@serve.zone/coremail 1.0.0

package/dist_ts/classes.transfer.js

@@ -0,0 +1,289 @@
+import * as plugins from './plugins.js';
+import {} from './classes.models.js';
+import { CoreMailStorage, createOpaqueToken, createSha256, } from './classes.storage.js';
+import { logCoreMailFailure } from './coremail.log.js';
+import { requireCoreMailIdentifier, requireCoreMailUuid, } from './coremail.selectors.js';
+const transferPathRegex = /^\/transfers\/([a-f0-9-]{36})$/;
+const maximumBytesForPurpose = (purposeArg) => {
+    const limits = plugins.serveZoneInterfaces.data.coreMailLimits;
+    switch (purposeArg) {
+        case 'desired-state-upload':
+            return limits.desiredStateBytes;
+        case 'outbound-part-upload':
+            return limits.attachmentBytes;
+        case 'outbound-mime-download':
+        case 'inbound-mime-upload':
+        case 'inbound-mime-download':
+            return limits.serializedMimeBytes;
+    }
+};
+const secureDigestEqual = (leftArg, rightArg) => {
+    const left = Buffer.from(leftArg.slice('sha256:'.length), 'hex');
+    const right = Buffer.from(rightArg.slice('sha256:'.length), 'hex');
+    return left.byteLength === right.byteLength
+        && plugins.nodeCrypto.timingSafeEqual(left, right);
+};
+const authorityFilter = (grantIdArg, authorityArg) => ({
+    grantId: requireCoreMailUuid(grantIdArg, 'grantId'),
+    authorityKind: authorityArg.kind,
+    tenantId: authorityArg.tenantId === '-'
+        ? '-'
+        : requireCoreMailIdentifier(authorityArg.tenantId, 'authority.tenantId'),
+    serviceId: requireCoreMailIdentifier(authorityArg.serviceId, 'authority.serviceId'),
+    bindingId: authorityArg.bindingId === '-'
+        ? '-'
+        : requireCoreMailIdentifier(authorityArg.bindingId, 'authority.bindingId'),
+});
+export class CoreMailTransferService {
+    models;
+    storage;
+    now;
+    completionTasks = new Set();
+    operationControllers = new Set();
+    stopController = new AbortController();
+    stopping = false;
+    constructor(models, storage, now = Date.now) {
+        this.models = models;
+        this.storage = storage;
+        this.now = now;
+    }
+    async stop() {
+        this.stopping = true;
+        this.stopController.abort(new Error('CoreMail transfer service is stopping.'));
+        for (const controller of this.operationControllers) {
+            controller.abort(new Error('CoreMail transfer service is stopping.'));
+        }
+        await Promise.allSettled([...this.completionTasks]);
+    }
+    track(taskArg, controllerArg) {
+        this.completionTasks.add(taskArg);
+        this.operationControllers.add(controllerArg);
+        void taskArg.then(() => {
+            this.completionTasks.delete(taskArg);
+            this.operationControllers.delete(controllerArg);
+        }, () => {
+            this.completionTasks.delete(taskArg);
+            this.operationControllers.delete(controllerArg);
+        });
+    }
+    async issueGrant(optionsArg) {
+        if (this.stopping) {
+            throw new Error('CoreMail transfer service is stopping.');
+        }
+        const maximumBytes = maximumBytesForPurpose(optionsArg.purpose);
+        if (!Number.isSafeInteger(optionsArg.lengthBytes)
+            || optionsArg.lengthBytes < 0
+            || optionsArg.lengthBytes > maximumBytes) {
+            throw new Error('CoreMail transfer length exceeds its purpose budget.');
+        }
+        const grantId = plugins.nodeCrypto.randomUUID();
+        const bearerToken = createOpaqueToken();
+        const path = `/transfers/${grantId}`;
+        const createdAt = this.now();
+        const expiresAt = createdAt + plugins.serveZoneInterfaces.data.coreMailLimits.transferGrantTtlMs;
+        const inserted = await this.models.TransferGrant.exact.insert({
+            grantId,
+            authorityKind: optionsArg.authority.kind,
+            tenantId: optionsArg.authority.tenantId,
+            serviceId: optionsArg.authority.serviceId,
+            bindingId: optionsArg.authority.bindingId,
+            purpose: optionsArg.purpose,
+            method: optionsArg.method,
+            path,
+            bearerSha256: createSha256(bearerToken),
+            expectedSha256: optionsArg.expectedSha256,
+            lengthBytes: optionsArg.lengthBytes,
+            contentType: optionsArg.contentType,
+            objectKey: optionsArg.objectKey,
+            state: 'issued',
+            expiresAt,
+            createdAt,
+        });
+        if (inserted.status === 'conflict') {
+            throw new Error('CoreMail transfer grant identity conflict.');
+        }
+        return {
+            grantId,
+            method: optionsArg.method,
+            path,
+            bearerToken,
+            sha256: optionsArg.expectedSha256,
+            lengthBytes: optionsArg.lengthBytes,
+            contentType: optionsArg.contentType,
+            issuedAt: createdAt,
+            expiresAt,
+        };
+    }
+    async assertConsumed(optionsArg) {
+        const grant = await this.models.TransferGrant.exact.findStoredOne({
+            ...authorityFilter(optionsArg.grantId, optionsArg.authority),
+            state: 'consumed',
+            purpose: optionsArg.purpose,
+            expectedSha256: optionsArg.expectedSha256,
+            lengthBytes: optionsArg.lengthBytes,
+            ...(optionsArg.objectKey === undefined
+                ? {}
+                : { objectKey: optionsArg.objectKey }),
+        });
+        if (!grant) {
+            throw new Error('CoreMail transfer grant is not consumed by this authority.');
+        }
+        await this.storage.verifyObject(grant.objectKey, grant.lengthBytes, grant.expectedSha256, maximumBytesForPurpose(grant.purpose));
+        return grant;
+    }
+    async handleHttp(contextArg) {
+        const match = transferPathRegex.exec(contextArg.path);
+        if (!match) {
+            return null;
+        }
+        if (contextArg.method !== 'GET' && contextArg.method !== 'PUT') {
+            return new Response('Method Not Allowed', {
+                status: 405,
+                headers: { Allow: 'GET, PUT' },
+            });
+        }
+        const authorization = contextArg.headers.get('authorization');
+        if (!authorization?.startsWith('Bearer ')) {
+            return new Response('Unauthorized', { status: 401 });
+        }
+        const bearer = authorization.slice('Bearer '.length);
+        if (bearer.length < 32 || bearer.length > 512) {
+            return new Response('Unauthorized', { status: 401 });
+        }
+        const grantId = match[1];
+        const grant = await this.models.TransferGrant.exact.findStoredOne({
+            grantId,
+            method: contextArg.method,
+            state: 'issued',
+        });
+        if (!grant
+            || grant.expiresAt < this.now()
+            || !secureDigestEqual(grant.bearerSha256, createSha256(bearer))) {
+            return new Response('Unauthorized', { status: 401 });
+        }
+        const claim = await this.models.TransferGrant.exact.transition({
+            current: grant,
+            change: (modelArg) => {
+                modelArg.state = 'transferring';
+            },
+        });
+        if (claim.status !== 'transitioned') {
+            return new Response('Conflict', { status: 409 });
+        }
+        if (contextArg.method === 'PUT') {
+            return await this.handleUpload(contextArg, claim.document);
+        }
+        return await this.handleDownload(contextArg, claim.document);
+    }
+    async handleUpload(contextArg, grantArg) {
+        const contentLength = Number(contextArg.headers.get('content-length'));
+        if (!contextArg.request.body
+            || !Number.isSafeInteger(contentLength)
+            || contentLength !== grantArg.lengthBytes
+            || contextArg.headers.get('content-type') !== grantArg.contentType) {
+            await this.failGrant(grantArg.grantId);
+            return new Response('Invalid transfer metadata', { status: 400 });
+        }
+        const operationController = new AbortController();
+        const signal = AbortSignal.any([
+            contextArg.request.signal,
+            this.stopController.signal,
+            operationController.signal,
+            AbortSignal.timeout(plugins.serveZoneInterfaces.data.coreMailLimits.transferOverallTimeoutMs),
+        ]);
+        const task = (async () => {
+            try {
+                await this.storage.putExact(grantArg.objectKey, contextArg.request.body, grantArg.lengthBytes, grantArg.expectedSha256, grantArg.contentType, maximumBytesForPurpose(grantArg.purpose), signal);
+                const consumed = await this.models.TransferGrant.exact.transition({
+                    current: grantArg,
+                    change: (modelArg) => {
+                        modelArg.state = 'consumed';
+                        modelArg.consumedAt = this.now();
+                    },
+                });
+                if (consumed.status !== 'transitioned') {
+                    throw new Error('CoreMail transfer completion fence changed.');
+                }
+                return new Response(null, { status: 204 });
+            }
+            catch {
+                operationController.abort();
+                await this.failGrant(grantArg.grantId);
+                return new Response('Transfer failed', { status: 409 });
+            }
+        })();
+        this.track(task, operationController);
+        return await task;
+    }
+    async handleDownload(contextArg, grantArg) {
+        const operationController = new AbortController();
+        const signal = AbortSignal.any([
+            contextArg.request.signal,
+            this.stopController.signal,
+            operationController.signal,
+            AbortSignal.timeout(plugins.serveZoneInterfaces.data.coreMailLimits.transferOverallTimeoutMs),
+        ]);
+        try {
+            const verified = await this.storage.getVerifiedStream(grantArg.objectKey, grantArg.lengthBytes, grantArg.expectedSha256, maximumBytesForPurpose(grantArg.purpose), signal);
+            const completion = verified.completion.then(async () => {
+                const consumed = await this.models.TransferGrant.exact.transition({
+                    current: grantArg,
+                    change: (modelArg) => {
+                        modelArg.state = 'consumed';
+                        modelArg.consumedAt = this.now();
+                    },
+                });
+                if (consumed.status !== 'transitioned') {
+                    throw new Error('CoreMail transfer completion fence changed.');
+                }
+            }).catch(async () => {
+                await this.failGrant(grantArg.grantId);
+            });
+            this.track(completion, operationController);
+            return new Response(verified.stream, {
+                status: 200,
+                headers: {
+                    'Content-Type': grantArg.contentType,
+                    'Content-Length': String(grantArg.lengthBytes),
+                    'Cache-Control': 'no-store',
+                    'X-Content-Type-Options': 'nosniff',
+                },
+            });
+        }
+        catch {
+            operationController.abort();
+            await this.failGrant(grantArg.grantId);
+            return new Response('Transfer failed', { status: 409 });
+        }
+    }
+    async failGrant(grantIdArg) {
+        try {
+            const grant = await this.models.TransferGrant.exact.findStoredOne({
+                grantId: grantIdArg,
+                state: { $in: ['issued', 'transferring'] },
+            });
+            if (!grant) {
+                return;
+            }
+            const failed = await this.models.TransferGrant.exact.transition({
+                current: grant,
+                change: (modelArg) => {
+                    modelArg.state = 'failed';
+                },
+            });
+            if (failed.status === 'concurrent_change') {
+                const current = await this.models.TransferGrant.exact.findStoredOne({
+                    grantId: grantIdArg,
+                });
+                if (current?.state === 'issued' || current?.state === 'transferring') {
+                    throw new Error('CoreMail transfer failure fence changed.');
+                }
+            }
+        }
+        catch {
+            await logCoreMailFailure('transfer', 'GRANT_FAILURE_PERSISTENCE_FAILED')
+                .catch(() => undefined);
+        }
+    }
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2xhc3Nlcy50cmFuc2Zlci5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uL3RzL2NsYXNzZXMudHJhbnNmZXIudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsT0FBTyxLQUFLLE9BQU8sTUFBTSxjQUFjLENBQUM7QUFDeEMsT0FBTyxFQUVOLE1BQU0scUJBQXFCLENBQUM7QUFDN0IsT0FBTyxFQUNMLGVBQWUsRUFDZixpQkFBaUIsRUFDakIsWUFBWSxHQUNiLE1BQU0sc0JBQXNCLENBQUM7QUFLOUIsT0FBTyxFQUFFLGtCQUFrQixFQUFFLE1BQU0sbUJBQW1CLENBQUM7QUFFdkQsT0FBTyxFQUNMLHlCQUF5QixFQUN6QixtQkFBbUIsR0FDcEIsTUFBTSx5QkFBeUIsQ0FBQztBQU1qQyxNQUFNLGlCQUFpQixHQUFHLGdDQUFnQyxDQUFDO0FBRTNELE1BQU0sc0JBQXNCLEdBQUcsQ0FBQyxVQUFpQyxFQUFVLEVBQUU7SUFDM0UsTUFBTSxNQUFNLEdBQUcsT0FBTyxDQUFDLG1CQUFtQixDQUFDLElBQUksQ0FBQyxjQUFjLENBQUM7SUFDL0QsUUFBUSxVQUFVLEVBQUUsQ0FBQztRQUNuQixLQUFLLHNCQUFzQjtZQUN6QixPQUFPLE1BQU0sQ0FBQyxpQkFBaUIsQ0FBQztRQUNsQyxLQUFLLHNCQUFzQjtZQUN6QixPQUFPLE1BQU0sQ0FBQyxlQUFlLENBQUM7UUFDaEMsS0FBSyx3QkFBd0IsQ0FBQztRQUM5QixLQUFLLHFCQUFxQixDQUFDO1FBQzNCLEtBQUssdUJBQXVCO1lBQzFCLE9BQU8sTUFBTSxDQUFDLG1CQUFtQixDQUFDO0lBQ3RDLENBQUM7QUFDSCxDQUFDLENBQUM7QUFFRixNQUFNLGlCQUFpQixHQUFHLENBQ3hCLE9BQXdCLEVBQ3hCLFFBQXlCLEVBQ2hCLEVBQUU7SUFDWCxNQUFNLElBQUksR0FBRyxNQUFNLENBQUMsSUFBSSxDQUFDLE9BQU8sQ0FBQyxLQUFLLENBQUMsU0FBUyxDQUFDLE1BQU0sQ0FBQyxFQUFFLEtBQUssQ0FBQyxDQUFDO0lBQ2pFLE1BQU0sS0FBSyxHQUFHLE1BQU0sQ0FBQyxJQUFJLENBQUMsUUFBUSxDQUFDLEtBQUssQ0FBQyxTQUFTLENBQUMsTUFBTSxDQUFDLEVBQUUsS0FBSyxDQUFDLENBQUM7SUFDbkUsT0FBTyxJQUFJLENBQUMsVUFBVSxLQUFLLEtBQUssQ0FBQyxVQUFVO1dBQ3RDLE9BQU8sQ0FBQyxVQUFVLENBQUMsZUFBZSxDQUFDLElBQUksRUFBRSxLQUFLLENBQUMsQ0FBQztBQUN2RCxDQUFDLENBQUM7QUFFRixNQUFNLGVBQWUsR0FBRyxDQUN0QixVQUFrQixFQUNsQixZQUFnQyxFQUNoQyxFQUFFLENBQUMsQ0FBQztJQUNKLE9BQU8sRUFBRSxtQkFBbUIsQ0FBQyxVQUFVLEVBQUUsU0FBUyxDQUFDO0lBQ25ELGFBQWEsRUFBRSxZQUFZLENBQUMsSUFBSTtJQUNoQyxRQUFRLEVBQUUsWUFBWSxDQUFDLFFBQVEsS0FBSyxHQUFHO1FBQ3JDLENBQUMsQ0FBQyxHQUFHO1FBQ0wsQ0FBQyxDQUFDLHlCQUF5QixDQUFDLFlBQVksQ0FBQyxRQUFRLEVBQUUsb0JBQW9CLENBQUM7SUFDMUUsU0FBUyxFQUFFLHlCQUF5QixDQUNsQyxZQUFZLENBQUMsU0FBUyxFQUN0QixxQkFBcUIsQ0FDdEI7SUFDRCxTQUFTLEVBQUUsWUFBWSxDQUFDLFNBQVMsS0FBSyxHQUFHO1FBQ3ZDLENBQUMsQ0FBQyxHQUFHO1FBQ0wsQ0FBQyxDQUFDLHlCQUF5QixDQUFDLFlBQVksQ0FBQyxTQUFTLEVBQUUscUJBQXFCLENBQUM7Q0FDN0UsQ0FBQyxDQUFDO0FBRUgsTUFBTSxPQUFPLHVCQUF1QjtJQU9mO0lBQ0E7SUFDQTtJQVJGLGVBQWUsR0FBRyxJQUFJLEdBQUcsRUFBb0IsQ0FBQztJQUM5QyxvQkFBb0IsR0FBRyxJQUFJLEdBQUcsRUFBbUIsQ0FBQztJQUNsRCxjQUFjLEdBQUcsSUFBSSxlQUFlLEVBQUUsQ0FBQztJQUNoRCxRQUFRLEdBQUcsS0FBSyxDQUFDO0lBRXpCLFlBQ21CLE1BQXVCLEVBQ3ZCLE9BQXdCLEVBQ3hCLE1BQW9CLElBQUksQ0FBQyxHQUFHO1FBRjVCLFdBQU0sR0FBTixNQUFNLENBQWlCO1FBQ3ZCLFlBQU8sR0FBUCxPQUFPLENBQWlCO1FBQ3hCLFFBQUcsR0FBSCxHQUFHLENBQXlCO0lBQzVDLENBQUM7SUFFRyxLQUFLLENBQUMsSUFBSTtRQUNmLElBQUksQ0FBQyxRQUFRLEdBQUcsSUFBSSxDQUFDO1FBQ3JCLElBQUksQ0FBQyxjQUFjLENBQUMsS0FBSyxDQUFDLElBQUksS0FBSyxDQUFDLHdDQUF3QyxDQUFDLENBQUMsQ0FBQztRQUMvRSxLQUFLLE1BQU0sVUFBVSxJQUFJLElBQUksQ0FBQyxvQkFBb0IsRUFBRSxDQUFDO1lBQ25ELFVBQVUsQ0FBQyxLQUFLLENBQUMsSUFBSSxLQUFLLENBQUMsd0NBQXdDLENBQUMsQ0FBQyxDQUFDO1FBQ3hFLENBQUM7UUFDRCxNQUFNLE9BQU8sQ0FBQyxVQUFVLENBQUMsQ0FBQyxHQUFHLElBQUksQ0FBQyxlQUFlLENBQUMsQ0FBQyxDQUFDO0lBQ3RELENBQUM7SUFFTyxLQUFLLENBQUksT0FBbUIsRUFBRSxhQUE4QjtRQUNsRSxJQUFJLENBQUMsZUFBZSxDQUFDLEdBQUcsQ0FBQyxPQUFPLENBQUMsQ0FBQztRQUNsQyxJQUFJLENBQUMsb0JBQW9CLENBQUMsR0FBRyxDQUFDLGFBQWEsQ0FBQyxDQUFDO1FBQzdDLEtBQUssT0FBTyxDQUFDLElBQUksQ0FDZixHQUFHLEVBQUU7WUFDSCxJQUFJLENBQUMsZUFBZSxDQUFDLE1BQU0sQ0FBQyxPQUFPLENBQUMsQ0FBQztZQUNyQyxJQUFJLENBQUMsb0JBQW9CLENBQUMsTUFBTSxDQUFDLGFBQWEsQ0FBQyxDQUFDO1FBQ2xELENBQUMsRUFDRCxHQUFHLEVBQUU7WUFDSCxJQUFJLENBQUMsZUFBZSxDQUFDLE1BQU0sQ0FBQyxPQUFPLENBQUMsQ0FBQztZQUNyQyxJQUFJLENBQUMsb0JBQW9CLENBQUMsTUFBTSxDQUFDLGFBQWEsQ0FBQyxDQUFDO1FBQ2xELENBQUMsQ0FDRixDQUFDO0lBQ0osQ0FBQztJQUVNLEtBQUssQ0FBQyxVQUFVLENBQUMsVUFRdkI7UUFDQyxJQUFJLElBQUksQ0FBQyxRQUFRLEVBQUUsQ0FBQztZQUNsQixNQUFNLElBQUksS0FBSyxDQUFDLHdDQUF3QyxDQUFDLENBQUM7UUFDNUQsQ0FBQztRQUNELE1BQU0sWUFBWSxHQUFHLHNCQUFzQixDQUFDLFVBQVUsQ0FBQyxPQUFPLENBQUMsQ0FBQztRQUNoRSxJQUNFLENBQUMsTUFBTSxDQUFDLGFBQWEsQ0FBQyxVQUFVLENBQUMsV0FBVyxDQUFDO2VBQzFDLFVBQVUsQ0FBQyxXQUFXLEdBQUcsQ0FBQztlQUMxQixVQUFVLENBQUMsV0FBVyxHQUFHLFlBQVksRUFDeEMsQ0FBQztZQUNELE1BQU0sSUFBSSxLQUFLLENBQUMsc0RBQXNELENBQUMsQ0FBQztRQUMxRSxDQUFDO1FBQ0QsTUFBTSxPQUFPLEdBQUcsT0FBTyxDQUFDLFVBQVUsQ0FBQyxVQUFVLEVBQUUsQ0FBQztRQUNoRCxNQUFNLFdBQVcsR0FBRyxpQkFBaUIsRUFBRSxDQUFDO1FBQ3hDLE1BQU0sSUFBSSxHQUFHLGNBQWMsT0FBTyxFQUFFLENBQUM7UUFDckMsTUFBTSxTQUFTLEdBQUcsSUFBSSxDQUFDLEdBQUcsRUFBRSxDQUFDO1FBQzdCLE1BQU0sU0FBUyxHQUNiLFNBQVMsR0FBRyxPQUFPLENBQUMsbUJBQW1CLENBQUMsSUFBSSxDQUFDLGNBQWMsQ0FBQyxrQkFBa0IsQ0FBQztRQUNqRixNQUFNLFFBQVEsR0FBRyxNQUFNLElBQUksQ0FBQyxNQUFNLENBQUMsYUFBYSxDQUFDLEtBQUssQ0FBQyxNQUFNLENBQUM7WUFDNUQsT0FBTztZQUNQLGFBQWEsRUFBRSxVQUFVLENBQUMsU0FBUyxDQUFDLElBQUk7WUFDeEMsUUFBUSxFQUFFLFVBQVUsQ0FBQyxTQUFTLENBQUMsUUFBUTtZQUN2QyxTQUFTLEVBQUUsVUFBVSxDQUFDLFNBQVMsQ0FBQyxTQUFTO1lBQ3pDLFNBQVMsRUFBRSxVQUFVLENBQUMsU0FBUyxDQUFDLFNBQVM7WUFDekMsT0FBTyxFQUFFLFVBQVUsQ0FBQyxPQUFPO1lBQzNCLE1BQU0sRUFBRSxVQUFVLENBQUMsTUFBTTtZQUN6QixJQUFJO1lBQ0osWUFBWSxFQUFFLFlBQVksQ0FBQyxXQUFXLENBQUM7WUFDdkMsY0FBYyxFQUFFLFVBQVUsQ0FBQyxjQUFjO1lBQ3pDLFdBQVcsRUFBRSxVQUFVLENBQUMsV0FBVztZQUNuQyxXQUFXLEVBQUUsVUFBVSxDQUFDLFdBQVc7WUFDbkMsU0FBUyxFQUFFLFVBQVUsQ0FBQyxTQUFTO1lBQy9CLEtBQUssRUFBRSxRQUFRO1lBQ2YsU0FBUztZQUNULFNBQVM7U0FDVixDQUFDLENBQUM7UUFDSCxJQUFJLFFBQVEsQ0FBQyxNQUFNLEtBQUssVUFBVSxFQUFFLENBQUM7WUFDbkMsTUFBTSxJQUFJLEtBQUssQ0FBQyw0Q0FBNEMsQ0FBQyxDQUFDO1FBQ2hFLENBQUM7UUFDRCxPQUFPO1lBQ0wsT0FBTztZQUNQLE1BQU0sRUFBRSxVQUFVLENBQUMsTUFBTTtZQUN6QixJQUFJO1lBQ0osV0FBVztZQUNYLE1BQU0sRUFBRSxVQUFVLENBQUMsY0FBYztZQUNqQyxXQUFXLEVBQUUsVUFBVSxDQUFDLFdBQVc7WUFDbkMsV0FBVyxFQUFFLFVBQVUsQ0FBQyxXQUFXO1lBQ25DLFFBQVEsRUFBRSxTQUFTO1lBQ25CLFNBQVM7U0FDVixDQUFDO0lBQ0osQ0FBQztJQUVNLEtBQUssQ0FBQyxjQUFjLENBQUMsVUFPM0I7UUFDQyxNQUFNLEtBQUssR0FBRyxNQUFNLElBQUksQ0FBQyxNQUFNLENBQUMsYUFBYSxDQUFDLEtBQUssQ0FBQyxhQUFhLENBQUM7WUFDaEUsR0FBRyxlQUFlLENBQUMsVUFBVSxDQUFDLE9BQU8sRUFBRSxVQUFVLENBQUMsU0FBUyxDQUFDO1lBQzVELEtBQUssRUFBRSxVQUFVO1lBQ2pCLE9BQU8sRUFBRSxVQUFVLENBQUMsT0FBTztZQUMzQixjQUFjLEVBQUUsVUFBVSxDQUFDLGNBQWM7WUFDekMsV0FBVyxFQUFFLFVBQVUsQ0FBQyxXQUFXO1lBQ25DLEdBQUcsQ0FBQyxVQUFVLENBQUMsU0FBUyxLQUFLLFNBQVM7Z0JBQ3BDLENBQUMsQ0FBQyxFQUFFO2dCQUNKLENBQUMsQ0FBQyxFQUFFLFNBQVMsRUFBRSxVQUFVLENBQUMsU0FBUyxFQUFFLENBQUM7U0FDekMsQ0FBQyxDQUFDO1FBQ0gsSUFBSSxDQUFDLEtBQUssRUFBRSxDQUFDO1lBQ1gsTUFBTSxJQUFJLEtBQUssQ0FBQyw0REFBNEQsQ0FBQyxDQUFDO1FBQ2hGLENBQUM7UUFDRCxNQUFNLElBQUksQ0FBQyxPQUFPLENBQUMsWUFBWSxDQUM3QixLQUFLLENBQUMsU0FBUyxFQUNmLEtBQUssQ0FBQyxXQUFXLEVBQ2pCLEtBQUssQ0FBQyxjQUFjLEVBQ3BCLHNCQUFzQixDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsQ0FDdEMsQ0FBQztRQUNGLE9BQU8sS0FBSyxDQUFDO0lBQ2YsQ0FBQztJQUVNLEtBQUssQ0FBQyxVQUFVLENBQ3JCLFVBQStDO1FBRS9DLE1BQU0sS0FBSyxHQUFHLGlCQUFpQixDQUFDLElBQUksQ0FBQyxVQUFVLENBQUMsSUFBSSxDQUFDLENBQUM7UUFDdEQsSUFBSSxDQUFDLEtBQUssRUFBRSxDQUFDO1lBQ1gsT0FBTyxJQUFJLENBQUM7UUFDZCxDQUFDO1FBQ0QsSUFBSSxVQUFVLENBQUMsTUFBTSxLQUFLLEtBQUssSUFBSSxVQUFVLENBQUMsTUFBTSxLQUFLLEtBQUssRUFBRSxDQUFDO1lBQy9ELE9BQU8sSUFBSSxRQUFRLENBQUMsb0JBQW9CLEVBQUU7Z0JBQ3hDLE1BQU0sRUFBRSxHQUFHO2dCQUNYLE9BQU8sRUFBRSxFQUFFLEtBQUssRUFBRSxVQUFVLEVBQUU7YUFDL0IsQ0FBQyxDQUFDO1FBQ0wsQ0FBQztRQUNELE1BQU0sYUFBYSxHQUFHLFVBQVUsQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLGVBQWUsQ0FBQyxDQUFDO1FBQzlELElBQUksQ0FBQyxhQUFhLEVBQUUsVUFBVSxDQUFDLFNBQVMsQ0FBQyxFQUFFLENBQUM7WUFDMUMsT0FBTyxJQUFJLFFBQVEsQ0FBQyxjQUFjLEVBQUUsRUFBRSxNQUFNLEVBQUUsR0FBRyxFQUFFLENBQUMsQ0FBQztRQUN2RCxDQUFDO1FBQ0QsTUFBTSxNQUFNLEdBQUcsYUFBYSxDQUFDLEtBQUssQ0FBQyxTQUFTLENBQUMsTUFBTSxDQUFDLENBQUM7UUFDckQsSUFBSSxNQUFNLENBQUMsTUFBTSxHQUFHLEVBQUUsSUFBSSxNQUFNLENBQUMsTUFBTSxHQUFHLEdBQUcsRUFBRSxDQUFDO1lBQzlDLE9BQU8sSUFBSSxRQUFRLENBQUMsY0FBYyxFQUFFLEVBQUUsTUFBTSxFQUFFLEdBQUcsRUFBRSxDQUFDLENBQUM7UUFDdkQsQ0FBQztRQUNELE1BQU0sT0FBTyxHQUFHLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUN6QixNQUFNLEtBQUssR0FBRyxNQUFNLElBQUksQ0FBQyxNQUFNLENBQUMsYUFBYSxDQUFDLEtBQUssQ0FBQyxhQUFhLENBQUM7WUFDaEUsT0FBTztZQUNQLE1BQU0sRUFBRSxVQUFVLENBQUMsTUFBTTtZQUN6QixLQUFLLEVBQUUsUUFBUTtTQUNoQixDQUFDLENBQUM7UUFDSCxJQUNFLENBQUMsS0FBSztlQUNILEtBQUssQ0FBQyxTQUFTLEdBQUcsSUFBSSxDQUFDLEdBQUcsRUFBRTtlQUM1QixDQUFDLGlCQUFpQixDQUFDLEtBQUssQ0FBQyxZQUFZLEVBQUUsWUFBWSxDQUFDLE1BQU0sQ0FBQyxDQUFDLEVBQy9ELENBQUM7WUFDRCxPQUFPLElBQUksUUFBUSxDQUFDLGNBQWMsRUFBRSxFQUFFLE1BQU0sRUFBRSxHQUFHLEVBQUUsQ0FBQyxDQUFDO1FBQ3ZELENBQUM7UUFDRCxNQUFNLEtBQUssR0FBRyxNQUFNLElBQUksQ0FBQyxNQUFNLENBQUMsYUFBYSxDQUFDLEtBQUssQ0FBQyxVQUFVLENBQUM7WUFDN0QsT0FBTyxFQUFFLEtBQUs7WUFDZCxNQUFNLEVBQUUsQ0FBQyxRQUFRLEVBQUUsRUFBRTtnQkFDbkIsUUFBUSxDQUFDLEtBQUssR0FBRyxjQUFjLENBQUM7WUFDbEMsQ0FBQztTQUNGLENBQUMsQ0FBQztRQUNILElBQUksS0FBSyxDQUFDLE1BQU0sS0FBSyxjQUFjLEVBQUUsQ0FBQztZQUNwQyxPQUFPLElBQUksUUFBUSxDQUFDLFVBQVUsRUFBRSxFQUFFLE1BQU0sRUFBRSxHQUFHLEVBQUUsQ0FBQyxDQUFDO1FBQ25ELENBQUM7UUFDRCxJQUFJLFVBQVUsQ0FBQyxNQUFNLEtBQUssS0FBSyxFQUFFLENBQUM7WUFDaEMsT0FBTyxNQUFNLElBQUksQ0FBQyxZQUFZLENBQUMsVUFBVSxFQUFFLEtBQUssQ0FBQyxRQUFRLENBQUMsQ0FBQztRQUM3RCxDQUFDO1FBQ0QsT0FBTyxNQUFNLElBQUksQ0FBQyxjQUFjLENBQUMsVUFBVSxFQUFFLEtBQUssQ0FBQyxRQUFRLENBQUMsQ0FBQztJQUMvRCxDQUFDO0lBRU8sS0FBSyxDQUFDLFlBQVksQ0FDeEIsVUFBK0MsRUFDL0MsUUFBOEI7UUFFOUIsTUFBTSxhQUFhLEdBQUcsTUFBTSxDQUFDLFVBQVUsQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLGdCQUFnQixDQUFDLENBQUMsQ0FBQztRQUN2RSxJQUNFLENBQUMsVUFBVSxDQUFDLE9BQU8sQ0FBQyxJQUFJO2VBQ3JCLENBQUMsTUFBTSxDQUFDLGFBQWEsQ0FBQyxhQUFhLENBQUM7ZUFDcEMsYUFBYSxLQUFLLFFBQVEsQ0FBQyxXQUFXO2VBQ3RDLFVBQVUsQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLGNBQWMsQ0FBQyxLQUFLLFFBQVEsQ0FBQyxXQUFXLEVBQ2xFLENBQUM7WUFDRCxNQUFNLElBQUksQ0FBQyxTQUFTLENBQUMsUUFBUSxDQUFDLE9BQU8sQ0FBQyxDQUFDO1lBQ3ZDLE9BQU8sSUFBSSxRQUFRLENBQUMsMkJBQTJCLEVBQUUsRUFBRSxNQUFNLEVBQUUsR0FBRyxFQUFFLENBQUMsQ0FBQztRQUNwRSxDQUFDO1FBQ0QsTUFBTSxtQkFBbUIsR0FBRyxJQUFJLGVBQWUsRUFBRSxDQUFDO1FBQ2xELE1BQU0sTUFBTSxHQUFHLFdBQVcsQ0FBQyxHQUFHLENBQUM7WUFDN0IsVUFBVSxDQUFDLE9BQU8sQ0FBQyxNQUFNO1lBQ3pCLElBQUksQ0FBQyxjQUFjLENBQUMsTUFBTTtZQUMxQixtQkFBbUIsQ0FBQyxNQUFNO1lBQzFCLFdBQVcsQ0FBQyxPQUFPLENBQ2pCLE9BQU8sQ0FBQyxtQkFBbUIsQ0FBQyxJQUFJLENBQUMsY0FBYyxDQUFDLHdCQUF3QixDQUN6RTtTQUNGLENBQUMsQ0FBQztRQUNILE1BQU0sSUFBSSxHQUFHLENBQUMsS0FBSyxJQUF1QixFQUFFO1lBQzFDLElBQUksQ0FBQztnQkFDSCxNQUFNLElBQUksQ0FBQyxPQUFPLENBQUMsUUFBUSxDQUN6QixRQUFRLENBQUMsU0FBUyxFQUNsQixVQUFVLENBQUMsT0FBTyxDQUFDLElBQWtDLEVBQ3JELFFBQVEsQ0FBQyxXQUFXLEVBQ3BCLFFBQVEsQ0FBQyxjQUFjLEVBQ3ZCLFFBQVEsQ0FBQyxXQUFXLEVBQ3BCLHNCQUFzQixDQUFDLFFBQVEsQ0FBQyxPQUFPLENBQUMsRUFDeEMsTUFBTSxDQUNQLENBQUM7Z0JBQ0YsTUFBTSxRQUFRLEdBQUcsTUFBTSxJQUFJLENBQUMsTUFBTSxDQUFDLGFBQWEsQ0FBQyxLQUFLLENBQUMsVUFBVSxDQUFDO29CQUNoRSxPQUFPLEVBQUUsUUFBUTtvQkFDakIsTUFBTSxFQUFFLENBQUMsUUFBUSxFQUFFLEVBQUU7d0JBQ25CLFFBQVEsQ0FBQyxLQUFLLEdBQUcsVUFBVSxDQUFDO3dCQUM1QixRQUFRLENBQUMsVUFBVSxHQUFHLElBQUksQ0FBQyxHQUFHLEVBQUUsQ0FBQztvQkFDbkMsQ0FBQztpQkFDRixDQUFDLENBQUM7Z0JBQ0gsSUFBSSxRQUFRLENBQUMsTUFBTSxLQUFLLGNBQWMsRUFBRSxDQUFDO29CQUN2QyxNQUFNLElBQUksS0FBSyxDQUFDLDZDQUE2QyxDQUFDLENBQUM7Z0JBQ2pFLENBQUM7Z0JBQ0QsT0FBTyxJQUFJLFFBQVEsQ0FBQyxJQUFJLEVBQUUsRUFBRSxNQUFNLEVBQUUsR0FBRyxFQUFFLENBQUMsQ0FBQztZQUM3QyxDQUFDO1lBQUMsTUFBTSxDQUFDO2dCQUNQLG1CQUFtQixDQUFDLEtBQUssRUFBRSxDQUFDO2dCQUM1QixNQUFNLElBQUksQ0FBQyxTQUFTLENBQUMsUUFBUSxDQUFDLE9BQU8sQ0FBQyxDQUFDO2dCQUN2QyxPQUFPLElBQUksUUFBUSxDQUFDLGlCQUFpQixFQUFFLEVBQUUsTUFBTSxFQUFFLEdBQUcsRUFBRSxDQUFDLENBQUM7WUFDMUQsQ0FBQztRQUNILENBQUMsQ0FBQyxFQUFFLENBQUM7UUFDTCxJQUFJLENBQUMsS0FBSyxDQUFDLElBQUksRUFBRSxtQkFBbUIsQ0FBQyxDQUFDO1FBQ3RDLE9BQU8sTUFBTSxJQUFJLENBQUM7SUFDcEIsQ0FBQztJQUVPLEtBQUssQ0FBQyxjQUFjLENBQzFCLFVBQStDLEVBQy9DLFFBQThCO1FBRTlCLE1BQU0sbUJBQW1CLEdBQUcsSUFBSSxlQUFlLEVBQUUsQ0FBQztRQUNsRCxNQUFNLE1BQU0sR0FBRyxXQUFXLENBQUMsR0FBRyxDQUFDO1lBQzdCLFVBQVUsQ0FBQyxPQUFPLENBQUMsTUFBTTtZQUN6QixJQUFJLENBQUMsY0FBYyxDQUFDLE1BQU07WUFDMUIsbUJBQW1CLENBQUMsTUFBTTtZQUMxQixXQUFXLENBQUMsT0FBTyxDQUNqQixPQUFPLENBQUMsbUJBQW1CLENBQUMsSUFBSSxDQUFDLGNBQWMsQ0FBQyx3QkFBd0IsQ0FDekU7U0FDRixDQUFDLENBQUM7UUFDSCxJQUFJLENBQUM7WUFDSCxNQUFNLFFBQVEsR0FBRyxNQUFNLElBQUksQ0FBQyxPQUFPLENBQUMsaUJBQWlCLENBQ25ELFFBQVEsQ0FBQyxTQUFTLEVBQ2xCLFFBQVEsQ0FBQyxXQUFXLEVBQ3BCLFFBQVEsQ0FBQyxjQUFjLEVBQ3ZCLHNCQUFzQixDQUFDLFFBQVEsQ0FBQyxPQUFPLENBQUMsRUFDeEMsTUFBTSxDQUNQLENBQUM7WUFDRixNQUFNLFVBQVUsR0FBRyxRQUFRLENBQUMsVUFBVSxDQUFDLElBQUksQ0FBQyxLQUFLLElBQUksRUFBRTtnQkFDckQsTUFBTSxRQUFRLEdBQUcsTUFBTSxJQUFJLENBQUMsTUFBTSxDQUFDLGFBQWEsQ0FBQyxLQUFLLENBQUMsVUFBVSxDQUFDO29CQUNoRSxPQUFPLEVBQUUsUUFBUTtvQkFDakIsTUFBTSxFQUFFLENBQUMsUUFBUSxFQUFFLEVBQUU7d0JBQ25CLFFBQVEsQ0FBQyxLQUFLLEdBQUcsVUFBVSxDQUFDO3dCQUM1QixRQUFRLENBQUMsVUFBVSxHQUFHLElBQUksQ0FBQyxHQUFHLEVBQUUsQ0FBQztvQkFDbkMsQ0FBQztpQkFDRixDQUFDLENBQUM7Z0JBQ0gsSUFBSSxRQUFRLENBQUMsTUFBTSxLQUFLLGNBQWMsRUFBRSxDQUFDO29CQUN2QyxNQUFNLElBQUksS0FBSyxDQUFDLDZDQUE2QyxDQUFDLENBQUM7Z0JBQ2pFLENBQUM7WUFDSCxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMsS0FBSyxJQUFJLEVBQUU7Z0JBQ2xCLE1BQU0sSUFBSSxDQUFDLFNBQVMsQ0FBQyxRQUFRLENBQUMsT0FBTyxDQUFDLENBQUM7WUFDekMsQ0FBQyxDQUFDLENBQUM7WUFDSCxJQUFJLENBQUMsS0FBSyxDQUFDLFVBQVUsRUFBRSxtQkFBbUIsQ0FBQyxDQUFDO1lBQzVDLE9BQU8sSUFBSSxRQUFRLENBQUMsUUFBUSxDQUFDLE1BQU0sRUFBRTtnQkFDbkMsTUFBTSxFQUFFLEdBQUc7Z0JBQ1gsT0FBTyxFQUFFO29CQUNQLGNBQWMsRUFBRSxRQUFRLENBQUMsV0FBVztvQkFDcEMsZ0JBQWdCLEVBQUUsTUFBTSxDQUFDLFFBQVEsQ0FBQyxXQUFXLENBQUM7b0JBQzlDLGVBQWUsRUFBRSxVQUFVO29CQUMzQix3QkFBd0IsRUFBRSxTQUFTO2lCQUNwQzthQUNGLENBQUMsQ0FBQztRQUNMLENBQUM7UUFBQyxNQUFNLENBQUM7WUFDUCxtQkFBbUIsQ0FBQyxLQUFLLEVBQUUsQ0FBQztZQUM1QixNQUFNLElBQUksQ0FBQyxTQUFTLENBQUMsUUFBUSxDQUFDLE9BQU8sQ0FBQyxDQUFDO1lBQ3ZDLE9BQU8sSUFBSSxRQUFRLENBQUMsaUJBQWlCLEVBQUUsRUFBRSxNQUFNLEVBQUUsR0FBRyxFQUFFLENBQUMsQ0FBQztRQUMxRCxDQUFDO0lBQ0gsQ0FBQztJQUVPLEtBQUssQ0FBQyxTQUFTLENBQUMsVUFBa0I7UUFDeEMsSUFBSSxDQUFDO1lBQ0gsTUFBTSxLQUFLLEdBQUcsTUFBTSxJQUFJLENBQUMsTUFBTSxDQUFDLGFBQWEsQ0FBQyxLQUFLLENBQUMsYUFBYSxDQUFDO2dCQUNoRSxPQUFPLEVBQUUsVUFBVTtnQkFDbkIsS0FBSyxFQUFFLEVBQUUsR0FBRyxFQUFFLENBQUMsUUFBUSxFQUFFLGNBQWMsQ0FBQyxFQUFFO2FBQzNDLENBQUMsQ0FBQztZQUNILElBQUksQ0FBQyxLQUFLLEVBQUUsQ0FBQztnQkFDWCxPQUFPO1lBQ1QsQ0FBQztZQUNELE1BQU0sTUFBTSxHQUFHLE1BQU0sSUFBSSxDQUFDLE1BQU0sQ0FBQyxhQUFhLENBQUMsS0FBSyxDQUFDLFVBQVUsQ0FBQztnQkFDOUQsT0FBTyxFQUFFLEtBQUs7Z0JBQ2QsTUFBTSxFQUFFLENBQUMsUUFBUSxFQUFFLEVBQUU7b0JBQ25CLFFBQVEsQ0FBQyxLQUFLLEdBQUcsUUFBUSxDQUFDO2dCQUM1QixDQUFDO2FBQ0YsQ0FBQyxDQUFDO1lBQ0gsSUFBSSxNQUFNLENBQUMsTUFBTSxLQUFLLG1CQUFtQixFQUFFLENBQUM7Z0JBQzFDLE1BQU0sT0FBTyxHQUFHLE1BQU0sSUFBSSxDQUFDLE1BQU0sQ0FBQyxhQUFhLENBQUMsS0FBSyxDQUFDLGFBQWEsQ0FBQztvQkFDbEUsT0FBTyxFQUFFLFVBQVU7aUJBQ3BCLENBQUMsQ0FBQztnQkFDSCxJQUFJLE9BQU8sRUFBRSxLQUFLLEtBQUssUUFBUSxJQUFJLE9BQU8sRUFBRSxLQUFLLEtBQUssY0FBYyxFQUFFLENBQUM7b0JBQ3JFLE1BQU0sSUFBSSxLQUFLLENBQUMsMENBQTBDLENBQUMsQ0FBQztnQkFDOUQsQ0FBQztZQUNILENBQUM7UUFDSCxDQUFDO1FBQUMsTUFBTSxDQUFDO1lBQ1AsTUFBTSxrQkFBa0IsQ0FBQyxVQUFVLEVBQUUsa0NBQWtDLENBQUM7aUJBQ3JFLEtBQUssQ0FBQyxHQUFHLEVBQUUsQ0FBQyxTQUFTLENBQUMsQ0FBQztRQUM1QixDQUFDO0lBQ0gsQ0FBQztDQUNGIn0=

package/dist_ts/coremail.cursor.d.ts

@@ -0,0 +1,20 @@
+import * as plugins from './plugins.js';
+export interface ICoreMailInboundCursorAuthority {
+    tenantId: string;
+    serviceId: string;
+    bindingId: string;
+    bindingRevision: number;
+}
+export interface ICoreMailInboundCursorPosition {
+    snapshotAt: number;
+    receivedAt: number;
+    deliveryId: string;
+}
+type TCursorKey = plugins.serveZoneInterfaces.data.ICoreMailRuntimeKeyReference;
+export declare class CoreMailInboundCursorCodec {
+    private readonly resolveRuntimeSecret;
+    constructor(resolveRuntimeSecret: (secretKeyArg: string) => string);
+    encode(authorityArg: ICoreMailInboundCursorAuthority, positionArg: ICoreMailInboundCursorPosition, keysArg: TCursorKey[]): string;
+    decode(cursorArg: string, authorityArg: ICoreMailInboundCursorAuthority, nowArg: number, keysArg: TCursorKey[]): ICoreMailInboundCursorPosition;
+}
+export {};

package/dist_ts/coremail.cursor.js

@@ -0,0 +1,191 @@
+import * as plugins from './plugins.js';
+import { requireCoreMailIdentifier, requireCoreMailSafeInteger, requireCoreMailUuid, } from './coremail.selectors.js';
+const maximumCursorAgeMs = 24 * 60 * 60 * 1_000;
+const maximumFutureSkewMs = 1_000;
+const payloadKeys = new Set([
+    'version',
+    'tenantId',
+    'serviceId',
+    'bindingId',
+    'bindingRevision',
+    'snapshotAt',
+    'receivedAt',
+    'deliveryId',
+]);
+const envelopeKeys = new Set([
+    'version',
+    'keyId',
+    'keyVersion',
+    'payload',
+    'signature',
+]);
+const canonicalPayload = (payloadArg) => JSON.stringify({
+    version: payloadArg.version,
+    tenantId: payloadArg.tenantId,
+    serviceId: payloadArg.serviceId,
+    bindingId: payloadArg.bindingId,
+    bindingRevision: payloadArg.bindingRevision,
+    snapshotAt: payloadArg.snapshotAt,
+    receivedAt: payloadArg.receivedAt,
+    deliveryId: payloadArg.deliveryId,
+});
+const canonicalEnvelope = (envelopeArg) => JSON.stringify({
+    version: envelopeArg.version,
+    keyId: envelopeArg.keyId,
+    keyVersion: envelopeArg.keyVersion,
+    payload: envelopeArg.payload,
+    signature: envelopeArg.signature,
+});
+const requireAuthority = (authorityArg) => ({
+    tenantId: requireCoreMailIdentifier(authorityArg.tenantId, 'cursor.tenantId'),
+    serviceId: requireCoreMailIdentifier(authorityArg.serviceId, 'cursor.serviceId'),
+    bindingId: requireCoreMailIdentifier(authorityArg.bindingId, 'cursor.bindingId'),
+    bindingRevision: requireCoreMailSafeInteger(authorityArg.bindingRevision, 'cursor.bindingRevision', 1),
+});
+const parseCanonicalRecord = (encodedArg, keysArg) => {
+    let decoded;
+    let parsed;
+    try {
+        decoded = Buffer.from(encodedArg, 'base64url');
+        if (decoded.toString('base64url') !== encodedArg) {
+            throw new Error('noncanonical encoding');
+        }
+        parsed = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(decoded));
+    }
+    catch {
+        throw new Error('CoreMail inbound cursor is invalid.');
+    }
+    if (!parsed
+        || typeof parsed !== 'object'
+        || Array.isArray(parsed)
+        || Object.getPrototypeOf(parsed) !== Object.prototype
+        || Object.keys(parsed).length !== keysArg.size
+        || Object.keys(parsed).some((keyArg) => !keysArg.has(keyArg))) {
+        throw new Error('CoreMail inbound cursor is invalid.');
+    }
+    return parsed;
+};
+const parsePayload = (encodedArg) => {
+    const value = parseCanonicalRecord(encodedArg, payloadKeys);
+    if (value.version !== 1) {
+        throw new Error('CoreMail inbound cursor version is unsupported.');
+    }
+    const payload = {
+        version: 1,
+        tenantId: requireCoreMailIdentifier(value.tenantId, 'cursor.tenantId'),
+        serviceId: requireCoreMailIdentifier(value.serviceId, 'cursor.serviceId'),
+        bindingId: requireCoreMailIdentifier(value.bindingId, 'cursor.bindingId'),
+        bindingRevision: requireCoreMailSafeInteger(value.bindingRevision, 'cursor.bindingRevision', 1),
+        snapshotAt: requireCoreMailSafeInteger(value.snapshotAt, 'cursor.snapshotAt'),
+        receivedAt: requireCoreMailSafeInteger(value.receivedAt, 'cursor.receivedAt'),
+        deliveryId: requireCoreMailUuid(value.deliveryId, 'cursor.deliveryId'),
+    };
+    if (canonicalPayload(payload) !== Buffer.from(encodedArg, 'base64url').toString('utf8')) {
+        throw new Error('CoreMail inbound cursor is not canonical.');
+    }
+    return payload;
+};
+const deriveHmacKey = (secretArg) => {
+    if (typeof secretArg !== 'string'
+        || Buffer.byteLength(secretArg, 'utf8') < 32
+        || Buffer.byteLength(secretArg, 'utf8') > 512
+        || secretArg.trim() !== secretArg) {
+        throw new Error('CoreMail cursor secret is invalid.');
+    }
+    return plugins.nodeCrypto.createHash('sha256').update(secretArg, 'utf8').digest();
+};
+const signatureInput = (keyIdArg, keyVersionArg, payloadArg) => `${keyIdArg}:${keyVersionArg}:${payloadArg}`;
+const sign = (keyArg, keyIdArg, keyVersionArg, payloadArg) => plugins.nodeCrypto
+    .createHmac('sha256', keyArg)
+    .update(signatureInput(keyIdArg, keyVersionArg, payloadArg), 'ascii')
+    .digest('base64url');
+export class CoreMailInboundCursorCodec {
+    resolveRuntimeSecret;
+    constructor(resolveRuntimeSecret) {
+        this.resolveRuntimeSecret = resolveRuntimeSecret;
+    }
+    encode(authorityArg, positionArg, keysArg) {
+        const currentKey = keysArg.find((keyArg) => keyArg.state === 'current');
+        if (!currentKey) {
+            throw new Error('CoreMail current cursor key is unavailable.');
+        }
+        const authority = requireAuthority(authorityArg);
+        const payload = {
+            version: 1,
+            ...authority,
+            snapshotAt: requireCoreMailSafeInteger(positionArg.snapshotAt, 'cursor.snapshotAt'),
+            receivedAt: requireCoreMailSafeInteger(positionArg.receivedAt, 'cursor.receivedAt'),
+            deliveryId: requireCoreMailUuid(positionArg.deliveryId, 'cursor.deliveryId'),
+        };
+        if (payload.receivedAt >= payload.snapshotAt) {
+            throw new Error('CoreMail inbound cursor position is invalid.');
+        }
+        const encodedPayload = Buffer.from(canonicalPayload(payload), 'utf8').toString('base64url');
+        const envelope = {
+            version: 1,
+            keyId: currentKey.keyId,
+            keyVersion: currentKey.version,
+            payload: encodedPayload,
+            signature: sign(deriveHmacKey(this.resolveRuntimeSecret(currentKey.secretKey)), currentKey.keyId, currentKey.version, encodedPayload),
+        };
+        return plugins.serveZoneInterfaces.data.normalizeCoreMailInboundCursor(Buffer.from(canonicalEnvelope(envelope), 'utf8').toString('base64url'));
+    }
+    decode(cursorArg, authorityArg, nowArg, keysArg) {
+        const cursor = plugins.serveZoneInterfaces.data.normalizeCoreMailInboundCursor(cursorArg);
+        const value = parseCanonicalRecord(cursor, envelopeKeys);
+        if (value.version !== 1) {
+            throw new Error('CoreMail inbound cursor version is unsupported.');
+        }
+        const now = requireCoreMailSafeInteger(nowArg, 'cursor.now');
+        const keyId = requireCoreMailIdentifier(value.keyId, 'cursor.keyId');
+        const keyVersion = requireCoreMailSafeInteger(value.keyVersion, 'cursor.keyVersion', 1);
+        if (typeof value.payload !== 'string' || typeof value.signature !== 'string') {
+            throw new Error('CoreMail inbound cursor is invalid.');
+        }
+        const envelope = {
+            version: 1,
+            keyId,
+            keyVersion,
+            payload: value.payload,
+            signature: value.signature,
+        };
+        if (canonicalEnvelope(envelope) !== Buffer.from(cursor, 'base64url').toString('utf8')) {
+            throw new Error('CoreMail inbound cursor is not canonical.');
+        }
+        const key = keysArg.find((keyArg) => keyArg.keyId === keyId
+            && keyArg.version === keyVersion
+            && (keyArg.state === 'current'
+                || (keyArg.state === 'retiring'
+                    && keyArg.acceptUntil !== undefined
+                    && keyArg.acceptUntil >= now)));
+        if (!key) {
+            throw new Error('CoreMail inbound cursor key is unavailable.');
+        }
+        const actualSignature = Buffer.from(envelope.signature, 'base64url');
+        const expectedSignature = Buffer.from(sign(deriveHmacKey(this.resolveRuntimeSecret(key.secretKey)), key.keyId, key.version, envelope.payload), 'base64url');
+        if (actualSignature.toString('base64url') !== envelope.signature
+            || actualSignature.byteLength !== expectedSignature.byteLength
+            || !plugins.nodeCrypto.timingSafeEqual(actualSignature, expectedSignature)) {
+            throw new Error('CoreMail inbound cursor is invalid.');
+        }
+        const payload = parsePayload(envelope.payload);
+        const authority = requireAuthority(authorityArg);
+        if (payload.tenantId !== authority.tenantId
+            || payload.serviceId !== authority.serviceId
+            || payload.bindingId !== authority.bindingId
+            || payload.bindingRevision !== authority.bindingRevision) {
+            throw new Error('CoreMail inbound cursor authority is invalid.');
+        }
+        if (payload.receivedAt >= payload.snapshotAt
+            || payload.snapshotAt > now + maximumFutureSkewMs
+            || now - payload.snapshotAt > maximumCursorAgeMs) {
+            throw new Error('CoreMail inbound cursor window is invalid.');
+        }
+        return {
+            snapshotAt: payload.snapshotAt,
+            receivedAt: payload.receivedAt,
+            deliveryId: payload.deliveryId,
+        };
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/coremail.log.d.ts

@@ -0,0 +1,3 @@
+import * as plugins from './plugins.js';
+export declare const coreMailLogger: plugins.smartlog.Smartlog;
+export declare const logCoreMailFailure: (componentArg: "desired-state" | "gateway" | "retention" | "transfer" | "worker", codeArg: string) => Promise<void>;

package/dist_ts/coremail.log.js

@@ -0,0 +1,11 @@
+import * as plugins from './plugins.js';
+export const coreMailLogger = plugins.smartlog.Smartlog.createForCommitinfo({
+    name: '@serve.zone/coremail',
+    version: '1.0.0',
+    description: 'Authenticated mail persistence and delivery orchestration for serve.zone workloads.',
+});
+coreMailLogger.enableConsole();
+export const logCoreMailFailure = async (componentArg, codeArg) => {
+    await coreMailLogger.log('warn', 'CoreMail background operation failed.', { component: componentArg, code: codeArg });
+};
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/coremail.mime.d.ts

@@ -0,0 +1,8 @@
+import * as plugins from './plugins.js';
+import type { ISubmissionPartRecord } from './interfaces.js';
+type TMessage = plugins.serveZoneInterfaces.data.ICoreMailOutboundMessageDescriptor;
+export declare const createCoreMailMime: (submissionIdArg: string, submissionDigestArg: plugins.serveZoneInterfaces.data.TCoreMailSha256, createdAtArg: number, messageArg: TMessage, partsArg: Array<{
+    descriptor: ISubmissionPartRecord;
+    bytes: Uint8Array;
+}>) => Uint8Array;
+export {};

package/dist_ts/coremail.mime.js

@@ -0,0 +1,63 @@
+import * as plugins from './plugins.js';
+const encodeHeaderText = (valueArg) => /^[\x20-\x7e]*$/.test(valueArg)
+    ? valueArg
+    : `=?UTF-8?B?${Buffer.from(valueArg, 'utf8').toString('base64')}?=`;
+const formatMailbox = (mailboxArg) => {
+    if (!mailboxArg.displayName) {
+        return `<${mailboxArg.address}>`;
+    }
+    const displayName = encodeHeaderText(mailboxArg.displayName);
+    const rendered = /^[A-Za-z0-9 ._-]+$/.test(displayName)
+        ? displayName
+        : `"${displayName.replaceAll('\\', '\\\\').replaceAll('"', '\\"')}"`;
+    return `${rendered} <${mailboxArg.address}>`;
+};
+const foldBase64 = (bytesArg) => Buffer.from(bytesArg)
+    .toString('base64')
+    .match(/.{1,76}/g)
+    ?.join('\r\n') ?? '';
+const contentDisposition = (partArg) => {
+    if (partArg.kind !== 'attachment') {
+        return 'inline';
+    }
+    if (!partArg.filename) {
+        return 'attachment';
+    }
+    const fallback = partArg.filename
+        .replace(/[^\x20-\x7e]/g, '_')
+        .replaceAll('\\', '\\\\')
+        .replaceAll('"', '\\"');
+    return `attachment; filename="${fallback}"; filename*=UTF-8''${encodeURIComponent(partArg.filename)}`;
+};
+export const createCoreMailMime = (submissionIdArg, submissionDigestArg, createdAtArg, messageArg, partsArg) => {
+    const boundary = `coremail_${submissionDigestArg.slice('sha256:'.length, 48)}`;
+    const to = messageArg.recipients.to.map(formatMailbox).join(', ');
+    const cc = messageArg.recipients.cc?.map(formatMailbox).join(', ');
+    const headers = [
+        `Date: ${new Date(createdAtArg).toUTCString()}`,
+        `Message-ID: <${submissionIdArg}@coremail.serve.zone>`,
+        `From: ${formatMailbox(messageArg.sender)}`,
+        `To: ${to}`,
+        ...(cc ? [`Cc: ${cc}`] : []),
+        ...(messageArg.replyTo ? [`Reply-To: ${formatMailbox(messageArg.replyTo)}`] : []),
+        `Subject: ${encodeHeaderText(messageArg.subject)}`,
+        ...(messageArg.headers ?? []).map((headerArg) => `${headerArg.name}: ${encodeHeaderText(headerArg.value)}`),
+        'MIME-Version: 1.0',
+        `Content-Type: multipart/mixed; boundary="${boundary}"`,
+        '',
+        'This is a multipart message in MIME format.',
+    ];
+    for (const part of partsArg) {
+        headers.push(`--${boundary}`, `Content-Type: ${part.descriptor.contentType}`, 'Content-Transfer-Encoding: base64', `Content-Disposition: ${contentDisposition(part.descriptor)}`, ...(part.descriptor.contentId
+            ? [`Content-ID: <${part.descriptor.contentId}>`]
+            : []), '', foldBase64(part.bytes));
+    }
+    headers.push(`--${boundary}--`, '');
+    const encoded = new TextEncoder().encode(headers.join('\r\n'));
+    if (encoded.byteLength >
+        plugins.serveZoneInterfaces.data.coreMailLimits.serializedMimeBytes) {
+        throw new Error('CoreMail serialized MIME exceeds its byte budget.');
+    }
+    return encoded;
+};
+//# sourceMappingURL=data:application/json;base64,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