@oratis/lisa 0.12.0 → 0.14.0

package/dist/mail/connectors/imap.js

@@ -0,0 +1,136 @@
+/**
+ * IMAP connector (imapflow) — app-password / authorization-code auth.
+ *
+ * Fetches ENVELOPE + flags + a BOUNDED text snippet only (≤ ~4 KB downloaded,
+ * truncated further), never whole bodies — the privacy contract. Read-only:
+ * opens the mailbox read-only and never sets flags / moves / deletes.
+ */
+import { ImapFlow } from "imapflow";
+const SNIPPET_FETCH_BYTES = 4096;
+const SNIPPET_CHARS = 400;
+/** First text/plain (preferred) else text/html leaf part id, or null. Pure-ish. */
+function findTextPart(node) {
+    if (!node)
+        return null;
+    const stack = [node];
+    let htmlFallback = null;
+    while (stack.length) {
+        const n = stack.shift();
+        const type = (n.type ?? "").toLowerCase();
+        if (n.part && type === "text/plain")
+            return { part: n.part, html: false };
+        if (n.part && type === "text/html" && !htmlFallback)
+            htmlFallback = { part: n.part, html: true };
+        if (n.childNodes)
+            stack.push(...n.childNodes);
+    }
+    return htmlFallback;
+}
+function stripHtml(s) {
+    return s
+        .replace(/<style[\s\S]*?<\/style>/gi, " ")
+        .replace(/<script[\s\S]*?<\/script>/gi, " ")
+        .replace(/<[^>]+>/g, " ")
+        .replace(/&nbsp;/gi, " ")
+        .replace(/&amp;/gi, "&")
+        .replace(/&lt;/gi, "<")
+        .replace(/&gt;/gi, ">");
+}
+async function streamToString(stream, maxBytes) {
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of stream) {
+        const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        chunks.push(buf);
+        total += buf.length;
+        if (total >= maxBytes)
+            break;
+    }
+    return Buffer.concat(chunks).toString("utf8");
+}
+export class ImapConnector {
+    client;
+    connected = false;
+    constructor(account, secret) {
+        if (!account.host)
+            throw new Error(`imap account ${account.id} has no host`);
+        if (!secret.password)
+            throw new Error(`imap account ${account.id} has no password`);
+        const port = account.port ?? 993;
+        this.client = new ImapFlow({
+            host: account.host,
+            port,
+            secure: port === 993,
+            auth: { user: account.email, pass: secret.password },
+            logger: false,
+        });
+    }
+    async listSince(opts) {
+        if (!this.connected) {
+            await this.client.connect();
+            this.connected = true;
+        }
+        const lock = await this.client.getMailboxLock("INBOX", { readOnly: true });
+        const out = [];
+        try {
+            const found = await this.client.search({ since: new Date(opts.sinceMs) }, { uid: true });
+            const uids = (Array.isArray(found) ? found : []).slice(-opts.limit);
+            if (uids.length === 0)
+                return [];
+            for await (const msg of this.client.fetch(uids, { uid: true, envelope: true, flags: true, bodyStructure: true }, { uid: true })) {
+                out.push(await this.toRaw(msg, opts));
+            }
+        }
+        finally {
+            lock.release();
+        }
+        out.sort((a, b) => b.date - a.date);
+        return out;
+    }
+    async toRaw(msg, _opts) {
+        const env = msg.envelope ?? {};
+        const f = env.from?.[0] ?? {};
+        const address = f.address ?? "";
+        const from = f.name ? `${f.name} <${address}>` : address;
+        let snippet = "";
+        const part = findTextPart(msg.bodyStructure);
+        if (part) {
+            try {
+                const dl = await this.client.download(String(msg.uid), part.part, {
+                    uid: true,
+                    maxBytes: SNIPPET_FETCH_BYTES,
+                });
+                let text = await streamToString(dl.content, SNIPPET_FETCH_BYTES);
+                if (part.html)
+                    text = stripHtml(text);
+                snippet = text.replace(/\s+/g, " ").trim().slice(0, SNIPPET_CHARS);
+            }
+            catch {
+                snippet = "";
+            }
+        }
+        return {
+            uid: String(msg.uid),
+            accountId: "", // filled by the caller (service) — connector is account-agnostic
+            from,
+            fromAddress: address,
+            subject: env.subject ?? "",
+            date: env.date ? new Date(env.date).getTime() : Date.now(),
+            snippet,
+            flags: msg.flags ? [...msg.flags] : [],
+            mailbox: "INBOX",
+        };
+    }
+    async close() {
+        if (!this.connected)
+            return;
+        try {
+            await this.client.logout();
+        }
+        catch {
+            /* already closed */
+        }
+        this.connected = false;
+    }
+}
+//# sourceMappingURL=imap.js.map

package/dist/mail/connectors/imap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imap.js","sourceRoot":"","sources":["../../../src/mail/connectors/imap.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGpC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,aAAa,GAAG,GAAG,CAAC;AAQ1B,mFAAmF;AACnF,SAAS,YAAY,CAAC,IAA0B;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,KAAK,GAAe,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,YAAY,GAA2C,IAAI,CAAC;IAChE,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,YAAY;YAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC1E,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,YAAY;YAAE,YAAY,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACjG,IAAI,CAAC,CAAC,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC;SACL,OAAO,CAAC,2BAA2B,EAAE,GAAG,CAAC;SACzC,OAAO,CAAC,6BAA6B,EAAE,GAAG,CAAC;SAC3C,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAA6B,EAAE,QAAgB;IAC3E,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;QAC1E,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,KAAK,IAAI,GAAG,CAAC,MAAM,CAAC;QACpB,IAAI,KAAK,IAAI,QAAQ;YAAE,MAAM;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,OAAO,aAAa;IAChB,MAAM,CAAW;IACjB,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,OAAoB,EAAE,MAAkB;QAClD,IAAI,CAAC,OAAO,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,OAAO,CAAC,EAAE,cAAc,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,OAAO,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,IAAI,QAAQ,CAAC;YACzB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI;YACJ,MAAM,EAAE,IAAI,KAAK,GAAG;YACpB,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;YACpD,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAwC;QACtD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAW,CAAC,CAAC;QACpF,MAAM,GAAG,GAAc,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YACzF,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YACjC,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CACvC,IAAI,EACJ,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAC/D,EAAE,GAAG,EAAE,IAAI,EAAE,CACd,EAAE,CAAC;gBACF,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,GAKC,EACD,KAAyC;QAEzC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;QACzD,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC7C,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE;oBAChE,GAAG,EAAE,IAAI;oBACT,QAAQ,EAAE,mBAAmB;iBACrB,CAAC,CAAC;gBACZ,IAAI,IAAI,GAAG,MAAM,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;gBACjE,IAAI,IAAI,CAAC,IAAI;oBAAE,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBACtC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;YACrE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,EAAE,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YACpB,SAAS,EAAE,EAAE,EAAE,iEAAiE;YAChF,IAAI;YACJ,WAAW,EAAE,OAAO;YACpB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;YAC1B,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;YAC1D,OAAO;YACP,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;YACtC,OAAO,EAAE,OAAO;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;CACF"}

package/dist/mail/digest.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Daily digest builder — pure. Turns classified MailItems into a DailyDigest:
+ * counts, per-category buckets, the "needs you" list, and a templated summary.
+ * (The service may replace `summary` with a model-written narrative.)
+ */
+import { type DailyDigest, type DigestBucket, type MailCategory, type MailItem } from "./types.js";
+export interface BuildDigestOpts {
+    date: string;
+    accountIds: string[];
+    /** Count of unread among the swept set; defaults to total. */
+    unread?: number;
+    now?: () => number;
+}
+export declare function buildDigest(items: MailItem[], opts: BuildDigestOpts): DailyDigest;
+/** Deterministic one-paragraph summary. Pure. */
+export declare function templateSummary(total: number, needsYou: MailItem[], buckets: DigestBucket[]): string;
+/** Format a digest as a compact plain-text message (push body / chat / CLI). Pure. */
+export declare function formatDigestText(d: DailyDigest): string;
+/** A category is "actionable" if items in it usually want the user. */
+export declare function isActionableCategory(c: MailCategory): boolean;
+//# sourceMappingURL=digest.d.ts.map

package/dist/mail/digest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.d.ts","sourceRoot":"","sources":["../../src/mail/digest.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,QAAQ,EACd,MAAM,YAAY,CAAC;AAWpB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,WAAW,CA+BjF;AAED,iDAAiD;AACjD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CAmBpG;AAOD,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CASvD;AAED,uEAAuE;AACvE,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,YAAY,GAAG,OAAO,CAE7D"}

package/dist/mail/digest.js

@@ -0,0 +1,89 @@
+/**
+ * Daily digest builder — pure. Turns classified MailItems into a DailyDigest:
+ * counts, per-category buckets, the "needs you" list, and a templated summary.
+ * (The service may replace `summary` with a model-written narrative.)
+ */
+import { MAIL_CATEGORIES, } from "./types.js";
+const BUCKET_SAMPLE = 3;
+const NEEDS_YOU_CAP = 12;
+/** importance desc, then newest first. */
+function byImportanceThenDate(a, b) {
+    if (b.importance !== a.importance)
+        return b.importance - a.importance;
+    return b.date - a.date;
+}
+export function buildDigest(items, opts) {
+    const now = opts.now ?? Date.now;
+    const sorted = [...items].sort(byImportanceThenDate);
+    const needsYou = sorted.filter((i) => i.importance >= 2).slice(0, NEEDS_YOU_CAP);
+    const buckets = [];
+    for (const category of MAIL_CATEGORIES) {
+        const inCat = sorted.filter((i) => i.category === category);
+        if (inCat.length === 0)
+            continue;
+        buckets.push({ category, count: inCat.length, items: inCat.slice(0, BUCKET_SAMPLE) });
+    }
+    // Most-populous buckets first, but always surface action-y categories near the top.
+    const priority = { urgent: 0, security: 1, personal: 2, finance: 3, calendar: 4, work: 5 };
+    buckets.sort((a, b) => {
+        const pa = priority[a.category] ?? 9;
+        const pb = priority[b.category] ?? 9;
+        if (pa !== pb)
+            return pa - pb;
+        return b.count - a.count;
+    });
+    return {
+        date: opts.date,
+        generatedAt: now(),
+        accountIds: [...opts.accountIds],
+        total: items.length,
+        unread: opts.unread ?? items.length,
+        needsYou,
+        buckets,
+        summary: templateSummary(items.length, needsYou, buckets),
+    };
+}
+/** Deterministic one-paragraph summary. Pure. */
+export function templateSummary(total, needsYou, buckets) {
+    if (total === 0)
+        return "No new mail.";
+    const parts = [`${total} new email${total === 1 ? "" : "s"}.`];
+    if (needsYou.length > 0) {
+        const top = needsYou
+            .slice(0, 3)
+            .map((i) => `“${i.subject.slice(0, 48)}” (${shortFrom(i.from)})`)
+            .join("; ");
+        parts.push(`${needsYou.length} need${needsYou.length === 1 ? "s" : ""} you: ${top}.`);
+    }
+    else {
+        parts.push("Nothing needs your attention.");
+    }
+    const breakdown = buckets
+        .filter((b) => !["urgent", "personal"].includes(b.category) || b.count > 0)
+        .slice(0, 6)
+        .map((b) => `${b.category} ${b.count}`)
+        .join(" · ");
+    if (breakdown)
+        parts.push(`Breakdown: ${breakdown}.`);
+    return parts.join(" ");
+}
+function shortFrom(from) {
+    const m = from.match(/^\s*"?([^"<]+?)"?\s*</);
+    return (m?.[1] ?? from).trim().slice(0, 32);
+}
+/** Format a digest as a compact plain-text message (push body / chat / CLI). Pure. */
+export function formatDigestText(d) {
+    const lines = [`📬 Mail digest · ${d.date}`, d.summary];
+    if (d.needsYou.length) {
+        lines.push("", "Needs you:");
+        for (const i of d.needsYou.slice(0, 5)) {
+            lines.push(`  • [${i.importance === 3 ? "‼" : "!"}] ${i.subject.slice(0, 60)} — ${shortFrom(i.from)}`);
+        }
+    }
+    return lines.join("\n");
+}
+/** A category is "actionable" if items in it usually want the user. */
+export function isActionableCategory(c) {
+    return c === "urgent" || c === "personal" || c === "calendar" || c === "finance" || c === "work";
+}
+//# sourceMappingURL=digest.js.map

package/dist/mail/digest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.js","sourceRoot":"","sources":["../../src/mail/digest.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,eAAe,GAKhB,MAAM,YAAY,CAAC;AAEpB,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,0CAA0C;AAC1C,SAAS,oBAAoB,CAAC,CAAW,EAAE,CAAW;IACpD,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;QAAE,OAAO,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC;IACtE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;AACzB,CAAC;AAUD,MAAM,UAAU,WAAW,CAAC,KAAiB,EAAE,IAAqB;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAEjF,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,oFAAoF;IACpF,MAAM,QAAQ,GAA2B,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACnH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAC9B,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,GAAG,EAAE;QAClB,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QAChC,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM;QACnC,QAAQ;QACR,OAAO;QACP,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,QAAoB,EAAE,OAAuB;IAC1F,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC;IACvC,MAAM,KAAK,GAAa,CAAC,GAAG,KAAK,aAAa,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,QAAQ;aACjB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;aAChE,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,QAAQ,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,CAAC;IACxF,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,SAAS,GAAG,OAAO;SACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;SAC1E,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;SACtC,IAAI,CAAC,KAAK,CAAC,CAAC;IACf,IAAI,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,SAAS,GAAG,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,gBAAgB,CAAC,CAAc;IAC7C,MAAM,KAAK,GAAa,CAAC,oBAAoB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,CAAe;IAClD,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,MAAM,CAAC;AACnG,CAAC"}

package/dist/mail/google-oauth.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Google OAuth2 for Gmail (read-only) — no SDK, just fetch + the documented
+ * token endpoints. Used by the loopback "installed app" flow (CLI) and by the
+ * Gmail connector's token refresh.
+ *
+ * Setup the user does once: create an OAuth client (type "Desktop app") in a
+ * Google Cloud project, enable the Gmail API, and provide the client id/secret
+ * (LISA_GOOGLE_CLIENT_ID / _SECRET, or --client-id/--client-secret). Tokens are
+ * stored per-account in the 0600 secrets file; only the gmail.readonly scope is
+ * requested.
+ */
+export declare const GMAIL_SCOPE = "https://www.googleapis.com/auth/gmail.readonly";
+export interface GoogleTokens {
+    accessToken: string;
+    /** Present on the initial exchange (access_type=offline); absent on refresh. */
+    refreshToken?: string;
+    /** Absolute expiry, epoch ms. */
+    expiry: number;
+}
+export type FetchLike = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body: string;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    text(): Promise<string>;
+}>;
+/** Build the consent URL. Pure. */
+export declare function buildAuthUrl(o: {
+    clientId: string;
+    redirectUri: string;
+    state: string;
+}): string;
+/** True if the access token is expired (60s skew). Pure. */
+export declare function tokenExpired(expiry: number, now: number): boolean;
+/** Exchange an auth code for tokens. */
+export declare function exchangeCode(o: {
+    code: string;
+    clientId: string;
+    clientSecret: string;
+    redirectUri: string;
+}, fetchImpl?: FetchLike, now?: number): Promise<GoogleTokens>;
+/** Refresh an access token (refresh_token is reused, not returned). */
+export declare function refreshAccessToken(o: {
+    refreshToken: string;
+    clientId: string;
+    clientSecret: string;
+}, fetchImpl?: FetchLike, now?: number): Promise<GoogleTokens>;
+//# sourceMappingURL=google-oauth.d.ts.map

package/dist/mail/google-oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-oauth.d.ts","sourceRoot":"","sources":["../../src/mail/google-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,WAAW,mDAAmD,CAAC;AAI5E,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,SAAS,GAAG,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,KACpE,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;CAAE,CAAC,CAAC;AAEvE,mCAAmC;AACnC,wBAAgB,YAAY,CAAC,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAWhG;AAED,4DAA4D;AAC5D,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAEjE;AAwBD,wCAAwC;AACxC,wBAAsB,YAAY,CAChC,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EAChF,SAAS,GAAE,SAAyC,EACpD,GAAG,GAAE,MAAmB,GACvB,OAAO,CAAC,YAAY,CAAC,CAYvB;AAED,uEAAuE;AACvE,wBAAsB,kBAAkB,CACtC,CAAC,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EACnE,SAAS,GAAE,SAAyC,EACpD,GAAG,GAAE,MAAmB,GACvB,OAAO,CAAC,YAAY,CAAC,CAYvB"}

package/dist/mail/google-oauth.js

@@ -0,0 +1,74 @@
+/**
+ * Google OAuth2 for Gmail (read-only) — no SDK, just fetch + the documented
+ * token endpoints. Used by the loopback "installed app" flow (CLI) and by the
+ * Gmail connector's token refresh.
+ *
+ * Setup the user does once: create an OAuth client (type "Desktop app") in a
+ * Google Cloud project, enable the Gmail API, and provide the client id/secret
+ * (LISA_GOOGLE_CLIENT_ID / _SECRET, or --client-id/--client-secret). Tokens are
+ * stored per-account in the 0600 secrets file; only the gmail.readonly scope is
+ * requested.
+ */
+export const GMAIL_SCOPE = "https://www.googleapis.com/auth/gmail.readonly";
+const AUTH_BASE = "https://accounts.google.com/o/oauth2/v2/auth";
+const TOKEN_URL = "https://oauth2.googleapis.com/token";
+/** Build the consent URL. Pure. */
+export function buildAuthUrl(o) {
+    const q = new URLSearchParams({
+        client_id: o.clientId,
+        redirect_uri: o.redirectUri,
+        response_type: "code",
+        scope: GMAIL_SCOPE,
+        access_type: "offline",
+        prompt: "consent", // force a refresh_token even on re-auth
+        state: o.state,
+    });
+    return `${AUTH_BASE}?${q.toString()}`;
+}
+/** True if the access token is expired (60s skew). Pure. */
+export function tokenExpired(expiry, now) {
+    return now >= expiry - 60_000;
+}
+function parseTokens(json, now) {
+    const accessToken = String(json.access_token ?? "");
+    if (!accessToken)
+        throw new Error("no access_token in token response");
+    const ttl = typeof json.expires_in === "number" ? json.expires_in : 3600;
+    return {
+        accessToken,
+        refreshToken: typeof json.refresh_token === "string" ? json.refresh_token : undefined,
+        expiry: now + ttl * 1000,
+    };
+}
+async function postToken(body, fetchImpl, now) {
+    const res = await fetchImpl(TOKEN_URL, {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded" },
+        body: body.toString(),
+    });
+    const text = await res.text();
+    if (!res.ok)
+        throw new Error(`google token endpoint ${res.status}: ${text.slice(0, 200)}`);
+    return parseTokens(JSON.parse(text), now);
+}
+/** Exchange an auth code for tokens. */
+export async function exchangeCode(o, fetchImpl = fetch, now = Date.now()) {
+    return postToken(new URLSearchParams({
+        code: o.code,
+        client_id: o.clientId,
+        client_secret: o.clientSecret,
+        redirect_uri: o.redirectUri,
+        grant_type: "authorization_code",
+    }), fetchImpl, now);
+}
+/** Refresh an access token (refresh_token is reused, not returned). */
+export async function refreshAccessToken(o, fetchImpl = fetch, now = Date.now()) {
+    const t = await postToken(new URLSearchParams({
+        refresh_token: o.refreshToken,
+        client_id: o.clientId,
+        client_secret: o.clientSecret,
+        grant_type: "refresh_token",
+    }), fetchImpl, now);
+    return { ...t, refreshToken: t.refreshToken ?? o.refreshToken };
+}
+//# sourceMappingURL=google-oauth.js.map

package/dist/mail/google-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-oauth.js","sourceRoot":"","sources":["../../src/mail/google-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,gDAAgD,CAAC;AAC5E,MAAM,SAAS,GAAG,8CAA8C,CAAC;AACjE,MAAM,SAAS,GAAG,qCAAqC,CAAC;AAexD,mCAAmC;AACnC,MAAM,UAAU,YAAY,CAAC,CAA2D;IACtF,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC;QAC5B,SAAS,EAAE,CAAC,CAAC,QAAQ;QACrB,YAAY,EAAE,CAAC,CAAC,WAAW;QAC3B,aAAa,EAAE,MAAM;QACrB,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,SAAS,EAAE,wCAAwC;QAC3D,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC,CAAC;IACH,OAAO,GAAG,SAAS,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;AACxC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,GAAW;IACtD,OAAO,GAAG,IAAI,MAAM,GAAG,MAAM,CAAC;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B,EAAE,GAAW;IAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,OAAO;QACL,WAAW;QACX,YAAY,EAAE,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QACrF,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,IAAI;KACzB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAqB,EAAE,SAAoB,EAAE,GAAW;IAC/E,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3F,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,EAAE,GAAG,CAAC,CAAC;AACvE,CAAC;AAED,wCAAwC;AACxC,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,CAAgF,EAChF,YAAuB,KAA6B,EACpD,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,OAAO,SAAS,CACd,IAAI,eAAe,CAAC;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,SAAS,EAAE,CAAC,CAAC,QAAQ;QACrB,aAAa,EAAE,CAAC,CAAC,YAAY;QAC7B,YAAY,EAAE,CAAC,CAAC,WAAW;QAC3B,UAAU,EAAE,oBAAoB;KACjC,CAAC,EACF,SAAS,EACT,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,CAAmE,EACnE,YAAuB,KAA6B,EACpD,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,CAAC,GAAG,MAAM,SAAS,CACvB,IAAI,eAAe,CAAC;QAClB,aAAa,EAAE,CAAC,CAAC,YAAY;QAC7B,SAAS,EAAE,CAAC,CAAC,QAAQ;QACrB,aAAa,EAAE,CAAC,CAAC,YAAY;QAC7B,UAAU,EAAE,eAAe;KAC5B,CAAC,EACF,SAAS,EACT,GAAG,CACJ,CAAC;IACF,OAAO,EAAE,GAAG,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;AAClE,CAAC"}

package/dist/mail/hosts.d.ts

@@ -0,0 +1,3 @@
+/** Infer the IMAP host from an email domain (common providers). Pure. */
+export declare function inferHost(email: string): string | undefined;
+//# sourceMappingURL=hosts.d.ts.map

package/dist/mail/hosts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosts.d.ts","sourceRoot":"","sources":["../../src/mail/hosts.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAgB3D"}

package/dist/mail/hosts.js

@@ -0,0 +1,19 @@
+/** Infer the IMAP host from an email domain (common providers). Pure. */
+export function inferHost(email) {
+    const domain = (email.split("@")[1] ?? "").toLowerCase();
+    const map = {
+        "qq.com": "imap.qq.com",
+        "163.com": "imap.163.com",
+        "126.com": "imap.126.com",
+        "gmail.com": "imap.gmail.com",
+        "googlemail.com": "imap.gmail.com",
+        "outlook.com": "outlook.office365.com",
+        "hotmail.com": "outlook.office365.com",
+        "live.com": "outlook.office365.com",
+        "icloud.com": "imap.mail.me.com",
+        "me.com": "imap.mail.me.com",
+        "yahoo.com": "imap.mail.yahoo.com",
+    };
+    return map[domain] ?? (domain ? `imap.${domain}` : undefined);
+}
+//# sourceMappingURL=hosts.js.map

package/dist/mail/hosts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosts.js","sourceRoot":"","sources":["../../src/mail/hosts.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,MAAM,GAAG,GAA2B;QAClC,QAAQ,EAAE,aAAa;QACvB,SAAS,EAAE,cAAc;QACzB,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,gBAAgB;QAC7B,gBAAgB,EAAE,gBAAgB;QAClC,aAAa,EAAE,uBAAuB;QACtC,aAAa,EAAE,uBAAuB;QACtC,UAAU,EAAE,uBAAuB;QACnC,YAAY,EAAE,kBAAkB;QAChC,QAAQ,EAAE,kBAAkB;QAC5B,WAAW,EAAE,qBAAqB;KACnC,CAAC;IACF,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAChE,CAAC"}

package/dist/mail/scheduler.d.ts

@@ -0,0 +1,9 @@
+export declare const DEFAULT_DIGEST_HOUR = 8;
+/** Target local hour (0-23) for the daily digest; LISA_MAIL_DIGEST_HOUR overrides. */
+export declare function digestHour(env?: NodeJS.ProcessEnv): number;
+/**
+ * Is a daily digest due? True when we haven't produced one for the local day yet
+ * AND it's at/after the target hour. Pure.
+ */
+export declare function isDigestDue(lastDigestDate: string | null, now: Date, targetHour: number): boolean;
+//# sourceMappingURL=scheduler.d.ts.map

package/dist/mail/scheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.d.ts","sourceRoot":"","sources":["../../src/mail/scheduler.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,sFAAsF;AACtF,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAGvE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAGjG"}

package/dist/mail/scheduler.js

@@ -0,0 +1,21 @@
+/**
+ * Daily-digest scheduling — pure decision logic. The server polls this on a
+ * timer; the actual sweep + push happens in server.ts.
+ */
+import { localDate } from "./service.js";
+export const DEFAULT_DIGEST_HOUR = 8;
+/** Target local hour (0-23) for the daily digest; LISA_MAIL_DIGEST_HOUR overrides. */
+export function digestHour(env = process.env) {
+    const h = Number(env.LISA_MAIL_DIGEST_HOUR);
+    return Number.isInteger(h) && h >= 0 && h <= 23 ? h : DEFAULT_DIGEST_HOUR;
+}
+/**
+ * Is a daily digest due? True when we haven't produced one for the local day yet
+ * AND it's at/after the target hour. Pure.
+ */
+export function isDigestDue(lastDigestDate, now, targetHour) {
+    if (lastDigestDate === localDate(now.getTime()))
+        return false;
+    return now.getHours() >= targetHour;
+}
+//# sourceMappingURL=scheduler.js.map

package/dist/mail/scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../src/mail/scheduler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,sFAAsF;AACtF,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,cAA6B,EAAE,GAAS,EAAE,UAAkB;IACtF,IAAI,cAAc,KAAK,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9D,OAAO,GAAG,CAAC,QAAQ,EAAE,IAAI,UAAU,CAAC;AACtC,CAAC"}

package/dist/mail/service.d.ts

@@ -0,0 +1,32 @@
+import type { Provider } from "../providers/types.js";
+import type { DailyDigest, MailAccount, MailConnector, MailItem, MailSecret } from "./types.js";
+export type ConnectorFactory = (account: MailAccount, secret: MailSecret) => MailConnector;
+/** Local YYYY-MM-DD for a timestamp. */
+export declare function localDate(ms: number): string;
+export interface SweepOpts {
+    /** Window start; default 24h before now. */
+    sinceMs?: number;
+    /** Per-account cap; default 200. */
+    limit?: number;
+    connectorFactory?: ConnectorFactory;
+    provider?: Provider;
+    model?: string;
+    now?: () => number;
+    signal?: AbortSignal;
+}
+export interface SweepResult {
+    items: MailItem[];
+    digest: DailyDigest;
+    /** Items not previously seen (for alerts). */
+    newItems: MailItem[];
+    /** True when the consent gate blocked the sweep. */
+    blocked?: boolean;
+}
+export declare function sweepAll(opts?: SweepOpts): Promise<SweepResult>;
+/**
+ * Lightweight intraday poll: fetch, classify ONLY the unseen messages, mark seen.
+ * Returns just the freshly-classified items (for important-mail alerts). Does NOT
+ * rebuild/save the digest — that stays a daily artifact (or a manual sweep).
+ */
+export declare function pollNewMail(opts?: SweepOpts): Promise<MailItem[]>;
+//# sourceMappingURL=service.d.ts.map

package/dist/mail/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/mail/service.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEhG,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,KAAK,aAAa,CAAC;AAW3F,wCAAwC;AACxC,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAG5C;AAED,MAAM,WAAW,SAAS;IACxB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,8CAA8C;IAC9C,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACrB,oDAAoD;IACpD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAsB,QAAQ,CAAC,IAAI,GAAE,SAAc,GAAG,OAAO,CAAC,WAAW,CAAC,CA6DzE;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,IAAI,GAAE,SAAc,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CA+B3E"}

package/dist/mail/service.js

@@ -0,0 +1,129 @@
+/**
+ * Mail sweep service — the once-a-day (or on-demand) pipeline:
+ *   consent gate → per account: connect → list (metadata+snippet) → classify →
+ *   dedup vs seen → build digest → persist.
+ *
+ * Connector + classify provider are injectable so the whole pipeline is
+ * unit-testable without a real mailbox or a live model.
+ */
+import { isGranted } from "../consent/store.js";
+import { loadAccounts, getSecret, markSwept, setSecret } from "./accounts.js";
+import { classifyMail } from "./classify.js";
+import { buildDigest } from "./digest.js";
+import { saveDigest, loadSeen, markSeen } from "./store.js";
+import { ImapConnector } from "./connectors/imap.js";
+import { GmailConnector } from "./connectors/gmail.js";
+function defaultConnector(account, secret) {
+    if (account.provider === "imap")
+        return new ImapConnector(account, secret);
+    if (account.provider === "gmail") {
+        // Persist refreshed access tokens back to the 0600 secrets file.
+        return new GmailConnector(account, secret, { onTokenRefresh: (t) => setSecret(account.id, t) });
+    }
+    throw new Error(`unknown mail provider: ${account.provider}`);
+}
+/** Local YYYY-MM-DD for a timestamp. */
+export function localDate(ms) {
+    const d = new Date(ms);
+    return new Date(d.getTime() - d.getTimezoneOffset() * 60000).toISOString().slice(0, 10);
+}
+export async function sweepAll(opts = {}) {
+    const now = opts.now ?? Date.now;
+    const sinceMs = opts.sinceMs ?? now() - 24 * 60 * 60 * 1000;
+    const limit = opts.limit ?? 200;
+    const factory = opts.connectorFactory ?? defaultConnector;
+    if (!isGranted("mail")) {
+        return {
+            items: [],
+            digest: buildDigest([], { date: localDate(now()), accountIds: [], now }),
+            newItems: [],
+            blocked: true,
+        };
+    }
+    const accounts = loadAccounts().filter((a) => a.enabled);
+    const allItems = [];
+    const allNew = [];
+    let unread = 0;
+    for (const account of accounts) {
+        const secret = getSecret(account.id);
+        if (!secret)
+            continue;
+        let connector = null;
+        try {
+            connector = factory(account, secret);
+            const raws = (await connector.listSince({ sinceMs, limit })).map((r) => ({ ...r, accountId: account.id }));
+            if (raws.length === 0) {
+                markSwept(account.id, now());
+                continue;
+            }
+            const seen = loadSeen(account.id);
+            const freshUids = new Set(raws.filter((r) => !seen.has(r.uid)).map((r) => r.uid));
+            unread += raws.filter((r) => !(r.flags ?? []).includes("\\Seen")).length;
+            const items = await classifyMail(raws, {
+                provider: opts.provider,
+                model: opts.model,
+                now,
+                signal: opts.signal,
+            });
+            allItems.push(...items);
+            allNew.push(...items.filter((i) => freshUids.has(i.uid)));
+            markSeen(account.id, raws.map((r) => r.uid));
+            markSwept(account.id, now());
+        }
+        catch {
+            // one bad account (auth error, network) must not sink the whole sweep
+        }
+        finally {
+            if (connector)
+                await connector.close().catch(() => { });
+        }
+    }
+    const digest = buildDigest(allItems, {
+        date: localDate(now()),
+        accountIds: accounts.map((a) => a.id),
+        unread,
+        now,
+    });
+    saveDigest(digest);
+    return { items: allItems, digest, newItems: allNew };
+}
+/**
+ * Lightweight intraday poll: fetch, classify ONLY the unseen messages, mark seen.
+ * Returns just the freshly-classified items (for important-mail alerts). Does NOT
+ * rebuild/save the digest — that stays a daily artifact (or a manual sweep).
+ */
+export async function pollNewMail(opts = {}) {
+    const now = opts.now ?? Date.now;
+    const sinceMs = opts.sinceMs ?? now() - 24 * 60 * 60 * 1000;
+    const limit = opts.limit ?? 200;
+    const factory = opts.connectorFactory ?? defaultConnector;
+    if (!isGranted("mail"))
+        return [];
+    const out = [];
+    for (const account of loadAccounts().filter((a) => a.enabled)) {
+        const secret = getSecret(account.id);
+        if (!secret)
+            continue;
+        let connector = null;
+        try {
+            connector = factory(account, secret);
+            const raws = (await connector.listSince({ sinceMs, limit })).map((r) => ({ ...r, accountId: account.id }));
+            const seen = loadSeen(account.id);
+            const fresh = raws.filter((r) => !seen.has(r.uid));
+            if (fresh.length) {
+                out.push(...(await classifyMail(fresh, { provider: opts.provider, model: opts.model, now, signal: opts.signal })));
+            }
+            markSeen(account.id, raws.map((r) => r.uid));
+            markSwept(account.id, now());
+        }
+        catch {
+            // skip a failing account
+        }
+        finally {
+            if (connector)
+                await connector.close().catch(() => { });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=service.js.map