fluxmail 0.8.1 → 0.9.0

package/dist/http/rest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rest.d.ts","sourceRoot":"","sources":["../../src/http/rest.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,WAAW,EAAK,MAAM,mBAAmB,CAAC;AAGhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAWtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAa,MAAM,4BAA4B,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAA2C,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAIrF,OAAO,EAA2C,KAAK,SAAS,EAAE,KAAK,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAMpH,OAAO,EAA+B,KAAK,MAAM,EAAE,MAAM,eAAe,CAAC;AAEzE,UAAU,aAAa;IACrB,QAAQ,EAAE,SAAS,CAAC;IACpB,WAAW,EAAE,YAAY,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED,KAAK,OAAO,GAAG;IAAE,QAAQ,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,aAAa,CAAA;CAAE,CAAC;AAGpE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,cAAc,CAAC;IACvB,aAAa,EAAE,oBAAoB,CAAC;IACpC,EAAE,EAAE,UAAU,CAAC;IACf,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAkPD,eAAO,MAAM,qBAAqB;;;;;;;CAOjC,CAAC;AAiiBF,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,CA6tBrE"}
+{"version":3,"file":"rest.d.ts","sourceRoot":"","sources":["../../src/http/rest.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,WAAW,EAAK,MAAM,mBAAmB,CAAC;AAGhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAYtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAa,MAAM,4BAA4B,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAA2C,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAIrF,OAAO,EAA2C,KAAK,SAAS,EAAE,KAAK,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAMpH,OAAO,EAA+B,KAAK,MAAM,EAAE,MAAM,eAAe,CAAC;AAEzE,UAAU,aAAa;IACrB,QAAQ,EAAE,SAAS,CAAC;IACpB,WAAW,EAAE,YAAY,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED,KAAK,OAAO,GAAG;IAAE,QAAQ,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,aAAa,CAAA;CAAE,CAAC;AAGpE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,cAAc,CAAC;IACvB,aAAa,EAAE,oBAAoB,CAAC;IACpC,EAAE,EAAE,UAAU,CAAC;IACf,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAkSD,eAAO,MAAM,qBAAqB;;;;;;;CAOjC,CAAC;AAgkBF,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,CA43BrE"}

package/dist/http/rest.js

@@ -18,7 +18,7 @@ const messageId = id.openapi({ example: 'msg_123' });
 const threadId = id.openapi({ example: 'thread_123' });
 const draftId = id.openapi({ example: 'draft_123' });
 const scheduleId = id.openapi({ example: 'schedule_123' });
-const attachmentId = id.openapi({ example: 'attachment_123' });
+const attachmentId = id.describe('Opaque attachment ID returned by message metadata').openapi({ example: 'part:1.2' });
 const isoDate = z
     .string()
     .regex(/^\d{4}-\d{2}-\d{2}$/, 'Expected an ISO date in YYYY-MM-DD format')
@@ -91,6 +91,24 @@ const LabelSchema = z
 })
     .strict()
     .openapi('Label');
+const SendAsIdentitySchema = z
+    .object({
+    email: z.string().email(),
+    name: z.string().optional(),
+    replyTo: z.string().email().optional(),
+    isPrimary: z.boolean(),
+    source: z.enum(['provider', 'configured']),
+})
+    .strict()
+    .openapi('SendAsIdentity');
+const ConfiguredSendAsSchema = z
+    .object({ email: z.string().email(), name: z.string().optional() })
+    .strict()
+    .openapi('ConfiguredSendAs');
+const ReplaceSendAsRequestSchema = z
+    .object({ identities: z.array(ConfiguredSendAsSchema) })
+    .strict()
+    .openapi('ReplaceSendAsRequest');
 const MessageSchema = z
     .object({
     id: z.string(),
@@ -214,23 +232,49 @@ const ErrorSchema = z
 function dataEnvelope(schema) {
     return z.object({ data: schema, warnings: z.array(z.string()).optional() }).strict();
 }
+const SearchPageMetaSchema = z
+    .object({
+    nextPageToken: z.string().optional(),
+    exhausted: z.boolean(),
+    diagnostics: z.array(SearchDiagnosticSchema).optional(),
+    incomplete: z.literal(true).optional(),
+    incompleteReason: z.enum(['scan_limit', 'provider_limit', 'time_limit']).optional(),
+    inspectedCandidates: z.number().int().nonnegative().optional(),
+})
+    .strict()
+    .openapi('SearchPageMeta');
 function pagedEnvelope(schema) {
     return z
         .object({
         data: z.array(schema),
-        meta: z
-            .object({
-            nextPageToken: z.string().optional(),
-            diagnostics: z.array(SearchDiagnosticSchema).optional(),
-            incomplete: z.literal(true).optional(),
-            incompleteReason: z.enum(['scan_limit', 'provider_limit']).optional(),
-            inspectedCandidates: z.number().int().nonnegative().optional(),
-        })
-            .strict(),
+        meta: SearchPageMetaSchema,
         warnings: z.array(z.string()).optional(),
     })
         .strict();
 }
+const BatchSearchResponseSchema = z
+    .object({
+    data: z.array(z.union([
+        z.object({ accountId: z.string(), data: z.array(MessageSchema), meta: SearchPageMetaSchema }).strict(),
+        z
+            .object({
+            accountId: z.string(),
+            error: z
+                .object({
+                code: z.string(),
+                message: z.string(),
+                data: z.record(z.unknown()).optional(),
+                exhausted: z.literal(false),
+            })
+                .strict(),
+        })
+            .strict(),
+    ])),
+    meta: z.object({ exhausted: z.boolean() }).strict(),
+    warnings: z.array(z.string()).optional(),
+})
+    .strict()
+    .openapi('BatchSearchResponse');
 const errorResponses = {
     400: { content: { 'application/json': { schema: ErrorSchema } }, description: 'Invalid request' },
     401: { content: { 'application/json': { schema: ErrorSchema } }, description: 'Authentication required' },
@@ -262,6 +306,7 @@ const idempotencyHeaders = z.object({
         .describe('A unique key for one intended delivery. Reuse it when retrying the same request.'),
 });
 const draftShape = {
+    from: z.string().email().optional(),
     to: z.array(EmailAddressSchema).optional(),
     cc: z.array(EmailAddressSchema).optional(),
     bcc: z.array(EmailAddressSchema).optional(),
@@ -285,6 +330,7 @@ const SendDraftSchema = z.object({ draftId, sendAt: z.string().datetime({ offset
 const SendRequestSchema = z.union([SendDraftSchema, SendContentSchema]).openapi('SendRequest');
 const ForwardRequestSchema = z
     .object({
+    from: z.string().email().optional(),
     to: z.array(EmailAddressSchema).min(1),
     cc: z.array(EmailAddressSchema).optional(),
     comment: z.string().optional(),
@@ -360,8 +406,32 @@ const messageQuerySchema = z
         .regex(/^(?:[1-9]|[1-9][0-9]|100)$/)
         .optional(),
     pageToken: z.string().min(1).optional(),
+    includeSnippet: z.enum(['true', 'false']).optional(),
 })
     .strict();
+const portableFolder = z.enum(['inbox', 'sent', 'drafts', 'archive', 'spam', 'trash', 'all']);
+const BatchSearchRequestSchema = z
+    .object({
+    accounts: z
+        .array(z.object({ accountId, pageToken: z.string().min(1).optional() }).strict())
+        .min(1)
+        .max(20),
+    query: z.string().min(1),
+    folder: portableFolder.optional(),
+    text: z.string().optional(),
+    from: z.string().optional(),
+    to: z.string().optional(),
+    subject: z.string().optional(),
+    read: z.boolean().optional(),
+    starred: z.boolean().optional(),
+    hasAttachment: z.boolean().optional(),
+    after: isoDate.optional(),
+    before: isoDate.optional(),
+    pageSize: z.number().int().min(1).max(100).optional(),
+    includeSnippet: z.boolean().optional(),
+})
+    .strict()
+    .openapi('BatchSearchRequest');
 const MODIFY_CAPABILITIES = {
     markRead: 'mail.organize',
     markUnread: 'mail.organize',
@@ -538,7 +608,9 @@ async function runJson(c, deps, options, fn) {
             if (reservation) {
                 completeIdempotencyKey(deps.db, { ...reservation, responseStatus: status, responseBody: body });
             }
-            outcome = 'success';
+            outcome = result.operationFailed ? 'error' : 'success';
+            if (result.operationFailed)
+                errorCode = 'account_failure';
             return new Response(body, {
                 status,
                 headers: { 'content-type': 'application/json; charset=UTF-8', 'cache-control': 'no-store' },
@@ -643,6 +715,7 @@ async function runAttachment(c, deps, accountId, messageId, attachmentId) {
 function toSendInput(input) {
     return {
         body: input.body,
+        ...(input.from ? { from: input.from } : {}),
         ...(input.to ? { to: input.to } : {}),
         ...(input.cc ? { cc: input.cc } : {}),
         ...(input.bcc ? { bcc: input.bcc } : {}),
@@ -686,6 +759,7 @@ function toEmailQuery(input) {
         page: {
             ...(input.pageSize ? { pageSize: Number(input.pageSize) } : {}),
             ...(input.pageToken ? { pageToken: input.pageToken } : {}),
+            ...(input.includeSnippet !== undefined ? { includeSnippet: input.includeSnippet === 'true' } : {}),
         },
     };
 }
@@ -832,6 +906,40 @@ export function createRestApi(deps) {
             // Auditing must not replace the API response.
         }
     });
+    app.use('/api/v1/accounts/:accountId/send-as', async (c, next) => {
+        await next();
+        if (c.req.method !== 'PUT')
+            return;
+        const auth = c.get('restAuth');
+        if (!auth)
+            return;
+        let errorCode;
+        if (c.res.status >= 400) {
+            try {
+                const payload = (await c.res.clone().json());
+                if (typeof payload.error?.code === 'string')
+                    errorCode = payload.error.code;
+            }
+            catch {
+                errorCode = 'internal';
+            }
+        }
+        try {
+            recordAdminAuditEvent(deps.db, {
+                operation: 'put /api/v1/accounts/:id/send-as',
+                outcome: c.res.status < 400 ? 'success' : 'error',
+                actorKeyId: auth.kind === 'api_key' ? auth.keyId : undefined,
+                actorSessionId: auth.kind === 'session' ? auth.sessionId : undefined,
+                actorMemberId: auth.memberId,
+                resourceType: 'account',
+                resourceId: c.req.param('accountId'),
+                ...(errorCode ? { errorCode } : {}),
+            });
+        }
+        catch {
+            // Auditing must not replace the API response.
+        }
+    });
     app.use('/api/v1/*', async (c, next) => {
         c.set('restLogger', deps.logger);
         if (c.req.path.startsWith('/api/v1/auth/') ||
@@ -859,7 +967,8 @@ export function createRestApi(deps) {
         }
         if (publicPaths.has(c.req.path))
             return next();
-        const administrative = c.req.path.startsWith('/api/v1/admin/');
+        const administrative = c.req.path.startsWith('/api/v1/admin/') ||
+            (c.req.method === 'PUT' && /^\/api\/v1\/accounts\/[^/]+\/send-as$/.test(c.req.path));
         if (administrative) {
             c.header('cache-control', 'no-store');
             c.header('x-content-type-options', 'nosniff');
@@ -1005,6 +1114,54 @@ export function createRestApi(deps) {
             data: await c.get('restService').listLabels(accountId),
         }));
     });
+    const listSendAsRoute = createRoute({
+        method: 'get',
+        path: '/api/v1/accounts/{accountId}/send-as',
+        operationId: 'listSendAs',
+        summary: 'List sender addresses',
+        description: 'List sender addresses available for an email account.',
+        request: { params: accountParams },
+        ...protectedRoute,
+        responses: {
+            200: {
+                content: { 'application/json': { schema: dataEnvelope(z.array(SendAsIdentitySchema)) } },
+                description: 'Sender addresses',
+            },
+            ...errorResponses,
+        },
+    });
+    app.openapi(listSendAsRoute, (c) => {
+        const { accountId } = c.req.valid('param');
+        return runJson(c, deps, { operation: 'listSendAs', capabilities: ['mail.read'] }, async () => ({
+            data: await c.get('restService').listSendAs(accountId),
+        }));
+    });
+    const replaceSendAsRoute = createRoute({
+        method: 'put',
+        path: '/api/v1/accounts/{accountId}/send-as',
+        operationId: 'replaceSendAs',
+        summary: 'Replace configured sender addresses',
+        description: 'Replace the configured Outlook or IMAP aliases for an email account.',
+        request: {
+            params: accountParams,
+            body: { required: true, content: { 'application/json': { schema: ReplaceSendAsRequestSchema } } },
+        },
+        ...protectedRoute,
+        responses: {
+            200: {
+                content: { 'application/json': { schema: dataEnvelope(z.array(SendAsIdentitySchema)) } },
+                description: 'Sender addresses replaced',
+            },
+            ...errorResponses,
+        },
+    });
+    app.openapi(replaceSendAsRoute, (c) => {
+        const { accountId } = c.req.valid('param');
+        const { identities } = c.req.valid('json');
+        return runJson(c, deps, { operation: 'replaceSendAs', capabilities: ['admin.accounts'], quota: false }, async () => ({
+            data: await c.get('restService').replaceSendAs(accountId, identities),
+        }));
+    });
     const listMessagesRoute = createRoute({
         method: 'get',
         path: '/api/v1/accounts/{accountId}/messages',
@@ -1027,6 +1184,7 @@ export function createRestApi(deps) {
                 data: result.items,
                 meta: {
                     ...(result.nextPageToken ? { nextPageToken: result.nextPageToken } : {}),
+                    exhausted: result.exhausted,
                     ...([...diagnostics, ...(result.diagnostics ?? [])].length
                         ? { diagnostics: [...diagnostics, ...(result.diagnostics ?? [])] }
                         : {}),
@@ -1037,6 +1195,77 @@ export function createRestApi(deps) {
             };
         });
     });
+    const batchSearchRoute = createRoute({
+        method: 'post',
+        path: '/api/v1/messages/search',
+        operationId: 'searchMessages',
+        summary: 'Search multiple accounts',
+        description: 'Search up to 20 email accounts with one portable query.',
+        request: {
+            body: { content: { 'application/json': { schema: BatchSearchRequestSchema } }, required: true },
+        },
+        ...protectedRoute,
+        responses: {
+            200: {
+                content: { 'application/json': { schema: BatchSearchResponseSchema } },
+                description: 'Grouped search results',
+            },
+            ...errorResponses,
+        },
+    });
+    app.openapi(batchSearchRoute, (c) => runJson(c, deps, { operation: 'searchMessages', capabilities: ['mail.read'] }, async () => {
+        const input = c.req.valid('json');
+        const parsed = parseEmailSearch(input.query);
+        if (!parsed.valid) {
+            throw new EmailError('invalid_request', parsed.diagnostics.map((item) => item.message).join(' '), {
+                diagnostics: parsed.diagnostics,
+            });
+        }
+        const structured = {};
+        for (const key of ['folder', 'text', 'from', 'to', 'subject', 'after', 'before']) {
+            if (input[key] !== undefined)
+                structured[key] = input[key];
+        }
+        for (const key of ['read', 'starred', 'hasAttachment']) {
+            if (input[key] !== undefined)
+                structured[key] = input[key];
+        }
+        const merged = mergeEmailQueries(parsed.query, structured);
+        if (!merged.success) {
+            throw new EmailError('invalid_request', merged.diagnostics.map((item) => item.message).join(' '), {
+                diagnostics: merged.diagnostics,
+            });
+        }
+        const result = await c.get('restService').searchMessagesBatch({
+            accounts: input.accounts,
+            query: merged.query,
+            ...(input.pageSize !== undefined ? { pageSize: input.pageSize } : {}),
+            ...(input.includeSnippet !== undefined ? { includeSnippet: input.includeSnippet } : {}),
+        });
+        return {
+            data: result.groups.map((group) => {
+                if (!group.page)
+                    return { accountId: group.accountId, error: group.error };
+                const diagnostics = [...parsed.diagnostics, ...(group.page.diagnostics ?? [])];
+                return {
+                    accountId: group.accountId,
+                    data: group.page.items,
+                    meta: {
+                        exhausted: group.page.exhausted,
+                        ...(group.page.nextPageToken ? { nextPageToken: group.page.nextPageToken } : {}),
+                        ...(diagnostics.length ? { diagnostics } : {}),
+                        ...(group.page.incomplete ? { incomplete: true } : {}),
+                        ...(group.page.incompleteReason ? { incompleteReason: group.page.incompleteReason } : {}),
+                        ...(group.page.inspectedCandidates !== undefined
+                            ? { inspectedCandidates: group.page.inspectedCandidates }
+                            : {}),
+                    },
+                };
+            }),
+            meta: { exhausted: result.exhausted },
+            operationFailed: result.groups.some((group) => group.error !== undefined),
+        };
+    }));
     const getMessageRoute = createRoute({
         method: 'get',
         path: '/api/v1/accounts/{accountId}/messages/{messageId}',