proton-mail-bridge-client 2.8.5 → 2.9.0

package/dist/index.js

@@ -8,8 +8,9 @@ import { isAbsolute, join, resolve as pathResolve, sep as pathSep } from "node:p
 import { fileURLToPath } from "node:url";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { CallToolRequestSchema, ErrorCode, ListToolsRequestSchema, ListResourcesRequestSchema, McpError, ReadResourceRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { CallToolRequestSchema, ErrorCode, GetPromptRequestSchema, ListPromptsRequestSchema, ListToolsRequestSchema, ListResourcesRequestSchema, McpError, ReadResourceRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
 import { isMainModule } from "./is-main.js";
+import { findMailPrompt, MAIL_PROMPTS } from "./utils/mail-prompts.js";
 import { AnalyticsService } from "./services/analytics-service.js";
 import { applyBodyEdits, draftSyncFingerprint } from "./services/draft-store-service.js";
 import { BULK_ITEM_TIMEOUT_MS, describeImapError, isLikelyAuthenticationError, isLikelyConnectionError, isLikelyTlsMismatchError, UID_VALIDITY_MISMATCH_ERROR } from "./services/simple-imap-service.js";
@@ -3641,10 +3642,31 @@ function validatePortEnv(name) {
         throw new Error(`${name} must be an integer between 1 and 65535, got: ${raw}`);
     }
 }
-function parseAllowedActionsEnv(name) {
+// One switch for the safety flags. A mode only sets the starting point: any of the individual variables that is set
+// explicitly still wins, so a mode never takes a setting away that someone chose on purpose.
+const SAFETY_MODES = {
+    // Browse and search only: nothing is written, nothing is sent.
+    "read-only": { readOnly: true },
+    // Drafts and flags; no sending, and no moving, archiving or deleting.
+    drafts: { allowSend: false, allowedActions: ["mark_read", "mark_unread", "star", "unstar"] },
+    // Everything except permanent deletion, and every send or delete asks for confirmed:true.
+    assisted: { confirmDestructive: true, allowedActions: ALL_EMAIL_ACTIONS.filter((action) => action !== "delete") },
+    full: {},
+};
+function parseSafetyModeEnv(name) {
+    const raw = process.env[name]?.trim().toLowerCase();
+    if (!raw) {
+        return undefined;
+    }
+    if (Object.hasOwn(SAFETY_MODES, raw)) {
+        return raw;
+    }
+    throw new Error(`${name} must be one of: ${Object.keys(SAFETY_MODES).join(", ")} (got "${raw}").`);
+}
+function parseAllowedActionsEnv(name, fallback = ALL_EMAIL_ACTIONS) {
     const configured = parseListValues(process.env[name]);
     if (configured.length === 0) {
-        return [...ALL_EMAIL_ACTIONS];
+        return [...fallback];
     }
     const allowed = configured.filter((value) => ALL_EMAIL_ACTIONS.includes(value));
     if (allowed.length === 0) {
@@ -3756,14 +3778,16 @@ export function buildConfigFromEnv() {
     validatePortEnv("PROTONMAIL_IMAP_PORT");
     const imapPort = parseIntegerEnv("PROTONMAIL_IMAP_PORT", 1143, 1, 65_535);
     const debug = parseBooleanEnv("DEBUG", false);
-    const readOnly = parseBooleanEnv("PROTONMAIL_READ_ONLY", false);
-    const allowSend = parseBooleanEnv("PROTONMAIL_ALLOW_SEND", !readOnly);
+    const mode = parseSafetyModeEnv("PROTONMAIL_MODE");
+    const preset = mode ? SAFETY_MODES[mode] : {};
+    const readOnly = parseBooleanEnv("PROTONMAIL_READ_ONLY", preset.readOnly ?? false);
+    const allowSend = parseBooleanEnv("PROTONMAIL_ALLOW_SEND", preset.allowSend ?? !readOnly);
     const allowRemoteDraftSync = parseBooleanEnv("PROTONMAIL_ALLOW_REMOTE_DRAFT_SYNC", !readOnly);
     const autoSync = parseBooleanEnv("PROTONMAIL_AUTO_SYNC", true);
     const syncInterval = parseIntegerEnv("PROTONMAIL_SYNC_INTERVAL_MINUTES", 5, 1, 24 * 60);
     const idleWatchEnabled = parseBooleanEnv("PROTONMAIL_IDLE_WATCH", autoSync);
     const idleMaxSeconds = parseIntegerEnv("PROTONMAIL_IDLE_MAX_SECONDS", 30, 5, 300);
-    const confirmDestructive = parseBooleanEnv("PROTONMAIL_CONFIRM_DESTRUCTIVE", false);
+    const confirmDestructive = parseBooleanEnv("PROTONMAIL_CONFIRM_DESTRUCTIVE", preset.confirmDestructive ?? false);
     const allowEmptyFolder = parseBooleanEnv("PROTONMAIL_ALLOW_EMPTY_FOLDER", false);
     const restrictOutboundToSelf = parseBooleanEnv("PROTONMAIL_RESTRICT_OUTBOUND_TO_SELF", false);
     const allowFileDownloadDir = process.env.PROTONMAIL_ALLOW_FILE_DOWNLOAD_DIR?.trim() || undefined;
@@ -3808,10 +3832,11 @@ export function buildConfigFromEnv() {
         syncInterval,
         accounts,
         runtime: {
+            ...(mode ? { mode } : {}),
             readOnly,
             allowSend,
             allowRemoteDraftSync,
-            allowedActions: parseAllowedActionsEnv("PROTONMAIL_ALLOWED_ACTIONS"),
+            allowedActions: parseAllowedActionsEnv("PROTONMAIL_ALLOWED_ACTIONS", preset.allowedActions),
             startupSync: parseBooleanEnv("PROTONMAIL_STARTUP_SYNC", autoSync),
             // Comma-separated; Sent is included by default so pendingOn/digest/follow-up
             // candidates don't misreport threads that were already answered — IDLE still
@@ -4033,9 +4058,34 @@ export function createServer(config, options = {}) {
         capabilities: {
             tools: {},
             resources: {},
+            prompts: {},
         },
     });
     server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: listedTools() }));
+    server.setRequestHandler(ListPromptsRequestSchema, async () => ({
+        prompts: MAIL_PROMPTS.map(({ name, title, description, arguments: promptArguments }) => ({
+            name,
+            title,
+            description,
+            ...(promptArguments ? { arguments: promptArguments } : {}),
+        })),
+    }));
+    server.setRequestHandler(GetPromptRequestSchema, async (request) => {
+        const prompt = findMailPrompt(request.params.name);
+        if (!prompt) {
+            throw new McpError(ErrorCode.InvalidParams, `Unknown prompt "${request.params.name}". Available: ${MAIL_PROMPTS.map((entry) => entry.name).join(", ")}.`);
+        }
+        const provided = request.params.arguments ?? {};
+        for (const argument of prompt.arguments ?? []) {
+            if (argument.required && !String(provided[argument.name] ?? "").trim()) {
+                throw new McpError(ErrorCode.InvalidParams, `Prompt "${prompt.name}" needs the argument "${argument.name}": ${argument.description}`);
+            }
+        }
+        return {
+            description: prompt.description,
+            messages: [{ role: "user", content: { type: "text", text: prompt.render(provided) } }],
+        };
+    });
     server.setRequestHandler(ListResourcesRequestSchema, async (request) => {
         const cursor = request.params?.cursor ? Number.parseInt(request.params.cursor, 10) : 0;
         // Fan out across every configured account and prefix non-primary ids exactly as the