@geekity/cms 0.3.0 → 0.4.0

package/dist/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAW,aAAa,CACpD,IAAI,GAAG,CAAC,oBAAoB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAC/C,CAAC;AAEF;;;;GAIG;AACH,MAAM,QAAQ,GAAgC,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;AA0BrF,gEAAgE;AAChE,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAG1B,SAAS;IAFZ,IAAI,GAAG,wBAAwB,CAAC;IAElD,YAAqB,SAAiB;QACpC,KAAK,CACH,GAAG,SAAS,2HAA2H,CACxI,CAAC;yBAHiB,SAAS;IAI9B,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAEvD,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAEtF,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,EAAE,CAAC,iBAAiB,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5D,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACtC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC9C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC,OAAO;KAClD,CAAC,CAAC;IACH,MAAM,SAAS,CACb,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EACpC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAC7C,MAAM,CACP,CAAC;IACF,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,EAAE,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC;IAErF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACjE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO;QACL,yEAAyE;QACzE,EAAE;QACF,sEAAsE;QACtE,oBAAoB;QACpB,cAAc;QACd,iBAAiB;QACjB,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,sBAAsB;QACtB,oBAAoB;QACpB,4BAA4B;QAC5B,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,OAA0C;IACrE,MAAM,SAAS,GAAG,WAAW,EAAE,CAAC,eAAe,IAAI,EAAE,CAAC;IAEtD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,GAAG,EAAE,qBAAqB;YAC1B,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,cAAc;SACrB;QACD,YAAY,EAAE;YACZ,cAAc,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE;SACtC;QACD,eAAe,EAAE;YACf,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,IAAI,SAAS;YACpD,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS;YAClC,UAAU,EAAE,SAAS,CAAC,YAAY,CAAC,IAAI,QAAQ;SAChD;KACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IAC/C,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAAmC,EAAE,IAAI,CAAC;QACxD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW;IAIzB,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,iBAAiB,CAG/B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../src/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAW,aAAa,CACpD,IAAI,GAAG,CAAC,oBAAoB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAC/C,CAAC;AAEF;;;;GAIG;AACH,MAAM,QAAQ,GAAgC,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;AA0BrF,gEAAgE;AAChE,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAG1B,SAAS;IAFZ,IAAI,GAAG,wBAAwB,CAAC;IAElD,YAAqB,SAAiB;QACpC,KAAK,CACH,GAAG,SAAS,2HAA2H,CACxI,CAAC;yBAHiB,SAAS;IAI9B,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAEvD,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAEtF,MAAM,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAEnC,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACtC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC9C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC,OAAO;KAClD,CAAC,CAAC;IACH,MAAM,SAAS,CACb,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EACpC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAC7C,MAAM,CACP,CAAC;IACF,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,EAAE,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC;IAErF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACjE,CAAC;AAUD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAkC;IACzE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAExD,MAAM,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAE1C,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAA4B,CAAC;IACzF,QAAQ,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;IAC1B,MAAM,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAEjF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,WAAmB;IAC3D,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACjF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO;QACL,yEAAyE;QACzE,EAAE;QACF,sEAAsE;QACtE,oBAAoB;QACpB,cAAc;QACd,iBAAiB;QACjB,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,sBAAsB;QACtB,oBAAoB;QACpB,4BAA4B;QAC5B,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,OAA0C;IACrE,MAAM,SAAS,GAAG,WAAW,EAAE,CAAC,eAAe,IAAI,EAAE,CAAC;IAEtD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,GAAG,EAAE,qBAAqB;YAC1B,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,cAAc;SACrB;QACD,YAAY,EAAE;YACZ,cAAc,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE;SACtC;QACD,eAAe,EAAE;YACf,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,IAAI,SAAS;YACpD,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS;YAClC,UAAU,EAAE,SAAS,CAAC,YAAY,CAAC,IAAI,QAAQ;SAChD;KACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IAC/C,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAAmC,EAAE,IAAI,CAAC;QACxD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW;IAIzB,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,iBAAiB,CAG/B,CAAC;AACJ,CAAC"}

package/dist/mail/brevo.d.ts

@@ -0,0 +1,35 @@
+import type { MailProvider } from './provider.ts';
+/**
+ * Brevo's transactional API, as one {@link MailProvider}.
+ *
+ * The HTTP half of sending: one POST with a JSON body and an `api-key` header,
+ * no connection to keep open and no TLS negotiation to get wrong, which is why
+ * it is the provider a site on a host that blocks port 587 can still use.
+ *
+ * Nothing here reads a file or a setting. The key is handed in, because the
+ * service reads `data/mail.json` on every send and builds the provider from
+ * what it found — so a key pasted into the settings screen sends the next
+ * message without a restart.
+ */
+/** The endpoint Brevo documents for a transactional message. */
+export declare const BREVO_ENDPOINT = "https://api.brevo.com/v3/smtp/email";
+/**
+ * How long Brevo has to answer before the call is abandoned.
+ *
+ * Sending happens off the request that caused it, so this is not somebody
+ * waiting on a page — but an abandoned call is a failure the service can
+ * retry, and a hung one is a queue that never moves again.
+ */
+export declare const BREVO_TIMEOUT_MS = 15000;
+/** What {@link createBrevoProvider} needs. */
+export interface BrevoProviderOptions {
+    /** The account's API key, `xkeysib-…`. */
+    apiKey: string;
+    /** The HTTP client. Defaults to the global `fetch`; a test hands in its own. */
+    fetch?: typeof fetch | undefined;
+    /** How long Brevo has to answer. */
+    timeoutMs?: number | undefined;
+}
+/** A provider that hands each message to Brevo. */
+export declare function createBrevoProvider(options: BrevoProviderOptions): MailProvider;
+//# sourceMappingURL=brevo.d.ts.map

package/dist/mail/brevo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brevo.d.ts","sourceRoot":"","sources":["../../src/mail/brevo.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA6B,YAAY,EAAgB,MAAM,eAAe,CAAC;AAE3F;;;;;;;;;;;GAWG;AAEH,gEAAgE;AAChE,eAAO,MAAM,cAAc,wCAAwC,CAAC;AAEpE;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAEvC,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,KAAK,CAAC,EAAE,OAAO,KAAK,GAAG,SAAS,CAAC;IACjC,oCAAoC;IACpC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,mDAAmD;AACnD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,YAAY,CA6B/E"}

package/dist/mail/brevo.js

@@ -0,0 +1,85 @@
+/**
+ * Brevo's transactional API, as one {@link MailProvider}.
+ *
+ * The HTTP half of sending: one POST with a JSON body and an `api-key` header,
+ * no connection to keep open and no TLS negotiation to get wrong, which is why
+ * it is the provider a site on a host that blocks port 587 can still use.
+ *
+ * Nothing here reads a file or a setting. The key is handed in, because the
+ * service reads `data/mail.json` on every send and builds the provider from
+ * what it found — so a key pasted into the settings screen sends the next
+ * message without a restart.
+ */
+/** The endpoint Brevo documents for a transactional message. */
+export const BREVO_ENDPOINT = 'https://api.brevo.com/v3/smtp/email';
+/**
+ * How long Brevo has to answer before the call is abandoned.
+ *
+ * Sending happens off the request that caused it, so this is not somebody
+ * waiting on a page — but an abandoned call is a failure the service can
+ * retry, and a hung one is a queue that never moves again.
+ */
+export const BREVO_TIMEOUT_MS = 15_000;
+/** A provider that hands each message to Brevo. */
+export function createBrevoProvider(options) {
+    const call = options.fetch ?? globalThis.fetch;
+    return {
+        name: 'brevo',
+        async deliver(message) {
+            const response = await call(BREVO_ENDPOINT, {
+                method: 'POST',
+                headers: {
+                    'api-key': options.apiKey,
+                    'content-type': 'application/json',
+                    accept: 'application/json',
+                },
+                body: JSON.stringify(bodyFor(message)),
+                signal: AbortSignal.timeout(options.timeoutMs ?? BREVO_TIMEOUT_MS),
+            });
+            const said = await response.text();
+            if (!response.ok) {
+                // Brevo's own words, not a summary of them: `sender is missing` is
+                // what tells somebody which field of the settings screen to fix, and
+                // a status on its own never has.
+                throw new Error(`Brevo answered ${String(response.status)}: ${said.trim()}`);
+            }
+            return { messageId: messageIdOf(said) };
+        },
+    };
+}
+/** The message as Brevo's `POST /v3/smtp/email` documents it. */
+function bodyFor(message) {
+    return {
+        sender: recipient(message.from),
+        to: message.to.map(recipient),
+        ...(message.replyTo === undefined ? {} : { replyTo: recipient(message.replyTo) }),
+        subject: message.subject,
+        textContent: message.text,
+        // Left out rather than sent empty: a message with an empty `htmlContent`
+        // is a multipart message whose HTML half is blank, which is worse in a
+        // reader than a message that never claimed to have one.
+        ...(message.html === undefined || message.html === '' ? {} : { htmlContent: message.html }),
+    };
+}
+/** One address as Brevo spells it: `email`, and `name` only when there is one. */
+function recipient(address) {
+    return {
+        email: address.address,
+        ...(address.name === undefined || address.name === '' ? {} : { name: address.name }),
+    };
+}
+/** The `messageId` out of an accepted answer, or nothing when it carried none. */
+function messageIdOf(body) {
+    let parsed;
+    try {
+        parsed = JSON.parse(body);
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof parsed !== 'object' || parsed === null)
+        return undefined;
+    const id = parsed['messageId'];
+    return typeof id === 'string' && id !== '' ? id : undefined;
+}
+//# sourceMappingURL=brevo.js.map

package/dist/mail/brevo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brevo.js","sourceRoot":"","sources":["../../src/mail/brevo.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AAEH,gEAAgE;AAChE,MAAM,CAAC,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAYvC,mDAAmD;AACnD,MAAM,UAAU,mBAAmB,CAAC,OAA6B;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAE/C,OAAO;QACL,IAAI,EAAE,OAAO;QAEb,KAAK,CAAC,OAAO,CAAC,OAAqB;YACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,SAAS,EAAE,OAAO,CAAC,MAAM;oBACzB,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACtC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;aACnE,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,mEAAmE;gBACnE,qEAAqE;gBACrE,iCAAiC;gBACjC,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/E,CAAC;YAED,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,SAAS,OAAO,CAAC,OAAqB;IACpC,OAAO;QACL,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;QAC/B,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,OAAO,CAAC,IAAI;QACzB,yEAAyE;QACzE,uEAAuE;QACvE,wDAAwD;QACxD,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;KAC5F,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAS,SAAS,CAAC,OAAoB;IACrC,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,OAAO;QACtB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;KACrF,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,EAAE,GAAI,MAAkC,CAAC,WAAW,CAAC,CAAC;IAC5D,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC"}

package/dist/mail/credentials.d.ts

@@ -0,0 +1,62 @@
+/**
+ * What a site needs to prove it may send: `data/mail.json`.
+ *
+ * A credential, not a setting, so it lives where the Akismet key and the
+ * password hashes live — under `data/` at mode `0600` — and never in
+ * `content/_data/site.json`, which is public, in git and published with the
+ * site. Which provider is in use, who mail is from and where a reply goes are
+ * settings and are in `site.json`; the key and the SMTP password are here.
+ *
+ * Read on every send, like the Akismet key, so a credential pasted into the
+ * settings screen sends the next message and one removed stops sending at
+ * once, neither of them needing a restart.
+ */
+/** Where the credentials live, under `dataDir`. */
+export declare const MAIL_CREDENTIALS_FILE = "mail.json";
+/** Brevo's half: one API key. */
+export interface BrevoCredential {
+    /** The account's API key, `xkeysib-…`. */
+    readonly apiKey: string;
+}
+/** SMTP's half: the whole connection, because all of it is a credential. */
+export interface SmtpCredential {
+    /** The server's hostname. */
+    readonly host: string;
+    /** The port: 587 for submission with STARTTLS, 465 for implicit TLS. */
+    readonly port: number;
+    /** Whether the connection is TLS from the first byte, which is port 465. */
+    readonly secure: boolean;
+    /** The username. Empty for a server that wants no credentials. */
+    readonly user: string;
+    /** The password. */
+    readonly password: string;
+}
+/**
+ * The file's whole contents: at most one entry per provider.
+ *
+ * Both may be present at once, and that is deliberate — a site trying SMTP
+ * after Brevo should be able to switch the `mailProvider` setting back without
+ * having to paste a key in again.
+ */
+export interface MailCredentials {
+    /** Brevo's key, when the site has one. */
+    readonly brevo?: BrevoCredential | undefined;
+    /** The SMTP connection, when the site has one. */
+    readonly smtp?: SmtpCredential | undefined;
+}
+/** Where one site's credential file is. */
+export declare function mailCredentialsPath(dataDir: string): string;
+/**
+ * The stored credentials, or an empty object when the site has none.
+ *
+ * Read tolerantly and synchronously, like every other file this CMS treats as
+ * truth: a file that will not parse, or an entry missing the one field that
+ * makes it usable, is a site with no mail rather than a site that will not
+ * boot.
+ */
+export declare function readMailCredentials(dataDir: string): MailCredentials;
+/** Write the credentials, private to the account the site runs as. */
+export declare function writeMailCredentials(dataDir: string, credentials: MailCredentials): Promise<void>;
+/** Forget them, which is how a site stops sending mail entirely. */
+export declare function removeMailCredentials(dataDir: string): Promise<void>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/mail/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/mail/credentials.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;GAYG;AAEH,mDAAmD;AACnD,eAAO,MAAM,qBAAqB,cAAc,CAAC;AAEjD,iCAAiC;AACjC,MAAM,WAAW,eAAe;IAC9B,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,6BAA6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oBAAoB;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,0CAA0C;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC7C,kDAAkD;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;CAC5C;AAED,2CAA2C;AAC3C,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAkBpE;AAED,sEAAsE;AACtE,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,eAAe,GAC3B,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,oEAAoE;AACpE,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1E"}

package/dist/mail/credentials.js

@@ -0,0 +1,86 @@
+import { rm } from 'node:fs/promises';
+import path from 'node:path';
+import { readFileIfPresentSync, writeFileAtomically } from '../files/atomic.js';
+/**
+ * What a site needs to prove it may send: `data/mail.json`.
+ *
+ * A credential, not a setting, so it lives where the Akismet key and the
+ * password hashes live — under `data/` at mode `0600` — and never in
+ * `content/_data/site.json`, which is public, in git and published with the
+ * site. Which provider is in use, who mail is from and where a reply goes are
+ * settings and are in `site.json`; the key and the SMTP password are here.
+ *
+ * Read on every send, like the Akismet key, so a credential pasted into the
+ * settings screen sends the next message and one removed stops sending at
+ * once, neither of them needing a restart.
+ */
+/** Where the credentials live, under `dataDir`. */
+export const MAIL_CREDENTIALS_FILE = 'mail.json';
+/** Where one site's credential file is. */
+export function mailCredentialsPath(dataDir) {
+    return path.join(dataDir, MAIL_CREDENTIALS_FILE);
+}
+/**
+ * The stored credentials, or an empty object when the site has none.
+ *
+ * Read tolerantly and synchronously, like every other file this CMS treats as
+ * truth: a file that will not parse, or an entry missing the one field that
+ * makes it usable, is a site with no mail rather than a site that will not
+ * boot.
+ */
+export function readMailCredentials(dataDir) {
+    const raw = readFileIfPresentSync(mailCredentialsPath(dataDir));
+    if (raw === undefined)
+        return {};
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return {};
+    }
+    if (typeof parsed !== 'object' || parsed === null)
+        return {};
+    const file = parsed;
+    return {
+        ...(brevoIn(file['brevo']) === undefined ? {} : { brevo: brevoIn(file['brevo']) }),
+        ...(smtpIn(file['smtp']) === undefined ? {} : { smtp: smtpIn(file['smtp']) }),
+    };
+}
+/** Write the credentials, private to the account the site runs as. */
+export async function writeMailCredentials(dataDir, credentials) {
+    await writeFileAtomically(mailCredentialsPath(dataDir), `${JSON.stringify(credentials, null, 2)}\n`, { mode: 0o600 });
+}
+/** Forget them, which is how a site stops sending mail entirely. */
+export async function removeMailCredentials(dataDir) {
+    await rm(mailCredentialsPath(dataDir), { force: true });
+}
+/** One Brevo entry, or nothing when it carries no key. */
+function brevoIn(value) {
+    if (typeof value !== 'object' || value === null)
+        return undefined;
+    const entry = value;
+    const apiKey = typeof entry['apiKey'] === 'string' ? entry['apiKey'].trim() : '';
+    return apiKey === '' ? undefined : { apiKey };
+}
+/** One SMTP entry, or nothing when it names no host to connect to. */
+function smtpIn(value) {
+    if (typeof value !== 'object' || value === null)
+        return undefined;
+    const entry = value;
+    const host = typeof entry['host'] === 'string' ? entry['host'].trim() : '';
+    if (host === '')
+        return undefined;
+    const port = Number(entry['port']);
+    const secure = entry['secure'] === true;
+    return {
+        host,
+        // 465 when the connection is TLS from the first byte, 587 otherwise:
+        // the two submission ports, so a file that lost its port still connects.
+        port: Number.isInteger(port) && port > 0 && port < 65536 ? port : secure ? 465 : 587,
+        secure,
+        user: typeof entry['user'] === 'string' ? entry['user'] : '',
+        password: typeof entry['password'] === 'string' ? entry['password'] : '',
+    };
+}
+//# sourceMappingURL=credentials.js.map

package/dist/mail/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/mail/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEhF;;;;;;;;;;;;GAYG;AAEH,mDAAmD;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAW,CAAC;AAoCjD,2CAA2C;AAC3C,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,GAAG,GAAG,qBAAqB,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAEjC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,MAAiC,CAAC;IAE/C,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAe,EACf,WAA4B;IAE5B,MAAM,mBAAmB,CACvB,mBAAmB,CAAC,OAAO,CAAC,EAC5B,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAC3C,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAe;IACzD,MAAM,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,0DAA0D;AAC1D,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,sEAAsE;AACtE,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,KAAK,GAAG,KAAgC,CAAC;IAE/C,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAElC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;IAExC,OAAO;QACL,IAAI;QACJ,qEAAqE;QACrE,yEAAyE;QACzE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QACpF,MAAM;QACN,IAAI,EAAE,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAC5D,QAAQ,EAAE,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;KACzE,CAAC;AACJ,CAAC"}

package/dist/mail/index.d.ts

@@ -0,0 +1,15 @@
+export { BREVO_ENDPOINT, BREVO_TIMEOUT_MS, createBrevoProvider } from './brevo.ts';
+export type { BrevoProviderOptions } from './brevo.ts';
+export { MAIL_CREDENTIALS_FILE, mailCredentialsPath, readMailCredentials, removeMailCredentials, writeMailCredentials, } from './credentials.ts';
+export type { BrevoCredential, MailCredentials, SmtpCredential } from './credentials.ts';
+export { createMemoryMailProvider } from './memory.ts';
+export type { MemoryMailProvider } from './memory.ts';
+export { MAIL_PROVIDERS } from './provider.ts';
+export type { MailAddress, MailDelivery, MailProvider, MailProviderName, OutgoingMail, } from './provider.ts';
+export { createMailService, DEFAULT_MAIL_ATTEMPTS, defaultMailBackoffMs } from './service.ts';
+export type { CreateMailServiceOptions, MailLogger, MailRecipient, MailResult, MailService, RawMail, TemplateMail, } from './service.ts';
+export { createSmtpProvider, SMTP_TIMEOUT_MS } from './smtp.ts';
+export type { SmtpProviderOptions } from './smtp.ts';
+export { createMailTemplates, mailTemplateFiles } from './templates.ts';
+export type { CreateMailTemplatesOptions, MailTemplateFiles, MailTemplates, RenderedMail, } from './templates.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/mail/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mail/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACnF,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,YAAY,EACV,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,YAAY,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAC9F,YAAY,EACV,wBAAwB,EACxB,UAAU,EACV,aAAa,EACb,UAAU,EACV,WAAW,EACX,OAAO,EACP,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAChE,YAAY,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxE,YAAY,EACV,0BAA0B,EAC1B,iBAAiB,EACjB,aAAa,EACb,YAAY,GACb,MAAM,gBAAgB,CAAC"}

package/dist/mail/index.js

@@ -0,0 +1,8 @@
+export { BREVO_ENDPOINT, BREVO_TIMEOUT_MS, createBrevoProvider } from './brevo.js';
+export { MAIL_CREDENTIALS_FILE, mailCredentialsPath, readMailCredentials, removeMailCredentials, writeMailCredentials, } from './credentials.js';
+export { createMemoryMailProvider } from './memory.js';
+export { MAIL_PROVIDERS } from './provider.js';
+export { createMailService, DEFAULT_MAIL_ATTEMPTS, defaultMailBackoffMs } from './service.js';
+export { createSmtpProvider, SMTP_TIMEOUT_MS } from './smtp.js';
+export { createMailTemplates, mailTemplateFiles } from './templates.js';
+//# sourceMappingURL=index.js.map

package/dist/mail/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mail/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEnF,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAQ/C,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAU9F,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEhE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/mail/memory.d.ts

@@ -0,0 +1,35 @@
+import type { MailProvider, OutgoingMail } from './provider.ts';
+/**
+ * A {@link MailProvider} that keeps every message instead of sending it.
+ *
+ * Exported from the package rather than hidden in a test directory, because
+ * every feature that emails needs one: a test of a password reset, a
+ * moderation notice or a contact form wants to read the message that would
+ * have gone out, and stubbing `fetch` or standing up an SMTP server to do that
+ * would be testing the provider all over again.
+ *
+ * Name it as `mailProvider` in the config and it wins outright over whatever
+ * `data/mail.json` and the settings say, exactly as a `commentChecker` does:
+ *
+ * ```ts
+ * const provider = createMemoryMailProvider();
+ * const cms = createCms({ mail: { provider } });
+ * // …
+ * assert.match(provider.sent[0].subject, /Reset your password/);
+ * ```
+ */
+/** A provider that remembers, and can be told to fail. */
+export interface MemoryMailProvider extends MailProvider {
+    /** Every message it was given, in the order they were sent. */
+    readonly sent: readonly OutgoingMail[];
+    /** Forget them all. */
+    clear(): void;
+    /**
+     * Refuse the next `count` messages, so a test can watch the service retry.
+     * A message refused is not a message sent: it never joins {@link sent}.
+     */
+    failNext(count: number, error?: string): void;
+}
+/** Build one. */
+export declare function createMemoryMailProvider(): MemoryMailProvider;
+//# sourceMappingURL=memory.d.ts.map

package/dist/mail/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../src/mail/memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgB,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE9E;;;;;;;;;;;;;;;;;;GAkBG;AAEH,0DAA0D;AAC1D,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;IACvC,uBAAuB;IACvB,KAAK,IAAI,IAAI,CAAC;IACd;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/C;AAED,iBAAiB;AACjB,wBAAgB,wBAAwB,IAAI,kBAAkB,CA8B7D"}

package/dist/mail/memory.js

@@ -0,0 +1,29 @@
+/** Build one. */
+export function createMemoryMailProvider() {
+    const sent = [];
+    let failures = 0;
+    let failure = 'the memory mail provider was told to fail';
+    return {
+        name: 'memory',
+        sent,
+        clear() {
+            sent.length = 0;
+        },
+        failNext(count, error) {
+            failures = count;
+            if (error !== undefined)
+                failure = error;
+        },
+        deliver(message) {
+            if (failures > 0) {
+                failures -= 1;
+                return Promise.reject(new Error(failure));
+            }
+            sent.push(message);
+            // Ids that count from one, so a test can assert on the one it expects
+            // rather than on whatever a random generator produced.
+            return Promise.resolve({ messageId: `memory-${String(sent.length)}` });
+        },
+    };
+}
+//# sourceMappingURL=memory.js.map

package/dist/mail/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/mail/memory.ts"],"names":[],"mappings":"AAmCA,iBAAiB;AACjB,MAAM,UAAU,wBAAwB;IACtC,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,2CAA2C,CAAC;IAE1D,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,IAAI;QAEJ,KAAK;YACH,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAClB,CAAC;QAED,QAAQ,CAAC,KAAK,EAAE,KAAK;YACnB,QAAQ,GAAG,KAAK,CAAC;YACjB,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,GAAG,KAAK,CAAC;QAC3C,CAAC;QAED,OAAO,CAAC,OAAqB;YAC3B,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACjB,QAAQ,IAAI,CAAC,CAAC;gBACd,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5C,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnB,sEAAsE;YACtE,uDAAuD;YACvD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,UAAU,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/mail/provider.d.ts

@@ -0,0 +1,80 @@
+/**
+ * The seam every way of sending email goes through.
+ *
+ * The CMS knows about mail services the way it knows about spam services
+ * (doc-6): one interface, and nothing else. Two implementations ship — Brevo's
+ * transactional API and plain SMTP through nodemailer — and a site may hand in
+ * its own, which is what {@link createMemoryMailProvider} is for in a test.
+ *
+ * A provider has exactly one job: hand this message to something that will
+ * carry it, and either say what it was given as an id or throw. It decides
+ * nothing about retries, queueing, templates or whether the site is configured
+ * to send at all; that is {@link MailService}'s, and keeping it there is what
+ * makes a second provider a file rather than a redesign.
+ */
+/** Which of the ways of sending a site has chosen. */
+export type MailProviderName = 
+/** The site sends no mail. `send` is a logged no-op. */
+'none'
+/** Brevo's transactional HTTP API. */
+ | 'brevo'
+/** Any SMTP server, through nodemailer. */
+ | 'smtp'
+/** The in-memory provider a test observes. */
+ | 'memory';
+/**
+ * The providers a site may choose on the settings screen, in the order the
+ * form offers them.
+ *
+ * `memory` is not among them: it is a test double a site names in its config,
+ * not something anybody should be able to switch a live site to from a form.
+ */
+export declare const MAIL_PROVIDERS: readonly MailProviderName[];
+/** Somebody a message is from, to, or answered to. */
+export interface MailAddress {
+    /** The address itself, `ada@example.com`. */
+    readonly address: string;
+    /** The display name, when there is one. */
+    readonly name?: string | undefined;
+}
+/**
+ * One message, as a provider receives it: addresses settled, templates already
+ * rendered, nothing left to decide.
+ */
+export interface OutgoingMail {
+    /** Who it is from. */
+    readonly from: MailAddress;
+    /** Who it is to. At least one. */
+    readonly to: readonly MailAddress[];
+    /** Where a reply should go, when that is not the sender. */
+    readonly replyTo?: MailAddress | undefined;
+    /** The subject line. */
+    readonly subject: string;
+    /** The plain text body, which every message has. */
+    readonly text: string;
+    /** The HTML twin, when the template has one. */
+    readonly html?: string | undefined;
+}
+/** What a provider says about a message it accepted. */
+export interface MailDelivery {
+    /**
+     * The id the provider gave it, when it gave one. It is what makes a message
+     * findable in the provider's own logs, which is the whole reason the service
+     * writes it down.
+     */
+    readonly messageId?: string | undefined;
+}
+/** Something that carries a message. */
+export interface MailProvider {
+    /** Which kind it is, for the log and for the settings screen. */
+    readonly name: MailProviderName;
+    /**
+     * Hand the message over.
+     *
+     * Throws when it was not accepted — a refusal, a timeout, a connection that
+     * would not open. The service catches it, logs it and decides whether to try
+     * again, so a provider never has to know how patient the site is.
+     */
+    deliver(message: OutgoingMail): Promise<MailDelivery>;
+}
+//# sourceMappingURL=provider.d.ts.map

package/dist/mail/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/mail/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,sDAAsD;AACtD,MAAM,MAAM,gBAAgB;AAC1B,wDAAwD;AACtD,MAAM;AACR,sCAAsC;GACpC,OAAO;AACT,2CAA2C;GACzC,MAAM;AACR,8CAA8C;GAC5C,QAAQ,CAAC;AAEb;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,gBAAgB,EAA8B,CAAC;AAErF,sDAAsD;AACtD,MAAM,WAAW,WAAW;IAC1B,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,sBAAsB;IACtB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,kCAAkC;IAClC,QAAQ,CAAC,EAAE,EAAE,SAAS,WAAW,EAAE,CAAC;IACpC,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAC3C,wBAAwB;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,wDAAwD;AACxD,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,wCAAwC;AACxC,MAAM,WAAW,YAAY;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC;;;;;;OAMG;IACH,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACvD"}

package/dist/mail/provider.js

@@ -0,0 +1,23 @@
+/**
+ * The seam every way of sending email goes through.
+ *
+ * The CMS knows about mail services the way it knows about spam services
+ * (doc-6): one interface, and nothing else. Two implementations ship — Brevo's
+ * transactional API and plain SMTP through nodemailer — and a site may hand in
+ * its own, which is what {@link createMemoryMailProvider} is for in a test.
+ *
+ * A provider has exactly one job: hand this message to something that will
+ * carry it, and either say what it was given as an id or throw. It decides
+ * nothing about retries, queueing, templates or whether the site is configured
+ * to send at all; that is {@link MailService}'s, and keeping it there is what
+ * makes a second provider a file rather than a redesign.
+ */
+/**
+ * The providers a site may choose on the settings screen, in the order the
+ * form offers them.
+ *
+ * `memory` is not among them: it is a test double a site names in its config,
+ * not something anybody should be able to switch a live site to from a form.
+ */
+export const MAIL_PROVIDERS = ['none', 'brevo', 'smtp'];
+//# sourceMappingURL=provider.js.map

package/dist/mail/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/mail/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAaH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAgC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC"}