@wirecat/mail-cli 0.5.0 → 0.7.0

package/dist/oauth.js

@@ -0,0 +1,230 @@
+import { spawn } from "node:child_process";
+import { mkdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { CliError, isMovedRun, resolvePaths, systemKeyring } from "@wirecat/cli-base";
+import { privateFiles } from "@wirecat/cli-core/cli";
+import { writeFileAtomic } from "@wirecat/cli-core/files";
+import { credentialStorage, oauthAccount, standardCodec, tokenKeeper, } from "@wirecat/cli-core/oauth";
+import * as v from "valibot";
+import { IDENTITY } from "./identity.js";
+/**
+ * WireCat's Microsoft app: a public client for any Entra tenant and personal accounts. Empty until WireCat registers
+ * it (docs/oauth-microsoft.md); until then a sign-in needs `microsoft_client_id` in the config.
+ */
+export const WIRECAT_MICROSOFT_CLIENT_ID = "";
+export const OAUTH_GUIDE = "https://github.com/WireCatLabs/mail-cli/blob/main/docs/oauth-microsoft.md";
+export const MICROSOFT_IMAP_SCOPE = "https://outlook.office.com/IMAP.AccessAsUser.All";
+export const MICROSOFT_SMTP_SCOPE = "https://outlook.office.com/SMTP.Send";
+/** IMAP and SMTP are one resource, so one token covers both; offline_access brings the refresh token. */
+export const MICROSOFT_SCOPES = ["offline_access", MICROSOFT_IMAP_SCOPE, MICROSOFT_SMTP_SCOPE];
+export const GOOGLE_GUIDE = "https://github.com/WireCatLabs/mail-cli/blob/main/docs/oauth-google.md";
+/** The only scope Gmail gives IMAP and SMTP: https://developers.google.com/workspace/gmail/imap/xoauth2-protocol */
+export const GOOGLE_MAIL_SCOPE = "https://mail.google.com/";
+export const GOOGLE_SCOPES = ["openid", "email", GOOGLE_MAIL_SCOPE];
+/** What each scope lets mail do, shown before the browser opens. */
+export const SCOPE_WORDS = {
+    offline_access: "stay signed in, so a scheduled sync needs no new sign-in",
+    [MICROSOFT_IMAP_SCOPE]: "read and change your mail over IMAP",
+    [MICROSOFT_SMTP_SCOPE]: "send mail as you over SMTP",
+    openid: "know which account signed in",
+    email: "see its address, to check it is this mailbox",
+    [GOOGLE_MAIL_SCOPE]: "read, change and send your Gmail over IMAP and SMTP",
+};
+export const OAUTH_NAMES = { microsoft: "Microsoft", google: "Google" };
+export const scopesOf = (kind) => kind === "microsoft" ? MICROSOFT_SCOPES : GOOGLE_SCOPES;
+/** The scope without which a profile cannot send. */
+export const sendScopeOf = (kind) => (kind === "microsoft" ? MICROSOFT_SMTP_SCOPE : GOOGLE_MAIL_SCOPE);
+// https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-auth-code-flow: a public client sends no secret,
+// and `common` takes work, school and personal accounts.
+const microsoftProvider = (client, address) => ({
+    id: "microsoft",
+    name: "Microsoft",
+    authorizeUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
+    tokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
+    client,
+    redirect: { kind: "loopback" },
+    authorizeParams: { prompt: "select_account", ...(address ? { login_hint: address } : {}) },
+});
+const googleProvider = (client, address) => ({
+    id: "google",
+    name: "Google",
+    authorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth",
+    tokenUrl: "https://oauth2.googleapis.com/token",
+    revokeUrl: "https://oauth2.googleapis.com/revoke",
+    client,
+    redirect: { kind: "loopback" },
+    // Without offline access Google returns no refresh token; without consent it does not return one again.
+    authorizeParams: {
+        access_type: "offline",
+        prompt: "select_account consent",
+        ...(address ? { login_hint: address } : {}),
+    },
+});
+const standardGoogle = standardCodec("google");
+const entryObject = (text) => {
+    const value = JSON.parse(text);
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        throw new CliError("authentication_error", "the saved sign-in cannot be read; sign in again", {
+            reason: "oauth.invalid",
+        });
+    return { ...value };
+};
+/**
+ * gcal's codec (gcal-cli src/google.ts): a Google Desktop client needs its secret to refresh, and the client file is
+ * read once, at sign-in, so the entry keeps the secret. The third copy after gcal and drive (DEBT, journal).
+ */
+const googleCodec = {
+    decode: (raw) => {
+        const stored = standardGoogle.decode(raw);
+        const { clientSecret } = entryObject(raw);
+        return typeof clientSecret === "string" && clientSecret
+            ? { ...stored, client: { clientId: stored.client?.clientId ?? "", clientSecret } }
+            : stored;
+    },
+    encode: (input) => {
+        const entry = entryObject(standardGoogle.encode(input));
+        if (input.client.clientSecret)
+            entry.clientSecret = input.client.clientSecret;
+        else
+            delete entry.clientSecret;
+        return JSON.stringify(entry);
+    },
+};
+const ClientFile = v.object({
+    installed: v.object({ client_id: v.pipe(v.string(), v.minLength(1)), client_secret: v.optional(v.string()) }),
+});
+/** The owner's Desktop client: `--client-file` (private to the owner), else MAIL_GOOGLE_CLIENT_ID; no bundled one. */
+export const googleClient = (env, file, platform = process.platform) => {
+    if (!file) {
+        const clientId = env.MAIL_GOOGLE_CLIENT_ID;
+        const clientSecret = env.MAIL_GOOGLE_CLIENT_SECRET;
+        if (clientId)
+            return { clientId, ...(clientSecret ? { clientSecret } : {}) };
+        throw new CliError("configuration_error", `Gmail over OAuth needs your own Google app: pass --client-file <Desktop client JSON> (steps: ${GOOGLE_GUIDE})`, { reason: "mail.oauth-no-client" });
+    }
+    const mode = privateFiles({ files: [file], dirs: [] }, platform);
+    if (mode.checked && !mode.ok)
+        throw new CliError("configuration_error", `the client file can be read by other users of this computer; run chmod 600 ${file} and try again`, { reason: "sign-in.client-file-open" });
+    try {
+        const { installed } = v.parse(ClientFile, JSON.parse(readFileSync(file, "utf8")));
+        return {
+            clientId: installed.client_id,
+            ...(installed.client_secret ? { clientSecret: installed.client_secret } : {}),
+        };
+    }
+    catch {
+        throw new CliError("configuration_error", "could not read a Desktop app OAuth client JSON from the client file; its contents were not logged", { reason: "sign-in.client-file-invalid" });
+    }
+};
+const UserInfo = v.object({ email: v.optional(v.string()), email_verified: v.optional(v.boolean()) });
+/** The address Google signed in, from OpenID userinfo; the token goes in a header, so no failure prints it. */
+export const googleAddress = async (accessToken, fetcher, signal) => {
+    const timeout = AbortSignal.timeout(30_000);
+    let response;
+    try {
+        response = await fetcher("https://openidconnect.googleapis.com/v1/userinfo", {
+            headers: { authorization: `Bearer ${accessToken}`, accept: "application/json" },
+            signal: signal ? AbortSignal.any([signal, timeout]) : timeout,
+            redirect: "error",
+        });
+    }
+    catch {
+        throw new CliError("provider_unavailable", "Google did not answer the account lookup; try again", {
+            retryable: true,
+        });
+    }
+    if (!response.ok)
+        throw new CliError("authentication_error", `Google refused the account lookup (HTTP ${response.status})`);
+    const info = v.safeParse(UserInfo, await response.json().catch(() => undefined));
+    const email = info.success ? info.output.email : undefined;
+    if (!email || (info.success && info.output.email_verified === false))
+        throw new CliError("authentication_error", "Google gave no verified address for this account");
+    return email.toLowerCase();
+};
+/** The owner's own Microsoft app when the config names one, else WireCat's; only the owner sets the key (OWNER_ONLY). */
+export const microsoftClient = (mailbox) => {
+    const own = mailbox.microsoftClientId?.trim();
+    if (own)
+        return { client: { clientId: own }, source: own === WIRECAT_MICROSOFT_CLIENT_ID ? "wirecat" : "own" };
+    if (WIRECAT_MICROSOFT_CLIENT_ID)
+        return { client: { clientId: WIRECAT_MICROSOFT_CLIENT_ID }, source: "wirecat" };
+    throw new CliError("configuration_error", "this mail build has no Microsoft app to sign in with yet. Register your own (a free Microsoft Entra app, " +
+        `steps: ${OAUTH_GUIDE}) and set its Application (client) ID once, in a terminal: ` +
+        `\`${IDENTITY.command} config set --defaults microsoft_client_id <id>\``, { reason: "mail.oauth-no-client" });
+};
+const paths = (env) => resolvePaths({ appName: IDENTITY.appName, prefix: IDENTITY.envPrefix, env });
+/** The entry `oauth:<provider>:<profile>` beside the profile's app password, under the same options (WC-SECR-24). */
+export const oauthStorage = ({ env, profile, kind, keyring = systemKeyring, storage }) => credentialStorage({
+    credentials: {
+        configDir: paths(env).config,
+        service: IDENTITY.appName,
+        storage: storage === "file" ? "file" : "auto",
+        env,
+        isolated: keyring === systemKeyring && isMovedRun({ appName: IDENTITY.appName, prefix: IDENTITY.envPrefix, env }),
+        keyring,
+    },
+    account: oauthAccount(kind, profile),
+    codec: kind === "google" ? googleCodec : standardCodec(kind),
+});
+export const signInWords = (profile) => `${IDENTITY.command} ${profile} session start`;
+/** One profile's sign-in, refreshed under a lock every mail process shares; a refresh uses the app it signed in with. */
+export const oauthKeeper = (options) => tokenKeeper({
+    provider: options.kind === "google"
+        ? googleProvider(options.client, options.address)
+        : microsoftProvider(options.client, options.address),
+    storage: oauthStorage(options),
+    lockDir: paths(options.env).config,
+    fetch: options.fetch ?? globalThis.fetch,
+    signInCommand: signInWords(options.profile),
+    ...(options.signal ? { signal: options.signal } : {}),
+});
+export const oauthCredential = (keeper, kind, profile) => ({
+    kind: "oauth",
+    provider: kind,
+    signInCommand: signInWords(profile),
+    login: async ({ refresh = false } = {}) => ({ accessToken: await keeper.accessToken({ refresh }) }),
+});
+/** A token just received at sign-in, before anything is saved: a refusal fails the sign-in, nothing refreshes. */
+export const tokenCredential = (accessToken, kind) => ({
+    kind: "oauth",
+    provider: kind,
+    login: async () => ({ accessToken }),
+});
+const recordsPath = (env) => join(paths(env).state, "sign-ins.json");
+export const signInRecords = (env) => {
+    try {
+        const value = JSON.parse(readFileSync(recordsPath(env), "utf8"));
+        return typeof value === "object" && value !== null && !Array.isArray(value)
+            ? value
+            : {};
+    }
+    catch {
+        return {};
+    }
+};
+export const recordSignIn = async (env, profile, record) => {
+    const records = signInRecords(env);
+    if (record)
+        records[profile] = record;
+    else if (profile in records)
+        delete records[profile];
+    else
+        return;
+    mkdirSync(paths(env).state, { recursive: true });
+    await writeFileAtomic(recordsPath(env), `${JSON.stringify(records, null, 2)}\n`, { mode: 0o600 });
+};
+/** The system browser; the sign-in link is printed too, so a failure here only means opening it by hand. */
+export const systemBrowser = (url, platform = process.platform, start = spawn) => new Promise((resolve, reject) => {
+    const [command, args] = platform === "darwin"
+        ? ["open", [url]]
+        : platform === "win32"
+            ? ["rundll32.exe", ["url.dll,FileProtocolHandler", url]]
+            : ["xdg-open", [url]];
+    const child = start(command, args, { detached: true, stdio: "ignore", windowsHide: true });
+    child.once("error", () => reject(new CliError("configuration_error", `could not start ${command}`)));
+    child.once("spawn", () => {
+        child.unref();
+        resolve();
+    });
+});
+//# sourceMappingURL=oauth.js.map

package/dist/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAqB,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACxG,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EACL,iBAAiB,EAGjB,YAAY,EACZ,aAAa,EAIb,WAAW,GACZ,MAAM,yBAAyB,CAAA;AAChC,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAKxC;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAA;AAE7C,MAAM,CAAC,MAAM,WAAW,GAAG,2EAA2E,CAAA;AAEtG,MAAM,CAAC,MAAM,oBAAoB,GAAG,kDAAkD,CAAA;AACtF,MAAM,CAAC,MAAM,oBAAoB,GAAG,sCAAsC,CAAA;AAC1E,yGAAyG;AACzG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,oBAAoB,CAAU,CAAA;AAEvG,MAAM,CAAC,MAAM,YAAY,GAAG,wEAAwE,CAAA;AACpG,oHAAoH;AACpH,MAAM,CAAC,MAAM,iBAAiB,GAAG,0BAA0B,CAAA;AAC3D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,CAAU,CAAA;AAE5E,oEAAoE;AACpE,MAAM,CAAC,MAAM,WAAW,GAA2B;IACjD,cAAc,EAAE,0DAA0D;IAC1E,CAAC,oBAAoB,CAAC,EAAE,qCAAqC;IAC7D,CAAC,oBAAoB,CAAC,EAAE,4BAA4B;IACpD,MAAM,EAAE,8BAA8B;IACtC,KAAK,EAAE,8CAA8C;IACrD,CAAC,iBAAiB,CAAC,EAAE,qDAAqD;CAC3E,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAA8B,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AAClG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAe,EAAqB,EAAE,CAC7D,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAA;AACzD,qDAAqD;AACrD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAe,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAA;AAEjH,uHAAuH;AACvH,yDAAyD;AACzD,MAAM,iBAAiB,GAAG,CAAC,MAAmB,EAAE,OAAgB,EAAiB,EAAE,CAAC,CAAC;IACnF,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,WAAW;IACjB,YAAY,EAAE,gEAAgE;IAC9E,QAAQ,EAAE,4DAA4D;IACtE,MAAM;IACN,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;IAC9B,eAAe,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;CAC3F,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,CAAC,MAAmB,EAAE,OAAgB,EAAiB,EAAE,CAAC,CAAC;IAChF,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,QAAQ;IACd,YAAY,EAAE,8CAA8C;IAC5D,QAAQ,EAAE,qCAAqC;IAC/C,SAAS,EAAE,sCAAsC;IACjD,MAAM;IACN,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;IAC9B,wGAAwG;IACxG,eAAe,EAAE;QACf,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,wBAAwB;QAChC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C;CACF,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;AAC9C,MAAM,WAAW,GAAG,CAAC,IAAY,EAA2B,EAAE;IAC5D,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrE,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,iDAAiD,EAAE;YAC5F,MAAM,EAAE,eAAe;SACxB,CAAC,CAAA;IACJ,OAAO,EAAE,GAAG,KAAK,EAAE,CAAA;AACrB,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,WAAW,GAAe;IAC9B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;QACd,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACzC,MAAM,EAAE,YAAY,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QACzC,OAAO,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY;YACrD,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE;YAClF,CAAC,CAAC,MAAM,CAAA;IACZ,CAAC;IACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAChB,MAAM,KAAK,GAAG,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACvD,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY;YAAE,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,CAAA;;YACxE,OAAO,KAAK,CAAC,YAAY,CAAA;QAC9B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;CACF,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;CAC9G,CAAC,CAAA;AAEF,sHAAsH;AACtH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAsB,EAAE,IAAa,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAe,EAAE;IAC9G,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,QAAQ,GAAG,GAAG,CAAC,qBAAqB,CAAA;QAC1C,MAAM,YAAY,GAAG,GAAG,CAAC,yBAAyB,CAAA;QAClD,IAAI,QAAQ;YAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QAC5E,MAAM,IAAI,QAAQ,CAChB,qBAAqB,EACrB,gGAAgG,YAAY,GAAG,EAC/G,EAAE,MAAM,EAAE,sBAAsB,EAAE,CACnC,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAA;IAChE,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE;QAC1B,MAAM,IAAI,QAAQ,CAChB,qBAAqB,EACrB,8EAA8E,IAAI,gBAAgB,EAClG,EAAE,MAAM,EAAE,0BAA0B,EAAE,CACvC,CAAA;IACH,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;QACjF,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,SAAS;YAC7B,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,qBAAqB,EACrB,mGAAmG,EACnG,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAC1C,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;AAErG,+GAA+G;AAC/G,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,WAAmB,EAAE,OAAqB,EAAE,MAAoB,EAAE,EAAE;IACtG,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3C,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,kDAAkD,EAAE;YAC3E,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC/E,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO;YAC7D,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,qDAAqD,EAAE;YAChG,SAAS,EAAE,IAAI;SAChB,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,2CAA2C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAA;IAC3G,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;IAChF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1D,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC;QAClE,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,kDAAkD,CAAC,CAAA;IAChG,OAAO,KAAK,CAAC,WAAW,EAAE,CAAA;AAC5B,CAAC,CAAA;AAED,yHAAyH;AACzH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAgB,EAAsD,EAAE;IACtG,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAA;IAC7C,IAAI,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,KAAK,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAA;IAC9G,IAAI,2BAA2B;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,2BAA2B,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAChH,MAAM,IAAI,QAAQ,CAChB,qBAAqB,EACrB,2GAA2G;QACzG,UAAU,WAAW,6DAA6D;QAClF,KAAK,QAAQ,CAAC,OAAO,mDAAmD,EAC1E,EAAE,MAAM,EAAE,sBAAsB,EAAE,CACnC,CAAA;AACH,CAAC,CAAA;AAED,MAAM,KAAK,GAAG,CAAC,GAAsB,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAA;AAatH,qHAAqH;AACrH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,aAAa,EAAE,OAAO,EAAgB,EAAgB,EAAE,CACnH,iBAAiB,CAAC;IAChB,WAAW,EAAE;QACX,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM;QAC5B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC7C,GAAG;QACH,QAAQ,EAAE,OAAO,KAAK,aAAa,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC;QACjH,OAAO;KACR;IACD,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC;IACpC,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC;CAC7D,CAAC,CAAA;AAEJ,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,IAAI,OAAO,gBAAgB,CAAA;AAU9F,yHAAyH;AACzH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAsB,EAAe,EAAE,CACjE,WAAW,CAAC;IACV,QAAQ,EACN,OAAO,CAAC,IAAI,KAAK,QAAQ;QACvB,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC;QACjD,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC;IACxD,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;IAC9B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM;IAClC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK;IACxC,aAAa,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;IAC3C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CACtD,CAAC,CAAA;AAEJ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAmB,EAAE,IAAe,EAAE,OAAe,EAAkB,EAAE,CAAC,CAAC;IACzG,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,WAAW,CAAC,OAAO,CAAC;IACnC,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;CACpG,CAAC,CAAA;AAEF,kHAAkH;AAClH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,WAAmB,EAAE,IAAe,EAAkB,EAAE,CAAC,CAAC;IACxF,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,IAAI;IACd,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;CACrC,CAAC,CAAA;AAaF,MAAM,WAAW,GAAG,CAAC,GAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;AAEvF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAsB,EAAgC,EAAE;IACpF,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;QACzE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzE,CAAC,CAAE,KAAsC;YACzC,CAAC,CAAC,EAAE,CAAA;IACR,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,GAAsB,EAAE,OAAe,EAAE,MAAgC,EAAE,EAAE;IAC9G,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IAClC,IAAI,MAAM;QAAE,OAAO,CAAC,OAAO,CAAC,GAAG,MAAM,CAAA;SAChC,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAA;;QAC/C,OAAM;IACX,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAChD,MAAM,eAAe,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AACnG,CAAC,CAAA;AAED,4GAA4G;AAC5G,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,KAAK,GAAG,KAAK,EAAiB,EAAE,CACtG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GACnB,QAAQ,KAAK,QAAQ;QACnB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC,CAAC,QAAQ,KAAK,OAAO;YACpB,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;IAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1F,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,qBAAqB,EAAE,mBAAmB,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;IACpG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;QACvB,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,OAAO,EAAE,CAAA;IACX,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/program.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":"AAEA,OAAO,EAQL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,UAAU,EAMhB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAqBxC,eAAO,MAAM,UAAU,QAAO,iBAsC5B,CAAA;AAEF,eAAO,MAAM,aAAa,aAAc,cAAc,KAAG,OAAqD,CAAA;AAE9G,eAAO,MAAM,GAAG,SAAU,MAAM,EAAE,YAAY,UAAU,KAAG,OAAO,CAAC,MAAM,CAA2C,CAAA"}
+{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":"AAEA,OAAO,EAQL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,UAAU,EAMhB,MAAM,uBAAuB,CAAA;AAE9B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAqCxC,eAAO,MAAM,UAAU,QAAO,iBA2C5B,CAAA;AAEF,eAAO,MAAM,aAAa,aAAc,cAAc,KAAG,OAAqD,CAAA;AAE9G,eAAO,MAAM,GAAG,SAAU,MAAM,EAAE,YAAY,UAAU,KAAG,OAAO,CAAC,MAAM,CAA2C,CAAA"}

package/dist/program.js

@@ -3,13 +3,21 @@ import { resolvePaths } from "@wirecat/cli-base";
 import { appDoctorCommand, appMcpCommand, baseContext, commandsCommand, configCommand, createProgram as createSharedProgram, outputFor, run as runShared, runsCommand, scheduleCommandFor, skillCommand, upgradeCommand, } from "@wirecat/cli-core/cli";
 import { appUpdate } from "@wirecat/cli-core/update";
 import { accountCommand } from "./commands/account.js";
+import { attachmentsCommand } from "./commands/attachments.js";
+import { draftsCommand } from "./commands/drafts.js";
 import { foldersCommand } from "./commands/folders.js";
+import { messageWrites } from "./commands/messages.js";
 import { readCommands } from "./commands/read.js";
+import { rulesCommand } from "./commands/rules.js";
+import { forwardCommand, sendCommand } from "./commands/send.js";
 import { sessionCommand } from "./commands/session.js";
+import { statsCommand } from "./commands/stats.js";
 import { statusCommand } from "./commands/status.js";
 import { syncCommand } from "./commands/sync.js";
-import { configuration } from "./config.js";
+import { tagsCommand } from "./commands/tags.js";
+import { configuration, OWNER_ONLY } from "./config.js";
 import { IDENTITY, PACKAGE, SKILL } from "./identity.js";
+import { localChecks } from "./mail/doctor.js";
 const update = appUpdate({
     packageName: PACKAGE,
     command: IDENTITY.command,
@@ -19,6 +27,15 @@ const update = appUpdate({
     enabled: (env) => configuration.resolveSettings({}, { env, needsProfile: false }).updateCheck,
     offVariables: [`${IDENTITY.envPrefix}_NO_UPDATE_CHECK`],
 });
+/** cli-core's `messages` group reads; the changes to a mailbox go beside `messages show`. */
+const withWrites = (reads) => {
+    const messages = reads.find((one) => one.name() === "messages");
+    if (!messages)
+        throw new Error("cli-core's mail reads have no messages group");
+    for (const write of [...messageWrites(), sendCommand(), forwardCommand()])
+        messages.addCommand(write);
+    return reads;
+};
 export const definition = () => ({
     app: IDENTITY,
     firstScreen: { start: `${IDENTITY.command} personal session start --address <email>` },
@@ -29,9 +46,14 @@ export const definition = () => ({
         accountCommand(),
         foldersCommand(),
         syncCommand(),
+        rulesCommand(),
         statusCommand(),
-        ...readCommands(),
-        appDoctorCommand(IDENTITY, configuration, { packageName: PACKAGE }),
+        ...withWrites(readCommands()),
+        attachmentsCommand(),
+        statsCommand(),
+        draftsCommand(),
+        tagsCommand(),
+        appDoctorCommand(IDENTITY, configuration, { packageName: PACKAGE, local: localChecks }),
         skillCommand(IDENTITY, SKILL),
         appMcpCommand(IDENTITY, configuration, {
             name: "mail",
@@ -45,7 +67,7 @@ export const definition = () => ({
             latest: () => update.latest({}),
             install: (argv) => update.runUpdate(argv, {}),
         })),
-        configCommand(IDENTITY, configuration),
+        configCommand(IDENTITY, configuration, { ownerOnly: OWNER_ONLY }),
         runsCommand(IDENTITY),
         scheduleCommandFor({
             app: IDENTITY,

package/dist/program.js.map

@@ -1 +1 @@
-{"version":3,"file":"program.js","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,eAAe,EACf,aAAa,EACb,aAAa,IAAI,mBAAmB,EACpC,SAAS,EAIT,GAAG,IAAI,SAAS,EAChB,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,cAAc,GACf,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAEpD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAA;AAExD,MAAM,MAAM,GAAG,SAAS,CAAC;IACvB,WAAW,EAAE,OAAO;IACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,KAAK,EAAE,OAAO,IAAI,CAAC,GAAG;IACtB,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CACjB,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,mBAAmB,CAAC;IAC/G,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW;IAC7F,YAAY,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,kBAAkB,CAAC;CACxD,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,GAAsB,EAAE,CAAC,CAAC;IAClD,GAAG,EAAE,QAAQ;IACb,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,OAAO,2CAA2C,EAAE;IACtF,aAAa;IACb,QAAQ,EAAE,GAAG,EAAE,CAAC;QACd,eAAe,CAAC,QAAQ,CAAC;QACzB,cAAc,EAAE;QAChB,cAAc,EAAE;QAChB,cAAc,EAAE;QAChB,WAAW,EAAE;QACb,aAAa,EAAE;QACf,GAAG,YAAY,EAAE;QACjB,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;QACnE,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC;QAC7B,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE;YACrC,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,CAAC;YACxG,iBAAiB,EAAE,WAAW;YAC9B,KAAK,EAAE,KAAK;SACb,CAAC;QACF,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC9C,GAAG,SAAS,CAAC,OAAO,CAAC;YACrB,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;SAC9C,CAAC,CAAC;QACH,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC;QACtC,WAAW,CAAC,QAAQ,CAAC;QACrB,kBAAkB,CAAC;YACjB,GAAG,EAAE,QAAQ;YACb,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE;gBAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CACnD,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC,CACnE,CAAA;gBACD,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAA;YACpD,CAAC;SACF,CAAC;KACH;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAwB,EAAW,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,CAAA;AAE9G,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,IAAc,EAAE,OAAoB,EAAmB,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,OAAO,CAAC,CAAA"}
+{"version":3,"file":"program.js","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,eAAe,EACf,aAAa,EACb,aAAa,IAAI,mBAAmB,EACpC,SAAS,EAIT,GAAG,IAAI,SAAS,EAChB,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,cAAc,GACf,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAEpD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE9C,MAAM,MAAM,GAAG,SAAS,CAAC;IACvB,WAAW,EAAE,OAAO;IACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,KAAK,EAAE,OAAO,IAAI,CAAC,GAAG;IACtB,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CACjB,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,mBAAmB,CAAC;IAC/G,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW;IAC7F,YAAY,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,kBAAkB,CAAC;CACxD,CAAC,CAAA;AAEF,6FAA6F;AAC7F,MAAM,UAAU,GAAG,CAAC,KAAgB,EAAa,EAAE;IACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC,CAAA;IAC/D,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IAC9E,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,aAAa,EAAE,EAAE,WAAW,EAAE,EAAE,cAAc,EAAE,CAAC;QAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IACrG,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,GAAsB,EAAE,CAAC,CAAC;IAClD,GAAG,EAAE,QAAQ;IACb,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,OAAO,2CAA2C,EAAE;IACtF,aAAa;IACb,QAAQ,EAAE,GAAG,EAAE,CAAC;QACd,eAAe,CAAC,QAAQ,CAAC;QACzB,cAAc,EAAE;QAChB,cAAc,EAAE;QAChB,cAAc,EAAE;QAChB,WAAW,EAAE;QACb,YAAY,EAAE;QACd,aAAa,EAAE;QACf,GAAG,UAAU,CAAC,YAAY,EAAE,CAAC;QAC7B,kBAAkB,EAAE;QACpB,YAAY,EAAE;QACd,aAAa,EAAE;QACf,WAAW,EAAE;QACb,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACvF,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC;QAC7B,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE;YACrC,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,CAAC;YACxG,iBAAiB,EAAE,WAAW;YAC9B,KAAK,EAAE,KAAK;SACb,CAAC;QACF,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC9C,GAAG,SAAS,CAAC,OAAO,CAAC;YACrB,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;SAC9C,CAAC,CAAC;QACH,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;QACjE,WAAW,CAAC,QAAQ,CAAC;QACrB,kBAAkB,CAAC;YACjB,GAAG,EAAE,QAAQ;YACb,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE;gBAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CACnD,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC,CACnE,CAAA;gBACD,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAA;YACpD,CAAC;SACF,CAAC;KACH;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAwB,EAAW,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,CAAA;AAE9G,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,IAAc,EAAE,OAAoB,EAAmB,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,OAAO,CAAC,CAAA"}

package/dist/providers.d.ts

@@ -1,3 +1,4 @@
+import type { SearchSyntax } from "./mail/imap/search.js";
 export declare const PROVIDERS_URL = "https://github.com/WireCatLabs/mail-cli/blob/main/docs/providers.md";
 export type Security = "tls" | "starttls";
 export interface Endpoint {
@@ -21,6 +22,30 @@ export interface SyncFolders {
     roles: string[];
     otherwise: string;
 }
+/** How `search messages --backend` asks the server, and which folders by role when the profile names none. */
+export interface ServerSearch {
+    syntax: SearchSyntax;
+    roles: string[];
+    otherwise: string;
+}
+/** How a change reaches the mailbox, where providers differ. */
+export interface Organise {
+    /** Gmail: one All Mail with labels, so a move or copy is a change of labels, and a deletion a move to Trash. */
+    labels?: true;
+    /** Trash under the names the provider gives it, tried when the server marks no folder `\Trash`. */
+    trash: string[];
+    /** Drafts under the names the provider gives it, tried when the server marks no folder `\Drafts`. */
+    drafts: string[];
+}
+/** Where `messages send` submits mail, read from the provider's own help page. */
+export interface Smtp extends Endpoint {
+    /**
+     * The server files what SMTP carried into Sent itself, so a copy appended by the tool would be a second one. Absent:
+     * the help page does not say so, and the tool appends the copy unless Sent already holds that Message-ID.
+     */
+    savesSent?: true;
+    sources: string[];
+}
 export interface Provider {
     name: string;
     /** Address domains it hosts; every provider here logs in with the full address. */
@@ -28,11 +53,14 @@ export interface Provider {
     /** A domain with its own name can still be hosted here: its MX record says where. */
     mx?: RegExp;
     imap: Endpoint;
-    /** Not used until sending comes; check it against the provider's help page then. */
-    smtp: Endpoint;
+    smtp: Smtp;
     auth: "app-password" | "oauth";
+    /** Signs in with this OAuth provider: the only way when `auth` is `oauth`, else with `session start --client-file`. */
+    oauth?: "microsoft" | "google";
     note?: string;
     sync?: SyncFolders;
+    search?: ServerSearch;
+    organise?: Organise;
     prepare: Prepare;
 }
 declare const TABLE: {
@@ -41,9 +69,18 @@ declare const TABLE: {
         domains: string[];
         mx: RegExp;
         imap: Endpoint;
-        smtp: Endpoint;
+        smtp: {
+            host: string;
+            port: number;
+            security: Security;
+            sources: string[];
+        };
         auth: "app-password";
         note: string;
+        organise: {
+            trash: string[];
+            drafts: string[];
+        };
         prepare: {
             steps: string[];
             notes: string[];
@@ -56,14 +93,31 @@ declare const TABLE: {
         domains: string[];
         mx: RegExp;
         imap: Endpoint;
-        smtp: Endpoint;
+        smtp: {
+            host: string;
+            port: number;
+            security: Security;
+            savesSent: true;
+            sources: string[];
+        };
         auth: "app-password";
+        oauth: "google";
         note: string;
         sync: {
             mode: "gmail";
             roles: string[];
             otherwise: string;
         };
+        search: {
+            syntax: "gmail";
+            roles: string[];
+            otherwise: string;
+        };
+        organise: {
+            labels: true;
+            trash: string[];
+            drafts: string[];
+        };
         prepare: {
             steps: string[];
             notes: string[];
@@ -79,6 +133,7 @@ declare const TABLE: {
             host: string;
             port: number;
             security: "starttls";
+            sources: string[];
         };
         auth: "app-password";
         note: string;
@@ -94,7 +149,12 @@ declare const TABLE: {
         domains: string[];
         mx: RegExp;
         imap: Endpoint;
-        smtp: Endpoint;
+        smtp: {
+            host: string;
+            port: number;
+            security: Security;
+            sources: string[];
+        };
         auth: "app-password";
         note: string;
         prepare: {
@@ -109,7 +169,12 @@ declare const TABLE: {
         domains: string[];
         mx: RegExp;
         imap: Endpoint;
-        smtp: Endpoint;
+        smtp: {
+            host: string;
+            port: number;
+            security: Security;
+            sources: string[];
+        };
         auth: "app-password";
         prepare: {
             steps: string[];
@@ -118,18 +183,19 @@ declare const TABLE: {
             sources: string[];
         };
     };
-    outlook: {
+    microsoft365: {
         name: string;
-        domains: string[];
+        domains: never[];
         mx: RegExp;
         imap: Endpoint;
         smtp: {
             host: string;
             port: number;
             security: "starttls";
+            sources: string[];
         };
         auth: "oauth";
-        note: string;
+        oauth: "microsoft";
         prepare: {
             steps: string[];
             notes: string[];
@@ -137,6 +203,25 @@ declare const TABLE: {
             sources: string[];
         };
     };
+    outlook: {
+        name: string;
+        domains: string[];
+        imap: Endpoint;
+        smtp: {
+            host: string;
+            port: number;
+            security: "starttls";
+            sources: string[];
+        };
+        auth: "oauth";
+        oauth: "microsoft";
+        prepare: {
+            steps: string[];
+            notes: never[];
+            refused: string;
+            sources: string[];
+        };
+    };
 };
 export type ProviderKey = keyof typeof TABLE;
 /** One entry per built-in provider: how it is found, its servers, how it signs in and how to prepare it. */
@@ -144,6 +229,8 @@ export declare const PROVIDERS: Record<ProviderKey, Provider>;
 export declare const PROVIDER_KEYS: ProviderKey[];
 export declare const providerByDomain: (domain: string) => ProviderKey | undefined;
 export declare const DEFAULT_SYNC: SyncFolders;
+export declare const DEFAULT_SEARCH: ServerSearch;
+export declare const DEFAULT_ORGANISE: Organise;
 /** The provider of a saved profile: its address domain first, then its server host (a domain of its own on Yandex). */
 export declare const providerFor: (address: string, host: string | undefined) => Provider | undefined;
 export declare const GENERIC_PREPARE: Prepare;

package/dist/providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,aAAa,wEAAwE,CAAA;AAElG,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,UAAU,CAAA;AAEzC,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,QAAQ,CAAA;CACnB;AAED,MAAM,WAAW,OAAO;IACtB,sHAAsH;IACtH,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAA;IACf,wDAAwD;IACxD,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,iHAAiH;AACjH,MAAM,WAAW,WAAW;IAC1B,uGAAuG;IACvG,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,mFAAmF;IACnF,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,qFAAqF;IACrF,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,QAAQ,CAAA;IACd,oFAAoF;IACpF,IAAI,EAAE,QAAQ,CAAA;IACd,IAAI,EAAE,cAAc,GAAG,OAAO,CAAA;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,OAAO,EAAE,OAAO,CAAA;CACjB;AAID,QAAA,MAAM,KAAK;;;;;;;;;;YAUL,KAAK;YAQL,KAAK;YAIL,OAAO;YAEP,OAAO;;;;;;;;;;;;;;;;;YAiBP,KAAK;YAML,KAAK;YAGL,OAAO;YAEP,OAAO;;;;;;;;;;;;;;;YAWP,KAAK;YAOL,KAAK;YAGL,OAAO;YAEP,OAAO;;;;;;;;;;;;YAYP,KAAK;YAOL,KAAK;YAGL,OAAO;YACP,OAAO;;;;;;;;;;;YAWP,KAAK;YAOL,KAAK;YACL,OAAO;YAEP,OAAO;;;;;;;;;;;;;;;;YAYP,KAAK;YAIL,KAAK;YAGL,OAAO;YACP,OAAO;;;CAKuB,CAAA;AAEpC,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,KAAK,CAAA;AAE5C,4GAA4G;AAC5G,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAS,CAAA;AAE7D,eAAO,MAAM,aAAa,EAA6B,WAAW,EAAE,CAAA;AAEpE,eAAO,MAAM,gBAAgB,WAAY,MAAM,KAAG,WAAW,GAAG,SACM,CAAA;AAEtE,eAAO,MAAM,YAAY,EAAE,WAA8D,CAAA;AAEzF,uHAAuH;AACvH,eAAO,MAAM,WAAW,YAAa,MAAM,QAAQ,MAAM,GAAG,SAAS,KAAG,QAAQ,GAAG,SAIlF,CAAA;AAED,eAAO,MAAM,eAAe,EAAE,OAO7B,CAAA;AAED,4GAA4G;AAC5G,eAAO,MAAM,WAAW,aAAc,MAAM,WAAW,OAAO,KAAG,MAShE,CAAA"}
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAEzD,eAAO,MAAM,aAAa,wEAAwE,CAAA;AAElG,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,UAAU,CAAA;AAEzC,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,QAAQ,CAAA;CACnB;AAED,MAAM,WAAW,OAAO;IACtB,sHAAsH;IACtH,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAA;IACf,wDAAwD;IACxD,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,iHAAiH;AACjH,MAAM,WAAW,WAAW;IAC1B,uGAAuG;IACvG,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,8GAA8G;AAC9G,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAA;IACpB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,gEAAgE;AAChE,MAAM,WAAW,QAAQ;IACvB,gHAAgH;IAChH,MAAM,CAAC,EAAE,IAAI,CAAA;IACb,mGAAmG;IACnG,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,qGAAqG;IACrG,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,kFAAkF;AAClF,MAAM,WAAW,IAAK,SAAQ,QAAQ;IACpC;;;OAGG;IACH,SAAS,CAAC,EAAE,IAAI,CAAA;IAChB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,mFAAmF;IACnF,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,qFAAqF;IACrF,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,QAAQ,CAAA;IACd,IAAI,EAAE,IAAI,CAAA;IACV,IAAI,EAAE,cAAc,GAAG,OAAO,CAAA;IAC9B,uHAAuH;IACvH,KAAK,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAA;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;CACjB;AAeD,QAAA,MAAM,KAAK;;;;;;;kBAjFH,MAAM;kBACN,MAAM;sBACF,QAAQ;;;;;;YAwFJ,KAAK;YAAuC,MAAM;;;YAE5D,KAAK;YAQL,KAAK;YAIL,OAAO;YAEP,OAAO;;;;;;;;;kBA1GL,MAAM;kBACN,MAAM;sBACF,QAAQ;;;;;;;;;;;;;;;;;;;;;;;YAyId,KAAK;YAML,KAAK;YAGL,OAAO;YAEP,OAAO;;;;;;;;;;;;;;;;YAgBP,KAAK;YAOL,KAAK;YAGL,OAAO;YAEP,OAAO;;;;;;;;;kBAlLL,MAAM;kBACN,MAAM;sBACF,QAAQ;;;;;;YA4Ld,KAAK;YAOL,KAAK;YAGL,OAAO;YACP,OAAO;;;;;;;;;kBAzML,MAAM;kBACN,MAAM;sBACF,QAAQ;;;;;YAqNd,KAAK;YAOL,KAAK;YACL,OAAO;YAEP,OAAO;;;;;;;;;;;;;;;;;YAaP,KAAK;YAGL,KAAK;YAKL,OAAO;YAEP,OAAO;;;;;;;;;;;;;;;;YAWP,KAAK;YAIL,KAAK;YACL,OAAO;YAEP,OAAO;;;CAGuB,CAAA;AAEpC,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,KAAK,CAAA;AAE5C,4GAA4G;AAC5G,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAS,CAAA;AAE7D,eAAO,MAAM,aAAa,EAA6B,WAAW,EAAE,CAAA;AAEpE,eAAO,MAAM,gBAAgB,WAAY,MAAM,KAAG,WAAW,GAAG,SACM,CAAA;AAEtE,eAAO,MAAM,YAAY,EAAE,WAA8D,CAAA;AAEzF,eAAO,MAAM,cAAc,EAAE,YAA0F,CAAA;AACvH,eAAO,MAAM,gBAAgB,EAAE,QAG9B,CAAA;AAED,uHAAuH;AACvH,eAAO,MAAM,WAAW,YAAa,MAAM,QAAQ,MAAM,GAAG,SAAS,KAAG,QAAQ,GAAG,SAIlF,CAAA;AAED,eAAO,MAAM,eAAe,EAAE,OAO7B,CAAA;AAED,4GAA4G;AAC5G,eAAO,MAAM,WAAW,aAAc,MAAM,WAAW,OAAO,KAAG,MAShE,CAAA"}