surface-cli 0.3.3 → 0.3.9

package/dist/lib/compose-attachments.js

@@ -0,0 +1,138 @@
+import { Buffer } from "node:buffer";
+import { readFileSync, statSync } from "node:fs";
+import { homedir } from "node:os";
+import { basename, extname, join, resolve } from "node:path";
+import { SurfaceError } from "./errors.js";
+const MIME_TYPES_BY_EXTENSION = {
+    ".csv": "text/csv",
+    ".gif": "image/gif",
+    ".htm": "text/html",
+    ".html": "text/html",
+    ".ics": "text/calendar",
+    ".jpeg": "image/jpeg",
+    ".jpg": "image/jpeg",
+    ".json": "application/json",
+    ".pdf": "application/pdf",
+    ".png": "image/png",
+    ".text": "text/plain",
+    ".txt": "text/plain",
+};
+function expandUserPath(inputPath) {
+    const trimmed = inputPath.trim();
+    if (trimmed === "~") {
+        return homedir();
+    }
+    if (trimmed.startsWith("~/")) {
+        return join(homedir(), trimmed.slice(2));
+    }
+    return trimmed;
+}
+function mimeTypeForPath(path) {
+    return MIME_TYPES_BY_EXTENSION[extname(path).toLowerCase()] ?? "application/octet-stream";
+}
+function resolveLocalComposeAttachment(inputPath) {
+    if (!inputPath.trim()) {
+        throw new SurfaceError("invalid_argument", "Attachment path must be non-empty.");
+    }
+    const resolvedPath = resolve(expandUserPath(inputPath));
+    let stats;
+    try {
+        stats = statSync(resolvedPath);
+    }
+    catch {
+        throw new SurfaceError("invalid_argument", `Attachment '${inputPath}' was not found.`);
+    }
+    if (!stats.isFile()) {
+        throw new SurfaceError("invalid_argument", `Attachment '${inputPath}' is not a regular file.`);
+    }
+    const content = readFileSync(resolvedPath);
+    const filename = basename(resolvedPath).trim() || "attachment";
+    return {
+        path: resolvedPath,
+        filename,
+        mime_type: mimeTypeForPath(resolvedPath),
+        size_bytes: content.length,
+        content_base64: content.toString("base64"),
+    };
+}
+export function resolveLocalComposeAttachments(paths) {
+    return (paths ?? []).map(resolveLocalComposeAttachment);
+}
+export function composeAttachmentMetas(attachments) {
+    return (attachments ?? []).map((attachment) => ({
+        filename: attachment.filename,
+        mime_type: attachment.mime_type,
+        size_bytes: attachment.size_bytes,
+    }));
+}
+function sanitizeHeaderValue(value) {
+    return value.replace(/[\r\n]+/g, " ").trim();
+}
+function sanitizeMimeType(value) {
+    const normalized = value.trim();
+    return /^[A-Za-z0-9][A-Za-z0-9.+-]*\/[A-Za-z0-9][A-Za-z0-9.+-]*$/u.test(normalized)
+        ? normalized
+        : "application/octet-stream";
+}
+function sanitizeMimeParameter(value) {
+    const normalized = sanitizeHeaderValue(value).replace(/[\\"]/g, "_");
+    return normalized || "attachment";
+}
+function wrapBase64(value) {
+    return value.match(/.{1,76}/gu)?.join("\r\n") ?? "";
+}
+function makeMimeBoundary() {
+    return `surface-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`;
+}
+export function encodeRawMimeBase64Url(mime) {
+    return Buffer.from(mime, "utf8").toString("base64url");
+}
+export function rfc2822Date(value = new Date()) {
+    return value.toUTCString().replace("GMT", "+0000");
+}
+export function buildRawMimeMessage(input) {
+    const attachments = input.attachments ?? [];
+    const includeBccHeader = input.includeBccHeader ?? true;
+    const headers = [
+        `From: ${sanitizeHeaderValue(input.from)}`,
+        ...(input.to.length > 0 ? [`To: ${input.to.map(sanitizeHeaderValue).join(", ")}`] : []),
+        ...(input.cc.length > 0 ? [`Cc: ${input.cc.map(sanitizeHeaderValue).join(", ")}`] : []),
+        ...(includeBccHeader && input.bcc.length > 0 ? [`Bcc: ${input.bcc.map(sanitizeHeaderValue).join(", ")}`] : []),
+        `Subject: ${sanitizeHeaderValue(input.subject)}`,
+        ...(input.messageId ? [`Message-ID: ${sanitizeHeaderValue(input.messageId)}`] : []),
+        ...(input.date || input.messageId ? [`Date: ${sanitizeHeaderValue(input.date ?? rfc2822Date())}`] : []),
+        ...(input.inReplyTo ? [`In-Reply-To: ${sanitizeHeaderValue(input.inReplyTo)}`] : []),
+        ...(input.references ? [`References: ${sanitizeHeaderValue(input.references)}`] : []),
+        "MIME-Version: 1.0",
+    ];
+    const body = input.body.replace(/\r\n/g, "\n");
+    if (attachments.length === 0) {
+        return [
+            ...headers,
+            'Content-Type: text/plain; charset="UTF-8"',
+            "Content-Transfer-Encoding: 8bit",
+            "",
+            body,
+            "",
+        ].join("\r\n");
+    }
+    const boundary = makeMimeBoundary();
+    const lines = [
+        ...headers,
+        `Content-Type: multipart/mixed; boundary="${boundary}"`,
+        "",
+        `--${boundary}`,
+        'Content-Type: text/plain; charset="UTF-8"',
+        "Content-Transfer-Encoding: 8bit",
+        "",
+        body,
+        "",
+    ];
+    for (const attachment of attachments) {
+        const filename = sanitizeMimeParameter(attachment.filename);
+        lines.push(`--${boundary}`, `Content-Type: ${sanitizeMimeType(attachment.mime_type)}; name="${filename}"`, `Content-Disposition: attachment; filename="${filename}"`, "Content-Transfer-Encoding: base64", "", wrapBase64(attachment.content_base64), "");
+    }
+    lines.push(`--${boundary}--`, "");
+    return lines.join("\r\n");
+}
+//# sourceMappingURL=compose-attachments.js.map

package/dist/lib/compose-attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose-attachments.js","sourceRoot":"","sources":["../../src/lib/compose-attachments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAG7D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,uBAAuB,GAA2B;IACtD,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,YAAY;CACrB,CAAC;AAEF,SAAS,cAAc,CAAC,SAAiB;IACvC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;AAC5F,CAAC;AAED,SAAS,6BAA6B,CAAC,SAAiB;IACtD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,oCAAoC,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;IACxD,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,eAAe,SAAS,kBAAkB,CAAC,CAAC;IACzF,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,eAAe,SAAS,0BAA0B,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,IAAI,YAAY,CAAC;IAC/D,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,QAAQ;QACR,SAAS,EAAE,eAAe,CAAC,YAAY,CAAC;QACxC,UAAU,EAAE,OAAO,CAAC,MAAM;QAC1B,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAA2B;IACxE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,WAA0D;IAE1D,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC9C,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;KAClC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,2DAA2D,CAAC,IAAI,CAAC,UAAU,CAAC;QACjF,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,0BAA0B,CAAC;AACjC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACrE,OAAO,UAAU,IAAI,YAAY,CAAC;AACpC,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAc,IAAI,IAAI,EAAE;IAClD,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAanC;IACC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;IAC5C,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC;IACxD,MAAM,OAAO,GAAG;QACd,SAAS,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;QAC1C,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,gBAAgB,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9G,YAAY,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;QAChD,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,mBAAmB,CAAC,KAAK,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,gBAAgB,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,eAAe,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,mBAAmB;KACpB,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAE/C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,GAAG,OAAO;YACV,2CAA2C;YAC3C,iCAAiC;YACjC,EAAE;YACF,IAAI;YACJ,EAAE;SACH,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG;QACZ,GAAG,OAAO;QACV,4CAA4C,QAAQ,GAAG;QACvD,EAAE;QACF,KAAK,QAAQ,EAAE;QACf,2CAA2C;QAC3C,iCAAiC;QACjC,EAAE;QACF,IAAI;QACJ,EAAE;KACH,CAAC;IAEF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC5D,KAAK,CAAC,IAAI,CACR,KAAK,QAAQ,EAAE,EACf,iBAAiB,gBAAgB,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,QAAQ,GAAG,EAC7E,8CAA8C,QAAQ,GAAG,EACzD,mCAAmC,EACnC,EAAE,EACF,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,EACrC,EAAE,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC"}

package/dist/lib/compose-attachments.test.js

@@ -0,0 +1,47 @@
+import assert from "node:assert/strict";
+import { Buffer } from "node:buffer";
+import test from "node:test";
+import { buildRawMimeMessage, composeAttachmentMetas, resolveLocalComposeAttachments, } from "./compose-attachments.js";
+test("resolveLocalComposeAttachments reads file metadata and bytes without exposing paths in public metadata", () => {
+    const [attachment] = resolveLocalComposeAttachments(["tsconfig.json"]);
+    assert.equal(attachment?.filename, "tsconfig.json");
+    assert.equal(attachment?.mime_type, "application/json");
+    assert.equal(typeof attachment?.size_bytes, "number");
+    assert.ok(attachment?.content_base64);
+    assert.deepEqual(composeAttachmentMetas([attachment]), [
+        {
+            filename: "tsconfig.json",
+            mime_type: "application/json",
+            size_bytes: attachment.size_bytes,
+        },
+    ]);
+});
+test("buildRawMimeMessage emits multipart MIME attachments and can hide Bcc for delivery copies", () => {
+    const raw = buildRawMimeMessage({
+        from: "surface@example.com",
+        to: ["to@example.com"],
+        cc: ["cc@example.com"],
+        bcc: ["hidden@example.com"],
+        subject: "Surface attachment probe",
+        body: "Hello with file",
+        messageId: "<surface-test@example.com>",
+        includeBccHeader: false,
+        attachments: [
+            {
+                path: "/tmp/report.txt",
+                filename: "report.txt",
+                mime_type: "text/plain",
+                size_bytes: 11,
+                content_base64: Buffer.from("hello file").toString("base64"),
+            },
+        ],
+    });
+    assert.match(raw, /^To: to@example\.com/m);
+    assert.match(raw, /^Cc: cc@example\.com/m);
+    assert.doesNotMatch(raw, /^Bcc:/m);
+    assert.match(raw, /^Content-Type: multipart\/mixed; boundary="surface-/m);
+    assert.match(raw, /Content-Type: text\/plain; name="report\.txt"/);
+    assert.match(raw, /Content-Disposition: attachment; filename="report\.txt"/);
+    assert.match(raw, new RegExp(Buffer.from("hello file").toString("base64")));
+});
+//# sourceMappingURL=compose-attachments.test.js.map

package/dist/lib/compose-attachments.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose-attachments.test.js","sourceRoot":"","sources":["../../src/lib/compose-attachments.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAElC,IAAI,CAAC,wGAAwG,EAAE,GAAG,EAAE;IAClH,MAAM,CAAC,UAAU,CAAC,GAAG,8BAA8B,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IAEvE,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,CAAC,OAAO,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACtC,MAAM,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC,UAAW,CAAC,CAAC,EAAE;QACtD;YACE,QAAQ,EAAE,eAAe;YACzB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE,UAAW,CAAC,UAAU;SACnC;KACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2FAA2F,EAAE,GAAG,EAAE;IACrG,MAAM,GAAG,GAAG,mBAAmB,CAAC;QAC9B,IAAI,EAAE,qBAAqB;QAC3B,EAAE,EAAE,CAAC,gBAAgB,CAAC;QACtB,EAAE,EAAE,CAAC,gBAAgB,CAAC;QACtB,GAAG,EAAE,CAAC,oBAAoB,CAAC;QAC3B,OAAO,EAAE,0BAA0B;QACnC,IAAI,EAAE,iBAAiB;QACvB,SAAS,EAAE,4BAA4B;QACvC,gBAAgB,EAAE,KAAK;QACvB,WAAW,EAAE;YACX;gBACE,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,YAAY;gBACtB,SAAS,EAAE,YAAY;gBACvB,UAAU,EAAE,EAAE;gBACd,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aAC7D;SACF;KACF,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAC3C,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACnC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,sDAAsD,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,yDAAyD,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC,CAAC,CAAC"}

package/dist/lib/sent-mail.js

@@ -0,0 +1,64 @@
+import { SurfaceError } from "./errors.js";
+import { loadStoredThread } from "./stored-mail.js";
+export function normalizeComparableEmail(value) {
+    return (value ?? "").trim().toLowerCase();
+}
+export function accountIdentityEmails(account, context) {
+    const identity = context.db.getAccountIdentity(account);
+    return new Set([identity.primary_email, account.email, ...identity.email_aliases]
+        .map(normalizeComparableEmail)
+        .filter(Boolean));
+}
+export function messageMatchesRecipient(message, recipient) {
+    if (!recipient) {
+        return true;
+    }
+    const normalizedRecipient = normalizeComparableEmail(recipient);
+    return [...message.envelope.to, ...message.envelope.cc]
+        .some((participant) => normalizeComparableEmail(participant.email) === normalizedRecipient);
+}
+function messageWasSentByAccount(message, emails) {
+    const fromEmail = normalizeComparableEmail(message.envelope.from?.email);
+    return Boolean(fromEmail && emails.has(fromEmail));
+}
+export function sentTimestamp(message) {
+    const parsed = Date.parse(message.envelope.sent_at ?? message.envelope.received_at ?? "");
+    return Number.isFinite(parsed) ? parsed : 0;
+}
+export function sentMessagesFromStoredThread(account, context, query) {
+    if (!query.thread_ref) {
+        return [];
+    }
+    const resolved = context.db.findThreadByRef(query.thread_ref);
+    if (!resolved) {
+        throw new SurfaceError("not_found", `Thread '${query.thread_ref}' was not found.`, {
+            account: account.name,
+            threadRef: query.thread_ref,
+        });
+    }
+    if (resolved.account_id !== account.account_id) {
+        throw new SurfaceError("invalid_argument", `Thread '${query.thread_ref}' does not belong to account '${account.name}'.`, {
+            account: account.name,
+            threadRef: query.thread_ref,
+        });
+    }
+    const thread = loadStoredThread(context.db, account, query.thread_ref);
+    if (!thread) {
+        throw new SurfaceError("not_found", `Thread '${query.thread_ref}' was not found.`, {
+            account: account.name,
+            threadRef: query.thread_ref,
+        });
+    }
+    const emails = accountIdentityEmails(account, context);
+    return thread.messages
+        .filter((message) => messageWasSentByAccount(message, emails))
+        .filter((message) => messageMatchesRecipient(message, query.recipient))
+        .sort((left, right) => sentTimestamp(right) - sentTimestamp(left))
+        .slice(0, query.limit)
+        .map((message) => ({
+        ...message,
+        thread_ref: thread.thread_ref,
+        source: thread.source,
+    }));
+}
+//# sourceMappingURL=sent-mail.js.map

package/dist/lib/sent-mail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sent-mail.js","sourceRoot":"","sources":["../../src/lib/sent-mail.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,UAAU,wBAAwB,CAAC,KAAgC;IACvE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAoB,EAAE,OAAwB;IAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACxD,OAAO,IAAI,GAAG,CACZ,CAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,aAAa,CAAC;SAC/D,GAAG,CAAC,wBAAwB,CAAC;SAC7B,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAsB,EAAE,SAA6B;IAC3F,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,mBAAmB,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;SACpD,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,wBAAwB,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,mBAAmB,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAsB,EAAE,MAAmB;IAC1E,MAAM,SAAS,GAAG,wBAAwB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzE,OAAO,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAwC;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC1F,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAoB,EACpB,OAAwB,EACxB,KAAgB;IAEhB,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,WAAW,KAAK,CAAC,UAAU,kBAAkB,EAAE;YACjF,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,SAAS,EAAE,KAAK,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;QAC/C,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,WAAW,KAAK,CAAC,UAAU,iCAAiC,OAAO,CAAC,IAAI,IAAI,EAC5E;YACE,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,SAAS,EAAE,KAAK,CAAC,UAAU;SAC5B,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACvE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,WAAW,KAAK,CAAC,UAAU,kBAAkB,EAAE;YACjF,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,SAAS,EAAE,KAAK,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,QAAQ;SACnB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;SAC7D,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;SACtE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;SACjE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACjB,GAAG,OAAO;QACV,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC,CAAC;AACR,CAAC"}

package/dist/lib/skill-install.js

@@ -0,0 +1,55 @@
+import { copyFile, mkdir, stat } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { SurfaceError } from "./errors.js";
+const SKILL_NAME = "surface-cli";
+function packageRoot() {
+    return resolve(dirname(fileURLToPath(import.meta.url)), "..", "..");
+}
+export function bundledSkillPath() {
+    return join(packageRoot(), "skills", SKILL_NAME, "SKILL.md");
+}
+export function defaultSkillDestination(target) {
+    switch (target) {
+        case "codex":
+            return join(homedir(), ".codex", "skills", SKILL_NAME, "SKILL.md");
+        case "claude-code":
+            return join(homedir(), ".claude", "skills", SKILL_NAME, "SKILL.md");
+    }
+}
+export function parseSkillInstallTarget(value) {
+    switch (value) {
+        case "codex":
+            return "codex";
+        case "claude":
+        case "claude-code":
+            return "claude-code";
+        case "all":
+            return "all";
+        default:
+            throw new SurfaceError("invalid_argument", `Expected skill install target to be one of: codex, claude-code, all. Received '${value}'.`);
+    }
+}
+export function expandSkillInstallTargets(target) {
+    return target === "all" ? ["codex", "claude-code"] : [target];
+}
+export async function installSurfaceSkill(target) {
+    const source = bundledSkillPath();
+    try {
+        await stat(source);
+    }
+    catch {
+        throw new SurfaceError("not_found", `Bundled Surface skill was not found at '${source}'. Reinstall surface-cli or install the skill from GitHub.`);
+    }
+    const destination = defaultSkillDestination(target);
+    await mkdir(dirname(destination), { recursive: true });
+    await copyFile(source, destination);
+    return {
+        agent: target,
+        skill: SKILL_NAME,
+        source,
+        path: destination,
+    };
+}
+//# sourceMappingURL=skill-install.js.map

package/dist/lib/skill-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-install.js","sourceRoot":"","sources":["../../src/lib/skill-install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAW3C,MAAM,UAAU,GAAG,aAAa,CAAC;AAEjC,SAAS,WAAW;IAClB,OAAO,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAA0B;IAChE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO;YACV,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACrE,KAAK,aAAa;YAChB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,QAAQ,CAAC;QACd,KAAK,aAAa;YAChB,OAAO,aAAa,CAAC;QACvB,KAAK,KAAK;YACR,OAAO,KAAK,CAAC;QACf;YACE,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,kFAAkF,KAAK,IAAI,CAC5F,CAAC;IACN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAkC;IAC1E,OAAO,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAA0B;IAClE,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CACpB,WAAW,EACX,2CAA2C,MAAM,4DAA4D,CAC9G,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEpC,OAAO;QACL,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,UAAU;QACjB,MAAM;QACN,IAAI,EAAE,WAAW;KAClB,CAAC;AACJ,CAAC"}

package/dist/providers/gmail/adapter.js

@@ -1,8 +1,10 @@
 import { Buffer } from "node:buffer";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
+import { buildRawMimeMessage, composeAttachmentMetas, encodeRawMimeBase64Url, } from "../../lib/compose-attachments.js";
 import { SurfaceError } from "../../lib/errors.js";
 import { toPublicSentMessage } from "../../lib/public-mail.js";
+import { sentMessagesFromStoredThread } from "../../lib/sent-mail.js";
 import { assertWriteAllowed } from "../../lib/write-safety.js";
 import { makeAttachmentId, makeMessageRef, makeThreadRef } from "../../refs.js";
 import { summarizeAndPersistThreads } from "../../summarizer.js";
@@ -505,9 +507,6 @@ function normalizeEmailList(values) {
     }
     return [...deduped];
 }
-function sanitizeHeaderValue(value) {
-    return value.replace(/\r?\n/g, " ").trim();
-}
 function prefixSubject(subject, prefix) {
     const normalized = subject.trim();
     if (!normalized) {
@@ -551,27 +550,6 @@ function buildForwardBody(inputBody, stored) {
     lines.push("", originalBody);
     return lines.join("\n").trim();
 }
-function encodeMimeBase64Url(mime) {
-    return Buffer.from(mime, "utf8").toString("base64url");
-}
-function buildRawMimeMessage(input) {
-    const lines = [
-        `From: ${sanitizeHeaderValue(input.from)}`,
-        ...(input.to.length > 0 ? [`To: ${input.to.map(sanitizeHeaderValue).join(", ")}`] : []),
-        ...(input.cc.length > 0 ? [`Cc: ${input.cc.map(sanitizeHeaderValue).join(", ")}`] : []),
-        ...(input.bcc.length > 0 ? [`Bcc: ${input.bcc.map(sanitizeHeaderValue).join(", ")}`] : []),
-        `Subject: ${sanitizeHeaderValue(input.subject)}`,
-        ...(input.inReplyTo ? [`In-Reply-To: ${sanitizeHeaderValue(input.inReplyTo)}`] : []),
-        ...(input.references ? [`References: ${sanitizeHeaderValue(input.references)}`] : []),
-        "MIME-Version: 1.0",
-        'Content-Type: text/plain; charset="UTF-8"',
-        "Content-Transfer-Encoding: 8bit",
-        "",
-        input.body.replace(/\r\n/g, "\n"),
-        "",
-    ];
-    return lines.join("\r\n");
-}
 function parseMessageLocator(locatorJson) {
     const parsed = JSON.parse(locatorJson);
     return {
@@ -589,7 +567,7 @@ function latestStoredThreadMessage(threadRef, context) {
         stored: messageRef ? context.db.getStoredMessage(messageRef) ?? null : null,
     };
 }
-function buildSendEnvelope(account, command, status, subject, recipients, result, inReplyToMessageRef) {
+function buildSendEnvelope(account, command, status, subject, recipients, result, inReplyToMessageRef, attachments = []) {
     return {
         schema_version: "1",
         command,
@@ -598,6 +576,7 @@ function buildSendEnvelope(account, command, status, subject, recipients, result
         status,
         subject,
         recipients,
+        attachments,
         thread_ref: result.thread_ref,
         message_ref: result.message_ref,
         in_reply_to_message_ref: inReplyToMessageRef,
@@ -975,6 +954,10 @@ async function fetchGmailThreads(account, context, options) {
     return summarizeAndPersistThreads(persisted, context.config, context.db, context.db.getAccountIdentity(account));
 }
 async function fetchGmailSentMessages(account, context, query) {
+    if (query.thread_ref) {
+        await refreshGmailThread(account, query.thread_ref, context);
+        return sentMessagesFromStoredThread(account, context, query);
+    }
     const queryParts = ["in:sent"];
     if (query.recipient?.trim()) {
         queryParts.push(buildGmailRecipientQuery(query.recipient));
@@ -1013,6 +996,23 @@ async function fetchGmailSentMessages(account, context, query) {
     }
     return results;
 }
+async function refreshGmailThread(account, threadRef, context) {
+    const locatorRow = context.db.findProviderLocator("thread", threadRef);
+    if (!locatorRow) {
+        throw new SurfaceError("cache_miss", `No provider locator exists for thread '${threadRef}'.`, {
+            account: account.name,
+            threadRef,
+        });
+    }
+    const locator = JSON.parse(locatorRow.locator_json);
+    if (!locator.thread_id) {
+        throw new SurfaceError("transport_error", `Thread '${threadRef}' is missing a Gmail thread id.`, {
+            account: account.name,
+            threadRef,
+        });
+    }
+    await fetchAndPersistGmailThread(account, context, locator.thread_id);
+}
 async function sendOrDraftGmailMessage(account, context, payload) {
     if (payload.draft) {
         const draft = await createGmailDraft(account, context, {
@@ -1083,21 +1083,7 @@ export class GmailApiAdapter {
         return fetchGmailSentMessages(account, context, query);
     }
     async refreshThread(account, threadRef, context) {
-        const locatorRow = context.db.findProviderLocator("thread", threadRef);
-        if (!locatorRow) {
-            throw new SurfaceError("cache_miss", `No provider locator exists for thread '${threadRef}'.`, {
-                account: account.name,
-                threadRef,
-            });
-        }
-        const locator = JSON.parse(locatorRow.locator_json);
-        if (!locator.thread_id) {
-            throw new SurfaceError("transport_error", `Thread '${threadRef}' is missing a Gmail thread id.`, {
-                account: account.name,
-                threadRef,
-            });
-        }
-        await fetchAndPersistGmailThread(account, context, locator.thread_id);
+        await refreshGmailThread(account, threadRef, context);
     }
     async readMessage(account, messageRef, refresh, context) {
         const stored = context.db.getStoredMessage(messageRef);
@@ -1242,19 +1228,20 @@ export class GmailApiAdapter {
         assertWriteAllowed(context.config, account, recipients, {
             disposition: input.draft ? "draft" : "send",
         });
-        const raw = encodeMimeBase64Url(buildRawMimeMessage({
+        const raw = encodeRawMimeBase64Url(buildRawMimeMessage({
             from: account.email,
             to: recipients.to,
             cc: recipients.cc,
             bcc: recipients.bcc,
             subject: input.subject,
             body: input.body,
+            attachments: input.attachments,
         }));
         const result = await sendOrDraftGmailMessage(account, context, {
             raw,
             draft: input.draft,
         });
-        return buildSendEnvelope(account, "send", result.status, input.subject, recipientsFromInput(recipients), result.refs, null);
+        return buildSendEnvelope(account, "send", result.status, input.subject, recipientsFromInput(recipients), result.refs, null, composeAttachmentMetas(input.attachments));
     }
     async reply(account, messageRef, input, context) {
         const target = await resolveGmailMessageContext(account, messageRef, context);
@@ -1286,7 +1273,7 @@ export class GmailApiAdapter {
             ? `${target.headers.references}${originalMessageId ? ` ${originalMessageId}` : ""}`.trim()
             : originalMessageId;
         const subject = prefixSubject(target.stored.subject ?? target.headers.subject ?? "", "Re");
-        const raw = encodeMimeBase64Url(buildRawMimeMessage({
+        const raw = encodeRawMimeBase64Url(buildRawMimeMessage({
             from: account.email,
             to: recipients.to,
             cc: recipients.cc,
@@ -1341,7 +1328,7 @@ export class GmailApiAdapter {
             ? `${target.headers.references}${originalMessageId ? ` ${originalMessageId}` : ""}`.trim()
             : originalMessageId;
         const subject = prefixSubject(target.stored.subject ?? target.headers.subject ?? "", "Re");
-        const raw = encodeMimeBase64Url(buildRawMimeMessage({
+        const raw = encodeRawMimeBase64Url(buildRawMimeMessage({
             from: account.email,
             to: recipients.to,
             cc: recipients.cc,
@@ -1374,7 +1361,7 @@ export class GmailApiAdapter {
             disposition: input.draft ? "draft" : "send",
         });
         const subject = prefixSubject(target.stored.subject ?? target.headers.subject ?? "", "Fwd");
-        const raw = encodeMimeBase64Url(buildRawMimeMessage({
+        const raw = encodeRawMimeBase64Url(buildRawMimeMessage({
             from: account.email,
             to: recipients.to,
             cc: recipients.cc,