@pome-sh/cli 0.5.0 → 0.8.0

package/node_modules/@pome-sh/twin-gmail/dist/src/rest-store.js

@@ -1,282 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-import { invalidArgument, notFound, unsupported } from "./errors.js";
-import { validateSearchQuery } from "./search.js";
-import { addHistory, assertLabels, nextId, semanticMessage } from "./storage.js";
-export class GmailRestStore {
-    db;
-    domain;
-    constructor(db, domain) {
-        this.db = db;
-        this.domain = domain;
-    }
-    profile(email) {
-        const mailboxId = this.domain.mailboxId(email);
-        const totals = this.db
-            .prepare(`SELECT COUNT(*) AS messagesTotal, COUNT(DISTINCT thread_id) AS threadsTotal
-         FROM messages WHERE mailbox_id = ?`)
-            .get(mailboxId);
-        return { emailAddress: email, ...totals, historyId: this.currentHistoryId(mailboxId) };
-    }
-    currentHistoryIdFor(email) {
-        return this.currentHistoryId(this.domain.mailboxId(email));
-    }
-    latestMessageHistory(email, messageId) {
-        const mailboxId = this.domain.mailboxId(email);
-        const row = this.db
-            .prepare("SELECT MAX(id) AS id FROM history WHERE mailbox_id = ? AND message_id = ?")
-            .get(mailboxId, messageId);
-        return String(row.id ?? Number(this.currentHistoryId(mailboxId)));
-    }
-    latestThreadHistory(email, threadId) {
-        const mailboxId = this.domain.mailboxId(email);
-        const row = this.db
-            .prepare("SELECT MAX(id) AS id FROM history WHERE mailbox_id = ? AND thread_id = ?")
-            .get(mailboxId, threadId);
-        return String(row.id ?? Number(this.currentHistoryId(mailboxId)));
-    }
-    headers(email, messageId) {
-        const mailboxId = this.domain.mailboxId(email);
-        const row = this.db
-            .prepare("SELECT headers_json FROM messages WHERE mailbox_id = ? AND id = ?")
-            .get(mailboxId, messageId);
-        if (!row)
-            notFound("Message");
-        return JSON.parse(row.headers_json);
-    }
-    attachment(email, messageId, attachmentId) {
-        const mailboxId = this.domain.mailboxId(email);
-        const row = this.db
-            .prepare("SELECT size, data FROM attachments WHERE mailbox_id = ? AND message_id = ? AND id = ?")
-            .get(mailboxId, messageId, attachmentId);
-        if (!row)
-            notFound("Attachment");
-        return { size: row.size, data: Buffer.from(row.data).toString("base64url") };
-    }
-    applyInternalDateSource(email, messageId, source) {
-        const mailboxId = this.domain.mailboxId(email);
-        if (source === "receivedTime") {
-            const history = this.db
-                .prepare(`SELECT created_at FROM history
-           WHERE mailbox_id = ? AND message_id = ? AND event_type = 'messageAdded'
-           ORDER BY id DESC LIMIT 1`)
-                .get(mailboxId, messageId);
-            if (history) {
-                this.db
-                    .prepare("UPDATE messages SET internal_date = ? WHERE mailbox_id = ? AND id = ?")
-                    .run(Date.parse(history.created_at), mailboxId, messageId);
-            }
-        }
-        return semanticMessage(this.db, mailboxId, messageId);
-    }
-    drafts(email, query = "", includeTrash = false) {
-        const mailboxId = this.domain.mailboxId(email);
-        const matching = query
-            ? new Set(this.domain.searchMessages(email, query, { includeTrash }).map((message) => message.id))
-            : null;
-        const rows = this.db
-            .prepare("SELECT id, message_id, updated_at FROM drafts WHERE mailbox_id = ? ORDER BY updated_at DESC, id DESC")
-            .all(mailboxId);
-        return rows
-            .filter((row) => !matching || matching.has(row.message_id))
-            .map((row) => ({ id: row.id, message: semanticMessage(this.db, mailboxId, row.message_id), updatedAt: row.updated_at }));
-    }
-    draft(email, draftId) {
-        const mailboxId = this.domain.mailboxId(email);
-        const row = this.db
-            .prepare("SELECT id, message_id, updated_at FROM drafts WHERE mailbox_id = ? AND id = ?")
-            .get(mailboxId, draftId);
-        if (!row)
-            notFound("Draft");
-        return { id: row.id, message: semanticMessage(this.db, mailboxId, row.message_id), updatedAt: row.updated_at };
-    }
-    deleteMessage(email, messageId) {
-        const mailboxId = this.domain.mailboxId(email);
-        this.db.transaction(() => {
-            const message = semanticMessage(this.db, mailboxId, messageId);
-            this.db.prepare("DELETE FROM messages WHERE mailbox_id = ? AND id = ?").run(mailboxId, messageId);
-            addHistory(this.db, mailboxId, messageId, message.threadId, "messageDeleted");
-            this.removeEmptyThread(mailboxId, message.threadId);
-        }).immediate();
-    }
-    batchDeleteMessages(email, messageIds) {
-        const mailboxId = this.domain.mailboxId(email);
-        this.db.transaction(() => {
-            for (const messageId of messageIds) {
-                const exists = this.db
-                    .prepare("SELECT thread_id FROM messages WHERE mailbox_id = ? AND id = ?")
-                    .get(mailboxId, messageId);
-                if (!exists)
-                    continue;
-                this.db.prepare("DELETE FROM messages WHERE mailbox_id = ? AND id = ?").run(mailboxId, messageId);
-                addHistory(this.db, mailboxId, messageId, exists.thread_id, "messageDeleted");
-                this.removeEmptyThread(mailboxId, exists.thread_id);
-            }
-        }).immediate();
-    }
-    deleteThread(email, threadId) {
-        const mailboxId = this.domain.mailboxId(email);
-        this.db.transaction(() => {
-            const thread = this.domain.getThread(email, threadId);
-            this.db.prepare("DELETE FROM threads WHERE mailbox_id = ? AND id = ?").run(mailboxId, threadId);
-            for (const message of thread.messages)
-                addHistory(this.db, mailboxId, message.id, threadId, "messageDeleted");
-        }).immediate();
-    }
-    labels(email) {
-        const mailboxId = this.domain.mailboxId(email);
-        const rows = this.db
-            .prepare("SELECT id FROM labels WHERE mailbox_id = ? ORDER BY CASE type WHEN 'system' THEN 0 ELSE 1 END, name COLLATE NOCASE, id")
-            .all(mailboxId);
-        return rows.map((row) => this.label(email, row.id));
-    }
-    label(email, labelId) {
-        const mailboxId = this.domain.mailboxId(email);
-        const row = this.db
-            .prepare(`SELECT id, name, type, text_color, background_color
-         FROM labels WHERE mailbox_id = ? AND id = ?`)
-            .get(mailboxId, labelId);
-        if (!row)
-            notFound("Label");
-        const counts = this.db
-            .prepare(`SELECT COUNT(DISTINCT ml.message_id) AS messagesTotal,
-          COUNT(DISTINCT CASE WHEN unread.message_id IS NOT NULL THEN ml.message_id END) AS messagesUnread,
-          COUNT(DISTINCT m.thread_id) AS threadsTotal,
-          COUNT(DISTINCT CASE WHEN unread.message_id IS NOT NULL THEN m.thread_id END) AS threadsUnread
-         FROM message_labels ml
-         JOIN messages m ON m.mailbox_id = ml.mailbox_id AND m.id = ml.message_id
-         LEFT JOIN message_labels unread ON unread.mailbox_id = ml.mailbox_id
-           AND unread.message_id = ml.message_id AND unread.label_id = 'UNREAD'
-         WHERE ml.mailbox_id = ? AND ml.label_id = ?`)
-            .get(mailboxId, labelId);
-        return {
-            id: row.id,
-            name: row.name,
-            type: row.type,
-            textColor: row.text_color,
-            backgroundColor: row.background_color,
-            ...counts,
-        };
-    }
-    updateLabel(email, labelId, input, replace) {
-        const mailboxId = this.domain.mailboxId(email);
-        const current = this.label(email, labelId);
-        if (current.type !== "user")
-            invalidArgument("System labels cannot be modified");
-        const name = replace ? input.name : input.name ?? current.name;
-        if (!name?.trim())
-            invalidArgument("Label name is required");
-        const textColor = input.color?.textColor ?? (replace ? null : current.textColor);
-        const backgroundColor = input.color?.backgroundColor ?? (replace ? null : current.backgroundColor);
-        try {
-            this.db
-                .prepare("UPDATE labels SET name = ?, text_color = ?, background_color = ? WHERE mailbox_id = ? AND id = ?")
-                .run(name.trim(), textColor, backgroundColor, mailboxId, labelId);
-        }
-        catch {
-            invalidArgument(`Label already exists: ${name}`);
-        }
-        return this.label(email, labelId);
-    }
-    deleteLabel(email, labelId) {
-        const mailboxId = this.domain.mailboxId(email);
-        const label = this.label(email, labelId);
-        if (label.type !== "user")
-            invalidArgument("System labels cannot be deleted");
-        this.db.prepare("DELETE FROM labels WHERE mailbox_id = ? AND id = ?").run(mailboxId, labelId);
-    }
-    filters(email) {
-        const mailboxId = this.domain.mailboxId(email);
-        const rows = this.db
-            .prepare("SELECT id, criteria_json, action_json FROM filters WHERE mailbox_id = ? ORDER BY id")
-            .all(mailboxId);
-        return rows.map(toFilter);
-    }
-    filter(email, filterId) {
-        const mailboxId = this.domain.mailboxId(email);
-        const row = this.db
-            .prepare("SELECT id, criteria_json, action_json FROM filters WHERE mailbox_id = ? AND id = ?")
-            .get(mailboxId, filterId);
-        if (!row)
-            notFound("Filter");
-        return toFilter(row);
-    }
-    createFilter(email, criteria = {}, action = {}) {
-        if (action.forward)
-            unsupported("Filter action.forward is not supported by the Gmail twin");
-        const mailboxId = this.domain.mailboxId(email);
-        const count = this.db.prepare("SELECT COUNT(*) AS count FROM filters WHERE mailbox_id = ?").get(mailboxId);
-        if (count.count >= 1000)
-            invalidArgument("Filter limit exceeded");
-        assertLabels(this.db, mailboxId, [...(action.addLabelIds ?? []), ...(action.removeLabelIds ?? [])]);
-        if (criteria.query)
-            validateSearchQuery(criteria.query);
-        if (criteria.negatedQuery)
-            validateSearchQuery(criteria.negatedQuery);
-        const id = nextId(this.db, mailboxId, "filter_counter", "filter");
-        this.db
-            .prepare("INSERT INTO filters(mailbox_id, id, criteria_json, action_json) VALUES (?, ?, ?, ?)")
-            .run(mailboxId, id, JSON.stringify(criteria), JSON.stringify(action));
-        return { id, criteria, action };
-    }
-    deleteFilter(email, filterId) {
-        const mailboxId = this.domain.mailboxId(email);
-        const result = this.db.prepare("DELETE FROM filters WHERE mailbox_id = ? AND id = ?").run(mailboxId, filterId);
-        if (result.changes === 0)
-            notFound("Filter");
-    }
-    forwardingAddresses(email) {
-        const mailboxId = this.domain.mailboxId(email);
-        const rows = this.db
-            .prepare("SELECT email, verification_status FROM forwarding_addresses WHERE mailbox_id = ? ORDER BY email COLLATE NOCASE")
-            .all(mailboxId);
-        return rows.map((row) => ({ forwardingEmail: row.email, verificationStatus: row.verification_status }));
-    }
-    forwardingAddress(email, forwardingEmail) {
-        const found = this.forwardingAddresses(email).find((item) => item.forwardingEmail.toLowerCase() === forwardingEmail.toLowerCase());
-        if (!found)
-            notFound("Forwarding address");
-        return found;
-    }
-    sendAs(email) {
-        const mailboxId = this.domain.mailboxId(email);
-        const rows = this.db
-            .prepare(`SELECT email, display_name, reply_to_address, is_primary, is_default, verification_status
-         FROM send_as WHERE mailbox_id = ? ORDER BY is_primary DESC, email COLLATE NOCASE`)
-            .all(mailboxId);
-        return rows.map((row) => ({
-            sendAsEmail: row.email,
-            displayName: row.display_name,
-            ...(row.reply_to_address ? { replyToAddress: row.reply_to_address } : {}),
-            isPrimary: Boolean(row.is_primary),
-            isDefault: Boolean(row.is_default),
-            verificationStatus: row.verification_status,
-            treatAsAlias: !row.is_primary,
-            signature: "",
-        }));
-    }
-    sendAsAddress(email, sendAsEmail) {
-        const found = this.sendAs(email).find((item) => String(item.sendAsEmail).toLowerCase() === sendAsEmail.toLowerCase());
-        if (!found)
-            notFound("Send-as alias");
-        return found;
-    }
-    currentHistoryId(mailboxId) {
-        const row = this.db
-            .prepare("SELECT history_counter FROM mailbox_counters WHERE mailbox_id = ?")
-            .get(mailboxId);
-        return String(row.history_counter);
-    }
-    removeEmptyThread(mailboxId, threadId) {
-        if (!this.db.prepare("SELECT 1 FROM messages WHERE mailbox_id = ? AND thread_id = ? LIMIT 1").get(mailboxId, threadId)) {
-            this.db.prepare("DELETE FROM threads WHERE mailbox_id = ? AND id = ?").run(mailboxId, threadId);
-        }
-    }
-}
-function toFilter(row) {
-    return {
-        id: row.id,
-        criteria: JSON.parse(row.criteria_json),
-        action: JSON.parse(row.action_json),
-    };
-}
-//# sourceMappingURL=rest-store.js.map

package/node_modules/@pome-sh/twin-gmail/dist/src/rest-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rest-store.js","sourceRoot":"","sources":["../../src/rest-store.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAkBjF,MAAM,OAAO,cAAc;IAEN;IACA;IAFnB,YACmB,EAAqB,EACrB,MAAmB;QADnB,OAAE,GAAF,EAAE,CAAmB;QACrB,WAAM,GAAN,MAAM,CAAa;IACnC,CAAC;IAEJ,OAAO,CAAC,KAAa;QAMnB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CACN;4CACoC,CACrC;aACA,GAAG,CAAC,SAAS,CAAoD,CAAC;QACrE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;IACzF,CAAC;IAED,mBAAmB,CAAC,KAAa;QAC/B,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,oBAAoB,CAAC,KAAa,EAAE,SAAiB;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,2EAA2E,CAAC;aACpF,GAAG,CAAC,SAAS,EAAE,SAAS,CAA0B,CAAC;QACtD,OAAO,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,mBAAmB,CAAC,KAAa,EAAE,QAAgB;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,0EAA0E,CAAC;aACnF,GAAG,CAAC,SAAS,EAAE,QAAQ,CAA0B,CAAC;QACrD,OAAO,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,SAAiB;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,mEAAmE,CAAC;aAC5E,GAAG,CAAC,SAAS,EAAE,SAAS,CAAyC,CAAC;QACrE,IAAI,CAAC,GAAG;YAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAA2C,CAAC;IAChF,CAAC;IAED,UAAU,CAAC,KAAa,EAAE,SAAiB,EAAE,YAAoB;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,uFAAuF,CAAC;aAChG,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,CAAmD,CAAC;QAC7F,IAAI,CAAC,GAAG;YAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IAC/E,CAAC;IAED,uBAAuB,CACrB,KAAa,EACb,SAAiB,EACjB,MAAqC;QAErC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE;iBACpB,OAAO,CACN;;oCAE0B,CAC3B;iBACA,GAAG,CAAC,SAAS,EAAE,SAAS,CAAuC,CAAC;YACnE,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,EAAE;qBACJ,OAAO,CAAC,uEAAuE,CAAC;qBAChF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,OAAO,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,KAAK,GAAG,EAAE,EAAE,YAAY,GAAG,KAAK;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,KAAK;YACpB,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAClG,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,sGAAsG,CAAC;aAC/G,GAAG,CAAC,SAAS,CAAkE,CAAC;QACnF,OAAO,IAAI;aACR,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;aAC1D,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC7H,CAAC;IAED,KAAK,CAAC,KAAa,EAAE,OAAe;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,+EAA+E,CAAC;aACxF,GAAG,CAAC,SAAS,EAAE,OAAO,CAAuE,CAAC;QACjG,IAAI,CAAC,GAAG;YAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;IACjH,CAAC;IAED,aAAa,CAAC,KAAa,EAAE,SAAiB;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACvB,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC/D,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAClG,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAC9E,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACjB,CAAC;IAED,mBAAmB,CAAC,KAAa,EAAE,UAAoB;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACvB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;qBACnB,OAAO,CAAC,gEAAgE,CAAC;qBACzE,GAAG,CAAC,SAAS,EAAE,SAAS,CAAsC,CAAC;gBAClE,IAAI,CAAC,MAAM;oBAAE,SAAS;gBACtB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBAClG,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;gBAC9E,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACtD,CAAC;QACH,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACjB,CAAC;IAED,YAAY,CAAC,KAAa,EAAE,QAAgB;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACvB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACtD,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAChG,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAChH,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,wHAAwH,CAAC;aACjI,GAAG,CAAC,SAAS,CAA0B,CAAC;QAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,KAAa,EAAE,OAAe;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;qDAC6C,CAC9C;aACA,GAAG,CAAC,SAAS,EAAE,OAAO,CAEZ,CAAC;QACd,IAAI,CAAC,GAAG;YAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CACN;;;;;;;;qDAQ6C,CAC9C;aACA,GAAG,CAAC,SAAS,EAAE,OAAO,CAKxB,CAAC;QACF,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,eAAe,EAAE,GAAG,CAAC,gBAAgB;YACrC,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAED,WAAW,CACT,KAAa,EACb,OAAe,EACf,KAAkF,EAClF,OAAgB;QAEhB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;YAAE,eAAe,CAAC,kCAAkC,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;QAC/D,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;YAAE,eAAe,CAAC,wBAAwB,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjF,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,EAAE,eAAe,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACnG,IAAI,CAAC;YACH,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,kGAAkG,CAAC;iBAC3G,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,eAAe,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,WAAW,CAAC,KAAa,EAAE,OAAe;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,eAAe,CAAC,iCAAiC,CAAC,CAAC;QAC9E,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAChG,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,qFAAqF,CAAC;aAC9F,GAAG,CAAC,SAAS,CAAsE,CAAC;QACvF,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,QAAgB;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,oFAAoF,CAAC;aAC7F,GAAG,CAAC,SAAS,EAAE,QAAQ,CAA2E,CAAC;QACtG,IAAI,CAAC,GAAG;YAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,YAAY,CAAC,KAAa,EAAE,WAAmC,EAAE,EAAE,SAA+B,EAAE;QAClG,IAAI,MAAM,CAAC,OAAO;YAAE,WAAW,CAAC,0DAA0D,CAAC,CAAC;QAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC,GAAG,CAAC,SAAS,CAExG,CAAC;QACF,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI;YAAE,eAAe,CAAC,uBAAuB,CAAC,CAAC;QAClE,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACpG,IAAI,QAAQ,CAAC,KAAK;YAAE,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,QAAQ,CAAC,YAAY;YAAE,mBAAmB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACtE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAClE,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,qFAAqF,CAAC;aAC9F,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,YAAY,CAAC,KAAa,EAAE,QAAgB;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC/G,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;YAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,mBAAmB,CAAC,KAAa;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,gHAAgH,CAAC;aACzH,GAAG,CAAC,SAAS,CAA0D,CAAC;QAC3E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,KAAK,EAAE,kBAAkB,EAAE,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,iBAAiB,CAAC,KAAa,EAAE,eAAuB;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,IAAI,CAChD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,WAAW,EAAE,CAC/E,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;0FACkF,CACnF;aACA,GAAG,CAAC,SAAS,CAOd,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,WAAW,EAAE,GAAG,CAAC,KAAK;YACtB,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;YAClC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;YAClC,kBAAkB,EAAE,GAAG,CAAC,mBAAmB;YAC3C,YAAY,EAAE,CAAC,GAAG,CAAC,UAAU;YAC7B,SAAS,EAAE,EAAE;SACd,CAAC,CAAC,CAAC;IACN,CAAC;IAED,aAAa,CAAC,KAAa,EAAE,WAAmB;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CACnC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,CAC/E,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,SAAiB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,mEAAmE,CAAC;aAC5E,GAAG,CAAC,SAAS,CAAgC,CAAC;QACjD,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IAEO,iBAAiB,CAAC,SAAiB,EAAE,QAAgB;QAC3D,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YACvH,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,GAA+D;IAC/E,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAwC;QAC9E,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAsC;KACzE,CAAC;AACJ,CAAC"}

package/node_modules/@pome-sh/twin-gmail/node_modules/@pome-sh/sdk/dist/admin-gate.d.ts

@@ -1,35 +0,0 @@
-import type { Context, MiddlewareHandler } from "hono";
-/** Context variable consulted first by getClientIp(). */
-export declare const CLIENT_IP_VAR = "pomeClientIp";
-/**
- * Explicitly record the peer address for this request. Alternate serving
- * bridges (or tests) call this from an upstream middleware so the gate never
- * reaches into runtime-private internals.
- *
- * SECURITY: the value passed here MUST be the transport-level peer address
- * (the socket's remote address as reported by the serving bridge). It takes
- * precedence over getConnInfo, so deriving it from any request-controlled
- * input — X-Forwarded-For or any other client-supplied header — would make
- * the loopback-only admin gate spoofable by whoever sets that header. If you
- * are behind a reverse proxy, use TWIN_ADMIN_TOKEN instead of trying to
- * recover the "real" client IP.
- */
-export declare function setClientIp(c: Context, ip: string): void;
-/**
- * Runtime-neutral client-IP accessor (FDRS-587). Resolution order:
- *   1. Explicit override set via setClientIp() (alternate bridges / tests).
- *   2. The node serving bridge's official getConnInfo helper.
- *   3. undefined — no live socket (e.g. app.request() in-process tests).
- */
-export declare function getClientIp(c: Context): Promise<string | undefined>;
-export declare function isLoopbackAddress(remote: string): boolean;
-export interface AdminGateOptions {
-    /** 403 response factory so each twin keeps its own error envelope. */
-    forbidden?: () => Response;
-}
-/**
- * Admin endpoint protection shared by every twin (FDRS-616). Each twin's
- * auth.ts wraps this with its own `forbidden` envelope. Semantics are
- * identical to the per-twin requireAdminAuth() copies this replaces.
- */
-export declare function createAdminGate(options?: AdminGateOptions): MiddlewareHandler;

package/node_modules/@pome-sh/twin-gmail/node_modules/@pome-sh/sdk/dist/admin-gate.js

@@ -1,103 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// Shared admin-endpoint gate (FDRS-587 / FDRS-616). First-party twins import
-// this through `@pome-sh/sdk/server`; do not copy this file into a twin package.
-//
-// Tiered policy (semantics unchanged from the per-twin copies it replaces):
-//   1. TWIN_ADMIN_TOKEN set → require X-Admin-Token to match (timing-safe).
-//   2. TWIN_ADMIN_TOKEN unset + client IP known → allow only loopback.
-//   3. TWIN_ADMIN_TOKEN unset + client IP unknown → deny in production,
-//      allow otherwise (accepted fail-open for in-process test harnesses).
-import { timingSafeEqual } from "node:crypto";
-/** Context variable consulted first by getClientIp(). */
-export const CLIENT_IP_VAR = "pomeClientIp";
-let nodeGetConnInfo;
-// Lazily import the node bridge's official ConnInfo helper. Dynamic because
-// @pome-sh/sdk declares @hono/node-server as an *optional* peer dependency —
-// a static import would crash consumers that never bind a Node socket.
-// Works with both @hono/node-server v1 and v2 (same subpath + signature).
-function loadNodeGetConnInfo() {
-    nodeGetConnInfo ??= import("@hono/node-server/conninfo").then((mod) => mod.getConnInfo, () => undefined);
-    return nodeGetConnInfo;
-}
-/**
- * Explicitly record the peer address for this request. Alternate serving
- * bridges (or tests) call this from an upstream middleware so the gate never
- * reaches into runtime-private internals.
- *
- * SECURITY: the value passed here MUST be the transport-level peer address
- * (the socket's remote address as reported by the serving bridge). It takes
- * precedence over getConnInfo, so deriving it from any request-controlled
- * input — X-Forwarded-For or any other client-supplied header — would make
- * the loopback-only admin gate spoofable by whoever sets that header. If you
- * are behind a reverse proxy, use TWIN_ADMIN_TOKEN instead of trying to
- * recover the "real" client IP.
- */
-export function setClientIp(c, ip) {
-    c.set(CLIENT_IP_VAR, ip);
-}
-/**
- * Runtime-neutral client-IP accessor (FDRS-587). Resolution order:
- *   1. Explicit override set via setClientIp() (alternate bridges / tests).
- *   2. The node serving bridge's official getConnInfo helper.
- *   3. undefined — no live socket (e.g. app.request() in-process tests).
- */
-export async function getClientIp(c) {
-    const override = c.get(CLIENT_IP_VAR);
-    if (typeof override === "string" && override.length > 0)
-        return override;
-    const getConnInfo = await loadNodeGetConnInfo();
-    if (!getConnInfo)
-        return undefined;
-    try {
-        const address = getConnInfo(c).remote?.address;
-        return typeof address === "string" && address.length > 0 ? address : undefined;
-    }
-    catch {
-        // The helper throws when the context has no node socket behind it.
-        return undefined;
-    }
-}
-export function isLoopbackAddress(remote) {
-    return (remote === "127.0.0.1" ||
-        remote === "::1" ||
-        remote === "::ffff:127.0.0.1" ||
-        remote === "localhost");
-}
-function defaultForbidden() {
-    return Response.json({ message: "Forbidden", documentation_url: "" }, { status: 403 });
-}
-/**
- * Admin endpoint protection shared by every twin (FDRS-616). Each twin's
- * auth.ts wraps this with its own `forbidden` envelope. Semantics are
- * identical to the per-twin requireAdminAuth() copies this replaces.
- */
-export function createAdminGate(options = {}) {
-    const forbidden = options.forbidden ?? defaultForbidden;
-    return async (c, next) => {
-        const adminToken = process.env.TWIN_ADMIN_TOKEN;
-        if (adminToken && adminToken.length > 0) {
-            // Web Headers lookups are case-insensitive, so one lookup covers every
-            // casing a client might send.
-            const provided = c.req.header("X-Admin-Token");
-            if (!provided)
-                return forbidden();
-            const a = Buffer.from(provided);
-            const b = Buffer.from(adminToken);
-            if (a.length !== b.length || !timingSafeEqual(a, b))
-                return forbidden();
-            await next();
-            return;
-        }
-        const remote = await getClientIp(c);
-        if (!remote) {
-            if (process.env.NODE_ENV === "production")
-                return forbidden();
-            await next();
-            return;
-        }
-        if (!isLoopbackAddress(remote))
-            return forbidden();
-        await next();
-    };
-}
-//# sourceMappingURL=admin-gate.js.map

package/node_modules/@pome-sh/twin-gmail/node_modules/@pome-sh/sdk/dist/admin-gate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-gate.js","sourceRoot":"","sources":["../src/admin-gate.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6EAA6E;AAC7E,iFAAiF;AACjF,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,uEAAuE;AACvE,wEAAwE;AACxE,2EAA2E;AAG3E,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,yDAAyD;AACzD,MAAM,CAAC,MAAM,aAAa,GAAG,cAAc,CAAC;AAO5C,IAAI,eAA+D,CAAC;AAEpE,4EAA4E;AAC5E,6EAA6E;AAC7E,uEAAuE;AACvE,0EAA0E;AAC1E,SAAS,mBAAmB;IAC1B,eAAe,KAAK,MAAM,CAAC,4BAA4B,CAAC,CAAC,IAAI,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAuC,EACpD,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;IACF,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAC,CAAU,EAAE,EAAU;IAC/C,CAA0B,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAU;IAC1C,MAAM,QAAQ,GAAI,CAA0B,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAChE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzE,MAAM,WAAW,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAChD,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC;QAC/C,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,CACL,MAAM,KAAK,WAAW;QACtB,MAAM,KAAK,KAAK;QAChB,MAAM,KAAK,kBAAkB;QAC7B,MAAM,KAAK,WAAW,CACvB,CAAC;AACJ,CAAC;AAOD,SAAS,gBAAgB;IACvB,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACzF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,UAA4B,EAAE;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACxD,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAChD,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,uEAAuE;YACvE,8BAA8B;YAC9B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,SAAS,EAAE,CAAC;YACxE,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;gBAAE,OAAO,SAAS,EAAE,CAAC;YAC9D,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,EAAE,CAAC;QACnD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/node_modules/@pome-sh/twin-gmail/node_modules/@pome-sh/sdk/dist/auth.d.ts

@@ -1,100 +0,0 @@
-import type { Context, MiddlewareHandler } from "hono";
-/** `team_id` stamped on sessions authenticated by a provider-shaped token. */
-export declare const PROVIDER_SHAPED_TEAM_ID = "provider-shaped";
-export interface SessionClaims {
-    sid: string;
-    team_id: string;
-    exp: number;
-    [claim: string]: unknown;
-}
-/** Minimum session value; twins extend it via hooks (login, account_id, …). */
-export type SessionValue = {
-    sid: string;
-} & Record<string, unknown>;
-export declare function resolveAuthSecret(): string;
-export interface ProviderTokenSpec {
-    /** HMAC domain separator ("github" | "slack" | "stripe" | …). */
-    provider: string;
-    /** Declared token prefixes, e.g. ["xoxb-pome-", "xoxp-pome-"]. */
-    prefixes: readonly string[];
-}
-export interface MintProviderTokenOptions {
-    sid: string;
-    /** Unix-seconds expiry. Omit for the legacy non-expiring shape. */
-    exp?: number;
-    /** Defaults to the spec's first declared prefix. */
-    prefix?: string;
-    secret?: string;
-}
-/**
- * Mint a provider-shaped token (F-712 row 10: minting lives in the engine;
- * CLI + cloud mint through it, parameterized by the twin's declared shape).
- */
-export declare function mintProviderToken(spec: ProviderTokenSpec, options: MintProviderTokenOptions): string;
-/**
- * Verify a provider-shaped token; returns the sid on success.
- *
- * The parse is right-anchored — the signature is always the trailing 22
- * base64url chars, the optional exp is a trailing all-digit segment of the
- * remainder — and the HMAC disambiguates the exp-vs-sid split. This fixes
- * the F-712 appendix bug once: the old per-twin `([^_]+)` regexes broke for
- * any sid whose base64url encoding contains `_` (the alphabet includes it).
- */
-export declare function verifyProviderToken(spec: ProviderTokenSpec, token: string, secret?: string): string | undefined;
-/** Why a request failed auth; rendered by the twin's `unauthorized` hook. */
-export type UnauthorizedKind = "no_token" | "invalid" | "expired";
-export interface AuthEnvelope {
-    status: number;
-    body: unknown;
-}
-/** Extra token location (F-712 row 3). Returns the token or undefined. */
-export type TokenResolver = (c: Context) => string | undefined | Promise<string | undefined>;
-/** Accept `?<param>=<token>` in the query string (real Slack behavior). */
-export declare function queryTokenResolver(param?: string): TokenResolver;
-/**
- * Accept `<param>=<token>` in a form-encoded POST body (real Slack
- * behavior). Only parses when the content type is form-encoded, so JSON
- * streaming reads downstream are never consumed here; `parseBody()` caches
- * on the Hono context, so downstream handlers see the same object.
- */
-export declare function formTokenResolver(param?: string): TokenResolver;
-export interface BearerAuthOptions {
-    /** Row 1: the twin's provider-shaped token declaration. */
-    providerToken?: ProviderTokenSpec;
-    /** Row 7: extra session fields for provider-shaped sessions. */
-    providerSession?: (sid: string) => Record<string, unknown>;
-    /** Row 3: extra token locations tried after the Authorization header. */
-    tokenResolvers?: readonly TokenResolver[];
-    /**
-     * Row 4 pin: accept a prefix-less bearer and case-insensitive "bearer".
-     * Default false (github/slack); stripe pins true. Flipping a twin is a
-     * contract change (CONTRACT.md + suite, then a cloud consumer PR).
-     */
-    allowRawBearer?: boolean;
-    /**
-     * Row 9: when false, a request with no `:sid` path segment trusts the
-     * bearer alone (stripe's root `/v1/*` SDK-compat mount). Default true.
-     */
-    requirePathSid?: boolean;
-    /** Row 8: DB-backed credential lookup, consulted before provider/JWT. */
-    resolveCredential?: (token: string, c: Context) => SessionValue | undefined | Promise<SessionValue | undefined>;
-    /**
-     * Rows 2 + 6: the twin's 401 envelope, keyed by failure classification.
-     * `info.token` carries the presented credential so a twin can render
-     * shape-dependent messages (stripe: api-key-shaped tokens answer
-     * "Invalid API Key provided.", JWTs answer "Bad credentials").
-     */
-    unauthorized?: (kind: UnauthorizedKind, info?: {
-        token?: string;
-    }) => AuthEnvelope;
-    /** Row 5 pin: the twin's sid-mismatch envelope (github/slack 401, stripe 403). */
-    sidMismatch?: () => AuthEnvelope;
-    /** Row 7: extra session fields derived from verified JWT claims. */
-    sessionExtras?: (claims: SessionClaims) => Record<string, unknown>;
-}
-export declare function bearerAuth(options?: BearerAuthOptions): MiddlewareHandler;
-/**
- * Admin endpoint protection. Thin wrapper over the shared admin-gate module
- * (FDRS-587 / FDRS-616) using the default error envelope.
- */
-export declare function requireAdminAuth(): MiddlewareHandler;