@kelpie/server 0.4.0 → 0.4.1

package/dist/lib/config.d.ts

@@ -37,6 +37,11 @@ export declare class ConfigurationError extends Error {
 /**
  * Parses an environment into a validated config.
  *
+ * `emailConfigSchema` is a discriminated union, so it is parsed separately
+ * from the rest: a union has no flat `.shape` to spread into `environmentSchema`,
+ * only its own `EMAIL_PROVIDER`-keyed branches. Problems from both parses are
+ * combined into one error, preserving the "every missing variable at once" rule.
+ *
  * @param environment Raw variables, normally `process.env`.
  * @throws ConfigurationError listing every invalid or missing variable.
  */

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAG7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAErD;;;;GAIG;AAEH,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;AAEtE,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,MAAM,GAAG,YAAY,CAAA;AAE/D,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;AAE1D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAC3B,gFAAgF;IAChF,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;CACpC;AAED,gFAAgF;AAChF,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IAEpC,YAAY,QAAQ,EAAE,SAAS,MAAM,EAAE,EAItC;CACF;AAwBD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,WAAW,GAAG,YAAY,CAiBjE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAG7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAErD;;;;GAIG;AAEH,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;AAEtE,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,MAAM,GAAG,YAAY,CAAA;AAE/D,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;AAE1D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAC3B,gFAAgF;IAChF,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAA;CACpC;AAED,gFAAgF;AAChF,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IAEpC,YAAY,QAAQ,EAAE,SAAS,MAAM,EAAE,EAItC;CACF;AAuBD;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,WAAW,GAAG,YAAY,CAuBjE"}

package/dist/lib/config.js

@@ -29,29 +29,38 @@ const environmentSchema = z.object({
     LOG_LEVEL: z.enum(['debug', 'info', 'warn', 'error']),
     KELPIE_MODULE_CONFIG_PATH: z.string().min(1).optional(),
     WEB_BUNDLE_DIR: z.string().min(1).optional(),
-    ...emailConfigSchema.shape,
     ...rateLimitConfigSchema.shape,
 });
 /**
  * Parses an environment into a validated config.
  *
+ * `emailConfigSchema` is a discriminated union, so it is parsed separately
+ * from the rest: a union has no flat `.shape` to spread into `environmentSchema`,
+ * only its own `EMAIL_PROVIDER`-keyed branches. Problems from both parses are
+ * combined into one error, preserving the "every missing variable at once" rule.
+ *
  * @param environment Raw variables, normally `process.env`.
  * @throws ConfigurationError listing every invalid or missing variable.
  */
 export function loadConfig(environment) {
-    const result = environmentSchema.safeParse(environment);
-    if (!result.success) {
-        throw new ConfigurationError(result.error.issues.map(describeValidationIssue));
+    const environmentResult = environmentSchema.safeParse(environment);
+    const emailResult = emailConfigSchema.safeParse(environment);
+    if (!environmentResult.success || !emailResult.success) {
+        const problems = [
+            ...(environmentResult.success ? [] : environmentResult.error.issues.map(describeValidationIssue)),
+            ...(emailResult.success ? [] : emailResult.error.issues.map(describeValidationIssue)),
+        ];
+        throw new ConfigurationError(problems);
     }
     return {
-        runtimeMode: result.data.NODE_ENV,
-        port: result.data.PORT,
-        databaseUrl: result.data.DATABASE_URL,
-        logLevel: result.data.LOG_LEVEL,
-        email: { EMAIL_PROVIDER: result.data.EMAIL_PROVIDER, EMAIL_FROM: result.data.EMAIL_FROM },
-        moduleConfigPath: result.data.KELPIE_MODULE_CONFIG_PATH,
-        webBundleDirectory: result.data.WEB_BUNDLE_DIR,
-        rateLimit: rateLimitConfigFrom(result.data),
+        runtimeMode: environmentResult.data.NODE_ENV,
+        port: environmentResult.data.PORT,
+        databaseUrl: environmentResult.data.DATABASE_URL,
+        logLevel: environmentResult.data.LOG_LEVEL,
+        email: emailResult.data,
+        moduleConfigPath: environmentResult.data.KELPIE_MODULE_CONFIG_PATH,
+        webBundleDirectory: environmentResult.data.WEB_BUNDLE_DIR,
+        rateLimit: rateLimitConfigFrom(environmentResult.data),
     };
 }
 //# sourceMappingURL=config.js.map

package/dist/lib/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAE9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AAqC3E,gFAAgF;AAChF,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,QAAQ,CAAmB;IAEpC,YAAY,QAA2B;QACrC,KAAK,CAAC,uCAAuC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACtG,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAA;QAChC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC1B,CAAC;CACF;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QACnC,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,aAAa,CAAA;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACvD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;IACnD,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,MAAM,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC;IACjG,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACrD,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,GAAG,iBAAiB,CAAC,KAAK;IAC1B,GAAG,qBAAqB,CAAC,KAAK;CAC/B,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,WAAwB;IACjD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IAEvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAA;IAChF,CAAC;IAED,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;QACjC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;QACtB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;QACrC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;QAC/B,KAAK,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE;QACzF,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB;QACvD,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;QAC9C,SAAS,EAAE,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC;KAC5C,CAAA;AACH,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAE9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AAqC3E,gFAAgF;AAChF,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,QAAQ,CAAmB;IAEpC,YAAY,QAA2B;QACrC,KAAK,CAAC,uCAAuC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACtG,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAA;QAChC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC1B,CAAC;CACF;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QACnC,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,aAAa,CAAA;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACvD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;IACnD,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,MAAM,CAAC,aAAa,EAAE,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC;IACjG,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACrD,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,GAAG,qBAAqB,CAAC,KAAK;CAC/B,CAAC,CAAA;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,UAAU,CAAC,WAAwB;IACjD,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IAClE,MAAM,WAAW,GAAG,iBAAiB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IAE5D,IAAI,CAAC,iBAAiB,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG;YACf,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACjG,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;SACtF,CAAA;QAED,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IACxC,CAAC;IAED,OAAO;QACL,WAAW,EAAE,iBAAiB,CAAC,IAAI,CAAC,QAAQ;QAC5C,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI;QACjC,WAAW,EAAE,iBAAiB,CAAC,IAAI,CAAC,YAAY;QAChD,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC,SAAS;QAC1C,KAAK,EAAE,WAAW,CAAC,IAAI;QACvB,gBAAgB,EAAE,iBAAiB,CAAC,IAAI,CAAC,yBAAyB;QAClE,kBAAkB,EAAE,iBAAiB,CAAC,IAAI,CAAC,cAAc;QACzD,SAAS,EAAE,mBAAmB,CAAC,iBAAiB,CAAC,IAAI,CAAC;KACvD,CAAA;AACH,CAAC"}

package/dist/lib/email.d.ts

@@ -5,9 +5,15 @@ import type { Logger } from './logger.ts';
  * and account-change notifications, nothing else. Kelpie never sends outreach
  * email.
  *
- * Roadmap decision 4: the provider is configured, never hardcoded. Core ships the
- * port and the `log` provider. Real providers ship as modules, so the open-source
- * assembly has no vendor account baked into it.
+ * Roadmap decision 4: the provider is configured, never hardcoded. Core ships
+ * the port and two providers, `log` and `smtp`. Both need no vendor account a
+ * deployment doesn't already have, which is what keeps them in core rather than
+ * a module, per `modules.md`'s split test. A provider that does need one
+ * (Resend, Postmark, Mailtrap, SendGrid) is a commercial integration under that
+ * same test and belongs in a module: it supplies its own `EmailSender` from its
+ * own config, and an assembly's entry point wires it into `services.email` in
+ * place of `createEmailSender`, the same way `kelpie-cloud/src/server.ts` wires
+ * this one today.
  */
 export interface EmailMessage {
     readonly to: string;
@@ -17,13 +23,35 @@ export interface EmailMessage {
 export interface EmailSender {
     send(message: EmailMessage): Promise<void>;
 }
-export declare const emailConfigSchema: z.ZodObject<{
-    EMAIL_PROVIDER: z.ZodEnum<{
-        log: "log";
-    }>;
+declare const smtpEmailConfigSchema: z.ZodObject<{
+    EMAIL_PROVIDER: z.ZodLiteral<"smtp">;
     EMAIL_FROM: z.ZodString;
+    SMTP_HOST: z.ZodString;
+    SMTP_PORT: z.ZodCoercedNumber<unknown>;
+    SMTP_SECURE: z.ZodPipe<z.ZodEnum<{
+        false: "false";
+        true: "true";
+    }>, z.ZodTransform<boolean, "false" | "true">>;
+    SMTP_USER: z.ZodString;
+    SMTP_PASSWORD: z.ZodString;
 }, z.core.$strip>;
+export declare const emailConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    EMAIL_PROVIDER: z.ZodLiteral<"log">;
+    EMAIL_FROM: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    EMAIL_PROVIDER: z.ZodLiteral<"smtp">;
+    EMAIL_FROM: z.ZodString;
+    SMTP_HOST: z.ZodString;
+    SMTP_PORT: z.ZodCoercedNumber<unknown>;
+    SMTP_SECURE: z.ZodPipe<z.ZodEnum<{
+        false: "false";
+        true: "true";
+    }>, z.ZodTransform<boolean, "false" | "true">>;
+    SMTP_USER: z.ZodString;
+    SMTP_PASSWORD: z.ZodString;
+}, z.core.$strip>], "EMAIL_PROVIDER">;
 export type EmailConfig = z.infer<typeof emailConfigSchema>;
+export type SmtpEmailConfig = z.infer<typeof smtpEmailConfigSchema>;
 /**
  * Writes the message to the log instead of sending it. For self-hosted
  * development, where the reset link in the log is exactly what you want.
@@ -32,11 +60,27 @@ export type EmailConfig = z.infer<typeof emailConfigSchema>;
  * so nobody reaches this provider without naming it.
  */
 export declare function createLogEmailSender(logger: Logger, from: string): EmailSender;
+/**
+ * What `createSmtpEmailSender` sends a message through. A real deployment gets
+ * one backed by `nodemailer`; a test injects one that records calls, so the
+ * sender is verifiable without a container running a real SMTP conversation.
+ */
+export interface SmtpTransport {
+    sendMail(message: {
+        from: string;
+        to: string;
+        subject: string;
+        text: string;
+    }): Promise<unknown>;
+}
+/** Sends over SMTP. `transport` defaults to a real connection built from `config`. */
+export declare function createSmtpEmailSender(config: SmtpEmailConfig, logger: Logger, transport?: SmtpTransport): EmailSender;
 /**
  * Builds the configured sender.
  *
- * @throws Never. An unknown provider cannot reach here: the config schema is an
- *   enum, so boot rejects it first.
+ * @throws Never. An unknown provider cannot reach here: the config schema is a
+ *   discriminated union, so boot rejects it first.
  */
 export declare function createEmailSender(config: EmailConfig, logger: Logger): EmailSender;
+export {};
 //# sourceMappingURL=email.d.ts.map

package/dist/lib/email.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../../src/lib/email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEzC;;;;;;;;GAQG;AAEH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3C;AAED,eAAO,MAAM,iBAAiB;;;;;iBAG5B,CAAA;AAEF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAE3D;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAa9E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAKlF"}
+{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../../src/lib/email.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEzC;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3C;AAOD,QAAA,MAAM,qBAAqB;;;;;;;;;;;iBAQzB,CAAA;AAEF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;qCAG5B,CAAA;AAEF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAC3D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEnE;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAa9E;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACjG;AAWD,sFAAsF;AACtF,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,aAAiD,GAC3D,WAAW,CAiBb;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAOlF"}

package/dist/lib/email.js

@@ -1,8 +1,23 @@
+import nodemailer from 'nodemailer';
 import { z } from 'zod';
-export const emailConfigSchema = z.object({
-    EMAIL_PROVIDER: z.enum(['log']),
+import { describeThrown } from './errors.js';
+const logEmailConfigSchema = z.object({
+    EMAIL_PROVIDER: z.literal('log'),
     EMAIL_FROM: z.string().min(1),
 });
+const smtpEmailConfigSchema = z.object({
+    EMAIL_PROVIDER: z.literal('smtp'),
+    EMAIL_FROM: z.string().min(1),
+    SMTP_HOST: z.string().min(1),
+    SMTP_PORT: z.coerce.number().int().positive().max(65535),
+    SMTP_SECURE: z.enum(['true', 'false']).transform((value) => value === 'true'),
+    SMTP_USER: z.string().min(1),
+    SMTP_PASSWORD: z.string().min(1),
+});
+export const emailConfigSchema = z.discriminatedUnion('EMAIL_PROVIDER', [
+    logEmailConfigSchema,
+    smtpEmailConfigSchema,
+]);
 /**
  * Writes the message to the log instead of sending it. For self-hosted
  * development, where the reset link in the log is exactly what you want.
@@ -23,16 +38,46 @@ export function createLogEmailSender(logger, from) {
         },
     };
 }
+function createNodemailerTransport(config) {
+    return nodemailer.createTransport({
+        host: config.SMTP_HOST,
+        port: config.SMTP_PORT,
+        secure: config.SMTP_SECURE,
+        auth: { user: config.SMTP_USER, pass: config.SMTP_PASSWORD },
+    });
+}
+/** Sends over SMTP. `transport` defaults to a real connection built from `config`. */
+export function createSmtpEmailSender(config, logger, transport = createNodemailerTransport(config)) {
+    return {
+        async send(message) {
+            try {
+                await transport.sendMail({
+                    from: config.EMAIL_FROM,
+                    to: message.to,
+                    subject: message.subject,
+                    text: message.body,
+                });
+            }
+            catch (cause) {
+                const reason = describeThrown(cause);
+                logger.error('smtp send failed', { to: message.to, reason });
+                throw new Error(`Failed to send email to ${message.to} over SMTP: ${reason}`, { cause });
+            }
+        },
+    };
+}
 /**
  * Builds the configured sender.
  *
- * @throws Never. An unknown provider cannot reach here: the config schema is an
- *   enum, so boot rejects it first.
+ * @throws Never. An unknown provider cannot reach here: the config schema is a
+ *   discriminated union, so boot rejects it first.
  */
 export function createEmailSender(config, logger) {
     switch (config.EMAIL_PROVIDER) {
         case 'log':
             return createLogEmailSender(logger, config.EMAIL_FROM);
+        case 'smtp':
+            return createSmtpEmailSender(config, logger);
     }
 }
 //# sourceMappingURL=email.js.map

package/dist/lib/email.js.map

@@ -1 +1 @@
-{"version":3,"file":"email.js","sourceRoot":"","sources":["../../src/lib/email.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAwBvB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC,CAAA;AAIF;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,IAAY;IAC/D,OAAO;QACL,IAAI,CAAC,OAAO;YACV,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;gBAC/C,IAAI;gBACJ,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAA;YAEF,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC1B,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAmB,EAAE,MAAc;IACnE,QAAQ,MAAM,CAAC,cAAc,EAAE,CAAC;QAC9B,KAAK,KAAK;YACR,OAAO,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;IAC1D,CAAC;AACH,CAAC"}
+{"version":3,"file":"email.js","sourceRoot":"","sources":["../../src/lib/email.ts"],"names":[],"mappings":"AAAA,OAAO,UAAU,MAAM,YAAY,CAAA;AACnC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AA6B5C,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC,CAAA;AAEF,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;IACxD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,MAAM,CAAC;IAC7E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,kBAAkB,CAAC,gBAAgB,EAAE;IACtE,oBAAoB;IACpB,qBAAqB;CACtB,CAAC,CAAA;AAKF;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,IAAY;IAC/D,OAAO;QACL,IAAI,CAAC,OAAO;YACV,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;gBAC/C,IAAI;gBACJ,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAA;YAEF,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC1B,CAAC;KACF,CAAA;AACH,CAAC;AAWD,SAAS,yBAAyB,CAAC,MAAuB;IACxD,OAAO,UAAU,CAAC,eAAe,CAAC;QAChC,IAAI,EAAE,MAAM,CAAC,SAAS;QACtB,IAAI,EAAE,MAAM,CAAC,SAAS;QACtB,MAAM,EAAE,MAAM,CAAC,WAAW;QAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,aAAa,EAAE;KAC7D,CAAC,CAAA;AACJ,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,qBAAqB,CACnC,MAAuB,EACvB,MAAc,EACd,SAAS,GAAkB,yBAAyB,CAAC,MAAM,CAAC;IAE5D,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,OAAO;YAChB,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,QAAQ,CAAC;oBACvB,IAAI,EAAE,MAAM,CAAC,UAAU;oBACvB,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;iBACnB,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;gBACpC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;gBAC5D,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,EAAE,eAAe,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;YAC1F,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAmB,EAAE,MAAc;IACnE,QAAQ,MAAM,CAAC,cAAc,EAAE,CAAC;QAC9B,KAAK,KAAK;YACR,OAAO,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;QACxD,KAAK,MAAM;YACT,OAAO,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChD,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kelpie/server",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "The Kelpie service as a library: module runtime, core CRM modules, REST API, MCP surface, and the shared migration pipeline.",
   "keywords": [
     "kelpie",
@@ -52,16 +52,18 @@
   },
   "dependencies": {
     "@hono/node-server": "^2.0.12",
-    "@kelpie/schemas": "^0.4.0",
+    "@kelpie/schemas": "^0.4.1",
     "@node-rs/argon2": "^2.0.2",
     "drizzle-orm": "^0.45.2",
     "hono": "^4.12.32",
+    "nodemailer": "^9.0.5",
     "postgres": "^3.4.9",
     "ulid": "^3.0.2",
     "zod": "^4.4.3"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",
+    "@types/nodemailer": "^8.0.1",
     "drizzle-kit": "^0.31.10",
     "vite": "^8.2.0",
     "vitest": "^4.1.10"

package/src/lib/config.ts

@@ -69,31 +69,41 @@ const environmentSchema = z.object({
   LOG_LEVEL: z.enum(['debug', 'info', 'warn', 'error']),
   KELPIE_MODULE_CONFIG_PATH: z.string().min(1).optional(),
   WEB_BUNDLE_DIR: z.string().min(1).optional(),
-  ...emailConfigSchema.shape,
   ...rateLimitConfigSchema.shape,
 })
 
 /**
  * Parses an environment into a validated config.
  *
+ * `emailConfigSchema` is a discriminated union, so it is parsed separately
+ * from the rest: a union has no flat `.shape` to spread into `environmentSchema`,
+ * only its own `EMAIL_PROVIDER`-keyed branches. Problems from both parses are
+ * combined into one error, preserving the "every missing variable at once" rule.
+ *
  * @param environment Raw variables, normally `process.env`.
  * @throws ConfigurationError listing every invalid or missing variable.
  */
 export function loadConfig(environment: Environment): KelpieConfig {
-  const result = environmentSchema.safeParse(environment)
+  const environmentResult = environmentSchema.safeParse(environment)
+  const emailResult = emailConfigSchema.safeParse(environment)
+
+  if (!environmentResult.success || !emailResult.success) {
+    const problems = [
+      ...(environmentResult.success ? [] : environmentResult.error.issues.map(describeValidationIssue)),
+      ...(emailResult.success ? [] : emailResult.error.issues.map(describeValidationIssue)),
+    ]
 
-  if (!result.success) {
-    throw new ConfigurationError(result.error.issues.map(describeValidationIssue))
+    throw new ConfigurationError(problems)
   }
 
   return {
-    runtimeMode: result.data.NODE_ENV,
-    port: result.data.PORT,
-    databaseUrl: result.data.DATABASE_URL,
-    logLevel: result.data.LOG_LEVEL,
-    email: { EMAIL_PROVIDER: result.data.EMAIL_PROVIDER, EMAIL_FROM: result.data.EMAIL_FROM },
-    moduleConfigPath: result.data.KELPIE_MODULE_CONFIG_PATH,
-    webBundleDirectory: result.data.WEB_BUNDLE_DIR,
-    rateLimit: rateLimitConfigFrom(result.data),
+    runtimeMode: environmentResult.data.NODE_ENV,
+    port: environmentResult.data.PORT,
+    databaseUrl: environmentResult.data.DATABASE_URL,
+    logLevel: environmentResult.data.LOG_LEVEL,
+    email: emailResult.data,
+    moduleConfigPath: environmentResult.data.KELPIE_MODULE_CONFIG_PATH,
+    webBundleDirectory: environmentResult.data.WEB_BUNDLE_DIR,
+    rateLimit: rateLimitConfigFrom(environmentResult.data),
   }
 }

package/src/lib/email.ts

@@ -1,5 +1,7 @@
+import nodemailer from 'nodemailer'
 import { z } from 'zod'
 
+import { describeThrown } from './errors.ts'
 import type { Logger } from './logger.ts'
 
 /**
@@ -7,9 +9,15 @@ import type { Logger } from './logger.ts'
  * and account-change notifications, nothing else. Kelpie never sends outreach
  * email.
  *
- * Roadmap decision 4: the provider is configured, never hardcoded. Core ships the
- * port and the `log` provider. Real providers ship as modules, so the open-source
- * assembly has no vendor account baked into it.
+ * Roadmap decision 4: the provider is configured, never hardcoded. Core ships
+ * the port and two providers, `log` and `smtp`. Both need no vendor account a
+ * deployment doesn't already have, which is what keeps them in core rather than
+ * a module, per `modules.md`'s split test. A provider that does need one
+ * (Resend, Postmark, Mailtrap, SendGrid) is a commercial integration under that
+ * same test and belongs in a module: it supplies its own `EmailSender` from its
+ * own config, and an assembly's entry point wires it into `services.email` in
+ * place of `createEmailSender`, the same way `kelpie-cloud/src/server.ts` wires
+ * this one today.
  */
 
 export interface EmailMessage {
@@ -22,12 +30,28 @@ export interface EmailSender {
   send(message: EmailMessage): Promise<void>
 }
 
-export const emailConfigSchema = z.object({
-  EMAIL_PROVIDER: z.enum(['log']),
+const logEmailConfigSchema = z.object({
+  EMAIL_PROVIDER: z.literal('log'),
   EMAIL_FROM: z.string().min(1),
 })
 
+const smtpEmailConfigSchema = z.object({
+  EMAIL_PROVIDER: z.literal('smtp'),
+  EMAIL_FROM: z.string().min(1),
+  SMTP_HOST: z.string().min(1),
+  SMTP_PORT: z.coerce.number().int().positive().max(65535),
+  SMTP_SECURE: z.enum(['true', 'false']).transform((value) => value === 'true'),
+  SMTP_USER: z.string().min(1),
+  SMTP_PASSWORD: z.string().min(1),
+})
+
+export const emailConfigSchema = z.discriminatedUnion('EMAIL_PROVIDER', [
+  logEmailConfigSchema,
+  smtpEmailConfigSchema,
+])
+
 export type EmailConfig = z.infer<typeof emailConfigSchema>
+export type SmtpEmailConfig = z.infer<typeof smtpEmailConfigSchema>
 
 /**
  * Writes the message to the log instead of sending it. For self-hosted
@@ -51,15 +75,59 @@ export function createLogEmailSender(logger: Logger, from: string): EmailSender
   }
 }
 
+/**
+ * What `createSmtpEmailSender` sends a message through. A real deployment gets
+ * one backed by `nodemailer`; a test injects one that records calls, so the
+ * sender is verifiable without a container running a real SMTP conversation.
+ */
+export interface SmtpTransport {
+  sendMail(message: { from: string; to: string; subject: string; text: string }): Promise<unknown>
+}
+
+function createNodemailerTransport(config: SmtpEmailConfig): SmtpTransport {
+  return nodemailer.createTransport({
+    host: config.SMTP_HOST,
+    port: config.SMTP_PORT,
+    secure: config.SMTP_SECURE,
+    auth: { user: config.SMTP_USER, pass: config.SMTP_PASSWORD },
+  })
+}
+
+/** Sends over SMTP. `transport` defaults to a real connection built from `config`. */
+export function createSmtpEmailSender(
+  config: SmtpEmailConfig,
+  logger: Logger,
+  transport: SmtpTransport = createNodemailerTransport(config),
+): EmailSender {
+  return {
+    async send(message) {
+      try {
+        await transport.sendMail({
+          from: config.EMAIL_FROM,
+          to: message.to,
+          subject: message.subject,
+          text: message.body,
+        })
+      } catch (cause) {
+        const reason = describeThrown(cause)
+        logger.error('smtp send failed', { to: message.to, reason })
+        throw new Error(`Failed to send email to ${message.to} over SMTP: ${reason}`, { cause })
+      }
+    },
+  }
+}
+
 /**
  * Builds the configured sender.
  *
- * @throws Never. An unknown provider cannot reach here: the config schema is an
- *   enum, so boot rejects it first.
+ * @throws Never. An unknown provider cannot reach here: the config schema is a
+ *   discriminated union, so boot rejects it first.
  */
 export function createEmailSender(config: EmailConfig, logger: Logger): EmailSender {
   switch (config.EMAIL_PROVIDER) {
     case 'log':
       return createLogEmailSender(logger, config.EMAIL_FROM)
+    case 'smtp':
+      return createSmtpEmailSender(config, logger)
   }
 }