@kernhq/module-mail 0.2.2 → 0.3.1

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,MAAM,EAKZ,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAEL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,aAAa,EACd,MAAM,gBAAgB,CAAA;AAOvB,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,gBAAgB,CAAA;AAK9B;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBjD;AA2ED;;;;GAIG;AACH,eAAO,MAAM,UAAU,gHA4DrB,CAAA;AAEF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,CAAA;AACnF,eAAe,UAAU,CAAA;AAEzB,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,SAAS,GAAG,IAAI,GAAG,CAAC,CAG/D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,MAAM,EAKZ,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAEL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,aAAa,EACd,MAAM,gBAAgB,CAAA;AAOvB,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,gBAAgB,CAAA;AAK9B;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBjD;AA2ED;;;;GAIG;AACH,eAAO,MAAM,UAAU,gHA8DrB,CAAA;AAEF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,CAAA;AACnF,eAAe,UAAU,CAAA;AAEzB,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,SAAS,GAAG,IAAI,GAAG,CAAC,CAG/D"}

package/dist/server/index.js

@@ -132,6 +132,8 @@ export const mailModule = defineServerModule({
         permissions: mailPermissions,
         events: mailEvents,
     }),
+    /** Attached so the developer panel can check the router against what was promised. */
+    contract: mailContract,
     schema,
     migrationsFolder: join(dirname(fileURLToPath(import.meta.url)), '../../migrations'),
     router: mailRouter,

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,SAAS,EAET,cAAc,EACd,QAAQ,EACR,MAAM,EACN,eAAe,GAChB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAEL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,aAAa,GACd,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAClF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAE/C,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,gBAAgB,CAAA;AAE9B,MAAM,QAAQ,GAAG,MAAM,CAAA;AACvB,MAAM,GAAG,GAAG,CAAC,CAAO,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;AAExC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,KAAoB;IAEpB,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IAC/D,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IACtE,MAAM,UAAU,GAAG,MAAM,EAAE,CAAA;IAC3B,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;QACjD,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACxC,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,UAAU;QACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI;QACxC,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;KACzB,CAAC,CAAA;IACF,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;IAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AACzC,CAAC;AAED,0FAA0F;AAC1F,SAAS,WAAW,CAAC,MAAsC;IACzD,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAA;IACrF,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,YAAY,EAAE,uBAAuB,CAAA;AAC1E,CAAC;AAED,MAAM,EAAE,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,QAAQ,EAA2C,CAAA;AAEtF,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAA;IACjD,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE;YACR,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACzF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,CAA0B,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;gBACpG,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YACvD,CAAC,CAAC;YACF,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACzF,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;oBAC1B,MAAM,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;oBACrE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;gBACrB,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,CAA0B,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;gBACtG,qFAAqF;gBACrF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAA;gBAC3D,MAAM,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;gBACvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;YACrB,CAAC,CAAC;YACF,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3F,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,MAAM,EAAE;wBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC9B,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;wBACd,OAAO,EAAE,GAAG,YAAY,EAAE,eAAe;wBACzC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,EAAE;qBACnE,CAAC,CAAA;oBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;gBAClC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;gBAC/E,CAAC;YACH,CAAC,CAAC;SACH;QACD,UAAU,EAAE;YACV,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC7F,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA;gBAC7D,IAAI,KAAK,CAAC,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;gBACjE,IAAI,KAAK,CAAC,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;gBAC7D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE;qBAClC,MAAM,EAAE;qBACR,IAAI,CAAC,UAAU,CAAC;qBAChB,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;qBACpB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;qBAC5B,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;gBACzB,MAAM,KAAK,GAAmB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnE,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,WAAW,EAAE,CAAC,CAAC,WAA0C;oBACzD,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,QAAQ,EAAE,CAAC,CAAC,QAAoC;oBAChD,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,MAAM,EAAE,CAAC,CAAC,MAAgC;oBAC1C,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;oBACtC,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC3B,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;iBAC5B,CAAC,CAAC,CAAA;gBACH,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;gBAChF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;YAC9B,CAAC,CAAC;SACH;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,kBAAkB,CAAC;IAC3C,UAAU,EAAE,YAAY,CAAC;QACvB,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACxC,WAAW,EAAE,mFAAmF;QAChG,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,eAAe;QAC5B,MAAM,EAAE,UAAU;KACnB,CAAC;IACF,MAAM;IACN,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;IACnF,MAAM,EAAE,UAAU;IAElB,IAAI,EAAE;QACJ;YACE,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;YAClE,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;YAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC;SACjE;KACF;IAED,UAAU,EAAE;QACV,kGAAkG;QAClG,IAAI,EAAE;YACJ,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAChE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;SACzD;QACD,0EAA0E;QAC1E,MAAM,EAAE;YACN,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1F,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7E,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,CAAC;SAC7F;QACD,oEAAoE;QACpE,QAAQ,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;gBACd,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;gBAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;gBACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;aACnB,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;gBACnC,MAAM,cAAc,CAAC,MAAM,EAAE;oBAC3B,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,CAAA;gBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;YACrB,CAAC;SACF;KACF;IAED,4FAA4F;IAC5F,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QACjB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,mBAAmB,CAAC,CAAA;IAC7D,CAAC;CACF,CAAC,CAAA;AAEF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,CAAA;AACnF,eAAe,UAAU,CAAA;AAEzB,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAI,GAAyB;IAC1D,IAAI,CAAC,GAAG;QAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IAC9C,OAAO,GAAG,CAAA;AACZ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,SAAS,EAET,cAAc,EACd,QAAQ,EACR,MAAM,EACN,eAAe,GAChB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACxC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAEL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,aAAa,GACd,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAClF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAE/C,cAAc,sBAAsB,CAAA;AACpC,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,mBAAmB,CAAA;AACjC,cAAc,gBAAgB,CAAA;AAE9B,MAAM,QAAQ,GAAG,MAAM,CAAA;AACvB,MAAM,GAAG,GAAG,CAAC,CAAO,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;AAExC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,KAAoB;IAEpB,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IAC/D,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IACtE,MAAM,UAAU,GAAG,MAAM,EAAE,CAAA;IAC3B,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;QACjD,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACxC,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,UAAU;QACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI;QACxC,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;KACzB,CAAC,CAAA;IACF,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAA;IAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AACzC,CAAC;AAED,0FAA0F;AAC1F,SAAS,WAAW,CAAC,MAAsC;IACzD,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAA;IACrF,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,YAAY,EAAE,uBAAuB,CAAA;AAC1E,CAAC;AAED,MAAM,EAAE,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,QAAQ,EAA2C,CAAA;AAEtF,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAA;IACjD,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE;YACR,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACzF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,CAA0B,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;gBACpG,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YACvD,CAAC,CAAC;YACF,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACzF,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;oBAC1B,MAAM,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;oBACrE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;gBACrB,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,CAA0B,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;gBACtG,qFAAqF;gBACrF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAA;gBAC3D,MAAM,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;gBACvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;YACrB,CAAC,CAAC;YACF,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3F,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,MAAM,EAAE;wBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC9B,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;wBACd,OAAO,EAAE,GAAG,YAAY,EAAE,eAAe;wBACzC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,EAAE;qBACnE,CAAC,CAAA;oBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;gBAClC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;gBAC/E,CAAC;YACH,CAAC,CAAC;SACH;QACD,UAAU,EAAE;YACV,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC7F,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA;gBAC7D,IAAI,KAAK,CAAC,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;gBACjE,IAAI,KAAK,CAAC,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;gBAC7D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE;qBAClC,MAAM,EAAE;qBACR,IAAI,CAAC,UAAU,CAAC;qBAChB,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;qBACpB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;qBAC5B,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;gBACzB,MAAM,KAAK,GAAmB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnE,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,WAAW,EAAE,CAAC,CAAC,WAA0C;oBACzD,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,QAAQ,EAAE,CAAC,CAAC,QAAoC;oBAChD,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,MAAM,EAAE,CAAC,CAAC,MAAgC;oBAC1C,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;oBACtC,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC3B,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;iBAC5B,CAAC,CAAC,CAAA;gBACH,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;gBAChF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;YAC9B,CAAC,CAAC;SACH;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,kBAAkB,CAAC;IAC3C,UAAU,EAAE,YAAY,CAAC;QACvB,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACxC,WAAW,EAAE,mFAAmF;QAChG,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,eAAe;QAC5B,MAAM,EAAE,UAAU;KACnB,CAAC;IACF,sFAAsF;IACtF,QAAQ,EAAE,YAAY;IACtB,MAAM;IACN,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;IACnF,MAAM,EAAE,UAAU;IAElB,IAAI,EAAE;QACJ;YACE,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;YAClE,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;YAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC;SACjE;KACF;IAED,UAAU,EAAE;QACV,kGAAkG;QAClG,IAAI,EAAE;YACJ,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAChE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;SACzD;QACD,0EAA0E;QAC1E,MAAM,EAAE;YACN,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1F,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7E,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,CAAC;SAC7F;QACD,oEAAoE;QACpE,QAAQ,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;gBACd,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;gBAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;gBACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;aACnB,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;gBACnC,MAAM,cAAc,CAAC,MAAM,EAAE;oBAC3B,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,CAAA;gBACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;YACrB,CAAC;SACF;KACF;IAED,4FAA4F;IAC5F,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QACjB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,mBAAmB,CAAC,CAAA;IAC7D,CAAC;CACF,CAAC,CAAA;AAEF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,CAAA;AACnF,eAAe,UAAU,CAAA;AAEzB,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAI,GAAyB;IAC1D,IAAI,CAAC,GAAG;QAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IAC9C,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kernhq/module-mail",
-  "version": "0.2.2",
+  "version": "0.3.1",
   "description": "Kern mail module: outbound providers (SMTP/Mailgun/SES/Postmark/Resend), MJML templates, delivery queue, bounces & suppressions",
   "homepage": "https://kernaio.com",
   "license": "AGPL-3.0-only",
@@ -46,9 +46,9 @@
   },
   "dependencies": {
     "@aws-sdk/client-sesv2": "^3.1116.0",
-    "@kernhq/contracts": "^0.2.0",
-    "@kernhq/kernel": "^0.2.0",
-    "@kernhq/sdk": "^0.1.0",
+    "@kernhq/contracts": "^0.5.1",
+    "@kernhq/kernel": "^0.7.0",
+    "@kernhq/sdk": "^0.1.5",
     "@orpc/contract": "^1.15.0",
     "@orpc/server": "^1.15.0",
     "drizzle-orm": "^0.45.0",
@@ -58,27 +58,43 @@
     "zod": "^4.1.0"
   },
   "peerDependencies": {
-    "fastify": "^5.0.0"
+    "@kernhq/ui": "^0.8.0",
+    "@tanstack/svelte-query": "^6.1.0",
+    "fastify": "^5.0.0",
+    "svelte": "^5.46.0"
   },
   "peerDependenciesMeta": {
+    "@kernhq/ui": {
+      "optional": true
+    },
+    "@tanstack/svelte-query": {
+      "optional": true
+    },
     "fastify": {
       "optional": true
+    },
+    "svelte": {
+      "optional": true
     }
   },
   "devDependencies": {
     "@kernhq/tsconfig": "^0.1.0",
+    "@kernhq/ui": "^0.8.0",
+    "@tanstack/svelte-query": "^6.1.0",
     "@types/mjml": "^5.0.0",
     "@types/node": "^24.0.0",
     "@types/nodemailer": "^8.0.1",
     "drizzle-kit": "^0.31.0",
     "fastify": "^5.6.0",
+    "svelte": "^5.46.0",
+    "svelte-check": "^4.0.0",
     "typescript": "~5.9.3",
     "vitest": "^4.0.0"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "dev": "tsc -p tsconfig.json --watch --preserveWatchOutput",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "typecheck": "tsc -p tsconfig.json --noEmit && svelte-check --tsconfig ./tsconfig.client.json --threshold error",
     "test": "vitest run",
     "db:generate": "drizzle-kit generate"
   }

package/src/client/api-instance.ts

@@ -0,0 +1,35 @@
+import { getHost } from '@kernhq/ui'
+import { createMailClient, type MailApi } from './api.js'
+import { createMockMailApi } from './mock.js'
+
+/**
+ * The mail API client.
+ *
+ * Mail runs in its own service because it holds provider connections and a delivery queue, but its
+ * REST surface is reached like any other module's: `/api/mail`, same origin, same session cookie.
+ * The dev server proxies the prefix to 4200 and Caddy does the same in production.
+ *
+ * The base URL comes from the shell, not from an env var read here: same-origin in every real
+ * deployment, so this module never needs to know that mail listens on 4200.
+ *
+ * The shell also decides whether it is running against the in-memory implementation, which
+ * satisfies the same contract types — so the settings screen has no second code path for demos and
+ * end-to-end tests.
+ */
+export type { MailApi }
+
+let cached: MailApi | null = null
+
+export function getMailApi(): MailApi {
+  if (cached) return cached
+  const host = getHost()
+  cached = host.isMock
+    ? (createMockMailApi() as unknown as MailApi)
+    : createMailClient({ baseUrl: host.apiBaseUrl })
+  return cached
+}
+
+/** Test seam: lets tests install a fake without touching module state elsewhere. */
+export function __setMailApi(api: MailApi | null) {
+  cached = api
+}

package/src/client/i18n.ts

@@ -0,0 +1,282 @@
+/**
+ * Mail's own strings, in every locale the platform ships.
+ *
+ * A module ships separately from the app, so Paraglide cannot compile these — the shell merges
+ * them into the framework's message runtime when it registers this module, and `t()` resolves
+ * against the merged map. Keys are namespaced by module id, which is what keeps two modules from
+ * colliding in that one map.
+ *
+ * Bundles are thunks so a locale is only fetched when it is the one in use; English is the
+ * fallback and is therefore always loaded.
+ */
+import { scopedT } from '@kernhq/ui'
+
+export const en = {
+  'mail.field_access_key': 'Access key ID',
+  'mail.field_api_key': 'API key',
+  'mail.field_domain': 'Domain',
+  'mail.field_from': 'From address',
+  'mail.field_host': 'Host',
+  'mail.field_password': 'Password',
+  'mail.field_port': 'Port',
+  'mail.field_region': 'Region',
+  'mail.field_secret_key': 'Secret access key',
+  'mail.field_server_token': 'Server token',
+  'mail.field_user': 'Username',
+  'mail.log_all': 'Everything',
+  'mail.log_empty': 'Nothing has been sent yet.',
+  'mail.log_hint': 'Every message this workspace sent, and why any of them did not arrive.',
+  'mail.log_title': 'What has been sent',
+  'mail.provider_hint': "Without one, this workspace sends through the instance's own configuration.",
+  'mail.provider_label': 'Send through',
+  'mail.provider_mailgun': 'Mailgun',
+  'mail.provider_platform': 'The instance default',
+  'mail.provider_postmark': 'Postmark',
+  'mail.provider_resend': 'Resend',
+  'mail.provider_ses': 'Amazon SES',
+  'mail.provider_smtp': 'SMTP',
+  'mail.provider_title': 'Provider',
+  'mail.saved': 'Email settings saved',
+  'mail.secret_kept': 'Stored — leave this as it is to keep it.',
+  'mail.settings_hint': "Where this workspace's email comes from, and what it has sent.",
+  'mail.settings_nav': 'Email',
+  'mail.settings_title': 'Email',
+  'mail.status_bounced': 'Bounced',
+  'mail.status_failed': 'Failed',
+  'mail.status_queued': 'Queued',
+  'mail.status_sent': 'Sent',
+  'mail.test_hint': 'The only way to find out whether the credentials work is to use them.',
+  'mail.test_refused': 'The provider refused the message.',
+  'mail.test_send': 'Send test',
+  'mail.test_sent': 'Test message queued for {to}',
+  'mail.test_title': 'Send a test',
+  'mail.widget_bounced': 'Bounced',
+  'mail.widget_desc': 'What this workspace has been sending.',
+  'mail.widget_empty': 'Nothing sent yet',
+  'mail.widget_failed': 'Failed',
+  'mail.widget_failed_desc': 'Delivery problems in the recent sends.',
+  'mail.widget_failed_note': 'of the last {count}',
+  'mail.widget_failed_title': 'Failed sends',
+  'mail.widget_queued': 'Queued',
+  'mail.widget_sent': 'Sent',
+  'mail.widget_title': 'Recent deliveries',
+} as const
+
+export type MailMessageKey = keyof typeof en
+
+const ar: Record<string, string> = {
+  'mail.field_access_key': 'معرّف مفتاح الوصول',
+  'mail.field_api_key': 'مفتاح API',
+  'mail.field_domain': 'النطاق',
+  'mail.field_from': 'عنوان المُرسِل',
+  'mail.field_host': 'المضيف',
+  'mail.field_password': 'كلمة المرور',
+  'mail.field_port': 'المنفذ',
+  'mail.field_region': 'المنطقة',
+  'mail.field_secret_key': 'مفتاح الوصول السري',
+  'mail.field_server_token': 'رمز الخادم',
+  'mail.field_user': 'اسم المستخدم',
+  'mail.log_all': 'الكل',
+  'mail.log_empty': 'لم يُرسل شيء بعد.',
+  'mail.log_hint': 'كل رسالة أرسلتها مساحة العمل هذه، وسبب عدم وصول ما لم يصل.',
+  'mail.log_title': 'ما أُرسل',
+  'mail.provider_hint': 'بدون مزوّد خاص، ترسل مساحة العمل هذه عبر إعدادات النسخة نفسها.',
+  'mail.provider_label': 'الإرسال عبر',
+  'mail.provider_mailgun': 'Mailgun',
+  'mail.provider_platform': 'الإعداد الافتراضي للنسخة',
+  'mail.provider_postmark': 'Postmark',
+  'mail.provider_resend': 'Resend',
+  'mail.provider_ses': 'Amazon SES',
+  'mail.provider_smtp': 'SMTP',
+  'mail.provider_title': 'المزوّد',
+  'mail.saved': 'حُفظت إعدادات البريد',
+  'mail.secret_kept': 'مخزَّن — اتركه كما هو للإبقاء عليه.',
+  'mail.settings_hint': 'من أين يأتي بريد مساحة العمل هذه، وماذا أرسلت.',
+  'mail.settings_nav': 'البريد',
+  'mail.settings_title': 'البريد',
+  'mail.status_bounced': 'مرتدّة',
+  'mail.status_failed': 'فشل',
+  'mail.status_queued': 'في الانتظار',
+  'mail.status_sent': 'أُرسلت',
+  'mail.test_hint': 'الطريقة الوحيدة لمعرفة أن بيانات الاعتماد تعمل هي استخدامها.',
+  'mail.test_refused': 'رفض المزوّد الرسالة.',
+  'mail.test_send': 'إرسال اختبار',
+  'mail.test_sent': 'وُضعت رسالة اختبار في الانتظار إلى {to}',
+  'mail.test_title': 'إرسال اختبار',
+  'mail.widget_bounced': 'مرتدّة',
+  'mail.widget_desc': 'ما الذي أرسلته مساحة العمل هذه.',
+  'mail.widget_empty': 'لم يُرسل شيء بعد',
+  'mail.widget_failed': 'فاشلة',
+  'mail.widget_failed_desc': 'مشكلات التسليم في عمليات الإرسال الأخيرة.',
+  'mail.widget_failed_note': 'من آخر {count}',
+  'mail.widget_failed_title': 'عمليات إرسال فاشلة',
+  'mail.widget_queued': 'في الانتظار',
+  'mail.widget_sent': 'مُرسَلة',
+  'mail.widget_title': 'عمليات الإرسال الأخيرة',
+}
+
+const de: Record<string, string> = {
+  'mail.field_access_key': 'Access Key ID',
+  'mail.field_api_key': 'API-Schlüssel',
+  'mail.field_domain': 'Domain',
+  'mail.field_from': 'Absenderadresse',
+  'mail.field_host': 'Host',
+  'mail.field_password': 'Passwort',
+  'mail.field_port': 'Port',
+  'mail.field_region': 'Region',
+  'mail.field_secret_key': 'Secret Access Key',
+  'mail.field_server_token': 'Server-Token',
+  'mail.field_user': 'Benutzername',
+  'mail.log_all': 'Alles',
+  'mail.log_empty': 'Es wurde noch nichts gesendet.',
+  'mail.log_hint': 'Jede Nachricht, die dieser Workspace gesendet hat — und warum manche nicht ankamen.',
+  'mail.log_title': 'Was gesendet wurde',
+  'mail.provider_hint': 'Ohne eigenen Anbieter sendet dieser Workspace über die Konfiguration der Instanz.',
+  'mail.provider_label': 'Senden über',
+  'mail.provider_mailgun': 'Mailgun',
+  'mail.provider_platform': 'Standard der Instanz',
+  'mail.provider_postmark': 'Postmark',
+  'mail.provider_resend': 'Resend',
+  'mail.provider_ses': 'Amazon SES',
+  'mail.provider_smtp': 'SMTP',
+  'mail.provider_title': 'Anbieter',
+  'mail.saved': 'E-Mail-Einstellungen gespeichert',
+  'mail.secret_kept': 'Gespeichert — lass es so, um es zu behalten.',
+  'mail.settings_hint': 'Woher die E-Mail dieses Workspace kommt und was er gesendet hat.',
+  'mail.settings_nav': 'E-Mail',
+  'mail.settings_title': 'E-Mail',
+  'mail.status_bounced': 'Unzustellbar',
+  'mail.status_failed': 'Fehlgeschlagen',
+  'mail.status_queued': 'In der Warteschlange',
+  'mail.status_sent': 'Gesendet',
+  'mail.test_hint': 'Ob die Zugangsdaten stimmen, findet man nur heraus, indem man sie benutzt.',
+  'mail.test_refused': 'Der Anbieter hat die Nachricht abgelehnt.',
+  'mail.test_send': 'Test senden',
+  'mail.test_sent': 'Testnachricht für {to} eingereiht',
+  'mail.test_title': 'Test senden',
+  'mail.widget_bounced': 'Unzustellbar',
+  'mail.widget_desc': 'Was dieser Arbeitsbereich versendet hat.',
+  'mail.widget_empty': 'Noch nichts versendet',
+  'mail.widget_failed': 'Fehlgeschlagen',
+  'mail.widget_failed_desc': 'Zustellprobleme bei den letzten Sendungen.',
+  'mail.widget_failed_note': 'von den letzten {count}',
+  'mail.widget_failed_title': 'Fehlgeschlagene Sendungen',
+  'mail.widget_queued': 'In der Warteschlange',
+  'mail.widget_sent': 'Gesendet',
+  'mail.widget_title': 'Letzte Zustellungen',
+}
+
+const fa: Record<string, string> = {
+  'mail.field_access_key': 'شناسه کلید دسترسی',
+  'mail.field_api_key': 'کلید API',
+  'mail.field_domain': 'دامنه',
+  'mail.field_from': 'نشانی فرستنده',
+  'mail.field_host': 'میزبان',
+  'mail.field_password': 'گذرواژه',
+  'mail.field_port': 'درگاه',
+  'mail.field_region': 'ناحیه',
+  'mail.field_secret_key': 'کلید دسترسی محرمانه',
+  'mail.field_server_token': 'توکن سرور',
+  'mail.field_user': 'نام کاربری',
+  'mail.log_all': 'همه',
+  'mail.log_empty': 'هنوز چیزی فرستاده نشده است.',
+  'mail.log_hint': 'هر پیامی که این فضای کاری فرستاده، و اینکه چرا برخی نرسیده‌اند.',
+  'mail.log_title': 'آنچه فرستاده شده',
+  'mail.provider_hint': 'بدون آن، این فضای کاری با پیکربندی خودِ نمونه ارسال می‌کند.',
+  'mail.provider_label': 'ارسال از طریق',
+  'mail.provider_mailgun': 'Mailgun',
+  'mail.provider_platform': 'پیش‌فرض نمونه',
+  'mail.provider_postmark': 'Postmark',
+  'mail.provider_resend': 'Resend',
+  'mail.provider_ses': 'Amazon SES',
+  'mail.provider_smtp': 'SMTP',
+  'mail.provider_title': 'ارائه‌دهنده',
+  'mail.saved': 'تنظیمات ایمیل ذخیره شد',
+  'mail.secret_kept': 'ذخیره شده — برای نگه‌داشتنش دست نزنید.',
+  'mail.settings_hint': 'اینکه ایمیل این فضای کاری از کجا می‌آید و چه چیزی فرستاده است.',
+  'mail.settings_nav': 'ایمیل',
+  'mail.settings_title': 'ایمیل',
+  'mail.status_bounced': 'برگشت‌خورده',
+  'mail.status_failed': 'ناموفق',
+  'mail.status_queued': 'در صف',
+  'mail.status_sent': 'فرستاده‌شده',
+  'mail.test_hint': 'تنها راه دانستن اینکه اطلاعات ورود کار می‌کند، استفاده از آن است.',
+  'mail.test_refused': 'ارائه‌دهنده پیام را نپذیرفت.',
+  'mail.test_send': 'ارسال آزمایشی',
+  'mail.test_sent': 'پیام آزمایشی برای {to} در صف قرار گرفت',
+  'mail.test_title': 'ارسال آزمایشی',
+  'mail.widget_bounced': 'برگشت‌خورده',
+  'mail.widget_desc': 'این فضای کاری چه فرستاده است.',
+  'mail.widget_empty': 'هنوز چیزی فرستاده نشده',
+  'mail.widget_failed': 'ناموفق',
+  'mail.widget_failed_desc': 'مشکلات تحویل در ارسال‌های اخیر.',
+  'mail.widget_failed_note': 'از {count} مورد اخیر',
+  'mail.widget_failed_title': 'ارسال‌های ناموفق',
+  'mail.widget_queued': 'در صف',
+  'mail.widget_sent': 'فرستاده‌شده',
+  'mail.widget_title': 'ارسال‌های اخیر',
+}
+
+const tr: Record<string, string> = {
+  'mail.field_access_key': 'Erişim anahtarı kimliği',
+  'mail.field_api_key': 'API anahtarı',
+  'mail.field_domain': 'Alan adı',
+  'mail.field_from': 'Gönderen adresi',
+  'mail.field_host': 'Sunucu',
+  'mail.field_password': 'Parola',
+  'mail.field_port': 'Bağlantı noktası',
+  'mail.field_region': 'Bölge',
+  'mail.field_secret_key': 'Gizli erişim anahtarı',
+  'mail.field_server_token': 'Sunucu belirteci',
+  'mail.field_user': 'Kullanıcı adı',
+  'mail.log_all': 'Tümü',
+  'mail.log_empty': 'Henüz bir şey gönderilmedi.',
+  'mail.log_hint': 'Bu çalışma alanının gönderdiği her ileti ve ulaşmayanların nedeni.',
+  'mail.log_title': 'Gönderilenler',
+  'mail.provider_hint':
+    'Kendi sağlayıcısı yoksa bu çalışma alanı sunucunun kendi yapılandırmasıyla gönderir.',
+  'mail.provider_label': 'Şunun üzerinden gönder',
+  'mail.provider_mailgun': 'Mailgun',
+  'mail.provider_platform': 'Sunucu varsayılanı',
+  'mail.provider_postmark': 'Postmark',
+  'mail.provider_resend': 'Resend',
+  'mail.provider_ses': 'Amazon SES',
+  'mail.provider_smtp': 'SMTP',
+  'mail.provider_title': 'Sağlayıcı',
+  'mail.saved': 'E-posta ayarları kaydedildi',
+  'mail.secret_kept': 'Saklanıyor — korumak için olduğu gibi bırakın.',
+  'mail.settings_hint': 'Bu çalışma alanının e-postası nereden geliyor ve neler göndermiş.',
+  'mail.settings_nav': 'E-posta',
+  'mail.settings_title': 'E-posta',
+  'mail.status_bounced': 'Geri döndü',
+  'mail.status_failed': 'Başarısız',
+  'mail.status_queued': 'Kuyrukta',
+  'mail.status_sent': 'Gönderildi',
+  'mail.test_hint': 'Kimlik bilgilerinin çalışıp çalışmadığını öğrenmenin tek yolu onları kullanmaktır.',
+  'mail.test_refused': 'Sağlayıcı iletiyi reddetti.',
+  'mail.test_send': 'Test gönder',
+  'mail.test_sent': '{to} için test iletisi kuyruğa alındı',
+  'mail.test_title': 'Test gönder',
+  'mail.widget_bounced': 'Geri döndü',
+  'mail.widget_desc': 'Bu çalışma alanının neler gönderdiği.',
+  'mail.widget_empty': 'Henüz bir şey gönderilmedi',
+  'mail.widget_failed': 'Başarısız',
+  'mail.widget_failed_desc': 'Son gönderimlerdeki iletim sorunları.',
+  'mail.widget_failed_note': 'son {count} içinden',
+  'mail.widget_failed_title': 'Başarısız gönderimler',
+  'mail.widget_queued': 'Kuyrukta',
+  'mail.widget_sent': 'Gönderildi',
+  'mail.widget_title': 'Son gönderimler',
+}
+
+/** In the shape `defineClientModule().messages` expects. */
+export const mailMessageBundles = {
+  ar: async () => ar,
+  de: async () => de,
+  en: async () => en as Record<string, string>,
+  fa: async () => fa,
+  tr: async () => tr,
+}
+
+/** `t('settings_nav')` — the module id is implied. */
+export const t = scopedT('mail')

package/src/client/index.ts

@@ -1,11 +1,16 @@
 export { MODULE_ID, SECRET_PLACEHOLDER } from '../contract.js'
 export { createMailClient, type MailApi } from './api.js'
+export { __setMailApi, getMailApi } from './api-instance.js'
+export { type MailMessageKey, mailMessageBundles, t } from './i18n.js'
+export { mailClientModule, mailClientModule as default } from './module.js'
+export { canMail, MAIL_PERMISSIONS, type MailPermission } from './permissions.js'
 
 /**
- * Mail's client surface is a typed API client and nothing else.
+ * Mail's client half: the typed API client, its own strings, its permissions, and the client module
+ * the shell registers.
  *
- * There is no client module here: the app composes its own (`registry.ts` registers modules defined
- * under `app/src/lib/modules`), because navigation labels have to go through the app's
- * message catalogue and its screens are app routes. A `defineClientModule` in this package would
- * never be registered and its `component` never rendered.
+ * The screens live here too — `settings/MailSettings.svelte` and the two dashboard cards — rather
+ * than in the app. That is what makes this a module rather than a server half plus a hand-written
+ * page somebody has to remember to keep in step: the shell mounts whatever the manifest declares,
+ * and deleting this package removes the feature completely.
  */

package/src/client/mock.ts

@@ -0,0 +1,125 @@
+import type { WorkspaceId } from '@kernhq/contracts'
+import type { MailDelivery } from '../contract.js'
+import { SECRET_PLACEHOLDER } from './index.js'
+
+/**
+ * The in-memory mail API, for `pnpm dev:mock` and the end-to-end suite.
+ *
+ * It keeps the one behaviour that is easy to get wrong and impossible to see: a stored secret is
+ * never returned, reads replace it with a placeholder, and writing the placeholder back leaves the
+ * stored value alone. A mock that echoed the real secret would let a screen that leaks it pass
+ * every test.
+ */
+const DAY = 86_400_000
+const iso = (msAgo: number) => new Date(Date.now() - msAgo).toISOString()
+
+const SECRET_KEYS = new Set(['pass', 'apiKey', 'secretAccessKey', 'serverToken'])
+
+/** The demo workspace, branded the way the other mocks brand theirs. */
+const WORKSPACE = '01920000-0000-7000-8000-000000000010' as string & WorkspaceId
+
+export function createMockMailApi() {
+  let config: Record<string, unknown> | null = {
+    provider: 'smtp',
+    host: 'smtp.example.com',
+    port: 587,
+    user: 'kern',
+    pass: 'hunter2',
+    from: 'Northstar <no-reply@northstar.example>',
+  }
+
+  const deliveries: MailDelivery[] = [
+    {
+      id: '0192aa00-0000-7000-8000-00000000d001',
+      workspaceId: WORKSPACE,
+      to: ['maya@northstar.example'],
+      subject: 'You were mentioned in KRN-6',
+      provider: 'smtp',
+      template: 'mention',
+      status: 'sent',
+      providerMessageId: '<a1b2@smtp.example.com>',
+      error: null,
+      tags: ['notification'],
+      createdAt: iso(2 * 3600e3),
+      updatedAt: iso(2 * 3600e3),
+    },
+    {
+      id: '0192aa00-0000-7000-8000-00000000d002',
+      workspaceId: WORKSPACE,
+      to: ['tomas@northstar.example'],
+      subject: 'Your weekly digest',
+      provider: 'smtp',
+      template: 'digest',
+      status: 'sent',
+      providerMessageId: '<c3d4@smtp.example.com>',
+      error: null,
+      tags: ['digest'],
+      createdAt: iso(DAY),
+      updatedAt: iso(DAY),
+    },
+    {
+      id: '0192aa00-0000-7000-8000-00000000d003',
+      workspaceId: WORKSPACE,
+      to: ['left@example.com'],
+      subject: 'You have been invited to Northstar',
+      provider: 'smtp',
+      template: 'invite',
+      status: 'bounced',
+      providerMessageId: null,
+      error: '550 5.1.1 The email account that you tried to reach does not exist',
+      tags: ['invite'],
+      createdAt: iso(3 * DAY),
+      updatedAt: iso(3 * DAY),
+    },
+    {
+      id: '0192aa00-0000-7000-8000-00000000d004',
+      workspaceId: WORKSPACE,
+      to: ['dan@northstar.example'],
+      subject: 'Reset your password',
+      provider: 'smtp',
+      template: 'password-reset',
+      status: 'failed',
+      providerMessageId: null,
+      error: 'Connection timed out after 30s',
+      tags: ['account'],
+      createdAt: iso(5 * DAY),
+      updatedAt: iso(5 * DAY),
+    },
+  ]
+
+  /** What a read returns: the shape of the config with every secret masked. */
+  const masked = () =>
+    config === null
+      ? null
+      : Object.fromEntries(
+          Object.entries(config).map(([k, v]) => [k, SECRET_KEYS.has(k) && v ? SECRET_PLACEHOLDER : v]),
+        )
+
+  return {
+    settings: {
+      get: async () => ({ config: masked() }),
+      set: async ({ config: next }: { config: Record<string, unknown> | null }) => {
+        if (next === null) {
+          config = null
+          return { ok: true as const }
+        }
+        // The placeholder means "leave it alone", which is the whole point of masking on read.
+        const merged: Record<string, unknown> = { ...next }
+        for (const key of SECRET_KEYS)
+          if (merged[key] === SECRET_PLACEHOLDER) merged[key] = config?.[key] ?? ''
+        config = merged
+        return { ok: true as const }
+      },
+      test: async ({ to }: { to: string }) =>
+        to.endsWith('@example.com') || to.endsWith('.example')
+          ? { ok: true as const, error: null }
+          : { ok: false as const, error: 'The provider refused the recipient' },
+    },
+    deliveries: {
+      list: async ({ status }: { status?: MailDelivery['status'] }) => ({
+        items: deliveries.filter((d) => !status || d.status === status),
+        nextCursor: null,
+      }),
+    },
+  }
+}

package/src/client/module.ts

@@ -0,0 +1,106 @@
+import { defineClientModule } from '@kernhq/ui'
+import { mailMessageBundles, t } from './i18n.js'
+import { MAIL_PERMISSIONS } from './permissions.js'
+
+/**
+ * Mail as the shell sees it.
+ *
+ * No navigation: where a workspace's email comes from is configuration, not a place people visit.
+ * The module contributes one settings page and two dashboard cards, and turning mail off in
+ * workspace settings removes all three with no conditionals anywhere in the shell.
+ *
+ * Labels are getters because a module is defined once at import time while the interface language
+ * can change afterwards; reading them on render keeps them in the language actually chosen.
+ *
+ * The settings page's `id` is its URL. The shell mounts a workspace-scope page whose id equals the
+ * module id at `/<ws>/settings/mail` — declaring it is the whole wiring, and there is no route file
+ * in the app to keep in step with it.
+ */
+export const mailClientModule = defineClientModule({
+  id: 'mail',
+  name: 'Mail',
+  icon: 'mail',
+  messages: mailMessageBundles,
+
+  widgets: [
+    {
+      id: 'mail.deliveries',
+      get title() {
+        return t('widget_title')
+      },
+      get description() {
+        return t('widget_desc')
+      },
+      icon: 'mail',
+      permission: MAIL_PERMISSIONS.deliveriesView,
+      sizes: ['m', 'l', 'xl'],
+      defaultSize: 'l',
+      order: 10,
+      settings: [
+        {
+          kind: 'select',
+          key: 'status',
+          get label() {
+            return t('common.setting_status')
+          },
+          default: null,
+          nullable: true,
+          get nullLabel() {
+            return t('common.any')
+          },
+          get options() {
+            return [
+              { value: 'queued', label: t('widget_queued') },
+              { value: 'sent', label: t('widget_sent') },
+              { value: 'failed', label: t('widget_failed') },
+              { value: 'bounced', label: t('widget_bounced') },
+            ]
+          },
+        },
+        {
+          kind: 'number',
+          key: 'limit',
+          get label() {
+            return t('common.setting_rows')
+          },
+          default: 8,
+          min: 3,
+          max: 20,
+        },
+      ],
+      component: () => import('./widgets/DeliveriesWidget.svelte'),
+    },
+    {
+      id: 'mail.stat-failed',
+      get title() {
+        return t('widget_failed_title')
+      },
+      get description() {
+        return t('widget_failed_desc')
+      },
+      icon: 'circle-alert',
+      permission: MAIL_PERMISSIONS.deliveriesView,
+      sizes: ['s'],
+      defaultSize: 's',
+      compact: true,
+      order: 20,
+      component: () => import('./widgets/FailedWidget.svelte'),
+    },
+  ],
+
+  settingsPages: [
+    {
+      id: 'mail',
+      get label() {
+        return t('settings_nav')
+      },
+      icon: 'mail',
+      scope: 'workspace',
+      permission: MAIL_PERMISSIONS.settingsManage,
+      order: 45,
+      component: () => import('./settings/MailSettings.svelte'),
+    },
+  ],
+})
+
+export default mailClientModule

package/src/client/permissions.ts

@@ -0,0 +1,30 @@
+import { session } from '@kernhq/ui'
+import { mailPermissions } from '../contract.js'
+
+/**
+ * What mail lets somebody do.
+ *
+ * Derived from the contract rather than re-typed. The app used to keep its own copy of these
+ * strings, which type-checks perfectly while being wrong: a mistyped key silently hides a control
+ * or offers one the server refuses, and nothing anywhere reports it.
+ *
+ * Hide what a person may never do; disable — with a reason — what they cannot do right now. The
+ * server checks again on every call regardless; this only stops the interface offering a door that
+ * will not open.
+ */
+const key = (suffix: string) => {
+  const found = mailPermissions.find((p) => p.key === `mail.${suffix}`)
+  if (!found) throw new Error(`mail: no permission declared for mail.${suffix}`)
+  return found.key
+}
+
+export const MAIL_PERMISSIONS = {
+  settingsManage: key('settings.manage'),
+  deliveriesView: key('deliveries.view'),
+} as const
+
+export type MailPermission = keyof typeof MAIL_PERMISSIONS
+
+export function canMail(permission: MailPermission): boolean {
+  return session.can(MAIL_PERMISSIONS[permission])
+}

package/src/client/settings/MailSettings.svelte

@@ -0,0 +1,382 @@
+<script lang="ts">
+import {
+  Badge,
+  Button,
+  Input,
+  messageLocale,
+  Select,
+  SettingsPage,
+  SettingsSection,
+  Spinner,
+  session,
+  toast,
+} from '@kernhq/ui'
+import { createMutation, createQuery, useQueryClient } from '@tanstack/svelte-query'
+import type { MailDelivery } from '../../contract.js'
+import { getMailApi } from '../api-instance.js'
+import { t } from '../i18n.js'
+import { SECRET_PLACEHOLDER } from '../index.js'
+import { canMail } from '../permissions.js'
+
+/**
+ * Where this workspace's email comes from, and what it has sent.
+ *
+ * The module has been complete and unreachable: settings, a test send and a delivery log all had a
+ * server and nothing that called them.
+ *
+ * Without a provider the workspace falls back to the instance's own configuration, which is why a
+ * fresh self-hosted install already delivers invitations and password resets — so "use the instance
+ * default" is a real choice rather than an unconfigured state.
+ */
+const api = getMailApi()
+const queryClient = useQueryClient()
+
+/**
+ * The shell passes these; this component does not read the router.
+ *
+ * `$app/state` is a SvelteKit alias, and a module package is type-checked on its own — reaching for
+ * the router here fails standalone even though it resolves inside the app. `ModuleRoute` already
+ * hands every module page the workspace it is rendering, which is the only thing this needed it for.
+ */
+interface Props {
+  workspaceId: string
+  workspaceSlug: string
+}
+const { workspaceId }: Props = $props()
+const canManage = $derived(canMail('settingsManage'))
+const canSeeLog = $derived(canMail('deliveriesView'))
+
+type Provider = 'platform' | 'smtp' | 'mailgun' | 'ses' | 'postmark' | 'resend'
+
+/**
+ * What each provider needs. Carried over from the module package, which is where this screen used
+ * to live before it could be rendered.
+ */
+const FIELDS: Record<Provider, Array<{ key: string; label: () => string; type?: string; hint?: string }>> = {
+  platform: [],
+  smtp: [
+    { key: 'host', label: () => t('field_host') },
+    { key: 'port', label: () => t('field_port'), type: 'number' },
+    { key: 'user', label: () => t('field_user') },
+    { key: 'pass', label: () => t('field_password'), type: 'password' },
+    { key: 'from', label: () => t('field_from'), hint: 'Kern <no-reply@example.com>' },
+  ],
+  mailgun: [
+    { key: 'apiKey', label: () => t('field_api_key'), type: 'password' },
+    { key: 'domain', label: () => t('field_domain') },
+    { key: 'region', label: () => t('field_region'), hint: 'us / eu' },
+    { key: 'from', label: () => t('field_from') },
+  ],
+  ses: [
+    { key: 'accessKeyId', label: () => t('field_access_key') },
+    { key: 'secretAccessKey', label: () => t('field_secret_key'), type: 'password' },
+    { key: 'region', label: () => t('field_region'), hint: 'eu-west-1' },
+    { key: 'from', label: () => t('field_from') },
+  ],
+  postmark: [
+    { key: 'serverToken', label: () => t('field_server_token'), type: 'password' },
+    { key: 'from', label: () => t('field_from') },
+  ],
+  resend: [
+    { key: 'apiKey', label: () => t('field_api_key'), type: 'password' },
+    { key: 'from', label: () => t('field_from') },
+  ],
+}
+
+const PROVIDER_LABELS: Record<Provider, () => string> = {
+  platform: () => t('provider_platform'),
+  smtp: () => t('provider_smtp'),
+  mailgun: () => t('provider_mailgun'),
+  ses: () => t('provider_ses'),
+  postmark: () => t('provider_postmark'),
+  resend: () => t('provider_resend'),
+}
+
+let provider = $state<Provider>('platform')
+let values = $state<Record<string, string>>({})
+/** Set once from the server, so re-renders do not fight what is being typed. */
+let loaded = $state(false)
+let recipient = $state('')
+let statusFilter = $state('')
+
+const settingsQuery = createQuery(() => ({
+  queryKey: ['mail', 'settings', workspaceId],
+  queryFn: () => api.settings.get({ workspaceId }),
+  enabled: Boolean(workspaceId),
+}))
+
+$effect(() => {
+  const config = settingsQuery.data?.config
+  if (loaded || settingsQuery.isPending) return
+  if (config && typeof config.provider === 'string') {
+    provider = config.provider as Provider
+    values = Object.fromEntries(
+      Object.entries(config)
+        .filter(([k]) => k !== 'provider')
+        .map(([k, v]) => [k, String(v ?? '')]),
+    )
+  }
+  loaded = true
+})
+
+const fields = $derived(FIELDS[provider])
+
+const save = createMutation(() => ({
+  mutationFn: () =>
+    api.settings.set({
+      workspaceId,
+      config:
+        provider === 'platform'
+          ? null
+          : { provider, ...Object.fromEntries(fields.map((f) => [f.key, values[f.key] ?? ''])) },
+    }),
+  onSuccess: () => {
+    void queryClient.invalidateQueries({ queryKey: ['mail', 'settings', workspaceId] })
+    toast.success(t('saved'))
+  },
+  onError: (error: Error) => toast.error(error.message),
+}))
+
+/**
+ * A test send, which is the only way to find out whether the credentials work.
+ *
+ * The provider's refusal comes back as a result rather than an error, so it is shown as one — a
+ * rejected recipient is an answer, not a failure of the request.
+ */
+const test = createMutation(() => ({
+  mutationFn: () => api.settings.test({ workspaceId, to: recipient }),
+  onSuccess: (result: { ok: boolean; error: string | null }) => {
+    if (result.ok) toast.success(t('test_sent', { to: recipient }))
+    else toast.error(result.error ?? t('test_refused'))
+  },
+  onError: (error: Error) => toast.error(error.message),
+}))
+
+const deliveriesQuery = createQuery(() => ({
+  queryKey: ['mail', 'deliveries', workspaceId, statusFilter],
+  queryFn: () =>
+    api.deliveries.list({
+      workspaceId,
+      ...(statusFilter ? { status: statusFilter as MailDelivery['status'] } : {}),
+    }),
+  enabled: Boolean(workspaceId) && canSeeLog,
+}))
+const deliveries = $derived(deliveriesQuery.data?.items ?? [])
+
+const STATUS_LABELS: Record<string, () => string> = {
+  queued: () => t('status_queued'),
+  sent: () => t('status_sent'),
+  failed: () => t('status_failed'),
+  bounced: () => t('status_bounced'),
+}
+const statusLabel = (status: string) => STATUS_LABELS[status]?.() ?? status
+/** Only a failure has a tone: colouring every row makes the one that needs attention disappear. */
+const statusTone = (status: string) =>
+  status === 'bounced' || status === 'failed' ? 'danger' : status === 'queued' ? 'grey' : 'success'
+
+const when = $derived(new Intl.DateTimeFormat(messageLocale(), { dateStyle: 'medium', timeStyle: 'short' }))
+</script>
+
+<SettingsPage title={t('settings_title')} description={t('settings_hint')}>
+  <SettingsSection title={t('provider_title')} description={t('provider_hint')}>
+    {#if settingsQuery.isPending}
+      <div class="state"><Spinner /></div>
+    {:else}
+      <div class="grid">
+        <label class="row" data-testid="mail-provider">
+          <span class="lbl">{t('provider_label')}</span>
+          <Select
+            value={provider}
+            options={(Object.keys(PROVIDER_LABELS) as Provider[]).map((p) => ({
+              value: p,
+              label: PROVIDER_LABELS[p](),
+            }))}
+            disabled={!canManage}
+            onValueChange={(v: string) => (provider = v as Provider)}
+          />
+        </label>
+
+        {#each fields as field (field.key)}
+          <label class="row">
+            <span class="lbl">{field.label()}</span>
+            <Input
+              type={field.type ?? 'text'}
+              value={values[field.key] ?? ''}
+              placeholder={field.hint ?? ''}
+              autocomplete="off"
+              disabled={!canManage}
+              data-testid="mail-{field.key}"
+              oninput={(e: Event) =>
+                (values = { ...values, [field.key]: (e.currentTarget as HTMLInputElement).value })}
+            />
+            {#if values[field.key] === SECRET_PLACEHOLDER}
+              <!-- The server never returns a stored secret; sending the placeholder back keeps it.
+                   Saying so is the difference between "already set" and "about to be blanked". -->
+              <span class="hint">{t('secret_kept')}</span>
+            {/if}
+          </label>
+        {/each}
+      </div>
+    {/if}
+
+    {#snippet footer()}
+      <Button
+        size="sm"
+        disabled={!canManage}
+        loading={save.isPending}
+        onclick={() => save.mutate()}
+        data-testid="mail-save"
+      >
+        {t('common.save')}
+      </Button>
+    {/snippet}
+  </SettingsSection>
+
+  <SettingsSection title={t('test_title')} description={t('test_hint')}>
+    <div class="testrow">
+      <Input
+        type="email"
+        bind:value={recipient}
+        placeholder={session.user?.email ?? 'you@example.com'}
+        disabled={!canManage}
+        data-testid="mail-test-to"
+      />
+      <Button
+        size="sm"
+        variant="secondary"
+        disabled={!canManage || !recipient.trim()}
+        loading={test.isPending}
+        onclick={() => test.mutate()}
+        data-testid="mail-test-send"
+      >
+        {t('test_send')}
+      </Button>
+    </div>
+  </SettingsSection>
+
+  {#if canSeeLog}
+    <SettingsSection title={t('log_title')} description={t('log_hint')}>
+      <div class="filter" data-testid="mail-log-filter">
+        <Select
+          value={statusFilter}
+          options={[
+            { value: '', label: t('log_all') },
+            ...['sent', 'queued', 'failed', 'bounced'].map((s) => ({ value: s, label: statusLabel(s) })),
+          ]}
+          onValueChange={(v: string) => (statusFilter = v)}
+        />
+      </div>
+
+      {#if deliveriesQuery.isPending}
+        <div class="state"><Spinner /></div>
+      {:else if !deliveries.length}
+        <p class="empty">{t('log_empty')}</p>
+      {:else}
+        <ul class="log" data-testid="mail-log">
+          {#each deliveries as delivery (delivery.id)}
+            <li>
+              <div class="top">
+                <Badge tone={statusTone(delivery.status)}>{statusLabel(delivery.status)}</Badge>
+                <span class="subject">{delivery.subject}</span>
+                <span class="when">{when.format(new Date(delivery.createdAt))}</span>
+              </div>
+              <div class="meta">
+                <span>{delivery.to.join(', ')}</span>
+                {#if delivery.template}<span>{delivery.template}</span>{/if}
+              </div>
+              {#if delivery.error}
+                <!-- The provider's own words. A message that could not be delivered is only
+                     actionable if you can read why the other end refused it. -->
+                <p class="err">{delivery.error}</p>
+              {/if}
+            </li>
+          {/each}
+        </ul>
+      {/if}
+    </SettingsSection>
+  {/if}
+</SettingsPage>
+
+<style>
+.grid {
+  display: grid;
+  gap: 12px;
+}
+.row {
+  display: grid;
+  gap: 4px;
+}
+.lbl {
+  font-size: 12px;
+  font-weight: 500;
+  color: var(--kern-ink-600);
+}
+.hint {
+  font-size: 11.5px;
+  color: var(--kern-ink-400);
+}
+.testrow {
+  display: grid;
+  grid-template-columns: minmax(0, 260px) auto;
+  align-items: center;
+  gap: 8px;
+}
+.filter {
+  max-width: 200px;
+  margin-bottom: 10px;
+}
+.log {
+  list-style: none;
+  margin: 0;
+  padding: 0;
+}
+.log li {
+  padding: 8px 0;
+  border-bottom: 1px solid var(--kern-border-hairline);
+}
+.log li:last-child {
+  border-bottom: 0;
+}
+.top {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+.subject {
+  flex: 1;
+  min-width: 0;
+  font-size: 13px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+.when {
+  font-size: 12px;
+  color: var(--kern-ink-400);
+  white-space: nowrap;
+}
+.meta {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 4px 10px;
+  margin-top: 2px;
+  font-size: 12px;
+  color: var(--kern-ink-400);
+}
+.err {
+  margin: 4px 0 0;
+  font-size: 12px;
+  color: var(--kern-danger);
+  overflow-wrap: anywhere;
+}
+.empty {
+  margin: 0;
+  font-size: 13px;
+  color: var(--kern-ink-400);
+}
+.state {
+  display: grid;
+  place-items: center;
+  padding: 24px;
+}
+</style>

package/src/client/widgets/DeliveriesWidget.svelte

@@ -0,0 +1,103 @@
+<script lang="ts">
+import type { WidgetProps } from '@kernhq/ui'
+import { Badge, relativeTime, settingsScope, WidgetState } from '@kernhq/ui'
+import { createQuery } from '@tanstack/svelte-query'
+import { getMailApi } from '../api-instance.js'
+import { t } from '../i18n.js'
+
+/**
+ * What this workspace has been sending.
+ *
+ * The mail module is outbound only — there is no inbox to show, and `ROADMAP.md` defers one to
+ * v1.1 — so this is about delivery health rather than about reading anything.
+ */
+let { workspaceId, workspaceSlug, settings }: WidgetProps = $props()
+
+const api = getMailApi()
+const limit = $derived(Number(settings.limit ?? 8))
+const status = $derived((settings.status as string | null) ?? null)
+
+const query = createQuery(() => ({
+  queryKey: ['mail', 'delivery', workspaceId, 'widget', settingsScope(settings)],
+  queryFn: () =>
+    api.deliveries.list({
+      workspaceId,
+      limit,
+      status: (status ?? undefined) as never,
+    }),
+  enabled: Boolean(workspaceId),
+}))
+
+const tone = (s: string) =>
+  s === 'failed' || s === 'bounced' ? 'danger' : s === 'sent' || s === 'delivered' ? 'done' : 'grey'
+
+const items = $derived(query.data?.items ?? [])
+</script>
+
+<WidgetState
+  pending={query.isPending}
+  error={query.error}
+  empty={items.length === 0}
+  emptyTitle={t('widget_empty')}
+  emptyIcon="mail"
+  onRetry={() => query.refetch()}
+>
+  <ul>
+    {#each items as delivery (delivery.id)}
+      <li>
+        <a href="/{workspaceSlug}/settings/mail">
+          <span class="text">
+            <span class="subject">{delivery.subject}</span>
+            <span class="to">{delivery.to.join(', ')}</span>
+          </span>
+          <Badge tone={tone(delivery.status)} variant="chip">{delivery.status}</Badge>
+          <time datetime={delivery.createdAt}>{relativeTime(delivery.createdAt)}</time>
+        </a>
+      </li>
+    {/each}
+  </ul>
+</WidgetState>
+
+<style>
+  li {
+    border-block-end: 1px solid var(--kern-border-hairline);
+  }
+  li:last-child {
+    border-block-end: 0;
+  }
+  a {
+    display: flex;
+    align-items: center;
+    gap: 9px;
+    padding: 8px 14px;
+    color: inherit;
+  }
+  a:hover {
+    background: var(--kern-surface-hover);
+  }
+  .text {
+    flex: 1;
+    min-width: 0;
+    display: grid;
+  }
+  .subject,
+  .to {
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+  }
+  .subject {
+    font-size: 13px;
+    color: var(--kern-ink-900);
+  }
+  .to {
+    font-size: 12px;
+    color: var(--kern-ink-450);
+  }
+  time {
+    flex-shrink: 0;
+    font-family: var(--kern-font-mono);
+    font-size: 11px;
+    color: var(--kern-ink-400);
+  }
+</style>

package/src/client/widgets/FailedWidget.svelte

@@ -0,0 +1,55 @@
+<script lang="ts">
+import type { WidgetProps } from '@kernhq/ui'
+import { formatCount, StatTile } from '@kernhq/ui'
+import { createQuery } from '@tanstack/svelte-query'
+import { getMailApi } from '../api-instance.js'
+import { t } from '../i18n.js'
+
+/**
+ * Failed sends, of the last fifty.
+ *
+ * `deliveries.list` returns a page and no total, and has no date filter, so a bare number here would
+ * be a claim the API cannot support. The note says exactly what the figure covers instead — a
+ * smaller true statement beats a bigger invented one. A real total needs a `deliveries.stats`
+ * procedure in the mail module first.
+ */
+let { workspaceId, workspaceSlug }: WidgetProps = $props()
+
+const WINDOW = 50
+
+const api = getMailApi()
+const query = createQuery(() => ({
+  queryKey: ['mail', 'delivery', workspaceId, 'failed', WINDOW],
+  queryFn: () => api.deliveries.list({ workspaceId, limit: WINDOW }),
+  enabled: Boolean(workspaceId),
+}))
+
+const failed = $derived(
+  (query.data?.items ?? []).filter((d) => d.status === 'failed' || d.status === 'bounced').length,
+)
+</script>
+
+<div class="wrap">
+  <StatTile
+    label={t('widget_failed_title')}
+    value={query.isPending ? '—' : formatCount(failed)}
+    note={t('widget_failed_note', { count: formatCount(WINDOW) })}
+    href="/{workspaceSlug}/settings/mail"
+    size="md"
+    class="tile"
+  />
+</div>
+
+<style>
+  .wrap {
+    display: grid;
+    align-content: center;
+    height: 100%;
+    padding: 14px 16px;
+  }
+  .wrap :global(.tile) {
+    border: 0;
+    background: transparent;
+    padding: 0;
+  }
+</style>