@ni-c/imap-mcp 0.2.0

package/dist/attachments.js

@@ -0,0 +1,270 @@
+import { defuseAutoFetch, stripInvisible } from './analyze.js';
+/** How deep the MIME tree is walked. Forwarded mail nests; a loop does not. */
+const MAX_DEPTH = 5;
+/** Upper bound on how many parts one listing may describe. */
+const MAX_ATTACHMENTS = 50;
+const MAX_FILENAME_LENGTH = 120;
+/**
+ * Extensions that are executable somewhere. The list is long on purpose: this
+ * is a refusal list applied on top of the content-type allowlist, and the cost
+ * of an extra entry is one unusual attachment that has to be fetched by other
+ * means.
+ */
+const EXECUTABLE_EXTENSIONS = new Set([
+    'ade',
+    'adp',
+    'app',
+    'appimage',
+    'application',
+    'appref-ms',
+    'asp',
+    'aspx',
+    'bas',
+    'bat',
+    'cer',
+    'chm',
+    'cmd',
+    'com',
+    'cpl',
+    'crt',
+    'csh',
+    'deb',
+    'dll',
+    'dmg',
+    'exe',
+    'fxp',
+    'gadget',
+    'hlp',
+    'hta',
+    'inf',
+    'ins',
+    'iso',
+    'isp',
+    'its',
+    'jar',
+    'js',
+    'jse',
+    'ksh',
+    'lnk',
+    'mad',
+    'maf',
+    'mag',
+    'mam',
+    'maq',
+    'mar',
+    'mas',
+    'mat',
+    'mau',
+    'mav',
+    'maw',
+    'mda',
+    'mdb',
+    'mde',
+    'mdt',
+    'mdw',
+    'mdz',
+    'msc',
+    'msh',
+    'msh1',
+    'msh2',
+    'mshxml',
+    'msi',
+    'msp',
+    'mst',
+    'ops',
+    'pcd',
+    'pif',
+    'pkg',
+    'pl',
+    'plg',
+    'prf',
+    'prg',
+    'ps1',
+    'ps2',
+    'psc1',
+    'psc2',
+    'py',
+    'pyc',
+    'pyo',
+    'rb',
+    'reg',
+    'rpm',
+    'scf',
+    'scr',
+    'sct',
+    'sh',
+    'shb',
+    'shs',
+    'url',
+    'vb',
+    'vbe',
+    'vbs',
+    'vsmacros',
+    'vsw',
+    'ws',
+    'wsc',
+    'wsf',
+    'wsh',
+    'xll',
+]);
+/**
+ * A filename ending in something that looks like a document extension followed
+ * by an executable one — `invoice.pdf.exe`. Mail clients that hide known
+ * extensions render it as `invoice.pdf`.
+ */
+const DOUBLE_EXTENSION_BAIT = /\.(pdf|docx?|xlsx?|pptx?|txt|csv|jpe?g|png|gif|zip|rtf|odt|ods)\.[a-z0-9]{1,5}$/i;
+/**
+ * Strips a filename down to something safe to print and to reason about.
+ *
+ * The name is never used to open a file — nothing here writes to disk — but it
+ * does reach the model, and a name carrying directional overrides or path
+ * separators is trying to be read as something it is not.
+ */
+export function sanitizeFilename(raw) {
+    if (raw === undefined || raw.trim() === '')
+        return '(unnamed)';
+    const cleaned = defuseAutoFetch(stripInvisible(raw.normalize('NFKC')))
+        .replace(/[/\\]/g, '_')
+        .replace(/^\.+/, '')
+        .trim();
+    if (cleaned === '')
+        return '(unnamed)';
+    return cleaned.length > MAX_FILENAME_LENGTH
+        ? `${cleaned.slice(0, MAX_FILENAME_LENGTH)}…`
+        : cleaned;
+}
+export function extensionOf(filename) {
+    const match = /\.([A-Za-z0-9]{1,10})$/.exec(filename);
+    return match?.[1]?.toLowerCase() ?? '';
+}
+/**
+ * Walks the MIME tree and returns every part that is an attachment.
+ *
+ * Parts inside a forwarded `message/rfc822` are included: an attachment that
+ * arrives one level deeper is exactly as dangerous, and a listing that stops at
+ * the outer envelope would report "no attachments" for the most common way of
+ * passing a file along.
+ */
+export function collectAttachments(structure) {
+    const found = [];
+    walk(structure, 0, found);
+    return found.slice(0, MAX_ATTACHMENTS);
+}
+function walk(node, depth, found) {
+    if (node === undefined ||
+        depth > MAX_DEPTH ||
+        found.length >= MAX_ATTACHMENTS)
+        return;
+    if (node.childNodes !== undefined && node.childNodes.length > 0) {
+        for (const child of node.childNodes)
+            walk(child, depth + 1, found);
+        return;
+    }
+    const type = (node.type ?? 'application/octet-stream').toLowerCase();
+    const disposition = node.disposition?.toLowerCase();
+    const declaredName = node.dispositionParameters?.filename ?? node.parameters?.name;
+    // A part is an attachment when it says so, or when it carries a filename, or
+    // when it is simply not one of the two body types. Inline images count: they
+    // are still bytes from a stranger.
+    const isBody = (type === 'text/plain' || type === 'text/html') &&
+        disposition !== 'attachment' &&
+        declaredName === undefined;
+    if (isBody || node.part === undefined)
+        return;
+    const filename = sanitizeFilename(declaredName);
+    const notes = [];
+    if (declaredName !== undefined && DOUBLE_EXTENSION_BAIT.test(declaredName)) {
+        notes.push('filename has a double extension — it renders as a document but is not one');
+    }
+    found.push({
+        partId: node.part,
+        filename,
+        contentType: type,
+        size: node.size,
+        disposition,
+        allowed: true,
+        notes,
+    });
+}
+/**
+ * Applies the declaration-level policy.
+ *
+ * Everything checked here comes from the sender, so a pass means only "nothing
+ * in what it claims about itself disqualifies it". The bytes are checked
+ * separately in {@link sniffContent} when they are actually fetched.
+ */
+export function checkPolicy(candidate, policy) {
+    const notes = [...candidate.notes];
+    let allowed = true;
+    const extension = extensionOf(candidate.filename);
+    if (extension !== '' && EXECUTABLE_EXTENSIONS.has(extension)) {
+        allowed = false;
+        notes.push(`refused: .${extension} is an executable file type`);
+    }
+    if (!policy.allowedTypes.includes(candidate.contentType)) {
+        allowed = false;
+        notes.push(`refused: content type ${candidate.contentType} is not in the allowlist (IMAP_ATTACHMENT_TYPES)`);
+    }
+    if (candidate.size !== undefined && candidate.size > policy.maxBytes) {
+        allowed = false;
+        notes.push(`refused: declared size ${candidate.size} exceeds IMAP_MAX_ATTACHMENT_BYTES (${policy.maxBytes})`);
+    }
+    return { ...candidate, allowed, notes };
+}
+/**
+ * Identifies content by its leading bytes.
+ *
+ * The declared content type is a claim by the sender; this is the only check
+ * that looks at what was actually sent. An executable renamed to `.txt` and
+ * declared as `text/plain` passes every other gate and fails here.
+ */
+export function sniffContent(buffer) {
+    const byte = (i) => buffer[i] ?? -1;
+    if (byte(0) === 0x4d && byte(1) === 0x5a) {
+        return { executable: true, detectedType: 'application/x-msdownload' };
+    }
+    if (byte(0) === 0x7f &&
+        byte(1) === 0x45 &&
+        byte(2) === 0x4c &&
+        byte(3) === 0x46) {
+        return { executable: true, detectedType: 'application/x-elf' };
+    }
+    // `>>> 0` is load-bearing: JS bitwise operators produce a *signed* 32-bit
+    // result, so without it 0xfeedface arrives as a negative number and none of
+    // the Mach-O comparisons below can ever match.
+    const magic32 = ((byte(0) << 24) | (byte(1) << 16) | (byte(2) << 8) | byte(3)) >>> 0;
+    if (magic32 === 0xfeedface ||
+        magic32 === 0xfeedfacf ||
+        magic32 === 0xcafebabe) {
+        return { executable: true, detectedType: 'application/x-mach-binary' };
+    }
+    if (byte(0) === 0x23 && byte(1) === 0x21) {
+        return { executable: true, detectedType: 'text/x-shellscript' };
+    }
+    const starts = (signature) => signature.every((value, index) => byte(index) === value);
+    if (starts([0x25, 0x50, 0x44, 0x46])) {
+        return { executable: false, detectedType: 'application/pdf' };
+    }
+    if (starts([0x89, 0x50, 0x4e, 0x47])) {
+        return { executable: false, detectedType: 'image/png' };
+    }
+    if (starts([0xff, 0xd8, 0xff])) {
+        return { executable: false, detectedType: 'image/jpeg' };
+    }
+    if (starts([0x47, 0x49, 0x46, 0x38])) {
+        return { executable: false, detectedType: 'image/gif' };
+    }
+    if (starts([0x52, 0x49, 0x46, 0x46]) &&
+        byte(8) === 0x57 &&
+        byte(9) === 0x45 &&
+        byte(10) === 0x42 &&
+        byte(11) === 0x50) {
+        return { executable: false, detectedType: 'image/webp' };
+    }
+    if (starts([0x50, 0x4b, 0x03, 0x04])) {
+        // Also every modern Office and OpenDocument file.
+        return { executable: false, detectedType: 'application/zip' };
+    }
+    return { executable: false, detectedType: undefined };
+}
+//# sourceMappingURL=attachments.js.map

package/dist/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../src/attachments.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE/D,+EAA+E;AAC/E,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,8DAA8D;AAC9D,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,KAAK;IACL,KAAK;IACL,KAAK;IACL,UAAU;IACV,aAAa;IACb,WAAW;IACX,KAAK;IACL,MAAM;IACN,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,QAAQ;IACR,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,IAAI;IACJ,KAAK;IACL,KAAK;IACL,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;IACL,IAAI;IACJ,KAAK;IACL,KAAK;IACL,UAAU;IACV,KAAK;IACL,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;CACN,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,qBAAqB,GACzB,kFAAkF,CAAC;AAoBrF;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAuB;IACtD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,WAAW,CAAC;IAC/D,MAAM,OAAO,GAAG,eAAe,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;SACnE,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,IAAI,EAAE,CAAC;IACV,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,WAAW,CAAC;IACvC,OAAO,OAAO,CAAC,MAAM,GAAG,mBAAmB;QACzC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,GAAG;QAC7C,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAA6C;IAE7C,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1B,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,IAAI,CACX,IAAwC,EACxC,KAAa,EACb,KAA4B;IAE5B,IACE,IAAI,KAAK,SAAS;QAClB,KAAK,GAAG,SAAS;QACjB,KAAK,CAAC,MAAM,IAAI,eAAe;QAE/B,OAAO;IAET,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,0BAA0B,CAAC,CAAC,WAAW,EAAE,CAAC;IACrE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC;IACpD,MAAM,YAAY,GAChB,IAAI,CAAC,qBAAqB,EAAE,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC;IAEhE,6EAA6E;IAC7E,6EAA6E;IAC7E,mCAAmC;IACnC,MAAM,MAAM,GACV,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,WAAW,CAAC;QAC/C,WAAW,KAAK,YAAY;QAC5B,YAAY,KAAK,SAAS,CAAC;IAC7B,IAAI,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO;IAE9C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,YAAY,KAAK,SAAS,IAAI,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3E,KAAK,CAAC,IAAI,CACR,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC;QACT,MAAM,EAAE,IAAI,CAAC,IAAI;QACjB,QAAQ;QACR,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW;QACX,OAAO,EAAE,IAAI;QACb,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,SAA8B,EAC9B,MAAwB;IAExB,MAAM,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,OAAO,GAAG,IAAI,CAAC;IAEnB,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,SAAS,KAAK,EAAE,IAAI,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7D,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,aAAa,SAAS,6BAA6B,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QACzD,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,CAAC,IAAI,CACR,yBAAyB,SAAS,CAAC,WAAW,kDAAkD,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrE,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,CAAC,IAAI,CACR,0BAA0B,SAAS,CAAC,IAAI,uCAAuC,MAAM,CAAC,QAAQ,GAAG,CAClG,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC1C,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEpD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACzC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,0BAA0B,EAAE,CAAC;IACxE,CAAC;IACD,IACE,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;QAChB,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;QAChB,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;QAChB,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAChB,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,mBAAmB,EAAE,CAAC;IACjE,CAAC;IACD,0EAA0E;IAC1E,4EAA4E;IAC5E,+CAA+C;IAC/C,MAAM,OAAO,GACX,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvE,IACE,OAAO,KAAK,UAAU;QACtB,OAAO,KAAK,UAAU;QACtB,OAAO,KAAK,UAAU,EACtB,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,2BAA2B,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACzC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,SAAmB,EAAW,EAAE,CAC9C,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC;IAE3D,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;IAC1D,CAAC;IACD,IACE,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;QAChB,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;QAChB,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI;QACjB,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EACjB,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACrC,kDAAkD;QAClD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACxD,CAAC"}

package/dist/audit.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Records every change this server makes to the mailbox.
+ *
+ * The line goes to stderr, which is the one channel the model never reads: the
+ * MCP transport owns stdout, and tool results go back to the model. So this is
+ * the only place a human can afterwards reconstruct what a hijacked session
+ * actually did — the model's own account of events is not evidence.
+ *
+ * Deliberately no subjects, senders or bodies. An audit line that quotes the
+ * mail would put attacker-chosen text into the operator's log viewer, and the
+ * facts needed to undo something are the UIDs and the folder, not the prose.
+ * The one exception is the path of a saved attachment: its filename was chosen
+ * by the sender, but it has been through sanitizeFilename — no control or
+ * invisible characters, no separators — and without it the line could not say
+ * which file to go and delete.
+ */
+export declare function audit(operation: string, details: Record<string, unknown>): void;

package/dist/audit.js

@@ -0,0 +1,33 @@
+/**
+ * Records every change this server makes to the mailbox.
+ *
+ * The line goes to stderr, which is the one channel the model never reads: the
+ * MCP transport owns stdout, and tool results go back to the model. So this is
+ * the only place a human can afterwards reconstruct what a hijacked session
+ * actually did — the model's own account of events is not evidence.
+ *
+ * Deliberately no subjects, senders or bodies. An audit line that quotes the
+ * mail would put attacker-chosen text into the operator's log viewer, and the
+ * facts needed to undo something are the UIDs and the folder, not the prose.
+ * The one exception is the path of a saved attachment: its filename was chosen
+ * by the sender, but it has been through sanitizeFilename — no control or
+ * invisible characters, no separators — and without it the line could not say
+ * which file to go and delete.
+ */
+export function audit(operation, details) {
+    const fields = Object.entries(details)
+        .filter(([, value]) => value !== undefined)
+        .map(([key, value]) => `${key}=${format(value)}`)
+        .join(' ');
+    console.error(`imap-mcp audit ${new Date().toISOString()} ${operation} ${fields}`);
+}
+/** Long UID lists are abbreviated so one bulk call cannot flood the log. */
+function format(value) {
+    if (Array.isArray(value)) {
+        return value.length > 20
+            ? `[${value.slice(0, 20).join(',')},…+${value.length - 20}]`
+            : `[${value.join(',')}]`;
+    }
+    return String(value);
+}
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,KAAK,CACnB,SAAiB,EACjB,OAAgC;IAEhC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SACnC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SAC1C,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;SAChD,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,CAAC,KAAK,CACX,kBAAkB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,SAAS,IAAI,MAAM,EAAE,CACpE,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,GAAG,EAAE;YACtB,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG;YAC5D,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,75 @@
+/** How the IMAP connection is encrypted. */
+export type TlsMode = 'implicit' | 'starttls' | 'none';
+export interface ImapConfig {
+    host: string | undefined;
+    port: number;
+    user: string | undefined;
+    password: string | undefined;
+    tls: TlsMode;
+    insecureTls: boolean;
+    /** Mailbox the message tools default to. */
+    mailbox: string;
+    /**
+     * Custom IMAP keyword marking messages already handed to the model. Empty
+     * means the feature is off and `list_new_messages` is not registered.
+     */
+    seenKeyword: string;
+    /** Overrides the folder auto-detected from the \Drafts special-use flag. */
+    draftsMailbox: string | undefined;
+    /**
+     * The authserv-id this account's own provider stamps into
+     * Authentication-Results. Only a header carrying it is treated as
+     * non-forgeable; unset, every SPF/DKIM/DMARC verdict is reported as forgeable,
+     * because a sender can write that header too and nothing in the message
+     * distinguishes theirs from the provider's.
+     */
+    trustedAuthservId: string | undefined;
+    maxMessages: number;
+    maxAttachmentBytes: number;
+    allowedAttachmentTypes: string[];
+    /**
+     * Where attachments may be written. Unset means this server never touches the
+     * filesystem — setting it is the opt-in, and it is the only source of the
+     * target directory. A caller cannot choose where bytes from a stranger land.
+     */
+    downloadDir: string | undefined;
+    maxDownloadBytes: number;
+}
+export interface Config {
+    imap: ImapConfig;
+    /**
+     * When true — the default — the mailbox write tools are not registered.
+     *
+     * Note the default, which is the opposite of every other server in this
+     * family. This variable replaced `IMAP_ALLOW_WRITE`, and that one was opt-in:
+     * setting nothing meant no write access to a mailbox. Renaming it without
+     * keeping that default would have handed write access to every installation
+     * that upgraded without reading the changelog. The name is now shared with
+     * the rest of the family; the default deliberately is not.
+     */
+    readOnly: boolean;
+    /**
+     * Raw value of `IMAP_ALLOW_TOOLS` — comma-separated tool names, `list_*`
+     * prefixes, or `essential`. Kept unparsed on purpose: this file is a mirror
+     * of the environment, and the names can only be checked against the tool
+     * catalogue, which `buildToolFilter` does.
+     */
+    allowTools: string | undefined;
+    /** Raw value of `IMAP_DENY_TOOLS`, same shape, subtracted from the above. */
+    denyTools: string | undefined;
+}
+export declare const DEFAULT_ATTACHMENT_TYPES: string[];
+/** Shown when the configuration is incomplete — at startup and on every call. */
+export declare function missingConfigMessage(missing: string[]): string;
+/** Names of the required environment variables that are unset in `config`. */
+export declare function missingConfigKeys(config: Config): string[];
+/**
+ * Reads the configuration from environment variables.
+ *
+ * Missing credentials are only a warning, not a fatal error: the server must be
+ * able to complete the MCP handshake and answer `tools/list` without them, so
+ * registries and sandbox inspectors can introspect it. Malformed values still
+ * exit — a host with a newline in it could smuggle a second command into the
+ * IMAP session, and a bad port would connect somewhere unintended.
+ */
+export declare function loadConfig(env?: NodeJS.ProcessEnv): Config;

package/dist/config.js

@@ -0,0 +1,202 @@
+export const DEFAULT_ATTACHMENT_TYPES = [
+    'application/pdf',
+    'application/json',
+    'application/xml',
+    'application/zip',
+    'application/rtf',
+    'application/vnd.oasis.opendocument.text',
+    'application/vnd.oasis.opendocument.spreadsheet',
+    'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+    'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+    'application/vnd.openxmlformats-officedocument.presentationml.presentation',
+    'image/png',
+    'image/jpeg',
+    'image/gif',
+    'image/webp',
+    'text/plain',
+    'text/csv',
+    'text/html',
+    'text/calendar',
+];
+const DEFAULT_MAX_MESSAGES = 100;
+/** Inline cap: this one protects the model's context window. */
+const DEFAULT_MAX_ATTACHMENT_BYTES = 1024 * 1024;
+/** Disk cap: this one protects the filesystem, which is a different concern. */
+const DEFAULT_MAX_DOWNLOAD_BYTES = 25 * 1024 * 1024;
+const DEFAULT_SEEN_KEYWORD = 'AiSeen';
+/** Shown when the configuration is incomplete — at startup and on every call. */
+export function missingConfigMessage(missing) {
+    return (`missing required environment variable(s): ${missing.join(', ')}\n` +
+        'Required: IMAP_HOST (e.g. imap.example.net), IMAP_USER, IMAP_PASSWORD\n' +
+        'Optional: IMAP_PORT, IMAP_TLS (implicit|starttls|none), IMAP_MAILBOX, ' +
+        'IMAP_SEEN_KEYWORD, IMAP_READ_ONLY=false to expose the mailbox write ' +
+        'tools (it defaults to true), IMAP_ALLOW_TOOLS / IMAP_DENY_TOOLS to narrow ' +
+        'the tool list, IMAP_DOWNLOAD_DIR to allow saving attachments to disk, ' +
+        'IMAP_INSECURE_TLS=true to accept self-signed certificates');
+}
+/** Names of the required environment variables that are unset in `config`. */
+export function missingConfigKeys(config) {
+    return [
+        !config.imap.host && 'IMAP_HOST',
+        !config.imap.user && 'IMAP_USER',
+        !config.imap.password && 'IMAP_PASSWORD',
+    ].filter((v) => Boolean(v));
+}
+/**
+ * Reads the configuration from environment variables.
+ *
+ * Missing credentials are only a warning, not a fatal error: the server must be
+ * able to complete the MCP handshake and answer `tools/list` without them, so
+ * registries and sandbox inspectors can introspect it. Malformed values still
+ * exit — a host with a newline in it could smuggle a second command into the
+ * IMAP session, and a bad port would connect somewhere unintended.
+ */
+export function loadConfig(env = process.env) {
+    const host = env.IMAP_HOST;
+    const user = env.IMAP_USER;
+    const password = env.IMAP_PASSWORD;
+    // Removed here, before any branch below can return or exit: the password must
+    // not stay in the environment for the process lifetime, where it is visible
+    // to child processes and in /proc/<pid>/environ.
+    delete env.IMAP_PASSWORD;
+    const tls = parseTlsMode(env.IMAP_TLS);
+    if (host !== undefined)
+        assertSafeHost(host, 'IMAP_HOST');
+    const draftsMailbox = env.IMAP_DRAFTS_MAILBOX;
+    if (draftsMailbox !== undefined) {
+        assertSingleLine(draftsMailbox, 'IMAP_DRAFTS_MAILBOX');
+    }
+    const trustedAuthservId = env.IMAP_TRUSTED_AUTHSERV_ID?.trim() || undefined;
+    if (trustedAuthservId !== undefined) {
+        assertSingleLine(trustedAuthservId, 'IMAP_TRUSTED_AUTHSERV_ID');
+    }
+    const config = {
+        imap: {
+            host,
+            port: parsePort(env.IMAP_PORT, tls === 'implicit' ? 993 : 143, 'IMAP_PORT'),
+            user,
+            password,
+            tls,
+            insecureTls: env.IMAP_INSECURE_TLS === 'true',
+            mailbox: env.IMAP_MAILBOX || 'INBOX',
+            seenKeyword: parseKeyword(env.IMAP_SEEN_KEYWORD),
+            draftsMailbox,
+            trustedAuthservId,
+            maxMessages: parseCount(env.IMAP_MAX_MESSAGES, DEFAULT_MAX_MESSAGES, 'IMAP_MAX_MESSAGES'),
+            maxAttachmentBytes: parseCount(env.IMAP_MAX_ATTACHMENT_BYTES, DEFAULT_MAX_ATTACHMENT_BYTES, 'IMAP_MAX_ATTACHMENT_BYTES'),
+            allowedAttachmentTypes: parseTypes(env.IMAP_ATTACHMENT_TYPES),
+            downloadDir: env.IMAP_DOWNLOAD_DIR,
+            maxDownloadBytes: parseCount(env.IMAP_MAX_DOWNLOAD_BYTES, DEFAULT_MAX_DOWNLOAD_BYTES, 'IMAP_MAX_DOWNLOAD_BYTES'),
+        },
+        // Defaults to true, unlike the rest of the family — see the field comment.
+        readOnly: env.IMAP_READ_ONLY !== 'false',
+        allowTools: env.IMAP_ALLOW_TOOLS,
+        denyTools: env.IMAP_DENY_TOOLS,
+    };
+    // Silently ignoring a removed security variable is the worst of the options:
+    // whoever set it once believes it is still in force. IMAP_ALLOW_WRITE=true
+    // used to be the only way to reach the write tools, so an installation that
+    // still sets it is one that wants them — and would otherwise get a read-only
+    // server without being told why.
+    if (env.IMAP_ALLOW_WRITE !== undefined) {
+        console.error('imap-mcp: IMAP_ALLOW_WRITE has been replaced by IMAP_READ_ONLY. Set ' +
+            'IMAP_READ_ONLY=false for the write tools, or unset IMAP_ALLOW_WRITE ' +
+            'to keep the read-only default.');
+        process.exit(1);
+    }
+    const missing = missingConfigKeys(config);
+    if (missing.length > 0) {
+        console.error(`imap-mcp: ${missingConfigMessage(missing)}`);
+    }
+    if (config.imap.tls === 'none' && !isLoopbackHost(host)) {
+        console.error('imap-mcp: WARNING: IMAP_TLS=none against a non-local host — the password ' +
+            'and every message will cross the network unencrypted.');
+    }
+    return config;
+}
+function parseTlsMode(raw) {
+    if (raw === undefined || raw === '')
+        return 'implicit';
+    if (raw === 'implicit' || raw === 'starttls' || raw === 'none')
+        return raw;
+    console.error('imap-mcp: IMAP_TLS must be one of implicit, starttls or none');
+    process.exit(1);
+}
+function parsePort(raw, fallback, name) {
+    if (raw === undefined || raw === '')
+        return fallback;
+    const value = Number(raw);
+    if (!Number.isInteger(value) || value < 1 || value > 65535) {
+        // The value itself is not echoed: config errors end up in logs.
+        console.error(`imap-mcp: ${name} must be an integer between 1 and 65535`);
+        process.exit(1);
+    }
+    return value;
+}
+function parseCount(raw, fallback, name) {
+    if (raw === undefined || raw === '')
+        return fallback;
+    const value = Number(raw);
+    if (!Number.isInteger(value) || value < 1) {
+        console.error(`imap-mcp: ${name} must be a positive integer`);
+        process.exit(1);
+    }
+    return value;
+}
+/**
+ * An IMAP keyword is an atom: no spaces and none of the characters that would
+ * end it early or open a literal. Empty turns the new-mail tracking off.
+ */
+function parseKeyword(raw) {
+    if (raw === undefined)
+        return DEFAULT_SEEN_KEYWORD;
+    if (raw === '')
+        return '';
+    if (!/^[A-Za-z0-9$_.-]+$/.test(raw)) {
+        console.error('imap-mcp: IMAP_SEEN_KEYWORD must consist of letters, digits, $, _, . or -');
+        process.exit(1);
+    }
+    return raw;
+}
+function parseTypes(raw) {
+    if (raw === undefined || raw.trim() === '')
+        return DEFAULT_ATTACHMENT_TYPES;
+    return raw
+        .split(',')
+        .map((t) => t.trim().toLowerCase())
+        .filter((t) => t !== '');
+}
+/**
+ * Rejects anything that could break out of the line it is written on. IMAP is a
+ * line protocol; a CR or LF in a hostname is a command-smuggling primitive, not
+ * a typo.
+ */
+function assertSafeHost(value, name) {
+    // A hostname or IPv4 address — or an IPv6 address, which is the only place
+    // a colon is legal. Allowing ":" everywhere would silently accept
+    // "imap.example.net:993", which the error message promises to reject.
+    const hostname = /^[A-Za-z0-9._-]+$/.test(value);
+    const ipv6 = /^\[?[0-9A-Fa-f:.]*:[0-9A-Fa-f:.]*\]?$/.test(value);
+    if (!hostname && !ipv6) {
+        console.error(`imap-mcp: ${name} must be a plain hostname or IP address without ` +
+            'scheme, port, credentials or whitespace');
+        process.exit(1);
+    }
+}
+/** Spaces are fine in a mailbox name; a line break would end the command. */
+function assertSingleLine(value, name) {
+    if (/[\r\n]/.test(value)) {
+        console.error(`imap-mcp: ${name} must not contain line breaks`);
+        process.exit(1);
+    }
+}
+function isLoopbackHost(hostname) {
+    if (hostname === undefined)
+        return false;
+    return (hostname === 'localhost' ||
+        hostname.endsWith('.localhost') ||
+        hostname.startsWith('127.') ||
+        hostname === '::1' ||
+        hostname === '[::1]');
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AA+DA,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,iBAAiB;IACjB,kBAAkB;IAClB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,yCAAyC;IACzC,gDAAgD;IAChD,yEAAyE;IACzE,mEAAmE;IACnE,2EAA2E;IAC3E,WAAW;IACX,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,WAAW;IACX,eAAe;CAChB,CAAC;AAEF,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,gEAAgE;AAChE,MAAM,4BAA4B,GAAG,IAAI,GAAG,IAAI,CAAC;AACjD,gFAAgF;AAChF,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACpD,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AAEtC,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,OAAiB;IACpD,OAAO,CACL,6CAA6C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACnE,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,4EAA4E;QAC5E,wEAAwE;QACxE,2DAA2D,CAC5D,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO;QACL,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,WAAW;QAChC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,WAAW;QAChC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,eAAe;KACzC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC;IAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC;IAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC;IAEnC,8EAA8E;IAC9E,4EAA4E;IAC5E,iDAAiD;IACjD,OAAO,GAAG,CAAC,aAAa,CAAC;IAEzB,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,IAAI,KAAK,SAAS;QAAE,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,GAAG,CAAC,mBAAmB,CAAC;IAC9C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,gBAAgB,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,iBAAiB,GAAG,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC5E,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,gBAAgB,CAAC,iBAAiB,EAAE,0BAA0B,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,MAAM,GAAW;QACrB,IAAI,EAAE;YACJ,IAAI;YACJ,IAAI,EAAE,SAAS,CACb,GAAG,CAAC,SAAS,EACb,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAC9B,WAAW,CACZ;YACD,IAAI;YACJ,QAAQ;YACR,GAAG;YACH,WAAW,EAAE,GAAG,CAAC,iBAAiB,KAAK,MAAM;YAC7C,OAAO,EAAE,GAAG,CAAC,YAAY,IAAI,OAAO;YACpC,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAChD,aAAa;YACb,iBAAiB;YACjB,WAAW,EAAE,UAAU,CACrB,GAAG,CAAC,iBAAiB,EACrB,oBAAoB,EACpB,mBAAmB,CACpB;YACD,kBAAkB,EAAE,UAAU,CAC5B,GAAG,CAAC,yBAAyB,EAC7B,4BAA4B,EAC5B,2BAA2B,CAC5B;YACD,sBAAsB,EAAE,UAAU,CAAC,GAAG,CAAC,qBAAqB,CAAC;YAC7D,WAAW,EAAE,GAAG,CAAC,iBAAiB;YAClC,gBAAgB,EAAE,UAAU,CAC1B,GAAG,CAAC,uBAAuB,EAC3B,0BAA0B,EAC1B,yBAAyB,CAC1B;SACF;QACD,2EAA2E;QAC3E,QAAQ,EAAE,GAAG,CAAC,cAAc,KAAK,OAAO;QACxC,UAAU,EAAE,GAAG,CAAC,gBAAgB;QAChC,SAAS,EAAE,GAAG,CAAC,eAAe;KAC/B,CAAC;IAEF,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,iCAAiC;IACjC,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,CAAC,KAAK,CACX,sEAAsE;YACpE,sEAAsE;YACtE,gCAAgC,CACnC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,aAAa,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,KAAK,CACX,2EAA2E;YACzE,uDAAuD,CAC1D,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,GAAuB;IAC3C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,UAAU,CAAC;IACvD,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,GAAG,CAAC;IAC3E,OAAO,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAChB,GAAuB,EACvB,QAAgB,EAChB,IAAY;IAEZ,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;QAC3D,gEAAgE;QAChE,OAAO,CAAC,KAAK,CAAC,aAAa,IAAI,yCAAyC,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CACjB,GAAuB,EACvB,QAAgB,EAChB,IAAY;IAEZ,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,aAAa,IAAI,6BAA6B,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAuB;IAC3C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,oBAAoB,CAAC;IACnD,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,KAAK,CACX,2EAA2E,CAC5E,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,GAAuB;IACzC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,wBAAwB,CAAC;IAC5E,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAa,EAAE,IAAY;IACjD,2EAA2E;IAC3E,kEAAkE;IAClE,sEAAsE;IACtE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,uCAAuC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjE,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CACX,aAAa,IAAI,kDAAkD;YACjE,yCAAyC,CAC5C,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAY;IACnD,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,aAAa,IAAI,+BAA+B,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAA4B;IAClD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,CACL,QAAQ,KAAK,WAAW;QACxB,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC/B,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAC3B,QAAQ,KAAK,KAAK;QAClB,QAAQ,KAAK,OAAO,CACrB,CAAC;AACJ,CAAC"}