fluxmail 0.2.1 → 0.4.0

package/dist/http/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/http/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAoB,CAAC,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,YAAY,EAA2B,MAAM,gBAAgB,CAAC;AAGnF,OAAO,EAAE,4BAA4B,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAE9G,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE/E,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,GAG3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,WAAW,EACX,YAAY,EACZ,YAAY,GAEb,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAOlD,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,UAAU,GAAG,KAAK;SACrB,WAAW,EAAE;SACb,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;IACrB,OAAO,UAAU,KAAK,KAAK,IAAI,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,WAAW,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAgB,EAAE,UAAoC;IAC5F,IAAI,UAAU,EAAE,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,UAAU,EAAE,aAAa,KAAK,SAAS;QAAE,OAAO,iBAAiB,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAEhG,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ,IAAI,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAgB,EAAE,KAAK,GAAG,gBAAgB;IACtF,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC5D,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,KAAK;YAAE,OAAO,IAAI,CAAC;IACjE,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;YAC7B,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;YACnC,IAAI,QAAQ,GAAG,KAAK,EAAE,CAAC;gBACrB,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACrC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AASD,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACtD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5C,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC7C,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC/C,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;AAC7C,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;AAC3D,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AAE5E,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC9B,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;CAC5B,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzC,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,2CAA2C,CAAC;KAC7F,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;AAC1C,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;KAC/F,MAAM,EAAE,CAAC;AACZ,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzD,IAAI,EAAE,oBAAoB;IAC1B,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,eAAe,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CAClD,CAAC;KACD,MAAM,EAAE;KACR,OAAO,CAAC;IACP,OAAO,EAAE;QACP,KAAK,EAAE,iBAAiB;QACxB,IAAI,EAAE;YACJ,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,cAAc;SACzB;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,cAAc;SACzB;KACF;CACF,CAAC,CAAC;AACL,MAAM,aAAa,GAAG;IACpB,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC5B,oBAAoB,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC;AACF,MAAM,gBAAgB,GAAG,CAAC;KACvB,kBAAkB,CAAC,UAAU,EAAE;IAC9B,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACrE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACvE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,aAAa,EAAE,GAAG,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClG,CAAC;KACD,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAEzE,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,gBAAgB,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC;AAC9E,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AACzD,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,IAAI,EAAE,WAAW;IACjB,MAAM,EAAE,UAAU;IAClB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5D,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;IAC/D,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IAClG,kBAAkB,EAAE,CAAC;SAClB,KAAK,CAAC,gBAAgB,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC;SACxD,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,IAAI,KAAK,CAAC,kBAAkB,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAC5F,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC1D,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC,CAAC;KACD,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;AAC1G,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;IAC/D,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IAClG,kBAAkB,EAAE,CAAC;SAClB,KAAK,CAAC,gBAAgB,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC;SACxD,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7D,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,iCAAiC,CAAC;KACnF,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,IAAI,KAAK,CAAC,kBAAkB,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAC5F,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;KACD,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;AAC5D,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEvF,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CAC5G,CAAC;KACD,MAAM,EAAE;KACR,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAC7B,MAAM,YAAY,GAAG,CAAC;KACnB,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,yBAAyB,EAAE,QAAQ,CAAC,CAAC;IACnE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACvC,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACxD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE;KACR,OAAO,CAAC,sBAAsB,CAAC,CAAC;AACnC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC7E,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEzG,MAAM,MAAM,GAAG;IACb,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE;IACjG,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE;IACzG,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,8BAA8B,EAAE;IAC9G,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE;IACpG,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAClG,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE;IACxG,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE;IACxG,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,gBAAgB,EAAE;IAChG,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,+BAA+B,EAAE;CACvG,CAAC;AACX,MAAM,cAAc,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AAE1D,MAAM,YAAa,SAAQ,KAAK;IAEnB;IAEA;IAHX,YACW,IAAY,EACrB,OAAe,EACN,MAAc;QAEvB,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,SAAI,GAAJ,IAAI,CAAQ;QAEZ,WAAM,GAAN,MAAM,CAAQ;IAGzB,CAAC;CACF;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,YAAY,YAAY;QAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtH,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACjG,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,oDAAoD,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;AACnH,CAAC;AAED,SAAS,IAAI,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IACvC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE;YACP,cAAc,EAAE,iCAAiC;YACjD,eAAe,EAAE,UAAU;YAC3B,wBAAwB,EAAE,SAAS;YACnC,iBAAiB,EAAE,aAAa;SACjC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,IAAgB,EAAE,UAA2B;IACjE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,+BAA+B,UAAU,GAAG,EAAE,GAAG,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACpD,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,2CAA2C,EAAE,GAAG,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAkB;IAClC,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,wCAAwC,EAAE,GAAG,CAAC,CAAC;IACzG,OAAO,IAAI,CAAC,QAAQ,CAAC;AACvB,CAAC;AAED,SAAS,cAAc,CACrB,IAAkB,EAClB,KAAgH;IAEhH,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;IACxC,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,UAAU,CAClB,iBAAiB,EACjB,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,oBAAoB;QAC5B,OAAO,EAAE,oBAAoB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,EAAE,CAAC;IAC5F,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IAClG,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;IACrD,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9E,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QAC7C,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,uDAAuD,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,IAAI,KAAK,UAAU,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,4DAA4D,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/G,CAAC;AAED,SAAS,WAAW,CAAC,KAIpB;IACC,OAAO,KAAK,CAAC,kBAAkB;QAC7B,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,kBAAkB,CAAC;QAClD,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,iBAAkB,EAAE,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,UAAU,CAAC,IAAkB,EAAE,IAAiC;IACvE,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,eAAe,CAAC,GAA2C;IAClE,OAAO;QACL,GAAG,GAAG;QACN,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QAChD,UAAU,EAAE,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;KACpF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,GAAG,CAAqB,EAAwB;IAC7D,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAqB,EAAE,IAAkB;IAC3E,MAAM,gBAAgB,GAAG,WAAW,CAAC;QACnC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,gCAAgC;QAC7C,OAAO,EAAE,oCAAoC;QAC7C,WAAW,EAAE,sFAAsF;QACnG,GAAG,cAAc;QACjB,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE;QACpG,SAAS,EAAE;YACT,GAAG,EAAE;gBACH,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE;gBAC9D,WAAW,EAAE,8BAA8B;aAC5C;YACD,GAAG,MAAM;SACV;KACF,CAAC,CAAC;IACH,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAClC,GAAG,CAAC,KAAK,IAAI,EAAE;QACb,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,oBAAoB;gBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,CAAC;YACvE,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBACxE,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACzC,MAAM,IAAI,UAAU,CAClB,iBAAiB,EACjB,WAAW,QAAQ,CAAC,EAAE,SAAS,QAAQ,CAAC,QAAQ,SAAS,KAAK,CAAC,QAAQ,GAAG,CAC3E,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,KAAK,OAAO;gBACxB,CAAC,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;gBAC5D,CAAC,CAAC,8BAA8B,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACnE,OAAO,IAAI,CACT;gBACE,IAAI,EAAE;oBACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,aAAa,EAAE,QAAQ,CAAC,aAAa;oBACrC,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;iBACtD;aACF,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClH,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC7G,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,WAAW,QAAQ,CAAC,EAAE,gCAAgC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;QAChH,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,MAAM,WAAW,GAAoB;YACnC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ,EAAE,QAAQ,IAAI,IAAI;YACtD,eAAe,EAAE,EAAE,GAAG,QAAQ,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC,eAAe,EAAE;SAC5E,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,mBAAmB,CACvD,KAAK,CAAC,KAAK,EACX,WAAW,EACX,KAAK,CAAC,WAAW,EACjB,2BAA2B,CAC5B,CAAC;QACF,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,cAAc,CAC7C,KAAK,CAAC,KAAK,EACX,WAAW,EACX,KAAK,CAAC,WAAW,EACjB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,oBAAoB,EAC3B,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAC9G,CAAC;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/D,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,aAAa,GAAG,WAAW,CAAC;QAChC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,kCAAkC;QAC/C,OAAO,EAAE,yBAAyB;QAClC,WAAW,EAAE,iFAAiF;QAC9F,GAAG,cAAc;QACjB,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE;QACtG,SAAS,EAAE;YACT,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE;YAC9G,GAAG,MAAM;SACV;KACF,CAAC,CAAC;IACH,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAC/B,GAAG,CAAC,KAAK,IAAI,EAAE;QACb,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,mBAAmB,CACvD,KAAK,CAAC,KAAK,EACX;YACE,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;YAChC,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC,EACD,KAAK,CAAC,WAAW,EACjB,2BAA2B,CAC5B,CAAC;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,WAAW,GAAG,WAAW,CAAC;QAC9B,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,iDAAiD;QACvD,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE,qBAAqB;QAC9B,WAAW,EAAE,2EAA2E;QACxF,GAAG,cAAc;QACjB,OAAO,EAAE;YACP,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACpD,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE;SACzF;QACD,SAAS,EAAE;YACT,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE;YAChH,GAAG,MAAM;SACV;KACF,CAAC,CAAC;IACH,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAC7B,GAAG,CAAC,KAAK,IAAI,EAAE;QACb,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAClD,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,aAAa,GAAG,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;QACrD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC;gBAAE,SAAS;YAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;iBAC1C,IAAI,KAAK,KAAK,SAAS;gBAAE,aAAa,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC5D,CAAC;QACD,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,uBAAuB,CAC3D,OAAO,CAAC,KAAK,EACb,QAAQ,EACR,OAAO,CAAC,WAAW,EACnB,2BAA2B,CAC5B,CAAC;QACF,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAC3B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,gBAAgB,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ,CAC5F,CAAC;QACF,IAAI,OAAO;YAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACtE,QAAQ,CAAC,IAAI,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,aAAa,GAAG,WAAW,CAAC;QAChC,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,2BAA2B;QACxC,OAAO,EAAE,eAAe;QACxB,WAAW,EAAE,qFAAqF;QAClG,GAAG,cAAc;QACjB,SAAS,EAAE;YACT,GAAG,EAAE;gBACH,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE;gBACtF,WAAW,EAAE,UAAU;aACxB;YACD,GAAG,MAAM;SACV;KACF,CAAC,CAAC;IACH,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAC/B,GAAG,CAAC,GAAG,EAAE;QACP,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,cAAc,GAAG,WAAW,CAAC;QACjC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,kFAAkF;QAC/F,GAAG,cAAc;QACjB,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE;QACtG,SAAS,EAAE;YACT,GAAG,EAAE;gBACH,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,EAAE;gBACvE,WAAW,EAAE,gDAAgD;aAC9D;YACD,GAAG,MAAM;SACV;KACF,CAAC,CAAC;IACH,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAChC,GAAG,CAAC,GAAG,EAAE;QACP,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,YAAY,CAC1B,IAAI,CAAC,EAAE,EACP,KAAK,CAAC,IAAI,EACV,MAAM,CAAC,EAAE,EACT,WAAW,CAAC,KAAK,CAAC,EAClB,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CACjC,CAAC;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IACrF,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,aAAa,GAAG,WAAW,CAAC;QAChC,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,gCAAgC;QACtC,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,iFAAiF;QAC9F,GAAG,cAAc;QACjB,OAAO,EAAE;YACP,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YAChD,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE;SACzF;QACD,SAAS,EAAE;YACT,GAAG,EAAE;gBACH,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,EAAE;gBAC7E,WAAW,EAAE,iBAAiB;aAC/B;YACD,GAAG,MAAM;SACV;KACF,CAAC,CAAC;IACH,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAC/B,GAAG,CAAC,GAAG,EAAE;QACP,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAClD,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,uBAAuB,KAAK,IAAI,CAAC,CAAC;QAEnF,IAAI,eAA6C,CAAC;QAClD,IAAI,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YACxD,eAAe,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,KAAK,CAAC,wBAAwB,EAAE,CAAC;YAC1C,IAAI,QAAQ,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,gEAAgE,CAAC,CAAC;YAC5G,CAAC;YACD,eAAe,GAAG,0BAA0B,CAAC,QAAQ,CAAC,iBAAiB,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC3G,CAAC;QACD,IACE,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC;YAC/B,eAAe;YACf,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACxD,mBAAmB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,EACzC,CAAC;YACD,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,6DAA6D,EAAE,GAAG,CAAC,CAAC;QAC9G,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE;YAC3C,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1F,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,OAAQ,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,cAAc,GAAG,WAAW,CAAC;QACjC,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,gCAAgC;QACtC,WAAW,EAAE,4BAA4B;QACzC,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,6CAA6C;QAC1D,GAAG,cAAc;QACjB,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE;QAC7D,SAAS,EAAE;YACT,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE;YACvG,GAAG,MAAM;SACV;KACF,CAAC,CAAC;IACH,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAChC,GAAG,CAAC,GAAG,EAAE;QACP,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAClD,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,6DAA6D,EAAE,GAAG,CAAC,CAAC;QAC9G,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,uBAAuB,KAAK,IAAI,CAAC,CAAC;QACvG,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,CAAC;QAC/B,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,0BAA0B;QACvC,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,oGAAoG;QACjH,GAAG,cAAc;QACjB,SAAS,EAAE;YACT,GAAG,EAAE;gBACH,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE;gBAC9D,WAAW,EAAE,2CAA2C;aACzD;YACD,GAAG,MAAM;SACV;KACF,CAAC,CAAC;IACH,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9B,GAAG,CAAC,GAAG,EAAE;QACP,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC;YACV,IAAI,EAAE;gBACJ,UAAU;gBACV,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC9F,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;gBAC/F,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;gBACnE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;aAC/B;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,aAAa,GAAG,WAAW,CAAC;QAChC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,gCAAgC;QACtC,WAAW,EAAE,+BAA+B;QAC5C,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,uEAAuE;QACpF,GAAG,cAAc;QACjB,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,EAAE,EAAE;QAC3G,SAAS,EAAE;YACT,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;YAC5G,GAAG,EAAE;gBACH,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE;gBAC9D,WAAW,EAAE,iCAAiC;aAC/C;YACD,GAAG,MAAM;SACV;KACF,CAAC,CAAC;IACH,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAC/B,GAAG,CAAC,KAAK,IAAI,EAAE;QACb,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC,CAAC;QACjD,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,oCAAoC,EAAE,GAAG,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,yBAAyB,EAAE,CAAC;YAC1C,MAAM,IAAI,YAAY,CACpB,0BAA0B,EAC1B,gEAAgE,EAChE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE;YAC5C,UAAU;YACV,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;YACvC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;SAC7B,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACnC,IAAI,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACnC,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,0CAA0C,EAAE,GAAG,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC7F,MAAM,IAAI,YAAY,CAAC,WAAW,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/http/app.d.ts

@@ -5,12 +5,14 @@ import type { FluxmailDb } from '../storage/db.js';
 import type { AccountRegistry } from '../accounts/registry.js';
 import type { EmailService } from '../service/emailService.js';
 import type { Telemetry } from '../telemetry.js';
+import type { LicenseController } from '../licensing/refresher.js';
 export interface AppDeps {
     config: FluxmailConfig;
     db: FluxmailDb;
     registry: AccountRegistry;
     service: EmailService;
     telemetry?: Telemetry;
+    licenseController?: LicenseController;
 }
 export declare function createApp(deps: AppDeps): Hono<{
     Bindings: HttpBindings;

package/dist/http/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/http/app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAe,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAW5E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAIjD,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,cAAc,CAAC;IACvB,EAAE,EAAE,UAAU,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAAE,QAAQ,EAAE,YAAY,CAAA;CAAE,CAAC,CAkNzE"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/http/app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAe,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAgB5E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAIjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAMnE,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,cAAc,CAAC;IACvB,EAAE,EAAE,UAAU,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAAE,QAAQ,EAAE,YAAY,CAAA;CAAE,CAAC,CAiiBzE"}

package/dist/http/app.js

@@ -5,73 +5,232 @@ import { RESPONSE_ALREADY_SENT } from '@hono/node-server/utils/response';
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import { authenticateApiKey } from '../storage/apiKeys.js';
 import { buildMcpServer } from '../mcp/buildServer.js';
+import { FULL_PERMISSION_POLICY } from '../permissions.js';
 import { buildAuthUrl, createOAuthClient, exchangeCode } from '../accounts/googleAuth.js';
-import { claimGmailConnectionGrant, inspectGmailConnectionGrant, } from '../storage/gmailConnectionGrants.js';
+import { claimGmailConnectionGrant, claimOutlookConnectionGrant, inspectGmailConnectionGrant, inspectOutlookConnectionGrant, } from '../storage/gmailConnectionGrants.js';
+import { buildMicrosoftAuthUrl, exchangeMicrosoftCode, requireMicrosoftConfig } from '../accounts/microsoftAuth.js';
+import { prepareHostedGmailConnection, prepareHostedOutlookConnection } from '../accounts/gmailConnection.js';
 import { VERSION } from '../version.js';
+import { findMember } from '../storage/members.js';
+import { createRestApi } from './rest.js';
+import { hasCapability } from '../permissions.js';
+import { administrationUsesHttps as administrationRequestUsesHttps, requestBodyExceedsLimit } from './admin.js';
+import { recordAdminAuditEvent } from '../storage/adminAudit.js';
 const OAUTH_STATE_TTL_MS = 10 * 60 * 1000;
 export function createApp(deps) {
-    const { config, db, registry, service, telemetry } = deps;
+    const { config, db, registry, service, telemetry, licenseController } = deps;
     const app = new Hono();
-    const oauthStates = new Map();
+    const googleOauthStates = new Map();
+    const microsoftOauthStates = new Map();
+    const escapeHtml = (value) => value.replace(/[&<>"']/g, (char) => {
+        const entities = {
+            '&': '&amp;',
+            '<': '&lt;',
+            '>': '&gt;',
+            '"': '&quot;',
+            "'": '&#39;',
+        };
+        return entities[char];
+    });
     const connectionLinkPage = (title, message) => `<html><body style="font-family: sans-serif"><h2>${title}</h2><p>${message}</p></body></html>`;
-    const connectionLinkError = (status) => {
+    const connectionLinkError = (status, providerName, providerCommand) => {
         if (status === 'expired') {
             return {
-                html: connectionLinkPage('This Gmail connection link has expired', 'Run the Fluxmail command again to get a new link.'),
+                html: connectionLinkPage(`This ${providerName} connection link has expired`, 'Run the Fluxmail command again to get a new link.'),
                 status: 410,
             };
         }
         if (status === 'used') {
             return {
-                html: connectionLinkPage('This Gmail connection link has already been used', 'Run the Fluxmail command again if you still need to connect Gmail.'),
+                html: connectionLinkPage(`This ${providerName} connection link has already been used`, `Run "fluxmail accounts add ${providerCommand}" again if you still need to connect ${providerName}.`),
                 status: 410,
             };
         }
         return {
-            html: connectionLinkPage('This Gmail connection link is invalid', 'Run the Fluxmail command again to get a new link.'),
+            html: connectionLinkPage(`This ${providerName} connection link is invalid`, 'Run the Fluxmail command again to get a new link.'),
             status: 400,
         };
     };
-    const connectionConfirmationPage = () => '<html><body style="font-family: sans-serif"><h2>Connect Gmail to Fluxmail</h2>' +
-        '<p>Continue to Google to choose the Gmail account you want to connect.</p>' +
+    const connectionConfirmationPage = (providerName, identityProvider) => `<html><body style="font-family: sans-serif"><h2>Connect ${providerName} to Fluxmail</h2>` +
+        `<p>Continue to ${identityProvider} to choose the account you want to connect.</p>` +
         '<form method="post">' +
-        '<button type="submit">Continue with Google</button></form></body></html>';
+        `<button type="submit">Continue with ${identityProvider}</button></form></body></html>`;
     const beginGoogleOAuth = (intent) => {
         const now = Date.now();
-        for (const [state, pending] of oauthStates) {
+        for (const [state, pending] of googleOauthStates) {
             if (pending.expiresAt < now)
-                oauthStates.delete(state);
+                googleOauthStates.delete(state);
         }
         const state = randomBytes(16).toString('hex');
-        oauthStates.set(state, { expiresAt: now + OAUTH_STATE_TTL_MS, ...(intent ? { intent } : {}) });
+        googleOauthStates.set(state, { expiresAt: now + OAUTH_STATE_TTL_MS, ...(intent ? { intent } : {}) });
         const client = createOAuthClient(config, `${config.publicUrl}/auth/google/callback`);
         return buildAuthUrl(client, state);
     };
-    // Connecting a mailbox is instance administration: only unscoped admin keys
-    // qualify; member-scoped keys are confined to mailbox access over MCP.
-    const adminAuthorized = (c, allowQueryKey = false) => {
-        if (config.authMode === 'none')
-            return true;
-        const bearer = c.req.header('authorization')?.replace(/^Bearer\s+/i, '');
-        const key = bearer ?? (allowQueryKey ? c.req.query('key') : undefined);
-        if (!key)
-            return false;
-        return authenticateApiKey(db, key)?.memberId === null;
+    const beginMicrosoftOAuth = (intent) => {
+        const microsoft = requireMicrosoftConfig(config);
+        if (!microsoft.clientSecret) {
+            throw new EmailError('invalid_request', 'MICROSOFT_CLIENT_SECRET is required for hosted Outlook connections.');
+        }
+        const now = Date.now();
+        for (const [state, pending] of microsoftOauthStates) {
+            if (pending.expiresAt < now)
+                microsoftOauthStates.delete(state);
+        }
+        const state = randomBytes(16).toString('hex');
+        const verifier = randomBytes(32).toString('base64url');
+        microsoftOauthStates.set(state, {
+            expiresAt: now + OAUTH_STATE_TTL_MS,
+            verifier,
+            ...(intent ? { intent } : {}),
+        });
+        return buildMicrosoftAuthUrl(config, `${config.publicUrl}/auth/microsoft/callback`, state, verifier);
+    };
+    // Connecting a mailbox requires an admin member or a migrated management key.
+    const adminAuth = (c) => {
+        const authorization = c.req.header('authorization');
+        const bearer = authorization?.match(/^Bearer\s+([^\s]+)$/i)?.[1];
+        return bearer ? authenticateApiKey(db, bearer) : null;
     };
-    // Authenticate an MCP request and resolve the mailbox scope its key authorizes.
-    // A member-scoped key is confined to shared and owned mailboxes; an admin key
-    // (or authMode 'none') gets unscoped access.
-    const scopeForRequest = (c) => {
-        if (config.authMode === 'none')
-            return { memberId: null };
+    const canAdministerAccounts = (auth) => hasCapability(auth.permissions, 'admin.accounts') && (auth.memberId === null || auth.role === 'admin');
+    const administrationUsesHttps = (c) => administrationRequestUsesHttps(c.req.raw, {
+        remoteAddress: c.env?.incoming?.socket.remoteAddress,
+        encrypted: Boolean(c.env?.incoming?.socket?.encrypted),
+    });
+    // Authenticate an MCP request. The service applies member grants and the key's
+    // optional mailbox allowlist before any provider call.
+    const authForRequest = (c) => {
+        if (config.authMode === 'none') {
+            return { keyId: 'auth:none', memberId: null, role: null, permissions: FULL_PERMISSION_POLICY, accountIds: null };
+        }
         const bearer = c.req.header('authorization')?.replace(/^Bearer\s+/i, '');
         return bearer ? authenticateApiKey(db, bearer) : null;
     };
+    app.use('/auth/connections', async (c, next) => {
+        c.header('cache-control', 'no-store');
+        c.header('x-content-type-options', 'nosniff');
+        c.header('referrer-policy', 'no-referrer');
+        return next();
+    });
+    app.post('/auth/connections', async (c) => {
+        const auth = adminAuth(c);
+        if (!auth)
+            return c.json({ error: 'An admin API key is required.' }, 401);
+        const audit = (outcome, errorCode) => {
+            try {
+                recordAdminAuditEvent(db, {
+                    operation: 'post /auth/connections',
+                    outcome,
+                    actorKeyId: auth.keyId,
+                    actorMemberId: auth.memberId,
+                    ...(errorCode ? { errorCode } : {}),
+                });
+            }
+            catch {
+                // Auditing must not replace the API response.
+            }
+        };
+        if (!canAdministerAccounts(auth)) {
+            audit('error', 'permission_denied');
+            return c.json({ error: 'The API key cannot manage accounts.' }, 403);
+        }
+        if (!administrationUsesHttps(c)) {
+            audit('error', 'https_required');
+            return c.json({ error: 'Administrative routes require HTTPS outside loopback.' }, 400);
+        }
+        const mediaType = c.req.header('content-type')?.split(';', 1)[0]?.trim().toLowerCase();
+        if (mediaType !== 'application/json') {
+            audit('error', 'unsupported_media_type');
+            return c.json({ error: 'Content-Type must be application/json.' }, 415);
+        }
+        if (await requestBodyExceedsLimit(c.req.raw)) {
+            audit('error', 'request_too_large');
+            return c.json({ error: 'Request body is limited to 64 KiB.' }, 413);
+        }
+        let input;
+        try {
+            input = await c.req.json();
+        }
+        catch {
+            audit('error', 'invalid_request');
+            return c.json({ error: 'Request body must be valid JSON.' }, 400);
+        }
+        try {
+            if (input.provider !== 'gmail' && input.provider !== 'outlook') {
+                throw new EmailError('invalid_request', 'provider must be "gmail" or "outlook".');
+            }
+            const reauthorizeAccountId = typeof input.reauthorizeAccountId === 'string' ? input.reauthorizeAccountId.trim() : undefined;
+            const ownerRef = typeof input.owner === 'string' ? input.owner.trim() : undefined;
+            if ((reauthorizeAccountId?.length ?? 0) > 200 || (ownerRef?.length ?? 0) > 200) {
+                throw new EmailError('invalid_request', 'Account and member references are limited to 200 characters.');
+            }
+            if (input.shareWith !== undefined && !Array.isArray(input.shareWith)) {
+                throw new EmailError('invalid_request', 'shareWith must be an array of member ids or email addresses.');
+            }
+            if ((input.shareWith?.length ?? 0) > 100) {
+                throw new EmailError('invalid_request', 'shareWith is limited to 100 members.');
+            }
+            const shareWith = (input.shareWith ?? []).map((value) => {
+                if (typeof value !== 'string' || !value.trim() || value.trim().length > 200) {
+                    throw new EmailError('invalid_request', 'shareWith must contain member ids or email addresses.');
+                }
+                return value.trim();
+            });
+            if (reauthorizeAccountId && (ownerRef || input.sharingMode !== undefined || shareWith.length)) {
+                throw new EmailError('invalid_request', 'owner and sharing settings cannot be combined with reauthorizeAccountId.');
+            }
+            let intent;
+            if (reauthorizeAccountId) {
+                const existing = registry.getAccount(reauthorizeAccountId);
+                if (existing.provider !== input.provider) {
+                    throw new EmailError('invalid_request', `Account ${existing.id} uses ${existing.provider}, not ${input.provider}.`);
+                }
+                intent = { reauthorizeAccountId: existing.id };
+            }
+            else {
+                if (!ownerRef)
+                    throw new EmailError('invalid_request', 'owner is required for a new mailbox.');
+                registry.assertCanAddAccount();
+                const owner = findMember(db, ownerRef);
+                const sharingMode = input.sharingMode ?? (shareWith.length ? 'selected' : 'private');
+                if (sharingMode !== 'private' && sharingMode !== 'selected' && sharingMode !== 'all') {
+                    throw new EmailError('invalid_request', 'sharingMode must be "private", "selected", or "all".');
+                }
+                if (sharingMode === 'selected' && shareWith.length === 0) {
+                    throw new EmailError('invalid_request', 'shareWith is required when sharingMode is "selected".');
+                }
+                if (sharingMode !== 'selected' && shareWith.length > 0) {
+                    throw new EmailError('invalid_request', 'shareWith can only be used with sharingMode "selected".');
+                }
+                intent = {
+                    memberId: owner.id,
+                    sharingMode,
+                    sharedMemberIds: shareWith.map((ref) => findMember(db, ref).id),
+                };
+            }
+            const prepared = input.provider === 'gmail'
+                ? prepareHostedGmailConnection(db, config, intent)
+                : prepareHostedOutlookConnection(db, config, intent);
+            audit('success');
+            return c.json({
+                provider: input.provider,
+                connectionUrl: prepared.connectionUrl,
+                expiresAt: new Date(prepared.expiresAt).toISOString(),
+            }, 201);
+        }
+        catch (err) {
+            if (isEmailError(err)) {
+                audit('error', err.code);
+                return c.json({ error: err.message }, 400);
+            }
+            audit('error', 'internal');
+            return c.json({ error: 'Could not create the connection link.' }, 500);
+        }
+    });
     app.get('/healthz', (c) => c.json({ ok: true, name: 'fluxmail', version: VERSION }));
     // Stateless Streamable HTTP: a fresh server+transport pair per request.
     app.post('/mcp', async (c) => {
-        const scope = scopeForRequest(c);
-        if (!scope) {
+        const auth = authForRequest(c);
+        if (!auth) {
             return c.json({
                 jsonrpc: '2.0',
                 error: { code: -32001, message: 'Unauthorized: pass an API key as a Bearer token' },
@@ -85,7 +244,15 @@ export function createApp(deps) {
         catch {
             return c.json({ jsonrpc: '2.0', error: { code: -32700, message: 'Parse error' }, id: null }, 400);
         }
-        const server = buildMcpServer(service.withScope(scope), { telemetry, transport: 'http' });
+        const scope = config.authMode === 'none'
+            ? { memberId: null }
+            : { memberId: auth.memberId, role: auth.role, accountIds: auth.accountIds };
+        const server = buildMcpServer(service.withScope(scope), {
+            permissions: auth.permissions,
+            maxAttachmentBytes: config.maxAttachmentBytes,
+            telemetry,
+            transport: 'http',
+        });
         const transport = new StreamableHTTPServerTransport({
             sessionIdGenerator: undefined,
             enableJsonResponse: true,
@@ -107,10 +274,28 @@ export function createApp(deps) {
     app.delete('/mcp', methodNotAllowed);
     // Server-hosted OAuth flow (for remote deployments; the CLI uses a loopback flow instead).
     app.get('/auth/google', (c) => {
-        if (!adminAuthorized(c, true)) {
-            return c.text('Unauthorized: append ?key=<an admin API key>', 401);
+        c.header('cache-control', 'no-store');
+        c.header('x-content-type-options', 'nosniff');
+        c.header('referrer-policy', 'no-referrer');
+        if (!administrationUsesHttps(c))
+            return c.text('Administrative routes require HTTPS outside loopback.', 400);
+        const auth = adminAuth(c);
+        if (!auth) {
+            return c.text('Unauthorized: pass an admin API key as a Bearer token.', 401);
+        }
+        if (!canAdministerAccounts(auth))
+            return c.text('Forbidden.', 403);
+        const ownerRef = c.req.query('owner');
+        if (!ownerRef) {
+            return c.text('Missing owner. Start the hosted connection with "fluxmail accounts add gmail --owner <member>".', 400);
+        }
+        try {
+            const owner = findMember(db, ownerRef);
+            return c.redirect(beginGoogleOAuth({ memberId: owner.id, sharingMode: 'private' }));
+        }
+        catch (err) {
+            return c.text(err instanceof Error ? err.message : String(err), 400);
         }
-        return c.redirect(beginGoogleOAuth());
     });
     // Hono falls back to GET handlers for HEAD requests. Handle HEAD explicitly
     // so link previews and security scanners cannot consume a one-time grant.
@@ -122,36 +307,38 @@ export function createApp(deps) {
     app.get('/auth/google/connect', (c) => {
         const token = c.req.query('token');
         if (!token) {
-            const error = connectionLinkError('invalid');
+            const error = connectionLinkError('invalid', 'Gmail', 'gmail');
             return c.html(error.html, error.status);
         }
         const status = inspectGmailConnectionGrant(db, token);
         if (status !== 'available') {
-            const error = connectionLinkError(status);
+            const error = connectionLinkError(status, 'Gmail', 'gmail');
             return c.html(error.html, error.status);
         }
-        return c.html(connectionConfirmationPage());
+        return c.html(connectionConfirmationPage('Gmail', 'Google'));
     });
     app.post('/auth/google/connect', (c) => {
         const token = c.req.query('token');
         if (!token) {
-            const error = connectionLinkError('invalid');
+            const error = connectionLinkError('invalid', 'Gmail', 'gmail');
             return c.html(error.html, error.status);
         }
         const claim = claimGmailConnectionGrant(db, token);
         if (claim.status !== 'claimed') {
-            const error = connectionLinkError(claim.status);
+            const error = connectionLinkError(claim.status, 'Gmail', 'gmail');
             return c.html(error.html, error.status);
         }
         return c.redirect(beginGoogleOAuth(claim.grant));
     });
     app.get('/auth/google/callback', async (c) => {
+        c.header('cache-control', 'no-store');
+        c.header('referrer-policy', 'no-referrer');
         const state = c.req.query('state');
-        const pending = state ? oauthStates.get(state) : undefined;
+        const pending = state ? googleOauthStates.get(state) : undefined;
         if (!state || !pending || pending.expiresAt < Date.now()) {
             return c.text('Invalid or expired OAuth state. Start the Gmail connection flow again.', 400);
         }
-        oauthStates.delete(state);
+        googleOauthStates.delete(state);
         const error = c.req.query('error');
         if (error)
             return c.text(`Google returned an error: ${error}`, 400);
@@ -171,9 +358,12 @@ export function createApp(deps) {
                 throw new EmailError('invalid_request', `Google authorized ${email}, but account ${reauthorizeAccount.id} belongs to ${reauthorizeAccount.email}. ` +
                     'Try again and choose the matching Google account.');
             }
-            const account = registry.addGmailAccount(email, tokens, displayName, pending.intent?.memberId);
-            return c.html(`<html><body style="font-family: sans-serif"><h2>${email} is connected to Fluxmail</h2>` +
-                `<p>Account id: <code>${account.id}</code>. You can close this tab.</p></body></html>`);
+            const account = registry.addGmailAccount(email, tokens, displayName, pending.intent?.memberId, {
+                sharingMode: pending.intent?.sharingMode ?? 'private',
+                sharedMemberIds: pending.intent?.sharedMemberIds ?? [],
+            });
+            return c.html(`<html><body style="font-family: sans-serif"><h2>${escapeHtml(email)} is connected to Fluxmail</h2>` +
+                `<p>Account id: <code>${escapeHtml(account.id)}</code>. You can close this tab.</p></body></html>`);
         }
         catch (err) {
             // Surface why connecting failed (expired code, missing refresh token,
@@ -183,6 +373,103 @@ export function createApp(deps) {
             return c.text('Could not connect the account; check the server logs.', 500);
         }
     });
+    app.get('/auth/microsoft', (c) => {
+        c.header('cache-control', 'no-store');
+        c.header('x-content-type-options', 'nosniff');
+        c.header('referrer-policy', 'no-referrer');
+        if (!administrationUsesHttps(c))
+            return c.text('Administrative routes require HTTPS outside loopback.', 400);
+        const auth = adminAuth(c);
+        if (!auth) {
+            return c.text('Unauthorized: pass an admin API key as a Bearer token.', 401);
+        }
+        if (!canAdministerAccounts(auth))
+            return c.text('Forbidden.', 403);
+        const ownerRef = c.req.query('owner');
+        if (!ownerRef) {
+            return c.text('Missing owner. Start the hosted connection with "fluxmail accounts add outlook --owner <member>".', 400);
+        }
+        try {
+            const owner = findMember(db, ownerRef);
+            return c.redirect(beginMicrosoftOAuth({ memberId: owner.id, sharingMode: 'private' }));
+        }
+        catch (err) {
+            return c.text(err instanceof Error ? err.message : String(err), 400);
+        }
+    });
+    app.use('/auth/microsoft/connect', async (c, next) => {
+        c.header('cache-control', 'no-store');
+        c.header('referrer-policy', 'no-referrer');
+        return c.req.method === 'HEAD' ? c.body(null, 204) : next();
+    });
+    app.get('/auth/microsoft/connect', (c) => {
+        const token = c.req.query('token');
+        if (!token) {
+            const error = connectionLinkError('invalid', 'Outlook', 'outlook');
+            return c.html(error.html, error.status);
+        }
+        const status = inspectOutlookConnectionGrant(db, token);
+        if (status !== 'available') {
+            const error = connectionLinkError(status, 'Outlook', 'outlook');
+            return c.html(error.html, error.status);
+        }
+        return c.html(connectionConfirmationPage('Outlook', 'Microsoft'));
+    });
+    app.post('/auth/microsoft/connect', (c) => {
+        const token = c.req.query('token');
+        if (!token) {
+            const error = connectionLinkError('invalid', 'Outlook', 'outlook');
+            return c.html(error.html, error.status);
+        }
+        const claim = claimOutlookConnectionGrant(db, token);
+        if (claim.status !== 'claimed') {
+            const error = connectionLinkError(claim.status, 'Outlook', 'outlook');
+            return c.html(error.html, error.status);
+        }
+        return c.redirect(beginMicrosoftOAuth(claim.grant));
+    });
+    app.get('/auth/microsoft/callback', async (c) => {
+        c.header('cache-control', 'no-store');
+        c.header('referrer-policy', 'no-referrer');
+        const state = c.req.query('state');
+        const pending = state ? microsoftOauthStates.get(state) : undefined;
+        if (!state || !pending || pending.expiresAt < Date.now()) {
+            return c.text('Invalid or expired OAuth state. Start the Outlook connection flow again.', 400);
+        }
+        microsoftOauthStates.delete(state);
+        const error = c.req.query('error');
+        if (error) {
+            return c.text(`Microsoft returned an error: ${c.req.query('error_description') ?? error}`, 400);
+        }
+        const code = c.req.query('code');
+        if (!code)
+            return c.text('Missing code parameter.', 400);
+        try {
+            const { email, displayName, credentials } = await exchangeMicrosoftCode(config, code, `${config.publicUrl}/auth/microsoft/callback`, pending.verifier, 'confidential');
+            const reauthorizeAccount = pending.intent?.reauthorizeAccountId
+                ? registry.getAccount(pending.intent.reauthorizeAccountId)
+                : undefined;
+            if (reauthorizeAccount?.provider !== undefined && reauthorizeAccount.provider !== 'outlook') {
+                throw new EmailError('invalid_request', `Account ${reauthorizeAccount.id} does not use Outlook.`);
+            }
+            if (reauthorizeAccount && reauthorizeAccount.email.toLowerCase() !== email.toLowerCase()) {
+                throw new EmailError('invalid_request', `Microsoft authorized ${email}, but account ${reauthorizeAccount.id} belongs to ${reauthorizeAccount.email}. ` +
+                    'Try again and choose the matching Microsoft account.');
+            }
+            const account = registry.addOutlookAccount(email, credentials, displayName, pending.intent?.memberId, pending.intent?.reauthorizeAccountId, {
+                sharingMode: pending.intent?.sharingMode ?? 'private',
+                sharedMemberIds: pending.intent?.sharedMemberIds ?? [],
+            });
+            return c.html(`<html><body style="font-family: sans-serif"><h2>${escapeHtml(email)} is connected to Fluxmail</h2>` +
+                `<p>Account id: <code>${escapeHtml(account.id)}</code>. You can close this tab.</p></body></html>`);
+        }
+        catch (err) {
+            if (isEmailError(err))
+                return c.text(`Could not connect the account: ${err.message}`, 400);
+            return c.text('Could not connect the account; check the server logs.', 500);
+        }
+    });
+    app.route('/', createRestApi({ config, db, service, telemetry, registry, licenseController }));
     return app;
 }
 //# sourceMappingURL=app.js.map