@futdevpro/nts-dynamo 1.15.232 → 1.15.240

package/build/_modules/privacy-lifecycle/privacy-rights-custody.mongo-store.js

@@ -0,0 +1,384 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DyNTS_PrivacyRightsCustody_MongoStore = void 0;
+const node_crypto_1 = require("node:crypto");
+const node_util_1 = require("node:util");
+const mongoose_1 = require("mongoose");
+const account_challenge_purpose_type_enum_1 = require("../account-security/_enums/account-challenge-purpose.type-enum");
+const privacy_request_state_type_enum_1 = require("./_enums/privacy-request-state.type-enum");
+const privacy_request_type_enum_1 = require("./_enums/privacy-request.type-enum");
+const privacy_rights_input_control_service_1 = require("./privacy-rights-input.control-service");
+/**
+ * Atomic confidential rights-input custody. Call ensureReady during bootstrap, then use the SAME strong
+ * transaction for request/subject locking, challenge consumption and encrypted creation. No nested transaction.
+ * Injected callbacks are trusted composition, not browser authority. Never catch a failure and commit anyway.
+ */
+class DyNTS_PrivacyRightsCustody_MongoStore {
+    settings;
+    schemas;
+    ownedErrors = new WeakSet();
+    isReady = false;
+    /** Captures explicit lifetime, policy history and purpose-separated encryption without reading secrets. */
+    constructor(settings) {
+        try {
+            if (!settings?.connection || typeof settings.connection.startSession !== 'function'
+                || !this.positive(settings.maxOperationTimeMs, 2_147_483_647)
+                || !this.positive(settings.retentionMs, 2_592_000_000)
+                || !Array.isArray(settings.policies) || !this.positive(settings.policies.length, 64)
+                || typeof settings.cipher?.seal !== 'function' || typeof settings.cipher?.open !== 'function'
+                || typeof settings.lockRequest !== 'function' || typeof settings.consumeChallenge !== 'function'
+                || typeof settings.acceptRequest !== 'function'
+                || (settings.verifyRequestIdentity !== undefined && typeof settings.verifyRequestIdentity !== 'function')) {
+                throw new Error();
+            }
+            const schemas = new Map();
+            for (const policy of settings.policies) {
+                if (schemas.has(policy.policyVersion)) {
+                    throw new Error();
+                }
+                schemas.set(policy.policyVersion, new privacy_rights_input_control_service_1.DyNTS_PrivacyRightsInput_ControlService(policy));
+            }
+            if (!schemas.has(settings.currentPolicyVersion)) {
+                throw new Error();
+            }
+            this.settings = Object.freeze({ ...settings });
+            this.schemas = schemas;
+        }
+        catch {
+            throw this.error('SETTINGS_INVALID');
+        }
+    }
+    /** Creates a strict collection and unique challenge binding outside all business transactions. */
+    async ensureReady() {
+        if (this.isReady) {
+            return;
+        }
+        try {
+            try {
+                await this.settings.connection.db.createCollection('dynts_privacy_rights_inputs', {
+                    validator: this.validator(), validationLevel: 'strict', validationAction: 'error',
+                    maxTimeMS: this.settings.maxOperationTimeMs,
+                });
+            }
+            catch (error) {
+                if (!(error instanceof mongoose_1.mongo.MongoServerError) || error.code !== 48) {
+                    throw error;
+                }
+            }
+            const information = await this.settings.connection.db.listCollections({ name: 'dynts_privacy_rights_inputs' }, { nameOnly: false, maxTimeMS: this.settings.maxOperationTimeMs }).next();
+            if (!(0, node_util_1.isDeepStrictEqual)(information?.options?.validator, this.validator())
+                || information?.options?.validationLevel !== 'strict' || information?.options?.validationAction !== 'error') {
+                throw this.error('SCHEMA_MIGRATION_REQUIRED');
+            }
+            await this.collection().createIndex({ challengeId: 1 }, {
+                unique: true, name: 'uq_dynts_rights_challenge', maxTimeMS: this.settings.maxOperationTimeMs,
+            });
+            this.isReady = true;
+        }
+        catch (error) {
+            if (error instanceof Error && this.ownedErrors.has(error)) {
+                throw error;
+            }
+            throw this.error('NOT_READY');
+        }
+    }
+    /** Commits with the caller's transaction; replay requires the same credential and identical normalized input. */
+    async intake(set, session) {
+        return this.execute(session, async () => {
+            const authority = this.authority(set?.authority);
+            if (typeof set.token !== 'string' || !/^[A-Za-z0-9_-]{43,512}$/u.test(set.token)) {
+                throw this.error('CHALLENGE_INVALID');
+            }
+            const request = await this.lockRequest(authority, session);
+            const existing = await this.collection().findOne({ _id: this.key(authority) }, this.options(session));
+            const now = await this.databaseTime();
+            const credentialHash = (0, node_crypto_1.createHash)('sha256').update(set.token).digest('hex');
+            if (Date.parse(request.deadlineAt) <= now.getTime()) {
+                throw this.error('REQUEST_EXPIRED');
+            }
+            if (existing) {
+                this.assertRecord(existing, authority, now);
+                if (existing.credentialHash !== credentialHash || existing.requestType !== request.type) {
+                    throw this.error('REPLAY_CONFLICT');
+                }
+                const parsed = this.parse(set.input, existing);
+                const original = this.open(existing);
+                if (JSON.stringify(parsed) !== JSON.stringify(original)) {
+                    throw this.error('REPLAY_CONFLICT');
+                }
+                return this.receipt(existing, false);
+            }
+            const needsIdentityVerification = request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.received;
+            if ((needsIdentityVerification
+                ? !this.settings.verifyRequestIdentity || !!request.identityVerifiedAt
+                : request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.identityVerified || !request.identityVerifiedAt)
+                || !!request.executionStartedAt || request.revision > Number.MAX_SAFE_INTEGER
+                - (needsIdentityVerification ? 2 : 1)) {
+                throw this.error('REQUEST_STATE_INVALID');
+            }
+            const policyVersion = typeof set.input === 'object' && set.input !== null
+                ? Object.getOwnPropertyDescriptor(set.input, 'policyVersion')?.value : undefined;
+            if (typeof policyVersion !== 'string' || policyVersion !== this.settings.currentPolicyVersion) {
+                throw this.error('INPUT_INVALID');
+            }
+            const inputContext = {
+                contractVersion: 'dynts-privacy-rights-custody/1', ...authority, inputId: (0, node_crypto_1.randomUUID)(),
+                requestType: request.type, requestRevision: request.revision, policyVersion: policyVersion,
+                challengeId: '', createdAt: now.toISOString(),
+                expiresAt: new Date(Math.min(now.getTime() + this.settings.retentionMs, Date.parse(request.deadlineAt))).toISOString(),
+            };
+            const parsed = this.parse(set.input, inputContext);
+            const purpose = this.purpose(request.type);
+            const consumed = await this.settings.consumeChallenge({
+                token: set.token, subjectId: authority.subjectId, purpose: purpose, session: session, now: now,
+            });
+            if (!consumed || !this.code(consumed.challengeId) || consumed.subjectId !== authority.subjectId
+                || consumed.purpose !== purpose) {
+                throw this.error('CHALLENGE_INVALID');
+            }
+            const verified = needsIdentityVerification
+                ? await this.verifyIdentity(request, {
+                    authority: authority, expectedRevision: request.revision, challengeId: consumed.challengeId,
+                    verifiedAt: now.toISOString(), session: session,
+                })
+                : request;
+            const context = Object.freeze({
+                ...inputContext, challengeId: consumed.challengeId,
+            });
+            const plaintext = JSON.stringify(parsed);
+            const sealed = this.settings.cipher.seal(plaintext, context);
+            if (!sealed || !this.code(sealed.keyId) || typeof sealed.ciphertext !== 'string'
+                || !sealed.ciphertext || sealed.ciphertext.length > 131_072 || sealed.ciphertext === plaintext) {
+                throw this.error('ENCRYPTION_FAILED');
+            }
+            const record = {
+                ...context, _id: this.key(authority), credentialHash: credentialHash,
+                keyId: sealed.keyId, ciphertext: sealed.ciphertext,
+            };
+            // Authenticate the actual encryption result before durable storage. Never persist a plaintext checksum.
+            if (JSON.stringify(this.open(record)) !== plaintext) {
+                throw this.error('ENCRYPTION_FAILED');
+            }
+            await this.collection().insertOne(record, this.options(session));
+            const accepted = await this.settings.acceptRequest({
+                authority: authority, expectedRevision: verified.revision, acceptedAt: context.createdAt, session: session,
+            });
+            if (accepted?.requestId !== authority.requestId || accepted.subjectId !== authority.subjectId
+                || accepted.organizationId !== authority.organizationId || accepted.type !== request.type
+                || accepted.idempotencyHash !== verified.idempotencyHash || accepted.createdAt !== verified.createdAt
+                || accepted.deadlineAt !== verified.deadlineAt
+                || accepted.revision !== verified.revision + 1 || accepted.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.scoped
+                || accepted.scopedAt !== context.createdAt || accepted.identityVerifiedAt !== verified.identityVerifiedAt
+                || !!accepted.executionStartedAt || !!accepted.cancelledAt) {
+                throw this.error('ACCEPTANCE_CONFLICT');
+            }
+            return this.receipt(record, true);
+        });
+    }
+    /** Execution-only callback; no plaintext read/list/download method or arbitrary callback return value. */
+    async withExecutionInput(set, session) {
+        await this.execute(session, async () => {
+            const authority = this.authority(set?.authority);
+            const request = await this.lockRequest(authority, session);
+            if (request.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.executing || typeof set.task !== 'function') {
+                throw this.error('EXECUTION_DENIED');
+            }
+            const record = await this.collection().findOne({ _id: this.key(authority) }, this.options(session));
+            const now = await this.databaseTime();
+            this.assertRecord(record, authority, now);
+            if (record.requestType !== request.type || Date.parse(request.deadlineAt) <= now.getTime()) {
+                throw this.error('EXECUTION_DENIED');
+            }
+            await set.task(this.open(record), session);
+        });
+    }
+    /** Erases ciphertext and grant-binding data only after expiry or terminal lifecycle, then proves no residue. */
+    async eraseInput(authorityValue, session) {
+        return this.execute(session, async () => {
+            const authority = this.authority(authorityValue);
+            // Cleanup must also support cancelled/rejected requests, unlike intake and execution admission.
+            const request = await this.settings.lockRequest(authority, session);
+            if (request?.requestId !== authority.requestId || request.subjectId !== authority.subjectId
+                || request.organizationId !== authority.organizationId) {
+                throw this.error('AUTHORITY_INVALID');
+            }
+            const record = await this.collection().findOne({ _id: this.key(authority) }, this.options(session));
+            if (!record) {
+                return 0;
+            }
+            const terminal = [privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.completed, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.cancelled,
+                privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.rejectedWithReason, privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.failedTerminal]
+                .includes(request.state);
+            const now = await this.databaseTime();
+            if (!terminal && !(Date.parse(record.expiresAt) <= now.getTime())) {
+                throw this.error('ERASURE_NOT_ELIGIBLE');
+            }
+            const removed = await this.collection().deleteOne({
+                _id: record._id, inputId: record.inputId,
+            }, this.options(session));
+            if (removed.deletedCount !== 1 || await this.collection().findOne({ _id: record._id }, this.options(session))) {
+                throw this.error('ERASURE_NOT_VERIFIED');
+            }
+            return 1;
+        });
+    }
+    /** Binds the one freshly consumed grant to received -> identityVerified without changing the approved preview. */
+    async verifyIdentity(request, set) {
+        const verified = await this.settings.verifyRequestIdentity(set);
+        const authority = set.authority;
+        if (verified?.requestId !== authority.requestId || verified.subjectId !== authority.subjectId
+            || verified.organizationId !== authority.organizationId || verified.type !== request.type
+            || verified.idempotencyHash !== request.idempotencyHash || verified.createdAt !== request.createdAt
+            || verified.deadlineAt !== request.deadlineAt || verified.revision !== request.revision + 1
+            || verified.state !== privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.identityVerified
+            || verified.identityVerifiedAt !== set.verifiedAt
+            || !!verified.scopedAt || !!verified.plannedAt || !!verified.executionStartedAt || !!verified.verifyingStartedAt
+            || !!verified.completedAt || !!verified.cancelledAt) {
+            throw this.error('IDENTITY_VERIFICATION_CONFLICT');
+        }
+        return verified;
+    }
+    async lockRequest(authority, session) {
+        const request = await this.settings.lockRequest(authority, session);
+        if (request?.requestId !== authority.requestId || request.subjectId !== authority.subjectId
+            || request.organizationId !== authority.organizationId || !Number.isSafeInteger(request.revision)
+            || request.revision < 0 || !Number.isFinite(Date.parse(request.deadlineAt))) {
+            throw this.error('AUTHORITY_INVALID');
+        }
+        this.purpose(request.type);
+        if (request.cancelledAt || request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.cancelled
+            || request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.failedTerminal
+            || request.state === privacy_request_state_type_enum_1.DyNTS_PrivacyRequestState_Type.rejectedWithReason) {
+            throw this.error('REQUEST_STATE_INVALID');
+        }
+        return request;
+    }
+    parse(value, context) {
+        const schema = this.schemas.get(context.policyVersion);
+        if (!schema) {
+            throw this.error('POLICY_UNAVAILABLE');
+        }
+        const type = Object.values(privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type)
+            .find((entry) => entry === context.requestType);
+        return schema.parse(value, { requestId: context.requestId, type: type, revision: context.requestRevision });
+    }
+    open(record) {
+        const plaintext = this.settings.cipher.open({ keyId: record.keyId, ciphertext: record.ciphertext }, this.context(record));
+        if (typeof plaintext !== 'string' || Buffer.byteLength(plaintext, 'utf8') > 65_536) {
+            throw this.error('CIPHERTEXT_INVALID');
+        }
+        return this.parse(JSON.parse(plaintext), record);
+    }
+    context(record) {
+        return Object.freeze({
+            contractVersion: record.contractVersion, inputId: record.inputId, requestId: record.requestId,
+            subjectId: record.subjectId, organizationId: record.organizationId, requestType: record.requestType,
+            requestRevision: record.requestRevision, policyVersion: record.policyVersion, challengeId: record.challengeId,
+            createdAt: record.createdAt, expiresAt: record.expiresAt,
+        });
+    }
+    assertRecord(record, authority, now) {
+        if (record?._id !== this.key(authority) || record.requestId !== authority.requestId
+            || record.subjectId !== authority.subjectId || record.organizationId !== authority.organizationId
+            || record.contractVersion !== 'dynts-privacy-rights-custody/1' || !this.code(record.inputId)
+            || !Number.isFinite(Date.parse(record.expiresAt)) || Date.parse(record.expiresAt) <= now.getTime()) {
+            throw this.error('INPUT_UNAVAILABLE');
+        }
+    }
+    authority(value) {
+        const descriptors = Object.getOwnPropertyDescriptors(value);
+        const requestId = descriptors.requestId?.value;
+        const subjectId = descriptors.subjectId?.value;
+        const organizationId = descriptors.organizationId?.value;
+        if (Reflect.ownKeys(value).length !== 3 || !this.code(requestId)
+            || !this.code(subjectId) || !this.code(organizationId)) {
+            throw this.error('AUTHORITY_INVALID');
+        }
+        return Object.freeze({ requestId: requestId, subjectId: subjectId, organizationId: organizationId });
+    }
+    async databaseTime() {
+        // hello is not legal inside a transaction. This bounded same-server clock read carries no session or payload.
+        const result = await this.settings.connection.db.command({ hello: 1, maxTimeMS: this.settings.maxOperationTimeMs }, { timeoutMS: this.settings.maxOperationTimeMs });
+        const now = result.localTime;
+        if (!(now instanceof Date) || !Number.isFinite(now.getTime())) {
+            throw this.error('CLOCK_UNAVAILABLE');
+        }
+        return now;
+    }
+    async execute(session, task) {
+        const concern = session?.transaction?.options?.readConcern;
+        if (!this.isReady || !session?.inTransaction() || session.transaction.options.writeConcern?.w !== 'majority'
+            || (typeof concern === 'string' ? concern : concern?.level) !== 'snapshot') {
+            throw this.error('OWNING_TRANSACTION_REQUIRED');
+        }
+        try {
+            // The native driver validates session ownership before dispatch. Empty _id is excluded by our strict schema;
+            // this indexed, content-free read verifies the real connection/session pair BEFORE any trusted callback.
+            await this.collection().findOne({ _id: '' }, this.options(session));
+            return await task();
+        }
+        catch (error) {
+            // Preserve only the driver's retry label, never the message, command or input in its error.
+            if (error instanceof mongoose_1.mongo.MongoError && error.hasErrorLabel('TransientTransactionError')) {
+                const retryable = new mongoose_1.mongo.MongoError('DyNTS|PRIVACY_RIGHTS_CUSTODY|TRANSACTION_FAILED');
+                retryable.addErrorLabel('TransientTransactionError');
+                throw retryable;
+            }
+            if (error instanceof Error && this.ownedErrors.has(error)) {
+                throw error;
+            }
+            throw this.error('INTAKE_OR_EXECUTION_FAILED');
+        }
+    }
+    purpose(type) {
+        switch (type) {
+            case privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.rectification: return account_challenge_purpose_type_enum_1.DyNTS_AccountChallengePurpose_Type.privacyRectification;
+            case privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.restriction: return account_challenge_purpose_type_enum_1.DyNTS_AccountChallengePurpose_Type.privacyRestriction;
+            case privacy_request_type_enum_1.DyNTS_PrivacyRequest_Type.objection: return account_challenge_purpose_type_enum_1.DyNTS_AccountChallengePurpose_Type.privacyObjection;
+            default: throw this.error('REQUEST_TYPE_INVALID');
+        }
+    }
+    receipt(record, created) {
+        return Object.freeze({ contractVersion: 'dynts-privacy-rights-receipt/1', inputId: record.inputId,
+            requestId: record.requestId, created: created, expiresAt: record.expiresAt });
+    }
+    key(authority) {
+        return (0, node_crypto_1.createHash)('sha256').update(JSON.stringify([
+            'dynts-privacy-rights-custody/1', authority.requestId, authority.subjectId, authority.organizationId,
+        ])).digest('hex');
+    }
+    positive(value, maximum) {
+        return Number.isSafeInteger(value) && Number(value) > 0 && Number(value) <= maximum;
+    }
+    code(value) {
+        return typeof value === 'string' && /^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$/u.test(value);
+    }
+    options(session) {
+        return { session: session, maxTimeMS: this.settings.maxOperationTimeMs };
+    }
+    collection() {
+        return this.settings.connection.db.collection('dynts_privacy_rights_inputs');
+    }
+    error(code) {
+        const error = new Error(`DyNTS|PRIVACY_RIGHTS_CUSTODY|${code}`);
+        this.ownedErrors.add(error);
+        return error;
+    }
+    validator() {
+        const code = { bsonType: 'string', pattern: '^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$' };
+        const properties = {
+            _id: { bsonType: 'string', pattern: '^[a-f0-9]{64}$' },
+            contractVersion: { enum: ['dynts-privacy-rights-custody/1'] },
+            inputId: code, requestId: code, subjectId: code, organizationId: code, policyVersion: code, challengeId: code,
+            requestType: { enum: ['rectification', 'restriction', 'objection'] },
+            requestRevision: { bsonType: ['int', 'long', 'double'], minimum: 0, maximum: Number.MAX_SAFE_INTEGER },
+            createdAt: { bsonType: 'string', maxLength: 24 }, expiresAt: { bsonType: 'string', maxLength: 24 },
+            credentialHash: { bsonType: 'string', pattern: '^[a-f0-9]{64}$' },
+            keyId: code, ciphertext: { bsonType: 'string', minLength: 1, maxLength: 131_072 },
+        };
+        return { $jsonSchema: { bsonType: 'object', additionalProperties: false,
+                required: Object.keys(properties), properties: properties } };
+    }
+}
+exports.DyNTS_PrivacyRightsCustody_MongoStore = DyNTS_PrivacyRightsCustody_MongoStore;
+//# sourceMappingURL=privacy-rights-custody.mongo-store.js.map

package/build/_modules/privacy-lifecycle/privacy-rights-custody.mongo-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-rights-custody.mongo-store.js","sourceRoot":"","sources":["../../../src/_modules/privacy-lifecycle/privacy-rights-custody.mongo-store.ts"],"names":[],"mappings":";;;AAAA,6CAAqD;AACrD,yCAA8C;AAE9C,uCAAgD;AAEhD,wHAAoH;AAEpH,8FAA0F;AAC1F,kFAA+E;AAW/E,iGAAiG;AAEjG;;;;GAIG;AACH,MAAa,qCAAqC;IAC/B,QAAQ,CAA+C;IACvD,OAAO,CAA+D;IACtE,WAAW,GAAmB,IAAI,OAAO,EAAE,CAAC;IACrD,OAAO,GAAY,KAAK,CAAC;IAEjC,2GAA2G;IAC3G,YAAY,QAAsD;QAChE,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,OAAO,QAAQ,CAAC,UAAU,CAAC,YAAY,KAAK,UAAU;mBAC9E,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,aAAa,CAAC;mBAC1D,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;mBACnD,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;mBACjF,OAAO,QAAQ,CAAC,MAAM,EAAE,IAAI,KAAK,UAAU,IAAI,OAAO,QAAQ,CAAC,MAAM,EAAE,IAAI,KAAK,UAAU;mBAC1F,OAAO,QAAQ,CAAC,WAAW,KAAK,UAAU,IAAI,OAAO,QAAQ,CAAC,gBAAgB,KAAK,UAAU;mBAC7F,OAAO,QAAQ,CAAC,aAAa,KAAK,UAAU;mBAC5C,CAAC,QAAQ,CAAC,qBAAqB,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,qBAAqB,KAAK,UAAU,CAAC,EAAE,CAAC;gBAC5G,MAAM,IAAI,KAAK,EAAE,CAAC;YACpB,CAAC;YACD,MAAM,OAAO,GAAyD,IAAI,GAAG,EAAE,CAAC;YAEhF,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACvC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;oBACtC,MAAM,IAAI,KAAK,EAAE,CAAC;gBACpB,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,8EAAuC,CAAC,MAAM,CAAC,CAAC,CAAC;YACzF,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,EAAE,CAAC;YACpB,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,kGAAkG;IAC3F,KAAK,CAAC,WAAW;QACtB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,gBAAgB,CAAC,6BAA6B,EAAE;oBAChF,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO;oBACjF,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB;iBAC5C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,KAAK,YAAY,gBAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;oBACpE,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YACD,MAAM,WAAW,GAAgC,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,eAAe,CAChG,EAAE,IAAI,EAAE,6BAA6B,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAC1G,CAAC,IAAI,EAAE,CAAC;YAET,IAAI,CAAC,IAAA,6BAAiB,EAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;mBACpE,WAAW,EAAE,OAAO,EAAE,eAAe,KAAK,QAAQ,IAAI,WAAW,EAAE,OAAO,EAAE,gBAAgB,KAAK,OAAO,EAAE,CAAC;gBAC9G,MAAM,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE;gBACtD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,2BAA2B,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB;aAC7F,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,KAAK,YAAY,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1D,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,iHAAiH;IAC1G,KAAK,CAAC,MAAM,CAAC,GAEnB,EAAE,OAAsB;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,IAAmD,EAAE;YACrF,MAAM,SAAS,GAA2C,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAEzF,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjF,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,OAAO,GAAyC,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACjG,MAAM,QAAQ,GAAsD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CACjG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CACpD,CAAC;YACF,MAAM,GAAG,GAAS,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,MAAM,cAAc,GAAW,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEpF,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpD,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACtC,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;gBAE5C,IAAI,QAAQ,CAAC,cAAc,KAAK,cAAc,IAAI,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;oBACxF,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBACtC,CAAC;gBACD,MAAM,MAAM,GAAkC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAC9E,MAAM,QAAQ,GAAkC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAEpE,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACxD,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBACtC,CAAC;gBAED,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACvC,CAAC;YAED,MAAM,yBAAyB,GAAY,OAAO,CAAC,KAAK,KAAK,gEAA8B,CAAC,QAAQ,CAAC;YAErG,IAAI,CAAC,yBAAyB;gBAC5B,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,IAAI,CAAC,CAAC,OAAO,CAAC,kBAAkB;gBACtE,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,gEAA8B,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;mBAChG,CAAC,CAAC,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,gBAAgB;kBACzE,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,aAAa,GAAY,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI;gBAChF,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAEnF,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,KAAK,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC;gBAC9F,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACpC,CAAC;YACD,MAAM,YAAY,GAA+C;gBAC/D,eAAe,EAAE,gCAAgC,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,IAAA,wBAAU,GAAE;gBACtF,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,aAAa;gBAC1F,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;gBAC7C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EACpE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;aACjD,CAAC;YACF,MAAM,MAAM,GAAkC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAClF,MAAM,OAAO,GAAuC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/E,MAAM,QAAQ,GAA2C,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAC5F,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG;aAC/F,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;mBAC1F,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,QAAQ,GAAyC,yBAAyB;gBAC9E,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;oBACnC,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW;oBAC3F,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,OAAO;iBAChD,CAAC;gBACF,CAAC,CAAC,OAAO,CAAC;YACZ,MAAM,OAAO,GAA+C,MAAM,CAAC,MAAM,CAAC;gBACxE,GAAG,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW;aACnD,CAAC,CAAC;YACH,MAAM,SAAS,GAAW,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,MAAM,GAAwC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAElG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;mBAC3E,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,OAAO,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACjG,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,MAAM,GAA+C;gBACzD,GAAG,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,cAAc;gBACpE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU;aACnD,CAAC;YAEF,wGAAwG;YACxG,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpD,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAyC,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;gBACvF,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO;aAC3G,CAAC,CAAC;YAEH,IAAI,QAAQ,EAAE,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;mBACxF,QAAQ,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;mBACtF,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;mBAClG,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;mBAC3C,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,gEAA8B,CAAC,MAAM;mBACvG,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,kBAAkB,KAAK,QAAQ,CAAC,kBAAkB;mBACtG,CAAC,CAAC,QAAQ,CAAC,kBAAkB,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC7D,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC1C,CAAC;YAED,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0GAA0G;IACnG,KAAK,CAAC,kBAAkB,CAAC,GAG/B,EAAE,OAAsB;QACvB,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,IAAmB,EAAE;YACpD,MAAM,SAAS,GAA2C,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACzF,MAAM,OAAO,GAAyC,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAEjG,IAAI,OAAO,CAAC,KAAK,KAAK,gEAA8B,CAAC,SAAS,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACjG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,MAAM,GAAsD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAC/F,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CACpD,CAAC;YAEF,MAAM,GAAG,GAAS,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAE5C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YAE1C,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC3F,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gHAAgH;IACzG,KAAK,CAAC,UAAU,CAAC,cAAsD,EAC5E,OAAsB;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,IAAqB,EAAE;YACvD,MAAM,SAAS,GAA2C,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YACzF,gGAAgG;YAChG,MAAM,OAAO,GAAyC,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAE1G,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;mBACtF,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc,EAAE,CAAC;gBACzD,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,MAAM,GAAsD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAC/F,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CACpD,CAAC;YAEF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,QAAQ,GAAY,CAAE,gEAA8B,CAAC,SAAS,EAAE,gEAA8B,CAAC,SAAS;gBAC5G,gEAA8B,CAAC,kBAAkB,EAAE,gEAA8B,CAAC,cAAc,CAAE;iBACjG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,GAAG,GAAS,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAE5C,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,OAAO,GAAuB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC;gBACpE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO;aACzC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAE1B,IAAI,OAAO,CAAC,YAAY,KAAK,CAAC,IAAI,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC9G,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC3C,CAAC;YAED,OAAO,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAED,kHAAkH;IAC1G,KAAK,CAAC,cAAc,CAC1B,OAA6C,EAC7C,GAAsG;QAEtG,MAAM,QAAQ,GAAyC,MAAM,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACtG,MAAM,SAAS,GAA2C,GAAG,CAAC,SAAS,CAAC;QAExE,IAAI,QAAQ,EAAE,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;eACxF,QAAQ,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;eACtF,QAAQ,CAAC,eAAe,KAAK,OAAO,CAAC,eAAe,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;eAChG,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,GAAG,CAAC;eACxF,QAAQ,CAAC,KAAK,KAAK,gEAA8B,CAAC,gBAAgB;eAClE,QAAQ,CAAC,kBAAkB,KAAK,GAAG,CAAC,UAAU;eAC9C,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,kBAAkB,IAAI,CAAC,CAAC,QAAQ,CAAC,kBAAkB;eAC7G,CAAC,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACtD,MAAM,IAAI,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,SAAiD,EAAE,OAAsB;QAEzE,MAAM,OAAO,GAAyC,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE1G,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;eACtF,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;eAC9F,OAAO,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAE3B,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,KAAK,gEAA8B,CAAC,SAAS;eAChF,OAAO,CAAC,KAAK,KAAK,gEAA8B,CAAC,cAAc;eAC/D,OAAO,CAAC,KAAK,KAAK,gEAA8B,CAAC,kBAAkB,EAAE,CAAC;YACzE,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,KAAc,EAAE,OAAmD;QAC/E,MAAM,MAAM,GAAwD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAE5G,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,IAAI,GAA0C,MAAM,CAAC,MAAM,CAAC,qDAAyB,CAAC;aACzF,IAAI,CAAC,CAAC,KAAgC,EAAW,EAAE,CAAC,KAAK,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;QAEtF,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAC9G,CAAC;IAEO,IAAI,CAAC,MAAkD;QAC7D,MAAM,SAAS,GAAW,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CACjD,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAC7E,CAAC;QAEF,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;YACnF,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAEO,OAAO,CAAC,MAAkD;QAChE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;YAC7F,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW;YACnG,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW;YAC7G,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;SACzD,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAClB,MAAyD,EACzD,SAAiD,EAAE,GAAS;QAE5D,IAAI,MAAM,EAAE,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;eAC9E,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,cAAc;eAC9F,MAAM,CAAC,eAAe,KAAK,gCAAgC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;eACzF,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACrG,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,KAA6C;QAC7D,MAAM,WAAW,GAA0B,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACnF,MAAM,SAAS,GAAY,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC;QACxD,MAAM,SAAS,GAAY,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC;QACxD,MAAM,cAAc,GAAY,WAAW,CAAC,cAAc,EAAE,KAAK,CAAC;QAElE,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;eAC3D,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC;IACvG,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,8GAA8G;QAC9G,MAAM,MAAM,GAAmB,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CACtE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAC3G,CAAC;QACF,MAAM,GAAG,GAAY,MAAM,CAAC,SAAS,CAAC;QAEtC,IAAI,CAAC,CAAC,GAAG,YAAY,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,OAAsB,EAAE,IAAsB;QACrE,MAAM,OAAO,GAAsC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC;QAE9F,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,UAAU;eACvG,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,UAAU,EAAE,CAAC;YAC7E,MAAM,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC;YACH,6GAA6G;YAC7G,yGAAyG;YACzG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAEpE,OAAO,MAAM,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,4FAA4F;YAC5F,IAAI,KAAK,YAAY,gBAAK,CAAC,UAAU,IAAI,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,EAAE,CAAC;gBAC1F,MAAM,SAAS,GAAqB,IAAI,gBAAK,CAAC,UAAU,CAAC,iDAAiD,CAAC,CAAC;gBAE5G,SAAS,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAC;gBAErD,MAAM,SAAS,CAAC;YAClB,CAAC;YAED,IAAI,KAAK,YAAY,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1D,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,IAA+B;QAC7C,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,qDAAyB,CAAC,aAAa,CAAC,CAAC,OAAO,wEAAkC,CAAC,oBAAoB,CAAC;YAC7G,KAAK,qDAAyB,CAAC,WAAW,CAAC,CAAC,OAAO,wEAAkC,CAAC,kBAAkB,CAAC;YACzG,KAAK,qDAAyB,CAAC,SAAS,CAAC,CAAC,OAAO,wEAAkC,CAAC,gBAAgB,CAAC;YAErG,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAEO,OAAO,CACb,MAAkD,EAAE,OAAgB;QAEpE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,gCAAgC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO;YAC/F,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAClF,CAAC;IAEO,GAAG,CAAC,SAAiD;QAC3D,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YAChD,gCAAgC,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,cAAc;SACrG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAEO,QAAQ,CAAC,KAAc,EAAE,OAAe;QAC9C,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC;IACtF,CAAC;IAEO,IAAI,CAAC,KAAc;QACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzF,CAAC;IAEO,OAAO,CAAC,OAAsB;QACpC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;IAC3E,CAAC;IAEO,UAAU;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAC3C,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAY;QACxB,MAAM,KAAK,GAAU,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;QAEvE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAE5B,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,SAAS;QACf,MAAM,IAAI,GAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;QACpG,MAAM,UAAU,GAAmB;YACjC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE;YACtD,eAAe,EAAE,EAAE,IAAI,EAAE,CAAE,gCAAgC,CAAE,EAAE;YAC/D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI;YAC7G,WAAW,EAAE,EAAE,IAAI,EAAE,CAAE,eAAe,EAAE,aAAa,EAAE,WAAW,CAAE,EAAE;YACtE,eAAe,EAAE,EAAE,QAAQ,EAAE,CAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAE,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE;YACxG,SAAS,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE;YAClG,cAAc,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE;YACjE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE;SAClF,CAAC;QAEF,OAAO,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK;gBACrE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC;IAClE,CAAC;CACF;AAldD,sFAkdC"}

package/build/_services/core/email.service.d.ts

@@ -1,5 +1,6 @@
 import { Attachment } from 'nodemailer/lib/mailer';
 import { DyFM_AnyError, DyFM_Error_Settings } from '@futdevpro/fsm-dynamo';
+import { DyNTS_EmailSubmissionReceipt_Interface } from '../../_models/interfaces/email-submission-receipt.interface';
 export interface DyNTS_EmailService_Settings {
     host: string;
     port: number;
@@ -52,6 +53,14 @@ export declare class DyNTS_EmailService {
      * @param set
      */
     sendEmail<T>(set: DyNTS_SendEmail_Settings<T>, issuer: string): Promise<void>;
+    /** Submits once through the existing renderer/transport and returns only validated submission evidence. */
+    sendEmailWithReceipt<T>(set: DyNTS_SendEmail_Settings<T>, issuer: string): Promise<DyNTS_EmailSubmissionReceipt_Interface>;
+    /** Never retains raw transport errors, recipients, template data or attachment contents. */
+    private submissionFailure;
+    /** Projects only data properties of the SMTP result; malformed or accessor-backed evidence is unknown. */
+    private submissionReceipt;
+    /** SMTP recipient arrays are validated but their addresses never enter the receipt. */
+    private recipientList;
     private compileTemplateComponent;
     private compileHTMLMainFrame;
     /** trims all rows and remove everything between /*...*\/  */

package/build/_services/core/email.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email.service.d.ts","sourceRoot":"","sources":["../../../src/_services/core/email.service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAA0B,MAAM,uBAAuB,CAAC;AAE3E,OAAO,EACL,aAAa,EAA0B,mBAAmB,EAC3D,MAAM,uBAAuB,CAAC;AAK/B,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,4BAA4B,EAAE,CAAC;CACrD;AAED,qBAAa,4BAA4B;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IAEjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,WAAW,CAAC,EAAE,MAAM,CAAM;IAE1B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAM;IAC3B,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAM;gBAGpC,GAAG,CAAC,EAAE,4BAA4B;CAMrC;AAED,MAAM,WAAW,wBAAwB,CAAC,CAAC,GAAG;IAAE,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;CAAE;IAC9E,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAEvB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,WAAW,EAAE,MAAM,CAAC;IAEpB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IAEtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsC;IACjE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAE9B;IACP,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAE1B;IAEP,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAc;IAEhD,QAAQ,CAAC,mBAAmB,SAE2B;gBAGrD,GAAG,EAAE,2BAA2B;IAiB5B,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAuBzC;;;OAGG;IACU,SAAS,CAAC,CAAC,EACtB,GAAG,EAAE,wBAAwB,CAAC,CAAC,CAAC,EAChC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;YAkGF,wBAAwB;IAwDtC,OAAO,CAAC,oBAAoB;IAqD5B,6DAA6D;IAC7D,OAAO,CAAC,SAAS;IAajB,4BAA4B;IAC5B,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,eAAe;YAMT,0BAA0B;YAwC1B,mBAAmB;YAkEnB,0BAA0B;YAmH1B,QAAQ;IAyBtB,OAAO,CAAC,iBAAiB;IAkDzB;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IA8C/B,OAAO,CAAC,wBAAwB;IAkBhC,SAAS,CAAC,uBAAuB,CAC/B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,MAAM;IACd,mGAAmG;IACnG,uBAAuB,GAAE,OAAc,GACtC,mBAAmB;CAcvB"}
+{"version":3,"file":"email.service.d.ts","sourceRoot":"","sources":["../../../src/_services/core/email.service.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAA0B,MAAM,uBAAuB,CAAC;AAE3E,OAAO,EACL,aAAa,EAA0B,mBAAmB,EAC3D,MAAM,uBAAuB,CAAC;AAI/B,OAAO,EAAE,sCAAsC,EAAE,MAAM,6DAA6D,CAAC;AAGrH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,4BAA4B,EAAE,CAAC;CACrD;AAED,qBAAa,4BAA4B;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IAEjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,WAAW,CAAC,EAAE,MAAM,CAAM;IAE1B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAM;IAC3B,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAM;gBAGpC,GAAG,CAAC,EAAE,4BAA4B;CAMrC;AAED,MAAM,WAAW,wBAAwB,CAAC,CAAC,GAAG;IAAE,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;CAAE;IAC9E,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAEvB,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,WAAW,EAAE,MAAM,CAAC;IAEpB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IAEtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsC;IACjE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAE9B;IACP,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAE1B;IAEP,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAc;IAEhD,QAAQ,CAAC,mBAAmB,SAE2B;gBAGrD,GAAG,EAAE,2BAA2B;IAiB5B,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAuBzC;;;OAGG;IACU,SAAS,CAAC,CAAC,EACtB,GAAG,EAAE,wBAAwB,CAAC,CAAC,CAAC,EAChC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;IAQhB,2GAA2G;IAC9F,oBAAoB,CAAC,CAAC,EACjC,GAAG,EAAE,wBAAwB,CAAC,CAAC,CAAC,EAChC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sCAAsC,CAAC;IA0FlD,4FAA4F;IAC5F,OAAO,CAAC,iBAAiB;IAYzB,0GAA0G;IAC1G,OAAO,CAAC,iBAAiB;IA2CzB,uFAAuF;IACvF,OAAO,CAAC,aAAa;YAgBP,wBAAwB;IAwDtC,OAAO,CAAC,oBAAoB;IAqD5B,6DAA6D;IAC7D,OAAO,CAAC,SAAS;IAajB,4BAA4B;IAC5B,OAAO,CAAC,YAAY;IAcpB,OAAO,CAAC,eAAe;YAMT,0BAA0B;YAwC1B,mBAAmB;YAkEnB,0BAA0B;YAmH1B,QAAQ;IAyBtB,OAAO,CAAC,iBAAiB;IAkDzB;;;;OAIG;IACH,OAAO,CAAC,uBAAuB;IA8C/B,OAAO,CAAC,wBAAwB;IAkBhC,SAAS,CAAC,uBAAuB,CAC/B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,MAAM;IACd,mGAAmG;IACnG,uBAAuB,GAAE,OAAc,GACtC,mBAAmB;CAcvB"}

package/build/_services/core/email.service.js

@@ -3,9 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.DyNTS_EmailService = exports.DyNTS_EmailTemplateComponent = void 0;
 const tslib_1 = require("tslib");
 const FileSystem = tslib_1.__importStar(require("fs"));
+const node_crypto_1 = require("node:crypto");
 const NodeMailer = tslib_1.__importStar(require("nodemailer"));
 const fsm_dynamo_1 = require("@futdevpro/fsm-dynamo");
 const global_settings_const_1 = require("../../_collections/global-settings.const");
+const email_submission_outcome_enum_1 = require("../../_enums/email-submission-outcome.enum");
 const dynts_test_email_sink_service_1 = require("../../_modules/test-email-sink/_services/dynts-test-email-sink.service");
 class DyNTS_EmailTemplateComponent {
     name;
@@ -74,6 +76,13 @@ class DyNTS_EmailService /* extends DyNTS_SingletonService */ {
      * @param set
      */
     async sendEmail(set, issuer) {
+        const receipt = await this.sendEmailWithReceipt(set, issuer);
+        if (receipt.outcome !== email_submission_outcome_enum_1.DyNTS_EmailSubmissionOutcome_Enum.accepted) {
+            throw this.submissionFailure(issuer, receipt.outcome === email_submission_outcome_enum_1.DyNTS_EmailSubmissionOutcome_Enum.rejected);
+        }
+    }
+    /** Submits once through the existing renderer/transport and returns only validated submission evidence. */
+    async sendEmailWithReceipt(set, issuer) {
         try {
             let content;
             if (set.content) {
@@ -108,7 +117,11 @@ class DyNTS_EmailService /* extends DyNTS_SingletonService */ {
                     html: content,
                     issuer: issuer,
                 });
-                return;
+                return {
+                    contractVersion: 'dynts-email-submission-receipt/1', channel: 'test-sink',
+                    outcome: email_submission_outcome_enum_1.DyNTS_EmailSubmissionOutcome_Enum.accepted,
+                    submissionReference: '', acceptedCount: 0, rejectedCount: 0, pendingCount: 0,
+                };
             }
             const mailOptions = {
                 from: this.senderNEmail,
@@ -117,35 +130,87 @@ class DyNTS_EmailService /* extends DyNTS_SingletonService */ {
                 html: content,
                 attachments: set.attachments,
             };
-            await new Promise((resolve, reject) => {
-                this.nmTransporter.sendMail(mailOptions, (error) => {
-                    if (error) {
-                        reject(error);
-                    }
-                    else {
-                        resolve();
-                    }
-                });
-            });
+            const info = await this.nmTransporter.sendMail(mailOptions);
+            return this.submissionReceipt(info);
         }
         catch (error) {
-            if (error.message?.includes?.('all recipients were rejected')) {
-                throw new fsm_dynamo_1.DyFM_Error({
-                    ...this._getDefaultErrorSettings('sendEmail', error, issuer),
-                    addECToUserMsg: false,
-                    errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-ES0-SE4`,
-                    userMessage: `Can't send mail to ${set.to}!`,
-                    message: `sendEmail failed to ${set.to}`,
-                });
+            let allRejected = false;
+            try {
+                const message = error instanceof Error
+                    ? Object.getOwnPropertyDescriptor(error, 'message')?.value : undefined;
+                allRejected = typeof message === 'string' && message.includes('all recipients were rejected');
             }
-            else {
-                throw new fsm_dynamo_1.DyFM_Error({
-                    ...this._getDefaultErrorSettings('sendEmail', error, issuer),
-                    errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-ES0-SE0`,
-                    message: `sendEmail failed to ${set.to}`,
-                });
+            catch {
+                // A hostile error accessor is not trusted diagnostic evidence.
+            }
+            throw this.submissionFailure(issuer, allRejected);
+        }
+    }
+    /** Never retains raw transport errors, recipients, template data or attachment contents. */
+    submissionFailure(issuer, allRejected) {
+        return new fsm_dynamo_1.DyFM_Error({
+            status: 500,
+            errorCode: `${global_settings_const_1.DyNTS_global_settings.systemShortCodeName}|DyNTS-ES0-${allRejected ? 'SE4' : 'SE0'}`,
+            message: allRejected ? 'Email recipients were rejected.' : 'Email submission was not confirmed.',
+            userMessage: 'The email could not be confirmed as sent. Please contact support before retrying.',
+            addECToUserMsg: false,
+            issuer: issuer,
+            issuerService: this.serviceName,
+        });
+    }
+    /** Projects only data properties of the SMTP result; malformed or accessor-backed evidence is unknown. */
+    submissionReceipt(value) {
+        const result = {
+            contractVersion: 'dynts-email-submission-receipt/1', channel: 'smtp',
+            outcome: email_submission_outcome_enum_1.DyNTS_EmailSubmissionOutcome_Enum.indeterminate,
+            submissionReference: '', acceptedCount: 0, rejectedCount: 0, pendingCount: 0,
+        };
+        try {
+            if (!value || typeof value !== 'object' || Array.isArray(value)) {
+                return result;
+            }
+            const fields = Object.getOwnPropertyDescriptors(value);
+            const accepted = fields.accepted?.value;
+            const rejected = fields.rejected?.value;
+            const pending = fields.pending ? fields.pending.value : [];
+            const messageId = fields.messageId?.value;
+            if (!this.recipientList(accepted) || !this.recipientList(rejected) || !this.recipientList(pending)) {
+                return result;
+            }
+            result.acceptedCount = accepted.length;
+            result.rejectedCount = rejected.length;
+            result.pendingCount = pending.length;
+            if (accepted.length === 0) {
+                result.outcome = rejected.length > 0 && pending.length === 0
+                    ? email_submission_outcome_enum_1.DyNTS_EmailSubmissionOutcome_Enum.rejected : email_submission_outcome_enum_1.DyNTS_EmailSubmissionOutcome_Enum.indeterminate;
+            }
+            else if (typeof messageId === 'string' && messageId.length > 0 && messageId.length <= 4096) {
+                result.outcome = rejected.length === 0 && pending.length === 0
+                    ? email_submission_outcome_enum_1.DyNTS_EmailSubmissionOutcome_Enum.accepted : email_submission_outcome_enum_1.DyNTS_EmailSubmissionOutcome_Enum.partial;
+                result.submissionReference = `sha256:${(0, node_crypto_1.createHash)('sha256').update(messageId).digest('hex')}`;
+            }
+            return result;
+        }
+        catch {
+            return {
+                contractVersion: 'dynts-email-submission-receipt/1', channel: 'smtp',
+                outcome: email_submission_outcome_enum_1.DyNTS_EmailSubmissionOutcome_Enum.indeterminate,
+                submissionReference: '', acceptedCount: 0, rejectedCount: 0, pendingCount: 0,
+            };
+        }
+    }
+    /** SMTP recipient arrays are validated but their addresses never enter the receipt. */
+    recipientList(value) {
+        if (!Array.isArray(value)) {
+            return false;
+        }
+        for (let index = 0; index < value.length; index++) {
+            const entry = Object.getOwnPropertyDescriptor(value, index)?.value;
+            if (typeof entry !== 'string' || entry.length === 0) {
+                return false;
             }
         }
+        return true;
     }
     async compileTemplateComponent(componentName, componentProperties, issuer) {
         try {