pombus 0.1.4 → 0.1.5

package/dist/i18n.js

@@ -70,6 +70,16 @@ const MESSAGES = {
         "pt-BR": "Esse domínio ainda não está verificado no seu espaço do Pombus. Verifique em Domínios e rode o init de novo.",
         "es-419": "Ese dominio aún no está verificado en tu espacio de Pombus. Verifícalo en Dominios y vuelve a ejecutar init.",
     },
+    init_inbox_limit: {
+        "en-US": "Your plan's inbox limit is reached. Delete an inbox or upgrade your plan in Pombus, then run init again.",
+        "pt-BR": "Você chegou ao limite de caixas do seu plano. Apague uma caixa ou mude de plano no Pombus e rode o init de novo.",
+        "es-419": "Llegaste al límite de casillas de tu plan. Borra una casilla o cambia de plan en Pombus y vuelve a ejecutar init.",
+    },
+    init_inbox_missing_permission: {
+        "en-US": "This API key cannot create inboxes. Use a key with the inbox-create permission (Pombus › Keys), or drop --create-inbox.",
+        "pt-BR": "Esta chave de API não pode criar caixas. Use uma chave com a permissão de criar caixa (Pombus › Chaves) ou tire o --create-inbox.",
+        "es-419": "Esta clave de API no puede crear casillas. Usa una clave con el permiso de crear casilla (Pombus › Claves) o quita --create-inbox.",
+    },
     init_config_written: {
         "en-US": "MCP config written for ",
         "pt-BR": "Config MCP gravada para ",
@@ -119,6 +129,8 @@ const INSTALLER_CODES = [
     "init_inbox_bad_domain",
     "init_inbox_platform_domain",
     "init_inbox_domain_not_verified",
+    "init_inbox_limit",
+    "init_inbox_missing_permission",
     "init_config_written",
     "init_key_power",
     "init_restart_client",

package/dist/init.js

@@ -6,6 +6,7 @@
 // and is reused. The function takes its side-effects as injected dependencies (key source, fetch,
 // HOME, output sink) so a test drives the whole flow against a fake core and a temp HOME without
 // ever touching real stdin/stdout/disk.
+import { domainToASCII } from "node:url";
 import { CoreClient, CoreError } from "./client.js";
 import { ScopeBinding } from "./scope.js";
 import { clientTargets, printableCodexToml, printableJson, writeJsonConfig, ConfigWriteError, } from "./clients.js";
@@ -20,11 +21,12 @@ export async function runInit(opts) {
     const say = (code, suffix = "") => out(humanMessage(code, locale) + suffix);
     // --create-inbox needs --domain: an extra inbox only exists on a verified domain of your own. Refuse
     // BEFORE the key prompt and any request, with the rule spelled out (the core would answer a bare 403).
-    const domain = (opts.domain ?? "").trim().toLowerCase().replace(/\.$/, "");
-    if (opts.createInbox && !domain) {
+    const rawDomain = (opts.domain ?? "").trim();
+    if (opts.createInbox && !rawDomain) {
         say("init_inbox_needs_domain");
         throw new InitAbort("init_inbox_needs_domain");
     }
+    const domain = normalizeDomain(rawDomain);
     if (opts.createInbox && !looksLikeDomain(domain)) {
         say("init_inbox_bad_domain");
         throw new InitAbort("init_inbox_bad_domain");
@@ -51,7 +53,7 @@ export async function runInit(opts) {
             created = await client.post("/inboxes", { domain });
         }
         catch (e) {
-            // The two refusals a person can act on get their own line (the key was fine — /auth/me passed
+            // The refusals a person can act on (INBOX_REFUSALS) get their own line (the key was fine — /auth/me passed
             // above). Anything else rethrows to the CLI's generic handler.
             const why = e instanceof CoreError ? (e.coreCode ?? e.code) : "";
             const human = INBOX_REFUSALS[why];
@@ -174,12 +176,25 @@ function emptyPrintResult() {
         printedFor: [],
     };
 }
-/** The core's create-inbox refusals a person can act on -> their human line. `platform_inbox_not_allowed`
- *  arrives as a 403 (collapsed to not_found, real code in coreCode); `domain_not_verified` as a 422. */
+/** The core's create-inbox refusals a person can act on -> their human line. `platform_inbox_not_allowed`,
+ *  `inbox_limit` and `missing_permission` arrive as a 403 (collapsed to not_found, real code in coreCode);
+ *  `domain_not_verified` as a 422. */
 const INBOX_REFUSALS = {
     platform_inbox_not_allowed: "init_inbox_platform_domain",
     domain_not_verified: "init_inbox_domain_not_verified",
+    inbox_limit: "init_inbox_limit",
+    missing_permission: "init_inbox_missing_permission",
 };
+/** `--domain` as the core stores it: lowercase, no trailing dot, IDN in punycode (`café.com` ->
+ *  `xn--caf-dma.com`). ASCII is restricted to letters/digits/dot/hyphen BEFORE the conversion, because
+ *  `domainToASCII` parses a URL host and would silently cut `acme.com/x` down to `acme.com`. The caller
+ *  passes it already trimmed. */
+export function normalizeDomain(raw) {
+    const d = raw.toLowerCase();
+    if (!/^[a-z0-9.\-\u{80}-\u{10ffff}]+$/u.test(d))
+        return "";
+    return domainToASCII(d).replace(/\.$/, "");
+}
 /** A basic domain-name shape (labels of letters/digits/hyphens, a dot, a TLD) — catches a typo or a flag
  *  swallowed as the value BEFORE any request. The core is the authority on whether it is verified. */
 function looksLikeDomain(d) {

package/dist/server.js

@@ -13,7 +13,7 @@ import { CoreClient, CoreError, readApiKey } from "./client.js";
 import { ScopeBinding, ScopeError } from "./scope.js";
 import { specByName, toolDescriptors, callTool, callOrgTool, isOrgTool, ToolArgError, } from "./tools.js";
 const SERVER_NAME = "pombus";
-const SERVER_VERSION = "0.1.4";
+const SERVER_VERSION = "0.1.5";
 /** Build and connect the MCP server over stdio. Fails fast (before connecting) when the key is absent,
  *  so a misconfigured client sees a clear stderr line instead of a server that answers every tool with
  *  an auth error. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pombus",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Pombus MCP server — email boxes for AI agents. A thin stdio translator between MCP tool calls and the Pombus REST core.",
   "license": "MIT",
   "author": "Runaki",