@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.5

package/dist/email/email-settings-compat.d.ts

@@ -0,0 +1,95 @@
+import { LEGACY_EMAIL_FLAT_FIELDS } from '@marinoscar/platform-contract/email';
+/**
+ * One transport's settings record.
+ *
+ * @stability experimental
+ */
+export type EmailTransportSettingsRecord = Record<string, unknown>;
+/**
+ * The `transports` record: transport id to its settings.
+ *
+ * @stability experimental
+ */
+export type EmailTransportsRecord = Record<string, EmailTransportSettingsRecord>;
+/** A legacy flat field name. */
+export type LegacyEmailField = (typeof LEGACY_EMAIL_FLAT_FIELDS)[number];
+/** The deprecated flat read view of the built-in transports' settings. */
+export interface LegacyFlatView {
+    sesRegion?: string;
+    sesAccessKeyId?: string;
+    smtpHost?: string;
+    smtpPort?: number;
+    smtpUseTls?: boolean;
+    smtpUsername?: string;
+}
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/**
+ * Folds the legacy flat fields of a stored row (or any object carrying them)
+ * into `transports`, and drops them. A setting already present in
+ * `transports.<id>` wins over its flat alias. A value that is not an object is
+ * returned unchanged, so the schema reports it.
+ *
+ * @param raw - the stored `email` row value.
+ * @returns the same row in the current shape.
+ */
+export declare function foldLegacyEmailFields(raw: unknown): unknown;
+/**
+ * The deprecated flat read view of `transports`: only what is explicitly
+ * stored (a non-empty text setting, a stored port or TLS flag), so a row
+ * written by an earlier release reads back exactly as it was stored.
+ *
+ * @param transports - the stored `transports` record.
+ * @returns the flat fields that apply.
+ */
+export declare function legacyFlatView(transports: EmailTransportsRecord | undefined): LegacyFlatView;
+/**
+ * `transports` as an object carrying the flat fields describes it (a row's
+ * folded settings, or an admin view built by an older caller).
+ *
+ * @param source - an object that may carry the legacy flat fields.
+ */
+export declare function transportsFromFlat(source: object): EmailTransportsRecord;
+/**
+ * The stored settings of transport `id` in an object that carries `transports`
+ * and/or the legacy flat fields; `{}` when there are none.
+ *
+ * @param source - settings, or an admin view.
+ * @param id - the transport id.
+ */
+export declare function storedTransportSettings(source: {
+    transports?: EmailTransportsRecord;
+}, id: string): EmailTransportSettingsRecord;
+/**
+ * The settings of transport `id`, parsed with its own schema and with its
+ * defaults filled; the defaults when the stored entry does not parse.
+ *
+ * @param source - settings, or an admin view.
+ * @param id - a registered transport id.
+ */
+export declare function parsedTransportSettings(source: {
+    transports?: EmailTransportsRecord;
+}, id: string): EmailTransportSettingsRecord;
+/**
+ * The field paths of the stored `transports` that a REGISTERED transport's
+ * schema refuses (`transports.smtp.port`). An unregistered id is not an error
+ * here (removing a plugin never bricks the row). Paths only, never values.
+ *
+ * @param transports - the stored `transports` record.
+ */
+export declare function invalidTransportPaths(transports: EmailTransportsRecord | undefined): string[];
+/** The 400 for a transport id nobody registered. */
+export declare function unknownTransportRejection(id: string, registeredIds?: readonly string[]): never;
+/** The 400 for a `transports` write the registry refuses. */
+export declare function transportRejection(error: unknown): never;
+/** The 400 for a secret a transport never declared. */
+export declare function unknownSecretRejection(transport: string, name: string, declared: readonly string[]): never;
+/**
+ * The `transports` patch the legacy flat aliases of a PUT body describe. A
+ * blank alias (`''` or `null`) resets that setting to the transport's default,
+ * which is what "clear this field" meant when the row was replaced wholesale.
+ *
+ * @param body - the PUT body (or any object carrying the flat aliases).
+ * @returns `{ <transportId>: { <setting>: value } }`; only transports that are registered.
+ */
+export declare function legacyAliasPatch(body: Record<string, unknown>): Record<string, Record<string, unknown>>;
+//# sourceMappingURL=email-settings-compat.d.ts.map

package/dist/email/email-settings-compat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-settings-compat.d.ts","sourceRoot":"","sources":["../../src/email/email-settings-compat.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,wBAAwB,EAAmC,MAAM,qCAAqC,CAAC;AAKhH;;;;GAIG;AACH,MAAM,MAAM,4BAA4B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACnE;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;AACjF,gCAAgC;AAChC,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzE,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAmB3D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,qBAAqB,GAAG,SAAS,GAAG,cAAc,CAY5F;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,qBAAqB,CAGxE;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAAE,UAAU,CAAC,EAAE,qBAAqB,CAAA;CAAE,EAAE,EAAE,EAAE,MAAM,GAAG,4BAA4B,CAGhI;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAAE,UAAU,CAAC,EAAE,qBAAqB,CAAA;CAAE,EAAE,EAAE,EAAE,MAAM,GAAG,4BAA4B,CAOhI;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,qBAAqB,GAAG,SAAS,GAAG,MAAM,EAAE,CAY7F;AAED,oDAAoD;AACpD,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,GAAE,SAAS,MAAM,EAA6B,GAAG,KAAK,CAKxH;AAED,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAexD;AAED,uDAAuD;AACvD,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,KAAK,CAK1G;AAOD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAavG"}

package/dist/email/email-settings-compat.js

@@ -0,0 +1,207 @@
+"use strict";
+// =============================================================================
+// Email settings: the legacy flat fields and the `transports` record (PP-14.8)
+// =============================================================================
+//
+// The `email` row stores `{ provider, enabled, fromAddress, fromName,
+// transports }`. Before transports were pluggable it stored six flat fields
+// (`sesRegion`, `sesAccessKeyId`, `smtpHost`, `smtpPort`, `smtpUseTls`,
+// `smtpUsername`). They are still READ from a stored row (folded into
+// `transports.ses` / `transports.smtp`), still ACCEPTED on `PUT` as aliases,
+// and still SERVED on the response as a deprecated read view, so no existing
+// row, client or script breaks. These pure helpers are the ONE place that
+// does the folding, so the settings service, the Doctor and the egress view
+// cannot disagree.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isRecord = isRecord;
+exports.foldLegacyEmailFields = foldLegacyEmailFields;
+exports.legacyFlatView = legacyFlatView;
+exports.transportsFromFlat = transportsFromFlat;
+exports.storedTransportSettings = storedTransportSettings;
+exports.parsedTransportSettings = parsedTransportSettings;
+exports.invalidTransportPaths = invalidTransportPaths;
+exports.unknownTransportRejection = unknownTransportRejection;
+exports.transportRejection = transportRejection;
+exports.unknownSecretRejection = unknownSecretRejection;
+exports.legacyAliasPatch = legacyAliasPatch;
+const common_1 = require("@nestjs/common");
+const email_1 = require("@marinoscar/platform-contract/email");
+const index_1 = require("../core/index");
+const email_transport_1 = require("./transports/email-transport");
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * Folds the legacy flat fields of a stored row (or any object carrying them)
+ * into `transports`, and drops them. A setting already present in
+ * `transports.<id>` wins over its flat alias. A value that is not an object is
+ * returned unchanged, so the schema reports it.
+ *
+ * @param raw - the stored `email` row value.
+ * @returns the same row in the current shape.
+ */
+function foldLegacyEmailFields(raw) {
+    if (!isRecord(raw))
+        return raw;
+    const folded = { ...raw };
+    const transports = isRecord(raw.transports) ? { ...raw.transports } : {};
+    for (const field of email_1.LEGACY_EMAIL_FLAT_FIELDS) {
+        if (!(field in folded))
+            continue;
+        const value = folded[field];
+        delete folded[field];
+        if (value === undefined)
+            continue;
+        const { transport, setting } = email_1.LEGACY_EMAIL_FLAT_FIELD_TARGETS[field];
+        const entry = isRecord(transports[transport]) ? { ...transports[transport] } : {};
+        if (entry[setting] === undefined)
+            entry[setting] = value;
+        transports[transport] = entry;
+    }
+    if (isRecord(raw.transports) || Object.keys(transports).length > 0)
+        folded.transports = transports;
+    return folded;
+}
+/**
+ * The deprecated flat read view of `transports`: only what is explicitly
+ * stored (a non-empty text setting, a stored port or TLS flag), so a row
+ * written by an earlier release reads back exactly as it was stored.
+ *
+ * @param transports - the stored `transports` record.
+ * @returns the flat fields that apply.
+ */
+function legacyFlatView(transports) {
+    const view = {};
+    if (!transports)
+        return view;
+    for (const field of email_1.LEGACY_EMAIL_FLAT_FIELDS) {
+        const { transport, setting } = email_1.LEGACY_EMAIL_FLAT_FIELD_TARGETS[field];
+        const value = transports[transport]?.[setting];
+        if (typeof value === 'string' && value.length > 0)
+            view[field] = value;
+        else if (typeof value === 'number' || typeof value === 'boolean')
+            view[field] = value;
+    }
+    return view;
+}
+/**
+ * `transports` as an object carrying the flat fields describes it (a row's
+ * folded settings, or an admin view built by an older caller).
+ *
+ * @param source - an object that may carry the legacy flat fields.
+ */
+function transportsFromFlat(source) {
+    const folded = foldLegacyEmailFields(source);
+    return folded.transports ?? {};
+}
+/**
+ * The stored settings of transport `id` in an object that carries `transports`
+ * and/or the legacy flat fields; `{}` when there are none.
+ *
+ * @param source - settings, or an admin view.
+ * @param id - the transport id.
+ */
+function storedTransportSettings(source, id) {
+    const merged = transportsFromFlat({ ...source, transports: source.transports });
+    return merged[id] ?? {};
+}
+/**
+ * The settings of transport `id`, parsed with its own schema and with its
+ * defaults filled; the defaults when the stored entry does not parse.
+ *
+ * @param source - settings, or an admin view.
+ * @param id - a registered transport id.
+ */
+function parsedTransportSettings(source, id) {
+    try {
+        return email_transport_1.emailTransportKind.parseSettings(id, storedTransportSettings(source, id));
+    }
+    catch (error) {
+        if (!(error instanceof index_1.PluggableSettingsError))
+            throw error;
+        return email_transport_1.emailTransportKind.parseSettings(id, {});
+    }
+}
+/**
+ * The field paths of the stored `transports` that a REGISTERED transport's
+ * schema refuses (`transports.smtp.port`). An unregistered id is not an error
+ * here (removing a plugin never bricks the row). Paths only, never values.
+ *
+ * @param transports - the stored `transports` record.
+ */
+function invalidTransportPaths(transports) {
+    const paths = [];
+    for (const [id, value] of Object.entries(transports ?? {})) {
+        if (!email_transport_1.emailTransportKind.has(id))
+            continue;
+        try {
+            email_transport_1.emailTransportKind.parseSettings(id, value);
+        }
+        catch (error) {
+            if (!(error instanceof index_1.PluggableSettingsError))
+                throw error;
+            for (const issue of error.issues)
+                paths.push(['transports', id, ...issue.path.map(String)].join('.'));
+        }
+    }
+    return paths;
+}
+/** The 400 for a transport id nobody registered. */
+function unknownTransportRejection(id, registeredIds = email_transport_1.emailTransportKind.ids()) {
+    throw new common_1.BadRequestException({
+        message: `Unknown email transport "${id}". Registered: ${registeredIds.join(', ') || '(none)'}.`,
+        details: { reason: 'EMAIL_UNKNOWN_TRANSPORT', transport: id },
+    });
+}
+/** The 400 for a `transports` write the registry refuses. */
+function transportRejection(error) {
+    if (error instanceof index_1.PluggableUnknownError) {
+        return unknownTransportRejection(error.id, error.registeredIds);
+    }
+    if (error instanceof index_1.PluggableSettingsError) {
+        throw new common_1.BadRequestException({
+            message: `The settings for email transport "${error.id}" are not valid: ${error.message}`,
+            details: {
+                reason: 'EMAIL_TRANSPORT_SETTINGS_INVALID',
+                transport: error.id,
+                fields: [...new Set(error.issues.map((issue) => String(issue.path[0] ?? '')))].filter(Boolean),
+            },
+        });
+    }
+    throw error;
+}
+/** The 400 for a secret a transport never declared. */
+function unknownSecretRejection(transport, name, declared) {
+    throw new common_1.BadRequestException({
+        message: `Email transport "${transport}" declares no secret "${name}". Declared: ${declared.join(', ') || '(none)'}.`,
+        details: { reason: 'EMAIL_UNKNOWN_SECRET', transport, secret: name },
+    });
+}
+/** Whether a PUT value is an "empty box" (`''` or `null`). */
+function isBlank(value) {
+    return value === '' || value === null;
+}
+/**
+ * The `transports` patch the legacy flat aliases of a PUT body describe. A
+ * blank alias (`''` or `null`) resets that setting to the transport's default,
+ * which is what "clear this field" meant when the row was replaced wholesale.
+ *
+ * @param body - the PUT body (or any object carrying the flat aliases).
+ * @returns `{ <transportId>: { <setting>: value } }`; only transports that are registered.
+ */
+function legacyAliasPatch(body) {
+    const patch = {};
+    for (const field of email_1.LEGACY_EMAIL_FLAT_FIELDS) {
+        const value = body[field];
+        if (value === undefined)
+            continue;
+        const { transport, setting } = email_1.LEGACY_EMAIL_FLAT_FIELD_TARGETS[field];
+        if (!email_transport_1.emailTransportKind.has(transport))
+            continue;
+        const defaults = email_transport_1.emailTransportKind.get(transport).defaults;
+        (patch[transport] ??= {})[setting] = isBlank(value) ? defaults[setting] : value;
+    }
+    return patch;
+}
+//# sourceMappingURL=email-settings-compat.js.map

package/dist/email/email-settings-compat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-settings-compat.js","sourceRoot":"","sources":["../../src/email/email-settings-compat.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,6EAA6E;AAC7E,6EAA6E;AAC7E,0EAA0E;AAC1E,4EAA4E;AAC5E,mBAAmB;AACnB,gFAAgF;;AAiChF,4BAEC;AAWD,sDAmBC;AAUD,wCAYC;AAQD,gDAGC;AASD,0DAGC;AASD,0DAOC;AASD,sDAYC;AAGD,8DAKC;AAGD,gDAeC;AAGD,wDAKC;AAeD,4CAaC;AA/MD,2CAAqD;AACrD,+DAAgH;AAEhH,yCAA8E;AAC9E,kEAAkE;AA2BlE,SAAgB,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,qBAAqB,CAAC,GAAY;IAChD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAE/B,MAAM,MAAM,GAA4B,EAAE,GAAG,GAAG,EAAE,CAAC;IACnD,MAAM,UAAU,GAA4B,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAElG,KAAK,MAAM,KAAK,IAAI,gCAAwB,EAAE,CAAC;QAC7C,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC;YAAE,SAAS;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,uCAA+B,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,KAAK,GAA4B,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAI,UAAU,CAAC,SAAS,CAA6B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS;YAAE,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACzD,UAAU,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAChC,CAAC;IAED,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;IACnG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,cAAc,CAAC,UAA6C;IAC1E,MAAM,IAAI,GAA8C,EAAE,CAAC;IAC3D,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,KAAK,MAAM,KAAK,IAAI,gCAAwB,EAAE,CAAC;QAC7C,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,uCAA+B,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;aAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACxF,CAAC;IAED,OAAO,IAAsB,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAAC,MAAc;IAC/C,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAA2C,CAAC;IACvF,OAAO,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,uBAAuB,CAAC,MAA8C,EAAE,EAAU;IAChG,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,uBAAuB,CAAC,MAA8C,EAAE,EAAU;IAChG,IAAI,CAAC;QACH,OAAO,oCAAkB,CAAC,aAAa,CAAC,EAAE,EAAE,uBAAuB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,8BAAsB,CAAC;YAAE,MAAM,KAAK,CAAC;QAC5D,OAAO,oCAAkB,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,qBAAqB,CAAC,UAA6C;IACjF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,oCAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC1C,IAAI,CAAC;YACH,oCAAkB,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,8BAAsB,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC5D,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oDAAoD;AACpD,SAAgB,yBAAyB,CAAC,EAAU,EAAE,gBAAmC,oCAAkB,CAAC,GAAG,EAAE;IAC/G,MAAM,IAAI,4BAAmB,CAAC;QAC5B,OAAO,EAAE,4BAA4B,EAAE,kBAAkB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG;QAChG,OAAO,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,SAAS,EAAE,EAAE,EAAE;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,SAAgB,kBAAkB,CAAC,KAAc;IAC/C,IAAI,KAAK,YAAY,6BAAqB,EAAE,CAAC;QAC3C,OAAO,yBAAyB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,YAAY,8BAAsB,EAAE,CAAC;QAC5C,MAAM,IAAI,4BAAmB,CAAC;YAC5B,OAAO,EAAE,qCAAqC,KAAK,CAAC,EAAE,oBAAoB,KAAK,CAAC,OAAO,EAAE;YACzF,OAAO,EAAE;gBACP,MAAM,EAAE,kCAAkC;gBAC1C,SAAS,EAAE,KAAK,CAAC,EAAE;gBACnB,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;aAC/F;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,CAAC;AACd,CAAC;AAED,uDAAuD;AACvD,SAAgB,sBAAsB,CAAC,SAAiB,EAAE,IAAY,EAAE,QAA2B;IACjG,MAAM,IAAI,4BAAmB,CAAC;QAC5B,OAAO,EAAE,oBAAoB,SAAS,yBAAyB,IAAI,gBAAgB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG;QACrH,OAAO,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE;KACrE,CAAC,CAAC;AACL,CAAC;AAED,8DAA8D;AAC9D,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,IAAI,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAAC,IAA6B;IAC5D,MAAM,KAAK,GAA4C,EAAE,CAAC;IAE1D,KAAK,MAAM,KAAK,IAAI,gCAAwB,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,uCAA+B,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,oCAAkB,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QACjD,MAAM,QAAQ,GAAG,oCAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAmC,CAAC;QACvF,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClF,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/email/email-settings.controller.d.ts

@@ -0,0 +1,45 @@
+import { type RequestUser } from '../identity/index';
+import { EmailSettingsService } from './email-settings.service';
+import { EmailTestSendService } from './email-test-send.service';
+import { UpdateEmailSettingsDto } from './dto/update-email-settings.dto';
+/**
+ * `GET`/`PUT /api/email-settings` (`system_settings:read` / `:write`) and
+ * `POST /api/email-settings/test` (`system_settings:write`). No route returns a secret.
+ *
+ * @stability stable
+ */
+export declare class EmailSettingsController {
+    private readonly emailSettings;
+    private readonly testSend;
+    constructor(emailSettings: EmailSettingsService, testSend: EmailTestSendService);
+    /**
+     * `GET /api/email-settings`: the settings and the masked secret statuses.
+     *
+     * @returns the admin view.
+     */
+    getSettings(): Promise<import("./email-settings.service").EmailSettingsAdminView>;
+    /**
+     * `PUT /api/email-settings`: replace the settings; `If-Match` guards the write.
+     *
+     * @param dto - the body, secrets write-only.
+     * @param userId - the caller.
+     * @param ifMatch - the expected version, or absent.
+     * @returns the admin view after the write.
+     */
+    replaceSettings(dto: UpdateEmailSettingsDto, userId: string, ifMatch?: string): Promise<import("./email-settings.service").EmailSettingsAdminView>;
+    /**
+     * `POST /api/email-settings/test`: send the test message to the caller.
+     *
+     * @param user - the caller, the only recipient.
+     * @returns the attempt's outcome (HTTP 200 either way).
+     */
+    sendTestEmail(user: RequestUser): Promise<{
+        success: boolean;
+        sentTo: string;
+        providerKind: string | null;
+        messageId: string | null;
+        error: string | null;
+        attemptedAt: string;
+    }>;
+}
+//# sourceMappingURL=email-settings.controller.d.ts.map

package/dist/email/email-settings.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-settings.controller.d.ts","sourceRoot":"","sources":["../../src/email/email-settings.controller.ts"],"names":[],"mappings":"AAYA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAExE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAuCzE;;;;;GAKG;AACH,qBAEa,uBAAuB;IAEhC,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,aAAa,EAAE,oBAAoB,EACnC,QAAQ,EAAE,oBAAoB;IAGjD;;;;OAIG;IAiBG,WAAW;IAIjB;;;;;;;OAOG;IAwBG,eAAe,CACX,GAAG,EAAE,sBAAsB,EAChB,MAAM,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM;IAavC;;;;;OAKG;IAwBG,aAAa,CAAgB,IAAI,EAAE,WAAW;;;;;;;;CAKrD"}

package/dist/email/email-settings.controller.js

@@ -0,0 +1,195 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailSettingsController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const index_1 = require("../identity/index");
+const index_2 = require("../settings/index");
+const email_settings_service_1 = require("./email-settings.service");
+const email_test_send_service_1 = require("./email-test-send.service");
+const email_settings_response_dto_1 = require("./dto/email-settings-response.dto");
+const test_email_result_dto_1 = require("./dto/test-email-result.dto");
+const update_email_settings_dto_1 = require("./dto/update-email-settings.dto");
+// =============================================================================
+// EmailSettingsController (issue #124, epic #109)
+// =============================================================================
+//
+// The HTTP surface behind `/admin/settings/email`. Three operations, gated as
+// the `ADMIN_SECTIONS` card declares:
+//
+//   GET  /api/email-settings        system_settings:read
+//   PUT  /api/email-settings        system_settings:write
+//   POST /api/email-settings/test   system_settings:write
+//
+// `system_settings:*` rather than a new `email_settings:*` pair, deliberately.
+// The permission set is seeded (the settings slice declares it) and a new string means a
+// migration plus a re-seed plus every existing Admin role being updated, for a
+// page that is administering system configuration by any reading. #124 does
+// not propose one, and the registry card mirrors the same strings.
+//
+// The TEST endpoint is gated on WRITE, not read. It is a side-effecting
+// operation that causes the system to originate mail; `:read` is held by
+// anyone who may look at settings, and looking is not sending.
+//
+// -----------------------------------------------------------------------------
+// A SEPARATE CONTROLLER, NOT A ROUTE ON SystemSettingsController
+// -----------------------------------------------------------------------------
+//
+// Same reasoning as the separate `system_settings` row (see
+// email-settings.service.ts): the two surfaces write different rows and must
+// not be able to clobber each other, and SMTP host/username stay out of
+// `GET /api/system-settings`' response for free. It also keeps the OpenAPI tag
+// -- and therefore the API reference -- split the way the settings pages are.
+//
+// NOTE THE MODULE THIS LIVES IN. `EmailModule` had no controller until now, on
+// the grounds that adding an HTTP surface before there is something to expose
+// puts a route to review in infrastructure. There is now something to expose,
+// and it is reviewed here, in the diff that adds it.
+// =============================================================================
+/**
+ * `GET`/`PUT /api/email-settings` (`system_settings:read` / `:write`) and
+ * `POST /api/email-settings/test` (`system_settings:write`). No route returns a secret.
+ *
+ * @stability stable
+ */
+let EmailSettingsController = class EmailSettingsController {
+    emailSettings;
+    testSend;
+    constructor(emailSettings, testSend) {
+        this.emailSettings = emailSettings;
+        this.testSend = testSend;
+    }
+    /**
+     * `GET /api/email-settings`: the settings and the masked secret statuses.
+     *
+     * @returns the admin view.
+     */
+    async getSettings() {
+        return this.emailSettings.describeForAdmin();
+    }
+    /**
+     * `PUT /api/email-settings`: replace the settings; `If-Match` guards the write.
+     *
+     * @param dto - the body, secrets write-only.
+     * @param userId - the caller.
+     * @param ifMatch - the expected version, or absent.
+     * @returns the admin view after the write.
+     */
+    async replaceSettings(dto, userId, ifMatch) {
+        // `Number.isInteger` rather than a bare `parseInt`: `parseInt('abc')` is
+        // NaN, and `NaN !== currentVersion` is always true, so a malformed header
+        // would turn every save into a 409 that no amount of reloading fixes. An
+        // unparseable If-Match is treated as absent instead, matching the
+        // header's own "omit to overwrite unconditionally" semantics.
+        const parsed = ifMatch !== undefined ? Number.parseInt(ifMatch, 10) : NaN;
+        const expectedVersion = Number.isInteger(parsed) ? parsed : undefined;
+        return this.emailSettings.update(dto, userId, expectedVersion);
+    }
+    /**
+     * `POST /api/email-settings/test`: send the test message to the caller.
+     *
+     * @param user - the caller, the only recipient.
+     * @returns the attempt's outcome (HTTP 200 either way).
+     */
+    async sendTestEmail(user) {
+        // The recipient is the session's own address. Nothing from the request
+        // body reaches the transport — there is no body, and no parameter for one.
+        return this.testSend.sendTest({ id: user.id, email: user.email });
+    }
+};
+exports.EmailSettingsController = EmailSettingsController;
+__decorate([
+    (0, common_1.Get)(),
+    (0, index_1.Auth)({ permissions: [index_2.SETTINGS_PERMISSIONS.SYSTEM_SETTINGS_READ.id] }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Get email settings (Admin only)',
+        description: 'Returns the email configuration together with `smtpPasswordStatus`, a masked, ' +
+            'non-secret description of the stored SMTP password. **The password itself is ' +
+            'never returned by this or any other endpoint** — it is held in the encrypted ' +
+            'credential store and is unreadable through the API by design. Submitting the ' +
+            'password field empty on `PUT` preserves the stored value.',
+    }),
+    (0, swagger_1.ApiResponse)({
+        status: 200,
+        description: 'Email settings and stored-password status',
+        type: email_settings_response_dto_1.EmailSettingsResponseDto,
+    }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], EmailSettingsController.prototype, "getSettings", null);
+__decorate([
+    (0, common_1.Put)(),
+    (0, index_1.Auth)({ permissions: [index_2.SETTINGS_PERMISSIONS.SYSTEM_SETTINGS_WRITE.id] }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Replace email settings (Admin only)',
+        description: 'Replaces the email configuration. `smtpPassword` is **write-only**: send it to ' +
+            'set or rotate the SMTP password, and **omit it or send it empty to keep the ' +
+            'stored one**. There is no way to erase a stored password through this endpoint.',
+    }),
+    (0, swagger_1.ApiHeader)({
+        name: 'If-Match',
+        description: 'Expected `version` for optimistic concurrency. Use `0` to assert that nothing ' +
+            'is stored yet. Omit to overwrite unconditionally.',
+        required: false,
+    }),
+    (0, swagger_1.ApiResponse)({
+        status: 200,
+        description: 'Updated email settings',
+        type: email_settings_response_dto_1.EmailSettingsResponseDto,
+    }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Validation error' }),
+    (0, swagger_1.ApiResponse)({ status: 409, description: 'Version conflict' }),
+    __param(0, (0, common_1.Body)()),
+    __param(1, (0, index_1.CurrentUser)('id')),
+    __param(2, (0, common_1.Headers)('if-match')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [update_email_settings_dto_1.UpdateEmailSettingsDto, String, String]),
+    __metadata("design:returntype", Promise)
+], EmailSettingsController.prototype, "replaceSettings", null);
+__decorate([
+    (0, common_1.Post)('test'),
+    (0, index_1.Auth)({ permissions: [index_2.SETTINGS_PERMISSIONS.SYSTEM_SETTINGS_WRITE.id] }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Send a test email to yourself (Admin only)',
+        description: 'Sends the test message through the configured provider **to the authenticated ' +
+            "caller's own address**. There is no recipient parameter: a free-text recipient " +
+            'would make this a send-arbitrary-mail endpoint.\n\n' +
+            '**This returns HTTP 200 even when the send failed.** A refused send is a ' +
+            'successful diagnosis, and it is the reason this endpoint exists — read the ' +
+            '`success` field, and show `error`, which carries the provider’s actual message ' +
+            '(`MessageRejected: Email address is not verified`, `535 Authentication failed`) ' +
+            'with any credential redacted. Treating 200 as “email works” reports success for ' +
+            'every misconfiguration there is.',
+    }),
+    (0, swagger_1.ApiResponse)({
+        status: 200,
+        description: 'The outcome of the attempt. Check `success`; on failure `error` holds the ' +
+            "provider's verbatim message.",
+        type: test_email_result_dto_1.TestEmailResultDto,
+    }),
+    __param(0, (0, index_1.CurrentUser)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], EmailSettingsController.prototype, "sendTestEmail", null);
+exports.EmailSettingsController = EmailSettingsController = __decorate([
+    (0, swagger_1.ApiTags)('Email Settings'),
+    (0, common_1.Controller)('email-settings'),
+    __metadata("design:paramtypes", [email_settings_service_1.EmailSettingsService,
+        email_test_send_service_1.EmailTestSendService])
+], EmailSettingsController);
+//# sourceMappingURL=email-settings.controller.js.map

package/dist/email/email-settings.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-settings.controller.js","sourceRoot":"","sources":["../../src/email/email-settings.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CASwB;AACxB,6CAAgF;AAEhF,6CAAwE;AACxE,6CAAyD;AACzD,qEAAgE;AAChE,uEAAiE;AACjE,mFAA6E;AAC7E,uEAAiE;AACjE,+EAAyE;AAEzE,gFAAgF;AAChF,kDAAkD;AAClD,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,sCAAsC;AACtC,EAAE;AACF,yDAAyD;AACzD,0DAA0D;AAC1D,0DAA0D;AAC1D,EAAE;AACF,+EAA+E;AAC/E,yFAAyF;AACzF,+EAA+E;AAC/E,4EAA4E;AAC5E,mEAAmE;AACnE,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,+DAA+D;AAC/D,EAAE;AACF,gFAAgF;AAChF,iEAAiE;AACjE,gFAAgF;AAChF,EAAE;AACF,4DAA4D;AAC5D,6EAA6E;AAC7E,wEAAwE;AACxE,+EAA+E;AAC/E,8EAA8E;AAC9E,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,qDAAqD;AACrD,gFAAgF;AAEhF;;;;;GAKG;AAGI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAEf;IACA;IAFnB,YACmB,aAAmC,EACnC,QAA8B;QAD9B,kBAAa,GAAb,aAAa,CAAsB;QACnC,aAAQ,GAAR,QAAQ,CAAsB;IAC9C,CAAC;IAEJ;;;;OAIG;IAiBG,AAAN,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC;IAC/C,CAAC;IAED;;;;;;;OAOG;IAwBG,AAAN,KAAK,CAAC,eAAe,CACX,GAA2B,EAChB,MAAc,EACZ,OAAgB;QAErC,yEAAyE;QACzE,0EAA0E;QAC1E,yEAAyE;QACzE,kEAAkE;QAClE,8DAA8D;QAC9D,MAAM,MAAM,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1E,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAEtE,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IACjE,CAAC;IAED;;;;;OAKG;IAwBG,AAAN,KAAK,CAAC,aAAa,CAAgB,IAAiB;QAClD,uEAAuE;QACvE,2EAA2E;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;CACF,CAAA;AAhHY,0DAAuB;AA2B5B;IAhBL,IAAA,YAAG,GAAE;IACL,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,4BAAoB,CAAC,oBAAoB,CAAC,EAAE,CAAC,EAAE,CAAC;IACrE,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EACT,gFAAgF;YAChF,+EAA+E;YAC/E,+EAA+E;YAC/E,+EAA+E;YAC/E,2DAA2D;KAC9D,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,2CAA2C;QACxD,IAAI,EAAE,sDAAwB;KAC/B,CAAC;;;;0DAGD;AAiCK;IAvBL,IAAA,YAAG,GAAE;IACL,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,4BAAoB,CAAC,qBAAqB,CAAC,EAAE,CAAC,EAAE,CAAC;IACtE,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,qCAAqC;QAC9C,WAAW,EACT,iFAAiF;YACjF,8EAA8E;YAC9E,iFAAiF;KACpF,CAAC;IACD,IAAA,mBAAS,EAAC;QACT,IAAI,EAAE,UAAU;QAChB,WAAW,EACT,gFAAgF;YAChF,mDAAmD;QACrD,QAAQ,EAAE,KAAK;KAChB,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,wBAAwB;QACrC,IAAI,EAAE,sDAAwB;KAC/B,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAC7D,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAE3D,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,mBAAW,EAAC,IAAI,CAAC,CAAA;IACjB,WAAA,IAAA,gBAAO,EAAC,UAAU,CAAC,CAAA;;qCAFP,kDAAsB;;8DAapC;AA+BK;IAvBL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,YAAI,EAAC,EAAE,WAAW,EAAE,CAAC,4BAAoB,CAAC,qBAAqB,CAAC,EAAE,CAAC,EAAE,CAAC;IACtE,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,4CAA4C;QACrD,WAAW,EACT,gFAAgF;YAChF,iFAAiF;YACjF,qDAAqD;YACrD,2EAA2E;YAC3E,6EAA6E;YAC7E,iFAAiF;YACjF,kFAAkF;YAClF,kFAAkF;YAClF,kCAAkC;KACrC,CAAC;IACD,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EACT,4EAA4E;YAC5E,8BAA8B;QAChC,IAAI,EAAE,0CAAkB;KACzB,CAAC;IACmB,WAAA,IAAA,mBAAW,GAAE,CAAA;;;;4DAIjC;kCA/GU,uBAAuB;IAFnC,IAAA,iBAAO,EAAC,gBAAgB,CAAC;IACzB,IAAA,mBAAU,EAAC,gBAAgB,CAAC;qCAGO,6CAAoB;QACzB,8CAAoB;GAHtC,uBAAuB,CAgHnC"}

package/dist/email/email-settings.schema.d.ts

@@ -0,0 +1,3 @@
+export { BUILTIN_EMAIL_PROVIDER_KINDS, DEFAULT_EMAIL_SETTINGS, DEFAULT_SMTP_PORT, EMAIL_PROVIDER_KINDS, EMAIL_SETTINGS_CARRIES_NO_SECRET, EMAIL_TRANSPORT_ID_PATTERN, IMPLICIT_TLS_SMTP_PORT, emailSettingsSchema, } from '@marinoscar/platform-contract/email';
+export type { BuiltinEmailProviderKind, EmailProviderKind, EmailSettings, EmailSettingsCarriesNoSecret, } from '@marinoscar/platform-contract/email';
+//# sourceMappingURL=email-settings.schema.d.ts.map

package/dist/email/email-settings.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-settings.schema.d.ts","sourceRoot":"","sources":["../../src/email/email-settings.schema.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,gCAAgC,EAChC,0BAA0B,EAC1B,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,wBAAwB,EACxB,iBAAiB,EACjB,aAAa,EACb,4BAA4B,GAC7B,MAAM,qCAAqC,CAAC"}

package/dist/email/email-settings.schema.js

@@ -0,0 +1,24 @@
+"use strict";
+// =============================================================================
+// Email settings: shape and validation (issue #122; the wire contract since
+// #737 lives in `@marinoscar/platform-contract/email`)
+// =============================================================================
+//
+// Re-exported here so the API slice's own files and its consumers keep one
+// import path. THE SMTP PASSWORD AND THE SES SECRET ACCESS KEY ARE NOT IN
+// THESE SETTINGS, and must never be added: they live in the credential store
+// (`./smtp-credential.constants.ts`, `./ses-credential.constants.ts`). The
+// compile-time proof of their absence sits beside the schema in the contract.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.emailSettingsSchema = exports.IMPLICIT_TLS_SMTP_PORT = exports.EMAIL_TRANSPORT_ID_PATTERN = exports.EMAIL_SETTINGS_CARRIES_NO_SECRET = exports.EMAIL_PROVIDER_KINDS = exports.DEFAULT_SMTP_PORT = exports.DEFAULT_EMAIL_SETTINGS = exports.BUILTIN_EMAIL_PROVIDER_KINDS = void 0;
+var email_1 = require("@marinoscar/platform-contract/email");
+Object.defineProperty(exports, "BUILTIN_EMAIL_PROVIDER_KINDS", { enumerable: true, get: function () { return email_1.BUILTIN_EMAIL_PROVIDER_KINDS; } });
+Object.defineProperty(exports, "DEFAULT_EMAIL_SETTINGS", { enumerable: true, get: function () { return email_1.DEFAULT_EMAIL_SETTINGS; } });
+Object.defineProperty(exports, "DEFAULT_SMTP_PORT", { enumerable: true, get: function () { return email_1.DEFAULT_SMTP_PORT; } });
+Object.defineProperty(exports, "EMAIL_PROVIDER_KINDS", { enumerable: true, get: function () { return email_1.EMAIL_PROVIDER_KINDS; } });
+Object.defineProperty(exports, "EMAIL_SETTINGS_CARRIES_NO_SECRET", { enumerable: true, get: function () { return email_1.EMAIL_SETTINGS_CARRIES_NO_SECRET; } });
+Object.defineProperty(exports, "EMAIL_TRANSPORT_ID_PATTERN", { enumerable: true, get: function () { return email_1.EMAIL_TRANSPORT_ID_PATTERN; } });
+Object.defineProperty(exports, "IMPLICIT_TLS_SMTP_PORT", { enumerable: true, get: function () { return email_1.IMPLICIT_TLS_SMTP_PORT; } });
+Object.defineProperty(exports, "emailSettingsSchema", { enumerable: true, get: function () { return email_1.emailSettingsSchema; } });
+//# sourceMappingURL=email-settings.schema.js.map

package/dist/email/email-settings.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-settings.schema.js","sourceRoot":"","sources":["../../src/email/email-settings.schema.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,4EAA4E;AAC5E,uDAAuD;AACvD,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,gFAAgF;;;AAEhF,6DAS6C;AAR3C,qHAAA,4BAA4B,OAAA;AAC5B,+GAAA,sBAAsB,OAAA;AACtB,0GAAA,iBAAiB,OAAA;AACjB,6GAAA,oBAAoB,OAAA;AACpB,yHAAA,gCAAgC,OAAA;AAChC,mHAAA,0BAA0B,OAAA;AAC1B,+GAAA,sBAAsB,OAAA;AACtB,4GAAA,mBAAmB,OAAA"}