@zaclinley/dsh-mailharbor 0.12.1 → 0.13.0

package/lib/index.js

@@ -66,6 +66,44 @@ var init_address = __esm({
   }
 });
 
+// src/host/inline-images.ts
+function normalize(value) {
+  return value.trim().replace(/^<|>$/g, "").toLowerCase();
+}
+function dataUrl(image) {
+  if (image.data === void 0 || !image.contentType.toLowerCase().startsWith("image/")) return null;
+  if (image.data.byteLength > MAX_INLINE_BYTES) return null;
+  return `data:${image.contentType};base64,${Buffer.from(image.data).toString("base64")}`;
+}
+function inlineCidImages(html, images) {
+  if (!/cid:/i.test(html)) return html;
+  const byCid = /* @__PURE__ */ new Map();
+  const byName = [];
+  for (const image of images) {
+    const url = dataUrl(image);
+    if (url === null) continue;
+    if (image.cid !== void 0 && image.cid.trim() !== "") byCid.set(normalize(image.cid), url);
+    if (image.filename !== void 0 && image.filename.trim() !== "") {
+      byName.push({ name: normalize(image.filename), url });
+    }
+  }
+  if (byCid.size === 0 && byName.length === 0) return html;
+  return html.replace(/cid:([^"'\s)>]+)/gi, (match, rawCid) => {
+    const cid = normalize(rawCid);
+    const exact = byCid.get(cid);
+    if (exact !== void 0) return exact;
+    const named = byName.find((entry) => cid.includes(entry.name));
+    return named === void 0 ? match : named.url;
+  });
+}
+var MAX_INLINE_BYTES;
+var init_inline_images = __esm({
+  "src/host/inline-images.ts"() {
+    "use strict";
+    MAX_INLINE_BYTES = 2e6;
+  }
+});
+
 // src/host/smtp.ts
 var smtp_exports = {};
 __export(smtp_exports, {
@@ -221,6 +259,7 @@ var init_imap = __esm({
   "src/host/imap.ts"() {
     "use strict";
     init_address();
+    init_inline_images();
     ImapProvider = class _ImapProvider {
       settings;
       credentials;
@@ -451,10 +490,19 @@ var init_imap = __esm({
             const parsed = await simpleParser2(message.source);
             const base = toMessage(message);
             const html = typeof parsed.html === "string" ? parsed.html : Buffer.isBuffer(parsed.html) ? parsed.html.toString("utf8") : null;
+            const inlineImages = (parsed.attachments ?? []).filter((attachment) => {
+              const type = String(attachment.contentType ?? "").toLowerCase();
+              return type.startsWith("image/") && attachment.content !== void 0;
+            }).map((attachment) => ({
+              cid: attachment.cid,
+              filename: attachment.filename,
+              contentType: String(attachment.contentType ?? "image/png"),
+              data: Buffer.isBuffer(attachment.content) ? attachment.content : new Uint8Array(attachment.content)
+            }));
             const detail = {
               ...base,
               text: typeof parsed.text === "string" ? parsed.text : "",
-              html: html === "" ? null : html,
+              html: html === null || html === "" ? null : inlineCidImages(html, inlineImages),
               attachments: attachmentList(parsed),
               inReplyTo: normalizeId2(parsed.inReplyTo),
               references: String(parsed.references ?? "").split(/\s+/).map(normalizeId2).filter((item) => item !== "")
@@ -513,6 +561,28 @@ var init_imap = __esm({
           }
         });
       }
+      async setFlag(mailbox, uid, flag, value) {
+        return this.run(async (client) => {
+          const lock = await client.getMailboxLock(mailbox);
+          try {
+            if (value) await client.messageFlagsAdd(String(uid), [flag], { uid: true });
+            else await client.messageFlagsRemove(String(uid), [flag], { uid: true });
+          } finally {
+            lock.release();
+          }
+        });
+      }
+      /** Move one message to another mailbox (server-side). */
+      async move(mailbox, uid, target) {
+        return this.run(async (client) => {
+          const lock = await client.getMailboxLock(mailbox);
+          try {
+            await client.messageMove(String(uid), target, { uid: true });
+          } finally {
+            lock.release();
+          }
+        });
+      }
       async setSeen(mailbox, uid, seen) {
         this.pageCache.clear();
         return this.run(async (client) => {
@@ -920,6 +990,18 @@ async function openPath(path) {
   await run("xdg-open", [path]);
 }
 
+// src/host/mail-write.ts
+import { DatabaseSync } from "node:sqlite";
+function moveLocalMessage(file, id, mailbox) {
+  const db = new DatabaseSync(file);
+  try {
+    db.exec("PRAGMA busy_timeout = 5000");
+    db.prepare("UPDATE emails SET mailbox = ? WHERE id = ?").run(mailbox, id);
+  } finally {
+    db.close();
+  }
+}
+
 // src/host/backup.ts
 init_address();
 import { createHash as createHash2 } from "node:crypto";
@@ -927,12 +1009,13 @@ import { existsSync as existsSync3, mkdirSync as mkdirSync2, writeFileSync as wr
 import { join as join3 } from "node:path";
 import { ImapFlow } from "imapflow";
 import { simpleParser } from "mailparser";
-import { DatabaseSync as DatabaseSync2 } from "node:sqlite";
+import { DatabaseSync as DatabaseSync3 } from "node:sqlite";
 
 // src/host/mail-db.ts
 init_address();
+init_inline_images();
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "node:fs";
-import { DatabaseSync } from "node:sqlite";
+import { DatabaseSync as DatabaseSync2 } from "node:sqlite";
 var SCHEMA = `
   CREATE TABLE IF NOT EXISTS emails (
     id INTEGER PRIMARY KEY AUTOINCREMENT,
@@ -990,7 +1073,7 @@ var FTS = `CREATE VIRTUAL TABLE IF NOT EXISTS emails_fts USING fts5(
   content='', tokenize='trigram'
 )`;
 function ensureMailSchema(file) {
-  const db = new DatabaseSync(file);
+  const db = new DatabaseSync2(file);
   try {
     db.exec("PRAGMA journal_mode=WAL");
     db.exec(SCHEMA);
@@ -1029,7 +1112,7 @@ var MailDatabase = class {
   open() {
     if (this.db !== void 0) return this.db;
     if (!existsSync2(this.file)) throw new Error(`\u90AE\u4EF6\u6570\u636E\u5E93\u4E0D\u5B58\u5728: ${this.file}`);
-    this.db = new DatabaseSync(this.file, { readOnly: true });
+    this.db = new DatabaseSync2(this.file, { readOnly: true });
     this.db.exec("PRAGMA busy_timeout = 3000");
     return this.db;
   }
@@ -1101,6 +1184,23 @@ var MailDatabase = class {
       where.push("e.date >= ?");
       params.push(query.since);
     }
+    if (query.unread !== void 0) {
+      const mids = query.unread.mids.slice(0, 500);
+      const ids = query.unread.ids.slice(0, 500);
+      if (mids.length === 0 && ids.length === 0) {
+        return { items: [], total: 0, offset, limit };
+      }
+      const parts = [];
+      if (mids.length > 0) {
+        parts.push(`e.message_id IN (${mids.map(() => "?").join(",")})`);
+        params.push(...mids);
+      }
+      if (ids.length > 0) {
+        parts.push(`e.id IN (${ids.map(() => "?").join(",")})`);
+        params.push(...ids);
+      }
+      where.push(`(${parts.join(" OR ")})`);
+    }
     const text2 = String(query.query ?? "").trim();
     if (text2 !== "") {
       const tokens = text2.split(/\s+/).filter(Boolean);
@@ -1187,6 +1287,28 @@ var MailDatabase = class {
     const rows = db.prepare(`${columns} FROM emails e ${clause} ORDER BY e.date DESC, e.id DESC LIMIT ?`).all(...params, limit);
     return { items: rows.map((row) => rowToSummary(row)), total, offset: 0, limit };
   }
+  /** Number of unread keys that still exist in this backup. */
+  countUnread(keys) {
+    const mids = keys.mids.slice(0, 500);
+    const ids = keys.ids.slice(0, 500);
+    if (mids.length === 0 && ids.length === 0) return 0;
+    const parts = [];
+    const params = [];
+    if (mids.length > 0) {
+      parts.push(`message_id IN (${mids.map(() => "?").join(",")})`);
+      params.push(...mids);
+    }
+    if (ids.length > 0) {
+      parts.push(`id IN (${ids.map(() => "?").join(",")})`);
+      params.push(...ids);
+    }
+    try {
+      const row = this.open().prepare(`SELECT COUNT(*) AS count FROM emails WHERE ${parts.join(" OR ")}`).get(...params);
+      return Number(row?.count ?? 0);
+    } catch {
+      return 0;
+    }
+  }
   get(localId) {
     const db = this.open();
     const row = db.prepare(
@@ -1195,9 +1317,14 @@ var MailDatabase = class {
          FROM emails WHERE id = ?`
     ).get(localId);
     if (row === void 0) return void 0;
-    const cidText = String(row.body_html ?? "").toLowerCase();
+    const bodyHtml = String(row.body_html ?? "");
+    const cidText = bodyHtml.toLowerCase();
+    const wantsInline = cidText.includes("cid:");
     const attachmentColumns = this.hasAttachmentColumns() ? "id, filename, content_type, size, content_id, disposition" : "id, filename, content_type, size";
-    const attachments = db.prepare(`SELECT ${attachmentColumns} FROM attachments WHERE email_id = ? ORDER BY id`).all(localId).filter((item) => {
+    const rows = db.prepare(
+      `SELECT ${attachmentColumns}${wantsInline ? ", data, hash" : ""} FROM attachments WHERE email_id = ? ORDER BY id`
+    ).all(localId);
+    const attachments = rows.filter((item) => {
       const type = String(item.content_type ?? "").toLowerCase();
       if (!type.startsWith("image/")) return true;
       const disposition = String(item.disposition ?? "").toLowerCase();
@@ -1216,17 +1343,38 @@ var MailDatabase = class {
     }));
     const max = this.options.maxBodyChars ?? 4e5;
     const bodyText2 = String(row.body_text ?? "");
-    const bodyHtml = String(row.body_html ?? "");
+    const inlineImages = wantsInline ? rows.filter(
+      (item) => String(item.content_type ?? "").toLowerCase().startsWith("image/")
+    ).map((item) => ({
+      cid: item.content_id === null || item.content_id === void 0 ? void 0 : String(item.content_id),
+      filename: String(item.filename ?? ""),
+      contentType: String(item.content_type ?? "image/png"),
+      data: this.attachmentBytes(item)
+    })).filter((item) => item.data !== void 0) : [];
     return {
       ...rowToSummary(row),
       cc: parseAddressList(String(row.cc ?? "")),
       replyTo: [],
       text: truncate(bodyText2, max),
-      html: bodyHtml === "" ? null : truncate(bodyHtml, max * 2),
+      html: bodyHtml === "" ? null : truncate(inlineCidImages(bodyHtml, inlineImages), max * 2),
       attachments,
       references: []
     };
   }
+  attachmentBytes(row) {
+    const data = row.data;
+    if (data instanceof Uint8Array) return data;
+    const hash = typeof row.hash === "string" ? row.hash : "";
+    const root = this.options.attachmentsRoot ?? "";
+    if (hash === "" || root === "") return void 0;
+    const file = `${root}/${hash.slice(0, 2)}/${hash.slice(2, 4)}/${hash}`;
+    if (!existsSync2(file)) return void 0;
+    try {
+      return readFileSyncSafe(file) ?? void 0;
+    } catch {
+      return void 0;
+    }
+  }
   /** Read one attachment's bytes; the payload may live in a file (content-addressed). */
   attachment(emailId, attachmentId) {
     const db = this.open();
@@ -1366,17 +1514,64 @@ var BackupEngine = class {
   runtime;
   credentials;
   batchSize;
+  onFlags;
   constructor(runtime, credentials, options = {}) {
     this.runtime = runtime;
     this.credentials = credentials;
     this.batchSize = options.batchSize ?? BATCH;
+    this.onFlags = options.onFlags;
+  }
+  /** Mirror IMAP \Seen flags into the local unread store. */
+  async reconcileReadState(client) {
+    if (this.onFlags === void 0) return;
+    const exists = Number(client.mailbox?.exists ?? 0);
+    if (exists === 0) return;
+    const entries = /* @__PURE__ */ new Map();
+    const add = (messageId, unread) => {
+      if (messageId !== "") entries.set(`mid:${messageId}`, unread);
+    };
+    const flagsOf2 = (flags) => [...flags ?? []].map((flag) => String(flag).toLowerCase());
+    const start = Math.max(1, exists - 299);
+    try {
+      for await (const message of client.fetch(`${String(start)}:${String(exists)}`, {
+        uid: true,
+        envelope: true,
+        flags: true
+      })) {
+        const messageId = normalizeId(message.envelope?.messageId);
+        add(messageId, !flagsOf2(message.flags).includes("\\seen"));
+      }
+    } catch {
+    }
+    try {
+      const unseen = await client.search({ seen: false }, { uid: true });
+      const uids = (Array.isArray(unseen) ? unseen : []).map(Number).filter((uid) => Number.isFinite(uid));
+      for (let index = 0; index < uids.length; index += 200) {
+        const range = uids.slice(index, index + 200).join(",");
+        if (range === "") continue;
+        for await (const message of client.fetch(
+          range,
+          { uid: true, envelope: true, flags: true },
+          { uid: true }
+        )) {
+          const messageId = normalizeId(
+            message.envelope?.messageId
+          );
+          add(messageId, true);
+        }
+      }
+    } catch {
+    }
+    if (entries.size > 0) {
+      this.onFlags([...entries.entries()].map(([key, unread]) => ({ key, unread })));
+    }
   }
   attachmentsDir() {
     return this.runtime.attachments;
   }
   openDb() {
     ensureMailSchema(this.runtime.mailDb);
-    const db = new DatabaseSync2(this.runtime.mailDb);
+    const db = new DatabaseSync3(this.runtime.mailDb);
     db.exec("PRAGMA journal_mode=WAL");
     db.exec("PRAGMA busy_timeout=10000");
     db.exec("PRAGMA synchronous=NORMAL");
@@ -1518,6 +1713,7 @@ var BackupEngine = class {
             abortIfNeeded(signal);
             const batch = uids.slice(offset, offset + this.batchSize);
             db.exec("BEGIN");
+            const flagEntries = [];
             try {
               let batchLastUid = committedUid;
               for await (const message of client.fetch(
@@ -1538,6 +1734,13 @@ var BackupEngine = class {
                   boxAdded += added;
                   newCount += added;
                   batchLastUid = Math.max(batchLastUid, Number(message.uid));
+                  const messageId = normalizeId(parsed.messageId ?? "");
+                  if (messageId !== "") {
+                    const flags = [...message.flags ?? []].map(
+                      (flag) => String(flag).toLowerCase()
+                    );
+                    flagEntries.push({ key: `mid:${messageId}`, unread: !flags.includes("\\seen") });
+                  }
                 } catch (error) {
                   failCount += 1;
                   emit({
@@ -1548,6 +1751,7 @@ var BackupEngine = class {
               }
               this.saveState(db, path, uidValidity, batchLastUid);
               db.exec("COMMIT");
+              if (flagEntries.length > 0) this.onFlags?.(flagEntries);
               committedUid = batchLastUid;
               emit({ mailbox: path, added: boxAdded, message: `${path}: \u5DF2\u65B0\u589E ${String(boxAdded)} \u5C01` });
             } catch (error) {
@@ -1555,6 +1759,7 @@ var BackupEngine = class {
               throw error;
             }
           }
+          if (path.toUpperCase() === "INBOX") await this.reconcileReadState(client);
           mailboxes.push({ name: path, added: boxAdded });
           emit({ mailbox: path, added: boxAdded, message: `${path}: \u65B0\u589E ${String(boxAdded)} \u5C01` });
         } finally {
@@ -1618,7 +1823,7 @@ var BackupEngine = class {
     };
     if (!existsSync3(dbFile)) return empty;
     try {
-      const db = new DatabaseSync2(dbFile, { readOnly: true });
+      const db = new DatabaseSync3(dbFile, { readOnly: true });
       try {
         const latest = db.prepare("SELECT * FROM backup_logs ORDER BY id DESC LIMIT 1").get();
         const success = db.prepare("SELECT completed_at FROM backup_logs WHERE status = 'completed' ORDER BY id DESC LIMIT 1").get();
@@ -2494,7 +2699,7 @@ ${conversation.trim()}
 }
 
 // src/host/version.ts
-var VERSION = "0.12.1";
+var VERSION = "0.13.0";
 
 // src/host/api.ts
 init_smtp();
@@ -2597,7 +2802,14 @@ function buildRouter(runtime) {
       const items = await listServer(runtime, account, mailbox, query, limit, offset);
       return { ...items, offset, limit };
     }
-    const page = runtime.database(account).list({ mailbox: mailbox === "" ? "all" : mailbox, query, offset, limit });
+    const unreadOnly = url.searchParams.get("unread") === "1";
+    const page = runtime.database(account).list({
+      mailbox: mailbox === "" ? "all" : mailbox,
+      query,
+      offset,
+      limit,
+      ...unreadOnly ? { unread: unreadKeys(runtime, account) } : {}
+    });
     return { ...page, items: page.items.map((item) => localSummary(runtime, account, item)) };
   });
   router.get("/messages/lookup", ({ url }) => {
@@ -2616,6 +2828,91 @@ function buildRouter(runtime) {
     }
     throw new HttpError(400, "\u65E0\u6CD5\u5B9A\u4F4D\u8FD9\u5C01\u90AE\u4EF6");
   });
+  router.post("/messages/:id/star", async ({ url, params, body }) => {
+    const payload = await body();
+    const { account } = accountFrom(runtime, url);
+    const detail = await loadDetail(
+      runtime,
+      account,
+      sourceOfPayload(payload),
+      String(params.id ?? ""),
+      mailboxOfPayload(payload)
+    );
+    const starred = payload.starred !== false;
+    const key = messageKeyOf(detail);
+    runtime.flags(account).set(key, starred);
+    if (detail.uid !== void 0) {
+      try {
+        await runtime.provider(account).setFlag(detail.mailbox, detail.uid, "\\Flagged", starred);
+      } catch {
+      }
+    }
+    return { starred };
+  });
+  router.post("/messages/:id/move", async ({ url, params, body }) => {
+    const payload = await body();
+    const { account } = accountFrom(runtime, url);
+    const target = String(payload.target ?? "").trim();
+    if (target === "") throw new HttpError(400, "\u7F3A\u5C11\u76EE\u6807\u6587\u4EF6\u5939");
+    const detail = runtime.database(account).get(Number(params.id));
+    if (detail === void 0) throw new HttpError(404, "\u90AE\u4EF6\u4E0D\u5B58\u5728");
+    if (detail.uid !== void 0) {
+      try {
+        await runtime.provider(account).move(detail.mailbox, detail.uid, target);
+      } catch {
+      }
+    }
+    moveLocalMessage(runtime.paths(account).mailDb, Number(params.id), target);
+    return { ok: true, mailbox: target };
+  });
+  router.post("/messages/bulk", async ({ body }) => {
+    const payload = await body();
+    const account = accountFromPayload(runtime, payload);
+    const action = String(payload.action ?? "");
+    const ids = Array.isArray(payload.ids) ? payload.ids.map((id) => Number(id)) : [];
+    if (ids.length === 0) return { ok: true, count: 0 };
+    const database = runtime.database(account);
+    const flags = runtime.flags(account);
+    const readState = runtime.readState(account);
+    let count = 0;
+    for (const id of ids) {
+      const detail = database.get(id);
+      if (detail === void 0) continue;
+      const key = messageKeyOf(detail);
+      if (action === "read" || action === "unread") {
+        readState.setUnread(key, action === "unread");
+        if (detail.uid !== void 0) {
+          try {
+            await runtime.provider(account).setSeen(detail.mailbox, detail.uid, action === "read");
+          } catch {
+          }
+        }
+        count += 1;
+      } else if (action === "archive" || action === "delete" || action === "move") {
+        const target = String(payload.target ?? "").trim();
+        if (target === "") continue;
+        if (detail.uid !== void 0) {
+          try {
+            await runtime.provider(account).move(detail.mailbox, detail.uid, target);
+          } catch {
+          }
+        }
+        moveLocalMessage(runtime.paths(account).mailDb, Number(detail.id), target);
+        count += 1;
+      } else if (action === "star" || action === "unstar") {
+        const starred = action === "star";
+        flags.set(key, starred);
+        if (detail.uid !== void 0) {
+          try {
+            await runtime.provider(account).setFlag(detail.mailbox, detail.uid, "\\Flagged", starred);
+          } catch {
+          }
+        }
+        count += 1;
+      }
+    }
+    return { ok: true, count };
+  });
   router.get("/messages/:id", async ({ url, params }) => {
     const { account } = accountFrom(runtime, url);
     const source = sourceOf(url);
@@ -2693,21 +2990,13 @@ function buildRouter(runtime) {
   router.get("/unread", async ({ url }) => {
     const requested = url.searchParams.get("accountId");
     const accounts = requested === null || requested === "" || requested === "all" ? runtime.current.accounts.filter((item) => item.enabled !== false) : [accountById(runtime, requested)];
-    let server = 0;
-    let answered = 0;
-    await Promise.all(
-      accounts.map(async (account) => {
-        if (!runtime.hasCredentials(account)) return;
-        try {
-          const result = await runtime.provider(account).unseen();
-          server += result.count;
-          answered += 1;
-        } catch {
-        }
-      })
-    );
-    if (answered > 0) return { unread: server, source: "server" };
-    const local = accounts.reduce((sum, account) => sum + runtime.readState(account).count(), 0);
+    const local = accounts.reduce((sum, account) => {
+      try {
+        return sum + runtime.database(account).countUnread(unreadKeys(runtime, account));
+      } catch {
+        return sum;
+      }
+    }, 0);
     return { unread: local, source: "local" };
   });
   router.get("/accounts", () => ({ accounts: runtime.current.accounts }));
@@ -3400,10 +3689,31 @@ function projectView(project) {
     updatedAt: project.updatedAt
   };
 }
+function unreadKeys(runtime, account) {
+  const mids = [];
+  const ids = [];
+  for (const key of runtime.readState(account).list()) {
+    if (key.startsWith("mid:")) mids.push(key.slice(4));
+    else if (key.startsWith("local:")) {
+      const id = Number(key.slice(6));
+      if (Number.isFinite(id)) ids.push(id);
+    }
+  }
+  return { mids, ids };
+}
+function messageKeyOf(row) {
+  return row.messageId !== void 0 && row.messageId !== "" ? `mid:${row.messageId}` : `local:${row.id}`;
+}
 function localSummary(runtime, account, row) {
   const store = runtime.readState(account);
-  const key = row.messageId !== void 0 && row.messageId !== "" ? `mid:${row.messageId}` : `local:${row.id}`;
-  return { ...row, accountId: account.id, unread: store.isUnread(key), backedUp: true };
+  const key = messageKeyOf(row);
+  return {
+    ...row,
+    accountId: account.id,
+    unread: store.isUnread(key),
+    starred: runtime.flags(account).has(key),
+    backedUp: true
+  };
 }
 function localDetail(runtime, account, detail) {
   return localSummary(runtime, account, detail);
@@ -3880,11 +4190,63 @@ function prune(data) {
   }
 }
 
+// src/host/mail-flags.ts
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync6, renameSync as renameSync5, writeFileSync as writeFileSync6 } from "node:fs";
+import { dirname as dirname3 } from "node:path";
+var MailFlagsStore = class {
+  file;
+  keys = null;
+  constructor(file) {
+    this.file = file;
+  }
+  load() {
+    if (this.keys !== null) return this.keys;
+    try {
+      const parsed = JSON.parse(readFileSync6(this.file, "utf8"));
+      const list = Array.isArray(parsed) ? parsed : Array.isArray(parsed?.starred) ? parsed.starred : [];
+      this.keys = new Set(list.filter((key) => typeof key === "string" && key !== ""));
+    } catch {
+      this.keys = /* @__PURE__ */ new Set();
+    }
+    return this.keys;
+  }
+  flush() {
+    mkdirSync6(dirname3(this.file), { recursive: true });
+    const temp = `${this.file}.${String(process.pid)}.tmp`;
+    writeFileSync6(temp, `${JSON.stringify({ starred: [...this.load()] }, null, 2)}
+`, {
+      encoding: "utf8",
+      mode: 384
+    });
+    renameSync5(temp, this.file);
+  }
+  has(key) {
+    return key !== "" && this.load().has(key);
+  }
+  set(key, starred) {
+    const normalized = key.trim();
+    if (normalized === "") return false;
+    const keys = this.load();
+    const has = keys.has(normalized);
+    if (starred && !has) {
+      keys.add(normalized);
+      this.flush();
+      return true;
+    }
+    if (!starred && has) {
+      keys.delete(normalized);
+      this.flush();
+      return true;
+    }
+    return false;
+  }
+};
+
 // src/host/tasks.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
-import { mkdirSync as mkdirSync6 } from "node:fs";
-import { dirname as dirname3 } from "node:path";
-import { DatabaseSync as DatabaseSync3 } from "node:sqlite";
+import { mkdirSync as mkdirSync7 } from "node:fs";
+import { dirname as dirname4 } from "node:path";
+import { DatabaseSync as DatabaseSync4 } from "node:sqlite";
 var STATUSES = /* @__PURE__ */ new Set(["NEEDS-ACTION", "IN-PROCESS", "COMPLETED", "CANCELLED"]);
 function now() {
   return (/* @__PURE__ */ new Date()).toISOString();
@@ -3932,8 +4294,8 @@ var TaskStore = class {
   }
   open() {
     if (this.db !== null) return this.db;
-    mkdirSync6(dirname3(this.file), { recursive: true });
-    const db = new DatabaseSync3(this.file);
+    mkdirSync7(dirname4(this.file), { recursive: true });
+    const db = new DatabaseSync4(this.file);
     db.exec("PRAGMA journal_mode=WAL");
     db.exec("PRAGMA busy_timeout=10000");
     db.exec(`
@@ -4172,8 +4534,8 @@ var TaskStore = class {
 
 // src/host/drafts.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
-import { mkdirSync as mkdirSync7, readFileSync as readFileSync6, renameSync as renameSync5, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname4, join as join6 } from "node:path";
+import { mkdirSync as mkdirSync8, readFileSync as readFileSync7, renameSync as renameSync6, writeFileSync as writeFileSync7 } from "node:fs";
+import { dirname as dirname5, join as join6 } from "node:path";
 function text(value) {
   return value === void 0 || value === null ? "" : String(value);
 }
@@ -4197,18 +4559,18 @@ var DraftStore = class {
   }
   load() {
     try {
-      const parsed = JSON.parse(readFileSync6(this.file, "utf8"));
+      const parsed = JSON.parse(readFileSync7(this.file, "utf8"));
       this.items = Array.isArray(parsed) ? parsed.filter(isDraft) : [];
     } catch {
       this.items = [];
     }
   }
   flush() {
-    mkdirSync7(dirname4(this.file), { recursive: true });
+    mkdirSync8(dirname5(this.file), { recursive: true });
     const temp = `${this.file}.${String(process.pid)}.${String(Date.now())}.tmp`;
-    writeFileSync6(temp, `${JSON.stringify(this.items, null, 2)}
+    writeFileSync7(temp, `${JSON.stringify(this.items, null, 2)}
 `, { encoding: "utf8", mode: 384 });
-    renameSync5(temp, this.file);
+    renameSync6(temp, this.file);
   }
   list() {
     return [...this.items].sort((left, right) => right.updatedAt.localeCompare(left.updatedAt)).map((draft) => ({ ...draft }));
@@ -4265,8 +4627,8 @@ var DraftStore = class {
 init_imap();
 
 // src/host/read-state.ts
-import { mkdirSync as mkdirSync8, readFileSync as readFileSync7, renameSync as renameSync6, writeFileSync as writeFileSync7 } from "node:fs";
-import { dirname as dirname5 } from "node:path";
+import { mkdirSync as mkdirSync9, readFileSync as readFileSync8, renameSync as renameSync7, writeFileSync as writeFileSync8 } from "node:fs";
+import { dirname as dirname6 } from "node:path";
 var ReadStateStore = class {
   file;
   keys = null;
@@ -4276,7 +4638,7 @@ var ReadStateStore = class {
   load() {
     if (this.keys !== null) return this.keys;
     try {
-      const parsed = JSON.parse(readFileSync7(this.file, "utf8"));
+      const parsed = JSON.parse(readFileSync8(this.file, "utf8"));
       const list = Array.isArray(parsed) ? parsed : Array.isArray(parsed?.unread) ? parsed.unread : [];
       this.keys = new Set(list.filter((key) => typeof key === "string" && key !== ""));
     } catch {
@@ -4285,14 +4647,14 @@ var ReadStateStore = class {
     return this.keys;
   }
   flush() {
-    mkdirSync8(dirname5(this.file), { recursive: true });
+    mkdirSync9(dirname6(this.file), { recursive: true });
     const temp = `${this.file}.${String(process.pid)}.tmp`;
-    writeFileSync7(temp, `${JSON.stringify({ unread: [...this.load()] }, null, 2)}
+    writeFileSync8(temp, `${JSON.stringify({ unread: [...this.load()] }, null, 2)}
 `, {
       encoding: "utf8",
       mode: 384
     });
-    renameSync6(temp, this.file);
+    renameSync7(temp, this.file);
   }
   isUnread(key) {
     return key !== "" && this.load().has(key);
@@ -4356,6 +4718,7 @@ var MailHarborRuntime = class {
   aiService = null;
   projectStore = null;
   taskStore = null;
+  flagStores = /* @__PURE__ */ new Map();
   disposed = false;
   constructor(options = {}) {
     this.config = loadConfig();
@@ -4510,6 +4873,14 @@ var MailHarborRuntime = class {
     this.aiStores.set(account.id, { signature: file, value: created });
     return created;
   }
+  flags(account) {
+    const file = join7(this.paths(account).root, "starred.json");
+    const existing = this.flagStores.get(account.id);
+    if (existing !== void 0 && existing.signature === file) return existing.value;
+    const created = new MailFlagsStore(file);
+    this.flagStores.set(account.id, { signature: file, value: created });
+    return created;
+  }
   readState(account) {
     const file = join7(this.paths(account).root, "read-state.json");
     const existing = this.readStores.get(account.id);
@@ -4542,7 +4913,11 @@ var MailHarborRuntime = class {
       exitCode: null
     };
     const job = { status, controller, promise: Promise.resolve() };
-    const engine = new BackupEngine(accountRuntime(account), this.credentialsFor(account));
+    const engine = new BackupEngine(accountRuntime(account), this.credentialsFor(account), {
+      onFlags: (entries) => {
+        this.readState(account).sync(entries);
+      }
+    });
     job.promise = (async () => {
       try {
         const result = await engine.run({