mcp-twake-mail 0.1.0 → 1.0.0

package/build/cli/prompts/setup-wizard.test.js

@@ -0,0 +1,161 @@
+/**
+ * Tests for setup wizard prompts.
+ */
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { confirm, input } from '@inquirer/prompts';
+import { access } from 'node:fs/promises';
+import { promptDefaultFrom, promptSignaturePath } from './setup-wizard.js';
+// Mock @inquirer/prompts
+vi.mock('@inquirer/prompts', () => ({
+    confirm: vi.fn(),
+    input: vi.fn(),
+    select: vi.fn(),
+    password: vi.fn(),
+}));
+// Mock node:fs/promises
+vi.mock('node:fs/promises', () => ({
+    access: vi.fn(),
+    constants: {
+        R_OK: 4,
+    },
+}));
+// Mock node:os
+vi.mock('node:os', () => ({
+    homedir: vi.fn(() => '/home/testuser'),
+}));
+describe('promptDefaultFrom', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+    });
+    it('returns undefined when user declines to configure', async () => {
+        vi.mocked(confirm).mockResolvedValueOnce(false);
+        const result = await promptDefaultFrom();
+        expect(result).toBeUndefined();
+        expect(confirm).toHaveBeenCalledWith({
+            message: 'Configure default sender email address?',
+            default: true,
+        });
+        expect(input).not.toHaveBeenCalled();
+    });
+    it('returns email when user configures and provides valid email', async () => {
+        vi.mocked(confirm).mockResolvedValueOnce(true);
+        vi.mocked(input).mockResolvedValueOnce('user@example.com');
+        const result = await promptDefaultFrom();
+        expect(result).toBe('user@example.com');
+        expect(confirm).toHaveBeenCalledOnce();
+        expect(input).toHaveBeenCalledWith({
+            message: 'Default "from" email address:',
+            validate: expect.any(Function),
+        });
+    });
+    it('validates email format - rejects invalid emails', async () => {
+        vi.mocked(confirm).mockResolvedValueOnce(true);
+        // Mock input to get the validate function
+        let validateFn;
+        vi.mocked(input).mockImplementationOnce((options) => {
+            validateFn = options.validate;
+            return Promise.resolve('valid@example.com');
+        });
+        await promptDefaultFrom();
+        expect(validateFn).toBeDefined();
+        if (validateFn) {
+            // Test invalid emails
+            expect(validateFn('invalid')).toBe('Please enter a valid email address');
+            expect(validateFn('invalid@')).toBe('Please enter a valid email address');
+            expect(validateFn('@example.com')).toBe('Please enter a valid email address');
+            expect(validateFn('user@example')).toBe('Please enter a valid email address');
+            // Test valid emails
+            expect(validateFn('user@example.com')).toBe(true);
+            expect(validateFn('test.user+tag@sub.example.org')).toBe(true);
+        }
+    });
+});
+describe('promptSignaturePath', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+    });
+    it('returns undefined when user declines to configure', async () => {
+        vi.mocked(confirm).mockResolvedValueOnce(false);
+        const result = await promptSignaturePath();
+        expect(result).toBeUndefined();
+        expect(confirm).toHaveBeenCalledWith({
+            message: 'Configure email signature file?',
+            default: false,
+        });
+        expect(input).not.toHaveBeenCalled();
+    });
+    it('returns path when user configures and file exists', async () => {
+        vi.mocked(confirm).mockResolvedValueOnce(true);
+        vi.mocked(access).mockResolvedValueOnce(undefined);
+        vi.mocked(input).mockResolvedValueOnce('/path/to/signature.md');
+        const result = await promptSignaturePath();
+        expect(result).toBe('/path/to/signature.md');
+        expect(confirm).toHaveBeenCalledOnce();
+        expect(input).toHaveBeenCalledWith({
+            message: 'Path to signature file (Markdown format):',
+            default: '~/.mcp-twake-mail/signature.md',
+            validate: expect.any(Function),
+        });
+    });
+    it('validates file exists - shows error for missing file', async () => {
+        vi.mocked(confirm).mockResolvedValueOnce(true);
+        // Mock input to capture the validate function and test it separately
+        let validateFn;
+        vi.mocked(input).mockImplementationOnce((options) => {
+            validateFn = options.validate;
+            return Promise.resolve('/valid/path.md');
+        });
+        await promptSignaturePath();
+        expect(validateFn).toBeDefined();
+        if (validateFn) {
+            // Set up mock to reject for missing file
+            vi.mocked(access).mockReset();
+            vi.mocked(access).mockRejectedValue(new Error('ENOENT'));
+            // Test missing file
+            const result = await validateFn('/missing/file.md');
+            expect(typeof result).toBe('string');
+            expect(result).toMatch(/File not found or not readable/);
+            expect(access).toHaveBeenCalledTimes(1);
+            expect(access).toHaveBeenCalledWith('/missing/file.md', 4); // R_OK = 4
+        }
+    });
+    it('validates empty path is rejected', async () => {
+        vi.mocked(confirm).mockResolvedValueOnce(true);
+        // Mock input to get the validate function
+        let validateFn;
+        vi.mocked(input).mockImplementationOnce((options) => {
+            validateFn = options.validate;
+            return Promise.resolve('valid.md');
+        });
+        await promptSignaturePath();
+        expect(validateFn).toBeDefined();
+        if (validateFn) {
+            const result = await validateFn('');
+            expect(result).toBe('Signature path cannot be empty');
+            expect(access).not.toHaveBeenCalled();
+        }
+    });
+    it('expands ~ in path for validation', async () => {
+        vi.mocked(confirm).mockResolvedValueOnce(true);
+        // Mock input to capture the validate function
+        let validateFn;
+        vi.mocked(input).mockImplementationOnce((options) => {
+            validateFn = options.validate;
+            return Promise.resolve('~/signature.md');
+        });
+        await promptSignaturePath();
+        expect(validateFn).toBeDefined();
+        if (validateFn) {
+            // Clear previous calls and set up mock for the validation call
+            vi.mocked(access).mockClear();
+            vi.mocked(access).mockResolvedValueOnce(undefined);
+            await validateFn('~/signature.md');
+            // Verify access was called with expanded path (not with ~)
+            expect(access).toHaveBeenCalledTimes(1);
+            const calledPath = vi.mocked(access).mock.calls[0][0];
+            expect(calledPath).not.toContain('~');
+            expect(calledPath).toMatch(/^\/.*\/signature\.md$/);
+        }
+    });
+});
+//# sourceMappingURL=setup-wizard.test.js.map

package/build/cli/prompts/setup-wizard.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard.test.js","sourceRoot":"","sources":["../../../src/cli/prompts/setup-wizard.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE3E,yBAAyB;AACzB,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE;IAChB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;IACd,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;IACf,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;CAClB,CAAC,CAAC,CAAC;AAEJ,wBAAwB;AACxB,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;IACjC,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;IACf,SAAS,EAAE;QACT,IAAI,EAAE,CAAC;KACR;CACF,CAAC,CAAC,CAAC;AAEJ,eAAe;AACf,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACxB,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC;CACvC,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAEzC,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC;YACnC,OAAO,EAAE,yCAAyC;YAClD,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC/C,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QAE3D,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAEzC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC;YACjC,OAAO,EAAE,+BAA+B;YACxC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAE/C,0CAA0C;QAC1C,IAAI,UAA6D,CAAC;QAClE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE,EAAE;YAClD,UAAU,GAAG,OAAO,CAAC,QAA+C,CAAC;YACrE,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,MAAM,iBAAiB,EAAE,CAAC;QAE1B,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,UAAU,EAAE,CAAC;YACf,sBAAsB;YACtB,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YACzE,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YAC1E,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YAC9E,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YAE9E,oBAAoB;YACpB,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,CAAC,UAAU,CAAC,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAG,MAAM,mBAAmB,EAAE,CAAC;QAE3C,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC;YACnC,OAAO,EAAE,iCAAiC;YAC1C,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC/C,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;QACnD,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,uBAAuB,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,MAAM,mBAAmB,EAAE,CAAC;QAE3C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC;YACjC,OAAO,EAAE,2CAA2C;YACpD,OAAO,EAAE,gCAAgC;YACzC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAE/C,qEAAqE;QACrE,IAAI,UAAsE,CAAC;QAC3E,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE,EAAE;YAClD,UAAU,GAAG,OAAO,CAAC,QAAwD,CAAC;YAC9E,OAAO,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,MAAM,mBAAmB,EAAE,CAAC;QAE5B,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,UAAU,EAAE,CAAC;YACf,yCAAyC;YACzC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC;YAC9B,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAEzD,oBAAoB;YACpB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC,CAAC;YACpD,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;YACzD,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAE/C,0CAA0C;QAC1C,IAAI,UAAsE,CAAC;QAC3E,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE,EAAE;YAClD,UAAU,GAAG,OAAO,CAAC,QAAwD,CAAC;YAC9E,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,MAAM,mBAAmB,EAAE,CAAC;QAE5B,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAE/C,8CAA8C;QAC9C,IAAI,UAAsE,CAAC;QAC3E,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE,EAAE;YAClD,UAAU,GAAG,OAAO,CAAC,QAAwD,CAAC;YAC9E,OAAO,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,MAAM,mBAAmB,EAAE,CAAC;QAE5B,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,UAAU,EAAE,CAAC;YACf,+DAA+D;YAC/D,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC;YAC9B,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;YAEnD,MAAM,UAAU,CAAC,gBAAgB,CAAC,CAAC;YAEnC,2DAA2D;YAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC;YAChE,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/config/schema.d.ts

@@ -23,6 +23,8 @@ export declare const envSchema: z.ZodObject<{
         debug: "debug";
         trace: "trace";
     }>>;
+    JMAP_DEFAULT_FROM: z.ZodOptional<z.ZodString>;
+    JMAP_SIGNATURE_PATH: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type Config = z.infer<typeof envSchema>;
 export declare function loadConfig(): Config;

package/build/config/schema.js

@@ -27,6 +27,9 @@ export const envSchema = z
     JMAP_OIDC_LOCAL_PORT: z.coerce.number().optional(),
     JMAP_REQUEST_TIMEOUT: z.coerce.number().default(30000),
     LOG_LEVEL: z.enum(['fatal', 'error', 'warn', 'info', 'debug', 'trace']).default('info'),
+    // Email identity and signature configuration
+    JMAP_DEFAULT_FROM: z.string().email('JMAP_DEFAULT_FROM must be a valid email address').optional(),
+    JMAP_SIGNATURE_PATH: z.string().optional(),
 })
     .superRefine((data, ctx) => {
     // Conditional validation: basic auth requires username+password

package/build/config/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,CAAC,sCAAsC,CAAC;SAC3C,MAAM,CACL,CAAC,GAAG,EAAE,EAAE;QACN,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,CACL,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAC5B,MAAM,CAAC,QAAQ,KAAK,WAAW;YAC/B,MAAM,CAAC,QAAQ,KAAK,WAAW,CAChC,CAAC;IACJ,CAAC,EACD,EAAE,OAAO,EAAE,uEAAuE,EAAE,CACrF;IACH,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACtE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,4BAA4B;IAC5B,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,CAAC,sCAAsC,CAAC;SAC3C,QAAQ,EAAE;IACb,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,6BAA6B,CAAC;IAClE,+DAA+D;IAC/D,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC;IAClF,sFAAsF;IACtF,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClD,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtD,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACxF,CAAC;KACD,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,gEAAgE;IAChE,IAAI,IAAI,CAAC,gBAAgB,KAAK,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,eAAe,CAAC;gBACvB,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,eAAe,CAAC;gBACvB,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC9C,+BAA+B;QAC/B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,YAAY,CAAC;gBACpB,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,CAAC,gBAAgB,KAAK,MAAM,EAAE,CAAC;QAC5C,qCAAqC;QACrC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,kBAAkB,CAAC;gBAC1B,OAAO,EAAE,mDAAmD;aAC7D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,qBAAqB,CAAC;gBAC7B,OAAO,EAAE,sDAAsD;aAChE,CAAC,CAAC;QACL,CAAC;QACD,8EAA8E;IAChF,CAAC;AACH,CAAC,CAAC,CAAC;AAIL,MAAM,UAAU,UAAU;IACxB,OAAO,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,CAAC,sCAAsC,CAAC;SAC3C,MAAM,CACL,CAAC,GAAG,EAAE,EAAE;QACN,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,CACL,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAC5B,MAAM,CAAC,QAAQ,KAAK,WAAW;YAC/B,MAAM,CAAC,QAAQ,KAAK,WAAW,CAChC,CAAC;IACJ,CAAC,EACD,EAAE,OAAO,EAAE,uEAAuE,EAAE,CACrF;IACH,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACtE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,4BAA4B;IAC5B,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,CAAC,sCAAsC,CAAC;SAC3C,QAAQ,EAAE;IACb,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,6BAA6B,CAAC;IAClE,+DAA+D;IAC/D,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC;IAClF,sFAAsF;IACtF,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClD,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtD,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvF,6CAA6C;IAC7C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC,QAAQ,EAAE;IACjG,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,gEAAgE;IAChE,IAAI,IAAI,CAAC,gBAAgB,KAAK,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,eAAe,CAAC;gBACvB,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,eAAe,CAAC;gBACvB,OAAO,EAAE,iDAAiD;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC9C,+BAA+B;QAC/B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,YAAY,CAAC;gBACpB,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,CAAC,gBAAgB,KAAK,MAAM,EAAE,CAAC;QAC5C,qCAAqC;QACrC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,kBAAkB,CAAC;gBAC1B,OAAO,EAAE,mDAAmD;aAC7D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,qBAAqB,CAAC;gBAC7B,OAAO,EAAE,sDAAsD;aAChE,CAAC,CAAC;QACL,CAAC;QACD,8EAA8E;IAChF,CAAC;AACH,CAAC,CAAC,CAAC;AAIL,MAAM,UAAU,UAAU;IACxB,OAAO,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC"}

package/build/discovery/dns-srv.d.ts

@@ -0,0 +1,18 @@
+/**
+ * DNS SRV resolution for JMAP server discovery
+ * RFC 8620 Section 2.2 - Service Discovery via DNS SRV
+ */
+interface SrvRecord {
+    hostname: string;
+    port: number;
+}
+/**
+ * Resolve DNS SRV record for JMAP service
+ * Queries _jmap._tcp.{domain} and returns hostname/port of highest priority server
+ *
+ * @param domain - Email domain to query (e.g., "example.com")
+ * @param timeout - Timeout in milliseconds (default: 3000)
+ * @returns SrvRecord with hostname/port, or null if no record found
+ */
+export declare function resolveSrvRecord(domain: string, timeout?: number): Promise<SrvRecord | null>;
+export {};

package/build/discovery/dns-srv.js

@@ -0,0 +1,60 @@
+/**
+ * DNS SRV resolution for JMAP server discovery
+ * RFC 8620 Section 2.2 - Service Discovery via DNS SRV
+ */
+import { promises as dns } from 'node:dns';
+/**
+ * Resolve DNS SRV record for JMAP service
+ * Queries _jmap._tcp.{domain} and returns hostname/port of highest priority server
+ *
+ * @param domain - Email domain to query (e.g., "example.com")
+ * @param timeout - Timeout in milliseconds (default: 3000)
+ * @returns SrvRecord with hostname/port, or null if no record found
+ */
+export async function resolveSrvRecord(domain, timeout = 3000) {
+    const query = `_jmap._tcp.${domain}`;
+    try {
+        // Race DNS query against timeout
+        const records = await Promise.race([
+            dns.resolveSrv(query),
+            new Promise((_, reject) => setTimeout(() => reject(new Error('DNS timeout')), timeout)),
+        ]);
+        if (!records || records.length === 0) {
+            return null;
+        }
+        // Sort by priority (ascending) then weight (descending)
+        // Lower priority value = higher priority
+        // Higher weight value = more preferred among same priority
+        const sorted = records.sort((a, b) => {
+            if (a.priority !== b.priority) {
+                return a.priority - b.priority;
+            }
+            return b.weight - a.weight;
+        });
+        // Return first (highest priority/weight) record
+        const record = sorted[0];
+        return {
+            hostname: record.name,
+            port: record.port,
+        };
+    }
+    catch (error) {
+        // Handle DNS-specific errors gracefully
+        if (error &&
+            typeof error === 'object' &&
+            'code' in error &&
+            (error.code === 'ENOTFOUND' || error.code === 'ENODATA')) {
+            // No DNS record exists - this is expected for many domains
+            return null;
+        }
+        // Log timeout and other errors, but return null for graceful fallback
+        if (error instanceof Error && error.message === 'DNS timeout') {
+            console.warn(`DNS SRV query timeout for ${query}`);
+            return null;
+        }
+        // Unexpected error - log but still return null to allow fallback
+        console.warn(`DNS SRV query failed for ${query}:`, error);
+        return null;
+    }
+}
+//# sourceMappingURL=dns-srv.js.map

package/build/discovery/dns-srv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-srv.js","sourceRoot":"","sources":["../../src/discovery/dns-srv.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,MAAM,UAAU,CAAC;AAO3C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,OAAO,GAAG,IAAI;IAEd,MAAM,KAAK,GAAG,cAAc,MAAM,EAAE,CAAC;IAErC,IAAI,CAAC;QACH,iCAAiC;QACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YACjC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;YACrB,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC/B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,CAC5D;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wDAAwD;QACxD,yCAAyC;QACzC,2DAA2D;QAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACnC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC9B,OAAO,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;YACjC,CAAC;YACD,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,gDAAgD;QAChD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACzB,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,IAAI;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wCAAwC;QACxC,IACE,KAAK;YACL,OAAO,KAAK,KAAK,QAAQ;YACzB,MAAM,IAAI,KAAK;YACf,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,EACxD,CAAC;YACD,2DAA2D;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sEAAsE;QACtE,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iEAAiE;QACjE,OAAO,CAAC,IAAI,CAAC,4BAA4B,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/build/discovery/dns-srv.test.d.ts

@@ -0,0 +1,4 @@
+/**
+ * DNS SRV resolution tests
+ */
+export {};

package/build/discovery/dns-srv.test.js

@@ -0,0 +1,79 @@
+/**
+ * DNS SRV resolution tests
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { promises as dns } from 'node:dns';
+import { resolveSrvRecord } from './dns-srv.js';
+vi.mock('node:dns', () => ({
+    promises: {
+        resolveSrv: vi.fn(),
+    },
+}));
+describe('resolveSrvRecord', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    it('resolves DNS SRV record and returns hostname/port', async () => {
+        const mockRecords = [
+            { name: 'jmap.example.com', port: 443, priority: 10, weight: 10 },
+        ];
+        vi.mocked(dns.resolveSrv).mockResolvedValue(mockRecords);
+        const result = await resolveSrvRecord('example.com');
+        expect(result).toEqual({
+            hostname: 'jmap.example.com',
+            port: 443,
+        });
+        expect(dns.resolveSrv).toHaveBeenCalledWith('_jmap._tcp.example.com');
+    });
+    it('sorts by priority (ascending) then weight (descending)', async () => {
+        const mockRecords = [
+            { name: 'low-weight.example.com', port: 443, priority: 10, weight: 5 },
+            { name: 'high-priority.example.com', port: 443, priority: 20, weight: 10 },
+            { name: 'best.example.com', port: 443, priority: 10, weight: 10 },
+        ];
+        vi.mocked(dns.resolveSrv).mockResolvedValue(mockRecords);
+        const result = await resolveSrvRecord('example.com');
+        // Should return priority 10, weight 10 (best)
+        expect(result).toEqual({
+            hostname: 'best.example.com',
+            port: 443,
+        });
+    });
+    it('returns null when DNS record not found (ENOTFOUND)', async () => {
+        const error = new Error('DNS query failed');
+        error.code = 'ENOTFOUND';
+        vi.mocked(dns.resolveSrv).mockRejectedValue(error);
+        const result = await resolveSrvRecord('nonexistent.example.com');
+        expect(result).toBeNull();
+    });
+    it('returns null when DNS record has no data (ENODATA)', async () => {
+        const error = new Error('DNS query failed');
+        error.code = 'ENODATA';
+        vi.mocked(dns.resolveSrv).mockRejectedValue(error);
+        const result = await resolveSrvRecord('nodns.example.com');
+        expect(result).toBeNull();
+    });
+    it('returns null on timeout', async () => {
+        // Mock a slow DNS response (never resolves)
+        vi.mocked(dns.resolveSrv).mockImplementation(() => new Promise((resolve) => {
+            // Never resolves - will timeout
+            setTimeout(() => resolve([]), 10000);
+        }));
+        const result = await resolveSrvRecord('slow.example.com', 100);
+        expect(result).toBeNull();
+    });
+    it('returns null when no records returned', async () => {
+        vi.mocked(dns.resolveSrv).mockResolvedValue([]);
+        const result = await resolveSrvRecord('empty.example.com');
+        expect(result).toBeNull();
+    });
+    it('returns null on unexpected DNS error', async () => {
+        vi.mocked(dns.resolveSrv).mockRejectedValue(new Error('Network unreachable'));
+        const result = await resolveSrvRecord('error.example.com');
+        expect(result).toBeNull();
+    });
+});
+//# sourceMappingURL=dns-srv.test.js.map

package/build/discovery/dns-srv.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-srv.test.js","sourceRoot":"","sources":["../../src/discovery/dns-srv.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACzB,QAAQ,EAAE;QACR,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;KACpB;CACF,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,WAAW,GAAG;YAClB,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;SAClE,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAErD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,GAAG;SACV,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,WAAW,GAAG;YAClB,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE;YACtE,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAC1E,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;SAClE,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAErD,8CAA8C;QAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,GAAG;SACV,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,KAAK,GAA0B,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,GAAG,WAAW,CAAC;QACzB,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;QAEjE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,KAAK,GAA0B,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACnE,KAAK,CAAC,IAAI,GAAG,SAAS,CAAC;QACvB,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,4CAA4C;QAC5C,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,kBAAkB,CAC1C,GAAG,EAAE,CACH,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YACtB,gCAAgC;YAChC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC,CACL,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAE/D,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAE9E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;QAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/discovery/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * JMAP server discovery module
+ * Exports DNS SRV, .well-known/jmap, OAuth discovery, and high-level orchestration
+ */
+export { JmapDiscoveryResult, OidcDiscoveryResult, DiscoveryError, } from './types.js';
+export { resolveSrvRecord } from './dns-srv.js';
+export { fetchWellKnownJmap, verifyJmapUrl } from './well-known.js';
+export { discoverOAuthFromResource, parseWwwAuthenticate, } from './oauth-discovery.js';
+export { discoverFromEmail, extractDomain, FullDiscoveryResult, } from './orchestrator.js';

package/build/discovery/index.js

@@ -0,0 +1,13 @@
+/**
+ * JMAP server discovery module
+ * Exports DNS SRV, .well-known/jmap, OAuth discovery, and high-level orchestration
+ */
+// Types
+export { DiscoveryError, } from './types.js';
+// Low-level discovery functions
+export { resolveSrvRecord } from './dns-srv.js';
+export { fetchWellKnownJmap, verifyJmapUrl } from './well-known.js';
+export { discoverOAuthFromResource, parseWwwAuthenticate, } from './oauth-discovery.js';
+// High-level orchestration
+export { discoverFromEmail, extractDomain, } from './orchestrator.js';
+//# sourceMappingURL=index.js.map

package/build/discovery/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/discovery/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,QAAQ;AACR,OAAO,EAGL,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,gCAAgC;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EACL,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAE9B,2BAA2B;AAC3B,OAAO,EACL,iBAAiB,EACjB,aAAa,GAEd,MAAM,mBAAmB,CAAC"}

package/build/discovery/oauth-discovery.d.ts

@@ -0,0 +1,34 @@
+/**
+ * OAuth/OIDC discovery from JMAP resource server
+ * Implements RFC 9728 Protected Resource Metadata discovery
+ */
+import type { OidcDiscoveryResult } from './types.js';
+/**
+ * Parse WWW-Authenticate header to extract OAuth metadata.
+ * Supports Bearer scheme with realm, scope, and issuer parameters.
+ *
+ * Example header:
+ * Bearer realm="example", scope="openid email", issuer="https://auth.example.com"
+ *
+ * @param header WWW-Authenticate header value
+ * @returns Parsed metadata or null if not Bearer auth
+ */
+export declare function parseWwwAuthenticate(header: string): {
+    issuer?: string;
+    realm?: string;
+    scope?: string;
+} | null;
+/**
+ * Discover OAuth authorization server from JMAP resource URL.
+ * Implements RFC 9728 Protected Resource Metadata discovery with fallbacks.
+ *
+ * Discovery order:
+ * 1. Try /.well-known/oauth-protected-resource at resource origin
+ * 2. If that fails, try fetching JMAP URL to trigger 401 with WWW-Authenticate
+ * 3. If that fails, try common SSO subdomain patterns (sso., auth., login.)
+ *
+ * @param jmapUrl The JMAP session or API URL
+ * @param timeout Request timeout in ms (default 10000)
+ * @returns OidcDiscoveryResult or null if no OAuth info found
+ */
+export declare function discoverOAuthFromResource(jmapUrl: string, timeout?: number): Promise<OidcDiscoveryResult | null>;

package/build/discovery/oauth-discovery.js

@@ -0,0 +1,160 @@
+/**
+ * OAuth/OIDC discovery from JMAP resource server
+ * Implements RFC 9728 Protected Resource Metadata discovery
+ */
+/**
+ * Parse WWW-Authenticate header to extract OAuth metadata.
+ * Supports Bearer scheme with realm, scope, and issuer parameters.
+ *
+ * Example header:
+ * Bearer realm="example", scope="openid email", issuer="https://auth.example.com"
+ *
+ * @param header WWW-Authenticate header value
+ * @returns Parsed metadata or null if not Bearer auth
+ */
+export function parseWwwAuthenticate(header) {
+    // Check if header starts with "Bearer " (case-insensitive)
+    if (!header.match(/^Bearer\s+/i)) {
+        return null;
+    }
+    // Extract the part after "Bearer "
+    const params = header.replace(/^Bearer\s+/i, '');
+    // Parse key="value" pairs using regex
+    const paramRegex = /(\w+)="([^"]+)"/g;
+    const result = {};
+    let match;
+    while ((match = paramRegex.exec(params)) !== null) {
+        const [, key, value] = match;
+        if (key === 'issuer' || key === 'realm' || key === 'scope') {
+            result[key] = value;
+        }
+    }
+    // Return null if no metadata found
+    if (Object.keys(result).length === 0) {
+        return null;
+    }
+    return result;
+}
+/**
+ * Try common SSO subdomain patterns for OIDC discovery.
+ * Many organizations use predictable subdomain patterns for their SSO.
+ *
+ * @param domain The base domain to check
+ * @param timeout Request timeout in ms
+ * @returns OidcDiscoveryResult or null if no valid OIDC endpoint found
+ */
+async function tryCommonSsoPatterns(domain, timeout) {
+    // Extract base domain (remove subdomain like 'jmap.' or 'mail.')
+    const parts = domain.split('.');
+    const baseDomain = parts.length > 2 ? parts.slice(-2).join('.') : domain;
+    // Common SSO subdomain patterns
+    const ssoPatterns = ['sso', 'auth', 'login', 'id', 'accounts'];
+    for (const pattern of ssoPatterns) {
+        const issuerUrl = `https://${pattern}.${baseDomain}`;
+        const discoveryUrl = `${issuerUrl}/.well-known/openid-configuration`;
+        try {
+            const controller = new AbortController();
+            const timeoutId = setTimeout(() => controller.abort(), timeout);
+            const response = await fetch(discoveryUrl, {
+                signal: controller.signal,
+            });
+            clearTimeout(timeoutId);
+            if (response.ok) {
+                const config = await response.json();
+                // Verify it's a valid OIDC config with issuer field
+                if (config.issuer) {
+                    return {
+                        issuer: config.issuer,
+                        method: 'well-known-oidc',
+                    };
+                }
+            }
+        }
+        catch {
+            // This pattern didn't work, try next
+        }
+    }
+    return null;
+}
+/**
+ * Discover OAuth authorization server from JMAP resource URL.
+ * Implements RFC 9728 Protected Resource Metadata discovery with fallbacks.
+ *
+ * Discovery order:
+ * 1. Try /.well-known/oauth-protected-resource at resource origin
+ * 2. If that fails, try fetching JMAP URL to trigger 401 with WWW-Authenticate
+ * 3. If that fails, try common SSO subdomain patterns (sso., auth., login.)
+ *
+ * @param jmapUrl The JMAP session or API URL
+ * @param timeout Request timeout in ms (default 10000)
+ * @returns OidcDiscoveryResult or null if no OAuth info found
+ */
+export async function discoverOAuthFromResource(jmapUrl, timeout = 10000) {
+    try {
+        // Parse jmapUrl to get origin
+        const url = new URL(jmapUrl);
+        const origin = `${url.protocol}//${url.host}`;
+        // Try RFC 9728 Protected Resource Metadata first
+        const metadataUrl = `${origin}/.well-known/oauth-protected-resource`;
+        try {
+            const controller = new AbortController();
+            const timeoutId = setTimeout(() => controller.abort(), timeout);
+            const metadataResponse = await fetch(metadataUrl, {
+                signal: controller.signal,
+            });
+            clearTimeout(timeoutId);
+            if (metadataResponse.ok) {
+                const metadata = await metadataResponse.json();
+                // Extract issuer from authorization_servers array
+                if (metadata.authorization_servers &&
+                    Array.isArray(metadata.authorization_servers) &&
+                    metadata.authorization_servers.length > 0) {
+                    return {
+                        issuer: metadata.authorization_servers[0],
+                        method: 'protected-resource',
+                    };
+                }
+            }
+        }
+        catch {
+            // Protected resource metadata failed, try WWW-Authenticate fallback
+        }
+        // Fallback 1: Try fetching JMAP URL directly to get 401 with WWW-Authenticate
+        try {
+            const controller = new AbortController();
+            const timeoutId = setTimeout(() => controller.abort(), timeout);
+            const jmapResponse = await fetch(jmapUrl, {
+                signal: controller.signal,
+            });
+            clearTimeout(timeoutId);
+            // Check for 401 response with WWW-Authenticate header
+            if (jmapResponse.status === 401) {
+                const wwwAuth = jmapResponse.headers.get('WWW-Authenticate');
+                if (wwwAuth) {
+                    const parsed = parseWwwAuthenticate(wwwAuth);
+                    if (parsed?.issuer) {
+                        return {
+                            issuer: parsed.issuer,
+                            method: 'www-authenticate',
+                        };
+                    }
+                }
+            }
+        }
+        catch {
+            // WWW-Authenticate fallback also failed
+        }
+        // Fallback 2: Try common SSO subdomain patterns
+        const ssoResult = await tryCommonSsoPatterns(url.hostname, timeout);
+        if (ssoResult) {
+            return ssoResult;
+        }
+        // No OAuth info found
+        return null;
+    }
+    catch {
+        // URL parsing or other error
+        return null;
+    }
+}
+//# sourceMappingURL=oauth-discovery.js.map

package/build/discovery/oauth-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-discovery.js","sourceRoot":"","sources":["../../src/discovery/oauth-discovery.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAc;IAEd,2DAA2D;IAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mCAAmC;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAEjD,sCAAsC;IACtC,MAAM,UAAU,GAAG,kBAAkB,CAAC;IACtC,MAAM,MAAM,GAAwD,EAAE,CAAC;IAEvE,IAAI,KAAK,CAAC;IACV,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;QAC7B,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YAC3D,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,oBAAoB,CACjC,MAAc,EACd,OAAe;IAEf,iEAAiE;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAEzE,gCAAgC;IAChC,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAE/D,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,WAAW,OAAO,IAAI,UAAU,EAAE,CAAC;QACrD,MAAM,YAAY,GAAG,GAAG,SAAS,mCAAmC,CAAC;QAErE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;YAEhE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;gBACzC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACrC,oDAAoD;gBACpD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,OAAO;wBACL,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,MAAM,EAAE,iBAAiB;qBAC1B,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAe,EACf,OAAO,GAAG,KAAK;IAEf,IAAI,CAAC;QACH,8BAA8B;QAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;QAE9C,iDAAiD;QACjD,MAAM,WAAW,GAAG,GAAG,MAAM,uCAAuC,CAAC;QAErE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;YAEhE,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;gBAChD,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,IAAI,gBAAgB,CAAC,EAAE,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC;gBAE/C,kDAAkD;gBAClD,IACE,QAAQ,CAAC,qBAAqB;oBAC9B,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC;oBAC7C,QAAQ,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EACzC,CAAC;oBACD,OAAO;wBACL,MAAM,EAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;wBACzC,MAAM,EAAE,oBAAoB;qBAC7B,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;QAED,8EAA8E;QAC9E,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;YAEhE,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE;gBACxC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,sDAAsD;YACtD,IAAI,YAAY,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAChC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;gBAC7D,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;oBAC7C,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;wBACnB,OAAO;4BACL,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,MAAM,EAAE,kBAAkB;yBAC3B,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;QAED,gDAAgD;QAChD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpE,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,sBAAsB;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/build/discovery/oauth-discovery.test.d.ts

@@ -0,0 +1 @@
+export {};