@aitne/daemon 0.1.7 → 0.1.9

package/dist/services/gmail.js

@@ -63,7 +63,6 @@ function buildMultipartAlternative(textBody, htmlBody) {
 }
 export class GmailService {
     secretBroker;
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     gmail = null;
     constructor(secretBroker) {
         this.secretBroker = secretBroker;
@@ -78,16 +77,14 @@ export class GmailService {
             return;
         }
         const credentials = parseGoogleCredentialsJson(credentialsRaw);
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
         let google;
         try {
-            const mod = await import("googleapis");
+            const mod = (await import("googleapis"));
             google = mod.google;
         }
         catch {
             throw new Error("googleapis package not installed. Run: pnpm --filter @aitne/daemon add googleapis");
         }
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
         let auth;
         if (credentials.type === "service_account") {
             auth = new google.auth.GoogleAuth({
@@ -107,9 +104,9 @@ export class GmailService {
             const clientConfig = getGoogleOAuthClientConfig(credentials);
             if (!clientConfig)
                 throw new Error("Invalid Google credentials format");
-            auth = new google.auth.OAuth2(clientConfig.client_id, clientConfig.client_secret, clientConfig.redirect_uris?.[0]);
-            auth.setCredentials(token);
-            auth.on("tokens", async (tokens) => {
+            const oauth2 = new google.auth.OAuth2(clientConfig.client_id, clientConfig.client_secret, clientConfig.redirect_uris?.[0]);
+            oauth2.setCredentials(token);
+            oauth2.on("tokens", async (tokens) => {
                 try {
                     const existingRaw = await this.secretBroker.getGoogleTokenJson();
                     const merged = mergeGoogleTokenPayload(existingRaw, tokens);
@@ -119,6 +116,7 @@ export class GmailService {
                     logger.error({ err: error }, "Failed to persist refreshed Gmail token");
                 }
             });
+            auth = oauth2;
         }
         this.gmail = google.gmail({ version: "v1", auth });
         logger.info("Gmail service initialized");
@@ -143,12 +141,11 @@ export class GmailService {
             params.pageToken = options.pageToken;
         const listRes = await this.gmail.users.messages.list(params);
         const messageRefs = listRes.data.messages ?? [];
-        const messages = await Promise.all(messageRefs.slice(0, params.maxResults).map(
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        async (ref) => {
-            const msg = await this.gmail.users.messages.get({
+        const gmail = this.gmail;
+        const messages = await Promise.all(messageRefs.slice(0, params.maxResults).map(async (ref) => {
+            const msg = await gmail.users.messages.get({
                 userId: "me",
-                id: ref.id,
+                id: ref.id ?? "",
                 format: "metadata",
                 metadataHeaders: [
                     "Subject",
@@ -183,13 +180,11 @@ export class GmailService {
         try {
             const res = await this.gmail.users.history.list(params);
             const removedIds = new Set();
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
-            const history = (res.data.history ?? []);
+            const history = res.data.history ?? [];
             for (const item of history) {
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
-                const deleted = (item?.messagesDeleted ?? []);
+                const deleted = item.messagesDeleted ?? [];
                 for (const entry of deleted) {
-                    const id = entry?.message?.id;
+                    const id = entry.message?.id;
                     if (typeof id === "string" && id.length > 0) {
                         removedIds.add(id);
                     }
@@ -253,16 +248,16 @@ export class GmailService {
         if (!this.gmail)
             throw new Error("Gmail service not initialized");
         const raw = buildRawMessage(params);
+        const draftBody = {
+            message: { raw },
+        };
+        if (params.threadId && draftBody.message) {
+            draftBody.message.threadId = params.threadId;
+        }
         const draftParams = {
             userId: "me",
-            requestBody: {
-                message: { raw },
-            },
+            requestBody: draftBody,
         };
-        if (params.threadId) {
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
-            draftParams.requestBody.message.threadId = params.threadId;
-        }
         const res = await this.gmail.users.drafts.create(draftParams);
         return { draftId: res.data.id ?? "" };
     }
@@ -276,15 +271,13 @@ export class GmailService {
             maxResults: max,
         });
         const drafts = res.data.drafts ?? [];
-        const summaries = await Promise.all(
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        drafts.slice(0, max).map(async (d) => {
+        const gmail = this.gmail;
+        const summaries = await Promise.all(drafts.slice(0, max).map(async (d) => {
             try {
-                const detail = await this.gmail.users.drafts.get({
+                const detail = await gmail.users.drafts.get({
                     userId: "me",
-                    id: d.id,
+                    id: d.id ?? "",
                     format: "metadata",
-                    metadataHeaders: ["Subject", "To"],
                 });
                 const msg = detail.data.message;
                 const headers = msg?.payload?.headers ?? [];
@@ -371,15 +364,15 @@ export class GmailService {
             threadId: params.threadId ?? existing.threadId ?? undefined,
         };
         const raw = buildRawMessage(merged);
+        const updateBody = { message: { raw } };
+        if (merged.threadId && updateBody.message) {
+            updateBody.message.threadId = merged.threadId;
+        }
         const updateReq = {
             userId: "me",
             id: draftId,
-            requestBody: { message: { raw } },
+            requestBody: updateBody,
         };
-        if (merged.threadId) {
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
-            updateReq.requestBody.message.threadId = merged.threadId;
-        }
         const res = await this.gmail.users.drafts.update(updateReq);
         return { draftId: res.data.id ?? "" };
     }
@@ -418,7 +411,6 @@ export class GmailService {
                 return null;
             throw err;
         }
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
         let messages = (res.data.messages ?? []).map((m) => this.parseFullMessage(m));
         const max = options.maxMessages;
         if (max && messages.length > max) {
@@ -491,22 +483,19 @@ export class GmailService {
             throw err;
         }
     }
-    extractAttachmentMetadata(
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    payload, allowedMimeTypes) {
+    extractAttachmentMetadata(payload, allowedMimeTypes) {
         const attachments = [];
         if (!payload)
             return attachments;
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
         const walk = (parts) => {
             for (const part of parts) {
                 if (part.body?.attachmentId &&
                     part.filename &&
-                    (!allowedMimeTypes || allowedMimeTypes.has(part.mimeType))) {
+                    (!allowedMimeTypes || allowedMimeTypes.has(part.mimeType ?? ""))) {
                     attachments.push({
                         attachmentId: part.body.attachmentId,
                         filename: part.filename,
-                        mimeType: part.mimeType,
+                        mimeType: part.mimeType ?? "",
                         size: part.body.size ?? 0,
                     });
                 }
@@ -570,14 +559,12 @@ export class GmailService {
         if (!this.gmail)
             return [];
         const res = await this.gmail.users.labels.list({ userId: "me" });
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
         return (res.data.labels ?? []).map((l) => ({
             id: l.id ?? "",
             name: l.name ?? "",
             type: l.type ?? "",
         }));
     }
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     parseMessageSummary(data) {
         const headers = data.payload?.headers ?? [];
         return {
@@ -593,7 +580,6 @@ export class GmailService {
             messageIdHeader: this.getHeader(headers, "Message-ID"),
         };
     }
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     parseFullMessage(data) {
         const headers = data.payload?.headers ?? [];
         return {
@@ -613,12 +599,10 @@ export class GmailService {
             hasAttachment: hasAnyAttachment(data.payload),
         };
     }
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     getHeader(headers, name) {
         const header = headers.find((h) => h.name?.toLowerCase() === name.toLowerCase());
         return header?.value ?? null;
     }
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     extractBody(payload) {
         if (!payload)
             return null;
@@ -634,7 +618,6 @@ export class GmailService {
         }
         return null;
     }
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     extractHtmlBody(payload) {
         if (!payload)
             return null;
@@ -643,7 +626,6 @@ export class GmailService {
         }
         const stack = payload.parts ? [...payload.parts] : [];
         while (stack.length > 0) {
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
             const part = stack.shift();
             if (part?.mimeType === "text/html" && part?.body?.data) {
                 return Buffer.from(part.body.data, "base64").toString("utf-8");
@@ -660,13 +642,11 @@ export class GmailService {
  * regardless of MIME type. Used by full-format parse so callers get accurate
  * `hasAttachment` on MailMessage. Metadata-mode lists don't exercise this.
  */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function hasAnyAttachment(payload) {
     if (!payload)
         return false;
     const stack = [payload];
     while (stack.length > 0) {
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
         const node = stack.shift();
         if (node?.body?.attachmentId)
             return true;
@@ -675,4 +655,3 @@ function hasAnyAttachment(payload) {
     }
     return false;
 }
-//# sourceMappingURL=gmail.js.map

package/dist/services/google-auth.d.ts

@@ -13,4 +13,3 @@ export declare function parseGoogleCredentialsJson(raw: string): GoogleCredentia
 export declare function detectGoogleCredentialType(raw: string | null): GoogleCredentialType | null;
 export declare function getGoogleOAuthClientConfig(credentials: GoogleCredentialsDocument): GoogleOAuthClientConfig | null;
 export declare function mergeGoogleTokenPayload(existingRaw: string | null, nextTokens: Record<string, unknown>): string;
-//# sourceMappingURL=google-auth.d.ts.map

package/dist/services/google-auth.js

@@ -34,4 +34,3 @@ export function mergeGoogleTokenPayload(existingRaw, nextTokens) {
     }
     return JSON.stringify(merged);
 }
-//# sourceMappingURL=google-auth.js.map

package/dist/services/integrations/extract-write-item-id.d.ts

@@ -1,9 +1,12 @@
 import type { IntegrationKey } from "@aitne/shared";
 /**
  * Extract the upstream item id (`eventId` / `messageId` / `threadId` /
- * `pageId`) from a delegated `/api/integrations/:key/invoke` write
+ * `pageId`) from a delegated `/api/integrations/:key/exec` write
  * response so the route handler can mark `integration_writes`
- * (INTEGRATION-DRIFT-DETECTION-PLAN.md §11 Phase 4).
+ * (INTEGRATION-DRIFT-DETECTION-PLAN.md §11 Phase 4). The same shape
+ * walk also covered the retired `/invoke` RPC handler; defensive guards
+ * in `exec.ts:maybeMarkIntegrationWrite` are kept for any future
+ * reactivation.
  *
  * The connector returns `toolResult` verbatim — and Claude / Codex /
  * Gemini wrap the upstream response differently. Rather than building a
@@ -61,4 +64,3 @@ export interface ExtractedWriteItemIds {
 export declare function extractWriteItemIds(req: ExtractWriteItemIdsRequest & {
     args?: unknown;
 }): ExtractedWriteItemIds;
-//# sourceMappingURL=extract-write-item-id.d.ts.map

package/dist/services/integrations/extract-write-item-id.js

@@ -10,6 +10,8 @@ const ID_KEYS_BY_INTEGRATION = {
     // type system honest.
     outlook_mail: [],
     outlook_calendar: [],
+    // Browser history is read-only — no write/delete connector tools.
+    browser_history: [],
 };
 const NESTED_KEYS_BY_INTEGRATION = {
     google_calendar: ["event"],
@@ -19,6 +21,7 @@ const NESTED_KEYS_BY_INTEGRATION = {
     github: [],
     outlook_mail: [],
     outlook_calendar: [],
+    browser_history: [],
 };
 const COLLECTION_KEYS_BY_INTEGRATION = {
     google_calendar: ["events"],
@@ -28,6 +31,7 @@ const COLLECTION_KEYS_BY_INTEGRATION = {
     github: [],
     outlook_mail: [],
     outlook_calendar: [],
+    browser_history: [],
 };
 function asString(v) {
     return typeof v === "string" && v.length > 0 ? v : null;
@@ -98,6 +102,7 @@ const ARGS_SINGULAR_KEYS_BY_INTEGRATION = {
     github: [],
     outlook_mail: [],
     outlook_calendar: [],
+    browser_history: [],
 };
 const ARGS_PLURAL_KEYS_BY_INTEGRATION = {
     google_calendar: [],
@@ -107,6 +112,7 @@ const ARGS_PLURAL_KEYS_BY_INTEGRATION = {
     github: [],
     outlook_mail: [],
     outlook_calendar: [],
+    browser_history: [],
 };
 function pluckArgsIds(args, integration) {
     if (args === null || typeof args !== "object" || Array.isArray(args))
@@ -185,4 +191,3 @@ export function extractWriteItemIds(req) {
         reason: usedArgsFallback ? "extracted_from_args" : "extracted",
     };
 }
-//# sourceMappingURL=extract-write-item-id.js.map

package/dist/services/integrations/reconcile.d.ts

@@ -133,4 +133,3 @@ export declare function markIntegrationWrite(db: Database.Database, params: {
     ttlMs: number;
     nowIso: string;
 }): void;
-//# sourceMappingURL=reconcile.d.ts.map

package/dist/services/integrations/reconcile.js

@@ -215,4 +215,3 @@ export function markIntegrationWrite(db, params) {
        written_by = excluded.written_by,
        expires_at = excluded.expires_at`).run(params.integration, params.itemId, params.nowIso, expiresAt);
 }
-//# sourceMappingURL=reconcile.js.map

package/dist/services/integrations/snapshot-partitions.d.ts

@@ -42,4 +42,3 @@ export declare function partitionsToPurge(integration: IntegrationKey, prev: Int
  * Returns the partitions that were processed for log + test visibility.
  */
 export declare function purgeStaleSnapshotPartitions(db: Database.Database, integration: IntegrationKey, prev: IntegrationMode, next: IntegrationMode): string[];
-//# sourceMappingURL=snapshot-partitions.d.ts.map

package/dist/services/integrations/snapshot-partitions.js

@@ -69,6 +69,14 @@ export const INTEGRATION_SNAPSHOT_PARTITIONS_BY_MODE = {
         native: [],
         disabled: [],
     },
+    // Browser history has no integration_snapshots partitions — ingest is
+    // local-file-backed and not part of the delegated drift pipeline.
+    browser_history: {
+        direct: [],
+        delegated: [],
+        native: [],
+        disabled: [],
+    },
 };
 /**
  * Compute the set of window keys that were owned by `prev` but are not
@@ -122,4 +130,3 @@ export function purgeStaleSnapshotPartitions(db, integration, prev, next) {
     }
     return stale;
 }
-//# sourceMappingURL=snapshot-partitions.js.map

package/dist/services/journal/render.d.ts

@@ -12,4 +12,3 @@ export interface RenderJournalMirrorOptions {
  * reintroducing synthesis responsibility here.
  */
 export declare function renderJournalMirrorContent(content: string, opts: RenderJournalMirrorOptions): string;
-//# sourceMappingURL=render.d.ts.map

package/dist/services/journal/render.js

@@ -14,4 +14,3 @@ export function renderJournalMirrorContent(content, opts) {
             return content;
     }
 }
-//# sourceMappingURL=render.js.map

package/dist/services/journal/writer.d.ts

@@ -23,4 +23,3 @@ export declare class JournalMirrorService {
     write(target: JournalMirrorTarget, input: JournalMirrorWriteInput): JournalMirrorWriteResult;
 }
 export declare function resolveJournalMirrorPath(target: JournalMirrorTarget, relativePath: string): string;
-//# sourceMappingURL=writer.d.ts.map

package/dist/services/journal/writer.js

@@ -47,4 +47,3 @@ function normalizeRelativeJournalPath(value) {
     }
     return normalized;
 }
-//# sourceMappingURL=writer.js.map

package/dist/services/mail/account-registry.d.ts

@@ -205,4 +205,3 @@ export declare class MailAccountRegistry {
     private withMutex;
 }
 export {};
-//# sourceMappingURL=account-registry.d.ts.map

package/dist/services/mail/account-registry.js

@@ -78,7 +78,7 @@ export class DuplicateAccountError extends Error {
         this.name = "DuplicateAccountError";
     }
 }
-/* v8 ignore next 5 — only reachable from TOCTOU catch block below; early duplicate check (line ~292) prevents this in single-threaded tests */
+/* c8 ignore next 5 — only reachable from TOCTOU catch block below; the early `isDuplicateInsertionError` short-circuit prevents this in single-threaded tests */
 function isUniqueConstraintError(err) {
     if (!err || typeof err !== "object")
         return false;
@@ -209,15 +209,16 @@ export class MailAccountRegistry {
              unified_poll, active, created_at_utc, imap_capabilities_json
            ) VALUES (?, ?, ?, ?, ?, 'healthy', ?, ?, ?, ?, 1, ?, ?)`)
                 .run(id, input.kind, input.email, input.label ?? null, input.authType, blobName, input.pollIntervalSeconds ?? 300, input.idleEnabled ? 1 : 0, input.unifiedPoll === false ? 0 : 1, createdAt, input.capabilities ? serializeCapabilities(input.capabilities) : null);
+            /* c8 ignore start — concurrent insert race: early duplicate check prevents this in single-threaded tests */
         }
         catch (error) {
-            /* v8 ignore next 5 — concurrent insert race: early duplicate check prevents this in tests */
             await this.blobStore.remove(blobName);
             if (isUniqueConstraintError(error)) {
                 throw new DuplicateAccountError(input.kind, input.email);
             }
             throw error;
         }
+        /* c8 ignore stop */
         const row = this.db
             .prepare(`SELECT * FROM mail_accounts WHERE id = ?`)
             .get(id);
@@ -346,6 +347,10 @@ export class MailAccountRegistry {
             const result = this.db
                 .prepare(`UPDATE mail_accounts SET active = ? WHERE id = ?`)
                 .run(active ? 1 : 0, accountId);
+            // Defensive: better-sqlite3 is single-threaded so the row read at
+            // `before` is still present here, but keep the guard to cover a
+            // future async race (e.g. a concurrent `removeAccount`).
+            /* c8 ignore next */
             if (result.changes === 0)
                 return null;
             // Disabling an account should shed the cached provider so it does not
@@ -551,4 +556,3 @@ function randomSuffix() {
     // ~41 bits of entropy for a secret-blob filename.
     return randomUUID().replace(/-/g, "").slice(0, 12);
 }
-//# sourceMappingURL=account-registry.js.map

package/dist/services/mail/gmail/auth-failure-classifier.d.ts

@@ -21,4 +21,3 @@ export interface GmailClassifyInput {
 export declare const GMAIL_TRANSIENT_BACKOFF_THRESHOLD = 10;
 export declare function classifyGmailAuthFailure(input: GmailClassifyInput): GmailClassifiedFailure;
 export declare function effectiveGmailAuthStatus(classified: GmailClassifiedFailure, consecutiveErrorCount: number, threshold?: number): AuthStatus | null;
-//# sourceMappingURL=auth-failure-classifier.d.ts.map

package/dist/services/mail/gmail/auth-failure-classifier.js

@@ -64,4 +64,3 @@ export function effectiveGmailAuthStatus(classified, consecutiveErrorCount, thre
         return "degraded";
     return consecutiveErrorCount > threshold ? "degraded" : null;
 }
-//# sourceMappingURL=auth-failure-classifier.js.map

package/dist/services/mail/gmail/gmail-provider.d.ts

@@ -55,4 +55,3 @@ export declare class GmailProvider implements MailProvider {
     private toSummary;
     private toFull;
 }
-//# sourceMappingURL=gmail-provider.d.ts.map

package/dist/services/mail/gmail/gmail-provider.js

@@ -431,4 +431,3 @@ function toDraftDetail(d) {
         references: d.references,
     };
 }
-//# sourceMappingURL=gmail-provider.js.map

package/dist/services/mail/gmail/legacy-row.d.ts

@@ -21,4 +21,3 @@ export declare function syncLegacyGmailAccountState(db: Database.Database, regis
     available: boolean;
     error?: string;
 }): string | null;
-//# sourceMappingURL=legacy-row.d.ts.map

package/dist/services/mail/gmail/legacy-row.js

@@ -68,4 +68,3 @@ export function syncLegacyGmailAccountState(db, registry, options) {
     registry.evictProvider(accountId);
     return accountId;
 }
-//# sourceMappingURL=legacy-row.js.map

package/dist/services/mail/gmail/poll-cursor.d.ts

@@ -9,4 +9,3 @@ export interface GmailPollCursor extends Extract<PollCursor, {
 export declare function seedGmailPollCursor(now?: Date, historyId?: string | null): GmailPollCursor;
 export declare function trimGmailProcessedIds(ids: string[]): string[];
 export declare function normalizeGmailPollCursor(cursor: PollCursor | null, now?: Date): GmailPollCursor;
-//# sourceMappingURL=poll-cursor.d.ts.map

package/dist/services/mail/gmail/poll-cursor.js

@@ -29,4 +29,3 @@ export function normalizeGmailPollCursor(cursor, now = new Date()) {
             : undefined,
     };
 }
-//# sourceMappingURL=poll-cursor.js.map

package/dist/services/mail/html-to-plaintext.d.ts

@@ -24,4 +24,3 @@ export interface ExtractedMailHtmlBody {
  */
 export declare function extractMailHtmlBody(html: string): ExtractedMailHtmlBody;
 export declare function renderExtractedMailHtmlBody(extracted: ExtractedMailHtmlBody): string;
-//# sourceMappingURL=html-to-plaintext.d.ts.map

package/dist/services/mail/html-to-plaintext.js

@@ -160,4 +160,3 @@ function decodeCodePoint(raw, value) {
         return raw;
     return String.fromCodePoint(value);
 }
-//# sourceMappingURL=html-to-plaintext.js.map

package/dist/services/mail/imap/app-password.d.ts

@@ -24,4 +24,3 @@ export declare function isImapAppPasswordKind(kind: MailProviderKind | string):
 export declare function buildImapAccountSecret(kind: ImapAppPasswordKind, email: string, appPassword: string): ImapAccountSecret;
 export declare function serializeImapAccountSecret(secret: ImapAccountSecret): string;
 export declare function parseImapAccountSecret(raw: string): ImapAccountSecret;
-//# sourceMappingURL=app-password.d.ts.map

package/dist/services/mail/imap/app-password.js

@@ -83,4 +83,3 @@ export function serializeImapAccountSecret(secret) {
 export function parseImapAccountSecret(raw) {
     return SECRET_SCHEMA.parse(JSON.parse(raw));
 }
-//# sourceMappingURL=app-password.js.map

package/dist/services/mail/imap/auth-failure-classifier.d.ts

@@ -18,4 +18,3 @@ export interface ImapClassifyInput {
 }
 export declare function classifyImapAuthFailure(input: ImapClassifyInput): ImapClassifiedFailure;
 export declare function effectiveImapAuthStatus(classified: ImapClassifiedFailure): AuthStatus | null;
-//# sourceMappingURL=auth-failure-classifier.d.ts.map

package/dist/services/mail/imap/auth-failure-classifier.js

@@ -51,4 +51,3 @@ export function effectiveImapAuthStatus(classified) {
         return "degraded";
     return null;
 }
-//# sourceMappingURL=auth-failure-classifier.js.map

package/dist/services/mail/imap/capabilities.d.ts

@@ -27,4 +27,3 @@ export interface ImapCapabilitySet {
 export declare function probeCapabilities(raw: Iterable<string> | Map<string, unknown> | null | undefined): ImapCapabilitySet;
 export declare function serializeCapabilities(caps: ImapCapabilitySet): string;
 export declare function parseCapabilitiesJson(raw: string | null | undefined): ImapCapabilitySet | null;
-//# sourceMappingURL=capabilities.d.ts.map

package/dist/services/mail/imap/capabilities.js

@@ -67,4 +67,3 @@ function normalizeTokens(raw) {
     }
     return out;
 }
-//# sourceMappingURL=capabilities.js.map

package/dist/services/mail/imap/client.d.ts

@@ -12,4 +12,3 @@ export declare function createImapFlowClient(secret: ImapAccountSecret, override
  * exists, not only after the first real poll tick.
  */
 export declare function verifyImapAccountSecret(secret: ImapAccountSecret): Promise<ImapCapabilitySet>;
-//# sourceMappingURL=client.d.ts.map

package/dist/services/mail/imap/client.js

@@ -57,4 +57,3 @@ export async function verifyImapAccountSecret(secret) {
     }
     return probeCapabilities(client.capabilities);
 }
-//# sourceMappingURL=client.js.map

package/dist/services/mail/imap/cursor.d.ts

@@ -16,4 +16,3 @@ export declare function parseImapProviderMsgId(value: string): {
 export declare function getImapFolderCursor(cursor: PollCursor | null, folder: string): ImapFolderCursorState | null;
 export declare function planImapFolderSync(cursor: PollCursor | null, folder: string, serverUidValidity: number): ImapCursorPlan;
 export declare function advanceImapCursor(cursor: PollCursor | null, folder: string, uidValidity: number, lastUid: number): PollCursor;
-//# sourceMappingURL=cursor.d.ts.map

package/dist/services/mail/imap/cursor.js

@@ -44,4 +44,3 @@ export function advanceImapCursor(cursor, folder, uidValidity, lastUid) {
     folders[folder] = { uidValidity, lastUid };
     return { kind: "imap", folders };
 }
-//# sourceMappingURL=cursor.js.map

package/dist/services/mail/imap/folder-resolver.d.ts

@@ -21,4 +21,3 @@ export declare function resolveImapFolders(folders: readonly ImapListedFolder[],
     trash: string;
     archive: string;
 }): ResolvedImapFolders;
-//# sourceMappingURL=folder-resolver.d.ts.map

package/dist/services/mail/imap/folder-resolver.js

@@ -55,4 +55,3 @@ function normalizeFolderFlags(folder) {
         .map((value) => value.trim().replaceAll(/^\\+/g, "").toLowerCase())
         .filter((value) => value.length > 0);
 }
-//# sourceMappingURL=folder-resolver.js.map

package/dist/services/mail/imap/icloud-provider.d.ts

@@ -2,4 +2,3 @@ import { ImapProviderBase } from "./imap-provider-base.js";
 export declare class ICloudImapProvider extends ImapProviderBase {
     readonly kind: "icloud";
 }
-//# sourceMappingURL=icloud-provider.d.ts.map

package/dist/services/mail/imap/icloud-provider.js

@@ -2,4 +2,3 @@ import { ImapProviderBase } from "./imap-provider-base.js";
 export class ICloudImapProvider extends ImapProviderBase {
     kind = "icloud";
 }
-//# sourceMappingURL=icloud-provider.js.map

package/dist/services/mail/imap/imap-provider-base.d.ts

@@ -170,4 +170,3 @@ export declare abstract class ImapProviderBase implements IdleCapableMailProvide
     private runIdleLoop;
 }
 export {};
-//# sourceMappingURL=imap-provider-base.d.ts.map

package/dist/services/mail/imap/imap-provider-base.js

@@ -97,9 +97,7 @@ export class ImapProviderBase {
                 text: parsed.text ?? undefined,
                 html: typeof parsed.html === "string" ? parsed.html : undefined,
             },
-            attachments: parsed.attachments.map(
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
-            (attachment, index) => toAttachmentMeta(attachment, index)),
+            attachments: parsed.attachments.map((attachment, index) => toAttachmentMeta(attachment, index)),
         };
     }
     async getAttachment(messageId, attachmentId) {
@@ -293,7 +291,17 @@ export class ImapProviderBase {
             const sinceUid = Math.max(options.sinceUid ?? 0, 0);
             const search = sinceUid > 0 ? { uid: `${sinceUid}:*` } : { all: true };
             const result = await client.search(search, { uid: true });
-            const uids = Array.isArray(result) ? [...result].sort((a, b) => a - b) : [];
+            // Per imapflow, `search` resolves to a number[] (possibly empty) on
+            // success. A non-array return is a protocol failure or partial parse
+            // — and silently treating that as "the folder is empty" is what the
+            // reconcile planner would interpret as "soft-delete every local row
+            // in the walked window". Throw instead so `reconcileFolder`'s
+            // try/catch logs and skips the folder this tick rather than
+            // declaring a mass deletion on bad evidence.
+            if (!Array.isArray(result)) {
+                throw new Error("IMAP search returned non-array result; refusing to use as authoritative UID list");
+            }
+            const uids = [...result].sort((a, b) => a - b);
             return { uidValidity, uids };
         }
         finally {
@@ -913,13 +921,11 @@ function getObject(value) {
  * a mismatch would silently break receipt downloads even though the rows
  * were inserted correctly.
  */
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function attachmentIdFor(attachment, index) {
     return ((typeof attachment?.contentId === "string" && attachment.contentId) ||
         (typeof attachment?.cid === "string" && attachment.cid) ||
         `att-${index + 1}`);
 }
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function toAttachmentMeta(attachment, index) {
     return {
         id: attachmentIdFor(attachment, index),
@@ -1001,4 +1007,3 @@ async function loadMailComposer() {
     const module = await import("nodemailer/lib/mail-composer/index.js");
     return (module.default ?? module);
 }
-//# sourceMappingURL=imap-provider-base.js.map