@aitne/daemon 0.1.7 → 0.1.8

package/dist/api/routes/mail/_pa_wip_mail/provider-resolver.d.ts

@@ -0,0 +1,64 @@
+import type { Context } from "hono";
+import { type IntegrationKey } from "@aitne/shared";
+import type { MailProvider } from "../../../services/mail/provider.js";
+import type { MailRouteDependencies } from "./dependencies.js";
+export declare function computeAgentWriteTtlMs(pollIntervalSeconds: number | undefined): number;
+export type ResolveProviderResult = {
+    ok: true;
+    provider: MailProvider;
+} | {
+    ok: false;
+    status: 404 | 400 | 410 | 501 | 503;
+    code: string;
+    message: string;
+    detail?: "kind_not_enabled" | "account_inactive" | "account_unhealthy";
+    integration?: IntegrationKey;
+    backend?: string | null;
+    mode?: "delegated" | "native";
+};
+/**
+ * Build the agent-consumable 501 response for an operation the resolved
+ * provider doesn't implement (e.g. IMAP can't manage drafts). The legacy
+ * shape `{ error: "not_implemented", message: "<op> not supported on <kind>" }`
+ * is preserved via legacyFields so existing tests keep matching.
+ */
+export declare function notImplementedResponse(c: Context, operation: string, providerKind: string): Response;
+export declare function providerError(c: Context, err: unknown, tag: string): Response;
+export type ProviderResolver = ReturnType<typeof createProviderResolver>;
+/**
+ * Builds the shared per-account access surface used by every handler that
+ * proxies to a live MailProvider. Owns three concerns that have to stay in
+ * lockstep:
+ *   1. resolveProvider — kind/active/auth scope-gate + §4.8 / §9.2
+ *      integration-mode gate. Single chokepoint so the recovery endpoints
+ *      that intentionally bypass it (POST /config/mail/app-password/:id/refresh)
+ *      stay obvious.
+ *   2. renderResolveError — maps the resolveProvider failure shape to an
+ *      HTTP response. The 410 branch carries §4.5.2 / §9.2 body shape so
+ *      dashboard + agent tooling can detect the gated-mode surface
+ *      uniformly.
+ *   3. agent-write attribution — markAgentWrite / markAgentWriteRfc822 /
+ *      markGmailIntegrationWrite so the unified poller suppresses what
+ *      the agent just touched (§3.2 + INTEGRATION-DRIFT-DETECTION-PLAN.md §11).
+ */
+export declare function createProviderResolver(deps: MailRouteDependencies): {
+    resolveProvider: (accountId: string) => Promise<ResolveProviderResult>;
+    renderResolveError: (c: Context, resolved: Extract<ResolveProviderResult, {
+        ok: false;
+    }>) => (Response & import("hono").TypedResponse<{
+        error: string;
+        message: string;
+        integration: "github" | "gmail" | "google_calendar" | "notion" | "git" | "outlook_mail" | "outlook_calendar" | null;
+        backend: string | null;
+        mode: "delegated" | "native";
+    }, 410, "json">) | (Response & import("hono").TypedResponse<{
+        error: string;
+        message: string;
+        detail: "kind_not_enabled" | "account_inactive" | "account_unhealthy" | undefined;
+    }, 404 | 501 | 503 | 400, "json">);
+    ensureMethod: <K extends keyof MailProvider>(provider: MailProvider, method: K) => boolean;
+    markAgentWrite: (accountId: string, providerMsgId: string) => void;
+    markAgentWriteRfc822: (accountId: string, rfc822MsgId: string | null | undefined) => void;
+    markGmailIntegrationWrite: (accountId: string, ...providerIds: ReadonlyArray<string | null | undefined>) => void;
+};
+//# sourceMappingURL=provider-resolver.d.ts.map

package/dist/api/routes/mail/_pa_wip_mail/provider-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-resolver.d.ts","sourceRoot":"","sources":["../../../../../src/api/routes/mail/_pa_wip_mail/provider-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EACL,KAAK,cAAc,EACpB,MAAM,eAAe,CAAC;AAGvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAQvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAgB/D,wBAAgB,sBAAsB,CACpC,mBAAmB,EAAE,MAAM,GAAG,SAAS,GACtC,MAAM,CAIR;AAED,MAAM,MAAM,qBAAqB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,YAAY,CAAA;CAAE,GACpC;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,mBAAmB,CAAC;IACvE,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAIxB,IAAI,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;CAC/B,CAAC;AAEN;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,CAAC,EAAE,OAAO,EACV,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,GACnB,QAAQ,CASV;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,QAAQ,CAoD7E;AAMD,MAAM,MAAM,gBAAgB,GAAG,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEzE;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,qBAAqB;iCAEnD,MAAM,KAChB,OAAO,CAAC,qBAAqB,CAAC;4BAuH5B,OAAO,YACA,OAAO,CAAC,qBAAqB,EAAE;QAAE,EAAE,EAAE,KAAK,CAAA;KAAE,CAAC;;;;;;;;;;;mBAkFnC,CAAC,SAAS,MAAM,YAAY,YACtC,YAAY,UACd,CAAC,KACR,OAAO;gCAvDyB,MAAM,iBAAiB,MAAM,KAAG,IAAI;sCAyC1D,MAAM,eACJ,MAAM,GAAG,IAAI,GAAG,SAAS,KACrC,IAAI;2CA1BM,MAAM,kBACD,aAAa,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,KACvD,IAAI;EA8CR"}

package/dist/api/routes/mail/_pa_wip_mail/provider-resolver.js

@@ -0,0 +1,286 @@
+import { readIntegrations } from "../../../db/integrations-store.js";
+import { markIntegrationWrite } from "../../../safety/integration-write-tracker.js";
+import { ProviderNotImplementedError } from "../../../services/mail/account-registry.js";
+import { createLogger } from "../../../logging.js";
+import { composeIssue, respondWithAgentError } from "../../helpers/agent-errors.js";
+import { gatedIntegrationForKind, gatedMailIntegrationResponse, } from "./gating.js";
+const logger = createLogger("mail-api");
+/** Lower bound on the §C6 agent-write-attribution TTL. Covers the common
+ *  case where the poll interval is short (default 180s) — we still want
+ *  enough slack for a user action that triggered the send to settle before
+ *  the next poll picks it up. Real TTL scales with the configured poll
+ *  interval (see {@link computeAgentWriteTtlMs}). */
+const MAIL_AGENT_WRITE_TTL_FLOOR_MS = 5 * 60 * 1000;
+/** The poll-interval multiplier. Two ticks of slack means: a send at T=0
+ *  survives the T=poll and T=2*poll ticks before the mark expires —
+ *  enough to absorb one missed/delayed tick without losing attribution. */
+const MAIL_AGENT_WRITE_TTL_POLL_MULTIPLIER = 2;
+export function computeAgentWriteTtlMs(pollIntervalSeconds) {
+    const derived = (pollIntervalSeconds ?? 0) * 1000 * MAIL_AGENT_WRITE_TTL_POLL_MULTIPLIER;
+    return Math.max(MAIL_AGENT_WRITE_TTL_FLOOR_MS, derived);
+}
+/**
+ * Build the agent-consumable 501 response for an operation the resolved
+ * provider doesn't implement (e.g. IMAP can't manage drafts). The legacy
+ * shape `{ error: "not_implemented", message: "<op> not supported on <kind>" }`
+ * is preserved via legacyFields so existing tests keep matching.
+ */
+export function notImplementedResponse(c, operation, providerKind) {
+    const message = `${operation} not supported on ${providerKind}`;
+    return respondWithAgentError(c, 501, [
+        composeIssue("mail.not_implemented", {
+            field: `provider.${operation}`,
+            received: providerKind,
+            hint: `${message}. Try a Gmail or Outlook account, or use a different operation.`,
+        }),
+    ], { legacyFields: { message } });
+}
+export function providerError(c, err, tag) {
+    const message = err instanceof Error ? err.message : String(err);
+    // Classify common provider errors where a 404 from the backend should not
+    // become a 500 for the caller. The Graph client throws GraphError with a
+    // httpStatus field; the IMAP layer throws Error with a responseCode.
+    const candidate = err;
+    const status = pickNumber(candidate.httpStatus) ??
+        pickNumber(candidate.statusCode) ??
+        pickNumber(candidate.response?.status);
+    if (status === 404) {
+        return respondWithAgentError(c, 404, [
+            composeIssue("mail.account_not_found", {
+                field: tag,
+                received: message,
+                hint: `Provider returned 404 for ${tag}. The resource (message, thread, label, draft) may have been deleted or the id is wrong. Re-fetch to verify.`,
+            }),
+        ], { legacyFields: { message } });
+    }
+    if (status === 501) {
+        // Providers throw MailOperationNotSupportedError (httpStatus=501) when a
+        // sub-case of an implemented method is out of scope — e.g. IMAP draft
+        // writes. Map to the same shape as the missing-method-on-interface path
+        // so callers can't distinguish the two (both mean "don't retry here").
+        return respondWithAgentError(c, 501, [
+            composeIssue("mail.not_implemented", {
+                field: tag,
+                received: message,
+                hint: `Provider returned 501 for ${tag} — operation outside the implemented sub-case. Stop retrying; either try a different operation or pick a different provider.`,
+            }),
+        ], { legacyFields: { message } });
+    }
+    if (status === 401 || status === 403) {
+        return respondWithAgentError(c, 502, [
+            composeIssue("mail.provider_auth_error", {
+                field: tag,
+                received: message,
+            }),
+        ], { legacyFields: { message } });
+    }
+    logger.error({ err, tag }, `mail route failure: ${tag}`);
+    return respondWithAgentError(c, 500, [
+        composeIssue("mail.upstream_error", {
+            field: tag,
+            received: message,
+            hint: `Mail provider ${tag} failed. Read the message verbatim. Transient 5xx may resolve after 30s; otherwise notify the user.`,
+        }),
+    ], { legacyErrorCode: tag, legacyFields: { message } });
+}
+function pickNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+/**
+ * Builds the shared per-account access surface used by every handler that
+ * proxies to a live MailProvider. Owns three concerns that have to stay in
+ * lockstep:
+ *   1. resolveProvider — kind/active/auth scope-gate + §4.8 / §9.2
+ *      integration-mode gate. Single chokepoint so the recovery endpoints
+ *      that intentionally bypass it (POST /config/mail/app-password/:id/refresh)
+ *      stay obvious.
+ *   2. renderResolveError — maps the resolveProvider failure shape to an
+ *      HTTP response. The 410 branch carries §4.5.2 / §9.2 body shape so
+ *      dashboard + agent tooling can detect the gated-mode surface
+ *      uniformly.
+ *   3. agent-write attribution — markAgentWrite / markAgentWriteRfc822 /
+ *      markGmailIntegrationWrite so the unified poller suppresses what
+ *      the agent just touched (§3.2 + INTEGRATION-DRIFT-DETECTION-PLAN.md §11).
+ */
+export function createProviderResolver(deps) {
+    const resolveProvider = async (accountId) => {
+        const registry = deps.services.mail;
+        if (!registry) {
+            return {
+                ok: false,
+                status: 503,
+                code: "mail_not_configured",
+                message: "Mail registry unavailable.",
+            };
+        }
+        const account = registry.getAccount(accountId);
+        if (!account) {
+            return {
+                ok: false,
+                status: 404,
+                code: "not_found",
+                message: `No mail account ${accountId}`,
+            };
+        }
+        // §4.8 per-account mode gate. The route-gate middleware cannot
+        // blanket 410 `/api/mail/*` because it would also stop direct-only
+        // providers (iCloud, Yahoo, IMAP). Instead, accounts whose kind maps
+        // to a gated integration (Gmail → gmail; Outlook → outlook_mail)
+        // return 410 when that integration is in `delegated` or `native`
+        // mode. Per INTEGRATION_NATIVE_MODE_DESIGN.md §9.2 the gate widened
+        // from delegated-only so the agent gets a consistent redirect
+        // signal when Outlook is flipped to native (user-managed MCP).
+        // `disabled` accounts are filtered at the data path (poller) — see
+        // `gatedMailIntegrationResponse` for why we do not gate them here.
+        const gatedIntegrationKey = gatedIntegrationForKind(account.kind);
+        if (gatedIntegrationKey) {
+            const state = readIntegrations(deps.db)[gatedIntegrationKey];
+            const gateResponse = gatedMailIntegrationResponse(gatedIntegrationKey, state);
+            if (gateResponse !== null) {
+                return {
+                    ok: false,
+                    status: 410,
+                    code: gateResponse.error,
+                    message: gateResponse.message,
+                    integration: gateResponse.integration,
+                    backend: gateResponse.backend,
+                    mode: gateResponse.mode,
+                };
+            }
+        }
+        // Single scope-gate check mirroring `passesScopeGate` used by the
+        // unified poller and `accounts.md` materialization. Clients get one
+        // error shape (`provider_not_enabled`) with a machine-readable `detail`
+        // field so dashboards can render a specific prompt without having to
+        // branch on three near-synonymous codes.
+        //
+        // Recovery endpoints (`POST /config/mail/app-password/:id/refresh`)
+        // intentionally bypass this gate by reading the account directly — users
+        // MUST be able to fix a degraded account. If you add new recovery flows,
+        // keep that property: never route recovery through `resolveProvider`.
+        const detail = !deps.config.enabledMailProviders.includes(account.kind)
+            ? "kind_not_enabled"
+            : !account.active
+                ? "account_inactive"
+                : account.authStatus !== "healthy"
+                    ? "account_unhealthy"
+                    : null;
+        if (detail !== null) {
+            const detailMessages = {
+                kind_not_enabled: `${account.kind} is not in enabledMailProviders.`,
+                account_inactive: `Mail account ${accountId} is disabled.`,
+                account_unhealthy: `Mail account ${accountId} requires re-auth (status: ${account.authStatus}).`,
+            };
+            return {
+                ok: false,
+                status: 400,
+                code: "provider_not_enabled",
+                message: detailMessages[detail],
+                detail,
+            };
+        }
+        try {
+            const provider = await registry.getProvider(accountId);
+            if (!provider) {
+                return {
+                    ok: false,
+                    status: 501,
+                    code: "provider_not_implemented",
+                    message: `Provider ${account.kind} is not wired up.`,
+                };
+            }
+            return { ok: true, provider };
+        }
+        catch (err) {
+            if (err instanceof ProviderNotImplementedError) {
+                return {
+                    ok: false,
+                    status: 501,
+                    code: err.code,
+                    message: err.message,
+                };
+            }
+            throw err;
+        }
+    };
+    /**
+     * Render a `resolveProvider` failure as an HTTP response. The 410
+     * branch carries the §4.5.2 / §9.2 body shape (integration, backend,
+     * mode) so the dashboard and agent tooling can uniformly detect a
+     * gated-mode surface regardless of whether the path was caught by the
+     * global route-gate middleware (§4.5.2) or the per-account gate here
+     * (§4.8 + §9.2 native widening). The mode field carries through from
+     * `gatedMailIntegrationResponse`; falling back to "delegated"
+     * preserves the legacy shape for any 410 outcomes that pre-dated the
+     * native widening.
+     */
+    const renderResolveError = (c, resolved) => {
+        if (resolved.status === 410) {
+            return c.json({
+                error: resolved.code,
+                message: resolved.message,
+                integration: resolved.integration ?? null,
+                backend: resolved.backend ?? null,
+                mode: resolved.mode ?? "delegated",
+            }, 410);
+        }
+        return c.json({
+            error: resolved.code,
+            message: resolved.message,
+            detail: resolved.detail,
+        }, resolved.status);
+    };
+    // TTL is derived from the current poll interval so the tracker mark
+    // outlives at least one poll tick (see computeAgentWriteTtlMs). Read at
+    // mark-time — reflects a runtime PATCH /api/config without a restart.
+    const writeTtlMs = () => computeAgentWriteTtlMs(deps.config.mailPollIntervalSeconds);
+    const markAgentWrite = (accountId, providerMsgId) => {
+        deps.writeTracker?.markWriting(`mail:${accountId}:${providerMsgId}`, undefined, { ttlMs: writeTtlMs() });
+    };
+    // INTEGRATION-DRIFT-DETECTION-PLAN.md §11 Phase 4 — actor attribution
+    // for the persistent `integration_writes` table. Only Gmail accounts
+    // map to an `IntegrationKey` (per `gatedIntegrationForKind`); iCloud /
+    // Outlook / Yahoo / IMAP have no integration descriptor and skip.
+    // Each id passed here is marked under `(gmail, id)` for the Gmail
+    // default TTL (30 min — see INTEGRATION_WRITE_TTL_MS). Non-Gmail
+    // accounts return a no-op; the in-memory `markAgentWrite` above is the
+    // only attribution surface for them.
+    const markGmailIntegrationWrite = (accountId, ...providerIds) => {
+        const registry = deps.services.mail;
+        /* c8 ignore next */ if (!registry)
+            return;
+        const account = registry.getAccount(accountId);
+        /* c8 ignore next */ if (!account)
+            return;
+        if (gatedIntegrationForKind(account.kind) !== "gmail")
+            return;
+        for (const id of providerIds) {
+            if (typeof id === "string" && id.length > 0) {
+                markIntegrationWrite(deps.db, "gmail", id);
+            }
+        }
+    };
+    /**
+     * Second-key attribution via RFC-2822 Message-Id. On IMAP, the Sent folder
+     * UID the poller later observes has no relationship to the draft UID the
+     * route marked. The rfc822 key is stable across the transport path so the
+     * poller can still match. Providers that don't surface the id leave this
+     * a no-op (route treats undefined as "skip"). The poller is taught to
+     * check both keys (§MailPoller.pollAccount).
+     */
+    const markAgentWriteRfc822 = (accountId, rfc822MsgId) => {
+        if (!rfc822MsgId)
+            return;
+        deps.writeTracker?.markWriting(`mail:${accountId}:rfc822:${rfc822MsgId}`, undefined, { ttlMs: writeTtlMs() });
+    };
+    const ensureMethod = (provider, method) => typeof provider[method] === "function";
+    return {
+        resolveProvider,
+        renderResolveError,
+        ensureMethod,
+        markAgentWrite,
+        markAgentWriteRfc822,
+        markGmailIntegrationWrite,
+    };
+}
+//# sourceMappingURL=provider-resolver.js.map

package/dist/api/routes/mail/_pa_wip_mail/provider-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-resolver.js","sourceRoot":"","sources":["../../../../../src/api/routes/mail/_pa_wip_mail/provider-resolver.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AAEpF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,EACL,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AAGrB,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAExC;;;;qDAIqD;AACrD,MAAM,6BAA6B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpD;;2EAE2E;AAC3E,MAAM,oCAAoC,GAAG,CAAC,CAAC;AAE/C,MAAM,UAAU,sBAAsB,CACpC,mBAAuC;IAEvC,MAAM,OAAO,GACX,CAAC,mBAAmB,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,oCAAoC,CAAC;IAC3E,OAAO,IAAI,CAAC,GAAG,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAkBD;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,CAAU,EACV,SAAiB,EACjB,YAAoB;IAEpB,MAAM,OAAO,GAAG,GAAG,SAAS,qBAAqB,YAAY,EAAE,CAAC;IAChE,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;QACnC,YAAY,CAAC,sBAAsB,EAAE;YACnC,KAAK,EAAE,YAAY,SAAS,EAAE;YAC9B,QAAQ,EAAE,YAAY;YACtB,IAAI,EAAE,GAAG,OAAO,iEAAiE;SAClF,CAAC;KACH,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAU,EAAE,GAAY,EAAE,GAAW;IACjE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,0EAA0E;IAC1E,yEAAyE;IACzE,qEAAqE;IACrE,MAAM,SAAS,GAAG,GAIjB,CAAC;IACF,MAAM,MAAM,GACV,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC;QAChC,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC;QAChC,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;YACnC,YAAY,CAAC,wBAAwB,EAAE;gBACrC,KAAK,EAAE,GAAG;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,6BAA6B,GAAG,8GAA8G;aACrJ,CAAC;SACH,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;YACnC,YAAY,CAAC,sBAAsB,EAAE;gBACnC,KAAK,EAAE,GAAG;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,6BAA6B,GAAG,8HAA8H;aACrK,CAAC;SACH,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACrC,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;YACnC,YAAY,CAAC,0BAA0B,EAAE;gBACvC,KAAK,EAAE,GAAG;gBACV,QAAQ,EAAE,OAAO;aAClB,CAAC;SACH,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,uBAAuB,GAAG,EAAE,CAAC,CAAC;IACzD,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;QACnC,YAAY,CAAC,qBAAqB,EAAE;YAClC,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,iBAAiB,GAAG,qGAAqG;SAChI,CAAC;KACH,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,CAAwB,CAAC;AACjF,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC;AAID;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAA2B;IAChE,MAAM,eAAe,GAAG,KAAK,EAC3B,SAAiB,EACe,EAAE;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,4BAA4B;aACtC,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,mBAAmB,SAAS,EAAE;aACxC,CAAC;QACJ,CAAC;QACD,+DAA+D;QAC/D,mEAAmE;QACnE,qEAAqE;QACrE,iEAAiE;QACjE,iEAAiE;QACjE,oEAAoE;QACpE,8DAA8D;QAC9D,+DAA+D;QAC/D,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC7D,MAAM,YAAY,GAAG,4BAA4B,CAC/C,mBAAmB,EACnB,KAAK,CACN,CAAC;YACF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,YAAY,CAAC,KAAK;oBACxB,OAAO,EAAE,YAAY,CAAC,OAAO;oBAC7B,WAAW,EAAE,YAAY,CAAC,WAAW;oBACrC,OAAO,EAAE,YAAY,CAAC,OAAO;oBAC7B,IAAI,EAAE,YAAY,CAAC,IAAI;iBACxB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,kEAAkE;QAClE,oEAAoE;QACpE,wEAAwE;QACxE,qEAAqE;QACrE,yCAAyC;QACzC,EAAE;QACF,oEAAoE;QACpE,yEAAyE;QACzE,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,MAAM,GAID,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;YACjE,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;gBACf,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;oBAChC,CAAC,CAAC,mBAAmB;oBACrB,CAAC,CAAC,IAAI,CAAC;QACb,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,cAAc,GAA2C;gBAC7D,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,kCAAkC;gBACnE,gBAAgB,EAAE,gBAAgB,SAAS,eAAe;gBAC1D,iBAAiB,EAAE,gBAAgB,SAAS,8BAA8B,OAAO,CAAC,UAAU,IAAI;aACjG,CAAC;YACF,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC;gBAC/B,MAAM;aACP,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,YAAY,OAAO,CAAC,IAAI,mBAAmB;iBACrD,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,2BAA2B,EAAE,CAAC;gBAC/C,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAEF;;;;;;;;;;OAUG;IACH,MAAM,kBAAkB,GAAG,CACzB,CAAU,EACV,QAAuD,EACvD,EAAE;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,QAAQ,CAAC,IAAI;gBACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI;gBACzC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,IAAI;gBACjC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,WAAW;aACnC,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CACX;YACE,KAAK,EAAE,QAAQ,CAAC,IAAI;YACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,EACD,QAAQ,CAAC,MAAM,CAChB,CAAC;IACJ,CAAC,CAAC;IAEF,oEAAoE;IACpE,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,UAAU,GAAG,GAAW,EAAE,CAC9B,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAE9D,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAE,aAAqB,EAAQ,EAAE;QACxE,IAAI,CAAC,YAAY,EAAE,WAAW,CAC5B,QAAQ,SAAS,IAAI,aAAa,EAAE,EACpC,SAAS,EACT,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CACxB,CAAC;IACJ,CAAC,CAAC;IAEF,sEAAsE;IACtE,qEAAqE;IACrE,uEAAuE;IACvE,kEAAkE;IAClE,kEAAkE;IAClE,iEAAiE;IACjE,uEAAuE;IACvE,qCAAqC;IACrC,MAAM,yBAAyB,GAAG,CAChC,SAAiB,EACjB,GAAG,WAAqD,EAClD,EAAE;QACR,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,oBAAoB,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/C,oBAAoB,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO;YAAE,OAAO;QAC9D,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;YAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF;;;;;;;OAOG;IACH,MAAM,oBAAoB,GAAG,CAC3B,SAAiB,EACjB,WAAsC,EAChC,EAAE;QACR,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,IAAI,CAAC,YAAY,EAAE,WAAW,CAC5B,QAAQ,SAAS,WAAW,WAAW,EAAE,EACzC,SAAS,EACT,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CACxB,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CACnB,QAAsB,EACtB,MAAS,EACA,EAAE,CAAC,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,UAAU,CAAC;IAErD,OAAO;QACL,eAAe;QACf,kBAAkB;QAClB,YAAY;QACZ,cAAc;QACd,oBAAoB;QACpB,yBAAyB;KAC1B,CAAC;AACJ,CAAC"}

package/dist/api/routes/mail/_pa_wip_mail/search-health.d.ts

@@ -0,0 +1,4 @@
+import type { Hono } from "hono";
+import type { MailRouteDependencies } from "./dependencies.js";
+export declare function registerSearchHealthRoutes(app: Hono, deps: MailRouteDependencies): void;
+//# sourceMappingURL=search-health.d.ts.map

package/dist/api/routes/mail/_pa_wip_mail/search-health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-health.d.ts","sourceRoot":"","sources":["../../../../../src/api/routes/mail/_pa_wip_mail/search-health.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AASjC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE/D,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,IAAI,EACT,IAAI,EAAE,qBAAqB,GAC1B,IAAI,CAgJN"}

package/dist/api/routes/mail/_pa_wip_mail/search-health.js

@@ -0,0 +1,131 @@
+import { composeIssue, respondWithAgentError } from "../../helpers/agent-errors.js";
+import { searchMail } from "../../../services/mail/mail-search.js";
+import { readIntegrations } from "../../../db/integrations-store.js";
+import { gatedIntegrationForKind, gatedMailIntegrationResponse, } from "./gating.js";
+import { parseIntParam } from "./validators.js";
+export function registerSearchHealthRoutes(app, deps) {
+    // ──────────────────────────────────────────────────────────────────────────
+    // Cross-account local search backed by the fts_mail_messages virtual
+    // table. Returns a flat list of lightweight summaries sourced
+    // from the index — no provider round-trip. Use this as the first stop for
+    // "find emails about X" queries; fall back to `/mail/:acct/messages?q=`
+    // only when the user wants provider-fresh results or matches bodies older
+    // than the local index.
+    //
+    // Shape matches MailMessageSummary (subset): { accountId, providerMsgId,
+    // subject, snippet, receivedAtUtc, from, isRead }. Results span all
+    // accounts by default; scope with `?accountId=`.
+    // ──────────────────────────────────────────────────────────────────────────
+    app.get("/mail/search", (c) => {
+        const q = c.req.query("q")?.trim() ?? "";
+        if (q.length === 0) {
+            return c.json({ error: "invalid_query", message: "q is required and must be non-empty" }, 400);
+        }
+        const limit = parseIntParam(c.req.query("limit"), 50, { min: 1, max: 500 });
+        const accountId = c.req.query("accountId") ?? undefined;
+        // §4.8 per-account mode gate for search — if the caller pins the
+        // query to a Gmail / Outlook account whose integration is in
+        // `delegated` or `native` mode, 410. The unscoped cross-account
+        // search path stays open; results for a gated account would just
+        // be stale FTS hits (live polling is off in both modes), which is
+        // acceptable for Phase 2 and documented in §4.4. Per
+        // INTEGRATION_NATIVE_MODE_DESIGN.md §9.2 the gate widened from
+        // delegated-only to cover native too so the agent gets a consistent
+        // redirect signal when Outlook is flipped to native (user-managed
+        // MCP) or Gmail's native binding is in play. `disabled` is not
+        // gated here — see `gatedMailIntegrationResponse` doc-comment.
+        if (accountId) {
+            const account = deps.services.mail?.getAccount(accountId);
+            if (account) {
+                const gatedIntegrationKey = gatedIntegrationForKind(account.kind);
+                if (gatedIntegrationKey) {
+                    const state = readIntegrations(deps.db)[gatedIntegrationKey];
+                    const gateResponse = gatedMailIntegrationResponse(gatedIntegrationKey, state);
+                    if (gateResponse !== null) {
+                        return c.json(gateResponse, 410);
+                    }
+                }
+            }
+        }
+        const hits = searchMail(deps.db, q, { accountId, limit });
+        const results = hits.map((h) => ({
+            accountId: h.accountId,
+            providerMsgId: h.providerMsgId,
+            subject: h.subject,
+            snippet: h.snippet,
+            receivedAtUtc: h.receivedAtUtc,
+            from: h.fromEmail ? { email: h.fromEmail } : null,
+            isRead: h.isRead,
+        }));
+        return c.json({ results, count: results.length, query: q });
+    });
+    // Read the mail-side parse_failures diagnostics table. The poller +
+    // ingestion pipeline write a row whenever a Kindle-export / travel /
+    // classification path bails out; this endpoint surfaces the latest
+    // failures so the dashboard (or a curl one-liner) can answer "why
+    // didn't my booking get picked up?". Read-only — no mutation surface.
+    app.get("/mail/parse-failures", (c) => {
+        const limit = parseIntParam(c.req.query("limit"), 50, { min: 1, max: 500 });
+        const accountId = c.req.query("accountId") ?? null;
+        const params = [];
+        let sql = `
+      SELECT id,
+             account_id      AS accountId,
+             provider_msg_id AS providerMsgId,
+             sender,
+             subject,
+             snippet,
+             error_reason    AS errorReason,
+             created_at      AS createdAt
+        FROM parse_failures`;
+        if (accountId) {
+            sql += ` WHERE account_id = ?`;
+            params.push(accountId);
+        }
+        sql += ` ORDER BY id DESC LIMIT ?`;
+        params.push(limit);
+        const rows = deps.db.prepare(sql).all(...params);
+        return c.json({ failures: rows, count: rows.length });
+    });
+    app.get("/mail/:accountId/health", (c) => {
+        const registry = deps.services.mail;
+        if (!registry) {
+            return respondWithAgentError(c, 503, [
+                composeIssue("mail.not_configured", {
+                    field: "services.mail",
+                    received: "<unavailable>",
+                }),
+            ]);
+        }
+        const accountId = c.req.param("accountId");
+        // §4.8 per-account mode gate — also applies to /health so the
+        // dashboard does not surface a stale poll cursor for an account
+        // whose integration the daemon has stopped touching (delegated /
+        // native). `disabled` is intentionally not gated here so the dash
+        // can still surface the last-known cursor while the user is
+        // mid-reconfigure. Recovery endpoints (`POST
+        // /config/mail/app-password/:id/refresh`) stay outside this gate.
+        const account = registry.getAccount(accountId);
+        if (account) {
+            const gatedIntegrationKey = gatedIntegrationForKind(account.kind);
+            if (gatedIntegrationKey) {
+                const state = readIntegrations(deps.db)[gatedIntegrationKey];
+                const gateResponse = gatedMailIntegrationResponse(gatedIntegrationKey, state);
+                if (gateResponse !== null) {
+                    return c.json(gateResponse, 410);
+                }
+            }
+        }
+        const health = registry.getHealth(accountId);
+        if (!health) {
+            return respondWithAgentError(c, 404, [
+                composeIssue("mail.account_not_found", {
+                    field: "accountId",
+                    received: accountId,
+                }),
+            ]);
+        }
+        return c.json(health);
+    });
+}
+//# sourceMappingURL=search-health.js.map

package/dist/api/routes/mail/_pa_wip_mail/search-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-health.js","sourceRoot":"","sources":["../../../../../src/api/routes/mail/_pa_wip_mail/search-health.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,uCAAuC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EACL,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD,MAAM,UAAU,0BAA0B,CACxC,GAAS,EACT,IAA2B;IAE3B,6EAA6E;IAC7E,qEAAqE;IACrE,8DAA8D;IAC9D,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,wBAAwB;IACxB,EAAE;IACF,yEAAyE;IACzE,oEAAoE;IACpE,iDAAiD;IACjD,6EAA6E;IAC7E,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE;QAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,qCAAqC,EAAE,EAC1E,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;QACxD,iEAAiE;QACjE,6DAA6D;QAC7D,gEAAgE;QAChE,iEAAiE;QACjE,kEAAkE;QAClE,qDAAqD;QACrD,+DAA+D;QAC/D,oEAAoE;QACpE,kEAAkE;QAClE,+DAA+D;QAC/D,+DAA+D;QAC/D,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;YAC1D,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAClE,IAAI,mBAAmB,EAAE,CAAC;oBACxB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC;oBAC7D,MAAM,YAAY,GAAG,4BAA4B,CAC/C,mBAAmB,EACnB,KAAK,CACN,CAAC;oBACF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;wBAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI;YACjD,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC,CAAC;QACJ,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,oEAAoE;IACpE,qEAAqE;IACrE,mEAAmE;IACnE,kEAAkE;IAClE,sEAAsE;IACtE,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;QACnD,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,IAAI,GAAG,GAAG;;;;;;;;;4BASc,CAAC;QACzB,IAAI,SAAS,EAAE,CAAC;YACd,GAAG,IAAI,uBAAuB,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;QACD,GAAG,IAAI,2BAA2B,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAS7C,CAAC;QACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,EAAE,EAAE;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;gBACnC,YAAY,CAAC,qBAAqB,EAAE;oBAClC,KAAK,EAAE,eAAe;oBACtB,QAAQ,EAAE,eAAe;iBAC1B,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,8DAA8D;QAC9D,gEAAgE;QAChE,iEAAiE;QACjE,kEAAkE;QAClE,4DAA4D;QAC5D,6CAA6C;QAC7C,kEAAkE;QAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,mBAAmB,GAAG,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClE,IAAI,mBAAmB,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC;gBAC7D,MAAM,YAAY,GAAG,4BAA4B,CAC/C,mBAAmB,EACnB,KAAK,CACN,CAAC;gBACF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;oBAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE;gBACnC,YAAY,CAAC,wBAAwB,EAAE;oBACrC,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,SAAS;iBACpB,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/api/routes/mail/_pa_wip_mail/validators.d.ts

@@ -0,0 +1,23 @@
+import type { SendInput, UpdateDraftInput } from "../../../services/mail/provider.js";
+export declare function parseIntParam(raw: string | undefined, fallback: number, bounds: {
+    min: number;
+    max: number;
+}): number;
+export declare function toStringArray(value: unknown): string[] | null;
+export declare function validateSendInput(body: unknown): {
+    ok: true;
+    value: SendInput;
+} | {
+    ok: false;
+    code: string;
+    message: string;
+};
+export declare function validateUpdateDraftInput(body: unknown): {
+    ok: true;
+    value: UpdateDraftInput;
+} | {
+    ok: false;
+    code: string;
+    message: string;
+};
+//# sourceMappingURL=validators.d.ts.map

package/dist/api/routes/mail/_pa_wip_mail/validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../../../../src/api/routes/mail/_pa_wip_mail/validators.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,gBAAgB,EACjB,MAAM,oCAAoC,CAAC;AAE5C,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnC,MAAM,CAKR;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,IAAI,CAK7D;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,OAAO,GACZ;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAkD/E;AAuBD,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,OAAO,GAEX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAyC/C"}