@kernhq/module-mail 0.1.0

package/dist/contract.d.ts

@@ -0,0 +1,285 @@
+import { z } from 'zod';
+export declare const MODULE_ID = "mail";
+/** Value returned in place of a secret field when reading settings; sending it back keeps the stored value. */
+export declare const SECRET_PLACEHOLDER = "__kern_secret__";
+export declare const MailProviderKind: z.ZodEnum<{
+    platform: "platform";
+    smtp: "smtp";
+    mailgun: "mailgun";
+    ses: "ses";
+    postmark: "postmark";
+    resend: "resend";
+}>;
+export type MailProviderKind = z.infer<typeof MailProviderKind>;
+export declare const MailAttachment: z.ZodObject<{
+    filename: z.ZodString;
+    contentType: z.ZodDefault<z.ZodString>;
+    fileId: z.ZodOptional<z.ZodUUID>;
+    base64: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type MailAttachment = z.infer<typeof MailAttachment>;
+export declare const SendMailInput: z.ZodObject<{
+    workspaceId: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">>;
+    to: z.ZodArray<z.ZodPipe<z.ZodEmail, z.ZodTransform<string, string>>>;
+    cc: z.ZodOptional<z.ZodArray<z.ZodPipe<z.ZodEmail, z.ZodTransform<string, string>>>>;
+    bcc: z.ZodOptional<z.ZodArray<z.ZodPipe<z.ZodEmail, z.ZodTransform<string, string>>>>;
+    subject: z.ZodString;
+    text: z.ZodOptional<z.ZodString>;
+    html: z.ZodOptional<z.ZodString>;
+    template: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        data: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    replyTo: z.ZodOptional<z.ZodPipe<z.ZodEmail, z.ZodTransform<string, string>>>;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    attachments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        filename: z.ZodString;
+        contentType: z.ZodDefault<z.ZodString>;
+        fileId: z.ZodOptional<z.ZodUUID>;
+        base64: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type SendMailInput = z.infer<typeof SendMailInput>;
+export declare const MailDeliveryStatus: z.ZodEnum<{
+    queued: "queued";
+    sent: "sent";
+    failed: "failed";
+    bounced: "bounced";
+}>;
+export type MailDeliveryStatus = z.infer<typeof MailDeliveryStatus>;
+export declare const MailDelivery: z.ZodObject<{
+    id: z.ZodUUID;
+    workspaceId: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">>;
+    to: z.ZodArray<z.ZodString>;
+    subject: z.ZodString;
+    provider: z.ZodEnum<{
+        platform: "platform";
+        smtp: "smtp";
+        mailgun: "mailgun";
+        ses: "ses";
+        postmark: "postmark";
+        resend: "resend";
+    }>;
+    template: z.ZodNullable<z.ZodString>;
+    status: z.ZodEnum<{
+        queued: "queued";
+        sent: "sent";
+        failed: "failed";
+        bounced: "bounced";
+    }>;
+    providerMessageId: z.ZodNullable<z.ZodString>;
+    error: z.ZodNullable<z.ZodString>;
+    tags: z.ZodArray<z.ZodString>;
+    createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type MailDelivery = z.infer<typeof MailDelivery>;
+export declare const MailSuppression: z.ZodObject<{
+    id: z.ZodUUID;
+    workspaceId: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">>;
+    email: z.ZodString;
+    reason: z.ZodEnum<{
+        bounce: "bounce";
+        complaint: "complaint";
+        manual: "manual";
+    }>;
+    source: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type MailSuppression = z.infer<typeof MailSuppression>;
+/**
+ * Workspace mail settings as exposed over the API. Secret fields are replaced with
+ * SECRET_PLACEHOLDER on read; sending the placeholder back keeps the stored secret.
+ * The stored shape is `core.MailProviderConfig` (contracts).
+ */
+export declare const mailContract: {
+    settings: {
+        get: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+        }, z.core.$strip>, z.ZodObject<{
+            config: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+        set: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            config: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, z.core.$strip>, z.ZodObject<{
+            ok: z.ZodBoolean;
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+        test: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            to: z.ZodPipe<z.ZodEmail, z.ZodTransform<string, string>>;
+        }, z.core.$strip>, z.ZodObject<{
+            ok: z.ZodBoolean;
+            error: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+    };
+    deliveries: {
+        list: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            workspaceId: z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">;
+            cursor: z.ZodOptional<z.ZodString>;
+            limit: z.ZodDefault<z.ZodNumber>;
+            status: z.ZodOptional<z.ZodEnum<{
+                queued: "queued";
+                sent: "sent";
+                failed: "failed";
+                bounced: "bounced";
+            }>>;
+        }, z.core.$strip>, z.ZodObject<{
+            items: z.ZodArray<z.ZodObject<{
+                id: z.ZodUUID;
+                workspaceId: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">>;
+                to: z.ZodArray<z.ZodString>;
+                subject: z.ZodString;
+                provider: z.ZodEnum<{
+                    platform: "platform";
+                    smtp: "smtp";
+                    mailgun: "mailgun";
+                    ses: "ses";
+                    postmark: "postmark";
+                    resend: "resend";
+                }>;
+                template: z.ZodNullable<z.ZodString>;
+                status: z.ZodEnum<{
+                    queued: "queued";
+                    sent: "sent";
+                    failed: "failed";
+                    bounced: "bounced";
+                }>;
+                providerMessageId: z.ZodNullable<z.ZodString>;
+                error: z.ZodNullable<z.ZodString>;
+                tags: z.ZodArray<z.ZodString>;
+                createdAt: z.ZodISODateTime;
+                updatedAt: z.ZodISODateTime;
+            }, z.core.$strip>>;
+            nextCursor: z.ZodNullable<z.ZodString>;
+            total: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>, import("@orpc/contract").MergedErrorMap<Record<never, never>, {
+            BAD_REQUEST: {
+                data: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+            };
+            UNAUTHORIZED: {};
+            FORBIDDEN: {
+                data: z.ZodOptional<z.ZodObject<{
+                    permission: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            NOT_FOUND: {};
+            CONFLICT: {
+                data: z.ZodOptional<z.ZodObject<{
+                    reason: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            };
+            RATE_LIMITED: {};
+            MODULE_DISABLED: {
+                data: z.ZodObject<{
+                    module: z.ZodString;
+                }, z.core.$strip>;
+            };
+        }>, Record<never, never>>;
+    };
+};
+export type MailContract = typeof mailContract;
+export declare const mailEvents: {
+    deliverySent: import("@kernhq/contracts").EventDef<"mail.delivery.sent", z.ZodObject<{
+        deliveryId: z.ZodUUID;
+        workspaceId: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">>;
+        to: z.ZodArray<z.ZodString>;
+        providerMessageId: z.ZodNullable<z.ZodString>;
+        error: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    deliveryFailed: import("@kernhq/contracts").EventDef<"mail.delivery.failed", z.ZodObject<{
+        deliveryId: z.ZodUUID;
+        workspaceId: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">>;
+        to: z.ZodArray<z.ZodString>;
+        providerMessageId: z.ZodNullable<z.ZodString>;
+        error: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    deliveryBounced: import("@kernhq/contracts").EventDef<"mail.delivery.bounced", z.ZodObject<{
+        deliveryId: z.ZodUUID;
+        workspaceId: z.ZodNullable<z.core.$ZodBranded<z.ZodUUID, "WorkspaceId", "out">>;
+        to: z.ZodArray<z.ZodString>;
+        providerMessageId: z.ZodNullable<z.ZodString>;
+        error: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+};
+export declare const mailPermissions: readonly [{
+    readonly key: "mail.settings.manage";
+    readonly label: "Manage mail settings";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner", "admin"];
+    readonly dangerous: true;
+}, {
+    readonly key: "mail.deliveries.view";
+    readonly label: "View mail deliveries";
+    readonly scope: "workspace";
+    readonly defaultRoles: ["owner", "admin"];
+    readonly dangerous: false;
+}];
+//# sourceMappingURL=contract.d.ts.map

package/dist/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,eAAO,MAAM,SAAS,SAAS,CAAA;AAE/B,+GAA+G;AAC/G,eAAO,MAAM,kBAAkB,oBAAoB,CAAA;AAEnD,eAAO,MAAM,gBAAgB;;;;;;;EAAuE,CAAA;AACpG,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAE/D,eAAO,MAAM,cAAc;;;;;iBAWvB,CAAA;AACJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;AAE3D,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;iBAgBxB,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAEzD,eAAO,MAAM,kBAAkB;;;;;EAAkD,CAAA;AACjF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAEnE,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;iBAavB,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAA;AAEvD,eAAO,MAAM,eAAe;;;;;;;;;;;iBAO1B,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAI7D;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqBxB,CAAA;AACD,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAA;AAS9C,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;CAItB,CAAA;AAED,eAAO,MAAM,eAAe;;;;;;;;;;;;EAe1B,CAAA"}

package/dist/contract.js

@@ -0,0 +1,115 @@
+import { baseContract, defineEvent, definePermissions, Email, PageInput, page, Timestamp, WorkspaceId, } from '@kernhq/contracts';
+import { z } from 'zod';
+export const MODULE_ID = 'mail';
+/** Value returned in place of a secret field when reading settings; sending it back keeps the stored value. */
+export const SECRET_PLACEHOLDER = '__kern_secret__';
+export const MailProviderKind = z.enum(['platform', 'smtp', 'mailgun', 'ses', 'postmark', 'resend']);
+export const MailAttachment = z
+    .object({
+    filename: z.string().min(1).max(255),
+    contentType: z.string().default('application/octet-stream'),
+    /** id of a file stored in core files (fetched at send time) */
+    fileId: z.uuid().optional(),
+    /** inline content, base64-encoded (small attachments only) */
+    base64: z.string().optional(),
+})
+    .refine((a) => Boolean(a.fileId) !== Boolean(a.base64), {
+    message: 'exactly one of fileId or base64 is required',
+});
+export const SendMailInput = z.object({
+    /** omitted for instance-level mail (signup verification…): the platform provider is used */
+    workspaceId: WorkspaceId.optional(),
+    to: z.array(Email).min(1).max(50),
+    cc: z.array(Email).max(50).optional(),
+    bcc: z.array(Email).max(50).optional(),
+    subject: z.string().min(1).max(500),
+    text: z.string().optional(),
+    html: z.string().optional(),
+    /** render a named MJML template with `data` instead of passing text/html */
+    template: z.object({ name: z.string(), data: z.record(z.string(), z.unknown()).default({}) }).optional(),
+    replyTo: Email.optional(),
+    headers: z.record(z.string(), z.string()).optional(),
+    attachments: z.array(MailAttachment).max(20).optional(),
+    /** free-form tags stored on the delivery (e.g. `digest`, `invite`) */
+    tags: z.array(z.string().max(64)).max(10).optional(),
+});
+export const MailDeliveryStatus = z.enum(['queued', 'sent', 'failed', 'bounced']);
+export const MailDelivery = z.object({
+    id: z.uuid(),
+    workspaceId: WorkspaceId.nullable(),
+    to: z.array(z.string()),
+    subject: z.string(),
+    provider: MailProviderKind,
+    template: z.string().nullable(),
+    status: MailDeliveryStatus,
+    providerMessageId: z.string().nullable(),
+    error: z.string().nullable(),
+    tags: z.array(z.string()),
+    createdAt: Timestamp,
+    updatedAt: Timestamp,
+});
+export const MailSuppression = z.object({
+    id: z.uuid(),
+    workspaceId: WorkspaceId.nullable(),
+    email: z.string(),
+    reason: z.enum(['bounce', 'complaint', 'manual']),
+    source: z.string().nullable(),
+    createdAt: Timestamp,
+});
+const ws = z.object({ workspaceId: WorkspaceId });
+/**
+ * Workspace mail settings as exposed over the API. Secret fields are replaced with
+ * SECRET_PLACEHOLDER on read; sending the placeholder back keeps the stored secret.
+ * The stored shape is `core.MailProviderConfig` (contracts).
+ */
+export const mailContract = {
+    settings: {
+        get: baseContract
+            .route({ method: 'GET', path: '/settings', tags: ['mail'] })
+            .input(ws)
+            .output(z.object({ config: z.record(z.string(), z.unknown()).nullable() })),
+        set: baseContract
+            .route({ method: 'PUT', path: '/settings', tags: ['mail'] })
+            .input(ws.extend({ config: z.record(z.string(), z.unknown()).nullable() }))
+            .output(z.object({ ok: z.boolean() })),
+        test: baseContract
+            .route({ method: 'POST', path: '/settings/test', tags: ['mail'] })
+            .input(ws.extend({ to: Email }))
+            .output(z.object({ ok: z.boolean(), error: z.string().nullable() })),
+    },
+    deliveries: {
+        list: baseContract
+            .route({ method: 'GET', path: '/deliveries', tags: ['mail'] })
+            .input(ws.extend(PageInput.shape).extend({ status: MailDeliveryStatus.optional() }))
+            .output(page(MailDelivery)),
+    },
+};
+const deliveryEvent = z.object({
+    deliveryId: z.uuid(),
+    workspaceId: WorkspaceId.nullable(),
+    to: z.array(z.string()),
+    providerMessageId: z.string().nullable(),
+    error: z.string().nullable(),
+});
+export const mailEvents = {
+    deliverySent: defineEvent('mail.delivery.sent', deliveryEvent),
+    deliveryFailed: defineEvent('mail.delivery.failed', deliveryEvent),
+    deliveryBounced: defineEvent('mail.delivery.bounced', deliveryEvent),
+};
+export const mailPermissions = definePermissions([
+    {
+        key: 'mail.settings.manage',
+        label: 'Manage mail settings',
+        scope: 'workspace',
+        defaultRoles: ['owner', 'admin'],
+        dangerous: true,
+    },
+    {
+        key: 'mail.deliveries.view',
+        label: 'View mail deliveries',
+        scope: 'workspace',
+        defaultRoles: ['owner', 'admin'],
+        dangerous: false,
+    },
+]);
+//# sourceMappingURL=contract.js.map

package/dist/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,KAAK,EACL,SAAS,EACT,IAAI,EACJ,SAAS,EACT,WAAW,GACZ,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAA;AAE/B,+GAA+G;AAC/G,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAA;AAEnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAA;AAGpG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC3D,+DAA+D;IAC/D,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC3B,8DAA8D;IAC9D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE;IACtD,OAAO,EAAE,6CAA6C;CACvD,CAAC,CAAA;AAGJ,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,4FAA4F;IAC5F,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;IACnC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,4EAA4E;IAC5E,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxG,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvD,sEAAsE;IACtE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;AAGjF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;IACnC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,gBAAgB;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,kBAAkB;IAC1B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,SAAS;IACpB,SAAS,EAAE,SAAS;CACrB,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,SAAS;CACrB,CAAC,CAAA;AAGF,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAA;AAEjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,QAAQ,EAAE;QACR,GAAG,EAAE,YAAY;aACd,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;aAC3D,KAAK,CAAC,EAAE,CAAC;aACT,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7E,GAAG,EAAE,YAAY;aACd,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;aAC3D,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;aAC1E,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,EAAE,YAAY;aACf,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;aACjE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;aAC/B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;KACvE;IACD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;aACf,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;aAC7D,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;aACnF,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;KAC9B;CACF,CAAA;AAGD,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE;IACpB,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;IACnC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACvB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAA;AACF,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,YAAY,EAAE,WAAW,CAAC,oBAAoB,EAAE,aAAa,CAAC;IAC9D,cAAc,EAAE,WAAW,CAAC,sBAAsB,EAAE,aAAa,CAAC;IAClE,eAAe,EAAE,WAAW,CAAC,uBAAuB,EAAE,aAAa,CAAC;CACrE,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;IAC/C;QACE,GAAG,EAAE,sBAAsB;QAC3B,KAAK,EAAE,sBAAsB;QAC7B,KAAK,EAAE,WAAW;QAClB,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAChC,SAAS,EAAE,IAAI;KAChB;IACD;QACE,GAAG,EAAE,sBAAsB;QAC3B,KAAK,EAAE,sBAAsB;QAC7B,KAAK,EAAE,WAAW;QAClB,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAChC,SAAS,EAAE,KAAK;KACjB;CACF,CAAC,CAAA"}

package/dist/server/index.d.ts

@@ -0,0 +1,29 @@
+import { type Kernel } from '@kernhq/kernel';
+import { z } from 'zod';
+import { MODULE_ID, mailContract, mailEvents, mailPermissions, SECRET_PLACEHOLDER, SendMailInput } from '../contract.js';
+export * from './providers/index.js';
+export * from './schema.js';
+export * from './send.js';
+export * from './settings.js';
+export * from './suppressions.js';
+export * from './templates.js';
+/**
+ * Queues an email. Every caller — this module's own API, other modules through `kernel.call('mail.send')`
+ * and the core service's account emails — goes through here, so delivery, retries, suppression and the
+ * audit trail behave identically no matter who sent the message.
+ */
+export declare function queueSend(kernel: Kernel, input: SendMailInput): Promise<{
+    deliveryId: string;
+    status: string;
+}>;
+/**
+ * The mail module: outbound email for the whole platform. Providers are configured per workspace
+ * (SMTP, Mailgun, SES, Postmark, Resend) and fall back to the instance's own SMTP settings, so a
+ * self-hosted install works with nothing but `SMTP_URL`.
+ */
+export declare const mailModule: import("@kernhq/kernel").ServerModule<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+export { MODULE_ID, mailContract, mailEvents, mailPermissions, SECRET_PLACEHOLDER };
+export default mailModule;
+/** Guard used by the service when a provider webhook arrives for an unknown delivery. */
+export declare function requireDelivery<T>(row: T | undefined | null): T;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,MAAM,EAIZ,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAEL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,aAAa,EACd,MAAM,gBAAgB,CAAA;AAOvB,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,gBAAgB,CAAA;AAK9B;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBjD;AA2ED;;;;GAIG;AACH,eAAO,MAAM,UAAU,gHA4DrB,CAAA;AAEF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,CAAA;AACnF,eAAe,UAAU,CAAA;AAEzB,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,SAAS,GAAG,IAAI,GAAG,CAAC,CAG/D"}

package/dist/server/index.js

@@ -0,0 +1,189 @@
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { defineModule, defineServerModule, KernError, requires, uuidv7, workspaceScoped, } from '@kernhq/kernel';
+import { implement } from '@orpc/server';
+import { and, desc, eq, lt } from 'drizzle-orm';
+import { z } from 'zod';
+import { MODULE_ID, mailContract, mailEvents, mailPermissions, SECRET_PLACEHOLDER, SendMailInput, } from '../contract.js';
+import { deliveries, schema } from './schema.js';
+import { buildMessage, instanceName, processSend, resolveConfig } from './send.js';
+import { maskConfig, unmaskConfig } from './settings.js';
+import { addSuppression } from './suppressions.js';
+import { renderTemplate } from './templates.js';
+export * from './providers/index.js';
+export * from './schema.js';
+export * from './send.js';
+export * from './settings.js';
+export * from './suppressions.js';
+export * from './templates.js';
+const SEND_JOB = 'send';
+const iso = (d) => d.toISOString();
+/**
+ * Queues an email. Every caller — this module's own API, other modules through `kernel.call('mail.send')`
+ * and the core service's account emails — goes through here, so delivery, retries, suppression and the
+ * audit trail behave identically no matter who sent the message.
+ */
+export async function queueSend(kernel, input) {
+    const message = SendMailInput.parse(input);
+    const config = await resolveConfig(kernel, message.workspaceId);
+    const built = await buildMessage(kernel, message, fromAddress(config));
+    const deliveryId = uuidv7();
+    await kernel.database.db.insert(deliveries).values({
+        id: deliveryId,
+        workspaceId: message.workspaceId ?? null,
+        to: message.to,
+        subject: built.subject,
+        provider: config?.provider ?? 'platform',
+        template: message.template?.name ?? null,
+        status: 'queued',
+        tags: message.tags ?? [],
+    });
+    await kernel.jobs.send(`${MODULE_ID}.${SEND_JOB}`, { deliveryId, message });
+    return { deliveryId, status: 'queued' };
+}
+/** The envelope sender for a workspace's configured provider, or the instance default. */
+function fromAddress(config) {
+    if (config && 'from' in config && typeof config.from === 'string')
+        return config.from;
+    return process.env.MAIL_FROM ?? `${instanceName()} <no-reply@localhost>`;
+}
+const os = implement(mailContract).$context();
+function mailRouter(kernel) {
+    const scoped = os.use(workspaceScoped(MODULE_ID));
+    return os.router({
+        settings: {
+            get: scoped.settings.get.use(requires('mail.settings.manage')).handler(async ({ input }) => {
+                const stored = await kernel.settings.integration(input.workspaceId, 'mail');
+                return { config: stored ? maskConfig(stored) : null };
+            }),
+            set: scoped.settings.set.use(requires('mail.settings.manage')).handler(async ({ input }) => {
+                if (input.config === null) {
+                    await kernel.settings.setIntegration(input.workspaceId, 'mail', null);
+                    return { ok: true };
+                }
+                const previous = await kernel.settings.integration(input.workspaceId, 'mail');
+                // secrets come back from the client as placeholders; keep whatever is already stored
+                const merged = unmaskConfig(input.config, previous ?? null);
+                await kernel.settings.setIntegration(input.workspaceId, 'mail', merged);
+                return { ok: true };
+            }),
+            test: scoped.settings.test.use(requires('mail.settings.manage')).handler(async ({ input }) => {
+                try {
+                    await queueSend(kernel, {
+                        workspaceId: input.workspaceId,
+                        to: [input.to],
+                        subject: `${instanceName()} test message`,
+                        template: { name: 'test', data: { instanceName: instanceName() } },
+                    });
+                    return { ok: true, error: null };
+                }
+                catch (err) {
+                    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+                }
+            }),
+        },
+        deliveries: {
+            list: scoped.deliveries.list.use(requires('mail.deliveries.view')).handler(async ({ input }) => {
+                const where = [eq(deliveries.workspaceId, input.workspaceId)];
+                if (input.status)
+                    where.push(eq(deliveries.status, input.status));
+                if (input.cursor)
+                    where.push(lt(deliveries.id, input.cursor));
+                const rows = await kernel.database.db
+                    .select()
+                    .from(deliveries)
+                    .where(and(...where))
+                    .orderBy(desc(deliveries.id))
+                    .limit(input.limit + 1);
+                const items = rows.slice(0, input.limit).map((r) => ({
+                    id: r.id,
+                    workspaceId: r.workspaceId,
+                    to: r.to,
+                    subject: r.subject,
+                    provider: r.provider,
+                    template: r.template,
+                    status: r.status,
+                    providerMessageId: r.providerMessageId,
+                    error: r.error,
+                    tags: r.tags,
+                    createdAt: iso(r.createdAt),
+                    updatedAt: iso(r.updatedAt),
+                }));
+                const nextCursor = rows.length > input.limit ? (items.at(-1)?.id ?? null) : null;
+                return { items, nextCursor };
+            }),
+        },
+    });
+}
+/**
+ * The mail module: outbound email for the whole platform. Providers are configured per workspace
+ * (SMTP, Mailgun, SES, Postmark, Resend) and fall back to the instance's own SMTP settings, so a
+ * self-hosted install works with nothing but `SMTP_URL`.
+ */
+export const mailModule = defineServerModule({
+    definition: defineModule({
+        id: MODULE_ID,
+        name: 'Mail',
+        version: '0.1.0',
+        description: 'Outbound email: per-workspace providers, templates, delivery log and suppressions',
+        icon: 'mail',
+        core: false,
+        defaultHost: 'mail',
+        permissions: mailPermissions,
+        events: mailEvents,
+    }),
+    schema,
+    migrationsFolder: join(dirname(fileURLToPath(import.meta.url)), '../../migrations'),
+    router: mailRouter,
+    jobs: [
+        {
+            name: SEND_JOB,
+            schema: z.object({ deliveryId: z.uuid(), message: SendMailInput }),
+            options: { retryLimit: 5, retryDelay: 30, retryBackoff: true },
+            handler: async (input, { kernel }) => processSend(kernel, input),
+        },
+    ],
+    procedures: {
+        /** Send an email. Used by core for account mail and by any module that needs to notify people. */
+        send: {
+            input: SendMailInput,
+            output: z.object({ deliveryId: z.string(), status: z.string() }),
+            handler: (input, { kernel }) => queueSend(kernel, input),
+        },
+        /** Render a template without sending it — used for previews and tests. */
+        render: {
+            input: z.object({ name: z.string(), data: z.record(z.string(), z.unknown()).default({}) }),
+            output: z.object({ subject: z.string(), html: z.string(), text: z.string() }),
+            handler: (input) => renderTemplate(input.name, input.data, { instanceName: instanceName() }),
+        },
+        /** Record a bounce or complaint so later sends skip the address. */
+        suppress: {
+            input: z.object({
+                workspaceId: z.string().nullable().default(null),
+                email: z.string(),
+                reason: z.string(),
+            }),
+            handler: async (input, { kernel }) => {
+                await addSuppression(kernel, {
+                    workspaceId: input.workspaceId,
+                    email: input.email,
+                    reason: input.reason,
+                });
+                return { ok: true };
+            },
+        },
+    },
+    /** Provider webhooks are mounted by the mail service (see `repos/mail/src/webhooks.ts`). */
+    onBoot: (kernel) => {
+        kernel.log.info({ module: MODULE_ID }, 'mail module ready');
+    },
+});
+export { MODULE_ID, mailContract, mailEvents, mailPermissions, SECRET_PLACEHOLDER };
+export default mailModule;
+/** Guard used by the service when a provider webhook arrives for an unknown delivery. */
+export function requireDelivery(row) {
+    if (!row)
+        throw KernError.notFound('Delivery');
+    return row;
+}
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,SAAS,EAET,QAAQ,EACR,MAAM,EACN,eAAe,GAChB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAEL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,aAAa,GACd,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAClF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAE/C,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,gBAAgB,CAAA;AAE9B,MAAM,QAAQ,GAAG,MAAM,CAAA;AACvB,MAAM,GAAG,GAAG,CAAC,CAAO,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;AAExC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,KAAoB;IAEpB,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IAC/D,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IACtE,MAAM,UAAU,GAAG,MAAM,EAAE,CAAA;IAC3B,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;QACjD,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACxC,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,UAAU;QACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI;QACxC,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;KACzB,CAAC,CAAA;IACF,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;IAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AACzC,CAAC;AAED,0FAA0F;AAC1F,SAAS,WAAW,CAAC,MAAsC;IACzD,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAA;IACrF,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,YAAY,EAAE,uBAAuB,CAAA;AAC1E,CAAC;AAED,MAAM,EAAE,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,QAAQ,EAA2C,CAAA;AAEtF,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAA;IACjD,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE;YACR,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACzF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,CAA0B,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;gBACpG,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YACvD,CAAC,CAAC;YACF,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACzF,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;oBAC1B,MAAM,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;oBACrE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;gBACrB,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,CAA0B,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;gBACtG,qFAAqF;gBACrF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAA;gBAC3D,MAAM,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;gBACvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;YACrB,CAAC,CAAC;YACF,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3F,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,MAAM,EAAE;wBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC9B,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;wBACd,OAAO,EAAE,GAAG,YAAY,EAAE,eAAe;wBACzC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,EAAE;qBACnE,CAAC,CAAA;oBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;gBAClC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;gBAC/E,CAAC;YACH,CAAC,CAAC;SACH;QACD,UAAU,EAAE;YACV,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC7F,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA;gBAC7D,IAAI,KAAK,CAAC,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;gBACjE,IAAI,KAAK,CAAC,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;gBAC7D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE;qBAClC,MAAM,EAAE;qBACR,IAAI,CAAC,UAAU,CAAC;qBAChB,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;qBACpB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;qBAC5B,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;gBACzB,MAAM,KAAK,GAAmB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnE,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,WAAW,EAAE,CAAC,CAAC,WAA0C;oBACzD,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,QAAQ,EAAE,CAAC,CAAC,QAAoC;oBAChD,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,MAAM,EAAE,CAAC,CAAC,MAAgC;oBAC1C,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;oBACtC,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC3B,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;iBAC5B,CAAC,CAAC,CAAA;gBACH,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;gBAChF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;YAC9B,CAAC,CAAC;SACH;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,kBAAkB,CAAC;IAC3C,UAAU,EAAE,YAAY,CAAC;QACvB,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,mFAAmF;QAChG,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,eAAe;QAC5B,MAAM,EAAE,UAAU;KACnB,CAAC;IACF,MAAM;IACN,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;IACnF,MAAM,EAAE,UAAU;IAElB,IAAI,EAAE;QACJ;YACE,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;YAClE,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;YAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC;SACjE;KACF;IAED,UAAU,EAAE;QACV,kGAAkG;QAClG,IAAI,EAAE;YACJ,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAChE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;SACzD;QACD,0EAA0E;QAC1E,MAAM,EAAE;YACN,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1F,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7E,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,CAAC;SAC7F;QACD,oEAAoE;QACpE,QAAQ,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;gBACd,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;gBAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;gBACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;aACnB,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;gBACnC,MAAM,cAAc,CAAC,MAAM,EAAE;oBAC3B,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,CAAA;gBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;YACrB,CAAC;SACF;KACF;IAED,4FAA4F;IAC5F,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QACjB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,mBAAmB,CAAC,CAAA;IAC7D,CAAC;CACF,CAAC,CAAA;AAEF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,CAAA;AACnF,eAAe,UAAU,CAAA;AAEzB,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAI,GAAyB;IAC1D,IAAI,CAAC,GAAG;QAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IAC9C,OAAO,GAAG,CAAA;AACZ,CAAC"}