@aitne/daemon 0.1.7 → 0.1.8

package/dist/api/routes/mail/_pa_wip_mail/mail/provider-resolver.js

@@ -0,0 +1,286 @@
+import { readIntegrations } from "../../../db/integrations-store.js";
+import { markIntegrationWrite } from "../../../safety/integration-write-tracker.js";
+import { ProviderNotImplementedError } from "../../../services/mail/account-registry.js";
+import { createLogger } from "../../../logging.js";
+import { composeIssue, respondWithAgentError } from "../../helpers/agent-errors.js";
+import { gatedIntegrationForKind, gatedMailIntegrationResponse, } from "./gating.js";
+const logger = createLogger("mail-api");
+/** Lower bound on the §C6 agent-write-attribution TTL. Covers the common
+ *  case where the poll interval is short (default 180s) — we still want
+ *  enough slack for a user action that triggered the send to settle before
+ *  the next poll picks it up. Real TTL scales with the configured poll
+ *  interval (see {@link computeAgentWriteTtlMs}). */
+const MAIL_AGENT_WRITE_TTL_FLOOR_MS = 5 * 60 * 1000;
+/** The poll-interval multiplier. Two ticks of slack means: a send at T=0
+ *  survives the T=poll and T=2*poll ticks before the mark expires —
+ *  enough to absorb one missed/delayed tick without losing attribution. */
+const MAIL_AGENT_WRITE_TTL_POLL_MULTIPLIER = 2;
+export function computeAgentWriteTtlMs(pollIntervalSeconds) {
+    const derived = (pollIntervalSeconds ?? 0) * 1000 * MAIL_AGENT_WRITE_TTL_POLL_MULTIPLIER;
+    return Math.max(MAIL_AGENT_WRITE_TTL_FLOOR_MS, derived);
+}
+/**
+ * Build the agent-consumable 501 response for an operation the resolved
+ * provider doesn't implement (e.g. IMAP can't manage drafts). The legacy
+ * shape `{ error: "not_implemented", message: "<op> not supported on <kind>" }`
+ * is preserved via legacyFields so existing tests keep matching.
+ */
+export function notImplementedResponse(c, operation, providerKind) {
+    const message = `${operation} not supported on ${providerKind}`;
+    return respondWithAgentError(c, 501, [
+        composeIssue("mail.not_implemented", {
+            field: `provider.${operation}`,
+            received: providerKind,
+            hint: `${message}. Try a Gmail or Outlook account, or use a different operation.`,
+        }),
+    ], { legacyFields: { message } });
+}
+export function providerError(c, err, tag) {
+    const message = err instanceof Error ? err.message : String(err);
+    // Classify common provider errors where a 404 from the backend should not
+    // become a 500 for the caller. The Graph client throws GraphError with a
+    // httpStatus field; the IMAP layer throws Error with a responseCode.
+    const candidate = err;
+    const status = pickNumber(candidate.httpStatus) ??
+        pickNumber(candidate.statusCode) ??
+        pickNumber(candidate.response?.status);
+    if (status === 404) {
+        return respondWithAgentError(c, 404, [
+            composeIssue("mail.account_not_found", {
+                field: tag,
+                received: message,
+                hint: `Provider returned 404 for ${tag}. The resource (message, thread, label, draft) may have been deleted or the id is wrong. Re-fetch to verify.`,
+            }),
+        ], { legacyFields: { message } });
+    }
+    if (status === 501) {
+        // Providers throw MailOperationNotSupportedError (httpStatus=501) when a
+        // sub-case of an implemented method is out of scope — e.g. IMAP draft
+        // writes. Map to the same shape as the missing-method-on-interface path
+        // so callers can't distinguish the two (both mean "don't retry here").
+        return respondWithAgentError(c, 501, [
+            composeIssue("mail.not_implemented", {
+                field: tag,
+                received: message,
+                hint: `Provider returned 501 for ${tag} — operation outside the implemented sub-case. Stop retrying; either try a different operation or pick a different provider.`,
+            }),
+        ], { legacyFields: { message } });
+    }
+    if (status === 401 || status === 403) {
+        return respondWithAgentError(c, 502, [
+            composeIssue("mail.provider_auth_error", {
+                field: tag,
+                received: message,
+            }),
+        ], { legacyFields: { message } });
+    }
+    logger.error({ err, tag }, `mail route failure: ${tag}`);
+    return respondWithAgentError(c, 500, [
+        composeIssue("mail.upstream_error", {
+            field: tag,
+            received: message,
+            hint: `Mail provider ${tag} failed. Read the message verbatim. Transient 5xx may resolve after 30s; otherwise notify the user.`,
+        }),
+    ], { legacyErrorCode: tag, legacyFields: { message } });
+}
+function pickNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+/**
+ * Builds the shared per-account access surface used by every handler that
+ * proxies to a live MailProvider. Owns three concerns that have to stay in
+ * lockstep:
+ *   1. resolveProvider — kind/active/auth scope-gate + §4.8 / §9.2
+ *      integration-mode gate. Single chokepoint so the recovery endpoints
+ *      that intentionally bypass it (POST /config/mail/app-password/:id/refresh)
+ *      stay obvious.
+ *   2. renderResolveError — maps the resolveProvider failure shape to an
+ *      HTTP response. The 410 branch carries §4.5.2 / §9.2 body shape so
+ *      dashboard + agent tooling can detect the gated-mode surface
+ *      uniformly.
+ *   3. agent-write attribution — markAgentWrite / markAgentWriteRfc822 /
+ *      markGmailIntegrationWrite so the unified poller suppresses what
+ *      the agent just touched (§3.2 + INTEGRATION-DRIFT-DETECTION-PLAN.md §11).
+ */
+export function createProviderResolver(deps) {
+    const resolveProvider = async (accountId) => {
+        const registry = deps.services.mail;
+        if (!registry) {
+            return {
+                ok: false,
+                status: 503,
+                code: "mail_not_configured",
+                message: "Mail registry unavailable.",
+            };
+        }
+        const account = registry.getAccount(accountId);
+        if (!account) {
+            return {
+                ok: false,
+                status: 404,
+                code: "not_found",
+                message: `No mail account ${accountId}`,
+            };
+        }
+        // §4.8 per-account mode gate. The route-gate middleware cannot
+        // blanket 410 `/api/mail/*` because it would also stop direct-only
+        // providers (iCloud, Yahoo, IMAP). Instead, accounts whose kind maps
+        // to a gated integration (Gmail → gmail; Outlook → outlook_mail)
+        // return 410 when that integration is in `delegated` or `native`
+        // mode. Per INTEGRATION_NATIVE_MODE_DESIGN.md §9.2 the gate widened
+        // from delegated-only so the agent gets a consistent redirect
+        // signal when Outlook is flipped to native (user-managed MCP).
+        // `disabled` accounts are filtered at the data path (poller) — see
+        // `gatedMailIntegrationResponse` for why we do not gate them here.
+        const gatedIntegrationKey = gatedIntegrationForKind(account.kind);
+        if (gatedIntegrationKey) {
+            const state = readIntegrations(deps.db)[gatedIntegrationKey];
+            const gateResponse = gatedMailIntegrationResponse(gatedIntegrationKey, state);
+            if (gateResponse !== null) {
+                return {
+                    ok: false,
+                    status: 410,
+                    code: gateResponse.error,
+                    message: gateResponse.message,
+                    integration: gateResponse.integration,
+                    backend: gateResponse.backend,
+                    mode: gateResponse.mode,
+                };
+            }
+        }
+        // Single scope-gate check mirroring `passesScopeGate` used by the
+        // unified poller and `accounts.md` materialization. Clients get one
+        // error shape (`provider_not_enabled`) with a machine-readable `detail`
+        // field so dashboards can render a specific prompt without having to
+        // branch on three near-synonymous codes.
+        //
+        // Recovery endpoints (`POST /config/mail/app-password/:id/refresh`)
+        // intentionally bypass this gate by reading the account directly — users
+        // MUST be able to fix a degraded account. If you add new recovery flows,
+        // keep that property: never route recovery through `resolveProvider`.
+        const detail = !deps.config.enabledMailProviders.includes(account.kind)
+            ? "kind_not_enabled"
+            : !account.active
+                ? "account_inactive"
+                : account.authStatus !== "healthy"
+                    ? "account_unhealthy"
+                    : null;
+        if (detail !== null) {
+            const detailMessages = {
+                kind_not_enabled: `${account.kind} is not in enabledMailProviders.`,
+                account_inactive: `Mail account ${accountId} is disabled.`,
+                account_unhealthy: `Mail account ${accountId} requires re-auth (status: ${account.authStatus}).`,
+            };
+            return {
+                ok: false,
+                status: 400,
+                code: "provider_not_enabled",
+                message: detailMessages[detail],
+                detail,
+            };
+        }
+        try {
+            const provider = await registry.getProvider(accountId);
+            if (!provider) {
+                return {
+                    ok: false,
+                    status: 501,
+                    code: "provider_not_implemented",
+                    message: `Provider ${account.kind} is not wired up.`,
+                };
+            }
+            return { ok: true, provider };
+        }
+        catch (err) {
+            if (err instanceof ProviderNotImplementedError) {
+                return {
+                    ok: false,
+                    status: 501,
+                    code: err.code,
+                    message: err.message,
+                };
+            }
+            throw err;
+        }
+    };
+    /**
+     * Render a `resolveProvider` failure as an HTTP response. The 410
+     * branch carries the §4.5.2 / §9.2 body shape (integration, backend,
+     * mode) so the dashboard and agent tooling can uniformly detect a
+     * gated-mode surface regardless of whether the path was caught by the
+     * global route-gate middleware (§4.5.2) or the per-account gate here
+     * (§4.8 + §9.2 native widening). The mode field carries through from
+     * `gatedMailIntegrationResponse`; falling back to "delegated"
+     * preserves the legacy shape for any 410 outcomes that pre-dated the
+     * native widening.
+     */
+    const renderResolveError = (c, resolved) => {
+        if (resolved.status === 410) {
+            return c.json({
+                error: resolved.code,
+                message: resolved.message,
+                integration: resolved.integration ?? null,
+                backend: resolved.backend ?? null,
+                mode: resolved.mode ?? "delegated",
+            }, 410);
+        }
+        return c.json({
+            error: resolved.code,
+            message: resolved.message,
+            detail: resolved.detail,
+        }, resolved.status);
+    };
+    // TTL is derived from the current poll interval so the tracker mark
+    // outlives at least one poll tick (see computeAgentWriteTtlMs). Read at
+    // mark-time — reflects a runtime PATCH /api/config without a restart.
+    const writeTtlMs = () => computeAgentWriteTtlMs(deps.config.mailPollIntervalSeconds);
+    const markAgentWrite = (accountId, providerMsgId) => {
+        deps.writeTracker?.markWriting(`mail:${accountId}:${providerMsgId}`, undefined, { ttlMs: writeTtlMs() });
+    };
+    // INTEGRATION-DRIFT-DETECTION-PLAN.md §11 Phase 4 — actor attribution
+    // for the persistent `integration_writes` table. Only Gmail accounts
+    // map to an `IntegrationKey` (per `gatedIntegrationForKind`); iCloud /
+    // Outlook / Yahoo / IMAP have no integration descriptor and skip.
+    // Each id passed here is marked under `(gmail, id)` for the Gmail
+    // default TTL (30 min — see INTEGRATION_WRITE_TTL_MS). Non-Gmail
+    // accounts return a no-op; the in-memory `markAgentWrite` above is the
+    // only attribution surface for them.
+    const markGmailIntegrationWrite = (accountId, ...providerIds) => {
+        const registry = deps.services.mail;
+        /* c8 ignore next */ if (!registry)
+            return;
+        const account = registry.getAccount(accountId);
+        /* c8 ignore next */ if (!account)
+            return;
+        if (gatedIntegrationForKind(account.kind) !== "gmail")
+            return;
+        for (const id of providerIds) {
+            if (typeof id === "string" && id.length > 0) {
+                markIntegrationWrite(deps.db, "gmail", id);
+            }
+        }
+    };
+    /**
+     * Second-key attribution via RFC-2822 Message-Id. On IMAP, the Sent folder
+     * UID the poller later observes has no relationship to the draft UID the
+     * route marked. The rfc822 key is stable across the transport path so the
+     * poller can still match. Providers that don't surface the id leave this
+     * a no-op (route treats undefined as "skip"). The poller is taught to
+     * check both keys (§MailPoller.pollAccount).
+     */
+    const markAgentWriteRfc822 = (accountId, rfc822MsgId) => {
+        if (!rfc822MsgId)
+            return;
+        deps.writeTracker?.markWriting(`mail:${accountId}:rfc822:${rfc822MsgId}`, undefined, { ttlMs: writeTtlMs() });
+    };
+    const ensureMethod = (provider, method) => typeof provider[method] === "function";
+    return {
+        resolveProvider,
+        renderResolveError,
+        ensureMethod,
+        markAgentWrite,
+        markAgentWriteRfc822,
+        markGmailIntegrationWrite,
+    };
+}
+//# sourceMappingURL=provider-resolver.js.map

package/dist/api/routes/mail/_pa_wip_mail/mail/provider-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-resolver.js","sourceRoot":"","sources":["../../../../../../src/api/routes/mail/_pa_wip_mail/mail/provider-resolver.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AAEpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,EACL,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AAGrB,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAExC;;;;qDAIqD;AACrD,MAAM,6BAA6B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpD;;2EAE2E;AAC3E,MAAM,oCAAoC,GAAG,CAAC,CAAC;AAE/C,MAAM,UAAU,sBAAsB,CACpC,mBAAuC;IAEvC,MAAM,OAAO,GACX,CAAC,mBAAmB,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,oCAAoC,CAAC;IAC3E,OAAO,IAAI,CAAC,GAAG,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAkBD;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,CAAU,EACV,SAAiB,EACjB,YAAoB;IAEpB,MAAM,OAAO,GAAG,GAAG,SAAS,qBAAqB,YAAY,EAAE,CAAC;IAChE,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;QACnC,YAAY,CAAC,sBAAsB,EAAE;YACnC,KAAK,EAAE,YAAY,SAAS,EAAE;YAC9B,QAAQ,EAAE,YAAY;YACtB,IAAI,EAAE,GAAG,OAAO,iEAAiE;SAClF,CAAC;KACH,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAU,EAAE,GAAY,EAAE,GAAW;IACjE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,0EAA0E;IAC1E,yEAAyE;IACzE,qEAAqE;IACrE,MAAM,SAAS,GAAG,GAIjB,CAAC;IACF,MAAM,MAAM,GACV,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC;QAChC,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC;QAChC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;YACnC,YAAY,CAAC,wBAAwB,EAAE;gBACrC,KAAK,EAAE,GAAG;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,6BAA6B,GAAG,8GAA8G;aACrJ,CAAC;SACH,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;YACnC,YAAY,CAAC,sBAAsB,EAAE;gBACnC,KAAK,EAAE,GAAG;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,6BAA6B,GAAG,8HAA8H;aACrK,CAAC;SACH,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACrC,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;YACnC,YAAY,CAAC,0BAA0B,EAAE;gBACvC,KAAK,EAAE,GAAG;gBACV,QAAQ,EAAE,OAAO;aAClB,CAAC;SACH,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,uBAAuB,GAAG,EAAE,CAAC,CAAC;IACzD,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;QACnC,YAAY,CAAC,qBAAqB,EAAE;YAClC,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,iBAAiB,GAAG,qGAAqG;SAChI,CAAC;KACH,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,CAAwB,CAAC;AACjF,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC;AAID;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAA2B;IAChE,MAAM,eAAe,GAAG,KAAK,EAC3B,SAAiB,EACe,EAAE;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,4BAA4B;aACtC,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,mBAAmB,SAAS,EAAE;aACxC,CAAC;QACJ,CAAC;QACD,+DAA+D;QAC/D,mEAAmE;QACnE,qEAAqE;QACrE,iEAAiE;QACjE,iEAAiE;QACjE,oEAAoE;QACpE,8DAA8D;QAC9D,+DAA+D;QAC/D,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC7D,MAAM,YAAY,GAAG,4BAA4B,CAC/C,mBAAmB,EACnB,KAAK,CACN,CAAC;YACF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,YAAY,CAAC,KAAK;oBACxB,OAAO,EAAE,YAAY,CAAC,OAAO;oBAC7B,WAAW,EAAE,YAAY,CAAC,WAAW;oBACrC,OAAO,EAAE,YAAY,CAAC,OAAO;oBAC7B,IAAI,EAAE,YAAY,CAAC,IAAI;iBACxB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,kEAAkE;QAClE,oEAAoE;QACpE,wEAAwE;QACxE,qEAAqE;QACrE,yCAAyC;QACzC,EAAE;QACF,oEAAoE;QACpE,yEAAyE;QACzE,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,MAAM,GAID,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;YACjE,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;gBACf,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;oBAChC,CAAC,CAAC,mBAAmB;oBACrB,CAAC,CAAC,IAAI,CAAC;QACb,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,cAAc,GAA2C;gBAC7D,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,kCAAkC;gBACnE,gBAAgB,EAAE,gBAAgB,SAAS,eAAe;gBAC1D,iBAAiB,EAAE,gBAAgB,SAAS,8BAA8B,OAAO,CAAC,UAAU,IAAI;aACjG,CAAC;YACF,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC;gBAC/B,MAAM;aACP,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,YAAY,OAAO,CAAC,IAAI,mBAAmB;iBACrD,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,2BAA2B,EAAE,CAAC;gBAC/C,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAEF;;;;;;;;;;OAUG;IACH,MAAM,kBAAkB,GAAG,CACzB,CAAU,EACV,QAAuD,EACvD,EAAE;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,QAAQ,CAAC,IAAI;gBACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI;gBACzC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,IAAI;gBACjC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,WAAW;aACnC,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CACX;YACE,KAAK,EAAE,QAAQ,CAAC,IAAI;YACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,EACD,QAAQ,CAAC,MAAM,CAChB,CAAC;IACJ,CAAC,CAAC;IAEF,oEAAoE;IACpE,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,UAAU,GAAG,GAAW,EAAE,CAC9B,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAE9D,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAE,aAAqB,EAAQ,EAAE;QACxE,IAAI,CAAC,YAAY,EAAE,WAAW,CAC5B,QAAQ,SAAS,IAAI,aAAa,EAAE,EACpC,SAAS,EACT,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CACxB,CAAC;IACJ,CAAC,CAAC;IAEF,sEAAsE;IACtE,qEAAqE;IACrE,uEAAuE;IACvE,kEAAkE;IAClE,kEAAkE;IAClE,iEAAiE;IACjE,uEAAuE;IACvE,qCAAqC;IACrC,MAAM,yBAAyB,GAAG,CAChC,SAAiB,EACjB,GAAG,WAAqD,EAClD,EAAE;QACR,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,oBAAoB,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/C,oBAAoB,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO;YAAE,OAAO;QAC9D,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;YAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF;;;;;;;OAOG;IACH,MAAM,oBAAoB,GAAG,CAC3B,SAAiB,EACjB,WAAsC,EAChC,EAAE;QACR,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,IAAI,CAAC,YAAY,EAAE,WAAW,CAC5B,QAAQ,SAAS,WAAW,WAAW,EAAE,EACzC,SAAS,EACT,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CACxB,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CACnB,QAAsB,EACtB,MAAS,EACA,EAAE,CAAC,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,UAAU,CAAC;IAErD,OAAO;QACL,eAAe;QACf,kBAAkB;QAClB,YAAY;QACZ,cAAc;QACd,oBAAoB;QACpB,yBAAyB;KAC1B,CAAC;AACJ,CAAC"}

package/dist/api/routes/mail/_pa_wip_mail/mail/providers.d.ts

@@ -0,0 +1,4 @@
+import type { Hono } from "hono";
+import type { MailRouteDependencies } from "./dependencies.js";
+export declare function registerProvidersRoutes(app: Hono, deps: MailRouteDependencies): void;
+//# sourceMappingURL=providers.d.ts.map

package/dist/api/routes/mail/_pa_wip_mail/mail/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../../../../../src/api/routes/mail/_pa_wip_mail/mail/providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAQjC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAI/D,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,IAAI,EACT,IAAI,EAAE,qBAAqB,GAC1B,IAAI,CAwEN"}

package/dist/api/routes/mail/_pa_wip_mail/mail/providers.js

@@ -0,0 +1,73 @@
+import { createSettingsStore } from "../../../settings/settings-store.js";
+import { applyConfigUpdates } from "../../env-writer.js";
+import { createLogger } from "../../../logging.js";
+import { readJsonBody } from "../../json-body.js";
+import { composeIssue, respondWithAgentError } from "../../helpers/agent-errors.js";
+import { ALL_KINDS, PROVIDER_LABELS } from "./gating.js";
+const logger = createLogger("mail-api");
+export function registerProvidersRoutes(app, deps) {
+    const getSettingsStore = () => deps.settingsStore ?? createSettingsStore(deps.db);
+    app.get("/mail/providers", (c) => {
+        const registry = deps.services.mail;
+        const accounts = registry?.listAccounts() ?? [];
+        const available = ALL_KINDS.map((kind) => {
+            const ofKind = accounts.filter((a) => a.kind === kind);
+            return {
+                kind,
+                label: PROVIDER_LABELS[kind],
+                accountsConfigured: ofKind.length,
+                accountsHealthy: ofKind.filter((a) => a.authStatus === "healthy").length,
+            };
+        });
+        return c.json({
+            enabledKinds: [...deps.config.enabledMailProviders],
+            available,
+        });
+    });
+    app.patch("/mail/providers", async (c) => {
+        const parsedBody = await readJsonBody(c);
+        if (!parsedBody.ok)
+            return parsedBody.response;
+        const candidate = parsedBody.body
+            ?.enabledKinds;
+        if (!Array.isArray(candidate)) {
+            return respondWithAgentError(c, 400, [
+                composeIssue("mail.invalid_body", {
+                    field: "enabledKinds",
+                    received: candidate === undefined ? "<missing>" : typeof candidate,
+                    hint: "enabledKinds must be an array of provider kinds (e.g. ['gmail','outlook','imap']). Empty array disables all.",
+                }),
+            ], { legacyFields: { message: "enabledKinds must be an array" } });
+        }
+        const settingsStore = getSettingsStore();
+        const result = await applyConfigUpdates(deps.config, settingsStore, {
+            enabledMailProviders: candidate,
+        });
+        if (Object.keys(result.errors).length > 0) {
+            return respondWithAgentError(c, 400, [
+                composeIssue("mail.validation_failed", {
+                    field: "enabledKinds",
+                    received: candidate,
+                }),
+            ], { legacyFields: { errors: result.errors } });
+        }
+        const newKinds = deps.config.enabledMailProviders;
+        const registry = deps.services.mail;
+        const before = new Set();
+        const after = new Set(newKinds);
+        const accounts = registry?.listAccounts() ?? [];
+        for (const acct of accounts) {
+            before.add(acct.kind);
+        }
+        const dormantAccounts = accounts
+            .filter((a) => before.has(a.kind) && !after.has(a.kind))
+            .map((a) => a.id);
+        const resumedAccounts = accounts
+            .filter((a) => after.has(a.kind))
+            .map((a) => a.id);
+        registry?.onProviderSelectionChanged(newKinds);
+        logger.info({ enabledKinds: [...newKinds], dormantAccounts, resumedAccounts }, "mail provider selection updated");
+        return c.json({ status: "updated", dormantAccounts, resumedAccounts });
+    });
+}
+//# sourceMappingURL=providers.js.map

package/dist/api/routes/mail/_pa_wip_mail/mail/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../../../../../src/api/routes/mail/_pa_wip_mail/mail/providers.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGzD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAExC,MAAM,UAAU,uBAAuB,CACrC,GAAS,EACT,IAA2B;IAE3B,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAC5B,IAAI,CAAC,aAAa,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAErD,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,MAAM,QAAQ,GAAG,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YACvD,OAAO;gBACL,IAAI;gBACJ,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC;gBAC5B,kBAAkB,EAAE,MAAM,CAAC,MAAM;gBACjC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,MAAM;aACzE,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;YACnD,SAAS;SACV,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC/C,MAAM,SAAS,GAAI,UAAU,CAAC,IAA0C;YACtE,EAAE,YAAY,CAAC;QACjB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;gBACnC,YAAY,CAAC,mBAAmB,EAAE;oBAChC,KAAK,EAAE,cAAc;oBACrB,QAAQ,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,SAAS;oBAClE,IAAI,EAAE,8GAA8G;iBACrH,CAAC;aACH,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE;YAClE,oBAAoB,EAAE,SAAS;SAChC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;gBACnC,YAAY,CAAC,wBAAwB,EAAE;oBACrC,KAAK,EAAE,cAAc;oBACrB,QAAQ,EAAE,SAAS;iBACpB,CAAC;aACH,EAAE,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAmB,QAAQ,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QACD,MAAM,eAAe,GAAG,QAAQ;aAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aACvD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,MAAM,eAAe,GAAG,QAAQ;aAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aAChC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAEpB,QAAQ,EAAE,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CACT,EAAE,YAAY,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,eAAe,EAAE,eAAe,EAAE,EACjE,iCAAiC,CAClC,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/api/routes/mail/_pa_wip_mail/mail/tags-folders.d.ts

@@ -0,0 +1,5 @@
+import type { Hono } from "hono";
+import { type ProviderResolver } from "./provider-resolver.js";
+import type { MailRouteDependencies } from "./dependencies.js";
+export declare function registerTagsFoldersRoutes(app: Hono, _deps: MailRouteDependencies, resolver: ProviderResolver): void;
+//# sourceMappingURL=tags-folders.d.ts.map

package/dist/api/routes/mail/_pa_wip_mail/mail/tags-folders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tags-folders.d.ts","sourceRoot":"","sources":["../../../../../../src/api/routes/mail/_pa_wip_mail/mail/tags-folders.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE/D,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,IAAI,EACT,KAAK,EAAE,qBAAqB,EAC5B,QAAQ,EAAE,gBAAgB,GACzB,IAAI,CA8BN"}

package/dist/api/routes/mail/_pa_wip_mail/mail/tags-folders.js

@@ -0,0 +1,35 @@
+import { providerError, } from "./provider-resolver.js";
+export function registerTagsFoldersRoutes(app, _deps, resolver) {
+    const { resolveProvider, renderResolveError, ensureMethod } = resolver;
+    app.get("/mail/:accountId/tags", async (c) => {
+        const accountId = c.req.param("accountId");
+        const resolved = await resolveProvider(accountId);
+        if (!resolved.ok)
+            return renderResolveError(c, resolved);
+        if (!ensureMethod(resolved.provider, "listTags")) {
+            // Minimal fallback: return empty catalog for providers that don't yet
+            // surface a tag list. Keeps callers from needing per-kind branching.
+            return c.json({ system: [], userDefined: [] });
+        }
+        try {
+            const catalog = await resolved.provider.listTags();
+            return c.json(catalog);
+        }
+        catch (err) {
+            return providerError(c, err, "list_tags_failed");
+        }
+    });
+    app.get("/mail/:accountId/folders", async (c) => {
+        const resolved = await resolveProvider(c.req.param("accountId"));
+        if (!resolved.ok)
+            return renderResolveError(c, resolved);
+        try {
+            const folders = await resolved.provider.listFolders();
+            return c.json({ folders });
+        }
+        catch (err) {
+            return providerError(c, err, "list_folders_failed");
+        }
+    });
+}
+//# sourceMappingURL=tags-folders.js.map

package/dist/api/routes/mail/_pa_wip_mail/mail/tags-folders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tags-folders.js","sourceRoot":"","sources":["../../../../../../src/api/routes/mail/_pa_wip_mail/mail/tags-folders.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,aAAa,GAEd,MAAM,wBAAwB,CAAC;AAGhC,MAAM,UAAU,yBAAyB,CACvC,GAAS,EACT,KAA4B,EAC5B,QAA0B;IAE1B,MAAM,EAAE,eAAe,EAAE,kBAAkB,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC;IAEvE,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;YACjD,sEAAsE;YACtE,qEAAqE;YACrE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAS,EAAE,CAAC;YACpD,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,kBAAkB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/api/routes/mail/_pa_wip_mail/mail/validators.d.ts

@@ -0,0 +1,23 @@
+import type { SendInput, UpdateDraftInput } from "../../../services/mail/provider.js";
+export declare function parseIntParam(raw: string | undefined, fallback: number, bounds: {
+    min: number;
+    max: number;
+}): number;
+export declare function toStringArray(value: unknown): string[] | null;
+export declare function validateSendInput(body: unknown): {
+    ok: true;
+    value: SendInput;
+} | {
+    ok: false;
+    code: string;
+    message: string;
+};
+export declare function validateUpdateDraftInput(body: unknown): {
+    ok: true;
+    value: UpdateDraftInput;
+} | {
+    ok: false;
+    code: string;
+    message: string;
+};
+//# sourceMappingURL=validators.d.ts.map

package/dist/api/routes/mail/_pa_wip_mail/mail/validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../../../../../src/api/routes/mail/_pa_wip_mail/mail/validators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,gBAAgB,EACjB,MAAM,oCAAoC,CAAC;AAE5C,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnC,MAAM,CAKR;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,IAAI,CAK7D;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,OAAO,GACZ;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAkD/E;AAuBD,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,OAAO,GAEX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAyC/C"}

package/dist/api/routes/mail/_pa_wip_mail/mail/validators.js

@@ -0,0 +1,131 @@
+export function parseIntParam(raw, fallback, bounds) {
+    if (!raw)
+        return fallback;
+    const n = Number.parseInt(raw, 10);
+    if (!Number.isFinite(n))
+        return fallback;
+    return Math.max(bounds.min, Math.min(bounds.max, n));
+}
+export function toStringArray(value) {
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value))
+        return null;
+    if (value.every((v) => typeof v === "string"))
+        return value;
+    return null;
+}
+export function validateSendInput(body) {
+    const raw = body;
+    const to = toStringArray(raw?.to);
+    if (!to || to.length === 0) {
+        return {
+            ok: false,
+            code: "invalid_body",
+            message: "to: non-empty string[] required",
+        };
+    }
+    if (typeof raw.subject !== "string") {
+        return {
+            ok: false,
+            code: "invalid_body",
+            message: "subject: string required",
+        };
+    }
+    const cc = raw.cc === undefined ? undefined : toStringArray(raw.cc);
+    const bcc = raw.bcc === undefined ? undefined : toStringArray(raw.bcc);
+    if (cc === null || bcc === null) {
+        return {
+            ok: false,
+            code: "invalid_body",
+            message: "cc/bcc must be string[] when present",
+        };
+    }
+    const reply = parseReplyContext(raw.reply);
+    if (reply === "invalid") {
+        return {
+            ok: false,
+            code: "invalid_body",
+            message: "reply requires inReplyToRfc822Id (string) and references (string[])",
+        };
+    }
+    return {
+        ok: true,
+        value: {
+            to,
+            cc,
+            bcc,
+            subject: raw.subject,
+            textBody: typeof raw.textBody === "string" ? raw.textBody : undefined,
+            htmlBody: typeof raw.htmlBody === "string" ? raw.htmlBody : undefined,
+            reply,
+            // `draftOnly` is intentionally NOT surfaced at the route boundary.
+            // Drafts go through POST /mail/:id/drafts (Autonomous tier); sends
+            // go through POST /mail/:id/messages/send (Notify tier). Body flags
+            // cannot be classified by the path-prefix risk classifier.
+        },
+    };
+}
+function parseReplyContext(raw) {
+    if (raw === undefined || raw === null)
+        return undefined;
+    if (typeof raw !== "object")
+        return "invalid";
+    const r = raw;
+    if (typeof r.inReplyToRfc822Id !== "string")
+        return "invalid";
+    const refs = toStringArray(r.references);
+    if (!refs)
+        return "invalid";
+    return {
+        inReplyToRfc822Id: r.inReplyToRfc822Id,
+        references: refs,
+        providerThreadId: typeof r.providerThreadId === "string" ? r.providerThreadId : undefined,
+        parentProviderMsgId: typeof r.parentProviderMsgId === "string"
+            ? r.parentProviderMsgId
+            : undefined,
+    };
+}
+export function validateUpdateDraftInput(body) {
+    const raw = body;
+    const to = raw.to === undefined ? undefined : toStringArray(raw.to);
+    const cc = raw.cc === undefined ? undefined : toStringArray(raw.cc);
+    const bcc = raw.bcc === undefined ? undefined : toStringArray(raw.bcc);
+    if (to === null || cc === null || bcc === null) {
+        return {
+            ok: false,
+            code: "invalid_body",
+            message: "to/cc/bcc must be string[] when present",
+        };
+    }
+    // `reply` tri-state: undefined = leave existing threading; null = clear;
+    // object = reshape (must include inReplyToRfc822Id + references).
+    let reply;
+    if (raw.reply === null) {
+        reply = null;
+    }
+    else if (raw.reply !== undefined) {
+        const parsed = parseReplyContext(raw.reply);
+        if (parsed === "invalid") {
+            return {
+                ok: false,
+                code: "invalid_body",
+                message: "reply requires inReplyToRfc822Id (string) and references (string[]); pass null to clear",
+            };
+        }
+        reply = parsed;
+    }
+    return {
+        ok: true,
+        value: {
+            to,
+            cc,
+            bcc,
+            subject: typeof raw.subject === "string" ? raw.subject : undefined,
+            textBody: typeof raw.textBody === "string" ? raw.textBody : undefined,
+            htmlBody: typeof raw.htmlBody === "string" ? raw.htmlBody : undefined,
+            reply,
+        },
+    };
+}
+//# sourceMappingURL=validators.js.map

package/dist/api/routes/mail/_pa_wip_mail/mail/validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.js","sourceRoot":"","sources":["../../../../../../src/api/routes/mail/_pa_wip_mail/mail/validators.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,aAAa,CAC3B,GAAuB,EACvB,QAAgB,EAChB,MAAoC;IAEpC,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzC,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAAE,OAAO,KAAiB,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAa;IAEb,MAAM,GAAG,GAAG,IAA8D,CAAC;IAC3E,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,iCAAiC;SAC3C,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,0BAA0B;SACpC,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvE,IAAI,EAAE,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,sCAAsC;SAChD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,qEAAqE;SAC/E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,EAAE;YACF,EAAE;YACF,GAAG;YACH,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YACrE,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YACrE,KAAK;YACL,mEAAmE;YACnE,mEAAmE;YACnE,oEAAoE;YACpE,2DAA2D;SAC5D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,GAAY;IAEZ,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACxD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO;QACL,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;QACtC,UAAU,EAAE,IAAI;QAChB,gBAAgB,EACd,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;QACzE,mBAAmB,EACjB,OAAO,CAAC,CAAC,mBAAmB,KAAK,QAAQ;YACvC,CAAC,CAAC,CAAC,CAAC,mBAAmB;YACvB,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAAa;IAIb,MAAM,GAAG,GAAG,IAAuD,CAAC;IACpE,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvE,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC/C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,yCAAyC;SACnD,CAAC;IACJ,CAAC;IACD,yEAAyE;IACzE,kEAAkE;IAClE,IAAI,KAAgC,CAAC;IACrC,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACvB,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;SAAM,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,cAAc;gBACpB,OAAO,EACL,yFAAyF;aAC5F,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,MAAM,CAAC;IACjB,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,EAAE;YACF,EAAE;YACF,GAAG;YACH,OAAO,EAAE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YAClE,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YACrE,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YACrE,KAAK;SACN;KACF,CAAC;AACJ,CAAC"}