fluxmail 0.0.1 → 0.1.0

package/dist/accounts/googleAuth.d.ts

@@ -0,0 +1,31 @@
+import { OAuth2Client, type Credentials } from 'google-auth-library';
+import type { FluxmailConfig } from '../config.js';
+/**
+ * Full mail scope: the unified API includes permanent delete, which Gmail only
+ * allows with https://mail.google.com/ (gmail.modify cannot call messages.delete).
+ * Users bring their own OAuth app, so they are consenting to their own credentials.
+ */
+export declare const GMAIL_SCOPES: string[];
+export declare function requireGoogleConfig(config: FluxmailConfig): {
+    clientId: string;
+    clientSecret: string;
+};
+export declare function createOAuthClient(config: FluxmailConfig, redirectUri: string): OAuth2Client;
+export declare function buildAuthUrl(client: OAuth2Client, state: string): string;
+/** Verify the OAuth id_token and extract the authenticated Google identity. */
+export declare function identityFromIdToken(client: OAuth2Client, tokens: Credentials): Promise<{
+    email: string;
+    displayName?: string;
+}>;
+export interface OAuthResult {
+    email: string;
+    displayName?: string;
+    tokens: Credentials;
+}
+export declare function exchangeCode(client: OAuth2Client, code: string): Promise<OAuthResult>;
+/**
+ * Loopback OAuth flow for the CLI: listens once on config.oauthPort, prints the
+ * consent URL, and resolves when Google redirects back with a code.
+ */
+export declare function runLoopbackFlow<T = OAuthResult>(config: FluxmailConfig, onAuthUrl: (url: string) => void, onAuthorized?: (result: OAuthResult) => T | Promise<T>): Promise<T>;
+//# sourceMappingURL=googleAuth.d.ts.map

package/dist/accounts/googleAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"googleAuth.d.ts","sourceRoot":"","sources":["../../src/accounts/googleAuth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAErE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,YAAY,UAA6D,CAAC;AAEvF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,cAAc,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAStG;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG,YAAY,CAG3F;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAOxE;AAED,+EAA+E;AAC/E,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAYlD;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,WAAW,CAAC;CACrB;AAoCD,wBAAsB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAU3F;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,CAAC,GAAG,WAAW,EACnD,MAAM,EAAE,cAAc,EACtB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,EAChC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GACrD,OAAO,CAAC,CAAC,CAAC,CA4DZ"}

package/dist/accounts/googleAuth.js

@@ -0,0 +1,143 @@
+import { createServer } from 'node:http';
+import { randomBytes } from 'node:crypto';
+import { OAuth2Client } from 'google-auth-library';
+import { EmailError } from '@fluxmail/core';
+/**
+ * Full mail scope: the unified API includes permanent delete, which Gmail only
+ * allows with https://mail.google.com/ (gmail.modify cannot call messages.delete).
+ * Users bring their own OAuth app, so they are consenting to their own credentials.
+ */
+export const GMAIL_SCOPES = ['https://mail.google.com/', 'openid', 'email', 'profile'];
+export function requireGoogleConfig(config) {
+    if (!config.google) {
+        throw new EmailError('invalid_request', 'GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET are not set. Create OAuth credentials in Google Cloud ' +
+            '(see README "Google setup") and set both environment variables.');
+    }
+    return config.google;
+}
+export function createOAuthClient(config, redirectUri) {
+    const { clientId, clientSecret } = requireGoogleConfig(config);
+    return new OAuth2Client({ clientId, clientSecret, redirectUri });
+}
+export function buildAuthUrl(client, state) {
+    return client.generateAuthUrl({
+        access_type: 'offline',
+        prompt: 'consent',
+        scope: GMAIL_SCOPES,
+        state,
+    });
+}
+/** Verify the OAuth id_token and extract the authenticated Google identity. */
+export async function identityFromIdToken(client, tokens) {
+    const idToken = tokens.id_token;
+    if (!idToken)
+        throw new EmailError('provider_unavailable', 'Google did not return an id_token');
+    if (!client._clientId)
+        throw new EmailError('provider_unavailable', 'Google OAuth client has no client id');
+    const ticket = await client.verifyIdToken({ idToken, audience: client._clientId });
+    const claims = ticket.getPayload();
+    if (!claims)
+        throw new EmailError('provider_unavailable', 'Google id_token has no claims');
+    if (!claims.email)
+        throw new EmailError('provider_unavailable', 'Google id_token has no email claim');
+    if (!claims.email_verified) {
+        throw new EmailError('provider_unavailable', 'Google did not verify the account email address');
+    }
+    return { email: claims.email, ...(claims.name ? { displayName: claims.name } : {}) };
+}
+function oauthListenerError(err, port) {
+    const code = err.code;
+    if (code !== 'EADDRINUSE')
+        return err;
+    return new Error(`OAuth callback port ${port} is already in use.\n\n` +
+        'If Fluxmail is already running with Docker Compose, connect the account inside the container:\n\n' +
+        '  docker compose exec fluxmail fluxmail accounts add gmail\n\n' +
+        `Otherwise, stop the process using port ${port} and try again.`, { cause: err });
+}
+function escapeHtml(value) {
+    return value.replace(/[&<>"']/g, (char) => {
+        const entities = {
+            '&': '&amp;',
+            '<': '&lt;',
+            '>': '&gt;',
+            '"': '&quot;',
+            "'": '&#39;',
+        };
+        return entities[char];
+    });
+}
+function callbackPage(title, message) {
+    return ('<html><body style="font-family: sans-serif">' +
+        `<h2>${escapeHtml(title)}</h2><p>${escapeHtml(message)}</p>` +
+        '<p>You can close this tab and return to the terminal.</p></body></html>');
+}
+export async function exchangeCode(client, code) {
+    const { tokens } = await client.getToken(code);
+    if (!tokens.refresh_token) {
+        throw new EmailError('invalid_request', 'Google did not return a refresh token. Remove Fluxmail from the account\'s third-party access ' +
+            '(myaccount.google.com/permissions) and try again.');
+    }
+    return { ...(await identityFromIdToken(client, tokens)), tokens };
+}
+/**
+ * Loopback OAuth flow for the CLI: listens once on config.oauthPort, prints the
+ * consent URL, and resolves when Google redirects back with a code.
+ */
+export async function runLoopbackFlow(config, onAuthUrl, onAuthorized) {
+    const redirectUri = `http://localhost:${config.oauthPort}/oauth/callback`;
+    const client = createOAuthClient(config, redirectUri);
+    const state = randomBytes(16).toString('hex');
+    return new Promise((resolve, reject) => {
+        const server = createServer(async (req, res) => {
+            // Close the listener and destroy lingering keep-alive sockets (the browser
+            // holds its connection open after loading the page); otherwise the CLI
+            // process never exits.
+            const finish = (settle) => {
+                res.once('close', () => {
+                    server.close();
+                    server.closeAllConnections();
+                    settle();
+                });
+            };
+            try {
+                const url = new URL(req.url ?? '/', redirectUri);
+                if (url.pathname !== '/oauth/callback') {
+                    res.writeHead(404).end('Not found');
+                    return;
+                }
+                if (url.searchParams.get('state') !== state) {
+                    res.writeHead(400).end('State mismatch. Restart the flow.');
+                    return;
+                }
+                const error = url.searchParams.get('error');
+                if (error) {
+                    finish(() => reject(new EmailError('invalid_request', `Google OAuth error: ${error}`)));
+                    res.writeHead(400).end(`Google returned an error: ${error}. You can close this tab.`);
+                    return;
+                }
+                const code = url.searchParams.get('code');
+                if (!code) {
+                    res.writeHead(400).end('Missing code parameter.');
+                    return;
+                }
+                const result = await exchangeCode(client, code);
+                const accepted = onAuthorized ? await onAuthorized(result) : result;
+                finish(() => resolve(accepted));
+                res.writeHead(200, { 'content-type': 'text/html; charset=utf-8' }).end(callbackPage(`${result.email} is connected to Fluxmail`, 'The account is ready to use.'));
+            }
+            catch (err) {
+                finish(() => reject(err));
+                const expected = err instanceof EmailError;
+                const message = expected
+                    ? err.message
+                    : 'Fluxmail could not finish connecting this account. Check the terminal for details.';
+                res.writeHead(expected ? 400 : 500, { 'content-type': 'text/html; charset=utf-8' }).end(callbackPage('Fluxmail could not connect this account', message));
+            }
+        });
+        server.on('error', (err) => reject(oauthListenerError(err, config.oauthPort)));
+        server.listen(config.oauthPort, config.oauthHost, () => {
+            onAuthUrl(buildAuthUrl(client, state));
+        });
+    });
+}
+//# sourceMappingURL=googleAuth.js.map

package/dist/accounts/googleAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"googleAuth.js","sourceRoot":"","sources":["../../src/accounts/googleAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAoB,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,0BAA0B,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAEvF,MAAM,UAAU,mBAAmB,CAAC,MAAsB;IACxD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,UAAU,CAClB,iBAAiB,EACjB,kGAAkG;YAChG,iEAAiE,CACpE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAsB,EAAE,WAAmB;IAC3E,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/D,OAAO,IAAI,YAAY,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAoB,EAAE,KAAa;IAC9D,OAAO,MAAM,CAAC,eAAe,CAAC;QAC5B,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,YAAY;QACnB,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAoB,EACpB,MAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;IAChC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,mCAAmC,CAAC,CAAC;IAChG,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,sCAAsC,CAAC,CAAC;IAC5G,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,+BAA+B,CAAC,CAAC;IAC3F,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,oCAAoC,CAAC,CAAC;IACtG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC3B,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,iDAAiD,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACvF,CAAC;AAQD,SAAS,kBAAkB,CAAC,GAAU,EAAE,IAAY;IAClD,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;IACjD,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,GAAG,CAAC;IAEtC,OAAO,IAAI,KAAK,CACd,uBAAuB,IAAI,yBAAyB;QAClD,mGAAmG;QACnG,gEAAgE;QAChE,0CAA0C,IAAI,iBAAiB,EACjE,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;QACxC,MAAM,QAAQ,GAA2B;YACvC,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,MAAM;YACX,GAAG,EAAE,MAAM;YACX,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,OAAO;SACb,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAE,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,OAAe;IAClD,OAAO,CACL,8CAA8C;QAC9C,OAAO,UAAU,CAAC,KAAK,CAAC,WAAW,UAAU,CAAC,OAAO,CAAC,MAAM;QAC5D,yEAAyE,CAC1E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAoB,EAAE,IAAY;IACnE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,UAAU,CAClB,iBAAiB,EACjB,gGAAgG;YAC9F,mDAAmD,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAsB,EACtB,SAAgC,EAChC,YAAsD;IAEtD,MAAM,WAAW,GAAG,oBAAoB,MAAM,CAAC,SAAS,iBAAiB,CAAC;IAC1E,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE9C,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC7C,2EAA2E;YAC3E,uEAAuE;YACvE,uBAAuB;YACvB,MAAM,MAAM,GAAG,CAAC,MAAkB,EAAE,EAAE;gBACpC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBACrB,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,mBAAmB,EAAE,CAAC;oBAC7B,MAAM,EAAE,CAAC;gBACX,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,WAAW,CAAC,CAAC;gBACjD,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;oBACvC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBACpC,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC5C,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;oBAC5D,OAAO;gBACT,CAAC;gBACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,iBAAiB,EAAE,uBAAuB,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;oBACxF,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,6BAA6B,KAAK,2BAA2B,CAAC,CAAC;oBACtF,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;oBAClD,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAChD,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAY,CAAC;gBAC3E,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAChC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC,GAAG,CACpE,YAAY,CAAC,GAAG,MAAM,CAAC,KAAK,2BAA2B,EAAE,8BAA8B,CAAC,CACzF,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1B,MAAM,QAAQ,GAAG,GAAG,YAAY,UAAU,CAAC;gBAC3C,MAAM,OAAO,GAAG,QAAQ;oBACtB,CAAC,CAAC,GAAG,CAAC,OAAO;oBACb,CAAC,CAAC,oFAAoF,CAAC;gBACzF,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC,GAAG,CACrF,YAAY,CAAC,yCAAyC,EAAE,OAAO,CAAC,CACjE,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE;YACrD,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/accounts/registry.d.ts

@@ -0,0 +1,28 @@
+import { type Credentials } from 'google-auth-library';
+import { type Account, type EmailProvider } from '@fluxmail/core';
+import type { FluxmailConfig } from '../config.js';
+import { type FluxmailDb } from '../storage/db.js';
+export declare class AccountRegistry {
+    private readonly db;
+    private readonly config;
+    private readonly providers;
+    constructor(db: FluxmailDb, config: FluxmailConfig);
+    listAccounts(): Account[];
+    getAccount(accountId: string): Account;
+    /** Fail before OAuth when a new account would exceed the current plan. */
+    assertCanAddAccount(): void;
+    /** Resolve an account id, defaulting to the sole account when only one exists. */
+    resolveAccountId(accountId?: string): string;
+    getProvider(accountId: string): EmailProvider;
+    private loadTokenRow;
+    private loadTokens;
+    private writeTokens;
+    private saveTokens;
+    private buildGmailProvider;
+    addGmailAccount(email: string, tokens: Credentials, displayName?: string, memberId?: string): Account;
+    /** Assign a mailbox to a member, or make it shared again (memberId = null). */
+    assignAccountMember(accountId: string, memberId: string | null): Account;
+    removeAccount(accountId: string): void;
+    markStatus(accountId: string, status: Account['status']): void;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/accounts/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/accounts/registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAc,KAAK,OAAO,EAAE,KAAK,aAAa,EAAiB,MAAM,gBAAgB,CAAC;AAE7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAyB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAM1E,qBAAa,eAAe;IAOxB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAPzB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAGtB;gBAGe,EAAE,EAAE,UAAU,EACd,MAAM,EAAE,cAAc;IAGzC,YAAY,IAAI,OAAO,EAAE;IAgBzB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAMtC,0EAA0E;IAC1E,mBAAmB,IAAI,IAAI;IAkB3B,kFAAkF;IAClF,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM;IAoB5C,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa;IAiB7C,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,WAAW;IAiBnB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,kBAAkB;IAyB1B,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO;IAuCrG,+EAA+E;IAC/E,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO;IAOxE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAMtC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI;CAG/D"}

package/dist/accounts/registry.js

@@ -0,0 +1,185 @@
+import { randomBytes } from 'node:crypto';
+import { eq } from 'drizzle-orm';
+import { OAuth2Client } from 'google-auth-library';
+import { EmailError } from '@fluxmail/core';
+import { GmailProvider, GMAIL_CAPABILITIES } from '@fluxmail/provider-gmail';
+import { accounts, oauthTokens } from '../storage/db.js';
+import { decryptString, encryptString } from '../storage/crypto.js';
+import { assertAccountLimit, getEntitlements } from '../licensing/entitlements.js';
+import { getMember } from '../storage/members.js';
+import { requireGoogleConfig } from './googleAuth.js';
+export class AccountRegistry {
+    db;
+    config;
+    providers = new Map();
+    constructor(db, config) {
+        this.db = db;
+        this.config = config;
+    }
+    listAccounts() {
+        return this.db
+            .select()
+            .from(accounts)
+            .all()
+            .map((row) => ({
+            id: row.id,
+            provider: row.provider,
+            email: row.email,
+            ...(row.displayName ? { displayName: row.displayName } : {}),
+            status: row.status,
+            capabilities: GMAIL_CAPABILITIES,
+            ...(row.memberId ? { memberId: row.memberId } : {}),
+        }));
+    }
+    getAccount(accountId) {
+        const account = this.listAccounts().find((a) => a.id === accountId);
+        if (!account)
+            throw new EmailError('not_found', `No account with id "${accountId}"`);
+        return account;
+    }
+    /** Fail before OAuth when a new account would exceed the current plan. */
+    assertCanAddAccount() {
+        const existing = this.listAccounts();
+        try {
+            assertAccountLimit(existing.length, getEntitlements(this.db));
+        }
+        catch (err) {
+            if (!(err instanceof EmailError))
+                throw err;
+            const reconnect = existing.length === 1
+                ? `To reconnect ${existing[0].email}, rerun this command with ` +
+                    `"--reauthorize ${existing[0].id}".`
+                : 'To reconnect an existing account, rerun this command with "--reauthorize <account-id>".';
+            throw new EmailError(err.code, `${err.message} ${reconnect}`);
+        }
+    }
+    /** Resolve an account id, defaulting to the sole account when only one exists. */
+    resolveAccountId(accountId) {
+        if (accountId)
+            return this.getAccount(accountId).id;
+        const all = this.listAccounts();
+        if (all.length === 0) {
+            throw new EmailError('invalid_request', 'No email accounts are connected yet. Run "fluxmail accounts add gmail" to connect one.');
+        }
+        if (all.length > 1) {
+            throw new EmailError('invalid_request', `Multiple accounts are connected; specify accountId. Available: ${all
+                .map((a) => `${a.id} (${a.email})`)
+                .join(', ')}`);
+        }
+        return all[0].id;
+    }
+    getProvider(accountId) {
+        const account = this.getAccount(accountId);
+        if (account.provider !== 'gmail') {
+            throw new EmailError('unsupported_capability', `Provider "${account.provider}" is not supported yet`);
+        }
+        const tokenRow = this.loadTokenRow(accountId);
+        const cached = this.providers.get(accountId);
+        if (cached?.encryptedTokens === tokenRow.encryptedTokens)
+            return cached.provider;
+        const stored = JSON.parse(decryptString(this.config.encryptionKey, tokenRow.encryptedTokens));
+        const provider = this.buildGmailProvider(accountId, account.email, stored, account.displayName);
+        this.providers.set(accountId, { provider, encryptedTokens: tokenRow.encryptedTokens });
+        return provider;
+    }
+    loadTokenRow(accountId) {
+        const row = this.db.select().from(oauthTokens).where(eq(oauthTokens.accountId, accountId)).get();
+        if (!row)
+            throw new EmailError('auth_expired', `No stored credentials for account ${accountId}`);
+        return row;
+    }
+    loadTokens(accountId) {
+        const row = this.loadTokenRow(accountId);
+        return JSON.parse(decryptString(this.config.encryptionKey, row.encryptedTokens));
+    }
+    writeTokens(db, accountId, tokens) {
+        const encrypted = encryptString(this.config.encryptionKey, JSON.stringify(tokens));
+        db
+            .insert(oauthTokens)
+            .values({ accountId, encryptedTokens: encrypted, updatedAt: Date.now() })
+            .onConflictDoUpdate({
+            target: oauthTokens.accountId,
+            set: { encryptedTokens: encrypted, updatedAt: Date.now() },
+        })
+            .run();
+        return encrypted;
+    }
+    saveTokens(accountId, tokens) {
+        return this.writeTokens(this.db, accountId, tokens);
+    }
+    buildGmailProvider(accountId, email, stored, displayName) {
+        const { clientId, clientSecret } = requireGoogleConfig(this.config);
+        const auth = new OAuth2Client({ clientId, clientSecret });
+        auth.setCredentials(stored);
+        const provider = new GmailProvider({
+            accountId,
+            email,
+            ...(displayName ? { displayName } : {}),
+            auth,
+        });
+        // google-auth-library refreshes access tokens transparently; persist them so
+        // restarts don't need a refresh round-trip (and rotated refresh tokens survive).
+        auth.on('tokens', (fresh) => {
+            const encryptedTokens = this.saveTokens(accountId, { ...this.loadTokens(accountId), ...fresh });
+            const cached = this.providers.get(accountId);
+            if (cached?.provider === provider)
+                cached.encryptedTokens = encryptedTokens;
+        });
+        return provider;
+    }
+    addGmailAccount(email, tokens, displayName, memberId) {
+        // Validate up front for a clean not_found instead of a FK constraint error.
+        if (memberId)
+            getMember(this.db, memberId);
+        const existing = this.db.select().from(accounts).all();
+        const duplicate = existing.find((a) => a.provider === 'gmail' && a.email === email);
+        if (duplicate) {
+            // Re-authenticating an existing account: refresh tokens, clear error
+            // state. Ownership is untouched; reassign with assignAccountMember.
+            this.db.transaction((tx) => {
+                this.writeTokens(tx, duplicate.id, tokens);
+                tx.update(accounts)
+                    .set({ status: 'active', ...(displayName ? { displayName } : {}) })
+                    .where(eq(accounts.id, duplicate.id))
+                    .run();
+            });
+            this.providers.delete(duplicate.id);
+            return this.getAccount(duplicate.id);
+        }
+        const id = `acct_${randomBytes(6).toString('hex')}`;
+        this.db.transaction((tx) => {
+            const accountCount = tx.select().from(accounts).all().length;
+            assertAccountLimit(accountCount, getEntitlements(tx));
+            tx.insert(accounts)
+                .values({
+                id,
+                provider: 'gmail',
+                email,
+                displayName: displayName ?? null,
+                status: 'active',
+                createdAt: Date.now(),
+                memberId: memberId ?? null,
+            })
+                .run();
+            this.writeTokens(tx, id, tokens);
+        });
+        return this.getAccount(id);
+    }
+    /** Assign a mailbox to a member, or make it shared again (memberId = null). */
+    assignAccountMember(accountId, memberId) {
+        this.getAccount(accountId);
+        if (memberId)
+            getMember(this.db, memberId);
+        this.db.update(accounts).set({ memberId }).where(eq(accounts.id, accountId)).run();
+        return this.getAccount(accountId);
+    }
+    removeAccount(accountId) {
+        this.getAccount(accountId);
+        this.db.delete(accounts).where(eq(accounts.id, accountId)).run();
+        this.providers.delete(accountId);
+    }
+    markStatus(accountId, status) {
+        this.db.update(accounts).set({ status }).where(eq(accounts.id, accountId)).run();
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/accounts/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/accounts/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAoB,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAmD,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE7E,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAmB,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,MAAM,OAAO,eAAe;IAOP;IACA;IAPF,SAAS,GAAG,IAAI,GAAG,EAGjC,CAAC;IAEJ,YACmB,EAAc,EACd,MAAsB;QADtB,OAAE,GAAF,EAAE,CAAY;QACd,WAAM,GAAN,MAAM,CAAgB;IACtC,CAAC;IAEJ,YAAY;QACV,OAAO,IAAI,CAAC,EAAE;aACX,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACb,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,QAAQ,EAAE,GAAG,CAAC,QAAoB;YAClC,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,EAAE,GAAG,CAAC,MAA2B;YACvC,YAAY,EAAE,kBAAkB;YAChC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC,CAAC,CAAC;IACR,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,uBAAuB,SAAS,GAAG,CAAC,CAAC;QACrF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,0EAA0E;IAC1E,mBAAmB;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC5C,MAAM,SAAS,GACb,QAAQ,CAAC,MAAM,KAAK,CAAC;gBACnB,CAAC,CAAC,gBAAgB,QAAQ,CAAC,CAAC,CAAE,CAAC,KAAK,4BAA4B;oBAC9D,kBAAkB,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE,IAAI;gBACvC,CAAC,CAAC,yFAAyF,CAAC;YAChG,MAAM,IAAI,UAAU,CAClB,GAAG,CAAC,IAAI,EACR,GAAG,GAAG,CAAC,OAAO,IAAI,SAAS,EAAE,CAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,gBAAgB,CAAC,SAAkB;QACjC,IAAI,SAAS;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,UAAU,CAClB,iBAAiB,EACjB,wFAAwF,CACzF,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,UAAU,CAClB,iBAAiB,EACjB,kEAAkE,GAAG;iBAClE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC;iBAClC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;IACpB,CAAC;IAED,WAAW,CAAC,SAAiB;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,UAAU,CAAC,wBAAwB,EAAE,aAAa,OAAO,CAAC,QAAQ,wBAAwB,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,eAAe,KAAK,QAAQ,CAAC,eAAe;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;QAEjF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,eAAe,CAAC,CACpD,CAAC;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAChG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC;QACvF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,YAAY,CAAC,SAAiB;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACjG,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,qCAAqC,SAAS,EAAE,CAAC,CAAC;QACjG,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,UAAU,CAAC,SAAiB;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,eAAe,CAAC,CAAgB,CAAC;IAClG,CAAC;IAEO,WAAW,CACjB,EAA8B,EAC9B,SAAiB,EACjB,MAAmB;QAEnB,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACnF,EAAE;aACC,MAAM,CAAC,WAAW,CAAC;aACnB,MAAM,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;aACxE,kBAAkB,CAAC;YAClB,MAAM,EAAE,WAAW,CAAC,SAAS;YAC7B,GAAG,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;SAC3D,CAAC;aACD,GAAG,EAAE,CAAC;QACT,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,UAAU,CAAC,SAAiB,EAAE,MAAmB;QACvD,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAEO,kBAAkB,CACxB,SAAiB,EACjB,KAAa,EACb,MAAmB,EACnB,WAAoB;QAEpB,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,YAAY,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC;YACjC,SAAS;YACT,KAAK;YACL,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,IAAI;SACL,CAAC,CAAC;QACH,6EAA6E;QAC7E,iFAAiF;QACjF,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YAChG,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,MAAM,EAAE,QAAQ,KAAK,QAAQ;gBAAE,MAAM,CAAC,eAAe,GAAG,eAAe,CAAC;QAC9E,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,eAAe,CAAC,KAAa,EAAE,MAAmB,EAAE,WAAoB,EAAE,QAAiB;QACzF,4EAA4E;QAC5E,IAAI,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QACpF,IAAI,SAAS,EAAE,CAAC;YACd,qEAAqE;YACrE,oEAAoE;YACpE,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;gBACzB,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC3C,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;qBAChB,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;qBAClE,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;qBACpC,GAAG,EAAE,CAAC;YACX,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,EAAE,GAAG,QAAQ,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;YACzB,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;YAC7D,kBAAkB,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;YACtD,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;iBAChB,MAAM,CAAC;gBACN,EAAE;gBACF,QAAQ,EAAE,OAAO;gBACjB,KAAK;gBACL,WAAW,EAAE,WAAW,IAAI,IAAI;gBAChC,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,QAAQ,EAAE,QAAQ,IAAI,IAAI;aAC3B,CAAC;iBACD,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,+EAA+E;IAC/E,mBAAmB,CAAC,SAAiB,EAAE,QAAuB;QAC5D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,aAAa,CAAC,SAAiB;QAC7B,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACjE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,MAAyB;QACrD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACnF,CAAC;CACF"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}