predictor-outreach 0.2.0 → 0.3.1

package/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Predictor Outreach v1",
-    "version": "0.2.0",
+    "version": "0.3.1",
     "description": "Email-confirmed self-service or invited tenant API. Connect issues a scoped, expiring, revocable token exactly once to the CLI. SMTP credentials never leave the local plugin. All quota, review, suppression and circuit controls remain enforced."
   },
   "servers": [
@@ -416,6 +416,49 @@
         }
       }
     },
+    "/bounce-reports": {
+      "post": {
+        "operationId": "bounce_report",
+        "description": "Requires outreach:send. Local IMAP collector reports a permanent DSN matched to this tenant's original campaign, authorization, address, mailbox and Message-ID. Server reparses bounded raw MIME and rechecks evidence. Repeated same report is idempotent; accepted bounce immediately applies existing suppression and circuit controls. Credentials and ordinary inbox messages must never be submitted.",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": { "$ref": "#/components/schemas/BounceReport" }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Permanent bounce accepted or already processed",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "additionalProperties": false,
+                  "required": ["id", "classification", "duplicate", "suppressed"],
+                  "properties": {
+                    "id": { "$ref": "#/components/schemas/Uuid" },
+                    "classification": { "const": "bounce" },
+                    "duplicate": { "type": "boolean" },
+                    "suppressed": { "const": true }
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Invalid bounded DTO or missing/ambiguous/non-permanent DSN evidence"
+          },
+          "401": { "$ref": "#/components/responses/Unauthorized" },
+          "403": {
+            "description": "Scope, tenant, campaign or original delivery evidence mismatch"
+          },
+          "409": { "description": "Same DSN identifier has changed content; stop and inspect" },
+          "413": { "description": "Bounce JSON exceeds the endpoint's bounded body limit" }
+        }
+      }
+    },
     "/replies": {
       "get": {
         "operationId": "replies_list",
@@ -652,6 +695,36 @@
           }
         }
       },
+      "BounceReport": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "batchId",
+          "address",
+          "mailbox",
+          "authorizationId",
+          "originalMessageId",
+          "rawMimeBase64"
+        ],
+        "properties": {
+          "batchId": { "$ref": "#/components/schemas/Uuid" },
+          "address": { "$ref": "#/components/schemas/Address" },
+          "mailbox": { "$ref": "#/components/schemas/Address" },
+          "authorizationId": { "$ref": "#/components/schemas/Uuid" },
+          "originalMessageId": {
+            "type": "string",
+            "maxLength": 998,
+            "pattern": "^<[^\\s<>@]+@[^\\s<>@]+>$",
+            "description": "Original ASCII Message-ID from this exact local delivery; control characters forbidden"
+          },
+          "rawMimeBase64": {
+            "type": "string",
+            "maxLength": 262144,
+            "contentEncoding": "base64",
+            "description": "Canonical base64 of the matched permanent DSN only; decoded raw MIME at most 196608 bytes"
+          }
+        }
+      },
       "Receipt": {
         "type": "object",
         "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "predictor-outreach",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "description": "Predictor Agent outreach MCP and credential-local SMTP executor",
   "type": "module",
   "license": "UNLICENSED",
@@ -36,11 +36,14 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.30.0",
+    "imapflow": "1.7.6",
+    "mailparser": "3.9.17",
     "nodemailer": "9.0.6",
     "zod": "4.4.3"
   },
   "devDependencies": {
     "@types/node": "24.13.3",
+    "@types/mailparser": "3.4.6",
     "@types/nodemailer": "8.0.1",
     "typescript": "6.0.3",
     "vitest": "4.1.11"