@aria-cli/tools 1.0.0

package/dist/network-runtime/runtime-bootstrap-contract.js

@@ -0,0 +1,61 @@
+import { z } from "zod";
+import { LoopbackTlsIdentitySchema, NodeIdSchema, OwnerGenerationSchema, PeerTransportIdSchema, PrincipalFingerprintSchema, RuntimeIdSchema, SigningPublicKeySchema, TlsCaFingerprintSchema, TransportEndpointAdvertisementSchema, } from "./address-types.js";
+import { NetworkRuntimeProtocolVersionSchema } from "./protocol-schemas.js";
+const NonEmptyTrimmedStringSchema = z.string().trim().min(1);
+const NonBlankVerbatimStringSchema = z
+    .string()
+    .min(1)
+    .refine((value) => value.trim().length > 0);
+export const RuntimeBootstrapRevisionSchema = z.number().int().nonnegative();
+export const RuntimeBootstrapPhaseSchema = z.enum([
+    "starting",
+    "tls_bound",
+    "control_ready",
+    "network_ready",
+    "mesh_ready",
+    "degraded",
+    "stopped",
+]);
+export const RuntimeBootstrapControlEndpointSchema = z
+    .object({
+    host: NonEmptyTrimmedStringSchema,
+    port: z.number().int().min(1).max(65535),
+})
+    .strict();
+export const RuntimeBootstrapTlsSchema = z
+    .object({
+    caFingerprint: TlsCaFingerprintSchema,
+    caCertPem: NonBlankVerbatimStringSchema,
+    principalIdentity: PrincipalFingerprintSchema,
+    loopbackIdentity: LoopbackTlsIdentitySchema,
+})
+    .strict();
+export const RuntimeBootstrapIdentitySchema = z
+    .object({
+    signingPublicKey: SigningPublicKeySchema,
+    transportPublicKey: PeerTransportIdSchema,
+    transportEndpoint: TransportEndpointAdvertisementSchema,
+    displayNameSnapshot: NonEmptyTrimmedStringSchema.optional(),
+})
+    .strict();
+export const RuntimeBootstrapRecordSchema = z
+    .object({
+    nodeId: NodeIdSchema,
+    runtimeId: RuntimeIdSchema,
+    arionName: NonEmptyTrimmedStringSchema.optional(),
+    ownerGeneration: OwnerGenerationSchema,
+    bootstrapRevision: RuntimeBootstrapRevisionSchema,
+    phase: RuntimeBootstrapPhaseSchema,
+    protocolVersion: NetworkRuntimeProtocolVersionSchema,
+    controlEndpoint: RuntimeBootstrapControlEndpointSchema,
+    displayNameSnapshot: NonEmptyTrimmedStringSchema.optional(),
+    signingPublicKey: SigningPublicKeySchema,
+    transportPublicKey: PeerTransportIdSchema,
+    transportEndpoint: TransportEndpointAdvertisementSchema,
+    tls: RuntimeBootstrapTlsSchema,
+    publishedAt: NonEmptyTrimmedStringSchema,
+    degradedReason: NonEmptyTrimmedStringSchema.optional(),
+    failedPhase: RuntimeBootstrapPhaseSchema.optional(),
+})
+    .strict();
+//# sourceMappingURL=runtime-bootstrap-contract.js.map

package/dist/network-runtime/runtime-bootstrap-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-bootstrap-contract.js","sourceRoot":"","sources":["../../src/network-runtime/runtime-bootstrap-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,YAAY,EACZ,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,oCAAoC,GACrC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mCAAmC,EAAE,MAAM,uBAAuB,CAAC;AAE5E,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC7D,MAAM,4BAA4B,GAAG,CAAC;KACnC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAE9C,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;AAG7E,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC;IAChD,UAAU;IACV,WAAW;IACX,eAAe;IACf,eAAe;IACf,YAAY;IACZ,UAAU;IACV,SAAS;CACV,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC;KACnD,MAAM,CAAC;IACN,IAAI,EAAE,2BAA2B;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,aAAa,EAAE,sBAAsB;IACrC,SAAS,EAAE,4BAA4B;IACvC,iBAAiB,EAAE,0BAA0B;IAC7C,gBAAgB,EAAE,yBAAyB;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,CAAC;IACN,gBAAgB,EAAE,sBAAsB;IACxC,kBAAkB,EAAE,qBAAqB;IACzC,iBAAiB,EAAE,oCAAoC;IACvD,mBAAmB,EAAE,2BAA2B,CAAC,QAAQ,EAAE;CAC5D,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,MAAM,EAAE,YAAY;IACpB,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IACjD,eAAe,EAAE,qBAAqB;IACtC,iBAAiB,EAAE,8BAA8B;IACjD,KAAK,EAAE,2BAA2B;IAClC,eAAe,EAAE,mCAAmC;IACpD,eAAe,EAAE,qCAAqC;IACtD,mBAAmB,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IAC3D,gBAAgB,EAAE,sBAAsB;IACxC,kBAAkB,EAAE,qBAAqB;IACzC,iBAAiB,EAAE,oCAAoC;IACvD,GAAG,EAAE,yBAAyB;IAC9B,WAAW,EAAE,2BAA2B;IACxC,cAAc,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IACtD,WAAW,EAAE,2BAA2B,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/outlook/desktop-session.d.ts

@@ -0,0 +1,69 @@
+export interface OutlookMessageView {
+    id: string;
+    subject: string;
+    from: {
+        name: string;
+        email: string;
+    };
+    toRecipients: {
+        name: string;
+        email: string;
+    }[];
+    receivedDateTime: string;
+    isRead: boolean;
+    hasAttachments: boolean;
+    bodyPreview: string;
+    conversationId: string;
+}
+export interface OutlookMessageDetail extends OutlookMessageView {
+    body: {
+        contentType: string;
+        content: string;
+    };
+    ccRecipients: {
+        name: string;
+        email: string;
+    }[];
+    importance: string;
+}
+export interface OutlookListMessagesResult {
+    accountEmail: string;
+    folder: string;
+    messages: OutlookMessageView[];
+    totalCount: number;
+}
+export interface OutlookSendResult {
+    accountEmail: string;
+    status: "sent";
+}
+export interface OutlookDesktopClient {
+    getAccountEmail(): string;
+    listMessages(input: {
+        folder?: string;
+        limit?: number;
+        filter?: string;
+        search?: string;
+    }): Promise<OutlookListMessagesResult>;
+    getMessage(input: {
+        messageId: string;
+    }): Promise<OutlookMessageDetail>;
+    sendMessage(input: {
+        to: string[];
+        cc?: string[];
+        subject: string;
+        body: string;
+        bodyType?: "text" | "html";
+    }): Promise<OutlookSendResult>;
+    replyMessage(input: {
+        messageId: string;
+        body: string;
+        bodyType?: "text" | "html";
+        replyAll?: boolean;
+    }): Promise<OutlookSendResult>;
+    close(): Promise<void>;
+}
+export declare function createOutlookDesktopClient(opts?: {
+    accountHint?: string;
+    bootstrapTimeoutMs?: number;
+}): Promise<OutlookDesktopClient>;
+//# sourceMappingURL=desktop-session.d.ts.map

package/dist/outlook/desktop-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"desktop-session.d.ts","sourceRoot":"","sources":["../../src/outlook/desktop-session.ts"],"names":[],"mappings":"AAgDA,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAChD,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,IAAI,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAChD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,eAAe,IAAI,MAAM,CAAC;IAC1B,YAAY,CAAC,KAAK,EAAE;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACvC,UAAU,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACxE,WAAW,CAAC,KAAK,EAAE;QACjB,EAAE,EAAE,MAAM,EAAE,CAAC;QACb,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;KAC5B,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/B,YAAY,CAAC,KAAK,EAAE;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAoLD,wBAAsB,0BAA0B,CAAC,IAAI,CAAC,EAAE;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAqChC"}

package/dist/outlook/desktop-session.js

@@ -0,0 +1,280 @@
+import os from "node:os";
+import path from "node:path";
+import { promises as fs } from "node:fs";
+const OUTLOOK_SESSION_DIR = path.join(os.homedir(), ".aria", "outlook-session");
+const OUTLOOK_TOKEN_CACHE = path.join(os.homedir(), ".aria", "cache", "outlook-token.json");
+const OUTLOOK_WEB_URL = "https://outlook.office.com/mail/";
+// Outlook web uses outlook.office.com-scoped tokens, not graph.microsoft.com.
+// The Outlook REST v2 API at outlook.office.com/api/v2.0 accepts these tokens.
+const OUTLOOK_REST_API_BASE = "https://outlook.office.com/api/v2.0";
+const DEFAULT_BOOTSTRAP_TIMEOUT_MS = 60_000;
+async function loadCachedToken() {
+    try {
+        const raw = await fs.readFile(OUTLOOK_TOKEN_CACHE, "utf-8");
+        const cached = JSON.parse(raw);
+        // Token valid if >5 min remaining
+        if (cached.bearerToken && cached.expiresAt > Date.now() + 5 * 60_000) {
+            return cached;
+        }
+    }
+    catch {
+        // no cache or invalid
+    }
+    return null;
+}
+async function saveCachedToken(token, email) {
+    // Decode JWT to get expiry
+    let exp = Date.now() + 60 * 60_000; // default 1h
+    try {
+        const part = token.split(".")[1];
+        if (!part)
+            throw new Error("no payload");
+        const payload = JSON.parse(Buffer.from(part, "base64").toString());
+        if (payload.exp)
+            exp = payload.exp * 1000;
+    }
+    catch {
+        /* best-effort */
+    }
+    const cached = { bearerToken: token, accountEmail: email, expiresAt: exp };
+    await fs.mkdir(path.dirname(OUTLOOK_TOKEN_CACHE), { recursive: true });
+    await fs.writeFile(OUTLOOK_TOKEN_CACHE, JSON.stringify(cached, null, 2));
+}
+// Outlook REST v2 returns PascalCase keys (Subject, From, EmailAddress)
+// while Graph API uses camelCase (subject, from, emailAddress).
+// Helper to read a field with either casing.
+function field(obj, camelKey) {
+    if (camelKey in obj)
+        return obj[camelKey];
+    const pascalKey = camelKey.charAt(0).toUpperCase() + camelKey.slice(1);
+    return obj[pascalKey];
+}
+function fieldStr(obj, camelKey) {
+    const v = field(obj, camelKey);
+    return typeof v === "string" ? v : "";
+}
+function parseRecipient(recipient) {
+    const emailAddress = field(recipient, "emailAddress") ?? null;
+    if (!emailAddress || typeof emailAddress !== "object")
+        return null;
+    return {
+        name: fieldStr(emailAddress, "name"),
+        email: fieldStr(emailAddress, "address"),
+    };
+}
+function parseRecipients(raw) {
+    if (!Array.isArray(raw))
+        return [];
+    return raw
+        .filter((r) => !!r && typeof r === "object")
+        .map(parseRecipient)
+        .filter((r) => r !== null);
+}
+function toMessageView(msg) {
+    const fromRaw = field(msg, "from");
+    const from = fromRaw && typeof fromRaw === "object"
+        ? parseRecipient(fromRaw)
+        : null;
+    return {
+        id: fieldStr(msg, "id") || fieldStr(msg, "Id"),
+        subject: fieldStr(msg, "subject"),
+        from: from ?? { name: "", email: "" },
+        toRecipients: parseRecipients(field(msg, "toRecipients")),
+        receivedDateTime: fieldStr(msg, "receivedDateTime"),
+        isRead: field(msg, "isRead") === true,
+        hasAttachments: field(msg, "hasAttachments") === true,
+        bodyPreview: fieldStr(msg, "bodyPreview"),
+        conversationId: fieldStr(msg, "conversationId"),
+    };
+}
+function toMessageDetail(msg) {
+    const view = toMessageView(msg);
+    const bodyRaw = field(msg, "body");
+    const body = bodyRaw && typeof bodyRaw === "object" ? bodyRaw : {};
+    return {
+        ...view,
+        body: {
+            contentType: fieldStr(body, "contentType") || "text",
+            content: fieldStr(body, "content"),
+        },
+        ccRecipients: parseRecipients(field(msg, "ccRecipients")),
+        importance: fieldStr(msg, "importance") || "normal",
+    };
+}
+async function waitForMailBearerToken(page, timeoutMs) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+            page.off("request", handleRequest);
+            reject(new Error("Timed out waiting for a Mail-scoped bearer token. " +
+                "Ensure you are logged in to outlook.office.com."));
+        }, timeoutMs);
+        const seen = new Set();
+        const handleRequest = (request) => {
+            const authHeader = request.headers()["authorization"];
+            if (!authHeader || !authHeader.startsWith("Bearer "))
+                return;
+            const bearerToken = authHeader.slice(7);
+            const dedup = bearerToken.substring(0, 30);
+            if (seen.has(dedup))
+                return;
+            seen.add(dedup);
+            // Decode JWT payload to extract email and scopes
+            let accountEmail = "";
+            let scp = "";
+            try {
+                const payloadB64 = bearerToken.split(".")[1];
+                if (payloadB64) {
+                    const payload = JSON.parse(Buffer.from(payloadB64, "base64url").toString("utf8"));
+                    scp = typeof payload.scp === "string" ? payload.scp : "";
+                    accountEmail =
+                        typeof payload.upn === "string"
+                            ? payload.upn
+                            : typeof payload.preferred_username === "string"
+                                ? payload.preferred_username
+                                : typeof payload.unique_name === "string"
+                                    ? payload.unique_name
+                                    : "";
+                }
+            }
+            catch {
+                // JWT decode is best-effort
+            }
+            // Only accept tokens with Mail.Read scope (from outlook.cloud.microsoft)
+            if (!scp.includes("Mail.Read"))
+                return;
+            clearTimeout(timer);
+            page.off("request", handleRequest);
+            resolve({ bearerToken, accountEmail });
+        };
+        page.on("request", handleRequest);
+    });
+}
+// Stateless client using a cached bearer token (no Playwright needed)
+function createStatelessClient(bearerToken, accountEmail) {
+    const invokeApi = async (method, endpoint, body) => {
+        const url = `${OUTLOOK_REST_API_BASE}${endpoint}`;
+        const headers = {
+            Authorization: `Bearer ${bearerToken}`,
+            "Content-Type": "application/json",
+        };
+        const resp = await fetch(url, {
+            method,
+            headers,
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        if (resp.status === 204)
+            return { status: 204 };
+        const text = await resp.text();
+        let json;
+        try {
+            json = JSON.parse(text);
+        }
+        catch {
+            throw new Error(`Outlook API ${method} ${endpoint} returned non-JSON (HTTP ${resp.status}).`);
+        }
+        if (resp.status >= 400) {
+            const error = json.error && typeof json.error === "object" ? json.error : {};
+            const code = typeof error.code === "string" ? error.code : `http_${resp.status}`;
+            const message = typeof error.message === "string" ? error.message : "Unknown error";
+            throw new Error(`Outlook API ${method} ${endpoint} failed: ${code} — ${message}`);
+        }
+        return json;
+    };
+    return buildClientMethods(invokeApi, accountEmail, async () => {
+        /* no-op close */
+    });
+}
+export async function createOutlookDesktopClient(opts) {
+    const timeoutMs = opts?.bootstrapTimeoutMs ?? DEFAULT_BOOTSTRAP_TIMEOUT_MS;
+    // Strategy 1: Use cached token if still valid (no Playwright needed)
+    const cached = await loadCachedToken();
+    if (cached) {
+        return createStatelessClient(cached.bearerToken, cached.accountEmail);
+    }
+    // Strategy 2: Launch Playwright headful to get a fresh token via SSO
+    // Must be headful — Microsoft SSO blocks headless Chromium
+    await fs.mkdir(OUTLOOK_SESSION_DIR, { recursive: true });
+    const playwright = await import("playwright");
+    const context = await playwright.chromium.launchPersistentContext(OUTLOOK_SESSION_DIR, {
+        headless: false,
+        args: ["--start-maximized"],
+        viewport: null,
+    });
+    const page = context.pages()[0] ?? (await context.newPage());
+    const bootstrapPromise = waitForMailBearerToken(page, timeoutMs);
+    await page.goto(OUTLOOK_WEB_URL, {
+        waitUntil: "domcontentloaded",
+        timeout: timeoutMs,
+    });
+    const { bearerToken, accountEmail } = await bootstrapPromise;
+    // Cache the token for subsequent calls (avoids launching Playwright)
+    await saveCachedToken(bearerToken, accountEmail);
+    // Close browser immediately — we have the token, use stateless client
+    await page.close().catch(() => undefined);
+    await context.close().catch(() => undefined);
+    return createStatelessClient(bearerToken, accountEmail);
+}
+function buildClientMethods(invokeApi, accountEmail, closeFn) {
+    return {
+        getAccountEmail: () => accountEmail,
+        listMessages: async ({ folder = "inbox", limit = 20, filter, search }) => {
+            const params = new URLSearchParams();
+            params.set("$top", String(Math.max(1, Math.min(limit, 50))));
+            params.set("$select", "Id,Subject,From,ToRecipients,ReceivedDateTime,IsRead,HasAttachments,BodyPreview,ConversationId");
+            params.set("$orderby", "ReceivedDateTime desc");
+            if (filter)
+                params.set("$filter", filter);
+            if (search)
+                params.set("$search", `"${search}"`);
+            const endpoint = `/me/mailFolders/${encodeURIComponent(folder)}/messages?${params.toString()}`;
+            const json = await invokeApi("GET", endpoint);
+            const rawMessages = Array.isArray(json.value) ? json.value : [];
+            const messages = rawMessages
+                .filter((m) => !!m && typeof m === "object")
+                .map(toMessageView);
+            return {
+                accountEmail,
+                folder,
+                messages,
+                totalCount: typeof json["@odata.count"] === "number" ? json["@odata.count"] : messages.length,
+            };
+        },
+        getMessage: async ({ messageId }) => {
+            const json = await invokeApi("GET", `/me/messages/${encodeURIComponent(messageId)}`);
+            return toMessageDetail(json);
+        },
+        sendMessage: async ({ to, cc, subject, body, bodyType = "text" }) => {
+            const toRecipients = to.map((email) => ({
+                EmailAddress: { Address: email },
+            }));
+            const ccRecipients = (cc ?? []).map((email) => ({
+                EmailAddress: { Address: email },
+            }));
+            await invokeApi("POST", "/me/sendMail", {
+                Message: {
+                    Subject: subject,
+                    Body: { ContentType: bodyType === "html" ? "HTML" : "Text", Content: body },
+                    ToRecipients: toRecipients,
+                    ...(ccRecipients.length > 0 ? { CcRecipients: ccRecipients } : {}),
+                },
+            });
+            return { accountEmail, status: "sent" };
+        },
+        replyMessage: async ({ messageId, body, bodyType = "text", replyAll = false }) => {
+            const replyMethod = replyAll ? "ReplyAll" : "Reply";
+            await invokeApi("POST", `/me/messages/${encodeURIComponent(messageId)}/${replyMethod}`, {
+                Comment: body,
+                ...(bodyType === "html"
+                    ? {
+                        Message: {
+                            Body: { ContentType: "HTML", Content: body },
+                        },
+                    }
+                    : {}),
+            });
+            return { accountEmail, status: "sent" };
+        },
+        close: closeFn,
+    };
+}
+//# sourceMappingURL=desktop-session.js.map

package/dist/outlook/desktop-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"desktop-session.js","sourceRoot":"","sources":["../../src/outlook/desktop-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AAEzC,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAChF,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC;AAC5F,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAC3D,8EAA8E;AAC9E,+EAA+E;AAC/E,MAAM,qBAAqB,GAAG,qCAAqC,CAAC;AACpE,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAQ5C,KAAK,UAAU,eAAe;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;QAC9C,kCAAkC;QAClC,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC;YACrE,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAAa,EAAE,KAAa;IACzD,2BAA2B;IAC3B,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,aAAa;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,GAAG;YAAE,GAAG,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,MAAM,MAAM,GAAgB,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACxF,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,MAAM,EAAE,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAyDD,wEAAwE;AACxE,gEAAgE;AAChE,6CAA6C;AAC7C,SAAS,KAAK,CAAC,GAA4B,EAAE,QAAgB;IAC3D,IAAI,QAAQ,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,GAA4B,EAAE,QAAgB;IAC9D,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,cAAc,CACrB,SAAkC;IAElC,MAAM,YAAY,GAAI,KAAK,CAAC,SAAS,EAAE,cAAc,CAA6B,IAAI,IAAI,CAAC;IAC3F,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnE,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QACpC,KAAK,EAAE,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAAY;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,GAAG;SACP,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC;SACzE,GAAG,CAAC,cAAc,CAAC;SACnB,MAAM,CAAC,CAAC,CAAC,EAAwC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,aAAa,CAAC,GAA4B;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,IAAI,GACR,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QACpC,CAAC,CAAC,cAAc,CAAC,OAAkC,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC;IACX,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;QAC9C,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;QACjC,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACzD,gBAAgB,EAAE,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;QACnD,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,IAAI;QACrC,cAAc,EAAE,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,KAAK,IAAI;QACrD,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC;QACzC,cAAc,EAAE,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,GAA4B;IACnD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAE,OAAmC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE;YACJ,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,MAAM;YACpD,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;SACnC;QACD,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACzD,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,QAAQ;KACpD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,IASC,EACD,SAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YACnC,MAAM,CACJ,IAAI,KAAK,CACP,oDAAoD;gBAClD,iDAAiD,CACpD,CACF,CAAC;QACJ,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAE/B,MAAM,aAAa,GAAG,CAAC,OAA6D,EAAE,EAAE;YACtF,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;YACtD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO;YAE7D,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAExC,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,OAAO;YAC5B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAEhB,iDAAiD;YACjD,IAAI,YAAY,GAAG,EAAE,CAAC;YACtB,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC3B,CAAC;oBAC7B,GAAG,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzD,YAAY;wBACV,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;4BAC7B,CAAC,CAAC,OAAO,CAAC,GAAG;4BACb,CAAC,CAAC,OAAO,OAAO,CAAC,kBAAkB,KAAK,QAAQ;gCAC9C,CAAC,CAAC,OAAO,CAAC,kBAAkB;gCAC5B,CAAC,CAAC,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;oCACvC,CAAC,CAAC,OAAO,CAAC,WAAW;oCACrB,CAAC,CAAC,EAAE,CAAC;gBACf,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,4BAA4B;YAC9B,CAAC;YAED,yEAAyE;YACzE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,OAAO;YAEvC,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YACnC,OAAO,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC;QAEF,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AACtE,SAAS,qBAAqB,CAAC,WAAmB,EAAE,YAAoB;IACtE,MAAM,SAAS,GAAG,KAAK,EACrB,MAAsB,EACtB,QAAgB,EAChB,IAA8B,EACI,EAAE;QACpC,MAAM,GAAG,GAAG,GAAG,qBAAqB,GAAG,QAAQ,EAAE,CAAC;QAClD,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,UAAU,WAAW,EAAE;YACtC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC5B,MAAM;YACN,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,IAA6B,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,eAAe,MAAM,IAAI,QAAQ,4BAA4B,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACvB,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACjF,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,eAAe,MAAM,IAAI,QAAQ,YAAY,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,OAAO,kBAAkB,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,IAAI,EAAE;QAC5D,iBAAiB;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAGhD;IACC,MAAM,SAAS,GAAG,IAAI,EAAE,kBAAkB,IAAI,4BAA4B,CAAC;IAE3E,qEAAqE;IACrE,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;IACvC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACxE,CAAC;IAED,qEAAqE;IACrE,2DAA2D;IAC3D,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,uBAAuB,CAAC,mBAAmB,EAAE;QACrF,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,CAAC,mBAAmB,CAAC;QAC3B,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAE7D,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACjE,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;QAC/B,SAAS,EAAE,kBAAkB;QAC7B,OAAO,EAAE,SAAS;KACnB,CAAC,CAAC;IAEH,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,gBAAgB,CAAC;IAE7D,qEAAqE;IACrE,MAAM,eAAe,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAEjD,sEAAsE;IACtE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE7C,OAAO,qBAAqB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;AAC1D,CAAC;AAQD,SAAS,kBAAkB,CACzB,SAAqB,EACrB,YAAoB,EACpB,OAA4B;IAE5B,OAAO;QACL,eAAe,EAAE,GAAG,EAAE,CAAC,YAAY;QAEnC,YAAY,EAAE,KAAK,EAAE,EAAE,MAAM,GAAG,OAAO,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;YACvE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,CACR,SAAS,EACT,gGAAgG,CACjG,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;YAChD,IAAI,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC1C,IAAI,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,MAAM,GAAG,CAAC,CAAC;YAEjD,MAAM,QAAQ,GAAG,mBAAmB,kBAAkB,CAAC,MAAM,CAAC,aAAa,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC/F,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAE9C,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,QAAQ,GAAG,WAAW;iBACzB,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC;iBACzE,GAAG,CAAC,aAAa,CAAC,CAAC;YAEtB,OAAO;gBACL,YAAY;gBACZ,MAAM;gBACN,QAAQ;gBACR,UAAU,EACR,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM;aACpF,CAAC;QACJ,CAAC;QAED,UAAU,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;YAClC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACrF,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,EAAE,EAAE,EAAE;YAClE,MAAM,YAAY,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACtC,YAAY,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;aACjC,CAAC,CAAC,CAAC;YACJ,MAAM,YAAY,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC9C,YAAY,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;aACjC,CAAC,CAAC,CAAC;YAEJ,MAAM,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE;gBACtC,OAAO,EAAE;oBACP,OAAO,EAAE,OAAO;oBAChB,IAAI,EAAE,EAAE,WAAW,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;oBAC3E,YAAY,EAAE,YAAY;oBAC1B,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnE;aACF,CAAC,CAAC;YAEH,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC;QACnD,CAAC;QAED,YAAY,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,EAAE,QAAQ,GAAG,KAAK,EAAE,EAAE,EAAE;YAC/E,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;YACpD,MAAM,SAAS,CAAC,MAAM,EAAE,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,IAAI,WAAW,EAAE,EAAE;gBACtF,OAAO,EAAE,IAAI;gBACb,GAAG,CAAC,QAAQ,KAAK,MAAM;oBACrB,CAAC,CAAC;wBACE,OAAO,EAAE;4BACP,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;yBAC7C;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YAEH,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC;QACnD,CAAC;QAED,KAAK,EAAE,OAAO;KACf,CAAC;AACJ,CAAC"}

package/dist/policy.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Tool Policy Engine
+ *
+ * Evaluates whether a tool is allowed based on allow/deny lists with group expansion.
+ * Supports layered policy merging (intersection semantics) for arion + RunOptions policies.
+ */
+export interface ToolPolicy {
+    /** Tool names or group names to allow. Empty array or undefined = allow all */
+    allow?: string[];
+    /** Tool names or group names to deny. Applied after allow. Deny wins. */
+    deny?: string[];
+    /**
+     * Internal marker used by policy merging:
+     * when true, treat allow (even empty) as an explicit restriction.
+     * This preserves deny-all semantics for empty intersections.
+     */
+    restrictAllow?: boolean;
+}
+/** Built-in tool groups */
+export declare const TOOL_GROUPS: Record<string, string[]>;
+/**
+ * Expand group references in a policy list.
+ * "group:memory" → ["remember", "recall", "forget", "reflect"]
+ * Individual tool names pass through unchanged.
+ * Unknown group names are ignored (treated as empty).
+ */
+export declare function expandGroups(names: string[]): Set<string>;
+/**
+ * Evaluate whether a tool is allowed by a policy.
+ * Rules:
+ * 1. If allow is empty/undefined and restrictAllow is false/undefined
+ *    → all tools allowed (then check deny)
+ * 2. If allow is non-empty OR restrictAllow=true
+ *    → only listed tools/groups allowed (empty allow + restrictAllow=true denies all)
+ * 3. Deny always wins over allow
+ */
+export declare function isToolAllowed(toolName: string, policy: ToolPolicy): boolean;
+/**
+ * Merge two policies (intersection). Used for layered evaluation:
+ * arion policy ∩ RunOptions policy = effective policy.
+ * A tool must be allowed by BOTH layers.
+ */
+export declare function mergePolicies(a: ToolPolicy, b: ToolPolicy): ToolPolicy;
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,UAAU;IACzB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,yEAAyE;IACzE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,2BAA2B;AAC3B,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAoDhD,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAiBzD;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAsB3E;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,UAAU,CAgCtE"}

package/dist/policy.js

@@ -0,0 +1,150 @@
+/**
+ * Tool Policy Engine
+ *
+ * Evaluates whether a tool is allowed based on allow/deny lists with group expansion.
+ * Supports layered policy merging (intersection semantics) for arion + RunOptions policies.
+ */
+/** Built-in tool groups */
+export const TOOL_GROUPS = {
+    "group:memory": [
+        "remember",
+        "recall",
+        "forget",
+        "recall_knowledge",
+        "reflect",
+        "search",
+        "learn",
+        "session_history",
+    ],
+    "group:web": ["web_search", "web_fetch", "browse", "browser"],
+    "group:filesystem": ["read_file", "write_file", "edit_file", "glob", "grep", "ls", "apply_patch"],
+    "group:shell": [
+        "bash",
+        "exec",
+        "spawn",
+        "kill",
+        "list_processes",
+        "wait_process",
+        "write_stdin",
+        "process",
+    ],
+    "group:arion": [
+        "hatch_arion",
+        "wake_arion",
+        "rest_arion",
+        "retire_arion",
+        "delegate_arion",
+        "manage_network",
+        "list_clients",
+        "deploy",
+    ],
+    "group:meta": [
+        "ask_user",
+        "quest_update",
+        "quest_list",
+        "search",
+        "learn",
+        "learn_tool",
+        "learn_skill",
+        "create_tool",
+        "create_skill",
+        "use_skill",
+        "restart",
+        "spawn_worker",
+        "check_delegation",
+        "pause_delegation",
+        "resume_delegation",
+        "quest_report",
+        "self_diagnose",
+    ],
+};
+/**
+ * Expand group references in a policy list.
+ * "group:memory" → ["remember", "recall", "forget", "reflect"]
+ * Individual tool names pass through unchanged.
+ * Unknown group names are ignored (treated as empty).
+ */
+export function expandGroups(names) {
+    const result = new Set();
+    for (const name of names) {
+        const lower = name.toLowerCase();
+        if (lower.startsWith("group:")) {
+            const members = TOOL_GROUPS[lower];
+            if (members) {
+                for (const member of members) {
+                    result.add(member.toLowerCase());
+                }
+            }
+            // Unknown group names are silently ignored
+        }
+        else {
+            result.add(lower);
+        }
+    }
+    return result;
+}
+/**
+ * Evaluate whether a tool is allowed by a policy.
+ * Rules:
+ * 1. If allow is empty/undefined and restrictAllow is false/undefined
+ *    → all tools allowed (then check deny)
+ * 2. If allow is non-empty OR restrictAllow=true
+ *    → only listed tools/groups allowed (empty allow + restrictAllow=true denies all)
+ * 3. Deny always wins over allow
+ */
+export function isToolAllowed(toolName, policy) {
+    const normalized = toolName.toLowerCase();
+    // Check allow list: when restricted, tool must be in allowed set.
+    const isAllowRestricted = policy.restrictAllow === true || (policy.allow !== undefined && policy.allow.length > 0);
+    if (isAllowRestricted) {
+        const allowed = expandGroups(policy.allow ?? []);
+        if (!allowed.has(normalized)) {
+            return false;
+        }
+    }
+    // Check deny list: deny always wins
+    if (policy.deny && policy.deny.length > 0) {
+        const denied = expandGroups(policy.deny);
+        if (denied.has(normalized)) {
+            return false;
+        }
+    }
+    return true;
+}
+/**
+ * Merge two policies (intersection). Used for layered evaluation:
+ * arion policy ∩ RunOptions policy = effective policy.
+ * A tool must be allowed by BOTH layers.
+ */
+export function mergePolicies(a, b) {
+    // Merge deny: union of both deny lists
+    const mergedDeny = [...(a.deny ?? []), ...(b.deny ?? [])];
+    // Merge allow with restriction semantics:
+    // - both restricted: intersection (possibly empty = deny all)
+    // - one restricted: inherit that restriction
+    // - neither restricted: unrestricted
+    const aRestricts = a.restrictAllow === true || (a.allow?.length ?? 0) > 0;
+    const bRestricts = b.restrictAllow === true || (b.allow?.length ?? 0) > 0;
+    let mergedAllow;
+    let mergedRestrictAllow = false;
+    if (aRestricts && bRestricts) {
+        const expandedA = expandGroups(a.allow ?? []);
+        const expandedB = expandGroups(b.allow ?? []);
+        mergedAllow = [...expandedA].filter((name) => expandedB.has(name));
+        mergedRestrictAllow = true;
+    }
+    else if (aRestricts) {
+        mergedAllow = [...(a.allow ?? [])];
+        mergedRestrictAllow = true;
+    }
+    else if (bRestricts) {
+        mergedAllow = [...(b.allow ?? [])];
+        mergedRestrictAllow = true;
+    }
+    return {
+        ...(mergedAllow !== undefined ? { allow: mergedAllow } : {}),
+        ...(mergedRestrictAllow ? { restrictAllow: true } : {}),
+        ...(mergedDeny.length ? { deny: mergedDeny } : {}),
+    };
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,WAAW,GAA6B;IACnD,cAAc,EAAE;QACd,UAAU;QACV,QAAQ;QACR,QAAQ;QACR,kBAAkB;QAClB,SAAS;QACT,QAAQ;QACR,OAAO;QACP,iBAAiB;KAClB;IACD,WAAW,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC;IAC7D,kBAAkB,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC;IACjG,aAAa,EAAE;QACb,MAAM;QACN,MAAM;QACN,OAAO;QACP,MAAM;QACN,gBAAgB;QAChB,cAAc;QACd,aAAa;QACb,SAAS;KACV;IACD,aAAa,EAAE;QACb,aAAa;QACb,YAAY;QACZ,YAAY;QACZ,cAAc;QACd,gBAAgB;QAChB,gBAAgB;QAChB,cAAc;QACd,QAAQ;KACT;IACD,YAAY,EAAE;QACZ,UAAU;QACV,cAAc;QACd,YAAY;QACZ,QAAQ;QACR,OAAO;QACP,YAAY;QACZ,aAAa;QACb,aAAa;QACb,cAAc;QACd,WAAW;QACX,SAAS;QACT,cAAc;QACd,kBAAkB;QAClB,kBAAkB;QAClB,mBAAmB;QACnB,cAAc;QACd,eAAe;KAChB;CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAe;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;YACD,2CAA2C;QAC7C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,MAAkB;IAChE,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAE1C,kEAAkE;IAClE,MAAM,iBAAiB,GACrB,MAAM,CAAC,aAAa,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3F,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,CAAa,EAAE,CAAa;IACxD,uCAAuC;IACvC,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAE1D,0CAA0C;IAC1C,8DAA8D;IAC9D,6CAA6C;IAC7C,qCAAqC;IACrC,MAAM,UAAU,GAAG,CAAC,CAAC,aAAa,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,CAAC,CAAC,aAAa,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAE1E,IAAI,WAAiC,CAAC;IACtC,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAEhC,IAAI,UAAU,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC9C,WAAW,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,mBAAmB,GAAG,IAAI,CAAC;IAC7B,CAAC;SAAM,IAAI,UAAU,EAAE,CAAC;QACtB,WAAW,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QACnC,mBAAmB,GAAG,IAAI,CAAC;IAC7B,CAAC;SAAM,IAAI,UAAU,EAAE,CAAC;QACtB,WAAW,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;QACnC,mBAAmB,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC"}

package/dist/providers/brave.d.ts

@@ -0,0 +1,11 @@
+import type { SearchProvider, SearchOptions, SearchResult, SearchProviderEnv } from "./search-provider.js";
+export declare class BraveSearchProvider implements SearchProvider {
+    private readonly env;
+    readonly name = "brave";
+    readonly requiresApiKey = true;
+    readonly priority = 1;
+    constructor(env?: SearchProviderEnv | Record<string, string | undefined>);
+    isAvailable(): boolean;
+    search(query: string, options?: SearchOptions): Promise<SearchResult[]>;
+}
+//# sourceMappingURL=brave.d.ts.map