zele 0.3.15 → 0.3.17

package/dist/gmail-client.d.ts

@@ -2,6 +2,16 @@ import { type gmail_v1 } from '@googleapis/gmail';
 import type { OAuth2Client } from 'google-auth-library';
 import { AuthError, ApiError, NotFoundError, EmptyThreadError, MissingDataError } from './api-utils.js';
 import type { AccountId } from './auth.js';
+export type AuthVerdict = 'pass' | 'fail' | 'softfail' | 'neutral' | 'none' | 'temperror' | 'permerror' | 'bestguesspass';
+export interface AuthResult {
+    spf: AuthVerdict;
+    dkim: AuthVerdict;
+    dmarc: AuthVerdict;
+    /** true when all three are 'pass' — the email is fully authenticated */
+    authentic: boolean;
+    /** raw Authentication-Results header value */
+    raw: string;
+}
 export interface Sender {
     name?: string;
     email: string;
@@ -29,6 +39,8 @@ export interface ParsedMessage {
     mimeType: string;
     textBody: string | null;
     attachments: AttachmentMeta[];
+    /** SPF/DKIM/DMARC authentication results from Gmail. null for sent/draft messages. */
+    auth: AuthResult | null;
 }
 export interface AttachmentMeta {
     attachmentId: string;
@@ -54,10 +66,16 @@ export interface ThreadListItem {
     snippet: string;
     subject: string;
     from: Sender;
+    to: Sender[];
+    cc: Sender[];
     date: string;
     labelIds: string[];
     unread: boolean;
+    starred: boolean;
     messageCount: number;
+    inReplyTo: string | null;
+    hasAttachments: boolean;
+    listUnsubscribe: string | null;
 }
 export interface ThreadListResult {
     threads: ThreadListItem[];
@@ -244,6 +262,12 @@ export declare class GmailClient {
     archive({ threadIds }: {
         threadIds: string[];
     }): Promise<void | AuthError | ApiError>;
+    markAsSpam({ threadIds }: {
+        threadIds: string[];
+    }): Promise<void | AuthError | ApiError>;
+    unmarkSpam({ threadIds }: {
+        threadIds: string[];
+    }): Promise<void | AuthError | ApiError>;
     /** Invalidate thread cache after a thread mutation. */
     private invalidateAfterThreadMutation;
     /** Moves all spam threads to trash. Does not permanently delete. */
@@ -282,6 +306,18 @@ export declare class GmailClient {
     deleteLabel({ labelId }: {
         labelId: string;
     }): Promise<void>;
+    listFilters(): Promise<{
+        parsed: gmail_v1.Schema$Filter[];
+    } | AuthError | ApiError>;
+    createFilter(opts: {
+        from?: string;
+        query?: string;
+        addLabelIds?: string[];
+        removeLabelIds?: string[];
+    }): Promise<gmail_v1.Schema$Filter | AuthError | ApiError>;
+    deleteFilter(filterId: string): Promise<void | AuthError | ApiError>;
+    /** Resolve a label name to its ID, auto-creating if missing. Public wrapper for filter commands. */
+    resolveLabel(nameOrId: string): Promise<string | AuthError | ApiError>;
     getLabelCounts(): Promise<{
         parsed: Array<{
             label: string;
@@ -327,6 +363,10 @@ export declare class GmailClient {
     private extractBody;
     private findBodyPart;
     private extractAttachmentMeta;
+    /** Quick check: does the message payload tree contain any non-inline attachments?
+     *  Checks the root part itself (some messages have attachment metadata there)
+     *  then recurses into child parts. */
+    private hasNonInlineAttachments;
     getEmailAliases(): Promise<Array<{
         email: string;
         name?: string;
@@ -366,3 +406,5 @@ export declare class GmailClient {
     private getHeaderAll;
     private getHeaderValues;
 }
+/** Parse a Gmail Authentication-Results header into structured verdicts. */
+export declare function parseAuthResults(header: string): AuthResult;

package/dist/gmail-client.js

@@ -528,7 +528,9 @@ export class GmailClient {
             return messageIds;
         if (messageIds.length === 0)
             return;
-        await this.batchModifyMessages(messageIds, { removeLabelIds: ['UNREAD'] });
+        const mod = await this.batchModifyMessages(messageIds, { removeLabelIds: ['UNREAD'] });
+        if (mod instanceof Error)
+            return mod;
         await this.invalidateAfterThreadMutation(threadIds);
     }
     async markAsUnread({ threadIds }) {
@@ -537,7 +539,9 @@ export class GmailClient {
             return messageIds;
         if (messageIds.length === 0)
             return;
-        await this.batchModifyMessages(messageIds, { addLabelIds: ['UNREAD'] });
+        const mod = await this.batchModifyMessages(messageIds, { addLabelIds: ['UNREAD'] });
+        if (mod instanceof Error)
+            return mod;
         await this.invalidateAfterThreadMutation(threadIds);
     }
     async star({ threadIds }) {
@@ -546,7 +550,9 @@ export class GmailClient {
             return messageIds;
         if (messageIds.length === 0)
             return;
-        await this.batchModifyMessages(messageIds, { addLabelIds: ['STARRED'] });
+        const mod = await this.batchModifyMessages(messageIds, { addLabelIds: ['STARRED'] });
+        if (mod instanceof Error)
+            return mod;
         await this.invalidateAfterThreadMutation(threadIds);
     }
     async unstar({ threadIds }) {
@@ -555,7 +561,9 @@ export class GmailClient {
             return messageIds;
         if (messageIds.length === 0)
             return;
-        await this.batchModifyMessages(messageIds, { removeLabelIds: ['STARRED'] });
+        const mod = await this.batchModifyMessages(messageIds, { removeLabelIds: ['STARRED'] });
+        if (mod instanceof Error)
+            return mod;
         await this.invalidateAfterThreadMutation(threadIds);
     }
     async modifyLabels({ threadIds, addLabelIds = [], removeLabelIds = [], }) {
@@ -574,10 +582,12 @@ export class GmailClient {
             return messageIds;
         if (messageIds.length === 0)
             return;
-        await this.batchModifyMessages(messageIds, {
+        const mod = await this.batchModifyMessages(messageIds, {
             addLabelIds: resolvedAdd.filter((r) => typeof r === 'string'),
             removeLabelIds: resolvedRemove,
         });
+        if (mod instanceof Error)
+            return mod;
         await this.invalidateAfterThreadMutation(threadIds);
     }
     async trash({ threadId }) {
@@ -600,7 +610,31 @@ export class GmailClient {
             return messageIds;
         if (messageIds.length === 0)
             return;
-        await this.batchModifyMessages(messageIds, { removeLabelIds: ['INBOX'] });
+        const mod = await this.batchModifyMessages(messageIds, { removeLabelIds: ['INBOX'] });
+        if (mod instanceof Error)
+            return mod;
+        await this.invalidateAfterThreadMutation(threadIds);
+    }
+    async markAsSpam({ threadIds }) {
+        const messageIds = await this.getMessageIdsForThreads(threadIds);
+        if (messageIds instanceof Error)
+            return messageIds;
+        if (messageIds.length === 0)
+            return;
+        const mod = await this.batchModifyMessages(messageIds, { addLabelIds: ['SPAM'], removeLabelIds: ['INBOX'] });
+        if (mod instanceof Error)
+            return mod;
+        await this.invalidateAfterThreadMutation(threadIds);
+    }
+    async unmarkSpam({ threadIds }) {
+        const messageIds = await this.getMessageIdsForThreads(threadIds, (labelIds) => labelIds.includes('SPAM'));
+        if (messageIds instanceof Error)
+            return messageIds;
+        if (messageIds.length === 0)
+            return;
+        const mod = await this.batchModifyMessages(messageIds, { removeLabelIds: ['SPAM'], addLabelIds: ['INBOX'] });
+        if (mod instanceof Error)
+            return mod;
         await this.invalidateAfterThreadMutation(threadIds);
     }
     /** Invalidate thread cache after a thread mutation. */
@@ -625,10 +659,12 @@ export class GmailClient {
             const messageIds = await this.getMessageIdsForThreads(threadIds);
             if (messageIds instanceof Error)
                 return messageIds;
-            await this.batchModifyMessages(messageIds, {
+            const mod = await this.batchModifyMessages(messageIds, {
                 addLabelIds: ['TRASH'],
                 removeLabelIds: ['SPAM', 'INBOX'],
             });
+            if (mod instanceof Error)
+                return mod;
             totalDeleted += threadIds.length;
             pageToken = res.nextPageToken ?? undefined;
             if (!pageToken)
@@ -699,6 +735,46 @@ export class GmailClient {
         await this.invalidateLabels();
     }
     // =========================================================================
+    // Filters
+    // =========================================================================
+    async listFilters() {
+        const res = await gmailBoundary(this.account?.email ?? 'unknown', () => withRetry(() => this.gmail.users.settings.filters.list({ userId: 'me' })));
+        if (res instanceof Error)
+            return res;
+        return { parsed: res.data.filter ?? [] };
+    }
+    async createFilter(opts) {
+        const criteria = {};
+        if (opts.from)
+            criteria.from = opts.from;
+        if (opts.query)
+            criteria.query = opts.query;
+        const action = {};
+        if (opts.addLabelIds?.length)
+            action.addLabelIds = opts.addLabelIds;
+        if (opts.removeLabelIds?.length)
+            action.removeLabelIds = opts.removeLabelIds;
+        const res = await gmailBoundary(this.account?.email ?? 'unknown', () => withRetry(() => this.gmail.users.settings.filters.create({
+            userId: 'me',
+            requestBody: { criteria, action },
+        })));
+        if (res instanceof Error)
+            return res;
+        return res.data;
+    }
+    async deleteFilter(filterId) {
+        const res = await gmailBoundary(this.account?.email ?? 'unknown', () => withRetry(() => this.gmail.users.settings.filters.delete({
+            userId: 'me',
+            id: filterId,
+        })));
+        if (res instanceof Error)
+            return res;
+    }
+    /** Resolve a label name to its ID, auto-creating if missing. Public wrapper for filter commands. */
+    async resolveLabel(nameOrId) {
+        return this.resolveLabelId(nameOrId);
+    }
+    // =========================================================================
     // Label counts (unread counts per folder/label)
     // =========================================================================
     async getLabelCounts() {
@@ -831,6 +907,18 @@ export class GmailClient {
             .map((h) => h.value ?? '')
             .filter((v) => v.length > 0);
         const { body, mimeType, textBody } = this.extractBody(message.payload ?? {});
+        // Authentication-Results: multiple MTAs can add this header. Prefer the one
+        // stamped by Gmail's trusted authserv-id (mx.google.com) to avoid trusting
+        // headers injected by upstream/untrusted relays.
+        const authHeaders = headers
+            .filter((h) => h.name?.toLowerCase() === 'authentication-results')
+            .map((h) => h.value ?? '')
+            .filter((v) => v.length > 0);
+        const trustedAuthHeader = authHeaders.find((v) => v.trim().toLowerCase().startsWith('mx.google.com'))
+            ?? authHeaders[0]
+            ?? null;
+        const isSentOrDraft = labelIds.includes('SENT') || labelIds.includes('DRAFT');
+        const auth = trustedAuthHeader && !isSentOrDraft ? parseAuthResults(trustedAuthHeader) : null;
         return {
             id: message.id ?? '',
             threadId: message.threadId ?? '',
@@ -856,6 +944,7 @@ export class GmailClient {
             mimeType,
             textBody,
             attachments: this.extractAttachmentMeta(message.payload?.parts ?? []),
+            auth,
         };
     }
     /** Parse raw gmail_v1.Schema$Thread (format: metadata) into ThreadListItem.
@@ -890,16 +979,39 @@ export class GmailClient {
                 }
             }
         }
+        // Parse recipients from latest message
+        const toHeader = getHeader('to') ?? '';
+        const ccHeaders = headers
+            .filter((h) => h.name?.toLowerCase() === 'cc')
+            .map((h) => h.value ?? '')
+            .filter((v) => v.length > 0);
+        // Check if any non-draft message in the thread is a reply (has In-Reply-To header)
+        const inReplyTo = nonDraftMessages
+            .map((m) => m.payload?.headers?.find((h) => h.name?.toLowerCase() === 'in-reply-to')?.value ??
+            null)
+            .find((v) => v !== null) ?? null;
+        // Check if any message has attachments (non-inline)
+        const hasAttachments = messages.some((m) => this.hasNonInlineAttachments(m.payload));
+        // List-Unsubscribe from latest message
+        const listUnsubscribe = getHeader('list-unsubscribe') ?? null;
         return {
             id: raw.id ?? '',
             historyId: raw.historyId ?? null,
             snippet: sanitizeSnippet(latest?.snippet ?? ''),
             subject: (getHeader('subject') ?? '(no subject)').replace(/"/g, '').trim(),
             from: displayFrom,
+            to: toHeader ? parseAddressList(toHeader) : [],
+            cc: ccHeaders.length > 0
+                ? ccHeaders.filter((h) => h.trim().length > 0).flatMap((h) => parseAddressList(h))
+                : [],
             date: getHeader('date') ?? '',
             labelIds: allLabels,
             unread: allLabels.includes('UNREAD'),
+            starred: allLabels.includes('STARRED'),
             messageCount: nonDraftMessages.length,
+            inReplyTo,
+            hasAttachments,
+            listUnsubscribe,
         };
     }
     /** Parse raw gmail_v1.Schema$Label[] from labels.list into our label objects. */
@@ -1001,6 +1113,25 @@ export class GmailClient {
         }
         return results;
     }
+    /** Quick check: does the message payload tree contain any non-inline attachments?
+     *  Checks the root part itself (some messages have attachment metadata there)
+     *  then recurses into child parts. */
+    hasNonInlineAttachments(part) {
+        if (!part)
+            return false;
+        if (part.filename && part.filename.length > 0 && part.body?.attachmentId) {
+            const disposition = part.headers?.find((h) => h.name?.toLowerCase() === 'content-disposition')?.value ?? '';
+            const hasContentId = part.headers?.some((h) => h.name?.toLowerCase() === 'content-id');
+            const isInline = disposition.toLowerCase().includes('inline');
+            if (!isInline || !hasContentId)
+                return true;
+        }
+        for (const child of part.parts ?? []) {
+            if (this.hasNonInlineAttachments(child))
+                return true;
+        }
+        return false;
+    }
     async getEmailAliases() {
         const profile = await this.getProfile();
         if (profile instanceof Error)
@@ -1345,13 +1476,15 @@ export class GmailClient {
         const chunkSize = 1000;
         for (let i = 0; i < messageIds.length; i += chunkSize) {
             const chunk = messageIds.slice(i, i + chunkSize);
-            await withRetry(() => this.gmail.users.messages.batchModify({
+            const res = await gmailBoundary(this.account?.email ?? 'unknown', () => withRetry(() => this.gmail.users.messages.batchModify({
                 userId: 'me',
                 requestBody: {
                     ids: chunk,
                     ...body,
                 },
-            }));
+            })));
+            if (res instanceof Error)
+                return res;
         }
     }
     // =========================================================================
@@ -1375,6 +1508,39 @@ export class GmailClient {
     }
 }
 // ---------------------------------------------------------------------------
+// Email authentication: parse the Authentication-Results header
+// ---------------------------------------------------------------------------
+// Gmail adds an Authentication-Results header to every received message with
+// SPF, DKIM, and DMARC verdicts. Format is semi-structured:
+//   Authentication-Results: mx.google.com;
+//       dkim=pass header.i=@example.com header.s=sel1;
+//       spf=pass (...) smtp.mailfrom=user@example.com;
+//       dmarc=pass (p=REJECT) header.from=example.com
+// We extract the verdict keyword after each protocol name.
+// ---------------------------------------------------------------------------
+const AUTH_VERDICTS = new Set(['pass', 'fail', 'softfail', 'neutral', 'none', 'temperror', 'permerror', 'bestguesspass']);
+/** Parse a Gmail Authentication-Results header into structured verdicts. */
+export function parseAuthResults(header) {
+    const lower = header.toLowerCase();
+    const extract = (protocol) => {
+        // Match "protocol=verdict" — verdict is a word that stops at whitespace, semicolons, or parens
+        const re = new RegExp(`\\b${protocol}\\s*=\\s*([a-z]+)`);
+        const match = re.exec(lower);
+        const verdict = match?.[1] ?? 'none';
+        return AUTH_VERDICTS.has(verdict) ? verdict : 'none';
+    };
+    const spf = extract('spf');
+    const dkim = extract('dkim');
+    const dmarc = extract('dmarc');
+    return {
+        spf,
+        dkim,
+        dmarc,
+        authentic: spf === 'pass' && dkim === 'pass' && dmarc === 'pass',
+        raw: header,
+    };
+}
+// ---------------------------------------------------------------------------
 // Watch: folder label mapping
 // ---------------------------------------------------------------------------
 const WATCH_FOLDER_LABELS = {