@aitne/daemon 0.1.6 → 0.1.8

package/dist/api/routes/mail/provider-resolver.js

@@ -0,0 +1,286 @@
+import { readIntegrations } from "../../../db/integrations-store.js";
+import { markIntegrationWrite } from "../../../safety/integration-write-tracker.js";
+import { ProviderNotImplementedError } from "../../../services/mail/account-registry.js";
+import { createLogger } from "../../../logging.js";
+import { composeIssue, respondWithAgentError } from "../../helpers/agent-errors.js";
+import { gatedIntegrationForKind, gatedMailIntegrationResponse, } from "./gating.js";
+const logger = createLogger("mail-api");
+/** Lower bound on the §C6 agent-write-attribution TTL. Covers the common
+ *  case where the poll interval is short (default 180s) — we still want
+ *  enough slack for a user action that triggered the send to settle before
+ *  the next poll picks it up. Real TTL scales with the configured poll
+ *  interval (see {@link computeAgentWriteTtlMs}). */
+const MAIL_AGENT_WRITE_TTL_FLOOR_MS = 5 * 60 * 1000;
+/** The poll-interval multiplier. Two ticks of slack means: a send at T=0
+ *  survives the T=poll and T=2*poll ticks before the mark expires —
+ *  enough to absorb one missed/delayed tick without losing attribution. */
+const MAIL_AGENT_WRITE_TTL_POLL_MULTIPLIER = 2;
+export function computeAgentWriteTtlMs(pollIntervalSeconds) {
+    const derived = (pollIntervalSeconds ?? 0) * 1000 * MAIL_AGENT_WRITE_TTL_POLL_MULTIPLIER;
+    return Math.max(MAIL_AGENT_WRITE_TTL_FLOOR_MS, derived);
+}
+/**
+ * Build the agent-consumable 501 response for an operation the resolved
+ * provider doesn't implement (e.g. IMAP can't manage drafts). The legacy
+ * shape `{ error: "not_implemented", message: "<op> not supported on <kind>" }`
+ * is preserved via legacyFields so existing tests keep matching.
+ */
+export function notImplementedResponse(c, operation, providerKind) {
+    const message = `${operation} not supported on ${providerKind}`;
+    return respondWithAgentError(c, 501, [
+        composeIssue("mail.not_implemented", {
+            field: `provider.${operation}`,
+            received: providerKind,
+            hint: `${message}. Try a Gmail or Outlook account, or use a different operation.`,
+        }),
+    ], { legacyFields: { message } });
+}
+export function providerError(c, err, tag) {
+    const message = err instanceof Error ? err.message : String(err);
+    // Classify common provider errors where a 404 from the backend should not
+    // become a 500 for the caller. The Graph client throws GraphError with a
+    // httpStatus field; the IMAP layer throws Error with a responseCode.
+    const candidate = err;
+    const status = pickNumber(candidate.httpStatus) ??
+        pickNumber(candidate.statusCode) ??
+        pickNumber(candidate.response?.status);
+    if (status === 404) {
+        return respondWithAgentError(c, 404, [
+            composeIssue("mail.account_not_found", {
+                field: tag,
+                received: message,
+                hint: `Provider returned 404 for ${tag}. The resource (message, thread, label, draft) may have been deleted or the id is wrong. Re-fetch to verify.`,
+            }),
+        ], { legacyFields: { message } });
+    }
+    if (status === 501) {
+        // Providers throw MailOperationNotSupportedError (httpStatus=501) when a
+        // sub-case of an implemented method is out of scope — e.g. IMAP draft
+        // writes. Map to the same shape as the missing-method-on-interface path
+        // so callers can't distinguish the two (both mean "don't retry here").
+        return respondWithAgentError(c, 501, [
+            composeIssue("mail.not_implemented", {
+                field: tag,
+                received: message,
+                hint: `Provider returned 501 for ${tag} — operation outside the implemented sub-case. Stop retrying; either try a different operation or pick a different provider.`,
+            }),
+        ], { legacyFields: { message } });
+    }
+    if (status === 401 || status === 403) {
+        return respondWithAgentError(c, 502, [
+            composeIssue("mail.provider_auth_error", {
+                field: tag,
+                received: message,
+            }),
+        ], { legacyFields: { message } });
+    }
+    logger.error({ err, tag }, `mail route failure: ${tag}`);
+    return respondWithAgentError(c, 500, [
+        composeIssue("mail.upstream_error", {
+            field: tag,
+            received: message,
+            hint: `Mail provider ${tag} failed. Read the message verbatim. Transient 5xx may resolve after 30s; otherwise notify the user.`,
+        }),
+    ], { legacyErrorCode: tag, legacyFields: { message } });
+}
+function pickNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+/**
+ * Builds the shared per-account access surface used by every handler that
+ * proxies to a live MailProvider. Owns three concerns that have to stay in
+ * lockstep:
+ *   1. resolveProvider — kind/active/auth scope-gate + §4.8 / §9.2
+ *      integration-mode gate. Single chokepoint so the recovery endpoints
+ *      that intentionally bypass it (POST /config/mail/app-password/:id/refresh)
+ *      stay obvious.
+ *   2. renderResolveError — maps the resolveProvider failure shape to an
+ *      HTTP response. The 410 branch carries §4.5.2 / §9.2 body shape so
+ *      dashboard + agent tooling can detect the gated-mode surface
+ *      uniformly.
+ *   3. agent-write attribution — markAgentWrite / markAgentWriteRfc822 /
+ *      markGmailIntegrationWrite so the unified poller suppresses what
+ *      the agent just touched (§3.2 + INTEGRATION-DRIFT-DETECTION-PLAN.md §11).
+ */
+export function createProviderResolver(deps) {
+    const resolveProvider = async (accountId) => {
+        const registry = deps.services.mail;
+        if (!registry) {
+            return {
+                ok: false,
+                status: 503,
+                code: "mail_not_configured",
+                message: "Mail registry unavailable.",
+            };
+        }
+        const account = registry.getAccount(accountId);
+        if (!account) {
+            return {
+                ok: false,
+                status: 404,
+                code: "not_found",
+                message: `No mail account ${accountId}`,
+            };
+        }
+        // §4.8 per-account mode gate. The route-gate middleware cannot
+        // blanket 410 `/api/mail/*` because it would also stop direct-only
+        // providers (iCloud, Yahoo, IMAP). Instead, accounts whose kind maps
+        // to a gated integration (Gmail → gmail; Outlook → outlook_mail)
+        // return 410 when that integration is in `delegated` or `native`
+        // mode. Per INTEGRATION_NATIVE_MODE_DESIGN.md §9.2 the gate widened
+        // from delegated-only so the agent gets a consistent redirect
+        // signal when Outlook is flipped to native (user-managed MCP).
+        // `disabled` accounts are filtered at the data path (poller) — see
+        // `gatedMailIntegrationResponse` for why we do not gate them here.
+        const gatedIntegrationKey = gatedIntegrationForKind(account.kind);
+        if (gatedIntegrationKey) {
+            const state = readIntegrations(deps.db)[gatedIntegrationKey];
+            const gateResponse = gatedMailIntegrationResponse(gatedIntegrationKey, state);
+            if (gateResponse !== null) {
+                return {
+                    ok: false,
+                    status: 410,
+                    code: gateResponse.error,
+                    message: gateResponse.message,
+                    integration: gateResponse.integration,
+                    backend: gateResponse.backend,
+                    mode: gateResponse.mode,
+                };
+            }
+        }
+        // Single scope-gate check mirroring `passesScopeGate` used by the
+        // unified poller and `accounts.md` materialization. Clients get one
+        // error shape (`provider_not_enabled`) with a machine-readable `detail`
+        // field so dashboards can render a specific prompt without having to
+        // branch on three near-synonymous codes.
+        //
+        // Recovery endpoints (`POST /config/mail/app-password/:id/refresh`)
+        // intentionally bypass this gate by reading the account directly — users
+        // MUST be able to fix a degraded account. If you add new recovery flows,
+        // keep that property: never route recovery through `resolveProvider`.
+        const detail = !deps.config.enabledMailProviders.includes(account.kind)
+            ? "kind_not_enabled"
+            : !account.active
+                ? "account_inactive"
+                : account.authStatus !== "healthy"
+                    ? "account_unhealthy"
+                    : null;
+        if (detail !== null) {
+            const detailMessages = {
+                kind_not_enabled: `${account.kind} is not in enabledMailProviders.`,
+                account_inactive: `Mail account ${accountId} is disabled.`,
+                account_unhealthy: `Mail account ${accountId} requires re-auth (status: ${account.authStatus}).`,
+            };
+            return {
+                ok: false,
+                status: 400,
+                code: "provider_not_enabled",
+                message: detailMessages[detail],
+                detail,
+            };
+        }
+        try {
+            const provider = await registry.getProvider(accountId);
+            if (!provider) {
+                return {
+                    ok: false,
+                    status: 501,
+                    code: "provider_not_implemented",
+                    message: `Provider ${account.kind} is not wired up.`,
+                };
+            }
+            return { ok: true, provider };
+        }
+        catch (err) {
+            if (err instanceof ProviderNotImplementedError) {
+                return {
+                    ok: false,
+                    status: 501,
+                    code: err.code,
+                    message: err.message,
+                };
+            }
+            throw err;
+        }
+    };
+    /**
+     * Render a `resolveProvider` failure as an HTTP response. The 410
+     * branch carries the §4.5.2 / §9.2 body shape (integration, backend,
+     * mode) so the dashboard and agent tooling can uniformly detect a
+     * gated-mode surface regardless of whether the path was caught by the
+     * global route-gate middleware (§4.5.2) or the per-account gate here
+     * (§4.8 + §9.2 native widening). The mode field carries through from
+     * `gatedMailIntegrationResponse`; falling back to "delegated"
+     * preserves the legacy shape for any 410 outcomes that pre-dated the
+     * native widening.
+     */
+    const renderResolveError = (c, resolved) => {
+        if (resolved.status === 410) {
+            return c.json({
+                error: resolved.code,
+                message: resolved.message,
+                integration: resolved.integration ?? null,
+                backend: resolved.backend ?? null,
+                mode: resolved.mode ?? "delegated",
+            }, 410);
+        }
+        return c.json({
+            error: resolved.code,
+            message: resolved.message,
+            detail: resolved.detail,
+        }, resolved.status);
+    };
+    // TTL is derived from the current poll interval so the tracker mark
+    // outlives at least one poll tick (see computeAgentWriteTtlMs). Read at
+    // mark-time — reflects a runtime PATCH /api/config without a restart.
+    const writeTtlMs = () => computeAgentWriteTtlMs(deps.config.mailPollIntervalSeconds);
+    const markAgentWrite = (accountId, providerMsgId) => {
+        deps.writeTracker?.markWriting(`mail:${accountId}:${providerMsgId}`, undefined, { ttlMs: writeTtlMs() });
+    };
+    // INTEGRATION-DRIFT-DETECTION-PLAN.md §11 Phase 4 — actor attribution
+    // for the persistent `integration_writes` table. Only Gmail accounts
+    // map to an `IntegrationKey` (per `gatedIntegrationForKind`); iCloud /
+    // Outlook / Yahoo / IMAP have no integration descriptor and skip.
+    // Each id passed here is marked under `(gmail, id)` for the Gmail
+    // default TTL (30 min — see INTEGRATION_WRITE_TTL_MS). Non-Gmail
+    // accounts return a no-op; the in-memory `markAgentWrite` above is the
+    // only attribution surface for them.
+    const markGmailIntegrationWrite = (accountId, ...providerIds) => {
+        const registry = deps.services.mail;
+        /* c8 ignore next */ if (!registry)
+            return;
+        const account = registry.getAccount(accountId);
+        /* c8 ignore next */ if (!account)
+            return;
+        if (gatedIntegrationForKind(account.kind) !== "gmail")
+            return;
+        for (const id of providerIds) {
+            if (typeof id === "string" && id.length > 0) {
+                markIntegrationWrite(deps.db, "gmail", id);
+            }
+        }
+    };
+    /**
+     * Second-key attribution via RFC-2822 Message-Id. On IMAP, the Sent folder
+     * UID the poller later observes has no relationship to the draft UID the
+     * route marked. The rfc822 key is stable across the transport path so the
+     * poller can still match. Providers that don't surface the id leave this
+     * a no-op (route treats undefined as "skip"). The poller is taught to
+     * check both keys (§MailPoller.pollAccount).
+     */
+    const markAgentWriteRfc822 = (accountId, rfc822MsgId) => {
+        if (!rfc822MsgId)
+            return;
+        deps.writeTracker?.markWriting(`mail:${accountId}:rfc822:${rfc822MsgId}`, undefined, { ttlMs: writeTtlMs() });
+    };
+    const ensureMethod = (provider, method) => typeof provider[method] === "function";
+    return {
+        resolveProvider,
+        renderResolveError,
+        ensureMethod,
+        markAgentWrite,
+        markAgentWriteRfc822,
+        markGmailIntegrationWrite,
+    };
+}
+//# sourceMappingURL=provider-resolver.js.map

package/dist/api/routes/mail/provider-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-resolver.js","sourceRoot":"","sources":["../../../../src/api/routes/mail/provider-resolver.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AAEpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,EACL,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AAGrB,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAExC;;;;qDAIqD;AACrD,MAAM,6BAA6B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpD;;2EAE2E;AAC3E,MAAM,oCAAoC,GAAG,CAAC,CAAC;AAE/C,MAAM,UAAU,sBAAsB,CACpC,mBAAuC;IAEvC,MAAM,OAAO,GACX,CAAC,mBAAmB,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,oCAAoC,CAAC;IAC3E,OAAO,IAAI,CAAC,GAAG,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAkBD;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,CAAU,EACV,SAAiB,EACjB,YAAoB;IAEpB,MAAM,OAAO,GAAG,GAAG,SAAS,qBAAqB,YAAY,EAAE,CAAC;IAChE,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;QACnC,YAAY,CAAC,sBAAsB,EAAE;YACnC,KAAK,EAAE,YAAY,SAAS,EAAE;YAC9B,QAAQ,EAAE,YAAY;YACtB,IAAI,EAAE,GAAG,OAAO,iEAAiE;SAClF,CAAC;KACH,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAU,EAAE,GAAY,EAAE,GAAW;IACjE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,0EAA0E;IAC1E,yEAAyE;IACzE,qEAAqE;IACrE,MAAM,SAAS,GAAG,GAIjB,CAAC;IACF,MAAM,MAAM,GACV,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC;QAChC,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC;QAChC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;YACnC,YAAY,CAAC,wBAAwB,EAAE;gBACrC,KAAK,EAAE,GAAG;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,6BAA6B,GAAG,8GAA8G;aACrJ,CAAC;SACH,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;YACnC,YAAY,CAAC,sBAAsB,EAAE;gBACnC,KAAK,EAAE,GAAG;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,6BAA6B,GAAG,8HAA8H;aACrK,CAAC;SACH,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACrC,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;YACnC,YAAY,CAAC,0BAA0B,EAAE;gBACvC,KAAK,EAAE,GAAG;gBACV,QAAQ,EAAE,OAAO;aAClB,CAAC;SACH,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,uBAAuB,GAAG,EAAE,CAAC,CAAC;IACzD,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;QACnC,YAAY,CAAC,qBAAqB,EAAE;YAClC,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,iBAAiB,GAAG,qGAAqG;SAChI,CAAC;KACH,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,CAAwB,CAAC;AACjF,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC;AAID;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAA2B;IAChE,MAAM,eAAe,GAAG,KAAK,EAC3B,SAAiB,EACe,EAAE;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,4BAA4B;aACtC,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,mBAAmB,SAAS,EAAE;aACxC,CAAC;QACJ,CAAC;QACD,+DAA+D;QAC/D,mEAAmE;QACnE,qEAAqE;QACrE,iEAAiE;QACjE,iEAAiE;QACjE,oEAAoE;QACpE,8DAA8D;QAC9D,+DAA+D;QAC/D,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC7D,MAAM,YAAY,GAAG,4BAA4B,CAC/C,mBAAmB,EACnB,KAAK,CACN,CAAC;YACF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,YAAY,CAAC,KAAK;oBACxB,OAAO,EAAE,YAAY,CAAC,OAAO;oBAC7B,WAAW,EAAE,YAAY,CAAC,WAAW;oBACrC,OAAO,EAAE,YAAY,CAAC,OAAO;oBAC7B,IAAI,EAAE,YAAY,CAAC,IAAI;iBACxB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,kEAAkE;QAClE,oEAAoE;QACpE,wEAAwE;QACxE,qEAAqE;QACrE,yCAAyC;QACzC,EAAE;QACF,oEAAoE;QACpE,yEAAyE;QACzE,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,MAAM,GAID,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;YACjE,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;gBACf,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;oBAChC,CAAC,CAAC,mBAAmB;oBACrB,CAAC,CAAC,IAAI,CAAC;QACb,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,cAAc,GAA2C;gBAC7D,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,kCAAkC;gBACnE,gBAAgB,EAAE,gBAAgB,SAAS,eAAe;gBAC1D,iBAAiB,EAAE,gBAAgB,SAAS,8BAA8B,OAAO,CAAC,UAAU,IAAI;aACjG,CAAC;YACF,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC;gBAC/B,MAAM;aACP,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,YAAY,OAAO,CAAC,IAAI,mBAAmB;iBACrD,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,2BAA2B,EAAE,CAAC;gBAC/C,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAEF;;;;;;;;;;OAUG;IACH,MAAM,kBAAkB,GAAG,CACzB,CAAU,EACV,QAAuD,EACvD,EAAE;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,QAAQ,CAAC,IAAI;gBACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI;gBACzC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,IAAI;gBACjC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,WAAW;aACnC,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CACX;YACE,KAAK,EAAE,QAAQ,CAAC,IAAI;YACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,EACD,QAAQ,CAAC,MAAM,CAChB,CAAC;IACJ,CAAC,CAAC;IAEF,oEAAoE;IACpE,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,UAAU,GAAG,GAAW,EAAE,CAC9B,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAE9D,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAE,aAAqB,EAAQ,EAAE;QACxE,IAAI,CAAC,YAAY,EAAE,WAAW,CAC5B,QAAQ,SAAS,IAAI,aAAa,EAAE,EACpC,SAAS,EACT,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CACxB,CAAC;IACJ,CAAC,CAAC;IAEF,sEAAsE;IACtE,qEAAqE;IACrE,uEAAuE;IACvE,kEAAkE;IAClE,kEAAkE;IAClE,iEAAiE;IACjE,uEAAuE;IACvE,qCAAqC;IACrC,MAAM,yBAAyB,GAAG,CAChC,SAAiB,EACjB,GAAG,WAAqD,EAClD,EAAE;QACR,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,oBAAoB,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/C,oBAAoB,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO;YAAE,OAAO;QAC9D,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;YAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF;;;;;;;OAOG;IACH,MAAM,oBAAoB,GAAG,CAC3B,SAAiB,EACjB,WAAsC,EAChC,EAAE;QACR,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,IAAI,CAAC,YAAY,EAAE,WAAW,CAC5B,QAAQ,SAAS,WAAW,WAAW,EAAE,EACzC,SAAS,EACT,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CACxB,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CACnB,QAAsB,EACtB,MAAS,EACA,EAAE,CAAC,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,UAAU,CAAC;IAErD,OAAO;QACL,eAAe;QACf,kBAAkB;QAClB,YAAY;QACZ,cAAc;QACd,oBAAoB;QACpB,yBAAyB;KAC1B,CAAC;AACJ,CAAC"}

package/dist/api/routes/mail/providers.d.ts

@@ -0,0 +1,4 @@
+import type { Hono } from "hono";
+import type { MailRouteDependencies } from "./dependencies.js";
+export declare function registerProvidersRoutes(app: Hono, deps: MailRouteDependencies): void;
+//# sourceMappingURL=providers.d.ts.map

package/dist/api/routes/mail/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../../../src/api/routes/mail/providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAQjC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAI/D,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,IAAI,EACT,IAAI,EAAE,qBAAqB,GAC1B,IAAI,CAwEN"}

package/dist/api/routes/mail/providers.js

@@ -0,0 +1,73 @@
+import { createSettingsStore } from "../../../settings/settings-store.js";
+import { applyConfigUpdates } from "../../env-writer.js";
+import { createLogger } from "../../../logging.js";
+import { readJsonBody } from "../../json-body.js";
+import { composeIssue, respondWithAgentError } from "../../helpers/agent-errors.js";
+import { ALL_KINDS, PROVIDER_LABELS } from "./gating.js";
+const logger = createLogger("mail-api");
+export function registerProvidersRoutes(app, deps) {
+    const getSettingsStore = () => deps.settingsStore ?? createSettingsStore(deps.db);
+    app.get("/mail/providers", (c) => {
+        const registry = deps.services.mail;
+        const accounts = registry?.listAccounts() ?? [];
+        const available = ALL_KINDS.map((kind) => {
+            const ofKind = accounts.filter((a) => a.kind === kind);
+            return {
+                kind,
+                label: PROVIDER_LABELS[kind],
+                accountsConfigured: ofKind.length,
+                accountsHealthy: ofKind.filter((a) => a.authStatus === "healthy").length,
+            };
+        });
+        return c.json({
+            enabledKinds: [...deps.config.enabledMailProviders],
+            available,
+        });
+    });
+    app.patch("/mail/providers", async (c) => {
+        const parsedBody = await readJsonBody(c);
+        if (!parsedBody.ok)
+            return parsedBody.response;
+        const candidate = parsedBody.body
+            ?.enabledKinds;
+        if (!Array.isArray(candidate)) {
+            return respondWithAgentError(c, 400, [
+                composeIssue("mail.invalid_body", {
+                    field: "enabledKinds",
+                    received: candidate === undefined ? "<missing>" : typeof candidate,
+                    hint: "enabledKinds must be an array of provider kinds (e.g. ['gmail','outlook','imap']). Empty array disables all.",
+                }),
+            ], { legacyFields: { message: "enabledKinds must be an array" } });
+        }
+        const settingsStore = getSettingsStore();
+        const result = await applyConfigUpdates(deps.config, settingsStore, {
+            enabledMailProviders: candidate,
+        });
+        if (Object.keys(result.errors).length > 0) {
+            return respondWithAgentError(c, 400, [
+                composeIssue("mail.validation_failed", {
+                    field: "enabledKinds",
+                    received: candidate,
+                }),
+            ], { legacyFields: { errors: result.errors } });
+        }
+        const newKinds = deps.config.enabledMailProviders;
+        const registry = deps.services.mail;
+        const before = new Set();
+        const after = new Set(newKinds);
+        const accounts = registry?.listAccounts() ?? [];
+        for (const acct of accounts) {
+            before.add(acct.kind);
+        }
+        const dormantAccounts = accounts
+            .filter((a) => before.has(a.kind) && !after.has(a.kind))
+            .map((a) => a.id);
+        const resumedAccounts = accounts
+            .filter((a) => after.has(a.kind))
+            .map((a) => a.id);
+        registry?.onProviderSelectionChanged(newKinds);
+        logger.info({ enabledKinds: [...newKinds], dormantAccounts, resumedAccounts }, "mail provider selection updated");
+        return c.json({ status: "updated", dormantAccounts, resumedAccounts });
+    });
+}
+//# sourceMappingURL=providers.js.map

package/dist/api/routes/mail/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../../../src/api/routes/mail/providers.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGzD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAExC,MAAM,UAAU,uBAAuB,CACrC,GAAS,EACT,IAA2B;IAE3B,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAC5B,IAAI,CAAC,aAAa,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAErD,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,MAAM,QAAQ,GAAG,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YACvD,OAAO;gBACL,IAAI;gBACJ,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC;gBAC5B,kBAAkB,EAAE,MAAM,CAAC,MAAM;gBACjC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,MAAM;aACzE,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;YACnD,SAAS;SACV,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC/C,MAAM,SAAS,GAAI,UAAU,CAAC,IAA0C;YACtE,EAAE,YAAY,CAAC;QACjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;gBACnC,YAAY,CAAC,mBAAmB,EAAE;oBAChC,KAAK,EAAE,cAAc;oBACrB,QAAQ,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,SAAS;oBAClE,IAAI,EAAE,8GAA8G;iBACrH,CAAC;aACH,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE;YAClE,oBAAoB,EAAE,SAAS;SAChC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;gBACnC,YAAY,CAAC,wBAAwB,EAAE;oBACrC,KAAK,EAAE,cAAc;oBACrB,QAAQ,EAAE,SAAS;iBACpB,CAAC;aACH,EAAE,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAmB,QAAQ,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QACD,MAAM,eAAe,GAAG,QAAQ;aAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aACvD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,MAAM,eAAe,GAAG,QAAQ;aAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAEpB,QAAQ,EAAE,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CACT,EAAE,YAAY,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,eAAe,EAAE,eAAe,EAAE,EACjE,iCAAiC,CAClC,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/api/routes/mail/search-health.d.ts

@@ -0,0 +1,4 @@
+import type { Hono } from "hono";
+import type { MailRouteDependencies } from "./dependencies.js";
+export declare function registerSearchHealthRoutes(app: Hono, deps: MailRouteDependencies): void;
+//# sourceMappingURL=search-health.d.ts.map

package/dist/api/routes/mail/search-health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-health.d.ts","sourceRoot":"","sources":["../../../../src/api/routes/mail/search-health.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AASjC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE/D,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,IAAI,EACT,IAAI,EAAE,qBAAqB,GAC1B,IAAI,CAgJN"}

package/dist/api/routes/mail/search-health.js

@@ -0,0 +1,131 @@
+import { composeIssue, respondWithAgentError } from "../../helpers/agent-errors.js";
+import { searchMail } from "../../../services/mail/mail-search.js";
+import { readIntegrations } from "../../../db/integrations-store.js";
+import { gatedIntegrationForKind, gatedMailIntegrationResponse, } from "./gating.js";
+import { parseIntParam } from "./validators.js";
+export function registerSearchHealthRoutes(app, deps) {
+    // ──────────────────────────────────────────────────────────────────────────
+    // Cross-account local search backed by the fts_mail_messages virtual
+    // table. Returns a flat list of lightweight summaries sourced
+    // from the index — no provider round-trip. Use this as the first stop for
+    // "find emails about X" queries; fall back to `/mail/:acct/messages?q=`
+    // only when the user wants provider-fresh results or matches bodies older
+    // than the local index.
+    //
+    // Shape matches MailMessageSummary (subset): { accountId, providerMsgId,
+    // subject, snippet, receivedAtUtc, from, isRead }. Results span all
+    // accounts by default; scope with `?accountId=`.
+    // ──────────────────────────────────────────────────────────────────────────
+    app.get("/mail/search", (c) => {
+        const q = c.req.query("q")?.trim() ?? "";
+        if (q.length === 0) {
+            return c.json({ error: "invalid_query", message: "q is required and must be non-empty" }, 400);
+        }
+        const limit = parseIntParam(c.req.query("limit"), 50, { min: 1, max: 500 });
+        const accountId = c.req.query("accountId") ?? undefined;
+        // §4.8 per-account mode gate for search — if the caller pins the
+        // query to a Gmail / Outlook account whose integration is in
+        // `delegated` or `native` mode, 410. The unscoped cross-account
+        // search path stays open; results for a gated account would just
+        // be stale FTS hits (live polling is off in both modes), which is
+        // acceptable for Phase 2 and documented in §4.4. Per
+        // INTEGRATION_NATIVE_MODE_DESIGN.md §9.2 the gate widened from
+        // delegated-only to cover native too so the agent gets a consistent
+        // redirect signal when Outlook is flipped to native (user-managed
+        // MCP) or Gmail's native binding is in play. `disabled` is not
+        // gated here — see `gatedMailIntegrationResponse` doc-comment.
+        if (accountId) {
+            const account = deps.services.mail?.getAccount(accountId);
+            if (account) {
+                const gatedIntegrationKey = gatedIntegrationForKind(account.kind);
+                if (gatedIntegrationKey) {
+                    const state = readIntegrations(deps.db)[gatedIntegrationKey];
+                    const gateResponse = gatedMailIntegrationResponse(gatedIntegrationKey, state);
+                    if (gateResponse !== null) {
+                        return c.json(gateResponse, 410);
+                    }
+                }
+            }
+        }
+        const hits = searchMail(deps.db, q, { accountId, limit });
+        const results = hits.map((h) => ({
+            accountId: h.accountId,
+            providerMsgId: h.providerMsgId,
+            subject: h.subject,
+            snippet: h.snippet,
+            receivedAtUtc: h.receivedAtUtc,
+            from: h.fromEmail ? { email: h.fromEmail } : null,
+            isRead: h.isRead,
+        }));
+        return c.json({ results, count: results.length, query: q });
+    });
+    // Read the mail-side parse_failures diagnostics table. The poller +
+    // ingestion pipeline write a row whenever a Kindle-export / travel /
+    // classification path bails out; this endpoint surfaces the latest
+    // failures so the dashboard (or a curl one-liner) can answer "why
+    // didn't my booking get picked up?". Read-only — no mutation surface.
+    app.get("/mail/parse-failures", (c) => {
+        const limit = parseIntParam(c.req.query("limit"), 50, { min: 1, max: 500 });
+        const accountId = c.req.query("accountId") ?? null;
+        const params = [];
+        let sql = `
+      SELECT id,
+             account_id      AS accountId,
+             provider_msg_id AS providerMsgId,
+             sender,
+             subject,
+             snippet,
+             error_reason    AS errorReason,
+             created_at      AS createdAt
+        FROM parse_failures`;
+        if (accountId) {
+            sql += ` WHERE account_id = ?`;
+            params.push(accountId);
+        }
+        sql += ` ORDER BY id DESC LIMIT ?`;
+        params.push(limit);
+        const rows = deps.db.prepare(sql).all(...params);
+        return c.json({ failures: rows, count: rows.length });
+    });
+    app.get("/mail/:accountId/health", (c) => {
+        const registry = deps.services.mail;
+        if (!registry) {
+            return respondWithAgentError(c, 503, [
+                composeIssue("mail.not_configured", {
+                    field: "services.mail",
+                    received: "<unavailable>",
+                }),
+            ]);
+        }
+        const accountId = c.req.param("accountId");
+        // §4.8 per-account mode gate — also applies to /health so the
+        // dashboard does not surface a stale poll cursor for an account
+        // whose integration the daemon has stopped touching (delegated /
+        // native). `disabled` is intentionally not gated here so the dash
+        // can still surface the last-known cursor while the user is
+        // mid-reconfigure. Recovery endpoints (`POST
+        // /config/mail/app-password/:id/refresh`) stay outside this gate.
+        const account = registry.getAccount(accountId);
+        if (account) {
+            const gatedIntegrationKey = gatedIntegrationForKind(account.kind);
+            if (gatedIntegrationKey) {
+                const state = readIntegrations(deps.db)[gatedIntegrationKey];
+                const gateResponse = gatedMailIntegrationResponse(gatedIntegrationKey, state);
+                if (gateResponse !== null) {
+                    return c.json(gateResponse, 410);
+                }
+            }
+        }
+        const health = registry.getHealth(accountId);
+        if (!health) {
+            return respondWithAgentError(c, 404, [
+                composeIssue("mail.account_not_found", {
+                    field: "accountId",
+                    received: accountId,
+                }),
+            ]);
+        }
+        return c.json(health);
+    });
+}
+//# sourceMappingURL=search-health.js.map

package/dist/api/routes/mail/search-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-health.js","sourceRoot":"","sources":["../../../../src/api/routes/mail/search-health.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,uCAAuC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EACL,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD,MAAM,UAAU,0BAA0B,CACxC,GAAS,EACT,IAA2B;IAE3B,6EAA6E;IAC7E,qEAAqE;IACrE,8DAA8D;IAC9D,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,wBAAwB;IACxB,EAAE;IACF,yEAAyE;IACzE,oEAAoE;IACpE,iDAAiD;IACjD,6EAA6E;IAC7E,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE;QAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,qCAAqC,EAAE,EAC1E,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;QACxD,iEAAiE;QACjE,6DAA6D;QAC7D,gEAAgE;QAChE,iEAAiE;QACjE,kEAAkE;QAClE,qDAAqD;QACrD,+DAA+D;QAC/D,oEAAoE;QACpE,kEAAkE;QAClE,+DAA+D;QAC/D,+DAA+D;QAC/D,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;YAC1D,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAClE,IAAI,mBAAmB,EAAE,CAAC;oBACxB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC;oBAC7D,MAAM,YAAY,GAAG,4BAA4B,CAC/C,mBAAmB,EACnB,KAAK,CACN,CAAC;oBACF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;wBAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI;YACjD,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,oEAAoE;IACpE,qEAAqE;IACrE,mEAAmE;IACnE,kEAAkE;IAClE,sEAAsE;IACtE,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;QACnD,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,IAAI,GAAG,GAAG;;;;;;;;;4BASc,CAAC;QACzB,IAAI,SAAS,EAAE,CAAC;YACd,GAAG,IAAI,uBAAuB,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;QACD,GAAG,IAAI,2BAA2B,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAS7C,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,EAAE,EAAE;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;gBACnC,YAAY,CAAC,qBAAqB,EAAE;oBAClC,KAAK,EAAE,eAAe;oBACtB,QAAQ,EAAE,eAAe;iBAC1B,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,8DAA8D;QAC9D,gEAAgE;QAChE,iEAAiE;QACjE,kEAAkE;QAClE,4DAA4D;QAC5D,6CAA6C;QAC7C,kEAAkE;QAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClE,IAAI,mBAAmB,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC;gBAC7D,MAAM,YAAY,GAAG,4BAA4B,CAC/C,mBAAmB,EACnB,KAAK,CACN,CAAC;gBACF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;oBAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;gBACnC,YAAY,CAAC,wBAAwB,EAAE;oBACrC,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,SAAS;iBACpB,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/api/routes/mail/tags-folders.d.ts

@@ -0,0 +1,5 @@
+import type { Hono } from "hono";
+import { type ProviderResolver } from "./provider-resolver.js";
+import type { MailRouteDependencies } from "./dependencies.js";
+export declare function registerTagsFoldersRoutes(app: Hono, _deps: MailRouteDependencies, resolver: ProviderResolver): void;
+//# sourceMappingURL=tags-folders.d.ts.map

package/dist/api/routes/mail/tags-folders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tags-folders.d.ts","sourceRoot":"","sources":["../../../../src/api/routes/mail/tags-folders.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE/D,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,IAAI,EACT,KAAK,EAAE,qBAAqB,EAC5B,QAAQ,EAAE,gBAAgB,GACzB,IAAI,CA8BN"}

package/dist/api/routes/mail/tags-folders.js

@@ -0,0 +1,35 @@
+import { providerError, } from "./provider-resolver.js";
+export function registerTagsFoldersRoutes(app, _deps, resolver) {
+    const { resolveProvider, renderResolveError, ensureMethod } = resolver;
+    app.get("/mail/:accountId/tags", async (c) => {
+        const accountId = c.req.param("accountId");
+        const resolved = await resolveProvider(accountId);
+        if (!resolved.ok)
+            return renderResolveError(c, resolved);
+        if (!ensureMethod(resolved.provider, "listTags")) {
+            // Minimal fallback: return empty catalog for providers that don't yet
+            // surface a tag list. Keeps callers from needing per-kind branching.
+            return c.json({ system: [], userDefined: [] });
+        }
+        try {
+            const catalog = await resolved.provider.listTags();
+            return c.json(catalog);
+        }
+        catch (err) {
+            return providerError(c, err, "list_tags_failed");
+        }
+    });
+    app.get("/mail/:accountId/folders", async (c) => {
+        const resolved = await resolveProvider(c.req.param("accountId"));
+        if (!resolved.ok)
+            return renderResolveError(c, resolved);
+        try {
+            const folders = await resolved.provider.listFolders();
+            return c.json({ folders });
+        }
+        catch (err) {
+            return providerError(c, err, "list_folders_failed");
+        }
+    });
+}
+//# sourceMappingURL=tags-folders.js.map

package/dist/api/routes/mail/tags-folders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tags-folders.js","sourceRoot":"","sources":["../../../../src/api/routes/mail/tags-folders.ts"],"names":[],"mappings":"AACA,OAAO,EACL,aAAa,GAEd,MAAM,wBAAwB,CAAC;AAGhC,MAAM,UAAU,yBAAyB,CACvC,GAAS,EACT,KAA4B,EAC5B,QAA0B;IAE1B,MAAM,EAAE,eAAe,EAAE,kBAAkB,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC;IAEvE,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;YACjD,sEAAsE;YACtE,qEAAqE;YACrE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAS,EAAE,CAAC;YACpD,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/api/routes/mail/validators.d.ts

@@ -0,0 +1,23 @@
+import type { SendInput, UpdateDraftInput } from "../../../services/mail/provider.js";
+export declare function parseIntParam(raw: string | undefined, fallback: number, bounds: {
+    min: number;
+    max: number;
+}): number;
+export declare function toStringArray(value: unknown): string[] | null;
+export declare function validateSendInput(body: unknown): {
+    ok: true;
+    value: SendInput;
+} | {
+    ok: false;
+    code: string;
+    message: string;
+};
+export declare function validateUpdateDraftInput(body: unknown): {
+    ok: true;
+    value: UpdateDraftInput;
+} | {
+    ok: false;
+    code: string;
+    message: string;
+};
+//# sourceMappingURL=validators.d.ts.map

package/dist/api/routes/mail/validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../../../src/api/routes/mail/validators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,gBAAgB,EACjB,MAAM,oCAAoC,CAAC;AAE5C,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnC,MAAM,CAKR;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,IAAI,CAK7D;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,OAAO,GACZ;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAkD/E;AAuBD,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,OAAO,GAEX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAyC/C"}