@pattern-js/mod-email 0.3.0-main.4a77893

package/dist/service.js

@@ -0,0 +1,156 @@
+/**
+ * @pattern-js/mod-email — the contract surface.
+ *
+ * Driver mods (mod-email-resend, mod-email-smtp, …) register an
+ * `EmailDriverSpec` here in their `ready()` (all setups run before any ready,
+ * so the service always exists by then — mirroring how login methods register
+ * on mod-identity). `send` resolves the account by NAME at send time: sourced
+ * secrets (vault/env), markdown → html+text, attachments → bytes, then the
+ * driver. Secret VALUES never sit in workflow values or persisted config.
+ */
+import { renderEmailMarkdown } from "./markdown.js";
+import { DEFAULT_ACCOUNT } from "./config.js";
+import { blobStore, vaultLike } from "./well-known.js";
+export class DefaultEmailService {
+    config;
+    registry = new Map();
+    constructor(config) {
+        this.config = config;
+    }
+    registerDriver(spec) {
+        this.registry.set(spec.id, spec);
+    }
+    drivers() {
+        return [...this.registry.values()].map(({ send: _send, ...info }) => info);
+    }
+    driver(id) {
+        return this.registry.get(id);
+    }
+    async send(input, ctx) {
+        const name = typeof input.account === "string" ? input.account : (input.account?.account ?? DEFAULT_ACCOUNT);
+        const account = this.config.account(name);
+        if (!account) {
+            throw new Error(`mod-email: no account "${name}" is configured — add it in admin → System → Email.`);
+        }
+        return this.sendVia(account, input, ctx);
+    }
+    async testAccount(draft, to, ctx) {
+        try {
+            const { messageId } = await this.sendVia(draft, {
+                to,
+                subject: "Pattern test email",
+                markdown: `# It works\n\nThis is a test email from your Pattern admin — the ` +
+                    `"${draft.name}" account (${draft.provider}) delivered it.`,
+            }, ctx);
+            return { ok: true, messageId };
+        }
+        catch (err) {
+            return { ok: false, detail: err instanceof Error ? err.message : String(err) };
+        }
+    }
+    /* ── internals ─────────────────────────────────────────────────────── */
+    async sendVia(account, input, ctx) {
+        const driver = this.registry.get(account.provider);
+        if (!driver) {
+            throw new Error(`mod-email: account "${account.name}" uses provider "${account.provider}" but no such driver is registered — ` +
+                `install its mod (e.g. @pattern-js/mod-email-${account.provider}) and list it in pattern.config.json.`);
+        }
+        const creds = await this.resolveSecrets(driver, account, ctx);
+        const message = await this.normalize(input, account, ctx);
+        const { messageId } = await driver.send(message, creds, account.options, ctx);
+        return { messageId, provider: account.provider, account: account.name };
+    }
+    /** Resolve every sourced secret the account carries; enforce the driver's required fields. */
+    async resolveSecrets(driver, account, ctx) {
+        for (const field of driver.secrets.filter((s) => s.required !== false)) {
+            if (!account.secrets[field.field]) {
+                throw new Error(`mod-email: account "${account.name}" is missing the "${field.field}" secret its ${driver.label} driver requires.`);
+            }
+        }
+        const creds = {};
+        for (const [field, ref] of Object.entries(account.secrets)) {
+            creds[field] = await this.resolveSourced(ctx, ref);
+        }
+        return creds;
+    }
+    async resolveSourced(ctx, ref) {
+        if (ref.source === "env") {
+            const v = ctx.env[ref.key];
+            if (v)
+                return v;
+            throw new Error(`mod-email: env var "${ref.key}" is not set.`);
+        }
+        const vault = vaultLike(ctx);
+        if (vault?.unlocked() && (await vault.has(ref.key).catch(() => false)))
+            return vault.read(ref.key);
+        throw new Error(`mod-email: no vault secret "${ref.key}" — add it in admin → System → Secrets (vault must be unlocked).`);
+    }
+    /** to/cc/bcc listed, bodies final (explicit html/text win over markdown per part), attachments as bytes. */
+    async normalize(input, account, ctx) {
+        const list = (v) => v === undefined ? undefined : (Array.isArray(v) ? v : [v]).filter((s) => s.trim().length > 0);
+        const to = list(input.to) ?? [];
+        if (!to.length)
+            throw new Error("mod-email: `to` must name at least one recipient.");
+        let html = input.html;
+        let text = input.text;
+        if (input.markdown !== undefined) {
+            const rendered = renderEmailMarkdown(input.markdown);
+            html ??= rendered.html;
+            text ??= rendered.text;
+        }
+        if (html === undefined && text === undefined) {
+            throw new Error("mod-email: provide a body — `markdown`, `html`, or `text`.");
+        }
+        const attachments = input.attachments?.length
+            ? await Promise.all(input.attachments.map((a, i) => this.resolveAttachment(a, i, ctx)))
+            : undefined;
+        return {
+            from: input.from ?? account.from,
+            to,
+            cc: list(input.cc),
+            bcc: list(input.bcc),
+            replyTo: input.replyTo,
+            subject: input.subject,
+            html,
+            text,
+            attachments,
+        };
+    }
+    async resolveAttachment(a, index, ctx) {
+        if ("blobId" in a) {
+            const hit = await blobStore(ctx).blobs.get(a.blobId);
+            if (!hit)
+                throw new Error(`mod-email: no blob "${a.blobId}" behind the attachment reference.`);
+            const mime = a.mime ?? hit.meta.mime ?? "application/octet-stream";
+            return {
+                filename: a.filename ?? defaultFilename(index, mime),
+                content: new Uint8Array(await new Response(hit.stream).arrayBuffer()),
+                mime,
+            };
+        }
+        if ("bytes" in a) {
+            return { filename: a.filename ?? defaultFilename(index, a.mime), content: a.bytes, mime: a.mime };
+        }
+        const isText = typeof a.content === "string";
+        return {
+            filename: a.filename,
+            content: isText ? new TextEncoder().encode(a.content) : a.content,
+            mime: a.mime ?? (isText ? "text/plain" : "application/octet-stream"),
+        };
+    }
+}
+const EXT = {
+    "image/png": ".png",
+    "image/jpeg": ".jpg",
+    "image/webp": ".webp",
+    "image/gif": ".gif",
+    "audio/mpeg": ".mp3",
+    "audio/wav": ".wav",
+    "video/mp4": ".mp4",
+    "application/pdf": ".pdf",
+    "text/plain": ".txt",
+};
+function defaultFilename(index, mime) {
+    return `attachment-${index + 1}${EXT[mime.split(";")[0].trim()] ?? ""}`;
+}
+//# sourceMappingURL=service.js.map

package/dist/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,eAAe,EAA2B,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAmCvD,MAAM,OAAO,mBAAmB;IAGD;IAFZ,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE/D,YAA6B,MAA0B;QAA1B,WAAM,GAAN,MAAM,CAAoB;IAAG,CAAC;IAE3D,cAAc,CAAC,IAAqB;QAClC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAgB,EAAE,GAAc;QACzC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,IAAI,eAAe,CAAC,CAAC;QAC7G,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,qDAAqD,CAAC,CAAC;QACvG,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAmB,EAAE,EAAU,EAAE,GAAc;QAC/D,IAAI,CAAC;YACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CACtC,KAAK,EACL;gBACE,EAAE;gBACF,OAAO,EAAE,oBAAoB;gBAC7B,QAAQ,EACN,mEAAmE;oBACnE,IAAI,KAAK,CAAC,IAAI,cAAc,KAAK,CAAC,QAAQ,iBAAiB;aAC9D,EACD,GAAG,CACJ,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACjF,CAAC;IACH,CAAC;IAED,0EAA0E;IAElE,KAAK,CAAC,OAAO,CAAC,OAAqB,EAAE,KAAgB,EAAE,GAAc;QAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,uBAAuB,OAAO,CAAC,IAAI,oBAAoB,OAAO,CAAC,QAAQ,uCAAuC;gBAC5G,+CAA+C,OAAO,CAAC,QAAQ,uCAAuC,CACzG,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9E,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1E,CAAC;IAED,8FAA8F;IACtF,KAAK,CAAC,cAAc,CAC1B,MAAuB,EACvB,OAAqB,EACrB,GAAc;QAEd,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CACb,uBAAuB,OAAO,CAAC,IAAI,qBAAqB,KAAK,CAAC,KAAK,gBAAgB,MAAM,CAAC,KAAK,mBAAmB,CACnH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,GAAc,EAAE,GAAc;QACzD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC;gBAAE,OAAO,CAAC,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnG,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,GAAG,kEAAkE,CAAC,CAAC;IAC5H,CAAC;IAED,4GAA4G;IACpG,KAAK,CAAC,SAAS,CAAC,KAAgB,EAAE,OAAqB,EAAE,GAAc;QAC7E,MAAM,IAAI,GAAG,CAAC,CAAgC,EAAwB,EAAE,CACtE,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEhG,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,EAAE,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAErF,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACtB,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACtB,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrD,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;YACvB,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,EAAE,MAAM;YAC3C,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACvF,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;YAChC,EAAE;YACF,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI;YACJ,IAAI;YACJ,WAAW;SACZ,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,CAAkB,EAAE,KAAa,EAAE,GAAc;QAC/E,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACrD,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,MAAM,oCAAoC,CAAC,CAAC;YAC/F,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,0BAA0B,CAAC;YACnE,OAAO;gBACL,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC;gBACpD,OAAO,EAAE,IAAI,UAAU,CAAC,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;gBACrE,IAAI;aACL,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACjB,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpG,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC;QAC7C,OAAO;YACL,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAiB,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,OAAsB;YAC3F,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,0BAA0B,CAAC;SACrE,CAAC;IACJ,CAAC;CACF;AAED,MAAM,GAAG,GAA2B;IAClC,WAAW,EAAE,MAAM;IACnB,YAAY,EAAE,MAAM;IACpB,YAAY,EAAE,OAAO;IACrB,WAAW,EAAE,MAAM;IACnB,YAAY,EAAE,MAAM;IACpB,WAAW,EAAE,MAAM;IACnB,WAAW,EAAE,MAAM;IACnB,iBAAiB,EAAE,MAAM;IACzB,YAAY,EAAE,MAAM;CACrB,CAAC;AAEF,SAAS,eAAe,CAAC,KAAa,EAAE,IAAY;IAClD,OAAO,cAAc,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;AAC3E,CAAC"}

package/dist/settings.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @pattern-js/mod-email — the control-plane ops + admin routes behind the
+ * Email page.
+ *
+ * One persisted concept (see config.ts): ACCOUNTS — memorable names, each a
+ * fully self-contained sender (driver + from + sourced secrets + options).
+ * Credentials themselves live in mod-vault's Secrets screen (or env vars);
+ * here we list the REGISTERED drivers + their field specs, manage accounts,
+ * and test one. All admin-scoped. One deliberate divergence from mod-ai's
+ * alias test: `email.account.test` performs a REAL send to an operator-supplied
+ * address — for email, end-to-end delivery is the only check that means
+ * anything.
+ */
+import { type FrontendContribution, type OpDefinition, type Workflow } from "@pattern-js/core";
+export declare const settingsOps: OpDefinition[];
+export declare function emailAdminRoutes(): Workflow[];
+export declare function emailFrontend(): FrontendContribution;
+//# sourceMappingURL=settings.d.ts.map

package/dist/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAOL,KAAK,oBAAoB,EAEzB,KAAK,YAAY,EACjB,KAAK,QAAQ,EACd,MAAM,kBAAkB,CAAC;AAmG1B,eAAO,MAAM,WAAW,EAAE,YAAY,EAA8E,CAAC;AAIrH,wBAAgB,gBAAgB,IAAI,QAAQ,EAAE,CAU7C;AAED,wBAAgB,aAAa,IAAI,oBAAoB,CAMpD"}

package/dist/settings.js

@@ -0,0 +1,122 @@
+/**
+ * @pattern-js/mod-email — the control-plane ops + admin routes behind the
+ * Email page.
+ *
+ * One persisted concept (see config.ts): ACCOUNTS — memorable names, each a
+ * fully self-contained sender (driver + from + sourced secrets + options).
+ * Credentials themselves live in mod-vault's Secrets screen (or env vars);
+ * here we list the REGISTERED drivers + their field specs, manage accounts,
+ * and test one. All admin-scoped. One deliberate divergence from mod-ai's
+ * alias test: `email.account.test` performs a REAL send to an operator-supplied
+ * address — for email, end-to-end delivery is the only check that means
+ * anything.
+ */
+import { fromBody, fromParams, httpEndpoint, required, value, z, } from "@pattern-js/core";
+import { accountSchema } from "./types.js";
+import { emailConfig, emailService, maybe } from "./ops/shared.js";
+import { REMOTE } from "./app.js";
+// ───────────────────────────── Providers ──────────────────────────────
+const providersList = {
+    type: "email.providers.list",
+    title: "email.providers.list",
+    description: "List the registered email drivers + their secret/option field specs (drives the account form).",
+    reusable: false,
+    config: z.object({}),
+    inputs: {},
+    outputs: { providers: value() },
+    execute: (ctx) => ({ providers: emailService(ctx).drivers() }),
+};
+// ────────────────────────────── Accounts ──────────────────────────────
+const accountFields = {
+    name: required(z.string()),
+    provider: required(z.string()),
+    from: required(z.string()),
+    secrets: value(z.record(z.string(), z.record(z.string(), z.string()))),
+    options: value(z.record(z.string(), z.string())),
+};
+async function readAccountFields(ctx) {
+    const [name, provider, from, secrets, options] = await Promise.all([
+        ctx.input.value("name"),
+        ctx.input.value("provider"),
+        ctx.input.value("from"),
+        maybe(ctx, "secrets"),
+        maybe(ctx, "options"),
+    ]);
+    return accountSchema.parse({ name, provider, from, secrets: secrets ?? {}, options: options ?? {} });
+}
+const accountsRead = {
+    type: "email.accounts.read",
+    title: "email.accounts.read",
+    description: "List the configured email accounts (secret NAMES/sources only, never values).",
+    reusable: false,
+    sensitivity: "privileged",
+    config: z.object({}),
+    inputs: {},
+    outputs: { accounts: value() },
+    execute: (ctx) => ({ accounts: emailConfig(ctx).accounts() }),
+};
+const accountsWrite = {
+    type: "email.accounts.write",
+    title: "email.accounts.write",
+    description: "Create or update an email account (upsert by name).",
+    reusable: false,
+    sensitivity: "privileged",
+    config: z.object({}),
+    inputs: accountFields,
+    outputs: { result: value() },
+    execute: async (ctx) => {
+        const account = await readAccountFields(ctx);
+        await emailConfig(ctx).upsertAccount(account);
+        return { result: { ok: true, name: account.name } };
+    },
+};
+const accountsDelete = {
+    type: "email.accounts.delete",
+    title: "email.accounts.delete",
+    description: "Delete an email account by name.",
+    reusable: false,
+    sensitivity: "privileged",
+    config: z.object({}),
+    inputs: { name: required(z.string()) },
+    outputs: { result: value() },
+    execute: async (ctx) => {
+        await emailConfig(ctx).deleteAccount(await ctx.input.value("name"));
+        return { result: { ok: true } };
+    },
+};
+const accountTest = {
+    type: "email.account.test",
+    title: "email.account.test",
+    description: "Test an account draft by sending a REAL canned email to `to` — the only check that proves " +
+        "end-to-end delivery. Reports { ok, detail?, messageId? }.",
+    reusable: false,
+    sensitivity: "privileged",
+    config: z.object({}),
+    inputs: { ...accountFields, to: required(z.string()) },
+    outputs: { result: value() },
+    execute: async (ctx) => {
+        const [draft, to] = await Promise.all([readAccountFields(ctx), ctx.input.value("to")]);
+        return { result: await emailService(ctx).testAccount(draft, to, ctx) };
+    },
+};
+export const settingsOps = [providersList, accountsRead, accountsWrite, accountsDelete, accountTest];
+const API = "/admin/api";
+export function emailAdminRoutes() {
+    const auth = { scopes: ["admin"] };
+    const accountIn = { name: fromBody(), provider: fromBody(), from: fromBody(), secrets: fromBody(), options: fromBody() };
+    return [
+        httpEndpoint({ id: "email.route.providers", name: `Email · GET ${API}/email/providers`, method: "GET", path: `${API}/email/providers`, op: "email.providers.list", io: { out: "providers" }, auth }),
+        httpEndpoint({ id: "email.route.accounts.read", name: `Email · GET ${API}/email/accounts`, method: "GET", path: `${API}/email/accounts`, op: "email.accounts.read", io: { out: "accounts" }, auth }),
+        httpEndpoint({ id: "email.route.accounts.write", name: `Email · POST ${API}/email/accounts`, method: "POST", path: `${API}/email/accounts`, op: "email.accounts.write", io: { in: accountIn, out: "result" }, auth }),
+        httpEndpoint({ id: "email.route.accounts.delete", name: `Email · DELETE ${API}/email/accounts/:name`, method: "DELETE", path: `${API}/email/accounts/:name`, op: "email.accounts.delete", io: { in: { name: fromParams() }, out: "result" }, auth }),
+        httpEndpoint({ id: "email.route.test", name: `Email · POST ${API}/email/test`, method: "POST", path: `${API}/email/test`, op: "email.account.test", io: { in: { ...accountIn, to: fromBody() }, out: "result" }, auth }),
+    ];
+}
+export function emailFrontend() {
+    return {
+        menu: [{ category: "System", label: "Email", icon: "mail", path: "/x/email/accounts", order: 21 }],
+        // The Tier-2 page is just its source; the admin serves + imports it (no workflow).
+        pages: [{ path: "/x/email/accounts", title: "Email", module: REMOTE }],
+    };
+}
+//# sourceMappingURL=settings.js.map

package/dist/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../src/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,QAAQ,EACR,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,KAAK,EACL,CAAC,GAKF,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,yEAAyE;AAEzE,MAAM,aAAa,GAAiB;IAClC,IAAI,EAAE,sBAAsB;IAC5B,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,gGAAgG;IAC7G,QAAQ,EAAE,KAAK;IACf,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE;IAC/B,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;CAC/D,CAAC;AAEF,yEAAyE;AAEzE,MAAM,aAAa,GAAG;IACpB,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1B,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9B,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1B,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;CACjD,CAAC;AAEF,KAAK,UAAU,iBAAiB,CAAC,GAAc;IAC7C,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAS,MAAM,CAAC;QAC/B,GAAG,CAAC,KAAK,CAAC,KAAK,CAAS,UAAU,CAAC;QACnC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAS,MAAM,CAAC;QAC/B,KAAK,CAAoD,GAAG,EAAE,SAAS,CAAC;QACxE,KAAK,CAAyB,GAAG,EAAE,SAAS,CAAC;KAC9C,CAAC,CAAC;IACH,OAAO,aAAa,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,YAAY,GAAiB;IACjC,IAAI,EAAE,qBAAqB;IAC3B,KAAK,EAAE,qBAAqB;IAC5B,WAAW,EAAE,+EAA+E;IAC5F,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,YAAY;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;IAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;CAC9D,CAAC;AAEF,MAAM,aAAa,GAAiB;IAClC,IAAI,EAAE,sBAAsB;IAC5B,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EAAE,qDAAqD;IAClE,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,YAAY;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,MAAM,EAAE,aAAa;IACrB,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;IAC5B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;IACtD,CAAC;CACF,CAAC;AAEF,MAAM,cAAc,GAAiB;IACnC,IAAI,EAAE,uBAAuB;IAC7B,KAAK,EAAE,uBAAuB;IAC9B,WAAW,EAAE,kCAAkC;IAC/C,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,YAAY;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;IACtC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;IAC5B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAS,MAAM,CAAC,CAAC,CAAC;QAC5E,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;IAClC,CAAC;CACF,CAAC;AAEF,MAAM,WAAW,GAAiB;IAChC,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EACT,4FAA4F;QAC5F,2DAA2D;IAC7D,QAAQ,EAAE,KAAK;IACf,WAAW,EAAE,YAAY;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,MAAM,EAAE,EAAE,GAAG,aAAa,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;IACtD,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;IAC5B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAS,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/F,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;IACzE,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAmB,CAAC,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;AAErH,MAAM,GAAG,GAAG,YAAY,CAAC;AAEzB,MAAM,UAAU,gBAAgB;IAC9B,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;IACzH,OAAO;QACL,YAAY,CAAC,EAAE,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE,eAAe,GAAG,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,GAAG,kBAAkB,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC;QACpM,YAAY,CAAC,EAAE,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,eAAe,GAAG,iBAAiB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,GAAG,iBAAiB,EAAE,EAAE,EAAE,qBAAqB,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC;QACpM,YAAY,CAAC,EAAE,EAAE,EAAE,4BAA4B,EAAE,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,iBAAiB,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;QACrN,YAAY,CAAC,EAAE,EAAE,EAAE,6BAA6B,EAAE,IAAI,EAAE,kBAAkB,GAAG,uBAAuB,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,GAAG,uBAAuB,EAAE,EAAE,EAAE,uBAAuB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;QACpP,YAAY,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,gBAAgB,GAAG,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,aAAa,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;KACzN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAClG,mFAAmF;QACnF,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,133 @@
+/**
+ * @pattern-js/mod-email — value shapes shared across the mod and its drivers.
+ *
+ * The persisted unit is an **account** — a memorable name ("default") bound to
+ * a driver id, a From address, sourced secrets, and driver options. Two
+ * accounts of the same provider with different credentials are just two
+ * records. What flows on edges is an `EmailAccountRef` (the NAME, never the
+ * secrets) — re-pointing an account in admin re-targets every workflow.
+ */
+import { z } from "@pattern-js/core";
+import type { OpContext } from "@pattern-js/core";
+export declare const secretRefSchema: z.ZodObject<{
+    source: z.ZodDefault<z.ZodEnum<{
+        vault: "vault";
+        env: "env";
+    }>>;
+    key: z.ZodString;
+}, z.core.$strip>;
+export type SecretRef = z.infer<typeof secretRefSchema>;
+export declare const accountSchema: z.ZodObject<{
+    name: z.ZodString;
+    provider: z.ZodString;
+    from: z.ZodString;
+    secrets: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        source: z.ZodDefault<z.ZodEnum<{
+            vault: "vault";
+            env: "env";
+        }>>;
+        key: z.ZodString;
+    }, z.core.$strip>>>;
+    options: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>;
+export type EmailAccount = z.infer<typeof accountSchema>;
+/** What flows on edges: the account NAME; secrets resolve at send time. */
+export declare const accountRefSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"emailAccount">;
+    account: z.ZodString;
+    provider: z.ZodString;
+}, z.core.$strip>;
+export type EmailAccountRef = z.infer<typeof accountRefSchema>;
+/** In-memory media, the shape mod-ai's generation ops output. */
+export declare const mediaAttachmentSchema: z.ZodObject<{
+    bytes: z.ZodCustom<Uint8Array<ArrayBufferLike>, Uint8Array<ArrayBufferLike>>;
+    mime: z.ZodString;
+    kind: z.ZodOptional<z.ZodString>;
+    filename: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** A pointer into the blob store (mod-store), the shape `store.blob.put` returns. */
+export declare const mediaRefAttachmentSchema: z.ZodObject<{
+    blobId: z.ZodString;
+    mime: z.ZodOptional<z.ZodString>;
+    filename: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** A literal file: string content is UTF-8 text. */
+export declare const literalAttachmentSchema: z.ZodObject<{
+    filename: z.ZodString;
+    content: z.ZodUnion<readonly [z.ZodString, z.ZodCustom<Uint8Array<ArrayBufferLike>, Uint8Array<ArrayBufferLike>>]>;
+    mime: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const attachmentInputSchema: z.ZodUnion<readonly [z.ZodObject<{
+    blobId: z.ZodString;
+    mime: z.ZodOptional<z.ZodString>;
+    filename: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    bytes: z.ZodCustom<Uint8Array<ArrayBufferLike>, Uint8Array<ArrayBufferLike>>;
+    mime: z.ZodString;
+    kind: z.ZodOptional<z.ZodString>;
+    filename: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    filename: z.ZodString;
+    content: z.ZodUnion<readonly [z.ZodString, z.ZodCustom<Uint8Array<ArrayBufferLike>, Uint8Array<ArrayBufferLike>>]>;
+    mime: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>]>;
+export type AttachmentInput = z.infer<typeof attachmentInputSchema>;
+/** What drivers receive: every attachment resolved to named bytes. */
+export interface EmailAttachment {
+    filename: string;
+    content: Uint8Array;
+    mime: string;
+}
+/** The message a driver's `send` receives — recipients listed, bodies final. */
+export interface EmailMessage {
+    from: string;
+    to: string[];
+    cc?: string[];
+    bcc?: string[];
+    replyTo?: string;
+    subject: string;
+    html?: string;
+    text?: string;
+    attachments?: EmailAttachment[];
+}
+/**
+ * A driver, registered by a provider mod (`mod-email-resend`, `mod-email-smtp`,
+ * …) via `EmailService.registerDriver` in its `ready()`. The `secrets`/`options`
+ * field lists drive the auto-generated account form in admin → System → Email.
+ * (Field descriptors use `field` for the key — this mod's admin page is new
+ * code, so it doesn't inherit mod-ai's `name` naming for the same idea.)
+ */
+export interface EmailDriverSpec {
+    id: string;
+    label: string;
+    secrets: Array<{
+        field: string;
+        label: string;
+        required?: boolean;
+    }>;
+    options: Array<{
+        field: string;
+        label: string;
+        required?: boolean;
+        placeholder?: string;
+    }>;
+    send(message: EmailMessage, creds: Record<string, string>, options: Record<string, string>, ctx: OpContext): Promise<{
+        messageId?: string;
+    }>;
+}
+/** The serializable driver catalog (what `email.providers.list` returns). */
+export type EmailDriverInfo = Omit<EmailDriverSpec, "send">;
+export interface SendInput {
+    account?: EmailAccountRef | string;
+    to: string | string[];
+    cc?: string | string[];
+    bcc?: string | string[];
+    replyTo?: string;
+    from?: string;
+    subject: string;
+    markdown?: string;
+    html?: string;
+    text?: string;
+    attachments?: AttachmentInput[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,kBAAkB,CAAC;AACrC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAIlD,eAAO,MAAM,eAAe;;;;;;iBAI1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAIxD,eAAO,MAAM,aAAa;;;;;;;;;;;;iBAWxB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEzD,2EAA2E;AAC3E,eAAO,MAAM,gBAAgB;;;;iBAK3B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAM/D,iEAAiE;AACjE,eAAO,MAAM,qBAAqB;;;;;iBAKhC,CAAC;AAEH,qFAAqF;AACrF,eAAO,MAAM,wBAAwB;;;;iBAInC,CAAC;AAEH,oDAAoD;AACpD,eAAO,MAAM,uBAAuB;;;;iBAIlC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;mBAIhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,UAAU,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAID,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,EAAE,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;CACjC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACrE,OAAO,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3F,IAAI,CACF,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,GAAG,EAAE,SAAS,GACb,OAAO,CAAC;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpC;AAED,6EAA6E;AAC7E,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;AAI5D,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,EAAE,eAAe,GAAG,MAAM,CAAC;IACnC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;CACjC"}

package/dist/types.js

@@ -0,0 +1,63 @@
+/**
+ * @pattern-js/mod-email — value shapes shared across the mod and its drivers.
+ *
+ * The persisted unit is an **account** — a memorable name ("default") bound to
+ * a driver id, a From address, sourced secrets, and driver options. Two
+ * accounts of the same provider with different credentials are just two
+ * records. What flows on edges is an `EmailAccountRef` (the NAME, never the
+ * secrets) — re-pointing an account in admin re-targets every workflow.
+ */
+import { z } from "@pattern-js/core";
+/* ── sourced secrets (same scheme as mod-ai; candidate for a core hoist) ── */
+export const secretRefSchema = z.object({
+    source: z.enum(["vault", "env"]).default("vault"),
+    /** The vault secret name or the env-var name (never the value). */
+    key: z.string(),
+});
+/* ── accounts ─────────────────────────────────────────────────────────── */
+export const accountSchema = z.object({
+    /** "default" is the convention the delivery workflow and agents fall back to. */
+    name: z.string().min(1),
+    /** Driver id: "resend", "smtp", … (registered by a driver mod). */
+    provider: z.string().min(1),
+    /** Default From — `App <hello@example.com>` (the email analog of modelId). */
+    from: z.string().min(1),
+    /** field → where its value lives (vault secret or env var), never the value. */
+    secrets: z.record(z.string(), secretRefSchema).default({}),
+    /** Driver options: host/port/baseUrl/… — see each driver's declared fields. */
+    options: z.record(z.string(), z.string()).default({}),
+});
+/** What flows on edges: the account NAME; secrets resolve at send time. */
+export const accountRefSchema = z.object({
+    kind: z.literal("emailAccount"),
+    account: z.string(),
+    /** Display/validation only — the persisted record is the source of truth. */
+    provider: z.string(),
+});
+/* ── attachments (the three accepted input shapes) ────────────────────── */
+const bytesSchema = z.custom((v) => v instanceof Uint8Array);
+/** In-memory media, the shape mod-ai's generation ops output. */
+export const mediaAttachmentSchema = z.object({
+    bytes: bytesSchema,
+    mime: z.string(),
+    kind: z.string().optional(),
+    filename: z.string().optional(),
+});
+/** A pointer into the blob store (mod-store), the shape `store.blob.put` returns. */
+export const mediaRefAttachmentSchema = z.object({
+    blobId: z.string(),
+    mime: z.string().optional(),
+    filename: z.string().optional(),
+});
+/** A literal file: string content is UTF-8 text. */
+export const literalAttachmentSchema = z.object({
+    filename: z.string(),
+    content: z.union([z.string(), bytesSchema]),
+    mime: z.string().optional(),
+});
+export const attachmentInputSchema = z.union([
+    mediaRefAttachmentSchema,
+    mediaAttachmentSchema,
+    literalAttachmentSchema,
+]);
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,kBAAkB,CAAC;AAGrC,+EAA+E;AAE/E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACjD,mEAAmE;IACnE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;CAChB,CAAC,CAAC;AAGH,6EAA6E;AAE7E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,iFAAiF;IACjF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,mEAAmE;IACnE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,8EAA8E;IAC9E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,gFAAgF;IAChF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,+EAA+E;IAC/E,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACtD,CAAC,CAAC;AAGH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,6EAA6E;IAC7E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC;AAGH,6EAA6E;AAE7E,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,UAAU,CAAC,CAAC;AAEzE,iEAAiE;AACjE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,qFAAqF;AACrF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,oDAAoD;AACpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC3C,wBAAwB;IACxB,qBAAqB;IACrB,uBAAuB;CACxB,CAAC,CAAC"}

package/dist/well-known.d.ts

@@ -0,0 +1,34 @@
+/**
+ * @pattern-js/mod-email — service keys + duck-typed views of sibling mods.
+ *
+ * mod-vault (secrets) and mod-store (blob attachments) are looked up by their
+ * well-known service keys, never imported — mod-email has no hard dependency
+ * on either. (The VaultLike/BlobStoreLike shapes mirror mod-ai's copies; a
+ * future hoist to core would collapse the three.)
+ */
+import type { OpContext } from "@pattern-js/core";
+/** Driver registry + account-resolving send/test (the contract surface). */
+export declare const EMAIL_SERVICE = "emailService";
+/** Persisted email accounts (.pattern-data/email-config.json). */
+export declare const EMAIL_CONFIG_SERVICE = "emailConfig";
+export declare const VAULT_SERVICE_KEY = "vaultService";
+export interface VaultLike {
+    unlocked(): boolean;
+    has(name: string): Promise<boolean>;
+    read(name: string): Promise<string>;
+}
+export declare function vaultLike(ctx: OpContext): VaultLike | undefined;
+export declare const STORE_SERVICE_KEY = "storeService";
+export interface BlobStoreLike {
+    blobs: {
+        get(id: string): Promise<{
+            meta: {
+                mime: string;
+            };
+            stream: ReadableStream<Uint8Array>;
+        } | null>;
+    };
+}
+/** Only reached when a MediaRef attachment is wired — hence the lazy throw. */
+export declare function blobStore(ctx: OpContext): BlobStoreLike;
+//# sourceMappingURL=well-known.d.ts.map

package/dist/well-known.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"well-known.d.ts","sourceRoot":"","sources":["../src/well-known.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,4EAA4E;AAC5E,eAAO,MAAM,aAAa,iBAAiB,CAAC;AAC5C,kEAAkE;AAClE,eAAO,MAAM,oBAAoB,gBAAgB,CAAC;AAIlD,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAEhD,MAAM,WAAW,SAAS;IACxB,QAAQ,IAAI,OAAO,CAAC;IACpB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACrC;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAE/D;AAID,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAEhD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE;QACL,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,IAAI,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CAAC;YAAC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,CAAA;SAAE,GAAG,IAAI,CAAC,CAAC;KACjG,CAAC;CACH;AAED,+EAA+E;AAC/E,wBAAgB,SAAS,CAAC,GAAG,EAAE,SAAS,GAAG,aAAa,CAQvD"}

package/dist/well-known.js

@@ -0,0 +1,28 @@
+/**
+ * @pattern-js/mod-email — service keys + duck-typed views of sibling mods.
+ *
+ * mod-vault (secrets) and mod-store (blob attachments) are looked up by their
+ * well-known service keys, never imported — mod-email has no hard dependency
+ * on either. (The VaultLike/BlobStoreLike shapes mirror mod-ai's copies; a
+ * future hoist to core would collapse the three.)
+ */
+/** Driver registry + account-resolving send/test (the contract surface). */
+export const EMAIL_SERVICE = "emailService";
+/** Persisted email accounts (.pattern-data/email-config.json). */
+export const EMAIL_CONFIG_SERVICE = "emailConfig";
+/* ── vault (secrets) ───────────────────────────────────────────────────── */
+export const VAULT_SERVICE_KEY = "vaultService";
+export function vaultLike(ctx) {
+    return ctx.services[VAULT_SERVICE_KEY];
+}
+/* ── store (blob attachments) ──────────────────────────────────────────── */
+export const STORE_SERVICE_KEY = "storeService";
+/** Only reached when a MediaRef attachment is wired — hence the lazy throw. */
+export function blobStore(ctx) {
+    const svc = ctx.services[STORE_SERVICE_KEY];
+    if (!svc) {
+        throw new Error("mod-email: attaching a blob reference ({blobId}) needs @pattern-js/mod-store installed — its blob store holds the bytes.");
+    }
+    return svc;
+}
+//# sourceMappingURL=well-known.js.map

package/dist/well-known.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"well-known.js","sourceRoot":"","sources":["../src/well-known.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,aAAa,GAAG,cAAc,CAAC;AAC5C,kEAAkE;AAClE,MAAM,CAAC,MAAM,oBAAoB,GAAG,aAAa,CAAC;AAElD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAQhD,MAAM,UAAU,SAAS,CAAC,GAAc;IACtC,OAAO,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAA0B,CAAC;AAClE,CAAC;AAED,8EAA8E;AAE9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAQhD,+EAA+E;AAC/E,MAAM,UAAU,SAAS,CAAC,GAAc;IACtC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAA8B,CAAC;IACzE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,0HAA0H,CAC3H,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}