@wirecat/mail-cli 0.6.0 → 0.7.0

package/dist/mail/smtp.js

@@ -1,13 +1,20 @@
 import { CliError } from "@wirecat/cli-base";
 import SMTPConnection from "nodemailer/lib/smtp-connection";
+import XOAuth2 from "nodemailer/lib/xoauth2";
 /** The server's reply can quote addresses, so only its codes reach the caller. */
 const codes = (error) => ({
     ...(error.code && /^[A-Z0-9_]{1,40}$/.test(error.code) ? { cause_code: error.code } : {}),
     ...(error.responseCode ? { smtp_code: error.responseCode } : {}),
 });
+const loginRefused = (error) => error.code === "EAUTH" || error.responseCode === 535;
+/** A token refused after a refresh: on Microsoft 365 most often SMTP AUTH turned off for the mailbox. */
+const tokenRefused = (error, credential) => credential.provider === "microsoft"
+    ? new CliError("authentication_error", "Microsoft refused the OAuth login for sending; reading still works. On a Microsoft 365 mailbox an admin " +
+        'has to turn on "Authenticated SMTP" for it (security defaults turn it off for the whole organisation)', { reason: "mail.smtp-auth-disabled", sent: false, ...codes(error) })
+    : new CliError("authentication_error", `the submission server refused the OAuth login; sign in again${credential.signInCommand ? `: ${credential.signInCommand}` : ""}`, { reason: "mail.oauth-refused", sent: false, ...codes(error) });
 /** A failure before the message left: nothing was sent, so the owner may simply run the command again. */
 const beforeSending = (error) => {
-    if (error.code === "EAUTH" || error.responseCode === 535)
+    if (loginRefused(error))
         return new CliError("authentication_error", "the submission server refused the login; check that the app password allows sending (SMTP) for this mailbox", { reason: "mail.smtp-login-refused", sent: false, ...codes(error) });
     if (error.code === "ETIMEDOUT")
         return new CliError("timeout", "the submission server did not answer in time; nothing was sent", {
@@ -45,52 +52,81 @@ const settle = (connection, start) => new Promise((resolve, reject) => {
             resolve(value);
     });
 });
-/** SMTP submission with the profile's login and app password, one connection per message. */
-export const smtpSubmit = (endpoint, password, bounds = {}) => ({
+/** SMTP submission with the profile's login and its app password or OAuth token, one connection per message. */
+export const smtpSubmit = (endpoint, credential, bounds = {}) => ({
     send: async ({ from, recipients, raw }) => {
         const timeout = Math.max(1_000, Math.min(60_000, bounds.timeLeftMs?.() ?? 60_000));
-        const connection = new SMTPConnection({
-            host: endpoint.host,
-            port: endpoint.port,
-            secure: endpoint.security === "tls",
-            requireTLS: endpoint.security === "starttls",
-            ignoreTLS: endpoint.security === "plain",
-            connectionTimeout: 15_000,
-            greetingTimeout: 15_000,
-            socketTimeout: timeout,
-            logger: false,
-        });
-        // An 'error' event with no listener would end the process; each step's callback already rejects.
-        connection.on("error", () => { });
-        const abort = () => connection.close();
-        bounds.signal?.addEventListener("abort", abort, { once: true });
-        try {
+        const open = async (login) => {
+            const connection = new SMTPConnection({
+                host: endpoint.host,
+                port: endpoint.port,
+                secure: endpoint.security === "tls",
+                requireTLS: endpoint.security === "starttls",
+                ignoreTLS: endpoint.security === "plain",
+                connectionTimeout: 15_000,
+                greetingTimeout: 15_000,
+                socketTimeout: timeout,
+                logger: false,
+            });
+            // An 'error' event with no listener would end the process; each step's callback already rejects.
+            connection.on("error", () => { });
+            const abort = () => connection.close();
+            bounds.signal?.addEventListener("abort", abort, { once: true });
+            const done = () => {
+                bounds.signal?.removeEventListener("abort", abort);
+                try {
+                    connection.quit();
+                }
+                catch { }
+            };
             try {
-                await settle(connection, (done) => connection.connect((error) => done(error ?? null)));
-                await settle(connection, (done) => connection.login({ user: endpoint.login, pass: password }, done));
+                await settle(connection, (finish) => connection.connect((error) => finish(error ?? null)));
+                await settle(connection, (finish) => connection.login("pass" in login
+                    ? { user: endpoint.login, pass: login.pass }
+                    : { user: endpoint.login, oauth2: new XOAuth2({ user: endpoint.login, accessToken: login.accessToken }) }, finish));
+                return { connection, done };
             }
             catch (error) {
-                throw beforeSending(error);
+                done();
+                throw error;
             }
+        };
+        let opened;
+        try {
             try {
-                const info = await settle(connection, (done) => connection.send({ from, to: [...recipients] }, Buffer.from(raw), done));
-                return { accepted: info.accepted, rejected: info.rejected };
+                opened = await open(await credential.login());
             }
-            catch (raw) {
-                const error = raw;
-                // The envelope is answered before the body goes; a message refused with a code was not taken either.
-                if (error.code === "EENVELOPE" || (error.code === "EMESSAGE" && error.responseCode))
-                    throw refused(error);
-                throw new CliError("outcome_unknown", "the line to the submission server broke while the message was going; it may have been sent — " +
-                    "look in Sent before sending it again", { retryable: false, ...codes(error) });
+            catch (error) {
+                if (credential.kind !== "oauth" || !loginRefused(error))
+                    throw error;
+                try {
+                    opened = await open(await credential.login({ refresh: true }));
+                }
+                catch (again) {
+                    if (loginRefused(again))
+                        throw tokenRefused(again, credential);
+                    throw again;
+                }
             }
         }
+        catch (error) {
+            throw error instanceof CliError ? error : beforeSending(error);
+        }
+        const { connection, done } = opened;
+        try {
+            const info = await settle(connection, (finish) => connection.send({ from, to: [...recipients] }, Buffer.from(raw), finish));
+            return { accepted: info.accepted, rejected: info.rejected };
+        }
+        catch (raw) {
+            const error = raw;
+            // The envelope is answered before the body goes; a message refused with a code was not taken either.
+            if (error.code === "EENVELOPE" || (error.code === "EMESSAGE" && error.responseCode))
+                throw refused(error);
+            throw new CliError("outcome_unknown", "the line to the submission server broke while the message was going; it may have been sent — " +
+                "look in Sent before sending it again", { retryable: false, ...codes(error) });
+        }
         finally {
-            bounds.signal?.removeEventListener("abort", abort);
-            try {
-                connection.quit();
-            }
-            catch { }
+            done();
         }
     },
 });

package/dist/mail/smtp.js.map

@@ -1 +1 @@
-{"version":3,"file":"smtp.js","sourceRoot":"","sources":["../../src/mail/smtp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,cAAc,MAAM,gCAAgC,CAAA;AAK3D,kFAAkF;AAClF,MAAM,KAAK,GAAG,CAAC,KAAgB,EAAE,EAAE,CAAC,CAAC;IACnC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CACjE,CAAC,CAAA;AAEF,0GAA0G;AAC1G,MAAM,aAAa,GAAG,CAAC,KAAgB,EAAY,EAAE;IACnD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,YAAY,KAAK,GAAG;QACtD,OAAO,IAAI,QAAQ,CACjB,sBAAsB,EACtB,6GAA6G,EAC7G,EAAE,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CACpE,CAAA;IACH,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAC5B,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE,gEAAgE,EAAE;YAC/F,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,IAAI;YACf,GAAG,KAAK,CAAC,KAAK,CAAC;SAChB,CAAC,CAAA;IACJ,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QACvE,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,sDAAsD,EAAE;YAC3F,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,IAAI;YACf,GAAG,KAAK,CAAC,KAAK,CAAC;SAChB,CAAC,CAAA;IACJ,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,gEAAgE,EAAE;QACtG,IAAI,EAAE,KAAK;QACX,GAAG,KAAK,CAAC,KAAK,CAAC;KAChB,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,2FAA2F;AAC3F,MAAM,OAAO,GAAG,CAAC,KAAgB,EAAY,EAAE;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,IAAI,GAAG,IAAI,KAAK,CAAC,YAAY,GAAG,GAAG,CAAA;IAC3G,OAAO,IAAI,QAAQ,CACjB,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,gBAAgB,EACrD,SAAS;QACP,CAAC,CAAC,sFAAsF;QACxF,CAAC,CAAC,6DAA6D,EACjE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAC5E,CAAA;AACH,CAAC,CAAA;AAED,qHAAqH;AACrH,MAAM,MAAM,GAAG,CACb,UAA0B,EAC1B,KAAmE,EACvD,EAAE,CACd,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IACjC,MAAM,MAAM,GAAG,CAAC,KAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAClD,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAChC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC/B,IAAI,KAAK;YAAE,MAAM,CAAC,KAAK,CAAC,CAAA;;YACnB,OAAO,CAAC,KAAU,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEJ,6FAA6F;AAC7F,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,QAAoE,EACpE,QAAgB,EAChB,MAAM,GAAc,EAAE,EACV,EAAE,CAAC,CAAC;IAChB,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAsB,EAAE;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,MAAM,CAAC,CAAC,CAAA;QAClF,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC;YACpC,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,QAAQ,CAAC,QAAQ,KAAK,KAAK;YACnC,UAAU,EAAE,QAAQ,CAAC,QAAQ,KAAK,UAAU;YAC5C,SAAS,EAAE,QAAQ,CAAC,QAAQ,KAAK,OAAO;YACxC,iBAAiB,EAAE,MAAM;YACzB,eAAe,EAAE,MAAM;YACvB,aAAa,EAAE,OAAO;YACtB,MAAM,EAAE,KAAK;SACd,CAAC,CAAA;QACF,iGAAiG;QACjG,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAChC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;QACtC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/D,IAAI,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,MAAM,CAAO,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;gBAC5F,MAAM,MAAM,CAAU,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;YAC/G,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAkB,CAAC,CAAA;YACzC,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAiC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAC7E,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CACvE,CAAA;gBACD,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAA;YAC7D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,GAAgB,CAAA;gBAC9B,qGAAqG;gBACrG,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,YAAY,CAAC;oBAAE,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;gBACzG,MAAM,IAAI,QAAQ,CAChB,iBAAiB,EACjB,+FAA+F;oBAC7F,sCAAsC,EACxC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CACtC,CAAA;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YAClD,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,EAAE,CAAA;YACnB,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;CACF,CAAC,CAAA"}
+{"version":3,"file":"smtp.js","sourceRoot":"","sources":["../../src/mail/smtp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,cAAc,MAAM,gCAAgC,CAAA;AAC3D,OAAO,OAAO,MAAM,wBAAwB,CAAA;AAK5C,kFAAkF;AAClF,MAAM,KAAK,GAAG,CAAC,KAAgB,EAAE,EAAE,CAAC,CAAC;IACnC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CACjE,CAAC,CAAA;AAEF,MAAM,YAAY,GAAG,CAAC,KAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,YAAY,KAAK,GAAG,CAAA;AAE/F,yGAAyG;AACzG,MAAM,YAAY,GAAG,CAAC,KAAgB,EAAE,UAA0B,EAAY,EAAE,CAC9E,UAAU,CAAC,QAAQ,KAAK,WAAW;IACjC,CAAC,CAAC,IAAI,QAAQ,CACV,sBAAsB,EACtB,0GAA0G;QACxG,uGAAuG,EACzG,EAAE,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CACpE;IACH,CAAC,CAAC,IAAI,QAAQ,CACV,sBAAsB,EACtB,+DAA+D,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAChI,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAC/D,CAAA;AAEP,0GAA0G;AAC1G,MAAM,aAAa,GAAG,CAAC,KAAgB,EAAY,EAAE;IACnD,IAAI,YAAY,CAAC,KAAK,CAAC;QACrB,OAAO,IAAI,QAAQ,CACjB,sBAAsB,EACtB,6GAA6G,EAC7G,EAAE,MAAM,EAAE,yBAAyB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CACpE,CAAA;IACH,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAC5B,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE,gEAAgE,EAAE;YAC/F,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,IAAI;YACf,GAAG,KAAK,CAAC,KAAK,CAAC;SAChB,CAAC,CAAA;IACJ,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QACvE,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,sDAAsD,EAAE;YAC3F,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,IAAI;YACf,GAAG,KAAK,CAAC,KAAK,CAAC;SAChB,CAAC,CAAA;IACJ,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,gEAAgE,EAAE;QACtG,IAAI,EAAE,KAAK;QACX,GAAG,KAAK,CAAC,KAAK,CAAC;KAChB,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,2FAA2F;AAC3F,MAAM,OAAO,GAAG,CAAC,KAAgB,EAAY,EAAE;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,IAAI,GAAG,IAAI,KAAK,CAAC,YAAY,GAAG,GAAG,CAAA;IAC3G,OAAO,IAAI,QAAQ,CACjB,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,gBAAgB,EACrD,SAAS;QACP,CAAC,CAAC,sFAAsF;QACxF,CAAC,CAAC,6DAA6D,EACjE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAC5E,CAAA;AACH,CAAC,CAAA;AAED,qHAAqH;AACrH,MAAM,MAAM,GAAG,CACb,UAA0B,EAC1B,KAAmE,EACvD,EAAE,CACd,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IACjC,MAAM,MAAM,GAAG,CAAC,KAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAClD,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAChC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC/B,IAAI,KAAK;YAAE,MAAM,CAAC,KAAK,CAAC,CAAA;;YACnB,OAAO,CAAC,KAAU,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEJ,gHAAgH;AAChH,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,QAAoE,EACpE,UAA0B,EAC1B,MAAM,GAAc,EAAE,EACV,EAAE,CAAC,CAAC;IAChB,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAsB,EAAE;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,MAAM,CAAC,CAAC,CAAA;QAClF,MAAM,IAAI,GAAG,KAAK,EAAE,KAAgB,EAAE,EAAE;YACtC,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC;gBACpC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,MAAM,EAAE,QAAQ,CAAC,QAAQ,KAAK,KAAK;gBACnC,UAAU,EAAE,QAAQ,CAAC,QAAQ,KAAK,UAAU;gBAC5C,SAAS,EAAE,QAAQ,CAAC,QAAQ,KAAK,OAAO;gBACxC,iBAAiB,EAAE,MAAM;gBACzB,eAAe,EAAE,MAAM;gBACvB,aAAa,EAAE,OAAO;gBACtB,MAAM,EAAE,KAAK;aACd,CAAC,CAAA;YACF,iGAAiG;YACjG,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAChC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;YACtC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/D,MAAM,IAAI,GAAG,GAAG,EAAE;gBAChB,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;gBAClD,IAAI,CAAC;oBACH,UAAU,CAAC,IAAI,EAAE,CAAA;gBACnB,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,CAAA;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAO,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;gBAChG,MAAM,MAAM,CAAU,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAC3C,UAAU,CAAC,KAAK,CACd,MAAM,IAAI,KAAK;oBACb,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;oBAC5C,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,EAC3G,MAAM,CACP,CACF,CAAA;gBACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,EAAE,CAAA;gBACN,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC,CAAA;QACD,IAAI,MAAwC,CAAA;QAC5C,IAAI,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC,CAAA;YAC/C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,YAAY,CAAC,KAAkB,CAAC;oBAAE,MAAM,KAAK,CAAA;gBACjF,IAAI,CAAC;oBACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;gBAChE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,YAAY,CAAC,KAAkB,CAAC;wBAAE,MAAM,YAAY,CAAC,KAAkB,EAAE,UAAU,CAAC,CAAA;oBACxF,MAAM,KAAK,CAAA;gBACb,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,YAAY,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAkB,CAAC,CAAA;QAC7E,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,CAAA;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAiC,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/E,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CACzE,CAAA;YACD,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAA;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAgB,CAAA;YAC9B,qGAAqG;YACrG,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,YAAY,CAAC;gBAAE,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;YACzG,MAAM,IAAI,QAAQ,CAChB,iBAAiB,EACjB,+FAA+F;gBAC7F,sCAAsC,EACxC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CACtC,CAAA;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,CAAA;QACR,CAAC;IACH,CAAC;CACF,CAAC,CAAA"}

package/dist/oauth.d.ts

@@ -0,0 +1,74 @@
+import { spawn } from "node:child_process";
+import { type KeyringStore } from "@wirecat/cli-base";
+import { type OAuthClient, type TokenKeeper, type TokenStorage } from "@wirecat/cli-core/oauth";
+import type { Mailbox } from "./config.js";
+import type { MailCredential } from "./mail/backend.js";
+export type OAuthKind = "microsoft" | "google";
+/**
+ * WireCat's Microsoft app: a public client for any Entra tenant and personal accounts. Empty until WireCat registers
+ * it (docs/oauth-microsoft.md); until then a sign-in needs `microsoft_client_id` in the config.
+ */
+export declare const WIRECAT_MICROSOFT_CLIENT_ID = "";
+export declare const OAUTH_GUIDE = "https://github.com/WireCatLabs/mail-cli/blob/main/docs/oauth-microsoft.md";
+export declare const MICROSOFT_IMAP_SCOPE = "https://outlook.office.com/IMAP.AccessAsUser.All";
+export declare const MICROSOFT_SMTP_SCOPE = "https://outlook.office.com/SMTP.Send";
+/** IMAP and SMTP are one resource, so one token covers both; offline_access brings the refresh token. */
+export declare const MICROSOFT_SCOPES: readonly ["offline_access", "https://outlook.office.com/IMAP.AccessAsUser.All", "https://outlook.office.com/SMTP.Send"];
+export declare const GOOGLE_GUIDE = "https://github.com/WireCatLabs/mail-cli/blob/main/docs/oauth-google.md";
+/** The only scope Gmail gives IMAP and SMTP: https://developers.google.com/workspace/gmail/imap/xoauth2-protocol */
+export declare const GOOGLE_MAIL_SCOPE = "https://mail.google.com/";
+export declare const GOOGLE_SCOPES: readonly ["openid", "email", "https://mail.google.com/"];
+/** What each scope lets mail do, shown before the browser opens. */
+export declare const SCOPE_WORDS: Record<string, string>;
+export declare const OAUTH_NAMES: Record<OAuthKind, string>;
+export declare const scopesOf: (kind: OAuthKind) => readonly string[];
+/** The scope without which a profile cannot send. */
+export declare const sendScopeOf: (kind: OAuthKind) => "https://mail.google.com/" | "https://outlook.office.com/SMTP.Send";
+/** The owner's Desktop client: `--client-file` (private to the owner), else MAIL_GOOGLE_CLIENT_ID; no bundled one. */
+export declare const googleClient: (env: NodeJS.ProcessEnv, file?: string, platform?: NodeJS.Platform) => OAuthClient;
+/** The address Google signed in, from OpenID userinfo; the token goes in a header, so no failure prints it. */
+export declare const googleAddress: (accessToken: string, fetcher: typeof fetch, signal?: AbortSignal) => Promise<string>;
+/** The owner's own Microsoft app when the config names one, else WireCat's; only the owner sets the key (OWNER_ONLY). */
+export declare const microsoftClient: (mailbox: Mailbox) => {
+    client: OAuthClient;
+    source: "wirecat" | "own";
+};
+export type CredentialStorage = "keyring" | "file";
+export interface OAuthOptions {
+    env: NodeJS.ProcessEnv;
+    profile: string;
+    kind: OAuthKind;
+    keyring?: KeyringStore | undefined;
+    /** Where a new sign-in goes; a saved one is read and refreshed where it is. */
+    storage?: CredentialStorage | undefined;
+}
+/** The entry `oauth:<provider>:<profile>` beside the profile's app password, under the same options (WC-SECR-24). */
+export declare const oauthStorage: ({ env, profile, kind, keyring, storage }: OAuthOptions) => TokenStorage;
+export declare const signInWords: (profile: string) => string;
+export interface KeeperOptions extends OAuthOptions {
+    client: OAuthClient;
+    /** Sent as `login_hint`, so the provider offers the right account first. */
+    address?: string | undefined;
+    fetch?: typeof fetch | undefined;
+    signal?: AbortSignal | undefined;
+}
+/** One profile's sign-in, refreshed under a lock every mail process shares; a refresh uses the app it signed in with. */
+export declare const oauthKeeper: (options: KeeperOptions) => TokenKeeper;
+export declare const oauthCredential: (keeper: TokenKeeper, kind: OAuthKind, profile: string) => MailCredential;
+/** A token just received at sign-in, before anything is saved: a refusal fails the sign-in, nothing refreshes. */
+export declare const tokenCredential: (accessToken: string, kind: OAuthKind) => MailCredential;
+/**
+ * What `doctor` knows of each sign-in without opening the keyring: when it happened, with which app and scopes. Never
+ * a token.
+ */
+export interface SignInRecord {
+    provider: OAuthKind;
+    client: "wirecat" | "own";
+    signed_in_at: string;
+    scopes: string[];
+}
+export declare const signInRecords: (env: NodeJS.ProcessEnv) => Record<string, SignInRecord>;
+export declare const recordSignIn: (env: NodeJS.ProcessEnv, profile: string, record: SignInRecord | undefined) => Promise<void>;
+/** The system browser; the sign-in link is printed too, so a failure here only means opening it by hand. */
+export declare const systemBrowser: (url: string, platform?: NodeJS.Platform, start?: typeof spawn) => Promise<void>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAG1C,OAAO,EAAwB,KAAK,YAAY,EAA+B,MAAM,mBAAmB,CAAA;AAGxG,OAAO,EAEL,KAAK,WAAW,EAKhB,KAAK,WAAW,EAChB,KAAK,YAAY,EAElB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAE1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEvD,MAAM,MAAM,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;AAE9C;;;GAGG;AACH,eAAO,MAAM,2BAA2B,KAAK,CAAA;AAE7C,eAAO,MAAM,WAAW,8EAA8E,CAAA;AAEtG,eAAO,MAAM,oBAAoB,qDAAqD,CAAA;AACtF,eAAO,MAAM,oBAAoB,yCAAyC,CAAA;AAC1E,yGAAyG;AACzG,eAAO,MAAM,gBAAgB,YAAI,gBAAgB,6FAAsD,CAAA;AAEvG,eAAO,MAAM,YAAY,2EAA2E,CAAA;AACpG,oHAAoH;AACpH,eAAO,MAAM,iBAAiB,6BAA6B,CAAA;AAC3D,eAAO,MAAM,aAAa,YAAI,QAAQ,EAAE,OAAO,6BAA6B,CAAA;AAE5E,oEAAoE;AACpE,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAO9C,CAAA;AAED,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAgD,CAAA;AAClG,eAAO,MAAM,QAAQ,SAAU,SAAS,KAAG,SAAS,MAAM,EACD,CAAA;AACzD,qDAAqD;AACrD,eAAO,MAAM,WAAW,SAAU,SAAS,wEAAsE,CAAA;AAgEjH,sHAAsH;AACtH,eAAO,MAAM,YAAY,QAAS,MAAM,CAAC,UAAU,SAAS,MAAM,iCAAgC,WA+BjG,CAAA;AAID,+GAA+G;AAC/G,eAAO,MAAM,aAAa,gBAAuB,MAAM,WAAW,OAAO,KAAK,WAAW,WAAW,oBAqBnG,CAAA;AAED,yHAAyH;AACzH,eAAO,MAAM,eAAe,YAAa,OAAO,KAAG;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,KAAK,CAAA;CAWlG,CAAA;AAID,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,MAAM,CAAA;AAElD,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,SAAS,CAAA;IACf,OAAO,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;IAClC,+EAA+E;IAC/E,OAAO,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAA;CACxC;AAED,qHAAqH;AACrH,eAAO,MAAM,YAAY,6CAA8D,YAAY,KAAG,YAYlG,CAAA;AAEJ,eAAO,MAAM,WAAW,YAAa,MAAM,WAAmD,CAAA;AAE9F,MAAM,WAAW,aAAc,SAAQ,YAAY;IACjD,MAAM,EAAE,WAAW,CAAA;IACnB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,KAAK,CAAC,EAAE,OAAO,KAAK,GAAG,SAAS,CAAA;IAChC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CACjC;AAED,yHAAyH;AACzH,eAAO,MAAM,WAAW,YAAa,aAAa,KAAG,WAWjD,CAAA;AAEJ,eAAO,MAAM,eAAe,WAAY,WAAW,QAAQ,SAAS,WAAW,MAAM,KAAG,cAKtF,CAAA;AAEF,kHAAkH;AAClH,eAAO,MAAM,eAAe,gBAAiB,MAAM,QAAQ,SAAS,KAAG,cAIrE,CAAA;AAEF;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,SAAS,CAAA;IACnB,MAAM,EAAE,SAAS,GAAG,KAAK,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAID,eAAO,MAAM,aAAa,QAAS,MAAM,CAAC,UAAU,KAAG,MAAM,CAAC,MAAM,EAAE,YAAY,CASjF,CAAA;AAED,eAAO,MAAM,YAAY,QAAe,MAAM,CAAC,UAAU,WAAW,MAAM,UAAU,YAAY,GAAG,SAAS,kBAO3G,CAAA;AAED,4GAA4G;AAC5G,eAAO,MAAM,aAAa,QAAS,MAAM,uDAA+C,OAAO,CAAC,IAAI,CAchG,CAAA"}

package/dist/oauth.js

@@ -0,0 +1,230 @@
+import { spawn } from "node:child_process";
+import { mkdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { CliError, isMovedRun, resolvePaths, systemKeyring } from "@wirecat/cli-base";
+import { privateFiles } from "@wirecat/cli-core/cli";
+import { writeFileAtomic } from "@wirecat/cli-core/files";
+import { credentialStorage, oauthAccount, standardCodec, tokenKeeper, } from "@wirecat/cli-core/oauth";
+import * as v from "valibot";
+import { IDENTITY } from "./identity.js";
+/**
+ * WireCat's Microsoft app: a public client for any Entra tenant and personal accounts. Empty until WireCat registers
+ * it (docs/oauth-microsoft.md); until then a sign-in needs `microsoft_client_id` in the config.
+ */
+export const WIRECAT_MICROSOFT_CLIENT_ID = "";
+export const OAUTH_GUIDE = "https://github.com/WireCatLabs/mail-cli/blob/main/docs/oauth-microsoft.md";
+export const MICROSOFT_IMAP_SCOPE = "https://outlook.office.com/IMAP.AccessAsUser.All";
+export const MICROSOFT_SMTP_SCOPE = "https://outlook.office.com/SMTP.Send";
+/** IMAP and SMTP are one resource, so one token covers both; offline_access brings the refresh token. */
+export const MICROSOFT_SCOPES = ["offline_access", MICROSOFT_IMAP_SCOPE, MICROSOFT_SMTP_SCOPE];
+export const GOOGLE_GUIDE = "https://github.com/WireCatLabs/mail-cli/blob/main/docs/oauth-google.md";
+/** The only scope Gmail gives IMAP and SMTP: https://developers.google.com/workspace/gmail/imap/xoauth2-protocol */
+export const GOOGLE_MAIL_SCOPE = "https://mail.google.com/";
+export const GOOGLE_SCOPES = ["openid", "email", GOOGLE_MAIL_SCOPE];
+/** What each scope lets mail do, shown before the browser opens. */
+export const SCOPE_WORDS = {
+    offline_access: "stay signed in, so a scheduled sync needs no new sign-in",
+    [MICROSOFT_IMAP_SCOPE]: "read and change your mail over IMAP",
+    [MICROSOFT_SMTP_SCOPE]: "send mail as you over SMTP",
+    openid: "know which account signed in",
+    email: "see its address, to check it is this mailbox",
+    [GOOGLE_MAIL_SCOPE]: "read, change and send your Gmail over IMAP and SMTP",
+};
+export const OAUTH_NAMES = { microsoft: "Microsoft", google: "Google" };
+export const scopesOf = (kind) => kind === "microsoft" ? MICROSOFT_SCOPES : GOOGLE_SCOPES;
+/** The scope without which a profile cannot send. */
+export const sendScopeOf = (kind) => (kind === "microsoft" ? MICROSOFT_SMTP_SCOPE : GOOGLE_MAIL_SCOPE);
+// https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-auth-code-flow: a public client sends no secret,
+// and `common` takes work, school and personal accounts.
+const microsoftProvider = (client, address) => ({
+    id: "microsoft",
+    name: "Microsoft",
+    authorizeUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
+    tokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
+    client,
+    redirect: { kind: "loopback" },
+    authorizeParams: { prompt: "select_account", ...(address ? { login_hint: address } : {}) },
+});
+const googleProvider = (client, address) => ({
+    id: "google",
+    name: "Google",
+    authorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth",
+    tokenUrl: "https://oauth2.googleapis.com/token",
+    revokeUrl: "https://oauth2.googleapis.com/revoke",
+    client,
+    redirect: { kind: "loopback" },
+    // Without offline access Google returns no refresh token; without consent it does not return one again.
+    authorizeParams: {
+        access_type: "offline",
+        prompt: "select_account consent",
+        ...(address ? { login_hint: address } : {}),
+    },
+});
+const standardGoogle = standardCodec("google");
+const entryObject = (text) => {
+    const value = JSON.parse(text);
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        throw new CliError("authentication_error", "the saved sign-in cannot be read; sign in again", {
+            reason: "oauth.invalid",
+        });
+    return { ...value };
+};
+/**
+ * gcal's codec (gcal-cli src/google.ts): a Google Desktop client needs its secret to refresh, and the client file is
+ * read once, at sign-in, so the entry keeps the secret. The third copy after gcal and drive (DEBT, journal).
+ */
+const googleCodec = {
+    decode: (raw) => {
+        const stored = standardGoogle.decode(raw);
+        const { clientSecret } = entryObject(raw);
+        return typeof clientSecret === "string" && clientSecret
+            ? { ...stored, client: { clientId: stored.client?.clientId ?? "", clientSecret } }
+            : stored;
+    },
+    encode: (input) => {
+        const entry = entryObject(standardGoogle.encode(input));
+        if (input.client.clientSecret)
+            entry.clientSecret = input.client.clientSecret;
+        else
+            delete entry.clientSecret;
+        return JSON.stringify(entry);
+    },
+};
+const ClientFile = v.object({
+    installed: v.object({ client_id: v.pipe(v.string(), v.minLength(1)), client_secret: v.optional(v.string()) }),
+});
+/** The owner's Desktop client: `--client-file` (private to the owner), else MAIL_GOOGLE_CLIENT_ID; no bundled one. */
+export const googleClient = (env, file, platform = process.platform) => {
+    if (!file) {
+        const clientId = env.MAIL_GOOGLE_CLIENT_ID;
+        const clientSecret = env.MAIL_GOOGLE_CLIENT_SECRET;
+        if (clientId)
+            return { clientId, ...(clientSecret ? { clientSecret } : {}) };
+        throw new CliError("configuration_error", `Gmail over OAuth needs your own Google app: pass --client-file <Desktop client JSON> (steps: ${GOOGLE_GUIDE})`, { reason: "mail.oauth-no-client" });
+    }
+    const mode = privateFiles({ files: [file], dirs: [] }, platform);
+    if (mode.checked && !mode.ok)
+        throw new CliError("configuration_error", `the client file can be read by other users of this computer; run chmod 600 ${file} and try again`, { reason: "sign-in.client-file-open" });
+    try {
+        const { installed } = v.parse(ClientFile, JSON.parse(readFileSync(file, "utf8")));
+        return {
+            clientId: installed.client_id,
+            ...(installed.client_secret ? { clientSecret: installed.client_secret } : {}),
+        };
+    }
+    catch {
+        throw new CliError("configuration_error", "could not read a Desktop app OAuth client JSON from the client file; its contents were not logged", { reason: "sign-in.client-file-invalid" });
+    }
+};
+const UserInfo = v.object({ email: v.optional(v.string()), email_verified: v.optional(v.boolean()) });
+/** The address Google signed in, from OpenID userinfo; the token goes in a header, so no failure prints it. */
+export const googleAddress = async (accessToken, fetcher, signal) => {
+    const timeout = AbortSignal.timeout(30_000);
+    let response;
+    try {
+        response = await fetcher("https://openidconnect.googleapis.com/v1/userinfo", {
+            headers: { authorization: `Bearer ${accessToken}`, accept: "application/json" },
+            signal: signal ? AbortSignal.any([signal, timeout]) : timeout,
+            redirect: "error",
+        });
+    }
+    catch {
+        throw new CliError("provider_unavailable", "Google did not answer the account lookup; try again", {
+            retryable: true,
+        });
+    }
+    if (!response.ok)
+        throw new CliError("authentication_error", `Google refused the account lookup (HTTP ${response.status})`);
+    const info = v.safeParse(UserInfo, await response.json().catch(() => undefined));
+    const email = info.success ? info.output.email : undefined;
+    if (!email || (info.success && info.output.email_verified === false))
+        throw new CliError("authentication_error", "Google gave no verified address for this account");
+    return email.toLowerCase();
+};
+/** The owner's own Microsoft app when the config names one, else WireCat's; only the owner sets the key (OWNER_ONLY). */
+export const microsoftClient = (mailbox) => {
+    const own = mailbox.microsoftClientId?.trim();
+    if (own)
+        return { client: { clientId: own }, source: own === WIRECAT_MICROSOFT_CLIENT_ID ? "wirecat" : "own" };
+    if (WIRECAT_MICROSOFT_CLIENT_ID)
+        return { client: { clientId: WIRECAT_MICROSOFT_CLIENT_ID }, source: "wirecat" };
+    throw new CliError("configuration_error", "this mail build has no Microsoft app to sign in with yet. Register your own (a free Microsoft Entra app, " +
+        `steps: ${OAUTH_GUIDE}) and set its Application (client) ID once, in a terminal: ` +
+        `\`${IDENTITY.command} config set --defaults microsoft_client_id <id>\``, { reason: "mail.oauth-no-client" });
+};
+const paths = (env) => resolvePaths({ appName: IDENTITY.appName, prefix: IDENTITY.envPrefix, env });
+/** The entry `oauth:<provider>:<profile>` beside the profile's app password, under the same options (WC-SECR-24). */
+export const oauthStorage = ({ env, profile, kind, keyring = systemKeyring, storage }) => credentialStorage({
+    credentials: {
+        configDir: paths(env).config,
+        service: IDENTITY.appName,
+        storage: storage === "file" ? "file" : "auto",
+        env,
+        isolated: keyring === systemKeyring && isMovedRun({ appName: IDENTITY.appName, prefix: IDENTITY.envPrefix, env }),
+        keyring,
+    },
+    account: oauthAccount(kind, profile),
+    codec: kind === "google" ? googleCodec : standardCodec(kind),
+});
+export const signInWords = (profile) => `${IDENTITY.command} ${profile} session start`;
+/** One profile's sign-in, refreshed under a lock every mail process shares; a refresh uses the app it signed in with. */
+export const oauthKeeper = (options) => tokenKeeper({
+    provider: options.kind === "google"
+        ? googleProvider(options.client, options.address)
+        : microsoftProvider(options.client, options.address),
+    storage: oauthStorage(options),
+    lockDir: paths(options.env).config,
+    fetch: options.fetch ?? globalThis.fetch,
+    signInCommand: signInWords(options.profile),
+    ...(options.signal ? { signal: options.signal } : {}),
+});
+export const oauthCredential = (keeper, kind, profile) => ({
+    kind: "oauth",
+    provider: kind,
+    signInCommand: signInWords(profile),
+    login: async ({ refresh = false } = {}) => ({ accessToken: await keeper.accessToken({ refresh }) }),
+});
+/** A token just received at sign-in, before anything is saved: a refusal fails the sign-in, nothing refreshes. */
+export const tokenCredential = (accessToken, kind) => ({
+    kind: "oauth",
+    provider: kind,
+    login: async () => ({ accessToken }),
+});
+const recordsPath = (env) => join(paths(env).state, "sign-ins.json");
+export const signInRecords = (env) => {
+    try {
+        const value = JSON.parse(readFileSync(recordsPath(env), "utf8"));
+        return typeof value === "object" && value !== null && !Array.isArray(value)
+            ? value
+            : {};
+    }
+    catch {
+        return {};
+    }
+};
+export const recordSignIn = async (env, profile, record) => {
+    const records = signInRecords(env);
+    if (record)
+        records[profile] = record;
+    else if (profile in records)
+        delete records[profile];
+    else
+        return;
+    mkdirSync(paths(env).state, { recursive: true });
+    await writeFileAtomic(recordsPath(env), `${JSON.stringify(records, null, 2)}\n`, { mode: 0o600 });
+};
+/** The system browser; the sign-in link is printed too, so a failure here only means opening it by hand. */
+export const systemBrowser = (url, platform = process.platform, start = spawn) => new Promise((resolve, reject) => {
+    const [command, args] = platform === "darwin"
+        ? ["open", [url]]
+        : platform === "win32"
+            ? ["rundll32.exe", ["url.dll,FileProtocolHandler", url]]
+            : ["xdg-open", [url]];
+    const child = start(command, args, { detached: true, stdio: "ignore", windowsHide: true });
+    child.once("error", () => reject(new CliError("configuration_error", `could not start ${command}`)));
+    child.once("spawn", () => {
+        child.unref();
+        resolve();
+    });
+});
+//# sourceMappingURL=oauth.js.map

package/dist/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAqB,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACxG,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EACL,iBAAiB,EAGjB,YAAY,EACZ,aAAa,EAIb,WAAW,GACZ,MAAM,yBAAyB,CAAA;AAChC,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAKxC;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAA;AAE7C,MAAM,CAAC,MAAM,WAAW,GAAG,2EAA2E,CAAA;AAEtG,MAAM,CAAC,MAAM,oBAAoB,GAAG,kDAAkD,CAAA;AACtF,MAAM,CAAC,MAAM,oBAAoB,GAAG,sCAAsC,CAAA;AAC1E,yGAAyG;AACzG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,oBAAoB,CAAU,CAAA;AAEvG,MAAM,CAAC,MAAM,YAAY,GAAG,wEAAwE,CAAA;AACpG,oHAAoH;AACpH,MAAM,CAAC,MAAM,iBAAiB,GAAG,0BAA0B,CAAA;AAC3D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,CAAU,CAAA;AAE5E,oEAAoE;AACpE,MAAM,CAAC,MAAM,WAAW,GAA2B;IACjD,cAAc,EAAE,0DAA0D;IAC1E,CAAC,oBAAoB,CAAC,EAAE,qCAAqC;IAC7D,CAAC,oBAAoB,CAAC,EAAE,4BAA4B;IACpD,MAAM,EAAE,8BAA8B;IACtC,KAAK,EAAE,8CAA8C;IACrD,CAAC,iBAAiB,CAAC,EAAE,qDAAqD;CAC3E,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAA8B,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AAClG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAe,EAAqB,EAAE,CAC7D,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAA;AACzD,qDAAqD;AACrD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAe,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAA;AAEjH,uHAAuH;AACvH,yDAAyD;AACzD,MAAM,iBAAiB,GAAG,CAAC,MAAmB,EAAE,OAAgB,EAAiB,EAAE,CAAC,CAAC;IACnF,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,WAAW;IACjB,YAAY,EAAE,gEAAgE;IAC9E,QAAQ,EAAE,4DAA4D;IACtE,MAAM;IACN,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;IAC9B,eAAe,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;CAC3F,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,CAAC,MAAmB,EAAE,OAAgB,EAAiB,EAAE,CAAC,CAAC;IAChF,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,QAAQ;IACd,YAAY,EAAE,8CAA8C;IAC5D,QAAQ,EAAE,qCAAqC;IAC/C,SAAS,EAAE,sCAAsC;IACjD,MAAM;IACN,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;IAC9B,wGAAwG;IACxG,eAAe,EAAE;QACf,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,wBAAwB;QAChC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C;CACF,CAAC,CAAA;AAEF,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;AAC9C,MAAM,WAAW,GAAG,CAAC,IAAY,EAA2B,EAAE;IAC5D,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrE,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,iDAAiD,EAAE;YAC5F,MAAM,EAAE,eAAe;SACxB,CAAC,CAAA;IACJ,OAAO,EAAE,GAAG,KAAK,EAAE,CAAA;AACrB,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,WAAW,GAAe;IAC9B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;QACd,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACzC,MAAM,EAAE,YAAY,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QACzC,OAAO,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY;YACrD,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE;YAClF,CAAC,CAAC,MAAM,CAAA;IACZ,CAAC;IACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAChB,MAAM,KAAK,GAAG,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACvD,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY;YAAE,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,CAAA;;YACxE,OAAO,KAAK,CAAC,YAAY,CAAA;QAC9B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;CACF,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;CAC9G,CAAC,CAAA;AAEF,sHAAsH;AACtH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAsB,EAAE,IAAa,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAe,EAAE;IAC9G,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,QAAQ,GAAG,GAAG,CAAC,qBAAqB,CAAA;QAC1C,MAAM,YAAY,GAAG,GAAG,CAAC,yBAAyB,CAAA;QAClD,IAAI,QAAQ;YAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;QAC5E,MAAM,IAAI,QAAQ,CAChB,qBAAqB,EACrB,gGAAgG,YAAY,GAAG,EAC/G,EAAE,MAAM,EAAE,sBAAsB,EAAE,CACnC,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAA;IAChE,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE;QAC1B,MAAM,IAAI,QAAQ,CAChB,qBAAqB,EACrB,8EAA8E,IAAI,gBAAgB,EAClG,EAAE,MAAM,EAAE,0BAA0B,EAAE,CACvC,CAAA;IACH,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;QACjF,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,SAAS;YAC7B,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,qBAAqB,EACrB,mGAAmG,EACnG,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAC1C,CAAA;IACH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;AAErG,+GAA+G;AAC/G,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,WAAmB,EAAE,OAAqB,EAAE,MAAoB,EAAE,EAAE;IACtG,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3C,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,kDAAkD,EAAE;YAC3E,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC/E,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO;YAC7D,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,qDAAqD,EAAE;YAChG,SAAS,EAAE,IAAI;SAChB,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,2CAA2C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAA;IAC3G,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;IAChF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1D,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC;QAClE,MAAM,IAAI,QAAQ,CAAC,sBAAsB,EAAE,kDAAkD,CAAC,CAAA;IAChG,OAAO,KAAK,CAAC,WAAW,EAAE,CAAA;AAC5B,CAAC,CAAA;AAED,yHAAyH;AACzH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAgB,EAAsD,EAAE;IACtG,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAA;IAC7C,IAAI,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,KAAK,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAA;IAC9G,IAAI,2BAA2B;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,2BAA2B,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAChH,MAAM,IAAI,QAAQ,CAChB,qBAAqB,EACrB,2GAA2G;QACzG,UAAU,WAAW,6DAA6D;QAClF,KAAK,QAAQ,CAAC,OAAO,mDAAmD,EAC1E,EAAE,MAAM,EAAE,sBAAsB,EAAE,CACnC,CAAA;AACH,CAAC,CAAA;AAED,MAAM,KAAK,GAAG,CAAC,GAAsB,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAA;AAatH,qHAAqH;AACrH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,aAAa,EAAE,OAAO,EAAgB,EAAgB,EAAE,CACnH,iBAAiB,CAAC;IAChB,WAAW,EAAE;QACX,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM;QAC5B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO,EAAE,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC7C,GAAG;QACH,QAAQ,EAAE,OAAO,KAAK,aAAa,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC;QACjH,OAAO;KACR;IACD,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC;IACpC,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC;CAC7D,CAAC,CAAA;AAEJ,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,IAAI,OAAO,gBAAgB,CAAA;AAU9F,yHAAyH;AACzH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAsB,EAAe,EAAE,CACjE,WAAW,CAAC;IACV,QAAQ,EACN,OAAO,CAAC,IAAI,KAAK,QAAQ;QACvB,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC;QACjD,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC;IACxD,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;IAC9B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM;IAClC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK;IACxC,aAAa,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;IAC3C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CACtD,CAAC,CAAA;AAEJ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAmB,EAAE,IAAe,EAAE,OAAe,EAAkB,EAAE,CAAC,CAAC;IACzG,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,WAAW,CAAC,OAAO,CAAC;IACnC,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;CACpG,CAAC,CAAA;AAEF,kHAAkH;AAClH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,WAAmB,EAAE,IAAe,EAAkB,EAAE,CAAC,CAAC;IACxF,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,IAAI;IACd,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;CACrC,CAAC,CAAA;AAaF,MAAM,WAAW,GAAG,CAAC,GAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;AAEvF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAsB,EAAgC,EAAE;IACpF,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;QACzE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzE,CAAC,CAAE,KAAsC;YACzC,CAAC,CAAC,EAAE,CAAA;IACR,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,GAAsB,EAAE,OAAe,EAAE,MAAgC,EAAE,EAAE;IAC9G,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IAClC,IAAI,MAAM;QAAE,OAAO,CAAC,OAAO,CAAC,GAAG,MAAM,CAAA;SAChC,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAA;;QAC/C,OAAM;IACX,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAChD,MAAM,eAAe,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;AACnG,CAAC,CAAA;AAED,4GAA4G;AAC5G,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,KAAK,GAAG,KAAK,EAAiB,EAAE,CACtG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GACnB,QAAQ,KAAK,QAAQ;QACnB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC,CAAC,QAAQ,KAAK,OAAO;YACpB,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;IAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1F,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,qBAAqB,EAAE,mBAAmB,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;IACpG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;QACvB,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,OAAO,EAAE,CAAA;IACX,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/program.js

@@ -17,7 +17,7 @@ import { syncCommand } from "./commands/sync.js";
 import { tagsCommand } from "./commands/tags.js";
 import { configuration, OWNER_ONLY } from "./config.js";
 import { IDENTITY, PACKAGE, SKILL } from "./identity.js";
-import { changesCheck } from "./mail/doctor.js";
+import { localChecks } from "./mail/doctor.js";
 const update = appUpdate({
     packageName: PACKAGE,
     command: IDENTITY.command,
@@ -53,7 +53,7 @@ export const definition = () => ({
         statsCommand(),
         draftsCommand(),
         tagsCommand(),
-        appDoctorCommand(IDENTITY, configuration, { packageName: PACKAGE, local: changesCheck }),
+        appDoctorCommand(IDENTITY, configuration, { packageName: PACKAGE, local: localChecks }),
         skillCommand(IDENTITY, SKILL),
         appMcpCommand(IDENTITY, configuration, {
             name: "mail",

package/dist/program.js.map

@@ -1 +1 @@
-{"version":3,"file":"program.js","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,eAAe,EACf,aAAa,EACb,aAAa,IAAI,mBAAmB,EACpC,SAAS,EAIT,GAAG,IAAI,SAAS,EAChB,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,cAAc,GACf,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAEpD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAE/C,MAAM,MAAM,GAAG,SAAS,CAAC;IACvB,WAAW,EAAE,OAAO;IACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,KAAK,EAAE,OAAO,IAAI,CAAC,GAAG;IACtB,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CACjB,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,mBAAmB,CAAC;IAC/G,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW;IAC7F,YAAY,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,kBAAkB,CAAC;CACxD,CAAC,CAAA;AAEF,6FAA6F;AAC7F,MAAM,UAAU,GAAG,CAAC,KAAgB,EAAa,EAAE;IACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC,CAAA;IAC/D,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IAC9E,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,aAAa,EAAE,EAAE,WAAW,EAAE,EAAE,cAAc,EAAE,CAAC;QAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IACrG,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,GAAsB,EAAE,CAAC,CAAC;IAClD,GAAG,EAAE,QAAQ;IACb,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,OAAO,2CAA2C,EAAE;IACtF,aAAa;IACb,QAAQ,EAAE,GAAG,EAAE,CAAC;QACd,eAAe,CAAC,QAAQ,CAAC;QACzB,cAAc,EAAE;QAChB,cAAc,EAAE;QAChB,cAAc,EAAE;QAChB,WAAW,EAAE;QACb,YAAY,EAAE;QACd,aAAa,EAAE;QACf,GAAG,UAAU,CAAC,YAAY,EAAE,CAAC;QAC7B,kBAAkB,EAAE;QACpB,YAAY,EAAE;QACd,aAAa,EAAE;QACf,WAAW,EAAE;QACb,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QACxF,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC;QAC7B,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE;YACrC,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,CAAC;YACxG,iBAAiB,EAAE,WAAW;YAC9B,KAAK,EAAE,KAAK;SACb,CAAC;QACF,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC9C,GAAG,SAAS,CAAC,OAAO,CAAC;YACrB,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;SAC9C,CAAC,CAAC;QACH,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;QACjE,WAAW,CAAC,QAAQ,CAAC;QACrB,kBAAkB,CAAC;YACjB,GAAG,EAAE,QAAQ;YACb,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE;gBAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CACnD,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC,CACnE,CAAA;gBACD,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAA;YACpD,CAAC;SACF,CAAC;KACH;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAwB,EAAW,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,CAAA;AAE9G,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,IAAc,EAAE,OAAoB,EAAmB,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,OAAO,CAAC,CAAA"}
+{"version":3,"file":"program.js","sourceRoot":"","sources":["../src/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,eAAe,EACf,aAAa,EACb,aAAa,IAAI,mBAAmB,EACpC,SAAS,EAIT,GAAG,IAAI,SAAS,EAChB,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,cAAc,GACf,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAEpD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE9C,MAAM,MAAM,GAAG,SAAS,CAAC;IACvB,WAAW,EAAE,OAAO;IACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;IACzB,KAAK,EAAE,OAAO,IAAI,CAAC,GAAG;IACtB,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CACjB,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,mBAAmB,CAAC;IAC/G,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,WAAW;IAC7F,YAAY,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,kBAAkB,CAAC;CACxD,CAAC,CAAA;AAEF,6FAA6F;AAC7F,MAAM,UAAU,GAAG,CAAC,KAAgB,EAAa,EAAE;IACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,UAAU,CAAC,CAAA;IAC/D,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IAC9E,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,aAAa,EAAE,EAAE,WAAW,EAAE,EAAE,cAAc,EAAE,CAAC;QAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IACrG,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,GAAsB,EAAE,CAAC,CAAC;IAClD,GAAG,EAAE,QAAQ;IACb,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,OAAO,2CAA2C,EAAE;IACtF,aAAa;IACb,QAAQ,EAAE,GAAG,EAAE,CAAC;QACd,eAAe,CAAC,QAAQ,CAAC;QACzB,cAAc,EAAE;QAChB,cAAc,EAAE;QAChB,cAAc,EAAE;QAChB,WAAW,EAAE;QACb,YAAY,EAAE;QACd,aAAa,EAAE;QACf,GAAG,UAAU,CAAC,YAAY,EAAE,CAAC;QAC7B,kBAAkB,EAAE;QACpB,YAAY,EAAE;QACd,aAAa,EAAE;QACf,WAAW,EAAE;QACb,gBAAgB,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACvF,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC;QAC7B,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE;YACrC,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,CAAC;YACxG,iBAAiB,EAAE,WAAW;YAC9B,KAAK,EAAE,KAAK;SACb,CAAC;QACF,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC9C,GAAG,SAAS,CAAC,OAAO,CAAC;YACrB,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;SAC9C,CAAC,CAAC;QACH,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;QACjE,WAAW,CAAC,QAAQ,CAAC;QACrB,kBAAkB,CAAC;YACjB,GAAG,EAAE,QAAQ;YACb,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE;gBAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CACnD,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC,CACnE,CAAA;gBACD,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAA;YACpD,CAAC;SACF,CAAC;KACH;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAwB,EAAW,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,CAAA;AAE9G,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,IAAc,EAAE,OAAoB,EAAmB,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,OAAO,CAAC,CAAA"}

package/dist/providers.d.ts

@@ -55,6 +55,8 @@ export interface Provider {
     imap: Endpoint;
     smtp: Smtp;
     auth: "app-password" | "oauth";
+    /** Signs in with this OAuth provider: the only way when `auth` is `oauth`, else with `session start --client-file`. */
+    oauth?: "microsoft" | "google";
     note?: string;
     sync?: SyncFolders;
     search?: ServerSearch;
@@ -99,6 +101,7 @@ declare const TABLE: {
             sources: string[];
         };
         auth: "app-password";
+        oauth: "google";
         note: string;
         sync: {
             mode: "gmail";
@@ -180,9 +183,9 @@ declare const TABLE: {
             sources: string[];
         };
     };
-    outlook: {
+    microsoft365: {
         name: string;
-        domains: string[];
+        domains: never[];
         mx: RegExp;
         imap: Endpoint;
         smtp: {
@@ -192,7 +195,7 @@ declare const TABLE: {
             sources: string[];
         };
         auth: "oauth";
-        note: string;
+        oauth: "microsoft";
         prepare: {
             steps: string[];
             notes: string[];
@@ -200,6 +203,25 @@ declare const TABLE: {
             sources: string[];
         };
     };
+    outlook: {
+        name: string;
+        domains: string[];
+        imap: Endpoint;
+        smtp: {
+            host: string;
+            port: number;
+            security: "starttls";
+            sources: string[];
+        };
+        auth: "oauth";
+        oauth: "microsoft";
+        prepare: {
+            steps: string[];
+            notes: never[];
+            refused: string;
+            sources: string[];
+        };
+    };
 };
 export type ProviderKey = keyof typeof TABLE;
 /** One entry per built-in provider: how it is found, its servers, how it signs in and how to prepare it. */

package/dist/providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAEzD,eAAO,MAAM,aAAa,wEAAwE,CAAA;AAElG,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,UAAU,CAAA;AAEzC,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,QAAQ,CAAA;CACnB;AAED,MAAM,WAAW,OAAO;IACtB,sHAAsH;IACtH,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAA;IACf,wDAAwD;IACxD,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,iHAAiH;AACjH,MAAM,WAAW,WAAW;IAC1B,uGAAuG;IACvG,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,8GAA8G;AAC9G,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAA;IACpB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,gEAAgE;AAChE,MAAM,WAAW,QAAQ;IACvB,gHAAgH;IAChH,MAAM,CAAC,EAAE,IAAI,CAAA;IACb,mGAAmG;IACnG,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,qGAAqG;IACrG,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,kFAAkF;AAClF,MAAM,WAAW,IAAK,SAAQ,QAAQ;IACpC;;;OAGG;IACH,SAAS,CAAC,EAAE,IAAI,CAAA;IAChB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,mFAAmF;IACnF,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,qFAAqF;IACrF,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,QAAQ,CAAA;IACd,IAAI,EAAE,IAAI,CAAA;IACV,IAAI,EAAE,cAAc,GAAG,OAAO,CAAA;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;CACjB;AAQD,QAAA,MAAM,KAAK;;;;;;;kBAxEH,MAAM;kBACN,MAAM;sBACF,QAAQ;;;;;;YA+EJ,KAAK;YAAuC,MAAM;;;YAE5D,KAAK;YAQL,KAAK;YAIL,OAAO;YAEP,OAAO;;;;;;;;;kBAjGL,MAAM;kBACN,MAAM;sBACF,QAAQ;;;;;;;;;;;;;;;;;;;;;;YA+Hd,KAAK;YAML,KAAK;YAGL,OAAO;YAEP,OAAO;;;;;;;;;;;;;;;;YAgBP,KAAK;YAOL,KAAK;YAGL,OAAO;YAEP,OAAO;;;;;;;;;kBAxKL,MAAM;kBACN,MAAM;sBACF,QAAQ;;;;;;YAkLd,KAAK;YAOL,KAAK;YAGL,OAAO;YACP,OAAO;;;;;;;;;kBA/LL,MAAM;kBACN,MAAM;sBACF,QAAQ;;;;;YA2Md,KAAK;YAOL,KAAK;YACL,OAAO;YAEP,OAAO;;;;;;;;;;;;;;;;;YAYP,KAAK;YAIL,KAAK;YAGL,OAAO;YACP,OAAO;;;CAGuB,CAAA;AAEpC,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,KAAK,CAAA;AAE5C,4GAA4G;AAC5G,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAS,CAAA;AAE7D,eAAO,MAAM,aAAa,EAA6B,WAAW,EAAE,CAAA;AAEpE,eAAO,MAAM,gBAAgB,WAAY,MAAM,KAAG,WAAW,GAAG,SACM,CAAA;AAEtE,eAAO,MAAM,YAAY,EAAE,WAA8D,CAAA;AAEzF,eAAO,MAAM,cAAc,EAAE,YAA0F,CAAA;AACvH,eAAO,MAAM,gBAAgB,EAAE,QAG9B,CAAA;AAED,uHAAuH;AACvH,eAAO,MAAM,WAAW,YAAa,MAAM,QAAQ,MAAM,GAAG,SAAS,KAAG,QAAQ,GAAG,SAIlF,CAAA;AAED,eAAO,MAAM,eAAe,EAAE,OAO7B,CAAA;AAED,4GAA4G;AAC5G,eAAO,MAAM,WAAW,aAAc,MAAM,WAAW,OAAO,KAAG,MAShE,CAAA"}
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAEzD,eAAO,MAAM,aAAa,wEAAwE,CAAA;AAElG,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,UAAU,CAAA;AAEzC,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,QAAQ,CAAA;CACnB;AAED,MAAM,WAAW,OAAO;IACtB,sHAAsH;IACtH,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAA;IACf,wDAAwD;IACxD,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,iHAAiH;AACjH,MAAM,WAAW,WAAW;IAC1B,uGAAuG;IACvG,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,8GAA8G;AAC9G,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAA;IACpB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,gEAAgE;AAChE,MAAM,WAAW,QAAQ;IACvB,gHAAgH;IAChH,MAAM,CAAC,EAAE,IAAI,CAAA;IACb,mGAAmG;IACnG,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,qGAAqG;IACrG,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,kFAAkF;AAClF,MAAM,WAAW,IAAK,SAAQ,QAAQ;IACpC;;;OAGG;IACH,SAAS,CAAC,EAAE,IAAI,CAAA;IAChB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,mFAAmF;IACnF,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,qFAAqF;IACrF,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,QAAQ,CAAA;IACd,IAAI,EAAE,IAAI,CAAA;IACV,IAAI,EAAE,cAAc,GAAG,OAAO,CAAA;IAC9B,uHAAuH;IACvH,KAAK,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAA;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,WAAW,CAAA;IAClB,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;CACjB;AAeD,QAAA,MAAM,KAAK;;;;;;;kBAjFH,MAAM;kBACN,MAAM;sBACF,QAAQ;;;;;;YAwFJ,KAAK;YAAuC,MAAM;;;YAE5D,KAAK;YAQL,KAAK;YAIL,OAAO;YAEP,OAAO;;;;;;;;;kBA1GL,MAAM;kBACN,MAAM;sBACF,QAAQ;;;;;;;;;;;;;;;;;;;;;;;YAyId,KAAK;YAML,KAAK;YAGL,OAAO;YAEP,OAAO;;;;;;;;;;;;;;;;YAgBP,KAAK;YAOL,KAAK;YAGL,OAAO;YAEP,OAAO;;;;;;;;;kBAlLL,MAAM;kBACN,MAAM;sBACF,QAAQ;;;;;;YA4Ld,KAAK;YAOL,KAAK;YAGL,OAAO;YACP,OAAO;;;;;;;;;kBAzML,MAAM;kBACN,MAAM;sBACF,QAAQ;;;;;YAqNd,KAAK;YAOL,KAAK;YACL,OAAO;YAEP,OAAO;;;;;;;;;;;;;;;;;YAaP,KAAK;YAGL,KAAK;YAKL,OAAO;YAEP,OAAO;;;;;;;;;;;;;;;;YAWP,KAAK;YAIL,KAAK;YACL,OAAO;YAEP,OAAO;;;CAGuB,CAAA;AAEpC,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,KAAK,CAAA;AAE5C,4GAA4G;AAC5G,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAS,CAAA;AAE7D,eAAO,MAAM,aAAa,EAA6B,WAAW,EAAE,CAAA;AAEpE,eAAO,MAAM,gBAAgB,WAAY,MAAM,KAAG,WAAW,GAAG,SACM,CAAA;AAEtE,eAAO,MAAM,YAAY,EAAE,WAA8D,CAAA;AAEzF,eAAO,MAAM,cAAc,EAAE,YAA0F,CAAA;AACvH,eAAO,MAAM,gBAAgB,EAAE,QAG9B,CAAA;AAED,uHAAuH;AACvH,eAAO,MAAM,WAAW,YAAa,MAAM,QAAQ,MAAM,GAAG,SAAS,KAAG,QAAQ,GAAG,SAIlF,CAAA;AAED,eAAO,MAAM,eAAe,EAAE,OAO7B,CAAA;AAED,4GAA4G;AAC5G,eAAO,MAAM,WAAW,aAAc,MAAM,WAAW,OAAO,KAAG,MAShE,CAAA"}