@brightchain/brightchain-lib 0.30.1 → 0.31.0

package/src/lib/services/messaging/emailMessageService.d.ts

@@ -18,6 +18,7 @@
  * Requirements: 1.1-1.10
  */
 import { MessageEncryptionScheme } from '../../enumerations/messaging/messageEncryptionScheme';
+import { SpamClassification } from '../../enumerations/messaging/spamClassification';
 import type { IGossipService } from '../../interfaces/availability/gossipService';
 import type { IAttachmentMetadata } from '../../interfaces/messaging/attachmentMetadata';
 import type { IMailbox } from '../../interfaces/messaging/emailAddress';
@@ -98,6 +99,18 @@ export interface IEmailServiceConfig {
      * @see Requirement 3.2
      */
     nodeId: string;
+    /**
+     * When `true`, all recipients (including those whose domain matches
+     * `canonicalDomain`) are treated as external and routed through the
+     * registered `ExternalEmailDispatcher` (e.g. SES / Postfix).
+     *
+     * Use this when the canonical domain is served by a real SMTP provider
+     * (such as AWS SES) rather than by BrightChain gossip delivery, so that
+     * same-domain users actually receive their email.
+     *
+     * @default false
+     */
+    relayAllRecipientsExternally: boolean;
 }
 /**
  * Default configuration values for EmailMessageService.
@@ -147,6 +160,18 @@ export interface IEmailInput {
     htmlBody?: string;
     /** Custom headers (X-* and other extension headers) */
     customHeaders?: Map<string, string[]>;
+    /**
+     * Digital Burnbag vault container ID for email attachments.
+     * Pre-populated by InboundProcessor after creating a private vault.
+     * Stored in IEmailMetadata so the UI can construct per-attachment download links.
+     */
+    vaultContainerId?: string;
+    /** Mail folder for this email (e.g. 'inbox', 'spam'). Defaults to 'inbox'. */
+    folder?: string;
+    /** Spam score from anti-spam engine (e.g. SpamAssassin). */
+    spamScore?: number;
+    /** Spam classification derived from score vs. configured thresholds. */
+    spamClassification?: SpamClassification;
     /**
      * Encryption scheme to use for this email.
      * - NONE: No encryption (default)
@@ -245,6 +270,12 @@ export interface IAttachmentInput {
     contentId?: string;
     /** Whether this is an inline attachment (e.g., embedded image) */
     inline?: boolean;
+    /**
+     * Digital Burnbag vault file ID for this attachment.
+     * Pre-populated by InboundProcessor after uploading to a private vault.
+     * Stored in the resulting IAttachmentMetadata for UI download links.
+     */
+    vaultFileId?: string;
 }
 /**
  * Result of sending an email.
@@ -315,6 +346,12 @@ export interface IInboxQuery {
     subjectContains?: string;
     /** Full-text search across subject and body */
     searchText?: string;
+    /** Filter by folder (e.g. 'inbox', 'spam', 'sent'). */
+    folder?: string;
+    /** Filter by label/keyword tags. */
+    labels?: string[];
+    /** Filter by starred status. */
+    isStarred?: boolean;
     /** Sort field */
     sortBy?: 'date' | 'sender' | 'subject' | 'size';
     /** Sort direction */
@@ -439,12 +476,43 @@ export interface IEmailMetadataStore {
  * });
  * ```
  */
+/**
+ * Callback invoked once per `sendEmail` when external recipients are present.
+ * Implementations are responsible for relaying the message to a real
+ * outbound email transport (e.g. SES, Postfix). Local recipients (matching
+ * `canonicalDomain`) are filtered out by `EmailMessageService` before this
+ * callback fires.
+ *
+ * Recipients are exposed split by header field so the dispatcher can preserve
+ * RFC 5322 envelope semantics (To/CC are visible to all recipients; BCC is
+ * not). When no external recipients exist for a given field, that array is
+ * empty.
+ */
+export type ExternalEmailDispatcher = (input: {
+    messageId: string;
+    from: IMailbox;
+    externalTo: IMailbox[];
+    externalCc: IMailbox[];
+    externalBcc: IMailbox[];
+    subject: string;
+    textBody?: string;
+    htmlBody?: string;
+}) => Promise<void> | void;
 export declare class EmailMessageService {
     private readonly messageCBLService;
     private readonly metadataStore;
     private readonly gossipService;
     private readonly config;
+    private externalDispatcher?;
     constructor(messageCBLService: MessageCBLService, metadataStore: IEmailMetadataStore, gossipService: IGossipService, config?: Partial<IEmailServiceConfig>);
+    /**
+     * Register a dispatcher that delivers messages destined for recipients
+     * outside the canonical domain to a real outbound email transport
+     * (e.g. SES, Postfix). The dispatcher is invoked once per `sendEmail`
+     * when at least one external recipient exists, with local recipients
+     * already filtered out.
+     */
+    setExternalDispatcher(dispatcher: ExternalEmailDispatcher | undefined): void;
     /**
      * Sends an email message.
      *
@@ -474,6 +542,20 @@ export declare class EmailMessageService {
      * @see Requirement 15.4 - Auto-generate required headers
      */
     sendEmail(email: IEmailInput): Promise<ISendEmailResult>;
+    /**
+     * Store an inbound email received from an external source.
+     *
+     * Identical to `sendEmail` up through metadata construction and storage,
+     * but deliberately skips the external-dispatch step so that inbound
+     * messages are never relayed back out through SES / Postfix.
+     *
+     * Use this from the InboundProcessor instead of `sendEmail()` to avoid
+     * creating a relay loop.
+     *
+     * @param email - Parsed inbound email input
+     * @returns Send result with messageId and brightchainMessageId
+     */
+    receiveEmail(email: IEmailInput): Promise<ISendEmailResult>;
     /**
      * Retrieves email metadata by Message-ID.
      *
@@ -628,6 +710,13 @@ export declare class EmailMessageService {
      * @see Requirement 1.1 — detect external recipients
      */
     private isExternalMailbox;
+    /**
+     * Collect all external recipients (To + CC + BCC) and hand them to the
+     * configured outbound dispatcher. Local recipients (matching
+     * `canonicalDomain`) are filtered out. Errors from the dispatcher are
+     * caught and logged so they cannot fail the BrightMail send pipeline.
+     */
+    private dispatchExternalRecipients;
     /**
      * Partition an array of mailboxes into internal (canonical domain) and
      * external (non-canonical domain) groups.

package/src/lib/services/messaging/emailMessageService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"emailMessageService.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/emailMessageService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAOH,OAAO,EAAE,uBAAuB,EAAE,MAAM,sDAAsD,CAAC;AAI/F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAC;AAGlF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yCAAyC,CAAC;AACxE,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AACjF,OAAO,KAAK,EACV,cAAc,EAEf,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,SAAS,EACf,MAAM,qCAAqC,CAAC;AAM7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAI7D;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;OAQG;IACH,eAAe,EAAE,MAAM,CAAC;IAExB;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAE1B;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;;;OAIG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAE5B;;;;OAIG;IACH,eAAe,EAAE,MAAM,CAAC;IAExB;;;;OAIG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAE3B;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAE1B;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,eAAO,MAAM,4BAA4B,EAAE,mBAW1C,CAAC;AAIF;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,8CAA8C;IAC9C,IAAI,EAAE,QAAQ,CAAC;IAEf,qDAAqD;IACrD,MAAM,CAAC,EAAE,QAAQ,CAAC;IAElB,mCAAmC;IACnC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC;IAErB,qCAAqC;IACrC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;IAEhB,oBAAoB;IACpB,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;IAEhB,qBAAqB;IACrB,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC;IAEjB,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,wDAAwD;IACxD,IAAI,CAAC,EAAE,IAAI,CAAC;IAEZ,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtB,uCAAuC;IACvC,WAAW,CAAC,EAAE,YAAY,CAAC;IAE3B,wCAAwC;IACxC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;IAEpB,6BAA6B;IAC7B,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAEjC,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,wBAAwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,uDAAuD;IACvD,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAItC;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAE3C;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE9C;;;;OAIG;IACH,SAAS,CAAC,EAAE,UAAU,CAAC;IAEvB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,UAAU,CAAC;IAE9B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,UAAU,CAAC;IAI7B;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEvC;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE1C;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IAEjB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IAEjB,wCAAwC;IACxC,OAAO,EAAE,UAAU,CAAC;IAEpB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,kEAAkE;IAClE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAID;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAElB,gDAAgD;IAChD,oBAAoB,EAAE,MAAM,CAAC;IAE7B,4CAA4C;IAC5C,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAE9C,gDAAgD;IAChD,OAAO,EAAE,OAAO,CAAC;IAEjB,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,0BAA0B;IAC1B,QAAQ,EAAE,cAAc,CAAC;IAEzB,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,oDAAoD;IACpD,KAAK,EAAE,SAAS,EAAE,CAAC;IAEnB,6CAA6C;IAC7C,WAAW,EAAE,oBAAoB,EAAE,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,0BAA0B;IAC1B,QAAQ,EAAE,mBAAmB,CAAC;IAE9B,iCAAiC;IACjC,OAAO,EAAE,UAAU,CAAC;CACrB;AAID;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAEvC,+BAA+B;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,IAAI,CAAC;IAEhB,iCAAiC;IACjC,MAAM,CAAC,EAAE,IAAI,CAAC;IAEd,8CAA8C;IAC9C,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,wCAAwC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IAEhD,qBAAqB;IACrB,aAAa,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAE/B,4BAA4B;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,iCAAiC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,0CAA0C;IAC1C,MAAM,EAAE,cAAc,EAAE,CAAC;IAEzB,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;IAEnB,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IAEpB,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IAEb,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IAEjB,mCAAmC;IACnC,OAAO,EAAE,OAAO,CAAC;CAClB;AAID;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mCAAmC;IACnC,IAAI,EAAE,QAAQ,CAAC;IAEf,qDAAqD;IACrD,QAAQ,CAAC,EAAE,OAAO,CAAC;IAEnB,mCAAmC;IACnC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC;IAE1B,+BAA+B;IAC/B,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC;IAE1B,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,4BAA4B;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,sBAAsB;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,0CAA0C;IAC1C,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAClC;AAID;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,2BAA2B;IAC3B,KAAK,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C,4CAA4C;IAC5C,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAEvD,0CAA0C;IAC1C,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzC,4BAA4B;IAC5B,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3E,sCAAsC;IACtC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAEtE,kCAAkC;IAClC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhD,uCAAuC;IACvC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7D,+DAA+D;IAC/D,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAExD,uCAAuC;IACvC,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAElE;;;;;;;;OAQG;IACH,sBAAsB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzE;;;;;;OAMG;IACH,oBAAoB,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAChE;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,mBAAmB;IAI5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,aAAa;IALhC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;gBAG1B,iBAAiB,EAAE,iBAAiB,EACpC,aAAa,EAAE,mBAAmB,EAClC,aAAa,EAAE,cAAc,EAC9C,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC;IAOvC;;;;;;;;;;;;;OAaG;IACH;;;;;;;;;;;;;OAaG;IACG,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAie9D;;;;;OAKG;IACG,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAIjE;;;;;;;;;;;OAWG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA4DhE;;;;;OAKG;IACG,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAenD;;;;;;;;;;OAUG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAc3E;;;;;;;OAOG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlE;;;;;;;OAOG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAMrD;;;;;;;;;;;;OAYG;IACG,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAiF7D;;;;;;;;;OASG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAyCvE;;;;;;;;;;;;;;;OAeG;IACG,WAAW,CACf,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,WAAW,GACxB,OAAO,CAAC,gBAAgB,CAAC;IAkF5B;;;;;;;;;;;;;OAaG;IACG,YAAY,CAChB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,QAAQ,EAAE,GACpB,OAAO,CAAC,gBAAgB,CAAC;IA2D5B;;;;;;;OAOG;IACG,iBAAiB,CACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAczC;;;;;;;;;;;;;OAaG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,UAAU,GAC3B,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IA0CpD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,iBAAiB;IAMzB;;;;;;;;;OASG;IACH,mBAAmB,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG;QAC1C,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACrB,QAAQ,EAAE,QAAQ,EAAE,CAAC;KACtB;IAeD;;;;;;;;;;;;;;;OAeG;IACH,qBAAqB,CAAC,QAAQ,EAAE,cAAc,GAAG,cAAc;IAiC/D;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,sBAAsB,CACpB,QAAQ,EAAE,cAAc,EACxB,YAAY,EAAE,QAAQ,GACrB,cAAc;IAyBjB;;;;;;;;OAQG;IAIH;;;;;;;;;;;OAWG;IACH,uBAAuB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO;IASpD;;;;;;;;;;;;;;;OAeG;YACW,eAAe;IAuD7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,iBAAiB,IAAI,MAAM;IAa3B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,uBAAuB;IA8D/B;;;;OAIG;IACH,SAAS,IAAI,QAAQ,CAAC,mBAAmB,CAAC;CAG3C"}
+{"version":3,"file":"emailMessageService.d.ts","sourceRoot":"","sources":["../../../../../../brightchain-lib/src/lib/services/messaging/emailMessageService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAOH,OAAO,EAAE,uBAAuB,EAAE,MAAM,sDAAsD,CAAC;AAE/F,OAAO,EAAE,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AAGrF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6CAA6C,CAAC;AAGlF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yCAAyC,CAAC;AACxE,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AACjF,OAAO,KAAK,EACV,cAAc,EAEf,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,SAAS,EACf,MAAM,qCAAqC,CAAC;AAM7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAI7D;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;OAQG;IACH,eAAe,EAAE,MAAM,CAAC;IAExB;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAE1B;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;;;OAIG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAE5B;;;;OAIG;IACH,eAAe,EAAE,MAAM,CAAC;IAExB;;;;OAIG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAE3B;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAE1B;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;;;;;;;;;OAUG;IACH,4BAA4B,EAAE,OAAO,CAAC;CACvC;AAED;;GAEG;AACH,eAAO,MAAM,4BAA4B,EAAE,mBAY1C,CAAC;AAIF;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,8CAA8C;IAC9C,IAAI,EAAE,QAAQ,CAAC;IAEf,qDAAqD;IACrD,MAAM,CAAC,EAAE,QAAQ,CAAC;IAElB,mCAAmC;IACnC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC;IAErB,qCAAqC;IACrC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;IAEhB,oBAAoB;IACpB,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;IAEhB,qBAAqB;IACrB,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC;IAEjB,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,wDAAwD;IACxD,IAAI,CAAC,EAAE,IAAI,CAAC;IAEZ,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtB,uCAAuC;IACvC,WAAW,CAAC,EAAE,YAAY,CAAC;IAE3B,wCAAwC;IACxC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;IAEpB,6BAA6B;IAC7B,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAEjC,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,wBAAwB;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,uDAAuD;IACvD,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAEtC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAI1B,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IAIxC;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAE3C;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE9C;;;;OAIG;IACH,SAAS,CAAC,EAAE,UAAU,CAAC;IAEvB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,UAAU,CAAC;IAE9B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,UAAU,CAAC;IAI7B;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEvC;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE1C;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IAEjB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IAEjB,wCAAwC;IACxC,OAAO,EAAE,UAAU,CAAC;IAEpB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,kEAAkE;IAClE,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAElB,gDAAgD;IAChD,oBAAoB,EAAE,MAAM,CAAC;IAE7B,4CAA4C;IAC5C,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAE9C,gDAAgD;IAChD,OAAO,EAAE,OAAO,CAAC;IAEjB,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,0BAA0B;IAC1B,QAAQ,EAAE,cAAc,CAAC;IAEzB,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,oDAAoD;IACpD,KAAK,EAAE,SAAS,EAAE,CAAC;IAEnB,6CAA6C;IAC7C,WAAW,EAAE,oBAAoB,EAAE,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,0BAA0B;IAC1B,QAAQ,EAAE,mBAAmB,CAAC;IAE9B,iCAAiC;IACjC,OAAO,EAAE,UAAU,CAAC;CACrB;AAID;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAEvC,+BAA+B;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,IAAI,CAAC;IAEhB,iCAAiC;IACjC,MAAM,CAAC,EAAE,IAAI,CAAC;IAEd,8CAA8C;IAC9C,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,wCAAwC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAElB,gCAAgC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,iBAAiB;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IAEhD,qBAAqB;IACrB,aAAa,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAE/B,4BAA4B;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,iCAAiC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,0CAA0C;IAC1C,MAAM,EAAE,cAAc,EAAE,CAAC;IAEzB,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;IAEnB,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IAEpB,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IAEb,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IAEjB,mCAAmC;IACnC,OAAO,EAAE,OAAO,CAAC;CAClB;AAID;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mCAAmC;IACnC,IAAI,EAAE,QAAQ,CAAC;IAEf,qDAAqD;IACrD,QAAQ,CAAC,EAAE,OAAO,CAAC;IAEnB,mCAAmC;IACnC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC;IAE1B,+BAA+B;IAC/B,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC;IAE1B,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,4BAA4B;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,sBAAsB;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,0CAA0C;IAC1C,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAClC;AAID;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,2BAA2B;IAC3B,KAAK,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C,4CAA4C;IAC5C,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAEvD,0CAA0C;IAC1C,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzC,4BAA4B;IAC5B,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3E,sCAAsC;IACtC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAEtE,kCAAkC;IAClC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhD,uCAAuC;IACvC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7D,+DAA+D;IAC/D,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAExD,uCAAuC;IACvC,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAElE;;;;;;;;OAQG;IACH,sBAAsB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzE;;;;;;OAMG;IACH,oBAAoB,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAChE;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,QAAQ,EAAE,CAAC;IACvB,UAAU,EAAE,QAAQ,EAAE,CAAC;IACvB,WAAW,EAAE,QAAQ,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAE3B,qBAAa,mBAAmB;IAK5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,aAAa;IANhC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,kBAAkB,CAAC,CAA0B;gBAGlC,iBAAiB,EAAE,iBAAiB,EACpC,aAAa,EAAE,mBAAmB,EAClC,aAAa,EAAE,cAAc,EAC9C,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC;IAKvC;;;;;;OAMG;IACI,qBAAqB,CAC1B,UAAU,EAAE,uBAAuB,GAAG,SAAS,GAC9C,IAAI;IAMP;;;;;;;;;;;;;OAaG;IACH;;;;;;;;;;;;;OAaG;IACG,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA0hB9D;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkGjE;;;;;OAKG;IACG,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAIjE;;;;;;;;;;;OAWG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA4DhE;;;;;OAKG;IACG,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAenD;;;;;;;;;;OAUG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAc3E;;;;;;;OAOG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlE;;;;;;;OAOG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAMrD;;;;;;;;;;;;OAYG;IACG,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAiF7D;;;;;;;;;OASG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAyCvE;;;;;;;;;;;;;;;OAeG;IACG,WAAW,CACf,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,WAAW,GACxB,OAAO,CAAC,gBAAgB,CAAC;IAkF5B;;;;;;;;;;;;;OAaG;IACG,YAAY,CAChB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,QAAQ,EAAE,GACpB,OAAO,CAAC,gBAAgB,CAAC;IA2D5B;;;;;;;OAOG;IACG,iBAAiB,CACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAczC;;;;;;;;;;;;;OAaG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,UAAU,GAC3B,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IA0CpD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,iBAAiB;IASzB;;;;;OAKG;YACW,0BAA0B;IAuCxC;;;;;;;;;OASG;IACH,mBAAmB,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG;QAC1C,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACrB,QAAQ,EAAE,QAAQ,EAAE,CAAC;KACtB;IAeD;;;;;;;;;;;;;;;OAeG;IACH,qBAAqB,CAAC,QAAQ,EAAE,cAAc,GAAG,cAAc;IAiC/D;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,sBAAsB,CACpB,QAAQ,EAAE,cAAc,EACxB,YAAY,EAAE,QAAQ,GACrB,cAAc;IAyBjB;;;;;;;;OAQG;IAIH;;;;;;;;;;;OAWG;IACH,uBAAuB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO;IASpD;;;;;;;;;;;;;;;OAeG;YACW,eAAe;IAwD7B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,iBAAiB,IAAI,MAAM;IAa3B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,uBAAuB;IA8D/B;;;;OAIG;IACH,SAAS,IAAI,QAAQ,CAAC,mBAAmB,CAAC;CAG3C"}

package/src/lib/services/messaging/emailMessageService.js

@@ -47,46 +47,30 @@ exports.DEFAULT_EMAIL_SERVICE_CONFIG = {
     maxRetryAttempts: 3,
     deliveryTimeoutMs: 24 * 60 * 60 * 1000, // 24 hours
     nodeId: 'localhost',
+    relayAllRecipientsExternally: false,
 };
-// ─── EmailMessageService Class ──────────────────────────────────────────────
-/**
- * Main service for email operations in the BrightChain messaging system.
- *
- * Coordinates parsing, validation, storage, and delivery of RFC 5322
- * compliant email messages. This service acts as the primary entry point
- * for all email-related operations.
- *
- * @see Design Document: EmailMessageService Class
- * @see Requirements 1.1-1.10
- *
- * @example
- * ```typescript
- * const emailService = new EmailMessageService(
- *   messageCBLService,
- *   metadataStore,
- *   gossipService,
- *   config,
- * );
- *
- * const result = await emailService.sendEmail({
- *   from: createMailbox('sender', 'example.com'),
- *   to: [createMailbox('recipient', 'example.com')],
- *   subject: 'Hello',
- *   textBody: 'Hello, World!',
- * });
- * ```
- */
 class EmailMessageService {
     messageCBLService;
     metadataStore;
     gossipService;
     config;
+    externalDispatcher;
     constructor(messageCBLService, metadataStore, gossipService, config) {
         this.messageCBLService = messageCBLService;
         this.metadataStore = metadataStore;
         this.gossipService = gossipService;
         this.config = { ...exports.DEFAULT_EMAIL_SERVICE_CONFIG, ...config };
     }
+    /**
+     * Register a dispatcher that delivers messages destined for recipients
+     * outside the canonical domain to a real outbound email transport
+     * (e.g. SES, Postfix). The dispatcher is invoked once per `sendEmail`
+     * when at least one external recipient exists, with local recipients
+     * already filtered out.
+     */
+    setExternalDispatcher(dispatcher) {
+        this.externalDispatcher = dispatcher;
+    }
     // ─── Core Operations ────────────────────────────────────────────────
     /**
      * Sends an email message.
@@ -215,6 +199,8 @@ class EmailMessageService {
             contentType,
             customHeaders: email.customHeaders ?? new Map(),
             parts: email.parts,
+            textBody: email.textBody,
+            htmlBody: email.htmlBody,
             attachments: undefined,
             deliveryReceipts: new Map(),
             readReceipts: new Map(),
@@ -251,6 +237,16 @@ class EmailMessageService {
                     metadata.isSigned = result.encryptionMetadata.isSigned;
                     metadata.contentSignature = result.encryptionMetadata.signature;
                     metadata.signerPublicKey = result.encryptionMetadata.signerPublicKey;
+                    // Store the encrypted bytes and clear plaintext for security
+                    metadata.encryptedBody = result.encryptedContent;
+                    metadata.textBody = undefined;
+                    metadata.htmlBody = undefined;
+                    if (metadata.parts) {
+                        metadata.parts = metadata.parts.map((p) => ({
+                            ...p,
+                            body: undefined,
+                        }));
+                    }
                 }
                 else if (email.encryptionScheme === messageEncryptionScheme_1.MessageEncryptionScheme.SHARED_KEY) {
                     // Symmetric encryption with shared key
@@ -260,6 +256,16 @@ class EmailMessageService {
                     const result = await encryptionService.encryptContentSymmetric(bodyContent, email.sharedKey);
                     metadata.encryptionIv = result.encryptionMetadata.iv;
                     metadata.encryptionAuthTag = result.encryptionMetadata.authTag;
+                    // Store the encrypted bytes and clear plaintext for security
+                    metadata.encryptedBody = result.encryptedContent;
+                    metadata.textBody = undefined;
+                    metadata.htmlBody = undefined;
+                    if (metadata.parts) {
+                        metadata.parts = metadata.parts.map((p) => ({
+                            ...p,
+                            body: undefined,
+                        }));
+                    }
                     // Optionally sign
                     if (email.senderPrivateKey && email.senderPublicKey) {
                         const sig = await encryptionService.signContent(bodyContent, email.senderPrivateKey, email.senderPublicKey);
@@ -299,6 +305,16 @@ class EmailMessageService {
                             metadata.signerPublicKey =
                                 result.encryptionMetadata.signerPublicKey;
                         }
+                        // Store the encrypted bytes and clear plaintext for security
+                        metadata.encryptedBody = result.encryptedContent;
+                        metadata.textBody = undefined;
+                        metadata.htmlBody = undefined;
+                        if (metadata.parts) {
+                            metadata.parts = metadata.parts.map((p) => ({
+                                ...p,
+                                body: undefined,
+                            }));
+                        }
                     }
                     else if (!email.signMessage) {
                         // Fallback to legacy S/MIME stub if no real certs provided
@@ -317,6 +333,16 @@ class EmailMessageService {
                         metadata.contentSignature = result.encryptionMetadata.signature;
                         metadata.signerPublicKey =
                             result.encryptionMetadata.signerPublicKey;
+                        // Store the encrypted bytes and clear plaintext for security
+                        metadata.encryptedBody = result.encryptedContent;
+                        metadata.textBody = undefined;
+                        metadata.htmlBody = undefined;
+                        if (metadata.parts) {
+                            metadata.parts = metadata.parts.map((p) => ({
+                                ...p,
+                                body: undefined,
+                            }));
+                        }
                     }
                 }
                 else if (email.encryptionScheme === messageEncryptionScheme_1.MessageEncryptionScheme.GPG) {
@@ -350,6 +376,16 @@ class EmailMessageService {
                             metadata.signerPublicKey =
                                 result.encryptionMetadata.signerPublicKey;
                         }
+                        // Store the encrypted bytes and clear plaintext for security
+                        metadata.encryptedBody = result.encryptedContent;
+                        metadata.textBody = undefined;
+                        metadata.htmlBody = undefined;
+                        if (metadata.parts) {
+                            metadata.parts = metadata.parts.map((p) => ({
+                                ...p,
+                                body: undefined,
+                            }));
+                        }
                     }
                     else {
                         throw new emailError_1.EmailError(emailErrorType_1.EmailErrorType.ENCRYPTION_FAILED, 'Recipient GPG public keys are required for GPG encryption');
@@ -451,6 +487,7 @@ class EmailMessageService {
         catch (err) {
             // Delivery errors are non-fatal - the email is stored, delivery can be retried
             // Return success with empty delivery status
+            await this.dispatchExternalRecipients(email, messageId);
             return {
                 messageId,
                 brightchainMessageId,
@@ -459,6 +496,9 @@ class EmailMessageService {
                 error: `Delivery initiation failed: ${err instanceof Error ? err.message : String(err)}`,
             };
         }
+        // 5c. Hand off external recipients to the configured outbound transport
+        //     (e.g. SES). Local recipients are filtered out by canonicalDomain.
+        await this.dispatchExternalRecipients(email, messageId);
         // 6. Return result — gossip delivery is fire-and-forget; acks come later via gossip
         return {
             messageId,
@@ -467,6 +507,105 @@ class EmailMessageService {
             success: true,
         };
     }
+    /**
+     * Store an inbound email received from an external source.
+     *
+     * Identical to `sendEmail` up through metadata construction and storage,
+     * but deliberately skips the external-dispatch step so that inbound
+     * messages are never relayed back out through SES / Postfix.
+     *
+     * Use this from the InboundProcessor instead of `sendEmail()` to avoid
+     * creating a relay loop.
+     *
+     * @param email - Parsed inbound email input
+     * @returns Send result with messageId and brightchainMessageId
+     */
+    async receiveEmail(email) {
+        const messageId = email.messageId ?? this.generateMessageId();
+        const date = email.date ?? new Date();
+        const brightchainMessageId = this.generateMessageId();
+        const now = new Date();
+        const allRecipientAddresses = [
+            ...(email.to ?? []).map((m) => m.address),
+            ...(email.cc ?? []).map((m) => m.address),
+            ...(email.bcc ?? []).map((m) => m.address),
+        ];
+        const contentType = email.contentType ??
+            (0, mimePart_1.createContentType)('text', 'plain', new Map([['charset', 'us-ascii']]));
+        const metadata = {
+            blockId: brightchainMessageId,
+            createdAt: now,
+            expiresAt: null,
+            durabilityLevel: durabilityLevel_1.DurabilityLevel.Standard,
+            parityBlockIds: [],
+            accessCount: 0,
+            lastAccessedAt: now,
+            replicationStatus: replicationStatus_1.ReplicationStatus.Pending,
+            targetReplicationFactor: 0,
+            replicaNodeIds: [],
+            size: (email.textBody ? new TextEncoder().encode(email.textBody).length : 0) +
+                (email.htmlBody ? new TextEncoder().encode(email.htmlBody).length : 0) +
+                (email.attachments
+                    ? email.attachments.reduce((sum, a) => sum + a.content.length, 0)
+                    : 0),
+            checksum: '',
+            messageType: 'email',
+            senderId: email.from.address,
+            recipients: allRecipientAddresses,
+            priority: messagePriority_1.MessagePriority.NORMAL,
+            deliveryStatus: new Map(allRecipientAddresses.map((addr) => [addr, deliveryStatus_1.DeliveryStatus.Pending])),
+            acknowledgments: new Map(),
+            encryptionScheme: messageEncryptionScheme_1.MessageEncryptionScheme.NONE,
+            isCBL: false,
+            cblBlockIds: [brightchainMessageId],
+            from: email.from,
+            sender: email.sender,
+            replyTo: email.replyTo,
+            to: email.to ?? [],
+            cc: email.cc,
+            bcc: email.bcc,
+            messageId,
+            inReplyTo: email.inReplyTo,
+            references: email.references,
+            subject: email.subject,
+            date,
+            mimeVersion: '1.0',
+            contentType,
+            customHeaders: email.customHeaders ?? new Map(),
+            parts: email.parts,
+            textBody: email.textBody,
+            htmlBody: email.htmlBody,
+            vaultContainerId: email.vaultContainerId,
+            folder: email.folder ?? 'inbox',
+            spamScore: email.spamScore,
+            spamClassification: email.spamClassification,
+            isStarred: false,
+            attachments: undefined,
+            deliveryReceipts: new Map(),
+            readReceipts: new Map(),
+        };
+        if (email.attachments && email.attachments.length > 0) {
+            metadata.attachments = await Promise.all(email.attachments.map((attachment) => this.storeAttachment(attachment)));
+        }
+        try {
+            await this.metadataStore.store(metadata);
+        }
+        catch (err) {
+            return {
+                messageId,
+                brightchainMessageId,
+                deliveryStatus: new Map(),
+                success: false,
+                error: `Failed to store inbound email metadata: ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+        return {
+            messageId,
+            brightchainMessageId,
+            deliveryStatus: new Map(),
+            success: true,
+        };
+    }
     /**
      * Retrieves email metadata by Message-ID.
      *
@@ -938,10 +1077,49 @@ class EmailMessageService {
      * @see Requirement 1.1 — detect external recipients
      */
     isExternalMailbox(mailbox) {
+        if (this.config.relayAllRecipientsExternally) {
+            return true;
+        }
         const domain = mailbox.domain.toLowerCase();
         const canonical = this.config.canonicalDomain.toLowerCase();
         return domain !== canonical && !domain.endsWith(`.${canonical}`);
     }
+    /**
+     * Collect all external recipients (To + CC + BCC) and hand them to the
+     * configured outbound dispatcher. Local recipients (matching
+     * `canonicalDomain`) are filtered out. Errors from the dispatcher are
+     * caught and logged so they cannot fail the BrightMail send pipeline.
+     */
+    async dispatchExternalRecipients(email, messageId) {
+        if (!this.externalDispatcher) {
+            return;
+        }
+        const externalTo = this.partitionRecipients(email.to ?? []).external;
+        const externalCc = this.partitionRecipients(email.cc ?? []).external;
+        const externalBcc = this.partitionRecipients(email.bcc ?? []).external;
+        if (externalTo.length === 0 &&
+            externalCc.length === 0 &&
+            externalBcc.length === 0) {
+            return;
+        }
+        try {
+            await this.externalDispatcher({
+                messageId,
+                from: email.from,
+                externalTo,
+                externalCc,
+                externalBcc,
+                subject: email.subject ?? '',
+                textBody: email.textBody,
+                htmlBody: email.htmlBody,
+            });
+        }
+        catch (err) {
+            // Outbound transport failures are non-fatal for the BrightMail send.
+            // Log so operators can diagnose; the message is already stored locally.
+            console.error(`[email] external dispatcher failed for messageId=${messageId}:`, err);
+        }
+    }
     /**
      * Partition an array of mailboxes into internal (canonical domain) and
      * external (non-canonical domain) groups.
@@ -1137,6 +1315,7 @@ class EmailMessageService {
             blockIds: [blockId],
             checksum: sha256Checksum,
             contentMd5: md5Checksum,
+            vaultFileId: input.vaultFileId,
         };
     }
     // ─── Message-ID Generation ────────────────────────────────────────────