zubo 0.1.14 → 0.1.16

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zubo",
-  "version": "0.1.14",
+  "version": "0.1.16",
   "description": "Your AI agent that never forgets. Persistent memory, 25+ tools, 7 channels, 11+ LLM providers — runs entirely on your machine.",
   "license": "MIT",
   "author": "thomaskanze",

package/src/tools/builtin-integrations/google/gmail/handler.ts

@@ -1,11 +1,5 @@
 const API = "https://gmail.googleapis.com/gmail/v1/users/me";
 
-/** RFC 2047 encode a header value if it contains non-ASCII characters (e.g. emojis) */
-function mimeEncode(value: string): string {
-  if (/^[\x20-\x7E]*$/.test(value)) return value;
-  return `=?UTF-8?B?${Buffer.from(value, "utf-8").toString("base64")}?=`;
-}
-
 async function getToken(): Promise<string> {
   // Try the new multi-provider OAuth system first
   try {
@@ -91,7 +85,7 @@ export default async function (input: Record<string, unknown>): Promise<string>
       case "send": {
         if (!to) return JSON.stringify({ error: "to is required" });
         if (!subject) return JSON.stringify({ error: "subject is required" });
-        const raw = Buffer.from(`To: ${to}\r\nSubject: ${mimeEncode(subject)}\r\nContent-Type: text/plain; charset=utf-8\r\n\r\n${body || ""}`).toString("base64url");
+        const raw = Buffer.from(`MIME-Version: 1.0\r\nTo: ${to}\r\nSubject: ${subject}\r\nContent-Type: text/plain; charset=utf-8\r\n\r\n${body || ""}`).toString("base64url");
         const res = await fetch(`${API}/messages/send`, {
           method: "POST", headers,
           body: JSON.stringify({ raw }),
@@ -117,7 +111,7 @@ export default async function (input: Record<string, unknown>): Promise<string>
         const replyTo = getHeader("From");
         const subj = getHeader("Subject").startsWith("Re:") ? getHeader("Subject") : `Re: ${getHeader("Subject")}`;
         const msgId = getHeader("Message-ID");
-        const raw = Buffer.from(`To: ${replyTo}\r\nSubject: ${mimeEncode(subj)}\r\nIn-Reply-To: ${msgId}\r\nReferences: ${msgId}\r\nContent-Type: text/plain; charset=utf-8\r\n\r\n${body}`).toString("base64url");
+        const raw = Buffer.from(`MIME-Version: 1.0\r\nTo: ${replyTo}\r\nSubject: ${subj}\r\nIn-Reply-To: ${msgId}\r\nReferences: ${msgId}\r\nContent-Type: text/plain; charset=utf-8\r\n\r\n${body}`).toString("base64url");
         const res = await fetch(`${API}/messages/send`, {
           method: "POST", headers,
           body: JSON.stringify({ raw, threadId: origData.threadId }),

package/src/tools/executor.ts

@@ -4,6 +4,18 @@ import { logger } from "../util/logger";
 import { recordError } from "../util/error-buffer";
 import { executeSandboxed } from "./sandbox";
 
+/** Built-in integration tool names — these run in-process, NOT sandboxed,
+ *  because they need access to Zubo.getGoogleToken and the OAuth module. */
+const BUILTIN_INTEGRATION_TOOLS = new Set([
+  "gmail", "google_calendar", "google_sheets", "google_docs", "google_drive",
+  "github_issues", "github_prs", "github_repos",
+  "notion_pages", "notion_databases", "notion_search",
+  "linear_issues", "linear_projects",
+  "jira_issues", "jira_boards",
+  "slack_messages", "twitter_posts",
+  "claude_code_task", "codex_task",
+]);
+
 export interface ToolResult {
   tool_use_id: string;
   content: string;
@@ -31,6 +43,9 @@ async function shouldSandbox(
     // Only sandbox tools that were loaded via the skill-loader from the user's skills directory
     if (!isUserInstalledSkill(toolName)) return null;
 
+    // Built-in integrations run in-process — they need access to Zubo.getGoogleToken and OAuth
+    if (BUILTIN_INTEGRATION_TOOLS.has(toolName)) return null;
+
     const { existsSync, readFileSync } = await import("fs");
     const { join } = await import("path");
     const { paths } = await import("../config/paths");