fluxmail 0.0.1 → 0.2.0

package/README.md

@@ -1,29 +1,56 @@
-# fluxmail
+# Fluxmail
 
-CLI stub for `fluxmail`.
+Fluxmail is a self-hosted MCP server that connects AI agents to Gmail and IMAP/SMTP mailboxes. It gives MCP clients a consistent set of tools to read, search, draft, send, and organize email.
 
 ## Install
 
+Fluxmail requires Node.js 20 or later.
+
 ```bash
 npm install -g fluxmail
 ```
 
-## Usage
+## Connect Gmail
+
+Create a Google Cloud OAuth client with the Gmail API enabled, then save its credentials:
 
 ```bash
-fluxmail help
-fluxmail version
+fluxmail config set GOOGLE_CLIENT_ID <your-client-id>.apps.googleusercontent.com
+fluxmail config set GOOGLE_CLIENT_SECRET <your-client-secret>
+fluxmail accounts add gmail
 ```
 
-## Local development
+The last command opens Google's consent flow in your browser.
+
+## Connect IMAP
 
 ```bash
-node bin/fluxmail.js help
-npm link   # exposes the `fluxmail` command locally
+fluxmail accounts add imap \
+  --email you@example.com \
+  --imap-host imap.example.com \
+  --smtp-host smtp.example.com
 ```
 
-## Publishing
+Fluxmail prompts for the password and stores it encrypted. Use `--imap-password-env <name>` for Docker or scripted setup.
+
+## Connect an MCP client
+
+Configure your client to launch `fluxmail stdio`. For example, with Claude Code:
 
 ```bash
-npm publish --access public
+claude mcp add fluxmail -- fluxmail stdio
 ```
+
+Or with Codex CLI:
+
+```bash
+codex mcp add fluxmail -- fluxmail stdio
+```
+
+Fluxmail also supports Streamable HTTP for Docker and remote deployments.
+
+See the [setup guide](https://fluxmail.ai/docs/quickstart) for Google OAuth configuration, Docker deployment, supported MCP clients, environment variables, and the complete tool list.
+
+## License
+
+See the [repository](https://github.com/churichard/fluxmail-mcp) for license terms.

package/dist/accounts/googleAuth.d.ts

@@ -0,0 +1,31 @@
+import { OAuth2Client, type Credentials } from 'google-auth-library';
+import type { FluxmailConfig } from '../config.js';
+/**
+ * Full mail scope: the unified API includes permanent delete, which Gmail only
+ * allows with https://mail.google.com/ (gmail.modify cannot call messages.delete).
+ * Users bring their own OAuth app, so they are consenting to their own credentials.
+ */
+export declare const GMAIL_SCOPES: string[];
+export declare function requireGoogleConfig(config: FluxmailConfig): {
+    clientId: string;
+    clientSecret: string;
+};
+export declare function createOAuthClient(config: FluxmailConfig, redirectUri: string): OAuth2Client;
+export declare function buildAuthUrl(client: OAuth2Client, state: string): string;
+/** Verify the OAuth id_token and extract the authenticated Google identity. */
+export declare function identityFromIdToken(client: OAuth2Client, tokens: Credentials): Promise<{
+    email: string;
+    displayName?: string;
+}>;
+export interface OAuthResult {
+    email: string;
+    displayName?: string;
+    tokens: Credentials;
+}
+export declare function exchangeCode(client: OAuth2Client, code: string): Promise<OAuthResult>;
+/**
+ * Loopback OAuth flow for the CLI: listens once on config.oauthPort, prints the
+ * consent URL, and resolves when Google redirects back with a code.
+ */
+export declare function runLoopbackFlow<T = OAuthResult>(config: FluxmailConfig, onAuthUrl: (url: string) => void, onAuthorized?: (result: OAuthResult) => T | Promise<T>): Promise<T>;
+//# sourceMappingURL=googleAuth.d.ts.map

package/dist/accounts/googleAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"googleAuth.d.ts","sourceRoot":"","sources":["../../src/accounts/googleAuth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAErE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,YAAY,UAA6D,CAAC;AAEvF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,cAAc,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAStG;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG,YAAY,CAG3F;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAOxE;AAED,+EAA+E;AAC/E,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAYlD;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,WAAW,CAAC;CACrB;AAoCD,wBAAsB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAU3F;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,CAAC,GAAG,WAAW,EACnD,MAAM,EAAE,cAAc,EACtB,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,EAChC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GACrD,OAAO,CAAC,CAAC,CAAC,CA4DZ"}

package/dist/accounts/googleAuth.js

@@ -0,0 +1,147 @@
+import { createServer } from 'node:http';
+import { randomBytes } from 'node:crypto';
+import { OAuth2Client } from 'google-auth-library';
+import { EmailError } from '@fluxmail/core';
+/**
+ * Full mail scope: the unified API includes permanent delete, which Gmail only
+ * allows with https://mail.google.com/ (gmail.modify cannot call messages.delete).
+ * Users bring their own OAuth app, so they are consenting to their own credentials.
+ */
+export const GMAIL_SCOPES = ['https://mail.google.com/', 'openid', 'email', 'profile'];
+export function requireGoogleConfig(config) {
+    if (!config.google) {
+        throw new EmailError('invalid_request', 'GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET are not set. Create OAuth credentials in Google Cloud ' +
+            '(see README "Google setup") and set both environment variables.');
+    }
+    return config.google;
+}
+export function createOAuthClient(config, redirectUri) {
+    const { clientId, clientSecret } = requireGoogleConfig(config);
+    return new OAuth2Client({ clientId, clientSecret, redirectUri });
+}
+export function buildAuthUrl(client, state) {
+    return client.generateAuthUrl({
+        access_type: 'offline',
+        prompt: 'consent',
+        scope: GMAIL_SCOPES,
+        state,
+    });
+}
+/** Verify the OAuth id_token and extract the authenticated Google identity. */
+export async function identityFromIdToken(client, tokens) {
+    const idToken = tokens.id_token;
+    if (!idToken)
+        throw new EmailError('provider_unavailable', 'Google did not return an id_token');
+    if (!client._clientId)
+        throw new EmailError('provider_unavailable', 'Google OAuth client has no client id');
+    const ticket = await client.verifyIdToken({ idToken, audience: client._clientId });
+    const claims = ticket.getPayload();
+    if (!claims)
+        throw new EmailError('provider_unavailable', 'Google id_token has no claims');
+    if (!claims.email)
+        throw new EmailError('provider_unavailable', 'Google id_token has no email claim');
+    if (!claims.email_verified) {
+        throw new EmailError('provider_unavailable', 'Google did not verify the account email address');
+    }
+    return { email: claims.email, ...(claims.name ? { displayName: claims.name } : {}) };
+}
+function oauthListenerError(err, port) {
+    const code = err.code;
+    if (code !== 'EADDRINUSE')
+        return err;
+    return new Error(`OAuth callback port ${port} is already in use.\n\n` +
+        'If Fluxmail is already running with Docker Compose, connect the account inside the container:\n\n' +
+        '  docker compose exec fluxmail fluxmail accounts add gmail\n\n' +
+        `Otherwise, stop the process using port ${port} and try again.`, { cause: err });
+}
+function escapeHtml(value) {
+    return value.replace(/[&<>"']/g, (char) => {
+        const entities = {
+            '&': '&amp;',
+            '<': '&lt;',
+            '>': '&gt;',
+            '"': '&quot;',
+            "'": '&#39;',
+        };
+        return entities[char];
+    });
+}
+function callbackPage(title, message) {
+    return ('<html><body style="font-family: sans-serif">' +
+        `<h2>${escapeHtml(title)}</h2><p>${escapeHtml(message)}</p>` +
+        '<p>You can close this tab and return to the terminal.</p></body></html>');
+}
+export async function exchangeCode(client, code) {
+    const { tokens } = await client.getToken(code);
+    if (!tokens.refresh_token) {
+        throw new EmailError('invalid_request', "Google did not return a refresh token. Remove Fluxmail from the account's third-party access " +
+            '(myaccount.google.com/permissions) and try again.');
+    }
+    return { ...(await identityFromIdToken(client, tokens)), tokens };
+}
+/**
+ * Loopback OAuth flow for the CLI: listens once on config.oauthPort, prints the
+ * consent URL, and resolves when Google redirects back with a code.
+ */
+export async function runLoopbackFlow(config, onAuthUrl, onAuthorized) {
+    const redirectUri = `http://localhost:${config.oauthPort}/oauth/callback`;
+    const client = createOAuthClient(config, redirectUri);
+    const state = randomBytes(16).toString('hex');
+    return new Promise((resolve, reject) => {
+        const server = createServer(async (req, res) => {
+            // Close the listener and destroy lingering keep-alive sockets (the browser
+            // holds its connection open after loading the page); otherwise the CLI
+            // process never exits.
+            const finish = (settle) => {
+                res.once('close', () => {
+                    server.close();
+                    server.closeAllConnections();
+                    settle();
+                });
+            };
+            try {
+                const url = new URL(req.url ?? '/', redirectUri);
+                if (url.pathname !== '/oauth/callback') {
+                    res.writeHead(404).end('Not found');
+                    return;
+                }
+                if (url.searchParams.get('state') !== state) {
+                    res.writeHead(400).end('State mismatch. Restart the flow.');
+                    return;
+                }
+                const error = url.searchParams.get('error');
+                if (error) {
+                    finish(() => reject(new EmailError('invalid_request', `Google OAuth error: ${error}`)));
+                    res.writeHead(400).end(`Google returned an error: ${error}. You can close this tab.`);
+                    return;
+                }
+                const code = url.searchParams.get('code');
+                if (!code) {
+                    res.writeHead(400).end('Missing code parameter.');
+                    return;
+                }
+                const result = await exchangeCode(client, code);
+                const accepted = onAuthorized ? await onAuthorized(result) : result;
+                finish(() => resolve(accepted));
+                res
+                    .writeHead(200, { 'content-type': 'text/html; charset=utf-8' })
+                    .end(callbackPage(`${result.email} is connected to Fluxmail`, 'The account is ready to use.'));
+            }
+            catch (err) {
+                finish(() => reject(err));
+                const expected = err instanceof EmailError;
+                const message = expected
+                    ? err.message
+                    : 'Fluxmail could not finish connecting this account. Check the terminal for details.';
+                res
+                    .writeHead(expected ? 400 : 500, { 'content-type': 'text/html; charset=utf-8' })
+                    .end(callbackPage('Fluxmail could not connect this account', message));
+            }
+        });
+        server.on('error', (err) => reject(oauthListenerError(err, config.oauthPort)));
+        server.listen(config.oauthPort, config.oauthHost, () => {
+            onAuthUrl(buildAuthUrl(client, state));
+        });
+    });
+}
+//# sourceMappingURL=googleAuth.js.map

package/dist/accounts/googleAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"googleAuth.js","sourceRoot":"","sources":["../../src/accounts/googleAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAoB,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,0BAA0B,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAEvF,MAAM,UAAU,mBAAmB,CAAC,MAAsB;IACxD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,UAAU,CAClB,iBAAiB,EACjB,kGAAkG;YAChG,iEAAiE,CACpE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAsB,EAAE,WAAmB;IAC3E,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/D,OAAO,IAAI,YAAY,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAoB,EAAE,KAAa;IAC9D,OAAO,MAAM,CAAC,eAAe,CAAC;QAC5B,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,YAAY;QACnB,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAoB,EACpB,MAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;IAChC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,mCAAmC,CAAC,CAAC;IAChG,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,sCAAsC,CAAC,CAAC;IAC5G,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,+BAA+B,CAAC,CAAC;IAC3F,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,oCAAoC,CAAC,CAAC;IACtG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC3B,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,iDAAiD,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACvF,CAAC;AAQD,SAAS,kBAAkB,CAAC,GAAU,EAAE,IAAY;IAClD,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;IACjD,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,GAAG,CAAC;IAEtC,OAAO,IAAI,KAAK,CACd,uBAAuB,IAAI,yBAAyB;QAClD,mGAAmG;QACnG,gEAAgE;QAChE,0CAA0C,IAAI,iBAAiB,EACjE,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;QACxC,MAAM,QAAQ,GAA2B;YACvC,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,MAAM;YACX,GAAG,EAAE,MAAM;YACX,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,OAAO;SACb,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAE,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,OAAe;IAClD,OAAO,CACL,8CAA8C;QAC9C,OAAO,UAAU,CAAC,KAAK,CAAC,WAAW,UAAU,CAAC,OAAO,CAAC,MAAM;QAC5D,yEAAyE,CAC1E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAoB,EAAE,IAAY;IACnE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,UAAU,CAClB,iBAAiB,EACjB,+FAA+F;YAC7F,mDAAmD,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAsB,EACtB,SAAgC,EAChC,YAAsD;IAEtD,MAAM,WAAW,GAAG,oBAAoB,MAAM,CAAC,SAAS,iBAAiB,CAAC;IAC1E,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE9C,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC7C,2EAA2E;YAC3E,uEAAuE;YACvE,uBAAuB;YACvB,MAAM,MAAM,GAAG,CAAC,MAAkB,EAAE,EAAE;gBACpC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBACrB,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,mBAAmB,EAAE,CAAC;oBAC7B,MAAM,EAAE,CAAC;gBACX,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,WAAW,CAAC,CAAC;gBACjD,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;oBACvC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBACpC,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC;oBAC5C,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;oBAC5D,OAAO;gBACT,CAAC;gBACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,iBAAiB,EAAE,uBAAuB,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;oBACxF,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,6BAA6B,KAAK,2BAA2B,CAAC,CAAC;oBACtF,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;oBAClD,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAChD,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAY,CAAC;gBAC3E,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAChC,GAAG;qBACA,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC;qBAC9D,GAAG,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,KAAK,2BAA2B,EAAE,8BAA8B,CAAC,CAAC,CAAC;YACnG,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1B,MAAM,QAAQ,GAAG,GAAG,YAAY,UAAU,CAAC;gBAC3C,MAAM,OAAO,GAAG,QAAQ;oBACtB,CAAC,CAAC,GAAG,CAAC,OAAO;oBACb,CAAC,CAAC,oFAAoF,CAAC;gBACzF,GAAG;qBACA,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC;qBAC/E,GAAG,CAAC,YAAY,CAAC,yCAAyC,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE;YACrD,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/accounts/registry.d.ts

@@ -0,0 +1,37 @@
+import { type Credentials } from 'google-auth-library';
+import { type Account, type EmailProvider } from '@fluxmail/core';
+import { type ImapCredentials } from '@fluxmail/provider-imap';
+import type { FluxmailConfig } from '../config.js';
+import { type FluxmailDb } from '../storage/db.js';
+export declare class AccountRegistry {
+    private readonly db;
+    private readonly config;
+    private readonly providers;
+    constructor(db: FluxmailDb, config: FluxmailConfig);
+    private evictProvider;
+    listAccounts(): Account[];
+    getAccount(accountId: string): Account;
+    /** Fail before OAuth when a new account would exceed the current plan. */
+    assertCanAddAccount(): void;
+    /** Resolve an account id, defaulting to the sole account when only one exists. */
+    resolveAccountId(accountId?: string): string;
+    getProvider(accountId: string): EmailProvider;
+    private loadCredentialRow;
+    private loadTokens;
+    private writeCredentials;
+    private saveTokens;
+    private writeTokens;
+    private buildGmailProvider;
+    addGmailAccount(email: string, tokens: Credentials, displayName?: string, memberId?: string): Account;
+    testImapCredentials(email: string, credentials: ImapCredentials, displayName?: string): Promise<Array<{
+        message: string;
+    }>>;
+    addImapAccount(email: string, credentials: ImapCredentials, displayName?: string, memberId?: string, reauthorizeId?: string): Account;
+    loadImapCredentials(accountId: string): ImapCredentials;
+    saveImapCredentials(accountId: string, credentials: ImapCredentials): void;
+    /** Assign a mailbox to a member, or make it shared again (memberId = null). */
+    assignAccountMember(accountId: string, memberId: string | null): Account;
+    removeAccount(accountId: string): void;
+    markStatus(accountId: string, status: Account['status']): void;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/accounts/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/accounts/registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAc,KAAK,OAAO,EAAE,KAAK,aAAa,EAAiB,MAAM,gBAAgB,CAAC;AAE7F,OAAO,EAAmC,KAAK,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAA6C,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAO9F,qBAAa,eAAe;IAIxB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJzB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgF;gBAGvF,EAAE,EAAE,UAAU,EACd,MAAM,EAAE,cAAc;IAGzC,OAAO,CAAC,aAAa;IAMrB,YAAY,IAAI,OAAO,EAAE;IAgBzB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAMtC,0EAA0E;IAC1E,mBAAmB,IAAI,IAAI;IAc3B,kFAAkF;IAClF,gBAAgB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM;IAoB5C,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa;IAyB7C,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,WAAW;IAanB,OAAO,CAAC,kBAAkB;IAyB1B,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO;IAuC/F,mBAAmB,CACvB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,eAAe,EAC5B,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAgBtC,cAAc,CACZ,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,eAAe,EAC5B,WAAW,CAAC,EAAE,MAAM,EACpB,QAAQ,CAAC,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO;IAwCV,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,eAAe;IAQvD,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,GAAG,IAAI;IAM1E,+EAA+E;IAC/E,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO;IAOxE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAMtC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI;CAG/D"}

package/dist/accounts/registry.js

@@ -0,0 +1,278 @@
+import { randomBytes } from 'node:crypto';
+import { eq } from 'drizzle-orm';
+import { OAuth2Client } from 'google-auth-library';
+import { EmailError } from '@fluxmail/core';
+import { GmailProvider, GMAIL_CAPABILITIES } from '@fluxmail/provider-gmail';
+import { ImapProvider, IMAP_CAPABILITIES } from '@fluxmail/provider-imap';
+import { accountCredentials, accounts, oauthTokens } from '../storage/db.js';
+import { decryptString, encryptString } from '../storage/crypto.js';
+import { assertAccountLimit, getEntitlements } from '../licensing/entitlements.js';
+import { getMember } from '../storage/members.js';
+import { requireGoogleConfig } from './googleAuth.js';
+import { SqliteImapStateStore } from '../storage/imapState.js';
+export class AccountRegistry {
+    db;
+    config;
+    providers = new Map();
+    constructor(db, config) {
+        this.db = db;
+        this.config = config;
+    }
+    evictProvider(accountId) {
+        const cached = this.providers.get(accountId)?.provider;
+        this.providers.delete(accountId);
+        void cached?.close?.();
+    }
+    listAccounts() {
+        return this.db
+            .select()
+            .from(accounts)
+            .all()
+            .map((row) => ({
+            id: row.id,
+            provider: row.provider,
+            email: row.email,
+            ...(row.displayName ? { displayName: row.displayName } : {}),
+            status: row.status,
+            capabilities: row.provider === 'imap' ? IMAP_CAPABILITIES : GMAIL_CAPABILITIES,
+            ...(row.memberId ? { memberId: row.memberId } : {}),
+        }));
+    }
+    getAccount(accountId) {
+        const account = this.listAccounts().find((a) => a.id === accountId);
+        if (!account)
+            throw new EmailError('not_found', `No account with id "${accountId}"`);
+        return account;
+    }
+    /** Fail before OAuth when a new account would exceed the current plan. */
+    assertCanAddAccount() {
+        const existing = this.listAccounts();
+        try {
+            assertAccountLimit(existing.length, getEntitlements(this.db));
+        }
+        catch (err) {
+            if (!(err instanceof EmailError))
+                throw err;
+            const reconnect = existing.length === 1
+                ? `To reconnect ${existing[0].email}, rerun this command with ` + `"--reauthorize ${existing[0].id}".`
+                : 'To reconnect an existing account, rerun this command with "--reauthorize <account-id>".';
+            throw new EmailError(err.code, `${err.message} ${reconnect}`);
+        }
+    }
+    /** Resolve an account id, defaulting to the sole account when only one exists. */
+    resolveAccountId(accountId) {
+        if (accountId)
+            return this.getAccount(accountId).id;
+        const all = this.listAccounts();
+        if (all.length === 0) {
+            throw new EmailError('invalid_request', 'No email accounts are connected yet. Run "fluxmail accounts add gmail" or "fluxmail accounts add imap".');
+        }
+        if (all.length > 1) {
+            throw new EmailError('invalid_request', `Multiple accounts are connected; specify accountId. Available: ${all
+                .map((a) => `${a.id} (${a.email})`)
+                .join(', ')}`);
+        }
+        return all[0].id;
+    }
+    getProvider(accountId) {
+        const account = this.getAccount(accountId);
+        const credentialRow = this.loadCredentialRow(accountId);
+        const cached = this.providers.get(accountId);
+        if (cached?.encryptedCredentials === credentialRow.encryptedCredentials)
+            return cached.provider;
+        const stored = JSON.parse(decryptString(this.config.encryptionKey, credentialRow.encryptedCredentials));
+        const provider = account.provider === 'gmail'
+            ? this.buildGmailProvider(accountId, account.email, stored, account.displayName)
+            : account.provider === 'imap'
+                ? new ImapProvider({
+                    accountId,
+                    email: account.email,
+                    ...(account.displayName ? { displayName: account.displayName } : {}),
+                    credentials: stored,
+                    store: new SqliteImapStateStore(this.db, accountId),
+                })
+                : undefined;
+        if (!provider)
+            throw new EmailError('unsupported_capability', `Provider "${account.provider}" is not supported yet`);
+        this.providers.set(accountId, { provider, encryptedCredentials: credentialRow.encryptedCredentials });
+        return provider;
+    }
+    loadCredentialRow(accountId) {
+        const row = this.db.select().from(accountCredentials).where(eq(accountCredentials.accountId, accountId)).get();
+        if (!row)
+            throw new EmailError('auth_expired', `No stored credentials for account ${accountId}`);
+        return row;
+    }
+    loadTokens(accountId) {
+        const row = this.loadCredentialRow(accountId);
+        return JSON.parse(decryptString(this.config.encryptionKey, row.encryptedCredentials));
+    }
+    writeCredentials(db, accountId, credentials) {
+        const encrypted = encryptString(this.config.encryptionKey, JSON.stringify(credentials));
+        db.insert(accountCredentials)
+            .values({ accountId, encryptedCredentials: encrypted, updatedAt: Date.now() })
+            .onConflictDoUpdate({
+            target: accountCredentials.accountId,
+            set: { encryptedCredentials: encrypted, updatedAt: Date.now() },
+        })
+            .run();
+        return encrypted;
+    }
+    saveTokens(accountId, tokens) {
+        return this.writeTokens(this.db, accountId, tokens);
+    }
+    writeTokens(db, accountId, tokens) {
+        const encrypted = this.writeCredentials(db, accountId, tokens);
+        const updatedAt = Date.now();
+        db.insert(oauthTokens)
+            .values({ accountId, encryptedTokens: encrypted, updatedAt })
+            .onConflictDoUpdate({
+            target: oauthTokens.accountId,
+            set: { encryptedTokens: encrypted, updatedAt },
+        })
+            .run();
+        return encrypted;
+    }
+    buildGmailProvider(accountId, email, stored, displayName) {
+        const { clientId, clientSecret } = requireGoogleConfig(this.config);
+        const auth = new OAuth2Client({ clientId, clientSecret });
+        auth.setCredentials(stored);
+        const provider = new GmailProvider({
+            accountId,
+            email,
+            ...(displayName ? { displayName } : {}),
+            auth,
+        });
+        // google-auth-library refreshes access tokens transparently; persist them so
+        // restarts don't need a refresh round-trip (and rotated refresh tokens survive).
+        auth.on('tokens', (fresh) => {
+            const encryptedCredentials = this.saveTokens(accountId, { ...this.loadTokens(accountId), ...fresh });
+            const cached = this.providers.get(accountId);
+            if (cached?.provider === provider)
+                cached.encryptedCredentials = encryptedCredentials;
+        });
+        return provider;
+    }
+    addGmailAccount(email, tokens, displayName, memberId) {
+        // Validate up front for a clean not_found instead of a FK constraint error.
+        if (memberId)
+            getMember(this.db, memberId);
+        const existing = this.db.select().from(accounts).all();
+        const duplicate = existing.find((a) => a.provider === 'gmail' && a.email === email);
+        if (duplicate) {
+            // Re-authenticating an existing account: refresh tokens, clear error
+            // state. Ownership is untouched; reassign with assignAccountMember.
+            this.db.transaction((tx) => {
+                this.writeTokens(tx, duplicate.id, tokens);
+                tx.update(accounts)
+                    .set({ status: 'active', ...(displayName ? { displayName } : {}) })
+                    .where(eq(accounts.id, duplicate.id))
+                    .run();
+            });
+            this.evictProvider(duplicate.id);
+            return this.getAccount(duplicate.id);
+        }
+        const id = `acct_${randomBytes(6).toString('hex')}`;
+        this.db.transaction((tx) => {
+            const accountCount = tx.select().from(accounts).all().length;
+            assertAccountLimit(accountCount, getEntitlements(tx));
+            tx.insert(accounts)
+                .values({
+                id,
+                provider: 'gmail',
+                email,
+                displayName: displayName ?? null,
+                status: 'active',
+                createdAt: Date.now(),
+                memberId: memberId ?? null,
+            })
+                .run();
+            this.writeTokens(tx, id, tokens);
+        });
+        return this.getAccount(id);
+    }
+    async testImapCredentials(email, credentials, displayName) {
+        const provider = new ImapProvider({
+            accountId: 'imap_setup',
+            email,
+            ...(displayName ? { displayName } : {}),
+            credentials,
+            store: new SqliteImapStateStore(this.db, 'imap_setup'),
+        });
+        try {
+            await provider.testConnection();
+            return await provider.getFolderWarnings();
+        }
+        finally {
+            await provider.close();
+        }
+    }
+    addImapAccount(email, credentials, displayName, memberId, reauthorizeId) {
+        if (memberId)
+            getMember(this.db, memberId);
+        const existingRows = this.db.select().from(accounts).all();
+        const duplicate = reauthorizeId
+            ? existingRows.find((row) => row.id === reauthorizeId)
+            : existingRows.find((row) => row.provider === 'imap' && row.email === email);
+        if (duplicate) {
+            if (duplicate.provider !== 'imap' || duplicate.email !== email) {
+                throw new EmailError('invalid_request', `Account ${duplicate.id} does not match IMAP mailbox ${email}.`);
+            }
+            this.db.transaction((tx) => {
+                this.writeCredentials(tx, duplicate.id, credentials);
+                tx.update(accounts)
+                    .set({ status: 'active', ...(displayName ? { displayName } : {}) })
+                    .where(eq(accounts.id, duplicate.id))
+                    .run();
+            });
+            this.evictProvider(duplicate.id);
+            return this.getAccount(duplicate.id);
+        }
+        const id = `acct_${randomBytes(6).toString('hex')}`;
+        this.db.transaction((tx) => {
+            assertAccountLimit(tx.select().from(accounts).all().length, getEntitlements(tx));
+            tx.insert(accounts)
+                .values({
+                id,
+                provider: 'imap',
+                email,
+                displayName: displayName ?? null,
+                status: 'active',
+                createdAt: Date.now(),
+                memberId: memberId ?? null,
+            })
+                .run();
+            this.writeCredentials(tx, id, credentials);
+        });
+        return this.getAccount(id);
+    }
+    loadImapCredentials(accountId) {
+        const account = this.getAccount(accountId);
+        if (account.provider !== 'imap')
+            throw new EmailError('invalid_request', `Account ${accountId} is not an IMAP account.`);
+        const row = this.loadCredentialRow(accountId);
+        return JSON.parse(decryptString(this.config.encryptionKey, row.encryptedCredentials));
+    }
+    saveImapCredentials(accountId, credentials) {
+        this.loadImapCredentials(accountId);
+        this.writeCredentials(this.db, accountId, credentials);
+        this.evictProvider(accountId);
+    }
+    /** Assign a mailbox to a member, or make it shared again (memberId = null). */
+    assignAccountMember(accountId, memberId) {
+        this.getAccount(accountId);
+        if (memberId)
+            getMember(this.db, memberId);
+        this.db.update(accounts).set({ memberId }).where(eq(accounts.id, accountId)).run();
+        return this.getAccount(accountId);
+    }
+    removeAccount(accountId) {
+        this.getAccount(accountId);
+        this.db.delete(accounts).where(eq(accounts.id, accountId)).run();
+        this.evictProvider(accountId);
+    }
+    markStatus(accountId, status) {
+        this.db.update(accounts).set({ status }).where(eq(accounts.id, accountId)).run();
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/accounts/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/accounts/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAoB,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAmD,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAwB,MAAM,yBAAyB,CAAC;AAEhG,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,WAAW,EAAmB,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,MAAM,OAAO,eAAe;IAIP;IACA;IAJF,SAAS,GAAG,IAAI,GAAG,EAAqE,CAAC;IAE1G,YACmB,EAAc,EACd,MAAsB;QADtB,OAAE,GAAF,EAAE,CAAY;QACd,WAAM,GAAN,MAAM,CAAgB;IACtC,CAAC;IAEI,aAAa,CAAC,SAAiB;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,QAA2D,CAAC;QAC1G,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,KAAK,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;IACzB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,EAAE;aACX,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACb,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,QAAQ,EAAE,GAAG,CAAC,QAAoB;YAClC,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,EAAE,GAAG,CAAC,MAA2B;YACvC,YAAY,EAAE,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB;YAC9E,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC,CAAC,CAAC;IACR,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,uBAAuB,SAAS,GAAG,CAAC,CAAC;QACrF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,0EAA0E;IAC1E,mBAAmB;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC5C,MAAM,SAAS,GACb,QAAQ,CAAC,MAAM,KAAK,CAAC;gBACnB,CAAC,CAAC,gBAAgB,QAAQ,CAAC,CAAC,CAAE,CAAC,KAAK,4BAA4B,GAAG,kBAAkB,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE,IAAI;gBACxG,CAAC,CAAC,yFAAyF,CAAC;YAChG,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,gBAAgB,CAAC,SAAkB;QACjC,IAAI,SAAS;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,UAAU,CAClB,iBAAiB,EACjB,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,UAAU,CAClB,iBAAiB,EACjB,kEAAkE,GAAG;iBAClE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC;iBAClC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;IACpB,CAAC;IAED,WAAW,CAAC,SAAiB;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,oBAAoB,KAAK,aAAa,CAAC,oBAAoB;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;QAEhG,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,oBAAoB,CAAC,CAAY,CAAC;QACnH,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC1B,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,MAAqB,EAAE,OAAO,CAAC,WAAW,CAAC;YAC/F,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM;gBAC3B,CAAC,CAAC,IAAI,YAAY,CAAC;oBACf,SAAS;oBACT,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpE,WAAW,EAAE,MAAyB;oBACtC,KAAK,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC;iBACpD,CAAC;gBACJ,CAAC,CAAC,SAAS,CAAC;QAClB,IAAI,CAAC,QAAQ;YACX,MAAM,IAAI,UAAU,CAAC,wBAAwB,EAAE,aAAa,OAAO,CAAC,QAAQ,wBAAwB,CAAC,CAAC;QACxG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,oBAAoB,EAAE,aAAa,CAAC,oBAAoB,EAAE,CAAC,CAAC;QACtG,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,iBAAiB,CAAC,SAAiB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC/G,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,qCAAqC,SAAS,EAAE,CAAC,CAAC;QACjG,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,UAAU,CAAC,SAAiB;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,oBAAoB,CAAC,CAAgB,CAAC;IACvG,CAAC;IAEO,gBAAgB,CAAC,EAA8B,EAAE,SAAiB,EAAE,WAAoB;QAC9F,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QACxF,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC;aAC1B,MAAM,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;aAC7E,kBAAkB,CAAC;YAClB,MAAM,EAAE,kBAAkB,CAAC,SAAS;YACpC,GAAG,EAAE,EAAE,oBAAoB,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;SAChE,CAAC;aACD,GAAG,EAAE,CAAC;QACT,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,UAAU,CAAC,SAAiB,EAAE,MAAmB;QACvD,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAEO,WAAW,CAAC,EAA8B,EAAE,SAAiB,EAAE,MAAmB;QACxF,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC;aACnB,MAAM,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;aAC5D,kBAAkB,CAAC;YAClB,MAAM,EAAE,WAAW,CAAC,SAAS;YAC7B,GAAG,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE;SAC/C,CAAC;aACD,GAAG,EAAE,CAAC;QACT,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,kBAAkB,CACxB,SAAiB,EACjB,KAAa,EACb,MAAmB,EACnB,WAAoB;QAEpB,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,YAAY,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC;YACjC,SAAS;YACT,KAAK;YACL,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,IAAI;SACL,CAAC,CAAC;QACH,6EAA6E;QAC7E,iFAAiF;QACjF,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,oBAAoB,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YACrG,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,MAAM,EAAE,QAAQ,KAAK,QAAQ;gBAAE,MAAM,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;QACxF,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,eAAe,CAAC,KAAa,EAAE,MAAmB,EAAE,WAAoB,EAAE,QAAiB;QACzF,4EAA4E;QAC5E,IAAI,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QACpF,IAAI,SAAS,EAAE,CAAC;YACd,qEAAqE;YACrE,oEAAoE;YACpE,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;gBACzB,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC3C,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;qBAChB,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;qBAClE,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;qBACpC,GAAG,EAAE,CAAC;YACX,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,EAAE,GAAG,QAAQ,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;YACzB,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;YAC7D,kBAAkB,CAAC,YAAY,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;YACtD,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;iBAChB,MAAM,CAAC;gBACN,EAAE;gBACF,QAAQ,EAAE,OAAO;gBACjB,KAAK;gBACL,WAAW,EAAE,WAAW,IAAI,IAAI;gBAChC,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,QAAQ,EAAE,QAAQ,IAAI,IAAI;aAC3B,CAAC;iBACD,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,KAAa,EACb,WAA4B,EAC5B,WAAoB;QAEpB,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC;YAChC,SAAS,EAAE,YAAY;YACvB,KAAK;YACL,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,WAAW;YACX,KAAK,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC;SACvD,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;YAChC,OAAO,MAAM,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED,cAAc,CACZ,KAAa,EACb,WAA4B,EAC5B,WAAoB,EACpB,QAAiB,EACjB,aAAsB;QAEtB,IAAI,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,aAAa;YAC7B,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,aAAa,CAAC;YACtD,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QAC/E,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,IAAI,SAAS,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC/D,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,WAAW,SAAS,CAAC,EAAE,gCAAgC,KAAK,GAAG,CAAC,CAAC;YAC3G,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;gBACzB,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;gBACrD,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;qBAChB,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;qBAClE,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;qBACpC,GAAG,EAAE,CAAC;YACX,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,EAAE,GAAG,QAAQ,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;YACzB,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;YACjF,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;iBAChB,MAAM,CAAC;gBACN,EAAE;gBACF,QAAQ,EAAE,MAAM;gBAChB,KAAK;gBACL,WAAW,EAAE,WAAW,IAAI,IAAI;gBAChC,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,QAAQ,EAAE,QAAQ,IAAI,IAAI;aAC3B,CAAC;iBACD,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,mBAAmB,CAAC,SAAiB;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM;YAC7B,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,WAAW,SAAS,0BAA0B,CAAC,CAAC;QAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,oBAAoB,CAAC,CAAoB,CAAC;IAC3G,CAAC;IAED,mBAAmB,CAAC,SAAiB,EAAE,WAA4B;QACjE,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAED,+EAA+E;IAC/E,mBAAmB,CAAC,SAAiB,EAAE,QAAuB;QAC5D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,aAAa,CAAC,SAAiB;QAC7B,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACjE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,MAAyB;QACrD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACnF,CAAC;CACF"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}