@rndmjoker/proton-mcp 0.4.4

package/dist/mail/markup.js

@@ -0,0 +1,265 @@
+/**
+ * Which markup a message may contain, and what has to be shown before it is sent.
+ *
+ * ## The measurement this is built on
+ *
+ * The obvious worry about formatted mail is CSS that hides text, and it is the
+ * wrong worry. Measured on 31.07.2026 against this server's own conversion:
+ * `display:none`, `font-size:0` and white-on-white all appear in the text
+ * preview, because the conversion reads the markup and does not apply styling.
+ * The preview therefore shows *more* than the recipient will see, which is the
+ * harmless direction: a person confirming reads everything.
+ *
+ * What is dangerous is the other direction, where the preview shows **less**
+ * than the recipient reads, and the same measurement found it:
+ *
+ * | Written | In the preview | What the recipient sees |
+ * | :--- | :--- | :--- |
+ * | `<img src="..." alt="TEXT">` | **nothing** | the alt text, because clients block remote images by default |
+ * | `<span title="TEXT">` | nothing | the title on hover |
+ * | `<style>p::before{content:"TEXT"}</style>` | nothing | generated text, in clients that keep style blocks |
+ * | `<noscript>`, `<textarea>` | the text | nothing, or something else |
+ *
+ * The first row is a working way past the confirmation. An assistant that has
+ * read a stranger's message could compose an image whose alt text carries the
+ * request, and the person confirming would see an empty message. Remote images
+ * are blocked by default in Proton and elsewhere, so the alt text is not a
+ * fallback, it is what actually arrives.
+ *
+ * Two conclusions, and they shape everything below:
+ *
+ * 1. **A list of what is permitted, not a filter for what is not.** `<style>`,
+ *    `<script>`, `<noscript>`, `<textarea>` and `<head>` are absent from the
+ *    list, so they are refused without anyone having had to think of them. That
+ *    is the whole argument for a positive list: what nobody anticipated does not
+ *    get through.
+ * 2. **Every piece of text a recipient can read is put in front of the person
+ *    confirming**, including the ones the preview drops: alt text, titles, and
+ *    every address behind a link or an image.
+ *
+ * The hiding properties are refused as well. Not because they defeat the
+ * preview, measured they do not, but because they let a message be delivered
+ * looking different from how it was written, and nothing is lost by saying no.
+ */
+import { Parser } from 'htmlparser2';
+import { BridgeError } from '../bridge/errors.js';
+/**
+ * The elements a message may use.
+ *
+ * Absent by design and worth naming, because the reason is the measurement
+ * above rather than taste: `style`, `script`, `noscript`, `textarea`, `head`,
+ * `title`, `meta`, `link`, `iframe`, `object`, `form`, `input`, `button`.
+ */
+export const PERMITTED_TAGS = new Set([
+    'html', 'body',
+    'h1', 'h2', 'h3', 'h4', 'p', 'br', 'hr', 'blockquote', 'div', 'span',
+    'b', 'strong', 'i', 'em', 'u', 's', 'code', 'pre', 'small', 'sub', 'sup',
+    'ul', 'ol', 'li', 'dl', 'dt', 'dd',
+    'table', 'thead', 'tbody', 'tfoot', 'tr', 'th', 'td', 'caption',
+    'a', 'img',
+]);
+/** Attributes each element may carry, on top of the ones allowed everywhere. */
+const PERMITTED_ATTRIBUTES = {
+    '*': ['style', 'title', 'dir', 'lang'],
+    a: ['href', 'target', 'rel'],
+    img: ['src', 'alt', 'width', 'height'],
+    // height sits beside width rather than being an omission with a reason. A
+    // table cell of a given height hides nothing: its content still renders, and
+    // the properties that do hide are refused as styles further down.
+    table: ['width', 'height', 'border', 'cellpadding', 'cellspacing', 'align'],
+    td: ['colspan', 'rowspan', 'align', 'valign', 'width', 'height'],
+    th: ['colspan', 'rowspan', 'align', 'valign', 'width', 'height'],
+    tr: ['align', 'valign', 'height'],
+    ol: ['start', 'type'],
+    blockquote: ['cite'],
+};
+/** Style properties a message may set. */
+export const PERMITTED_STYLES = new Set([
+    'color', 'background', 'background-color',
+    'font', 'font-family', 'font-size', 'font-style', 'font-weight', 'font-variant',
+    'text-align', 'text-decoration', 'text-transform', 'line-height', 'letter-spacing',
+    'padding', 'padding-top', 'padding-right', 'padding-bottom', 'padding-left',
+    'margin', 'margin-top', 'margin-right', 'margin-bottom', 'margin-left',
+    'border', 'border-top', 'border-right', 'border-bottom', 'border-left',
+    'border-color', 'border-style', 'border-width', 'border-radius', 'border-collapse',
+    'width', 'height', 'max-width', 'vertical-align', 'white-space', 'list-style',
+]);
+/**
+ * Properties that take a message out of sight without taking it out of the
+ * message. Refused whatever else is written.
+ */
+const HIDING_STYLES = new Set([
+    'display', 'visibility', 'opacity', 'position', 'z-index', 'overflow',
+    'clip', 'clip-path', 'transform', 'text-indent', 'float', 'content',
+    'max-height', 'min-height', 'mix-blend-mode', 'filter',
+]);
+/** Properties whose value must be a positive size. Zero is a way of hiding. */
+const MUST_BE_POSITIVE = new Set(['font-size', 'line-height', 'width', 'height', 'max-width']);
+/** A scheme in an href or src. Anything else is refused. */
+const PERMITTED_SCHEMES = ['http:', 'https:', 'mailto:', 'cid:'];
+function styleProblems(tag, style) {
+    const problems = [];
+    for (const declaration of style.split(';')) {
+        const [rawName, ...rest] = declaration.split(':');
+        const name = (rawName ?? '').trim().toLowerCase();
+        const value = rest.join(':').trim();
+        if (!name)
+            continue;
+        if (HIDING_STYLES.has(name)) {
+            problems.push({
+                found: `style "${name}" on <${tag}>`,
+                reason: `"${name}" can put text out of sight while leaving it in the message, so a recipient ` +
+                    'and the person who confirmed the send would not read the same thing. Style the message ' +
+                    'with colour, font and spacing instead.',
+            });
+            continue;
+        }
+        if (!PERMITTED_STYLES.has(name)) {
+            problems.push({
+                found: `style "${name}" on <${tag}>`,
+                reason: `"${name}" is not among the properties this server sends. Permitted are colour, ` +
+                    'background, font, alignment, spacing, borders and size.',
+            });
+            continue;
+        }
+        if (MUST_BE_POSITIVE.has(name) && /^0(\D|$)|^-/.test(value)) {
+            problems.push({
+                found: `style "${name}: ${value}" on <${tag}>`,
+                reason: `A "${name}" of zero or less makes text unreadable without removing it, which is the ` +
+                    'same as hiding it. Give it a real size or leave it out.',
+            });
+        }
+    }
+    return problems;
+}
+function urlProblem(tag, attribute, value) {
+    const trimmed = value.trim();
+    // A relative address has no meaning in a message: there is no page it is
+    // relative to, so it would simply be broken wherever it arrived.
+    if (!/^[a-z][a-z0-9+.-]*:/i.test(trimmed)) {
+        return {
+            found: `${attribute}="${trimmed}" on <${tag}>`,
+            reason: 'An address in a message has to be complete. A relative one has nothing to be relative ' +
+                'to once the message has been delivered. Write the whole address, including https://.',
+        };
+    }
+    const scheme = trimmed.slice(0, trimmed.indexOf(':') + 1).toLowerCase();
+    if (!PERMITTED_SCHEMES.includes(scheme)) {
+        return {
+            found: `${attribute}="${trimmed.slice(0, 40)}" on <${tag}>`,
+            reason: `"${scheme}" is not an address this server puts in a message. Permitted are ` +
+                `${PERMITTED_SCHEMES.join(', ')}. A "data:" address in particular would carry a whole ` +
+                'file inside the markup, where nothing lists it as an attachment.',
+        };
+    }
+    return undefined;
+}
+/**
+ * Reads a message's markup: what is wrong with it, and what has to be shown.
+ *
+ * One pass, because the two questions are the same walk over the document and
+ * answering them separately is how they drift apart.
+ */
+export function readMarkup(html) {
+    const problems = [];
+    const urls = [];
+    const hiddenText = [];
+    const contentIds = [];
+    // A link's text arrives as separate events between its tags, so it is
+    // collected while the link is open.
+    let openLink;
+    const parser = new Parser({
+        onopentag(name, attributes) {
+            const tag = name.toLowerCase();
+            if (!PERMITTED_TAGS.has(tag)) {
+                problems.push({
+                    found: `<${tag}>`,
+                    reason: `<${tag}> is not among the elements this server sends. Permitted are headings, ` +
+                        'paragraphs, line breaks, rules, quotes, emphasis, lists, tables, links and images.',
+                });
+                return;
+            }
+            const allowed = [...(PERMITTED_ATTRIBUTES['*'] ?? []), ...(PERMITTED_ATTRIBUTES[tag] ?? [])];
+            for (const [rawAttribute, value] of Object.entries(attributes)) {
+                const attribute = rawAttribute.toLowerCase();
+                if (!allowed.includes(attribute)) {
+                    problems.push({
+                        found: `${attribute}="${String(value).slice(0, 30)}" on <${tag}>`,
+                        reason: attribute.startsWith('on')
+                            ? 'An event handler has no place in a message. No mail client runs it, and ' +
+                                'what it contains would never be seen by anyone confirming the send.'
+                            : `<${tag}> may not carry "${attribute}" here.`,
+                    });
+                    continue;
+                }
+                if (attribute === 'style')
+                    problems.push(...styleProblems(tag, String(value)));
+                if (attribute === 'href' || attribute === 'src') {
+                    const problem = urlProblem(tag, attribute, String(value));
+                    if (problem)
+                        problems.push(problem);
+                }
+                // A title is read on hover and never appears in the text preview.
+                if (attribute === 'title' && String(value).trim()) {
+                    hiddenText.push(`title of <${tag}>: ${String(value).trim()}`);
+                }
+            }
+            if (tag === 'a' && typeof attributes.href === 'string') {
+                openLink = { url: attributes.href.trim(), text: '' };
+            }
+            if (tag === 'img' && typeof attributes.src === 'string') {
+                const src = attributes.src.trim();
+                const alt = typeof attributes.alt === 'string' ? attributes.alt.trim() : '';
+                urls.push({ kind: 'image', url: src, label: alt });
+                if (src.toLowerCase().startsWith('cid:'))
+                    contentIds.push(src.slice(4));
+                // The measurement that made this file necessary: an alt text is what
+                // the recipient reads whenever the image is not loaded, and clients
+                // do not load remote images by default. It is absent from the preview.
+                if (alt)
+                    hiddenText.push(`alt text of an image: ${alt}`);
+            }
+        },
+        ontext(text) {
+            if (openLink)
+                openLink.text += text;
+        },
+        onclosetag(name) {
+            if (name.toLowerCase() === 'a' && openLink) {
+                urls.push({ kind: 'link', url: openLink.url, label: openLink.text.trim() });
+                openLink = undefined;
+            }
+        },
+        oncomment() {
+            // Dropped by every reader and by the preview alike, so it hides nothing
+            // and is not worth refusing over.
+        },
+    }, { decodeEntities: true, lowerCaseTags: true, lowerCaseAttributeNames: true });
+    parser.write(html);
+    parser.end();
+    if (openLink)
+        urls.push({ kind: 'link', url: openLink.url, label: openLink.text.trim() });
+    return { problems, urls, hiddenText, contentIds };
+}
+/**
+ * Refuses markup this server will not send.
+ *
+ * Refused rather than repaired, deliberately. Stripping what is not permitted
+ * would mean the message that goes out is not the message that was written, and
+ * nobody would find out: not the caller, whose formatting quietly vanishes, and
+ * not the person confirming, who has nothing to compare against.
+ */
+export function assertSendableMarkup(html) {
+    const reading = readMarkup(html);
+    if (reading.problems.length === 0)
+        return reading;
+    const listed = reading.problems
+        .slice(0, 8)
+        .map((p) => `  - ${p.found}\n    ${p.reason}`)
+        .join('\n');
+    const more = reading.problems.length > 8 ? `\n  ...and ${reading.problems.length - 8} more.` : '';
+    throw new BridgeError(`This markup cannot be sent, so nothing was written or sent.\n\n${listed}${more}\n\n` +
+        'Markup is refused rather than cleaned up: a message that was quietly altered is no longer ' +
+        'the message anyone agreed to.');
+}
+//# sourceMappingURL=markup.js.map

package/dist/mail/markup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markup.js","sourceRoot":"","sources":["../../src/mail/markup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEjD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IACpC,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM;IACpE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK;IACxE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAClC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS;IAC/D,GAAG,EAAE,KAAK;CACX,CAAC,CAAA;AAEF,gFAAgF;AAChF,MAAM,oBAAoB,GAA6B;IACrD,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;IACtC,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;IAC5B,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC;IACtC,0EAA0E;IAC1E,6EAA6E;IAC7E,kEAAkE;IAClE,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,OAAO,CAAC;IAC3E,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;IAChE,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;IAChE,EAAE,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC;IACjC,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,CAAC,MAAM,CAAC;CACrB,CAAA;AAED,0CAA0C;AAC1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IACtC,OAAO,EAAE,YAAY,EAAE,kBAAkB;IACzC,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc;IAC/E,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB;IAClF,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc;IAC3E,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa;IACtE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa;IACtE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,iBAAiB;IAClF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY;CAC9E,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU;IACrE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS;IACnE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,QAAQ;CACvD,CAAC,CAAA;AAEF,+EAA+E;AAC/E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAA;AAE9F,4DAA4D;AAC5D,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;AA2BhE,SAAS,aAAa,CAAC,GAAW,EAAE,KAAa;IAC/C,MAAM,QAAQ,GAAoB,EAAE,CAAA;IACpC,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACjD,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;QACnC,IAAI,CAAC,IAAI;YAAE,SAAQ;QAEnB,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,UAAU,IAAI,SAAS,GAAG,GAAG;gBACpC,MAAM,EACJ,IAAI,IAAI,8EAA8E;oBACtF,yFAAyF;oBACzF,wCAAwC;aAC3C,CAAC,CAAA;YACF,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,UAAU,IAAI,SAAS,GAAG,GAAG;gBACpC,MAAM,EACJ,IAAI,IAAI,yEAAyE;oBACjF,yDAAyD;aAC5D,CAAC,CAAA;YACF,SAAQ;QACV,CAAC;QACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,UAAU,IAAI,KAAK,KAAK,SAAS,GAAG,GAAG;gBAC9C,MAAM,EACJ,MAAM,IAAI,4EAA4E;oBACtF,yDAAyD;aAC5D,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,SAAiB,EAAE,KAAa;IAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,yEAAyE;IACzE,iEAAiE;IACjE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,KAAK,EAAE,GAAG,SAAS,KAAK,OAAO,SAAS,GAAG,GAAG;YAC9C,MAAM,EACJ,wFAAwF;gBACxF,sFAAsF;SACzF,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IACvE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,OAAO;YACL,KAAK,EAAE,GAAG,SAAS,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,GAAG,GAAG;YAC3D,MAAM,EACJ,IAAI,MAAM,mEAAmE;gBAC7E,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,wDAAwD;gBACvF,kEAAkE;SACrE,CAAA;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,QAAQ,GAAoB,EAAE,CAAA;IACpC,MAAM,IAAI,GAAgB,EAAE,CAAA;IAC5B,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,MAAM,UAAU,GAAa,EAAE,CAAA;IAE/B,sEAAsE;IACtE,oCAAoC;IACpC,IAAI,QAAmD,CAAA;IAEvD,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;QACE,SAAS,CAAC,IAAI,EAAE,UAAU;YACxB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;YAC9B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,IAAI,GAAG,GAAG;oBACjB,MAAM,EACJ,IAAI,GAAG,yEAAyE;wBAChF,oFAAoF;iBACvF,CAAC,CAAA;gBACF,OAAM;YACR,CAAC;YAED,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YAC5F,KAAK,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/D,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,EAAE,CAAA;gBAC5C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBACjC,QAAQ,CAAC,IAAI,CAAC;wBACZ,KAAK,EAAE,GAAG,SAAS,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,GAAG,GAAG;wBACjE,MAAM,EACJ,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;4BACxB,CAAC,CAAC,0EAA0E;gCAC1E,qEAAqE;4BACvE,CAAC,CAAC,IAAI,GAAG,oBAAoB,SAAS,SAAS;qBACpD,CAAC,CAAA;oBACF,SAAQ;gBACV,CAAC;gBACD,IAAI,SAAS,KAAK,OAAO;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;gBAC9E,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;oBAChD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;oBACzD,IAAI,OAAO;wBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACrC,CAAC;gBACD,kEAAkE;gBAClE,IAAI,SAAS,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;oBAClD,UAAU,CAAC,IAAI,CAAC,aAAa,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;gBAC/D,CAAC;YACH,CAAC;YAED,IAAI,GAAG,KAAK,GAAG,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,QAAQ,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;YACtD,CAAC;YACD,IAAI,GAAG,KAAK,KAAK,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACxD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;gBACjC,MAAM,GAAG,GAAG,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;gBAC3E,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;gBAClD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;oBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;gBACvE,qEAAqE;gBACrE,oEAAoE;gBACpE,uEAAuE;gBACvE,IAAI,GAAG;oBAAE,UAAU,CAAC,IAAI,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAA;YAC1D,CAAC;QACH,CAAC;QACD,MAAM,CAAC,IAAI;YACT,IAAI,QAAQ;gBAAE,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAA;QACrC,CAAC;QACD,UAAU,CAAC,IAAI;YACb,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3C,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;gBAC3E,QAAQ,GAAG,SAAS,CAAA;YACtB,CAAC;QACH,CAAC;QACD,SAAS;YACP,wEAAwE;YACxE,kCAAkC;QACpC,CAAC;KACF,EACD,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAC7E,CAAA;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAClB,MAAM,CAAC,GAAG,EAAE,CAAA;IAEZ,IAAI,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAEzF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAChC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAA;IAEjD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ;SAC5B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;SAC7C,IAAI,CAAC,IAAI,CAAC,CAAA;IACb,MAAM,IAAI,GACR,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;IAEtF,MAAM,IAAI,WAAW,CACnB,kEAAkE,MAAM,GAAG,IAAI,MAAM;QACnF,4FAA4F;QAC5F,+BAA+B,CAClC,CAAA;AACH,CAAC"}

package/dist/mail/messages.d.ts

@@ -0,0 +1,147 @@
+/**
+ * Listing and reading messages.
+ *
+ * The guiding constraint is the context window, not the network. A real
+ * mailbox has a median message size of roughly 16200 tokens raw, so twenty raw
+ * messages exceed a full window. Listings therefore carry headers only, and
+ * full text is fetched one message at a time.
+ */
+import type { ImapFlow } from 'imapflow';
+import type { Connection } from '../bridge/connection.js';
+import { type ParsedMessage, type Address } from '../mime/parse.js';
+/** Upper bound for one listing. Deliberately low, callers can page. */
+export declare const MAX_LIST_LIMIT = 100;
+/** Character budget for a single message body. Roughly 6000 tokens. */
+export declare const DEFAULT_TEXT_BUDGET = 24000;
+export interface MessageHeader {
+    messageId: string;
+    subject: string;
+    from: Address[];
+    to: Address[];
+    date: Date | undefined;
+    /** Size of the raw message in bytes. Indicates what fetching it would cost. */
+    size: number;
+    seen: boolean;
+    flagged: boolean;
+    answered: boolean;
+    draft: boolean;
+    /** Whether the message carries attachments other than Proton's own key. */
+    hasAttachments: boolean;
+}
+/**
+ * What the ordering step cost.
+ *
+ * Reported rather than hidden, because it is the one part of a listing whose
+ * price grows with the size of the mailbox. A caller that sees 2000 ms here
+ * knows why the answer was slow, and so does anyone deciding whether this needs
+ * a cache.
+ */
+export interface OrderingCost {
+    /** How many message dates had to be read to establish the order. */
+    messages: number;
+    elapsedMs: number;
+}
+export interface ListResult {
+    path: string;
+    /** Total number of messages in the mailbox, independent of paging. */
+    total: number;
+    offset: number;
+    headers: MessageHeader[];
+    ordering: OrderingCost;
+}
+export declare function toAddresses(list: Array<{
+    name?: string;
+    address?: string;
+}> | undefined): Address[];
+/**
+ * Guesses from the body structure whether real attachments are present.
+ *
+ * Cheap, because it works off the structure the server already returns rather
+ * than parsing the message. Proton's own public key is excluded, otherwise
+ * every sent message would look like it had an attachment.
+ */
+export declare function detectAttachments(node: unknown): boolean;
+/** A message reduced to what it takes to put it in order. */
+export interface OrderEntry {
+    uid: number;
+    date: Date | undefined;
+}
+/**
+ * Reads nothing but the date of each message.
+ *
+ * This is the cheapest fetch IMAP offers for the purpose: ENVELOPE and nothing
+ * else. In particular no BODYSTRUCTURE, which is the expensive part of a full
+ * header fetch because the server has to walk the MIME tree to produce it.
+ *
+ * It runs over the entire result set, not over one page, and that is the point:
+ * an order can only be established from all of it. What it costs is reported
+ * back to the caller rather than swallowed.
+ *
+ * The date is taken from the envelope, which is the `Date:` field the sender
+ * wrote. INTERNALDATE would be cheaper still, but it is the time the server
+ * received the message and a copy between mailboxes may set it afresh, which is
+ * the very thing this ordering exists to survive.
+ */
+export declare function fetchDates(client: ImapFlow, uids: number[]): Promise<OrderEntry[]>;
+/**
+ * Puts messages newest first and returns their UIDs in that order.
+ *
+ * The UID breaks ties, and that is not cosmetic. Two messages can carry the
+ * same `Date:` down to the second, and mail sent by a script routinely does.
+ * Without a tiebreaker their relative order would be whatever the sort happened
+ * to produce that time, which differs between calls, and paging would then be
+ * free to show one of them on two pages and the other on none.
+ *
+ * Messages without a date sort last. They are rare and malformed, but they must
+ * land somewhere definite rather than wherever undefined comparisons put them.
+ */
+export declare function orderNewestFirst(entries: OrderEntry[]): number[];
+/**
+ * Reads the headers for a set of UIDs, keeping the order they were given in.
+ *
+ * Shared by listing and searching, so both produce identical entries. The
+ * caller has already selected the mailbox and narrowed the UIDs down to one
+ * page: fetching headers for a whole result set would defeat the purpose, since
+ * a common word matched 6803 messages in the measured mailbox.
+ */
+export declare function fetchHeaders(client: ImapFlow, uids: number[]): Promise<MessageHeader[]>;
+export interface ListOptions {
+    /** How many messages to return. Capped at MAX_LIST_LIMIT. */
+    limit?: number;
+    /** How many of the newest messages to skip, for paging. */
+    offset?: number;
+    /** When true, only unread messages are listed. */
+    unreadOnly?: boolean;
+}
+/**
+ * Lists the headers of a mailbox, newest first.
+ *
+ * The Bridge supports neither SORT nor THREAD, so ordering happens here, and it
+ * has to happen over the whole result set before a page is cut out of it.
+ *
+ * Ordering by UID instead would be free, since UIDs ascend with arrival. It was
+ * how this worked and it was wrong: a message moved into a mailbox arrives now
+ * and therefore gets the highest UID, while its `Date:` stays whatever the
+ * sender wrote. It would land on the first page with newer messages behind it.
+ * Archiving does exactly this, so in an archive the two orders barely agree at
+ * all.
+ *
+ * The price is one extra fetch across every hit, whose cost is handed back in
+ * `ordering` rather than hidden.
+ */
+export declare function listMessages(connection: Connection, path: string, options?: ListOptions): Promise<ListResult>;
+export interface FullMessage extends ParsedMessage {
+    /** The mailbox the message was read from. */
+    path: string;
+}
+/**
+ * Reads a single message and converts it into readable text.
+ *
+ * `hint` is the mailbox to look in first, which saves a search. Without it the
+ * lookup goes through "All Mail".
+ */
+export declare function getMessage(connection: Connection, messageId: string, options?: {
+    hint?: string;
+    maxTextChars?: number;
+    textOffset?: number;
+}): Promise<FullMessage>;

package/dist/mail/messages.js

@@ -0,0 +1,219 @@
+/**
+ * Listing and reading messages.
+ *
+ * The guiding constraint is the context window, not the network. A real
+ * mailbox has a median message size of roughly 16200 tokens raw, so twenty raw
+ * messages exceed a full window. Listings therefore carry headers only, and
+ * full text is fetched one message at a time.
+ */
+import { BridgeError } from '../bridge/errors.js';
+import { resolveMessageId, presentMessageId } from './ids.js';
+import { parseMessage } from '../mime/parse.js';
+/** Upper bound for one listing. Deliberately low, callers can page. */
+export const MAX_LIST_LIMIT = 100;
+/** Character budget for a single message body. Roughly 6000 tokens. */
+export const DEFAULT_TEXT_BUDGET = 24_000;
+export function toAddresses(list) {
+    if (!list)
+        return [];
+    const out = [];
+    for (const entry of list) {
+        if (!entry.address)
+            continue;
+        const item = { address: entry.address };
+        if (entry.name)
+            item.name = entry.name;
+        out.push(item);
+    }
+    return out;
+}
+/**
+ * Guesses from the body structure whether real attachments are present.
+ *
+ * Cheap, because it works off the structure the server already returns rather
+ * than parsing the message. Proton's own public key is excluded, otherwise
+ * every sent message would look like it had an attachment.
+ */
+export function detectAttachments(node) {
+    const n = node;
+    if (!n)
+        return false;
+    if (n.disposition === 'attachment') {
+        const filename = n.dispositionParameters?.filename ?? '';
+        const isProtonKey = n.type === 'application/pgp-keys' && /^publickey - .+ - 0x[0-9a-f]+\.asc$/i.test(filename);
+        if (!isProtonKey)
+            return true;
+    }
+    for (const child of n.childNodes ?? []) {
+        if (detectAttachments(child))
+            return true;
+    }
+    return false;
+}
+/**
+ * Reads nothing but the date of each message.
+ *
+ * This is the cheapest fetch IMAP offers for the purpose: ENVELOPE and nothing
+ * else. In particular no BODYSTRUCTURE, which is the expensive part of a full
+ * header fetch because the server has to walk the MIME tree to produce it.
+ *
+ * It runs over the entire result set, not over one page, and that is the point:
+ * an order can only be established from all of it. What it costs is reported
+ * back to the caller rather than swallowed.
+ *
+ * The date is taken from the envelope, which is the `Date:` field the sender
+ * wrote. INTERNALDATE would be cheaper still, but it is the time the server
+ * received the message and a copy between mailboxes may set it afresh, which is
+ * the very thing this ordering exists to survive.
+ */
+export async function fetchDates(client, uids) {
+    if (uids.length === 0)
+        return [];
+    const entries = [];
+    for await (const msg of client.fetch(uids, { uid: true, envelope: true }, { uid: true })) {
+        entries.push({ uid: msg.uid, date: msg.envelope?.date });
+    }
+    return entries;
+}
+/**
+ * Puts messages newest first and returns their UIDs in that order.
+ *
+ * The UID breaks ties, and that is not cosmetic. Two messages can carry the
+ * same `Date:` down to the second, and mail sent by a script routinely does.
+ * Without a tiebreaker their relative order would be whatever the sort happened
+ * to produce that time, which differs between calls, and paging would then be
+ * free to show one of them on two pages and the other on none.
+ *
+ * Messages without a date sort last. They are rare and malformed, but they must
+ * land somewhere definite rather than wherever undefined comparisons put them.
+ */
+export function orderNewestFirst(entries) {
+    // An unparsable Date header yields an Invalid Date rather than nothing, and
+    // its getTime() is NaN. NaN compares false against everything including
+    // itself, so left alone it would scatter such messages wherever the sort
+    // happened to walk. Treated as missing, they land at the end like the rest.
+    const time = (d) => {
+        const t = d?.getTime();
+        return t === undefined || Number.isNaN(t) ? undefined : t;
+    };
+    return [...entries]
+        .sort((a, b) => {
+        const at = time(a.date);
+        const bt = time(b.date);
+        if (at !== bt) {
+            if (at === undefined)
+                return 1;
+            if (bt === undefined)
+                return -1;
+            return bt - at;
+        }
+        return b.uid - a.uid;
+    })
+        .map((e) => e.uid);
+}
+/**
+ * Reads the headers for a set of UIDs, keeping the order they were given in.
+ *
+ * Shared by listing and searching, so both produce identical entries. The
+ * caller has already selected the mailbox and narrowed the UIDs down to one
+ * page: fetching headers for a whole result set would defeat the purpose, since
+ * a common word matched 6803 messages in the measured mailbox.
+ */
+export async function fetchHeaders(client, uids) {
+    if (uids.length === 0)
+        return [];
+    const byUid = new Map();
+    for await (const msg of client.fetch(uids, { uid: true, envelope: true, flags: true, size: true, bodyStructure: true }, { uid: true })) {
+        const env = msg.envelope;
+        byUid.set(msg.uid, {
+            // Through presentMessageId so that a listing names a message the same
+            // way reading it does. The envelope repeats the header as it stands.
+            messageId: presentMessageId(env?.messageId ?? ''),
+            subject: env?.subject ?? '',
+            from: toAddresses(env?.from),
+            to: toAddresses(env?.to),
+            date: env?.date,
+            size: msg.size ?? 0,
+            seen: msg.flags?.has('\\Seen') ?? false,
+            flagged: msg.flags?.has('\\Flagged') ?? false,
+            answered: msg.flags?.has('\\Answered') ?? false,
+            draft: msg.flags?.has('\\Draft') ?? false,
+            hasAttachments: detectAttachments(msg.bodyStructure),
+        });
+    }
+    // fetch does not guarantee the requested order, and the order it was given in
+    // is the one the caller established. Sorting by date here instead would throw
+    // that away, along with the tiebreaker that makes paging deterministic.
+    // A uid that produced no answer is skipped: the message was removed between
+    // the search and this fetch.
+    return uids.map((uid) => byUid.get(uid)).filter((h) => h !== undefined);
+}
+/**
+ * Lists the headers of a mailbox, newest first.
+ *
+ * The Bridge supports neither SORT nor THREAD, so ordering happens here, and it
+ * has to happen over the whole result set before a page is cut out of it.
+ *
+ * Ordering by UID instead would be free, since UIDs ascend with arrival. It was
+ * how this worked and it was wrong: a message moved into a mailbox arrives now
+ * and therefore gets the highest UID, while its `Date:` stays whatever the
+ * sender wrote. It would land on the first page with newer messages behind it.
+ * Archiving does exactly this, so in an archive the two orders barely agree at
+ * all.
+ *
+ * The price is one extra fetch across every hit, whose cost is handed back in
+ * `ordering` rather than hidden.
+ */
+export async function listMessages(connection, path, options = {}) {
+    const limit = Math.min(Math.max(options.limit ?? 25, 1), MAX_LIST_LIMIT);
+    const offset = Math.max(options.offset ?? 0, 0);
+    const nothing = { messages: 0, elapsedMs: 0 };
+    return connection.withMailbox(path, async (client, status) => {
+        // The Bridge answers FETCH on an empty mailbox with `BAD no such message`
+        // instead of an empty result, so nothing may be fetched here.
+        if (status.messages === 0) {
+            return { path, total: 0, offset, headers: [], ordering: nothing };
+        }
+        const uids = await client.search(options.unreadOnly ? { seen: false } : { all: true }, { uid: true });
+        if (!uids || uids.length === 0) {
+            return { path, total: 0, offset, headers: [], ordering: nothing };
+        }
+        const started = process.hrtime.bigint();
+        const ordered = orderNewestFirst(await fetchDates(client, uids));
+        const ordering = {
+            messages: uids.length,
+            elapsedMs: Math.round(Number(process.hrtime.bigint() - started) / 1e6),
+        };
+        const page = ordered.slice(offset, offset + limit);
+        if (page.length === 0) {
+            return { path, total: ordered.length, offset, headers: [], ordering };
+        }
+        const headers = await fetchHeaders(client, page);
+        return { path, total: ordered.length, offset, headers, ordering };
+    });
+}
+/**
+ * Reads a single message and converts it into readable text.
+ *
+ * `hint` is the mailbox to look in first, which saves a search. Without it the
+ * lookup goes through "All Mail".
+ */
+export async function getMessage(connection, messageId, options = {}) {
+    const resolved = await resolveMessageId(connection, messageId, options.hint);
+    const source = await connection.withMailbox(resolved.path, async (client) => {
+        const message = await client.fetchOne(String(resolved.uid), { source: true }, { uid: true });
+        if (!message || !message.source)
+            return undefined;
+        return message.source;
+    });
+    if (!source) {
+        throw new BridgeError(`The message ${resolved.messageId} was found in "${resolved.path}" but could not be read. ` +
+            'It may have been moved or deleted in the meantime. Try again.');
+    }
+    const parsed = await parseMessage(source, {
+        maxTextChars: options.maxTextChars ?? DEFAULT_TEXT_BUDGET,
+        textOffset: options.textOffset ?? 0,
+    });
+    return { ...parsed, path: resolved.path };
+}
+//# sourceMappingURL=messages.js.map

package/dist/mail/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../src/mail/messages.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACjD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAC7D,OAAO,EAAE,YAAY,EAAoC,MAAM,kBAAkB,CAAA;AAEjF,uEAAuE;AACvE,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAA;AACjC,uEAAuE;AACvE,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAA;AAyCzC,MAAM,UAAU,WAAW,CAAC,IAA4D;IACtF,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAA;IACpB,MAAM,GAAG,GAAc,EAAE,CAAA;IACzB,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,SAAQ;QAC5B,MAAM,IAAI,GAAY,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;QAChD,IAAI,KAAK,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;QACtC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAa;IAC7C,MAAM,CAAC,GAAG,IAKT,CAAA;IACD,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAEpB,IAAI,CAAC,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,CAAC,CAAC,qBAAqB,EAAE,QAAQ,IAAI,EAAE,CAAA;QACxD,MAAM,WAAW,GACf,CAAC,CAAC,IAAI,KAAK,sBAAsB,IAAI,sCAAsC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC5F,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAA;IAC/B,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QACvC,IAAI,iBAAiB,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;IAC3C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAQD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAgB,EAAE,IAAc;IAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEhC,MAAM,OAAO,GAAiB,EAAE,CAAA;IAChC,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACzF,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1D,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAqB;IACpD,4EAA4E;IAC5E,wEAAwE;IACxE,yEAAyE;IACzE,4EAA4E;IAC5E,MAAM,IAAI,GAAG,CAAC,CAAmB,EAAsB,EAAE;QACvD,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAA;QACtB,OAAO,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3D,CAAC,CAAA;IAED,OAAO,CAAC,GAAG,OAAO,CAAC;SAChB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACvB,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACd,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO,CAAC,CAAA;YAC9B,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO,CAAC,CAAC,CAAA;YAC/B,OAAO,EAAE,GAAG,EAAE,CAAA;QAChB,CAAC;QACD,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAA;IACtB,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAgB,EAAE,IAAc;IACjE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEhC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAA;IAC9C,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAClC,IAAI,EACJ,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAC3E,EAAE,GAAG,EAAE,IAAI,EAAE,CACd,EAAE,CAAC;QACF,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAA;QACxB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE;YACjB,sEAAsE;YACtE,qEAAqE;YACrE,SAAS,EAAE,gBAAgB,CAAC,GAAG,EAAE,SAAS,IAAI,EAAE,CAAC;YACjD,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,EAAE;YAC3B,IAAI,EAAE,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC;YAC5B,EAAE,EAAE,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC;YACxB,IAAI,EAAE,GAAG,EAAE,IAAI;YACf,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC;YACnB,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK;YACvC,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,KAAK;YAC7C,QAAQ,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,KAAK;YAC/C,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK;YACzC,cAAc,EAAE,iBAAiB,CAAC,GAAG,CAAC,aAAa,CAAC;SACrD,CAAC,CAAA;IACJ,CAAC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,wEAAwE;IACxE,4EAA4E;IAC5E,6BAA6B;IAC7B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAsB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAA;AAC7F,CAAC;AAWD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAsB,EACtB,IAAY,EACZ,OAAO,GAAgB,EAAE;IAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;IACxE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAiB,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAA;IAE3D,OAAO,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QAC3D,0EAA0E;QAC1E,8DAA8D;QAC9D,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;QACnE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAC9B,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EACpD,EAAE,GAAG,EAAE,IAAI,EAAE,CACd,CAAA;QACD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;QACnE,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAA;QACvC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;QAChE,MAAM,QAAQ,GAAiB;YAC7B,QAAQ,EAAE,IAAI,CAAC,MAAM;YACrB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,GAAG,CAAC;SACvE,CAAA;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAA;QAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAA;QACvE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAChD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;IACnE,CAAC,CAAC,CAAA;AACJ,CAAC;AAOD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,UAAsB,EACtB,SAAiB,EACjB,OAAO,GAAkE,EAAE;IAE3E,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAE5E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,MAAgB,EAAE,EAAE;QACpF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5F,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,SAAS,CAAA;QACjD,OAAO,OAAO,CAAC,MAAM,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,WAAW,CACnB,eAAe,QAAQ,CAAC,SAAS,kBAAkB,QAAQ,CAAC,IAAI,2BAA2B;YACzF,+DAA+D,CAClE,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE;QACxC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,mBAAmB;QACzD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,CAAC;KACpC,CAAC,CAAA;IACF,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAA;AAC3C,CAAC"}