radmail-mcp 0.3.1

package/dist/src/engine/types.js

@@ -0,0 +1,52 @@
+// ─────────────────────────────────────────────────────────────────────────────
+// PORTED VERBATIM (pure, no-DB) from the RadMail main app:
+//   /Users/GreenLife/Documents/CODE/RadMail/src/server/commitments/types.ts
+// Recovered into radmail-mcp so the MCP sandbox runs the SAME deterministic
+// commitment enums as production. Do not diverge — keep byte-for-byte with source.
+// ─────────────────────────────────────────────────────────────────────────────
+// Commitment engine — shared types (Wave 7). The closed enums are load-bearing:
+// they drive the SLA table, the draft style, the send-disposition gate, and the
+// escalation tier. Keep them CLOSED — an unknown value coerces to a safe default.
+//
+// scope: RADMAIL_SCOPE_AUTONOMOUS_FOLLOWUP_2026_06_19.md §1.2, §2.1, §2.2.
+// ─── Direction (who owes the action) ──────────────────────────────────
+export const COMMITMENT_DIRECTIONS = ["owed_by_us", "owed_to_us"];
+// ─── Action type (CLOSED enum — the spine of every downstream decision) ─
+// send_deliverable | follow_up | contact_third_party | answer_question | other
+// Plus the scope's two HARD-STOP classes (payment/decision) carried so the
+// disposition gate can permanently refuse them (BEC defense).
+export const COMMITMENT_ACTION_TYPES = [
+    "send_deliverable",
+    "follow_up",
+    "contact_third_party",
+    "answer_question",
+    "payment",
+    "decision",
+    "other",
+];
+export function isCommitmentActionType(v) {
+    return COMMITMENT_ACTION_TYPES.includes(v);
+}
+/** Coerce an arbitrary LLM-returned action_type to the closed enum (unknown → 'other'). */
+export function coerceActionType(v) {
+    const s = String(v ?? "").toLowerCase().trim();
+    return isCommitmentActionType(s) ? s : "other";
+}
+// ─── State machine ────────────────────────────────────────────────────
+export const COMMITMENT_STATES = [
+    "detected",
+    "confirmed",
+    "needs_due_date",
+    "scheduled",
+    "drafted",
+    "sent",
+    "done",
+    "overdue",
+    "escalated",
+    "dismissed",
+    "snoozed",
+    "cancelled",
+];
+// ─── SLA basis — how the due date was determined ──────────────────────
+export const SLA_BASES = ["explicit", "relative", "default_by_type", "manual"];
+//# sourceMappingURL=types.js.map

package/dist/src/engine/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/engine/types.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,2DAA2D;AAC3D,4EAA4E;AAC5E,4EAA4E;AAC5E,mFAAmF;AACnF,gFAAgF;AAEhF,gFAAgF;AAChF,gFAAgF;AAChF,kFAAkF;AAClF,EAAE;AACF,2EAA2E;AAE3E,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,YAAY,EAAE,YAAY,CAAU,CAAC;AAG3E,2EAA2E;AAC3E,+EAA+E;AAC/E,2EAA2E;AAC3E,8DAA8D;AAC9D,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,kBAAkB;IAClB,WAAW;IACX,qBAAqB;IACrB,iBAAiB;IACjB,SAAS;IACT,UAAU;IACV,OAAO;CACC,CAAC;AAGX,MAAM,UAAU,sBAAsB,CAAC,CAAS;IAC9C,OAAQ,uBAA6C,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACjD,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,UAAU;IACV,WAAW;IACX,gBAAgB;IAChB,WAAW;IACX,SAAS;IACT,MAAM;IACN,MAAM;IACN,SAAS;IACT,WAAW;IACX,WAAW;IACX,SAAS;IACT,WAAW;CACH,CAAC;AAGX,yEAAyE;AACzE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,CAAU,CAAC"}

package/dist/src/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/src/index.js

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+// Local stdio entry — `npx radmail-mcp` or `node dist/index.js`. Speaks the MCP
+// stdio transport so a desktop agent host (Claude Desktop, etc.) can run RadMail
+// locally. The Vercel deployment uses api/mcp.ts (streamable-HTTP) instead.
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { createServer } from "./server.js";
+async function main() {
+    const server = createServer();
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    // eslint-disable-next-line no-console
+    console.error("radmail-mcp (sandbox engine) running on stdio");
+}
+main().catch((err) => {
+    // eslint-disable-next-line no-console
+    console.error("radmail-mcp failed to start:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AACA,gFAAgF;AAChF,iFAAiF;AACjF,4EAA4E;AAE5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,sCAAsC;IACtC,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;AACjE,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,sCAAsC;IACtC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/src/lib/commitment.d.ts

@@ -0,0 +1,24 @@
+/** Resolve a relative due phrase ("by Thursday", "EOD", "tomorrow", "in 3 days",
+ *  an explicit date) to an absolute YYYY-MM-DD, relative to `now`. null if none. */
+export declare function resolveDuePhrase(text: string, now: Date): {
+    phrase: string;
+    date: string;
+} | null;
+export interface ExtractedCommitmentLite {
+    /** verbatim sentence from the body — TAINTED at the call site. */
+    what: string;
+    owedTo: string;
+    owedBy: string | null;
+    status: "open" | "due" | "overdue";
+    duePhrase: string | null;
+    /** who is being asked: 'us' (we owe a deliverable/answer) vs 'them'. */
+    direction: "owed_by_us" | "owed_to_us";
+    isQuestion: boolean;
+    hasAsk: boolean;
+}
+/** Pull the single most-salient commitment out of a message. null if none found. */
+export declare function extractCommitment(msg: {
+    from: string;
+    subject?: string | null;
+    body: string;
+}, now: Date): ExtractedCommitmentLite | null;

package/dist/src/lib/commitment.js

@@ -0,0 +1,123 @@
+// Lightweight commitment + due-date extraction for the sandbox engine.
+//
+// This is a HEURISTIC extractor (the sandbox is heuristic by design — the
+// production "99%" engine is launch-gated). It pulls a single most-salient
+// commitment sentence out of a message body and resolves a relative due phrase
+// to an absolute YYYY-MM-DD, so the importance scorer + the firewall have a
+// deterministic deadline to reason over.
+//
+// EVERYTHING here reads an attacker-controllable email body — its outputs are
+// tainted by the caller (see lib/taint.ts). It performs NO action; it only
+// extracts text + a date.
+const DAY_MS = 24 * 60 * 60 * 1000;
+const WEEKDAYS = ["sunday", "monday", "tuesday", "wednesday", "thursday", "friday", "saturday"];
+function iso(d) {
+    return d.toISOString().slice(0, 10);
+}
+/** Resolve a relative due phrase ("by Thursday", "EOD", "tomorrow", "in 3 days",
+ *  an explicit date) to an absolute YYYY-MM-DD, relative to `now`. null if none. */
+export function resolveDuePhrase(text, now) {
+    const t = text.toLowerCase();
+    // Explicit ISO / numeric dates first.
+    const isoM = t.match(/\b(\d{4}-\d{2}-\d{2})\b/);
+    if (isoM) {
+        const d = new Date(isoM[1]);
+        if (!isNaN(d.getTime()))
+            return { phrase: isoM[1], date: iso(d) };
+    }
+    const mdM = t.match(/\b(\d{1,2})\/(\d{1,2})(?:\/(\d{2,4}))?\b/);
+    if (mdM) {
+        const month = parseInt(mdM[1], 10) - 1;
+        const day = parseInt(mdM[2], 10);
+        let year = mdM[3] ? parseInt(mdM[3], 10) : now.getUTCFullYear();
+        if (year < 100)
+            year += 2000;
+        const d = new Date(Date.UTC(year, month, day));
+        if (!isNaN(d.getTime()))
+            return { phrase: mdM[0], date: iso(d) };
+    }
+    if (/\b(today|eod|end of day|cob|by close of business)\b/.test(t)) {
+        return { phrase: "today", date: iso(now) };
+    }
+    if (/\btomorrow\b/.test(t)) {
+        return { phrase: "tomorrow", date: iso(new Date(now.getTime() + DAY_MS)) };
+    }
+    const inDays = t.match(/\bin\s+(\d{1,2})\s+(day|business day|week)s?\b/);
+    if (inDays) {
+        const n = parseInt(inDays[1], 10);
+        const mult = inDays[2].startsWith("week") ? 7 : 1;
+        return { phrase: inDays[0], date: iso(new Date(now.getTime() + n * mult * DAY_MS)) };
+    }
+    if (/\bnext week\b/.test(t)) {
+        return { phrase: "next week", date: iso(new Date(now.getTime() + 7 * DAY_MS)) };
+    }
+    if (/\bend of (the )?week\b/.test(t)) {
+        // Friday of the current week.
+        const dow = now.getUTCDay();
+        const delta = (5 - dow + 7) % 7;
+        return { phrase: "end of week", date: iso(new Date(now.getTime() + delta * DAY_MS)) };
+    }
+    // Named weekday → the NEXT occurrence (today counts only if "by today" matched above).
+    for (let i = 0; i < WEEKDAYS.length; i++) {
+        const re = new RegExp(`\\b(?:by|before|on|this|next|due)?\\s*${WEEKDAYS[i]}\\b`);
+        if (re.test(t)) {
+            const dow = now.getUTCDay();
+            let delta = (i - dow + 7) % 7;
+            if (delta === 0)
+                delta = 7; // "Thursday" said on a Thursday = next Thursday
+            return { phrase: WEEKDAYS[i], date: iso(new Date(now.getTime() + delta * DAY_MS)) };
+        }
+    }
+    return null;
+}
+const ASK_RE = /\b(can you|could you|please|would you|need|let me know|send (?:me|over|us)|get (?:me|us|back)|follow up|circle back|by\s|deadline|due|confirm|review|provide|share|update me|waiting on|expect)\b/i;
+function splitSentences(body) {
+    return body
+        .replace(/\s+/g, " ")
+        .split(/(?<=[.!?])\s+|\n+/)
+        .map((s) => s.trim())
+        .filter(Boolean);
+}
+/** Pull the single most-salient commitment out of a message. null if none found. */
+export function extractCommitment(msg, now) {
+    const sentences = splitSentences(msg.body);
+    if (sentences.length === 0)
+        return null;
+    // Score each sentence: a question or an ask-verb wins; a due phrase boosts.
+    let best = null;
+    for (const s of sentences) {
+        let score = 0;
+        const isQ = s.includes("?");
+        if (isQ)
+            score += 3;
+        if (ASK_RE.test(s))
+            score += 2;
+        if (resolveDuePhrase(s, now))
+            score += 2;
+        if (score > 0 && (!best || score > best.score))
+            best = { s, score };
+    }
+    if (!best)
+        return null;
+    const what = best.s.length > 200 ? best.s.slice(0, 197) + "…" : best.s;
+    const due = resolveDuePhrase(best.s, now) ?? resolveDuePhrase(msg.body, now);
+    let status = "open";
+    if (due) {
+        const days = Math.floor((new Date(due.date).getTime() - now.getTime()) / DAY_MS);
+        status = days < 0 ? "overdue" : days <= 1 ? "due" : "open";
+    }
+    // Direction: an inbound asking us to do/send/answer = we owe them (owed_by_us);
+    // an inbound saying "I'll send you X" = they owe us (owed_to_us).
+    const owedToUs = /\b(i'?ll|we'?ll|i will|we will|i'?m going to|let me get|i can send|on my way)\b/i.test(best.s);
+    return {
+        what,
+        owedTo: msg.from,
+        owedBy: due?.date ?? null,
+        status,
+        duePhrase: due?.phrase ?? null,
+        direction: owedToUs ? "owed_to_us" : "owed_by_us",
+        isQuestion: best.s.includes("?"),
+        hasAsk: ASK_RE.test(best.s),
+    };
+}
+//# sourceMappingURL=commitment.js.map

package/dist/src/lib/commitment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commitment.js","sourceRoot":"","sources":["../../../src/lib/commitment.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,+EAA+E;AAC/E,4EAA4E;AAC5E,yCAAyC;AACzC,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,0BAA0B;AAE1B,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AAEhG,SAAS,GAAG,CAAC,CAAO;IAClB,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;oFACoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,GAAS;IACtD,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAE7B,sCAAsC;IACtC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAChD,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAChE,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QAChE,IAAI,IAAI,GAAG,GAAG;YAAE,IAAI,IAAI,IAAI,CAAC;QAC7B,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,CAAC;IAED,IAAI,qDAAqD,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACzE,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,8BAA8B;QAC9B,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IACxF,CAAC;IAED,uFAAuF;IACvF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,yCAAyC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACjF,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;YAC5B,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,KAAK,KAAK,CAAC;gBAAE,KAAK,GAAG,CAAC,CAAC,CAAC,gDAAgD;YAC5E,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;QACtF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,MAAM,GACV,oMAAoM,CAAC;AAEvM,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI;SACR,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,KAAK,CAAC,mBAAmB,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAeD,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAC/B,GAA4D,EAC5D,GAAS;IAET,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAExC,4EAA4E;IAC5E,IAAI,IAAI,GAAwC,IAAI,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,GAAG;YAAE,KAAK,IAAI,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QAC/B,IAAI,gBAAgB,CAAC,CAAC,EAAE,GAAG,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC7E,IAAI,MAAM,GAA+B,MAAM,CAAC;IAChD,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;QACjF,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7D,CAAC;IAED,gFAAgF;IAChF,kEAAkE;IAClE,MAAM,QAAQ,GAAG,kFAAkF,CAAC,IAAI,CACtG,IAAI,CAAC,CAAC,CACP,CAAC;IACF,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,GAAG,CAAC,IAAI;QAChB,MAAM,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;QACzB,MAAM;QACN,SAAS,EAAE,GAAG,EAAE,MAAM,IAAI,IAAI;QAC9B,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY;QACjD,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAChC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;KAC5B,CAAC;AACJ,CAAC"}

package/dist/src/lib/connected.d.ts

@@ -0,0 +1,112 @@
+export declare const DEFAULT_API_URL = "https://app.radmail.ai";
+export declare const API_KEYS_URL = "https://app.radmail.ai/settings/api-keys";
+export interface ConnectedConfig {
+    apiKey: string;
+    apiUrl: string;
+}
+/** Connected mode is ON iff RADMAIL_API_KEY is set. RADMAIL_API_URL overrides the host. */
+export declare function getConnectedConfig(env?: NodeJS.ProcessEnv): ConnectedConfig | null;
+export type ConnectedErrorKind = "auth" | "entitlement" | "timeout" | "network" | "api";
+/** A typed, honest, key-free failure. The message is safe to show the agent verbatim. */
+export declare class ConnectedApiError extends Error {
+    readonly kind: ConnectedErrorKind;
+    readonly status: number | null;
+    constructor(kind: ConnectedErrorKind, message: string, status?: number | null);
+}
+type FetchLike = (url: string, init: RequestInit) => Promise<Response>;
+/** Test-only: inject a mock fetch (pass null to restore global fetch). */
+export declare function __setFetchForTests(f: FetchLike | null): void;
+/**
+ * GET a v1 API path with query params. Throws ConnectedApiError on any failure —
+ * never returns partial/fabricated data. Error messages never contain the key.
+ */
+export declare function apiGet(path: string, params: Record<string, string | number | undefined>, cfg: ConnectedConfig): Promise<Record<string, unknown>>;
+/** One hit from GET /api/v1/search. Fields are UNTRUSTED real-inbox content until tainted. */
+export interface RemoteSearchHit {
+    id?: string;
+    receivedAt?: string;
+    from?: string;
+    fromName?: string | null;
+    subject?: string | null;
+    classification?: string | null;
+    classificationSource?: string | null;
+    isSpam?: boolean;
+    needsOwnerEyes?: boolean;
+    counterparty?: string | null;
+    threadId?: string | null;
+    snippet?: string | null;
+    matchedIn?: string | string[] | null;
+}
+export interface RemotePagination {
+    limit?: number;
+    offset?: number;
+    total?: number;
+    hasMore?: boolean;
+}
+export interface RemoteSearchParams {
+    query: string;
+    limit?: number;
+    from?: string;
+    after?: string;
+    before?: string;
+}
+/** GET /api/v1/search — search the user's real inbox. */
+export declare function searchInbox(p: RemoteSearchParams, cfg: ConnectedConfig): Promise<{
+    hits: RemoteSearchHit[];
+    pagination: RemotePagination | null;
+}>;
+/** Full email detail from GET /api/v1/emails/{id} — includes textBody. */
+export interface RemoteEmailDetail extends RemoteSearchHit {
+    textBody?: string | null;
+}
+/** GET /api/v1/emails/{id} — fetch one full email (incl. textBody). */
+export declare function getEmail(id: string, cfg: ConnectedConfig): Promise<RemoteEmailDetail | null>;
+/** Shared pagination params for the list endpoints. */
+export interface RemotePageParams {
+    limit?: number;
+    offset?: number;
+}
+/** One item from GET /api/v1/right-now — the user's REAL "can't-miss" lane.
+ *  Fields are UNTRUSTED real-inbox content until tainted at the tool boundary. */
+export interface RemoteRightNowItem {
+    id?: string;
+    receivedAt?: string;
+    from?: string;
+    fromName?: string | null;
+    subject?: string | null;
+    classification?: string | null;
+    classificationSource?: string | null;
+    isSpam?: boolean;
+    needsOwnerEyes?: boolean;
+    counterparty?: string | null;
+    threadId?: string | null;
+    importance?: number;
+    urgency?: number;
+    band?: string;
+    reasons?: string[];
+}
+/** GET /api/v1/right-now — the ranked Right Now lane of the user's real inbox. */
+export declare function getRightNow(p: RemotePageParams, cfg: ConnectedConfig): Promise<{
+    items: RemoteRightNowItem[];
+    pagination: RemotePagination | null;
+}>;
+/** One commitment from GET /api/v1/commitments. party / action / duePhrase are
+ *  UNTRUSTED real-mail-derived text until tainted at the tool boundary. */
+export interface RemoteCommitment {
+    id?: string;
+    direction?: "owed_by_us" | "owed_to_us" | string;
+    party?: string | null;
+    action?: string | null;
+    actionType?: string | null;
+    dueDate?: string | null;
+    duePhrase?: string | null;
+    state?: string | null;
+    confidence?: number | null;
+    counterpartyEmail?: string | null;
+}
+/** GET /api/v1/commitments — the user's real open promises (both directions). */
+export declare function getCommitments(p: RemotePageParams, cfg: ConnectedConfig): Promise<{
+    items: RemoteCommitment[];
+    pagination: RemotePagination | null;
+}>;
+export {};

package/dist/src/lib/connected.js

@@ -0,0 +1,150 @@
+// Connected-mode client — the READ-ONLY bridge to the user's REAL RadMail inbox
+// (the app.radmail.ai v1 REST API, Bearer `tmk_...` API key).
+//
+// Presence of RADMAIL_API_KEY switches `search` / `list_right_now` /
+// `list_commitments` (when `messages` is omitted) and `read_email` from the
+// in-memory sandbox to the live inbox. Deliberately tiny:
+//
+//   · global fetch, 10s timeout, at most ONE retry (plain network errors only —
+//     never on a timeout, never on an HTTP status)
+//   · the API key is NEVER logged, echoed, or included in any response/error
+//   · fail-closed: any auth / entitlement / timeout / parse problem surfaces as
+//     a typed ConnectedApiError — results are never fabricated
+//   · READ-ONLY by construction: this client only issues GETs. There is no
+//     connected send / draft / mutate surface, so the BEC hard-stop contract
+//     (money / changed-banking / first-contact / decision / injection =
+//     human-only forever) is preserved exactly as in the sandbox.
+//
+// Taint discipline lives at the tool boundary (src/tools.ts): every field this
+// client returns that derives from real email content is wrapped with taint()
+// before it reaches the consuming agent.
+export const DEFAULT_API_URL = "https://app.radmail.ai";
+export const API_KEYS_URL = "https://app.radmail.ai/settings/api-keys";
+const TIMEOUT_MS = 10_000;
+/** Connected mode is ON iff RADMAIL_API_KEY is set. RADMAIL_API_URL overrides the host. */
+export function getConnectedConfig(env = process.env) {
+    const apiKey = env.RADMAIL_API_KEY?.trim();
+    if (!apiKey)
+        return null;
+    const apiUrl = (env.RADMAIL_API_URL?.trim() || DEFAULT_API_URL).replace(/\/+$/, "");
+    return { apiKey, apiUrl };
+}
+/** A typed, honest, key-free failure. The message is safe to show the agent verbatim. */
+export class ConnectedApiError extends Error {
+    kind;
+    status;
+    constructor(kind, message, status = null) {
+        super(message);
+        this.name = "ConnectedApiError";
+        this.kind = kind;
+        this.status = status;
+    }
+}
+let fetchImpl = (url, init) => globalThis.fetch(url, init);
+/** Test-only: inject a mock fetch (pass null to restore global fetch). */
+export function __setFetchForTests(f) {
+    fetchImpl = f ?? ((url, init) => globalThis.fetch(url, init));
+}
+function isAbortError(e) {
+    return e instanceof Error && e.name === "AbortError";
+}
+async function fetchOnce(url, apiKey) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), TIMEOUT_MS);
+    try {
+        return await fetchImpl(url, {
+            method: "GET",
+            headers: { Authorization: `Bearer ${apiKey}`, Accept: "application/json" },
+            signal: ctrl.signal,
+        });
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * GET a v1 API path with query params. Throws ConnectedApiError on any failure —
+ * never returns partial/fabricated data. Error messages never contain the key.
+ */
+export async function apiGet(path, params, cfg) {
+    const url = new URL(`${cfg.apiUrl}${path}`);
+    for (const [k, v] of Object.entries(params)) {
+        if (v !== undefined && v !== "")
+            url.searchParams.set(k, String(v));
+    }
+    const timeoutError = () => new ConnectedApiError("timeout", `The RadMail API did not respond within ${TIMEOUT_MS / 1000}s (GET ${path}). ` +
+        `Fail-closed: no results. Check connectivity to ${cfg.apiUrl} and retry.`);
+    let res;
+    try {
+        res = await fetchOnce(url.toString(), cfg.apiKey);
+    }
+    catch (e) {
+        if (isAbortError(e))
+            throw timeoutError();
+        // One retry, network errors only.
+        try {
+            res = await fetchOnce(url.toString(), cfg.apiKey);
+        }
+        catch (e2) {
+            if (isAbortError(e2))
+                throw timeoutError();
+            const detail = e2 instanceof Error ? e2.message : String(e2);
+            throw new ConnectedApiError("network", `Could not reach the RadMail API at ${cfg.apiUrl} (${detail}). Fail-closed: no results.`);
+        }
+    }
+    if (res.status === 401) {
+        throw new ConnectedApiError("auth", "RadMail API key rejected (401): the key is invalid, revoked, or mistyped. " +
+            `Check the RADMAIL_API_KEY env var (keys start with tmk_) — manage keys at ${API_KEYS_URL}. ` +
+            "Fail-closed: no results.", 401);
+    }
+    if (res.status === 403) {
+        throw new ConnectedApiError("entitlement", "RadMail API key not entitled (403): the key is valid but the account's plan or the key's scope " +
+            `does not allow this operation. Review the plan/key at ${API_KEYS_URL}. Fail-closed: no results.`, 403);
+    }
+    if (!res.ok) {
+        throw new ConnectedApiError("api", `RadMail API error (HTTP ${res.status}) on GET ${path}. Fail-closed: no results fabricated. Retry, or contact security@radmail.ai if it persists.`, res.status);
+    }
+    let body;
+    try {
+        body = await res.json();
+    }
+    catch {
+        throw new ConnectedApiError("api", `RadMail API returned a non-JSON response on GET ${path} (HTTP ${res.status}). Fail-closed: no results.`, res.status);
+    }
+    const obj = body;
+    if (!obj || obj.ok !== true) {
+        const apiMsg = obj && typeof obj.error === "string" ? obj.error : "unknown error";
+        throw new ConnectedApiError("api", `RadMail API reported an error on GET ${path}: ${apiMsg}. Fail-closed: no results fabricated.`, res.status);
+    }
+    return obj;
+}
+/** GET /api/v1/search — search the user's real inbox. */
+export async function searchInbox(p, cfg) {
+    const body = await apiGet("/api/v1/search", { q: p.query, limit: p.limit, from: p.from, after: p.after, before: p.before }, cfg);
+    return {
+        hits: Array.isArray(body.data) ? body.data : [],
+        pagination: body.pagination ?? null,
+    };
+}
+/** GET /api/v1/emails/{id} — fetch one full email (incl. textBody). */
+export async function getEmail(id, cfg) {
+    const body = await apiGet(`/api/v1/emails/${encodeURIComponent(id)}`, {}, cfg);
+    return body.data ?? null;
+}
+/** GET /api/v1/right-now — the ranked Right Now lane of the user's real inbox. */
+export async function getRightNow(p, cfg) {
+    const body = await apiGet("/api/v1/right-now", { limit: p.limit, offset: p.offset }, cfg);
+    return {
+        items: Array.isArray(body.data) ? body.data : [],
+        pagination: body.pagination ?? null,
+    };
+}
+/** GET /api/v1/commitments — the user's real open promises (both directions). */
+export async function getCommitments(p, cfg) {
+    const body = await apiGet("/api/v1/commitments", { limit: p.limit, offset: p.offset }, cfg);
+    return {
+        items: Array.isArray(body.data) ? body.data : [],
+        pagination: body.pagination ?? null,
+    };
+}
+//# sourceMappingURL=connected.js.map

package/dist/src/lib/connected.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connected.js","sourceRoot":"","sources":["../../../src/lib/connected.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,8DAA8D;AAC9D,EAAE;AACF,qEAAqE;AACrE,4EAA4E;AAC5E,0DAA0D;AAC1D,EAAE;AACF,gFAAgF;AAChF,mDAAmD;AACnD,6EAA6E;AAC7E,gFAAgF;AAChF,+DAA+D;AAC/D,2EAA2E;AAC3E,6EAA6E;AAC7E,wEAAwE;AACxE,kEAAkE;AAClE,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,yCAAyC;AAEzC,MAAM,CAAC,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACxD,MAAM,CAAC,MAAM,YAAY,GAAG,0CAA0C,CAAC;AACvE,MAAM,UAAU,GAAG,MAAM,CAAC;AAO1B,2FAA2F;AAC3F,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,eAAe,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAID,yFAAyF;AACzF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAqB;IACzB,MAAM,CAAgB;IAC/B,YAAY,IAAwB,EAAE,OAAe,EAAE,SAAwB,IAAI;QACjF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAID,IAAI,SAAS,GAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAEtE,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAAC,CAAmB;IACpD,SAAS,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,CAAU;IAC9B,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,MAAc;IAClD,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,GAAG,EAAE;YAC1B,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC1E,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAY,EACZ,MAAmD,EACnD,GAAoB;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC;IAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,IAAI,iBAAiB,CACnB,SAAS,EACT,0CAA0C,UAAU,GAAG,IAAI,UAAU,IAAI,KAAK;QAC5E,kDAAkD,GAAG,CAAC,MAAM,aAAa,CAC5E,CAAC;IAEJ,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,YAAY,CAAC,CAAC,CAAC;YAAE,MAAM,YAAY,EAAE,CAAC;QAC1C,kCAAkC;QAClC,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,EAAE,EAAE,CAAC;YACZ,IAAI,YAAY,CAAC,EAAE,CAAC;gBAAE,MAAM,YAAY,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,EAAE,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7D,MAAM,IAAI,iBAAiB,CACzB,SAAS,EACT,sCAAsC,GAAG,CAAC,MAAM,KAAK,MAAM,6BAA6B,CACzF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,iBAAiB,CACzB,MAAM,EACN,4EAA4E;YAC1E,6EAA6E,YAAY,IAAI;YAC7F,0BAA0B,EAC5B,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,iBAAiB,CACzB,aAAa,EACb,iGAAiG;YAC/F,yDAAyD,YAAY,4BAA4B,EACnG,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,iBAAiB,CACzB,KAAK,EACL,2BAA2B,GAAG,CAAC,MAAM,YAAY,IAAI,6FAA6F,EAClJ,GAAG,CAAC,MAAM,CACX,CAAC;IACJ,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CACzB,KAAK,EACL,mDAAmD,IAAI,UAAU,GAAG,CAAC,MAAM,6BAA6B,EACxG,GAAG,CAAC,MAAM,CACX,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAsC,CAAC;IACnD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC;QAClF,MAAM,IAAI,iBAAiB,CACzB,KAAK,EACL,wCAAwC,IAAI,KAAK,MAAM,uCAAuC,EAC9F,GAAG,CAAC,MAAM,CACX,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAoCD,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,CAAqB,EACrB,GAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,MAAM,CACvB,gBAAgB,EAChB,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAC9E,GAAG,CACJ,CAAC;IACF,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,IAA0B,CAAC,CAAC,CAAC,EAAE;QACtE,UAAU,EAAG,IAAI,CAAC,UAA2C,IAAI,IAAI;KACtE,CAAC;AACJ,CAAC;AAOD,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,EAAU,EAAE,GAAoB;IAC7D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,kBAAkB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/E,OAAQ,IAAI,CAAC,IAAsC,IAAI,IAAI,CAAC;AAC9D,CAAC;AA4BD,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,CAAmB,EACnB,GAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1F,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,IAA6B,CAAC,CAAC,CAAC,EAAE;QAC1E,UAAU,EAAG,IAAI,CAAC,UAA2C,IAAI,IAAI;KACtE,CAAC;AACJ,CAAC;AAiBD,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,CAAmB,EACnB,GAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5F,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,IAA2B,CAAC,CAAC,CAAC,EAAE;QACxE,UAAU,EAAG,IAAI,CAAC,UAA2C,IAAI,IAAI;KACtE,CAAC;AACJ,CAAC"}

package/dist/src/lib/demand-sink.d.ts

@@ -0,0 +1,23 @@
+export declare const DEFAULT_SINK_URL = "https://app.radmail.ai/api/mcp-demand";
+export type DemandEventType = "call" | "need" | "capability";
+export interface DemandEvent {
+    event: DemandEventType;
+    tool?: string;
+    agentId?: string;
+    note?: string;
+}
+type FetchLike = (url: string, init: RequestInit) => Promise<Response>;
+/** Test-only: inject a mock fetch (pass null to restore global fetch). */
+export declare function __setDemandFetchForTests(f: FetchLike | null): void;
+/** Telemetry is ON unless RADMAIL_TELEMETRY=off (case-insensitive). */
+export declare function telemetryEnabled(env?: NodeJS.ProcessEnv): boolean;
+/** The safe api-key prefix (`tmk_live_` + 4 chars) — or null. NEVER the key. */
+export declare function safeKeyPrefix(env?: NodeJS.ProcessEnv): string | null;
+/**
+ * Fire-and-forget: mirror one demand event to the durable sink. Returns void
+ * immediately — the POST runs as a detached promise with a 3s abort and every
+ * failure (network, HTTP status, sync throw) swallowed. Source is
+ * `sandbox-package` (zero-auth sandbox engine) or `package` (connected mode).
+ */
+export declare function emitDemandEvent(ev: DemandEvent, env?: NodeJS.ProcessEnv): void;
+export {};

package/dist/src/lib/demand-sink.js

@@ -0,0 +1,87 @@
+// Durable demand-signal emitter — mirrors each in-memory learning record
+// (src/lib/learning.ts) to RadMail's public sink (POST /api/mcp-demand) so
+// demand survives cold starts and the roadmap can actually see it.
+//
+// CONTRACT (telemetry must never break a tool call):
+//   · fire-and-forget — a detached promise; the hot path never awaits it
+//   · 3s timeout, ALL errors swallowed silently (offline, DNS, 4xx/5xx, throw)
+//   · OPT-OUT: RADMAIL_TELEMETRY=off disables it entirely
+//   · WHAT'S SENT: tool name, event type ('call' | 'need' | 'capability'),
+//     the need/capability text the agent explicitly submitted, optional agent
+//     id — call STRUCTURE only.
+//   · WHAT'S NEVER SENT: email content, message batches, queries, results —
+//     and NEVER the API key. In connected mode we transmit only the safe
+//     display prefix (`tmk_live_` + first 4 chars of the random part) so the
+//     sink can distinguish connected-mode adoption; the key itself never
+//     leaves the process.
+import { getConnectedConfig } from "./connected.js";
+export const DEFAULT_SINK_URL = "https://app.radmail.ai/api/mcp-demand";
+const TIMEOUT_MS = 3_000;
+// Server-side caps (see radmail src/lib/mcp-demand/validate.ts) — clamp here
+// too so an oversized note degrades to a truncated signal, not a silent 400.
+const TOOL_MAX = 60;
+const AGENT_ID_MAX = 80;
+const NOTE_MAX = 500;
+let fetchImpl = (url, init) => globalThis.fetch(url, init);
+/** Test-only: inject a mock fetch (pass null to restore global fetch). */
+export function __setDemandFetchForTests(f) {
+    fetchImpl = f ?? ((url, init) => globalThis.fetch(url, init));
+}
+/** Telemetry is ON unless RADMAIL_TELEMETRY=off (case-insensitive). */
+export function telemetryEnabled(env = process.env) {
+    return (env.RADMAIL_TELEMETRY ?? "").trim().toLowerCase() !== "off";
+}
+/** The safe api-key prefix (`tmk_live_` + 4 chars) — or null. NEVER the key. */
+export function safeKeyPrefix(env = process.env) {
+    const cfg = getConnectedConfig(env);
+    if (!cfg)
+        return null;
+    const m = /^(tmk_live_)([0-9a-f]{4})/i.exec(cfg.apiKey);
+    return m ? `${m[1]}${m[2]}` : null;
+}
+/**
+ * Fire-and-forget: mirror one demand event to the durable sink. Returns void
+ * immediately — the POST runs as a detached promise with a 3s abort and every
+ * failure (network, HTTP status, sync throw) swallowed. Source is
+ * `sandbox-package` (zero-auth sandbox engine) or `package` (connected mode).
+ */
+export function emitDemandEvent(ev, env = process.env) {
+    try {
+        if (!telemetryEnabled(env))
+            return;
+        const connected = getConnectedConfig(env) !== null;
+        const body = {
+            source: connected ? "package" : "sandbox-package",
+            event: ev.event,
+        };
+        if (ev.tool)
+            body.tool = ev.tool.slice(0, TOOL_MAX);
+        if (ev.agentId)
+            body.agent_id = ev.agentId.slice(0, AGENT_ID_MAX);
+        if (ev.note)
+            body.note = ev.note.slice(0, NOTE_MAX);
+        const headers = { "content-type": "application/json" };
+        if (connected) {
+            // Only ever the truncated display prefix — the server stores it as
+            // api_key_prefix. The real key is NEVER put on the wire by telemetry
+            // (the sink URL is env-overridable, so sending the key would leak it).
+            const prefix = safeKeyPrefix(env);
+            if (prefix)
+                headers.authorization = `Bearer ${prefix}`;
+        }
+        const url = env.RADMAIL_DEMAND_SINK_URL?.trim() || DEFAULT_SINK_URL;
+        // Detached promise — deliberately not awaited by any caller.
+        void fetchImpl(url, {
+            method: "POST",
+            headers,
+            body: JSON.stringify(body),
+            signal: AbortSignal.timeout(TIMEOUT_MS),
+        }).catch(() => {
+            /* telemetry is best-effort — silence, always */
+        });
+    }
+    catch {
+        /* even a sync throw (bad env, no fetch) must never reach a tool call */
+    }
+}
+//# sourceMappingURL=demand-sink.js.map

package/dist/src/lib/demand-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demand-sink.js","sourceRoot":"","sources":["../../../src/lib/demand-sink.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,2EAA2E;AAC3E,mEAAmE;AACnE,EAAE;AACF,qDAAqD;AACrD,yEAAyE;AACzE,+EAA+E;AAC/E,0DAA0D;AAC1D,2EAA2E;AAC3E,8EAA8E;AAC9E,gCAAgC;AAChC,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,yEAAyE;AACzE,0BAA0B;AAE1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,MAAM,CAAC,MAAM,gBAAgB,GAAG,uCAAuC,CAAC;AACxE,MAAM,UAAU,GAAG,KAAK,CAAC;AAEzB,6EAA6E;AAC7E,6EAA6E;AAC7E,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,QAAQ,GAAG,GAAG,CAAC;AAarB,IAAI,SAAS,GAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAEtE,0EAA0E;AAC1E,MAAM,UAAU,wBAAwB,CAAC,CAAmB;IAC1D,SAAS,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;AACtE,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,MAAyB,OAAO,CAAC,GAAG;IAChE,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,CAAC,GAAG,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxD,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,EAAe,EAAE,MAAyB,OAAO,CAAC,GAAG;IACnF,IAAI,CAAC;QACH,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC;YAAE,OAAO;QAEnC,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;QACnD,MAAM,IAAI,GAA2B;YACnC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB;YACjD,KAAK,EAAE,EAAE,CAAC,KAAK;SAChB,CAAC;QACF,IAAI,EAAE,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACpD,IAAI,EAAE,CAAC,OAAO;YAAE,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QAClE,IAAI,EAAE,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAEpD,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC/E,IAAI,SAAS,EAAE,CAAC;YACd,mEAAmE;YACnE,qEAAqE;YACrE,uEAAuE;YACvE,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,MAAM;gBAAE,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,EAAE,CAAC;QACzD,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,IAAI,gBAAgB,CAAC;QAEpE,6DAA6D;QAC7D,KAAK,SAAS,CAAC,GAAG,EAAE;YAClB,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;SACxC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,gDAAgD;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;AACH,CAAC"}