fluxmail 0.0.1 → 0.1.0

package/dist/licensing/entitlements.d.ts

@@ -0,0 +1,55 @@
+import { type FluxmailDb } from '../storage/db.js';
+/** After a lease expires, paid limits are honored this much longer before the plan lapses. */
+export declare const GRACE_PERIOD_MS: number;
+export interface Entitlements {
+    /** 'personal' when unlicensed, otherwise the plan name from the signed lease. */
+    plan: string;
+    /** True while a lease grants paid limits (including the grace period). */
+    licensed: boolean;
+    /** True when the lease has expired but the grace period is still running. */
+    inGrace: boolean;
+    maxMembers: number;
+    maxAccounts: number;
+    /** Licensed only: when the lease expires (or expired) and the grace period starts. */
+    leaseExpiresAt?: string;
+    /** In grace only: when paid limits lapse to the Personal plan unless renewed. */
+    graceUntil?: string;
+}
+export declare const PERSONAL_TIER: Entitlements;
+/** Accepts a transaction as well as the root db, like the other storage helpers. */
+type DbReader = Pick<FluxmailDb, 'select'>;
+export declare function readLeaseRow(db: DbReader): {
+    token: string;
+    updatedAt: number;
+} | undefined;
+export declare function saveLeaseToken(db: Pick<FluxmailDb, 'insert'>, token: string): void;
+export declare function clearLease(db: Pick<FluxmailDb, 'delete'>): void;
+/**
+ * Effective entitlements: the plan and caps from the cached lease while it
+ * verifies against a pinned license-server key, Personal-plan limits otherwise.
+ * An expired lease keeps its paid limits through the grace period, so a
+ * renewal hiccup never interrupts a running server. Reads only local state;
+ * enforcement never waits on the network.
+ */
+export declare function getEntitlements(db: DbReader, now?: Date): Entitlements;
+export declare function assertAccountLimit(current: number, entitlements: Entitlements): void;
+export declare function assertMemberLimit(current: number, entitlements: Entitlements): void;
+export interface LicenseState {
+    entitlements: Entitlements;
+    accountCount: number;
+    memberCount: number;
+    /** Usage exceeds the entitled caps; only possible after a paid license lapsed. */
+    overQuota: boolean;
+    /** Renewal warning while in grace or after a lapse; undefined when all is well. */
+    warning?: string;
+}
+/** Entitlements plus current usage, for quota enforcement and renewal warnings. */
+export declare function checkLicenseState(db: DbReader, now?: Date): LicenseState;
+/**
+ * Gate for MCP tool calls: throws once a lapsed license leaves the instance
+ * over the entitled caps. Returns the current state so callers can surface
+ * grace warnings without a second read.
+ */
+export declare function assertWithinQuota(db: DbReader, now?: Date): LicenseState;
+export {};
+//# sourceMappingURL=entitlements.d.ts.map

package/dist/licensing/entitlements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlements.d.ts","sourceRoot":"","sources":["../../src/licensing/entitlements.ts"],"names":[],"mappings":"AAEA,OAAO,EAAmC,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGpF,8FAA8F;AAC9F,eAAO,MAAM,eAAe,QAA2B,CAAC;AAExD,MAAM,WAAW,YAAY;IAC3B,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,QAAQ,EAAE,OAAO,CAAC;IAClB,6EAA6E;IAC7E,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,sFAAsF;IACtF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iFAAiF;IACjF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,aAAa,EAAE,YAM3B,CAAC;AAIF,oFAAoF;AACpF,KAAK,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AAE3C,wBAAgB,YAAY,CAAC,EAAE,EAAE,QAAQ,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAG3F;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAMlF;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,IAAI,CAE/D;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,OAAa,GAAG,YAAY,CAsB5E;AAcD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,GAAG,IAAI,CAEpF;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,GAAG,IAAI,CAEnF;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,SAAS,EAAE,OAAO,CAAC;IACnB,mFAAmF;IACnF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,OAAa,GAAG,YAAY,CAsB9E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,OAAa,GAAG,YAAY,CAa9E"}

package/dist/licensing/entitlements.js

@@ -0,0 +1,116 @@
+import { EmailError } from '@fluxmail/core';
+import { eq } from 'drizzle-orm';
+import { accounts, licenseLease, members } from '../storage/db.js';
+import { licensePublicKeys, verifyLease } from './lease.js';
+/** After a lease expires, paid limits are honored this much longer before the plan lapses. */
+export const GRACE_PERIOD_MS = 21 * 24 * 60 * 60 * 1000;
+export const PERSONAL_TIER = {
+    plan: 'personal',
+    licensed: false,
+    inGrace: false,
+    maxMembers: 1,
+    maxAccounts: 3,
+};
+const LEASE_ROW_ID = 'current';
+export function readLeaseRow(db) {
+    const row = db.select().from(licenseLease).where(eq(licenseLease.id, LEASE_ROW_ID)).get();
+    return row ? { token: row.token, updatedAt: row.updatedAt } : undefined;
+}
+export function saveLeaseToken(db, token) {
+    const updatedAt = Date.now();
+    db.insert(licenseLease)
+        .values({ id: LEASE_ROW_ID, token, updatedAt })
+        .onConflictDoUpdate({ target: licenseLease.id, set: { token, updatedAt } })
+        .run();
+}
+export function clearLease(db) {
+    db.delete(licenseLease).where(eq(licenseLease.id, LEASE_ROW_ID)).run();
+}
+/**
+ * Effective entitlements: the plan and caps from the cached lease while it
+ * verifies against a pinned license-server key, Personal-plan limits otherwise.
+ * An expired lease keeps its paid limits through the grace period, so a
+ * renewal hiccup never interrupts a running server. Reads only local state;
+ * enforcement never waits on the network.
+ */
+export function getEntitlements(db, now = new Date()) {
+    const row = readLeaseRow(db);
+    if (!row)
+        return PERSONAL_TIER;
+    try {
+        const lease = verifyLease(row.token, licensePublicKeys(), now, { allowExpired: true });
+        const expiresAt = Date.parse(lease.expiresAt);
+        const graceUntil = expiresAt + GRACE_PERIOD_MS;
+        if (now.getTime() >= graceUntil)
+            return PERSONAL_TIER;
+        const inGrace = now.getTime() >= expiresAt;
+        return {
+            plan: lease.plan,
+            licensed: true,
+            inGrace,
+            maxMembers: lease.maxMembers,
+            maxAccounts: lease.maxAccounts,
+            leaseExpiresAt: lease.expiresAt,
+            ...(inGrace ? { graceUntil: new Date(graceUntil).toISOString() } : {}),
+        };
+    }
+    catch {
+        // Unverifiable lease: degrade to Personal-plan limits, never block.
+        return PERSONAL_TIER;
+    }
+}
+function assertLimit(kind, current, max, ent) {
+    if (current < max)
+        return;
+    const noun = `${kind === 'mailbox' ? 'connected mailbox' : 'member'}${max === 1 ? '' : kind === 'mailbox' ? 'es' : 's'}`;
+    throw new EmailError('entitlement_exceeded', ent.licensed
+        ? `Your ${ent.plan} plan allows ${max} ${noun} (currently ${current}). Upgrade your plan to add more.`
+        : `The Personal plan allows ${max} ${noun} (currently ${current}). ` +
+            'A Fluxmail subscription unlocks more; see the README for details.');
+}
+export function assertAccountLimit(current, entitlements) {
+    assertLimit('mailbox', current, entitlements.maxAccounts, entitlements);
+}
+export function assertMemberLimit(current, entitlements) {
+    assertLimit('member', current, entitlements.maxMembers, entitlements);
+}
+/** Entitlements plus current usage, for quota enforcement and renewal warnings. */
+export function checkLicenseState(db, now = new Date()) {
+    const entitlements = getEntitlements(db, now);
+    const accountCount = db.select().from(accounts).all().length;
+    const memberCount = db.select().from(members).all().length;
+    const overQuota = accountCount > entitlements.maxAccounts || memberCount > entitlements.maxMembers;
+    let warning;
+    if (entitlements.inGrace) {
+        warning =
+            `The Fluxmail license expired ${entitlements.leaseExpiresAt}; paid limits continue until ` +
+                `${entitlements.graceUntil}. Renew before then or this instance drops to the Personal plan.`;
+    }
+    else if (!entitlements.licensed && readLeaseRow(db)) {
+        warning =
+            `The Fluxmail license has lapsed; this instance is on the Personal plan ` +
+                `(${entitlements.maxAccounts} mailboxes, ${entitlements.maxMembers} member).` +
+                (overQuota
+                    ? ` Current usage (${accountCount} mailboxes, ${memberCount} members) exceeds that, so email tools are ` +
+                        'blocked until you renew the license or remove mailboxes/members to fit.'
+                    : '');
+    }
+    return { entitlements, accountCount, memberCount, overQuota, ...(warning ? { warning } : {}) };
+}
+/**
+ * Gate for MCP tool calls: throws once a lapsed license leaves the instance
+ * over the entitled caps. Returns the current state so callers can surface
+ * grace warnings without a second read.
+ */
+export function assertWithinQuota(db, now = new Date()) {
+    const state = checkLicenseState(db, now);
+    if (state.overQuota) {
+        const { entitlements: ent } = state;
+        throw new EmailError('entitlement_exceeded', `This instance has ${state.accountCount} connected mailboxes and ${state.memberCount} members, but the ` +
+            `${ent.plan} plan allows ${ent.maxAccounts} and ${ent.maxMembers}. Renew the license ` +
+            '("fluxmail license activate <key>") or remove mailboxes/members ' +
+            '("fluxmail accounts remove", "fluxmail members remove") to fit the plan.');
+    }
+    return state;
+}
+//# sourceMappingURL=entitlements.js.map

package/dist/licensing/entitlements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlements.js","sourceRoot":"","sources":["../../src/licensing/entitlements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAmB,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE5D,8FAA8F;AAC9F,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAiBxD,MAAM,CAAC,MAAM,aAAa,GAAiB;IACzC,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,CAAC;CACf,CAAC;AAEF,MAAM,YAAY,GAAG,SAAS,CAAC;AAK/B,MAAM,UAAU,YAAY,CAAC,EAAY;IACvC,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC1F,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAA8B,EAAE,KAAa;IAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;SACpB,MAAM,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;SAC9C,kBAAkB,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;SAC1E,GAAG,EAAE,CAAC;AACX,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAA8B;IACvD,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,EAAY,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IAC5D,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,aAAa,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,SAAS,GAAG,eAAe,CAAC;QAC/C,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,UAAU;YAAE,OAAO,aAAa,CAAC;QACtD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,SAAS,CAAC;QAC3C,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,IAAI;YACd,OAAO;YACP,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,cAAc,EAAE,KAAK,CAAC,SAAS;YAC/B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,OAAO,aAAa,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAA0B,EAAE,OAAe,EAAE,GAAW,EAAE,GAAiB;IAC9F,IAAI,OAAO,GAAG,GAAG;QAAE,OAAO;IAC1B,MAAM,IAAI,GAAG,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACzH,MAAM,IAAI,UAAU,CAClB,sBAAsB,EACtB,GAAG,CAAC,QAAQ;QACV,CAAC,CAAC,QAAQ,GAAG,CAAC,IAAI,gBAAgB,GAAG,IAAI,IAAI,eAAe,OAAO,mCAAmC;QACtG,CAAC,CAAC,4BAA4B,GAAG,IAAI,IAAI,eAAe,OAAO,KAAK;YAClE,mEAAmE,CACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,YAA0B;IAC5E,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,YAA0B;IAC3E,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AACxE,CAAC;AAYD,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,EAAY,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IAC9D,MAAM,YAAY,GAAG,eAAe,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAC7D,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAC3D,MAAM,SAAS,GACb,YAAY,GAAG,YAAY,CAAC,WAAW,IAAI,WAAW,GAAG,YAAY,CAAC,UAAU,CAAC;IAEnF,IAAI,OAA2B,CAAC;IAChC,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,gCAAgC,YAAY,CAAC,cAAc,+BAA+B;gBAC1F,GAAG,YAAY,CAAC,UAAU,kEAAkE,CAAC;IACjG,CAAC;SAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;QACtD,OAAO;YACL,yEAAyE;gBACzE,IAAI,YAAY,CAAC,WAAW,eAAe,YAAY,CAAC,UAAU,WAAW;gBAC7E,CAAC,SAAS;oBACR,CAAC,CAAC,mBAAmB,YAAY,eAAe,WAAW,6CAA6C;wBACtG,yEAAyE;oBAC3E,CAAC,CAAC,EAAE,CAAC,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACjG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAY,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IAC9D,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;QACpC,MAAM,IAAI,UAAU,CAClB,sBAAsB,EACtB,qBAAqB,KAAK,CAAC,YAAY,4BAA4B,KAAK,CAAC,WAAW,oBAAoB;YACtG,GAAG,GAAG,CAAC,IAAI,gBAAgB,GAAG,CAAC,WAAW,QAAQ,GAAG,CAAC,UAAU,sBAAsB;YACtF,kEAAkE;YAClE,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/licensing/lease.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Entitlement lease issued by the hosted license server: a detached-signature
+ * token of the form base64url(payloadJSON) + "." + base64url(ed25519 signature).
+ * The signature covers the payload bytes exactly as transmitted, so we verify
+ * before parsing and never re-serialize the JSON.
+ */
+export interface LeasePayload {
+    /** Payload version; this client understands only 2. */
+    v: 2;
+    licenseId: string;
+    /** Lowercase plan name for display ("pro", "team", …); clients never switch on it. */
+    plan: string;
+    /** People who may use this instance. */
+    maxMembers: number;
+    /** Connected mailboxes on this instance. */
+    maxAccounts: number;
+    /** ISO 8601 */
+    issuedAt: string;
+    /** ISO 8601, issuedAt + ~7 days */
+    expiresAt: string;
+}
+/**
+ * License-server signing keys (base64 SPKI DER), pinned at build time.
+ * Rotation: releases ship with both the old and new key pinned; the server
+ * switches its private key once instances have upgraded, then the old pin
+ * is removed.
+ */
+export declare const PINNED_LICENSE_PUBLIC_KEYS: readonly string[];
+/**
+ * Pinned keys plus any keys from FLUXMAIL_LICENSE_PUBLIC_KEYS (comma-separated
+ * base64 SPKI DER), which exists for development and tests. Extra keys are
+ * additive so an env typo can never unpin the production key, and the override
+ * is ignored under NODE_ENV=production (as set by the Docker image) so a stock
+ * production instance trusts only the pinned keys.
+ */
+export declare function licensePublicKeys(): string[];
+/**
+ * Verify a lease token against the accepted public keys and return its payload.
+ * Throws with a human-readable reason on any failure; callers on enforcement
+ * paths catch and fall back to Personal-plan limits. With allowExpired, an
+ * expired-but-authentic lease is returned so the caller can apply the grace
+ * period; signature and shape failures still throw.
+ */
+export declare function verifyLease(token: string, publicKeys: readonly string[], now?: Date, opts?: {
+    allowExpired?: boolean;
+}): LeasePayload;
+//# sourceMappingURL=lease.d.ts.map

package/dist/licensing/lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.d.ts","sourceRoot":"","sources":["../../src/licensing/lease.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,uDAAuD;IACvD,CAAC,EAAE,CAAC,CAAC;IACL,SAAS,EAAE,MAAM,CAAC;IAClB,sFAAsF;IACtF,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAGvD,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAU5C;AAYD;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,GAAG,OAAa,EAChB,IAAI,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAO,GACpC,YAAY,CAwDd"}

package/dist/licensing/lease.js

@@ -0,0 +1,103 @@
+import { createPublicKey, verify as verifySignature } from 'node:crypto';
+/**
+ * License-server signing keys (base64 SPKI DER), pinned at build time.
+ * Rotation: releases ship with both the old and new key pinned; the server
+ * switches its private key once instances have upgraded, then the old pin
+ * is removed.
+ */
+export const PINNED_LICENSE_PUBLIC_KEYS = [
+    'MCowBQYDK2VwAyEAoxmkS0uM1qUX6+Jzm3aoTPLFuZ8mcpyiEI3VE1qdM90=',
+    'MCowBQYDK2VwAyEA3ZAEKMPlNE1Ne0bTra438WMvI2Tle+C2aDOOAA8ETWM=',
+];
+/**
+ * Pinned keys plus any keys from FLUXMAIL_LICENSE_PUBLIC_KEYS (comma-separated
+ * base64 SPKI DER), which exists for development and tests. Extra keys are
+ * additive so an env typo can never unpin the production key, and the override
+ * is ignored under NODE_ENV=production (as set by the Docker image) so a stock
+ * production instance trusts only the pinned keys.
+ */
+export function licensePublicKeys() {
+    const extra = process.env.NODE_ENV === 'production' ? undefined : process.env.FLUXMAIL_LICENSE_PUBLIC_KEYS;
+    const fromEnv = extra
+        ? extra
+            .split(',')
+            .map((key) => key.trim())
+            .filter(Boolean)
+        : [];
+    return [...PINNED_LICENSE_PUBLIC_KEYS, ...fromEnv];
+}
+const BASE64URL = /^[A-Za-z0-9_-]+$/;
+function decodePublicKey(base64Spki) {
+    try {
+        return createPublicKey({ key: Buffer.from(base64Spki, 'base64'), format: 'der', type: 'spki' });
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Verify a lease token against the accepted public keys and return its payload.
+ * Throws with a human-readable reason on any failure; callers on enforcement
+ * paths catch and fall back to Personal-plan limits. With allowExpired, an
+ * expired-but-authentic lease is returned so the caller can apply the grace
+ * period; signature and shape failures still throw.
+ */
+export function verifyLease(token, publicKeys, now = new Date(), opts = {}) {
+    const parts = token.split('.');
+    if (parts.length !== 2 || !BASE64URL.test(parts[0]) || !BASE64URL.test(parts[1])) {
+        throw new Error('malformed lease token');
+    }
+    const payloadBytes = Buffer.from(parts[0], 'base64url');
+    const signature = Buffer.from(parts[1], 'base64url');
+    const signed = publicKeys.some((key) => {
+        const publicKey = decodePublicKey(key);
+        if (!publicKey)
+            return false;
+        try {
+            return verifySignature(null, payloadBytes, publicKey, signature);
+        }
+        catch {
+            return false;
+        }
+    });
+    if (!signed) {
+        throw new Error('lease signature does not match any accepted license key');
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(payloadBytes.toString('utf8'));
+    }
+    catch {
+        throw new Error('lease payload is not valid JSON');
+    }
+    if (typeof parsed !== 'object' || parsed === null) {
+        throw new Error('lease payload is not an object');
+    }
+    const payload = parsed;
+    if (payload.v !== 2) {
+        throw new Error(`unsupported lease version ${JSON.stringify(payload.v)}`);
+    }
+    if (typeof payload.licenseId !== 'string' || !payload.licenseId) {
+        throw new Error('lease payload has no licenseId');
+    }
+    if (typeof payload.plan !== 'string' || !payload.plan) {
+        throw new Error('lease payload has no plan');
+    }
+    for (const field of ['maxMembers', 'maxAccounts']) {
+        const value = payload[field];
+        if (typeof value !== 'number' || !Number.isInteger(value) || value < 1) {
+            throw new Error(`lease payload has an invalid ${field}`);
+        }
+    }
+    for (const field of ['issuedAt', 'expiresAt']) {
+        const value = payload[field];
+        if (typeof value !== 'string' || Number.isNaN(Date.parse(value))) {
+            throw new Error(`lease payload has an invalid ${field}`);
+        }
+    }
+    if (!opts.allowExpired && Date.parse(payload.expiresAt) <= now.getTime()) {
+        throw new Error(`lease expired at ${payload.expiresAt}`);
+    }
+    return payload;
+}
+//# sourceMappingURL=lease.js.map

package/dist/licensing/lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.js","sourceRoot":"","sources":["../../src/licensing/lease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,IAAI,eAAe,EAAkB,MAAM,aAAa,CAAC;AAwBzF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,8DAA8D;IAC9D,8DAA8D;CAC/D,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,KAAK,GACT,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;IAC/F,MAAM,OAAO,GAAG,KAAK;QACnB,CAAC,CAAC,KAAK;aACF,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;aACxB,MAAM,CAAC,OAAO,CAAC;QACpB,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,CAAC,GAAG,0BAA0B,EAAE,GAAG,OAAO,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,SAAS,GAAG,kBAAkB,CAAC;AAErC,SAAS,eAAe,CAAC,UAAkB;IACzC,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,KAAa,EACb,UAA6B,EAC7B,GAAG,GAAG,IAAI,IAAI,EAAE,EAChB,OAAmC,EAAE;IAErC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,CAAC,CAAC;IAEtD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACrC,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC;YACH,OAAO,eAAe,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,GAAG,MAAiC,CAAC;IAClD,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,aAAa,CAAU,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,WAAW,CAAU,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAmB,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,CAAC,SAAmB,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,OAAkC,CAAC;AAC5C,CAAC"}

package/dist/licensing/refresher.d.ts

@@ -0,0 +1,46 @@
+import type { FluxmailConfig } from '../config.js';
+import type { FluxmailDb } from '../storage/db.js';
+import { type LeasePayload } from './lease.js';
+/** Instances revalidate roughly daily; the lease itself is valid for ~7 days. */
+export declare const VALIDATE_INTERVAL_MS: number;
+export type RefreshResult = {
+    outcome: 'refreshed';
+    lease: LeasePayload;
+} | {
+    outcome: 'invalid_key' | 'not_found' | 'inactive' | 'in_use' | 'bad_lease' | 'outage';
+    message: string;
+    /** True while a previously cached lease still grants paid limits. */
+    cachedLeaseActive: boolean;
+};
+/**
+ * Stable random id per install, persisted next to the database. Not a secret;
+ * it lets the license server spot one key shared across many instances.
+ */
+export declare function loadInstanceId(dataDir: string): string;
+export interface RefreshOptions {
+    licenseKey: string;
+    serverUrl: string;
+    dataDir: string;
+    fetchImpl?: typeof fetch;
+}
+/**
+ * Validate the license with the server and cache the returned lease. Every
+ * failure keeps the existing cached lease, per the contract: an outage or a
+ * lapsed subscription degrades to free-tier limits only once the cached lease
+ * expires, and never interrupts a running server.
+ */
+export declare function refreshLicense(db: FluxmailDb, opts: RefreshOptions): Promise<RefreshResult>;
+/**
+ * Background revalidation for long-running server modes: refresh immediately
+ * if the last validation is over a day old, then keep a daily cadence. Timers
+ * are unref'd and every failure path is caught, so licensing can never keep
+ * the process alive or take it down. Returns a stop function.
+ */
+export declare function startLicenseRefresher(deps: {
+    db: FluxmailDb;
+    config: FluxmailConfig;
+    log?: (line: string) => void;
+    /** Notify long-lived services that renewed entitlements are available. */
+    onRefreshed?: () => void;
+}): () => void;
+//# sourceMappingURL=refresher.d.ts.map

package/dist/licensing/refresher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresher.d.ts","sourceRoot":"","sources":["../../src/licensing/refresher.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EAAkC,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/E,iFAAiF;AACjF,eAAO,MAAM,oBAAoB,QAAsB,CAAC;AAIxD,MAAM,MAAM,aAAa,GACrB;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GAC7C;IACE,OAAO,EAAE,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;IACtF,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,iBAAiB,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEN;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAStD;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CA4DjG;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,EAAE,EAAE,UAAU,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;IACvB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;CAC1B,GAAG,MAAM,IAAI,CAoDb"}

package/dist/licensing/refresher.js

@@ -0,0 +1,150 @@
+import { randomBytes } from 'node:crypto';
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import path from 'node:path';
+import { validateLicense } from './client.js';
+import { licensePublicKeys, verifyLease } from './lease.js';
+import { getEntitlements, readLeaseRow, saveLeaseToken } from './entitlements.js';
+/** Instances revalidate roughly daily; the lease itself is valid for ~7 days. */
+export const VALIDATE_INTERVAL_MS = 24 * 60 * 60 * 1000;
+/** After an outage, retry sooner than the daily cadence. */
+const OUTAGE_RETRY_MS = 60 * 60 * 1000;
+/**
+ * Stable random id per install, persisted next to the database. Not a secret;
+ * it lets the license server spot one key shared across many instances.
+ */
+export function loadInstanceId(dataDir) {
+    const file = path.join(dataDir, 'instance.id');
+    if (existsSync(file)) {
+        const id = readFileSync(file, 'utf8').trim();
+        if (id)
+            return id;
+    }
+    const id = randomBytes(16).toString('hex');
+    writeFileSync(file, id + '\n');
+    return id;
+}
+/**
+ * Validate the license with the server and cache the returned lease. Every
+ * failure keeps the existing cached lease, per the contract: an outage or a
+ * lapsed subscription degrades to free-tier limits only once the cached lease
+ * expires, and never interrupts a running server.
+ */
+export async function refreshLicense(db, opts) {
+    const result = await validateLicense({
+        serverUrl: opts.serverUrl,
+        licenseKey: opts.licenseKey,
+        instanceId: loadInstanceId(opts.dataDir),
+        ...(opts.fetchImpl ? { fetchImpl: opts.fetchImpl } : {}),
+    });
+    const cachedLeaseActive = () => getEntitlements(db).licensed;
+    switch (result.kind) {
+        case 'valid': {
+            let lease;
+            try {
+                lease = verifyLease(result.lease, licensePublicKeys());
+            }
+            catch (err) {
+                return {
+                    outcome: 'bad_lease',
+                    message: `The license server returned a lease this build cannot verify ` +
+                        `(${err instanceof Error ? err.message : String(err)}). ` +
+                        'Update Fluxmail if a signing-key rotation was announced.',
+                    cachedLeaseActive: cachedLeaseActive(),
+                };
+            }
+            saveLeaseToken(db, result.lease);
+            return { outcome: 'refreshed', lease };
+        }
+        case 'invalid_request':
+            return {
+                outcome: 'invalid_key',
+                message: 'The license server rejected the key as malformed; check FLUXMAIL_LICENSE_KEY.',
+                cachedLeaseActive: cachedLeaseActive(),
+            };
+        case 'license_not_found':
+            return {
+                outcome: 'not_found',
+                message: 'The license key is invalid; check it for typos.',
+                cachedLeaseActive: cachedLeaseActive(),
+            };
+        case 'license_inactive':
+            return {
+                outcome: 'inactive',
+                message: `The license is no longer active (${result.status}).`,
+                cachedLeaseActive: cachedLeaseActive(),
+            };
+        case 'license_in_use':
+            return {
+                outcome: 'in_use',
+                message: 'This license is already active on another Fluxmail instance. ' +
+                    'Run "fluxmail license deactivate" there first, or manage instances from your Fluxmail account.',
+                cachedLeaseActive: cachedLeaseActive(),
+            };
+        case 'outage':
+            return {
+                outcome: 'outage',
+                message: `Could not reach the license server (${result.detail}); will retry.`,
+                cachedLeaseActive: cachedLeaseActive(),
+            };
+    }
+}
+/**
+ * Background revalidation for long-running server modes: refresh immediately
+ * if the last validation is over a day old, then keep a daily cadence. Timers
+ * are unref'd and every failure path is caught, so licensing can never keep
+ * the process alive or take it down. Returns a stop function.
+ */
+export function startLicenseRefresher(deps) {
+    const { db, config } = deps;
+    const log = deps.log ?? (() => { });
+    const licenseKey = config.licenseKey;
+    if (!licenseKey)
+        return () => { };
+    let timer;
+    let stopped = false;
+    const schedule = (delayMs) => {
+        if (stopped)
+            return;
+        timer = setTimeout(() => void run(), delayMs);
+        timer.unref();
+    };
+    const run = async () => {
+        let result;
+        try {
+            result = await refreshLicense(db, {
+                licenseKey,
+                serverUrl: config.licenseServerUrl,
+                dataDir: config.dataDir,
+            });
+        }
+        catch (err) {
+            log(`License refresh failed: ${err instanceof Error ? err.message : String(err)}`);
+            schedule(OUTAGE_RETRY_MS);
+            return;
+        }
+        if (result.outcome === 'refreshed') {
+            log(`License validated; lease renewed until ${result.lease.expiresAt}`);
+            deps.onRefreshed?.();
+            schedule(VALIDATE_INTERVAL_MS);
+        }
+        else {
+            log(`License validation: ${result.message}` +
+                (result.cachedLeaseActive
+                    ? ' The cached lease keeps paid limits for now.'
+                    : ' Running with Personal-plan limits.'));
+            schedule(result.outcome === 'outage' ? OUTAGE_RETRY_MS : VALIDATE_INTERVAL_MS);
+        }
+    };
+    const row = readLeaseRow(db);
+    const sinceLastValidation = row ? Date.now() - row.updatedAt : Number.POSITIVE_INFINITY;
+    if (sinceLastValidation >= VALIDATE_INTERVAL_MS)
+        void run();
+    else
+        schedule(VALIDATE_INTERVAL_MS - sinceLastValidation);
+    return () => {
+        stopped = true;
+        if (timer)
+            clearTimeout(timer);
+    };
+}
+//# sourceMappingURL=refresher.js.map

package/dist/licensing/refresher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresher.js","sourceRoot":"","sources":["../../src/licensing/refresher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAqB,MAAM,YAAY,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAElF,iFAAiF;AACjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACxD,4DAA4D;AAC5D,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAWvC;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC/C,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC;IACpB,CAAC;IACD,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3C,aAAa,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,CAAC;AACZ,CAAC;AASD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAc,EAAE,IAAoB;IACvE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC;IAE7D,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,KAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,WAAW;oBACpB,OAAO,EACL,+DAA+D;wBAC/D,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK;wBACzD,0DAA0D;oBAC5D,iBAAiB,EAAE,iBAAiB,EAAE;iBACvC,CAAC;YACJ,CAAC;YACD,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,iBAAiB;YACpB,OAAO;gBACL,OAAO,EAAE,aAAa;gBACtB,OAAO,EAAE,+EAA+E;gBACxF,iBAAiB,EAAE,iBAAiB,EAAE;aACvC,CAAC;QACJ,KAAK,mBAAmB;YACtB,OAAO;gBACL,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,iDAAiD;gBAC1D,iBAAiB,EAAE,iBAAiB,EAAE;aACvC,CAAC;QACJ,KAAK,kBAAkB;YACrB,OAAO;gBACL,OAAO,EAAE,UAAU;gBACnB,OAAO,EAAE,oCAAoC,MAAM,CAAC,MAAM,IAAI;gBAC9D,iBAAiB,EAAE,iBAAiB,EAAE;aACvC,CAAC;QACJ,KAAK,gBAAgB;YACnB,OAAO;gBACL,OAAO,EAAE,QAAQ;gBACjB,OAAO,EACL,+DAA+D;oBAC/D,gGAAgG;gBAClG,iBAAiB,EAAE,iBAAiB,EAAE;aACvC,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,OAAO,EAAE,QAAQ;gBACjB,OAAO,EAAE,uCAAuC,MAAM,CAAC,MAAM,gBAAgB;gBAC7E,iBAAiB,EAAE,iBAAiB,EAAE;aACvC,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAMrC;IACC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACrC,IAAI,CAAC,UAAU;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAEjC,IAAI,KAAiC,CAAC;IACtC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAQ,EAAE;QACzC,IAAI,OAAO;YAAE,OAAO;QACpB,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;QAC9C,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,IAAmB,EAAE;QACpC,IAAI,MAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE;gBAChC,UAAU;gBACV,SAAS,EAAE,MAAM,CAAC,gBAAgB;gBAClC,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnF,QAAQ,CAAC,eAAe,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACnC,GAAG,CAAC,0CAA0C,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACrB,QAAQ,CAAC,oBAAoB,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,GAAG,CACD,uBAAuB,MAAM,CAAC,OAAO,EAAE;gBACrC,CAAC,MAAM,CAAC,iBAAiB;oBACvB,CAAC,CAAC,8CAA8C;oBAChD,CAAC,CAAC,qCAAqC,CAAC,CAC7C,CAAC;YACF,QAAQ,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;QACjF,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,mBAAmB,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;IACxF,IAAI,mBAAmB,IAAI,oBAAoB;QAAE,KAAK,GAAG,EAAE,CAAC;;QACvD,QAAQ,CAAC,oBAAoB,GAAG,mBAAmB,CAAC,CAAC;IAE1D,OAAO,GAAG,EAAE;QACV,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC"}

package/dist/mcp/buildServer.d.ts

@@ -0,0 +1,28 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { EmailService, SendInput } from '../service/emailService.js';
+type DraftArgs = {
+    accountId?: string;
+    to?: string[];
+    cc?: string[];
+    bcc?: string[];
+    subject?: string;
+    bodyText?: string;
+    bodyHtml?: string;
+    replyToMessageId?: string;
+    replyAll?: boolean;
+    attachments?: Array<{
+        filename: string;
+        mimeType: string;
+        content: string;
+    }>;
+};
+export declare function toSendRequest(args: DraftArgs & {
+    draftId?: string;
+}): SendInput | {
+    draftId: string;
+};
+export declare function resolveAttachmentSavePath(savePath: string, filename: string): string;
+export declare function saveAttachment(savePath: string, filename: string, content: Buffer): string;
+export declare function buildMcpServer(service: EmailService): McpServer;
+export {};
+//# sourceMappingURL=buildServer.d.ts.map

package/dist/mcp/buildServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildServer.d.ts","sourceRoot":"","sources":["../../src/mcp/buildServer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAYpE,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAgE1E,KAAK,SAAS,GAAG;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9E,CAAC;AAyBF,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAsBrG;AAqDD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgBpF;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAY1F;AAYD,wBAAgB,cAAc,CAAC,OAAO,EAAE,YAAY,GAAG,SAAS,CA0T/D"}