mcp-twake-mail 0.1.0 → 1.0.0

package/build/discovery/oauth-discovery.test.js

@@ -0,0 +1,198 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { parseWwwAuthenticate, discoverOAuthFromResource, } from './oauth-discovery.js';
+describe('parseWwwAuthenticate', () => {
+    it('should parse valid Bearer header with issuer', () => {
+        const header = 'Bearer issuer="https://auth.example.com"';
+        const result = parseWwwAuthenticate(header);
+        expect(result).toEqual({
+            issuer: 'https://auth.example.com',
+        });
+    });
+    it('should parse Bearer header with multiple parameters', () => {
+        const header = 'Bearer realm="example", scope="openid email", issuer="https://auth.example.com"';
+        const result = parseWwwAuthenticate(header);
+        expect(result).toEqual({
+            realm: 'example',
+            scope: 'openid email',
+            issuer: 'https://auth.example.com',
+        });
+    });
+    it('should be case-insensitive for Bearer scheme', () => {
+        const header = 'bearer issuer="https://auth.example.com"';
+        const result = parseWwwAuthenticate(header);
+        expect(result).toEqual({
+            issuer: 'https://auth.example.com',
+        });
+    });
+    it('should return null for non-Bearer header', () => {
+        const header = 'Basic realm="example"';
+        const result = parseWwwAuthenticate(header);
+        expect(result).toBeNull();
+    });
+    it('should return null for malformed header without parameters', () => {
+        const header = 'Bearer';
+        const result = parseWwwAuthenticate(header);
+        expect(result).toBeNull();
+    });
+    it('should ignore unknown parameters', () => {
+        const header = 'Bearer issuer="https://auth.example.com", unknown="value"';
+        const result = parseWwwAuthenticate(header);
+        expect(result).toEqual({
+            issuer: 'https://auth.example.com',
+        });
+    });
+});
+describe('discoverOAuthFromResource', () => {
+    const mockFetch = vi.fn();
+    beforeEach(() => {
+        global.fetch = mockFetch;
+        vi.clearAllMocks();
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    it('should discover issuer from protected-resource metadata', async () => {
+        mockFetch.mockResolvedValueOnce({
+            ok: true,
+            json: async () => ({
+                authorization_servers: ['https://auth.example.com'],
+            }),
+        });
+        const result = await discoverOAuthFromResource('https://jmap.example.com/api');
+        expect(result).toEqual({
+            issuer: 'https://auth.example.com',
+            method: 'protected-resource',
+        });
+        expect(mockFetch).toHaveBeenCalledWith('https://jmap.example.com/.well-known/oauth-protected-resource', expect.objectContaining({ signal: expect.any(AbortSignal) }));
+    });
+    it('should fallback to WWW-Authenticate on 401 response', async () => {
+        // First call: protected-resource fails
+        mockFetch.mockResolvedValueOnce({
+            ok: false,
+            status: 404,
+        });
+        // Second call: JMAP URL returns 401 with WWW-Authenticate
+        mockFetch.mockResolvedValueOnce({
+            ok: false,
+            status: 401,
+            headers: {
+                get: (name) => {
+                    if (name === 'WWW-Authenticate') {
+                        return 'Bearer issuer="https://auth.example.com"';
+                    }
+                    return null;
+                },
+            },
+        });
+        const result = await discoverOAuthFromResource('https://jmap.example.com/api');
+        expect(result).toEqual({
+            issuer: 'https://auth.example.com',
+            method: 'www-authenticate',
+        });
+        expect(mockFetch).toHaveBeenCalledTimes(2);
+    });
+    it('should return null when no OAuth info available', async () => {
+        // First call: protected-resource fails
+        mockFetch.mockResolvedValueOnce({
+            ok: false,
+            status: 404,
+        });
+        // Second call: JMAP URL returns 200 (no auth required)
+        mockFetch.mockResolvedValueOnce({
+            ok: true,
+            status: 200,
+        });
+        const result = await discoverOAuthFromResource('https://jmap.example.com/api');
+        expect(result).toBeNull();
+    });
+    it('should return null when WWW-Authenticate has no issuer', async () => {
+        // First call: protected-resource fails
+        mockFetch.mockResolvedValueOnce({
+            ok: false,
+            status: 404,
+        });
+        // Second call: JMAP URL returns 401 with WWW-Authenticate but no issuer
+        mockFetch.mockResolvedValueOnce({
+            ok: false,
+            status: 401,
+            headers: {
+                get: (name) => {
+                    if (name === 'WWW-Authenticate') {
+                        return 'Bearer realm="example"';
+                    }
+                    return null;
+                },
+            },
+        });
+        const result = await discoverOAuthFromResource('https://jmap.example.com/api');
+        expect(result).toBeNull();
+    });
+    it('should handle network errors gracefully', async () => {
+        mockFetch.mockRejectedValue(new Error('Network error'));
+        const result = await discoverOAuthFromResource('https://jmap.example.com/api');
+        expect(result).toBeNull();
+    });
+    it('should handle invalid URL gracefully', async () => {
+        const result = await discoverOAuthFromResource('not-a-url');
+        expect(result).toBeNull();
+        expect(mockFetch).not.toHaveBeenCalled();
+    });
+    it('should respect custom timeout', async () => {
+        const abortError = new Error('Aborted');
+        abortError.name = 'AbortError';
+        mockFetch.mockRejectedValue(abortError);
+        const result = await discoverOAuthFromResource('https://jmap.example.com/api', 100);
+        expect(result).toBeNull();
+    });
+    it('should handle protected-resource with empty authorization_servers', async () => {
+        mockFetch.mockResolvedValueOnce({
+            ok: true,
+            json: async () => ({
+                authorization_servers: [],
+            }),
+        });
+        // Second call: fallback to WWW-Authenticate
+        mockFetch.mockResolvedValueOnce({
+            ok: false,
+            status: 401,
+            headers: {
+                get: (name) => {
+                    if (name === 'WWW-Authenticate') {
+                        return 'Bearer issuer="https://auth.example.com"';
+                    }
+                    return null;
+                },
+            },
+        });
+        const result = await discoverOAuthFromResource('https://jmap.example.com/api');
+        expect(result).toEqual({
+            issuer: 'https://auth.example.com',
+            method: 'www-authenticate',
+        });
+    });
+    it('should handle protected-resource with missing authorization_servers', async () => {
+        mockFetch.mockResolvedValueOnce({
+            ok: true,
+            json: async () => ({}),
+        });
+        // Second call: fallback to WWW-Authenticate
+        mockFetch.mockResolvedValueOnce({
+            ok: false,
+            status: 401,
+            headers: {
+                get: (name) => {
+                    if (name === 'WWW-Authenticate') {
+                        return 'Bearer issuer="https://auth.example.com"';
+                    }
+                    return null;
+                },
+            },
+        });
+        const result = await discoverOAuthFromResource('https://jmap.example.com/api');
+        expect(result).toEqual({
+            issuer: 'https://auth.example.com',
+            method: 'www-authenticate',
+        });
+    });
+});
+//# sourceMappingURL=oauth-discovery.test.js.map

package/build/discovery/oauth-discovery.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-discovery.test.js","sourceRoot":"","sources":["../../src/discovery/oauth-discovery.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EACL,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAE9B,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,MAAM,GAAG,0CAA0C,CAAC;QAC1D,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAE5C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,0BAA0B;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GACV,iFAAiF,CAAC;QACpF,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAE5C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,0BAA0B;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,MAAM,GAAG,0CAA0C,CAAC;QAC1D,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAE5C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,0BAA0B;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,uBAAuB,CAAC;QACvC,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAE5C,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAAG,QAAQ,CAAC;QACxB,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAE5C,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GACV,2DAA2D,CAAC;QAC9D,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAE5C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,0BAA0B;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAE1B,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;QACzB,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,SAAS,CAAC,qBAAqB,CAAC;YAC9B,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBACjB,qBAAqB,EAAE,CAAC,0BAA0B,CAAC;aACpD,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAC5C,8BAA8B,CAC/B,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,0BAA0B;YAClC,MAAM,EAAE,oBAAoB;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACpC,+DAA+D,EAC/D,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAC7D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,uCAAuC;QACvC,SAAS,CAAC,qBAAqB,CAAC;YAC9B,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;QAEH,0DAA0D;QAC1D,SAAS,CAAC,qBAAqB,CAAC;YAC9B,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE;oBACpB,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;wBAChC,OAAO,0CAA0C,CAAC;oBACpD,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;aACF;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAC5C,8BAA8B,CAC/B,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,0BAA0B;YAClC,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,uCAAuC;QACvC,SAAS,CAAC,qBAAqB,CAAC;YAC9B,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;QAEH,uDAAuD;QACvD,SAAS,CAAC,qBAAqB,CAAC;YAC9B,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAC5C,8BAA8B,CAC/B,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,uCAAuC;QACvC,SAAS,CAAC,qBAAqB,CAAC;YAC9B,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;QAEH,wEAAwE;QACxE,SAAS,CAAC,qBAAqB,CAAC;YAC9B,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE;oBACpB,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;wBAChC,OAAO,wBAAwB,CAAC;oBAClC,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;aACF;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAC5C,8BAA8B,CAC/B,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,SAAS,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;QAExD,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAC5C,8BAA8B,CAC/B,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;QAE5D,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;QACxC,UAAU,CAAC,IAAI,GAAG,YAAY,CAAC;QAC/B,SAAS,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAExC,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAC5C,8BAA8B,EAC9B,GAAG,CACJ,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,SAAS,CAAC,qBAAqB,CAAC;YAC9B,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBACjB,qBAAqB,EAAE,EAAE;aAC1B,CAAC;SACH,CAAC,CAAC;QAEH,4CAA4C;QAC5C,SAAS,CAAC,qBAAqB,CAAC;YAC9B,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE;oBACpB,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;wBAChC,OAAO,0CAA0C,CAAC;oBACpD,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;aACF;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAC5C,8BAA8B,CAC/B,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,0BAA0B;YAClC,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,SAAS,CAAC,qBAAqB,CAAC;YAC9B,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;SACvB,CAAC,CAAC;QAEH,4CAA4C;QAC5C,SAAS,CAAC,qBAAqB,CAAC;YAC9B,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE;oBACpB,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;wBAChC,OAAO,0CAA0C,CAAC;oBACpD,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;aACF;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAC5C,8BAA8B,CAC/B,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,0BAA0B;YAClC,MAAM,EAAE,kBAAkB;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/discovery/orchestrator.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Discovery orchestrator - chains DNS SRV, well-known, and OAuth discovery
+ * Provides high-level API to discover JMAP and OIDC settings from email address
+ */
+import { JmapDiscoveryResult, OidcDiscoveryResult } from './types.js';
+export interface FullDiscoveryResult {
+    jmap: JmapDiscoveryResult;
+    oidc?: OidcDiscoveryResult;
+    email: string;
+    domain: string;
+}
+/**
+ * Extract domain from email address.
+ * @throws Error if email format invalid
+ */
+export declare function extractDomain(email: string): string;
+/**
+ * Discover JMAP and OIDC settings from an email address.
+ *
+ * Discovery stages:
+ * 1. Extract domain from email
+ * 2. Try DNS SRV lookup for _jmap._tcp.{domain}
+ * 3. If SRV found, construct URL and verify it works
+ * 4. If SRV fails, try .well-known/jmap on domain
+ * 5. If JMAP found, attempt OAuth discovery on that URL
+ *
+ * @param email User's email address (e.g., "user@example.com")
+ * @returns Full discovery result with JMAP and optional OIDC settings
+ * @throws DiscoveryError if JMAP server cannot be discovered
+ */
+export declare function discoverFromEmail(email: string): Promise<FullDiscoveryResult>;

package/build/discovery/orchestrator.js

@@ -0,0 +1,87 @@
+/**
+ * Discovery orchestrator - chains DNS SRV, well-known, and OAuth discovery
+ * Provides high-level API to discover JMAP and OIDC settings from email address
+ */
+import { resolveSrvRecord } from './dns-srv.js';
+import { fetchWellKnownJmap, verifyJmapUrl } from './well-known.js';
+import { discoverOAuthFromResource } from './oauth-discovery.js';
+import { DiscoveryError, } from './types.js';
+/**
+ * Extract domain from email address.
+ * @throws Error if email format invalid
+ */
+export function extractDomain(email) {
+    // Split on '@' and take second part
+    const parts = email.split('@');
+    if (parts.length !== 2) {
+        throw new Error('Invalid email format');
+    }
+    const domain = parts[1];
+    // Validate domain has at least one '.'
+    if (!domain.includes('.')) {
+        throw new Error('Invalid email format');
+    }
+    return domain;
+}
+/**
+ * Discover JMAP and OIDC settings from an email address.
+ *
+ * Discovery stages:
+ * 1. Extract domain from email
+ * 2. Try DNS SRV lookup for _jmap._tcp.{domain}
+ * 3. If SRV found, construct URL and verify it works
+ * 4. If SRV fails, try .well-known/jmap on domain
+ * 5. If JMAP found, attempt OAuth discovery on that URL
+ *
+ * @param email User's email address (e.g., "user@example.com")
+ * @returns Full discovery result with JMAP and optional OIDC settings
+ * @throws DiscoveryError if JMAP server cannot be discovered
+ */
+export async function discoverFromEmail(email) {
+    // Extract domain from email
+    const domain = extractDomain(email);
+    // Stage 1 - DNS SRV discovery
+    const srv = await resolveSrvRecord(domain);
+    if (srv) {
+        // Construct URL from SRV record
+        const url = srv.port === 443
+            ? `https://${srv.hostname}/.well-known/jmap`
+            : `https://${srv.hostname}:${srv.port}/.well-known/jmap`;
+        // Verify the URL works
+        const verified = await verifyJmapUrl(url);
+        if (verified) {
+            const jmap = {
+                sessionUrl: verified,
+                method: 'dns-srv',
+            };
+            // Stage 4 - OAuth discovery
+            const oidc = await discoverOAuthFromResource(verified);
+            return {
+                jmap,
+                oidc: oidc ?? undefined,
+                email,
+                domain,
+            };
+        }
+    }
+    // Stage 2 - Well-known fallback
+    const wellKnown = await fetchWellKnownJmap(domain);
+    if (wellKnown) {
+        const jmap = {
+            sessionUrl: wellKnown,
+            method: 'well-known-direct',
+        };
+        // Stage 4 - OAuth discovery
+        const oidc = await discoverOAuthFromResource(wellKnown);
+        return {
+            jmap,
+            oidc: oidc ?? undefined,
+            email,
+            domain,
+        };
+    }
+    // Stage 3 - Failure
+    throw new DiscoveryError(`Could not discover JMAP server for domain "${domain}". ` +
+        'The domain does not have a JMAP SRV record or .well-known/jmap endpoint.', domain, 'well-known');
+}
+//# sourceMappingURL=orchestrator.js.map

package/build/discovery/orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../../src/discovery/orchestrator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAGL,cAAc,GACf,MAAM,YAAY,CAAC;AASpB;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,oCAAoC;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAExB,uCAAuC;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAa;IAEb,4BAA4B;IAC5B,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAEpC,8BAA8B;IAC9B,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,GAAG,EAAE,CAAC;QACR,gCAAgC;QAChC,MAAM,GAAG,GACP,GAAG,CAAC,IAAI,KAAK,GAAG;YACd,CAAC,CAAC,WAAW,GAAG,CAAC,QAAQ,mBAAmB;YAC5C,CAAC,CAAC,WAAW,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,mBAAmB,CAAC;QAE7D,uBAAuB;QACvB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,GAAwB;gBAChC,UAAU,EAAE,QAAQ;gBACpB,MAAM,EAAE,SAAS;aAClB,CAAC;YAEF,4BAA4B;YAC5B,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,CAAC;YAEvD,OAAO;gBACL,IAAI;gBACJ,IAAI,EAAE,IAAI,IAAI,SAAS;gBACvB,KAAK;gBACL,MAAM;aACP,CAAC;QACJ,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,GAAwB;YAChC,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE,mBAAmB;SAC5B,CAAC;QAEF,4BAA4B;QAC5B,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,SAAS,CAAC,CAAC;QAExD,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,IAAI,IAAI,SAAS;YACvB,KAAK;YACL,MAAM;SACP,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,MAAM,IAAI,cAAc,CACtB,8CAA8C,MAAM,KAAK;QACvD,0EAA0E,EAC5E,MAAM,EACN,YAAY,CACb,CAAC;AACJ,CAAC"}

package/build/discovery/orchestrator.test.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Tests for discovery orchestrator
+ */
+export {};

package/build/discovery/orchestrator.test.js

@@ -0,0 +1,242 @@
+/**
+ * Tests for discovery orchestrator
+ */
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { discoverFromEmail, extractDomain } from './orchestrator.js';
+import { DiscoveryError } from './types.js';
+// Mock the discovery modules
+vi.mock('./dns-srv.js');
+vi.mock('./well-known.js');
+vi.mock('./oauth-discovery.js');
+import { resolveSrvRecord } from './dns-srv.js';
+import { fetchWellKnownJmap, verifyJmapUrl } from './well-known.js';
+import { discoverOAuthFromResource } from './oauth-discovery.js';
+describe('extractDomain', () => {
+    it('extracts domain from valid email', () => {
+        expect(extractDomain('user@example.com')).toBe('example.com');
+    });
+    it('extracts domain from email with subdomain', () => {
+        expect(extractDomain('user@mail.example.com')).toBe('mail.example.com');
+    });
+    it('throws on email without @', () => {
+        expect(() => extractDomain('userexample.com')).toThrow('Invalid email format');
+    });
+    it('throws on domain without dot', () => {
+        expect(() => extractDomain('user@localhost')).toThrow('Invalid email format');
+    });
+    it('throws on multiple @ symbols', () => {
+        expect(() => extractDomain('user@test@example.com')).toThrow('Invalid email format');
+    });
+    it('throws on empty domain', () => {
+        expect(() => extractDomain('user@')).toThrow('Invalid email format');
+    });
+});
+describe('discoverFromEmail', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+    });
+    describe('DNS SRV success path', () => {
+        it('discovers via DNS SRV with standard port', async () => {
+            // Mock DNS SRV success
+            vi.mocked(resolveSrvRecord).mockResolvedValue({
+                hostname: 'jmap.example.com',
+                port: 443,
+            });
+            // Mock URL verification
+            vi.mocked(verifyJmapUrl).mockResolvedValue('https://jmap.example.com/.well-known/jmap');
+            // Mock OAuth discovery
+            vi.mocked(discoverOAuthFromResource).mockResolvedValue({
+                issuer: 'https://auth.example.com',
+                method: 'protected-resource',
+            });
+            const result = await discoverFromEmail('user@example.com');
+            expect(result).toEqual({
+                jmap: {
+                    sessionUrl: 'https://jmap.example.com/.well-known/jmap',
+                    method: 'dns-srv',
+                },
+                oidc: {
+                    issuer: 'https://auth.example.com',
+                    method: 'protected-resource',
+                },
+                email: 'user@example.com',
+                domain: 'example.com',
+            });
+            // Verify correct URL was constructed
+            expect(verifyJmapUrl).toHaveBeenCalledWith('https://jmap.example.com/.well-known/jmap');
+        });
+        it('discovers via DNS SRV with non-standard port', async () => {
+            // Mock DNS SRV success with non-standard port
+            vi.mocked(resolveSrvRecord).mockResolvedValue({
+                hostname: 'jmap.example.com',
+                port: 8443,
+            });
+            // Mock URL verification
+            vi.mocked(verifyJmapUrl).mockResolvedValue('https://jmap.example.com:8443/.well-known/jmap');
+            // Mock OAuth discovery (no OAuth info)
+            vi.mocked(discoverOAuthFromResource).mockResolvedValue(null);
+            const result = await discoverFromEmail('user@example.com');
+            expect(result).toEqual({
+                jmap: {
+                    sessionUrl: 'https://jmap.example.com:8443/.well-known/jmap',
+                    method: 'dns-srv',
+                },
+                oidc: undefined,
+                email: 'user@example.com',
+                domain: 'example.com',
+            });
+            // Verify URL includes non-standard port
+            expect(verifyJmapUrl).toHaveBeenCalledWith('https://jmap.example.com:8443/.well-known/jmap');
+        });
+        it('discovers without OAuth info', async () => {
+            // Mock DNS SRV success
+            vi.mocked(resolveSrvRecord).mockResolvedValue({
+                hostname: 'jmap.example.com',
+                port: 443,
+            });
+            // Mock URL verification
+            vi.mocked(verifyJmapUrl).mockResolvedValue('https://jmap.example.com/.well-known/jmap');
+            // Mock OAuth discovery returning null
+            vi.mocked(discoverOAuthFromResource).mockResolvedValue(null);
+            const result = await discoverFromEmail('user@example.com');
+            expect(result.oidc).toBeUndefined();
+            expect(result.jmap.sessionUrl).toBe('https://jmap.example.com/.well-known/jmap');
+        });
+    });
+    describe('Well-known fallback path', () => {
+        it('falls back to well-known when DNS SRV returns null', async () => {
+            // Mock DNS SRV failure
+            vi.mocked(resolveSrvRecord).mockResolvedValue(null);
+            // Mock well-known success
+            vi.mocked(fetchWellKnownJmap).mockResolvedValue('https://example.com/jmap/session');
+            // Mock OAuth discovery
+            vi.mocked(discoverOAuthFromResource).mockResolvedValue({
+                issuer: 'https://auth.example.com',
+                method: 'www-authenticate',
+            });
+            const result = await discoverFromEmail('user@example.com');
+            expect(result).toEqual({
+                jmap: {
+                    sessionUrl: 'https://example.com/jmap/session',
+                    method: 'well-known-direct',
+                },
+                oidc: {
+                    issuer: 'https://auth.example.com',
+                    method: 'www-authenticate',
+                },
+                email: 'user@example.com',
+                domain: 'example.com',
+            });
+            // Verify DNS SRV was tried first
+            expect(resolveSrvRecord).toHaveBeenCalledWith('example.com');
+            // Verify well-known was called
+            expect(fetchWellKnownJmap).toHaveBeenCalledWith('example.com');
+        });
+        it('falls back to well-known when DNS SRV verification fails', async () => {
+            // Mock DNS SRV success but verification failure
+            vi.mocked(resolveSrvRecord).mockResolvedValue({
+                hostname: 'jmap.example.com',
+                port: 443,
+            });
+            vi.mocked(verifyJmapUrl).mockResolvedValue(null);
+            // Mock well-known success
+            vi.mocked(fetchWellKnownJmap).mockResolvedValue('https://example.com/.well-known/jmap');
+            // Mock no OAuth
+            vi.mocked(discoverOAuthFromResource).mockResolvedValue(null);
+            const result = await discoverFromEmail('user@example.com');
+            expect(result.jmap.method).toBe('well-known-direct');
+            expect(result.jmap.sessionUrl).toBe('https://example.com/.well-known/jmap');
+            // Verify both were tried
+            expect(resolveSrvRecord).toHaveBeenCalled();
+            expect(fetchWellKnownJmap).toHaveBeenCalled();
+        });
+    });
+    describe('Complete failure path', () => {
+        it('throws DiscoveryError when all methods fail', async () => {
+            // Mock DNS SRV failure
+            vi.mocked(resolveSrvRecord).mockResolvedValue(null);
+            // Mock well-known failure
+            vi.mocked(fetchWellKnownJmap).mockResolvedValue(null);
+            await expect(discoverFromEmail('user@example.com')).rejects.toThrow(DiscoveryError);
+            await expect(discoverFromEmail('user@example.com')).rejects.toThrow('Could not discover JMAP server for domain "example.com"');
+        });
+        it('throws DiscoveryError with correct domain and stage', async () => {
+            // Mock all failures
+            vi.mocked(resolveSrvRecord).mockResolvedValue(null);
+            vi.mocked(fetchWellKnownJmap).mockResolvedValue(null);
+            try {
+                await discoverFromEmail('user@example.com');
+                expect.fail('Should have thrown DiscoveryError');
+            }
+            catch (error) {
+                expect(error).toBeInstanceOf(DiscoveryError);
+                if (error instanceof DiscoveryError) {
+                    expect(error.domain).toBe('example.com');
+                    expect(error.stage).toBe('well-known');
+                }
+            }
+        });
+        it('throws on invalid email format', async () => {
+            await expect(discoverFromEmail('not-an-email')).rejects.toThrow('Invalid email format');
+            // Verify no discovery methods were called
+            expect(resolveSrvRecord).not.toHaveBeenCalled();
+            expect(fetchWellKnownJmap).not.toHaveBeenCalled();
+        });
+    });
+    describe('OAuth discovery integration', () => {
+        it('includes OAuth info when discovered via protected-resource', async () => {
+            vi.mocked(resolveSrvRecord).mockResolvedValue({
+                hostname: 'jmap.example.com',
+                port: 443,
+            });
+            vi.mocked(verifyJmapUrl).mockResolvedValue('https://jmap.example.com/.well-known/jmap');
+            vi.mocked(discoverOAuthFromResource).mockResolvedValue({
+                issuer: 'https://auth.example.com',
+                clientId: 'optional-client-id',
+                method: 'protected-resource',
+            });
+            const result = await discoverFromEmail('user@example.com');
+            expect(result.oidc).toEqual({
+                issuer: 'https://auth.example.com',
+                clientId: 'optional-client-id',
+                method: 'protected-resource',
+            });
+        });
+        it('includes OAuth info when discovered via www-authenticate', async () => {
+            vi.mocked(resolveSrvRecord).mockResolvedValue(null);
+            vi.mocked(fetchWellKnownJmap).mockResolvedValue('https://example.com/.well-known/jmap');
+            vi.mocked(discoverOAuthFromResource).mockResolvedValue({
+                issuer: 'https://auth.example.com',
+                method: 'www-authenticate',
+            });
+            const result = await discoverFromEmail('user@example.com');
+            expect(result.oidc).toEqual({
+                issuer: 'https://auth.example.com',
+                method: 'www-authenticate',
+            });
+        });
+        it('handles OAuth discovery returning null gracefully', async () => {
+            vi.mocked(resolveSrvRecord).mockResolvedValue({
+                hostname: 'jmap.example.com',
+                port: 443,
+            });
+            vi.mocked(verifyJmapUrl).mockResolvedValue('https://jmap.example.com/.well-known/jmap');
+            vi.mocked(discoverOAuthFromResource).mockResolvedValue(null);
+            const result = await discoverFromEmail('user@example.com');
+            expect(result.oidc).toBeUndefined();
+            expect(result.jmap).toBeDefined();
+        });
+        it('calls OAuth discovery with correct JMAP URL', async () => {
+            const jmapUrl = 'https://jmap.example.com/.well-known/jmap';
+            vi.mocked(resolveSrvRecord).mockResolvedValue({
+                hostname: 'jmap.example.com',
+                port: 443,
+            });
+            vi.mocked(verifyJmapUrl).mockResolvedValue(jmapUrl);
+            vi.mocked(discoverOAuthFromResource).mockResolvedValue(null);
+            await discoverFromEmail('user@example.com');
+            expect(discoverOAuthFromResource).toHaveBeenCalledWith(jmapUrl);
+        });
+    });
+});
+//# sourceMappingURL=orchestrator.test.js.map

package/build/discovery/orchestrator.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.test.js","sourceRoot":"","sources":["../../src/discovery/orchestrator.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,6BAA6B;AAC7B,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AACxB,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;AAC3B,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AAEhC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAC1D,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,uBAAuB;YACvB,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,CAAC;gBAC5C,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YAEH,wBAAwB;YACxB,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,iBAAiB,CACxC,2CAA2C,CAC5C,CAAC;YAEF,uBAAuB;YACvB,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,iBAAiB,CAAC;gBACrD,MAAM,EAAE,0BAA0B;gBAClC,MAAM,EAAE,oBAAoB;aAC7B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACrB,IAAI,EAAE;oBACJ,UAAU,EAAE,2CAA2C;oBACvD,MAAM,EAAE,SAAS;iBAClB;gBACD,IAAI,EAAE;oBACJ,MAAM,EAAE,0BAA0B;oBAClC,MAAM,EAAE,oBAAoB;iBAC7B;gBACD,KAAK,EAAE,kBAAkB;gBACzB,MAAM,EAAE,aAAa;aACtB,CAAC,CAAC;YAEH,qCAAqC;YACrC,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACxC,2CAA2C,CAC5C,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,8CAA8C;YAC9C,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,CAAC;gBAC5C,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;YAEH,wBAAwB;YACxB,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,iBAAiB,CACxC,gDAAgD,CACjD,CAAC;YAEF,uCAAuC;YACvC,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAE7D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACrB,IAAI,EAAE;oBACJ,UAAU,EAAE,gDAAgD;oBAC5D,MAAM,EAAE,SAAS;iBAClB;gBACD,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,kBAAkB;gBACzB,MAAM,EAAE,aAAa;aACtB,CAAC,CAAC;YAEH,wCAAwC;YACxC,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACxC,gDAAgD,CACjD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,uBAAuB;YACvB,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,CAAC;gBAC5C,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YAEH,wBAAwB;YACxB,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,iBAAiB,CACxC,2CAA2C,CAC5C,CAAC;YAEF,sCAAsC;YACtC,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAE7D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CACjC,2CAA2C,CAC5C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,uBAAuB;YACvB,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAEpD,0BAA0B;YAC1B,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,iBAAiB,CAC7C,kCAAkC,CACnC,CAAC;YAEF,uBAAuB;YACvB,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,iBAAiB,CAAC;gBACrD,MAAM,EAAE,0BAA0B;gBAClC,MAAM,EAAE,kBAAkB;aAC3B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACrB,IAAI,EAAE;oBACJ,UAAU,EAAE,kCAAkC;oBAC9C,MAAM,EAAE,mBAAmB;iBAC5B;gBACD,IAAI,EAAE;oBACJ,MAAM,EAAE,0BAA0B;oBAClC,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,KAAK,EAAE,kBAAkB;gBACzB,MAAM,EAAE,aAAa;aACtB,CAAC,CAAC;YAEH,iCAAiC;YACjC,MAAM,CAAC,gBAAgB,CAAC,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;YAC7D,+BAA+B;YAC/B,MAAM,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,gDAAgD;YAChD,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,CAAC;gBAC5C,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAEjD,0BAA0B;YAC1B,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,iBAAiB,CAC7C,sCAAsC,CACvC,CAAC;YAEF,gBAAgB;YAChB,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAE7D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACrD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CACjC,sCAAsC,CACvC,CAAC;YAEF,yBAAyB;YACzB,MAAM,CAAC,gBAAgB,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC5C,MAAM,CAAC,kBAAkB,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,uBAAuB;YACvB,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAEpD,0BAA0B;YAC1B,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAEtD,MAAM,MAAM,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACjE,cAAc,CACf,CAAC;YAEF,MAAM,MAAM,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACjE,yDAAyD,CAC1D,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,oBAAoB;YACpB,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACpD,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAEtD,IAAI,CAAC;gBACH,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;gBAC7C,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;oBACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBACzC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,MAAM,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC7D,sBAAsB,CACvB,CAAC;YAEF,0CAA0C;YAC1C,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAChD,MAAM,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YAC1E,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,CAAC;gBAC5C,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,iBAAiB,CACxC,2CAA2C,CAC5C,CAAC;YACF,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,iBAAiB,CAAC;gBACrD,MAAM,EAAE,0BAA0B;gBAClC,QAAQ,EAAE,oBAAoB;gBAC9B,MAAM,EAAE,oBAAoB;aAC7B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;gBAC1B,MAAM,EAAE,0BAA0B;gBAClC,QAAQ,EAAE,oBAAoB;gBAC9B,MAAM,EAAE,oBAAoB;aAC7B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACpD,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,iBAAiB,CAC7C,sCAAsC,CACvC,CAAC;YACF,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,iBAAiB,CAAC;gBACrD,MAAM,EAAE,0BAA0B;gBAClC,MAAM,EAAE,kBAAkB;aAC3B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;gBAC1B,MAAM,EAAE,0BAA0B;gBAClC,MAAM,EAAE,kBAAkB;aAC3B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,CAAC;gBAC5C,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,iBAAiB,CACxC,2CAA2C,CAC5C,CAAC;YACF,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAE7D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;YAE3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,OAAO,GAAG,2CAA2C,CAAC;YAC5D,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,CAAC;gBAC5C,QAAQ,EAAE,kBAAkB;gBAC5B,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACpD,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAE7D,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;YAE5C,MAAM,CAAC,yBAAyB,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/discovery/types.d.ts

@@ -0,0 +1,18 @@
+/**
+ * JMAP server discovery result types
+ * Supports DNS SRV, .well-known/jmap, and manual configuration
+ */
+export interface JmapDiscoveryResult {
+    sessionUrl: string;
+    method: 'dns-srv' | 'well-known-direct' | 'manual';
+}
+export interface OidcDiscoveryResult {
+    issuer: string;
+    clientId?: string;
+    method: 'protected-resource' | 'www-authenticate' | 'well-known-oidc' | 'manual';
+}
+export declare class DiscoveryError extends Error {
+    readonly domain: string;
+    readonly stage: 'dns' | 'well-known' | 'verification';
+    constructor(message: string, domain: string, stage: 'dns' | 'well-known' | 'verification');
+}

package/build/discovery/types.js

@@ -0,0 +1,15 @@
+/**
+ * JMAP server discovery result types
+ * Supports DNS SRV, .well-known/jmap, and manual configuration
+ */
+export class DiscoveryError extends Error {
+    domain;
+    stage;
+    constructor(message, domain, stage) {
+        super(message);
+        this.domain = domain;
+        this.stage = stage;
+        this.name = 'DiscoveryError';
+    }
+}
+//# sourceMappingURL=types.js.map

package/build/discovery/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/discovery/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAGrB;IACA;IAHlB,YACE,OAAe,EACC,MAAc,EACd,KAA4C;QAE5D,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAQ;QACd,UAAK,GAAL,KAAK,CAAuC;QAG5D,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF"}