@wirecat/mail-cli 0.5.0 → 0.7.0

package/dist/mail/rules/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/mail/rules/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqC,SAAS,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAGrG,MAAM,UAAU,GAAG,CAAC,OAAe,EAAc,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;AAE3G,sFAAsF;AACtF,MAAM,WAAW,GAAG,CAAC,KAAmB,EAAE,OAAe,EAAE,EAAE,CAC3D,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;AAEpE,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAmB,EAAE,OAAe,EAAE,IAAc,EAAqB,EAAE;IACxG,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAC5G,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,IAAI,CAAA;AACvC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,KAAmB,EAAE,OAAe,EAAE,KAAoB,EAAoB,EAAE;IAC/G,MAAM,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IACjG,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,CAAA;AAC/E,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,KAAmB,EAAE,OAAe,EAAE,EAAE,CACvE,IAAI,GAAG,CACL,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACpG,MAAM;IACN,EAAE,MAAM,EAAE,KAAK,EAAE;CAClB,CAAC,CACH,CAAA"}

package/dist/mail/save.d.ts

@@ -0,0 +1,9 @@
+export declare const present: (path: string) => boolean;
+/** A file only this user reads. Without `overwrite` an existing file is never touched. */
+export declare const savePrivately: (path: string, bytes: Uint8Array, overwrite: boolean) => Promise<void>;
+export declare const refuseExisting: (path: string) => void;
+/** A sender's file name as cli-core's downloads clean it, or `fallback` when nothing safe is left of it. */
+export declare const safeName: (name: string, fallback: string) => string;
+/** `report.pdf`, then `report (2).pdf` for the second of the same name in one message. */
+export declare const distinctNames: (names: readonly string[]) => string[];
+//# sourceMappingURL=save.d.ts.map

package/dist/mail/save.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"save.d.ts","sourceRoot":"","sources":["../../src/mail/save.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,OAAO,SAAU,MAAM,KAAG,OAQtC,CAAA;AAED,0FAA0F;AAC1F,eAAO,MAAM,aAAa,SAAgB,MAAM,SAAS,UAAU,aAAa,OAAO,KAAG,OAAO,CAAC,IAAI,CAQrG,CAAA;AAED,eAAO,MAAM,cAAc,SAAU,MAAM,KAAG,IAE7C,CAAA;AAED,4GAA4G;AAC5G,eAAO,MAAM,QAAQ,SAAU,MAAM,YAAY,MAAM,KAAG,MAAoD,CAAA;AAE9G,0FAA0F;AAC1F,eAAO,MAAM,aAAa,UAAW,SAAS,MAAM,EAAE,KAAG,MAAM,EAS9D,CAAA"}

package/dist/mail/save.js

@@ -0,0 +1,50 @@
+import { lstatSync, mkdirSync } from "node:fs";
+import { dirname, extname } from "node:path";
+import { CliError } from "@wirecat/cli-base";
+import { safeName as plainName, writeFileAtomic } from "@wirecat/cli-core/files";
+const exists = (path) => new CliError("validation_error", `${path} already exists; pass --replace to overwrite it`, {
+    reason: "download.exists",
+    param: "output-dir",
+});
+export const present = (path) => {
+    try {
+        lstatSync(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return false;
+        throw error;
+    }
+};
+/** A file only this user reads. Without `overwrite` an existing file is never touched. */
+export const savePrivately = async (path, bytes, overwrite) => {
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    try {
+        await writeFileAtomic(path, bytes, { overwrite });
+    }
+    catch (error) {
+        if (error.code === "EEXIST")
+            throw exists(path);
+        throw error;
+    }
+};
+export const refuseExisting = (path) => {
+    if (present(path))
+        throw exists(path);
+};
+/** A sender's file name as cli-core's downloads clean it, or `fallback` when nothing safe is left of it. */
+export const safeName = (name, fallback) => plainName(name)?.slice(0, 200) || fallback;
+/** `report.pdf`, then `report (2).pdf` for the second of the same name in one message. */
+export const distinctNames = (names) => {
+    const used = new Map();
+    return names.map((name) => {
+        const seen = (used.get(name.toLowerCase()) ?? 0) + 1;
+        used.set(name.toLowerCase(), seen);
+        if (seen === 1)
+            return name;
+        const extension = extname(name);
+        return `${name.slice(0, name.length - extension.length)} (${seen})${extension}`;
+    });
+};
+//# sourceMappingURL=save.js.map

package/dist/mail/save.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"save.js","sourceRoot":"","sources":["../../src/mail/save.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,QAAQ,IAAI,SAAS,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAEhF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAC9B,IAAI,QAAQ,CAAC,kBAAkB,EAAE,GAAG,IAAI,iDAAiD,EAAE;IACzF,MAAM,EAAE,iBAAiB;IACzB,KAAK,EAAE,YAAY;CACpB,CAAC,CAAA;AAEJ,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAW,EAAE;IAC/C,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,CAAA;QACf,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACpE,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED,0FAA0F;AAC1F,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,IAAY,EAAE,KAAiB,EAAE,SAAkB,EAAiB,EAAE;IACxG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1D,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;QAC1E,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAQ,EAAE;IACnD,IAAI,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;AACvC,CAAC,CAAA;AAED,4GAA4G;AAC5G,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAU,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAA;AAE9G,0FAA0F;AAC1F,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAwB,EAAY,EAAE;IAClE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAA;IACtC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACpD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAA;QAClC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/B,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,SAAS,EAAE,CAAA;IACjF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/dist/mail/send.d.ts

@@ -0,0 +1,67 @@
+import { type SendGuard, type SendKind } from "@wirecat/cli-core/sends";
+import type { MailBackend } from "./backend.js";
+import { type Draft, type Person } from "./compose.js";
+import { type Mailbox } from "./organise.js";
+/** What a send needs of the opened profile, beside the draft. */
+export interface Sending {
+    mailbox: Mailbox;
+    backend: MailBackend;
+    guard: SendGuard;
+    profile: string;
+    env: NodeJS.ProcessEnv;
+    owner: ReadonlySet<string>;
+    /** The provider files what SMTP carried into Sent itself (Gmail). */
+    savesSent: boolean;
+    /** The folders a plain `sync` reads, so the sent message is stored as the next sync would store it. */
+    syncFolders: () => Promise<{
+        folders: string[];
+        mode: "imap" | "gmail";
+    }>;
+    warn: (message: string) => void;
+    /**
+     * Run by an agent over MCP, where `ask` would go ahead (WC-MCP-7), and the owner has not set
+     * `messages.send.others` in the config: mail to others is then refused, as `readonly` would.
+     */
+    agentWithoutOthers?: boolean;
+}
+export declare const everyone: (draft: Pick<Draft, "to" | "cc" | "bcc">) => Person[];
+export declare const othersOf: (draft: Pick<Draft, "to" | "cc" | "bcc">, owner: ReadonlySet<string>) => Person[];
+/** The original of a reply or forward on the server: where it is, and its bytes. */
+export declare const fetchOriginal: (mailbox: Mailbox, backend: MailBackend, ref: string, profile: string) => Promise<{
+    folder: string;
+    validity: string;
+    uid: number;
+    raw: Uint8Array<ArrayBufferLike>;
+}>;
+export type SentCopy = "server" | "appended" | "found" | "no-sent-folder" | "failed";
+export interface Outgoing {
+    draft: Draft;
+    kind: Extract<SendKind, "message" | "forward">;
+    key: "messages.send" | "messages.forward";
+    operationId: string;
+    /** Set by the owner's `--operation-id`: a retry, so Sent is checked before anything goes again. */
+    retry: boolean;
+    original?: {
+        folder: string;
+        validity: string;
+        uid: number;
+        flag: string;
+    };
+}
+export interface Sent {
+    operationId: string;
+    messageId: string;
+    alreadySent: boolean;
+    accepted: number;
+    rejected: number;
+    sentCopy: SentCopy | null;
+    stored: boolean;
+    markedOriginal: boolean | null;
+}
+/**
+ * Asks and checks the guard, waits for the pace, submits once, then files the copy, marks the original and stores the
+ * message. Everything after the submission is best effort: the message is with people, and an error there would invite
+ * the owner to send it again.
+ */
+export declare const sendOut: (sending: Sending, outgoing: Outgoing) => Promise<Sent>;
+//# sourceMappingURL=send.d.ts.map

package/dist/mail/send.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.d.ts","sourceRoot":"","sources":["../../src/mail/send.ts"],"names":[],"mappings":"AAEA,OAAO,EAOL,KAAK,SAAS,EACd,KAAK,QAAQ,EACd,MAAM,yBAAyB,CAAA;AAGhC,OAAO,KAAK,EAAE,WAAW,EAAa,MAAM,cAAc,CAAA;AAC1D,OAAO,EAAS,KAAK,KAAK,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAU,KAAK,OAAO,EAAa,MAAM,eAAe,CAAA;AAI/D,iEAAiE;AACjE,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,WAAW,CAAA;IACpB,KAAK,EAAE,SAAS,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IACtB,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1B,qEAAqE;IACrE,SAAS,EAAE,OAAO,CAAA;IAClB,uGAAuG;IACvG,WAAW,EAAE,MAAM,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC,CAAA;IACzE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/B;;;OAGG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;CAC7B;AAED,eAAO,MAAM,QAAQ,UAAW,IAAI,CAAC,KAAK,EAAE,IAAI,GAAG,IAAI,GAAG,KAAK,CAAC,KAAG,MAAM,EAGxE,CAAA;AAED,eAAO,MAAM,QAAQ,UAAW,IAAI,CAAC,KAAK,EAAE,IAAI,GAAG,IAAI,GAAG,KAAK,CAAC,SAAS,WAAW,CAAC,MAAM,CAAC,KAAG,MAAM,EACvC,CAAA;AAE9D,oFAAoF;AACpF,eAAO,MAAM,aAAa,YAAmB,OAAO,WAAW,WAAW,OAAO,MAAM,WAAW,MAAM;;;;;EAavG,CAAA;AAYD,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,gBAAgB,GAAG,QAAQ,CAAA;AAiEpF,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,KAAK,CAAA;IACZ,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,GAAG,SAAS,CAAC,CAAA;IAC9C,GAAG,EAAE,eAAe,GAAG,kBAAkB,CAAA;IACzC,WAAW,EAAE,MAAM,CAAA;IACnB,mGAAmG;IACnG,KAAK,EAAE,OAAO,CAAA;IACd,QAAQ,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAC3E;AAED,MAAM,WAAW,IAAI;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,OAAO,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IACzB,MAAM,EAAE,OAAO,CAAA;IACf,cAAc,EAAE,OAAO,GAAG,IAAI,CAAA;CAC/B;AAED;;;;GAIG;AACH,eAAO,MAAM,OAAO,YAAmB,OAAO,YAAY,QAAQ,KAAG,OAAO,CAAC,IAAI,CAqFhF,CAAA"}

package/dist/mail/send.js

@@ -0,0 +1,173 @@
+import { CliError, realSleep } from "@wirecat/cli-base";
+import { storedMailRules, syncMail } from "@wirecat/cli-core/mail";
+import { DEFAULT_PACE, guardedWrite, newOperationId, Pacer, pacePathFor, } from "@wirecat/cli-core/sends";
+import { SEND_OTHERS_KEY } from "../config.js";
+import { IDENTITY } from "../identity.js";
+import { build } from "./compose.js";
+import { locate, selectIds } from "./organise.js";
+export const everyone = (draft) => {
+    const seen = new Set();
+    return [...draft.to, ...draft.cc, ...draft.bcc].filter(({ address }) => !seen.has(address) && !!seen.add(address));
+};
+export const othersOf = (draft, owner) => everyone(draft).filter(({ address }) => !owner.has(address));
+/** The original of a reply or forward on the server: where it is, and its bytes. */
+export const fetchOriginal = async (mailbox, backend, ref, profile) => {
+    const { ids } = await selectIds(mailbox, { refs: [ref] });
+    const { located } = await locate(mailbox, ids);
+    const place = located[0];
+    const item = place?.items[0];
+    if (!place || !item)
+        throw new CliError("not_found", `${ref} is not on the server any more, or not where the store last saw it; run \`${IDENTITY.command} ${profile} sync\``);
+    const [raw] = await backend.fetchRaw([{ uid: String(item.uid), folder: place.folder, receivedAt: "" }]);
+    if (!(raw instanceof Uint8Array))
+        throw new CliError("provider_error", "the server did not give the original message");
+    return { folder: place.folder, validity: place.validity, uid: item.uid, raw };
+};
+const sentFolder = async (mailbox) => (await mailbox.folders()).find(({ role }) => role === "sent")?.path;
+/** Whether Sent already holds this Message-ID: a send the server answered too late, or Gmail's own copy. */
+const inSent = async (mailbox, messageId) => {
+    const folder = await sentFolder(mailbox);
+    if (!folder)
+        return { found: false };
+    const { uids } = await mailbox.writes.locate(folder, { messageIds: [messageId] });
+    return { folder, found: uids.size > 0 };
+};
+/**
+ * After SMTP: a server that files sent mail itself is left alone; otherwise the copy goes to Sent unless Sent already
+ * has it, so a server that also files it keeps one copy.
+ */
+const fileCopy = async (sending, messageId, copy) => {
+    if (sending.savesSent)
+        return "server";
+    try {
+        const { folder, found } = await inSent(sending.mailbox, messageId);
+        if (!folder)
+            return "no-sent-folder";
+        if (found)
+            return "found";
+        await sending.mailbox.writes.append(folder, copy, ["\\Seen"]);
+        return "appended";
+    }
+    catch {
+        sending.warn("the message was sent, but its copy could not be put in Sent");
+        return "failed";
+    }
+};
+const SYNC_WINDOW_MS = 10 * 60 * 1000;
+/** The sent copy into the store the way `sync` reads it, so it has the server's id and no second row ever appears. */
+const storeSent = async (sending) => {
+    try {
+        const { folders, mode } = await sending.syncFolders();
+        const address = sending.mailbox.key.account;
+        const rules = await storedMailRules(sending.mailbox.store, { address });
+        const report = await syncMail(sending.backend, sending.mailbox.store, {
+            account: { address, mode, folders, rules },
+            since: new Date(Date.now() - SYNC_WINDOW_MS),
+            saveCoverage: false,
+        });
+        return report.saved + report.alreadyStored > 0;
+    }
+    catch {
+        sending.warn(`the message was sent; \`${IDENTITY.command} ${sending.profile} sync\` stores it`);
+        return false;
+    }
+};
+/** `\Answered` on a replied message, `$Forwarded` on a forwarded one, as mail clients mark them; best effort. */
+const markOriginal = async (sending, original, flag) => {
+    const request = {
+        chatId: null,
+        kind: "account",
+        action: "message-flag",
+        key: "messages.update",
+        count: 1,
+        operationId: newOperationId(),
+    };
+    try {
+        await guardedWrite(sending.guard, request, () => sending.mailbox.writes.flag(original.folder, original.validity, [original.uid], { add: [flag] }));
+        return true;
+    }
+    catch {
+        sending.warn(`the message was sent; the original was not marked ${flag}`);
+        return false;
+    }
+};
+/**
+ * Asks and checks the guard, waits for the pace, submits once, then files the copy, marks the original and stores the
+ * message. Everything after the submission is best effort: the message is with people, and an error there would invite
+ * the owner to send it again.
+ */
+export const sendOut = async (sending, outgoing) => {
+    const { draft, operationId } = outgoing;
+    const recipients = everyone(draft);
+    const attempt = {
+        chatId: null,
+        kind: outgoing.kind,
+        key: outgoing.key,
+        count: recipients.length,
+        operationId,
+        sendId: operationId,
+        length: draft.text.length,
+        ...(draft.files.length || draft.message
+            ? {
+                attachments: [
+                    ...draft.files.map(({ bytes }) => ({ kind: "file", bytes })),
+                    ...(draft.message ? [{ kind: "file", bytes: draft.message.raw.byteLength }] : []),
+                ],
+            }
+            : {}),
+    };
+    if (othersOf(draft, sending.owner).length > 0) {
+        // One more key for mail that reaches anyone but the owner: the owner can open self-sends and still be asked here.
+        const probe = { chatId: null, kind: "read", key: SEND_OTHERS_KEY };
+        try {
+            if (sending.agentWithoutOthers)
+                throw new CliError("permission_error", `over MCP, profile ${sending.profile} mails only its owner: permissions.${SEND_OTHERS_KEY} is readonly for an ` +
+                    "agent until the owner sets it in the config; to let an agent mail others: " +
+                    `${IDENTITY.command} ${sending.profile} config set permissions.${SEND_OTHERS_KEY} allow`, { permission: SEND_OTHERS_KEY });
+            await sending.guard.ask?.(probe);
+            sending.guard.check(probe, { reserve: false });
+        }
+        catch (error) {
+            sending.guard.record({ ...attempt, outcome: "refused", errorCode: error.code ?? "unknown" });
+            throw error;
+        }
+    }
+    if (outgoing.retry && (await inSent(sending.mailbox, draft.messageId)).found)
+        return {
+            operationId,
+            messageId: draft.messageId,
+            alreadySent: true,
+            accepted: 0,
+            rejected: 0,
+            sentCopy: "found",
+            stored: false,
+            markedOriginal: null,
+        };
+    const submit = sending.backend.submit;
+    if (!submit)
+        throw new CliError("configuration_error", `profile ${sending.profile} names no submission server; set smtp_host, smtp_port and smtp_security with ` +
+            `\`${IDENTITY.command} ${sending.profile} config set\``, { sent: false });
+    const { raw, copy } = await build(draft);
+    const pacer = new Pacer(pacePathFor(IDENTITY, sending.profile, sending.env), DEFAULT_PACE);
+    const submitted = await guardedWrite(sending.guard, attempt, () => submit.send({ from: draft.from.address, recipients: recipients.map(({ address }) => address), raw }), () => ({}), async () => {
+        const at = await pacer.reserve();
+        if (at > Date.now())
+            await realSleep(at - Date.now());
+    });
+    const sentCopy = await fileCopy(sending, draft.messageId, copy);
+    const markedOriginal = outgoing.original
+        ? await markOriginal(sending, outgoing.original, outgoing.original.flag)
+        : null;
+    const stored = await storeSent(sending);
+    return {
+        operationId,
+        messageId: draft.messageId,
+        alreadySent: false,
+        accepted: submitted.accepted.length,
+        rejected: submitted.rejected.length,
+        sentCopy,
+        stored,
+        markedOriginal,
+    };
+};
+//# sourceMappingURL=send.js.map

package/dist/mail/send.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.js","sourceRoot":"","sources":["../../src/mail/send.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAuB,eAAe,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACvF,OAAO,EACL,YAAY,EAEZ,YAAY,EACZ,cAAc,EACd,KAAK,EACL,WAAW,GAGZ,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAEzC,OAAO,EAAE,KAAK,EAA2B,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAgB,SAAS,EAAE,MAAM,eAAe,CAAA;AAwB/D,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAuC,EAAY,EAAE;IAC5E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,OAAO,CAAC,GAAG,KAAK,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;AACpH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAuC,EAAE,KAA0B,EAAY,EAAE,CACxG,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;AAE9D,oFAAoF;AACpF,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,OAAgB,EAAE,OAAoB,EAAE,GAAW,EAAE,OAAe,EAAE,EAAE;IAC1G,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACzD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IACxB,MAAM,IAAI,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IAC5B,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;QACjB,MAAM,IAAI,QAAQ,CAChB,WAAW,EACX,GAAG,GAAG,6EAA6E,QAAQ,CAAC,OAAO,IAAI,OAAO,SAAS,CACxH,CAAA;IACH,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IACvG,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,8CAA8C,CAAC,CAAA;IACtH,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAA;AAC/E,CAAC,CAAA;AAED,MAAM,UAAU,GAAG,KAAK,EAAE,OAAgB,EAAE,EAAE,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,IAAI,CAAA;AAElH,4GAA4G;AAC5G,MAAM,MAAM,GAAG,KAAK,EAAE,OAAgB,EAAE,SAAiB,EAAgD,EAAE;IACzG,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAA;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IACpC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IACjF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAA;AACzC,CAAC,CAAA;AAID;;;GAGG;AACH,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAgB,EAAE,SAAiB,EAAE,IAAgB,EAAqB,EAAE;IAClG,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAA;IACtC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QAClE,IAAI,CAAC,MAAM;YAAE,OAAO,gBAAgB,CAAA;QACpC,IAAI,KAAK;YAAE,OAAO,OAAO,CAAA;QACzB,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC7D,OAAO,UAAU,CAAA;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAA;QAC3E,OAAO,QAAQ,CAAA;IACjB,CAAC;AACH,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAErC,sHAAsH;AACtH,MAAM,SAAS,GAAG,KAAK,EAAE,OAAgB,EAAoB,EAAE;IAC7D,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAA;QACrD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAA;QAC3C,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;QACvE,MAAM,MAAM,GAAmB,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE;YACpF,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;YAC1C,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;YAC5C,YAAY,EAAE,KAAK;SACpB,CAAC,CAAA;QACF,OAAO,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,aAAa,GAAG,CAAC,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,2BAA2B,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,mBAAmB,CAAC,CAAA;QAC/F,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,CAAA;AAED,iHAAiH;AACjH,MAAM,YAAY,GAAG,KAAK,EACxB,OAAgB,EAChB,QAA2D,EAC3D,IAAY,EACZ,EAAE;IACF,MAAM,OAAO,GAAY;QACvB,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,cAAc;QACtB,GAAG,EAAE,iBAAiB;QACtB,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,cAAc,EAAE;KAC9B,CAAA;IACD,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAC9C,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CACjG,CAAA;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,qDAAqD,IAAI,EAAE,CAAC,CAAA;QACzE,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,CAAA;AAuBD;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,KAAK,EAAE,OAAgB,EAAE,QAAkB,EAAiB,EAAE;IACnF,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,QAAQ,CAAA;IACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAClC,MAAM,OAAO,GAAY;QACvB,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,KAAK,EAAE,UAAU,CAAC,MAAM;QACxB,WAAW;QACX,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;QACzB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO;YACrC,CAAC,CAAC;gBACE,WAAW,EAAE;oBACX,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,KAAK,EAAE,CAAC,CAAC;oBACrE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3F;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAA;IACD,IAAI,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,kHAAkH;QAClH,MAAM,KAAK,GAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,CAAA;QAChF,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,kBAAkB;gBAC5B,MAAM,IAAI,QAAQ,CAChB,kBAAkB,EAClB,qBAAqB,OAAO,CAAC,OAAO,sCAAsC,eAAe,sBAAsB;oBAC7G,4EAA4E;oBAC5E,GAAG,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,2BAA2B,eAAe,QAAQ,EAC1F,EAAE,UAAU,EAAE,eAAe,EAAE,CAChC,CAAA;YACH,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;YAChC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAG,KAAkB,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAA;YAC1G,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK;QAC1E,OAAO;YACL,WAAW;YACX,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,KAAK;YACb,cAAc,EAAE,IAAI;SACrB,CAAA;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAA;IACrC,IAAI,CAAC,MAAM;QACT,MAAM,IAAI,QAAQ,CAChB,qBAAqB,EACrB,WAAW,OAAO,CAAC,OAAO,+EAA+E;YACvG,KAAK,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,eAAe,EACzD,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAA;IACH,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,CAAA;IAC1F,MAAM,SAAS,GAAc,MAAM,YAAY,CAC7C,OAAO,CAAC,KAAK,EACb,OAAO,EACP,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAC1G,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EACV,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAA;QAChC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,MAAM,SAAS,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IACvD,CAAC,CACF,CAAA;IACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC/D,MAAM,cAAc,GAAG,QAAQ,CAAC,QAAQ;QACtC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxE,CAAC,CAAC,IAAI,CAAA;IACR,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAA;IACvC,OAAO;QACL,WAAW;QACX,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM;QACnC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM;QACnC,QAAQ;QACR,MAAM;QACN,cAAc;KACf,CAAA;AACH,CAAC,CAAA"}

package/dist/mail/smtp.d.ts

@@ -0,0 +1,4 @@
+import type { MailCredential, MailEndpoint, MailSubmit, RunBounds } from "./backend.js";
+/** SMTP submission with the profile's login and its app password or OAuth token, one connection per message. */
+export declare const smtpSubmit: (endpoint: Pick<MailEndpoint, "host" | "port" | "security" | "login">, credential: MailCredential, bounds?: RunBounds) => MailSubmit;
+//# sourceMappingURL=smtp.d.ts.map

package/dist/mail/smtp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smtp.d.ts","sourceRoot":"","sources":["../../src/mail/smtp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAa,UAAU,EAAE,SAAS,EAAa,MAAM,cAAc,CAAA;AAgF7G,gHAAgH;AAChH,eAAO,MAAM,UAAU,aACX,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,cACxD,cAAc,WAClB,SAAS,KAChB,UA6ED,CAAA"}

package/dist/mail/smtp.js

@@ -0,0 +1,133 @@
+import { CliError } from "@wirecat/cli-base";
+import SMTPConnection from "nodemailer/lib/smtp-connection";
+import XOAuth2 from "nodemailer/lib/xoauth2";
+/** The server's reply can quote addresses, so only its codes reach the caller. */
+const codes = (error) => ({
+    ...(error.code && /^[A-Z0-9_]{1,40}$/.test(error.code) ? { cause_code: error.code } : {}),
+    ...(error.responseCode ? { smtp_code: error.responseCode } : {}),
+});
+const loginRefused = (error) => error.code === "EAUTH" || error.responseCode === 535;
+/** A token refused after a refresh: on Microsoft 365 most often SMTP AUTH turned off for the mailbox. */
+const tokenRefused = (error, credential) => credential.provider === "microsoft"
+    ? new CliError("authentication_error", "Microsoft refused the OAuth login for sending; reading still works. On a Microsoft 365 mailbox an admin " +
+        'has to turn on "Authenticated SMTP" for it (security defaults turn it off for the whole organisation)', { reason: "mail.smtp-auth-disabled", sent: false, ...codes(error) })
+    : new CliError("authentication_error", `the submission server refused the OAuth login; sign in again${credential.signInCommand ? `: ${credential.signInCommand}` : ""}`, { reason: "mail.oauth-refused", sent: false, ...codes(error) });
+/** A failure before the message left: nothing was sent, so the owner may simply run the command again. */
+const beforeSending = (error) => {
+    if (loginRefused(error))
+        return new CliError("authentication_error", "the submission server refused the login; check that the app password allows sending (SMTP) for this mailbox", { reason: "mail.smtp-login-refused", sent: false, ...codes(error) });
+    if (error.code === "ETIMEDOUT")
+        return new CliError("timeout", "the submission server did not answer in time; nothing was sent", {
+            sent: false,
+            retryable: true,
+            ...codes(error),
+        });
+    if (["ECONNECTION", "ESOCKET", "EDNS", "ETLS"].includes(error.code ?? ""))
+        return new CliError("network_error", "cannot reach the submission server; nothing was sent", {
+            sent: false,
+            retryable: true,
+            ...codes(error),
+        });
+    return new CliError("provider_error", "the submission server refused the connection; nothing was sent", {
+        sent: false,
+        ...codes(error),
+    });
+};
+/** The server answered the envelope or the message with an error code: it took nothing. */
+const refused = (error) => {
+    const temporary = error.responseCode !== undefined && error.responseCode >= 400 && error.responseCode < 500;
+    return new CliError(temporary ? "provider_unavailable" : "provider_error", temporary
+        ? "the submission server cannot take the message now; nothing was sent, try again later"
+        : "the submission server refused the message; nothing was sent", { sent: false, ...(temporary ? { retryable: true } : {}), ...codes(error) });
+};
+/** One step's callback, or the connection's 'error' event, which nodemailer raises instead when the socket fails. */
+const settle = (connection, start) => new Promise((resolve, reject) => {
+    const failed = (error) => reject(error);
+    connection.once("error", failed);
+    start((error, value) => {
+        connection.off("error", failed);
+        if (error)
+            reject(error);
+        else
+            resolve(value);
+    });
+});
+/** SMTP submission with the profile's login and its app password or OAuth token, one connection per message. */
+export const smtpSubmit = (endpoint, credential, bounds = {}) => ({
+    send: async ({ from, recipients, raw }) => {
+        const timeout = Math.max(1_000, Math.min(60_000, bounds.timeLeftMs?.() ?? 60_000));
+        const open = async (login) => {
+            const connection = new SMTPConnection({
+                host: endpoint.host,
+                port: endpoint.port,
+                secure: endpoint.security === "tls",
+                requireTLS: endpoint.security === "starttls",
+                ignoreTLS: endpoint.security === "plain",
+                connectionTimeout: 15_000,
+                greetingTimeout: 15_000,
+                socketTimeout: timeout,
+                logger: false,
+            });
+            // An 'error' event with no listener would end the process; each step's callback already rejects.
+            connection.on("error", () => { });
+            const abort = () => connection.close();
+            bounds.signal?.addEventListener("abort", abort, { once: true });
+            const done = () => {
+                bounds.signal?.removeEventListener("abort", abort);
+                try {
+                    connection.quit();
+                }
+                catch { }
+            };
+            try {
+                await settle(connection, (finish) => connection.connect((error) => finish(error ?? null)));
+                await settle(connection, (finish) => connection.login("pass" in login
+                    ? { user: endpoint.login, pass: login.pass }
+                    : { user: endpoint.login, oauth2: new XOAuth2({ user: endpoint.login, accessToken: login.accessToken }) }, finish));
+                return { connection, done };
+            }
+            catch (error) {
+                done();
+                throw error;
+            }
+        };
+        let opened;
+        try {
+            try {
+                opened = await open(await credential.login());
+            }
+            catch (error) {
+                if (credential.kind !== "oauth" || !loginRefused(error))
+                    throw error;
+                try {
+                    opened = await open(await credential.login({ refresh: true }));
+                }
+                catch (again) {
+                    if (loginRefused(again))
+                        throw tokenRefused(again, credential);
+                    throw again;
+                }
+            }
+        }
+        catch (error) {
+            throw error instanceof CliError ? error : beforeSending(error);
+        }
+        const { connection, done } = opened;
+        try {
+            const info = await settle(connection, (finish) => connection.send({ from, to: [...recipients] }, Buffer.from(raw), finish));
+            return { accepted: info.accepted, rejected: info.rejected };
+        }
+        catch (raw) {
+            const error = raw;
+            // The envelope is answered before the body goes; a message refused with a code was not taken either.
+            if (error.code === "EENVELOPE" || (error.code === "EMESSAGE" && error.responseCode))
+                throw refused(error);
+            throw new CliError("outcome_unknown", "the line to the submission server broke while the message was going; it may have been sent — " +
+                "look in Sent before sending it again", { retryable: false, ...codes(error) });
+        }
+        finally {
+            done();
+        }
+    },
+});
+//# sourceMappingURL=smtp.js.map

package/dist/mail/smtp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smtp.js","sourceRoot":"","sources":["../../src/mail/smtp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,cAAc,MAAM,gCAAgC,CAAA;AAC3D,OAAO,OAAO,MAAM,wBAAwB,CAAA;AAK5C,kFAAkF;AAClF,MAAM,KAAK,GAAG,CAAC,KAAgB,EAAE,EAAE,CAAC,CAAC;IACnC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CACjE,CAAC,CAAA;AAEF,MAAM,YAAY,GAAG,CAAC,KAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,YAAY,KAAK,GAAG,CAAA;AAE/F,yGAAyG;AACzG,MAAM,YAAY,GAAG,CAAC,KAAgB,EAAE,UAA0B,EAAY,EAAE,CAC9E,UAAU,CAAC,QAAQ,KAAK,WAAW;IACjC,CAAC,CAAC,IAAI,QAAQ,CACV,sBAAsB,EACtB,0GAA0G;QACxG,uGAAuG,EACzG,EAAE,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CACpE;IACH,CAAC,CAAC,IAAI,QAAQ,CACV,sBAAsB,EACtB,+DAA+D,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAChI,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAC/D,CAAA;AAEP,0GAA0G;AAC1G,MAAM,aAAa,GAAG,CAAC,KAAgB,EAAY,EAAE;IACnD,IAAI,YAAY,CAAC,KAAK,CAAC;QACrB,OAAO,IAAI,QAAQ,CACjB,sBAAsB,EACtB,6GAA6G,EAC7G,EAAE,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CACpE,CAAA;IACH,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAC5B,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE,gEAAgE,EAAE;YAC/F,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,IAAI;YACf,GAAG,KAAK,CAAC,KAAK,CAAC;SAChB,CAAC,CAAA;IACJ,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QACvE,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,sDAAsD,EAAE;YAC3F,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,IAAI;YACf,GAAG,KAAK,CAAC,KAAK,CAAC;SAChB,CAAC,CAAA;IACJ,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,gEAAgE,EAAE;QACtG,IAAI,EAAE,KAAK;QACX,GAAG,KAAK,CAAC,KAAK,CAAC;KAChB,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,2FAA2F;AAC3F,MAAM,OAAO,GAAG,CAAC,KAAgB,EAAY,EAAE;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,IAAI,GAAG,IAAI,KAAK,CAAC,YAAY,GAAG,GAAG,CAAA;IAC3G,OAAO,IAAI,QAAQ,CACjB,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,gBAAgB,EACrD,SAAS;QACP,CAAC,CAAC,sFAAsF;QACxF,CAAC,CAAC,6DAA6D,EACjE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAC5E,CAAA;AACH,CAAC,CAAA;AAED,qHAAqH;AACrH,MAAM,MAAM,GAAG,CACb,UAA0B,EAC1B,KAAmE,EACvD,EAAE,CACd,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IACjC,MAAM,MAAM,GAAG,CAAC,KAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAClD,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAChC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC/B,IAAI,KAAK;YAAE,MAAM,CAAC,KAAK,CAAC,CAAA;;YACnB,OAAO,CAAC,KAAU,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEJ,gHAAgH;AAChH,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,QAAoE,EACpE,UAA0B,EAC1B,MAAM,GAAc,EAAE,EACV,EAAE,CAAC,CAAC;IAChB,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAsB,EAAE;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,MAAM,CAAC,CAAC,CAAA;QAClF,MAAM,IAAI,GAAG,KAAK,EAAE,KAAgB,EAAE,EAAE;YACtC,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC;gBACpC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,MAAM,EAAE,QAAQ,CAAC,QAAQ,KAAK,KAAK;gBACnC,UAAU,EAAE,QAAQ,CAAC,QAAQ,KAAK,UAAU;gBAC5C,SAAS,EAAE,QAAQ,CAAC,QAAQ,KAAK,OAAO;gBACxC,iBAAiB,EAAE,MAAM;gBACzB,eAAe,EAAE,MAAM;gBACvB,aAAa,EAAE,OAAO;gBACtB,MAAM,EAAE,KAAK;aACd,CAAC,CAAA;YACF,iGAAiG;YACjG,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAChC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;YACtC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/D,MAAM,IAAI,GAAG,GAAG,EAAE;gBAChB,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;gBAClD,IAAI,CAAC;oBACH,UAAU,CAAC,IAAI,EAAE,CAAA;gBACnB,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,CAAA;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAO,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;gBAChG,MAAM,MAAM,CAAU,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAC3C,UAAU,CAAC,KAAK,CACd,MAAM,IAAI,KAAK;oBACb,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;oBAC5C,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,EAC3G,MAAM,CACP,CACF,CAAA;gBACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,EAAE,CAAA;gBACN,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC,CAAA;QACD,IAAI,MAAwC,CAAA;QAC5C,IAAI,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,CAAA;YAC/C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,YAAY,CAAC,KAAkB,CAAC;oBAAE,MAAM,KAAK,CAAA;gBACjF,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;gBAChE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,YAAY,CAAC,KAAkB,CAAC;wBAAE,MAAM,YAAY,CAAC,KAAkB,EAAE,UAAU,CAAC,CAAA;oBACxF,MAAM,KAAK,CAAA;gBACb,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,YAAY,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAkB,CAAC,CAAA;QAC7E,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,CAAA;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAiC,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/E,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CACzE,CAAA;YACD,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAA;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAgB,CAAA;YAC9B,qGAAqG;YACrG,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,YAAY,CAAC;gBAAE,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;YACzG,MAAM,IAAI,QAAQ,CAChB,iBAAiB,EACjB,+FAA+F;gBAC7F,sCAAsC,EACxC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CACtC,CAAA;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,CAAA;QACR,CAAC;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/oauth.d.ts

@@ -0,0 +1,74 @@
+import { spawn } from "node:child_process";
+import { type KeyringStore } from "@wirecat/cli-base";
+import { type OAuthClient, type TokenKeeper, type TokenStorage } from "@wirecat/cli-core/oauth";
+import type { Mailbox } from "./config.js";
+import type { MailCredential } from "./mail/backend.js";
+export type OAuthKind = "microsoft" | "google";
+/**
+ * WireCat's Microsoft app: a public client for any Entra tenant and personal accounts. Empty until WireCat registers
+ * it (docs/oauth-microsoft.md); until then a sign-in needs `microsoft_client_id` in the config.
+ */
+export declare const WIRECAT_MICROSOFT_CLIENT_ID = "";
+export declare const OAUTH_GUIDE = "https://github.com/WireCatLabs/mail-cli/blob/main/docs/oauth-microsoft.md";
+export declare const MICROSOFT_IMAP_SCOPE = "https://outlook.office.com/IMAP.AccessAsUser.All";
+export declare const MICROSOFT_SMTP_SCOPE = "https://outlook.office.com/SMTP.Send";
+/** IMAP and SMTP are one resource, so one token covers both; offline_access brings the refresh token. */
+export declare const MICROSOFT_SCOPES: readonly ["offline_access", "https://outlook.office.com/IMAP.AccessAsUser.All", "https://outlook.office.com/SMTP.Send"];
+export declare const GOOGLE_GUIDE = "https://github.com/WireCatLabs/mail-cli/blob/main/docs/oauth-google.md";
+/** The only scope Gmail gives IMAP and SMTP: https://developers.google.com/workspace/gmail/imap/xoauth2-protocol */
+export declare const GOOGLE_MAIL_SCOPE = "https://mail.google.com/";
+export declare const GOOGLE_SCOPES: readonly ["openid", "email", "https://mail.google.com/"];
+/** What each scope lets mail do, shown before the browser opens. */
+export declare const SCOPE_WORDS: Record<string, string>;
+export declare const OAUTH_NAMES: Record<OAuthKind, string>;
+export declare const scopesOf: (kind: OAuthKind) => readonly string[];
+/** The scope without which a profile cannot send. */
+export declare const sendScopeOf: (kind: OAuthKind) => "https://mail.google.com/" | "https://outlook.office.com/SMTP.Send";
+/** The owner's Desktop client: `--client-file` (private to the owner), else MAIL_GOOGLE_CLIENT_ID; no bundled one. */
+export declare const googleClient: (env: NodeJS.ProcessEnv, file?: string, platform?: NodeJS.Platform) => OAuthClient;
+/** The address Google signed in, from OpenID userinfo; the token goes in a header, so no failure prints it. */
+export declare const googleAddress: (accessToken: string, fetcher: typeof fetch, signal?: AbortSignal) => Promise<string>;
+/** The owner's own Microsoft app when the config names one, else WireCat's; only the owner sets the key (OWNER_ONLY). */
+export declare const microsoftClient: (mailbox: Mailbox) => {
+    client: OAuthClient;
+    source: "wirecat" | "own";
+};
+export type CredentialStorage = "keyring" | "file";
+export interface OAuthOptions {
+    env: NodeJS.ProcessEnv;
+    profile: string;
+    kind: OAuthKind;
+    keyring?: KeyringStore | undefined;
+    /** Where a new sign-in goes; a saved one is read and refreshed where it is. */
+    storage?: CredentialStorage | undefined;
+}
+/** The entry `oauth:<provider>:<profile>` beside the profile's app password, under the same options (WC-SECR-24). */
+export declare const oauthStorage: ({ env, profile, kind, keyring, storage }: OAuthOptions) => TokenStorage;
+export declare const signInWords: (profile: string) => string;
+export interface KeeperOptions extends OAuthOptions {
+    client: OAuthClient;
+    /** Sent as `login_hint`, so the provider offers the right account first. */
+    address?: string | undefined;
+    fetch?: typeof fetch | undefined;
+    signal?: AbortSignal | undefined;
+}
+/** One profile's sign-in, refreshed under a lock every mail process shares; a refresh uses the app it signed in with. */
+export declare const oauthKeeper: (options: KeeperOptions) => TokenKeeper;
+export declare const oauthCredential: (keeper: TokenKeeper, kind: OAuthKind, profile: string) => MailCredential;
+/** A token just received at sign-in, before anything is saved: a refusal fails the sign-in, nothing refreshes. */
+export declare const tokenCredential: (accessToken: string, kind: OAuthKind) => MailCredential;
+/**
+ * What `doctor` knows of each sign-in without opening the keyring: when it happened, with which app and scopes. Never
+ * a token.
+ */
+export interface SignInRecord {
+    provider: OAuthKind;
+    client: "wirecat" | "own";
+    signed_in_at: string;
+    scopes: string[];
+}
+export declare const signInRecords: (env: NodeJS.ProcessEnv) => Record<string, SignInRecord>;
+export declare const recordSignIn: (env: NodeJS.ProcessEnv, profile: string, record: SignInRecord | undefined) => Promise<void>;
+/** The system browser; the sign-in link is printed too, so a failure here only means opening it by hand. */
+export declare const systemBrowser: (url: string, platform?: NodeJS.Platform, start?: typeof spawn) => Promise<void>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAG1C,OAAO,EAAwB,KAAK,YAAY,EAA+B,MAAM,mBAAmB,CAAA;AAGxG,OAAO,EAEL,KAAK,WAAW,EAKhB,KAAK,WAAW,EAChB,KAAK,YAAY,EAElB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAE1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEvD,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;AAE9C;;;GAGG;AACH,eAAO,MAAM,2BAA2B,KAAK,CAAA;AAE7C,eAAO,MAAM,WAAW,8EAA8E,CAAA;AAEtG,eAAO,MAAM,oBAAoB,qDAAqD,CAAA;AACtF,eAAO,MAAM,oBAAoB,yCAAyC,CAAA;AAC1E,yGAAyG;AACzG,eAAO,MAAM,gBAAgB,YAAI,gBAAgB,6FAAsD,CAAA;AAEvG,eAAO,MAAM,YAAY,2EAA2E,CAAA;AACpG,oHAAoH;AACpH,eAAO,MAAM,iBAAiB,6BAA6B,CAAA;AAC3D,eAAO,MAAM,aAAa,YAAI,QAAQ,EAAE,OAAO,6BAA6B,CAAA;AAE5E,oEAAoE;AACpE,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAO9C,CAAA;AAED,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAgD,CAAA;AAClG,eAAO,MAAM,QAAQ,SAAU,SAAS,KAAG,SAAS,MAAM,EACD,CAAA;AACzD,qDAAqD;AACrD,eAAO,MAAM,WAAW,SAAU,SAAS,wEAAsE,CAAA;AAgEjH,sHAAsH;AACtH,eAAO,MAAM,YAAY,QAAS,MAAM,CAAC,UAAU,SAAS,MAAM,iCAAgC,WA+BjG,CAAA;AAID,+GAA+G;AAC/G,eAAO,MAAM,aAAa,gBAAuB,MAAM,WAAW,OAAO,KAAK,WAAW,WAAW,oBAqBnG,CAAA;AAED,yHAAyH;AACzH,eAAO,MAAM,eAAe,YAAa,OAAO,KAAG;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,KAAK,CAAA;CAWlG,CAAA;AAID,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,MAAM,CAAA;AAElD,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,SAAS,CAAA;IACf,OAAO,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;IAClC,+EAA+E;IAC/E,OAAO,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAA;CACxC;AAED,qHAAqH;AACrH,eAAO,MAAM,YAAY,6CAA8D,YAAY,KAAG,YAYlG,CAAA;AAEJ,eAAO,MAAM,WAAW,YAAa,MAAM,WAAmD,CAAA;AAE9F,MAAM,WAAW,aAAc,SAAQ,YAAY;IACjD,MAAM,EAAE,WAAW,CAAA;IACnB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,KAAK,CAAC,EAAE,OAAO,KAAK,GAAG,SAAS,CAAA;IAChC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CACjC;AAED,yHAAyH;AACzH,eAAO,MAAM,WAAW,YAAa,aAAa,KAAG,WAWjD,CAAA;AAEJ,eAAO,MAAM,eAAe,WAAY,WAAW,QAAQ,SAAS,WAAW,MAAM,KAAG,cAKtF,CAAA;AAEF,kHAAkH;AAClH,eAAO,MAAM,eAAe,gBAAiB,MAAM,QAAQ,SAAS,KAAG,cAIrE,CAAA;AAEF;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,SAAS,CAAA;IACnB,MAAM,EAAE,SAAS,GAAG,KAAK,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAID,eAAO,MAAM,aAAa,QAAS,MAAM,CAAC,UAAU,KAAG,MAAM,CAAC,MAAM,EAAE,YAAY,CASjF,CAAA;AAED,eAAO,MAAM,YAAY,QAAe,MAAM,CAAC,UAAU,WAAW,MAAM,UAAU,YAAY,GAAG,SAAS,kBAO3G,CAAA;AAED,4GAA4G;AAC5G,eAAO,MAAM,aAAa,QAAS,MAAM,uDAA+C,OAAO,CAAC,IAAI,CAchG,CAAA"}