@objectstack/service-sms 14.5.0

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/sms-service.ts","../src/transports/aliyun.ts","../src/transports/twilio.ts","../src/transports/index.ts","../src/sms-plugin.ts"],"sourcesContent":["// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nexport {\n  SmsService,\n  LogSmsTransport,\n  maskPhoneNumber,\n  normalizeSmsRecipient,\n  type SmsServiceOptions,\n} from './sms-service.js';\nexport { SmsServicePlugin, type SmsServicePluginOptions } from './sms-plugin.js';\nexport {\n  makeSmsTransport,\n  AliyunSmsTransport,\n  TwilioSmsTransport,\n  type SmsProviderTag,\n  type MakeSmsTransportOptions,\n  type AliyunSmsTransportOptions,\n  type TwilioSmsTransportOptions,\n} from './transports/index.js';\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport type {\n  ISmsService,\n  ISmsTransport,\n  NormalizedSmsMessage,\n  SendSmsInput,\n  SendSmsResult,\n  SmsTransportSendResult,\n} from '@objectstack/spec/contracts';\n\n/**\n * Normalize + validate a recipient phone number. Accepts E.164 and common\n * human formats (spaces / dashes / dots / parens are stripped). Returns\n * `undefined` when the result doesn't look like a phone number.\n *\n * Same shape rule as plugin-auth's `normalizePhoneNumber` — 6-15 digits\n * with an optional leading `+` (kept local: the two packages must not\n * depend on each other).\n */\nexport function normalizeSmsRecipient(raw: string): string | undefined {\n  const stripped = String(raw ?? '').replace(/[\\s\\-().]/g, '');\n  return /^\\+?[0-9]{6,15}$/.test(stripped) ? stripped : undefined;\n}\n\n/**\n * Mask a phone number for log lines: keep the prefix (country-code-ish) and\n * the last two digits, hide the middle. `+8613812345678` → `+8613******78`.\n * SMS logging policy: masked recipient + status ONLY — never the body\n * (OTP codes travel in it; see the ISmsService contract header).\n */\nexport function maskPhoneNumber(phone: string): string {\n  const p = String(phone ?? '');\n  if (p.length <= 6) return `${p.slice(0, 2)}****`;\n  return `${p.slice(0, 5)}${'*'.repeat(Math.max(2, p.length - 7))}${p.slice(-2)}`;\n}\n\n/**\n * Development transport — never actually sends. Logs the masked recipient\n * (and, OUTSIDE production only, the message body so local OTP flows are\n * testable) and returns a synthetic message id.\n *\n * The production-body suppression is a hard rule from #2780: OTP codes must\n * never land in logs. In dev the body IS the delivery — same pattern as the\n * auth magic-link / invitation URLs, which are printed in dev only.\n */\nexport class LogSmsTransport implements ISmsTransport {\n  private counter = 0;\n  constructor(private readonly logger?: { info: (msg: string, meta?: any) => void }) {}\n  async send(message: NormalizedSmsMessage): Promise<SmsTransportSendResult> {\n    const messageId = `dev-sms-${Date.now()}-${++this.counter}`;\n    const dev = (globalThis as any)?.process?.env?.NODE_ENV !== 'production';\n    this.logger?.info(\n      `[LogSmsTransport] would send SMS to ${maskPhoneNumber(message.to)}` +\n      (dev ? ` — body: ${message.body}` : ' (body suppressed outside dev)'),\n      { messageId },\n    );\n    return { messageId, response: 'logged' };\n  }\n}\n\nexport interface SmsServiceOptions {\n  transport: ISmsTransport;\n  /**\n   * Whether `transport` is a real provider (Aliyun / Twilio / injected).\n   * `false` = development log fallback; surfaced via `isConfigured()` so\n   * consumers can gate SMS-dependent features in production.\n   */\n  configured: boolean;\n  /** Retry attempts on transport throw. Default 0 (no retry). */\n  retries?: number;\n  /** Logger for diagnostic output. NEVER receives message bodies. */\n  logger?: {\n    info: (msg: string, meta?: any) => void;\n    warn: (msg: string, meta?: any) => void;\n  };\n}\n\n/**\n * Concrete ISmsService implementation.\n *\n * Flow: validate + normalize input → transport.send() (with optional\n * retry) → SendSmsResult. Deliberately NO persistence and NO body logging —\n * see the contract header in `@objectstack/spec/contracts/sms-service.ts`.\n */\nexport class SmsService implements ISmsService {\n  constructor(public options: SmsServiceOptions) {\n    if (!options.transport) throw new Error('SmsService: transport is required');\n  }\n\n  /**\n   * Hot-swap the underlying transport (settings namespace changed). The\n   * `configured` flag travels with the transport.\n   */\n  setTransport(transport: ISmsTransport, configured: boolean): void {\n    this.options.transport = transport;\n    this.options.configured = configured;\n  }\n\n  isConfigured(): boolean {\n    return this.options.configured;\n  }\n\n  async send(input: SendSmsInput): Promise<SendSmsResult> {\n    const to = normalizeSmsRecipient(input?.to ?? '');\n    if (!to) {\n      throw new Error(`VALIDATION_FAILED: '${maskPhoneNumber(String(input?.to ?? ''))}' is not a valid phone number`);\n    }\n    const body = String(input?.body ?? '').trim();\n    if (!body && !input?.templateId && !input?.templateParams) {\n      throw new Error('VALIDATION_FAILED: body (or templateId/templateParams) is required');\n    }\n\n    const normalized: NormalizedSmsMessage = {\n      to,\n      body,\n      ...(input.templateId ? { templateId: input.templateId } : {}),\n      ...(input.templateParams ? { templateParams: input.templateParams } : {}),\n    };\n\n    const id = `sms-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;\n    const maxAttempts = (this.options.retries ?? 0) + 1;\n    let lastError: unknown;\n    for (let attempt = 1; attempt <= maxAttempts; attempt++) {\n      try {\n        const result = await this.options.transport.send(normalized);\n        this.options.logger?.info(\n          `[SmsService] sent to ${maskPhoneNumber(to)} (messageId=${result.messageId})`,\n        );\n        return { id, status: 'sent', messageId: result.messageId };\n      } catch (err) {\n        lastError = err;\n        if (attempt < maxAttempts) {\n          await new Promise((r) => setTimeout(r, Math.min(2000, 100 * 2 ** (attempt - 1))));\n        }\n      }\n    }\n    const errMessage = String((lastError as Error)?.message ?? lastError ?? 'send failed').slice(0, 500);\n    this.options.logger?.warn(\n      `[SmsService] send to ${maskPhoneNumber(to)} failed: ${errMessage}`,\n    );\n    return { id, status: 'failed', error: errMessage };\n  }\n}\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { createHash, createHmac, randomUUID } from 'node:crypto';\nimport type { ISmsTransport, NormalizedSmsMessage, SmsTransportSendResult } from '@objectstack/spec/contracts';\n\nexport interface AliyunSmsTransportOptions {\n  accessKeyId: string;\n  accessKeySecret: string;\n  /** 短信签名 SignName — the registered sender signature, e.g. `阿里云短信测试`. */\n  signName: string;\n  /**\n   * Default 模板 TemplateCode used when the input carries no `templateId`\n   * (Aliyun only delivers pre-registered templates — free-form bodies are\n   * refused by the API). A catch-all template with a single `${content}`\n   * variable makes generic notification sends possible.\n   */\n  defaultTemplateCode?: string;\n  /** API endpoint host. Default `dysmsapi.aliyuncs.com`. */\n  endpoint?: string;\n  /** Injectable fetch for tests. */\n  fetchImpl?: typeof fetch;\n}\n\nconst API_VERSION = '2017-05-25';\nconst ALGORITHM = 'ACS3-HMAC-SHA256';\n\nconst sha256Hex = (s: string): string => createHash('sha256').update(s, 'utf8').digest('hex');\nconst hmac256Hex = (key: string, s: string): string => createHmac('sha256', key).update(s, 'utf8').digest('hex');\n\n/** RFC 3986 percent-encoding (Aliyun requires `%20`, `%2A`, `%7E` handling). */\nconst encode = (s: string): string =>\n  encodeURIComponent(s)\n    .replace(/\\+/g, '%20')\n    .replace(/\\*/g, '%2A')\n    .replace(/%7E/g, '~');\n\n/**\n * Aliyun SMS (dysmsapi `SendSms`) transport, signed with the current\n * ACS3-HMAC-SHA256 scheme — plain `fetch` + `node:crypto`, no vendor SDK.\n *\n * Aliyun is template-only: the transport sends `templateId` (falling back to\n * the configured default TemplateCode) with `templateParams` (falling back to\n * `{ content: body }` for the catch-all-template pattern). The rendered\n * `body` itself is never transmitted outside `TemplateParam`.\n */\nexport class AliyunSmsTransport implements ISmsTransport {\n  private readonly endpoint: string;\n  private readonly fetchImpl: typeof fetch;\n\n  constructor(private readonly options: AliyunSmsTransportOptions) {\n    if (!options.accessKeyId || !options.accessKeySecret) {\n      throw new Error('AliyunSmsTransport: accessKeyId and accessKeySecret are required');\n    }\n    if (!options.signName) {\n      throw new Error('AliyunSmsTransport: signName is required');\n    }\n    this.endpoint = options.endpoint ?? 'dysmsapi.aliyuncs.com';\n    this.fetchImpl = options.fetchImpl ?? fetch;\n  }\n\n  async send(message: NormalizedSmsMessage): Promise<SmsTransportSendResult> {\n    const templateCode = message.templateId ?? this.options.defaultTemplateCode;\n    if (!templateCode) {\n      throw new Error(\n        'AliyunSmsTransport: Aliyun requires a template — pass templateId or configure a default template code',\n      );\n    }\n    const templateParam = JSON.stringify(message.templateParams ?? { content: message.body });\n\n    const query: Record<string, string> = {\n      PhoneNumbers: message.to,\n      SignName: this.options.signName,\n      TemplateCode: templateCode,\n      TemplateParam: templateParam,\n    };\n    const canonicalQuery = Object.keys(query)\n      .sort()\n      .map((k) => `${encode(k)}=${encode(query[k])}`)\n      .join('&');\n\n    const bodyHash = sha256Hex(''); // POST with all parameters in the query string\n    const headers: Record<string, string> = {\n      host: this.endpoint,\n      'x-acs-action': 'SendSms',\n      'x-acs-content-sha256': bodyHash,\n      'x-acs-date': new Date().toISOString().replace(/\\.\\d{3}Z$/, 'Z'),\n      'x-acs-signature-nonce': randomUUID(),\n      'x-acs-version': API_VERSION,\n    };\n    const signedHeaderNames = Object.keys(headers).sort();\n    const canonicalHeaders = signedHeaderNames.map((k) => `${k}:${headers[k].trim()}\\n`).join('');\n    const signedHeaders = signedHeaderNames.join(';');\n\n    const canonicalRequest = ['POST', '/', canonicalQuery, canonicalHeaders, signedHeaders, bodyHash].join('\\n');\n    const stringToSign = `${ALGORITHM}\\n${sha256Hex(canonicalRequest)}`;\n    const signature = hmac256Hex(this.options.accessKeySecret, stringToSign);\n\n    const response = await this.fetchImpl(`https://${this.endpoint}/?${canonicalQuery}`, {\n      method: 'POST',\n      headers: {\n        ...headers,\n        Authorization: `${ALGORITHM} Credential=${this.options.accessKeyId},SignedHeaders=${signedHeaders},Signature=${signature}`,\n      },\n    });\n\n    let payload: any = {};\n    try { payload = await response.json(); } catch { /* non-JSON error body */ }\n    if (!response.ok || payload?.Code !== 'OK') {\n      const code = payload?.Code ?? `HTTP_${response.status}`;\n      const detail = payload?.Message ?? response.statusText ?? 'request failed';\n      throw new Error(`Aliyun SendSms failed (${code}): ${detail}`);\n    }\n    return { messageId: String(payload.BizId ?? payload.RequestId ?? ''), response: payload.RequestId };\n  }\n}\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport type { ISmsTransport, NormalizedSmsMessage, SmsTransportSendResult } from '@objectstack/spec/contracts';\n\nexport interface TwilioSmsTransportOptions {\n  accountSid: string;\n  authToken: string;\n  /** Sender number (E.164). One of `from` / `messagingServiceSid` is required. */\n  from?: string;\n  /** Twilio Messaging Service SID (alternative to a fixed `from` number). */\n  messagingServiceSid?: string;\n  /** API base URL override (tests). Default `https://api.twilio.com`. */\n  baseUrl?: string;\n  /** Injectable fetch for tests. */\n  fetchImpl?: typeof fetch;\n}\n\n/**\n * Twilio Programmable Messaging transport — a single `POST\n * /2010-04-01/Accounts/{sid}/Messages.json` with HTTP Basic auth. Plain\n * `fetch`, no vendor SDK. Free-form: delivers `body` verbatim.\n */\nexport class TwilioSmsTransport implements ISmsTransport {\n  private readonly baseUrl: string;\n  private readonly fetchImpl: typeof fetch;\n\n  constructor(private readonly options: TwilioSmsTransportOptions) {\n    if (!options.accountSid || !options.authToken) {\n      throw new Error('TwilioSmsTransport: accountSid and authToken are required');\n    }\n    if (!options.from && !options.messagingServiceSid) {\n      throw new Error('TwilioSmsTransport: one of from / messagingServiceSid is required');\n    }\n    this.baseUrl = (options.baseUrl ?? 'https://api.twilio.com').replace(/\\/$/, '');\n    this.fetchImpl = options.fetchImpl ?? fetch;\n  }\n\n  async send(message: NormalizedSmsMessage): Promise<SmsTransportSendResult> {\n    const form = new URLSearchParams({\n      To: message.to,\n      Body: message.body,\n      ...(this.options.messagingServiceSid\n        ? { MessagingServiceSid: this.options.messagingServiceSid }\n        : { From: this.options.from as string }),\n    });\n    const auth = Buffer.from(`${this.options.accountSid}:${this.options.authToken}`).toString('base64');\n    const response = await this.fetchImpl(\n      `${this.baseUrl}/2010-04-01/Accounts/${encodeURIComponent(this.options.accountSid)}/Messages.json`,\n      {\n        method: 'POST',\n        headers: {\n          Authorization: `Basic ${auth}`,\n          'Content-Type': 'application/x-www-form-urlencoded',\n        },\n        body: form.toString(),\n      },\n    );\n\n    let payload: any = {};\n    try { payload = await response.json(); } catch { /* non-JSON error body */ }\n    if (!response.ok) {\n      const code = payload?.code ?? `HTTP_${response.status}`;\n      const detail = payload?.message ?? response.statusText ?? 'request failed';\n      throw new Error(`Twilio send failed (${code}): ${detail}`);\n    }\n    return { messageId: String(payload.sid ?? ''), response: payload.status };\n  }\n}\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport type { ISmsTransport } from '@objectstack/spec/contracts';\nimport { LogSmsTransport } from '../sms-service.js';\nimport { AliyunSmsTransport } from './aliyun.js';\nimport { TwilioSmsTransport } from './twilio.js';\n\nexport { AliyunSmsTransport, type AliyunSmsTransportOptions } from './aliyun.js';\nexport { TwilioSmsTransport, type TwilioSmsTransportOptions } from './twilio.js';\n\nexport type SmsProviderTag = 'log' | 'aliyun' | 'twilio';\n\nexport interface MakeSmsTransportOptions {\n  provider: SmsProviderTag;\n  /** Provider-specific credentials/options (see the transport option types). */\n  options?: Record<string, unknown>;\n  logger?: { info: (msg: string, meta?: any) => void };\n}\n\n/**\n * Build an ISmsTransport from a provider tag + opts. Used by\n * SmsServicePlugin to materialise the transport selected by config /\n * the `sms` settings namespace.\n *\n * Throws when a non-`log` provider is missing required credentials.\n */\nexport function makeSmsTransport(opts: MakeSmsTransportOptions): ISmsTransport {\n  const { provider, options = {}, logger } = opts;\n  switch (provider) {\n    case 'log':\n      return new LogSmsTransport(logger);\n    case 'aliyun':\n      return new AliyunSmsTransport(options as any);\n    case 'twilio':\n      return new TwilioSmsTransport(options as any);\n    default:\n      throw new Error(`makeSmsTransport: unknown provider '${provider}'`);\n  }\n}\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport type { Plugin, PluginContext } from '@objectstack/core';\nimport type { ISmsTransport } from '@objectstack/spec/contracts';\nimport { SmsService, LogSmsTransport, maskPhoneNumber, normalizeSmsRecipient } from './sms-service.js';\nimport { makeSmsTransport, type SmsProviderTag } from './transports/index.js';\n\n/**\n * Plugin configuration. Mirrors EmailServicePluginOptions: a directly\n * injected transport wins, then `provider` + credentials, then the\n * development `LogSmsTransport` fallback (no real send).\n */\nexport interface SmsServicePluginOptions {\n  /** Pluggable delivery transport. Overrides `provider`/credentials. */\n  transport?: ISmsTransport;\n  /** Provider tag — `'log' | 'aliyun' | 'twilio'`. Default `'log'`. */\n  provider?: SmsProviderTag;\n  /** Provider-specific credentials/options (see transport option types). */\n  providerOptions?: Record<string, unknown>;\n  /** Retry attempts on transport throw. Default 0. */\n  retries?: number;\n}\n\n/** Translate an `sms` settings-namespace snapshot into transport inputs. */\nfunction providerFromSettings(values: Record<string, unknown>): {\n  provider: SmsProviderTag;\n  options: Record<string, unknown>;\n  missing?: string;\n} {\n  const provider = String(values.provider ?? 'log') as SmsProviderTag;\n  const str = (k: string): string | undefined => {\n    const v = values[k];\n    return typeof v === 'string' && v.trim().length > 0 ? v.trim() : undefined;\n  };\n  if (provider === 'aliyun') {\n    const accessKeyId = str('aliyun_access_key_id');\n    const accessKeySecret = str('aliyun_access_key_secret');\n    const signName = str('aliyun_sign_name');\n    if (!accessKeyId || !accessKeySecret || !signName) {\n      return { provider, options: {}, missing: 'aliyun_access_key_id / aliyun_access_key_secret / aliyun_sign_name' };\n    }\n    return {\n      provider,\n      options: {\n        accessKeyId,\n        accessKeySecret,\n        signName,\n        ...(str('aliyun_template_code') ? { defaultTemplateCode: str('aliyun_template_code') } : {}),\n      },\n    };\n  }\n  if (provider === 'twilio') {\n    const accountSid = str('twilio_account_sid');\n    const authToken = str('twilio_auth_token');\n    const from = str('twilio_from_number');\n    const messagingServiceSid = str('twilio_messaging_service_sid');\n    if (!accountSid || !authToken || (!from && !messagingServiceSid)) {\n      return { provider, options: {}, missing: 'twilio_account_sid / twilio_auth_token / twilio_from_number (or messaging service SID)' };\n    }\n    return {\n      provider,\n      options: {\n        accountSid,\n        authToken,\n        ...(from ? { from } : {}),\n        ...(messagingServiceSid ? { messagingServiceSid } : {}),\n      },\n    };\n  }\n  return { provider: 'log', options: {} };\n}\n\n/**\n * SmsServicePlugin — registers the `sms` service (#2780).\n *\n * Lifecycle:\n *   - `init`: build transport (injected → provider+credentials →\n *     LogSmsTransport fallback); register the SmsService so dependents\n *     (auth OTP, the messaging `sms` channel) can resolve it.\n *   - `start` (kernel:ready): bind the `sms` settings namespace so the\n *     admin UI can live-swap the provider without a restart, and register\n *     the `sms/test` action. Env-locked keys (OS_SMS_*) still win at the\n *     settings-resolver level.\n *\n * Deliberately NO persistence objects: SMS bodies carry OTP codes — see the\n * ISmsService contract header.\n */\nexport class SmsServicePlugin implements Plugin {\n  name = 'com.objectstack.service.sms';\n  version = '1.0.0';\n  type = 'standard' as const;\n\n  private readonly options: SmsServicePluginOptions;\n  private service?: SmsService;\n\n  constructor(options: SmsServicePluginOptions = {}) {\n    this.options = options;\n  }\n\n  private resolveInitialTransport(ctx: PluginContext): { transport: ISmsTransport; configured: boolean } {\n    if (this.options.transport) return { transport: this.options.transport, configured: true };\n    const provider = this.options.provider ?? 'log';\n    if (provider === 'log') return { transport: new LogSmsTransport(ctx.logger), configured: false };\n    try {\n      return {\n        transport: makeSmsTransport({ provider, options: this.options.providerOptions, logger: ctx.logger }),\n        configured: true,\n      };\n    } catch (err: any) {\n      // Incomplete constructor credentials must not take the kernel down —\n      // fall back to the dev transport; the settings bind (kernel:ready)\n      // can still swap in a working provider.\n      ctx.logger.warn(\n        `SmsServicePlugin: provider='${provider}' selected but transport build failed (${err?.message ?? err}) — falling back to LogSmsTransport.`,\n      );\n      return { transport: new LogSmsTransport(ctx.logger), configured: false };\n    }\n  }\n\n  async init(ctx: PluginContext): Promise<void> {\n    const { transport, configured } = this.resolveInitialTransport(ctx);\n    if (!configured) {\n      ctx.logger.info('SmsServicePlugin: no provider configured — using LogSmsTransport (SMS will NOT be sent)');\n    } else {\n      ctx.logger.info(`SmsServicePlugin: using '${this.options.provider ?? 'custom'}' provider`);\n    }\n    this.service = new SmsService({\n      transport,\n      configured,\n      retries: this.options.retries,\n      logger: ctx.logger,\n    });\n    ctx.registerService('sms', this.service);\n    ctx.logger.info('SmsServicePlugin: sms service registered');\n  }\n\n  async start(ctx: PluginContext): Promise<void> {\n    ctx.hook('kernel:ready', async () => {\n      if (!this.service) return;\n      // A host-injected transport is authoritative — settings only manage\n      // the provider-tag path.\n      if (this.options.transport) return;\n      try {\n        const settings = ctx.getService<any>('settings');\n        if (!settings || typeof settings.getNamespace !== 'function') return;\n\n        const applySettings = async () => {\n          try {\n            const payload = await settings.getNamespace('sms');\n            const values: Record<string, unknown> = {};\n            for (const [k, v] of Object.entries(payload.values as Record<string, any>)) {\n              values[k] = v?.value;\n            }\n            this.applySmsSettings(values, ctx);\n          } catch (err: any) {\n            ctx.logger.warn('SmsServicePlugin: failed to apply sms settings: ' + (err?.message ?? err));\n          }\n        };\n        await applySettings();\n        if (typeof settings.subscribe === 'function') {\n          settings.subscribe('sms', () => { void applySettings(); });\n          ctx.logger.info('SmsServicePlugin: bound to settings:changed for namespace=sms');\n        }\n\n        // `sms/test` action — validate the (possibly unsaved) form values by\n        // sending a real test message through a one-shot transport, mirroring\n        // the `mail/test` handler in EmailServicePlugin.\n        if (typeof settings.registerAction === 'function') {\n          const svc = this.service;\n          settings.registerAction('sms', 'test', async ({ values, payload, ctx: actionCtx }: any) => {\n            const overrides = (payload && typeof payload === 'object' && payload.values && typeof payload.values === 'object')\n              ? payload.values\n              : (payload ?? {});\n            const merged: Record<string, unknown> = { ...(values ?? {}), ...overrides };\n            const rawTo = (actionCtx?.body?.to as string | undefined) ?? (payload?.to as string | undefined);\n            const to = rawTo ? normalizeSmsRecipient(rawTo) : undefined;\n            if (!to) {\n              return { ok: false, severity: 'error', message: 'Provide a valid \"to\" phone number (E.164 recommended).' };\n            }\n\n            const resolved = providerFromSettings(merged);\n            if (resolved.missing) {\n              return { ok: false, severity: 'error', message: `${resolved.provider}: missing ${resolved.missing}.` };\n            }\n\n            let target: SmsService = svc;\n            if (resolved.provider !== 'log') {\n              try {\n                const transport = makeSmsTransport({ provider: resolved.provider, options: resolved.options, logger: ctx.logger });\n                target = new SmsService({ transport, configured: true, logger: ctx.logger });\n              } catch (err: any) {\n                return { ok: false, severity: 'error', message: `Failed to build ${resolved.provider} transport: ${err?.message ?? String(err)}` };\n              }\n            }\n\n            try {\n              const result = await target.send({\n                to,\n                body: 'ObjectStack SMS test message.',\n                templateParams: { content: 'ObjectStack SMS test message.' },\n              });\n              if (result.status === 'failed') {\n                return { ok: false, severity: 'error', message: result.error ?? 'Send failed.' };\n              }\n              return {\n                ok: true,\n                severity: 'info',\n                message: `Sent test SMS to ${maskPhoneNumber(to)} via ${resolved.provider} (id=${result.messageId ?? result.id}).`,\n              };\n            } catch (err: any) {\n              return { ok: false, severity: 'error', message: err?.message ?? String(err) };\n            }\n          });\n        }\n      } catch {\n        // settings service not registered — constructor opts remain authoritative.\n      }\n    });\n  }\n\n  /**\n   * Translate the `sms` settings snapshot into a transport and hot-swap it\n   * on the running SmsService. Incomplete credentials keep the previous\n   * transport (with a warning) so a half-saved form can't break delivery.\n   */\n  private applySmsSettings(values: Record<string, unknown>, ctx: PluginContext): void {\n    if (!this.service) return;\n    const resolved = providerFromSettings(values);\n    if (resolved.missing) {\n      ctx.logger.warn(\n        `SmsServicePlugin: provider='${resolved.provider}' selected but ${resolved.missing} is empty — transport NOT rebuilt.`,\n      );\n      return;\n    }\n    if (resolved.provider === 'log') {\n      // Downgrade to the dev transport only when the operator explicitly\n      // selected `log`; an unset namespace keeps the constructor opts.\n      if (values.provider === 'log') {\n        this.service.setTransport(new LogSmsTransport(ctx.logger), false);\n        ctx.logger.info('SmsServicePlugin: sms settings applied (provider=log; SMS will NOT be sent).');\n      }\n      return;\n    }\n    try {\n      const transport = makeSmsTransport({ provider: resolved.provider, options: resolved.options, logger: ctx.logger });\n      this.service.setTransport(transport, true);\n      ctx.logger.info(`SmsServicePlugin: transport rebuilt from settings (provider=${resolved.provider}).`);\n    } catch (err: any) {\n      ctx.logger.warn('SmsServicePlugin: failed to rebuild transport: ' + (err?.message ?? err));\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACoBO,SAAS,sBAAsB,KAAiC;AACrE,QAAM,WAAW,OAAO,OAAO,EAAE,EAAE,QAAQ,cAAc,EAAE;AAC3D,SAAO,mBAAmB,KAAK,QAAQ,IAAI,WAAW;AACxD;AAQO,SAAS,gBAAgB,OAAuB;AACrD,QAAM,IAAI,OAAO,SAAS,EAAE;AAC5B,MAAI,EAAE,UAAU,EAAG,QAAO,GAAG,EAAE,MAAM,GAAG,CAAC,CAAC;AAC1C,SAAO,GAAG,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO,KAAK,IAAI,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAC/E;AAWO,IAAM,kBAAN,MAA+C;AAAA,EAEpD,YAA6B,QAAsD;AAAtD;AAD7B,SAAQ,UAAU;AAAA,EACkE;AAAA,EACpF,MAAM,KAAK,SAAgE;AACzE,UAAM,YAAY,WAAW,KAAK,IAAI,CAAC,IAAI,EAAE,KAAK,OAAO;AACzD,UAAM,MAAO,YAAoB,SAAS,KAAK,aAAa;AAC5D,SAAK,QAAQ;AAAA,MACX,uCAAuC,gBAAgB,QAAQ,EAAE,CAAC,MACjE,MAAM,iBAAY,QAAQ,IAAI,KAAK;AAAA,MACpC,EAAE,UAAU;AAAA,IACd;AACA,WAAO,EAAE,WAAW,UAAU,SAAS;AAAA,EACzC;AACF;AA0BO,IAAM,aAAN,MAAwC;AAAA,EAC7C,YAAmB,SAA4B;AAA5B;AACjB,QAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,MAAM,mCAAmC;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAa,WAA0B,YAA2B;AAChE,SAAK,QAAQ,YAAY;AACzB,SAAK,QAAQ,aAAa;AAAA,EAC5B;AAAA,EAEA,eAAwB;AACtB,WAAO,KAAK,QAAQ;AAAA,EACtB;AAAA,EAEA,MAAM,KAAK,OAA6C;AACtD,UAAM,KAAK,sBAAsB,OAAO,MAAM,EAAE;AAChD,QAAI,CAAC,IAAI;AACP,YAAM,IAAI,MAAM,uBAAuB,gBAAgB,OAAO,OAAO,MAAM,EAAE,CAAC,CAAC,+BAA+B;AAAA,IAChH;AACA,UAAM,OAAO,OAAO,OAAO,QAAQ,EAAE,EAAE,KAAK;AAC5C,QAAI,CAAC,QAAQ,CAAC,OAAO,cAAc,CAAC,OAAO,gBAAgB;AACzD,YAAM,IAAI,MAAM,oEAAoE;AAAA,IACtF;AAEA,UAAM,aAAmC;AAAA,MACvC;AAAA,MACA;AAAA,MACA,GAAI,MAAM,aAAa,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,MAC3D,GAAI,MAAM,iBAAiB,EAAE,gBAAgB,MAAM,eAAe,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,KAAK,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AACvE,UAAM,eAAe,KAAK,QAAQ,WAAW,KAAK;AAClD,QAAI;AACJ,aAAS,UAAU,GAAG,WAAW,aAAa,WAAW;AACvD,UAAI;AACF,cAAM,SAAS,MAAM,KAAK,QAAQ,UAAU,KAAK,UAAU;AAC3D,aAAK,QAAQ,QAAQ;AAAA,UACnB,wBAAwB,gBAAgB,EAAE,CAAC,eAAe,OAAO,SAAS;AAAA,QAC5E;AACA,eAAO,EAAE,IAAI,QAAQ,QAAQ,WAAW,OAAO,UAAU;AAAA,MAC3D,SAAS,KAAK;AACZ,oBAAY;AACZ,YAAI,UAAU,aAAa;AACzB,gBAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,KAAK,IAAI,KAAM,MAAM,MAAM,UAAU,EAAE,CAAC,CAAC;AAAA,QAClF;AAAA,MACF;AAAA,IACF;AACA,UAAM,aAAa,OAAQ,WAAqB,WAAW,aAAa,aAAa,EAAE,MAAM,GAAG,GAAG;AACnG,SAAK,QAAQ,QAAQ;AAAA,MACnB,wBAAwB,gBAAgB,EAAE,CAAC,YAAY,UAAU;AAAA,IACnE;AACA,WAAO,EAAE,IAAI,QAAQ,UAAU,OAAO,WAAW;AAAA,EACnD;AACF;;;AC7IA,yBAAmD;AAqBnD,IAAM,cAAc;AACpB,IAAM,YAAY;AAElB,IAAM,YAAY,CAAC,UAAsB,+BAAW,QAAQ,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,KAAK;AAC5F,IAAM,aAAa,CAAC,KAAa,UAAsB,+BAAW,UAAU,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,KAAK;AAG/G,IAAM,SAAS,CAAC,MACd,mBAAmB,CAAC,EACjB,QAAQ,OAAO,KAAK,EACpB,QAAQ,OAAO,KAAK,EACpB,QAAQ,QAAQ,GAAG;AAWjB,IAAM,qBAAN,MAAkD;AAAA,EAIvD,YAA6B,SAAoC;AAApC;AAC3B,QAAI,CAAC,QAAQ,eAAe,CAAC,QAAQ,iBAAiB;AACpD,YAAM,IAAI,MAAM,kEAAkE;AAAA,IACpF;AACA,QAAI,CAAC,QAAQ,UAAU;AACrB,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC5D;AACA,SAAK,WAAW,QAAQ,YAAY;AACpC,SAAK,YAAY,QAAQ,aAAa;AAAA,EACxC;AAAA,EAEA,MAAM,KAAK,SAAgE;AACzE,UAAM,eAAe,QAAQ,cAAc,KAAK,QAAQ;AACxD,QAAI,CAAC,cAAc;AACjB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAM,gBAAgB,KAAK,UAAU,QAAQ,kBAAkB,EAAE,SAAS,QAAQ,KAAK,CAAC;AAExF,UAAM,QAAgC;AAAA,MACpC,cAAc,QAAQ;AAAA,MACtB,UAAU,KAAK,QAAQ;AAAA,MACvB,cAAc;AAAA,MACd,eAAe;AAAA,IACjB;AACA,UAAM,iBAAiB,OAAO,KAAK,KAAK,EACrC,KAAK,EACL,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,EAC7C,KAAK,GAAG;AAEX,UAAM,WAAW,UAAU,EAAE;AAC7B,UAAM,UAAkC;AAAA,MACtC,MAAM,KAAK;AAAA,MACX,gBAAgB;AAAA,MAChB,wBAAwB;AAAA,MACxB,eAAc,oBAAI,KAAK,GAAE,YAAY,EAAE,QAAQ,aAAa,GAAG;AAAA,MAC/D,6BAAyB,+BAAW;AAAA,MACpC,iBAAiB;AAAA,IACnB;AACA,UAAM,oBAAoB,OAAO,KAAK,OAAO,EAAE,KAAK;AACpD,UAAM,mBAAmB,kBAAkB,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,EAAE,KAAK,CAAC;AAAA,CAAI,EAAE,KAAK,EAAE;AAC5F,UAAM,gBAAgB,kBAAkB,KAAK,GAAG;AAEhD,UAAM,mBAAmB,CAAC,QAAQ,KAAK,gBAAgB,kBAAkB,eAAe,QAAQ,EAAE,KAAK,IAAI;AAC3G,UAAM,eAAe,GAAG,SAAS;AAAA,EAAK,UAAU,gBAAgB,CAAC;AACjE,UAAM,YAAY,WAAW,KAAK,QAAQ,iBAAiB,YAAY;AAEvE,UAAM,WAAW,MAAM,KAAK,UAAU,WAAW,KAAK,QAAQ,KAAK,cAAc,IAAI;AAAA,MACnF,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,GAAG;AAAA,QACH,eAAe,GAAG,SAAS,eAAe,KAAK,QAAQ,WAAW,kBAAkB,aAAa,cAAc,SAAS;AAAA,MAC1H;AAAA,IACF,CAAC;AAED,QAAI,UAAe,CAAC;AACpB,QAAI;AAAE,gBAAU,MAAM,SAAS,KAAK;AAAA,IAAG,QAAQ;AAAA,IAA4B;AAC3E,QAAI,CAAC,SAAS,MAAM,SAAS,SAAS,MAAM;AAC1C,YAAM,OAAO,SAAS,QAAQ,QAAQ,SAAS,MAAM;AACrD,YAAM,SAAS,SAAS,WAAW,SAAS,cAAc;AAC1D,YAAM,IAAI,MAAM,0BAA0B,IAAI,MAAM,MAAM,EAAE;AAAA,IAC9D;AACA,WAAO,EAAE,WAAW,OAAO,QAAQ,SAAS,QAAQ,aAAa,EAAE,GAAG,UAAU,QAAQ,UAAU;AAAA,EACpG;AACF;;;AC5FO,IAAM,qBAAN,MAAkD;AAAA,EAIvD,YAA6B,SAAoC;AAApC;AAC3B,QAAI,CAAC,QAAQ,cAAc,CAAC,QAAQ,WAAW;AAC7C,YAAM,IAAI,MAAM,2DAA2D;AAAA,IAC7E;AACA,QAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,qBAAqB;AACjD,YAAM,IAAI,MAAM,mEAAmE;AAAA,IACrF;AACA,SAAK,WAAW,QAAQ,WAAW,0BAA0B,QAAQ,OAAO,EAAE;AAC9E,SAAK,YAAY,QAAQ,aAAa;AAAA,EACxC;AAAA,EAEA,MAAM,KAAK,SAAgE;AACzE,UAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,IAAI,QAAQ;AAAA,MACZ,MAAM,QAAQ;AAAA,MACd,GAAI,KAAK,QAAQ,sBACb,EAAE,qBAAqB,KAAK,QAAQ,oBAAoB,IACxD,EAAE,MAAM,KAAK,QAAQ,KAAe;AAAA,IAC1C,CAAC;AACD,UAAM,OAAO,OAAO,KAAK,GAAG,KAAK,QAAQ,UAAU,IAAI,KAAK,QAAQ,SAAS,EAAE,EAAE,SAAS,QAAQ;AAClG,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B,GAAG,KAAK,OAAO,wBAAwB,mBAAmB,KAAK,QAAQ,UAAU,CAAC;AAAA,MAClF;AAAA,QACE,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,eAAe,SAAS,IAAI;AAAA,UAC5B,gBAAgB;AAAA,QAClB;AAAA,QACA,MAAM,KAAK,SAAS;AAAA,MACtB;AAAA,IACF;AAEA,QAAI,UAAe,CAAC;AACpB,QAAI;AAAE,gBAAU,MAAM,SAAS,KAAK;AAAA,IAAG,QAAQ;AAAA,IAA4B;AAC3E,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,OAAO,SAAS,QAAQ,QAAQ,SAAS,MAAM;AACrD,YAAM,SAAS,SAAS,WAAW,SAAS,cAAc;AAC1D,YAAM,IAAI,MAAM,uBAAuB,IAAI,MAAM,MAAM,EAAE;AAAA,IAC3D;AACA,WAAO,EAAE,WAAW,OAAO,QAAQ,OAAO,EAAE,GAAG,UAAU,QAAQ,OAAO;AAAA,EAC1E;AACF;;;ACzCO,SAAS,iBAAiB,MAA8C;AAC7E,QAAM,EAAE,UAAU,UAAU,CAAC,GAAG,OAAO,IAAI;AAC3C,UAAQ,UAAU;AAAA,IAChB,KAAK;AACH,aAAO,IAAI,gBAAgB,MAAM;AAAA,IACnC,KAAK;AACH,aAAO,IAAI,mBAAmB,OAAc;AAAA,IAC9C,KAAK;AACH,aAAO,IAAI,mBAAmB,OAAc;AAAA,IAC9C;AACE,YAAM,IAAI,MAAM,uCAAuC,QAAQ,GAAG;AAAA,EACtE;AACF;;;ACdA,SAAS,qBAAqB,QAI5B;AACA,QAAM,WAAW,OAAO,OAAO,YAAY,KAAK;AAChD,QAAM,MAAM,CAAC,MAAkC;AAC7C,UAAM,IAAI,OAAO,CAAC;AAClB,WAAO,OAAO,MAAM,YAAY,EAAE,KAAK,EAAE,SAAS,IAAI,EAAE,KAAK,IAAI;AAAA,EACnE;AACA,MAAI,aAAa,UAAU;AACzB,UAAM,cAAc,IAAI,sBAAsB;AAC9C,UAAM,kBAAkB,IAAI,0BAA0B;AACtD,UAAM,WAAW,IAAI,kBAAkB;AACvC,QAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,UAAU;AACjD,aAAO,EAAE,UAAU,SAAS,CAAC,GAAG,SAAS,qEAAqE;AAAA,IAChH;AACA,WAAO;AAAA,MACL;AAAA,MACA,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAI,IAAI,sBAAsB,IAAI,EAAE,qBAAqB,IAAI,sBAAsB,EAAE,IAAI,CAAC;AAAA,MAC5F;AAAA,IACF;AAAA,EACF;AACA,MAAI,aAAa,UAAU;AACzB,UAAM,aAAa,IAAI,oBAAoB;AAC3C,UAAM,YAAY,IAAI,mBAAmB;AACzC,UAAM,OAAO,IAAI,oBAAoB;AACrC,UAAM,sBAAsB,IAAI,8BAA8B;AAC9D,QAAI,CAAC,cAAc,CAAC,aAAc,CAAC,QAAQ,CAAC,qBAAsB;AAChE,aAAO,EAAE,UAAU,SAAS,CAAC,GAAG,SAAS,yFAAyF;AAAA,IACpI;AACA,WAAO;AAAA,MACL;AAAA,MACA,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,QACvB,GAAI,sBAAsB,EAAE,oBAAoB,IAAI,CAAC;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,UAAU,OAAO,SAAS,CAAC,EAAE;AACxC;AAiBO,IAAM,mBAAN,MAAyC;AAAA,EAQ9C,YAAY,UAAmC,CAAC,GAAG;AAPnD,gBAAO;AACP,mBAAU;AACV,gBAAO;AAML,SAAK,UAAU;AAAA,EACjB;AAAA,EAEQ,wBAAwB,KAAuE;AACrG,QAAI,KAAK,QAAQ,UAAW,QAAO,EAAE,WAAW,KAAK,QAAQ,WAAW,YAAY,KAAK;AACzF,UAAM,WAAW,KAAK,QAAQ,YAAY;AAC1C,QAAI,aAAa,MAAO,QAAO,EAAE,WAAW,IAAI,gBAAgB,IAAI,MAAM,GAAG,YAAY,MAAM;AAC/F,QAAI;AACF,aAAO;AAAA,QACL,WAAW,iBAAiB,EAAE,UAAU,SAAS,KAAK,QAAQ,iBAAiB,QAAQ,IAAI,OAAO,CAAC;AAAA,QACnG,YAAY;AAAA,MACd;AAAA,IACF,SAAS,KAAU;AAIjB,UAAI,OAAO;AAAA,QACT,+BAA+B,QAAQ,0CAA0C,KAAK,WAAW,GAAG;AAAA,MACtG;AACA,aAAO,EAAE,WAAW,IAAI,gBAAgB,IAAI,MAAM,GAAG,YAAY,MAAM;AAAA,IACzE;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,KAAmC;AAC5C,UAAM,EAAE,WAAW,WAAW,IAAI,KAAK,wBAAwB,GAAG;AAClE,QAAI,CAAC,YAAY;AACf,UAAI,OAAO,KAAK,8FAAyF;AAAA,IAC3G,OAAO;AACL,UAAI,OAAO,KAAK,4BAA4B,KAAK,QAAQ,YAAY,QAAQ,YAAY;AAAA,IAC3F;AACA,SAAK,UAAU,IAAI,WAAW;AAAA,MAC5B;AAAA,MACA;AAAA,MACA,SAAS,KAAK,QAAQ;AAAA,MACtB,QAAQ,IAAI;AAAA,IACd,CAAC;AACD,QAAI,gBAAgB,OAAO,KAAK,OAAO;AACvC,QAAI,OAAO,KAAK,0CAA0C;AAAA,EAC5D;AAAA,EAEA,MAAM,MAAM,KAAmC;AAC7C,QAAI,KAAK,gBAAgB,YAAY;AACnC,UAAI,CAAC,KAAK,QAAS;AAGnB,UAAI,KAAK,QAAQ,UAAW;AAC5B,UAAI;AACF,cAAM,WAAW,IAAI,WAAgB,UAAU;AAC/C,YAAI,CAAC,YAAY,OAAO,SAAS,iBAAiB,WAAY;AAE9D,cAAM,gBAAgB,YAAY;AAChC,cAAI;AACF,kBAAM,UAAU,MAAM,SAAS,aAAa,KAAK;AACjD,kBAAM,SAAkC,CAAC;AACzC,uBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,QAAQ,MAA6B,GAAG;AAC1E,qBAAO,CAAC,IAAI,GAAG;AAAA,YACjB;AACA,iBAAK,iBAAiB,QAAQ,GAAG;AAAA,UACnC,SAAS,KAAU;AACjB,gBAAI,OAAO,KAAK,sDAAsD,KAAK,WAAW,IAAI;AAAA,UAC5F;AAAA,QACF;AACA,cAAM,cAAc;AACpB,YAAI,OAAO,SAAS,cAAc,YAAY;AAC5C,mBAAS,UAAU,OAAO,MAAM;AAAE,iBAAK,cAAc;AAAA,UAAG,CAAC;AACzD,cAAI,OAAO,KAAK,+DAA+D;AAAA,QACjF;AAKA,YAAI,OAAO,SAAS,mBAAmB,YAAY;AACjD,gBAAM,MAAM,KAAK;AACjB,mBAAS,eAAe,OAAO,QAAQ,OAAO,EAAE,QAAQ,SAAS,KAAK,UAAU,MAAW;AACzF,kBAAM,YAAa,WAAW,OAAO,YAAY,YAAY,QAAQ,UAAU,OAAO,QAAQ,WAAW,WACrG,QAAQ,SACP,WAAW,CAAC;AACjB,kBAAM,SAAkC,EAAE,GAAI,UAAU,CAAC,GAAI,GAAG,UAAU;AAC1E,kBAAM,QAAS,WAAW,MAAM,MAA8B,SAAS;AACvE,kBAAM,KAAK,QAAQ,sBAAsB,KAAK,IAAI;AAClD,gBAAI,CAAC,IAAI;AACP,qBAAO,EAAE,IAAI,OAAO,UAAU,SAAS,SAAS,yDAAyD;AAAA,YAC3G;AAEA,kBAAM,WAAW,qBAAqB,MAAM;AAC5C,gBAAI,SAAS,SAAS;AACpB,qBAAO,EAAE,IAAI,OAAO,UAAU,SAAS,SAAS,GAAG,SAAS,QAAQ,aAAa,SAAS,OAAO,IAAI;AAAA,YACvG;AAEA,gBAAI,SAAqB;AACzB,gBAAI,SAAS,aAAa,OAAO;AAC/B,kBAAI;AACF,sBAAM,YAAY,iBAAiB,EAAE,UAAU,SAAS,UAAU,SAAS,SAAS,SAAS,QAAQ,IAAI,OAAO,CAAC;AACjH,yBAAS,IAAI,WAAW,EAAE,WAAW,YAAY,MAAM,QAAQ,IAAI,OAAO,CAAC;AAAA,cAC7E,SAAS,KAAU;AACjB,uBAAO,EAAE,IAAI,OAAO,UAAU,SAAS,SAAS,mBAAmB,SAAS,QAAQ,eAAe,KAAK,WAAW,OAAO,GAAG,CAAC,GAAG;AAAA,cACnI;AAAA,YACF;AAEA,gBAAI;AACF,oBAAM,SAAS,MAAM,OAAO,KAAK;AAAA,gBAC/B;AAAA,gBACA,MAAM;AAAA,gBACN,gBAAgB,EAAE,SAAS,gCAAgC;AAAA,cAC7D,CAAC;AACD,kBAAI,OAAO,WAAW,UAAU;AAC9B,uBAAO,EAAE,IAAI,OAAO,UAAU,SAAS,SAAS,OAAO,SAAS,eAAe;AAAA,cACjF;AACA,qBAAO;AAAA,gBACL,IAAI;AAAA,gBACJ,UAAU;AAAA,gBACV,SAAS,oBAAoB,gBAAgB,EAAE,CAAC,QAAQ,SAAS,QAAQ,QAAQ,OAAO,aAAa,OAAO,EAAE;AAAA,cAChH;AAAA,YACF,SAAS,KAAU;AACjB,qBAAO,EAAE,IAAI,OAAO,UAAU,SAAS,SAAS,KAAK,WAAW,OAAO,GAAG,EAAE;AAAA,YAC9E;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,iBAAiB,QAAiC,KAA0B;AAClF,QAAI,CAAC,KAAK,QAAS;AACnB,UAAM,WAAW,qBAAqB,MAAM;AAC5C,QAAI,SAAS,SAAS;AACpB,UAAI,OAAO;AAAA,QACT,+BAA+B,SAAS,QAAQ,kBAAkB,SAAS,OAAO;AAAA,MACpF;AACA;AAAA,IACF;AACA,QAAI,SAAS,aAAa,OAAO;AAG/B,UAAI,OAAO,aAAa,OAAO;AAC7B,aAAK,QAAQ,aAAa,IAAI,gBAAgB,IAAI,MAAM,GAAG,KAAK;AAChE,YAAI,OAAO,KAAK,8EAA8E;AAAA,MAChG;AACA;AAAA,IACF;AACA,QAAI;AACF,YAAM,YAAY,iBAAiB,EAAE,UAAU,SAAS,UAAU,SAAS,SAAS,SAAS,QAAQ,IAAI,OAAO,CAAC;AACjH,WAAK,QAAQ,aAAa,WAAW,IAAI;AACzC,UAAI,OAAO,KAAK,+DAA+D,SAAS,QAAQ,IAAI;AAAA,IACtG,SAAS,KAAU;AACjB,UAAI,OAAO,KAAK,qDAAqD,KAAK,WAAW,IAAI;AAAA,IAC3F;AAAA,EACF;AACF;","names":[]}

package/dist/index.mjs

@@ -0,0 +1,409 @@
+// src/sms-service.ts
+function normalizeSmsRecipient(raw) {
+  const stripped = String(raw ?? "").replace(/[\s\-().]/g, "");
+  return /^\+?[0-9]{6,15}$/.test(stripped) ? stripped : void 0;
+}
+function maskPhoneNumber(phone) {
+  const p = String(phone ?? "");
+  if (p.length <= 6) return `${p.slice(0, 2)}****`;
+  return `${p.slice(0, 5)}${"*".repeat(Math.max(2, p.length - 7))}${p.slice(-2)}`;
+}
+var LogSmsTransport = class {
+  constructor(logger) {
+    this.logger = logger;
+    this.counter = 0;
+  }
+  async send(message) {
+    const messageId = `dev-sms-${Date.now()}-${++this.counter}`;
+    const dev = globalThis?.process?.env?.NODE_ENV !== "production";
+    this.logger?.info(
+      `[LogSmsTransport] would send SMS to ${maskPhoneNumber(message.to)}` + (dev ? ` \u2014 body: ${message.body}` : " (body suppressed outside dev)"),
+      { messageId }
+    );
+    return { messageId, response: "logged" };
+  }
+};
+var SmsService = class {
+  constructor(options) {
+    this.options = options;
+    if (!options.transport) throw new Error("SmsService: transport is required");
+  }
+  /**
+   * Hot-swap the underlying transport (settings namespace changed). The
+   * `configured` flag travels with the transport.
+   */
+  setTransport(transport, configured) {
+    this.options.transport = transport;
+    this.options.configured = configured;
+  }
+  isConfigured() {
+    return this.options.configured;
+  }
+  async send(input) {
+    const to = normalizeSmsRecipient(input?.to ?? "");
+    if (!to) {
+      throw new Error(`VALIDATION_FAILED: '${maskPhoneNumber(String(input?.to ?? ""))}' is not a valid phone number`);
+    }
+    const body = String(input?.body ?? "").trim();
+    if (!body && !input?.templateId && !input?.templateParams) {
+      throw new Error("VALIDATION_FAILED: body (or templateId/templateParams) is required");
+    }
+    const normalized = {
+      to,
+      body,
+      ...input.templateId ? { templateId: input.templateId } : {},
+      ...input.templateParams ? { templateParams: input.templateParams } : {}
+    };
+    const id = `sms-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;
+    const maxAttempts = (this.options.retries ?? 0) + 1;
+    let lastError;
+    for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+      try {
+        const result = await this.options.transport.send(normalized);
+        this.options.logger?.info(
+          `[SmsService] sent to ${maskPhoneNumber(to)} (messageId=${result.messageId})`
+        );
+        return { id, status: "sent", messageId: result.messageId };
+      } catch (err) {
+        lastError = err;
+        if (attempt < maxAttempts) {
+          await new Promise((r) => setTimeout(r, Math.min(2e3, 100 * 2 ** (attempt - 1))));
+        }
+      }
+    }
+    const errMessage = String(lastError?.message ?? lastError ?? "send failed").slice(0, 500);
+    this.options.logger?.warn(
+      `[SmsService] send to ${maskPhoneNumber(to)} failed: ${errMessage}`
+    );
+    return { id, status: "failed", error: errMessage };
+  }
+};
+
+// src/transports/aliyun.ts
+import { createHash, createHmac, randomUUID } from "crypto";
+var API_VERSION = "2017-05-25";
+var ALGORITHM = "ACS3-HMAC-SHA256";
+var sha256Hex = (s) => createHash("sha256").update(s, "utf8").digest("hex");
+var hmac256Hex = (key, s) => createHmac("sha256", key).update(s, "utf8").digest("hex");
+var encode = (s) => encodeURIComponent(s).replace(/\+/g, "%20").replace(/\*/g, "%2A").replace(/%7E/g, "~");
+var AliyunSmsTransport = class {
+  constructor(options) {
+    this.options = options;
+    if (!options.accessKeyId || !options.accessKeySecret) {
+      throw new Error("AliyunSmsTransport: accessKeyId and accessKeySecret are required");
+    }
+    if (!options.signName) {
+      throw new Error("AliyunSmsTransport: signName is required");
+    }
+    this.endpoint = options.endpoint ?? "dysmsapi.aliyuncs.com";
+    this.fetchImpl = options.fetchImpl ?? fetch;
+  }
+  async send(message) {
+    const templateCode = message.templateId ?? this.options.defaultTemplateCode;
+    if (!templateCode) {
+      throw new Error(
+        "AliyunSmsTransport: Aliyun requires a template \u2014 pass templateId or configure a default template code"
+      );
+    }
+    const templateParam = JSON.stringify(message.templateParams ?? { content: message.body });
+    const query = {
+      PhoneNumbers: message.to,
+      SignName: this.options.signName,
+      TemplateCode: templateCode,
+      TemplateParam: templateParam
+    };
+    const canonicalQuery = Object.keys(query).sort().map((k) => `${encode(k)}=${encode(query[k])}`).join("&");
+    const bodyHash = sha256Hex("");
+    const headers = {
+      host: this.endpoint,
+      "x-acs-action": "SendSms",
+      "x-acs-content-sha256": bodyHash,
+      "x-acs-date": (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d{3}Z$/, "Z"),
+      "x-acs-signature-nonce": randomUUID(),
+      "x-acs-version": API_VERSION
+    };
+    const signedHeaderNames = Object.keys(headers).sort();
+    const canonicalHeaders = signedHeaderNames.map((k) => `${k}:${headers[k].trim()}
+`).join("");
+    const signedHeaders = signedHeaderNames.join(";");
+    const canonicalRequest = ["POST", "/", canonicalQuery, canonicalHeaders, signedHeaders, bodyHash].join("\n");
+    const stringToSign = `${ALGORITHM}
+${sha256Hex(canonicalRequest)}`;
+    const signature = hmac256Hex(this.options.accessKeySecret, stringToSign);
+    const response = await this.fetchImpl(`https://${this.endpoint}/?${canonicalQuery}`, {
+      method: "POST",
+      headers: {
+        ...headers,
+        Authorization: `${ALGORITHM} Credential=${this.options.accessKeyId},SignedHeaders=${signedHeaders},Signature=${signature}`
+      }
+    });
+    let payload = {};
+    try {
+      payload = await response.json();
+    } catch {
+    }
+    if (!response.ok || payload?.Code !== "OK") {
+      const code = payload?.Code ?? `HTTP_${response.status}`;
+      const detail = payload?.Message ?? response.statusText ?? "request failed";
+      throw new Error(`Aliyun SendSms failed (${code}): ${detail}`);
+    }
+    return { messageId: String(payload.BizId ?? payload.RequestId ?? ""), response: payload.RequestId };
+  }
+};
+
+// src/transports/twilio.ts
+var TwilioSmsTransport = class {
+  constructor(options) {
+    this.options = options;
+    if (!options.accountSid || !options.authToken) {
+      throw new Error("TwilioSmsTransport: accountSid and authToken are required");
+    }
+    if (!options.from && !options.messagingServiceSid) {
+      throw new Error("TwilioSmsTransport: one of from / messagingServiceSid is required");
+    }
+    this.baseUrl = (options.baseUrl ?? "https://api.twilio.com").replace(/\/$/, "");
+    this.fetchImpl = options.fetchImpl ?? fetch;
+  }
+  async send(message) {
+    const form = new URLSearchParams({
+      To: message.to,
+      Body: message.body,
+      ...this.options.messagingServiceSid ? { MessagingServiceSid: this.options.messagingServiceSid } : { From: this.options.from }
+    });
+    const auth = Buffer.from(`${this.options.accountSid}:${this.options.authToken}`).toString("base64");
+    const response = await this.fetchImpl(
+      `${this.baseUrl}/2010-04-01/Accounts/${encodeURIComponent(this.options.accountSid)}/Messages.json`,
+      {
+        method: "POST",
+        headers: {
+          Authorization: `Basic ${auth}`,
+          "Content-Type": "application/x-www-form-urlencoded"
+        },
+        body: form.toString()
+      }
+    );
+    let payload = {};
+    try {
+      payload = await response.json();
+    } catch {
+    }
+    if (!response.ok) {
+      const code = payload?.code ?? `HTTP_${response.status}`;
+      const detail = payload?.message ?? response.statusText ?? "request failed";
+      throw new Error(`Twilio send failed (${code}): ${detail}`);
+    }
+    return { messageId: String(payload.sid ?? ""), response: payload.status };
+  }
+};
+
+// src/transports/index.ts
+function makeSmsTransport(opts) {
+  const { provider, options = {}, logger } = opts;
+  switch (provider) {
+    case "log":
+      return new LogSmsTransport(logger);
+    case "aliyun":
+      return new AliyunSmsTransport(options);
+    case "twilio":
+      return new TwilioSmsTransport(options);
+    default:
+      throw new Error(`makeSmsTransport: unknown provider '${provider}'`);
+  }
+}
+
+// src/sms-plugin.ts
+function providerFromSettings(values) {
+  const provider = String(values.provider ?? "log");
+  const str = (k) => {
+    const v = values[k];
+    return typeof v === "string" && v.trim().length > 0 ? v.trim() : void 0;
+  };
+  if (provider === "aliyun") {
+    const accessKeyId = str("aliyun_access_key_id");
+    const accessKeySecret = str("aliyun_access_key_secret");
+    const signName = str("aliyun_sign_name");
+    if (!accessKeyId || !accessKeySecret || !signName) {
+      return { provider, options: {}, missing: "aliyun_access_key_id / aliyun_access_key_secret / aliyun_sign_name" };
+    }
+    return {
+      provider,
+      options: {
+        accessKeyId,
+        accessKeySecret,
+        signName,
+        ...str("aliyun_template_code") ? { defaultTemplateCode: str("aliyun_template_code") } : {}
+      }
+    };
+  }
+  if (provider === "twilio") {
+    const accountSid = str("twilio_account_sid");
+    const authToken = str("twilio_auth_token");
+    const from = str("twilio_from_number");
+    const messagingServiceSid = str("twilio_messaging_service_sid");
+    if (!accountSid || !authToken || !from && !messagingServiceSid) {
+      return { provider, options: {}, missing: "twilio_account_sid / twilio_auth_token / twilio_from_number (or messaging service SID)" };
+    }
+    return {
+      provider,
+      options: {
+        accountSid,
+        authToken,
+        ...from ? { from } : {},
+        ...messagingServiceSid ? { messagingServiceSid } : {}
+      }
+    };
+  }
+  return { provider: "log", options: {} };
+}
+var SmsServicePlugin = class {
+  constructor(options = {}) {
+    this.name = "com.objectstack.service.sms";
+    this.version = "1.0.0";
+    this.type = "standard";
+    this.options = options;
+  }
+  resolveInitialTransport(ctx) {
+    if (this.options.transport) return { transport: this.options.transport, configured: true };
+    const provider = this.options.provider ?? "log";
+    if (provider === "log") return { transport: new LogSmsTransport(ctx.logger), configured: false };
+    try {
+      return {
+        transport: makeSmsTransport({ provider, options: this.options.providerOptions, logger: ctx.logger }),
+        configured: true
+      };
+    } catch (err) {
+      ctx.logger.warn(
+        `SmsServicePlugin: provider='${provider}' selected but transport build failed (${err?.message ?? err}) \u2014 falling back to LogSmsTransport.`
+      );
+      return { transport: new LogSmsTransport(ctx.logger), configured: false };
+    }
+  }
+  async init(ctx) {
+    const { transport, configured } = this.resolveInitialTransport(ctx);
+    if (!configured) {
+      ctx.logger.info("SmsServicePlugin: no provider configured \u2014 using LogSmsTransport (SMS will NOT be sent)");
+    } else {
+      ctx.logger.info(`SmsServicePlugin: using '${this.options.provider ?? "custom"}' provider`);
+    }
+    this.service = new SmsService({
+      transport,
+      configured,
+      retries: this.options.retries,
+      logger: ctx.logger
+    });
+    ctx.registerService("sms", this.service);
+    ctx.logger.info("SmsServicePlugin: sms service registered");
+  }
+  async start(ctx) {
+    ctx.hook("kernel:ready", async () => {
+      if (!this.service) return;
+      if (this.options.transport) return;
+      try {
+        const settings = ctx.getService("settings");
+        if (!settings || typeof settings.getNamespace !== "function") return;
+        const applySettings = async () => {
+          try {
+            const payload = await settings.getNamespace("sms");
+            const values = {};
+            for (const [k, v] of Object.entries(payload.values)) {
+              values[k] = v?.value;
+            }
+            this.applySmsSettings(values, ctx);
+          } catch (err) {
+            ctx.logger.warn("SmsServicePlugin: failed to apply sms settings: " + (err?.message ?? err));
+          }
+        };
+        await applySettings();
+        if (typeof settings.subscribe === "function") {
+          settings.subscribe("sms", () => {
+            void applySettings();
+          });
+          ctx.logger.info("SmsServicePlugin: bound to settings:changed for namespace=sms");
+        }
+        if (typeof settings.registerAction === "function") {
+          const svc = this.service;
+          settings.registerAction("sms", "test", async ({ values, payload, ctx: actionCtx }) => {
+            const overrides = payload && typeof payload === "object" && payload.values && typeof payload.values === "object" ? payload.values : payload ?? {};
+            const merged = { ...values ?? {}, ...overrides };
+            const rawTo = actionCtx?.body?.to ?? payload?.to;
+            const to = rawTo ? normalizeSmsRecipient(rawTo) : void 0;
+            if (!to) {
+              return { ok: false, severity: "error", message: 'Provide a valid "to" phone number (E.164 recommended).' };
+            }
+            const resolved = providerFromSettings(merged);
+            if (resolved.missing) {
+              return { ok: false, severity: "error", message: `${resolved.provider}: missing ${resolved.missing}.` };
+            }
+            let target = svc;
+            if (resolved.provider !== "log") {
+              try {
+                const transport = makeSmsTransport({ provider: resolved.provider, options: resolved.options, logger: ctx.logger });
+                target = new SmsService({ transport, configured: true, logger: ctx.logger });
+              } catch (err) {
+                return { ok: false, severity: "error", message: `Failed to build ${resolved.provider} transport: ${err?.message ?? String(err)}` };
+              }
+            }
+            try {
+              const result = await target.send({
+                to,
+                body: "ObjectStack SMS test message.",
+                templateParams: { content: "ObjectStack SMS test message." }
+              });
+              if (result.status === "failed") {
+                return { ok: false, severity: "error", message: result.error ?? "Send failed." };
+              }
+              return {
+                ok: true,
+                severity: "info",
+                message: `Sent test SMS to ${maskPhoneNumber(to)} via ${resolved.provider} (id=${result.messageId ?? result.id}).`
+              };
+            } catch (err) {
+              return { ok: false, severity: "error", message: err?.message ?? String(err) };
+            }
+          });
+        }
+      } catch {
+      }
+    });
+  }
+  /**
+   * Translate the `sms` settings snapshot into a transport and hot-swap it
+   * on the running SmsService. Incomplete credentials keep the previous
+   * transport (with a warning) so a half-saved form can't break delivery.
+   */
+  applySmsSettings(values, ctx) {
+    if (!this.service) return;
+    const resolved = providerFromSettings(values);
+    if (resolved.missing) {
+      ctx.logger.warn(
+        `SmsServicePlugin: provider='${resolved.provider}' selected but ${resolved.missing} is empty \u2014 transport NOT rebuilt.`
+      );
+      return;
+    }
+    if (resolved.provider === "log") {
+      if (values.provider === "log") {
+        this.service.setTransport(new LogSmsTransport(ctx.logger), false);
+        ctx.logger.info("SmsServicePlugin: sms settings applied (provider=log; SMS will NOT be sent).");
+      }
+      return;
+    }
+    try {
+      const transport = makeSmsTransport({ provider: resolved.provider, options: resolved.options, logger: ctx.logger });
+      this.service.setTransport(transport, true);
+      ctx.logger.info(`SmsServicePlugin: transport rebuilt from settings (provider=${resolved.provider}).`);
+    } catch (err) {
+      ctx.logger.warn("SmsServicePlugin: failed to rebuild transport: " + (err?.message ?? err));
+    }
+  }
+};
+export {
+  AliyunSmsTransport,
+  LogSmsTransport,
+  SmsService,
+  SmsServicePlugin,
+  TwilioSmsTransport,
+  makeSmsTransport,
+  maskPhoneNumber,
+  normalizeSmsRecipient
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sms-service.ts","../src/transports/aliyun.ts","../src/transports/twilio.ts","../src/transports/index.ts","../src/sms-plugin.ts"],"sourcesContent":["// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport type {\n  ISmsService,\n  ISmsTransport,\n  NormalizedSmsMessage,\n  SendSmsInput,\n  SendSmsResult,\n  SmsTransportSendResult,\n} from '@objectstack/spec/contracts';\n\n/**\n * Normalize + validate a recipient phone number. Accepts E.164 and common\n * human formats (spaces / dashes / dots / parens are stripped). Returns\n * `undefined` when the result doesn't look like a phone number.\n *\n * Same shape rule as plugin-auth's `normalizePhoneNumber` — 6-15 digits\n * with an optional leading `+` (kept local: the two packages must not\n * depend on each other).\n */\nexport function normalizeSmsRecipient(raw: string): string | undefined {\n  const stripped = String(raw ?? '').replace(/[\\s\\-().]/g, '');\n  return /^\\+?[0-9]{6,15}$/.test(stripped) ? stripped : undefined;\n}\n\n/**\n * Mask a phone number for log lines: keep the prefix (country-code-ish) and\n * the last two digits, hide the middle. `+8613812345678` → `+8613******78`.\n * SMS logging policy: masked recipient + status ONLY — never the body\n * (OTP codes travel in it; see the ISmsService contract header).\n */\nexport function maskPhoneNumber(phone: string): string {\n  const p = String(phone ?? '');\n  if (p.length <= 6) return `${p.slice(0, 2)}****`;\n  return `${p.slice(0, 5)}${'*'.repeat(Math.max(2, p.length - 7))}${p.slice(-2)}`;\n}\n\n/**\n * Development transport — never actually sends. Logs the masked recipient\n * (and, OUTSIDE production only, the message body so local OTP flows are\n * testable) and returns a synthetic message id.\n *\n * The production-body suppression is a hard rule from #2780: OTP codes must\n * never land in logs. In dev the body IS the delivery — same pattern as the\n * auth magic-link / invitation URLs, which are printed in dev only.\n */\nexport class LogSmsTransport implements ISmsTransport {\n  private counter = 0;\n  constructor(private readonly logger?: { info: (msg: string, meta?: any) => void }) {}\n  async send(message: NormalizedSmsMessage): Promise<SmsTransportSendResult> {\n    const messageId = `dev-sms-${Date.now()}-${++this.counter}`;\n    const dev = (globalThis as any)?.process?.env?.NODE_ENV !== 'production';\n    this.logger?.info(\n      `[LogSmsTransport] would send SMS to ${maskPhoneNumber(message.to)}` +\n      (dev ? ` — body: ${message.body}` : ' (body suppressed outside dev)'),\n      { messageId },\n    );\n    return { messageId, response: 'logged' };\n  }\n}\n\nexport interface SmsServiceOptions {\n  transport: ISmsTransport;\n  /**\n   * Whether `transport` is a real provider (Aliyun / Twilio / injected).\n   * `false` = development log fallback; surfaced via `isConfigured()` so\n   * consumers can gate SMS-dependent features in production.\n   */\n  configured: boolean;\n  /** Retry attempts on transport throw. Default 0 (no retry). */\n  retries?: number;\n  /** Logger for diagnostic output. NEVER receives message bodies. */\n  logger?: {\n    info: (msg: string, meta?: any) => void;\n    warn: (msg: string, meta?: any) => void;\n  };\n}\n\n/**\n * Concrete ISmsService implementation.\n *\n * Flow: validate + normalize input → transport.send() (with optional\n * retry) → SendSmsResult. Deliberately NO persistence and NO body logging —\n * see the contract header in `@objectstack/spec/contracts/sms-service.ts`.\n */\nexport class SmsService implements ISmsService {\n  constructor(public options: SmsServiceOptions) {\n    if (!options.transport) throw new Error('SmsService: transport is required');\n  }\n\n  /**\n   * Hot-swap the underlying transport (settings namespace changed). The\n   * `configured` flag travels with the transport.\n   */\n  setTransport(transport: ISmsTransport, configured: boolean): void {\n    this.options.transport = transport;\n    this.options.configured = configured;\n  }\n\n  isConfigured(): boolean {\n    return this.options.configured;\n  }\n\n  async send(input: SendSmsInput): Promise<SendSmsResult> {\n    const to = normalizeSmsRecipient(input?.to ?? '');\n    if (!to) {\n      throw new Error(`VALIDATION_FAILED: '${maskPhoneNumber(String(input?.to ?? ''))}' is not a valid phone number`);\n    }\n    const body = String(input?.body ?? '').trim();\n    if (!body && !input?.templateId && !input?.templateParams) {\n      throw new Error('VALIDATION_FAILED: body (or templateId/templateParams) is required');\n    }\n\n    const normalized: NormalizedSmsMessage = {\n      to,\n      body,\n      ...(input.templateId ? { templateId: input.templateId } : {}),\n      ...(input.templateParams ? { templateParams: input.templateParams } : {}),\n    };\n\n    const id = `sms-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;\n    const maxAttempts = (this.options.retries ?? 0) + 1;\n    let lastError: unknown;\n    for (let attempt = 1; attempt <= maxAttempts; attempt++) {\n      try {\n        const result = await this.options.transport.send(normalized);\n        this.options.logger?.info(\n          `[SmsService] sent to ${maskPhoneNumber(to)} (messageId=${result.messageId})`,\n        );\n        return { id, status: 'sent', messageId: result.messageId };\n      } catch (err) {\n        lastError = err;\n        if (attempt < maxAttempts) {\n          await new Promise((r) => setTimeout(r, Math.min(2000, 100 * 2 ** (attempt - 1))));\n        }\n      }\n    }\n    const errMessage = String((lastError as Error)?.message ?? lastError ?? 'send failed').slice(0, 500);\n    this.options.logger?.warn(\n      `[SmsService] send to ${maskPhoneNumber(to)} failed: ${errMessage}`,\n    );\n    return { id, status: 'failed', error: errMessage };\n  }\n}\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { createHash, createHmac, randomUUID } from 'node:crypto';\nimport type { ISmsTransport, NormalizedSmsMessage, SmsTransportSendResult } from '@objectstack/spec/contracts';\n\nexport interface AliyunSmsTransportOptions {\n  accessKeyId: string;\n  accessKeySecret: string;\n  /** 短信签名 SignName — the registered sender signature, e.g. `阿里云短信测试`. */\n  signName: string;\n  /**\n   * Default 模板 TemplateCode used when the input carries no `templateId`\n   * (Aliyun only delivers pre-registered templates — free-form bodies are\n   * refused by the API). A catch-all template with a single `${content}`\n   * variable makes generic notification sends possible.\n   */\n  defaultTemplateCode?: string;\n  /** API endpoint host. Default `dysmsapi.aliyuncs.com`. */\n  endpoint?: string;\n  /** Injectable fetch for tests. */\n  fetchImpl?: typeof fetch;\n}\n\nconst API_VERSION = '2017-05-25';\nconst ALGORITHM = 'ACS3-HMAC-SHA256';\n\nconst sha256Hex = (s: string): string => createHash('sha256').update(s, 'utf8').digest('hex');\nconst hmac256Hex = (key: string, s: string): string => createHmac('sha256', key).update(s, 'utf8').digest('hex');\n\n/** RFC 3986 percent-encoding (Aliyun requires `%20`, `%2A`, `%7E` handling). */\nconst encode = (s: string): string =>\n  encodeURIComponent(s)\n    .replace(/\\+/g, '%20')\n    .replace(/\\*/g, '%2A')\n    .replace(/%7E/g, '~');\n\n/**\n * Aliyun SMS (dysmsapi `SendSms`) transport, signed with the current\n * ACS3-HMAC-SHA256 scheme — plain `fetch` + `node:crypto`, no vendor SDK.\n *\n * Aliyun is template-only: the transport sends `templateId` (falling back to\n * the configured default TemplateCode) with `templateParams` (falling back to\n * `{ content: body }` for the catch-all-template pattern). The rendered\n * `body` itself is never transmitted outside `TemplateParam`.\n */\nexport class AliyunSmsTransport implements ISmsTransport {\n  private readonly endpoint: string;\n  private readonly fetchImpl: typeof fetch;\n\n  constructor(private readonly options: AliyunSmsTransportOptions) {\n    if (!options.accessKeyId || !options.accessKeySecret) {\n      throw new Error('AliyunSmsTransport: accessKeyId and accessKeySecret are required');\n    }\n    if (!options.signName) {\n      throw new Error('AliyunSmsTransport: signName is required');\n    }\n    this.endpoint = options.endpoint ?? 'dysmsapi.aliyuncs.com';\n    this.fetchImpl = options.fetchImpl ?? fetch;\n  }\n\n  async send(message: NormalizedSmsMessage): Promise<SmsTransportSendResult> {\n    const templateCode = message.templateId ?? this.options.defaultTemplateCode;\n    if (!templateCode) {\n      throw new Error(\n        'AliyunSmsTransport: Aliyun requires a template — pass templateId or configure a default template code',\n      );\n    }\n    const templateParam = JSON.stringify(message.templateParams ?? { content: message.body });\n\n    const query: Record<string, string> = {\n      PhoneNumbers: message.to,\n      SignName: this.options.signName,\n      TemplateCode: templateCode,\n      TemplateParam: templateParam,\n    };\n    const canonicalQuery = Object.keys(query)\n      .sort()\n      .map((k) => `${encode(k)}=${encode(query[k])}`)\n      .join('&');\n\n    const bodyHash = sha256Hex(''); // POST with all parameters in the query string\n    const headers: Record<string, string> = {\n      host: this.endpoint,\n      'x-acs-action': 'SendSms',\n      'x-acs-content-sha256': bodyHash,\n      'x-acs-date': new Date().toISOString().replace(/\\.\\d{3}Z$/, 'Z'),\n      'x-acs-signature-nonce': randomUUID(),\n      'x-acs-version': API_VERSION,\n    };\n    const signedHeaderNames = Object.keys(headers).sort();\n    const canonicalHeaders = signedHeaderNames.map((k) => `${k}:${headers[k].trim()}\\n`).join('');\n    const signedHeaders = signedHeaderNames.join(';');\n\n    const canonicalRequest = ['POST', '/', canonicalQuery, canonicalHeaders, signedHeaders, bodyHash].join('\\n');\n    const stringToSign = `${ALGORITHM}\\n${sha256Hex(canonicalRequest)}`;\n    const signature = hmac256Hex(this.options.accessKeySecret, stringToSign);\n\n    const response = await this.fetchImpl(`https://${this.endpoint}/?${canonicalQuery}`, {\n      method: 'POST',\n      headers: {\n        ...headers,\n        Authorization: `${ALGORITHM} Credential=${this.options.accessKeyId},SignedHeaders=${signedHeaders},Signature=${signature}`,\n      },\n    });\n\n    let payload: any = {};\n    try { payload = await response.json(); } catch { /* non-JSON error body */ }\n    if (!response.ok || payload?.Code !== 'OK') {\n      const code = payload?.Code ?? `HTTP_${response.status}`;\n      const detail = payload?.Message ?? response.statusText ?? 'request failed';\n      throw new Error(`Aliyun SendSms failed (${code}): ${detail}`);\n    }\n    return { messageId: String(payload.BizId ?? payload.RequestId ?? ''), response: payload.RequestId };\n  }\n}\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport type { ISmsTransport, NormalizedSmsMessage, SmsTransportSendResult } from '@objectstack/spec/contracts';\n\nexport interface TwilioSmsTransportOptions {\n  accountSid: string;\n  authToken: string;\n  /** Sender number (E.164). One of `from` / `messagingServiceSid` is required. */\n  from?: string;\n  /** Twilio Messaging Service SID (alternative to a fixed `from` number). */\n  messagingServiceSid?: string;\n  /** API base URL override (tests). Default `https://api.twilio.com`. */\n  baseUrl?: string;\n  /** Injectable fetch for tests. */\n  fetchImpl?: typeof fetch;\n}\n\n/**\n * Twilio Programmable Messaging transport — a single `POST\n * /2010-04-01/Accounts/{sid}/Messages.json` with HTTP Basic auth. Plain\n * `fetch`, no vendor SDK. Free-form: delivers `body` verbatim.\n */\nexport class TwilioSmsTransport implements ISmsTransport {\n  private readonly baseUrl: string;\n  private readonly fetchImpl: typeof fetch;\n\n  constructor(private readonly options: TwilioSmsTransportOptions) {\n    if (!options.accountSid || !options.authToken) {\n      throw new Error('TwilioSmsTransport: accountSid and authToken are required');\n    }\n    if (!options.from && !options.messagingServiceSid) {\n      throw new Error('TwilioSmsTransport: one of from / messagingServiceSid is required');\n    }\n    this.baseUrl = (options.baseUrl ?? 'https://api.twilio.com').replace(/\\/$/, '');\n    this.fetchImpl = options.fetchImpl ?? fetch;\n  }\n\n  async send(message: NormalizedSmsMessage): Promise<SmsTransportSendResult> {\n    const form = new URLSearchParams({\n      To: message.to,\n      Body: message.body,\n      ...(this.options.messagingServiceSid\n        ? { MessagingServiceSid: this.options.messagingServiceSid }\n        : { From: this.options.from as string }),\n    });\n    const auth = Buffer.from(`${this.options.accountSid}:${this.options.authToken}`).toString('base64');\n    const response = await this.fetchImpl(\n      `${this.baseUrl}/2010-04-01/Accounts/${encodeURIComponent(this.options.accountSid)}/Messages.json`,\n      {\n        method: 'POST',\n        headers: {\n          Authorization: `Basic ${auth}`,\n          'Content-Type': 'application/x-www-form-urlencoded',\n        },\n        body: form.toString(),\n      },\n    );\n\n    let payload: any = {};\n    try { payload = await response.json(); } catch { /* non-JSON error body */ }\n    if (!response.ok) {\n      const code = payload?.code ?? `HTTP_${response.status}`;\n      const detail = payload?.message ?? response.statusText ?? 'request failed';\n      throw new Error(`Twilio send failed (${code}): ${detail}`);\n    }\n    return { messageId: String(payload.sid ?? ''), response: payload.status };\n  }\n}\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport type { ISmsTransport } from '@objectstack/spec/contracts';\nimport { LogSmsTransport } from '../sms-service.js';\nimport { AliyunSmsTransport } from './aliyun.js';\nimport { TwilioSmsTransport } from './twilio.js';\n\nexport { AliyunSmsTransport, type AliyunSmsTransportOptions } from './aliyun.js';\nexport { TwilioSmsTransport, type TwilioSmsTransportOptions } from './twilio.js';\n\nexport type SmsProviderTag = 'log' | 'aliyun' | 'twilio';\n\nexport interface MakeSmsTransportOptions {\n  provider: SmsProviderTag;\n  /** Provider-specific credentials/options (see the transport option types). */\n  options?: Record<string, unknown>;\n  logger?: { info: (msg: string, meta?: any) => void };\n}\n\n/**\n * Build an ISmsTransport from a provider tag + opts. Used by\n * SmsServicePlugin to materialise the transport selected by config /\n * the `sms` settings namespace.\n *\n * Throws when a non-`log` provider is missing required credentials.\n */\nexport function makeSmsTransport(opts: MakeSmsTransportOptions): ISmsTransport {\n  const { provider, options = {}, logger } = opts;\n  switch (provider) {\n    case 'log':\n      return new LogSmsTransport(logger);\n    case 'aliyun':\n      return new AliyunSmsTransport(options as any);\n    case 'twilio':\n      return new TwilioSmsTransport(options as any);\n    default:\n      throw new Error(`makeSmsTransport: unknown provider '${provider}'`);\n  }\n}\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport type { Plugin, PluginContext } from '@objectstack/core';\nimport type { ISmsTransport } from '@objectstack/spec/contracts';\nimport { SmsService, LogSmsTransport, maskPhoneNumber, normalizeSmsRecipient } from './sms-service.js';\nimport { makeSmsTransport, type SmsProviderTag } from './transports/index.js';\n\n/**\n * Plugin configuration. Mirrors EmailServicePluginOptions: a directly\n * injected transport wins, then `provider` + credentials, then the\n * development `LogSmsTransport` fallback (no real send).\n */\nexport interface SmsServicePluginOptions {\n  /** Pluggable delivery transport. Overrides `provider`/credentials. */\n  transport?: ISmsTransport;\n  /** Provider tag — `'log' | 'aliyun' | 'twilio'`. Default `'log'`. */\n  provider?: SmsProviderTag;\n  /** Provider-specific credentials/options (see transport option types). */\n  providerOptions?: Record<string, unknown>;\n  /** Retry attempts on transport throw. Default 0. */\n  retries?: number;\n}\n\n/** Translate an `sms` settings-namespace snapshot into transport inputs. */\nfunction providerFromSettings(values: Record<string, unknown>): {\n  provider: SmsProviderTag;\n  options: Record<string, unknown>;\n  missing?: string;\n} {\n  const provider = String(values.provider ?? 'log') as SmsProviderTag;\n  const str = (k: string): string | undefined => {\n    const v = values[k];\n    return typeof v === 'string' && v.trim().length > 0 ? v.trim() : undefined;\n  };\n  if (provider === 'aliyun') {\n    const accessKeyId = str('aliyun_access_key_id');\n    const accessKeySecret = str('aliyun_access_key_secret');\n    const signName = str('aliyun_sign_name');\n    if (!accessKeyId || !accessKeySecret || !signName) {\n      return { provider, options: {}, missing: 'aliyun_access_key_id / aliyun_access_key_secret / aliyun_sign_name' };\n    }\n    return {\n      provider,\n      options: {\n        accessKeyId,\n        accessKeySecret,\n        signName,\n        ...(str('aliyun_template_code') ? { defaultTemplateCode: str('aliyun_template_code') } : {}),\n      },\n    };\n  }\n  if (provider === 'twilio') {\n    const accountSid = str('twilio_account_sid');\n    const authToken = str('twilio_auth_token');\n    const from = str('twilio_from_number');\n    const messagingServiceSid = str('twilio_messaging_service_sid');\n    if (!accountSid || !authToken || (!from && !messagingServiceSid)) {\n      return { provider, options: {}, missing: 'twilio_account_sid / twilio_auth_token / twilio_from_number (or messaging service SID)' };\n    }\n    return {\n      provider,\n      options: {\n        accountSid,\n        authToken,\n        ...(from ? { from } : {}),\n        ...(messagingServiceSid ? { messagingServiceSid } : {}),\n      },\n    };\n  }\n  return { provider: 'log', options: {} };\n}\n\n/**\n * SmsServicePlugin — registers the `sms` service (#2780).\n *\n * Lifecycle:\n *   - `init`: build transport (injected → provider+credentials →\n *     LogSmsTransport fallback); register the SmsService so dependents\n *     (auth OTP, the messaging `sms` channel) can resolve it.\n *   - `start` (kernel:ready): bind the `sms` settings namespace so the\n *     admin UI can live-swap the provider without a restart, and register\n *     the `sms/test` action. Env-locked keys (OS_SMS_*) still win at the\n *     settings-resolver level.\n *\n * Deliberately NO persistence objects: SMS bodies carry OTP codes — see the\n * ISmsService contract header.\n */\nexport class SmsServicePlugin implements Plugin {\n  name = 'com.objectstack.service.sms';\n  version = '1.0.0';\n  type = 'standard' as const;\n\n  private readonly options: SmsServicePluginOptions;\n  private service?: SmsService;\n\n  constructor(options: SmsServicePluginOptions = {}) {\n    this.options = options;\n  }\n\n  private resolveInitialTransport(ctx: PluginContext): { transport: ISmsTransport; configured: boolean } {\n    if (this.options.transport) return { transport: this.options.transport, configured: true };\n    const provider = this.options.provider ?? 'log';\n    if (provider === 'log') return { transport: new LogSmsTransport(ctx.logger), configured: false };\n    try {\n      return {\n        transport: makeSmsTransport({ provider, options: this.options.providerOptions, logger: ctx.logger }),\n        configured: true,\n      };\n    } catch (err: any) {\n      // Incomplete constructor credentials must not take the kernel down —\n      // fall back to the dev transport; the settings bind (kernel:ready)\n      // can still swap in a working provider.\n      ctx.logger.warn(\n        `SmsServicePlugin: provider='${provider}' selected but transport build failed (${err?.message ?? err}) — falling back to LogSmsTransport.`,\n      );\n      return { transport: new LogSmsTransport(ctx.logger), configured: false };\n    }\n  }\n\n  async init(ctx: PluginContext): Promise<void> {\n    const { transport, configured } = this.resolveInitialTransport(ctx);\n    if (!configured) {\n      ctx.logger.info('SmsServicePlugin: no provider configured — using LogSmsTransport (SMS will NOT be sent)');\n    } else {\n      ctx.logger.info(`SmsServicePlugin: using '${this.options.provider ?? 'custom'}' provider`);\n    }\n    this.service = new SmsService({\n      transport,\n      configured,\n      retries: this.options.retries,\n      logger: ctx.logger,\n    });\n    ctx.registerService('sms', this.service);\n    ctx.logger.info('SmsServicePlugin: sms service registered');\n  }\n\n  async start(ctx: PluginContext): Promise<void> {\n    ctx.hook('kernel:ready', async () => {\n      if (!this.service) return;\n      // A host-injected transport is authoritative — settings only manage\n      // the provider-tag path.\n      if (this.options.transport) return;\n      try {\n        const settings = ctx.getService<any>('settings');\n        if (!settings || typeof settings.getNamespace !== 'function') return;\n\n        const applySettings = async () => {\n          try {\n            const payload = await settings.getNamespace('sms');\n            const values: Record<string, unknown> = {};\n            for (const [k, v] of Object.entries(payload.values as Record<string, any>)) {\n              values[k] = v?.value;\n            }\n            this.applySmsSettings(values, ctx);\n          } catch (err: any) {\n            ctx.logger.warn('SmsServicePlugin: failed to apply sms settings: ' + (err?.message ?? err));\n          }\n        };\n        await applySettings();\n        if (typeof settings.subscribe === 'function') {\n          settings.subscribe('sms', () => { void applySettings(); });\n          ctx.logger.info('SmsServicePlugin: bound to settings:changed for namespace=sms');\n        }\n\n        // `sms/test` action — validate the (possibly unsaved) form values by\n        // sending a real test message through a one-shot transport, mirroring\n        // the `mail/test` handler in EmailServicePlugin.\n        if (typeof settings.registerAction === 'function') {\n          const svc = this.service;\n          settings.registerAction('sms', 'test', async ({ values, payload, ctx: actionCtx }: any) => {\n            const overrides = (payload && typeof payload === 'object' && payload.values && typeof payload.values === 'object')\n              ? payload.values\n              : (payload ?? {});\n            const merged: Record<string, unknown> = { ...(values ?? {}), ...overrides };\n            const rawTo = (actionCtx?.body?.to as string | undefined) ?? (payload?.to as string | undefined);\n            const to = rawTo ? normalizeSmsRecipient(rawTo) : undefined;\n            if (!to) {\n              return { ok: false, severity: 'error', message: 'Provide a valid \"to\" phone number (E.164 recommended).' };\n            }\n\n            const resolved = providerFromSettings(merged);\n            if (resolved.missing) {\n              return { ok: false, severity: 'error', message: `${resolved.provider}: missing ${resolved.missing}.` };\n            }\n\n            let target: SmsService = svc;\n            if (resolved.provider !== 'log') {\n              try {\n                const transport = makeSmsTransport({ provider: resolved.provider, options: resolved.options, logger: ctx.logger });\n                target = new SmsService({ transport, configured: true, logger: ctx.logger });\n              } catch (err: any) {\n                return { ok: false, severity: 'error', message: `Failed to build ${resolved.provider} transport: ${err?.message ?? String(err)}` };\n              }\n            }\n\n            try {\n              const result = await target.send({\n                to,\n                body: 'ObjectStack SMS test message.',\n                templateParams: { content: 'ObjectStack SMS test message.' },\n              });\n              if (result.status === 'failed') {\n                return { ok: false, severity: 'error', message: result.error ?? 'Send failed.' };\n              }\n              return {\n                ok: true,\n                severity: 'info',\n                message: `Sent test SMS to ${maskPhoneNumber(to)} via ${resolved.provider} (id=${result.messageId ?? result.id}).`,\n              };\n            } catch (err: any) {\n              return { ok: false, severity: 'error', message: err?.message ?? String(err) };\n            }\n          });\n        }\n      } catch {\n        // settings service not registered — constructor opts remain authoritative.\n      }\n    });\n  }\n\n  /**\n   * Translate the `sms` settings snapshot into a transport and hot-swap it\n   * on the running SmsService. Incomplete credentials keep the previous\n   * transport (with a warning) so a half-saved form can't break delivery.\n   */\n  private applySmsSettings(values: Record<string, unknown>, ctx: PluginContext): void {\n    if (!this.service) return;\n    const resolved = providerFromSettings(values);\n    if (resolved.missing) {\n      ctx.logger.warn(\n        `SmsServicePlugin: provider='${resolved.provider}' selected but ${resolved.missing} is empty — transport NOT rebuilt.`,\n      );\n      return;\n    }\n    if (resolved.provider === 'log') {\n      // Downgrade to the dev transport only when the operator explicitly\n      // selected `log`; an unset namespace keeps the constructor opts.\n      if (values.provider === 'log') {\n        this.service.setTransport(new LogSmsTransport(ctx.logger), false);\n        ctx.logger.info('SmsServicePlugin: sms settings applied (provider=log; SMS will NOT be sent).');\n      }\n      return;\n    }\n    try {\n      const transport = makeSmsTransport({ provider: resolved.provider, options: resolved.options, logger: ctx.logger });\n      this.service.setTransport(transport, true);\n      ctx.logger.info(`SmsServicePlugin: transport rebuilt from settings (provider=${resolved.provider}).`);\n    } catch (err: any) {\n      ctx.logger.warn('SmsServicePlugin: failed to rebuild transport: ' + (err?.message ?? err));\n    }\n  }\n}\n"],"mappings":";AAoBO,SAAS,sBAAsB,KAAiC;AACrE,QAAM,WAAW,OAAO,OAAO,EAAE,EAAE,QAAQ,cAAc,EAAE;AAC3D,SAAO,mBAAmB,KAAK,QAAQ,IAAI,WAAW;AACxD;AAQO,SAAS,gBAAgB,OAAuB;AACrD,QAAM,IAAI,OAAO,SAAS,EAAE;AAC5B,MAAI,EAAE,UAAU,EAAG,QAAO,GAAG,EAAE,MAAM,GAAG,CAAC,CAAC;AAC1C,SAAO,GAAG,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO,KAAK,IAAI,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AAC/E;AAWO,IAAM,kBAAN,MAA+C;AAAA,EAEpD,YAA6B,QAAsD;AAAtD;AAD7B,SAAQ,UAAU;AAAA,EACkE;AAAA,EACpF,MAAM,KAAK,SAAgE;AACzE,UAAM,YAAY,WAAW,KAAK,IAAI,CAAC,IAAI,EAAE,KAAK,OAAO;AACzD,UAAM,MAAO,YAAoB,SAAS,KAAK,aAAa;AAC5D,SAAK,QAAQ;AAAA,MACX,uCAAuC,gBAAgB,QAAQ,EAAE,CAAC,MACjE,MAAM,iBAAY,QAAQ,IAAI,KAAK;AAAA,MACpC,EAAE,UAAU;AAAA,IACd;AACA,WAAO,EAAE,WAAW,UAAU,SAAS;AAAA,EACzC;AACF;AA0BO,IAAM,aAAN,MAAwC;AAAA,EAC7C,YAAmB,SAA4B;AAA5B;AACjB,QAAI,CAAC,QAAQ,UAAW,OAAM,IAAI,MAAM,mCAAmC;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAa,WAA0B,YAA2B;AAChE,SAAK,QAAQ,YAAY;AACzB,SAAK,QAAQ,aAAa;AAAA,EAC5B;AAAA,EAEA,eAAwB;AACtB,WAAO,KAAK,QAAQ;AAAA,EACtB;AAAA,EAEA,MAAM,KAAK,OAA6C;AACtD,UAAM,KAAK,sBAAsB,OAAO,MAAM,EAAE;AAChD,QAAI,CAAC,IAAI;AACP,YAAM,IAAI,MAAM,uBAAuB,gBAAgB,OAAO,OAAO,MAAM,EAAE,CAAC,CAAC,+BAA+B;AAAA,IAChH;AACA,UAAM,OAAO,OAAO,OAAO,QAAQ,EAAE,EAAE,KAAK;AAC5C,QAAI,CAAC,QAAQ,CAAC,OAAO,cAAc,CAAC,OAAO,gBAAgB;AACzD,YAAM,IAAI,MAAM,oEAAoE;AAAA,IACtF;AAEA,UAAM,aAAmC;AAAA,MACvC;AAAA,MACA;AAAA,MACA,GAAI,MAAM,aAAa,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,MAC3D,GAAI,MAAM,iBAAiB,EAAE,gBAAgB,MAAM,eAAe,IAAI,CAAC;AAAA,IACzE;AAEA,UAAM,KAAK,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AACvE,UAAM,eAAe,KAAK,QAAQ,WAAW,KAAK;AAClD,QAAI;AACJ,aAAS,UAAU,GAAG,WAAW,aAAa,WAAW;AACvD,UAAI;AACF,cAAM,SAAS,MAAM,KAAK,QAAQ,UAAU,KAAK,UAAU;AAC3D,aAAK,QAAQ,QAAQ;AAAA,UACnB,wBAAwB,gBAAgB,EAAE,CAAC,eAAe,OAAO,SAAS;AAAA,QAC5E;AACA,eAAO,EAAE,IAAI,QAAQ,QAAQ,WAAW,OAAO,UAAU;AAAA,MAC3D,SAAS,KAAK;AACZ,oBAAY;AACZ,YAAI,UAAU,aAAa;AACzB,gBAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,KAAK,IAAI,KAAM,MAAM,MAAM,UAAU,EAAE,CAAC,CAAC;AAAA,QAClF;AAAA,MACF;AAAA,IACF;AACA,UAAM,aAAa,OAAQ,WAAqB,WAAW,aAAa,aAAa,EAAE,MAAM,GAAG,GAAG;AACnG,SAAK,QAAQ,QAAQ;AAAA,MACnB,wBAAwB,gBAAgB,EAAE,CAAC,YAAY,UAAU;AAAA,IACnE;AACA,WAAO,EAAE,IAAI,QAAQ,UAAU,OAAO,WAAW;AAAA,EACnD;AACF;;;AC7IA,SAAS,YAAY,YAAY,kBAAkB;AAqBnD,IAAM,cAAc;AACpB,IAAM,YAAY;AAElB,IAAM,YAAY,CAAC,MAAsB,WAAW,QAAQ,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,KAAK;AAC5F,IAAM,aAAa,CAAC,KAAa,MAAsB,WAAW,UAAU,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,KAAK;AAG/G,IAAM,SAAS,CAAC,MACd,mBAAmB,CAAC,EACjB,QAAQ,OAAO,KAAK,EACpB,QAAQ,OAAO,KAAK,EACpB,QAAQ,QAAQ,GAAG;AAWjB,IAAM,qBAAN,MAAkD;AAAA,EAIvD,YAA6B,SAAoC;AAApC;AAC3B,QAAI,CAAC,QAAQ,eAAe,CAAC,QAAQ,iBAAiB;AACpD,YAAM,IAAI,MAAM,kEAAkE;AAAA,IACpF;AACA,QAAI,CAAC,QAAQ,UAAU;AACrB,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC5D;AACA,SAAK,WAAW,QAAQ,YAAY;AACpC,SAAK,YAAY,QAAQ,aAAa;AAAA,EACxC;AAAA,EAEA,MAAM,KAAK,SAAgE;AACzE,UAAM,eAAe,QAAQ,cAAc,KAAK,QAAQ;AACxD,QAAI,CAAC,cAAc;AACjB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,UAAM,gBAAgB,KAAK,UAAU,QAAQ,kBAAkB,EAAE,SAAS,QAAQ,KAAK,CAAC;AAExF,UAAM,QAAgC;AAAA,MACpC,cAAc,QAAQ;AAAA,MACtB,UAAU,KAAK,QAAQ;AAAA,MACvB,cAAc;AAAA,MACd,eAAe;AAAA,IACjB;AACA,UAAM,iBAAiB,OAAO,KAAK,KAAK,EACrC,KAAK,EACL,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,EAC7C,KAAK,GAAG;AAEX,UAAM,WAAW,UAAU,EAAE;AAC7B,UAAM,UAAkC;AAAA,MACtC,MAAM,KAAK;AAAA,MACX,gBAAgB;AAAA,MAChB,wBAAwB;AAAA,MACxB,eAAc,oBAAI,KAAK,GAAE,YAAY,EAAE,QAAQ,aAAa,GAAG;AAAA,MAC/D,yBAAyB,WAAW;AAAA,MACpC,iBAAiB;AAAA,IACnB;AACA,UAAM,oBAAoB,OAAO,KAAK,OAAO,EAAE,KAAK;AACpD,UAAM,mBAAmB,kBAAkB,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,EAAE,KAAK,CAAC;AAAA,CAAI,EAAE,KAAK,EAAE;AAC5F,UAAM,gBAAgB,kBAAkB,KAAK,GAAG;AAEhD,UAAM,mBAAmB,CAAC,QAAQ,KAAK,gBAAgB,kBAAkB,eAAe,QAAQ,EAAE,KAAK,IAAI;AAC3G,UAAM,eAAe,GAAG,SAAS;AAAA,EAAK,UAAU,gBAAgB,CAAC;AACjE,UAAM,YAAY,WAAW,KAAK,QAAQ,iBAAiB,YAAY;AAEvE,UAAM,WAAW,MAAM,KAAK,UAAU,WAAW,KAAK,QAAQ,KAAK,cAAc,IAAI;AAAA,MACnF,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,GAAG;AAAA,QACH,eAAe,GAAG,SAAS,eAAe,KAAK,QAAQ,WAAW,kBAAkB,aAAa,cAAc,SAAS;AAAA,MAC1H;AAAA,IACF,CAAC;AAED,QAAI,UAAe,CAAC;AACpB,QAAI;AAAE,gBAAU,MAAM,SAAS,KAAK;AAAA,IAAG,QAAQ;AAAA,IAA4B;AAC3E,QAAI,CAAC,SAAS,MAAM,SAAS,SAAS,MAAM;AAC1C,YAAM,OAAO,SAAS,QAAQ,QAAQ,SAAS,MAAM;AACrD,YAAM,SAAS,SAAS,WAAW,SAAS,cAAc;AAC1D,YAAM,IAAI,MAAM,0BAA0B,IAAI,MAAM,MAAM,EAAE;AAAA,IAC9D;AACA,WAAO,EAAE,WAAW,OAAO,QAAQ,SAAS,QAAQ,aAAa,EAAE,GAAG,UAAU,QAAQ,UAAU;AAAA,EACpG;AACF;;;AC5FO,IAAM,qBAAN,MAAkD;AAAA,EAIvD,YAA6B,SAAoC;AAApC;AAC3B,QAAI,CAAC,QAAQ,cAAc,CAAC,QAAQ,WAAW;AAC7C,YAAM,IAAI,MAAM,2DAA2D;AAAA,IAC7E;AACA,QAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,qBAAqB;AACjD,YAAM,IAAI,MAAM,mEAAmE;AAAA,IACrF;AACA,SAAK,WAAW,QAAQ,WAAW,0BAA0B,QAAQ,OAAO,EAAE;AAC9E,SAAK,YAAY,QAAQ,aAAa;AAAA,EACxC;AAAA,EAEA,MAAM,KAAK,SAAgE;AACzE,UAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,IAAI,QAAQ;AAAA,MACZ,MAAM,QAAQ;AAAA,MACd,GAAI,KAAK,QAAQ,sBACb,EAAE,qBAAqB,KAAK,QAAQ,oBAAoB,IACxD,EAAE,MAAM,KAAK,QAAQ,KAAe;AAAA,IAC1C,CAAC;AACD,UAAM,OAAO,OAAO,KAAK,GAAG,KAAK,QAAQ,UAAU,IAAI,KAAK,QAAQ,SAAS,EAAE,EAAE,SAAS,QAAQ;AAClG,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B,GAAG,KAAK,OAAO,wBAAwB,mBAAmB,KAAK,QAAQ,UAAU,CAAC;AAAA,MAClF;AAAA,QACE,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,eAAe,SAAS,IAAI;AAAA,UAC5B,gBAAgB;AAAA,QAClB;AAAA,QACA,MAAM,KAAK,SAAS;AAAA,MACtB;AAAA,IACF;AAEA,QAAI,UAAe,CAAC;AACpB,QAAI;AAAE,gBAAU,MAAM,SAAS,KAAK;AAAA,IAAG,QAAQ;AAAA,IAA4B;AAC3E,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,OAAO,SAAS,QAAQ,QAAQ,SAAS,MAAM;AACrD,YAAM,SAAS,SAAS,WAAW,SAAS,cAAc;AAC1D,YAAM,IAAI,MAAM,uBAAuB,IAAI,MAAM,MAAM,EAAE;AAAA,IAC3D;AACA,WAAO,EAAE,WAAW,OAAO,QAAQ,OAAO,EAAE,GAAG,UAAU,QAAQ,OAAO;AAAA,EAC1E;AACF;;;ACzCO,SAAS,iBAAiB,MAA8C;AAC7E,QAAM,EAAE,UAAU,UAAU,CAAC,GAAG,OAAO,IAAI;AAC3C,UAAQ,UAAU;AAAA,IAChB,KAAK;AACH,aAAO,IAAI,gBAAgB,MAAM;AAAA,IACnC,KAAK;AACH,aAAO,IAAI,mBAAmB,OAAc;AAAA,IAC9C,KAAK;AACH,aAAO,IAAI,mBAAmB,OAAc;AAAA,IAC9C;AACE,YAAM,IAAI,MAAM,uCAAuC,QAAQ,GAAG;AAAA,EACtE;AACF;;;ACdA,SAAS,qBAAqB,QAI5B;AACA,QAAM,WAAW,OAAO,OAAO,YAAY,KAAK;AAChD,QAAM,MAAM,CAAC,MAAkC;AAC7C,UAAM,IAAI,OAAO,CAAC;AAClB,WAAO,OAAO,MAAM,YAAY,EAAE,KAAK,EAAE,SAAS,IAAI,EAAE,KAAK,IAAI;AAAA,EACnE;AACA,MAAI,aAAa,UAAU;AACzB,UAAM,cAAc,IAAI,sBAAsB;AAC9C,UAAM,kBAAkB,IAAI,0BAA0B;AACtD,UAAM,WAAW,IAAI,kBAAkB;AACvC,QAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,UAAU;AACjD,aAAO,EAAE,UAAU,SAAS,CAAC,GAAG,SAAS,qEAAqE;AAAA,IAChH;AACA,WAAO;AAAA,MACL;AAAA,MACA,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAI,IAAI,sBAAsB,IAAI,EAAE,qBAAqB,IAAI,sBAAsB,EAAE,IAAI,CAAC;AAAA,MAC5F;AAAA,IACF;AAAA,EACF;AACA,MAAI,aAAa,UAAU;AACzB,UAAM,aAAa,IAAI,oBAAoB;AAC3C,UAAM,YAAY,IAAI,mBAAmB;AACzC,UAAM,OAAO,IAAI,oBAAoB;AACrC,UAAM,sBAAsB,IAAI,8BAA8B;AAC9D,QAAI,CAAC,cAAc,CAAC,aAAc,CAAC,QAAQ,CAAC,qBAAsB;AAChE,aAAO,EAAE,UAAU,SAAS,CAAC,GAAG,SAAS,yFAAyF;AAAA,IACpI;AACA,WAAO;AAAA,MACL;AAAA,MACA,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,QACvB,GAAI,sBAAsB,EAAE,oBAAoB,IAAI,CAAC;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,UAAU,OAAO,SAAS,CAAC,EAAE;AACxC;AAiBO,IAAM,mBAAN,MAAyC;AAAA,EAQ9C,YAAY,UAAmC,CAAC,GAAG;AAPnD,gBAAO;AACP,mBAAU;AACV,gBAAO;AAML,SAAK,UAAU;AAAA,EACjB;AAAA,EAEQ,wBAAwB,KAAuE;AACrG,QAAI,KAAK,QAAQ,UAAW,QAAO,EAAE,WAAW,KAAK,QAAQ,WAAW,YAAY,KAAK;AACzF,UAAM,WAAW,KAAK,QAAQ,YAAY;AAC1C,QAAI,aAAa,MAAO,QAAO,EAAE,WAAW,IAAI,gBAAgB,IAAI,MAAM,GAAG,YAAY,MAAM;AAC/F,QAAI;AACF,aAAO;AAAA,QACL,WAAW,iBAAiB,EAAE,UAAU,SAAS,KAAK,QAAQ,iBAAiB,QAAQ,IAAI,OAAO,CAAC;AAAA,QACnG,YAAY;AAAA,MACd;AAAA,IACF,SAAS,KAAU;AAIjB,UAAI,OAAO;AAAA,QACT,+BAA+B,QAAQ,0CAA0C,KAAK,WAAW,GAAG;AAAA,MACtG;AACA,aAAO,EAAE,WAAW,IAAI,gBAAgB,IAAI,MAAM,GAAG,YAAY,MAAM;AAAA,IACzE;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,KAAmC;AAC5C,UAAM,EAAE,WAAW,WAAW,IAAI,KAAK,wBAAwB,GAAG;AAClE,QAAI,CAAC,YAAY;AACf,UAAI,OAAO,KAAK,8FAAyF;AAAA,IAC3G,OAAO;AACL,UAAI,OAAO,KAAK,4BAA4B,KAAK,QAAQ,YAAY,QAAQ,YAAY;AAAA,IAC3F;AACA,SAAK,UAAU,IAAI,WAAW;AAAA,MAC5B;AAAA,MACA;AAAA,MACA,SAAS,KAAK,QAAQ;AAAA,MACtB,QAAQ,IAAI;AAAA,IACd,CAAC;AACD,QAAI,gBAAgB,OAAO,KAAK,OAAO;AACvC,QAAI,OAAO,KAAK,0CAA0C;AAAA,EAC5D;AAAA,EAEA,MAAM,MAAM,KAAmC;AAC7C,QAAI,KAAK,gBAAgB,YAAY;AACnC,UAAI,CAAC,KAAK,QAAS;AAGnB,UAAI,KAAK,QAAQ,UAAW;AAC5B,UAAI;AACF,cAAM,WAAW,IAAI,WAAgB,UAAU;AAC/C,YAAI,CAAC,YAAY,OAAO,SAAS,iBAAiB,WAAY;AAE9D,cAAM,gBAAgB,YAAY;AAChC,cAAI;AACF,kBAAM,UAAU,MAAM,SAAS,aAAa,KAAK;AACjD,kBAAM,SAAkC,CAAC;AACzC,uBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,QAAQ,MAA6B,GAAG;AAC1E,qBAAO,CAAC,IAAI,GAAG;AAAA,YACjB;AACA,iBAAK,iBAAiB,QAAQ,GAAG;AAAA,UACnC,SAAS,KAAU;AACjB,gBAAI,OAAO,KAAK,sDAAsD,KAAK,WAAW,IAAI;AAAA,UAC5F;AAAA,QACF;AACA,cAAM,cAAc;AACpB,YAAI,OAAO,SAAS,cAAc,YAAY;AAC5C,mBAAS,UAAU,OAAO,MAAM;AAAE,iBAAK,cAAc;AAAA,UAAG,CAAC;AACzD,cAAI,OAAO,KAAK,+DAA+D;AAAA,QACjF;AAKA,YAAI,OAAO,SAAS,mBAAmB,YAAY;AACjD,gBAAM,MAAM,KAAK;AACjB,mBAAS,eAAe,OAAO,QAAQ,OAAO,EAAE,QAAQ,SAAS,KAAK,UAAU,MAAW;AACzF,kBAAM,YAAa,WAAW,OAAO,YAAY,YAAY,QAAQ,UAAU,OAAO,QAAQ,WAAW,WACrG,QAAQ,SACP,WAAW,CAAC;AACjB,kBAAM,SAAkC,EAAE,GAAI,UAAU,CAAC,GAAI,GAAG,UAAU;AAC1E,kBAAM,QAAS,WAAW,MAAM,MAA8B,SAAS;AACvE,kBAAM,KAAK,QAAQ,sBAAsB,KAAK,IAAI;AAClD,gBAAI,CAAC,IAAI;AACP,qBAAO,EAAE,IAAI,OAAO,UAAU,SAAS,SAAS,yDAAyD;AAAA,YAC3G;AAEA,kBAAM,WAAW,qBAAqB,MAAM;AAC5C,gBAAI,SAAS,SAAS;AACpB,qBAAO,EAAE,IAAI,OAAO,UAAU,SAAS,SAAS,GAAG,SAAS,QAAQ,aAAa,SAAS,OAAO,IAAI;AAAA,YACvG;AAEA,gBAAI,SAAqB;AACzB,gBAAI,SAAS,aAAa,OAAO;AAC/B,kBAAI;AACF,sBAAM,YAAY,iBAAiB,EAAE,UAAU,SAAS,UAAU,SAAS,SAAS,SAAS,QAAQ,IAAI,OAAO,CAAC;AACjH,yBAAS,IAAI,WAAW,EAAE,WAAW,YAAY,MAAM,QAAQ,IAAI,OAAO,CAAC;AAAA,cAC7E,SAAS,KAAU;AACjB,uBAAO,EAAE,IAAI,OAAO,UAAU,SAAS,SAAS,mBAAmB,SAAS,QAAQ,eAAe,KAAK,WAAW,OAAO,GAAG,CAAC,GAAG;AAAA,cACnI;AAAA,YACF;AAEA,gBAAI;AACF,oBAAM,SAAS,MAAM,OAAO,KAAK;AAAA,gBAC/B;AAAA,gBACA,MAAM;AAAA,gBACN,gBAAgB,EAAE,SAAS,gCAAgC;AAAA,cAC7D,CAAC;AACD,kBAAI,OAAO,WAAW,UAAU;AAC9B,uBAAO,EAAE,IAAI,OAAO,UAAU,SAAS,SAAS,OAAO,SAAS,eAAe;AAAA,cACjF;AACA,qBAAO;AAAA,gBACL,IAAI;AAAA,gBACJ,UAAU;AAAA,gBACV,SAAS,oBAAoB,gBAAgB,EAAE,CAAC,QAAQ,SAAS,QAAQ,QAAQ,OAAO,aAAa,OAAO,EAAE;AAAA,cAChH;AAAA,YACF,SAAS,KAAU;AACjB,qBAAO,EAAE,IAAI,OAAO,UAAU,SAAS,SAAS,KAAK,WAAW,OAAO,GAAG,EAAE;AAAA,YAC9E;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,iBAAiB,QAAiC,KAA0B;AAClF,QAAI,CAAC,KAAK,QAAS;AACnB,UAAM,WAAW,qBAAqB,MAAM;AAC5C,QAAI,SAAS,SAAS;AACpB,UAAI,OAAO;AAAA,QACT,+BAA+B,SAAS,QAAQ,kBAAkB,SAAS,OAAO;AAAA,MACpF;AACA;AAAA,IACF;AACA,QAAI,SAAS,aAAa,OAAO;AAG/B,UAAI,OAAO,aAAa,OAAO;AAC7B,aAAK,QAAQ,aAAa,IAAI,gBAAgB,IAAI,MAAM,GAAG,KAAK;AAChE,YAAI,OAAO,KAAK,8EAA8E;AAAA,MAChG;AACA;AAAA,IACF;AACA,QAAI;AACF,YAAM,YAAY,iBAAiB,EAAE,UAAU,SAAS,UAAU,SAAS,SAAS,SAAS,QAAQ,IAAI,OAAO,CAAC;AACjH,WAAK,QAAQ,aAAa,WAAW,IAAI;AACzC,UAAI,OAAO,KAAK,+DAA+D,SAAS,QAAQ,IAAI;AAAA,IACtG,SAAS,KAAU;AACjB,UAAI,OAAO,KAAK,qDAAqD,KAAK,WAAW,IAAI;AAAA,IAC3F;AAAA,EACF;AACF;","names":[]}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@objectstack/service-sms",
+  "version": "14.5.0",
+  "license": "Apache-2.0",
+  "description": "SMS service for ObjectStack — ISmsService + transport-pluggable outbound delivery (Aliyun / Twilio / log).",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "@objectstack/core": "14.5.0",
+    "@objectstack/spec": "14.5.0"
+  },
+  "devDependencies": {
+    "@types/node": "^26.1.0",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.10"
+  },
+  "keywords": [
+    "objectstack",
+    "plugin",
+    "sms",
+    "aliyun",
+    "twilio"
+  ],
+  "scripts": {
+    "build": "tsup --config ../../../tsup.config.ts",
+    "test": "vitest run --passWithNoTests"
+  }
+}

package/src/index.ts

@@ -0,0 +1,19 @@
+// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
+
+export {
+  SmsService,
+  LogSmsTransport,
+  maskPhoneNumber,
+  normalizeSmsRecipient,
+  type SmsServiceOptions,
+} from './sms-service.js';
+export { SmsServicePlugin, type SmsServicePluginOptions } from './sms-plugin.js';
+export {
+  makeSmsTransport,
+  AliyunSmsTransport,
+  TwilioSmsTransport,
+  type SmsProviderTag,
+  type MakeSmsTransportOptions,
+  type AliyunSmsTransportOptions,
+  type TwilioSmsTransportOptions,
+} from './transports/index.js';