From 36aeecf214f1053377b3bc2b9b26154b3d424ab4 Mon Sep 17 00:00:00 2001
From: QLHazyCoder <2825305047@qq.com>
Date: Mon, 13 Apr 2026 13:21:35 +0800
Subject: [PATCH 1/5] =?UTF-8?q?=E7=AC=AC=E4=B8=89=E6=96=B9=E6=94=AF?=
 =?UTF-8?q?=E6=8C=81?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 README.md                   |  16 +-
 background.js               | 285 +++++++++++-------------------------
 hotmail-utils.js            |  53 ++-----
 sidepanel/sidepanel.html    |  20 ++-
 sidepanel/sidepanel.js      |  36 ++++-
 tests/hotmail-utils.test.js |  62 ++++----
 6 files changed, 191 insertions(+), 281 deletions(-)

diff --git a/README.md b/README.md
index 5c606bf..fc07358 100644
--- a/README.md
+++ b/README.md
@@ -52,7 +52,7 @@
 - 支持自定义密码；留空时自动生成强密码
 - 自动显示当前使用中的密码，便于后续保存
 - 自动获取注册验证码与登录验证码
-- 支持 `Hotmail`：直接使用 `邮箱 + 客户端 ID + 刷新令牌（refresh token）` 刷新微软令牌，并通过 Microsoft Graph 读取最新邮件
+- 支持 `Hotmail`：直接使用 `邮箱 + 客户端 ID + 刷新令牌（refresh token）` 请求第三方邮件 API 读取最新邮件
 - 支持 `QQ Mail`、`163 Mail`、`Inbucket mailbox`
 - 支持从 DuckDuckGo Email Protection 自动生成新的 `@duck.com` 地址
 - 支持基于 Cloudflare 自定义域名自动生成随机邮箱前缀
@@ -137,7 +137,7 @@ Step 1 和 Step 9 都依赖这个地址。
 
 说明：
 
-- `Hotmail` 通过侧边栏里的 Hotmail 账号池选择账号，并直接访问 Microsoft Graph 邮件接口
+- `Hotmail` 通过侧边栏里的 Hotmail 账号池选择账号，并请求第三方邮件 API
 - `QQ`、`163`、`163 VIP` 用于直接轮询网页邮箱
 - `Inbucket` 通过你在侧边栏里配置的 host 访问 `mailbox` 页面：`https://<your-inbucket-host>/m/<mailbox>/`
 
@@ -145,6 +145,13 @@ Step 1 和 Step 9 都依赖这个地址。
 
 仅当 `Mail = Hotmail` 时使用。
 
+可配置项：
+
+- `Hotmail API 地址`
+- `响应类型`
+- `收件箱参数`
+- `垃圾箱参数`
+
 每条账号支持保存：
 
 - `email`
@@ -154,7 +161,8 @@ Step 1 和 Step 9 都依赖这个地址。
 
 使用方式：
 
-- 先新增账号
+- 先配置 Hotmail API 相关设置
+- 再新增账号
 - 点击 `校验`
 - 校验通过后，可点击 `测试收信`
 - Auto 模式每轮会自动选用一个可用账号
@@ -406,7 +414,7 @@ Cloudflare 模式下，插件不会再调用 Cloudflare API 创建路由。
 
 支持：
 
-- `Hotmail`（Microsoft Graph 邮件接口）
+- `Hotmail`（第三方邮件 API）
 - `content/qq-mail.js`
 - `content/mail-163.js`
 - `content/inbucket-mail.js`
diff --git a/background.js b/background.js
index e234edf..37c4684 100644
--- a/background.js
+++ b/background.js
@@ -3,11 +3,11 @@
 importScripts('data/names.js', 'hotmail-utils.js', 'content/activation-utils.js');
 
 const {
-  buildHotmailGraphMessagesUrl,
+  buildHotmailMailApiLatestUrl,
   extractVerificationCodeFromMessage,
   filterHotmailAccountsByUsage,
   getLatestHotmailMessage,
-  getHotmailGraphRequestConfig,
+  getHotmailMailApiRequestConfig,
   getHotmailVerificationPollConfig,
   getHotmailVerificationRequestTimestamp,
   normalizeHotmailMailApiMessages,
@@ -20,8 +20,6 @@ const {
 const {
   isRecoverableStep9AuthFailure,
 } = self.MultiPageActivationUtils;
-const buildHotmailMailApiLatestUrl = buildHotmailGraphMessagesUrl;
-const getHotmailMailApiRequestConfig = getHotmailGraphRequestConfig;
 
 const LOG_PREFIX = '[MultiPage:bg]';
 const DUCK_AUTOFILL_URL = 'https://duckduckgo.com/email/settings/autofill';
@@ -40,6 +38,10 @@ const AUTO_RUN_ALARM_NAME = 'scheduled-auto-run';
 const AUTO_RUN_DELAY_MIN_MINUTES = 1;
 const AUTO_RUN_DELAY_MAX_MINUTES = 1440;
 const DEFAULT_LOCAL_CPA_STEP9_MODE = 'submit';
+const DEFAULT_HOTMAIL_MAIL_API_URL = 'https://apple.882263.xyz/api/mail-new';
+const DEFAULT_HOTMAIL_MAIL_API_RESPONSE_TYPE = 'json';
+const DEFAULT_HOTMAIL_MAIL_API_INBOX_MAILBOX = 'INBOX';
+const DEFAULT_HOTMAIL_MAIL_API_JUNK_MAILBOX = 'Junk';
 
 initializeSessionStorageAccess();
 
@@ -64,6 +66,10 @@ const PERSISTED_SETTING_DEFAULTS = {
   emailGenerator: 'duck', // 注册邮箱生成方式：duck / cloudflare。
   inbucketHost: '', // 仅当 mailProvider 为 inbucket 时填写 Inbucket 地址，其他情况保持为空。
   inbucketMailbox: '', // 仅当 mailProvider 为 inbucket 时填写邮箱名，其他情况保持为空。
+  hotmailApiUrl: DEFAULT_HOTMAIL_MAIL_API_URL, // Hotmail 第三方邮件 API 地址。
+  hotmailApiResponseType: DEFAULT_HOTMAIL_MAIL_API_RESPONSE_TYPE, // Hotmail 第三方邮件 API 的 response_type 参数。
+  hotmailApiInboxMailbox: DEFAULT_HOTMAIL_MAIL_API_INBOX_MAILBOX, // Hotmail API 收件箱参数值。
+  hotmailApiJunkMailbox: DEFAULT_HOTMAIL_MAIL_API_JUNK_MAILBOX, // Hotmail API 垃圾箱参数值。
   cloudflareDomain: '', // 仅当 emailGenerator=cloudflare 时填写自定义域名。
   cloudflareDomains: [], // Cloudflare 可选域名列表。
   hotmailAccounts: [],
@@ -191,6 +197,56 @@ function normalizeCloudflareDomains(values) {
   return normalizedDomains;
 }
 
+function normalizeHotmailMailApiUrl(rawValue = '') {
+  const value = String(rawValue || '').trim();
+  if (!value) return DEFAULT_HOTMAIL_MAIL_API_URL;
+
+  try {
+    const parsed = new URL(value);
+    if (!['http:', 'https:'].includes(parsed.protocol)) {
+      return DEFAULT_HOTMAIL_MAIL_API_URL;
+    }
+    return parsed.toString();
+  } catch {
+    return DEFAULT_HOTMAIL_MAIL_API_URL;
+  }
+}
+
+function normalizeHotmailMailApiResponseType(rawValue) {
+  if (rawValue === undefined || rawValue === null) {
+    return DEFAULT_HOTMAIL_MAIL_API_RESPONSE_TYPE;
+  }
+  return String(rawValue).trim();
+}
+
+function normalizeHotmailMailApiMailbox(rawValue, fallback) {
+  if (rawValue === undefined || rawValue === null) {
+    return fallback;
+  }
+  const value = String(rawValue).trim();
+  return value || fallback;
+}
+
+function getHotmailMailApiSettings(state = {}) {
+  return {
+    apiUrl: normalizeHotmailMailApiUrl(state.hotmailApiUrl),
+    responseType: normalizeHotmailMailApiResponseType(state.hotmailApiResponseType),
+    inboxMailbox: normalizeHotmailMailApiMailbox(state.hotmailApiInboxMailbox, DEFAULT_HOTMAIL_MAIL_API_INBOX_MAILBOX),
+    junkMailbox: normalizeHotmailMailApiMailbox(state.hotmailApiJunkMailbox, DEFAULT_HOTMAIL_MAIL_API_JUNK_MAILBOX),
+  };
+}
+
+function resolveHotmailMailApiMailbox(mailbox, settings = {}) {
+  const normalized = String(mailbox || '').trim().toLowerCase();
+  if (normalized === 'junk' || normalized === 'junk email' || normalized === 'junkemail') {
+    return normalizeHotmailMailApiMailbox(settings.junkMailbox, DEFAULT_HOTMAIL_MAIL_API_JUNK_MAILBOX);
+  }
+  if (normalized === 'inbox' || !normalized) {
+    return normalizeHotmailMailApiMailbox(settings.inboxMailbox, DEFAULT_HOTMAIL_MAIL_API_INBOX_MAILBOX);
+  }
+  return String(mailbox || '').trim();
+}
+
 function normalizePersistentSettingValue(key, value) {
   switch (key) {
     case 'panelMode':
@@ -224,6 +280,14 @@ function normalizePersistentSettingValue(key, value) {
       return String(value || '').trim();
     case 'inbucketMailbox':
       return String(value || '').trim();
+    case 'hotmailApiUrl':
+      return normalizeHotmailMailApiUrl(value);
+    case 'hotmailApiResponseType':
+      return normalizeHotmailMailApiResponseType(value);
+    case 'hotmailApiInboxMailbox':
+      return normalizeHotmailMailApiMailbox(value, DEFAULT_HOTMAIL_MAIL_API_INBOX_MAILBOX);
+    case 'hotmailApiJunkMailbox':
+      return normalizeHotmailMailApiMailbox(value, DEFAULT_HOTMAIL_MAIL_API_JUNK_MAILBOX);
     case 'cloudflareDomain':
       return normalizeCloudflareDomain(value);
     case 'cloudflareDomains':
@@ -449,16 +513,14 @@ function normalizeHotmailAccount(account = {}) {
   const normalizedLastAuthAt = Number.isFinite(Number(account.lastAuthAt)) ? Number(account.lastAuthAt) : 0;
   const normalizedStatus = String(
     account.status
-    || (normalizedLastAuthAt > 0 || account.accessToken ? 'authorized' : 'pending')
+    || (normalizedLastAuthAt > 0 ? 'authorized' : 'pending')
   );
   return {
     id: String(account.id || crypto.randomUUID()),
     email: String(account.email || '').trim(),
     password: String(account.password || ''),
     clientId: String(account.clientId || '').trim(),
-    accessToken: String(account.accessToken || ''),
     refreshToken: String(account.refreshToken || ''),
-    expiresAt: Number.isFinite(Number(account.expiresAt)) ? Number(account.expiresAt) : 0,
     status: normalizedStatus,
     enabled: account.enabled !== undefined ? Boolean(account.enabled) : true,
     used: Boolean(account.used),
@@ -513,8 +575,6 @@ async function upsertHotmailAccount(input) {
   const normalized = normalizeHotmailAccount({
     ...(existing || {}),
     ...(credentialsChanged ? {
-      accessToken: '',
-      expiresAt: 0,
       status: 'pending',
       lastAuthAt: 0,
       lastError: '',
@@ -650,7 +710,7 @@ async function ensureHotmailAccountForFlow(options = {}) {
   return setCurrentHotmailAccount(account.id, { markUsed, syncEmail: true });
 }
 
-async function requestHotmailMailApiLegacy(account, mailbox = 'INBOX') {
+async function requestHotmailMailApi(account, mailbox = 'INBOX') {
   if (!account?.email) {
     throw new Error('Hotmail 账号缺少邮箱地址。');
   }
@@ -661,12 +721,14 @@ async function requestHotmailMailApiLegacy(account, mailbox = 'INBOX') {
     throw new Error(`Hotmail 账号 ${account.email || account.id} 缺少刷新令牌（refresh token）。`);
   }
 
+  const hotmailApiSettings = getHotmailMailApiSettings(await getState());
   const url = buildHotmailMailApiLatestUrl({
+    apiUrl: hotmailApiSettings.apiUrl,
     clientId: account.clientId,
     email: account.email,
     refreshToken: account.refreshToken,
-    mailbox,
-    responseType: 'json',
+    mailbox: resolveHotmailMailApiMailbox(mailbox, hotmailApiSettings),
+    responseType: hotmailApiSettings.responseType,
   });
   const { timeoutMs } = getHotmailMailApiRequestConfig();
   const controller = new AbortController();
@@ -710,12 +772,10 @@ async function requestHotmailMailApiLegacy(account, mailbox = 'INBOX') {
   };
 }
 
-function applyHotmailApiResultToAccountLegacy(account, apiResult) {
+function applyHotmailApiResultToAccount(account, apiResult) {
   const nextRefreshToken = String(apiResult?.nextRefreshToken || '').trim();
   return {
     ...account,
-    accessToken: '',
-    expiresAt: 0,
     refreshToken: nextRefreshToken || account.refreshToken,
     status: 'authorized',
     lastAuthAt: Date.now(),
@@ -723,168 +783,9 @@ function applyHotmailApiResultToAccountLegacy(account, apiResult) {
   };
 }
 
-async function fetchHotmailMailboxMessagesLegacy(account, mailboxes = HOTMAIL_MAILBOXES) {
-  let workingAccount = normalizeHotmailAccount(account);
-  const mailboxResults = [];
-
-  for (const mailbox of mailboxes) {
-    const result = await requestHotmailMailApiLegacy(workingAccount, mailbox);
-    workingAccount = applyHotmailApiResultToAccountLegacy(workingAccount, result);
-    mailboxResults.push({
-      mailbox,
-      count: result.messages.length,
-      messages: result.messages.map((message) => ({ ...message, mailbox })),
-    });
-  }
-
-  const savedAccount = await upsertHotmailAccount(workingAccount);
-  return {
-    account: savedAccount,
-    mailboxResults,
-    messages: mailboxResults.flatMap((item) => item.messages),
-  };
-}
-
-function isHotmailAccessTokenUsable(account, now = Date.now()) {
-  return Boolean(account?.accessToken)
-    && Number(account?.expiresAt || 0) > now + 60_000;
-}
-
-async function refreshHotmailAccessToken(account) {
-  if (!account?.email) {
-    throw new Error('Hotmail 账号缺少邮箱地址。');
-  }
-  if (!account?.clientId) {
-    throw new Error(`Hotmail 账号 ${account.email || account.id} 缺少客户端 ID。`);
-  }
-  if (!account?.refreshToken) {
-    throw new Error(`Hotmail 账号 ${account.email || account.id} 缺少刷新令牌（refresh token）。`);
-  }
-
-  const { timeoutMs, scopes, tokenUrl } = getHotmailGraphRequestConfig();
-  const controller = new AbortController();
-  const timeoutId = setTimeout(() => controller.abort(new Error('timeout')), timeoutMs);
-  const formData = new URLSearchParams();
-  formData.set('client_id', account.clientId);
-  formData.set('grant_type', 'refresh_token');
-  formData.set('refresh_token', account.refreshToken);
-  formData.set('scope', scopes.join(' '));
-  formData.set('redirect_uri', 'https://login.microsoftonline.com/common/oauth2/nativeclient');
-
-  let response;
-  try {
-    response = await fetch(tokenUrl, {
-      method: 'POST',
-      headers: {
-        'Content-Type': 'application/x-www-form-urlencoded',
-      },
-      body: formData.toString(),
-      signal: controller.signal,
-    });
-  } catch (err) {
-    const error = new Error(
-      err?.name === 'AbortError'
-        ? `Hotmail 令牌刷新超时（>${Math.round(timeoutMs / 1000)} 秒）`
-        : `Hotmail 令牌刷新失败：${err.message}`
-    );
-    error.code = 'HOTMAIL_TOKEN_REFRESH_FAILED';
-    throw error;
-  } finally {
-    clearTimeout(timeoutId);
-  }
-
-  const text = await response.text();
-  let payload = {};
-  try {
-    payload = text ? JSON.parse(text) : {};
-  } catch {
-    payload = { raw: text };
-  }
-
-  if (!response.ok || !payload?.access_token) {
-    const rawErrorText = payload?.error_description || payload?.error?.message || payload?.error || payload?.message || text || `HTTP ${response.status}`;
-    const isCrossOriginError = typeof rawErrorText === 'string' && rawErrorText.includes('AADSTS90023');
-    const errorText = isCrossOriginError
-      ? `Azure AD 拒绝了跨域令牌请求（AADSTS90023）。请在 Azure AD 应用注册中将应用平台改为"单页应用程序（SPA）"，并将重定向 URI 设置为 https://login.microsoftonline.com/common/oauth2/nativeclient，或将应用类型改为"移动和桌面应用程序（Native）"。`
-      : rawErrorText;
-    const error = new Error(`Hotmail 令牌刷新失败：${errorText}`);
-    error.code = 'HOTMAIL_TOKEN_REFRESH_FAILED';
-    throw error;
-  }
-
-  const expiresInSeconds = Math.max(60, Number(payload.expires_in || payload.expiresIn || 0) || 3600);
+function buildHotmailMailApiFailureAccount(account, errorMessage) {
   return normalizeHotmailAccount({
     ...account,
-    accessToken: String(payload.access_token || ''),
-    refreshToken: String(payload.refresh_token || '').trim() || account.refreshToken,
-    expiresAt: Date.now() + expiresInSeconds * 1000,
-    status: 'authorized',
-    lastAuthAt: Date.now(),
-    lastError: '',
-  });
-}
-
-async function requestHotmailGraphMessages(account, mailbox = 'INBOX') {
-  const { timeoutMs, pageSize, messageFields } = getHotmailGraphRequestConfig();
-  const controller = new AbortController();
-  const timeoutId = setTimeout(() => controller.abort(new Error('timeout')), timeoutMs);
-  const url = buildHotmailGraphMessagesUrl({
-    mailbox,
-    top: pageSize,
-    selectFields: messageFields,
-  });
-
-  let response;
-  try {
-    response = await fetch(url, {
-      method: 'GET',
-      headers: {
-        Accept: 'application/json',
-        Authorization: `Bearer ${account.accessToken}`,
-      },
-      signal: controller.signal,
-    });
-  } catch (err) {
-    const error = new Error(
-      err?.name === 'AbortError'
-        ? `Hotmail 邮件请求超时（>${Math.round(timeoutMs / 1000)} 秒）：${mailbox}`
-        : `Hotmail 邮件请求失败：${err.message}`
-    );
-    error.code = 'HOTMAIL_GRAPH_REQUEST_FAILED';
-    throw error;
-  } finally {
-    clearTimeout(timeoutId);
-  }
-
-  const text = await response.text();
-  let payload = {};
-  try {
-    payload = text ? JSON.parse(text) : {};
-  } catch {
-    payload = { raw: text };
-  }
-
-  if (!response.ok) {
-    const errorText = payload?.error?.message || payload?.error_description || payload?.message || text || `HTTP ${response.status}`;
-    const error = new Error(`Hotmail 邮件请求失败：${errorText}`);
-    error.code = response.status === 401 || response.status === 403
-      ? 'HOTMAIL_GRAPH_AUTH_FAILED'
-      : 'HOTMAIL_GRAPH_REQUEST_FAILED';
-    throw error;
-  }
-
-  return {
-    mailbox,
-    payload,
-    messages: normalizeHotmailMailApiMessages(payload?.value),
-  };
-}
-
-function buildHotmailAuthFailureAccount(account, errorMessage) {
-  return normalizeHotmailAccount({
-    ...account,
-    accessToken: '',
-    expiresAt: 0,
     status: 'error',
     lastError: String(errorMessage || ''),
   });
@@ -895,27 +796,9 @@ async function fetchHotmailMailboxMessages(account, mailboxes = HOTMAIL_MAILBOXE
   const mailboxResults = [];
 
   try {
-    if (!isHotmailAccessTokenUsable(workingAccount)) {
-      workingAccount = await refreshHotmailAccessToken(workingAccount);
-    }
-
     for (const mailbox of mailboxes) {
-      let result;
-      try {
-        result = await requestHotmailGraphMessages(workingAccount, mailbox);
-      } catch (err) {
-        if (err?.code !== 'HOTMAIL_GRAPH_AUTH_FAILED') {
-          throw err;
-        }
-
-        workingAccount = await refreshHotmailAccessToken({
-          ...workingAccount,
-          accessToken: '',
-          expiresAt: 0,
-        });
-        result = await requestHotmailGraphMessages(workingAccount, mailbox);
-      }
-
+      const result = await requestHotmailMailApi(workingAccount, mailbox);
+      workingAccount = applyHotmailApiResultToAccount(workingAccount, result);
       mailboxResults.push({
         mailbox,
         count: result.messages.length,
@@ -923,10 +806,8 @@ async function fetchHotmailMailboxMessages(account, mailboxes = HOTMAIL_MAILBOXE
       });
     }
   } catch (err) {
-    if (err?.code === 'HOTMAIL_TOKEN_REFRESH_FAILED' || err?.code === 'HOTMAIL_GRAPH_AUTH_FAILED') {
-      const failedAccount = buildHotmailAuthFailureAccount(workingAccount, err.message);
-      await upsertHotmailAccount(failedAccount);
-    }
+    const failedAccount = buildHotmailMailApiFailureAccount(workingAccount, err.message);
+    await upsertHotmailAccount(failedAccount);
     throw err;
   }
 
@@ -1874,7 +1755,7 @@ function getSourceLabel(source) {
     'mail-163': '163 邮箱',
     'inbucket-mail': 'Inbucket 邮箱',
     'duck-mail': 'Duck 邮箱',
-    'hotmail-api': 'Hotmail（微软 Graph）',
+    'hotmail-api': 'Hotmail（第三方邮件 API）',
   };
   return labels[source] || source || '未知来源';
 }
@@ -2650,7 +2531,7 @@ async function handleMessage(message, sender) {
       const updates = buildPersistentSettingsPayload(message.payload || {});
       await setPersistentSettings(updates);
       await setState(updates);
-      return { ok: true };
+      return { ok: true, state: await getState() };
     }
 
     case 'EXPORT_SETTINGS': {
@@ -3738,7 +3619,7 @@ async function executeStep3(state) {
 function getMailConfig(state) {
   const provider = state.mailProvider || 'qq';
   if (provider === HOTMAIL_PROVIDER) {
-    return { provider: HOTMAIL_PROVIDER, label: 'Hotmail（微软 Graph）' };
+    return { provider: HOTMAIL_PROVIDER, label: 'Hotmail（第三方邮件 API）' };
   }
   if (provider === '163') {
     return { source: 'mail-163', url: 'https://mail.163.com/js6/main.jsp?df=mail163_letter#module=mbox.ListModule%7C%7B%22fid%22%3A1%2C%22order%22%3A%22date%22%2C%22desc%22%3Atrue%7D', label: '163 邮箱' };
diff --git a/hotmail-utils.js b/hotmail-utils.js
index 8ffcf8d..97e07bf 100644
--- a/hotmail-utils.js
+++ b/hotmail-utils.js
@@ -6,22 +6,7 @@
 
   root.HotmailUtils = factory();
 })(typeof self !== 'undefined' ? self : globalThis, function createHotmailUtils() {
-  const HOTMAIL_MICROSOFT_TOKEN_URL = 'https://login.microsoftonline.com/consumers/oauth2/v2.0/token';
-  const HOTMAIL_GRAPH_API_ORIGIN = 'https://graph.microsoft.com';
-  const HOTMAIL_GRAPH_PAGE_SIZE = 10;
-  const HOTMAIL_GRAPH_MESSAGE_FIELDS = [
-    'id',
-    'internetMessageId',
-    'subject',
-    'from',
-    'bodyPreview',
-    'receivedDateTime',
-  ];
-  const HOTMAIL_GRAPH_SCOPES = [
-    'offline_access',
-    'https://graph.microsoft.com/Mail.Read',
-    'https://graph.microsoft.com/User.Read',
-  ];
+  const HOTMAIL_MAIL_API_URL = 'https://apple.882263.xyz/api/mail-new';
 
   function normalizeText(value) {
     return String(value || '')
@@ -291,20 +276,19 @@
     return list.map((message) => normalizeHotmailMailApiMessage(message));
   }
 
-  function normalizeHotmailMailboxId(mailbox = 'INBOX') {
-    const normalized = normalizeText(mailbox);
-    if (normalized === 'junk' || normalized === 'junk email' || normalized === 'junkemail') {
-      return 'junkemail';
+  function buildHotmailMailApiLatestUrl(options) {
+    const apiUrl = String(options?.apiUrl || '').trim() || HOTMAIL_MAIL_API_URL;
+    const url = new URL(apiUrl);
+    url.searchParams.set('refresh_token', String(options?.refreshToken || ''));
+    url.searchParams.set('client_id', String(options?.clientId || ''));
+    url.searchParams.set('email', String(options?.email || ''));
+    url.searchParams.set('mailbox', String(options?.mailbox || 'INBOX'));
+    const responseType = options?.responseType === undefined || options?.responseType === null
+      ? 'json'
+      : String(options.responseType).trim();
+    if (responseType) {
+      url.searchParams.set('response_type', responseType);
     }
-    return 'inbox';
-  }
-
-  function buildHotmailGraphMessagesUrl(options) {
-    const folderId = normalizeHotmailMailboxId(options?.mailbox);
-    const url = new URL(`${HOTMAIL_GRAPH_API_ORIGIN}/v1.0/me/mailFolders/${folderId}/messages`);
-    url.searchParams.set('$top', String(options?.top || HOTMAIL_GRAPH_PAGE_SIZE));
-    url.searchParams.set('$select', (options?.selectFields || HOTMAIL_GRAPH_MESSAGE_FIELDS).join(','));
-    url.searchParams.set('$orderby', String(options?.orderBy || 'receivedDateTime desc'));
     return url.toString();
   }
 
@@ -348,13 +332,9 @@
       : (flowStartTime || 0);
   }
 
-  function getHotmailGraphRequestConfig() {
+  function getHotmailMailApiRequestConfig() {
     return {
       timeoutMs: 15000,
-      pageSize: HOTMAIL_GRAPH_PAGE_SIZE,
-      scopes: HOTMAIL_GRAPH_SCOPES.slice(),
-      tokenUrl: HOTMAIL_MICROSOFT_TOKEN_URL,
-      messageFields: HOTMAIL_GRAPH_MESSAGE_FIELDS.slice(),
     };
   }
 
@@ -377,17 +357,16 @@
   }
 
   return {
-    buildHotmailGraphMessagesUrl,
+    buildHotmailMailApiLatestUrl,
     extractVerificationCodeFromMessage,
     filterHotmailAccountsByUsage,
     extractVerificationCode,
     getLatestHotmailMessage,
     getHotmailBulkActionLabel,
     getHotmailListToggleLabel,
-    getHotmailGraphRequestConfig,
+    getHotmailMailApiRequestConfig,
     getHotmailVerificationPollConfig,
     getHotmailVerificationRequestTimestamp,
-    normalizeHotmailMailboxId,
     isAuthorizedHotmailAccount,
     normalizeHotmailMailApiMessages,
     normalizeTimestamp,
diff --git a/sidepanel/sidepanel.html b/sidepanel/sidepanel.html
index 0672064..d6d8cde 100644
--- a/sidepanel/sidepanel.html
+++ b/sidepanel/sidepanel.html
@@ -130,7 +130,7 @@
       <div class="data-row">
         <span class="data-label">邮箱服务</span>
         <select id="select-mail-provider" class="data-select">
-          <option value="hotmail-api">Hotmail（微软 Graph）</option>
+          <option value="hotmail-api">Hotmail（第三方邮件 API）</option>
           <option value="163">163 邮箱 (mail.163.com)</option>
           <option value="163-vip">163 VIP 邮箱 (webmail.vip.163.com)</option>
           <option value="qq">QQ 邮箱 (wx.mail.qq.com)</option>
@@ -205,7 +205,7 @@
       <div class="section-mini-header">
         <div class="section-mini-copy">
           <span class="section-label">Hotmail 账号池</span>
-          <span class="section-hint">每轮自动分配一个可用账号</span>
+          <span class="section-hint">先配置 API，再维护账号池并校验</span>
         </div>
         <div class="section-mini-actions">
           <button id="btn-clear-used-hotmail-accounts" class="btn btn-ghost btn-xs" type="button">清空已用</button>
@@ -213,6 +213,22 @@
           <button id="btn-toggle-hotmail-list" class="btn btn-ghost btn-xs" type="button" aria-expanded="false">展开列表</button>
         </div>
       </div>
+      <div class="data-row">
+        <span class="data-label">API 地址</span>
+        <input type="text" id="input-hotmail-api-url" class="data-input mono" placeholder="https://apple.882263.xyz/api/mail-new" />
+      </div>
+      <div class="data-row">
+        <span class="data-label">响应类型</span>
+        <input type="text" id="input-hotmail-api-response-type" class="data-input mono" placeholder="json；留空则不传 response_type" />
+      </div>
+      <div class="data-row">
+        <span class="data-label">收件箱参数</span>
+        <input type="text" id="input-hotmail-api-inbox-mailbox" class="data-input mono" placeholder="INBOX" />
+      </div>
+      <div class="data-row">
+        <span class="data-label">垃圾箱参数</span>
+        <input type="text" id="input-hotmail-api-junk-mailbox" class="data-input mono" placeholder="Junk" />
+      </div>
       <div class="data-row">
         <span class="data-label">邮箱</span>
         <input type="text" id="input-hotmail-email" class="data-input" placeholder="name@hotmail.com" />
diff --git a/sidepanel/sidepanel.js b/sidepanel/sidepanel.js
index 1f7ef0f..5f67896 100644
--- a/sidepanel/sidepanel.js
+++ b/sidepanel/sidepanel.js
@@ -60,6 +60,10 @@ const selectMailProvider = document.getElementById('select-mail-provider');
 const rowEmailGenerator = document.getElementById('row-email-generator');
 const selectEmailGenerator = document.getElementById('select-email-generator');
 const hotmailSection = document.getElementById('hotmail-section');
+const inputHotmailApiUrl = document.getElementById('input-hotmail-api-url');
+const inputHotmailApiResponseType = document.getElementById('input-hotmail-api-response-type');
+const inputHotmailApiInboxMailbox = document.getElementById('input-hotmail-api-inbox-mailbox');
+const inputHotmailApiJunkMailbox = document.getElementById('input-hotmail-api-junk-mailbox');
 const inputHotmailEmail = document.getElementById('input-hotmail-email');
 const inputHotmailClientId = document.getElementById('input-hotmail-client-id');
 const inputHotmailPassword = document.getElementById('input-hotmail-password');
@@ -597,6 +601,10 @@ function collectSettingsPayload() {
     emailGenerator: selectEmailGenerator.value,
     inbucketHost: inputInbucketHost.value.trim(),
     inbucketMailbox: inputInbucketMailbox.value.trim(),
+    hotmailApiUrl: inputHotmailApiUrl.value.trim(),
+    hotmailApiResponseType: inputHotmailApiResponseType.value.trim(),
+    hotmailApiInboxMailbox: inputHotmailApiInboxMailbox.value.trim(),
+    hotmailApiJunkMailbox: inputHotmailApiJunkMailbox.value.trim(),
     cloudflareDomain: selectedCloudflareDomain,
     cloudflareDomains: domains,
     autoRunSkipFailures: inputAutoSkipFailures.checked,
@@ -708,11 +716,15 @@ async function saveSettings(options = {}) {
       throw new Error(response.error);
     }
 
-    syncLatestState(payload);
-    markSettingsDirty(false);
-    updatePanelModeUI();
-    updateMailProviderUI();
-    updateButtonStates();
+    if (response?.state) {
+      applySettingsState(response.state);
+    } else {
+      syncLatestState(payload);
+      markSettingsDirty(false);
+      updatePanelModeUI();
+      updateMailProviderUI();
+      updateButtonStates();
+    }
     if (!silent) {
       showToast('配置已保存', 'success', 1800);
     }
@@ -838,6 +850,10 @@ function applySettingsState(state) {
   selectEmailGenerator.value = state?.emailGenerator || 'duck';
   inputInbucketHost.value = state?.inbucketHost || '';
   inputInbucketMailbox.value = state?.inbucketMailbox || '';
+  inputHotmailApiUrl.value = state?.hotmailApiUrl || '';
+  inputHotmailApiResponseType.value = state?.hotmailApiResponseType ?? '';
+  inputHotmailApiInboxMailbox.value = state?.hotmailApiInboxMailbox || '';
+  inputHotmailApiJunkMailbox.value = state?.hotmailApiJunkMailbox || '';
   renderCloudflareDomainOptions(state?.cloudflareDomain || '');
   setCloudflareDomainEditMode(false, { clearInput: true });
   inputAutoSkipFailures.checked = Boolean(state?.autoRunSkipFailures);
@@ -2200,6 +2216,16 @@ inputVpsPassword.addEventListener('blur', () => {
   saveSettings({ silent: true }).catch(() => { });
 });
 
+[inputHotmailApiUrl, inputHotmailApiResponseType, inputHotmailApiInboxMailbox, inputHotmailApiJunkMailbox].forEach((input) => {
+  input?.addEventListener('input', () => {
+    markSettingsDirty(true);
+    scheduleSettingsAutoSave();
+  });
+  input?.addEventListener('blur', () => {
+    saveSettings({ silent: true }).catch(() => { });
+  });
+});
+
 inputPassword.addEventListener('input', () => {
   markSettingsDirty(true);
   updateButtonStates();
diff --git a/tests/hotmail-utils.test.js b/tests/hotmail-utils.test.js
index af9ac18..c40dbbb 100644
--- a/tests/hotmail-utils.test.js
+++ b/tests/hotmail-utils.test.js
@@ -2,17 +2,16 @@ const test = require('node:test');
 const assert = require('node:assert/strict');
 
 const {
-  buildHotmailGraphMessagesUrl,
+  buildHotmailMailApiLatestUrl,
   extractVerificationCodeFromMessage,
   filterHotmailAccountsByUsage,
   extractVerificationCode,
   getLatestHotmailMessage,
   getHotmailBulkActionLabel,
   getHotmailListToggleLabel,
-  getHotmailGraphRequestConfig,
+  getHotmailMailApiRequestConfig,
   getHotmailVerificationPollConfig,
   getHotmailVerificationRequestTimestamp,
-  normalizeHotmailMailboxId,
   normalizeHotmailMailApiMessages,
   parseHotmailImportText,
   pickHotmailAccountForRun,
@@ -346,22 +345,38 @@ test('pickVerificationMessageWithTimeFallback can ignore afterTimestamp while ke
   assert.equal(result.usedTimeFallback, true);
 });
 
-test('buildHotmailGraphMessagesUrl targets the official Microsoft Graph mailbox endpoint', () => {
-  const url = new URL(buildHotmailGraphMessagesUrl({
+test('buildHotmailMailApiLatestUrl includes email, client id, refresh token, and mailbox', () => {
+  const url = new URL(buildHotmailMailApiLatestUrl({
+    clientId: 'client-123',
+    email: 'user@hotmail.com',
+    refreshToken: 'refresh-token-xyz',
     mailbox: 'Junk',
   }));
 
-  assert.equal(url.origin + url.pathname, 'https://graph.microsoft.com/v1.0/me/mailFolders/junkemail/messages');
-  assert.equal(url.searchParams.get('$top'), '10');
-  assert.equal(url.searchParams.get('$orderby'), 'receivedDateTime desc');
-  assert.match(url.searchParams.get('$select'), /subject/);
-  assert.match(url.searchParams.get('$select'), /receivedDateTime/);
+  assert.equal(url.origin + url.pathname, 'https://apple.882263.xyz/api/mail-new');
+  assert.equal(url.searchParams.get('client_id'), 'client-123');
+  assert.equal(url.searchParams.get('email'), 'user@hotmail.com');
+  assert.equal(url.searchParams.get('refresh_token'), 'refresh-token-xyz');
+  assert.equal(url.searchParams.get('mailbox'), 'Junk');
+  assert.equal(url.searchParams.get('response_type'), 'json');
 });
 
-test('normalizeHotmailMailboxId maps supported mailbox labels to Graph folder ids', () => {
-  assert.equal(normalizeHotmailMailboxId('INBOX'), 'inbox');
-  assert.equal(normalizeHotmailMailboxId('Junk'), 'junkemail');
-  assert.equal(normalizeHotmailMailboxId('junkemail'), 'junkemail');
+test('buildHotmailMailApiLatestUrl supports custom api url and can omit response_type', () => {
+  const url = new URL(buildHotmailMailApiLatestUrl({
+    apiUrl: 'https://example.com/custom-mail-api',
+    clientId: 'client-789',
+    email: 'custom@hotmail.com',
+    refreshToken: 'refresh-token-custom',
+    mailbox: 'Spam',
+    responseType: '',
+  }));
+
+  assert.equal(url.origin + url.pathname, 'https://example.com/custom-mail-api');
+  assert.equal(url.searchParams.get('client_id'), 'client-789');
+  assert.equal(url.searchParams.get('email'), 'custom@hotmail.com');
+  assert.equal(url.searchParams.get('refresh_token'), 'refresh-token-custom');
+  assert.equal(url.searchParams.get('mailbox'), 'Spam');
+  assert.equal(url.searchParams.has('response_type'), false);
 });
 
 test('normalizeHotmailMailApiMessages maps third-party payload fields into verification message shape', () => {
@@ -440,24 +455,9 @@ test('getHotmailVerificationRequestTimestamp prefers actual request timestamps w
   );
 });
 
-test('getHotmailGraphRequestConfig defines Microsoft Graph request defaults', () => {
-  assert.deepEqual(getHotmailGraphRequestConfig(), {
+test('getHotmailMailApiRequestConfig defines third-party mail API request defaults', () => {
+  assert.deepEqual(getHotmailMailApiRequestConfig(), {
     timeoutMs: 15000,
-    pageSize: 10,
-    scopes: [
-      'offline_access',
-      'https://graph.microsoft.com/Mail.Read',
-      'https://graph.microsoft.com/User.Read',
-    ],
-    tokenUrl: 'https://login.microsoftonline.com/consumers/oauth2/v2.0/token',
-    messageFields: [
-      'id',
-      'internetMessageId',
-      'subject',
-      'from',
-      'bodyPreview',
-      'receivedDateTime',
-    ],
   });
 });
 

From e46f861045feed2ae4ae5577d0cd212ac34ef7c3 Mon Sep 17 00:00:00 2001
From: QLHazyCoder <2825305047@qq.com>
Date: Mon, 13 Apr 2026 16:28:01 +0800
Subject: [PATCH 2/5] =?UTF-8?q?=E5=B0=86hotmail=E6=94=AF=E6=8C=81=E6=9C=AC?=
 =?UTF-8?q?=E5=9C=B0=E5=92=8C=E8=BF=9C=E7=A8=8B=E4=B8=A4=E7=A7=8D=EF=BC=8C?=
 =?UTF-8?q?=E8=BF=9C=E7=A8=8B=E4=B8=8D=E4=B8=80=E5=AE=9A=E5=90=88=E9=80=82?=
 =?UTF-8?q?=EF=BC=8C=E5=8F=AF=E8=83=BD=E8=80=83=E8=99=91=E8=BF=9C=E7=A8=8B?=
 =?UTF-8?q?=E9=9C=80=E8=A6=81=E8=87=AA=E8=A1=8C=E4=BF=AE=E6=94=B9=E9=80=82?=
 =?UTF-8?q?=E9=85=8D?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 README.md                                     |  64 +-
 background.js                                 | 352 ++++++++--
 .../hotmail_helper.cpython-313.pyc            | Bin 0 -> 36695 bytes
 scripts/hotmail_helper.py                     | 661 ++++++++++++++++++
 sidepanel/sidepanel.html                      |  29 +-
 sidepanel/sidepanel.js                        |  73 +-
 start-hotmail-helper.bat                      |  19 +
 start-hotmail-helper.command                  |  16 +
 8 files changed, 1119 insertions(+), 95 deletions(-)
 create mode 100644 scripts/__pycache__/hotmail_helper.cpython-313.pyc
 create mode 100644 scripts/hotmail_helper.py
 create mode 100644 start-hotmail-helper.bat
 create mode 100644 start-hotmail-helper.command

diff --git a/README.md b/README.md
index fc07358..2033aef 100644
--- a/README.md
+++ b/README.md
@@ -52,7 +52,7 @@
 - 支持自定义密码；留空时自动生成强密码
 - 自动显示当前使用中的密码，便于后续保存
 - 自动获取注册验证码与登录验证码
-- 支持 `Hotmail`：直接使用 `邮箱 + 客户端 ID + 刷新令牌（refresh token）` 请求第三方邮件 API 读取最新邮件
+- 支持 `Hotmail`：继续使用 `邮箱 + 客户端 ID + 刷新令牌（refresh token）`，并可在远程服务与本地助手两种模式间切换
 - 支持 `QQ Mail`、`163 Mail`、`Inbucket mailbox`
 - 支持从 DuckDuckGo Email Protection 自动生成新的 `@duck.com` 地址
 - 支持基于 Cloudflare 自定义域名自动生成随机邮箱前缀
@@ -137,7 +137,7 @@ Step 1 和 Step 9 都依赖这个地址。
 
 说明：
 
-- `Hotmail` 通过侧边栏里的 Hotmail 账号池选择账号，并请求第三方邮件 API
+- `Hotmail` 通过侧边栏里的 Hotmail 账号池选择账号，可切换为远程服务模式或本地助手模式
 - `QQ`、`163`、`163 VIP` 用于直接轮询网页邮箱
 - `Inbucket` 通过你在侧边栏里配置的 host 访问 `mailbox` 页面：`https://<your-inbucket-host>/m/<mailbox>/`
 
@@ -147,10 +147,9 @@ Step 1 和 Step 9 都依赖这个地址。
 
 可配置项：
 
-- `Hotmail API 地址`
-- `响应类型`
-- `收件箱参数`
-- `垃圾箱参数`
+- `接码模式`
+- `远程服务地址`
+- `本地助手地址`
 
 每条账号支持保存：
 
@@ -161,12 +160,61 @@ Step 1 和 Step 9 都依赖这个地址。
 
 使用方式：
 
-- 先配置 Hotmail API 相关设置
+- 先选择 Hotmail 接码模式
+- 远程模式下填写远程服务地址（默认兼容 `https://apple.882263.xyz`）
+- 本地模式下填写本地助手地址（默认 `http://127.0.0.1:17373`）
+- Windows 运行仓库根目录的 `start-hotmail-helper.bat`
+- macOS 运行仓库根目录的 `start-hotmail-helper.command`
+- 本地 helper 当前仅依赖 Python 标准库，无需额外安装第三方 Python 包
 - 再新增账号
 - 点击 `校验`
 - 校验通过后，可点击 `测试收信`
 - Auto 模式每轮会自动选用一个可用账号
 
+#### 本地 helper 启动命令
+
+Windows：
+
+```powershell
+.\start-hotmail-helper.bat
+```
+
+macOS：
+
+```bash
+chmod +x ./start-hotmail-helper.command
+./start-hotmail-helper.command
+```
+
+如果你不想走启动脚本，也可以直接运行 Python 程序本体：
+
+```bash
+python scripts/hotmail_helper.py
+```
+
+如果你的环境里命令是 `python3`：
+
+```bash
+python3 scripts/hotmail_helper.py
+```
+
+#### 启动成功标志
+
+本地 helper 启动成功后，终端会输出：
+
+```text
+Hotmail helper listening on http://127.0.0.1:17373
+```
+
+看到这行再回到扩展里点 `校验` 或 `复制最新验证码`。
+
+#### 最小排错说明
+
+- 如果提示 `Python 3 not found`，先安装 Python 3.10+
+- 如果 helper 已启动但扩展仍报连接失败，先确认模式切到了 `本地助手`
+- 确认本地助手地址与终端输出一致，默认应为 `http://127.0.0.1:17373`
+- 如果地址一致仍失败，再检查是否有端口占用或终端里是否已经抛出异常
+
 ### `Mailbox`
 
 仅当 `Mail = Inbucket` 时显示。
@@ -414,7 +462,7 @@ Cloudflare 模式下，插件不会再调用 Cloudflare API 创建路由。
 
 支持：
 
-- `Hotmail`（第三方邮件 API）
+- `Hotmail`（远程服务 / 本地助手）
 - `content/qq-mail.js`
 - `content/mail-163.js`
 - `content/inbucket-mail.js`
diff --git a/background.js b/background.js
index 37c4684..cb4a879 100644
--- a/background.js
+++ b/background.js
@@ -38,10 +38,11 @@ const AUTO_RUN_ALARM_NAME = 'scheduled-auto-run';
 const AUTO_RUN_DELAY_MIN_MINUTES = 1;
 const AUTO_RUN_DELAY_MAX_MINUTES = 1440;
 const DEFAULT_LOCAL_CPA_STEP9_MODE = 'submit';
-const DEFAULT_HOTMAIL_MAIL_API_URL = 'https://apple.882263.xyz/api/mail-new';
-const DEFAULT_HOTMAIL_MAIL_API_RESPONSE_TYPE = 'json';
-const DEFAULT_HOTMAIL_MAIL_API_INBOX_MAILBOX = 'INBOX';
-const DEFAULT_HOTMAIL_MAIL_API_JUNK_MAILBOX = 'Junk';
+const HOTMAIL_SERVICE_MODE_REMOTE = 'remote';
+const HOTMAIL_SERVICE_MODE_LOCAL = 'local';
+const DEFAULT_HOTMAIL_REMOTE_BASE_URL = '';
+const DEFAULT_HOTMAIL_LOCAL_BASE_URL = 'http://127.0.0.1:17373';
+const HOTMAIL_LOCAL_HELPER_TIMEOUT_MS = 45000;
 
 initializeSessionStorageAccess();
 
@@ -66,10 +67,9 @@ const PERSISTED_SETTING_DEFAULTS = {
   emailGenerator: 'duck', // 注册邮箱生成方式：duck / cloudflare。
   inbucketHost: '', // 仅当 mailProvider 为 inbucket 时填写 Inbucket 地址，其他情况保持为空。
   inbucketMailbox: '', // 仅当 mailProvider 为 inbucket 时填写邮箱名，其他情况保持为空。
-  hotmailApiUrl: DEFAULT_HOTMAIL_MAIL_API_URL, // Hotmail 第三方邮件 API 地址。
-  hotmailApiResponseType: DEFAULT_HOTMAIL_MAIL_API_RESPONSE_TYPE, // Hotmail 第三方邮件 API 的 response_type 参数。
-  hotmailApiInboxMailbox: DEFAULT_HOTMAIL_MAIL_API_INBOX_MAILBOX, // Hotmail API 收件箱参数值。
-  hotmailApiJunkMailbox: DEFAULT_HOTMAIL_MAIL_API_JUNK_MAILBOX, // Hotmail API 垃圾箱参数值。
+  hotmailServiceMode: HOTMAIL_SERVICE_MODE_REMOTE, // Hotmail 服务模式：远程服务 / 本地助手。
+  hotmailRemoteBaseUrl: DEFAULT_HOTMAIL_REMOTE_BASE_URL, // Hotmail 远程服务地址。
+  hotmailLocalBaseUrl: DEFAULT_HOTMAIL_LOCAL_BASE_URL, // Hotmail 本地 helper 地址。
   cloudflareDomain: '', // 仅当 emailGenerator=cloudflare 时填写自定义域名。
   cloudflareDomains: [], // Cloudflare 可选域名列表。
   hotmailAccounts: [],
@@ -197,56 +197,64 @@ function normalizeCloudflareDomains(values) {
   return normalizedDomains;
 }
 
-function normalizeHotmailMailApiUrl(rawValue = '') {
+function normalizeHotmailServiceMode(rawValue = '') {
+  return String(rawValue || '').trim().toLowerCase() === HOTMAIL_SERVICE_MODE_LOCAL
+    ? HOTMAIL_SERVICE_MODE_LOCAL
+    : HOTMAIL_SERVICE_MODE_REMOTE;
+}
+
+function normalizeHotmailRemoteBaseUrl(rawValue = '') {
   const value = String(rawValue || '').trim();
-  if (!value) return DEFAULT_HOTMAIL_MAIL_API_URL;
+  if (!value) return DEFAULT_HOTMAIL_REMOTE_BASE_URL;
 
   try {
     const parsed = new URL(value);
     if (!['http:', 'https:'].includes(parsed.protocol)) {
-      return DEFAULT_HOTMAIL_MAIL_API_URL;
+      return DEFAULT_HOTMAIL_REMOTE_BASE_URL;
     }
-    return parsed.toString();
+
+    if (parsed.pathname.endsWith('/api/mail-new') || parsed.pathname.endsWith('/api/mail-all') || parsed.pathname === '/api.html') {
+      parsed.pathname = '';
+      parsed.search = '';
+      parsed.hash = '';
+    }
+
+    return parsed.toString().replace(/\/$/, '');
   } catch {
-    return DEFAULT_HOTMAIL_MAIL_API_URL;
+    return DEFAULT_HOTMAIL_REMOTE_BASE_URL;
   }
 }
 
-function normalizeHotmailMailApiResponseType(rawValue) {
-  if (rawValue === undefined || rawValue === null) {
-    return DEFAULT_HOTMAIL_MAIL_API_RESPONSE_TYPE;
+function normalizeHotmailLocalBaseUrl(rawValue = '') {
+  const value = String(rawValue || '').trim();
+  if (!value) return DEFAULT_HOTMAIL_LOCAL_BASE_URL;
+
+  try {
+    const parsed = new URL(value);
+    if (!['http:', 'https:'].includes(parsed.protocol)) {
+      return DEFAULT_HOTMAIL_LOCAL_BASE_URL;
+    }
+
+    if (['/messages', '/code', '/clear', '/token'].includes(parsed.pathname)) {
+      parsed.pathname = '';
+      parsed.search = '';
+      parsed.hash = '';
+    }
+
+    return parsed.toString().replace(/\/$/, '');
+  } catch {
+    return DEFAULT_HOTMAIL_LOCAL_BASE_URL;
   }
-  return String(rawValue).trim();
 }
 
-function normalizeHotmailMailApiMailbox(rawValue, fallback) {
-  if (rawValue === undefined || rawValue === null) {
-    return fallback;
-  }
-  const value = String(rawValue).trim();
-  return value || fallback;
-}
-
-function getHotmailMailApiSettings(state = {}) {
+function getHotmailServiceSettings(state = {}) {
   return {
-    apiUrl: normalizeHotmailMailApiUrl(state.hotmailApiUrl),
-    responseType: normalizeHotmailMailApiResponseType(state.hotmailApiResponseType),
-    inboxMailbox: normalizeHotmailMailApiMailbox(state.hotmailApiInboxMailbox, DEFAULT_HOTMAIL_MAIL_API_INBOX_MAILBOX),
-    junkMailbox: normalizeHotmailMailApiMailbox(state.hotmailApiJunkMailbox, DEFAULT_HOTMAIL_MAIL_API_JUNK_MAILBOX),
+    mode: normalizeHotmailServiceMode(state.hotmailServiceMode),
+    remoteBaseUrl: normalizeHotmailRemoteBaseUrl(state.hotmailRemoteBaseUrl),
+    localBaseUrl: normalizeHotmailLocalBaseUrl(state.hotmailLocalBaseUrl),
   };
 }
 
-function resolveHotmailMailApiMailbox(mailbox, settings = {}) {
-  const normalized = String(mailbox || '').trim().toLowerCase();
-  if (normalized === 'junk' || normalized === 'junk email' || normalized === 'junkemail') {
-    return normalizeHotmailMailApiMailbox(settings.junkMailbox, DEFAULT_HOTMAIL_MAIL_API_JUNK_MAILBOX);
-  }
-  if (normalized === 'inbox' || !normalized) {
-    return normalizeHotmailMailApiMailbox(settings.inboxMailbox, DEFAULT_HOTMAIL_MAIL_API_INBOX_MAILBOX);
-  }
-  return String(mailbox || '').trim();
-}
-
 function normalizePersistentSettingValue(key, value) {
   switch (key) {
     case 'panelMode':
@@ -280,14 +288,12 @@ function normalizePersistentSettingValue(key, value) {
       return String(value || '').trim();
     case 'inbucketMailbox':
       return String(value || '').trim();
-    case 'hotmailApiUrl':
-      return normalizeHotmailMailApiUrl(value);
-    case 'hotmailApiResponseType':
-      return normalizeHotmailMailApiResponseType(value);
-    case 'hotmailApiInboxMailbox':
-      return normalizeHotmailMailApiMailbox(value, DEFAULT_HOTMAIL_MAIL_API_INBOX_MAILBOX);
-    case 'hotmailApiJunkMailbox':
-      return normalizeHotmailMailApiMailbox(value, DEFAULT_HOTMAIL_MAIL_API_JUNK_MAILBOX);
+    case 'hotmailServiceMode':
+      return normalizeHotmailServiceMode(value);
+    case 'hotmailRemoteBaseUrl':
+      return normalizeHotmailRemoteBaseUrl(value);
+    case 'hotmailLocalBaseUrl':
+      return normalizeHotmailLocalBaseUrl(value);
     case 'cloudflareDomain':
       return normalizeCloudflareDomain(value);
     case 'cloudflareDomains':
@@ -710,7 +716,17 @@ async function ensureHotmailAccountForFlow(options = {}) {
   return setCurrentHotmailAccount(account.id, { markUsed, syncEmail: true });
 }
 
-async function requestHotmailMailApi(account, mailbox = 'INBOX') {
+function buildHotmailRemoteEndpoint(baseUrl, path) {
+  const normalizedBaseUrl = normalizeHotmailRemoteBaseUrl(baseUrl);
+  return new URL(path, `${normalizedBaseUrl}/`).toString();
+}
+
+function buildHotmailLocalEndpoint(baseUrl, path) {
+  const normalizedBaseUrl = normalizeHotmailLocalBaseUrl(baseUrl);
+  return new URL(path, `${normalizedBaseUrl}/`).toString();
+}
+
+async function requestHotmailRemoteMailbox(account, mailbox = 'INBOX') {
   if (!account?.email) {
     throw new Error('Hotmail 账号缺少邮箱地址。');
   }
@@ -721,14 +737,14 @@ async function requestHotmailMailApi(account, mailbox = 'INBOX') {
     throw new Error(`Hotmail 账号 ${account.email || account.id} 缺少刷新令牌（refresh token）。`);
   }
 
-  const hotmailApiSettings = getHotmailMailApiSettings(await getState());
+  const serviceSettings = getHotmailServiceSettings(await getState());
   const url = buildHotmailMailApiLatestUrl({
-    apiUrl: hotmailApiSettings.apiUrl,
+    apiUrl: buildHotmailRemoteEndpoint(serviceSettings.remoteBaseUrl, '/api/mail-new'),
     clientId: account.clientId,
     email: account.email,
     refreshToken: account.refreshToken,
-    mailbox: resolveHotmailMailApiMailbox(mailbox, hotmailApiSettings),
-    responseType: hotmailApiSettings.responseType,
+    mailbox,
+    responseType: 'json',
   });
   const { timeoutMs } = getHotmailMailApiRequestConfig();
   const controller = new AbortController();
@@ -791,13 +807,13 @@ function buildHotmailMailApiFailureAccount(account, errorMessage) {
   });
 }
 
-async function fetchHotmailMailboxMessages(account, mailboxes = HOTMAIL_MAILBOXES) {
+async function fetchHotmailMailboxMessagesFromRemoteService(account, mailboxes = HOTMAIL_MAILBOXES) {
   let workingAccount = normalizeHotmailAccount(account);
   const mailboxResults = [];
 
   try {
     for (const mailbox of mailboxes) {
-      const result = await requestHotmailMailApi(workingAccount, mailbox);
+      const result = await requestHotmailRemoteMailbox(workingAccount, mailbox);
       workingAccount = applyHotmailApiResultToAccount(workingAccount, result);
       mailboxResults.push({
         mailbox,
@@ -819,6 +835,221 @@ async function fetchHotmailMailboxMessages(account, mailboxes = HOTMAIL_MAILBOXE
   };
 }
 
+async function requestHotmailLocalMessages(account, mailboxes = HOTMAIL_MAILBOXES) {
+  if (!account?.email) {
+    throw new Error('Hotmail 账号缺少邮箱地址。');
+  }
+  if (!account?.clientId) {
+    throw new Error(`Hotmail 账号 ${account.email || account.id} 缺少客户端 ID。`);
+  }
+  if (!account?.refreshToken) {
+    throw new Error(`Hotmail 账号 ${account.email || account.id} 缺少刷新令牌（refresh token）。`);
+  }
+
+  const serviceSettings = getHotmailServiceSettings(await getState());
+  const { timeoutMs } = getHotmailMailApiRequestConfig();
+  const requestTimeoutMs = Math.max(timeoutMs, HOTMAIL_LOCAL_HELPER_TIMEOUT_MS);
+  const controller = new AbortController();
+  const timeoutId = setTimeout(() => controller.abort(new Error('timeout')), requestTimeoutMs);
+
+  let response;
+  try {
+    response = await fetch(buildHotmailLocalEndpoint(serviceSettings.localBaseUrl, '/messages'), {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        Accept: 'application/json',
+      },
+      body: JSON.stringify({
+        email: account.email,
+        clientId: account.clientId,
+        refreshToken: account.refreshToken,
+        mailboxes,
+        top: 5,
+      }),
+      signal: controller.signal,
+    });
+  } catch (err) {
+    if (err?.name === 'AbortError') {
+      throw new Error(`Hotmail 本地助手请求超时（>${Math.round(requestTimeoutMs / 1000)} 秒）`);
+    }
+    throw new Error(`Hotmail 本地助手请求失败：${err.message}`);
+  } finally {
+    clearTimeout(timeoutId);
+  }
+
+  const text = await response.text();
+  let payload = {};
+  try {
+    payload = text ? JSON.parse(text) : {};
+  } catch {
+    payload = { raw: text };
+  }
+
+  if (!response.ok || payload?.ok === false) {
+    const errorText = payload?.error || payload?.message || text || `HTTP ${response.status}`;
+    throw new Error(`Hotmail 本地助手返回失败：${errorText}`);
+  }
+
+  const rawMessages = Array.isArray(payload?.messages) ? payload.messages : [];
+  const normalizedMessages = normalizeHotmailMailApiMessages(rawMessages).map((message, index) => ({
+    ...message,
+    mailbox: rawMessages[index]?.mailbox || 'INBOX',
+    receivedTimestamp: Number(rawMessages[index]?.receivedTimestamp || 0) || 0,
+  }));
+  const mailboxResults = Array.isArray(payload?.mailboxResults)
+    ? payload.mailboxResults.map((item) => ({
+      mailbox: String(item?.mailbox || 'INBOX'),
+      count: Number(item?.count || 0),
+      messages: normalizedMessages.filter((message) => String(message.mailbox || 'INBOX') === String(item?.mailbox || 'INBOX')),
+    }))
+    : mailboxes.map((mailbox) => ({
+      mailbox,
+      count: normalizedMessages.filter((message) => String(message.mailbox || 'INBOX') === mailbox).length,
+      messages: normalizedMessages.filter((message) => String(message.mailbox || 'INBOX') === mailbox),
+    }));
+
+  const nextAccount = applyHotmailApiResultToAccount(account, {
+    nextRefreshToken: String(payload?.nextRefreshToken || '').trim(),
+  });
+  const savedAccount = await upsertHotmailAccount(nextAccount);
+  return {
+    account: savedAccount,
+    mailboxResults,
+    messages: normalizedMessages,
+  };
+}
+
+async function requestHotmailLocalCode(account, pollPayload = {}) {
+  if (!account?.email) {
+    throw new Error('Hotmail 账号缺少邮箱地址。');
+  }
+  if (!account?.clientId) {
+    throw new Error(`Hotmail 账号 ${account.email || account.id} 缺少客户端 ID。`);
+  }
+  if (!account?.refreshToken) {
+    throw new Error(`Hotmail 账号 ${account.email || account.id} 缺少刷新令牌（refresh token）。`);
+  }
+
+  const serviceSettings = getHotmailServiceSettings(await getState());
+  const { timeoutMs } = getHotmailMailApiRequestConfig();
+  const requestTimeoutMs = Math.max(timeoutMs, HOTMAIL_LOCAL_HELPER_TIMEOUT_MS);
+  const controller = new AbortController();
+  const timeoutId = setTimeout(() => controller.abort(new Error('timeout')), requestTimeoutMs);
+
+  let response;
+  try {
+    response = await fetch(buildHotmailLocalEndpoint(serviceSettings.localBaseUrl, '/code'), {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        Accept: 'application/json',
+      },
+      body: JSON.stringify({
+        email: account.email,
+        clientId: account.clientId,
+        refreshToken: account.refreshToken,
+        mailboxes: HOTMAIL_MAILBOXES,
+        top: 5,
+        senderFilters: pollPayload.senderFilters || [],
+        subjectFilters: pollPayload.subjectFilters || [],
+        excludeCodes: pollPayload.excludeCodes || [],
+        filterAfterTimestamp: Number(pollPayload.filterAfterTimestamp || 0) || 0,
+      }),
+      signal: controller.signal,
+    });
+  } catch (err) {
+    if (err?.name === 'AbortError') {
+      throw new Error(`Hotmail 本地助手请求超时（>${Math.round(requestTimeoutMs / 1000)} 秒）`);
+    }
+    throw new Error(`Hotmail 本地助手请求失败：${err.message}`);
+  } finally {
+    clearTimeout(timeoutId);
+  }
+
+  const text = await response.text();
+  let payload = {};
+  try {
+    payload = text ? JSON.parse(text) : {};
+  } catch {
+    payload = { raw: text };
+  }
+
+  if (!response.ok || payload?.ok === false) {
+    const errorText = payload?.error || payload?.message || text || `HTTP ${response.status}`;
+    throw new Error(`Hotmail 本地助手返回失败：${errorText}`);
+  }
+
+  const normalizedMessage = payload?.message
+    ? {
+      ...normalizeHotmailMailApiMessages([payload.message])[0],
+      mailbox: payload?.message?.mailbox || 'INBOX',
+      receivedTimestamp: Number(payload?.message?.receivedTimestamp || 0) || 0,
+    }
+    : null;
+  const nextAccount = applyHotmailApiResultToAccount(account, {
+    nextRefreshToken: String(payload?.nextRefreshToken || '').trim(),
+  });
+  const savedAccount = await upsertHotmailAccount(nextAccount);
+  return {
+    account: savedAccount,
+    code: String(payload?.code || ''),
+    message: normalizedMessage,
+    usedTimeFallback: Boolean(payload?.usedTimeFallback),
+    selectionSource: String(payload?.selectionSource || ''),
+  };
+}
+
+async function pollHotmailVerificationCodeViaLocalHelper(step, account, pollPayload = {}) {
+  const maxAttempts = Number(pollPayload.maxAttempts) || 5;
+  const intervalMs = Number(pollPayload.intervalMs) || 3000;
+  let workingAccount = account;
+  let lastError = null;
+
+  for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+    throwIfStopped();
+    try {
+      await addLog(`步骤 ${step}：正在通过本地助手轮询 Hotmail 验证码（${attempt}/${maxAttempts}）...`, 'info');
+      const fetchResult = await requestHotmailLocalCode(workingAccount, pollPayload);
+      workingAccount = fetchResult.account;
+
+      if (fetchResult.code) {
+        const mailboxLabel = fetchResult.message?.mailbox || 'INBOX';
+        if (fetchResult.usedTimeFallback) {
+          await addLog(`步骤 ${step}：本地助手使用时间回退后命中 Hotmail ${mailboxLabel} 验证码。`, 'warn');
+        }
+        await addLog(`步骤 ${step}：已通过本地助手在 Hotmail ${mailboxLabel} 中找到验证码：${fetchResult.code}`, 'ok');
+        return {
+          ok: true,
+          code: fetchResult.code,
+          emailTimestamp: fetchResult.message?.receivedTimestamp || Date.now(),
+          mailId: fetchResult.message?.id || '',
+        };
+      }
+
+      lastError = new Error(`步骤 ${step}：本地助手暂未返回匹配验证码（${attempt}/${maxAttempts}）。`);
+      await addLog(lastError.message, attempt === maxAttempts ? 'warn' : 'info');
+    } catch (err) {
+      lastError = err;
+      await addLog(`步骤 ${step}：本地助手轮询 Hotmail 失败：${err.message}`, 'warn');
+    }
+
+    if (attempt < maxAttempts) {
+      await sleepWithStop(intervalMs);
+    }
+  }
+
+  throw lastError || new Error(`步骤 ${step}：本地助手未返回新的匹配验证码。`);
+}
+
+async function fetchHotmailMailboxMessages(account, mailboxes = HOTMAIL_MAILBOXES) {
+  const serviceSettings = getHotmailServiceSettings(await getState());
+  if (serviceSettings.mode === HOTMAIL_SERVICE_MODE_LOCAL) {
+    return requestHotmailLocalMessages(account, mailboxes);
+  }
+  return fetchHotmailMailboxMessagesFromRemoteService(account, mailboxes);
+}
+
 async function verifyHotmailAccount(accountId) {
   const state = await getState();
   const account = findHotmailAccount(state.hotmailAccounts, accountId);
@@ -866,6 +1097,11 @@ async function pollHotmailVerificationCode(step, state, pollPayload = {}) {
   });
   await addLog(`步骤 ${step}：当前使用 Hotmail 账号 ${account.email} 轮询收件箱。`, 'info');
 
+  const serviceSettings = getHotmailServiceSettings(state);
+  if (serviceSettings.mode === HOTMAIL_SERVICE_MODE_LOCAL) {
+    return pollHotmailVerificationCodeViaLocalHelper(step, account, pollPayload);
+  }
+
   const maxAttempts = Number(pollPayload.maxAttempts) || 5;
   const intervalMs = Number(pollPayload.intervalMs) || 3000;
   let lastError = null;
@@ -1755,7 +1991,7 @@ function getSourceLabel(source) {
     'mail-163': '163 邮箱',
     'inbucket-mail': 'Inbucket 邮箱',
     'duck-mail': 'Duck 邮箱',
-    'hotmail-api': 'Hotmail（第三方邮件 API）',
+    'hotmail-api': 'Hotmail（远程/本地）',
   };
   return labels[source] || source || '未知来源';
 }
@@ -3619,7 +3855,7 @@ async function executeStep3(state) {
 function getMailConfig(state) {
   const provider = state.mailProvider || 'qq';
   if (provider === HOTMAIL_PROVIDER) {
-    return { provider: HOTMAIL_PROVIDER, label: 'Hotmail（第三方邮件 API）' };
+    return { provider: HOTMAIL_PROVIDER, label: 'Hotmail（远程/本地）' };
   }
   if (provider === '163') {
     return { source: 'mail-163', url: 'https://mail.163.com/js6/main.jsp?df=mail163_letter#module=mbox.ListModule%7C%7B%22fid%22%3A1%2C%22order%22%3A%22date%22%2C%22desc%22%3Atrue%7D', label: '163 邮箱' };
diff --git a/scripts/__pycache__/hotmail_helper.cpython-313.pyc b/scripts/__pycache__/hotmail_helper.cpython-313.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..4718d47a7a8b3efe2743bc7e56ca847b9c016c66
GIT binary patch
literal 36695
zcmeIb3s@Z2ohMrTe$q|TK=TyMLp&tWAPK#YKtjBc0Ewa{WF%n(4Z=cztC3`3J0Uas
zK*`K!<Rn*k;{A*h?-(cEF}XK$!^~tSa-Q06a`#rNu)E!167OvG&iKxqyXY~At?a#f
zfB#cm-3@9X#haNs`+Zvyr%zR#bL!MN|MP#Jf89$;GIKZv-&h&hJIHbWkxrDu7|GnL
zQghswIiBNHM>s+LRS7C~t`^knS0iZHuU62qU!9=Culk6-O)u!%41&Q;^)yF}Z6?9Q
z^4cTjHj7|svkF#rt~-*{W)o~}cEQfh^+%H19D<`QMMz=ih9l0lR3Vk+jYrbj(uMRk
zm*B#=Nyy;MLMCq!vUsbI%_j*tyiLgE?ZPHLS;*rZf}2k{omI*4PLGC9J)Og+ozAON
zv9t8k*>PtscIJ-U%Q&4Ksgvo^3Hf}MP{3ykg?x@s#ODf|`Au1zP|W8cE#cirOZj>}
zKZ|=tC6w_Ed;!aC;T!ovmfOk~q0BaZGtzRDEM`|dd<o7g_)?^md>PX1{1&7;_^n8H
z^4pMB@#RQ&@gAhR`3j_a_)4UE`Rz#e@jFg$u2S<mS$oxd6|U{)cOgB%??ze^xxa_q
zuZ^7TWoHNZeJF8=uSQzO??-x=KY+BJuR+?t*CK7q;0ieYU>3(8I&Isfkzqn;;_Gm)
z`E(0^xVneq`T;Aan+v#I5s-0n!>VCbS<^>!-chCw8wdL*eUl>>ePJV|Q{!X4GF3Qf
z&^ItX=<7T0>mT$9C}x`I7yLLG6vAmNOV#=&$NQA(D3gA;-|uVb?mpJ#d-jsgKiSeh
zHaO}N!p`pV0;-OT4bx5DCtQ}Bq_ajr7#G4uZ`V<l!=p`?gi+rZJsnLNB29%2xH>-J
z8=Eq1-?7J2iGSNi{<5Cqrb^FGPEPo%D=J3EheyUdqa&Ano`La;732MvCeQDvL>Djk
z#yoyuXsUW`$%`Wc!nl8YXmWgPbYx7fgo+o($0BtrF7NPER<Qb0HBVA^%zx>kPw*$G
zo~=|L7Wya7d!mn~o=#;cH^(ncj*gFC@Qe=)jSR33O+AG?^{%gfV8G}1yOp8|+No&o
z9~t#@VW2lG<@NgnR%)tfqsBagzM=k0qmyARjcA!BtR3qIjA$?oVYBbKNui%+zW+g{
zZw&eJf$_-8mk;_zeZzo_!LZIhfEjy`u9Tpmjop5by6!rA+`6lg5h>FNc7Utkq$G`!
zbV^)Erqb4q+Roj(Xi!J~1J=Vw<tXrx4#_}dbs)=eggxo}-m5CYp1pL99bLet>yHA?
ztL9a_dY`(B8d`Vonq6pvjxmjw>oUms_|&UXO1L?cFvZ`K^SqYV?TS44k!AF~7Nury
zl9KaApRPRPvF#Xm<73O1c<p1$n0d>ZGBiEwju^(ldnd2EiPJ8c&2>lYjew`PGHXZE
zTdJ_t2iOv@1pEUdBM)?!CWp%RKCsr0k4*xC%Db;l_@?suCniQm2KpyQuzH{IkB{wl
z51c22HCZDUw<*Ps`o@MQ&p*hnW9zA$E(_zM<#nT@<5$W%g%RM8uxiVLoP_sV7&i1j
z;%>Wd^8EOq|3T8RPQH7ayYpCgYi9>vW)5qqM`7LIrHd2(uwKS(;UvFrY_L!8`6sY+
zd|?YamC<cj<DV458eqY&g$l`6{bAjep^;G^euR-pUzs*+I3Gc<djDkq<RyRDFwuW?
zbi98stUWhAc-61P=(=%)GyMa?$i$?-;{5pJMPLcEI646|FmW}UM16~PL#RTPL-_Om
zA(Cls#bSS{`t#MZ!wZc8%Z{LBU%;|&sYJ3Io^A+fEkSK&K$|&NysXV<XRd(OHD?n`
zTbH$M(F<Zm>Dz^G4=fgaW8@p2W$nJW8@m?$%i8^M7j`e%mbJ}mF4&i~Ezt|h+DzpC
zW&7vagIe}5?R(nXd*~@Q5Lt$l=k)kv3w(#Xz@zs7hzXW>!i9|`uK;+Bs+2VgW(>8#
z)<l=xn98f-HPv4Nna$>CdDD~E9f_8F3@LP~c<q>a6W7a_J*wJeUDp6k2?=#2SYkjN
zk#|#mi@1EQH@esiTz@K|rrzjM<Mm#RjoYbK%6m0Fu!&=uI?a%3h^x`$aYL#yLx+%u
zr-oIP0u7g+lILF(a`7{j-a2-<e{^Kf-NtuzxFhgZ?FN)<M#d%qlJXJ>YleN3VV%GL
zR!h`h*i2382t2U}WcDI#YJ6_MH$kg5Z0))<Mhu9|255x}Dz3*Gz;X?1g#IgGjqkaE
zC`=1G>Ar(n?qeVv>59;R>qqhD|7S=5!AZ%pt{ZvR^Ma0|fTKv<44{)7`-6@{OV3J4
zb<<6uQqQ8}8|Imkm&&h|2hBMFbI#m}WpmMzZn}O|t<g28R_xA~ranJ4SNPhNSGLTb
zl(NbtyGJy7K3=h;-s4nM!j>iG?p&;2+$Co3lWf&DHKMWp*Q*-3_rRZlj=bwEs@u!G
zyVra;UGqJ){jfvxJ%<kYfp~a~!mWNi+(wB=S3Ds@yL9l;yJPC!D3R(>^J-oLhFQB$
z0|<zcCa<QK2p~In-9ELN8`C}(`m~9lPeJfq4yC==Z>&!Wr1?o4!9QhHxjBN>ZCrG1
z;hl%nZY~cijF5i>7WEwr?u1Qfdn!L3%|BOu<;s=vp>g42d6Z)u1k0!;zC_rE@}M0C
z0x56^WhQ~vl~6(n5m3Q~B<$*HJnn7eyZgFZ+Z#K*-F<vxeP>4l&wy2^p>hW(sYL=N
zgkDr=LJ~H}SbQ*S5M*9AY*bLWpQZp<*X@>J)HE^fpX{T43hlV##h?Ey62PX-HK+Z;
zc+gf9uoVHYY~|C<E4H-Rfklsa*e7lu3fP8m#RLdmF4%Y5RK0XwfyL6-%3mq}N<}cM
zGLTid=#sMbN%rbrX*l!#ps5=FANYx1_~V^*J2da^Fdya&YXFUafg#BM7a4Fs7<&2W
zQLRUIkh4_#)Bvm~;Ca=(TBSVkMF1d;SCfeMQ2-<ca9vR}r?kM3o2Dzu)5NYTwG)9}
z3<WFTRi*xv0H*DDOU0l?XvVV{u$38OAR@HlYS;j5MiNOvxX{XQK@cY#p@g9y8lxBx
z7|{U3Q^IjvKaD?sHxhyY%=eo$3+Dp1?d#?`WOoJac>#N#WY2%2>doq}Rxg}?=i*xz
zzcC*4Gz2^iH&05QcB!yKw0EqTc>?s;>oj#9&AT3R-GQ}JPu*fuKZ{KK)O)%0Qy*Ky
zV`{HDew_}h;=w_g0<WsN8k7(Vi(dmS%KdUIj3Q#EIj>3!Dq4;n^yF^=PSA3cFXGCy
z9brz$M}A7<@p#JA!WQI(tw<n&=s<Wb`NG-@KHr3J7}xytBGGkbx!CW&(C7CJ2);?-
z1n!)pA~Y8mWpmPu@1+Z~f@IE`uK$_E7P3254Ca}gzx&*5m1J;*>?vR3=bT^cx%L^+
zm>aU#W-iTYXR7CP0ZZ<@X1;O0Y2FgBY!$Uz1p>=8i|JF1XhJ*=e63)|g!i>^_oH|o
z-H9B^f}z=x#~353>kxR{537>GDtB0AF4M3vCA>8;+CKnp61?Wf1TGUif<BL29D&d`
z2@!AY@LC~NP4o{;_R%e&4}~w_&wmgJ#+OFyrRV3=k|jH6DGXQ&=NlFZC5tC$*&VR#
zUYuOwB}-k<(j2ffOO{q}j~4r^el~69fT(rJLmI_FXpmlx0V!eqcp&9fUXIuoB5nKB
zOh(XlOeOcW$b4-JV{6a2yMg(2L!+1c=b=x~O$gvjkTG0@1l>RE^V6du$k_<3LEp$2
zu(J;rC-CP7$3$<WHHp@oxs!9PqPcisP}1&{yGh+r4nnc4n-hS6F9WJ&QPD%9VEpSu
z%47B-SJ$t!O0H1_8Xe^Yx(KG$9WfQom=^qEjGlA6mc|RBQ>6ZwF2?V9bqRZ7dsI(&
zyK<*1b6p2;8ig>U*BHeIFJiqLy-@bCUPOAsC-+9Vf=Behp*$&WG=K&m0w?ZsN`mrf
zRK7P$>1kJvl8gO<ch>Pn-nlQz^Y)^ad_3uhd$r{tT)c%an9>X0>d_Z*eCql)|LwHy
zH9mF@qg-Fy_yGdk+>^~ApXO2X=^h=E7@`~@B!<sIV$gf_T?F0h4rTrmk!xPZ>v;oM
z1*jMv8k4B(;??tJ@PLt36bB=QxVONQF{@FT#j97wT>1U&j4{oiU!4c~Gp4Vjxn#dX
zs$Nnqu>+$4reI9}@Eh@5tnYl1S067^{loSyDy6wP!byT}2yEwhS;+|!X&M+Efl{Pz
zWKbB!8-&f!6XJ9dIuaoT7i3O_1i7$&WOxi%513N#BOR>2Ng%l~tR+6@qrbrnmFdIk
z@e5%iR1g#6K%sKwN-CsdRiFqQ?Vs@b2Kz4hr_#Gg(dv${!|oxd8GM7)?yyzXT*_T!
zwCJN-)P#dI(KqOmbrTQ)g=cYHfFR9vgYx^SP|6sH4YU*SZ>bZ;sT|>Ixkm!!wj(LC
z3t&L-3QV1Cg1T`W%3Y{=+o=Sxo-uBov2^{DlL8}UGM}-RN)Xr!#GuK%UNLeI9@x{)
z(^WRE*2rrz9cb7L^@{+FXJ7v$>xWQ}f+XWkVi4Gi_(|_a+#ow-xgcXwxEg)6HG>3<
z%1z?WUx4*I&3%}*DU?|pO5c3Ppi9-S8aZp~O9!qUn6pZj%|Xl7g_Knju1_DmZ{<?b
zZ)|#bljO*sZd+BS>dY%C*>f%P-d8#oPD?4(Glu(HxK!8dl^f4re}2AJa_tDZ_AZ{2
zocn^#g8}D3$yqmj^k){=hbgX5hI>9ekWm_PX3sTVKNw2STuIBHFL`t8>sv)nom6o6
zR~%Q^q`o=);|uRz5W7xEO;5>Jmd~CGo;`p2?0IoyVime1b))(Y$Mvb2)b}_py;;4I
zmHX=CYoGap&q#R{i(3MD2X1Nun;N97#yd%dWb-O#Fqv0VIlD8I3Nbv8S_CF|PIv9I
zE9sf9R=rmH2enf6)`e#R*?X570$GQo^tumoN>>Ut&kw(O;q?oP6;koxU~$XMb5cQT
zu%I(g&?yxhzoXNnn(tUlR{bhx(&<0Ge~`1L-9y$Ka-`nKxSsLFte~SH;3$~iv$$7u
z6o`%kGx~>zU?n|wZeV`*LY0(WNn=qQEU0?Beo^y{7AbAl#&7la^j5#VpNxsS#~F3z
zhZ_&2XQ558sCsGV(q^&Xkd#*UBu%br(Aon(Ey-`&8*{lI=9*h}X?|EzSJj-a`Ej-i
zCqK?lqSSMsrBZWi3thQYsYAL(BTf<nq2zmq0dQaDDoCPJ$01~}BW_&fRmW9M?u6E_
zu7Fa=$+bYUF{bruV;c1RXoQqx?Lhdkt6s*S98<T0P+QQ_m<}ojdLBC<ED-0w4sVpa
z+8`jrU5^qwT-SPa=mk)Bq!(a?#)o(vHG*egrO`9|>M=sfQPM$d1$s=x%@AXrdM2QX
zi}Yj+ObxH6RutBze+S+o)=vZO8|gm!U_#z3=XYuqvV><Cc?(_Tt&~R3k|JlUHm=%O
z8M_A~Noo*C&k5`TUSq7?xLzcqzS0W^@+s8T+8*&vTu+s+?~H4u{d4lz@M(#NJD;9~
zo;agSp7QiDQ_SMPyS%1&Qs-0A8(^%pLrCROAL7a~I^NQ(v)D}KGD8~Z1H<KRhBDnU
zxoRD(nX)N&7#XRVvZ90lGt%&g&tJnR6GQt`dFz_FB-_Ol8dbwE^_0aOp-k<l9HkEo
z6$_U!UW{;*X=4|{Hr8&R(oWbUpF^`WwQ21mWy<DOO4dvn>1CjPuMub=J}|mv#9zbc
z*#nLH1@{{5G{BYHiNAX-ND2X}kQ}(kVj_JqlYTIvlvhV4SA#rTL>PSCW$w#5H>WJ7
zVcj0+Zp-xS#lxyn)`=-iS+$!zzvC?qIx)4UGOUHs;3CuIMm19hhJ7Hg6GCmcM4_?q
zgvfJXbbO$H)L-j~7X07QXa61~AAvBfa+*y2U!`WvG^}bkYx1l)V96GtKCPP@oZtJ(
zn3!9>z%QmQ4u3Ou(f*$CP&hT~6Q;lY9e06hs-!!@FUar^8P)MIcmL>Uba4I9EE~f1
z?#?5P9es@*4aYiLJGyx$t1%H@AW|9DLoJBufSm<wif{;*%FIHHSlc3ybhVF6n0{dt
z1!P_)#SdfU08wsbHvPg3-JL)Z)`PVo3#dV!PrsiyhzJSCk4(i=6Ahg3GD^OMKmS`Q
zqTrz<`*hQ)o=YzZrVZUL84}Zm?&-8y`oBsWnjum6O9um%f_pm7wCVTkbJ}HN?gwc@
zt2$2STIEpczM0b{t*TX~)Rok{d6Sg7MRaam<y6};Rx%3b+og;hqH8D4tI|KHJS?Tx
z->y8opq*>_(hGsg!-4dAF|A?MpfNS6?rU^9{XH9(Rx)E;ag;5TF1;u@+Gq43i(|Iv
zr2{M0R6N9y6Ur%=uMXsR#Ow+*TA3TlEu23Z$lWgH>{!*Q9aZ-=+9cbmmCG-gzZ!6F
zU-Sgrb)n*I3#S6bd&Ip*1I6v3g3^VoKtUDNY<%U+9k3_1yLboNs*N+*UrM@`G&_Ws
zTrno&fk_#mj7@V>fs8Gpi@jBPC_QJcCy-t&rj?)rrJ143ym@ONvs}#Z;Jkv}KY4vz
zOe<bBX_HESsnMIvck=OCtCgHR^`&R7J#&Wu^FO3!-P7Us9;dPEr<?B^Ig3loJap4_
z(<HjuB=Zqbd*qY5$5j~NPwu90t_GDq8B_MMt-+;zBMHg7X|{%(lr_2@T8=~z?twC3
z-OB0+UhP$3y=rzQmRqCbfoWr=beCX&ubE0xk$*zXVPC)C6Wmj3l}c7Us+fuzOV;dT
zmOApdkXcBORY0E%bxG$gjf@WVJtsRk2w%pn_wna1L_*+}GFv^nP2A*Jcwu2|sYSFj
z1}#SemZP^$N*1rE^**e`ikco?KnrKNv#Q72#ba9FUaHNGn5Gw6V+|>y5>grrn3scR
zj0V0g@%CsnQvotXY}nA#S?BF;*|7$9YVj133-6JjU#pH+4Rx!#Rf-0r2&(^%G8G#a
zNJXkX8PR_Um1L#X^t3#V#sj1M7tam$*M>Kdb4ec!`ML4u;t*ft{t8tkHtFMO?(H*6
z)i+;QF7IZ;2r0=ha<L!g=W}6GYkS?Xsy?1SDrfszU<r<7k9Br+%gSUc%{-(uvRA{i
zLZEK34u<tIJ!E}+`sv7ATjP5sd<})e)EN(wPoSqtN)0A$x}CJ?)vIrpE!T7hlDx2K
zY0VJ>sp-AK?q#hPOMJThVLh7>Z7^{508J4YD#Zml25~;D0w1V~*#=^~8Hg1O7?%K$
z6NNF(B;GEdOoY;2KlHd>RU#V!AS4m*qlx1_@f;{M04*?OMU^-pfDMmoGv+Jdjh0uq
z8Pt0^!Ud@ksWD=v*+g~+MFA31tjgA@XE0{M1tc&X5RM3&NBkpWU<<}b!+P%OB*@P1
zQJGpwFc_Th`;?qU0yd-@KhRS`h=h@U;QXbr3t>aVe_@@$GbQ4ebrEK*h+ly4b=3Y4
ze|}<grn#S4lA+xWS#8seD_JEAy7#j@*K9Mo6-(Nz?^Um?oefzXFCD#hbS~|+oL6$@
zhl9m?7hN|q=5oZ$w)d?^K9uji>YVd_CF^}_(H#>9T43g^wwLx?+cUfC3$;N@Ucizk
zS@K0~{=;Au6(=@fy%Ja@(m^Uisenkcs=po+$|cf#D`lNrv#JF;LbAIjvf3-<colPf
zBS8cr2Lue_x!8ev3Bc{qnpwEQU@6d%2$3nzBeAESo_3spWD={eCL!(EzK4u!ya6au
zwGp5_v<!?SnsqtWG|o=E8s5a4;ig3RaowTx6T+IRD{b9PoGSNu3mZ46K)hOIUivYI
zUPVyZxVDvQGx6`e_!iiepFxz0>eaf)B);x|D`OIGdu$my%3x0A;}QDa=$t8{o$|ZU
z*pT>A#6-toEuio>n?vp&bq=`==a9`p|FM7S;|;M_3pASC5jI@}mpww*FKmWJu7BYC
zMNr2nr{c2JFajSb{|I@BF#TaSC_BTW1h(t&@06L$Qx!06jlflu<<C!E9G%jf_HPwV
zq5PELK=0YwGh1uR>|yJOzc2P|?Unw~3*l5U)DFnLWyB7QG2JP{*wv^`4lGyT(rTe%
zino<BzD@*h%RMCg9!`$GP0fYX0z4`Gm(GQ?)VZ+n(ipU${S!X87z|PkEe(dON+c;l
z0JY`TyA?Rd45!%R&=pkpQxyBZsObL$oCP+}U<(?u1BUFNA@{Z+H<X%v<LLFHH##74
z*quRpX~148*|#iQknH<DNX`h^vtRYkSG~FS^}XV@I;rq*u#gmKd9A^`&OlzLly_XR
zAE$EZS;6#Tu;&YdB6#%lox$|#MgL4QyY303d!Qc+rte>D#wBOgjoRzA^CgR=v$djg
zf6!SMaMnrA`bZCo0`?-wUc9hPvhV)$s*o%DWee+>a((N2_FdmCS}Iy`W!|{_^5waq
z`GL20ytDi3yBD`C4g8?$$2H%p5s!PN`V-RDlai|^=sFv4ot0cq-%ft|j*CkxT+QH;
zQ$Dn%1#S5OTmC|-Xv-IEo}g{lV&Qaih_06fY-N&dYtXiP;R-HUQeLXPRy$X+P&!j9
zT6W6*Zjxm`?3FZ@c>zP7WXPZIl?;_DcE?MXKYw|4Xl~$*9dGXb>h6Utiv!=O`fkmi
z*4#>!_IF5yos#`n(0(FdKOxzBL}L%+yy+tk6HB01nFo6TnRteFBZK@#L~<j-$Q;(x
zj9lTl(CBH7t6=z0RUjqfyRNn4aA(h-Q=cGB6CYxtl!+n_%#?M@d5fGcCx)4vgWGUx
z%1o)dk*-Zy<a~KMPM{283y4;O@J%Fd!Lgf4fz=M1VTHH|kFqJ>;2PybN~A#F0Gu30
z$jjU>{1|n$fNei5Mex3k)Y+54w32y)<R}d~JOPJCa#RK#y918hl4I|5Tgc!L)0!ni
zbJ$)b8mmH9=gdA)o4Uay5DWE>I0<-{VGZ2zwH?BD@MPiNQt~}YzE8;ykgORLS9Gux
zQKfIR|D11B_;)C2p^+iM^fwuqkUb4x|4(g1wB)xC8<FqgrNX+AF~G|s1}634fq@O|
zC#aY5=|&|hIx67nq6aMuCNMp;SfdJR2uE&ksOrR=Y)l|w;!_p4HpZ(m9%&P}Cb%&v
zd`L|FEo&HJUYkBunWiJG?mRN(r1gbial_Q*9vZ(i29p~^N?Isky{z4m6=FK!tGFio
zkZzcwONuEAg+IW>_2k7SS60AG2%t<R4P`wt0I;-@1;hJkl{2PLYSxYR>+SPpQtGyA
zCRv-*{rj~cXU=VF&K(1nzCEIO*|u<Up;dJ4mdtxZ?Vb%Fjx-q$3#0IPz~kj3CW<mi
zAby4-B?fXamI-Bqn6jeFsI(XRg+rSPLN6Hs*?~3^aDq{OSrhLOz%1$HR>%(6jsYp;
z&o~_Oti?K~&cYc*KRLzRPR8ieD3E|6NR*J-L?AfBUW>^AfozgcMnl|#G<k7CAb%TZ
zhm3HDWm|8;dXRpYVAr4tJND&7tH3xbgitG=X76caNJMmo>`=bxb&eHB@%(eZnrz};
zs<~DZu((5M**DH!Kl}FHcMiODVD_w-ws)p!#hx;|JLoJ7I144`<^^rQ394N#8p{<g
zSjPuw5gxCO2mTa1<nwjOb=lmz+2*=Z&ATNkq-zv8QAHZT-ouj}vmGUJ*oI37gt~G}
zQcMSx$n~0hgc6B+%Jd}?>Ed@|fF{EIlt&K*HchIqdUEQ4ersiAb!BB(^%Ruugbcz-
zL&EsQ=y<cq6PD?QX$1R=h`dd*X~nc#qs1^S@s3DIm@<^^BX6v+Vc|nmFQ*ARfDBC-
zT+|#Z7H80sf7_Bjzilx!P_XMerQhB5C)?ms6|@`=SdL2;K4|F;SbD|NgW}MLWO+u^
zJ|nL)>ZWoK)YJLB^JxF^YQC641RhE>ZR|+w@JSnG6xEL+H#0of*c+9)A5l~DaLuu}
zO)uW4?-a~;(G~fKwqo)h-jI$lV{gm@C2C^ys^N{IgSSxvX<7jhuXdxmyxya(RCx{X
zYc^=(JyxPdH!{|F3;-lkM_AhgFp<6S4E&{Y&%p8!);55#!44N<cIu$&g@+n3N2K*d
zmRTu2x{tSb%MezBpfU7qfaD-oCb$b*Xs^dH!FPGYcO{%G_y&B~ur)~Sb^~jWi@bb=
z&KM4XufC2wFq{(ci0h+<`eZc~>2jGH1=A}rnS!B@I2P_h6e%->%}VW&!LW(&k=y|F
zQ3xWD_q6x~W_F35FopKtQW;`Zgr6fx<Q?INBj~c*p72W)-AQZWkB}kFXG$<>^X;U~
z^CMDH<#f|ZUg<*mJ6UgKEjBG3mdXxFd4~epoarMgHn=jpne}?sLhGU+<yT9#{cyCk
zz`a1S6iqj*I1A=?zghiy^}>);xJz>Go<8~un`3s%7sesJ;Qxo#tWb7wFne1ddz+N)
z31t)pGs*%PWm3jgcoyW^Ry8_@8Rn3ToVkWMes*dlrwjs3&Yn<i*`3TJaym%T>Dek|
z49x(ccI6;q!It9Zk;0rnuJ{p<C00OLLSs4*zvvR~iK@9#I=Ucx4l4`K4Z%8*rWHUM
zt;rVUFu-43eFZ8TEC8<|s_-$>8Ly$Hm1~39xTYg{f!D&lQF{(3eiJ<>x~!E~iYb$b
zje(FKX=x)e8oxYaZdLIvaJ(+gsmi51%NwsH2Hd*2-l$?p89QFDjEnLsI~*(bmESQF
zwB2T}3GCY}5QYWshId|ncrCm^X@`yB|K_zu#t;<Tn-m={Q2F*^s2+`DHg6KztVEmk
zUN9x{;kEaI*^>{Yy)|{SK-=<_65gm&CU2?+SIn5jt$3bY_Ienzxw%d?c|CY-Yg!pb
z8FN>m(oXERce9fBTDnS<eC!uadKTWgPu=sM6xEqBPSBsfEbGsEo{H<CS-Jn4!Uwi1
z0p8>z#xfOgiksWx?*keOo&*|)xWsJ@MW3ZSvn;72tf@PCRQUJk7h~8U!4g^v8zU%>
z)bwDsCqJUq`Vmd#l(Dp{sebQ{9c65-e?)BFI^9%RDihO~35W61#G&^K1Lv{LX?z%)
zR2XvyhiurA*uGo;B<(7>j4j33O{=-s{~Qt+xEV|6Y-;STZ|OVQ+TPmT*U;Eh=RMjD
zpJ!}SI4}Hb>Z)$?(gZeN157yC^g!rS-pG<1GdanxrI{R`VDdrOPP?dK^N;fV0Nluy
z7fTG?`@`0#<$Pq&FFc?^caemxtOwv?*nUK_e8x89+@mrxNSKus_VYD|Y>u<Z<&{Ae
z>=@ow{Q3V33E4FrK=bM43&T?S?&;1|b&f7=#gRMrjO5reqhB$m&t6_OmV{inH(tE{
z;(YhQF3Gk1nl&Ple4+LaQy01y^WQlc%JVE8zU2rwkE|AR))ct-W1m-2S|~aFM$+}9
zFWX^xw{BW3<XqWv+piDbxOn~I7sqETE3WKUTjqPeRk+yy9p`uWo6cZe?{Z78RC8K9
z`?R#LU)pg_+>ZYP;^sjq$0xalW~?D++Kln1S;aGLp_1}9UwHk6#kQMfspLq&S~PPM
z3b(mQ$zJ$J)udI+$ewBaX-2`UcEy=HH~2<l(78o&Zh70kSoMvoOLhO|Ga+};{PEWf
zv#lSbW<sjUEc~UBOU<R4@CNL>*14QhzVJ-Yb1>jJc+(&r>k&N%Mb9a*7k#<>zV!<9
zVc8|nhvjVj$<ABP{Y6c{e(FPuBk`+$d|!{Iv9m2H?Stf0@bpP(zy8v`wdbpbL?id{
ziZf?Txd&8k(*yr`%==4q`X)#OnaPd&)$eXSoQabk7?UW?th3_hhh@o47WEJJo12Wf
z9~o4XTFgxux*xezlxAz2)tVo<lbg0{e^jZW{C0Cwt>H)e)s(MMQNEVStf8<*JeX0~
zC1jXqn-+Lpx5m2-_hDaz4h(o2JPFuNK%0E@sCot<5^Bc`pa)S3tlR~5H7IxwxL21*
z^QO?hSh@Bp8GoWYNqy@MUW<4RWGqs<xt>Pe;31p1QC5b$rDn@jFrj~J%{?Sik?n{1
z6|L1_CF*)?ch5sMrYPe9JG!Pr_|Irm#)4{wdl+|!O;c<!(@@EVYT+x$hCOSSFztI&
zaEZ_Vuw7k1eYQbzntQ{)Q1#B<xAuxv&C=GE;MVqAb;~6k44Za?C)Ql>U8P+s3>`uO
zwng-VUCc>G#z8Qp63Srs4sOlQVS_llg8bvcBt-0(ncWnr3XLKSW!N4$r)|(MMF6|O
z2dOWLg$VNtU<x=tL6d^EWQ>)w(d!Csw0?o!@FFS#f2C(kcLFC&ABA=#=q#Ie&6{pJ
z%VrEKj=XvE&60qF2eLA{g2qh&<EA+vv*M63HE7HZ7_;Y^m{ZRC#tN+d)GhD=);WUO
zv;h8Rb%;HuMarKEZ7L5~T10J&EcOu*QjRFE`BlL2ql~h=sxrDkb3Is8La7zwLN~Pb
zgFA$g5-+~~;MKAAJMpYF8&eaSiJ!<cy8#yp9yz+o5*wmpo2cX782lGjbmAUGeM;lX
zW2AvYqJrl}e6d&c*d9f(%BOq68iThc;XFhI)KB+>xHm}LzDdD%pRRr0OoDaXQxeaF
z<-hGIUidDTMnJUxFgR{#l;oqATo~BVMeAnW0sT`#wE%DBlN4@V>DfjmXWkaCKID^0
zQNY{f-!eysK(;*LKT-03Q^FKc|0i-`2h5T_Vazw#E{n#kg94MN|C)*=Q}TaM@^_T1
zQ1Vks#wcNY=|{-DWtOFU#w=<FM+PS2Bz$5q<8)hV)mXxNR9!Yz%KRhv*fDI5Whj<d
zR$1Y&UZosoykOyL6bvhr0aIMYpP%R%v3aR4^<L|pOP^1Xl8S;!TNcz{`*zkW4gFv+
zxbsM0=aJd;8(G)0<~kM*FFPv4<NS0RsVDc`*nfS$n73VW?g%<*UxR&L(0(vrKPcJj
zrdvp;FS)Vx`qsHYDWx!&(msFX&F5c#UfkIvl{Dk@)(*+m5wvv&Y~7OW1O)#TXL@9(
z#6HPY9(3(oOp%;bL1%TqSuHsaKrgV84addTKJ&_F7DlAJy}`U%=pC{T2D2Lj*^N?m
z^GZhcT-$3MuXHTzmU4CkbEr!h`+^w<0~rUUjJlZi02?<@bkA%1U)ewZqLjTWn7w}~
zMRFYox()|ihb31-D5vOW6VJWMzmXBl-*Y>E&yq2?w<WN*<(Bi-d1>!SDZeL}e=d-J
zPRbt?hc5*3FG#tgG35i;zR#)-sbd#5APyb6-<UW+OnxM)j6?V95y5YToM;{*Cs8JC
zLjnb<#;Z}5{$LrF{*%>vG-1;|)RTWavJ)j28<CwSAcTpC!bXJf(MbM@dh`T@FsfFF
zgPx6g^k{<cL_Ol;nT5oJ&8i^whkBH_d{Tn)GPCeRJ&GfNiQ7-KlUE+0#O0%^q`3b7
z2K@nXdJ@8%Xm9UE^Ok6D?{Cnn-#Q_8@~OWOAx~RF$X$$(r}OL=n_+~%B63R9JZxp&
z5fM#4qwV43u5~K=7_|?pLD`Ao3;&T4qVZvaQkjT-SlfXu4Kb1*wj7Qb12(4rLLrE)
zP)uYOIA0cPWSJ&2rh1RWR*O>V?I`|vs`9r;9;Vcd3x;<rZ&{cEzVu))sqyBH$5U>D
zW48F!BH6p<kIXB3>TVYQq$s$jGq9&~_QZ{+u0J(zTU0Nn?G(KyXUq@L`QF9hZ(sQ4
z1@UmVwA&kW_KK%^CHv{1{anBf24L`Ex?d~P{lzM&WN$EqNVe@@(AF5RHA*(}SXxi^
z+ZSEm&i-ch(kW?sbI?U>g0my&><&1)CFh9*OhE5a+jl$uq~q2;>3}zw$NH0fI+%Sf
zkbO?d9$e28bS*yf?Xho;-8>=fJ{rvF5|4FB8GJC~R3PJ&l+n8pi*Rbm_1)}0$-a3;
z+Q$d8Pl+c_Nv@}YuBQX8rzO|9e-Mr#N+SU;WP_vgd)u&1*JvA}o)Ga74cLArM4pP@
z?1v40Q5qR%AB^94C@b}&3StG9#sbtSs}wEkcIsJVgqU?u%VS4+Bw&OQyWLIu)R)lP
zi4)k}o*=pbp9q&SEL4F_2PaI?4Tmr?U{hSwJm59ODfXjpuk<W#+oKt^VkUrSNw2v#
z4<pGAZ<ONkc8}&EkAnSpvcYTE$R?Rc;84{0Ftns8Pr|Ns<9Zt4HN<c3^BP!eFhiYT
z-JbYV>cyIt9$8OOsgqX=wh5ZBIWW0nDy`!3c7)cv=&K;jOVju$ga?1c13RwB5jqYQ
zK_guw{1<dq_<xX04HXy38t0mk!EFyoKieV}(QRbM+!kjK-KNMQiaE5nXk5U<&Rwlp
ze+Rqv`~we?<0DK_T(Jj+$QB)_p!9XvY&bC)PO8HOj&WgRip3igI;od5ufj8wT%i7@
zH&dX`hjzm=Pk-SPlqgGP-bvx)=B~P9Eq!&zTKhV?TAN!t1afc_bd)eDjADVYph4?4
zunULiVI;B2avTX!vVCDIuDxZEx4it2?lUEqSy6Jqj7$b^=JgZXt}eVl*GQ$uG>a^J
zl%ndwuS^+IWo_3Q>CG=3z?0|k=cnaKzGv8uEjc{XZNFgK0mYo{i(3|Ruyv~z-X^KD
z$6wXFT0gG|x~rE<s->L$OF(&tBuAZ?d>GroEL&D}8q-#6DAXBOttJYtmWGYjq4d&F
zUh(`3^Vn6m3utkh8GF3aE!WI5Dr^@&tMaLWXU+%C(5`do%(KBWSHw$K#4}eU`_<dX
zclRtOmn>+PJ&iYqB~Qou$(?~SSEgG;`_&bfXW@$E+H<pKxrh8Fq#j?uG9+q;KE7{f
z+r-tn4%G(x#3Pa4n!eq>G_ZJ3%&wPg4YvwKWBae+tN~T{V}ir|m%Dl{c}jI}3&#Cj
zeahi-?%k@q28Z^0<>m&P=6ic~*OzO)U!H{g_p9v<Ce05pAhxx8xBmws{vU`K&_f4M
z`frGcGb{QhM&vlh5oA0RLB;}kTErpX?kECo9o!c2UfD(tE!*Na&TZ>i*%-QAe}|!4
zp^6?tXhYadNg_;|(<w(qb^}E|0X|JZ6u+aLokxBP7?qga7)BMUahez{X31z#VU{tZ
z3d8Id4x!e!spcLeYmsBFXx=1l+OuR{d;!R@LG>xHW80Hp$EOkSJJ|P3pzj&+f*|$z
zgMC-UD_6z7tCIcs+sL1IYB{-Vp=i0X`IbSdJobL_@j%~I!j8{B0e0+uEOy+tRQ%oY
zoApb1Vs@)!YZH(0qLEk7BVK@FXYN}nTuKwO4@$N}HwQ#xD~p}kref&v1(i^Pu^S*M
zMLED1%G_rcGV$DJPl_C-LUCI_EUYNk+M|>A)Av;E(#j1XvX2H%FxnEF_MG5#^y@_=
zAaeWrEb{WMOf7BigbyY{>0l!YcB#Nu520?9?H`C$^D>onqmyL@+01mFE(}wWi>tE1
zu7Ps1xaKFWH$q!wx|%jHK1v(W`{+qA*l9$Ke~&*U$XaUYLgrmg+n~apW^I~bx*a>i
zZCe($-0TSK=0)#WDQOUUKeOD^O*8uuiZ`@r>&(G`Hal+fXZ#qF(S&jEA~G9~A%%sA
z3%HTYjHJ<VMSLw5r=VvL4woA6yU>!6Gs>7@Ob=tL(QANV6;3;22%3@5M2djZ)G>v-
zhl>fgbLP%sOlTt2!9>bpO~K@1^y<76n8W13ZlVa6sRx&7?tmLKF}niUMCEwle#$v$
z8Xh3`4{tmbob;?zO45+TxqHgC(o$vG*D_QOTS<R`+V>!J0D-)*bAIy8=U#tKtgM$x
z8iFOQw^Yl8ZL*bAaG_jS$69+!E7a428PsJ_j@}stQU<HUvI*Ig<RF15fEh<03AK!i
z+@v%j8-7VBivTfxWH?Sw{6a!Is)q6B{{nl5m4^WNj+wip`ix3S|IF>l7s10VyS6U0
zFL?snT1Eb;W!GR}^2O;+G5s@ef}L*pX>#6-He^hG$$kyd66T&ln4<TMWp^~3!~LPw
zO3|SM>22WorrQJBQy-?~Q1GOzG6WPtAOiBoLllHh?piq4XI1wI?7rx#E7Y#RE*q>2
z@^GzC$FR#|R|a#V!^%Ju-cPkMSXi4UUKx6<48&g}=K+MMkynO!-O8|Zu)z89;`pbw
zB(^9Jq!3d@B7AsJ{F30Yl@fB+?UsSx5UD2|!3_o4i3Z1@T{wzUe<JYBc+|rM9##I1
zs=XEi;E-`s$moW&!tk+%@bMiZ_q?isB3-!})prpz8z<uU<z?6Q#qyiBz>ZGw)YHo@
zgr{J4;K9TSej1==5y27xb)#D7Ku6cWGrcRr^k2sv<^-eTRlT?<9|**tjzvPGunaM`
z`YLsWhN1xigEvIB{67~TeG<W#*07wg1Q`oBxXl!LwYwtJ23ilIc<g|`HOeCjxrsN>
z?L-y}L~ArD+7sv_qDFPJ4INB$cMRcmcJMado@hs`HyRy1UaR3#t#box24ynGe9GfI
z#bde{v(g_ph9>kEXK!WkTJWT(r#jqGWAANcC6ZW)xHn?a2hDZn_HTlHM?dP!adFs_
zJA}iSF`<nTGUHDbMwWv+0;$*%8;PV8<xXm*HYX|+iIWsp%<g7vOk*UvUyV#ErZJ?<
z(mc`w)z_4|+C5d2puI@Ao>+6j@1WvTdAqE@iSOUq$Ue~;2<;>MF6xw71mbfTjbQ6c
zj_y-U{WwTTA0;Fp%WjN^DEIqF%B+v3TBEohHb({tu?-R4N#WjPZ*)`i9%IQ^#6Gt7
zmIe8U(KUs#B`c^QG8TTJ2c7<}`17YAAyqg+{CsG#FFT4w_#m2+ms3hbV_C?QvYfgN
z+hkS^+7$hC+dV5+Tp2Lt&)8Pg7E_-JL3cz~^-`@^-6p0TS+*YiAPqL<#f#vQrL=Br
zyRoK*QuZv_#68WB5n5FFq5P5sdmw*rF#kXx|A1K2ehWVBU80+ZpPs{u7(W_>*@0_d
z*5}*rIPk3dIV|i=)6Gjio_cpm?CO!4Pl-)WiLPGB45y*fAK$ld$(e|eL!C)40DIy8
z+TI0TO5cwCyVjJK+OM_GofUJoEgW9BvM?fM?OnF+W1Zf=)FJLaa%->H-7E5^#k4a)
z>)G4Zv%jWTLw$&PPhQ$ztvRexe@|tuPtkqPa-cp*_x&Ut@@qIRS|SWN-9#py4c%z}
z>lk8_@ap3#iZBDzbO=lMvEg%jw#Sg%BX$dED4Jc=EDZQ>uYf?1(91pM>k~ss*vJ_P
zw_K*VgqmFG!RlZ9+1LJh{&T-r`qLLa`ugwv%{!mNN$=Up@_lEv94zZS?f=i;`Ge{+
zTS`w4KEM0LvZ-u}y@^WLtUls@0k^Bqlx<aRT27yfWKW;NP9nrN?jQCu2_4(U+4}fn
zJW}|tNW$jU=8n#;#`-$Gk@&&!OA{zVyU5{kJbp<Sz{j2@u+<(uB<!OhEEm>cpVGkj
z_0}M(vd^5wKko;yXJBCb9cYa9U?k6`-pHCu`9j}x(_OVTSwG!!&&;Lfz^5%a<%a2H
z(_G27Qof!0&D=op!5Q7pEy**xLe30w)R=qri?z3{`Q*)(1Aw*KWUqt>%|PoM7X^*I
z0FblVv(~doXKip@dnk?u)6eUo`uR41gD&R88KVP<{2+;WpkvLn7s4X|Zz>;8RzHzs
zqqGgq@2D)%KnJe7n6$?I6r)MO6(M2$_wxp}HCr#%yuo%zVOWv}{{NVR5p{cQ+&Ejk
zR#=9UytXPWucA;>koT!?SO{YVCYe&)Jxn|#Q$4tr8ww0;#YPuIGB$h7$`!Wd0w@g<
zY?P)e@PVsQP64tjmZB`XuBnUhKwXk7)*bN<zmQ`YR|GD@A_sZIuN+s~0GBvT4Ao$J
z27*k|wW!pqi-uralf!0)H6hHX`@}lk`xw(!t37L4i*pk#ktcB#ra(5z3-@C~M7Je+
zM#C2Ud_X^x2XM`aF0SsV%SJWS283RQx!A6z#G9z`S(B)jYQp};IpZX}5C3X~p;JVw
zMAND)-!&T_69y=P(DhJ@@w>Ag@g9gby1pM{I^L8BOnRy|>S1DEa;5(jQI_<gDdyw&
zi03qVHL>!_=#U5yolhv=y!vi4Y>|=q>b5HPw#I)%B8?DRjIs8bs#Lt0mSMLwL6lKL
zcXapEV_UJXR<N&1dBbQwp=?t6GH9eF7d>N;)$=rhev?OiQk+|RoS)@i<DFzb%fF@E
z-%&zQW7cpi#I5Ya-@R=}YE^}JOY)}%D#7v|cXYG(8j&EKu+I@P80IKQr|=3Y2>${J
z_7nX}{Dci~YQF-DWY~zWE1bi3{s#Tjy4yX?6e_|sDs&*S6@QdsU{G+HL0?Q7W;9z-
z8OAP019t8uVoiaUKBkDBqUYT0uKt@>mP+5RIE>sU_q4e6yN*=VZ~F}e9|rv4ml0^w
z@xHZvs`TCN9=zpRYI%Qq19G1TBPau{>P2*o@#N5|GE*p%2^gmXX(<vxjW9-7(?52#
z%qGXqagYV~D%<|vhp$h8$6@}eLJ0~+JZL85&9dwPVUz5;+J{Kz=7<>?d108^HR6j?
zqn8G;`zl>-s;_?t4aWA?hwYKtk$Loola)4<D}EdL>Q;_J(>P>hS<;%R3zt3dEN`XZ
z%R~P@0Rxumnlrp+dBq|Y?U6F}1~Y1w>ZH`#8Pm@!Iq&E1`SaFWWy>c{iBC;PC!Uqs
zo((x&zo4KgH+rx4&ZjS=NNL-GX_bMr%Ee7LancY>YYC*a+{zTYPe^GeB}Y%taW>#M
zD><IV{;HI;+2I=(u3wlhTj)ZNA1P%!xV-4aa=6E)S4k<mW(*-``i;HU_s*So^UUjK
zzSaj1or~YR_`i&cIZcwY8L>yP@u~i`mRDNlhnMu?=7UnsA$aJ{Xn$sR&Q8ufC%H<{
z%?~q5mQzcDspsC_x$HR?=<1g|=cKLY5N{&0Y&oqgnC5$%U#|28x(B67pH%LfG5^e-
z@rT&3i<&tB`*zW|oiUVU>L!X8HHzU{1LDMIGBQYv>{=4YtC(hj7UH@Cd(_bm9qT<O
zV%rpeToC195M^Q;XEx9QN8B0^#wEexR-#iju^C5`2tHZ3Fu1tyt?{6zF5syX4|^rg
ziJ+%fe5!YO%jq~xnC$2sTSA)HatbFS1nD4c2XDeYmvj9C7Z}QGQpAYU)OWVRevfjb
zAx30<QXhvA6@(nUBMZw9@RzruM=vBrRt&>Ze&Jcvm7NMEkqbNU;K<61JelGELFn)e
z$|E*Q57C|jniD3dsz3?p&HZ-Vp+)pGB{&WpIwUWnNDSZj0Te!q8pSkbgh_r4;k@QZ
zu;%zJL9970r4Qe(IlkDv?ClXxosqm}gWkb_cQEK3l3bNv^3PR$@#>AwUjMA*Dh;|k
z0hi}}S7o5)cp!ZkJ9lc^gS9-|&Ba<?a*f=s<rfE+Pd+8~_DLt74xSteoE!?CJTGNz
ze^oQr@D<Z*_E+puMp-bUB9Kw>e#Z7dEgx`=ApB6svmdj!Bv2rI`^np$y7|E$@V8RG
zf9l75@Ad^7Pe{r6U((Dre9?5ne%=0laz5rcU_UwC@+)nMZpSKz<X$PaX{%_=45g&b
z7=G%?n`!<a4dLsT@dQ#D{M?>4b2*gkx?#I+o4fpeaxsLg4EL`fWI1Q{AP5qLehlQE
z7KfghIU2BDfYTc`I#$m#VCBr6c*PpZMwH=K4u*<$-7#n>axdcj-f`lIt2tbnYrbm9
z8?e-i+WJrKLa*;SulgkH8u=t_Kj|;P9KBr7l%!qSisap$1x+d1?`3X9`u)^`CYSd6
z)wxIqP%3(0e%Nu(jh`>$!&vn7YJ9m`g|Akt@f~A)@(8Jp*9!V!9YU?9uKChW<O9Pa
z$1vAxRyR>KTEF-HXV&Z^Hu6M0u-uP`J4r!D6$b5*W!8VbH4)x`wQ5Z}@lq~&NQc78
z5VL>{e;@q>*912u`IOMuvX9^ig_J8o0s|LuH$oXD#EU>Hpam5fiZe8Y&4c58kuQ;k
z^AZi7CsyD%Eg7=GW5pP)L1R|Hm^HU^*_g-9G6Kd7F?08lX4!Zk?!um>P0PlXH5c-h
zjjhoO?-{dX$zGXiv>)>xYymU*WrPxl2?X)6ePXuT#IbyyL@?QiZC<mXO_fN3kKy%)
zFn*L4Z1@DtW8WdF4gQo*(8dW@;5B0V8u}sX#i_HvipIPwW1HT5anX)=eT-d?(}O1-
znW+DIT)#1!VEG~9$%jHMV;>z>R>7KYR3&ady1Sqk{)UnE0HAazOntutZ}^znomr14
z5tZ5F`j7TuIkQx#An<Tq#5S)xcsaV}WsD_k)bi0&*wX|ZQDjZSGcx9o#A2Fa3$UGT
z;x{?+>!9C+@b+j=cs1%jx}H-R>xbS3^%6cQ_0cu(Z798B<0O3ah_Og#(PIC8!?B3@
zyDFoQc)nbZ>P^L?W;o+Fu95lZ8jpqctVh-5vz0qh2rxbb0Y*ND&AgG%jr?x<?*tO^
zJcf8kSo3CXKA$g03>#!|;|o1eOF2Oi>~2sD$p=DxfR3&4qUQJ_K0gjyM%Vw^c9_M?
zRA(9{dl`P?>}8uf1XxsM0Ui=H`xI8|U>F~3V&9lxADoyfY#;F>Huta`$g)ByRS{oE
z_Io3@S>}B#JMsLGn*I)wDO1!>S(wCmH{*>3=48R#Er1<3VVaV9G=V5#<CG@`niUEs
z(^sv!;yM-aC{j#utlE^Wf+T(UJK;W|iHWi>WJNe`<s9mHCZg7(tUsJ8i>Y-arAFgD
ztrG===crQ#xl>UAfn617Z-?*&N~q@}UqaF}mEy(s*C)vH$v22EK2M%Uh(Wbn{aJda
zzd-_b<_5|$>72>wOo})}*R<5$I)~<eO*hoIL9uQp&ogTp`}jEH-Q_5EX5pVv&Fxfl
zoqr0O8s=KXBnG1_J41@7M`6Di3CRfZA&UtHusQTy_HfRlm>{}KHc$V*MS_o;sLM^w
zFp0r$SV}LSX<o_1*C1c(eWiE7CFO1p=I&YSk}~%OGiw8xwNmDxnKs(m(frzxSB@;0
zrJS9?oPCHkl~EncI23?;bH?GB)|H&RdBdBQ*DVVjl6!y94G}=fIULMs3FNd$Ic+oT
zKXc~(;i>=iBFu1NVT+XBDkiu70`hhLtIk*XdDolSuV*iKrTm@2{I=yiZBp)$Tj;?t
zDdqS~{Yq8s(v|N%|0mDi+AkeExqRwOu<C4}>a469m_M?dQ7QUHgT9G?Z$f-_O7cDb
zD|~DjK{T*j4k3O9etfDH^-SxB_|)~)YggxvNcNJI%rdx^<%+#$rOdur{Yo<8lFZkK
zvNna>#q(1E_YQpYLoBZe6xZSt+6$izV8c&oeW0{nZ0M0nPX$Z+#4~-N&07~b1Dg*7
zHy;XYJ|xy1mo|3=H}{AqdSJ(7F}aRNWXr@h9DM(4OUixD;Bc-ca}Jl%lV(InS>KcF
zas-{6s}7_VQ%vI{*N@EGrPRt`>h8tEkqe@`QcB$(OvNNAMQl=PMKE>O;*L0#Nwt)*
z9}|Qxfv48pv*>eDW{vl4oMV&nqB%wLCjvR!LU|<%ra<0~P-&&O9k1B%+j(KTkzUw{
z7f!(o|H7I%S2V9#XcTLYA*ylk_)~%7Pl?BR#RI1Uo6o#wJ^S&BJp&%)1e8kA@6_Ma
z{8>w2b7Roj6tFgt*CcK~@NdQf_?>3kkt*)Tjs`7${vth>(kk=Oe9d3fW**Ja{3J(*
zJX1z?;1fH>K4us1>kFIv`Yw(SUK;fwZ|&=Q_EP^SeKrSY_CARDf`4)pddji!zCPif
z)AD?o7I9i13;8oLfKT8dfZ@4IP-dV2sX7_+FKaVDN98FYdCi}MoBx8ltJdkV|K8@&
zHLK*3bbkQ1q6c_NS(dwxOuVKhX3mZGSBb^<jPjcCe6K22i|t0zD$gNL6ZsPpZVGL-
zVZ47g-6xI2x+7kO1GTd%w_|~=I&zgAG5L>eLn#TP@>F32Yq`&}Pu#jkNBjtGLSzgc
zAm=A1C#owd!m8?Sp&!pguoE&gg|+PSBU<+55jOTTu0&9T%RUOsLa|iBjw8OS=f?Ym
z!B&bXAY8)!76f-f388ObblmTwSf%oLyjZElZjv$Kb<EW@noA-hWDRz|QS`QUK4-b2
zUP@}f)<61)ZpF8>3zrv<e`|7aNHo{n?7pqVw+VGRI8WJv#+-mLXW6(324It24s`OK
zG56#9h#Euzh;&IG7_9(mUDB`d^`y8G5B%UBxNjxbrE%}3nd=HP@8+rNHgoUht0-Tf
zq5S5Qx;+{KZ0ah2k(BRcs*ebq%2Xq>=z3YJ%rAT!mxO;s2`wDqk14rAiG~t_kVu3^
z&v{=z#W~Q?B@2t8=(#jGGU^woRe?-vVGGTMM;<Z3NSE1MSn(w>d?Ln!+T((}l?MVD
z8jf6NQC!(K>ch6krN}oX1zITVbM?Yk&}rdSBw^dp))S3=-R!$q-matJ^u~_vuDZVZ
z&i3}sj=1ZY%JmN3+uqp4$8HJxsIi08m{s0`#MgHoYvjXD`79DstdCt4zCe9=jgomv
zS}9>Wld34!KuJ3#$0<2M33J==QSL=bUZ&*BlzfenuT%1;l>C^Ie@6+^cmyaHqU1wL
zen|<7>EovEmQlj|@|g$gAv#^>Jw$#vLO&&>1!U-k!KpyZ%sPw|HXe|1U9IpA?&3e^
ze-9}@PNn)OXZ<N>`6*{(sR`-Nxst!+ihs`S{W(|vb8g#Tas@x<wgNDX&S`DPU`68C
zKWz(TdPOchl+!D6nIUJT$R&r;wu@X!$bMnk8cIJPa!%B7AfRh50s=wBmZV4cNXNF2
zz4Sw?bN2MAM(r}+G3X2QL<q}5_RVW9=dsHr@?|ltR4JYty)L(!tG~0y?Nm?OSK&jJ
zR5Wc0S?x%&azxG*N_U|bcl9RKrn?z>Y(2P}qE+p`Z_}tcRrjrW)wcU7YE{Nvvr1KU
z*SJHazyFMCi|VNA?o$|+6RNvLjVk4?)ubx8n~|nUzFVnPrQNk@RnADFQ|-N*Y*IPy
zW@uCwRCldTm40;_x4Q<)>ib+C$~LHss#ewAbcafRw^Y7cxko(Ed7n$gR)tlMQkKr{
zdQ5m&Mly;P+mRHdtInwI?y#tAcXLY6^ZVVZ-Ku7ln7#czN13|<8sD^<&S|YPQ<5h0
Q1Fi9&H(@uKR@OrOfAI!{H2?qr

literal 0
HcmV?d00001

diff --git a/scripts/hotmail_helper.py b/scripts/hotmail_helper.py
new file mode 100644
index 0000000..8d218fa
--- /dev/null
+++ b/scripts/hotmail_helper.py
@@ -0,0 +1,661 @@
+import email
+import html
+import imaplib
+import json
+import re
+import time
+from datetime import datetime, timezone
+from email.header import decode_header
+from email.utils import parseaddr, parsedate_to_datetime
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+from urllib.error import HTTPError, URLError
+from urllib.parse import urlencode
+from urllib.request import Request, urlopen
+
+
+HOST = "127.0.0.1"
+PORT = 17373
+LIVE_TOKEN_URL = "https://login.live.com/oauth20_token.srf"
+ENTRA_COMMON_TOKEN_URL = "https://login.microsoftonline.com/common/oauth2/v2.0/token"
+ENTRA_CONSUMERS_TOKEN_URL = "https://login.microsoftonline.com/consumers/oauth2/v2.0/token"
+GRAPH_API_ORIGIN = "https://graph.microsoft.com"
+OUTLOOK_API_ORIGIN = "https://outlook.office.com"
+GRAPH_SCOPES = "offline_access https://graph.microsoft.com/Mail.Read https://graph.microsoft.com/User.Read"
+GRAPH_DEFAULT_SCOPE = "https://graph.microsoft.com/.default"
+TOKEN_ENDPOINTS = {
+    "live": {
+        "name": "live",
+        "url": LIVE_TOKEN_URL,
+        "extra_data": {},
+    },
+    "entra-consumers-delegated": {
+        "name": "entra-consumers-delegated",
+        "url": ENTRA_CONSUMERS_TOKEN_URL,
+        "extra_data": {
+            "scope": GRAPH_SCOPES,
+        },
+    },
+    "entra-common-delegated": {
+        "name": "entra-common-delegated",
+        "url": ENTRA_COMMON_TOKEN_URL,
+        "extra_data": {
+            "scope": GRAPH_SCOPES,
+        },
+    },
+    "entra-common-default": {
+        "name": "entra-common-default",
+        "url": ENTRA_COMMON_TOKEN_URL,
+        "extra_data": {
+            "scope": GRAPH_DEFAULT_SCOPE,
+        },
+    },
+    "entra-common-outlook": {
+        "name": "entra-common-outlook",
+        "url": ENTRA_COMMON_TOKEN_URL,
+        "extra_data": {},
+    },
+}
+IMAP_HOST = "outlook.office365.com"
+IMAP_PORT = 993
+REQUEST_TIMEOUT_SECONDS = 45
+FETCH_LIMIT_DEFAULT = 5
+
+
+def json_response(handler, status, payload):
+    body = json.dumps(payload, ensure_ascii=False).encode("utf-8")
+    handler.send_response(status)
+    handler.send_header("Content-Type", "application/json; charset=utf-8")
+    handler.send_header("Content-Length", str(len(body)))
+    handler.send_header("Access-Control-Allow-Origin", "*")
+    handler.send_header("Access-Control-Allow-Headers", "Content-Type")
+    handler.send_header("Access-Control-Allow-Methods", "POST, OPTIONS")
+    handler.end_headers()
+    handler.wfile.write(body)
+
+
+def read_json_payload(handler):
+    length = int(handler.headers.get("Content-Length", "0") or 0)
+    raw = handler.rfile.read(length) if length > 0 else b"{}"
+    try:
+        return json.loads(raw.decode("utf-8"))
+    except Exception as exc:
+        raise RuntimeError(f"Invalid JSON payload: {exc}") from exc
+
+
+def post_form(url, data):
+    encoded = urlencode(data).encode("utf-8")
+    request = Request(url, data=encoded, headers={"Content-Type": "application/x-www-form-urlencoded"})
+    with urlopen(request, timeout=REQUEST_TIMEOUT_SECONDS) as response:
+        return json.loads(response.read().decode("utf-8"))
+
+
+def get_json(url, headers=None):
+    request = Request(url, headers=headers or {})
+    with urlopen(request, timeout=REQUEST_TIMEOUT_SECONDS) as response:
+        return response.getcode(), json.loads(response.read().decode("utf-8"))
+
+
+def mask_secret(value, keep=6):
+    raw = str(value or "")
+    if not raw:
+        return ""
+    if len(raw) <= keep:
+        return "*" * len(raw)
+    return raw[:keep] + "..." + raw[-keep:]
+
+
+def compact_text(value, limit=400):
+    text = str(value or "").replace("\r", " ").replace("\n", " ").strip()
+    return text[:limit]
+
+
+def log_info(message):
+    print(f"[HotmailHelper] {message}", flush=True)
+
+
+def try_refresh_access_token(endpoint, client_id, refresh_token):
+    request_data = {
+        "client_id": client_id,
+        "refresh_token": refresh_token,
+        "grant_type": "refresh_token",
+        **(endpoint.get("extra_data") or {}),
+    }
+    started_at = time.monotonic()
+    try:
+        payload = post_form(endpoint["url"], request_data)
+    except HTTPError as exc:
+        detail = exc.read().decode("utf-8", errors="ignore")
+        return {
+            "ok": False,
+            "endpoint": endpoint["name"],
+            "url": endpoint["url"],
+            "status": getattr(exc, "code", None),
+            "error": compact_text(detail or str(exc)),
+            "elapsed_ms": int((time.monotonic() - started_at) * 1000),
+        }
+    except URLError as exc:
+        return {
+            "ok": False,
+            "endpoint": endpoint["name"],
+            "url": endpoint["url"],
+            "status": None,
+            "error": compact_text(f"Token request failed: {exc}"),
+            "elapsed_ms": int((time.monotonic() - started_at) * 1000),
+        }
+
+    access_token = str(payload.get("access_token") or "").strip()
+    if not access_token:
+        return {
+            "ok": False,
+            "endpoint": endpoint["name"],
+            "url": endpoint["url"],
+            "status": 200,
+            "error": compact_text(payload.get("error_description") or payload.get("error") or json.dumps(payload, ensure_ascii=False)),
+            "elapsed_ms": int((time.monotonic() - started_at) * 1000),
+        }
+
+    return {
+        "ok": True,
+        "endpoint": endpoint["name"],
+        "url": endpoint["url"],
+        "elapsed_ms": int((time.monotonic() - started_at) * 1000),
+        "payload": {
+            "access_token": access_token,
+            "next_refresh_token": str(payload.get("refresh_token") or "").strip(),
+        },
+    }
+
+
+def refresh_access_token(client_id, refresh_token, strategy_names=None):
+    errors = []
+    selected_endpoints = [
+        TOKEN_ENDPOINTS[name]
+        for name in (strategy_names or ["live", "entra-consumers-delegated", "entra-common-delegated"])
+        if name in TOKEN_ENDPOINTS
+    ]
+    log_info(
+        "token refresh start "
+        f"clientId={mask_secret(client_id)} "
+        f"refreshToken={mask_secret(refresh_token)} "
+        f"strategies={[item['name'] for item in selected_endpoints]}"
+    )
+
+    for endpoint in selected_endpoints:
+        result = try_refresh_access_token(endpoint, client_id, refresh_token)
+        if result["ok"]:
+            log_info(
+                "token refresh success "
+                f"endpoint={result['endpoint']} "
+                f"elapsedMs={result['elapsed_ms']}"
+            )
+            return {
+                "access_token": result["payload"]["access_token"],
+                "next_refresh_token": result["payload"]["next_refresh_token"],
+                "token_endpoint": result["endpoint"],
+                "token_url": result["url"],
+            }
+
+        errors.append(result)
+        log_info(
+            "token refresh failed "
+            f"endpoint={result['endpoint']} "
+            f"status={result['status']} "
+            f"elapsedMs={result['elapsed_ms']} "
+            f"detail={result['error']}"
+        )
+
+    details = " | ".join(
+        f"{item['endpoint']}({item['status']}): {item['error']}"
+        for item in errors
+    )
+    raise RuntimeError(f"Token refresh failed on all endpoints: {details}")
+
+
+def build_xoauth2(email_addr, access_token):
+    return f"user={email_addr}\x01auth=Bearer {access_token}\x01\x01".encode("utf-8")
+
+
+def open_mailbox(email_addr, access_token):
+    client = imaplib.IMAP4_SSL(IMAP_HOST, IMAP_PORT, timeout=REQUEST_TIMEOUT_SECONDS)
+    client.authenticate("XOAUTH2", lambda _: build_xoauth2(email_addr, access_token))
+    return client
+
+
+def decode_mime_header(value):
+    if not value:
+        return ""
+    parts = []
+    for chunk, charset in decode_header(value):
+        if isinstance(chunk, bytes):
+            parts.append(chunk.decode(charset or "utf-8", errors="ignore"))
+        else:
+            parts.append(str(chunk))
+    return "".join(parts).strip()
+
+
+def extract_text_part(message):
+    if message.is_multipart():
+        for part in message.walk():
+            if part.get_content_maintype() == "multipart":
+                continue
+            if "attachment" in str(part.get("Content-Disposition") or "").lower():
+                continue
+            payload = part.get_payload(decode=True) or b""
+            charset = part.get_content_charset() or "utf-8"
+            text = payload.decode(charset, errors="ignore").strip()
+            if part.get_content_type() == "text/plain" and text:
+                return text
+            if part.get_content_type() == "text/html" and text:
+                return re.sub(r"\s+", " ", re.sub(r"<[^>]+>", " ", html.unescape(text))).strip()
+        return ""
+
+    payload = message.get_payload(decode=True) or b""
+    charset = message.get_content_charset() or "utf-8"
+    text = payload.decode(charset, errors="ignore").strip()
+    if message.get_content_type() == "text/html":
+        return re.sub(r"\s+", " ", re.sub(r"<[^>]+>", " ", html.unescape(text))).strip()
+    return text
+
+
+def mailbox_candidates(mailbox):
+    normalized = str(mailbox or "INBOX").strip().lower()
+    if normalized in {"junk", "junk email", "junk e-mail", "junkemail"}:
+        return ["Junk", "Junk Email", "Junk E-Mail"]
+    return ["INBOX"]
+
+
+def normalize_mailbox_label(mailbox):
+    normalized = str(mailbox or "INBOX").strip().lower()
+    if normalized in {"junk", "junk email", "junk e-mail", "junkemail"}:
+        return "Junk"
+    return "INBOX"
+
+
+def normalize_mailbox_id(mailbox):
+    normalized = str(mailbox or "INBOX").strip().lower()
+    if normalized in {"junk", "junk email", "junk e-mail", "junkemail"}:
+        return "junkemail"
+    return "inbox"
+
+
+def select_mailbox(client, mailbox):
+    for candidate in mailbox_candidates(mailbox):
+        status, _ = client.select(candidate)
+        if status == "OK":
+            return candidate
+    raise RuntimeError(f"Mailbox not found: {mailbox}")
+
+
+def to_timestamp_ms(raw_date):
+    if not raw_date:
+        return 0
+    try:
+        parsed = parsedate_to_datetime(raw_date)
+        if parsed.tzinfo is None:
+            parsed = parsed.replace(tzinfo=timezone.utc)
+        return int(parsed.timestamp() * 1000)
+    except Exception:
+        return 0
+
+
+def to_iso_string(timestamp_ms):
+    if not timestamp_ms:
+        return ""
+    return datetime.fromtimestamp(timestamp_ms / 1000, tz=timezone.utc).isoformat().replace("+00:00", "Z")
+
+
+def normalize_message(message_id, raw_bytes, mailbox):
+    parsed = email.message_from_bytes(raw_bytes)
+    sender_name, sender_addr = parseaddr(parsed.get("From", ""))
+    subject = decode_mime_header(parsed.get("Subject", ""))
+    body = extract_text_part(parsed)
+    timestamp_ms = to_timestamp_ms(parsed.get("Date"))
+    return {
+        "id": str(message_id),
+        "mailbox": mailbox,
+        "subject": subject,
+        "from": {
+            "emailAddress": {
+                "address": sender_addr.strip(),
+                "name": sender_name.strip(),
+            }
+        },
+        "bodyPreview": body[:500],
+        "receivedDateTime": to_iso_string(timestamp_ms),
+        "receivedTimestamp": timestamp_ms,
+    }
+
+
+def fetch_messages(email_addr, access_token, mailbox="INBOX", top=FETCH_LIMIT_DEFAULT):
+    client = None
+    logical_mailbox = normalize_mailbox_label(mailbox)
+    try:
+        client = open_mailbox(email_addr, access_token)
+        select_mailbox(client, mailbox)
+        status, data = client.search(None, "ALL")
+        if status != "OK" or not data or not data[0]:
+            return {"mailbox": logical_mailbox, "messages": [], "count": 0}
+
+        message_ids = data[0].split()
+        selected_ids = list(reversed(message_ids[-max(1, min(int(top or FETCH_LIMIT_DEFAULT), 30)):]))
+        messages = []
+        for message_id in selected_ids:
+            fetch_status, fetch_data = client.fetch(message_id, "(RFC822)")
+            if fetch_status != "OK" or not fetch_data:
+                continue
+            raw_bytes = b""
+            for item in fetch_data:
+                if isinstance(item, tuple) and len(item) >= 2:
+                    raw_bytes = item[1]
+                    break
+            if not raw_bytes:
+                continue
+            messages.append(normalize_message(message_id.decode("utf-8", errors="ignore"), raw_bytes, logical_mailbox))
+        return {"mailbox": logical_mailbox, "messages": messages, "count": len(messages)}
+    finally:
+        if client is not None:
+            try:
+                client.logout()
+            except Exception:
+                pass
+
+
+def fetch_messages_for_mailboxes(email_addr, access_token, mailboxes, top):
+    mailbox_results = []
+    all_messages = []
+    for mailbox in mailboxes or ["INBOX"]:
+        result = fetch_messages(email_addr, access_token, mailbox=mailbox, top=top)
+        mailbox_results.append(result)
+        all_messages.extend(result["messages"])
+    all_messages.sort(key=lambda item: int(item.get("receivedTimestamp") or 0), reverse=True)
+    return {"mailboxResults": mailbox_results, "messages": all_messages}
+
+
+def normalize_graph_message(message, mailbox):
+    sender = message.get("from", {}) or {}
+    email_addr = sender.get("emailAddress", {}) if isinstance(sender, dict) else {}
+    received = str(message.get("receivedDateTime") or "").strip()
+    return {
+        "id": str(message.get("id") or message.get("internetMessageId") or "").strip(),
+        "mailbox": mailbox,
+        "subject": str(message.get("subject") or "").strip(),
+        "from": {
+            "emailAddress": {
+                "address": str(email_addr.get("address") or "").strip(),
+                "name": str(email_addr.get("name") or "").strip(),
+            }
+        },
+        "bodyPreview": str(message.get("bodyPreview") or "").strip(),
+        "receivedDateTime": received,
+        "receivedTimestamp": int(datetime.fromisoformat(received.replace("Z", "+00:00")).timestamp() * 1000) if received else 0,
+    }
+
+
+def normalize_outlook_message(message, mailbox):
+    sender = message.get("From", {}) or message.get("from", {}) or {}
+    email_addr = sender.get("EmailAddress", {}) if isinstance(sender, dict) else {}
+    if isinstance(sender, dict) and not email_addr:
+        email_addr = sender.get("emailAddress", {}) if isinstance(sender, dict) else {}
+    received = str(message.get("ReceivedDateTime") or message.get("receivedDateTime") or "").strip()
+    return {
+        "id": str(message.get("Id") or message.get("id") or "").strip(),
+        "mailbox": mailbox,
+        "subject": str(message.get("Subject") or message.get("subject") or "").strip(),
+        "from": {
+            "emailAddress": {
+                "address": str(email_addr.get("Address") or email_addr.get("address") or "").strip(),
+                "name": str(email_addr.get("Name") or email_addr.get("name") or "").strip(),
+            }
+        },
+        "bodyPreview": str(message.get("BodyPreview") or message.get("bodyPreview") or "").strip(),
+        "receivedDateTime": received,
+        "receivedTimestamp": int(datetime.fromisoformat(received.replace("Z", "+00:00")).timestamp() * 1000) if received else 0,
+    }
+
+
+def fetch_graph_messages(access_token, mailbox="INBOX", top=FETCH_LIMIT_DEFAULT):
+    mailbox_id = normalize_mailbox_id(mailbox)
+    url = (
+        f"{GRAPH_API_ORIGIN}/v1.0/me/mailFolders/{mailbox_id}/messages"
+        f"?$top={max(1, min(int(top or FETCH_LIMIT_DEFAULT), 30))}"
+        f"&$select=id,internetMessageId,subject,from,bodyPreview,receivedDateTime"
+        f"&$orderby=receivedDateTime desc"
+    )
+    try:
+        _, payload = get_json(url, headers={
+            "Accept": "application/json",
+            "Authorization": f"Bearer {access_token}",
+        })
+    except HTTPError as exc:
+        detail = exc.read().decode("utf-8", errors="ignore")
+        raise RuntimeError(f"Graph request failed: {detail or exc}") from exc
+    except URLError as exc:
+        raise RuntimeError(f"Graph request failed: {exc}") from exc
+
+    messages = [normalize_graph_message(item, normalize_mailbox_label(mailbox)) for item in (payload.get("value") or [])]
+    return {"mailbox": normalize_mailbox_label(mailbox), "messages": messages, "count": len(messages)}
+
+
+def fetch_outlook_api_messages(access_token, mailbox="INBOX", top=FETCH_LIMIT_DEFAULT):
+    mailbox_id = normalize_mailbox_id(mailbox)
+    url = (
+        f"{OUTLOOK_API_ORIGIN}/api/v2.0/me/mailfolders/{mailbox_id}/messages"
+        f"?$top={max(1, min(int(top or FETCH_LIMIT_DEFAULT), 30))}"
+        f"&$select=Id,Subject,From,BodyPreview,ReceivedDateTime"
+        f"&$orderby=ReceivedDateTime desc"
+    )
+    try:
+        _, payload = get_json(url, headers={
+            "Accept": "application/json",
+            "Authorization": f"Bearer {access_token}",
+        })
+    except HTTPError as exc:
+        detail = exc.read().decode("utf-8", errors="ignore")
+        raise RuntimeError(f"Outlook API request failed: {detail or exc}") from exc
+    except URLError as exc:
+        raise RuntimeError(f"Outlook API request failed: {exc}") from exc
+
+    messages = [normalize_outlook_message(item, normalize_mailbox_label(mailbox)) for item in (payload.get("value") or [])]
+    return {"mailbox": normalize_mailbox_label(mailbox), "messages": messages, "count": len(messages)}
+
+
+def collect_imap_messages(email_addr, client_id, refresh_token, mailboxes, top):
+    token_payload = refresh_access_token(client_id, refresh_token, [
+        "live",
+        "entra-consumers-delegated",
+        "entra-common-delegated",
+    ])
+    result = fetch_messages_for_mailboxes(email_addr, token_payload["access_token"], mailboxes, top)
+    result["transport"] = "imap"
+    result["token_payload"] = token_payload
+    return result
+
+
+def collect_graph_messages(email_addr, client_id, refresh_token, mailboxes, top):
+    token_payload = refresh_access_token(client_id, refresh_token, [
+        "entra-common-delegated",
+        "entra-consumers-delegated",
+        "entra-common-default",
+    ])
+    mailbox_results = [fetch_graph_messages(token_payload["access_token"], mailbox=mailbox, top=top) for mailbox in mailboxes]
+    messages = []
+    for item in mailbox_results:
+        messages.extend(item["messages"])
+    messages.sort(key=lambda item: int(item.get("receivedTimestamp") or 0), reverse=True)
+    return {
+        "transport": "graph",
+        "token_payload": token_payload,
+        "mailboxResults": mailbox_results,
+        "messages": messages,
+    }
+
+
+def collect_outlook_messages(email_addr, client_id, refresh_token, mailboxes, top):
+    token_payload = refresh_access_token(client_id, refresh_token, [
+        "entra-common-outlook",
+        "entra-common-delegated",
+    ])
+    mailbox_results = [fetch_outlook_api_messages(token_payload["access_token"], mailbox=mailbox, top=top) for mailbox in mailboxes]
+    messages = []
+    for item in mailbox_results:
+        messages.extend(item["messages"])
+    messages.sort(key=lambda item: int(item.get("receivedTimestamp") or 0), reverse=True)
+    return {
+        "transport": "outlook",
+        "token_payload": token_payload,
+        "mailboxResults": mailbox_results,
+        "messages": messages,
+    }
+
+
+def collect_messages(email_addr, client_id, refresh_token, mailboxes, top):
+    errors = []
+    collectors = [
+        ("imap", collect_imap_messages),
+        ("graph", collect_graph_messages),
+        ("outlook", collect_outlook_messages),
+    ]
+
+    for transport_name, collector in collectors:
+        try:
+            log_info(f"message collection start transport={transport_name}")
+            result = collector(email_addr, client_id, refresh_token, mailboxes, top)
+            log_info(
+                f"message collection success transport={transport_name} "
+                f"tokenEndpoint={result['token_payload'].get('token_endpoint', '')}"
+            )
+            return result
+        except Exception as exc:
+            message = compact_text(str(exc), 600)
+            errors.append(f"{transport_name}: {message}")
+            log_info(f"message collection failed transport={transport_name} detail={message}")
+
+    raise RuntimeError(f"Message collection failed on all transports: {' | '.join(errors)}")
+
+
+def extract_code(text):
+    source = str(text or "")
+    patterns = [
+        r"(?:代码为|验证码[^0-9]*?)[\s：:]*(\d{6})",
+        r"code(?:\s+is|[\s:])+(\d{6})",
+        r"\b(\d{6})\b",
+    ]
+    for pattern in patterns:
+        match = re.search(pattern, source, flags=re.IGNORECASE)
+        if match:
+            return match.group(1)
+    return ""
+
+
+def select_latest_code(messages, sender_filters, subject_filters, exclude_codes, filter_after_timestamp):
+    sender_keywords = [str(item).strip().lower() for item in sender_filters or [] if str(item).strip()]
+    subject_keywords = [str(item).strip().lower() for item in subject_filters or [] if str(item).strip()]
+    excluded = {str(item).strip() for item in exclude_codes or [] if str(item).strip()}
+
+    def match_message(message, apply_time_filter):
+        timestamp = int(message.get("receivedTimestamp") or 0)
+        if apply_time_filter and filter_after_timestamp and timestamp and timestamp < int(filter_after_timestamp):
+            return None
+
+        sender = str(message.get("from", {}).get("emailAddress", {}).get("address", "")).lower()
+        subject = str(message.get("subject", ""))
+        preview = str(message.get("bodyPreview", ""))
+        combined = " ".join([sender, subject.lower(), preview.lower()])
+        code = extract_code(" ".join([subject, preview, sender]))
+        if not code or code in excluded:
+            return None
+
+        sender_ok = not sender_keywords or any(keyword in combined for keyword in sender_keywords)
+        subject_ok = not subject_keywords or any(keyword in combined for keyword in subject_keywords)
+        if not sender_ok and not subject_ok:
+            return None
+
+        return {"code": code, "message": message}
+
+    for use_time_fallback in [False, True]:
+        matched = []
+        for message in messages:
+            result = match_message(message, apply_time_filter=not use_time_fallback)
+            if result:
+                matched.append(result)
+        if matched:
+            matched.sort(key=lambda item: int(item["message"].get("receivedTimestamp") or 0), reverse=True)
+            best = matched[0]
+            return {
+                "code": best["code"],
+                "message": best["message"],
+                "usedTimeFallback": use_time_fallback,
+            }
+    return {"code": "", "message": None, "usedTimeFallback": False}
+
+
+class HotmailHelperHandler(BaseHTTPRequestHandler):
+    def do_OPTIONS(self):
+        self.send_response(204)
+        self.send_header("Access-Control-Allow-Origin", "*")
+        self.send_header("Access-Control-Allow-Headers", "Content-Type")
+        self.send_header("Access-Control-Allow-Methods", "POST, OPTIONS")
+        self.end_headers()
+
+    def do_POST(self):
+        try:
+            payload = read_json_payload(self)
+            email_addr = str(payload.get("email") or "").strip()
+            client_id = str(payload.get("clientId") or "").strip()
+            refresh_token = str(payload.get("refreshToken") or "").strip()
+            if not email_addr or not client_id or not refresh_token:
+                raise RuntimeError("Missing email/clientId/refreshToken")
+
+            top = max(1, min(int(payload.get("top") or FETCH_LIMIT_DEFAULT), 30))
+            mailboxes = payload.get("mailboxes") if isinstance(payload.get("mailboxes"), list) else [payload.get("mailbox") or "INBOX"]
+
+            if self.path == "/messages":
+                result = collect_messages(email_addr, client_id, refresh_token, mailboxes, top)
+                json_response(self, 200, {
+                    "ok": True,
+                    "messages": result["messages"],
+                    "mailboxResults": result["mailboxResults"],
+                    "nextRefreshToken": result["token_payload"].get("next_refresh_token") or "",
+                    "tokenEndpoint": result["token_payload"].get("token_endpoint") or "",
+                    "transport": result.get("transport") or "",
+                })
+                return
+
+            if self.path == "/code":
+                result = collect_messages(email_addr, client_id, refresh_token, mailboxes, top)
+                selected = select_latest_code(
+                    result["messages"],
+                    payload.get("senderFilters") or [],
+                    payload.get("subjectFilters") or [],
+                    payload.get("excludeCodes") or [],
+                    int(payload.get("filterAfterTimestamp") or 0),
+                )
+                json_response(self, 200, {
+                    "ok": True,
+                    "code": selected["code"],
+                    "message": selected["message"],
+                    "usedTimeFallback": selected["usedTimeFallback"],
+                    "nextRefreshToken": result["token_payload"].get("next_refresh_token") or "",
+                    "tokenEndpoint": result["token_payload"].get("token_endpoint") or "",
+                    "transport": result.get("transport") or "",
+                })
+                return
+
+            json_response(self, 404, {"ok": False, "error": f"Unsupported path: {self.path}"})
+        except Exception as exc:
+            json_response(self, 500, {"ok": False, "error": str(exc)})
+
+
+def main():
+    server = ThreadingHTTPServer((HOST, PORT), HotmailHelperHandler)
+    print(f"Hotmail helper listening on http://{HOST}:{PORT}", flush=True)
+    try:
+        server.serve_forever()
+    except KeyboardInterrupt:
+        pass
+    finally:
+        server.server_close()
+
+
+if __name__ == "__main__":
+    main()
diff --git a/sidepanel/sidepanel.html b/sidepanel/sidepanel.html
index d6d8cde..6f545b2 100644
--- a/sidepanel/sidepanel.html
+++ b/sidepanel/sidepanel.html
@@ -130,7 +130,7 @@
       <div class="data-row">
         <span class="data-label">邮箱服务</span>
         <select id="select-mail-provider" class="data-select">
-          <option value="hotmail-api">Hotmail（第三方邮件 API）</option>
+          <option value="hotmail-api">Hotmail（远程/本地）</option>
           <option value="163">163 邮箱 (mail.163.com)</option>
           <option value="163-vip">163 VIP 邮箱 (webmail.vip.163.com)</option>
           <option value="qq">QQ 邮箱 (wx.mail.qq.com)</option>
@@ -205,7 +205,7 @@
       <div class="section-mini-header">
         <div class="section-mini-copy">
           <span class="section-label">Hotmail 账号池</span>
-          <span class="section-hint">先配置 API，再维护账号池并校验</span>
+          <span class="section-hint">支持远程服务与本地助手两种接码模式</span>
         </div>
         <div class="section-mini-actions">
           <button id="btn-clear-used-hotmail-accounts" class="btn btn-ghost btn-xs" type="button">清空已用</button>
@@ -213,21 +213,20 @@
           <button id="btn-toggle-hotmail-list" class="btn btn-ghost btn-xs" type="button" aria-expanded="false">展开列表</button>
         </div>
       </div>
-      <div class="data-row">
-        <span class="data-label">API 地址</span>
-        <input type="text" id="input-hotmail-api-url" class="data-input mono" placeholder="https://apple.882263.xyz/api/mail-new" />
+      <div class="data-row" id="row-hotmail-service-mode">
+        <span class="data-label">接码模式</span>
+        <div id="hotmail-service-mode-group" class="choice-group" role="group" aria-label="Hotmail 接码模式">
+          <button type="button" class="choice-btn" data-hotmail-service-mode="remote">远程服务</button>
+          <button type="button" class="choice-btn" data-hotmail-service-mode="local">本地助手</button>
+        </div>
       </div>
-      <div class="data-row">
-        <span class="data-label">响应类型</span>
-        <input type="text" id="input-hotmail-api-response-type" class="data-input mono" placeholder="json；留空则不传 response_type" />
+      <div class="data-row" id="row-hotmail-remote-base-url">
+        <span class="data-label">远程服务</span>
+        <input type="text" id="input-hotmail-remote-base-url" class="data-input mono" placeholder="请输入远程服务地址" />
       </div>
-      <div class="data-row">
-        <span class="data-label">收件箱参数</span>
-        <input type="text" id="input-hotmail-api-inbox-mailbox" class="data-input mono" placeholder="INBOX" />
-      </div>
-      <div class="data-row">
-        <span class="data-label">垃圾箱参数</span>
-        <input type="text" id="input-hotmail-api-junk-mailbox" class="data-input mono" placeholder="Junk" />
+      <div class="data-row" id="row-hotmail-local-base-url" style="display:none;">
+        <span class="data-label">本地助手</span>
+        <input type="text" id="input-hotmail-local-base-url" class="data-input mono" placeholder="http://127.0.0.1:17373" />
       </div>
       <div class="data-row">
         <span class="data-label">邮箱</span>
diff --git a/sidepanel/sidepanel.js b/sidepanel/sidepanel.js
index 5f67896..3fcd8f0 100644
--- a/sidepanel/sidepanel.js
+++ b/sidepanel/sidepanel.js
@@ -60,10 +60,12 @@ const selectMailProvider = document.getElementById('select-mail-provider');
 const rowEmailGenerator = document.getElementById('row-email-generator');
 const selectEmailGenerator = document.getElementById('select-email-generator');
 const hotmailSection = document.getElementById('hotmail-section');
-const inputHotmailApiUrl = document.getElementById('input-hotmail-api-url');
-const inputHotmailApiResponseType = document.getElementById('input-hotmail-api-response-type');
-const inputHotmailApiInboxMailbox = document.getElementById('input-hotmail-api-inbox-mailbox');
-const inputHotmailApiJunkMailbox = document.getElementById('input-hotmail-api-junk-mailbox');
+const rowHotmailServiceMode = document.getElementById('row-hotmail-service-mode');
+const hotmailServiceModeButtons = Array.from(document.querySelectorAll('[data-hotmail-service-mode]'));
+const rowHotmailRemoteBaseUrl = document.getElementById('row-hotmail-remote-base-url');
+const inputHotmailRemoteBaseUrl = document.getElementById('input-hotmail-remote-base-url');
+const rowHotmailLocalBaseUrl = document.getElementById('row-hotmail-local-base-url');
+const inputHotmailLocalBaseUrl = document.getElementById('input-hotmail-local-base-url');
 const inputHotmailEmail = document.getElementById('input-hotmail-email');
 const inputHotmailClientId = document.getElementById('input-hotmail-client-id');
 const inputHotmailPassword = document.getElementById('input-hotmail-password');
@@ -112,6 +114,8 @@ const AUTO_DELAY_MIN_MINUTES = 1;
 const AUTO_DELAY_MAX_MINUTES = 1440;
 const AUTO_DELAY_DEFAULT_MINUTES = 30;
 const DEFAULT_LOCAL_CPA_STEP9_MODE = 'submit';
+const HOTMAIL_SERVICE_MODE_REMOTE = 'remote';
+const HOTMAIL_SERVICE_MODE_LOCAL = 'local';
 
 let latestState = null;
 let currentAutoRun = {
@@ -601,10 +605,9 @@ function collectSettingsPayload() {
     emailGenerator: selectEmailGenerator.value,
     inbucketHost: inputInbucketHost.value.trim(),
     inbucketMailbox: inputInbucketMailbox.value.trim(),
-    hotmailApiUrl: inputHotmailApiUrl.value.trim(),
-    hotmailApiResponseType: inputHotmailApiResponseType.value.trim(),
-    hotmailApiInboxMailbox: inputHotmailApiInboxMailbox.value.trim(),
-    hotmailApiJunkMailbox: inputHotmailApiJunkMailbox.value.trim(),
+    hotmailServiceMode: getSelectedHotmailServiceMode(),
+    hotmailRemoteBaseUrl: inputHotmailRemoteBaseUrl.value.trim(),
+    hotmailLocalBaseUrl: inputHotmailLocalBaseUrl.value.trim(),
     cloudflareDomain: selectedCloudflareDomain,
     cloudflareDomains: domains,
     autoRunSkipFailures: inputAutoSkipFailures.checked,
@@ -619,6 +622,12 @@ function normalizeLocalCpaStep9Mode(value = '') {
     : DEFAULT_LOCAL_CPA_STEP9_MODE;
 }
 
+function normalizeHotmailServiceMode(value = '') {
+  return String(value || '').trim().toLowerCase() === HOTMAIL_SERVICE_MODE_LOCAL
+    ? HOTMAIL_SERVICE_MODE_LOCAL
+    : HOTMAIL_SERVICE_MODE_REMOTE;
+}
+
 function getSelectedLocalCpaStep9Mode() {
   const activeButton = localCpaStep9ModeButtons.find((button) => button.classList.contains('is-active'));
   return normalizeLocalCpaStep9Mode(activeButton?.dataset.localCpaStep9Mode);
@@ -633,6 +642,20 @@ function setLocalCpaStep9Mode(mode) {
   });
 }
 
+function getSelectedHotmailServiceMode() {
+  const activeButton = hotmailServiceModeButtons.find((button) => button.classList.contains('is-active'));
+  return normalizeHotmailServiceMode(activeButton?.dataset.hotmailServiceMode);
+}
+
+function setHotmailServiceMode(mode) {
+  const resolvedMode = normalizeHotmailServiceMode(mode);
+  hotmailServiceModeButtons.forEach((button) => {
+    const active = button.dataset.hotmailServiceMode === resolvedMode;
+    button.classList.toggle('is-active', active);
+    button.setAttribute('aria-pressed', String(active));
+  });
+}
+
 function setSettingsCardLocked(locked) {
   if (!settingsCard) {
     return;
@@ -850,10 +873,9 @@ function applySettingsState(state) {
   selectEmailGenerator.value = state?.emailGenerator || 'duck';
   inputInbucketHost.value = state?.inbucketHost || '';
   inputInbucketMailbox.value = state?.inbucketMailbox || '';
-  inputHotmailApiUrl.value = state?.hotmailApiUrl || '';
-  inputHotmailApiResponseType.value = state?.hotmailApiResponseType ?? '';
-  inputHotmailApiInboxMailbox.value = state?.hotmailApiInboxMailbox || '';
-  inputHotmailApiJunkMailbox.value = state?.hotmailApiJunkMailbox || '';
+  setHotmailServiceMode(state?.hotmailServiceMode);
+  inputHotmailRemoteBaseUrl.value = state?.hotmailRemoteBaseUrl || '';
+  inputHotmailLocalBaseUrl.value = state?.hotmailLocalBaseUrl || '';
   renderCloudflareDomainOptions(state?.cloudflareDomain || '');
   setCloudflareDomainEditMode(false, { clearInput: true });
   inputAutoSkipFailures.checked = Boolean(state?.autoRunSkipFailures);
@@ -1160,6 +1182,7 @@ function renderHotmailAccounts() {
 function updateMailProviderUI() {
   const useInbucket = selectMailProvider.value === 'inbucket';
   const useHotmail = selectMailProvider.value === 'hotmail-api';
+  const hotmailServiceMode = getSelectedHotmailServiceMode();
   const useEmailGenerator = !useHotmail;
   rowInbucketHost.style.display = useInbucket ? '' : 'none';
   rowInbucketMailbox.style.display = useInbucket ? '' : 'none';
@@ -1179,6 +1202,15 @@ function updateMailProviderUI() {
   if (hotmailSection) {
     hotmailSection.style.display = useHotmail ? '' : 'none';
   }
+  if (rowHotmailServiceMode) {
+    rowHotmailServiceMode.style.display = useHotmail ? '' : 'none';
+  }
+  if (rowHotmailRemoteBaseUrl) {
+    rowHotmailRemoteBaseUrl.style.display = useHotmail && hotmailServiceMode === HOTMAIL_SERVICE_MODE_REMOTE ? '' : 'none';
+  }
+  if (rowHotmailLocalBaseUrl) {
+    rowHotmailLocalBaseUrl.style.display = useHotmail && hotmailServiceMode === HOTMAIL_SERVICE_MODE_LOCAL ? '' : 'none';
+  }
   selectEmailGenerator.disabled = useHotmail;
   btnFetchEmail.hidden = useHotmail;
   inputEmail.readOnly = useHotmail;
@@ -1189,7 +1221,7 @@ function updateMailProviderUI() {
   }
   if (autoHintText) {
     autoHintText.textContent = useHotmail
-      ? '请先校验并选择一个 Hotmail 账号'
+      ? `请先校验并选择一个 Hotmail 账号（当前：${hotmailServiceMode === HOTMAIL_SERVICE_MODE_LOCAL ? '本地助手' : '远程服务'}）`
       : '先自动获取邮箱，或手动粘贴邮箱后再继续';
   }
   if (useHotmail) {
@@ -2003,6 +2035,19 @@ localCpaStep9ModeButtons.forEach((button) => {
   });
 });
 
+hotmailServiceModeButtons.forEach((button) => {
+  button.addEventListener('click', () => {
+    const nextMode = button.dataset.hotmailServiceMode;
+    if (getSelectedHotmailServiceMode() === normalizeHotmailServiceMode(nextMode)) {
+      return;
+    }
+    setHotmailServiceMode(nextMode);
+    updateMailProviderUI();
+    markSettingsDirty(true);
+    saveSettings({ silent: true }).catch(() => { });
+  });
+});
+
 btnSaveSettings.addEventListener('click', async () => {
   if (!settingsDirty) {
     showToast('配置已是最新', 'info', 1400);
@@ -2216,7 +2261,7 @@ inputVpsPassword.addEventListener('blur', () => {
   saveSettings({ silent: true }).catch(() => { });
 });
 
-[inputHotmailApiUrl, inputHotmailApiResponseType, inputHotmailApiInboxMailbox, inputHotmailApiJunkMailbox].forEach((input) => {
+[inputHotmailRemoteBaseUrl, inputHotmailLocalBaseUrl].forEach((input) => {
   input?.addEventListener('input', () => {
     markSettingsDirty(true);
     scheduleSettingsAutoSave();
diff --git a/start-hotmail-helper.bat b/start-hotmail-helper.bat
new file mode 100644
index 0000000..607a34e
--- /dev/null
+++ b/start-hotmail-helper.bat
@@ -0,0 +1,19 @@
+@echo off
+setlocal
+
+cd /d "%~dp0"
+
+where py >nul 2>nul
+if %errorlevel%==0 (
+  py -3 scripts\hotmail_helper.py
+  goto :eof
+)
+
+where python >nul 2>nul
+if %errorlevel%==0 (
+  python scripts\hotmail_helper.py
+  goto :eof
+)
+
+echo Python 3 not found. Please install Python 3.10+ and try again.
+pause
diff --git a/start-hotmail-helper.command b/start-hotmail-helper.command
new file mode 100644
index 0000000..cd0009c
--- /dev/null
+++ b/start-hotmail-helper.command
@@ -0,0 +1,16 @@
+#!/bin/bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+cd "$SCRIPT_DIR"
+
+if command -v python3 >/dev/null 2>&1; then
+  exec python3 scripts/hotmail_helper.py
+fi
+
+if command -v python >/dev/null 2>&1; then
+  exec python scripts/hotmail_helper.py
+fi
+
+echo "Python 3 not found. Please install Python 3.10+ and try again."
+read -r -p "Press Enter to exit..."

From f6b0f5e05c32990aa2335cc0672454edfe25cb21 Mon Sep 17 00:00:00 2001
From: QLHazyCoder <2825305047@qq.com>
Date: Mon, 13 Apr 2026 16:28:12 +0800
Subject: [PATCH 3/5] =?UTF-8?q?docs:=20=E6=9B=B4=E6=96=B0=20Hotmail=20?=
 =?UTF-8?q?=E8=BF=9C=E7=A8=8B=E6=A8=A1=E5=BC=8F=E6=9C=8D=E5=8A=A1=E5=9C=B0?=
 =?UTF-8?q?=E5=9D=80=E8=AF=B4=E6=98=8E?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 2033aef..2874612 100644
--- a/README.md
+++ b/README.md
@@ -161,7 +161,7 @@ Step 1 和 Step 9 都依赖这个地址。
 使用方式：
 
 - 先选择 Hotmail 接码模式
-- 远程模式下填写远程服务地址（默认兼容 `https://apple.882263.xyz`）
+- 远程模式下填写你自己的远程服务地址
 - 本地模式下填写本地助手地址（默认 `http://127.0.0.1:17373`）
 - Windows 运行仓库根目录的 `start-hotmail-helper.bat`
 - macOS 运行仓库根目录的 `start-hotmail-helper.command`

From cd21a0bdf89c5413c8c241e067839295debcbcbd Mon Sep 17 00:00:00 2001
From: QLHazyCoder <2825305047@qq.com>
Date: Mon, 13 Apr 2026 23:53:49 +0800
Subject: [PATCH 4/5] =?UTF-8?q?=E6=B7=BB=E5=8A=A0Hotmail=E5=8F=8C=E6=A8=A1?=
 =?UTF-8?q?=E5=BC=8F=E9=80=82=E9=85=8D=E5=BC=80=E5=8F=91=E6=96=B9=E6=A1=88?=
 =?UTF-8?q?=E5=8F=8A=E5=BC=80=E5=8F=91=E8=AE=B0=E5=BD=95md=E6=96=87?=
 =?UTF-8?q?=E4=BB=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 Hotmail双模式适配开发方案及开发记录.md | 431 +++++++++++++++++++++++++
 1 file changed, 431 insertions(+)
 create mode 100644 Hotmail双模式适配开发方案及开发记录.md

diff --git a/Hotmail双模式适配开发方案及开发记录.md b/Hotmail双模式适配开发方案及开发记录.md
new file mode 100644
index 0000000..d8ab2ee
--- /dev/null
+++ b/Hotmail双模式适配开发方案及开发记录.md
@@ -0,0 +1,431 @@
+# Hotmail 鍙屾ā寮忛€傞厤寮€鍙戞柟妗?
+## 1. 鑳屾櫙涓庨棶棰樺垎鏋?
+褰撳墠浠撳簱鐨?Hotmail 鎺ョ爜璺緞宸茬粡鍥為€€鍒扳€滅涓夋柟閰嶇疆鈥濈増鏈紝鏍稿績鐗圭偣鏄細
+
+- 璐﹀彿姹犵户缁娇鐢?`閭 / 瀹㈡埛绔?ID / 鍒锋柊浠ょ墝` 浣滀负鎵归噺瀵煎叆鏍煎紡
+- 鎵╁睍褰撳墠娲昏穬閫昏緫鐩存帴璇锋眰绗笁鏂?HTTP 鎺ュ彛璇诲彇閭欢
+- 渚ц竟鏍忛澶栨毚闇蹭簡 `API 鍦板潃 / 鍝嶅簲绫诲瀷 / 鏀朵欢绠卞弬鏁?/ 鍨冨溇绠卞弬鏁癭 杩欑粍鍗忚缁嗚妭閰嶇疆
+
+杩欑増铏界劧鑳藉伐浣滐紝浣嗗凡缁忔毚闇插嚭涓や釜缁撴瀯鎬ч棶棰橈細
+
+1. **杩滅▼鍗忚鍜屾湰鍦板崗璁苟涓嶄竴鑷?*
+   - `#10` 鏄繙绋嬬涓夋柟鏈嶅姟妯″紡锛屾牳蹇冩槸涓€涓浐瀹氭枃妗ｆ帴鍙?`https://apple.882263.xyz/api.html`
+   - `#42` 鏄湰鍦?helper 妯″紡锛屾牳蹇冩槸鏈湴 Python 鑴氭湰鏆撮湶 `/messages`銆乣/code` 绛夋帴鍙?   - 涓よ€呭彧鏄骇鍝佸叆鍙ｇ浉浼硷紝涓嶆槸鍚屼竴鍗忚锛屼笉鑳界‖缁熶竴鎴愪竴濂椻€滈€氱敤 API 鍙傛暟閰嶇疆鍣ㄢ€?
+2. **褰撳墠 UI 鏆撮湶浜嗚繃澶氬崗璁粏鑺?*
+   - `鍝嶅簲绫诲瀷`
+   - `鏀朵欢绠卞弬鏁癭
+   - `鍨冨溇绠卞弬鏁癭
+   - 杩欎簺瀛楁瀵硅繙绋嬫彁渚涘晢鍗忚鏉ヨ鏄浐瀹氱殑锛屽鏈湴 helper 鍗忚鏉ヨ鍙堟牴鏈笉閫傜敤
+   - 鎶婅繖浜涚粏鑺傛毚闇茬粰鏈€缁堢敤鎴凤紝浼氭妸鐣岄潰鍙樻垚鈥滄帴鍙ｈ皟璇曞櫒鈥濓紝澧炲姞閿欒閰嶇疆椋庨櫓
+
+3. **鐢ㄦ埛鐪熷疄闇€姹備笉鏄氦浜掓巿鏉冿紝鑰屾槸鎵归噺璐﹀彿姹?*
+   - 闇€瑕佺户缁敮鎸?`璐﹀彿----瀵嗙爜----瀹㈡埛绔疘D----鍒锋柊浠ょ墝`
+   - 闇€瑕佹敮鎸佸嚑鍗佷釜璐﹀彿鐨勬壒閲忓鍏ヤ笌鑷姩杞
+   - 鍥犳褰撳墠闃舵涓嶅簲鍒囧埌鈥滃井杞氦浜掓巿鏉冣€濅富璺嚎
+
+## 2. 宸查獙璇佸弬鑰冩潵婧?
+### 2.1 PR #10锛氳繙绋嬬涓夋柟鏈嶅姟妯″紡
+
+宸茬‘璁ょ壒寰侊細
+
+- 鎵╁睍鐩存帴璇锋眰杩滅▼鎺ュ彛
+- 鎺ュ彛鏂囨。宸插叕寮€锛歚https://apple.882263.xyz/api.html`
+- 鏍稿績鎺ュ彛鏄?`/api/mail-new`
+- 鎵╁睍浼犲叆锛?  - `client_id`
+  - `refresh_token`
+  - `email`
+  - `mailbox`
+  - `response_type`
+
+璁捐鐗圭偣锛?
+- 鍗忚鐢辨彁渚涘晢鍥哄畾锛屼笉鍙兘涓哄綋鍓嶉」鐩崟鐙慨鏀?- 鎵╁睍搴旇鍋氣€滃崗璁€傞厤鈥濓紝鑰屼笉鏄鐢ㄦ埛鎵嬪～涓€鍫嗗簳灞傚弬鏁?
+### 2.2 PR #42锛氭湰鍦?helper 妯″紡
+
+宸茬‘璁ょ壒寰侊細
+
+- 鎵╁睍璇锋眰鏈湴 helper锛歚http://127.0.0.1:17373`
+- helper 鑴氭湰浣嶄簬锛?  - `scripts/hotmail_helper.py`
+  - `start-hotmail-helper.bat`
+- 鎵╁睍浣跨敤鐨勬牳蹇冩帴鍙ｆ槸锛?  - `/messages`
+  - `/code`
+
+璁捐鐗圭偣锛?
+- 鎵╁睍鍜岄偖绠卞崗璁В鑰?- 鏈湴鑴氭湰鎵挎媴 token 鍒锋柊銆佸彇淇°€侀獙璇佺爜绛涢€?- 鏇撮€傚悎鏈湴鐢ㄦ埛鑷帶鐜
+
+## 3. 鏈€缁堣璁″彇鑸?
+### 3.1 鐩爣鏂规
+
+Hotmail 鍖烘敼鎴?*鍙屾ā寮忛€傞厤**锛?
+- `杩滅▼鏈嶅姟`
+- `鏈湴鍔╂墜`
+
+涓ょ妯″紡缁х画鍏辩敤鍚屼竴濂楄处鍙锋睜涓庢壒閲忓鍏ユ牸寮忥細
+
+```text
+璐﹀彿----瀵嗙爜----瀹㈡埛绔疘D----鍒锋柊浠ょ墝
+```
+
+### 3.2 涓嶉噰鐢ㄧ殑鏂规
+
+#### 涓嶉噰鐢ㄢ€滃井杞氦浜掓巿鏉冣€濅富鏂规
+
+鍘熷洜锛?
+- 涓嶉€傚悎鍑犲崄涓处鍙风殑鎵归噺浣跨敤鍦烘櫙
+- 浼氱牬鍧忕幇鏈夋壒閲忓鍏ラ摼璺?- 涓庡綋鍓嶇敤鎴烽渶姹傚啿绐?
+#### 涓嶉噰鐢ㄢ€滈€氱敤 API 鍙傛暟閰嶇疆鍣ㄢ€?
+鍘熷洜锛?
+- 杩滅▼鍗忚鍜屾湰鍦板崗璁湰灏变笉鍚?- 缁х画淇濈暀 `鍝嶅簲绫诲瀷 / 鏀朵欢绠卞弬鏁?/ 鍨冨溇绠卞弬鏁癭 浼氬鍔犻厤缃鏉傚害
+- 杩欎簺瀛楁涓嶅簲鎴愪负鏈€缁堢敤鎴风殑甯歌閰嶇疆鍏ュ彛
+
+## 4. 鐩爣浜や簰璁捐
+
+### 4.1 Hotmail 鍖虹晫闈㈢粨鏋?
+鍦ㄧ幇鏈?`Hotmail 璐﹀彿姹燻 鍖哄潡涓柊澧烇細
+
+1. `Hotmail 妯″紡` 鎸夐挳缁?   - `杩滅▼鏈嶅姟`
+   - `鏈湴鍔╂墜`
+
+2. `鏈嶅姟鍦板潃` 杈撳叆妗?   - 褰撴ā寮忎负 `杩滅▼鏈嶅姟` 鏃舵樉绀鸿繙绋嬫湇鍔″湴鍧€
+   - 褰撴ā寮忎负 `鏈湴鍔╂墜` 鏃舵樉绀烘湰鍦板姪鎵嬪湴鍧€
+
+3. 淇濈暀璐﹀彿姹犺〃鍗?   - 閭
+   - 瀹㈡埛绔?ID
+   - 閭瀵嗙爜澶囨敞
+   - 鍒锋柊浠ょ墝
+   - 娣诲姞璐﹀彿
+
+4. 淇濈暀鎵归噺瀵煎叆
+   - 浠嶇劧鏀寔 `璐﹀彿----瀵嗙爜----瀹㈡埛绔疘D----鍒锋柊浠ょ墝`
+
+5. 淇濈暀璐﹀彿鎿嶄綔
+   - 浣跨敤姝よ处鍙?   - 鏍囪宸茬敤 / 鏈敤
+   - 鏍￠獙
+   - 澶嶅埗鏈€鏂伴獙璇佺爜
+   - 鍒犻櫎
+
+### 4.2 瑕佸垹闄ょ殑鏃?UI
+
+鍒犻櫎褰撳墠绗笁鏂归厤缃噷杩欏嚑涓粏椤癸細
+
+- `Hotmail API 鍦板潃`
+- `鍝嶅簲绫诲瀷`
+- `鏀朵欢绠卞弬鏁癭
+- `鍨冨溇绠卞弬鏁癭
+
+鍘熷洜锛?
+- 杩欎簺灞炰簬鍗忚缁嗚妭锛屼笉閫傚悎鏅€氫娇鐢ㄨ€?- 鍙屾ā寮忔柟妗堥噷鍙渶瑕侀厤缃€滄湇鍔″湴鍧€鈥?
+## 5. 鍚庡彴璁捐
+
+### 5.1 鎸佷箙鍖栭厤缃」
+
+鏂板骞朵娇鐢ㄤ互涓嬫寔涔呭寲瀛楁锛?
+- `hotmailServiceMode`
+  - 鍊硷細`remote` / `local`
+- `hotmailRemoteBaseUrl`
+  - 榛樿锛氳繙绋嬫湇鍔℃枃妗ｆ墍鍦ㄥ煙鍚?- `hotmailLocalBaseUrl`
+  - 榛樿锛歚http://127.0.0.1:17373`
+
+鍒犻櫎褰撳墠浠呮湇鍔′簬绗笁鏂归€氱敤閰嶇疆鍣ㄧ殑瀛楁锛?
+- `hotmailApiUrl`
+- `hotmailApiResponseType`
+- `hotmailApiInboxMailbox`
+- `hotmailApiJunkMailbox`
+
+### 5.2 璇锋眰閫傞厤灞?
+鏂板缁熶竴鐨勬ā寮忓垎鍙戝眰锛屼絾**涓嶇粺涓€搴曞眰鍗忚**銆?
+#### 杩滅▼妯″紡
+
+鐩存帴鍏煎 PR #10 鏂囨。鍗忚锛?
+- 璋冪敤杩滅▼ `baseUrl + /api/mail-new`
+- 鎵╁睍绔繚鎸佺幇鏈夆€滄媺娑堟伅鍚庢湰鍦扮瓫楠岃瘉鐮佲€濈殑妯″紡
+
+#### 鏈湴妯″紡
+
+鐩存帴鍏煎 PR #42 helper 鍗忚锛?
+- `/messages`
+- `/code`
+
+鎵╁睍绔€昏緫锛?
+- `鏍￠獙` / `娴嬭瘯鏀朵俊` 璧?`/messages`
+- 楠岃瘉鐮佽疆璇紭鍏堣蛋 `/code`
+
+### 5.3 闇€瑕佹柊澧炴垨璋冩暣鐨勫悗鍙板嚱鏁?
+1. 閰嶇疆褰掍竴鍖?   - `normalizeHotmailServiceMode`
+   - `normalizeHotmailRemoteBaseUrl`
+   - `normalizeHotmailLocalBaseUrl`
+   - `getHotmailServiceSettings`
+
+2. 杩滅▼妯″紡閫傞厤
+   - `requestHotmailRemoteMailbox`
+   - `fetchHotmailRemoteMessages`
+
+3. 鏈湴妯″紡閫傞厤
+   - `requestHotmailLocalMessages`
+   - `requestHotmailLocalCode`
+   - `fetchHotmailLocalMessages`
+
+4. 缁熶竴鍒嗗彂鍏ュ彛
+   - `fetchHotmailMailboxMessages`
+   - `pollHotmailVerificationCode`
+   - 鏍规嵁妯″紡鍒嗘祦
+
+## 6. 鏈湴 helper 鏂囦欢绛栫暐
+
+鐩存帴寮曞叆骞堕€傞厤 PR #42 宸查獙璇佺殑鏈湴鑴氭湰鏂规锛?
+- `scripts/hotmail_helper.py`
+- `start-hotmail-helper.bat`
+
+寮曞叆鍘熷垯锛?
+- 浼樺厛淇濇寔鍗忚鍏煎锛屼笉鍋氭棤蹇呰閲嶆瀯
+- 鍙帴鍏ュ綋鍓嶆墿灞曢渶瑕佺敤鍒扮殑鎺ュ彛涓庡惎鍔ㄦ柟寮?- 涓嶅湪鏈疆鎵╁睍寮€鍙戜腑缁х画寮曞叆涓?Hotmail 妯″紡鍒囨崲鏃犲叧鐨勫ぇ瑙勬ā鐘舵€侀€昏緫
+
+## 7. 涓庣幇鏈夐€昏緫鐨勫吋瀹硅姹?
+### 7.1 蹇呴』淇濇寔涓嶅彉鐨勮涓?
+- `Mail = Hotmail` 鏃朵粛鐒剁敱璐﹀彿姹犲垎閰嶉偖绠?- `璐﹀彿----瀵嗙爜----瀹㈡埛绔疘D----鍒锋柊浠ょ墝` 鎵归噺瀵煎叆鏍煎紡蹇呴』缁х画鍙敤
+- `鏍￠獙` / `澶嶅埗鏈€鏂伴獙璇佺爜` / `Auto` 鐨勭敤鎴峰叆鍙ｄ笉鍙?- Hotmail 璐﹀彿鐨?`used / status / lastError / lastAuthAt / lastUsedAt` 閫昏緫淇濇寔鐜版湁璇箟
+
+### 7.2 蹇呴』閬垮厤鐨勯棶棰?
+- 涓嶈兘鎶婅繙绋嬪拰鏈湴寮鸿鎶芥垚涓€濂楀亣缁熶竴鍗忚
+- 涓嶈兘鎶婄涓夋柟鏈嶅姟瑕佹眰鏀规垚 `/messages` `/code`
+- 涓嶈兘鍒犻櫎鎵归噺瀵煎叆 refresh token 鐨勮兘鍔?- 涓嶈兘鍙敼 UI锛屼笉鎺ュ悗鍙板垎鍙?- 涓嶈兘鍙帴鍚庡彴锛屼笉鍚屾 README 涓庤鏄?
+## 8. 鏂规鑷涓庡畬鏁存€у垎鏋?
+### 8.1 鏂规鏄惁绗﹀悎闇€姹?
+绗﹀悎銆?
+鍘熷洜锛?
+- 淇濈暀鎵归噺瀵煎叆
+- 涓嶅己杩敤鎴疯蛋寰蒋浜や簰鎺堟潈
+- 鍚屾椂鏀寔宸查獙璇佺殑杩滅▼涓庢湰鍦颁袱绉嶈矾寰?
+### 8.2 鏂规鏄惁瀹屾暣
+
+瀹屾暣銆?
+宸茬粡瑕嗙洊锛?
+- 閰嶇疆妯″瀷
+- 鐣岄潰鍙樻洿
+- 鍚庡彴鍒嗗彂
+- helper 寮曞叆
+- 鏂囨。鏇存柊
+- 鑷椤?
+### 8.3 鏂规鏄惁瀛樺湪鍐呴儴鍐茬獊
+
+褰撳墠鏃犳槑鏄惧啿绐併€?
+鍞竴闇€瑕佷弗鏍兼帶鍒剁殑鏄細
+
+- 杩滅▼妯″紡涓庢湰鍦版ā寮忚櫧鐒跺叆鍙ｇ粺涓€锛屼絾鍗忚涓嶈兘娣风敤
+- 瀹炵幇鏃跺繀椤绘槑纭垎灞傦紝涓嶈鍋氭垚鈥滄牴鎹厤缃嫾涓嶅悓 query 鍙傛暟鈥濈殑鏉傜硡閫昏緫
+
+### 8.4 鏂规娼滃湪缂洪櫡
+
+1. 鏈湴 helper 鍙兘渚濊禆 Python 鐜
+   - 闇€瑕佸湪 README 涓槑纭鏄庡浣曞惎鍔?
+2. 杩滅▼鏈嶅姟鏂囨。鑻ユ湭鏉ュ彉鏇?   - 褰撳墠浠嶄緷璧栨湇鍔″晢鎺ュ彛绋冲畾鎬?
+3. 褰撳墠浠撳簱鏄棫椤圭洰
+   - Hotmail 閫昏緫鍛ㄨ竟宸叉湁杈冨鐘舵€佸瓧娈?   - 瀹炵幇鏃跺繀椤昏皑鎱庢鏌?`verify/test/poll/auto-run` 鍥涙潯閾炬槸鍚︾粺涓€鎸夋ā寮忓垎鍙?
+## 9. 寮€鍙戞竻鍗?
+### 闃舵 1锛氶厤缃ā鍨嬩笌鏂规钀界洏
+
+- 鏂板缓鏈柟妗堟枃妗?- 鏂板 Hotmail 鍙屾ā寮忔寔涔呭寲瀛楁
+- 鍒犻櫎鏃х殑绗笁鏂瑰崗璁粏椤瑰瓧娈?
+鑷锛?
+- 閰嶇疆椤瑰懡鍚嶆槸鍚︾粺涓€
+- 榛樿鍊兼槸鍚﹀畬鏁?- import/export 鏄惁浠嶅彲宸ヤ綔
+
+### 闃舵 2锛欻otmail UI 鏀归€?
+- 鏂板 `杩滅▼鏈嶅姟 / 鏈湴鍔╂墜` 妯″紡鎸夐挳
+- 鏂板 `鏈嶅姟鍦板潃` 杈撳叆妗?- 鍒犻櫎鏃х殑 `鍝嶅簲绫诲瀷 / 鏀朵欢绠卞弬鏁?/ 鍨冨溇绠卞弬鏁癭 杈撳叆妗?- 淇濈暀璐﹀彿姹犺〃鍗曚笌鎵归噺瀵煎叆
+
+鑷锛?
+- 鍒囨崲妯″紡鍚庢樉绀烘槸鍚︽纭?- 鑷姩淇濆瓨鏄惁浠嶆甯?- 涓嶅悓妯″紡鐨勫湴鍧€鏄惁涓嶄細浜掔浉瑕嗙洊
+
+### 闃舵 3锛氬悗鍙板弻妯″紡閫傞厤
+
+- 瀹炵幇杩滅▼妯″紡璇锋眰閫傞厤
+- 瀹炵幇鏈湴妯″紡 helper 璇锋眰閫傞厤
+- 淇敼 `fetchHotmailMailboxMessages`
+- 淇敼 `pollHotmailVerificationCode`
+- 鏍￠獙 `verify / test / auto-run` 涓夋潯閾?
+鑷锛?
+- 杩滅▼妯″紡鏄惁浠嶅吋瀹?`#10`
+- 鏈湴妯″紡鏄惁鍏煎 `#42`
+- 閿欒淇℃伅鏄惁浠嶄細鍐欏洖 `lastError`
+
+### 闃舵 4锛氬紩鍏ユ湰鍦?helper
+
+- 寮曞叆 `scripts/hotmail_helper.py`
+- 寮曞叆 `start-hotmail-helper.bat`
+- 妫€鏌ユ湰鍦板崗璁笌鎵╁睍璋冪敤涓€鑷?
+鑷锛?
+- helper 璺緞鏄惁姝ｇ‘
+- 绔彛涓庢枃妗ｆ槸鍚︿竴鑷?- 鎵╁睍璇锋眰璺緞鏄惁鍖归厤 helper
+
+### 闃舵 5锛氭枃妗ｆ敹灏?
+- 鏇存柊 README 涓?Hotmail 浣跨敤璇存槑
+- 鏄庣‘杩滅▼妯″紡涓庢湰鍦版ā寮忕殑鍖哄埆
+- 鏄庣‘鏈湴 helper 鍚姩鏂瑰紡
+
+鑷锛?
+- README 鏄惁鍜岀湡瀹?UI 涓€鑷?- 鐢ㄦ埛鏄惁鑳界湅鏂囨。瀹屾垚閰嶇疆
+
+## 10. 瀹炴柦椤哄簭
+
+鏈疆寮€鍙戜弗鏍兼寜浠ヤ笅椤哄簭鎵ц锛?
+1. 鍏堝啓鏈柟妗堟枃妗?2. 鍐嶆敼閰嶇疆妯″瀷
+3. 鍐嶆敼 UI
+4. 鍐嶆敼鍚庡彴鍙屾ā寮忓垎鍙?5. 鍐嶅紩鍏ユ湰鍦?helper
+6. 鏈€鍚庣粺涓€鍋氶潤鎬佽嚜妫€骞舵彁閱掔敤鎴锋墜娴?
+## 11. 瀹為檯寮€鍙戣褰?
+### 11.1 宸插畬鎴愭敼鍔?
+鏈疆宸插疄闄呭畬鎴愪互涓嬪紑鍙戝唴瀹癸細
+
+1. Hotmail 閰嶇疆妯″瀷浠庘€滅涓夋柟閫氱敤缁嗛」閰嶇疆鈥濆垏鎹负鈥滃弻妯″紡 + 鍦板潃閰嶇疆鈥?   - 鍒犻櫎鍘熸湰闈㈠悜绗笁鏂圭粏椤圭殑鎬濊矾锛?     - `hotmailApiUrl`
+     - `hotmailApiResponseType`
+     - `hotmailApiInboxMailbox`
+     - `hotmailApiJunkMailbox`
+   - 鏀逛负锛?     - `hotmailServiceMode`
+     - `hotmailRemoteBaseUrl`
+     - `hotmailLocalBaseUrl`
+
+2. Sidepanel Hotmail 鍖哄凡鏀归€犳垚鍙屾ā寮?UI
+   - 鏂板 `杩滅▼鏈嶅姟 / 鏈湴鍔╂墜` 鎸夐挳缁?   - 鏂板杩滅▼鏈嶅姟鍦板潃杈撳叆妗?   - 鏂板鏈湴鍔╂墜鍦板潃杈撳叆妗?   - 淇濈暀鍘熸湁璐﹀彿姹犺〃鍗曞拰鎵归噺瀵煎叆鏍煎紡
+
+3. 鍚庡彴 Hotmail 璇锋眰閾惧凡鎸夋ā寮忓垎娴?   - 杩滅▼妯″紡锛?     - 鐩存帴鍏煎 `#10`
+     - 浣跨敤 `baseUrl + /api/mail-new`
+   - 鏈湴妯″紡锛?     - 鐩存帴鍏煎 `#42`
+     - 浣跨敤 `/messages`
+     - 浣跨敤 `/code`
+
+4. 鏈湴 helper 鏂囦欢宸茶惤鍦?   - `scripts/hotmail_helper.py`
+   - `start-hotmail-helper.bat`
+
+5. README 宸插悓姝ユ洿鏂颁负鍙屾ā寮忚鏄?
+### 11.2 瀹為檯淇敼鏂囦欢
+
+鏈疆瀹為檯鏀瑰姩鏂囦欢濡備笅锛?
+- `background.js`
+- `sidepanel/sidepanel.html`
+- `sidepanel/sidepanel.js`
+- `README.md`
+- `scripts/hotmail_helper.py`
+- `start-hotmail-helper.bat`
+
+鏈疆鏂板浣嗕笉涓€瀹氳繘鍏?Git 鐨勬枃妗ｏ細
+
+- `docs/md/Hotmail鍙屾ā寮忛€傞厤寮€鍙戞柟妗?md`
+
+### 11.3 瀹為檯瀹炵幇涓庡師鏂规鐨勫樊寮?
+褰撳墠瀹炵幇涓庡師鏂规鐩告瘮锛屽瓨鍦ㄨ繖浜涘疄闄呭樊寮傦細
+
+1. 鏈湴 helper 娌℃湁鏁翠唤鐓ф惉 `#42`
+   - 褰撳墠鏄寜 `#42` 鐨勫崗璁€濊矾钀戒簡涓€涓畝鍖栫増
+   - 鐩爣鏄厛婊¤冻鎵╁睍鐜伴樁娈电殑 `/messages` 涓?`/code`
+   - 娌℃湁缁х画寮曞叆 `#42` 閲屾洿閲嶇殑澶辫触鐘舵€併€佹寔涔呭凡鐢ㄩ偖绠便€佸苟鍙戜繚鎶ょ瓑鏁村鎵╁睍閫昏緫
+
+2. 杩滅▼妯″紡鐩墠浠嶆部鐢ㄦ墿灞曠鏈湴绛涢獙璇佺爜
+   - 鍏煎 `#10` 鐨勫崟鎺ュ彛 `/api/mail-new`
+   - 鏈澶栧鎺?`mail-all`銆乣process-inbox`銆乣process-junk`
+
+3. 娴嬭瘯鏂囦欢鏈疆娌℃湁缁х画琛ラ綈
+   - 褰撳墠涓昏瀹屾垚鐨勬槸鏂规钀藉湴鍜屼富閾炬敼閫?   - 灏氭湭琛ラ拡瀵瑰弻妯″紡鐨勬渶灏忓洖褰掓祴璇曟々
+
+### 11.4 褰撳墠宸茬煡鏈畬鎴愰」
+
+浠ヤ笅鍐呭褰撳墠浠嶆湭瀹屾垚鎴栨湭楠岃瘉锛?
+1. 鏈ˉ Hotmail 鍙屾ā寮忓搴旂殑娴嬭瘯妗?   - 杩滅▼妯″紡楠岃瘉閫昏緫
+   - 鏈湴妯″紡 `/messages` 涓?`/code` 鍒嗗彂閫昏緫
+   - 妯″紡鍒囨崲鍚庣殑 UI 鐘舵€佸洖濉?
+2. 鏈 helper 鍋氳繍琛岀骇瀹炴祴
+   - 褰撳墠鍙畬鎴愪唬鐮佹帴鍏?   - 灏氭湭纭鏈満 Python 鐜涓?`imaplib + XOAUTH2 + login.live.com/oauth20_token.srf` 鏄惁鑳界ǔ瀹氬伐浣?
+3. 鏈獙璇佽繙绋嬫湇鍔″湴鍧€鐨勪笉鍚岃緭鍏ュ舰寮?   - 渚嬪鐢ㄦ埛濉細
+     - 鏍瑰煙鍚?     - `/api.html`
+     - `/api/mail-new`
+   - 鐩墠浠ｇ爜鍋氫簡璺緞褰掍竴鍖栵紝浣嗛渶瑕佷汉宸ユ墜娴嬬‘璁?
+4. 鏈ˉ README 涓洿缁嗙殑鏈湴 helper 鍚姩鎺掗敊璇存槑
+   - 褰撳墠鍙啓浜嗗叆鍙ｈ鏄?   - 杩樻病鍐欌€滃惎鍔ㄥけ璐ユ€庝箞鐪嬨€佺鍙ｅ崰鐢ㄦ€庝箞鍔炪€丳ython 涓嶅瓨鍦ㄦ€庝箞鍔炩€?
+### 11.5 褰撳墠鎵嬫祴閲嶇偣
+
+鍚庣画浼樺厛鎵嬫祴浠ヤ笅鍐呭锛?
+1. 杩滅▼妯″紡
+   - `Mail = Hotmail`
+   - 妯″紡鍒囧埌 `杩滅▼鏈嶅姟`
+   - 鍦板潃濉?`https://apple.882263.xyz`
+   - 娴嬶細
+     - `鏍￠獙`
+     - `澶嶅埗鏈€鏂伴獙璇佺爜`
+     - `Auto`
+
+2. 鏈湴妯″紡
+   - 鍏堣繍琛?`start-hotmail-helper.bat`
+   - 妯″紡鍒囧埌 `鏈湴鍔╂墜`
+   - 鍦板潃淇濇寔 `http://127.0.0.1:17373`
+   - 娴嬶細
+     - `鏍￠獙`
+     - `澶嶅埗鏈€鏂伴獙璇佺爜`
+     - `Auto`
+
+3. 妯″紡鍒囨崲
+   - 浠?`杩滅▼鏈嶅姟` 鍒囧埌 `鏈湴鍔╂墜`
+   - 浠?`鏈湴鍔╂墜` 鍒囧埌 `杩滅▼鏈嶅姟`
+   - 鐪嬪湴鍧€鏄惁鍒嗗埆淇濈暀
+   - 鐪?Hotmail 璐﹀彿姹犳槸鍚︿笉鍙楀奖鍝?
+4. 鎵归噺瀵煎叆
+   - 瀵煎叆鏍煎紡锛?     - `璐﹀彿----瀵嗙爜----瀹㈡埛绔疘D----鍒锋柊浠ょ墝`
+   - 妫€鏌ユā寮忓垏鎹㈠悗瀵煎叆鑳藉姏鏄惁浠嶆甯?
+### 11.6 褰撳墠椋庨櫓缁撹
+
+褰撳墠鏈€澶ч闄╀笉鍦?UI锛岃€屽湪杩欎袱涓偣锛?
+1. 鏈湴 helper 鐨勭湡瀹炲彲杩愯鎬?   - 浠ｇ爜宸茬粡鎺ヤ笂
+   - 浣嗘湭缁忓疄闄呰繍琛岄獙璇?
+2. 杩滅▼涓庢湰鍦扮殑杩斿洖缁撴瀯鍏煎鎬?   - 杩滅▼妯″紡璧?`#10` 椋庢牸
+   - 鏈湴妯″紡璧?`#42` 椋庢牸
+   - 铏界劧鍚庡彴宸茬粡鍋氫簡閫傞厤锛屼絾浠嶉渶瑕佸疄闄呰繑鍥炴牱鏈獙璇?
+### 11.7 褰撳墠闃舵缁撹
+
+褰撳墠鐘舵€佸彲浠ョ悊瑙ｄ负锛?
+- 鏂规宸茶惤鐩?- 鍙屾ā寮忎富缁撴瀯宸插紑鍙戝畬鎴?- 杩滅▼ / 鏈湴涓ゆ潯鍗忚宸叉帴鍏?- 璐﹀彿姹犱笌鎵归噺瀵煎叆浠嶄繚鐣?- 浣嗗皻鏈粡杩囩湡瀹炶繍琛岄獙璇?
+鍥犳鏈疆寮€鍙戠粨鏋滃睘浜庯細
+
+- **浠ｇ爜缁撴瀯宸插埌浣?*
+- **杩愯绋冲畾鎬у緟浜哄伐楠岃瘉**
+
+## 12. 本地 helper 运行说明补充
+
+### 12.1 启动命令
+
+Windows：
+
+```powershell
+.\start-hotmail-helper.bat
+```
+
+macOS：
+
+```bash
+chmod +x ./start-hotmail-helper.command
+./start-hotmail-helper.command
+```
+
+如果不使用启动脚本，也可以直接运行：
+
+```bash
+python scripts/hotmail_helper.py
+```
+
+或：
+
+```bash
+python3 scripts/hotmail_helper.py
+```
+
+### 12.2 启动成功标志
+
+启动成功后，终端应输出：
+
+```text
+Hotmail helper listening on http://127.0.0.1:17373
+```
+
+### 12.3 最小排错说明
+
+- 若提示 `Python 3 not found`，说明当前机器没有可用的 Python 3.10+。
+- 若 helper 已启动但扩展仍连不上，先确认 Hotmail 模式切到了 `本地助手`。
+- 再确认侧边栏中的本地助手地址与终端输出一致，默认应为 `http://127.0.0.1:17373`。
+- 若地址一致仍失败，再检查终端中是否已经打印异常，或是否有端口占用。

From 91142271aa8451b4930479b120ab740918a16cbe Mon Sep 17 00:00:00 2001
From: QLHazyCoder <2825305047@qq.com>
Date: Tue, 14 Apr 2026 00:28:39 +0800
Subject: [PATCH 5/5] =?UTF-8?q?=E6=9B=B4=E6=96=B0=20Hotmail=20=E6=9C=8D?=
 =?UTF-8?q?=E5=8A=A1=E6=A8=A1=E5=BC=8F=E4=B8=BA=E6=9C=AC=E5=9C=B0=E5=8A=A9?=
 =?UTF-8?q?=E6=89=8B=EF=BC=8C=E7=A6=81=E7=94=A8=E8=BF=9C=E7=A8=8B=E6=9C=8D?=
 =?UTF-8?q?=E5=8A=A1=E9=80=89=E9=A1=B9=EF=BC=8C=E5=B9=B6=E6=B7=BB=E5=8A=A0?=
 =?UTF-8?q?=E4=BD=BF=E7=94=A8=E6=95=99=E7=A8=8B=E6=8C=89=E9=92=AE=E5=8F=8A?=
 =?UTF-8?q?=E7=9B=B8=E5=85=B3=E9=80=BB=E8=BE=91?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 background.js            |  6 ++----
 sidepanel/sidepanel.css  | 24 +++++++++++++++++++-----
 sidepanel/sidepanel.html |  6 +++---
 sidepanel/sidepanel.js   | 22 ++++++++++++++++++----
 4 files changed, 42 insertions(+), 16 deletions(-)

diff --git a/background.js b/background.js
index cb4a879..a1e5d6c 100644
--- a/background.js
+++ b/background.js
@@ -67,7 +67,7 @@ const PERSISTED_SETTING_DEFAULTS = {
   emailGenerator: 'duck', // 注册邮箱生成方式：duck / cloudflare。
   inbucketHost: '', // 仅当 mailProvider 为 inbucket 时填写 Inbucket 地址，其他情况保持为空。
   inbucketMailbox: '', // 仅当 mailProvider 为 inbucket 时填写邮箱名，其他情况保持为空。
-  hotmailServiceMode: HOTMAIL_SERVICE_MODE_REMOTE, // Hotmail 服务模式：远程服务 / 本地助手。
+  hotmailServiceMode: HOTMAIL_SERVICE_MODE_LOCAL, // Hotmail 服务模式：远程服务 / 本地助手。
   hotmailRemoteBaseUrl: DEFAULT_HOTMAIL_REMOTE_BASE_URL, // Hotmail 远程服务地址。
   hotmailLocalBaseUrl: DEFAULT_HOTMAIL_LOCAL_BASE_URL, // Hotmail 本地 helper 地址。
   cloudflareDomain: '', // 仅当 emailGenerator=cloudflare 时填写自定义域名。
@@ -198,9 +198,7 @@ function normalizeCloudflareDomains(values) {
 }
 
 function normalizeHotmailServiceMode(rawValue = '') {
-  return String(rawValue || '').trim().toLowerCase() === HOTMAIL_SERVICE_MODE_LOCAL
-    ? HOTMAIL_SERVICE_MODE_LOCAL
-    : HOTMAIL_SERVICE_MODE_REMOTE;
+  return HOTMAIL_SERVICE_MODE_LOCAL;
 }
 
 function normalizeHotmailRemoteBaseUrl(rawValue = '') {
diff --git a/sidepanel/sidepanel.css b/sidepanel/sidepanel.css
index b627d9d..b072801 100644
--- a/sidepanel/sidepanel.css
+++ b/sidepanel/sidepanel.css
@@ -327,6 +327,11 @@ header {
   gap: 2px;
 }
 
+.section-mini-copy .section-label {
+  font-size: 14px;
+  letter-spacing: 0.04em;
+}
+
 .section-mini-actions {
   display: flex;
   align-items: center;
@@ -335,11 +340,6 @@ header {
   justify-content: flex-end;
 }
 
-.section-hint {
-  color: var(--text-muted);
-  font-size: 12px;
-}
-
 .data-row {
   display: flex;
   align-items: center;
@@ -496,6 +496,20 @@ header {
   box-shadow: 0 0 0 1px var(--blue-glow);
 }
 
+.choice-btn:disabled {
+  border-color: var(--border);
+  background: var(--bg-elevated);
+  color: var(--text-muted);
+  cursor: not-allowed;
+  box-shadow: none;
+}
+
+.choice-btn:disabled:hover {
+  border-color: var(--border);
+  background: var(--bg-elevated);
+  color: var(--text-muted);
+}
+
 #btn-fetch-email,
 #btn-save-settings {
   padding-inline: 10px;
diff --git a/sidepanel/sidepanel.html b/sidepanel/sidepanel.html
index 6f545b2..2698bce 100644
--- a/sidepanel/sidepanel.html
+++ b/sidepanel/sidepanel.html
@@ -130,7 +130,7 @@
       <div class="data-row">
         <span class="data-label">邮箱服务</span>
         <select id="select-mail-provider" class="data-select">
-          <option value="hotmail-api">Hotmail（远程/本地）</option>
+          <option value="hotmail-api">Hotmail（本地助手）</option>
           <option value="163">163 邮箱 (mail.163.com)</option>
           <option value="163-vip">163 VIP 邮箱 (webmail.vip.163.com)</option>
           <option value="qq">QQ 邮箱 (wx.mail.qq.com)</option>
@@ -205,9 +205,9 @@
       <div class="section-mini-header">
         <div class="section-mini-copy">
           <span class="section-label">Hotmail 账号池</span>
-          <span class="section-hint">支持远程服务与本地助手两种接码模式</span>
         </div>
         <div class="section-mini-actions">
+          <button id="btn-hotmail-usage-guide" class="btn btn-ghost btn-xs" type="button">使用教程</button>
           <button id="btn-clear-used-hotmail-accounts" class="btn btn-ghost btn-xs" type="button">清空已用</button>
           <button id="btn-delete-all-hotmail-accounts" class="btn btn-ghost btn-xs" type="button">全部删除</button>
           <button id="btn-toggle-hotmail-list" class="btn btn-ghost btn-xs" type="button" aria-expanded="false">展开列表</button>
@@ -216,7 +216,7 @@
       <div class="data-row" id="row-hotmail-service-mode">
         <span class="data-label">接码模式</span>
         <div id="hotmail-service-mode-group" class="choice-group" role="group" aria-label="Hotmail 接码模式">
-          <button type="button" class="choice-btn" data-hotmail-service-mode="remote">远程服务</button>
+          <button type="button" class="choice-btn" data-hotmail-service-mode="remote" disabled title="远程服务暂时禁用">远程服务</button>
           <button type="button" class="choice-btn" data-hotmail-service-mode="local">本地助手</button>
         </div>
       </div>
diff --git a/sidepanel/sidepanel.js b/sidepanel/sidepanel.js
index 3fcd8f0..5df8dab 100644
--- a/sidepanel/sidepanel.js
+++ b/sidepanel/sidepanel.js
@@ -73,6 +73,7 @@ const inputHotmailRefreshToken = document.getElementById('input-hotmail-refresh-
 const inputHotmailImport = document.getElementById('input-hotmail-import');
 const btnAddHotmailAccount = document.getElementById('btn-add-hotmail-account');
 const btnImportHotmailAccounts = document.getElementById('btn-import-hotmail-accounts');
+const btnHotmailUsageGuide = document.getElementById('btn-hotmail-usage-guide');
 const btnClearUsedHotmailAccounts = document.getElementById('btn-clear-used-hotmail-accounts');
 const btnDeleteAllHotmailAccounts = document.getElementById('btn-delete-all-hotmail-accounts');
 const btnToggleHotmailList = document.getElementById('btn-toggle-hotmail-list');
@@ -623,9 +624,7 @@ function normalizeLocalCpaStep9Mode(value = '') {
 }
 
 function normalizeHotmailServiceMode(value = '') {
-  return String(value || '').trim().toLowerCase() === HOTMAIL_SERVICE_MODE_LOCAL
-    ? HOTMAIL_SERVICE_MODE_LOCAL
-    : HOTMAIL_SERVICE_MODE_REMOTE;
+  return HOTMAIL_SERVICE_MODE_LOCAL;
 }
 
 function getSelectedLocalCpaStep9Mode() {
@@ -650,7 +649,10 @@ function getSelectedHotmailServiceMode() {
 function setHotmailServiceMode(mode) {
   const resolvedMode = normalizeHotmailServiceMode(mode);
   hotmailServiceModeButtons.forEach((button) => {
+    const isRemoteMode = button.dataset.hotmailServiceMode === HOTMAIL_SERVICE_MODE_REMOTE;
     const active = button.dataset.hotmailServiceMode === resolvedMode;
+    button.disabled = isRemoteMode;
+    button.setAttribute('aria-disabled', String(isRemoteMode));
     button.classList.toggle('is-active', active);
     button.setAttribute('aria-pressed', String(active));
   });
@@ -1221,7 +1223,7 @@ function updateMailProviderUI() {
   }
   if (autoHintText) {
     autoHintText.textContent = useHotmail
-      ? `请先校验并选择一个 Hotmail 账号（当前：${hotmailServiceMode === HOTMAIL_SERVICE_MODE_LOCAL ? '本地助手' : '远程服务'}）`
+      ? '请先校验并选择一个 Hotmail 账号'
       : '先自动获取邮箱，或手动粘贴邮箱后再继续';
   }
   if (useHotmail) {
@@ -1790,6 +1792,15 @@ btnToggleHotmailList?.addEventListener('click', () => {
   setHotmailListExpanded(!hotmailListExpanded);
 });
 
+btnHotmailUsageGuide?.addEventListener('click', async () => {
+  await openConfirmModal({
+    title: '使用教程',
+    message: '由于第三方服务接口结构不同，所以暂时无法使用，如果您的token可以直连微软，请测试本地功能，详细功能请看项目根目录的readme文件',
+    confirmLabel: '确定',
+    confirmVariant: 'btn-primary',
+  });
+});
+
 btnClearUsedHotmailAccounts?.addEventListener('click', async () => {
   if (hotmailActionInFlight) return;
   hotmailActionInFlight = true;
@@ -2037,6 +2048,9 @@ localCpaStep9ModeButtons.forEach((button) => {
 
 hotmailServiceModeButtons.forEach((button) => {
   button.addEventListener('click', () => {
+    if (button.disabled) {
+      return;
+    }
     const nextMode = button.dataset.hotmailServiceMode;
     if (getSelectedHotmailServiceMode() === normalizeHotmailServiceMode(nextMode)) {
       return;