@yujinapp/yuemail 0.4.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Yujinapp / Pablo Kuschniroff
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,147 @@
+# Yuemail
+
+> Voice-first single-user email client. Dictate, sign, send.
+> Local-only. BYOK encrypted vault. No telemetry.
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Node >= 18](https://img.shields.io/badge/node-%3E%3D18.0.0-brightgreen)](https://nodejs.org/)
+
+Yuemail is for people who need to dictate a written document, sign
+it, and send it by email from their own personal machine without
+relying on a sighted helper or sustained-precision mouse interaction.
+
+The north-star journey: *"Pablo dicta un informe, dice 'firmar', dice
+'enviar a ana arroba ejemplo punto com', y termina. El sistema desaparece."*
+
+## Install
+
+```bash
+npm install -g @yujinapp/yuemail
+```
+
+Requires Node `>=18.0.0`. The browser side uses the Web Speech API,
+which is supported by Chrome, Edge, and Safari. Other browsers
+degrade to button-only mode.
+
+## Usage
+
+```bash
+yuemail                          # start the server + open the browser
+yuemail start                    # start the server only (no browser)
+yuemail vault setup              # interactive 12-field wizard (or use the in-app gear)
+yuemail vault list               # list configured key names
+yuemail vault set <name> <val>   # encrypt and store a value
+yuemail vault delete <name>      # remove a value
+yuemail version
+yuemail help
+```
+
+The server binds `127.0.0.1:5180` only. Loopback. Never LAN.
+
+## Voice commands
+
+The Spanish utterances Yuemail recognises (accent-insensitive,
+filler-word-tolerant):
+
+| You say                                | What happens                       |
+|----------------------------------------|------------------------------------|
+| `nuevo documento` / `documento nuevo`  | Clear the editor, start fresh      |
+| `abrir documento [nombre]`             | Load the latest or by partial name |
+| `guardar firma`                        | Open the signature pad             |
+| `firmar`                               | Insert the saved signature         |
+| `iniciar dictado`                      | Begin transcription                |
+| `fin dictado`                          | Stop transcription                 |
+| `enviar a <email>`                     | Open the send dialog               |
+| `leer bandeja`                         | List the latest envelopes          |
+| `abrir configuracion` / `ajustes`      | Open the account settings          |
+| `detener voz`                          | Mute the microphone                |
+
+Plus the always-on mic toggle: `encender microfono` / `apagar microfono`.
+
+Spoken `arroba` is treated as `@`, spoken `punto` as `.`, and the
+extracted email is lowercased.
+
+### Inside a dialog
+
+While a modal is open it owns the voice channel: the global phrases
+above are suspended (so `firmar` cannot touch the document behind the
+dialog) and these contextual phrases take over:
+
+| Dialog open      | You say                            | What happens               |
+|------------------|------------------------------------|----------------------------|
+| Send dialog      | `confirmar` / `enviar` / `mandar`  | Confirm and send the email |
+| Send dialog      | `cancelar` / `cerrar` / `salir`    | Close without sending      |
+| Signature pad    | `guardar` / `listo`                | Save the drawn signature   |
+| Signature pad    | `borrar` / `limpiar`               | Clear the canvas           |
+| Signature pad    | `generar` / `cursiva`              | Bake the typed name        |
+| Signature pad    | `cancelar` / `cerrar` / `salir`    | Close without saving       |
+| Settings         | `detectar` / `automatica`          | Autodetect the servers     |
+| Settings         | `probar` / `verificar`             | Live IMAP+SMTP test        |
+| Settings         | `guardar` / `listo`                | Save to the vault          |
+| Settings         | `cancelar` / `cerrar` / `salir`    | Close without saving       |
+
+`apagar microfono` and `detener voz` always work, dialog or not.
+
+### Dictating into dialog fields
+
+Every modal input is dictatable: say `campo <nombre>` to arm a field
+(send dialog: `destinatario`, `asunto`, `cuerpo`, `adjuntar`;
+signature pad: `nombre`; settings: `correo`, `contrasena`, `servidor
+imap`, ...), then speak the value. `borrar campo` empties the armed
+field; `fin campo` releases it and restores the dialog verbs.
+
+The message body APPENDS: each utterance lands as a new paragraph,
+so long messages can be dictated sentence by sentence. While a field
+is armed in the send dialog or the signature pad, free speech IS the
+field value -- saying `enviar` mid-sentence does NOT send the email;
+say `fin campo` first, then `enviar`. Recipients accept several
+addresses ("ana arroba ejemplo punto com y pedro arroba test punto
+org", or spoken `coma`). Passwords are never echoed back, only their
+captured length.
+
+## Account setup (the gear)
+
+Click the gear in the topbar (or say `abrir configuracion`), type
+your email address, and Yuemail resolves the IMAP/SMTP servers for
+you: major providers from a built-in table (Gmail, Outlook, Yahoo,
+iCloud, AOL, GMX, Zoho, Fastmail, Yandex -- including each
+provider's app-password caveat), everything else via the Mozilla
+autoconfig database, with a convention guess as last resort. Run
+`Probar conexion` to test the real IMAP+SMTP login before saving;
+saving encrypts everything into the vault. Proton (without Bridge)
+and Tuta do not expose IMAP/SMTP and are reported as such.
+
+## Privacy
+
+- Single user. No login. No user table.
+- No database. JSON-on-filesystem under `~/.yuemail/`.
+- No outbound network beyond the IMAP/SMTP servers **you** configure.
+- The vault is encrypted at rest (AES-256-GCM, scrypt-derived key from
+  a per-machine salt). The raw `vault.json` never contains the
+  plaintext value of any stored secret.
+
+## Vault keys
+
+The in-app gear fills these for you from just your address. The
+wizard prompts for the same 12 fields; skip any with Enter and fill
+them later with `yuemail vault set`.
+
+- `imap.host`, `imap.port`, `imap.user`, `imap.pass`, `imap.secure`
+- `smtp.host`, `smtp.port`, `smtp.user`, `smtp.pass`, `smtp.secure`
+- `identity.from`, `identity.name`
+
+## Repository layout
+
+```
+bin/yuemail.mjs      # CLI entry
+server/              # Express + IMAP/SMTP + .docx
+src/                 # React frontend (Vite)
+src/voice/           # Spanish command parser + Web Speech hook
+src/styles/tokens.css  # Yujin Design System tokens
+tests/               # Vitest suites
+docs/SPEC.md         # The specification this build implements
+```
+
+## License
+
+MIT

package/bin/yuemail.mjs

@@ -0,0 +1,179 @@
+#!/usr/bin/env node
+/**
+ * yuemail CLI (F12).
+ *
+ * Subcommands:
+ *   yuemail                       launch server + open browser
+ *   yuemail start                 server only (no browser)
+ *   yuemail vault list            list configured key names
+ *   yuemail vault set <name> <v>  set a key
+ *   yuemail vault delete <name>   delete a key
+ *   yuemail vault setup           interactive 12-field wizard
+ *   yuemail version
+ *   yuemail help
+ *
+ * Server binds 127.0.0.1 only. Loopback. Never LAN.
+ *
+ * ASCII-only.
+ */
+import { createRequire } from 'node:module';
+import { fileURLToPath } from 'node:url';
+import path from 'node:path';
+import readline from 'node:readline';
+
+const require = createRequire(import.meta.url);
+const __filename = fileURLToPath(import.meta.url);
+const __dirname  = path.dirname(__filename);
+
+const VERSION = '0.3.0';
+
+function printHelp() {
+  process.stdout.write(
+    'yuemail v' + VERSION + '\n' +
+    'Voice-first single-user email client.\n\n' +
+    'Usage: yuemail [command]\n\n' +
+    'Commands:\n' +
+    '  (no args)                  Start the server + open the browser.\n' +
+    '  start                      Start the server only.\n' +
+    '  vault list                 List configured vault key names.\n' +
+    '  vault set <name> <value>   Encrypt and store a value.\n' +
+    '  vault delete <name>        Remove a value.\n' +
+    '  vault setup                Interactive 12-field wizard.\n' +
+    '  version                    Print the version.\n' +
+    '  help                       Show this message.\n' +
+    '\n' +
+    'Vault keys:\n' +
+    '  imap.host, imap.port, imap.user, imap.pass, imap.secure\n' +
+    '  smtp.host, smtp.port, smtp.user, smtp.pass, smtp.secure\n' +
+    '  identity.from, identity.name\n' +
+    '\n' +
+    'The server binds 127.0.0.1:5180. Loopback only. Never LAN.\n',
+  );
+}
+
+function resolveServerModule() {
+  /* Prefer the built JS, fall back to ts-node for dev runs. */
+  const builtPath = path.resolve(__dirname, '..', 'server-dist', 'index.js');
+  try {
+    return import('file://' + builtPath.replace(/\\/g, '/'));
+  } catch (err) {
+    process.stderr.write('Failed to load built server at ' + builtPath + '\n');
+    process.stderr.write('Did you run `npm run build`?\n');
+    throw err;
+  }
+}
+
+function resolveVaultModule() {
+  const builtPath = path.resolve(__dirname, '..', 'server-dist', 'vault.js');
+  return import('file://' + builtPath.replace(/\\/g, '/'));
+}
+
+async function cmdStart({ openBrowser }) {
+  const server = await (await resolveServerModule()).startServer();
+  process.stdout.write('Yuemail listening at ' + server.url + '\n');
+  if (openBrowser) {
+    try {
+      const { default: open } = await import('open');
+      await open(server.url);
+    } catch {
+      process.stdout.write('(Could not open browser automatically. Visit ' + server.url + ' manually.)\n');
+    }
+  }
+  /* Keep alive on SIGINT. */
+  const shutdown = async () => {
+    process.stdout.write('\nShutting down...\n');
+    await server.close();
+    process.exit(0);
+  };
+  process.on('SIGINT', shutdown);
+  process.on('SIGTERM', shutdown);
+}
+
+async function cmdVaultList() {
+  const { getAllKeys } = await resolveVaultModule();
+  const keys = await getAllKeys();
+  if (keys.length === 0) {
+    process.stdout.write('(vault is empty -- run `yuemail vault setup`)\n');
+    return;
+  }
+  for (const k of keys) process.stdout.write(k + '\n');
+}
+
+async function cmdVaultSet(name, value) {
+  const { setKey, isValidVaultKey } = await resolveVaultModule();
+  if (!isValidVaultKey(name)) {
+    process.stderr.write('Unknown vault key: ' + name + '\n');
+    process.stderr.write('Run `yuemail help` for the list of valid keys.\n');
+    process.exitCode = 2;
+    return;
+  }
+  await setKey(name, value);
+  process.stdout.write('OK: ' + name + ' set.\n');
+}
+
+async function cmdVaultDelete(name) {
+  const { deleteKey, isValidVaultKey } = await resolveVaultModule();
+  if (!isValidVaultKey(name)) {
+    process.stderr.write('Unknown vault key: ' + name + '\n');
+    process.exitCode = 2;
+    return;
+  }
+  const ok = await deleteKey(name);
+  if (ok) process.stdout.write('OK: ' + name + ' removed.\n');
+  else    process.stdout.write('Not present: ' + name + '\n');
+}
+
+function ask(rl, prompt) {
+  return new Promise((resolve) => rl.question(prompt, (a) => resolve(a)));
+}
+
+async function cmdVaultSetup() {
+  const { setKey, VAULT_KEYS } = await resolveVaultModule();
+  process.stdout.write('Yuemail vault setup -- 12 fields. Press Enter to skip a field.\n');
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  let set = 0;
+  for (const key of VAULT_KEYS) {
+    const value = (await ask(rl, '  ' + key + ': ')).trim();
+    if (value.length > 0) {
+      await setKey(key, value);
+      set++;
+    }
+  }
+  rl.close();
+  process.stdout.write('\n' + set + ' / 12 fields configured.\n');
+}
+
+async function main() {
+  const args = process.argv.slice(2);
+  const cmd  = args[0] ?? '';
+
+  if (cmd === '' )                            return cmdStart({ openBrowser: true });
+  if (cmd === 'start')                        return cmdStart({ openBrowser: false });
+  if (cmd === 'version' || cmd === '--version' || cmd === '-v') {
+    process.stdout.write(VERSION + '\n');
+    return;
+  }
+  if (cmd === 'help' || cmd === '--help' || cmd === '-h') {
+    printHelp();
+    return;
+  }
+  if (cmd === 'vault') {
+    const sub = args[1] ?? '';
+    if (sub === 'list')   return cmdVaultList();
+    if (sub === 'set')    return cmdVaultSet(args[2] ?? '', args[3] ?? '');
+    if (sub === 'delete') return cmdVaultDelete(args[2] ?? '');
+    if (sub === 'setup')  return cmdVaultSetup();
+    process.stderr.write('Unknown vault subcommand: ' + sub + '\n');
+    printHelp();
+    process.exitCode = 2;
+    return;
+  }
+  process.stderr.write('Unknown command: ' + cmd + '\n');
+  printHelp();
+  process.exitCode = 2;
+}
+
+main().catch((err) => {
+  process.stderr.write('Error: ' + (err instanceof Error ? err.message : String(err)) + '\n');
+  process.exitCode = 1;
+});