sessionmail 0.2.0__tar.gz → 0.3.0__tar.gz

{sessionmail-0.2.0 → sessionmail-0.3.0}/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "sessionmail",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Mail for coding agents: message moves messages, pager alerts, memory is the filesystem view - three commands over one maildir.",
   "author": {
     "name": "Mike Bailey",

{sessionmail-0.2.0 → sessionmail-0.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: sessionmail
-Version: 0.2.0
+Version: 0.3.0
 Summary: sessionmail - mail for coding agents: message, pager and memory over one maildir.
 Project-URL: Homepage, https://github.com/sessionkit/sessionmail
 Project-URL: Repository, https://github.com/sessionkit/sessionmail
@@ -104,16 +104,6 @@ message setup                    # again: it links the notmuch hook
 - **Nothing runs `notmuch new` for you.** `message mark` and `memory`
   read an empty index until something does: launchd, cron, or by hand.
 
-**Status.** `sessionmail` 0.0.1 on PyPI is a name reservation, not this
-code - a 1.3 KB placeholder with no dependencies.
-Until 0.2.0 ships, install from source instead of the `uv tool install
-sessionmail` line above:
-
-```sh
-uv tool install git+https://github.com/sessionkit/sessionmail   # from the repo
-make install                                                    # from a clone
-```
-
 `message`, `pager` and `memory` all run; the specs, in the git repository
 (the release archive leaves them out), say what each verb is meant to do
 and `make progress` counts how much of it is built.
@@ -188,7 +178,8 @@ Everything else is in `docs/`, one subject per file:
 - [Gating on `message verify --json`][verify-json-verdict]: the verdict as
   one JSON object.
 - Delivery: [where mail comes from][mail-delivery-paths], [postfix
-  configuration][postfix-configuration], [the file drop][file-drop].
+  configuration][postfix-configuration], [the file drop][file-drop],
+  [pulling a mail host's boxes][pull].
 - [Configuration][configuration]: the files you set up, by component;
   [settings][settings], the keys of `mail.json`.
 - Index: [notmuch][], [notmuch settings][notmuch-settings], [the post-new
@@ -210,6 +201,7 @@ Everything else is in `docs/`, one subject per file:
 [configuration]: docs/configuration.md
 [settings]: docs/settings.md
 [file-drop]: docs/file-drop.md
+[pull]: docs/pull.md
 [notmuch]: docs/notmuch.md
 [notmuch-settings]: docs/notmuch-settings.md
 [post-new-hook]: docs/notmuch-settings.md#the-post-new-hook

{sessionmail-0.2.0 → sessionmail-0.3.0}/README.md

@@ -85,16 +85,6 @@ message setup                    # again: it links the notmuch hook
 - **Nothing runs `notmuch new` for you.** `message mark` and `memory`
   read an empty index until something does: launchd, cron, or by hand.
 
-**Status.** `sessionmail` 0.0.1 on PyPI is a name reservation, not this
-code - a 1.3 KB placeholder with no dependencies.
-Until 0.2.0 ships, install from source instead of the `uv tool install
-sessionmail` line above:
-
-```sh
-uv tool install git+https://github.com/sessionkit/sessionmail   # from the repo
-make install                                                    # from a clone
-```
-
 `message`, `pager` and `memory` all run; the specs, in the git repository
 (the release archive leaves them out), say what each verb is meant to do
 and `make progress` counts how much of it is built.
@@ -169,7 +159,8 @@ Everything else is in `docs/`, one subject per file:
 - [Gating on `message verify --json`][verify-json-verdict]: the verdict as
   one JSON object.
 - Delivery: [where mail comes from][mail-delivery-paths], [postfix
-  configuration][postfix-configuration], [the file drop][file-drop].
+  configuration][postfix-configuration], [the file drop][file-drop],
+  [pulling a mail host's boxes][pull].
 - [Configuration][configuration]: the files you set up, by component;
   [settings][settings], the keys of `mail.json`.
 - Index: [notmuch][], [notmuch settings][notmuch-settings], [the post-new
@@ -191,6 +182,7 @@ Everything else is in `docs/`, one subject per file:
 [configuration]: docs/configuration.md
 [settings]: docs/settings.md
 [file-drop]: docs/file-drop.md
+[pull]: docs/pull.md
 [notmuch]: docs/notmuch.md
 [notmuch-settings]: docs/notmuch-settings.md
 [post-new-hook]: docs/notmuch-settings.md#the-post-new-hook

{sessionmail-0.2.0 → sessionmail-0.3.0}/hooks/mail-guard/README.md

@@ -29,7 +29,7 @@ script `session-mail-send`:
 3. **a heredoc or pipe feeding the send with no `--body-file`** — the send does
    not read stdin, so that delivers an *empty* message at exit 0.
 
-`session mail send` is **retired** (2030-09-30): it now only prints where its
+`session mail send` is **retired** (2030-12-08): it now only prints where its
 verbs went. The rules above still match it, but every deny sends the caller to
 the live door, never back to the retired `--body-file` or MCP `mail_send`
 forms.
@@ -118,11 +118,11 @@ the rest still judged; click refuses it in its own words). Commands the guard
 does not match (`message list --anything`, a `grep` for the phrase) never
 reach this rule.
 
-Measured on 33,302 real agent Bash commands (2030-09-03): 1,645 denied, every
+Measured on 33,302 real agent Bash commands (2030-06-09): 1,645 denied, every
 one of them a genuine inline-body or damaged-subject send; **zero** denials of
 a command that merely mentioned the phrase. Scanning cost ~16µs per command (0.54s for the whole corpus); the hook process itself, python startup included, runs in ~15ms.
 
-Re-measured with the `message send` rule (2030-09-30), 30 days of transcripts:
+Re-measured with the `message send` rule (2030-12-08), 30 days of transcripts:
 168,906 Bash commands, 5,143 of them `message send` invocations. The session
 rules' decisions were identical to the pre-move hook's (1,104 denials, zero
 moved). `message send` denials: 2, both a real `$( )` in a subject; zero among

{sessionmail-0.2.0 → sessionmail-0.3.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "sessionmail"
-dynamic = ["version"]
+version = "0.3.0"
 description = "sessionmail - mail for coding agents: message, pager and memory over one maildir."
 readme = "README.md"
 requires-python = ">=3.11,<3.15"
@@ -50,14 +50,11 @@ Homepage = "https://github.com/sessionkit/sessionmail"
 Repository = "https://github.com/sessionkit/sessionmail"
 
 # ── Version: one source of truth ──────────────────────────────────────
-# .claude-plugin/plugin.json holds the version and scripts/release.py is
-# its single writer (it stamps plugin.json and marketplace.json). The
-# build READS it from there; hatchling's regex version source is why
-# hatchling is the backend (session's precedent, same reasoning).
-[tool.hatch.version]
-source = "regex"
-path = ".claude-plugin/plugin.json"
-pattern = '"version"\s*:\s*"(?P<version>[^"]+)"'
+# The ONE version is `version` in [project] above, static. scripts/release.py
+# is its single writer (through `uv version`, which keeps uv.lock in step)
+# and mirrors it into .claude-plugin/plugin.json and marketplace.json. This
+# is the family rule (the kit's docs/family-release.md): the version lives
+# in pyproject.toml and the release mirrors it.
 
 # ── Package data: the postfix map generator, and the arm instruction ──
 #

{sessionmail-0.2.0 → sessionmail-0.3.0}/scripts/seat-agent/README.md

@@ -9,6 +9,8 @@ through `message`, which keeps the package at three commands:
 
     message seat init --registry DIR ADDRESS     mint the seat's key (was scripts/seat-init)
     message seat agent ADDRESS [SOCKET]          run its agent (was scripts/seat-agent/seat-agent)
+    message seat agent --install ADDRESS [SOCKET]   render and load the LaunchAgent
+    message seat agent --uninstall ADDRESS           unload it and remove its plist
     message seat agent --template                print the LaunchAgent template
 
 The `seat` noun is hidden from `message --help` and from the MCP tools; `message
@@ -48,8 +50,14 @@ seat --help` answers when typed.
 
 ## The template
 
+`message seat agent --install ADDRESS [SOCKET]` renders it, writes it into
+`~/Library/LaunchAgents`, loads it with `launchctl bootstrap`, and checks that the agent
+answers. `--uninstall ADDRESS` boots it out and removes the plist. Their contract
+(output, exits, the `Capability: install` marker) is in
+[`docs/message-seat.md`](../../docs/message-seat.md).
+
 `message seat agent --template` prints it, and nothing else: it never renders it, loads
-it or runs launchctl. Render it by replacing each `@PLACEHOLDER@`, then lint it:
+it or runs launchctl. To render it by hand, replace each `@PLACEHOLDER@`, then lint it:
 
     message seat agent --template |
       sed -e 's|@ADDRESS@|bot.alice|g' -e "s|@MESSAGE@|$(command -v message)|g" \
@@ -68,9 +76,9 @@ ProgramArguments renders to `message seat agent ADDRESS SOCKET`. The placeholder
 On a host that runs `message` from an editable checkout, merging there changes the
 seat's agent at its next start.
 
-**Installing it is not done here.** Writing the plist into `~/Library/LaunchAgents` and
-running `launchctl bootstrap` is the host operator's act, by hand. No
-test and no make target in this repo does either.
+**No test and no make target loads a job on the real launchd.** The suite runs
+`--install` against a fake `launchctl` (`SESSIONMAIL_LAUNCHCTL`). A live install is the
+host operator's act: `message seat agent --install`, or the hand render above.
 
 ## The adapter's env (an example; the adapter owns it)
 

{sessionmail-0.2.0 → sessionmail-0.3.0}/src/sessionmail/_birth.py

@@ -68,6 +68,19 @@ SUBSCRIBE_VAR = "SESSIONMAIL_SUBSCRIBE"
 #: one: the detached generator's line.
 BORN_FILE = "born"
 
+#: What a generator line says on a mail-drop host, suffix or none: the drop
+#: builds no maps, so no generator runs there (`_seat._run_generator`'s own
+#: words for it; `tests/test_birth.py` holds the two equal).
+DROP_REGEN = "generator not run: the carrier is the mail drop; it reads the maps per send"
+
+
+def _on_drop(env: Mapping[str, str] | None) -> bool:
+    """Whether the carrier is the mail drop. Decides what a generator line
+    SAYS, never what runs."""
+    from . import _settings
+    return _settings.carrier(env).kind == "drop"
+
+
 #: Who births when the caller does not say: the subscription journal's `argv`.
 VIA_LISTEN = "pager listen"
 
@@ -350,13 +363,19 @@ def ensure_session_box(session: str, seat: "Seat | None", *,
                                   f"{stale}, left by an earlier run of this session; its row "
                                   f"goes at the next regen")
     if has_session and seat is not None:
-        live, why = _seat.doorbell(seat.address, session, env)
+        if detach and _settings.carrier(env).kind == "drop":
+            # The drop's doorbell runs the generator (`_drop.prepare`), and a
+            # detaching call never waits on it; the listen asks instead.
+            live, why = None, "not measured at session start; the first pager listen measures it"
+        else:
+            live, why = _seat.doorbell(seat.address, session, env)
         regen_said = ""
         if (birth.born or live is False) and detach:
             _detach(birth, session, env, root, record_source)
             regen_said = birth.regen_line
         elif (birth.born or live is False) and birth.suffix_unknown:
-            regen_said = "generator NOT run (MagicDNS suffix unknown)"
+            regen_said = (DROP_REGEN if _on_drop(env)
+                          else "generator NOT run (MagicDNS suffix unknown)")
         elif birth.born or live is False:
             regen_said = _seat.regen_maps(root, env=env)
             birth.regen, birth.regen_line = "ran", regen_said
@@ -384,7 +403,8 @@ def ensure_session_box(session: str, seat: "Seat | None", *,
         # included: the whole generator, detached, routes the boxes too.
         _detach(birth, session, env, root, record_source)
     elif owed and birth.suffix_unknown:
-        birth.sub_lines.append("  map        : NOT rebuilt - MagicDNS suffix unknown; the "
+        birth.sub_lines.append(f"  map        : {DROP_REGEN}" if _on_drop(env) else
+                               "  map        : NOT rebuilt - MagicDNS suffix unknown; the "
                                "subscriptions stand, and the next rebuild with a suffix "
                                "routes them")
     elif owed:
@@ -429,8 +449,11 @@ def _main(argv: list[str] | None = None) -> int:
         # The hook did not ask for the suffix (it costs the hook's
         # budget), so the child asks, and never runs the generator without
         # one: the record's line 2 says so instead.
+        # On a mail-drop host no generator runs either way, so the line
+        # names the carrier, not the suffix.
         suffix, why = _magicdns.lookup()
         line = (_seat.regen_maps(Path(args.regen)) if suffix is not None
+                else DROP_REGEN if _on_drop(None)
                 else f"generator NOT run (MagicDNS suffix unknown: {why})")
     except Exception as exc:  # noqa: BLE001 - regen_maps never raises; a child that dies says why
         line = f"generator failed in the background: {exc}"
@@ -443,8 +466,8 @@ def _main(argv: list[str] | None = None) -> int:
     return 0
 
 
-__all__ = ["BORN_FILE", "SUBSCRIBE_VAR", "Birth", "BornRecord", "birth_subscriptions", "born_record",
-           "detach_regen", "ensure_session_box", "read_born"]
+__all__ = ["BORN_FILE", "DROP_REGEN", "SUBSCRIBE_VAR", "Birth", "BornRecord", "birth_subscriptions",
+           "born_record", "detach_regen", "ensure_session_box", "read_born"]
 
 
 if __name__ == "__main__":

{sessionmail-0.2.0 → sessionmail-0.3.0}/src/sessionmail/_boxes.py

@@ -248,7 +248,7 @@ def live_sessions() -> set[str]:
     """The sessions this host counts live: a harness sidecar
     (`sessiontools.sessions`) whose pid is alive - `session list`'s rule,
     which the generator applies itself, from the same sidecars and `ps`
-    (`live_sessions_json`, since master 2030-09-30). Its procStart check is
+    (`live_sessions_json`, since master 2030-12-08). Its procStart check is
     not repeated here: a recycled pid can at worst name one extra subscriber
     in a listing, and routes nothing. `sessiontools` also skips a sidecar
     with no `status`/`updatedAt`, which the generator does not need; every

{sessionmail-0.2.0 → sessionmail-0.3.0}/src/sessionmail/_drop.py

@@ -132,6 +132,11 @@ class Maps:
     #: The domain a bare From is qualified with (`origin`); set by the
     #: sender's drop pre-flight, empty when nothing asked.
     origin: str = ""
+    #: Why the generator refused the alias print (`generator exit N: its
+    #: last stderr line`), set by `prepare`; empty when it printed. The
+    #: alias map is then empty, and a reader that must tell "no row" from
+    #: "no map" (the doorbell) reads this.
+    alias_refused: str = ""
 
 
 def selected(env: Mapping[str, str]) -> bool:
@@ -183,16 +188,18 @@ def origin(env: Mapping[str, str], host: str, notes: list[str] | None = None) ->
     - Else the FQDN from the ONE suffix definition (`_magicdns`), the form
       postfix writes when `myorigin = $myhostname`, and a form
       `_voice.host_forms` accepts.
-    - Else the short host, said in NOTES: the real generator refuses with
-      no suffix before the drop gets here, so only a generator that asks
-      for none (a test's fake) reaches it."""
+    - Else the short host. A host with no tailnet gets here on every send
+      (the generator's no-fqdn rows), and there the short host is right, so
+      nothing is said (`_magicdns.drop_without_tailnet`). Any other host
+      (a malformed operator suffix, or a tailscale that is there but does
+      not answer) is said in NOTES."""
     given = (env.get(ORIGIN_VAR) or "").strip() or _settings.file_text("postfix.origin", env)
     if given:
         return given
     found, _why = _magicdns.lookup(env)
     if found:
         return f"{host}.{found}"
-    if notes is not None:
+    if notes is not None and not _magicdns.drop_without_tailnet(env):
         notes.append(f"⚠  {_magicdns.UNKNOWN} - a bare From is qualified with the short "
                      f"host only (@{host})")
     return host
@@ -308,9 +315,9 @@ def prepare(env: Mapping[str, str]) -> Maps:
     if done.returncode == 0:
         maps.alias = _rows(done.stdout)
     else:
-        maps.notes.append(f"⚠  no alias map (generator exit {done.returncode}: "
-                          f"{_last(done.stderr)}) - seat mail lands in the seat's own box "
-                          "only; no session box gets its doorbell copy")
+        maps.alias_refused = f"generator exit {done.returncode}: {_last(done.stderr)}"
+        maps.notes.append(f"⚠  no alias map ({maps.alias_refused}) - seat mail lands in the "
+                          "seat's own box only; no session box gets its doorbell copy")
     return maps
 
 

{sessionmail-0.2.0 → sessionmail-0.3.0}/src/sessionmail/_init.py

@@ -480,7 +480,7 @@ def probe(key, env: Mapping[str, str]) -> bool:
     signer = SIGNER or _sender.sign_wire
     verify = VERIFY or _root.ssh_verify
     wire = (f"From: {key.principal}@probe.invalid\nTo: {key.principal}@probe.invalid\n"
-            f"Subject: [ROOT] signing probe\nDate: Tue, 01 Jan 2030 00:00:00 +0000\n"
+            f"Subject: [ROOT] signing probe\nDate: Sun, 09 Jun 2030 00:00:00 +0000\n"
             f"Message-ID: <probe@probe.invalid>\nMIME-Version: 1.0\n"
             f"Content-Type: text/plain; charset=utf-8\n\n"
             f"memory init: a signing probe, never sent\n").encode("utf-8")

{sessionmail-0.2.0 → sessionmail-0.3.0}/src/sessionmail/_injectlog.py

@@ -130,7 +130,7 @@ def tool_use_ids(payload: Mapping[str, Any]) -> list[str]:
     """The tool calls a hook run answers: `tool_calls[].tool_use_id`, then a
     top-level `tool_use_id` (PreToolUse), the missing ones dropped; `[]`
     when there are none. The inner key is Claude Code's hooks reference,
-    "PostToolBatch input" (code.claude.com/docs/en/hooks, read 2030-10-16):
+    "PostToolBatch input" (code.claude.com/docs/en/hooks, read 2030-06-09):
     each `tool_calls` element carries `tool_name`, `tool_input`,
     `tool_use_id` and `tool_response`. Never anything else of the call:
     its input and response are not ours to log."""