fluxmail 0.0.1 → 0.1.0

package/dist/config.js

@@ -0,0 +1,215 @@
+import { randomBytes } from 'node:crypto';
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import path from 'node:path';
+import { DEFAULT_LICENSE_SERVER_URL } from './licensing/client.js';
+function unquoteEnvValue(value) {
+    if (value.startsWith('"') && value.endsWith('"')) {
+        try {
+            const parsed = JSON.parse(value);
+            return typeof parsed === 'string' ? parsed : value.slice(1, -1);
+        }
+        catch {
+            return value.slice(1, -1);
+        }
+    }
+    if (value.startsWith("'") && value.endsWith("'"))
+        return value.slice(1, -1);
+    return value;
+}
+function parseEnvValue(raw) {
+    // A fully quoted value may contain "#" verbatim.
+    if ((raw.startsWith('"') && raw.endsWith('"')) || (raw.startsWith("'") && raw.endsWith("'"))) {
+        return unquoteEnvValue(raw);
+    }
+    // Otherwise strip an inline comment (whitespace + #), like dotenv and docker compose do.
+    const quoted = raw.match(/^("(?:[^"\\]|\\.)*"|'[^']*')\s+#/);
+    if (quoted?.[1])
+        return unquoteEnvValue(quoted[1]);
+    const comment = raw.search(/\s#/);
+    return comment === -1 ? raw : raw.slice(0, comment).trimEnd();
+}
+function parseEnvContent(content) {
+    const out = {};
+    for (const line of content.split('\n')) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith('#'))
+            continue;
+        const eq = trimmed.indexOf('=');
+        if (eq === -1)
+            continue;
+        const key = trimmed.slice(0, eq).trim().replace(/^export\s+/, '');
+        if (key)
+            out[key] = parseEnvValue(trimmed.slice(eq + 1).trim());
+    }
+    return out;
+}
+function applyDotEnvFile(file) {
+    if (!existsSync(file))
+        return;
+    for (const [key, value] of Object.entries(parseEnvContent(readFileSync(file, 'utf8')))) {
+        if (process.env[key] === undefined)
+            process.env[key] = value;
+    }
+}
+/**
+ * Load .env.local and .env from the working directory. Real environment
+ * variables always win; .env.local wins over .env.
+ */
+export function loadDotEnv(cwd = process.cwd()) {
+    applyDotEnvFile(path.join(cwd, '.env.local'));
+    applyDotEnvFile(path.join(cwd, '.env'));
+}
+/** Expand a leading "~" (e.g. FLUXMAIL_DATA_DIR=~/.fluxmail), which Node does not do. */
+export function expandHome(p) {
+    if (p === '~')
+        return homedir();
+    if (p.startsWith('~/'))
+        return path.join(homedir(), p.slice(2));
+    return p;
+}
+/** Resolve (and create) the data dir, honoring cwd .env files and FLUXMAIL_DATA_DIR. */
+export function resolveDataDir() {
+    loadDotEnv();
+    const fromEnv = process.env.FLUXMAIL_DATA_DIR;
+    const dataDir = fromEnv ? expandHome(fromEnv) : path.join(homedir(), '.fluxmail');
+    mkdirSync(dataDir, { recursive: true });
+    return dataDir;
+}
+export function configFilePath(dataDir) {
+    return path.join(dataDir, 'config.env');
+}
+/** Best-effort permission tightening: chmod fails on files owned by another user, but the read may still work. */
+function tryRestrictPermissions(file) {
+    try {
+        chmodSync(file, 0o600);
+    }
+    catch {
+        // Reading (or a later write) will surface a real permission problem.
+    }
+}
+/** Settings persisted by `fluxmail config set`, e.g. GOOGLE_CLIENT_ID. */
+export function readStoredConfig(dataDir) {
+    const file = configFilePath(dataDir);
+    if (!existsSync(file))
+        return {};
+    tryRestrictPermissions(file);
+    return parseEnvContent(readFileSync(file, 'utf8'));
+}
+const CONFIG_KEY_PATTERN = /^[A-Z][A-Z0-9_]*$/;
+export function setStoredConfig(dataDir, key, value) {
+    if (!CONFIG_KEY_PATTERN.test(key)) {
+        throw new Error(`Invalid key "${key}": use UPPER_SNAKE_CASE, e.g. GOOGLE_CLIENT_ID`);
+    }
+    if (key === 'FLUXMAIL_DATA_DIR') {
+        throw new Error('FLUXMAIL_DATA_DIR cannot be stored in the data dir itself; set it in your shell or a .env file');
+    }
+    const stored = readStoredConfig(dataDir);
+    stored[key] = value;
+    writeStoredConfig(dataDir, stored);
+}
+export function unsetStoredConfig(dataDir, key) {
+    const stored = readStoredConfig(dataDir);
+    if (!(key in stored))
+        return false;
+    delete stored[key];
+    writeStoredConfig(dataDir, stored);
+    return true;
+}
+export function maskStoredConfigValue(key, value) {
+    if (!/SECRET|KEY|TOKEN|PASSWORD/i.test(key))
+        return value;
+    return value.length > 8 ? `${value.slice(0, 4)}…${value.slice(-4)}` : '********';
+}
+function writeStoredConfig(dataDir, values) {
+    const file = configFilePath(dataDir);
+    const lines = Object.entries(values).map(([k, v]) => `${k}=${JSON.stringify(v)}`);
+    writeFileSync(file, lines.join('\n') + (lines.length ? '\n' : ''), { mode: 0o600 });
+    tryRestrictPermissions(file);
+}
+function decodeEncryptionKey(value, errorMessage) {
+    if (!/^[0-9a-fA-F]{64}$/.test(value))
+        throw new Error(errorMessage);
+    return Buffer.from(value, 'hex');
+}
+function readPort(name, fallback) {
+    const raw = process.env[name];
+    if (raw === undefined)
+        return fallback;
+    const value = Number(raw);
+    if (!Number.isInteger(value) || value < 1 || value > 65_535) {
+        throw new Error(`${name} must be an integer between 1 and 65535, got "${raw}"`);
+    }
+    return value;
+}
+function readBaseUrl(port) {
+    const value = (process.env.FLUXMAIL_BASE_URL ?? `http://localhost:${port}`).replace(/\/+$/, '');
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw new Error(`FLUXMAIL_BASE_URL must be a valid HTTP or HTTPS URL, got "${value}"`);
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+        throw new Error(`FLUXMAIL_BASE_URL must use HTTP or HTTPS, got "${parsed.protocol}"`);
+    }
+    if (parsed.username || parsed.password) {
+        throw new Error('FLUXMAIL_BASE_URL cannot contain embedded credentials');
+    }
+    if (parsed.search || parsed.hash) {
+        throw new Error('FLUXMAIL_BASE_URL cannot contain a query string or fragment');
+    }
+    return value;
+}
+function loadEncryptionKey(dataDir) {
+    const fromEnv = process.env.FLUXMAIL_ENCRYPTION_KEY;
+    if (fromEnv) {
+        return decodeEncryptionKey(fromEnv, 'FLUXMAIL_ENCRYPTION_KEY must be exactly 64 hex characters (32 bytes)');
+    }
+    // Auto-generate on first run so getting started requires zero key management.
+    const keyPath = path.join(dataDir, 'encryption.key');
+    if (existsSync(keyPath)) {
+        tryRestrictPermissions(keyPath);
+        const key = decodeEncryptionKey(readFileSync(keyPath, 'utf8').trim(), `Corrupt encryption key at ${keyPath}`);
+        return key;
+    }
+    const key = randomBytes(32);
+    writeFileSync(keyPath, key.toString('hex') + '\n', { mode: 0o600 });
+    return key;
+}
+export function loadConfig() {
+    // Precedence: shell env > cwd .env.local > cwd .env > data-dir config.env.
+    const dataDir = resolveDataDir();
+    applyDotEnvFile(configFilePath(dataDir));
+    const port = readPort('FLUXMAIL_PORT', 8977);
+    const oauthPort = readPort('FLUXMAIL_OAUTH_PORT', 8976);
+    const baseUrl = readBaseUrl(port);
+    const authModeEnv = process.env.FLUXMAIL_AUTH ?? 'apikey';
+    if (authModeEnv !== 'apikey' && authModeEnv !== 'none') {
+        throw new Error(`FLUXMAIL_AUTH must be "apikey" or "none", got "${authModeEnv}"`);
+    }
+    const config = {
+        dataDir,
+        dbPath: process.env.FLUXMAIL_DB_PATH
+            ? expandHome(process.env.FLUXMAIL_DB_PATH)
+            : path.join(dataDir, 'fluxmail.db'),
+        encryptionKey: loadEncryptionKey(dataDir),
+        port,
+        baseUrl,
+        oauthPort,
+        oauthHost: process.env.FLUXMAIL_OAUTH_HOST ?? '127.0.0.1',
+        authMode: authModeEnv,
+        licenseServerUrl: (process.env.FLUXMAIL_LICENSE_SERVER_URL ?? DEFAULT_LICENSE_SERVER_URL).replace(/\/+$/, ''),
+    };
+    const licenseKey = process.env.FLUXMAIL_LICENSE_KEY?.trim();
+    if (licenseKey)
+        config.licenseKey = licenseKey;
+    const clientId = process.env.GOOGLE_CLIENT_ID;
+    const clientSecret = process.env.GOOGLE_CLIENT_SECRET;
+    if (clientId && clientSecret) {
+        config.google = { clientId, clientSecret };
+    }
+    return config;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AA0BnE,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;YAC5C,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,iDAAiD;IACjD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7F,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,yFAAyF;IACzF,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC7D,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAClE,IAAI,GAAG;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAC5C,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;IAC9C,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IAChC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,cAAc;IAC5B,UAAU,EAAE,CAAC;IACb,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IAClF,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;AAC1C,CAAC;AAED,kHAAkH;AAClH,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,eAAe,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAE/C,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,GAAW,EAAE,KAAa;IACzE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,gDAAgD,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;IACpH,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACpB,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,GAAW;IAC5D,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAW,EAAE,KAAa;IAC9D,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;AACnF,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,MAA8B;IACxE,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClF,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,sBAAsB,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,YAAoB;IAC9D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IACpE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,QAAQ,CAAC,IAA6C,EAAE,QAAgB;IAC/E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iDAAiD,GAAG,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,oBAAoB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChG,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,6DAA6D,KAAK,GAAG,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,kDAAkD,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IACpD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,mBAAmB,CACxB,OAAO,EACP,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,mBAAmB,CAC7B,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EACpC,6BAA6B,OAAO,EAAE,CACvC,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5B,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,2EAA2E;IAC3E,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,eAAe,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAEzC,MAAM,IAAI,GAAG,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,QAAQ,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,QAAQ,CAAC;IAC1D,IAAI,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,kDAAkD,WAAW,GAAG,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,MAAM,GAAmB;QAC7B,OAAO;QACP,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;YAClC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YAC1C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC;QACrC,aAAa,EAAE,iBAAiB,CAAC,OAAO,CAAC;QACzC,IAAI;QACJ,OAAO;QACP,SAAS;QACT,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,WAAW;QACzD,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,0BAA0B,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;KAC9G,CAAC;IAEF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,UAAU;QAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IAE/C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACtD,IAAI,QAAQ,IAAI,YAAY,EAAE,CAAC;QAC7B,MAAM,CAAC,MAAM,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,15 @@
+import { type FluxmailConfig } from './config.js';
+import { type FluxmailDb } from './storage/db.js';
+import { AccountRegistry } from './accounts/registry.js';
+import { EmailService } from './service/emailService.js';
+import { SendScheduler } from './scheduler/sendScheduler.js';
+export interface AppContext {
+    config: FluxmailConfig;
+    db: FluxmailDb;
+    registry: AccountRegistry;
+    service: EmailService;
+    /** Inert until start(); only the long-lived serve/stdio commands start it. */
+    scheduler: SendScheduler;
+}
+export declare function createContext(): AppContext;
+//# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAU,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,cAAc,CAAC;IACvB,EAAE,EAAE,UAAU,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,EAAE,YAAY,CAAC;IACtB,8EAA8E;IAC9E,SAAS,EAAE,aAAa,CAAC;CAC1B;AAED,wBAAgB,aAAa,IAAI,UAAU,CAQ1C"}

package/dist/context.js

@@ -0,0 +1,15 @@
+import { loadConfig } from './config.js';
+import { openDb } from './storage/db.js';
+import { AccountRegistry } from './accounts/registry.js';
+import { EmailService } from './service/emailService.js';
+import { SendScheduler } from './scheduler/sendScheduler.js';
+export function createContext() {
+    const config = loadConfig();
+    const db = openDb(config.dbPath);
+    const registry = new AccountRegistry(db, config);
+    const service = new EmailService(registry, db);
+    const scheduler = new SendScheduler(db, service);
+    service.onScheduleChanged = () => scheduler.wake();
+    return { config, db, registry, service, scheduler };
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAuB,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAmB,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAW7D,MAAM,UAAU,aAAa;IAC3B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACjD,OAAO,CAAC,iBAAiB,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACnD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACtD,CAAC"}

package/dist/http/app.d.ts

@@ -0,0 +1,16 @@
+import { Hono } from 'hono';
+import type { HttpBindings } from '@hono/node-server';
+import type { FluxmailConfig } from '../config.js';
+import type { FluxmailDb } from '../storage/db.js';
+import type { AccountRegistry } from '../accounts/registry.js';
+import type { EmailService } from '../service/emailService.js';
+export interface AppDeps {
+    config: FluxmailConfig;
+    db: FluxmailDb;
+    registry: AccountRegistry;
+    service: EmailService;
+}
+export declare function createApp(deps: AppDeps): Hono<{
+    Bindings: HttpBindings;
+}>;
+//# sourceMappingURL=app.d.ts.map

package/dist/http/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/http/app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAe,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAQ5E,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,cAAc,CAAC;IACvB,EAAE,EAAE,UAAU,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,EAAE,YAAY,CAAC;CACvB;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAAE,QAAQ,EAAE,YAAY,CAAA;CAAE,CAAC,CA8GzE"}

package/dist/http/app.js

@@ -0,0 +1,110 @@
+import { randomBytes } from 'node:crypto';
+import { Hono } from 'hono';
+import { isEmailError } from '@fluxmail/core';
+import { RESPONSE_ALREADY_SENT } from '@hono/node-server/utils/response';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { authenticateApiKey } from '../storage/apiKeys.js';
+import { buildMcpServer } from '../mcp/buildServer.js';
+import { buildAuthUrl, createOAuthClient, exchangeCode } from '../accounts/googleAuth.js';
+import { VERSION } from '../version.js';
+const OAUTH_STATE_TTL_MS = 10 * 60 * 1000;
+export function createApp(deps) {
+    const { config, db, registry, service } = deps;
+    const app = new Hono();
+    const oauthStates = new Map();
+    // Connecting a mailbox is instance administration: only unscoped admin keys
+    // qualify; member-scoped keys are confined to mailbox access over MCP.
+    const adminAuthorized = (c, allowQueryKey = false) => {
+        if (config.authMode === 'none')
+            return true;
+        const bearer = c.req.header('authorization')?.replace(/^Bearer\s+/i, '');
+        const key = bearer ?? (allowQueryKey ? c.req.query('key') : undefined);
+        if (!key)
+            return false;
+        return authenticateApiKey(db, key)?.memberId === null;
+    };
+    // Authenticate an MCP request and resolve the mailbox scope its key authorizes.
+    // A member-scoped key is confined to shared and owned mailboxes; an admin key
+    // (or authMode 'none') gets unscoped access.
+    const scopeForRequest = (c) => {
+        if (config.authMode === 'none')
+            return { memberId: null };
+        const bearer = c.req.header('authorization')?.replace(/^Bearer\s+/i, '');
+        return bearer ? authenticateApiKey(db, bearer) : null;
+    };
+    app.get('/healthz', (c) => c.json({ ok: true, name: 'fluxmail', version: VERSION }));
+    // Stateless Streamable HTTP: a fresh server+transport pair per request.
+    app.post('/mcp', async (c) => {
+        const scope = scopeForRequest(c);
+        if (!scope) {
+            return c.json({ jsonrpc: '2.0', error: { code: -32001, message: 'Unauthorized: pass an API key as a Bearer token' }, id: null }, 401);
+        }
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            return c.json({ jsonrpc: '2.0', error: { code: -32700, message: 'Parse error' }, id: null }, 400);
+        }
+        const server = buildMcpServer(service.withScope(scope));
+        const transport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: undefined,
+            enableJsonResponse: true,
+        });
+        c.env.outgoing.on('close', () => {
+            void transport.close();
+            void server.close();
+        });
+        await server.connect(transport);
+        await transport.handleRequest(c.env.incoming, c.env.outgoing, body);
+        return RESPONSE_ALREADY_SENT;
+    });
+    const methodNotAllowed = (c) => c.json({ jsonrpc: '2.0', error: { code: -32000, message: 'Method not allowed: this server runs in stateless mode' }, id: null }, 405);
+    app.get('/mcp', methodNotAllowed);
+    app.delete('/mcp', methodNotAllowed);
+    // Server-hosted OAuth flow (for remote deployments; the CLI uses a loopback flow instead).
+    app.get('/auth/google', (c) => {
+        if (!adminAuthorized(c, true)) {
+            return c.text('Unauthorized: append ?key=<an admin API key>', 401);
+        }
+        const now = Date.now();
+        for (const [state, expiry] of oauthStates) {
+            if (expiry < now)
+                oauthStates.delete(state);
+        }
+        const state = randomBytes(16).toString('hex');
+        oauthStates.set(state, now + OAUTH_STATE_TTL_MS);
+        const client = createOAuthClient(config, `${config.baseUrl}/auth/google/callback`);
+        return c.redirect(buildAuthUrl(client, state));
+    });
+    app.get('/auth/google/callback', async (c) => {
+        const state = c.req.query('state');
+        const expiry = state ? oauthStates.get(state) : undefined;
+        if (!state || !expiry || expiry < Date.now()) {
+            return c.text('Invalid or expired OAuth state. Restart from /auth/google.', 400);
+        }
+        oauthStates.delete(state);
+        const error = c.req.query('error');
+        if (error)
+            return c.text(`Google returned an error: ${error}`, 400);
+        const code = c.req.query('code');
+        if (!code)
+            return c.text('Missing code parameter.', 400);
+        const client = createOAuthClient(config, `${config.baseUrl}/auth/google/callback`);
+        try {
+            const { email, displayName, tokens } = await exchangeCode(client, code);
+            const account = registry.addGmailAccount(email, tokens, displayName);
+            return c.html(`<html><body style="font-family: sans-serif"><h2>${email} is connected to Fluxmail</h2>` +
+                `<p>Account id: <code>${account.id}</code>. You can close this tab.</p></body></html>`);
+        }
+        catch (err) {
+            // Surface why connecting failed (expired code, missing refresh token,
+            // account limit) instead of a blank 500 the user cannot act on.
+            if (isEmailError(err))
+                return c.text(`Could not connect the account: ${err.message}`, 400);
+            return c.text('Could not connect the account; check the server logs.', 500);
+        }
+    });
+    return app;
+}
+//# sourceMappingURL=app.js.map

package/dist/http/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/http/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAKnG,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAS1C,MAAM,UAAU,SAAS,CAAC,IAAa;IACrC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,IAAI,EAA8B,CAAC;IACnD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE9C,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,eAAe,GAAG,CACtB,CAAiG,EACjG,aAAa,GAAG,KAAK,EACZ,EAAE;QACX,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,OAAO,kBAAkB,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,QAAQ,KAAK,IAAI,CAAC;IACxD,CAAC,CAAC;IAEF,gFAAgF;IAChF,8EAA8E;IAC9E,6CAA6C;IAC7C,MAAM,eAAe,GAAG,CAAC,CAAwD,EAAsB,EAAE;QACvG,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAErF,wEAAwE;IACxE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,iDAAiD,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EACjH,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,kBAAkB,EAAE,SAAS;YAC7B,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;QACH,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAC9B,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpE,OAAO,qBAAqB,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,CAAC,CAA6C,EAAE,EAAE,CACzE,CAAC,CAAC,IAAI,CACJ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,wDAAwD,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EACxH,GAAG,CACJ,CAAC;IACJ,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAErC,2FAA2F;IAC3F,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE;QAC5B,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC1C,IAAI,MAAM,GAAG,GAAG;gBAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,GAAG,kBAAkB,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;QACnF,OAAO,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC7C,OAAO,CAAC,CAAC,IAAI,CAAC,4DAA4D,EAAE,GAAG,CAAC,CAAC;QACnF,CAAC;QACD,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,KAAK;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;QACnF,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,QAAQ,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;YACrE,OAAO,CAAC,CAAC,IAAI,CACX,mDAAmD,KAAK,gCAAgC;gBACtF,wBAAwB,OAAO,CAAC,EAAE,oDAAoD,CACzF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sEAAsE;YACtE,gEAAgE;YAChE,IAAI,YAAY,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,kCAAkC,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3F,OAAO,CAAC,CAAC,IAAI,CAAC,uDAAuD,EAAE,GAAG,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+export { createContext, type AppContext } from './context.js';
+export { createApp } from './http/app.js';
+export { buildMcpServer } from './mcp/buildServer.js';
+export { EmailService, buildForwardBody, type SendInput, type ForwardInput } from './service/emailService.js';
+export { AccountRegistry } from './accounts/registry.js';
+export { loadConfig, loadDotEnv, resolveDataDir, configFilePath, maskStoredConfigValue, readStoredConfig, setStoredConfig, unsetStoredConfig, type FluxmailConfig, } from './config.js';
+export { openDb } from './storage/db.js';
+export { encryptString, decryptString } from './storage/crypto.js';
+export { getEntitlements, checkLicenseState, assertAccountLimit, assertMemberLimit, assertWithinQuota, readLeaseRow, saveLeaseToken, clearLease, PERSONAL_TIER, GRACE_PERIOD_MS, type Entitlements, type LicenseState, } from './licensing/entitlements.js';
+export { addMember, getMember, findMember, listMembers, removeMember, type MemberInfo, } from './storage/members.js';
+export { verifyLease, licensePublicKeys, PINNED_LICENSE_PUBLIC_KEYS, type LeasePayload, } from './licensing/lease.js';
+export { validateLicense, releaseLicense, DEFAULT_LICENSE_SERVER_URL, LICENSE_KEY_PATTERN, type ValidateOutcome, } from './licensing/client.js';
+export { refreshLicense, startLicenseRefresher, loadInstanceId, type RefreshResult, } from './licensing/refresher.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,KAAK,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9G,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EACL,UAAU,EACV,UAAU,EACV,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,KAAK,cAAc,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,UAAU,EACV,aAAa,EACb,eAAe,EACf,KAAK,YAAY,EACjB,KAAK,YAAY,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,WAAW,EACX,YAAY,EACZ,KAAK,UAAU,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,0BAA0B,EAC1B,KAAK,YAAY,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,eAAe,EACf,cAAc,EACd,0BAA0B,EAC1B,mBAAmB,EACnB,KAAK,eAAe,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,KAAK,aAAa,GACnB,MAAM,0BAA0B,CAAC"}

package/dist/index.js

@@ -0,0 +1,14 @@
+export { createContext } from './context.js';
+export { createApp } from './http/app.js';
+export { buildMcpServer } from './mcp/buildServer.js';
+export { EmailService, buildForwardBody } from './service/emailService.js';
+export { AccountRegistry } from './accounts/registry.js';
+export { loadConfig, loadDotEnv, resolveDataDir, configFilePath, maskStoredConfigValue, readStoredConfig, setStoredConfig, unsetStoredConfig, } from './config.js';
+export { openDb } from './storage/db.js';
+export { encryptString, decryptString } from './storage/crypto.js';
+export { getEntitlements, checkLicenseState, assertAccountLimit, assertMemberLimit, assertWithinQuota, readLeaseRow, saveLeaseToken, clearLease, PERSONAL_TIER, GRACE_PERIOD_MS, } from './licensing/entitlements.js';
+export { addMember, getMember, findMember, listMembers, removeMember, } from './storage/members.js';
+export { verifyLease, licensePublicKeys, PINNED_LICENSE_PUBLIC_KEYS, } from './licensing/lease.js';
+export { validateLicense, releaseLicense, DEFAULT_LICENSE_SERVER_URL, LICENSE_KEY_PATTERN, } from './licensing/client.js';
+export { refreshLicense, startLicenseRefresher, loadInstanceId, } from './licensing/refresher.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAmB,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAqC,MAAM,2BAA2B,CAAC;AAC9G,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EACL,UAAU,EACV,UAAU,EACV,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,GAElB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,UAAU,EACV,aAAa,EACb,eAAe,GAGhB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,WAAW,EACX,YAAY,GAEb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,eAAe,EACf,cAAc,EACd,0BAA0B,EAC1B,mBAAmB,GAEpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,cAAc,GAEf,MAAM,0BAA0B,CAAC"}

package/dist/licensing/activation.d.ts

@@ -0,0 +1,5 @@
+import type { FluxmailDb } from '../storage/db.js';
+import { type RefreshOptions, type RefreshResult } from './refresher.js';
+/** Validate a replacement key before allowing it to overwrite stored config. */
+export declare function activateLicense(db: FluxmailDb, opts: RefreshOptions): Promise<RefreshResult>;
+//# sourceMappingURL=activation.d.ts.map

package/dist/licensing/activation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activation.d.ts","sourceRoot":"","sources":["../../src/licensing/activation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAkB,KAAK,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEzF,gFAAgF;AAChF,wBAAsB,eAAe,CACnC,EAAE,EAAE,UAAU,EACd,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,aAAa,CAAC,CAMxB"}

package/dist/licensing/activation.js

@@ -0,0 +1,11 @@
+import { setStoredConfig } from '../config.js';
+import { refreshLicense } from './refresher.js';
+/** Validate a replacement key before allowing it to overwrite stored config. */
+export async function activateLicense(db, opts) {
+    const result = await refreshLicense(db, opts);
+    if (result.outcome === 'refreshed' || result.outcome === 'outage') {
+        setStoredConfig(opts.dataDir, 'FLUXMAIL_LICENSE_KEY', opts.licenseKey);
+    }
+    return result;
+}
+//# sourceMappingURL=activation.js.map

package/dist/licensing/activation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activation.js","sourceRoot":"","sources":["../../src/licensing/activation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EAAE,cAAc,EAA2C,MAAM,gBAAgB,CAAC;AAEzF,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAc,EACd,IAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAClE,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/licensing/client.d.ts

@@ -0,0 +1,52 @@
+/**
+ * HTTP client for the hosted license server's validate and deactivate
+ * endpoints. The contract of record is docs/license-validation-contract.md in
+ * this repo, implemented by the private license-server repo; request/response
+ * shapes here must match it.
+ */
+export declare const DEFAULT_LICENSE_SERVER_URL = "https://fluxmail.ai";
+export declare const LICENSE_KEY_PATTERN: RegExp;
+export type ValidateOutcome = 
+/** 200: `lease` is the signed token; verify it before trusting anything in it. */
+{
+    kind: 'valid';
+    lease: string;
+}
+/** 400: the server considered the request malformed — a config error to surface. */
+ | {
+    kind: 'invalid_request';
+}
+/** 404: key doesn't exist (typo or deleted). Keep any cached lease until it expires. */
+ | {
+    kind: 'license_not_found';
+}
+/** 403: subscription ended ("canceled" | "revoked" | "expired"). Degrade when the cached lease runs out. */
+ | {
+    kind: 'license_inactive';
+    status: string;
+}
+/** 409: the license is bound to a different instance; deactivate it there first. */
+ | {
+    kind: 'license_in_use';
+}
+/** 5xx, network failure, or an unintelligible response: keep the cached lease and retry later. */
+ | {
+    kind: 'outage';
+    detail: string;
+};
+export interface ValidateOptions {
+    serverUrl: string;
+    licenseKey: string;
+    /** Stable random id per install; the server binds each license to one instance. */
+    instanceId: string;
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
+}
+export declare function validateLicense(opts: ValidateOptions): Promise<ValidateOutcome>;
+/**
+ * Best-effort release of this instance's license binding, so the key can be
+ * activated elsewhere. Returns false when the server could not be reached or
+ * declined; callers proceed with local deactivation either way.
+ */
+export declare function releaseLicense(opts: ValidateOptions): Promise<boolean>;
+//# sourceMappingURL=client.d.ts.map

package/dist/licensing/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/licensing/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,0BAA0B,wBAAwB,CAAC;AAEhE,eAAO,MAAM,mBAAmB,QAAgC,CAAC;AAEjE,MAAM,MAAM,eAAe;AACzB,kFAAkF;AAChF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAClC,oFAAoF;GAClF;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE;AAC7B,wFAAwF;GACtF;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE;AAC/B,4GAA4G;GAC1G;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC9C,oFAAoF;GAClF;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE;AAC5B,kGAAkG;GAChG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CA6CrF;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAc5E"}

package/dist/licensing/client.js

@@ -0,0 +1,75 @@
+/**
+ * HTTP client for the hosted license server's validate and deactivate
+ * endpoints. The contract of record is docs/license-validation-contract.md in
+ * this repo, implemented by the private license-server repo; request/response
+ * shapes here must match it.
+ */
+export const DEFAULT_LICENSE_SERVER_URL = 'https://fluxmail.ai';
+export const LICENSE_KEY_PATTERN = /^fluxmail_lic_[0-9a-f]{40}$/;
+export async function validateLicense(opts) {
+    const doFetch = opts.fetchImpl ?? fetch;
+    const url = `${opts.serverUrl.replace(/\/+$/, '')}/api/v1/licenses/validate`;
+    let response;
+    try {
+        response = await doFetch(url, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ licenseKey: opts.licenseKey, instanceId: opts.instanceId }),
+            signal: AbortSignal.timeout(opts.timeoutMs ?? 10_000),
+        });
+    }
+    catch (err) {
+        return { kind: 'outage', detail: err instanceof Error ? err.message : String(err) };
+    }
+    let body;
+    try {
+        body = await response.json();
+    }
+    catch {
+        body = undefined;
+    }
+    const field = (name) => typeof body === 'object' && body !== null ? body[name] : undefined;
+    switch (response.status) {
+        case 200: {
+            const lease = field('lease');
+            if (typeof lease !== 'string' || !lease) {
+                return { kind: 'outage', detail: 'validation response is missing the lease token' };
+            }
+            return { kind: 'valid', lease };
+        }
+        case 400:
+            return { kind: 'invalid_request' };
+        case 404:
+            return { kind: 'license_not_found' };
+        case 403: {
+            const status = field('status');
+            return { kind: 'license_inactive', status: typeof status === 'string' ? status : 'inactive' };
+        }
+        case 409:
+            return { kind: 'license_in_use' };
+        default:
+            return { kind: 'outage', detail: `license server returned HTTP ${response.status}` };
+    }
+}
+/**
+ * Best-effort release of this instance's license binding, so the key can be
+ * activated elsewhere. Returns false when the server could not be reached or
+ * declined; callers proceed with local deactivation either way.
+ */
+export async function releaseLicense(opts) {
+    const doFetch = opts.fetchImpl ?? fetch;
+    const url = `${opts.serverUrl.replace(/\/+$/, '')}/api/v1/licenses/deactivate`;
+    try {
+        const response = await doFetch(url, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ licenseKey: opts.licenseKey, instanceId: opts.instanceId }),
+            signal: AbortSignal.timeout(opts.timeoutMs ?? 10_000),
+        });
+        return response.ok;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/licensing/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/licensing/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,qBAAqB,CAAC;AAEhE,MAAM,CAAC,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAyBjE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAqB;IACzD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,2BAA2B,CAAC;IAC7E,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;YAClF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACtF,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAW,EAAE,CACtC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAE,IAAgC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAElG,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxB,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;gBACxC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;YACtF,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAClC,CAAC;QACD,KAAK,GAAG;YACN,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;QACrC,KAAK,GAAG;YACN,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;QACvC,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QAChG,CAAC;QACD,KAAK,GAAG;YACN,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACpC;YACE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,gCAAgC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IACzF,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAqB;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,6BAA6B,CAAC;IAC/E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAClC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;YAClF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;SACtD,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}