@rndmjoker/proton-mcp 0.4.4

package/dist/tools/capabilities.js

@@ -0,0 +1,96 @@
+/**
+ * What the client said it can do.
+ *
+ * One module, because two places ask the same question and one of them decides
+ * whether a message may be sent. When they read different sources they give
+ * different answers, and the answer that matters is the one that refuses.
+ *
+ * ## Why this exists at all
+ *
+ * The first version of both checks read the capabilities out of the request's
+ * `_meta` envelope, under `io.modelcontextprotocol/clientCapabilities`. That key
+ * belongs to protocol revision 2026-07-28. The SDK in use here does not speak
+ * that revision at all: its newest is 2025-11-25, and on such a connection the
+ * envelope is not merely empty but absent.
+ *
+ * So the check answered "this client cannot show a form" for every client that
+ * ever connected, and every send was refused. Fail-closed, so nothing went out
+ * without a confirmation. It also meant nothing went out at all.
+ *
+ * Measured on 31.07.2026 against `serveStdio` with SDK 2.0.0:
+ *
+ * | Source | On a 2025-11-25 connection |
+ * | :--- | :--- |
+ * | `ctx.mcpReq.envelope` | absent |
+ * | `server.server.getClientCapabilities()` | the declaration, complete |
+ *
+ * And the round trip itself works: a returned `inputRequired` reaches the client
+ * as an `elicitation/create`, the answer comes back, and the handler runs a
+ * second time with it. Only the question of whether to try was broken.
+ *
+ * ## Both sources, not one
+ *
+ * The envelope is asked first and the handshake second, rather than replacing
+ * one with the other. The envelope is per request and is what a 2026-era
+ * connection carries; the handshake is per connection and is what this era has.
+ * A server that has to guess which one exists is a server that breaks on the
+ * next SDK release, in whichever direction it moves.
+ */
+/** Reserved `_meta` key carrying the capabilities on a 2026-era request. */
+const ENVELOPE_KEY = 'io.modelcontextprotocol/clientCapabilities';
+/**
+ * The declaration made at handshake time.
+ *
+ * A function, and registered rather than imported: it belongs to the server
+ * instance, which is built inside the connection factory and does not exist when
+ * this module is loaded.
+ */
+let handshake;
+export function setHandshakeCapabilities(source) {
+    handshake = source;
+}
+/** For tests, which must not inherit a source from another test. */
+export function _clearHandshakeCapabilities() {
+    handshake = undefined;
+}
+/**
+ * What this client declared, from whichever source has it.
+ *
+ * Typed as unknown on purpose. The client sent this, so its shape is a claim
+ * rather than a guarantee, and every reader narrows it by hand.
+ */
+export function declaredCapabilities(ctx) {
+    const fromEnvelope = ctx?.mcpReq?.envelope?.[ENVELOPE_KEY];
+    if (fromEnvelope !== undefined && fromEnvelope !== null)
+        return fromEnvelope;
+    try {
+        return handshake?.();
+    }
+    catch {
+        // A source that throws is a source that says nothing, and saying nothing
+        // means the caller refuses. That is the safe direction for every caller
+        // this module has.
+        return undefined;
+    }
+}
+/** Whether a declaration names a member, treating an empty object as present. */
+function declares(capabilities, group, member) {
+    const entry = capabilities?.[group];
+    if (entry === undefined || entry === null)
+        return false;
+    const value = entry[member];
+    if (value !== undefined && value !== null && value !== false)
+        return true;
+    // A declaration with no modes at all is the pre-mode way of saying "form",
+    // which is the SDK's own reading. It says nothing about url.
+    return member === 'form' && Object.keys(entry).length === 0;
+}
+/** Whether the client can show a form and give an answer back. */
+export function canElicitForm(ctx) {
+    return declares(declaredCapabilities(ctx), 'elicitation', 'form');
+}
+/** Whether the client can put a URL in front of the user. */
+export function canElicitUrl(ctx) {
+    return declares(declaredCapabilities(ctx), 'elicitation', 'url');
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/tools/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/tools/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,4EAA4E;AAC5E,MAAM,YAAY,GAAG,4CAA4C,CAAA;AAEjE;;;;;;GAMG;AACH,IAAI,SAAsC,CAAA;AAE1C,MAAM,UAAU,wBAAwB,CAAC,MAAqB;IAC5D,SAAS,GAAG,MAAM,CAAA;AACpB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,2BAA2B;IACzC,SAAS,GAAG,SAAS,CAAA;AACvB,CAAC;AAMD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,MAAM,YAAY,GAAI,GAAyB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,CAAA;IACjF,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,YAAY,CAAA;IAC5E,IAAI,CAAC;QACH,OAAO,SAAS,EAAE,EAAE,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,wEAAwE;QACxE,mBAAmB;QACnB,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,SAAS,QAAQ,CAAC,YAAqB,EAAE,KAAa,EAAE,MAAsB;IAC5E,MAAM,KAAK,GAAI,YAAoD,EAAE,CAAC,KAAK,CAAC,CAAA;IAC5E,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACvD,MAAM,KAAK,GAAI,KAAiC,CAAC,MAAM,CAAC,CAAA;IACxD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAA;IACzE,2EAA2E;IAC3E,6DAA6D;IAC7D,OAAO,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;AACxF,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,OAAO,QAAQ,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,CAAA;AACnE,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,OAAO,QAAQ,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,CAAA;AAClE,CAAC"}

package/dist/tools/confirm.d.ts

@@ -0,0 +1,84 @@
+/**
+ * The confirmation that stands between a model and the outside world.
+ *
+ * The project's central rule is that a boundary living in a system prompt is
+ * not a boundary. Mail is text written by strangers, handed to a model that can
+ * call tools, so a prepared message can ask for itself to be forwarded. The
+ * answer is a round trip through the protocol that the server, not the prompt,
+ * insists on.
+ *
+ * Three properties make it worth more than a formality:
+ *
+ * 1. **It fails closed.** A client that cannot show a form does not get to
+ *    send. There is no fallback that goes ahead without a yes, and no setting
+ *    that turns the question off. That is a deliberate difference from the
+ *    sign-in prompt, where a client that cannot elicit gets a text answer: the
+ *    worst outcome there is an inconvenience, and here it is a message that
+ *    cannot be recalled.
+ * 2. **The yes is bound to one specific message.** A digest of the recipients,
+ *    the subject and the body is sealed into `requestState`, which travels
+ *    through the client and comes back. On the second round the digest is
+ *    recomputed from what the client now asks for and compared. If it differs,
+ *    nothing is sent: what was confirmed is not what was requested. The seal is
+ *    an HMAC, so the client cannot mint or alter one, and it is bound to the
+ *    tool so a confirmation for one cannot be replayed at another.
+ * 3. **The question shows what actually goes out.** Recipients separated into
+ *    To, Cc and Bcc, the subject, and the first lines of the body, all derived
+ *    from the same object the digest covers and the sender builds from.
+ *
+ * ## Why this is a returned value rather than a call
+ *
+ * The same reason as the sign-in prompt, and it is written out in
+ * sign-in-required.ts: protocol revision 2026-07-28 has no server-to-client
+ * request channel, so `elicitInput` throws on every request this server will
+ * serve. The handler returns `inputRequired(...)` instead and the client calls
+ * the tool again.
+ */
+import type { CallToolResult, InputRequiredResult } from '@modelcontextprotocol/server';
+import { type Draft } from '../mail/compose.js';
+/** The key our embedded elicitation is filed under. */
+export declare const CONFIRM_KEY = "protonMcpSendConfirmation";
+/** What travels through the client and comes back, sealed. */
+export interface PendingSend {
+    /** Which tool asked. A confirmation for one must not work for another. */
+    tool: string;
+    /** Covers exactly what the user was shown. */
+    digest: string;
+}
+/**
+ * A fingerprint of everything that would leave the machine.
+ *
+ * Every field a recipient would see, and nothing else: two calls that differ
+ * only in which mailbox a draft was looked up in describe the same message and
+ * must not be told apart, while a changed address must be.
+ */
+export declare function digestOf(draft: Draft): string;
+/**
+ * Whether the client said it can show a form.
+ *
+ * Asked rather than attempted, because an embedded request the client never
+ * declared is refused by the SDK after the handler has already returned. The
+ * caller would then get that refusal instead of a question, and the tool would
+ * have to decide what to do about a confirmation that never appeared. Better to
+ * know beforehand and refuse plainly.
+ *
+ * Where the declaration is read from is capabilities.ts, and it is worth
+ * following that link once: reading it from the wrong place is what made every
+ * send refuse in v0.4.0.
+ */
+export declare function clientCanConfirm(ctx: unknown): boolean;
+/** What the message would look like to the person being asked. */
+export declare function describeForConfirmation(draft: Draft, what: string): string;
+/** The question, returned from the handler rather than pushed to the client. */
+export declare function confirmationRequest(draft: Draft, what: string, requestState: string): InputRequiredResult;
+/** What the client sent back, if anything. */
+export declare function confirmationAnswer(ctx: unknown): 'missing' | 'yes' | 'no';
+/** The sealed state from a previous round, already verified by the SDK. */
+export declare function pendingSend(ctx: unknown): PendingSend | undefined;
+/** Refusals, in one place so they read the same wherever they come from. */
+export declare const refuse: {
+    noElicitation: () => CallToolResult;
+    declined: () => CallToolResult;
+    changed: () => CallToolResult;
+    wrongTool: () => CallToolResult;
+};

package/dist/tools/confirm.js

@@ -0,0 +1,212 @@
+/**
+ * The confirmation that stands between a model and the outside world.
+ *
+ * The project's central rule is that a boundary living in a system prompt is
+ * not a boundary. Mail is text written by strangers, handed to a model that can
+ * call tools, so a prepared message can ask for itself to be forwarded. The
+ * answer is a round trip through the protocol that the server, not the prompt,
+ * insists on.
+ *
+ * Three properties make it worth more than a formality:
+ *
+ * 1. **It fails closed.** A client that cannot show a form does not get to
+ *    send. There is no fallback that goes ahead without a yes, and no setting
+ *    that turns the question off. That is a deliberate difference from the
+ *    sign-in prompt, where a client that cannot elicit gets a text answer: the
+ *    worst outcome there is an inconvenience, and here it is a message that
+ *    cannot be recalled.
+ * 2. **The yes is bound to one specific message.** A digest of the recipients,
+ *    the subject and the body is sealed into `requestState`, which travels
+ *    through the client and comes back. On the second round the digest is
+ *    recomputed from what the client now asks for and compared. If it differs,
+ *    nothing is sent: what was confirmed is not what was requested. The seal is
+ *    an HMAC, so the client cannot mint or alter one, and it is bound to the
+ *    tool so a confirmation for one cannot be replayed at another.
+ * 3. **The question shows what actually goes out.** Recipients separated into
+ *    To, Cc and Bcc, the subject, and the first lines of the body, all derived
+ *    from the same object the digest covers and the sender builds from.
+ *
+ * ## Why this is a returned value rather than a call
+ *
+ * The same reason as the sign-in prompt, and it is written out in
+ * sign-in-required.ts: protocol revision 2026-07-28 has no server-to-client
+ * request channel, so `elicitInput` throws on every request this server will
+ * serve. The handler returns `inputRequired(...)` instead and the client calls
+ * the tool again.
+ */
+import { createHash } from 'node:crypto';
+import { inputRequired, acceptedContent } from '@modelcontextprotocol/server';
+import { describeAttachments, describeRecipients, describeUrls, fingerprintPart, firstLines, hiddenTextOf, composedBody, showRecipient, summariseQuote, } from '../mail/compose.js';
+import { canElicitForm } from './capabilities.js';
+/** The key our embedded elicitation is filed under. */
+export const CONFIRM_KEY = 'protonMcpSendConfirmation';
+/**
+ * A fingerprint of everything that would leave the machine.
+ *
+ * Every field a recipient would see, and nothing else: two calls that differ
+ * only in which mailbox a draft was looked up in describe the same message and
+ * must not be told apart, while a changed address must be.
+ */
+export function digestOf(draft) {
+    const canonical = JSON.stringify({
+        from: draft.from.address,
+        to: draft.to.map((r) => r.address).sort(),
+        cc: draft.cc.map((r) => r.address).sort(),
+        bcc: draft.bcc.map((r) => r.address).sort(),
+        subject: draft.subject,
+        text: draft.text,
+        // The markup source, not the readable rendering of it. Two messages can
+        // read identically and differ in every link target, which is the whole
+        // reason formatted mail needs a confirmation at all.
+        html: draft.html ?? null,
+        // The quote is part of what goes out, so it is part of what was agreed to.
+        quoted: draft.quotedHtml ?? null,
+        inReplyTo: draft.inReplyTo ?? null,
+        attached: draft.attachedMessage?.filename ?? null,
+        // The contents of every carried file, not just its name. A confirmation
+        // that covered the name alone would let the picture be swapped after it
+        // was agreed to.
+        parts: (draft.inlineParts ?? [])
+            .map((part) => `${part.contentId}:${part.contentType}:${fingerprintPart(part.content)}`)
+            .sort(),
+    });
+    return createHash('sha256').update(canonical).digest('hex');
+}
+/**
+ * Whether the client said it can show a form.
+ *
+ * Asked rather than attempted, because an embedded request the client never
+ * declared is refused by the SDK after the handler has already returned. The
+ * caller would then get that refusal instead of a question, and the tool would
+ * have to decide what to do about a confirmation that never appeared. Better to
+ * know beforehand and refuse plainly.
+ *
+ * Where the declaration is read from is capabilities.ts, and it is worth
+ * following that link once: reading it from the wrong place is what made every
+ * send refuse in v0.4.0.
+ */
+export function clientCanConfirm(ctx) {
+    return canElicitForm(ctx);
+}
+/** What the message would look like to the person being asked. */
+export function describeForConfirmation(draft, what) {
+    const lines = [
+        `${what} would be sent from ${showRecipient(draft.from)}.`,
+        '',
+        describeRecipients(draft),
+        `Subject: ${draft.subject || '(no subject)'}`,
+        '',
+        'The message begins:',
+        firstLines(composedBody(draft)),
+    ];
+    // A quoted message is named rather than listed. Measured on a real mailbox:
+    // four images per message on average and up to thirty links. Listing those
+    // would bury the two addresses the sender is answering for under thirty that
+    // arrived in their mailbox anyway, and a confirmation nobody reads to the end
+    // protects nobody.
+    const quoted = summariseQuote(draft);
+    if (quoted) {
+        lines.push('', `Below that, the message being answered is quoted as it was written, with ` +
+            `${quoted.links} link(s) and ${quoted.images} image(s) of its own. Those are not listed ` +
+            'here: they arrived in your mailbox already, and the addresses shown below are the ones ' +
+            'this message adds.');
+    }
+    // Everything below is shown in full and never shortened. The excerpt above
+    // stops after a few lines, and an address on line thirty is exactly where one
+    // would be put in order not to be read.
+    const urls = describeUrls(draft);
+    if (urls.length) {
+        lines.push('', `Every address in this message (${urls.length}):`);
+        for (const url of urls) {
+            const shown = url.kind === 'link' ? `shown as "${url.label || '(no text)'}"` : `image${url.label ? `, described as "${url.label}"` : ''}`;
+            lines.push(`  ${url.url}`, `      ${shown}`);
+        }
+        lines.push('  A link\'s text and its address are two different things. Read the addresses.');
+    }
+    // Measured: an image's alt text is what a recipient reads, because clients
+    // block remote images by default, and it never appears in the body above.
+    const hidden = hiddenTextOf(draft);
+    if (hidden.length) {
+        lines.push('', 'Text a recipient can read that is not in the body above:');
+        for (const entry of hidden)
+            lines.push(`  ${entry}`);
+    }
+    if (quoted?.hiddenText.length) {
+        lines.push('', `The quoted message also carries ${quoted.hiddenText.length} alt text(s) or titles.`);
+    }
+    const files = describeAttachments(draft);
+    if (files.length) {
+        lines.push('', `Carried with it (${files.length}):`);
+        for (const file of files)
+            lines.push(`  ${file}`);
+    }
+    lines.push('', 'Sending cannot be undone. Confirm only if these recipients are the ones you meant.');
+    return lines.join('\n');
+}
+/** The question, returned from the handler rather than pushed to the client. */
+export function confirmationRequest(draft, what, requestState) {
+    return inputRequired({
+        requestState,
+        inputRequests: {
+            [CONFIRM_KEY]: inputRequired.elicit({
+                message: describeForConfirmation(draft, what),
+                requestedSchema: {
+                    type: 'object',
+                    properties: {
+                        confirm: {
+                            type: 'boolean',
+                            title: 'Send this message',
+                            description: 'Tick only if the recipients above are the ones you meant.',
+                        },
+                    },
+                    required: ['confirm'],
+                },
+            }),
+        },
+    });
+}
+/** What the client sent back, if anything. */
+export function confirmationAnswer(ctx) {
+    const responses = ctx?.mcpReq?.inputResponses;
+    if (!responses)
+        return 'missing';
+    const content = acceptedContent(responses, CONFIRM_KEY);
+    // Absent means declined, cancelled, or a response of another kind. Anything
+    // that is not an explicit true is a no, including a missing field: this is
+    // the one place where being generous would mean sending mail nobody asked for.
+    if (content === undefined)
+        return 'no';
+    return content.confirm === true ? 'yes' : 'no';
+}
+/** The sealed state from a previous round, already verified by the SDK. */
+export function pendingSend(ctx) {
+    const accessor = ctx?.mcpReq?.requestState;
+    if (typeof accessor !== 'function')
+        return undefined;
+    const state = accessor();
+    if (!state || typeof state !== 'object')
+        return undefined;
+    return typeof state.tool === 'string' && typeof state.digest === 'string' ? state : undefined;
+}
+const failure = (text) => ({
+    content: [{ type: 'text', text }],
+    isError: true,
+});
+/** Refusals, in one place so they read the same wherever they come from. */
+export const refuse = {
+    noElicitation: () => failure('This client cannot show a confirmation, so nothing was sent.\n\n' +
+        'Every message this server sends has to be confirmed by a person through the protocol\'s ' +
+        'elicitation mechanism, and a client that does not support it cannot be asked. There is no ' +
+        'setting that turns the confirmation off: mail cannot be recalled, and a model reading a ' +
+        'message written by a stranger is exactly the situation this guards against.\n\n' +
+        'Write the message as a draft instead, with create_draft or reply_draft, and send it from ' +
+        'Proton itself.'),
+    declined: () => failure('The user did not confirm, so nothing was sent. The message was not changed.'),
+    changed: () => failure('Nothing was sent: the message is not the one that was confirmed.\n\n' +
+        'The confirmation is bound to the exact recipients, subject and text that were shown. ' +
+        'Something differs now, so the yes does not apply. Ask again with the message as it should ' +
+        'go out, and the user will see what they are agreeing to.'),
+    wrongTool: () => failure('Nothing was sent: the confirmation belongs to a different operation and cannot be reused ' +
+        'for this one.'),
+};
+//# sourceMappingURL=confirm.js.map

package/dist/tools/confirm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm.js","sourceRoot":"","sources":["../../src/tools/confirm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AAE7E,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,cAAc,GAEf,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEjD,uDAAuD;AACvD,MAAM,CAAC,MAAM,WAAW,GAAG,2BAA2B,CAAA;AAkBtD;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAY;IACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;QACxB,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;QACzC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;QACzC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;QAC3C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,wEAAwE;QACxE,uEAAuE;QACvE,qDAAqD;QACrD,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;QACxB,2EAA2E;QAC3E,MAAM,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,QAAQ,EAAE,KAAK,CAAC,eAAe,EAAE,QAAQ,IAAI,IAAI;QACjD,wEAAwE;QACxE,wEAAwE;QACxE,iBAAiB;QACjB,KAAK,EAAE,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;aAC7B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;aACvF,IAAI,EAAE;KACV,CAAC,CAAA;IACF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC7D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO,aAAa,CAAC,GAAG,CAAC,CAAA;AAC3B,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,uBAAuB,CAAC,KAAY,EAAE,IAAY;IAChE,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,uBAAuB,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG;QAC1D,EAAE;QACF,kBAAkB,CAAC,KAAK,CAAC;QACzB,YAAY,KAAK,CAAC,OAAO,IAAI,cAAc,EAAE;QAC7C,EAAE;QACF,qBAAqB;QACrB,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;KAChC,CAAA;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,mBAAmB;IACnB,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CACR,EAAE,EACF,2EAA2E;YACzE,GAAG,MAAM,CAAC,KAAK,gBAAgB,MAAM,CAAC,MAAM,6CAA6C;YACzF,yFAAyF;YACzF,oBAAoB,CACvB,CAAA;IACH,CAAC;IAED,2EAA2E;IAC3E,8EAA8E;IAC9E,wCAAwC;IACxC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IAChC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,kCAAkC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAA;QACjE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,KAAK,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;YACzI,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,EAAE,EAAE,SAAS,KAAK,EAAE,CAAC,CAAA;QAC9C,CAAC;QACD,KAAK,CAAC,IAAI,CACR,gFAAgF,CACjF,CAAA;IACH,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IAClC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,0DAA0D,CAAC,CAAA;QAC1E,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,IAAI,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,mCAAmC,MAAM,CAAC,UAAU,CAAC,MAAM,yBAAyB,CAAC,CAAA;IACtG,CAAC;IAED,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAA;IACxC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,KAAK,CAAC,MAAM,IAAI,CAAC,CAAA;QACpD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;IACnD,CAAC;IAED,KAAK,CAAC,IAAI,CACR,EAAE,EACF,oFAAoF,CACrF,CAAA;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CACjC,KAAY,EACZ,IAAY,EACZ,YAAoB;IAEpB,OAAO,aAAa,CAAC;QACnB,YAAY;QACZ,aAAa,EAAE;YACb,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC;gBAClC,OAAO,EAAE,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC;gBAC7C,eAAe,EAAE;oBACf,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,OAAO,EAAE;4BACP,IAAI,EAAE,SAAS;4BACf,KAAK,EAAE,mBAAmB;4BAC1B,WAAW,EAAE,2DAA2D;yBACzE;qBACF;oBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;iBACtB;aACF,CAAC;SACH;KACF,CAAC,CAAA;AACJ,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,MAAM,SAAS,GAAI,GAAsB,EAAE,MAAM,EAAE,cAAc,CAAA;IACjE,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAA;IAChC,MAAM,OAAO,GAAG,eAAe,CAAwB,SAAS,EAAE,WAAW,CAAC,CAAA;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,+EAA+E;IAC/E,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACtC,OAAO,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AAChD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,MAAM,QAAQ,GAAI,GAAsB,EAAE,MAAM,EAAE,YAAY,CAAA;IAC9D,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,OAAO,SAAS,CAAA;IACpD,MAAM,KAAK,GAAG,QAAQ,EAAe,CAAA;IACrC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACzD,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC/F,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,IAAY,EAAkB,EAAE,CAAC,CAAC;IACjD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjC,OAAO,EAAE,IAAI;CACd,CAAC,CAAA;AAEF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,aAAa,EAAE,GAAmB,EAAE,CAClC,OAAO,CACL,kEAAkE;QAChE,0FAA0F;QAC1F,4FAA4F;QAC5F,0FAA0F;QAC1F,iFAAiF;QACjF,2FAA2F;QAC3F,gBAAgB,CACnB;IACH,QAAQ,EAAE,GAAmB,EAAE,CAC7B,OAAO,CAAC,6EAA6E,CAAC;IACxF,OAAO,EAAE,GAAmB,EAAE,CAC5B,OAAO,CACL,sEAAsE;QACpE,uFAAuF;QACvF,4FAA4F;QAC5F,0DAA0D,CAC7D;IACH,SAAS,EAAE,GAAmB,EAAE,CAC9B,OAAO,CACL,2FAA2F;QACzF,eAAe,CAClB;CACJ,CAAA"}

package/dist/tools/drafts.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Tools: create_draft, update_draft, reply_draft, forward_draft, list_drafts.
+ *
+ * A draft is where a prepared message belongs. Nothing here sends, and nothing
+ * here can: none of these functions knows the SMTP port exists. Sending is a
+ * separate tool behind a confirmation the server enforces.
+ *
+ * That separation is the feature, not an implementation detail. A model that
+ * has read a message written by a stranger can be talked into preparing a
+ * reply; it must not be able to be talked into delivering one.
+ */
+import type { McpServer } from '@modelcontextprotocol/server';
+import type { Connection } from '../bridge/connection.js';
+/**
+ * Where the message comes from.
+ *
+ * A function, because nobody may be signed in yet when the tools are registered
+ * and the address can change while the server runs.
+ */
+export type FromAddress = () => string | undefined;
+export declare function registerDraftTools(server: McpServer, connection: Connection, readOnly: () => boolean, from: FromAddress): void;

package/dist/tools/drafts.js

@@ -0,0 +1,199 @@
+/**
+ * Tools: create_draft, update_draft, reply_draft, forward_draft, list_drafts.
+ *
+ * A draft is where a prepared message belongs. Nothing here sends, and nothing
+ * here can: none of these functions knows the SMTP port exists. Sending is a
+ * separate tool behind a confirmation the server enforces.
+ *
+ * That separation is the feature, not an implementation detail. A model that
+ * has read a message written by a stranger can be talked into preparing a
+ * reply; it must not be able to be talked into delivering one.
+ */
+import * as z from 'zod';
+import { createDraft, updateDraft, replyDraft, forwardDraft, listDrafts, DRAFTS, } from '../mail/drafts.js';
+import { describeRecipients, MARKUP_NOTE, PLAIN_TEXT_NOTE, UTF8_NOTE } from '../mail/compose.js';
+import { BridgeError } from '../bridge/errors.js';
+import { formatList } from './format.js';
+import { describeFailure, withSignIn } from './failures.js';
+import { track } from '../in-flight.js';
+const ok = (text) => ({ content: [{ type: 'text', text }] });
+/** Written into every answer that created or changed a draft. */
+function describeDraft(draft, what) {
+    const lines = [
+        `${what} in "${DRAFTS}".`,
+        '',
+        `Subject: ${draft.subject || '(no subject)'}`,
+        describeRecipients(draft),
+        `Id: ${draft.messageId}`,
+    ];
+    if (draft.carriedAttachments?.length) {
+        lines.push('', `The original carried ${draft.carriedAttachments.length} attachment(s): ` +
+            `${draft.carriedAttachments.join(', ')}. The whole original message is attached to the ` +
+            'draft, so nothing of it is lost.');
+    }
+    lines.push('', 'Nothing has been sent. Use send_draft when the message is ready; that asks the user to ' +
+        'confirm before anything leaves the machine.');
+    return lines.join('\n');
+}
+const addressList = (what) => z
+    .array(z.string())
+    .optional()
+    .describe(`${what} Each entry is an address, optionally as "Display Name <name@example.com>".`);
+const messageArgument = z
+    .string()
+    .describe('The message id from a listing or a search, with or without angle brackets.');
+function requireFrom(from) {
+    const address = from();
+    if (!address) {
+        throw new BridgeError('Nobody is signed in, so there is no address to write from. Sign in through the ' +
+            'configuration page first.');
+    }
+    return address;
+}
+export function registerDraftTools(server, connection, readOnly, from) {
+    server.registerTool('create_draft', {
+        title: 'Create a draft',
+        description: 'Writes a new draft into the Drafts mailbox. Nothing is sent. The draft is plain text: ' +
+            'Proton drops the plain text part of a message that also carries HTML, so composing HTML ' +
+            'would mean the recipient sees something other than what was written here. ' +
+            'Attachments from files on this machine are not supported on purpose. ' +
+            PLAIN_TEXT_NOTE + ' ' + MARKUP_NOTE + ' ' + UTF8_NOTE,
+        inputSchema: z.object({
+            to: addressList('The main recipients.'),
+            cc: addressList('Recipients in copy, visible to everyone.'),
+            bcc: addressList('Recipients in blind copy, hidden from the others but they do receive it.'),
+            subject: z.string().optional().describe('The subject line.'),
+            text: z.string().optional().describe('The body, as plain text.'),
+            html: z
+                .string()
+                .optional()
+                .describe('The body as markup instead of plain text. Give this or text, not both. Permitted ' +
+                'are headings, paragraphs, line breaks, rules, quotes, emphasis, lists, tables, ' +
+                'links and images, with colour, font, alignment, spacing and borders. Images may ' +
+                'point at a full address; anything outside the permitted set is refused with a ' +
+                'reason rather than removed.'),
+        }),
+        annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },
+    }, async (input, ctx) => track(() => withSignIn(ctx, async () => {
+        try {
+            const draft = await createDraft(connection, readOnly(), requireFrom(from), input);
+            return ok(describeDraft(draft, 'Draft written'));
+        }
+        catch (error) {
+            return describeFailure(error, 'creating the draft');
+        }
+    }), 'create_draft'));
+    server.registerTool('update_draft', {
+        title: 'Change a draft',
+        description: 'Replaces a draft with a changed version, keeping the same id. Fields that are not given ' +
+            'are carried over, including the blind copies, which drafts written here keep. Only ' +
+            'messages in the Drafts mailbox that carry the draft flag can be changed this way. ' +
+            PLAIN_TEXT_NOTE + ' ' + MARKUP_NOTE + ' ' + UTF8_NOTE,
+        inputSchema: z.object({
+            messageId: messageArgument,
+            to: addressList('Replaces the main recipients.'),
+            cc: addressList('Replaces the copies.'),
+            bcc: addressList('Replaces the blind copies.'),
+            subject: z.string().optional().describe('Replaces the subject.'),
+            text: z.string().optional().describe('Replaces the body.'),
+            html: z
+                .string()
+                .optional()
+                .describe('Replaces the body with markup. Give this or text, not both. Permitted ' +
+                'are headings, paragraphs, line breaks, rules, quotes, emphasis, lists, tables, ' +
+                'links and images, with colour, font, alignment, spacing and borders. Images may ' +
+                'point at a full address; anything outside the permitted set is refused with a ' +
+                'reason rather than removed.'),
+        }),
+        annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },
+    }, async ({ messageId, ...changes }, ctx) => track(() => withSignIn(ctx, async () => {
+        try {
+            const draft = await updateDraft(connection, readOnly(), requireFrom(from), messageId, changes);
+            return ok(describeDraft(draft, 'Draft replaced'));
+        }
+        catch (error) {
+            return describeFailure(error, 'changing the draft');
+        }
+    }), 'update_draft'));
+    server.registerTool('reply_draft', {
+        title: 'Prepare a reply as a draft',
+        description: 'Writes a reply to a message as a draft. The recipient is the message\'s Reply-To if it ' +
+            'set one, otherwise its sender. The original is quoted below the new text. Nothing is sent. ' +
+            'Note on threading: the reply is built with In-Reply-To and References, but Proton replaces ' +
+            'those with its own internal thread id when it stores a draft, so a draft that is stored ' +
+            'and sent later carries Proton\'s idea of the conversation rather than ours. ' +
+            PLAIN_TEXT_NOTE + ' ' + MARKUP_NOTE + ' ' + UTF8_NOTE,
+        inputSchema: z.object({
+            messageId: messageArgument,
+            text: z.string().describe('The reply itself. The original is quoted below it.'),
+            replyAll: z
+                .boolean()
+                .default(false)
+                .describe('When true, the other recipients of the original are put in copy.'),
+            html: z
+                .string()
+                .optional()
+                .describe('Your part of the message as markup instead of plain text. The original is quoted ' +
+                'below it either way. The quote is always built from the original\'s text, never ' +
+                'from its own markup, so a message full of markup this server would not send can ' +
+                'still be replied to or forwarded.'),
+            mailbox: z.string().optional().describe('The mailbox the original is in, if known.'),
+        }),
+        annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },
+    }, async ({ messageId, text, replyAll, mailbox, html }, ctx) => track(() => withSignIn(ctx, async () => {
+        try {
+            const draft = await replyDraft(connection, readOnly(), requireFrom(from), messageId, text, { all: replyAll, ...(mailbox ? { mailbox } : {}), ...(html !== undefined ? { html } : {}) });
+            return ok(describeDraft(draft, 'Reply written'));
+        }
+        catch (error) {
+            return describeFailure(error, 'preparing the reply');
+        }
+    }), 'reply_draft'));
+    server.registerTool('forward_draft', {
+        title: 'Prepare a forward as a draft',
+        description: 'Writes a forward of a message as a draft. The original is quoted below the new text, and ' +
+            'when it carries attachments the whole original message is attached as well, so nothing of ' +
+            'it is lost. Nothing is sent. ' +
+            PLAIN_TEXT_NOTE + ' ' + MARKUP_NOTE + ' ' + UTF8_NOTE,
+        inputSchema: z.object({
+            messageId: messageArgument,
+            to: z.array(z.string()).min(1).describe('Who to forward it to.'),
+            text: z.string().default('').describe('Anything to say above the forwarded message.'),
+            html: z
+                .string()
+                .optional()
+                .describe('Your part of the message as markup instead of plain text. The original is quoted ' +
+                'below it either way. The quote is always built from the original\'s text, never ' +
+                'from its own markup, so a message full of markup this server would not send can ' +
+                'still be replied to or forwarded.'),
+            mailbox: z.string().optional().describe('The mailbox the original is in, if known.'),
+        }),
+        annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },
+    }, async ({ messageId, to, text, mailbox, html }, ctx) => track(() => withSignIn(ctx, async () => {
+        try {
+            const draft = await forwardDraft(connection, readOnly(), requireFrom(from), messageId, to, text, { ...(mailbox ? { mailbox } : {}), ...(html !== undefined ? { html } : {}) });
+            return ok(describeDraft(draft, 'Forward written'));
+        }
+        catch (error) {
+            return describeFailure(error, 'preparing the forward');
+        }
+    }), 'forward_draft'));
+    server.registerTool('list_drafts', {
+        title: 'List drafts',
+        description: 'Lists the drafts, newest first. Headers only, like every listing here. Use get_message ' +
+            'with an id to read one.',
+        inputSchema: z.object({
+            limit: z.number().int().min(1).max(100).default(25).describe('How many to return.'),
+            offset: z.number().int().min(0).default(0).describe('How many to skip, for paging.'),
+        }),
+        annotations: { readOnlyHint: true, openWorldHint: false },
+    }, async ({ limit, offset }, ctx) => track(() => withSignIn(ctx, async () => {
+        try {
+            return ok(formatList(await listDrafts(connection, { limit, offset })));
+        }
+        catch (error) {
+            return describeFailure(error, 'listing the drafts');
+        }
+    }), 'list_drafts'));
+}
+//# sourceMappingURL=drafts.js.map

package/dist/tools/drafts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drafts.js","sourceRoot":"","sources":["../../src/tools/drafts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,CAAC,MAAM,KAAK,CAAA;AAGxB,OAAO,EACL,WAAW,EACX,WAAW,EACX,UAAU,EACV,YAAY,EACZ,UAAU,EACV,MAAM,GAEP,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAChG,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAEvC,MAAM,EAAE,GAAG,CAAC,IAAY,EAAkB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;AAEpF,iEAAiE;AACjE,SAAS,aAAa,CAAC,KAAkB,EAAE,IAAY;IACrD,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,QAAQ,MAAM,IAAI;QACzB,EAAE;QACF,YAAY,KAAK,CAAC,OAAO,IAAI,cAAc,EAAE;QAC7C,kBAAkB,CAAC,KAAK,CAAC;QACzB,OAAO,KAAK,CAAC,SAAS,EAAE;KACzB,CAAA;IACD,IAAI,KAAK,CAAC,kBAAkB,EAAE,MAAM,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CACR,EAAE,EACF,wBAAwB,KAAK,CAAC,kBAAkB,CAAC,MAAM,kBAAkB;YACvE,GAAG,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,kDAAkD;YACxF,kCAAkC,CACrC,CAAA;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,yFAAyF;QACvF,6CAA6C,CAChD,CAAA;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CACnC,CAAC;KACE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACjB,QAAQ,EAAE;KACV,QAAQ,CAAC,GAAG,IAAI,6EAA6E,CAAC,CAAA;AAEnG,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,EAAE;KACR,QAAQ,CAAC,4EAA4E,CAAC,CAAA;AAUzF,SAAS,WAAW,CAAC,IAAiB;IACpC,MAAM,OAAO,GAAG,IAAI,EAAE,CAAA;IACtB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,iFAAiF;YAC/E,2BAA2B,CAC9B,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAiB,EACjB,UAAsB,EACtB,QAAuB,EACvB,IAAiB;IAEjB,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,gBAAgB;QACvB,WAAW,EACT,wFAAwF;YACxF,0FAA0F;YAC1F,4EAA4E;YAC5E,uEAAuE;YACvE,eAAe,GAAG,GAAG,GAAG,WAAW,GAAG,GAAG,GAAG,SAAS;QACvD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,EAAE,EAAE,WAAW,CAAC,sBAAsB,CAAC;YACvC,EAAE,EAAE,WAAW,CAAC,0CAA0C,CAAC;YAC3D,GAAG,EAAE,WAAW,CAAC,0EAA0E,CAAC;YAC5F,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAC5D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;YAChE,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,mFAAmF;gBACjF,iFAAiF;gBACjF,kFAAkF;gBAClF,gFAAgF;gBAChF,6BAA6B,CAChC;SACJ,CAAC;QACF,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;KAC1G,EACD,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CACnB,KAAK,CACH,GAAG,EAAE,CACH,UAAU,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;QACzB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAA;YACjF,OAAO,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAA;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,eAAe,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAA;QACrD,CAAC;IACH,CAAC,CAAC,EACJ,cAAc,CACf,CACJ,CAAA;IAED,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,gBAAgB;QACvB,WAAW,EACT,0FAA0F;YAC1F,qFAAqF;YACrF,oFAAoF;YACpF,eAAe,GAAG,GAAG,GAAG,WAAW,GAAG,GAAG,GAAG,SAAS;QACvD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,SAAS,EAAE,eAAe;YAC1B,EAAE,EAAE,WAAW,CAAC,+BAA+B,CAAC;YAChD,EAAE,EAAE,WAAW,CAAC,sBAAsB,CAAC;YACvC,GAAG,EAAE,WAAW,CAAC,4BAA4B,CAAC;YAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAChE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YAC1D,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,wEAAwE;gBACtE,iFAAiF;gBACjF,kFAAkF;gBAClF,gFAAgF;gBAChF,6BAA6B,CAChC;SACJ,CAAC;QACF,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;KAC1G,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,CACvC,KAAK,CACH,GAAG,EAAE,CACH,UAAU,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;QACzB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,UAAU,EACV,QAAQ,EAAE,EACV,WAAW,CAAC,IAAI,CAAC,EACjB,SAAS,EACT,OAAO,CACR,CAAA;YACD,OAAO,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAA;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,eAAe,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAA;QACrD,CAAC;IACH,CAAC,CAAC,EACJ,cAAc,CACf,CACJ,CAAA;IAED,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,4BAA4B;QACnC,WAAW,EACT,yFAAyF;YACzF,6FAA6F;YAC7F,6FAA6F;YAC7F,0FAA0F;YAC1F,8EAA8E;YAC9E,eAAe,GAAG,GAAG,GAAG,WAAW,GAAG,GAAG,GAAG,SAAS;QACvD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,SAAS,EAAE,eAAe;YAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;YAC/E,QAAQ,EAAE,CAAC;iBACR,OAAO,EAAE;iBACT,OAAO,CAAC,KAAK,CAAC;iBACd,QAAQ,CAAC,kEAAkE,CAAC;YAC/E,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,mFAAmF;gBACjF,kFAAkF;gBAClF,kFAAkF;gBAClF,mCAAmC,CACtC;YACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;SACrF,CAAC;QACF,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;KAC1G,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAC1D,KAAK,CACH,GAAG,EAAE,CACH,UAAU,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;QACzB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,UAAU,CAC5B,UAAU,EACV,QAAQ,EAAE,EACV,WAAW,CAAC,IAAI,CAAC,EACjB,SAAS,EACT,IAAI,EACJ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAC5F,CAAA;YACD,OAAO,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAA;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,eAAe,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAA;QACtD,CAAC;IACH,CAAC,CAAC,EACJ,aAAa,CACd,CACJ,CAAA;IAED,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,8BAA8B;QACrC,WAAW,EACT,2FAA2F;YAC3F,4FAA4F;YAC5F,+BAA+B;YAC/B,eAAe,GAAG,GAAG,GAAG,WAAW,GAAG,GAAG,GAAG,SAAS;QACvD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,SAAS,EAAE,eAAe;YAC1B,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAChE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,8CAA8C,CAAC;YACrF,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,mFAAmF;gBACjF,kFAAkF;gBAClF,kFAAkF;gBAClF,mCAAmC,CACtC;YACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;SACrF,CAAC;QACF,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;KAC1G,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CACpD,KAAK,CACH,GAAG,EAAE,CACH,UAAU,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;QACzB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,UAAU,EACV,QAAQ,EAAE,EACV,WAAW,CAAC,IAAI,CAAC,EACjB,SAAS,EACT,EAAE,EACF,IAAI,EACJ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAC7E,CAAA;YACD,OAAO,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAA;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,eAAe,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAA;QACxD,CAAC;IACH,CAAC,CAAC,EACJ,eAAe,CAChB,CACJ,CAAA;IAED,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,aAAa;QACpB,WAAW,EACT,yFAAyF;YACzF,yBAAyB;QAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YACnF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;SACrF,CAAC;QACF,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;KAC1D,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,CAC/B,KAAK,CACH,GAAG,EAAE,CACH,UAAU,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;QACzB,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,UAAU,CAAC,MAAM,UAAU,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,eAAe,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAA;QACrD,CAAC;IACH,CAAC,CAAC,EACJ,aAAa,CACd,CACJ,CAAA;AACH,CAAC"}