+      const orig = imapGetMsg2(params.messageId);
+      if (!orig) return 'Original message not found in local DB.';
+      const replySubject = orig.subject?.startsWith('Re:') ? orig.subject : 'Re: ' + (orig.subject || '');
+      let refs = [];
+      try { refs = JSON.parse(orig.references_list || '[]'); } catch {}
+      if (orig.message_id) refs.push(orig.message_id);
+      const result = await imapSendReply(params.accountId, {
+        to: orig.from_address,
+        cc: params.cc || null,
+        subject: replySubject,
+        bodyHtml: params.bodyHtml,
+        inReplyTo: orig.message_id || null,
+        references: refs,
+      });
+      return `Reply sent to ${orig.from_address}. Message-ID: ${result.messageId}`;
+    }
+
+    case 'imap_thread': {
+      if (!params.accountId || !params.threadId) return 'accountId and threadId required.';
+      const { getThread: imapGetThread } = await import('./email-db.mjs');
+      const msgs = imapGetThread(params.threadId, params.accountId);
+      if (!msgs.length) return 'No messages found in thread.';
+      return msgs.map((m, i) => {
+        const body = m.body_reply_only || m.body_text || m.body_preview || '(empty)';
+        return `--- Message ${i + 1} ---\nFrom: ${m.from_name ? m.from_name + ' <' + m.from_address + '>' : m.from_address}\nDate: ${m.internal_date}\n\n${body.slice(0, 1500)}`;
+      }).join('\n\n');
+    }
+
+    case 'imap_search': {
+      if (!params.accountId || !params.query) return 'accountId and query required.';
+      const { listMessages: imapSearch } = await import('./email-db.mjs');
+      const result = imapSearch(params.accountId, null, params.limit || 20, 0, params.query);
+      if (!result.messages.length) return `No messages found for "${params.query}".`;
+      return result.messages.map(m =>
+        `[${m.id}] ${m.is_read ? '' : '[UNREAD] '}From: ${m.from_name || m.from_address} | ${m.subject} | ${(m.internal_date || '').slice(0, 10)}\n  ${(m.body_preview || '').slice(0, 100)}`
+      ).join('\n\n') + `\n\n(${result.total} total matches)`;
+    }
+
+    case 'imap_mark_starred': {
+      if (!params.messageId) return 'messageId required.';
+      const { markStarred } = await import('./email-db.mjs');
+      markStarred(params.messageId, params.isStarred !== false);
+      return `Message ${params.isStarred !== false ? 'starred' : 'unstarred'}.`;
+    }
+
+    case 'imap_trash': {
+      if (!params.messageId) return 'messageId required.';
+      const { softDelete } = await import('./email-db.mjs');
+      softDelete(params.messageId);
+      return 'Message moved to local Trash. Not deleted from IMAP server.';
+    }
+
+    case 'imap_draft': {
+      if (!params.accountId || !params.to || !params.subject) return 'accountId, to, subject required.';
+      const { saveDraft } = await import('./email-db.mjs');
+      const id = saveDraft(params.accountId, {
+        to: [{ address: params.to }],
+        subject: params.subject,
+        body_html: params.bodyHtml || '',
+      });
+      return `Draft saved with id: ${id}`;
+    }
+
+    case 'imap_send_template': {
+      if (!params.accountId || !params.to || !params.templateId || !params.vars) return 'accountId, to, templateId, vars required.';
+      const { sendEmail: imapSendTpl } = await import('./email-smtp.mjs');
+      const TEMPLATES = {
+        promo_product: { subject: 'Scopri la nostra offerta su [PRODOTTO]', html: '<table width="100%" style="max-width:600px;margin:0 auto;font-family:Arial,sans-serif"><tr><td style="background:#1a1a2e;padding:32px 40px;text-align:center"><h1 style="color:#00ff9d;margin:0">[AZIENDA]</h1></td></tr><tr><td style="padding:40px;background:#fff"><h2 style="color:#1a1a2e">[TITOLO OFFERTA]</h2><p style="color:#444;line-height:1.7">[DESCRIZIONE PRODOTTO/SERVIZIO]</p><p style="color:#444;line-height:1.7">[DETTAGLIO BENEFICI O SPECIFICHE]</p><table><tr><td style="background:#00ff9d;border-radius:6px;padding:14px 32px"><a href="[LINK_CTA]" style="color:#1a1a2e;font-weight:700;text-decoration:none">[TESTO CTA]</a></td></tr></table></td></tr><tr><td style="padding:24px 40px;background:#f5f5f5;text-align:center"><p style="color:#888;font-size:12px">[AZIENDA] &bull; [INDIRIZZO] &bull; [EMAIL]</p></td></tr></table>' },
+        newsletter: { subject: '[AZIENDA] Newsletter — [MESE] [ANNO]', html: '<table width="100%" style="max-width:600px;margin:0 auto;font-family:Arial,sans-serif"><tr><td style="background:#0f0f1a;padding:28px 40px;border-bottom:3px solid #00ff9d"><h1 style="color:#fff;margin:0">[AZIENDA]</h1><p style="color:#00ff9d;margin:6px 0 0;font-size:13px">Newsletter [MESE] [ANNO]</p></td></tr><tr><td style="padding:36px 40px;background:#fff"><h2 style="color:#1a1a2e">[TITOLO PRINCIPALE]</h2><p style="color:#555;line-height:1.8">[TESTO PRINCIPALE]</p><hr style="border:none;border-top:1px solid #eee;margin:24px 0"><h3 style="color:#1a1a2e">[TITOLO SEZIONE 2]</h3><p style="color:#555;line-height:1.8">[TESTO SEZIONE 2]</p></td></tr><tr><td style="padding:20px 40px;background:#f9f9f9;text-align:center"><p style="color:#999;font-size:12px">&copy; [ANNO] [AZIENDA]</p></td></tr></table>' },
+        follow_up: { subject: 'Seguito alla nostra conversazione — [ARGOMENTO]', html: '<table width="100%" style="max-width:580px;margin:0 auto;font-family:Arial,sans-serif"><tr><td style="padding:40px"><p style="color:#333;line-height:1.7">Gentile [NOME],</p><p style="color:#333;line-height:1.7">la contatto in seguito a [CONTESTO].</p><p style="color:#333;line-height:1.7">[CORPO PRINCIPALE]</p><p style="color:#333;line-height:1.7">[CHIUSURA]</p><p style="color:#333">Cordiali saluti,</p><p style="color:#1a1a2e;font-weight:700">[NOME MITTENTE]</p><p style="color:#888;font-size:13px">[RUOLO] &bull; [AZIENDA] &bull; [TELEFONO]</p></td></tr></table>' },
+        offerta: { subject: 'Offerta [NUMERO] — [OGGETTO FORNITURA]', html: '<table width="100%" style="max-width:600px;margin:0 auto;font-family:Arial,sans-serif"><tr><td style="background:#1a1a2e;padding:24px 40px"><h1 style="color:#00ff9d;margin:0">[AZIENDA]</h1><p style="color:#aaa;margin:4px 0 0;font-size:12px">Offerta n. [NUMERO] del [DATA]</p></td></tr><tr><td style="padding:36px 40px;background:#fff"><p style="color:#333;line-height:1.7">Gentile [NOME],</p><p style="color:#555;font-size:13px"><strong>Condizioni di pagamento:</strong> [PAGAMENTO]</p><p style="color:#555;font-size:13px"><strong>Tempi di consegna:</strong> [CONSEGNA]</p><p style="color:#555;font-size:13px"><strong>Validita offerta:</strong> [VALIDITA]</p><p style="color:#333">Cordiali saluti,</p><p style="color:#1a1a2e;font-weight:700">[NOME MITTENTE]</p></td></tr></table>' },
+        evento: { subject: 'Sei invitato: [NOME EVENTO] — [DATA]', html: '<table width="100%" style="max-width:600px;margin:0 auto;font-family:Arial,sans-serif"><tr><td style="background:linear-gradient(135deg,#0f0f1a,#1a2a1a);padding:48px 40px;text-align:center"><h1 style="color:#00ff9d;margin:0">[NOME EVENTO]</h1><p style="color:#aaffcc;margin:8px 0 0">[DATA] &bull; [ORA] &bull; [LUOGO]</p></td></tr><tr><td style="padding:40px;background:#fff;text-align:center"><p style="color:#444;line-height:1.8;max-width:460px;margin:0 auto 28px">[DESCRIZIONE EVENTO]</p><table style="margin:0 auto"><tr><td style="background:#00ff9d;border-radius:8px;padding:14px 40px"><a href="[LINK_REGISTRAZIONE]" style="color:#0f0f1a;font-weight:700;text-decoration:none">Registrati ora</a></td></tr></table></td></tr></table>' },
+        ringraziamento: { subject: 'Grazie per la fiducia, [NOME]', html: '<table width="100%" style="max-width:580px;margin:0 auto;font-family:Arial,sans-serif"><tr><td style="background:#0f0f1a;padding:32px 40px;text-align:center"><h1 style="color:#fff;font-size:22px">Grazie, [NOME]!</h1></td></tr><tr><td style="padding:40px;background:#fff"><p style="color:#333;line-height:1.8">Volevamo ringraziarti per [MOTIVO].</p><p style="color:#333;line-height:1.8">[MESSAGGIO PERSONALE]</p><p style="color:#333">Con stima,</p><p style="color:#1a1a2e;font-weight:700">[NOME MITTENTE]</p></td></tr></table>' },
+      };
+      const tpl = TEMPLATES[params.templateId];
+      if (!tpl) return `Unknown templateId "${params.templateId}". Valid: ${Object.keys(TEMPLATES).join(', ')}`;
+      const applyVars = (str, vars) => Object.entries(vars).reduce((s, [k, v]) => s.split('[' + k + ']').join(v || ''), str);
+      const subject = applyVars(tpl.subject, params.vars);
+      const html = applyVars(tpl.html, params.vars);
+      const result = await imapSendTpl(params.accountId, { to: params.to, subject, bodyHtml: html });
+      return `Template email "${params.templateId}" sent to ${params.to}. Message-ID: ${result.messageId}`;
+    }
+
+    case 'imap_bulk_send': {
+      if (!params.accountId || !params.recipients?.length || !params.subject || !params.templateId) return 'accountId, recipients, subject, templateId required.';
+      const { sendEmail: imapSendBulk } = await import('./email-smtp.mjs');
+      const BULK_TEMPLATES = {
+        promo_product: '<table width="100%" style="max-width:600px;margin:0 auto;font-family:Arial,sans-serif"><tr><td style="background:#1a1a2e;padding:32px 40px;text-align:center"><h1 style="color:#00ff9d;margin:0">[AZIENDA]</h1></td></tr><tr><td style="padding:40px;background:#fff"><h2 style="color:#1a1a2e">[TITOLO OFFERTA]</h2><p style="color:#444;line-height:1.7">[DESCRIZIONE PRODOTTO/SERVIZIO]</p><table><tr><td style="background:#00ff9d;border-radius:6px;padding:14px 32px"><a href="[LINK_CTA]" style="color:#1a1a2e;font-weight:700;text-decoration:none">[TESTO CTA]</a></td></tr></table></td></tr></table>',
+        newsletter: '<table width="100%" style="max-width:600px;margin:0 auto;font-family:Arial,sans-serif"><tr><td style="background:#0f0f1a;padding:28px 40px;border-bottom:3px solid #00ff9d"><h1 style="color:#fff;margin:0">[AZIENDA]</h1></td></tr><tr><td style="padding:36px 40px;background:#fff"><h2 style="color:#1a1a2e">[TITOLO PRINCIPALE]</h2><p style="color:#555;line-height:1.8">[TESTO PRINCIPALE]</p></td></tr></table>',
+        follow_up: '<table width="100%" style="max-width:580px;margin:0 auto;font-family:Arial,sans-serif"><tr><td style="padding:40px"><p style="color:#333;line-height:1.7">Gentile [NOME],</p><p style="color:#333;line-height:1.7">[CORPO PRINCIPALE]</p><p style="color:#1a1a2e;font-weight:700">[NOME MITTENTE]</p></td></tr></table>',
+        offerta: '<table width="100%" style="max-width:600px;margin:0 auto;font-family:Arial,sans-serif"><tr><td style="background:#1a1a2e;padding:24px 40px"><h1 style="color:#00ff9d;margin:0">[AZIENDA]</h1></td></tr><tr><td style="padding:36px 40px;background:#fff"><p style="color:#333;line-height:1.7">Gentile [NOME],</p><p style="color:#555">[CORPO PRINCIPALE]</p><p style="color:#1a1a2e;font-weight:700">[NOME MITTENTE]</p></td></tr></table>',
+        evento: '<table width="100%" style="max-width:600px;margin:0 auto;font-family:Arial,sans-serif"><tr><td style="background:#0f0f1a;padding:48px 40px;text-align:center"><h1 style="color:#00ff9d;margin:0">[NOME EVENTO]</h1><p style="color:#aaffcc">[DATA]</p></td></tr><tr><td style="padding:40px;background:#fff;text-align:center"><p style="color:#444;line-height:1.8">[DESCRIZIONE EVENTO]</p><table style="margin:0 auto"><tr><td style="background:#00ff9d;border-radius:8px;padding:14px 40px"><a href="[LINK_REGISTRAZIONE]" style="color:#0f0f1a;font-weight:700;text-decoration:none">Registrati</a></td></tr></table></td></tr></table>',
+        ringraziamento: '<table width="100%" style="max-width:580px;margin:0 auto;font-family:Arial,sans-serif"><tr><td style="background:#0f0f1a;padding:32px 40px;text-align:center"><h1 style="color:#fff">Grazie, [NOME]!</h1></td></tr><tr><td style="padding:40px;background:#fff"><p style="color:#333;line-height:1.8">[MESSAGGIO PERSONALE]</p><p style="color:#1a1a2e;font-weight:700">[NOME MITTENTE]</p></td></tr></table>',
+      };
+      const baseTplHtml = BULK_TEMPLATES[params.templateId];
+      if (!baseTplHtml) return `Unknown templateId. Valid: ${Object.keys(BULK_TEMPLATES).join(', ')}`;
+      const applyVars2 = (str, vars) => Object.entries(vars).reduce((s, [k, v]) => s.split('[' + k + ']').join(v || ''), str);
+      const results = [];
+      for (const email of params.recipients) {
+        const perVars = { ...(params.vars || {}), ...((params.perRecipientVars || {})[email] || {}) };
+        const subject = applyVars2(params.subject, perVars);
+        const html = applyVars2(baseTplHtml, perVars);
+        try {
+          await imapSendBulk(params.accountId, { to: email, subject, bodyHtml: html });
+          results.push(`OK: ${email}`);
+        } catch (e) {
+          results.push(`FAIL: ${email} — ${e.message}`);
+        }
+        await new Promise(r => setTimeout(r, 1200)); // 1.2s delay between sends
+      }
+      const ok = results.filter(r => r.startsWith('OK')).length;
+      return `Bulk send complete: ${ok}/${params.recipients.length} sent.\n${results.join('\n')}`;
+    }
+
     // ── Calendar ──────────────────────────────────────────────────────────
     case 'calendar_today': {
       const events = await getTodayEvents(config);