@breadstone/archipel-platform-mailing 0.0.11 → 0.0.14

package/README.md

@@ -70,6 +70,8 @@ Set `MAIL_DELIVERY_STRATEGY` to one of: `smtp`, `postmark`, `resend`, `sendgrid`
 - **Template engines**: File-based or blob-based template fetching with variable substitution
 - **Health checks**: Built-in `MailHealthIndicator` for readiness probes
 - **Email verification**: `MailVerificationService` for address verification flows
+- **Attachment support**: Send file attachments with MIME-type validation and size limits (25 MB max)
+- **Header injection prevention**: Subject lines are automatically sanitized against SMTP header injection
 
 ## Available Providers
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@breadstone/archipel-platform-mailing",
-  "version": "0.0.11",
+  "version": "0.0.14",
   "description": "Email delivery with strategy-based transport and template engines for NestJS applications.",
   "type": "commonjs",
   "main": "./src/index.js",
@@ -75,8 +75,9 @@
     "README.md"
   ],
   "dependencies": {
-    "@breadstone/archipel-platform-blob-storage": "0.0.11",
-    "@breadstone/archipel-platform-core": "0.0.11",
+    "@breadstone/archipel-platform-blob-storage": "0.0.14",
+    "@breadstone/archipel-platform-configuration": "0.0.14",
+    "@breadstone/archipel-platform-core": "0.0.14",
     "form-data": "4.0.5",
     "nodemailer": "8.0.5",
     "tslib": "2.8.1"

package/src/MailModule.js

@@ -4,6 +4,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.MailModule = void 0;
 const tslib_1 = require("tslib");
 const archipel_platform_blob_storage_1 = require("@breadstone/archipel-platform-blob-storage");
+const archipel_platform_configuration_1 = require("@breadstone/archipel-platform-configuration");
 const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
 const common_1 = require("@nestjs/common");
 const env_1 = require("./env");
@@ -28,7 +29,7 @@ exports.MailModule = MailModule = tslib_1.__decorate([
     (0, common_1.Global)(),
     (0, common_1.Module)({
         imports: [
-            archipel_platform_core_1.ConfigModule.register('platform-mailing', env_1.PLATFORM_MAILING_CONFIG_ENTRIES),
+            archipel_platform_configuration_1.ConfigModule.register('platform-mailing', env_1.PLATFORM_MAILING_CONFIG_ENTRIES),
             archipel_platform_blob_storage_1.BlobModule,
             archipel_platform_core_1.EventModule,
             archipel_platform_core_1.HealthModule,
@@ -46,7 +47,7 @@ exports.MailModule = MailModule = tslib_1.__decorate([
                     }
                     throw new Error(`Unknown template strategy: ${templateStrategy}`);
                 },
-                inject: [archipel_platform_core_1.ConfigService, archipel_platform_blob_storage_1.BlobService, archipel_platform_core_1.ResourceManager],
+                inject: [archipel_platform_configuration_1.ConfigService, archipel_platform_blob_storage_1.BlobService, archipel_platform_core_1.ResourceManager],
             },
             {
                 provide: MailTokens_1.MAIL_DELIVERY_STRATEGY_TOKEN,
@@ -54,7 +55,7 @@ exports.MailModule = MailModule = tslib_1.__decorate([
                     const deliveryStrategy = configService.get(env_1.MAIL_DELIVERY_STRATEGY.key);
                     if (deliveryStrategy === 'log') {
                         const { LogDeliveryStrategy } = await Promise.resolve().then(() => tslib_1.__importStar(require('./services/strategies/LogDeliveryStrategy')));
-                        return new LogDeliveryStrategy(configService);
+                        return new LogDeliveryStrategy();
                     }
                     if (deliveryStrategy === 'smtp') {
                         const { SmtpDeliveryStrategy } = await Promise.resolve().then(() => tslib_1.__importStar(require('./services/strategies/SmtpDeliveryStrategy')));
@@ -78,7 +79,7 @@ exports.MailModule = MailModule = tslib_1.__decorate([
                     }
                     throw new Error(`Unknown delivery strategy: ${deliveryStrategy}`);
                 },
-                inject: [archipel_platform_core_1.ConfigService],
+                inject: [archipel_platform_configuration_1.ConfigService],
             },
             archipel_platform_core_1.ContentTemplateEngine,
             MailService_1.MailService,

package/src/env.d.ts

@@ -1,37 +1,37 @@
-import { IConfigRegistryEntry } from '@breadstone/archipel-platform-core';
+import { IConfigRegistryEntry } from '@breadstone/archipel-platform-configuration';
 /** Which template-fetch strategy to use (e.g. `file`, `blob`). */
-export declare const MAIL_TEMPLATE_STRATEGY: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAIL_TEMPLATE_STRATEGY: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** Which delivery strategy to use (e.g. `smtp`, `postmark`, `resend`, `sendgrid`, `mailgun`, `log`). */
-export declare const MAIL_DELIVERY_STRATEGY: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAIL_DELIVERY_STRATEGY: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** Sender e-mail address shown in the `From` header. */
-export declare const MAIL_SENDER_EMAIL: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAIL_SENDER_EMAIL: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** Template engine format identifier (e.g. `handlebars`). */
-export declare const MAIL_TEMPLATE_ENGINE_FORMAT: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAIL_TEMPLATE_ENGINE_FORMAT: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** API key for the Postmark delivery service. */
-export declare const MAIL_POSTMARK_API_KEY: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAIL_POSTMARK_API_KEY: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** API key for the Resend delivery service. */
-export declare const MAIL_RESEND_API_KEY: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAIL_RESEND_API_KEY: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** API key for the SendGrid delivery service. */
-export declare const MAIL_SENDGRID_API_KEY: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAIL_SENDGRID_API_KEY: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** API key for the Mailgun delivery service. */
-export declare const MAIL_MAILGUN_API_KEY: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAIL_MAILGUN_API_KEY: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** Mailgun domain (e.g. `mg.example.com`). */
-export declare const MAIL_MAILGUN_DOMAIN: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAIL_MAILGUN_DOMAIN: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** SMTP server host. */
-export declare const MAIL_SMTP_HOST: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAIL_SMTP_HOST: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** SMTP server port. */
-export declare const MAIL_SMTP_PORT: import("@breadstone/archipel-platform-core").IConfigKey<number>;
+export declare const MAIL_SMTP_PORT: import("@breadstone/archipel-platform-configuration").IConfigKey<number>;
 /** Whether the SMTP connection uses TLS. */
-export declare const MAIL_SMTP_SECURE: import("@breadstone/archipel-platform-core").IConfigKey<boolean>;
+export declare const MAIL_SMTP_SECURE: import("@breadstone/archipel-platform-configuration").IConfigKey<boolean>;
 /** SMTP authentication username. */
-export declare const MAIL_SMTP_USER: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAIL_SMTP_USER: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** SMTP authentication password. */
-export declare const MAIL_SMTP_PASSWORD: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAIL_SMTP_PASSWORD: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** Mail host checked by the health indicator. */
-export declare const MAIL_HOST: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAIL_HOST: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** Mail user checked by the health indicator. */
-export declare const MAIL_USER: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAIL_USER: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** Mail port checked by the health indicator. */
-export declare const MAIL_PORT: import("@breadstone/archipel-platform-core").IConfigKey<number>;
+export declare const MAIL_PORT: import("@breadstone/archipel-platform-configuration").IConfigKey<number>;
 /** All configuration entries required by `platform-mailing`. */
 export declare const PLATFORM_MAILING_CONFIG_ENTRIES: ReadonlyArray<Omit<IConfigRegistryEntry, 'module'>>;

package/src/env.js

@@ -2,63 +2,63 @@
 // #region Imports
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PLATFORM_MAILING_CONFIG_ENTRIES = exports.MAIL_PORT = exports.MAIL_USER = exports.MAIL_HOST = exports.MAIL_SMTP_PASSWORD = exports.MAIL_SMTP_USER = exports.MAIL_SMTP_SECURE = exports.MAIL_SMTP_PORT = exports.MAIL_SMTP_HOST = exports.MAIL_MAILGUN_DOMAIN = exports.MAIL_MAILGUN_API_KEY = exports.MAIL_SENDGRID_API_KEY = exports.MAIL_RESEND_API_KEY = exports.MAIL_POSTMARK_API_KEY = exports.MAIL_TEMPLATE_ENGINE_FORMAT = exports.MAIL_SENDER_EMAIL = exports.MAIL_DELIVERY_STRATEGY = exports.MAIL_TEMPLATE_STRATEGY = void 0;
-const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const archipel_platform_configuration_1 = require("@breadstone/archipel-platform-configuration");
 // #endregion
 // ──────────────────────────────────────────────────────────────
 // Delivery & Template Strategy
 // ──────────────────────────────────────────────────────────────
 /** Which template-fetch strategy to use (e.g. `file`, `blob`). */
-exports.MAIL_TEMPLATE_STRATEGY = (0, archipel_platform_core_1.createConfigKey)('MAIL_TEMPLATE_STRATEGY');
+exports.MAIL_TEMPLATE_STRATEGY = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_TEMPLATE_STRATEGY');
 /** Which delivery strategy to use (e.g. `smtp`, `postmark`, `resend`, `sendgrid`, `mailgun`, `log`). */
-exports.MAIL_DELIVERY_STRATEGY = (0, archipel_platform_core_1.createConfigKey)('MAIL_DELIVERY_STRATEGY');
+exports.MAIL_DELIVERY_STRATEGY = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_DELIVERY_STRATEGY');
 /** Sender e-mail address shown in the `From` header. */
-exports.MAIL_SENDER_EMAIL = (0, archipel_platform_core_1.createConfigKey)('MAIL_SENDER_EMAIL');
+exports.MAIL_SENDER_EMAIL = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_SENDER_EMAIL');
 /** Template engine format identifier (e.g. `handlebars`). */
-exports.MAIL_TEMPLATE_ENGINE_FORMAT = (0, archipel_platform_core_1.createConfigKey)('MAIL_TEMPLATE_ENGINE_FORMAT');
+exports.MAIL_TEMPLATE_ENGINE_FORMAT = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_TEMPLATE_ENGINE_FORMAT');
 // ──────────────────────────────────────────────────────────────
 // Postmark
 // ──────────────────────────────────────────────────────────────
 /** API key for the Postmark delivery service. */
-exports.MAIL_POSTMARK_API_KEY = (0, archipel_platform_core_1.createConfigKey)('MAIL_POSTMARK_API_KEY');
+exports.MAIL_POSTMARK_API_KEY = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_POSTMARK_API_KEY');
 // ──────────────────────────────────────────────────────────────
 // Resend
 // ──────────────────────────────────────────────────────────────
 /** API key for the Resend delivery service. */
-exports.MAIL_RESEND_API_KEY = (0, archipel_platform_core_1.createConfigKey)('MAIL_RESEND_API_KEY');
+exports.MAIL_RESEND_API_KEY = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_RESEND_API_KEY');
 // ──────────────────────────────────────────────────────────────
 // SendGrid
 // ──────────────────────────────────────────────────────────────
 /** API key for the SendGrid delivery service. */
-exports.MAIL_SENDGRID_API_KEY = (0, archipel_platform_core_1.createConfigKey)('MAIL_SENDGRID_API_KEY');
+exports.MAIL_SENDGRID_API_KEY = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_SENDGRID_API_KEY');
 // ──────────────────────────────────────────────────────────────
 // Mailgun
 // ──────────────────────────────────────────────────────────────
 /** API key for the Mailgun delivery service. */
-exports.MAIL_MAILGUN_API_KEY = (0, archipel_platform_core_1.createConfigKey)('MAIL_MAILGUN_API_KEY');
+exports.MAIL_MAILGUN_API_KEY = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_MAILGUN_API_KEY');
 /** Mailgun domain (e.g. `mg.example.com`). */
-exports.MAIL_MAILGUN_DOMAIN = (0, archipel_platform_core_1.createConfigKey)('MAIL_MAILGUN_DOMAIN');
+exports.MAIL_MAILGUN_DOMAIN = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_MAILGUN_DOMAIN');
 // ──────────────────────────────────────────────────────────────
 // SMTP
 // ──────────────────────────────────────────────────────────────
 /** SMTP server host. */
-exports.MAIL_SMTP_HOST = (0, archipel_platform_core_1.createConfigKey)('MAIL_SMTP_HOST');
+exports.MAIL_SMTP_HOST = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_SMTP_HOST');
 /** SMTP server port. */
-exports.MAIL_SMTP_PORT = (0, archipel_platform_core_1.createConfigKey)('MAIL_SMTP_PORT');
+exports.MAIL_SMTP_PORT = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_SMTP_PORT');
 /** Whether the SMTP connection uses TLS. */
-exports.MAIL_SMTP_SECURE = (0, archipel_platform_core_1.createConfigKey)('MAIL_SMTP_SECURE');
+exports.MAIL_SMTP_SECURE = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_SMTP_SECURE');
 /** SMTP authentication username. */
-exports.MAIL_SMTP_USER = (0, archipel_platform_core_1.createConfigKey)('MAIL_SMTP_USER');
+exports.MAIL_SMTP_USER = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_SMTP_USER');
 /** SMTP authentication password. */
-exports.MAIL_SMTP_PASSWORD = (0, archipel_platform_core_1.createConfigKey)('MAIL_SMTP_PASSWORD');
+exports.MAIL_SMTP_PASSWORD = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_SMTP_PASSWORD');
 // ──────────────────────────────────────────────────────────────
 // Health Indicator
 // ──────────────────────────────────────────────────────────────
 /** Mail host checked by the health indicator. */
-exports.MAIL_HOST = (0, archipel_platform_core_1.createConfigKey)('MAIL_HOST');
+exports.MAIL_HOST = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_HOST');
 /** Mail user checked by the health indicator. */
-exports.MAIL_USER = (0, archipel_platform_core_1.createConfigKey)('MAIL_USER');
+exports.MAIL_USER = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_USER');
 /** Mail port checked by the health indicator. */
-exports.MAIL_PORT = (0, archipel_platform_core_1.createConfigKey)('MAIL_PORT');
+exports.MAIL_PORT = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_PORT');
 // ──────────────────────────────────────────────────────────────
 // Registry entries
 // ──────────────────────────────────────────────────────────────
@@ -105,7 +105,7 @@ exports.PLATFORM_MAILING_CONFIG_ENTRIES = [
     // SMTP
     { key: exports.MAIL_SMTP_HOST, required: false, defaultValue: 'localhost', description: 'SMTP server host.' },
     { key: exports.MAIL_SMTP_PORT, required: false, defaultValue: 587, description: 'SMTP server port.' },
-    { key: exports.MAIL_SMTP_SECURE, required: false, defaultValue: false, description: 'Whether SMTP uses TLS.' },
+    { key: exports.MAIL_SMTP_SECURE, required: false, defaultValue: true, description: 'Whether SMTP uses TLS.' },
     { key: exports.MAIL_SMTP_USER, required: false, defaultValue: '', description: 'SMTP authentication username.' },
     { key: exports.MAIL_SMTP_PASSWORD, required: false, defaultValue: '', description: 'SMTP authentication password.' },
     // Health

package/src/index.d.ts

@@ -2,6 +2,7 @@ export * from './env';
 export * from './events';
 export * from './MailModule';
 export * from './MailTokens';
+export * from './models/IMailAttachment';
 export * from './services/MailService';
 export * from './services/MailVerificationService';
 export * from './services/strategies/abstracts/DeliveryStrategyBase';

package/src/index.js

@@ -5,6 +5,7 @@ tslib_1.__exportStar(require("./env"), exports);
 tslib_1.__exportStar(require("./events"), exports);
 tslib_1.__exportStar(require("./MailModule"), exports);
 tslib_1.__exportStar(require("./MailTokens"), exports);
+tslib_1.__exportStar(require("./models/IMailAttachment"), exports);
 tslib_1.__exportStar(require("./services/MailService"), exports);
 tslib_1.__exportStar(require("./services/MailVerificationService"), exports);
 tslib_1.__exportStar(require("./services/strategies/abstracts/DeliveryStrategyBase"), exports);

package/src/mailgun/env.d.ts

@@ -1,7 +1,7 @@
-import { IConfigRegistryEntry } from '@breadstone/archipel-platform-core';
+import { IConfigRegistryEntry } from '@breadstone/archipel-platform-configuration';
 /** API key for the Mailgun delivery service. */
-export declare const MAILGUN_API_KEY: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAILGUN_API_KEY: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** Mailgun domain (e.g. `mg.example.com`). */
-export declare const MAILGUN_DOMAIN: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const MAILGUN_DOMAIN: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** Configuration entries required by the Mailgun delivery provider. */
 export declare const MAILGUN_CONFIG_ENTRIES: ReadonlyArray<Omit<IConfigRegistryEntry, 'module'>>;

package/src/mailgun/env.js

@@ -2,15 +2,15 @@
 // #region Imports
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MAILGUN_CONFIG_ENTRIES = exports.MAILGUN_DOMAIN = exports.MAILGUN_API_KEY = void 0;
-const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const archipel_platform_configuration_1 = require("@breadstone/archipel-platform-configuration");
 // #endregion
 // ──────────────────────────────────────────────────────────────
 // Mailgun
 // ──────────────────────────────────────────────────────────────
 /** API key for the Mailgun delivery service. */
-exports.MAILGUN_API_KEY = (0, archipel_platform_core_1.createConfigKey)('MAIL_MAILGUN_API_KEY');
+exports.MAILGUN_API_KEY = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_MAILGUN_API_KEY');
 /** Mailgun domain (e.g. `mg.example.com`). */
-exports.MAILGUN_DOMAIN = (0, archipel_platform_core_1.createConfigKey)('MAIL_MAILGUN_DOMAIN');
+exports.MAILGUN_DOMAIN = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_MAILGUN_DOMAIN');
 // ──────────────────────────────────────────────────────────────
 // Registry entries
 // ──────────────────────────────────────────────────────────────

package/src/models/IMailAttachment.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Allowed MIME types for email attachments.
+ *
+ * @public
+ */
+export declare const ALLOWED_ATTACHMENT_MIME_TYPES: readonly ["application/pdf", "application/msword", "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "application/vnd.ms-excel", "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", "application/zip", "image/png", "image/jpeg", "image/gif", "image/webp", "text/plain", "text/csv"];
+/**
+ * Maximum attachment size in bytes (25 MB).
+ *
+ * @public
+ */
+export declare const MAX_ATTACHMENT_SIZE_BYTES: number;
+/**
+ * Represents an email attachment.
+ *
+ * @public
+ */
+export interface IMailAttachment {
+    /**
+     * The filename of the attachment as displayed to the recipient.
+     */
+    readonly filename: string;
+    /**
+     * The raw content of the attachment.
+     */
+    readonly content: Buffer | string;
+    /**
+     * The MIME type of the attachment.
+     */
+    readonly contentType: string;
+}

package/src/models/IMailAttachment.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_ATTACHMENT_SIZE_BYTES = exports.ALLOWED_ATTACHMENT_MIME_TYPES = void 0;
+/**
+ * Allowed MIME types for email attachments.
+ *
+ * @public
+ */
+exports.ALLOWED_ATTACHMENT_MIME_TYPES = [
+    'application/pdf',
+    'application/msword',
+    'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+    'application/vnd.ms-excel',
+    'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+    'application/zip',
+    'image/png',
+    'image/jpeg',
+    'image/gif',
+    'image/webp',
+    'text/plain',
+    'text/csv',
+];
+/**
+ * Maximum attachment size in bytes (25 MB).
+ *
+ * @public
+ */
+exports.MAX_ATTACHMENT_SIZE_BYTES = 25 * 1024 * 1024;
+//# sourceMappingURL=IMailAttachment.js.map

package/src/postmark/env.d.ts

@@ -1,5 +1,5 @@
-import { IConfigRegistryEntry } from '@breadstone/archipel-platform-core';
+import { IConfigRegistryEntry } from '@breadstone/archipel-platform-configuration';
 /** API key for the Postmark delivery service. */
-export declare const POSTMARK_API_KEY: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const POSTMARK_API_KEY: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** Configuration entries required by the Postmark delivery provider. */
 export declare const POSTMARK_CONFIG_ENTRIES: ReadonlyArray<Omit<IConfigRegistryEntry, 'module'>>;

package/src/postmark/env.js

@@ -2,13 +2,13 @@
 // #region Imports
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.POSTMARK_CONFIG_ENTRIES = exports.POSTMARK_API_KEY = void 0;
-const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const archipel_platform_configuration_1 = require("@breadstone/archipel-platform-configuration");
 // #endregion
 // ──────────────────────────────────────────────────────────────
 // Postmark
 // ──────────────────────────────────────────────────────────────
 /** API key for the Postmark delivery service. */
-exports.POSTMARK_API_KEY = (0, archipel_platform_core_1.createConfigKey)('MAIL_POSTMARK_API_KEY');
+exports.POSTMARK_API_KEY = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_POSTMARK_API_KEY');
 // ──────────────────────────────────────────────────────────────
 // Registry entries
 // ──────────────────────────────────────────────────────────────

package/src/resend/env.d.ts

@@ -1,5 +1,5 @@
-import { IConfigRegistryEntry } from '@breadstone/archipel-platform-core';
+import { IConfigRegistryEntry } from '@breadstone/archipel-platform-configuration';
 /** API key for the Resend delivery service. */
-export declare const RESEND_API_KEY: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const RESEND_API_KEY: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** Configuration entries required by the Resend delivery provider. */
 export declare const RESEND_CONFIG_ENTRIES: ReadonlyArray<Omit<IConfigRegistryEntry, 'module'>>;

package/src/resend/env.js

@@ -2,13 +2,13 @@
 // #region Imports
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RESEND_CONFIG_ENTRIES = exports.RESEND_API_KEY = void 0;
-const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const archipel_platform_configuration_1 = require("@breadstone/archipel-platform-configuration");
 // #endregion
 // ──────────────────────────────────────────────────────────────
 // Resend
 // ──────────────────────────────────────────────────────────────
 /** API key for the Resend delivery service. */
-exports.RESEND_API_KEY = (0, archipel_platform_core_1.createConfigKey)('MAIL_RESEND_API_KEY');
+exports.RESEND_API_KEY = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_RESEND_API_KEY');
 // ──────────────────────────────────────────────────────────────
 // Registry entries
 // ──────────────────────────────────────────────────────────────

package/src/sendgrid/env.d.ts

@@ -1,5 +1,5 @@
-import { IConfigRegistryEntry } from '@breadstone/archipel-platform-core';
+import { IConfigRegistryEntry } from '@breadstone/archipel-platform-configuration';
 /** API key for the SendGrid delivery service. */
-export declare const SENDGRID_API_KEY: import("@breadstone/archipel-platform-core").IConfigKey<string>;
+export declare const SENDGRID_API_KEY: import("@breadstone/archipel-platform-configuration").IConfigKey<string>;
 /** Configuration entries required by the SendGrid delivery provider. */
 export declare const SENDGRID_CONFIG_ENTRIES: ReadonlyArray<Omit<IConfigRegistryEntry, 'module'>>;

package/src/sendgrid/env.js

@@ -2,13 +2,13 @@
 // #region Imports
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SENDGRID_CONFIG_ENTRIES = exports.SENDGRID_API_KEY = void 0;
-const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const archipel_platform_configuration_1 = require("@breadstone/archipel-platform-configuration");
 // #endregion
 // ──────────────────────────────────────────────────────────────
 // SendGrid
 // ──────────────────────────────────────────────────────────────
 /** API key for the SendGrid delivery service. */
-exports.SENDGRID_API_KEY = (0, archipel_platform_core_1.createConfigKey)('MAIL_SENDGRID_API_KEY');
+exports.SENDGRID_API_KEY = (0, archipel_platform_configuration_1.createConfigKey)('MAIL_SENDGRID_API_KEY');
 // ──────────────────────────────────────────────────────────────
 // Registry entries
 // ──────────────────────────────────────────────────────────────

package/src/services/MailService.d.ts

@@ -1,4 +1,5 @@
-import { ConfigService } from '@breadstone/archipel-platform-core';
+import { ConfigService } from '@breadstone/archipel-platform-configuration';
+import { type IMailAttachment } from '../models/IMailAttachment';
 import { MailTemplateEngine } from '../templating/MailTemplateEngine';
 import { DeliveryStrategyBase } from './strategies/abstracts/DeliveryStrategyBase';
 /**
@@ -31,7 +32,7 @@ export declare class MailService {
         from?: string;
         to: string;
         subject: string;
-    }, content: string, isHtml: boolean): Promise<void>;
+    }, content: string, isHtml: boolean, attachments?: Array<IMailAttachment>): Promise<void>;
     /**
      * Sends an email using a predefined template (HTML or text).
      * Automatically uses the template format (either 'html' or 'txt') based on the environment variable.
@@ -57,4 +58,11 @@ export declare class MailService {
      * @throws Error if the format is invalid.
      */
     private ensureValidEmail;
+    /**
+     * Validates email attachments against MIME-type allowlist and size limits.
+     *
+     * @param attachments - Array of attachments to validate
+     * @throws Error if any attachment violates constraints
+     */
+    private validateAttachments;
 }

package/src/services/MailService.js

@@ -3,9 +3,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MailService = void 0;
 const tslib_1 = require("tslib");
-const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const archipel_platform_configuration_1 = require("@breadstone/archipel-platform-configuration");
 const common_1 = require("@nestjs/common");
 const env_1 = require("../env");
+const IMailAttachment_1 = require("../models/IMailAttachment");
 const MailTokens_1 = require("../MailTokens");
 const MailTemplateEngine_1 = require("../templating/MailTemplateEngine");
 const DeliveryStrategyBase_1 = require("./strategies/abstracts/DeliveryStrategyBase");
@@ -45,13 +46,17 @@ let MailService = class MailService {
      * @param content - Email body content (plain text or HTML)
      * @param isHtml - Flag to indicate whether the email is HTML (true) or plain text (false)
      */
-    async send(mailOptions, content, isHtml) {
+    async send(mailOptions, content, isHtml, attachments) {
         this.ensureValidEmail(mailOptions.to);
         if (mailOptions.from) {
             this.ensureValidEmail(mailOptions.from);
         }
+        if (attachments) {
+            this.validateAttachments(attachments);
+        }
         const sender = mailOptions.from ?? this._defaultFrom;
-        await this._deliveryStrategy.send(sender, mailOptions.to, mailOptions.subject, content, isHtml);
+        const sanitizedSubject = mailOptions.subject.replace(/[\r\n]/g, ' ');
+        await this._deliveryStrategy.send(sender, mailOptions.to, sanitizedSubject, content, isHtml, attachments);
     }
     /**
      * Sends an email using a predefined template (HTML or text).
@@ -75,18 +80,37 @@ let MailService = class MailService {
      * @throws Error if the format is invalid.
      */
     ensureValidEmail(email) {
-        // Basic RFC 5322 compliant (simplified) regex – deliberately strict but not over-engineered.
-        const emailRegex = /^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}$/i;
-        if (!emailRegex.test(email)) {
+        // Rejects leading/trailing dots, consecutive dots, and requires valid domain structure.
+        const emailRegex = /^[A-Z0-9](?:[A-Z0-9._%+-]*[A-Z0-9])?@[A-Z0-9](?:[A-Z0-9-]*[A-Z0-9])?(?:\.[A-Z0-9](?:[A-Z0-9-]*[A-Z0-9])?)*\.[A-Z]{2,}$/i;
+        if (!emailRegex.test(email) || email.includes('..')) {
             throw new Error(`Invalid email address: '${email}'`);
         }
     }
+    /**
+     * Validates email attachments against MIME-type allowlist and size limits.
+     *
+     * @param attachments - Array of attachments to validate
+     * @throws Error if any attachment violates constraints
+     */
+    validateAttachments(attachments) {
+        for (const attachment of attachments) {
+            if (!IMailAttachment_1.ALLOWED_ATTACHMENT_MIME_TYPES.includes(attachment.contentType)) {
+                throw new Error(`Unsupported attachment MIME type: '${attachment.contentType}'`);
+            }
+            const size = typeof attachment.content === 'string'
+                ? Buffer.byteLength(attachment.content, 'utf-8')
+                : attachment.content.length;
+            if (size > IMailAttachment_1.MAX_ATTACHMENT_SIZE_BYTES) {
+                throw new Error(`Attachment '${attachment.filename}' exceeds maximum size of ${IMailAttachment_1.MAX_ATTACHMENT_SIZE_BYTES} bytes`);
+            }
+        }
+    }
 };
 exports.MailService = MailService;
 exports.MailService = MailService = tslib_1.__decorate([
     (0, common_1.Injectable)(),
     tslib_1.__param(2, (0, common_1.Inject)(MailTokens_1.MAIL_DELIVERY_STRATEGY_TOKEN)),
-    tslib_1.__metadata("design:paramtypes", [archipel_platform_core_1.ConfigService,
+    tslib_1.__metadata("design:paramtypes", [archipel_platform_configuration_1.ConfigService,
         MailTemplateEngine_1.MailTemplateEngine,
         DeliveryStrategyBase_1.DeliveryStrategyBase])
 ], MailService);

package/src/services/MailVerificationService.d.ts

@@ -1,10 +1,15 @@
-import { ConfigService } from '@breadstone/archipel-platform-core';
+import { ConfigService } from '@breadstone/archipel-platform-configuration';
 /**
- * Represents the `MailVerificationService` class.
+ * Verifies SMTP server connectivity. Does **not** validate individual email
+ * addresses — only checks whether the configured SMTP transport is reachable.
  *
  * @public
+ * @deprecated Renamed to `SmtpConnectionVerifier` in a future release to better
+ * reflect its actual purpose. Prefer wrapping this in a health-check rather
+ * than calling it directly.
  */
 export declare class MailVerificationService {
+    private readonly _logger;
     private readonly _transporter;
     /**
      * Constructs a new instance of the `MailVerificationService` class.

package/src/services/MailVerificationService.js

@@ -1,19 +1,24 @@
 "use strict";
 // #region Imports
+var MailVerificationService_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MailVerificationService = void 0;
 const tslib_1 = require("tslib");
-const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const archipel_platform_configuration_1 = require("@breadstone/archipel-platform-configuration");
 const common_1 = require("@nestjs/common");
 const nodemailer = tslib_1.__importStar(require("nodemailer"));
 const env_1 = require("../env");
 // #endregion
 /**
- * Represents the `MailVerificationService` class.
+ * Verifies SMTP server connectivity. Does **not** validate individual email
+ * addresses — only checks whether the configured SMTP transport is reachable.
  *
  * @public
+ * @deprecated Renamed to `SmtpConnectionVerifier` in a future release to better
+ * reflect its actual purpose. Prefer wrapping this in a health-check rather
+ * than calling it directly.
  */
-let MailVerificationService = class MailVerificationService {
+let MailVerificationService = MailVerificationService_1 = class MailVerificationService {
     // #endregion
     // #region Ctor
     /**
@@ -22,6 +27,8 @@ let MailVerificationService = class MailVerificationService {
      * @public
      */
     constructor(configService) {
+        // #region Fields
+        this._logger = new common_1.Logger(MailVerificationService_1.name);
         this._transporter = nodemailer.createTransport({
             host: configService.tryGet(env_1.MAIL_SMTP_HOST.key, 'localhost'),
             port: 465,
@@ -42,7 +49,7 @@ let MailVerificationService = class MailVerificationService {
         return new Promise((resolve, reject) => {
             this._transporter.verify((error, success) => {
                 if (error) {
-                    common_1.Logger.error('SMTP verification error:', error);
+                    this._logger.error('SMTP verification error:', error);
                     resolve(false);
                     return; // Couldn't connect or verify
                 }
@@ -70,8 +77,8 @@ let MailVerificationService = class MailVerificationService {
     }
 };
 exports.MailVerificationService = MailVerificationService;
-exports.MailVerificationService = MailVerificationService = tslib_1.__decorate([
+exports.MailVerificationService = MailVerificationService = MailVerificationService_1 = tslib_1.__decorate([
     (0, common_1.Injectable)(),
-    tslib_1.__metadata("design:paramtypes", [archipel_platform_core_1.ConfigService])
+    tslib_1.__metadata("design:paramtypes", [archipel_platform_configuration_1.ConfigService])
 ], MailVerificationService);
 //# sourceMappingURL=MailVerificationService.js.map

package/src/services/strategies/LogDeliveryStrategy.d.ts

@@ -1,4 +1,3 @@
-import { ConfigService } from '@breadstone/archipel-platform-core';
 import { DeliveryStrategyBase } from './abstracts/DeliveryStrategyBase';
 /**
  * The `LogDeliveryStrategy` class.
@@ -7,12 +6,11 @@ import { DeliveryStrategyBase } from './abstracts/DeliveryStrategyBase';
  */
 export declare class LogDeliveryStrategy extends DeliveryStrategyBase {
     private readonly _logger;
-    private readonly _configService;
     /**
      * Constructs a new instance of the `LogDelivery` class.
      *
      * @public
      */
-    constructor(configService: ConfigService);
-    send(from: string, to: string, subject: string, content: string, isHtml: boolean): Promise<void>;
+    constructor();
+    send(from: string, to: string, subject: string, content: string, isHtml: boolean, _attachments?: Array<import('../../models/IMailAttachment').IMailAttachment>): Promise<void>;
 }

package/src/services/strategies/LogDeliveryStrategy.js

@@ -18,14 +18,14 @@ class LogDeliveryStrategy extends DeliveryStrategyBase_1.DeliveryStrategyBase {
      *
      * @public
      */
-    constructor(configService) {
+    constructor() {
         super();
         // #region Fields
         this._logger = new common_1.Logger(LogDeliveryStrategy.name);
-        this._configService = configService;
     }
     // #endregion
-    send(from, to, subject, content, isHtml) {
+    // #region Methods
+    send(from, to, subject, content, isHtml, _attachments) {
         this._logger.log(`Logged email: ${JSON.stringify({
             from: from,
             to: to,

package/src/services/strategies/MailgunDeliveryStrategy.d.ts

@@ -1,4 +1,4 @@
-import { ConfigService } from '@breadstone/archipel-platform-core';
+import { ConfigService } from '@breadstone/archipel-platform-configuration';
 import { DeliveryStrategyBase } from './abstracts/DeliveryStrategyBase';
 /**
  * Delivers emails via the Mailgun API.
@@ -25,5 +25,5 @@ export declare class MailgunDeliveryStrategy extends DeliveryStrategyBase {
      * @param content - Email body content (plain text or HTML)
      * @param isHtml - Flag to indicate whether the email is HTML (true) or plain text (false)
      */
-    send(from: string, to: string, subject: string, content: string, isHtml: boolean): Promise<void>;
+    send(from: string, to: string, subject: string, content: string, isHtml: boolean, _attachments?: Array<import('../../models/IMailAttachment').IMailAttachment>): Promise<void>;
 }

package/src/services/strategies/MailgunDeliveryStrategy.js

@@ -45,14 +45,18 @@ class MailgunDeliveryStrategy extends DeliveryStrategyBase_1.DeliveryStrategyBas
      * @param content - Email body content (plain text or HTML)
      * @param isHtml - Flag to indicate whether the email is HTML (true) or plain text (false)
      */
-    async send(from, to, subject, content, isHtml) {
+    async send(from, to, subject, content, isHtml, _attachments) {
         try {
-            await this._mailgunClient.messages.create(this._domain, {
+            const sendPromise = this._mailgunClient.messages.create(this._domain, {
                 from,
                 to,
                 subject,
                 ...(isHtml ? { html: content } : { text: content }),
             });
+            const timeoutPromise = new Promise((_resolve, reject) => {
+                setTimeout(() => reject(new Error('Mailgun send timed out after 30000ms')), 30_000);
+            });
+            await Promise.race([sendPromise, timeoutPromise]);
             this._logger.log('Email sent successfully', 'Mail');
         }
         catch (error) {

package/src/services/strategies/PostmarkDeliveryStrategy.d.ts

@@ -1,4 +1,4 @@
-import { ConfigService } from '@breadstone/archipel-platform-core';
+import { ConfigService } from '@breadstone/archipel-platform-configuration';
 import { DeliveryStrategyBase } from './abstracts/DeliveryStrategyBase';
 /**
  * The `PostmarkDeliveryStrategy` class.
@@ -24,5 +24,5 @@ export declare class PostmarkDeliveryStrategy extends DeliveryStrategyBase {
      * @param content - Email body content (plain text or HTML)
      * @param isHtml - Flag to indicate whether the email is HTML (true) or plain text (false)
      */
-    send(from: string, to: string, subject: string, content: string, isHtml: boolean): Promise<void>;
+    send(from: string, to: string, subject: string, content: string, isHtml: boolean, _attachments?: Array<import('../../models/IMailAttachment').IMailAttachment>): Promise<void>;
 }

package/src/services/strategies/PostmarkDeliveryStrategy.js

@@ -38,14 +38,18 @@ class PostmarkDeliveryStrategy extends DeliveryStrategyBase_1.DeliveryStrategyBa
      * @param content - Email body content (plain text or HTML)
      * @param isHtml - Flag to indicate whether the email is HTML (true) or plain text (false)
      */
-    async send(from, to, subject, content, isHtml) {
+    async send(from, to, subject, content, isHtml, _attachments) {
         try {
-            await this._postmarkClient.sendEmail({
+            const sendPromise = this._postmarkClient.sendEmail({
                 From: from,
                 To: to,
                 Subject: subject,
                 ...(isHtml ? { HtmlBody: content } : { TextBody: content }),
             });
+            const timeoutPromise = new Promise((_resolve, reject) => {
+                setTimeout(() => reject(new Error('Postmark send timed out after 30000ms')), 30_000);
+            });
+            await Promise.race([sendPromise, timeoutPromise]);
             this._logger.log('Email sent successfully', 'Mail');
         }
         catch (error) {

package/src/services/strategies/ResendDeliveryStrategy.d.ts

@@ -1,4 +1,4 @@
-import { ConfigService } from '@breadstone/archipel-platform-core';
+import { ConfigService } from '@breadstone/archipel-platform-configuration';
 import { DeliveryStrategyBase } from './abstracts/DeliveryStrategyBase';
 /**
  * Delivers emails via the Resend API.
@@ -24,5 +24,5 @@ export declare class ResendDeliveryStrategy extends DeliveryStrategyBase {
      * @param content - Email body content (plain text or HTML)
      * @param isHtml - Flag to indicate whether the email is HTML (true) or plain text (false)
      */
-    send(from: string, to: string, subject: string, content: string, isHtml: boolean): Promise<void>;
+    send(from: string, to: string, subject: string, content: string, isHtml: boolean, _attachments?: Array<import('../../models/IMailAttachment').IMailAttachment>): Promise<void>;
 }

package/src/services/strategies/ResendDeliveryStrategy.js

@@ -38,14 +38,18 @@ class ResendDeliveryStrategy extends DeliveryStrategyBase_1.DeliveryStrategyBase
      * @param content - Email body content (plain text or HTML)
      * @param isHtml - Flag to indicate whether the email is HTML (true) or plain text (false)
      */
-    async send(from, to, subject, content, isHtml) {
+    async send(from, to, subject, content, isHtml, _attachments) {
         try {
-            await this._resendClient.emails.send({
+            const sendPromise = this._resendClient.emails.send({
                 from,
                 to,
                 subject,
                 ...(isHtml ? { html: content } : { text: content }),
             });
+            const timeoutPromise = new Promise((_resolve, reject) => {
+                setTimeout(() => reject(new Error('Resend send timed out after 30000ms')), 30_000);
+            });
+            await Promise.race([sendPromise, timeoutPromise]);
             this._logger.log('Email sent successfully', 'Mail');
         }
         catch (error) {

package/src/services/strategies/SendGridDeliveryStrategy.d.ts

@@ -1,4 +1,4 @@
-import { ConfigService } from '@breadstone/archipel-platform-core';
+import { ConfigService } from '@breadstone/archipel-platform-configuration';
 import { DeliveryStrategyBase } from './abstracts/DeliveryStrategyBase';
 /**
  * Delivers emails via the SendGrid API.
@@ -23,5 +23,5 @@ export declare class SendGridDeliveryStrategy extends DeliveryStrategyBase {
      * @param content - Email body content (plain text or HTML)
      * @param isHtml - Flag to indicate whether the email is HTML (true) or plain text (false)
      */
-    send(from: string, to: string, subject: string, content: string, isHtml: boolean): Promise<void>;
+    send(from: string, to: string, subject: string, content: string, isHtml: boolean, _attachments?: Array<import('../../models/IMailAttachment').IMailAttachment>): Promise<void>;
 }

package/src/services/strategies/SendGridDeliveryStrategy.js

@@ -39,14 +39,18 @@ class SendGridDeliveryStrategy extends DeliveryStrategyBase_1.DeliveryStrategyBa
      * @param content - Email body content (plain text or HTML)
      * @param isHtml - Flag to indicate whether the email is HTML (true) or plain text (false)
      */
-    async send(from, to, subject, content, isHtml) {
+    async send(from, to, subject, content, isHtml, _attachments) {
         try {
-            await mail_1.default.send({
+            const sendPromise = mail_1.default.send({
                 from,
                 to,
                 subject,
                 ...(isHtml ? { html: content } : { text: content }),
             });
+            const timeoutPromise = new Promise((_resolve, reject) => {
+                setTimeout(() => reject(new Error('SendGrid send timed out after 30000ms')), 30_000);
+            });
+            await Promise.race([sendPromise, timeoutPromise]);
             this._logger.log('Email sent successfully', 'Mail');
         }
         catch (error) {

package/src/services/strategies/SmtpDeliveryStrategy.d.ts

@@ -1,4 +1,4 @@
-import { ConfigService } from '@breadstone/archipel-platform-core';
+import { ConfigService } from '@breadstone/archipel-platform-configuration';
 import { DeliveryStrategyBase } from './abstracts/DeliveryStrategyBase';
 /**
  * The `SmtpDeliveryStrategy` class.
@@ -24,5 +24,5 @@ export declare class SmtpDeliveryStrategy extends DeliveryStrategyBase {
      * @param content - Email body content (plain text or HTML)
      * @param isHtml - Flag to indicate whether the email is HTML (true) or plain text (false)
      */
-    send(from: string, to: string, subject: string, content: string, isHtml: boolean): Promise<void>;
+    send(from: string, to: string, subject: string, content: string, isHtml: boolean, _attachments?: Array<import('../../models/IMailAttachment').IMailAttachment>): Promise<void>;
 }

package/src/services/strategies/SmtpDeliveryStrategy.js

@@ -27,7 +27,7 @@ class SmtpDeliveryStrategy extends DeliveryStrategyBase_1.DeliveryStrategyBase {
         const options = {
             host: configService.tryGet(env_1.MAIL_SMTP_HOST.key, 'localhost'),
             port: configService.tryGet(env_1.MAIL_SMTP_PORT.key, 587),
-            secure: configService.tryGet(env_1.MAIL_SMTP_SECURE.key, false),
+            secure: configService.tryGet(env_1.MAIL_SMTP_SECURE.key, true),
             auth: {
                 user: configService.tryGet(env_1.MAIL_SMTP_USER.key, ''),
                 pass: configService.tryGet(env_1.MAIL_SMTP_PASSWORD.key, ''),
@@ -47,14 +47,18 @@ class SmtpDeliveryStrategy extends DeliveryStrategyBase_1.DeliveryStrategyBase {
      * @param content - Email body content (plain text or HTML)
      * @param isHtml - Flag to indicate whether the email is HTML (true) or plain text (false)
      */
-    async send(from, to, subject, content, isHtml) {
+    async send(from, to, subject, content, isHtml, _attachments) {
         try {
-            await this._transporter.sendMail({
+            const sendPromise = this._transporter.sendMail({
                 from,
                 to,
                 subject,
                 ...(isHtml ? { html: content } : { text: content }),
             });
+            const timeoutPromise = new Promise((_resolve, reject) => {
+                setTimeout(() => reject(new Error('SMTP send timed out after 30000ms')), 30_000);
+            });
+            await Promise.race([sendPromise, timeoutPromise]);
             this._logger.log('Email sent successfully', 'Mail');
         }
         catch (error) {

package/src/services/strategies/abstracts/DeliveryStrategyBase.d.ts

@@ -1,3 +1,4 @@
+import type { IMailAttachment } from '../../../models/IMailAttachment';
 /**
  * Represents the base class for all email delivery strategies.
  *
@@ -21,6 +22,7 @@ export declare abstract class DeliveryStrategyBase {
      * @param subject - Subject of the email
      * @param content - Email body content (plain text or HTML)
      * @param isHtml - Flag to indicate whether the email is HTML (true) or plain text (false)
+     * @param attachments - Optional array of file attachments
      */
-    abstract send(from: string, to: string, subject: string, content: string, isHtml: boolean): Promise<void>;
+    abstract send(from: string, to: string, subject: string, content: string, isHtml: boolean, attachments?: Array<IMailAttachment>): Promise<void>;
 }

package/src/templating/MailTemplateEngine.d.ts

@@ -1,7 +1,7 @@
 import { ContentTemplateEngine } from '@breadstone/archipel-platform-core';
 import { OnModuleInit } from '@nestjs/common';
-import { TemplateFetchStrategyBase } from './strategies/abstracts/TemplateFetchStrategyBase';
 import { MailTemplateFormat } from '../MailTokens';
+import { TemplateFetchStrategyBase } from './strategies/abstracts/TemplateFetchStrategyBase';
 /**
  * The `MailTemplateEngine` class.
  *
@@ -35,4 +35,6 @@ export declare class MailTemplateEngine implements OnModuleInit {
      * @returns The compiled template as a string.
      */
     compileTemplate(templateKey: string, params: Record<string, unknown>, format: MailTemplateFormat): string;
+    private escapeHtmlParams;
+    private escapeHtml;
 }

package/src/templating/MailTemplateEngine.js

@@ -5,8 +5,8 @@ exports.MailTemplateEngine = void 0;
 const tslib_1 = require("tslib");
 const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
 const common_1 = require("@nestjs/common");
-const TemplateFetchStrategyBase_1 = require("./strategies/abstracts/TemplateFetchStrategyBase");
 const MailTokens_1 = require("../MailTokens");
+const TemplateFetchStrategyBase_1 = require("./strategies/abstracts/TemplateFetchStrategyBase");
 // #endregion
 /**
  * The `MailTemplateEngine` class.
@@ -48,12 +48,17 @@ let MailTemplateEngine = class MailTemplateEngine {
      * @returns The compiled template as a string.
      */
     compileTemplate(templateKey, params, format) {
-        const template = this._templates[templateKey][format];
+        const templateVariants = this._templates[templateKey];
+        if (!templateVariants) {
+            throw new Error(`Template with key '${templateKey}' not found.`);
+        }
+        const template = templateVariants[format];
         if (!template) {
             throw new Error(`Template with key '${templateKey}' and format '${format}' not found.`);
         }
         try {
-            const interpolatedTemplate = this._contentTemplateEngine.compileTemplate(template, params);
+            const safeParams = format === 'html' ? this.escapeHtmlParams(params) : params;
+            const interpolatedTemplate = this._contentTemplateEngine.compileTemplate(template, safeParams);
             return interpolatedTemplate;
         }
         catch (error) {
@@ -61,6 +66,21 @@ let MailTemplateEngine = class MailTemplateEngine {
             throw error;
         }
     }
+    escapeHtmlParams(params) {
+        const escaped = {};
+        for (const [key, value] of Object.entries(params)) {
+            escaped[key] = typeof value === 'string' ? this.escapeHtml(value) : value;
+        }
+        return escaped;
+    }
+    escapeHtml(text) {
+        return text
+            .replace(/&/g, '&')
+            .replace(/</g, '&lt;')
+            .replace(/>/g, '&gt;')
+            .replace(/"/g, '&quot;')
+            .replace(/'/g, '&#39;');
+    }
 };
 exports.MailTemplateEngine = MailTemplateEngine;
 exports.MailTemplateEngine = MailTemplateEngine = tslib_1.__decorate([

package/src/templating/strategies/BlobTemplateFetchStrategy.d.ts

@@ -1,6 +1,6 @@
 import { BlobService } from '@breadstone/archipel-platform-blob-storage';
-import { TemplateFetchStrategyBase } from './abstracts/TemplateFetchStrategyBase';
 import { IMailTemplateVariants } from '../../MailTokens';
+import { TemplateFetchStrategyBase } from './abstracts/TemplateFetchStrategyBase';
 /**
  * The `BlobTemplateFetchStrategy` class.
  *
@@ -8,6 +8,7 @@ import { IMailTemplateVariants } from '../../MailTokens';
  */
 export declare class BlobTemplateFetchStrategy extends TemplateFetchStrategyBase {
     private readonly _blobService;
+    private readonly _logger;
     /**
      * Constructs a new instance of the `BlobTemplateFetchStrategy` class.
      *

package/src/templating/strategies/BlobTemplateFetchStrategy.js

@@ -22,6 +22,7 @@ class BlobTemplateFetchStrategy extends TemplateFetchStrategyBase_1.TemplateFetc
      */
     constructor(blobService) {
         super();
+        this._logger = new common_1.Logger(BlobTemplateFetchStrategy.name);
         this._blobService = blobService;
     }
     // #endregion
@@ -44,10 +45,10 @@ class BlobTemplateFetchStrategy extends TemplateFetchStrategyBase_1.TemplateFetc
                 templates[templateName].txt = templateContent;
             }
             else {
-                common_1.Logger.warn(`Unknown template extension '${extension}' for '${file}'`, 'Mail');
+                this._logger.warn(`Unknown template extension '${extension}' for '${file}'`);
             }
         }
-        common_1.Logger.log('Templates loaded from blob storage', 'Mail');
+        this._logger.log('Templates loaded from blob storage');
         return templates;
     }
 }

package/src/terminus/MailHealthIndicator.d.ts

@@ -1,4 +1,5 @@
-import { ConfigService, IHealthIndicator } from '@breadstone/archipel-platform-core';
+import { ConfigService } from '@breadstone/archipel-platform-configuration';
+import { IHealthIndicator } from '@breadstone/archipel-platform-core';
 import { HealthIndicatorResult } from '@nestjs/terminus';
 /**
  * Health indicator for mail service.

package/src/terminus/MailHealthIndicator.js

@@ -3,7 +3,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MailHealthIndicator = void 0;
 const tslib_1 = require("tslib");
-const archipel_platform_core_1 = require("@breadstone/archipel-platform-core");
+const archipel_platform_configuration_1 = require("@breadstone/archipel-platform-configuration");
 const common_1 = require("@nestjs/common");
 const env_1 = require("../env");
 // #endregion
@@ -50,6 +50,6 @@ let MailHealthIndicator = class MailHealthIndicator {
 exports.MailHealthIndicator = MailHealthIndicator;
 exports.MailHealthIndicator = MailHealthIndicator = tslib_1.__decorate([
     (0, common_1.Injectable)(),
-    tslib_1.__metadata("design:paramtypes", [archipel_platform_core_1.ConfigService])
+    tslib_1.__metadata("design:paramtypes", [archipel_platform_configuration_1.ConfigService])
 ], MailHealthIndicator);
 //# sourceMappingURL=MailHealthIndicator.js.map