@decaf-ts/integrations 0.11.0 → 0.14.0

package/lib/cjs/comms/email/EmailService.cjs

@@ -0,0 +1,376 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailService = void 0;
+/**
+ * @module integrations/comms/email/service
+ * @summary Email integration service for sending mail and reading inboxes across SMTP, Microsoft Graph, and IMAP.
+ * @description Exposes an undecorated client-based service that
+ * multiplexes three delivery surfaces behind one config: SMTP delivery through
+ * the built-in {@link SmtpClient} (raw MIME built by {@link buildEmail}), and
+ * Microsoft Graph (`sendMail`, message listing) through {@link HttpApiService}
+ * with a bearer token. `listInbox` reads via Graph while `listImapMessages`
+ * dynamically imports the optional `imapflow` package for direct IMAP reads.
+ * Configuration comes from an explicit {@link EmailServiceConfig} or the
+ * `comms.email` environment slice; failures are mapped to decaf errors via
+ * {@link httpError} (Graph) or wrapped `InternalError`s (SMTP).
+ */
+const db_decorators_1 = require("@decaf-ts/db-decorators");
+const environment_js_1 = require("./../environment.cjs");
+const environmentValue_js_1 = require("./../../shared/environmentValue.cjs");
+const index_js_1 = require("./../../shared/http/index.cjs");
+const smtp_js_1 = require("./smtp.cjs");
+const mime_js_1 = require("./mime.cjs");
+/**
+ * ISO 8601 date shapes accepted by the Graph `receivedDateTime` filter.
+ * Date-only values and full timestamps (with optional fractional seconds and
+ * `Z`/offset) are allowed; anything else is rejected before it can reach
+ * `$filter`.
+ */
+const ISO_DATE = /^\d{4}-\d{2}-\d{2}(?:T\d{2}:\d{2}(?::\d{2}(?:\.\d{1,9})?)?(?:Z|[+-]\d{2}:\d{2})?)?$/;
+/**
+ * Validates and returns an ISO 8601 date for a Graph `$filter` literal.
+ *
+ * @param value - Caller-supplied `since` value.
+ * @returns The validated ISO date string.
+ * @throws {BadRequestError} when the value is not a parseable ISO 8601 date.
+ */
+function assertIsoDate(value) {
+    if (!ISO_DATE.test(value) || Number.isNaN(Date.parse(value))) {
+        throw new db_decorators_1.BadRequestError("Email inbox 'since' filter must be an ISO 8601 date");
+    }
+    return value;
+}
+/**
+ * Escapes a value for use inside an OData single-quoted string literal.
+ *
+ * @param value - Raw filter value.
+ * @returns The value with embedded single quotes doubled per OData rules.
+ */
+function escapeODataString(value) {
+    return value.replace(/'/g, "''");
+}
+/**
+ * @description Multi-provider email send/inbox service
+ * @summary Resolves the delivery provider from config (`provider`, or inferred
+ * from the presence of `host` vs `token`), builds RFC 5322 MIME with
+ * UTF-8-encoded headers via {@link buildEmail}, then delivers through SMTP or
+ * posts to Graph. Inbox reads go through Graph `messages` (with `$top`,
+ * `$filter`, `$orderby`) or the optional `imapflow` package.
+ * @category Comms
+ * @memberOf module:integrations/comms/email/service
+ */
+class EmailService extends index_js_1.HttpApiService {
+    constructor() {
+        super(...arguments);
+        this.serviceName = "Email";
+    }
+    /**
+     * @description Default Microsoft Graph base URL used when no override is configured
+     * @returns The Graph v1.0 endpoint URL
+     */
+    defaultBaseUrl() {
+        return "https://graph.microsoft.com/v1.0";
+    }
+    /**
+     * @description Authorization headers for Graph requests
+     * @param config - Resolved service config
+     * @returns A bearer-token `Authorization` header map, empty when no `token` is configured
+     */
+    authHeaders(config) {
+        return config.token ? { Authorization: `Bearer ${config.token}` } : {};
+    }
+    /**
+     * @description Pins the SMTP plaintext-AUTH default on top of the base initialization
+     * @summary Runs the {@link HttpApiService} initialization (explicit config
+     * merged over the `comms.email` environment slice) and then defaults an
+     * unresolved `allowPlaintextAuth` to `false`, so credentials are only sent
+     * over a TLS-protected session unless the config explicitly opts in. This
+     * closes the F1 residual where an environment-only `allowPlaintextAuth`
+     * opt-in would otherwise reach a boot whose explicit config omits the key
+     * (defense in depth on top of {@link bootWithoutEnvironment}, which disables
+     * the environment slice entirely on the node path).
+     * @param {...any[]} args - An optional `Partial<EmailServiceConfig>`, optionally followed by a decaf `Context`.
+     * @returns {Promise<{config: EmailServiceConfig, client: AxiosInstance}>} The merged configuration, with `allowPlaintextAuth` defaulted to `false` when unset, and the configured Axios instance.
+     */
+    async initialize(...args) {
+        const initialized = await super.initialize(...args);
+        initialized.config.allowPlaintextAuth =
+            initialized.config.allowPlaintextAuth ?? false;
+        return initialized;
+    }
+    /**
+     * @description Builds service config from the `comms.email` environment slice
+     * @returns A partial config when either an SMTP `host` or a Graph `token` is present, otherwise `undefined`
+     */
+    configFromEnvironment() {
+        const env = environment_js_1.CommsEnvironment.comms.email;
+        const host = (0, environmentValue_js_1.envString)(env?.host);
+        const token = (0, environmentValue_js_1.envString)(env?.token);
+        if (!host && !token)
+            return undefined;
+        const provider = (0, environmentValue_js_1.envString)(env.provider);
+        return {
+            provider: provider ?? (host ? "smtp" : "graph"),
+            host,
+            port: (0, environmentValue_js_1.envNumber)(env.port),
+            secure: (0, environmentValue_js_1.envBoolean)(env.secure),
+            username: (0, environmentValue_js_1.envString)(env.username),
+            password: (0, environmentValue_js_1.envString)(env.password),
+            allowPlaintextAuth: (0, environmentValue_js_1.envBoolean)(env.allowPlaintextAuth),
+            from: (0, environmentValue_js_1.envString)(env.from),
+            token,
+            graphBaseUrl: (0, environmentValue_js_1.envString)(env.graphBaseUrl),
+            timeout: (0, environmentValue_js_1.envNumber)(env.timeout),
+        };
+    }
+    /**
+     * @description Selects the delivery provider
+     * @summary Prefers an explicit `provider`, then infers `smtp` from a
+     * configured `host` and `graph` from a configured `token`.
+     * @param config - Resolved service config
+     * @returns The resolved provider
+     * @throws {InternalError} when neither an SMTP host nor a Graph token is configured
+     */
+    resolveProvider(config) {
+        if (config.provider)
+            return config.provider;
+        if (config.host)
+            return "smtp";
+        if (config.token)
+            return "graph";
+        throw new db_decorators_1.InternalError("Email requires either an SMTP host or a Microsoft Graph token");
+    }
+    /**
+     * @description Resolves the fallback sender address
+     * @summary Uses `from`, then `username`, then the `From` header override.
+     * @param config - Resolved service config
+     * @returns The resolved sender address
+     * @throws {InternalError} when no sender address can be resolved
+     */
+    resolveFrom(config) {
+        const from = config.from ?? config.username ?? config.headers?.["From"] ?? undefined;
+        if (!from)
+            throw new db_decorators_1.InternalError("Email requires a sender address");
+        return from;
+    }
+    /**
+     * @description Sends an email through the resolved provider
+     * @summary Builds the raw MIME message (honouring `input.from`, else the
+     * resolved config sender), then delivers via SMTP or Graph. SMTP config
+     * passes `allowPlaintextAuth` through unchanged, so the plaintext-AUTH
+     * opt-out is inherited from the service config.
+     * @param input - Message input (recipients, subject, text/html body, attachments)
+     * @returns The send result with the generated `Message-ID` and provider
+     * @throws {BadRequestError} when an address, attachment filename, or content type fails validation (via {@link buildEmail})
+     * @throws {InternalError} when the provider cannot be resolved, the SMTP host is missing, plaintext AUTH is refused, or SMTP delivery fails
+     */
+    async send(input) {
+        const config = this.config;
+        const provider = this.resolveProvider(config);
+        const from = input.from || this.resolveFrom(config);
+        const built = (0, mime_js_1.buildEmail)({ ...input, from });
+        if (provider === "graph") {
+            await this.sendViaGraph(built.raw, from);
+            return {
+                messageId: built.messageId,
+                from,
+                recipients: built.recipients,
+                provider,
+            };
+        }
+        if (!config.host) {
+            throw new db_decorators_1.InternalError("Email SMTP provider requires a host");
+        }
+        const client = new smtp_js_1.SmtpClient({
+            host: config.host,
+            port: config.port,
+            secure: config.secure,
+            username: config.username,
+            password: config.password,
+            timeout: config.timeout,
+            allowPlaintextAuth: config.allowPlaintextAuth,
+        });
+        try {
+            await client.connect();
+            await client.send(built.from, built.recipients, built.raw);
+            return {
+                messageId: built.messageId,
+                from,
+                recipients: built.recipients,
+                provider,
+            };
+        }
+        catch (error) {
+            if (error instanceof db_decorators_1.InternalError)
+                throw error;
+            throw new db_decorators_1.InternalError(`Email SMTP delivery failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        finally {
+            await client.close().catch(() => undefined);
+        }
+    }
+    /**
+     * @description Posts a raw MIME message to the Microsoft Graph `sendMail` endpoint
+     * @summary Sends the base64-encoded raw message to
+     * `/users/<from>/sendMail` (or `/me/sendMail` when no sender is resolved)
+     * with the configured `graphBaseUrl`/`baseUrl`.
+     * @param raw - Raw RFC 5322 message text
+     * @param from - Sender mailbox (UPN) for the Graph path
+     * @throws {Error} Graph error mapped through {@link httpError}
+     */
+    async sendViaGraph(raw, from) {
+        const config = this.config;
+        this.requireToken(config);
+        const baseUrl = config.graphBaseUrl ??
+            config.baseUrl ??
+            "https://graph.microsoft.com/v1.0";
+        const path = from
+            ? `/users/${encodeURIComponent(from)}/sendMail`
+            : "/me/sendMail";
+        try {
+            await this.client.post(`${baseUrl}${path}`, Buffer.from(raw, "utf8").toString("base64"), {
+                headers: { "Content-Type": "text/plain" },
+            });
+        }
+        catch (error) {
+            throw (0, index_js_1.httpError)("Microsoft Graph", "sendMail", error);
+        }
+    }
+    /**
+     * @description Lists messages from a Graph mailbox
+     * @summary Queries `<mailbox>/messages` with `$top`, an optional
+     * subject/since `$filter`, and `receivedDateTime desc` ordering. The mailbox
+     * is URL-encoded as a single path segment, quotes in the subject are escaped
+     * for the OData string literal, and `since` must be an ISO 8601 date.
+     * @param query - Inbox filter (mailbox, limit, since, subject)
+     * @returns The raw Graph message records
+     * @throws {BadRequestError} when `since` is not an ISO 8601 date
+     * @throws {InternalError} when no `token` is configured; Graph errors mapped through {@link httpError}
+     */
+    async listInbox(query = {}) {
+        const config = this.config;
+        this.requireToken(config);
+        const baseUrl = config.graphBaseUrl ??
+            config.baseUrl ??
+            "https://graph.microsoft.com/v1.0";
+        const mailbox = encodeURIComponent(query.mailbox ?? "me");
+        const filters = [
+            query.subject
+                ? `contains(subject,'${escapeODataString(query.subject)}')`
+                : undefined,
+            query.since
+                ? `receivedDateTime ge ${assertIsoDate(query.since)}`
+                : undefined,
+        ].filter(Boolean);
+        try {
+            const response = await this.client.get(`${baseUrl}/${mailbox}/messages`, {
+                params: {
+                    $top: query.limit ?? 25,
+                    $filter: filters.length ? filters.join(" and ") : undefined,
+                    $orderby: "receivedDateTime desc",
+                },
+            });
+            return response.data.value ?? [];
+        }
+        catch (error) {
+            throw (0, index_js_1.httpError)("Microsoft Graph", "list messages", error);
+        }
+    }
+    /**
+     * @description Lists messages directly over IMAP
+     * @summary Dynamically imports the optional `imapflow` package, connects to
+     * `host` (default port 993, implicit TLS), and fetches the newest messages
+     * from `INBOX`.
+     *
+     * R2 direct-library-wrap justification: IMAP is a stateful protocol
+     * (mailbox locks, sequence/UID state, IDLE) whose correct implementation is
+     * large and security-sensitive. `imapflow` is the maintained n8n-vetted
+     * client for exactly this surface, so wrapping it is deliberate; a local
+     * reimplementation would add risk without changing the node contract. The
+     * package stays optional so SMTP/Graph-only consumers do not install it.
+     * @param query - Inbox filter (limit only is honoured by IMAP)
+     * @returns The fetched IMAP message records
+     * @throws {InternalError} when `imapflow` is not installed, no `host` is configured, or the IMAP session fails
+     */
+    async listImapMessages(query = {}) {
+        let ImapFlow;
+        try {
+            const moduleName = "imapflow";
+            const imported = (await Promise.resolve(`${moduleName}`).then(s => __importStar(require(s))));
+            ImapFlow = imported.ImapFlow;
+            if (!ImapFlow)
+                throw new Error("imapflow did not export ImapFlow");
+        }
+        catch {
+            throw new db_decorators_1.InternalError("IMAP reads require the optional 'imapflow' package; install it to use this surface");
+        }
+        const config = this.config;
+        if (!config.host)
+            throw new db_decorators_1.InternalError("IMAP requires a host");
+        const client = new ImapFlow({
+            host: config.host,
+            port: config.port ?? 993,
+            secure: config.secure ?? true,
+            auth: {
+                user: config.username,
+                pass: config.password,
+            },
+        });
+        const messages = [];
+        await client.connect();
+        try {
+            const lock = await client.getMailboxLock("INBOX");
+            try {
+                const limit = query.limit ?? 25;
+                for await (const message of client.fetch(`${Math.max(1, limit)}:*`, { envelope: true, source: false }, { uid: false })) {
+                    messages.push(message);
+                    if (messages.length >= limit)
+                        break;
+                }
+            }
+            finally {
+                lock.release();
+            }
+        }
+        finally {
+            await client.logout().catch(() => undefined);
+        }
+        return messages;
+    }
+}
+exports.EmailService = EmailService;
+//# sourceMappingURL=EmailService.js.map
+//# sourceMappingURL=EmailService.cjs.map

package/lib/cjs/comms/email/EmailService.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"comms/email/EmailService.cjs","sourceRoot":"","sources":["comms/email/EmailService.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;;;;GAYG;AACH,2DAAyE;AACzE,wDAAuD;AACvD,4EAAuF;AACvF,2DAA0E;AAC1E,uCAAuC;AACvC,uCAAuC;AACvC;;;;;GAKG;AACH,MAAM,QAAQ,GAAG,qFAAqF,CAAC;AACvG;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAK;IACxB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,+BAAe,CAAC,qDAAqD,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAK;IAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AACD;;;;;;;;;GASG;AACH,MAAa,YAAa,SAAQ,yBAAc;IAC5C;QACI,KAAK,CAAC,GAAG,SAAS,CAAC,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;IAC/B,CAAC;IACD;;;OAGG;IACH,cAAc;QACV,OAAO,kCAAkC,CAAC;IAC9C,CAAC;IACD;;;;OAIG;IACH,WAAW,CAAC,MAAM;QACd,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI;QACpB,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;QACpD,WAAW,CAAC,MAAM,CAAC,kBAAkB;YACjC,WAAW,CAAC,MAAM,CAAC,kBAAkB,IAAI,KAAK,CAAC;QACnD,OAAO,WAAW,CAAC;IACvB,CAAC;IACD;;;OAGG;IACH,qBAAqB;QACjB,MAAM,GAAG,GAAG,iCAAgB,CAAC,KAAK,CAAC,KAAK,CAAC;QACzC,MAAM,IAAI,GAAG,IAAA,+BAAS,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,IAAA,+BAAS,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;YACf,OAAO,SAAS,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAA,+BAAS,EAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO;YACH,QAAQ,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/C,IAAI;YACJ,IAAI,EAAE,IAAA,+BAAS,EAAC,GAAG,CAAC,IAAI,CAAC;YACzB,MAAM,EAAE,IAAA,gCAAU,EAAC,GAAG,CAAC,MAAM,CAAC;YAC9B,QAAQ,EAAE,IAAA,+BAAS,EAAC,GAAG,CAAC,QAAQ,CAAC;YACjC,QAAQ,EAAE,IAAA,+BAAS,EAAC,GAAG,CAAC,QAAQ,CAAC;YACjC,kBAAkB,EAAE,IAAA,gCAAU,EAAC,GAAG,CAAC,kBAAkB,CAAC;YACtD,IAAI,EAAE,IAAA,+BAAS,EAAC,GAAG,CAAC,IAAI,CAAC;YACzB,KAAK;YACL,YAAY,EAAE,IAAA,+BAAS,EAAC,GAAG,CAAC,YAAY,CAAC;YACzC,OAAO,EAAE,IAAA,+BAAS,EAAC,GAAG,CAAC,OAAO,CAAC;SAClC,CAAC;IACN,CAAC;IACD;;;;;;;OAOG;IACH,eAAe,CAAC,MAAM;QAClB,IAAI,MAAM,CAAC,QAAQ;YACf,OAAO,MAAM,CAAC,QAAQ,CAAC;QAC3B,IAAI,MAAM,CAAC,IAAI;YACX,OAAO,MAAM,CAAC;QAClB,IAAI,MAAM,CAAC,KAAK;YACZ,OAAO,OAAO,CAAC;QACnB,MAAM,IAAI,6BAAa,CAAC,+DAA+D,CAAC,CAAC;IAC7F,CAAC;IACD;;;;;;OAMG;IACH,WAAW,CAAC,MAAM;QACd,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;QACrF,IAAI,CAAC,IAAI;YACL,MAAM,IAAI,6BAAa,CAAC,iCAAiC,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IAChB,CAAC;IACD;;;;;;;;;;OAUG;IACH,KAAK,CAAC,IAAI,CAAC,KAAK;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,IAAA,oBAAU,EAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzC,OAAO;gBACH,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,IAAI;gBACJ,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ;aACX,CAAC;QACN,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,6BAAa,CAAC,qCAAqC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,oBAAU,CAAC;YAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;SAChD,CAAC,CAAC;QACH,IAAI,CAAC;YACD,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3D,OAAO;gBACH,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,IAAI;gBACJ,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ;aACX,CAAC;QACN,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,IAAI,KAAK,YAAY,6BAAa;gBAC9B,MAAM,KAAK,CAAC;YAChB,MAAM,IAAI,6BAAa,CAAC,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrH,CAAC;gBACO,CAAC;YACL,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;IACL,CAAC;IACD;;;;;;;;OAQG;IACH,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY;YAC/B,MAAM,CAAC,OAAO;YACd,kCAAkC,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI;YACb,CAAC,CAAC,UAAU,kBAAkB,CAAC,IAAI,CAAC,WAAW;YAC/C,CAAC,CAAC,cAAc,CAAC;QACrB,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBACrF,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE;aAC5C,CAAC,CAAC;QACP,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAA,oBAAS,EAAC,iBAAiB,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAC1D,CAAC;IACL,CAAC;IACD;;;;;;;;;;OAUG;IACH,KAAK,CAAC,SAAS,CAAC,KAAK,GAAG,EAAE;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY;YAC/B,MAAM,CAAC,OAAO;YACd,kCAAkC,CAAC;QACvC,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG;YACZ,KAAK,CAAC,OAAO;gBACT,CAAC,CAAC,qBAAqB,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI;gBAC3D,CAAC,CAAC,SAAS;YACf,KAAK,CAAC,KAAK;gBACP,CAAC,CAAC,uBAAuB,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;gBACrD,CAAC,CAAC,SAAS;SAClB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,OAAO,WAAW,EAAE;gBACrE,MAAM,EAAE;oBACJ,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;oBACvB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC3D,QAAQ,EAAE,uBAAuB;iBACpC;aACJ,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACrC,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAA,oBAAS,EAAC,iBAAiB,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC;IACL,CAAC;IACD;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAK,GAAG,EAAE;QAC7B,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,UAAU,CAAC;YAC9B,MAAM,QAAQ,GAAG,CAAC,yBAAa,UAAU,uCAAC,CAAC,CAAC;YAC5C,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;YAC7B,IAAI,CAAC,QAAQ;gBACT,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,CAAC;YACH,MAAM,IAAI,6BAAa,CAAC,oFAAoF,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI;YACZ,MAAM,IAAI,6BAAa,CAAC,sBAAsB,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC;YACxB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,GAAG;YACxB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;YAC7B,IAAI,EAAE;gBACF,IAAI,EAAE,MAAM,CAAC,QAAQ;gBACrB,IAAI,EAAE,MAAM,CAAC,QAAQ;aACxB;SACJ,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAClD,IAAI,CAAC;gBACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChC,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;oBACrH,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACvB,IAAI,QAAQ,CAAC,MAAM,IAAI,KAAK;wBACxB,MAAM;gBACd,CAAC;YACL,CAAC;oBACO,CAAC;gBACL,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACL,CAAC;gBACO,CAAC;YACL,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;CACJ;AAtRD,oCAsRC;AACD,wCAAwC"}

package/lib/cjs/comms/email/index.cjs

@@ -0,0 +1,29 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * @module integrations/comms/email
+ * @summary Email service (SMTP + Microsoft Graph send, Graph/IMAP inbox reads).
+ * @description Re-exports the {@link EmailService} and its config/result
+ * types, the raw MIME builder, and the nodemailer-backed {@link SmtpClient}
+ * with its {@link SmtpConfig}
+ * (also available directly from the `./smtp` subpath).
+ */
+__exportStar(require("./EmailService.cjs"), exports);
+__exportStar(require("./mime.cjs"), exports);
+__exportStar(require("./smtp.cjs"), exports);
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.cjs.map

package/lib/cjs/comms/email/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"comms/email/index.cjs","sourceRoot":"","sources":["comms/email/index.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA;;;;;;;GAOG;AACH,oDAAkC;AAClC,4CAA0B;AAC1B,4CAA0B;AAC1B,iCAAiC"}

package/lib/cjs/comms/email/mime.cjs

@@ -0,0 +1,225 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertEmailAddress = assertEmailAddress;
+exports.encodeHeader = encodeHeader;
+exports.parseAddressList = parseAddressList;
+exports.buildEmail = buildEmail;
+/**
+ * @module integrations/comms/email/mime
+ * @summary RFC 5322/MIME message building and address handling for the Email service.
+ * @description Builds a complete raw MIME message from an
+ * {@link EmailMessageInput}: UTF-8 headers are RFC 2047 base64-word encoded
+ * ({@link encodeHeader}), recipient lists are comma-split and trimmed
+ * ({@link parseAddressList}), and the body becomes a
+ * `text/plain`/`text/html` `multipart/alternative` (when both are present),
+ * a single part otherwise — wrapped in `multipart/mixed` with base64
+ * attachments when any are supplied. Boundary markers and the `Message-ID`
+ * carry a random UUID per message.
+ *
+ * Every address, attachment filename, and content type is validated against
+ * conservative allowlists ({@link assertEmailAddress} and friends) before it is
+ * written into a header, so workflow input can never inject MIME headers or
+ * SMTP commands. All validation and structural failures (missing recipient,
+ * forbidden control characters, non-mailbox addresses, unsafe filenames or
+ * content types) throw decaf `BadRequestError`s.
+ */
+const node_crypto_1 = require("node:crypto");
+const db_decorators_1 = require("@decaf-ts/db-decorators");
+const ASCII_HEADER = /^[\x20-\x7E]*$/;
+/**
+ * Characters that must never appear in an address, attachment filename, or
+ * content type: CR/LF (header and SMTP-command injection), NUL, and any other
+ * C0/C1 control character.
+ */
+// eslint-disable-next-line no-control-regex -- matching control characters is the purpose of this allowlist
+const FORBIDDEN_CONTROL = /[\x00-\x1F\x7F-\x9F]/;
+/**
+ * Conservative mailbox allowlist: a dot-atom local part followed by a
+ * dot-separated domain. Display names are deliberately not accepted because
+ * the envelope (`MAIL FROM`/`RCPT TO`) and the MIME headers share the same
+ * validated value.
+ */
+const EMAIL_ADDRESS = /^[A-Za-z0-9.!#$%&'*+/=?^_`{|}~-]+@[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?(?:\.[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?)+$/;
+/**
+ * Allowlisted MIME content type: `type/subtype` plus optional
+ * `; parameter=value` pairs whose values are tokens or quoted strings without
+ * control characters, quotes, or backslashes.
+ */
+const CONTENT_TYPE = /^[A-Za-z0-9!#$&^_.+-]+\/[A-Za-z0-9!#$&^_.+-]+(?:\s*;\s*[A-Za-z0-9-]+=(?:"[^"\\\r\n]*"|[A-Za-z0-9!#$&^_.+-]+))*$/;
+/**
+ * Rejects any value carrying CR/LF, NUL, or another control character.
+ *
+ * @param value - Value about to be written into a header, SMTP command, or MIME part.
+ * @param field - Human-readable field name used in the error message.
+ * @throws {BadRequestError} when the value contains a forbidden control character.
+ */
+function rejectControlCharacters(value, field) {
+    if (FORBIDDEN_CONTROL.test(value)) {
+        throw new db_decorators_1.BadRequestError(`Email ${field} contains a forbidden control character`);
+    }
+}
+/**
+ * Validates a mailbox address against the allowlist and returns it trimmed.
+ *
+ * @param value - Candidate address.
+ * @param field - Human-readable field name used in the error message.
+ * @returns The trimmed, validated mailbox address.
+ * @throws {BadRequestError} when the address contains control characters or is not a bare mailbox.
+ */
+function assertEmailAddress(value, field = "address") {
+    rejectControlCharacters(value, field);
+    const address = value.trim();
+    if (!EMAIL_ADDRESS.test(address)) {
+        throw new db_decorators_1.BadRequestError(`Email ${field} is not a valid mailbox address`);
+    }
+    return address;
+}
+/**
+ * Validates an attachment filename for safe inclusion in a quoted MIME header.
+ *
+ * @param value - Candidate filename.
+ * @throws {BadRequestError} when the filename carries control characters, a quote, or a backslash.
+ */
+function assertAttachmentFilename(value) {
+    rejectControlCharacters(value, "attachment filename");
+    if (/["\\]/.test(value)) {
+        throw new db_decorators_1.BadRequestError("Email attachment filename contains a forbidden character");
+    }
+}
+/**
+ * Validates an attachment content type against the MIME allowlist.
+ *
+ * @param value - Declared content type.
+ * @throws {BadRequestError} when the value is not an allowlisted `type/subtype` with safe parameters.
+ */
+function assertContentType(value) {
+    rejectControlCharacters(value, "attachment content type");
+    if (!CONTENT_TYPE.test(value.trim())) {
+        throw new db_decorators_1.BadRequestError("Email attachment content type is not an allowed MIME type");
+    }
+}
+/**
+ * @description Encodes a MIME header value safely
+ * @summary Pure-ASCII values pass through; anything else becomes an RFC 2047
+ * `=?UTF-8?B?...?=` encoded word.
+ * @param value - Raw header value
+ * @returns The header value safe for raw message transport
+ */
+function encodeHeader(value) {
+    if (ASCII_HEADER.test(value))
+        return value;
+    return `=?UTF-8?B?${Buffer.from(value, "utf8").toString("base64")}?=`;
+}
+/**
+ * @description Normalizes a recipient input into an allowlisted address list
+ * @summary Splits comma-separated strings, trims entries, drops empties, and
+ * validates every remaining entry as a bare mailbox address. Values carrying
+ * CR/LF, NUL, or other control characters are rejected outright so workflow
+ * input can never inject MIME headers or SMTP envelope commands.
+ * @param value - Single address, comma-separated string, array, or `undefined`
+ * @returns The trimmed, validated list of addresses
+ * @throws {BadRequestError} when an entry is not a valid mailbox address
+ */
+function parseAddressList(value) {
+    if (!value)
+        return [];
+    const values = Array.isArray(value) ? value : [value];
+    return values
+        .flatMap((entry) => entry.split(","))
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0)
+        .map((entry) => assertEmailAddress(entry, "recipient"));
+}
+function base64Lines(value) {
+    return Buffer.from(value, "utf8")
+        .toString("base64")
+        .replace(/(.{76})/g, "$1\r\n");
+}
+function textPart(contentType, value) {
+    return `Content-Type: ${contentType}; charset=utf-8\r\nContent-Transfer-Encoding: base64\r\n\r\n${base64Lines(value)}`;
+}
+function bodyEntity(input) {
+    if (input.text !== undefined && input.html !== undefined) {
+        const boundary = `alt-${(0, node_crypto_1.randomUUID)()}`;
+        return [
+            `Content-Type: multipart/alternative; boundary="${boundary}"`,
+            "",
+            `--${boundary}`,
+            textPart("text/plain", input.text),
+            `--${boundary}`,
+            textPart("text/html", input.html),
+            `--${boundary}--`,
+        ].join("\r\n");
+    }
+    if (input.html !== undefined) {
+        return textPart("text/html", input.html);
+    }
+    return textPart("text/plain", input.text ?? "");
+}
+function attachmentPart(attachment) {
+    const content = attachment.encoding === "utf8"
+        ? base64Lines(attachment.content)
+        : attachment.content.replace(/\r?\n/g, "");
+    const contentType = attachment.contentType ?? "application/octet-stream";
+    assertAttachmentFilename(attachment.filename);
+    assertContentType(contentType);
+    return [
+        `Content-Type: ${contentType}; name="${encodeHeader(attachment.filename)}"`,
+        "Content-Transfer-Encoding: base64",
+        `Content-Disposition: attachment; filename="${encodeHeader(attachment.filename)}"`,
+        "",
+        content,
+    ].join("\r\n");
+}
+function entity(input) {
+    const attachments = input.attachments ?? [];
+    if (attachments.length === 0)
+        return bodyEntity(input);
+    const boundary = `mix-${(0, node_crypto_1.randomUUID)()}`;
+    const parts = [bodyEntity(input), ...attachments.map(attachmentPart)];
+    return `Content-Type: multipart/mixed; boundary="${boundary}"\r\n\r\n${parts
+        .map((part) => `--${boundary}\r\n${part}`)
+        .join("\r\n")}\r\n--${boundary}--`;
+}
+/**
+ * @description Builds the complete raw MIME message
+ * @summary Generates the `Message-ID`, resolves recipients (throwing when
+ * none remain), emits the standard headers, and assembles the body entity
+ * (alternative text/HTML parts, plus attachments when present).
+ * @param input - Message input
+ * @returns The built message with raw text, sender, recipients, and `Message-ID`
+ * @throws {BadRequestError} when the message has no recipient or any address,
+ *   attachment filename, or content type fails validation
+ */
+function buildEmail(input) {
+    const messageId = `<${(0, node_crypto_1.randomUUID)()}@as-graph>`;
+    const from = assertEmailAddress(input.from, "sender");
+    const to = parseAddressList(input.to);
+    const cc = parseAddressList(input.cc);
+    const bcc = parseAddressList(input.bcc);
+    const recipients = [...to, ...cc, ...bcc];
+    if (recipients.length === 0) {
+        throw new db_decorators_1.BadRequestError("Email message requires at least one recipient");
+    }
+    const replyTo = input.replyTo
+        ? assertEmailAddress(input.replyTo, "reply-to")
+        : undefined;
+    const headers = [
+        `From: ${from}`,
+        `To: ${to.join(", ")}`,
+        ...(cc.length ? [`Cc: ${cc.join(", ")}`] : []),
+        `Subject: ${encodeHeader(input.subject)}`,
+        ...(replyTo ? [`Reply-To: ${replyTo}`] : []),
+        `Date: ${new Date().toUTCString()}`,
+        `Message-ID: ${messageId}`,
+        "MIME-Version: 1.0",
+    ].join("\r\n");
+    return {
+        raw: `${headers}\r\n${entity(input)}`,
+        from,
+        recipients,
+        messageId,
+    };
+}
+//# sourceMappingURL=mime.js.map
+//# sourceMappingURL=mime.cjs.map

package/lib/cjs/comms/email/mime.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"comms/email/mime.cjs","sourceRoot":"","sources":["comms/email/mime.js"],"names":[],"mappings":";;AA8DA,gDAOC;AAgCD,oCAIC;AAWD,4CASC;AA8DD,gCA6BC;AAxND;;;;;;;;;;;;;;;;;;GAkBG;AACH,6CAAyC;AACzC,2DAA0D;AAC1D,MAAM,YAAY,GAAG,gBAAgB,CAAC;AACtC;;;;GAIG;AACH,4GAA4G;AAC5G,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACjD;;;;;GAKG;AACH,MAAM,aAAa,GAAG,sIAAsI,CAAC;AAC7J;;;;GAIG;AACH,MAAM,YAAY,GAAG,iHAAiH,CAAC;AACvI;;;;;;GAMG;AACH,SAAS,uBAAuB,CAAC,KAAK,EAAE,KAAK;IACzC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,+BAAe,CAAC,SAAS,KAAK,yCAAyC,CAAC,CAAC;IACvF,CAAC;AACL,CAAC;AACD;;;;;;;GAOG;AACH,SAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS;IACvD,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,+BAAe,CAAC,SAAS,KAAK,iCAAiC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AACD;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,KAAK;IACnC,uBAAuB,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,+BAAe,CAAC,0DAA0D,CAAC,CAAC;IAC1F,CAAC;AACL,CAAC;AACD;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAK;IAC5B,uBAAuB,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,+BAAe,CAAC,2DAA2D,CAAC,CAAC;IAC3F,CAAC;AACL,CAAC;AACD;;;;;;GAMG;AACH,SAAgB,YAAY,CAAC,KAAK;IAC9B,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QACxB,OAAO,KAAK,CAAC;IACjB,OAAO,aAAa,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;AAC1E,CAAC;AACD;;;;;;;;;GASG;AACH,SAAgB,gBAAgB,CAAC,KAAK;IAClC,IAAI,CAAC,KAAK;QACN,OAAO,EAAE,CAAC;IACd,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACtD,OAAO,MAAM;SACR,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SACpC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;AAChE,CAAC;AACD,SAAS,WAAW,CAAC,KAAK;IACtB,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;SAC5B,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AACD,SAAS,QAAQ,CAAC,WAAW,EAAE,KAAK;IAChC,OAAO,iBAAiB,WAAW,+DAA+D,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;AAC3H,CAAC;AACD,SAAS,UAAU,CAAC,KAAK;IACrB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,OAAO,IAAA,wBAAU,GAAE,EAAE,CAAC;QACvC,OAAO;YACH,kDAAkD,QAAQ,GAAG;YAC7D,EAAE;YACF,KAAK,QAAQ,EAAE;YACf,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC;YAClC,KAAK,QAAQ,EAAE;YACf,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC;YACjC,KAAK,QAAQ,IAAI;SACpB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC;AACD,SAAS,cAAc,CAAC,UAAU;IAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,KAAK,MAAM;QAC1C,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC;QACjC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,IAAI,0BAA0B,CAAC;IACzE,wBAAwB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9C,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC/B,OAAO;QACH,iBAAiB,WAAW,WAAW,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG;QAC3E,mCAAmC;QACnC,8CAA8C,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG;QAClF,EAAE;QACF,OAAO;KACV,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACnB,CAAC;AACD,SAAS,MAAM,CAAC,KAAK;IACjB,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;IAC5C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,OAAO,IAAA,wBAAU,GAAE,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IACtE,OAAO,4CAA4C,QAAQ,YAAY,KAAK;SACvE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,QAAQ,OAAO,IAAI,EAAE,CAAC;SACzC,IAAI,CAAC,MAAM,CAAC,SAAS,QAAQ,IAAI,CAAC;AAC3C,CAAC;AACD;;;;;;;;;GASG;AACH,SAAgB,UAAU,CAAC,KAAK;IAC5B,MAAM,SAAS,GAAG,IAAI,IAAA,wBAAU,GAAE,YAAY,CAAC;IAC/C,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC;IAC1C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,+BAAe,CAAC,+CAA+C,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO;QACzB,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,OAAO,GAAG;QACZ,SAAS,IAAI,EAAE;QACf,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACtB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,YAAY,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;QACzC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,SAAS,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;QACnC,eAAe,SAAS,EAAE;QAC1B,mBAAmB;KACtB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,OAAO;QACH,GAAG,EAAE,GAAG,OAAO,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE;QACrC,IAAI;QACJ,UAAU;QACV,SAAS;KACZ,CAAC;AACN,CAAC;AACD,gCAAgC"}