zele 0.3.16 → 0.3.17

package/src/generated/models/Account.ts

@@ -27,6 +27,8 @@ export type AggregateAccount = {
 export type AccountMinAggregateOutputType = {
   email: string | null
   appId: string | null
+  accountType: string | null
+  capabilities: string | null
   accountStatus: $Enums.AccountStatus | null
   tokens: string | null
   createdAt: Date | null
@@ -36,6 +38,8 @@ export type AccountMinAggregateOutputType = {
 export type AccountMaxAggregateOutputType = {
   email: string | null
   appId: string | null
+  accountType: string | null
+  capabilities: string | null
   accountStatus: $Enums.AccountStatus | null
   tokens: string | null
   createdAt: Date | null
@@ -45,6 +49,8 @@ export type AccountMaxAggregateOutputType = {
 export type AccountCountAggregateOutputType = {
   email: number
   appId: number
+  accountType: number
+  capabilities: number
   accountStatus: number
   tokens: number
   createdAt: number
@@ -56,6 +62,8 @@ export type AccountCountAggregateOutputType = {
 export type AccountMinAggregateInputType = {
   email?: true
   appId?: true
+  accountType?: true
+  capabilities?: true
   accountStatus?: true
   tokens?: true
   createdAt?: true
@@ -65,6 +73,8 @@ export type AccountMinAggregateInputType = {
 export type AccountMaxAggregateInputType = {
   email?: true
   appId?: true
+  accountType?: true
+  capabilities?: true
   accountStatus?: true
   tokens?: true
   createdAt?: true
@@ -74,6 +84,8 @@ export type AccountMaxAggregateInputType = {
 export type AccountCountAggregateInputType = {
   email?: true
   appId?: true
+  accountType?: true
+  capabilities?: true
   accountStatus?: true
   tokens?: true
   createdAt?: true
@@ -156,6 +168,8 @@ export type AccountGroupByArgs<ExtArgs extends runtime.Types.Extensions.Internal
 export type AccountGroupByOutputType = {
   email: string
   appId: string
+  accountType: string
+  capabilities: string
   accountStatus: $Enums.AccountStatus
   tokens: string
   createdAt: Date
@@ -186,6 +200,8 @@ export type AccountWhereInput = {
   NOT?: Prisma.AccountWhereInput | Prisma.AccountWhereInput[]
   email?: Prisma.StringFilter<"Account"> | string
   appId?: Prisma.StringFilter<"Account"> | string
+  accountType?: Prisma.StringFilter<"Account"> | string
+  capabilities?: Prisma.StringFilter<"Account"> | string
   accountStatus?: Prisma.EnumAccountStatusFilter<"Account"> | $Enums.AccountStatus
   tokens?: Prisma.StringFilter<"Account"> | string
   createdAt?: Prisma.DateTimeFilter<"Account"> | Date | string
@@ -200,6 +216,8 @@ export type AccountWhereInput = {
 export type AccountOrderByWithRelationInput = {
   email?: Prisma.SortOrder
   appId?: Prisma.SortOrder
+  accountType?: Prisma.SortOrder
+  capabilities?: Prisma.SortOrder
   accountStatus?: Prisma.SortOrder
   tokens?: Prisma.SortOrder
   createdAt?: Prisma.SortOrder
@@ -218,6 +236,8 @@ export type AccountWhereUniqueInput = Prisma.AtLeast<{
   NOT?: Prisma.AccountWhereInput | Prisma.AccountWhereInput[]
   email?: Prisma.StringFilter<"Account"> | string
   appId?: Prisma.StringFilter<"Account"> | string
+  accountType?: Prisma.StringFilter<"Account"> | string
+  capabilities?: Prisma.StringFilter<"Account"> | string
   accountStatus?: Prisma.EnumAccountStatusFilter<"Account"> | $Enums.AccountStatus
   tokens?: Prisma.StringFilter<"Account"> | string
   createdAt?: Prisma.DateTimeFilter<"Account"> | Date | string
@@ -232,6 +252,8 @@ export type AccountWhereUniqueInput = Prisma.AtLeast<{
 export type AccountOrderByWithAggregationInput = {
   email?: Prisma.SortOrder
   appId?: Prisma.SortOrder
+  accountType?: Prisma.SortOrder
+  capabilities?: Prisma.SortOrder
   accountStatus?: Prisma.SortOrder
   tokens?: Prisma.SortOrder
   createdAt?: Prisma.SortOrder
@@ -247,6 +269,8 @@ export type AccountScalarWhereWithAggregatesInput = {
   NOT?: Prisma.AccountScalarWhereWithAggregatesInput | Prisma.AccountScalarWhereWithAggregatesInput[]
   email?: Prisma.StringWithAggregatesFilter<"Account"> | string
   appId?: Prisma.StringWithAggregatesFilter<"Account"> | string
+  accountType?: Prisma.StringWithAggregatesFilter<"Account"> | string
+  capabilities?: Prisma.StringWithAggregatesFilter<"Account"> | string
   accountStatus?: Prisma.EnumAccountStatusWithAggregatesFilter<"Account"> | $Enums.AccountStatus
   tokens?: Prisma.StringWithAggregatesFilter<"Account"> | string
   createdAt?: Prisma.DateTimeWithAggregatesFilter<"Account"> | Date | string
@@ -256,6 +280,8 @@ export type AccountScalarWhereWithAggregatesInput = {
 export type AccountCreateInput = {
   email: string
   appId: string
+  accountType?: string
+  capabilities?: string
   accountStatus: $Enums.AccountStatus
   tokens: string
   createdAt: Date | string
@@ -270,6 +296,8 @@ export type AccountCreateInput = {
 export type AccountUncheckedCreateInput = {
   email: string
   appId: string
+  accountType?: string
+  capabilities?: string
   accountStatus: $Enums.AccountStatus
   tokens: string
   createdAt: Date | string
@@ -284,6 +312,8 @@ export type AccountUncheckedCreateInput = {
 export type AccountUpdateInput = {
   email?: Prisma.StringFieldUpdateOperationsInput | string
   appId?: Prisma.StringFieldUpdateOperationsInput | string
+  accountType?: Prisma.StringFieldUpdateOperationsInput | string
+  capabilities?: Prisma.StringFieldUpdateOperationsInput | string
   accountStatus?: Prisma.EnumAccountStatusFieldUpdateOperationsInput | $Enums.AccountStatus
   tokens?: Prisma.StringFieldUpdateOperationsInput | string
   createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string
@@ -298,6 +328,8 @@ export type AccountUpdateInput = {
 export type AccountUncheckedUpdateInput = {
   email?: Prisma.StringFieldUpdateOperationsInput | string
   appId?: Prisma.StringFieldUpdateOperationsInput | string
+  accountType?: Prisma.StringFieldUpdateOperationsInput | string
+  capabilities?: Prisma.StringFieldUpdateOperationsInput | string
   accountStatus?: Prisma.EnumAccountStatusFieldUpdateOperationsInput | $Enums.AccountStatus
   tokens?: Prisma.StringFieldUpdateOperationsInput | string
   createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string
@@ -312,6 +344,8 @@ export type AccountUncheckedUpdateInput = {
 export type AccountCreateManyInput = {
   email: string
   appId: string
+  accountType?: string
+  capabilities?: string
   accountStatus: $Enums.AccountStatus
   tokens: string
   createdAt: Date | string
@@ -321,6 +355,8 @@ export type AccountCreateManyInput = {
 export type AccountUpdateManyMutationInput = {
   email?: Prisma.StringFieldUpdateOperationsInput | string
   appId?: Prisma.StringFieldUpdateOperationsInput | string
+  accountType?: Prisma.StringFieldUpdateOperationsInput | string
+  capabilities?: Prisma.StringFieldUpdateOperationsInput | string
   accountStatus?: Prisma.EnumAccountStatusFieldUpdateOperationsInput | $Enums.AccountStatus
   tokens?: Prisma.StringFieldUpdateOperationsInput | string
   createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string
@@ -330,6 +366,8 @@ export type AccountUpdateManyMutationInput = {
 export type AccountUncheckedUpdateManyInput = {
   email?: Prisma.StringFieldUpdateOperationsInput | string
   appId?: Prisma.StringFieldUpdateOperationsInput | string
+  accountType?: Prisma.StringFieldUpdateOperationsInput | string
+  capabilities?: Prisma.StringFieldUpdateOperationsInput | string
   accountStatus?: Prisma.EnumAccountStatusFieldUpdateOperationsInput | $Enums.AccountStatus
   tokens?: Prisma.StringFieldUpdateOperationsInput | string
   createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string
@@ -344,6 +382,8 @@ export type AccountEmailAppIdCompoundUniqueInput = {
 export type AccountCountOrderByAggregateInput = {
   email?: Prisma.SortOrder
   appId?: Prisma.SortOrder
+  accountType?: Prisma.SortOrder
+  capabilities?: Prisma.SortOrder
   accountStatus?: Prisma.SortOrder
   tokens?: Prisma.SortOrder
   createdAt?: Prisma.SortOrder
@@ -353,6 +393,8 @@ export type AccountCountOrderByAggregateInput = {
 export type AccountMaxOrderByAggregateInput = {
   email?: Prisma.SortOrder
   appId?: Prisma.SortOrder
+  accountType?: Prisma.SortOrder
+  capabilities?: Prisma.SortOrder
   accountStatus?: Prisma.SortOrder
   tokens?: Prisma.SortOrder
   createdAt?: Prisma.SortOrder
@@ -362,6 +404,8 @@ export type AccountMaxOrderByAggregateInput = {
 export type AccountMinOrderByAggregateInput = {
   email?: Prisma.SortOrder
   appId?: Prisma.SortOrder
+  accountType?: Prisma.SortOrder
+  capabilities?: Prisma.SortOrder
   accountStatus?: Prisma.SortOrder
   tokens?: Prisma.SortOrder
   createdAt?: Prisma.SortOrder
@@ -458,6 +502,8 @@ export type AccountUpdateOneRequiredWithoutSyncStatesNestedInput = {
 export type AccountCreateWithoutThreadsInput = {
   email: string
   appId: string
+  accountType?: string
+  capabilities?: string
   accountStatus: $Enums.AccountStatus
   tokens: string
   createdAt: Date | string
@@ -471,6 +517,8 @@ export type AccountCreateWithoutThreadsInput = {
 export type AccountUncheckedCreateWithoutThreadsInput = {
   email: string
   appId: string
+  accountType?: string
+  capabilities?: string
   accountStatus: $Enums.AccountStatus
   tokens: string
   createdAt: Date | string
@@ -500,6 +548,8 @@ export type AccountUpdateToOneWithWhereWithoutThreadsInput = {
 export type AccountUpdateWithoutThreadsInput = {
   email?: Prisma.StringFieldUpdateOperationsInput | string
   appId?: Prisma.StringFieldUpdateOperationsInput | string
+  accountType?: Prisma.StringFieldUpdateOperationsInput | string
+  capabilities?: Prisma.StringFieldUpdateOperationsInput | string
   accountStatus?: Prisma.EnumAccountStatusFieldUpdateOperationsInput | $Enums.AccountStatus
   tokens?: Prisma.StringFieldUpdateOperationsInput | string
   createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string
@@ -513,6 +563,8 @@ export type AccountUpdateWithoutThreadsInput = {
 export type AccountUncheckedUpdateWithoutThreadsInput = {
   email?: Prisma.StringFieldUpdateOperationsInput | string
   appId?: Prisma.StringFieldUpdateOperationsInput | string
+  accountType?: Prisma.StringFieldUpdateOperationsInput | string
+  capabilities?: Prisma.StringFieldUpdateOperationsInput | string
   accountStatus?: Prisma.EnumAccountStatusFieldUpdateOperationsInput | $Enums.AccountStatus
   tokens?: Prisma.StringFieldUpdateOperationsInput | string
   createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string
@@ -526,6 +578,8 @@ export type AccountUncheckedUpdateWithoutThreadsInput = {
 export type AccountCreateWithoutLabelsInput = {
   email: string
   appId: string
+  accountType?: string
+  capabilities?: string
   accountStatus: $Enums.AccountStatus
   tokens: string
   createdAt: Date | string
@@ -539,6 +593,8 @@ export type AccountCreateWithoutLabelsInput = {
 export type AccountUncheckedCreateWithoutLabelsInput = {
   email: string
   appId: string
+  accountType?: string
+  capabilities?: string
   accountStatus: $Enums.AccountStatus
   tokens: string
   createdAt: Date | string
@@ -568,6 +624,8 @@ export type AccountUpdateToOneWithWhereWithoutLabelsInput = {
 export type AccountUpdateWithoutLabelsInput = {
   email?: Prisma.StringFieldUpdateOperationsInput | string
   appId?: Prisma.StringFieldUpdateOperationsInput | string
+  accountType?: Prisma.StringFieldUpdateOperationsInput | string
+  capabilities?: Prisma.StringFieldUpdateOperationsInput | string
   accountStatus?: Prisma.EnumAccountStatusFieldUpdateOperationsInput | $Enums.AccountStatus
   tokens?: Prisma.StringFieldUpdateOperationsInput | string
   createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string
@@ -581,6 +639,8 @@ export type AccountUpdateWithoutLabelsInput = {
 export type AccountUncheckedUpdateWithoutLabelsInput = {
   email?: Prisma.StringFieldUpdateOperationsInput | string
   appId?: Prisma.StringFieldUpdateOperationsInput | string
+  accountType?: Prisma.StringFieldUpdateOperationsInput | string
+  capabilities?: Prisma.StringFieldUpdateOperationsInput | string
   accountStatus?: Prisma.EnumAccountStatusFieldUpdateOperationsInput | $Enums.AccountStatus
   tokens?: Prisma.StringFieldUpdateOperationsInput | string
   createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string
@@ -594,6 +654,8 @@ export type AccountUncheckedUpdateWithoutLabelsInput = {
 export type AccountCreateWithoutProfilesInput = {
   email: string
   appId: string
+  accountType?: string
+  capabilities?: string
   accountStatus: $Enums.AccountStatus
   tokens: string
   createdAt: Date | string
@@ -607,6 +669,8 @@ export type AccountCreateWithoutProfilesInput = {
 export type AccountUncheckedCreateWithoutProfilesInput = {
   email: string
   appId: string
+  accountType?: string
+  capabilities?: string
   accountStatus: $Enums.AccountStatus
   tokens: string
   createdAt: Date | string
@@ -636,6 +700,8 @@ export type AccountUpdateToOneWithWhereWithoutProfilesInput = {
 export type AccountUpdateWithoutProfilesInput = {
   email?: Prisma.StringFieldUpdateOperationsInput | string
   appId?: Prisma.StringFieldUpdateOperationsInput | string
+  accountType?: Prisma.StringFieldUpdateOperationsInput | string
+  capabilities?: Prisma.StringFieldUpdateOperationsInput | string
   accountStatus?: Prisma.EnumAccountStatusFieldUpdateOperationsInput | $Enums.AccountStatus
   tokens?: Prisma.StringFieldUpdateOperationsInput | string
   createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string
@@ -649,6 +715,8 @@ export type AccountUpdateWithoutProfilesInput = {
 export type AccountUncheckedUpdateWithoutProfilesInput = {
   email?: Prisma.StringFieldUpdateOperationsInput | string
   appId?: Prisma.StringFieldUpdateOperationsInput | string
+  accountType?: Prisma.StringFieldUpdateOperationsInput | string
+  capabilities?: Prisma.StringFieldUpdateOperationsInput | string
   accountStatus?: Prisma.EnumAccountStatusFieldUpdateOperationsInput | $Enums.AccountStatus
   tokens?: Prisma.StringFieldUpdateOperationsInput | string
   createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string
@@ -662,6 +730,8 @@ export type AccountUncheckedUpdateWithoutProfilesInput = {
 export type AccountCreateWithoutCalendarListsInput = {
   email: string
   appId: string
+  accountType?: string
+  capabilities?: string
   accountStatus: $Enums.AccountStatus
   tokens: string
   createdAt: Date | string
@@ -675,6 +745,8 @@ export type AccountCreateWithoutCalendarListsInput = {
 export type AccountUncheckedCreateWithoutCalendarListsInput = {
   email: string
   appId: string
+  accountType?: string
+  capabilities?: string
   accountStatus: $Enums.AccountStatus
   tokens: string
   createdAt: Date | string
@@ -704,6 +776,8 @@ export type AccountUpdateToOneWithWhereWithoutCalendarListsInput = {
 export type AccountUpdateWithoutCalendarListsInput = {
   email?: Prisma.StringFieldUpdateOperationsInput | string
   appId?: Prisma.StringFieldUpdateOperationsInput | string
+  accountType?: Prisma.StringFieldUpdateOperationsInput | string
+  capabilities?: Prisma.StringFieldUpdateOperationsInput | string
   accountStatus?: Prisma.EnumAccountStatusFieldUpdateOperationsInput | $Enums.AccountStatus
   tokens?: Prisma.StringFieldUpdateOperationsInput | string
   createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string
@@ -717,6 +791,8 @@ export type AccountUpdateWithoutCalendarListsInput = {
 export type AccountUncheckedUpdateWithoutCalendarListsInput = {
   email?: Prisma.StringFieldUpdateOperationsInput | string
   appId?: Prisma.StringFieldUpdateOperationsInput | string
+  accountType?: Prisma.StringFieldUpdateOperationsInput | string
+  capabilities?: Prisma.StringFieldUpdateOperationsInput | string
   accountStatus?: Prisma.EnumAccountStatusFieldUpdateOperationsInput | $Enums.AccountStatus
   tokens?: Prisma.StringFieldUpdateOperationsInput | string
   createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string
@@ -730,6 +806,8 @@ export type AccountUncheckedUpdateWithoutCalendarListsInput = {
 export type AccountCreateWithoutSyncStatesInput = {
   email: string
   appId: string
+  accountType?: string
+  capabilities?: string
   accountStatus: $Enums.AccountStatus
   tokens: string
   createdAt: Date | string
@@ -743,6 +821,8 @@ export type AccountCreateWithoutSyncStatesInput = {
 export type AccountUncheckedCreateWithoutSyncStatesInput = {
   email: string
   appId: string
+  accountType?: string
+  capabilities?: string
   accountStatus: $Enums.AccountStatus
   tokens: string
   createdAt: Date | string
@@ -772,6 +852,8 @@ export type AccountUpdateToOneWithWhereWithoutSyncStatesInput = {
 export type AccountUpdateWithoutSyncStatesInput = {
   email?: Prisma.StringFieldUpdateOperationsInput | string
   appId?: Prisma.StringFieldUpdateOperationsInput | string
+  accountType?: Prisma.StringFieldUpdateOperationsInput | string
+  capabilities?: Prisma.StringFieldUpdateOperationsInput | string
   accountStatus?: Prisma.EnumAccountStatusFieldUpdateOperationsInput | $Enums.AccountStatus
   tokens?: Prisma.StringFieldUpdateOperationsInput | string
   createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string
@@ -785,6 +867,8 @@ export type AccountUpdateWithoutSyncStatesInput = {
 export type AccountUncheckedUpdateWithoutSyncStatesInput = {
   email?: Prisma.StringFieldUpdateOperationsInput | string
   appId?: Prisma.StringFieldUpdateOperationsInput | string
+  accountType?: Prisma.StringFieldUpdateOperationsInput | string
+  capabilities?: Prisma.StringFieldUpdateOperationsInput | string
   accountStatus?: Prisma.EnumAccountStatusFieldUpdateOperationsInput | $Enums.AccountStatus
   tokens?: Prisma.StringFieldUpdateOperationsInput | string
   createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string
@@ -838,6 +922,8 @@ export type AccountCountOutputTypeCountSyncStatesArgs<ExtArgs extends runtime.Ty
 export type AccountSelect<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = runtime.Types.Extensions.GetSelect<{
   email?: boolean
   appId?: boolean
+  accountType?: boolean
+  capabilities?: boolean
   accountStatus?: boolean
   tokens?: boolean
   createdAt?: boolean
@@ -853,6 +939,8 @@ export type AccountSelect<ExtArgs extends runtime.Types.Extensions.InternalArgs
 export type AccountSelectCreateManyAndReturn<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = runtime.Types.Extensions.GetSelect<{
   email?: boolean
   appId?: boolean
+  accountType?: boolean
+  capabilities?: boolean
   accountStatus?: boolean
   tokens?: boolean
   createdAt?: boolean
@@ -862,6 +950,8 @@ export type AccountSelectCreateManyAndReturn<ExtArgs extends runtime.Types.Exten
 export type AccountSelectUpdateManyAndReturn<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = runtime.Types.Extensions.GetSelect<{
   email?: boolean
   appId?: boolean
+  accountType?: boolean
+  capabilities?: boolean
   accountStatus?: boolean
   tokens?: boolean
   createdAt?: boolean
@@ -871,13 +961,15 @@ export type AccountSelectUpdateManyAndReturn<ExtArgs extends runtime.Types.Exten
 export type AccountSelectScalar = {
   email?: boolean
   appId?: boolean
+  accountType?: boolean
+  capabilities?: boolean
   accountStatus?: boolean
   tokens?: boolean
   createdAt?: boolean
   updatedAt?: boolean
 }
 
-export type AccountOmit<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = runtime.Types.Extensions.GetOmit<"email" | "appId" | "accountStatus" | "tokens" | "createdAt" | "updatedAt", ExtArgs["result"]["account"]>
+export type AccountOmit<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = runtime.Types.Extensions.GetOmit<"email" | "appId" | "accountType" | "capabilities" | "accountStatus" | "tokens" | "createdAt" | "updatedAt", ExtArgs["result"]["account"]>
 export type AccountInclude<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = {
   threads?: boolean | Prisma.Account$threadsArgs<ExtArgs>
   labels?: boolean | Prisma.Account$labelsArgs<ExtArgs>
@@ -901,6 +993,8 @@ export type $AccountPayload<ExtArgs extends runtime.Types.Extensions.InternalArg
   scalars: runtime.Types.Extensions.GetPayloadResult<{
     email: string
     appId: string
+    accountType: string
+    capabilities: string
     accountStatus: $Enums.AccountStatus
     tokens: string
     createdAt: Date
@@ -1335,6 +1429,8 @@ export interface Prisma__AccountClient<T, Null = never, ExtArgs extends runtime.
 export interface AccountFieldRefs {
   readonly email: Prisma.FieldRef<"Account", 'String'>
   readonly appId: Prisma.FieldRef<"Account", 'String'>
+  readonly accountType: Prisma.FieldRef<"Account", 'String'>
+  readonly capabilities: Prisma.FieldRef<"Account", 'String'>
   readonly accountStatus: Prisma.FieldRef<"Account", 'AccountStatus'>
   readonly tokens: Prisma.FieldRef<"Account", 'String'>
   readonly createdAt: Prisma.FieldRef<"Account", 'DateTime'>

package/src/gmail-client.test.ts

@@ -1,9 +1,9 @@
 // Tests for GmailClient parsing behavior used by TUI previews.
 // Captures entity/encoding regressions in snippet fields from Gmail metadata responses.
 
-import { expect, test } from 'vitest'
+import { expect, test, describe } from 'vitest'
 import { OAuth2Client } from 'google-auth-library'
-import { GmailClient } from './gmail-client.js'
+import { GmailClient, parseAuthResults } from './gmail-client.js'
 
 // Create a real client instance for testing (no account context needed for parsing tests)
 const auth = new OAuth2Client()
@@ -62,3 +62,156 @@ test('thread list snippet strips zero-width and preheader garbage', () => {
   const parsed = client.parseThreadListItem(rawThread as any)
   expect(parsed.snippet).toBe('A host sent you a message')
 })
+
+// ---------------------------------------------------------------------------
+// parseAuthResults
+// ---------------------------------------------------------------------------
+
+describe('parseAuthResults', () => {
+  test('parses standard Gmail Authentication-Results header', () => {
+    const header = `mx.google.com;
+       dkim=pass header.i=@example.com header.s=selector1;
+       spf=pass (google.com: domain of user@example.com designates 1.2.3.4 as permitted sender) smtp.mailfrom=user@example.com;
+       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=example.com`
+    const result = parseAuthResults(header)
+    expect(result).toMatchInlineSnapshot(`
+      {
+        "authentic": true,
+        "dkim": "pass",
+        "dmarc": "pass",
+        "raw": "mx.google.com;
+             dkim=pass header.i=@example.com header.s=selector1;
+             spf=pass (google.com: domain of user@example.com designates 1.2.3.4 as permitted sender) smtp.mailfrom=user@example.com;
+             dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=example.com",
+        "spf": "pass",
+      }
+    `)
+  })
+
+  test('detects failed authentication', () => {
+    const header = `mx.google.com;
+       dkim=fail (bad signature) header.i=@spoofed.com;
+       spf=softfail (google.com: domain transitioning) smtp.mailfrom=other.com;
+       dmarc=fail (p=REJECT) header.from=spoofed.com`
+    const result = parseAuthResults(header)
+    expect(result).toMatchInlineSnapshot(`
+      {
+        "authentic": false,
+        "dkim": "fail",
+        "dmarc": "fail",
+        "raw": "mx.google.com;
+             dkim=fail (bad signature) header.i=@spoofed.com;
+             spf=softfail (google.com: domain transitioning) smtp.mailfrom=other.com;
+             dmarc=fail (p=REJECT) header.from=spoofed.com",
+        "spf": "softfail",
+      }
+    `)
+  })
+
+  test('handles missing protocols gracefully', () => {
+    const header = `mx.google.com; spf=pass smtp.mailfrom=user@example.com`
+    const result = parseAuthResults(header)
+    expect(result).toMatchInlineSnapshot(`
+      {
+        "authentic": false,
+        "dkim": "none",
+        "dmarc": "none",
+        "raw": "mx.google.com; spf=pass smtp.mailfrom=user@example.com",
+        "spf": "pass",
+      }
+    `)
+  })
+
+  test('handles bestguesspass for DMARC', () => {
+    const header = `mx.google.com; dkim=pass header.i=@example.com; spf=pass; dmarc=bestguesspass header.from=example.com`
+    const result = parseAuthResults(header)
+    expect(result).toMatchInlineSnapshot(`
+      {
+        "authentic": false,
+        "dkim": "pass",
+        "dmarc": "bestguesspass",
+        "raw": "mx.google.com; dkim=pass header.i=@example.com; spf=pass; dmarc=bestguesspass header.from=example.com",
+        "spf": "pass",
+      }
+    `)
+  })
+
+  test('parseMessage includes auth for received messages', () => {
+    const rawMessage = {
+      id: 'msg_auth_1',
+      threadId: 'thread_auth_1',
+      snippet: 'Test',
+      payload: {
+        headers: [
+          { name: 'Subject', value: 'Auth test' },
+          { name: 'From', value: 'sender@example.com' },
+          { name: 'To', value: 'me@example.com' },
+          { name: 'Date', value: 'Wed, 25 Mar 2026 10:00:00 +0000' },
+          { name: 'Authentication-Results', value: 'mx.google.com; dkim=pass header.i=@example.com; spf=pass; dmarc=pass (p=REJECT) header.from=example.com' },
+        ],
+        mimeType: 'text/plain',
+        body: { data: Buffer.from('hello').toString('base64url') },
+      },
+      labelIds: ['INBOX'],
+    }
+    const parsed = client.parseMessage(rawMessage as any)
+    expect(parsed.auth).toMatchInlineSnapshot(`
+      {
+        "authentic": true,
+        "dkim": "pass",
+        "dmarc": "pass",
+        "raw": "mx.google.com; dkim=pass header.i=@example.com; spf=pass; dmarc=pass (p=REJECT) header.from=example.com",
+        "spf": "pass",
+      }
+    `)
+  })
+
+  test('parseMessage prefers Gmail trusted header over upstream headers', () => {
+    const rawMessage = {
+      id: 'msg_multi_auth',
+      threadId: 'thread_multi_auth',
+      snippet: 'Multi-header',
+      payload: {
+        headers: [
+          { name: 'Subject', value: 'Forwarded' },
+          { name: 'From', value: 'sender@example.com' },
+          { name: 'To', value: 'me@example.com' },
+          { name: 'Date', value: 'Wed, 25 Mar 2026 10:00:00 +0000' },
+          // Upstream relay header (untrusted, appears first)
+          { name: 'Authentication-Results', value: 'relay.untrusted.com; dkim=fail; spf=fail; dmarc=fail' },
+          // Gmail's trusted header (should be preferred)
+          { name: 'Authentication-Results', value: 'mx.google.com; dkim=pass header.i=@example.com; spf=pass; dmarc=pass (p=REJECT)' },
+        ],
+        mimeType: 'text/plain',
+        body: { data: Buffer.from('hello').toString('base64url') },
+      },
+      labelIds: ['INBOX'],
+    }
+    const parsed = client.parseMessage(rawMessage as any)
+    expect(parsed.auth?.authentic).toBe(true)
+    expect(parsed.auth?.spf).toBe('pass')
+    expect(parsed.auth?.dkim).toBe('pass')
+    expect(parsed.auth?.dmarc).toBe('pass')
+  })
+
+  test('parseMessage returns null auth for sent messages', () => {
+    const rawMessage = {
+      id: 'msg_sent_1',
+      threadId: 'thread_sent_1',
+      snippet: 'Sent',
+      payload: {
+        headers: [
+          { name: 'Subject', value: 'Outgoing' },
+          { name: 'From', value: 'me@example.com' },
+          { name: 'To', value: 'other@example.com' },
+          { name: 'Date', value: 'Wed, 25 Mar 2026 10:00:00 +0000' },
+        ],
+        mimeType: 'text/plain',
+        body: { data: Buffer.from('hello').toString('base64url') },
+      },
+      labelIds: ['SENT'],
+    }
+    const parsed = client.parseMessage(rawMessage as any)
+    expect(parsed.auth).toBeNull()
+  })
+})

package/src/gmail-client.ts

@@ -22,6 +22,18 @@ import type { AccountId } from './auth.js'
 // Types
 // ---------------------------------------------------------------------------
 
+export type AuthVerdict = 'pass' | 'fail' | 'softfail' | 'neutral' | 'none' | 'temperror' | 'permerror' | 'bestguesspass'
+
+export interface AuthResult {
+  spf: AuthVerdict
+  dkim: AuthVerdict
+  dmarc: AuthVerdict
+  /** true when all three are 'pass' — the email is fully authenticated */
+  authentic: boolean
+  /** raw Authentication-Results header value */
+  raw: string
+}
+
 export interface Sender {
   name?: string
   email: string
@@ -50,6 +62,8 @@ export interface ParsedMessage {
   mimeType: string // 'text/plain' or 'text/html'
   textBody: string | null // decoded text/plain body when available (for reply parsing)
   attachments: AttachmentMeta[]
+  /** SPF/DKIM/DMARC authentication results from Gmail. null for sent/draft messages. */
+  auth: AuthResult | null
 }
 
 export interface AttachmentMeta {
@@ -1282,6 +1296,20 @@ export class GmailClient {
 
     const { body, mimeType, textBody } = this.extractBody(message.payload ?? {})
 
+    // Authentication-Results: multiple MTAs can add this header. Prefer the one
+    // stamped by Gmail's trusted authserv-id (mx.google.com) to avoid trusting
+    // headers injected by upstream/untrusted relays.
+    const authHeaders = headers
+      .filter((h) => h.name?.toLowerCase() === 'authentication-results')
+      .map((h) => h.value ?? '')
+      .filter((v) => v.length > 0)
+    const trustedAuthHeader =
+      authHeaders.find((v) => v.trim().toLowerCase().startsWith('mx.google.com'))
+      ?? authHeaders[0]
+      ?? null
+    const isSentOrDraft = labelIds.includes('SENT') || labelIds.includes('DRAFT')
+    const auth = trustedAuthHeader && !isSentOrDraft ? parseAuthResults(trustedAuthHeader) : null
+
     return {
       id: message.id ?? '',
       threadId: message.threadId ?? '',
@@ -1308,6 +1336,7 @@ export class GmailClient {
       mimeType,
       textBody,
       attachments: this.extractAttachmentMeta(message.payload?.parts ?? []),
+      auth,
     }
   }
 
@@ -2015,6 +2044,42 @@ export class GmailClient {
   }
 }
 
+// ---------------------------------------------------------------------------
+// Email authentication: parse the Authentication-Results header
+// ---------------------------------------------------------------------------
+// Gmail adds an Authentication-Results header to every received message with
+// SPF, DKIM, and DMARC verdicts. Format is semi-structured:
+//   Authentication-Results: mx.google.com;
+//       dkim=pass header.i=@example.com header.s=sel1;
+//       spf=pass (...) smtp.mailfrom=user@example.com;
+//       dmarc=pass (p=REJECT) header.from=example.com
+// We extract the verdict keyword after each protocol name.
+// ---------------------------------------------------------------------------
+
+const AUTH_VERDICTS = new Set(['pass', 'fail', 'softfail', 'neutral', 'none', 'temperror', 'permerror', 'bestguesspass'])
+
+/** Parse a Gmail Authentication-Results header into structured verdicts. */
+export function parseAuthResults(header: string): AuthResult {
+  const lower = header.toLowerCase()
+  const extract = (protocol: string): AuthVerdict => {
+    // Match "protocol=verdict" — verdict is a word that stops at whitespace, semicolons, or parens
+    const re = new RegExp(`\\b${protocol}\\s*=\\s*([a-z]+)`)
+    const match = re.exec(lower)
+    const verdict = match?.[1] ?? 'none'
+    return AUTH_VERDICTS.has(verdict) ? verdict as AuthVerdict : 'none'
+  }
+  const spf = extract('spf')
+  const dkim = extract('dkim')
+  const dmarc = extract('dmarc')
+  return {
+    spf,
+    dkim,
+    dmarc,
+    authentic: spf === 'pass' && dkim === 'pass' && dmarc === 'pass',
+    raw: header,
+  }
+}
+
 // ---------------------------------------------------------------------------
 // Watch: folder label mapping
 // ---------------------------------------------------------------------------