fluxmail 0.0.1 → 0.1.0

package/dist/storage/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/storage/db.ts"],"names":[],"mappings":"AACA,OAAO,EAAW,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAGjF,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASnB,CAAC;AAEF,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAapB,CAAC;AAEF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOtB,CAAC;AAEH,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASlB,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMvB,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuB1B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,qBAAqB,CAAC;AAiE/C,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAgBjD"}

package/dist/storage/db.js

@@ -0,0 +1,143 @@
+import Database from 'better-sqlite3';
+import { drizzle } from 'drizzle-orm/better-sqlite3';
+import { index, integer, sqliteTable, text, uniqueIndex } from 'drizzle-orm/sqlite-core';
+export const members = sqliteTable('members', {
+    id: text('id').primaryKey(),
+    name: text('name').notNull(),
+    email: text('email'),
+    createdAt: integer('created_at').notNull(),
+}, (table) => [uniqueIndex('members_email_unique').on(table.email)]);
+export const accounts = sqliteTable('accounts', {
+    id: text('id').primaryKey(),
+    provider: text('provider').notNull(),
+    email: text('email').notNull(),
+    displayName: text('display_name'),
+    status: text('status').notNull().default('active'),
+    createdAt: integer('created_at').notNull(),
+    /** Owning member; NULL means the mailbox is shared across the instance. */
+    memberId: text('member_id').references(() => members.id, { onDelete: 'set null' }),
+}, (table) => [uniqueIndex('accounts_provider_email_unique').on(table.provider, table.email)]);
+export const oauthTokens = sqliteTable('oauth_tokens', {
+    accountId: text('account_id')
+        .primaryKey()
+        .references(() => accounts.id, { onDelete: 'cascade' }),
+    /** AES-256-GCM encrypted JSON blob of provider tokens. */
+    encryptedTokens: text('encrypted_tokens').notNull(),
+    updatedAt: integer('updated_at').notNull(),
+});
+export const apiKeys = sqliteTable('api_keys', {
+    id: text('id').primaryKey(),
+    name: text('name').notNull(),
+    /** SHA-256 hex of the key; the key itself is shown once at creation. */
+    keyHash: text('key_hash').notNull().unique(),
+    createdAt: integer('created_at').notNull(),
+    lastUsedAt: integer('last_used_at'),
+    /** Member the key was issued to; NULL means an unscoped admin key. */
+    memberId: text('member_id').references(() => members.id, { onDelete: 'set null' }),
+});
+export const licenseLease = sqliteTable('license_lease', {
+    /** Single-row table; the row id is always 'current'. */
+    id: text('id').primaryKey(),
+    /** Signed entitlement lease exactly as issued by the license server. */
+    token: text('token').notNull(),
+    updatedAt: integer('updated_at').notNull(),
+});
+export const scheduledSends = sqliteTable('scheduled_sends', {
+    id: text('id').primaryKey(),
+    accountId: text('account_id')
+        .notNull()
+        .references(() => accounts.id, { onDelete: 'cascade' }),
+    draftId: text('draft_id').notNull(),
+    /** Epoch milliseconds. */
+    sendAt: integer('send_at').notNull(),
+    createdAt: integer('created_at').notNull(),
+    status: text('status').notNull().default('pending'),
+    attempts: integer('attempts').notNull().default(0),
+    lastError: text('last_error'),
+    sentMessageId: text('sent_message_id'),
+    sentThreadId: text('sent_thread_id'),
+    /** Display snapshots taken at schedule time so listing never hits the provider. */
+    subject: text('subject'),
+    toRecipients: text('to_recipients'),
+    claimToken: text('claim_token'),
+    claimUntil: integer('claim_until'),
+}, (table) => [index('scheduled_sends_pending_due').on(table.status, table.sendAt)]);
+const BOOTSTRAP_SQL = `
+CREATE TABLE IF NOT EXISTS members (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL,
+  email TEXT,
+  created_at INTEGER NOT NULL
+);
+CREATE UNIQUE INDEX IF NOT EXISTS members_email_unique ON members(email);
+CREATE TABLE IF NOT EXISTS accounts (
+  id TEXT PRIMARY KEY,
+  provider TEXT NOT NULL,
+  email TEXT NOT NULL,
+  display_name TEXT,
+  status TEXT NOT NULL DEFAULT 'active',
+  created_at INTEGER NOT NULL,
+  member_id TEXT REFERENCES members(id) ON DELETE SET NULL
+);
+CREATE UNIQUE INDEX IF NOT EXISTS accounts_provider_email_unique
+  ON accounts(provider, email);
+CREATE TABLE IF NOT EXISTS oauth_tokens (
+  account_id TEXT PRIMARY KEY REFERENCES accounts(id) ON DELETE CASCADE,
+  encrypted_tokens TEXT NOT NULL,
+  updated_at INTEGER NOT NULL
+);
+CREATE TABLE IF NOT EXISTS api_keys (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL,
+  key_hash TEXT NOT NULL UNIQUE,
+  created_at INTEGER NOT NULL,
+  last_used_at INTEGER,
+  member_id TEXT REFERENCES members(id) ON DELETE SET NULL
+);
+CREATE TABLE IF NOT EXISTS license_lease (
+  id TEXT PRIMARY KEY,
+  token TEXT NOT NULL,
+  updated_at INTEGER NOT NULL
+);
+CREATE TABLE IF NOT EXISTS scheduled_sends (
+  id TEXT PRIMARY KEY,
+  account_id TEXT NOT NULL REFERENCES accounts(id) ON DELETE CASCADE,
+  draft_id TEXT NOT NULL,
+  send_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL,
+  status TEXT NOT NULL DEFAULT 'pending',
+  attempts INTEGER NOT NULL DEFAULT 0,
+  last_error TEXT,
+  sent_message_id TEXT,
+  sent_thread_id TEXT,
+  subject TEXT,
+  to_recipients TEXT,
+  claim_token TEXT,
+  claim_until INTEGER
+);
+CREATE INDEX IF NOT EXISTS scheduled_sends_pending_due
+  ON scheduled_sends(status, send_at);
+`;
+function tableColumns(sqlite, table) {
+    return new Set(sqlite.prepare(`PRAGMA table_info(${table})`).all().map((column) => column.name));
+}
+export function openDb(dbPath) {
+    const sqlite = new Database(dbPath);
+    sqlite.pragma('journal_mode = WAL');
+    sqlite.pragma('foreign_keys = ON');
+    sqlite.exec(BOOTSTRAP_SQL);
+    const scheduledCols = tableColumns(sqlite, 'scheduled_sends');
+    if (!scheduledCols.has('claim_token'))
+        sqlite.exec('ALTER TABLE scheduled_sends ADD COLUMN claim_token TEXT');
+    if (!scheduledCols.has('claim_until'))
+        sqlite.exec('ALTER TABLE scheduled_sends ADD COLUMN claim_until INTEGER');
+    // Pre-members databases: NULL means shared mailbox / unscoped key, so old rows need no backfill.
+    if (!tableColumns(sqlite, 'accounts').has('member_id')) {
+        sqlite.exec('ALTER TABLE accounts ADD COLUMN member_id TEXT REFERENCES members(id) ON DELETE SET NULL');
+    }
+    if (!tableColumns(sqlite, 'api_keys').has('member_id')) {
+        sqlite.exec('ALTER TABLE api_keys ADD COLUMN member_id TEXT REFERENCES members(id) ON DELETE SET NULL');
+    }
+    return drizzle(sqlite);
+}
+//# sourceMappingURL=db.js.map

package/dist/storage/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/storage/db.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,OAAO,EAA8B,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEzF,MAAM,CAAC,MAAM,OAAO,GAAG,WAAW,CAChC,SAAS,EACT;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CAC3C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CACjE,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CACjC,UAAU,EACV;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAClD,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC1C,2EAA2E;IAC3E,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;CACnF,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAC3F,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,WAAW,CAAC,cAAc,EAAE;IACrD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,UAAU,EAAE;SACZ,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACzD,0DAA0D;IAC1D,eAAe,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE;IACnD,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE;IAC7C,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,wEAAwE;IACxE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IAC5C,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC1C,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC;IACnC,sEAAsE;IACtE,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;CACnF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CAAC,eAAe,EAAE;IACvD,wDAAwD;IACxD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,wEAAwE;IACxE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CACvC,iBAAiB,EACjB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;SAC1B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACzD,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,0BAA0B;IAC1B,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACpC,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC1C,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACnD,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,aAAa,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACtC,YAAY,EAAE,IAAI,CAAC,gBAAgB,CAAC;IACpC,mFAAmF;IACnF,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;IACxB,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC;IACnC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC;CACnC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CACjF,CAAC;AAIF,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuDrB,CAAC;AAEF,SAAS,YAAY,CAAC,MAAyB,EAAE,KAAa;IAC5D,OAAO,IAAI,GAAG,CACX,MAAM,CAAC,OAAO,CAAC,qBAAqB,KAAK,GAAG,CAAC,CAAC,GAAG,EAA8B,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC9G,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,MAAc;IACnC,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACpC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACnC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3B,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC9D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IAC9G,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IACjH,iGAAiG;IACjG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,0FAA0F,CAAC,CAAC;IAC1G,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,0FAA0F,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC"}

package/dist/storage/members.d.ts

@@ -0,0 +1,29 @@
+import { type FluxmailDb } from './db.js';
+export interface MemberInfo {
+    id: string;
+    name: string;
+    email: string | null;
+    createdAt: number;
+    /** Mailboxes owned by this member (shared mailboxes are not counted). */
+    accountCount: number;
+    apiKeyCount: number;
+}
+export declare function addMember(db: FluxmailDb, input: {
+    name: string;
+    email?: string;
+}): MemberInfo;
+export declare function getMember(db: FluxmailDb, id: string): MemberInfo;
+/** Resolve a member by id or email, for CLI --member flags. */
+export declare function findMember(db: FluxmailDb, ref: string): MemberInfo;
+export declare function listMembers(db: FluxmailDb): MemberInfo[];
+/**
+ * Delete a member. Their mailboxes become shared (member_id is set to NULL by
+ * the foreign key), and their API keys are revoked: a key must never outlive
+ * the member scoping it, or it would fall back to unscoped admin access.
+ */
+export declare function removeMember(db: FluxmailDb, id: string): {
+    name: string;
+    freedAccounts: number;
+    revokedApiKeys: number;
+};
+//# sourceMappingURL=members.d.ts.map

package/dist/storage/members.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.d.ts","sourceRoot":"","sources":["../../src/storage/members.ts"],"names":[],"mappings":"AAGA,OAAO,EAA8B,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAGtE,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAYD,wBAAgB,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,UAAU,CAgB7F;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,UAAU,CAIhE;AAED,+DAA+D;AAC/D,wBAAgB,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CASlE;AAED,wBAAgB,WAAW,CAAC,EAAE,EAAE,UAAU,GAAG,UAAU,EAAE,CAMxD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,EAAE,EAAE,UAAU,EACd,EAAE,EAAE,MAAM,GACT;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAOjE"}

package/dist/storage/members.js

@@ -0,0 +1,67 @@
+import { randomBytes } from 'node:crypto';
+import { eq } from 'drizzle-orm';
+import { EmailError } from '@fluxmail/core';
+import { accounts, apiKeys, members } from './db.js';
+import { assertMemberLimit, getEntitlements } from '../licensing/entitlements.js';
+function toInfo(db, row) {
+    return {
+        ...row,
+        accountCount: db.select().from(accounts).where(eq(accounts.memberId, row.id)).all().length,
+        apiKeyCount: db.select().from(apiKeys).where(eq(apiKeys.memberId, row.id)).all().length,
+    };
+}
+export function addMember(db, input) {
+    const name = input.name.trim();
+    if (!name)
+        throw new EmailError('invalid_request', 'Member name cannot be empty');
+    const email = input.email?.trim().toLowerCase();
+    const id = `member_${randomBytes(6).toString('hex')}`;
+    db.transaction((tx) => {
+        if (email && tx.select().from(members).where(eq(members.email, email)).get()) {
+            throw new EmailError('invalid_request', `A member with email ${email} already exists`);
+        }
+        const memberCount = tx.select().from(members).all().length;
+        assertMemberLimit(memberCount, getEntitlements(tx));
+        tx.insert(members)
+            .values({ id, name, email: email ?? null, createdAt: Date.now() })
+            .run();
+    });
+    return getMember(db, id);
+}
+export function getMember(db, id) {
+    const row = db.select().from(members).where(eq(members.id, id)).get();
+    if (!row)
+        throw new EmailError('not_found', `No member with id "${id}"`);
+    return toInfo(db, row);
+}
+/** Resolve a member by id or email, for CLI --member flags. */
+export function findMember(db, ref) {
+    const byId = db.select().from(members).where(eq(members.id, ref)).get();
+    if (byId)
+        return toInfo(db, byId);
+    const byEmail = db.select().from(members).where(eq(members.email, ref.trim().toLowerCase())).get();
+    if (byEmail)
+        return toInfo(db, byEmail);
+    throw new EmailError('not_found', `No member with id or email "${ref}". Run "fluxmail members list" to see members.`);
+}
+export function listMembers(db) {
+    return db
+        .select()
+        .from(members)
+        .all()
+        .map((row) => toInfo(db, row));
+}
+/**
+ * Delete a member. Their mailboxes become shared (member_id is set to NULL by
+ * the foreign key), and their API keys are revoked: a key must never outlive
+ * the member scoping it, or it would fall back to unscoped admin access.
+ */
+export function removeMember(db, id) {
+    const info = getMember(db, id);
+    db.transaction((tx) => {
+        tx.delete(apiKeys).where(eq(apiKeys.memberId, id)).run();
+        tx.delete(members).where(eq(members.id, id)).run();
+    });
+    return { name: info.name, freedAccounts: info.accountCount, revokedApiKeys: info.apiKeyCount };
+}
+//# sourceMappingURL=members.js.map

package/dist/storage/members.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.js","sourceRoot":"","sources":["../../src/storage/members.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAmB,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAclF,SAAS,MAAM,CAAC,EAAc,EAAE,GAAc;IAC5C,OAAO;QACL,GAAG,GAAG;QACN,YAAY,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM;QAC1F,WAAW,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM;KACxF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAc,EAAE,KAAuC;IAC/E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,EAAE,GAAG,UAAU,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACtD,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;QACpB,IAAI,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YAC7E,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,uBAAuB,KAAK,iBAAiB,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;QAC3D,iBAAiB,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;QACpD,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;aACjE,GAAG,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;IACH,OAAO,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAc,EAAE,EAAU;IAClD,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACtE,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,sBAAsB,EAAE,GAAG,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,UAAU,CAAC,EAAc,EAAE,GAAW;IACpD,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACxE,IAAI,IAAI;QAAE,OAAO,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACnG,IAAI,OAAO;QAAE,OAAO,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,IAAI,UAAU,CAClB,WAAW,EACX,+BAA+B,GAAG,gDAAgD,CACnF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAc;IACxC,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,OAAO,CAAC;SACb,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,EAAc,EACd,EAAU;IAEV,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/B,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;QACpB,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACzD,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,YAAY,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;AACjG,CAAC"}

package/dist/storage/scheduledSends.d.ts

@@ -0,0 +1,60 @@
+import { type FluxmailDb } from './db.js';
+export type ScheduledSendStatus = 'pending' | 'sending' | 'sent' | 'failed' | 'canceled';
+export interface ScheduledSendRow {
+    id: string;
+    accountId: string;
+    draftId: string;
+    /** Epoch milliseconds. */
+    sendAt: number;
+    createdAt: number;
+    status: ScheduledSendStatus;
+    attempts: number;
+    lastError: string | null;
+    sentMessageId: string | null;
+    sentThreadId: string | null;
+    subject: string | null;
+    toRecipients: string | null;
+    claimToken: string | null;
+    claimUntil: number | null;
+}
+export declare function createScheduledSend(db: FluxmailDb, input: {
+    accountId: string;
+    draftId: string;
+    sendAt: number;
+    subject?: string;
+    toRecipients?: string;
+}): ScheduledSendRow;
+export declare function getScheduledSend(db: FluxmailDb, id: string): ScheduledSendRow | undefined;
+/** All schedules, pending first by due time, then the rest newest-first. */
+export declare function listScheduledSends(db: FluxmailDb, accountId?: string): ScheduledSendRow[];
+export declare function listPending(db: FluxmailDb): ScheduledSendRow[];
+export declare function listActive(db: FluxmailDb): ScheduledSendRow[];
+export declare function findPendingByDraft(db: FluxmailDb, accountId: string, draftId: string): ScheduledSendRow | undefined;
+export declare function markSent(db: FluxmailDb, id: string, result: {
+    id: string;
+    threadId: string;
+}): void;
+/** Atomically claim a due row so only one scheduler process can dispatch it. */
+export declare function claimScheduledSend(db: FluxmailDb, id: string, now: number, leaseMs: number): {
+    row: ScheduledSendRow;
+    token: string;
+} | undefined;
+export declare function completeClaim(db: FluxmailDb, id: string, token: string, result: {
+    id: string;
+    threadId: string;
+}): void;
+export declare function failClaim(db: FluxmailDb, id: string, token: string, error: string): void;
+export declare function retryClaim(db: FluxmailDb, id: string, token: string, error: string): void;
+export declare function listClaimable(db: FluxmailDb, now: number): ScheduledSendRow[];
+export declare function markFailed(db: FluxmailDb, id: string, error: string): void;
+/** Record why a pending send is held (e.g. plan quota) without consuming an attempt. */
+export declare function holdPending(db: FluxmailDb, id: string, error: string): void;
+/** Record a retryable failure: bump attempts, keep the row pending. */
+export declare function recordAttempt(db: FluxmailDb, id: string, error: string): void;
+/** Only pending schedules can be canceled; returns false otherwise. */
+export declare function cancelScheduledSend(db: FluxmailDb, id: string): boolean;
+export declare function countPending(db: FluxmailDb): {
+    pending: number;
+    nextSendAt?: number;
+};
+//# sourceMappingURL=scheduledSends.d.ts.map

package/dist/storage/scheduledSends.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduledSends.d.ts","sourceRoot":"","sources":["../../src/storage/scheduledSends.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1D,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEzF,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAQD,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,UAAU,EACd,KAAK,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACrG,gBAAgB,CAwClB;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAGzF;AAED,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAQzF;AAED,wBAAgB,WAAW,CAAC,EAAE,EAAE,UAAU,GAAG,gBAAgB,EAAE,CAE9D;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,UAAU,GAAG,gBAAgB,EAAE,CAO7D;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,UAAU,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,gBAAgB,GAAG,SAAS,CAa9B;AAED,wBAAgB,QAAQ,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAKnG;AAED,gFAAgF;AAChF,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,UAAU,EACd,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd;IAAE,GAAG,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAiBtD;AAED,wBAAgB,aAAa,CAC3B,EAAE,EAAE,UAAU,EACd,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACvC,IAAI,CAYN;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAKxF;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAazF;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAY7E;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAE1E;AAED,wFAAwF;AACxF,wBAAgB,WAAW,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAK3E;AAED,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAO7E;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAOvE;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,UAAU,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAIrF"}

package/dist/storage/scheduledSends.js

@@ -0,0 +1,169 @@
+import { randomBytes } from 'node:crypto';
+import { and, eq, lte, or } from 'drizzle-orm';
+import { EmailError } from '@fluxmail/core';
+import { scheduledSends } from './db.js';
+function toRow(r) {
+    return { ...r, status: r.status };
+}
+export function createScheduledSend(db, input) {
+    const id = `sch_${randomBytes(6).toString('hex')}`;
+    const createdAt = Date.now();
+    return db.transaction((tx) => {
+        const existing = tx
+            .select()
+            .from(scheduledSends)
+            .where(and(eq(scheduledSends.accountId, input.accountId), eq(scheduledSends.draftId, input.draftId), eq(scheduledSends.status, 'pending')))
+            .get();
+        if (existing) {
+            throw new EmailError('invalid_request', `Draft ${input.draftId} is already scheduled to send at ${new Date(existing.sendAt).toISOString()}; cancel it first to reschedule`);
+        }
+        const row = {
+            id,
+            accountId: input.accountId,
+            draftId: input.draftId,
+            sendAt: input.sendAt,
+            createdAt,
+            status: 'pending',
+            attempts: 0,
+            lastError: null,
+            sentMessageId: null,
+            sentThreadId: null,
+            subject: input.subject ?? null,
+            toRecipients: input.toRecipients ?? null,
+            claimToken: null,
+            claimUntil: null,
+        };
+        tx.insert(scheduledSends).values(row).run();
+        return toRow(row);
+    });
+}
+export function getScheduledSend(db, id) {
+    const row = db.select().from(scheduledSends).where(eq(scheduledSends.id, id)).get();
+    return row ? toRow(row) : undefined;
+}
+/** All schedules, pending first by due time, then the rest newest-first. */
+export function listScheduledSends(db, accountId) {
+    const rows = accountId
+        ? db.select().from(scheduledSends).where(eq(scheduledSends.accountId, accountId)).all()
+        : db.select().from(scheduledSends).all();
+    return rows.map(toRow).sort((a, b) => {
+        if ((a.status === 'pending') !== (b.status === 'pending'))
+            return a.status === 'pending' ? -1 : 1;
+        return a.status === 'pending' ? a.sendAt - b.sendAt : b.createdAt - a.createdAt;
+    });
+}
+export function listPending(db) {
+    return db.select().from(scheduledSends).where(eq(scheduledSends.status, 'pending')).all().map(toRow);
+}
+export function listActive(db) {
+    return db
+        .select()
+        .from(scheduledSends)
+        .where(or(eq(scheduledSends.status, 'pending'), eq(scheduledSends.status, 'sending')))
+        .all()
+        .map(toRow);
+}
+export function findPendingByDraft(db, accountId, draftId) {
+    const row = db
+        .select()
+        .from(scheduledSends)
+        .where(and(eq(scheduledSends.accountId, accountId), eq(scheduledSends.draftId, draftId), eq(scheduledSends.status, 'pending')))
+        .get();
+    return row ? toRow(row) : undefined;
+}
+export function markSent(db, id, result) {
+    db.update(scheduledSends)
+        .set({ status: 'sent', sentMessageId: result.id, sentThreadId: result.threadId, lastError: null })
+        .where(eq(scheduledSends.id, id))
+        .run();
+}
+/** Atomically claim a due row so only one scheduler process can dispatch it. */
+export function claimScheduledSend(db, id, now, leaseMs) {
+    const token = randomBytes(12).toString('hex');
+    const result = db
+        .update(scheduledSends)
+        .set({ status: 'sending', claimToken: token, claimUntil: now + leaseMs })
+        .where(and(eq(scheduledSends.id, id), or(eq(scheduledSends.status, 'pending'), and(eq(scheduledSends.status, 'sending'), lte(scheduledSends.claimUntil, now)))))
+        .run();
+    if (result.changes === 0)
+        return undefined;
+    return { row: getScheduledSend(db, id), token };
+}
+export function completeClaim(db, id, token, result) {
+    db.update(scheduledSends)
+        .set({
+        status: 'sent',
+        sentMessageId: result.id,
+        sentThreadId: result.threadId,
+        lastError: null,
+        claimToken: null,
+        claimUntil: null,
+    })
+        .where(and(eq(scheduledSends.id, id), eq(scheduledSends.claimToken, token)))
+        .run();
+}
+export function failClaim(db, id, token, error) {
+    db.update(scheduledSends)
+        .set({ status: 'failed', lastError: error, claimToken: null, claimUntil: null })
+        .where(and(eq(scheduledSends.id, id), eq(scheduledSends.claimToken, token)))
+        .run();
+}
+export function retryClaim(db, id, token, error) {
+    const row = getScheduledSend(db, id);
+    if (!row || row.claimToken !== token)
+        return;
+    db.update(scheduledSends)
+        .set({
+        status: 'pending',
+        attempts: row.attempts + 1,
+        lastError: error,
+        claimToken: null,
+        claimUntil: null,
+    })
+        .where(and(eq(scheduledSends.id, id), eq(scheduledSends.claimToken, token)))
+        .run();
+}
+export function listClaimable(db, now) {
+    return db
+        .select()
+        .from(scheduledSends)
+        .where(or(eq(scheduledSends.status, 'pending'), and(eq(scheduledSends.status, 'sending'), lte(scheduledSends.claimUntil, now))))
+        .all()
+        .map(toRow);
+}
+export function markFailed(db, id, error) {
+    db.update(scheduledSends).set({ status: 'failed', lastError: error }).where(eq(scheduledSends.id, id)).run();
+}
+/** Record why a pending send is held (e.g. plan quota) without consuming an attempt. */
+export function holdPending(db, id, error) {
+    db.update(scheduledSends)
+        .set({ lastError: error })
+        .where(and(eq(scheduledSends.id, id), eq(scheduledSends.status, 'pending')))
+        .run();
+}
+/** Record a retryable failure: bump attempts, keep the row pending. */
+export function recordAttempt(db, id, error) {
+    const row = db.select().from(scheduledSends).where(eq(scheduledSends.id, id)).get();
+    if (!row)
+        return;
+    db.update(scheduledSends)
+        .set({ attempts: row.attempts + 1, lastError: error })
+        .where(eq(scheduledSends.id, id))
+        .run();
+}
+/** Only pending schedules can be canceled; returns false otherwise. */
+export function cancelScheduledSend(db, id) {
+    const result = db
+        .update(scheduledSends)
+        .set({ status: 'canceled' })
+        .where(and(eq(scheduledSends.id, id), eq(scheduledSends.status, 'pending')))
+        .run();
+    return result.changes > 0;
+}
+export function countPending(db) {
+    const rows = listActive(db);
+    if (!rows.length)
+        return { pending: 0 };
+    return { pending: rows.length, nextSendAt: Math.min(...rows.map((r) => r.sendAt)) };
+}
+//# sourceMappingURL=scheduledSends.js.map

package/dist/storage/scheduledSends.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduledSends.js","sourceRoot":"","sources":["../../src/storage/scheduledSends.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAmB,MAAM,SAAS,CAAC;AAwB1D,SAAS,KAAK,CAAC,CAAM;IACnB,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAA6B,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,EAAc,EACd,KAAsG;IAEtG,MAAM,EAAE,GAAG,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,EAAE;aAChB,MAAM,EAAE;aACR,IAAI,CAAC,cAAc,CAAC;aACpB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EAC7C,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACzC,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,CACrC,CACF;aACA,GAAG,EAAE,CAAC;QACT,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,UAAU,CAClB,iBAAiB,EACjB,SAAS,KAAK,CAAC,OAAO,oCAAoC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,iCAAiC,CACnI,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG;YACV,EAAE;YACF,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS;YACT,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,IAAI;YACf,aAAa,EAAE,IAAI;YACnB,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;YACxC,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,IAAI;SACjB,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAc,EAAE,EAAU;IACzD,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACpF,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,EAAc,EAAE,SAAkB;IACnE,MAAM,IAAI,GAAG,SAAS;QACpB,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE;QACvF,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,GAAG,EAAE,CAAC;IAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACnC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;YAAE,OAAO,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,OAAO,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAc;IACxC,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAc;IACvC,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,cAAc,CAAC;SACpB,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;SACrF,GAAG,EAAE;SACL,GAAG,CAAC,KAAK,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,EAAc,EACd,SAAiB,EACjB,OAAe;IAEf,MAAM,GAAG,GAAG,EAAE;SACX,MAAM,EAAE;SACR,IAAI,CAAC,cAAc,CAAC;SACpB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,EACvC,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,EACnC,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,CACrC,CACF;SACA,GAAG,EAAE,CAAC;IACT,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,EAAc,EAAE,EAAU,EAAE,MAAwC;IAC3F,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC;SACtB,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SACjG,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;SAChC,GAAG,EAAE,CAAC;AACX,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAChC,EAAc,EACd,EAAU,EACV,GAAW,EACX,OAAe;IAEf,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,EAAE;SACd,MAAM,CAAC,cAAc,CAAC;SACtB,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,GAAG,OAAO,EAAE,CAAC;SACxE,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,EACzB,EAAE,CACA,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,EACpC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAC/E,CACF,CACF;SACA,GAAG,EAAE,CAAC;IACT,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,EAAE,GAAG,EAAE,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAE,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,EAAc,EACd,EAAU,EACV,KAAa,EACb,MAAwC;IAExC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC;SACtB,GAAG,CAAC;QACH,MAAM,EAAE,MAAM;QACd,aAAa,EAAE,MAAM,CAAC,EAAE;QACxB,YAAY,EAAE,MAAM,CAAC,QAAQ;QAC7B,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,IAAI;KACjB,CAAC;SACD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;SAC3E,GAAG,EAAE,CAAC;AACX,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAc,EAAE,EAAU,EAAE,KAAa,EAAE,KAAa;IAChF,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC;SACtB,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;SAC/E,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;SAC3E,GAAG,EAAE,CAAC;AACX,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAc,EAAE,EAAU,EAAE,KAAa,EAAE,KAAa;IACjF,MAAM,GAAG,GAAG,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,KAAK,KAAK;QAAE,OAAO;IAC7C,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC;SACtB,GAAG,CAAC;QACH,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC;QAC1B,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,IAAI;KACjB,CAAC;SACD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;SAC3E,GAAG,EAAE,CAAC;AACX,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAc,EAAE,GAAW;IACvD,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,cAAc,CAAC;SACpB,KAAK,CACJ,EAAE,CACA,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,EACpC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAC/E,CACF;SACA,GAAG,EAAE;SACL,GAAG,CAAC,KAAK,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAc,EAAE,EAAU,EAAE,KAAa;IAClE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC/G,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,WAAW,CAAC,EAAc,EAAE,EAAU,EAAE,KAAa;IACnE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC;SACtB,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SACzB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;SAC3E,GAAG,EAAE,CAAC;AACX,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,EAAc,EAAE,EAAU,EAAE,KAAa;IACrE,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACpF,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC;SACtB,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SACrD,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;SAChC,GAAG,EAAE,CAAC;AACX,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,mBAAmB,CAAC,EAAc,EAAE,EAAU;IAC5D,MAAM,MAAM,GAAG,EAAE;SACd,MAAM,CAAC,cAAc,CAAC;SACtB,GAAG,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;SAC3B,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;SAC3E,GAAG,EAAE,CAAC;IACT,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAc;IACzC,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACxC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;AACtF,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const VERSION: string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,OAAO,QAAmB,CAAC"}

package/dist/version.js

@@ -0,0 +1,7 @@
+import { readFileSync } from 'node:fs';
+const manifest = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8'));
+if (typeof manifest.version !== 'string' || manifest.version.length === 0) {
+    throw new Error('The fluxmail package manifest must define a version.');
+}
+export const VERSION = manifest.version;
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAMvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAC/C,CAAC;AAErB,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;IAC1E,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC"}

package/package.json

@@ -1,25 +1,48 @@
 {
   "name": "fluxmail",
-  "version": "0.0.1",
-  "description": "Fluxmail CLI",
+  "version": "0.1.0",
+  "description": "Fluxmail MCP server: unified email tools over Gmail (Outlook and IMAP planned)",
   "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
   "bin": {
-    "fluxmail": "bin/fluxmail.js"
+    "fluxmail": "./dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
   },
   "files": [
-    "bin",
-    "src"
+    "dist"
   ],
+  "publishConfig": {
+    "access": "public"
+  },
   "engines": {
-    "node": ">=18"
+    "node": ">=20"
   },
-  "scripts": {
-    "start": "node bin/fluxmail.js"
+  "dependencies": {
+    "@hono/node-server": "^1.14.3",
+    "@modelcontextprotocol/sdk": "^1.13.0",
+    "better-sqlite3": "^11.10.0",
+    "commander": "^13.1.0",
+    "drizzle-orm": "^0.45.2",
+    "google-auth-library": "10.5.0",
+    "hono": "^4.7.11",
+    "zod": "^3.25.67",
+    "@fluxmail/core": "0.1.0",
+    "@fluxmail/provider-gmail": "0.1.0"
   },
-  "keywords": [
-    "cli",
-    "fluxmail",
-    "email"
-  ],
-  "license": "MIT"
-}
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^22.15.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "dev": "tsc -p tsconfig.json --watch"
+  }
+}

package/README.md

@@ -1,29 +0,0 @@
-# fluxmail
-
-CLI stub for `fluxmail`.
-
-## Install
-
-```bash
-npm install -g fluxmail
-```
-
-## Usage
-
-```bash
-fluxmail help
-fluxmail version
-```
-
-## Local development
-
-```bash
-node bin/fluxmail.js help
-npm link   # exposes the `fluxmail` command locally
-```
-
-## Publishing
-
-```bash
-npm publish --access public
-```

package/bin/fluxmail.js

@@ -1,4 +0,0 @@
-#!/usr/bin/env node
-import { run } from "../src/cli.js";
-
-run(process.argv.slice(2));