@soulbatical/tetra-core 0.10.4 → 0.11.0

package/dist/shared/email/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/shared/email/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAG7D,OAAO,EACL,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAGtF,YAAY,EACV,eAAe,EACf,WAAW,EACX,aAAa,EACb,aAAa,EACb,aAAa,EACb,eAAe,EACf,YAAY,EACZ,iBAAiB,GAClB,MAAM,YAAY,CAAC"}

package/dist/shared/email/index.js

@@ -1,18 +0,0 @@
-/**
- * Email Module — Barrel Export
- *
- * @module @soulbatical/tetra-core/email
- */
-// Service
-export { EmailService } from './EmailService.js';
-// Transport helpers
-export { sendMailgunEmail } from './mailgun.js';
-export { sendSmtpEmail } from './smtp.js';
-// Route factories
-export { addEmailAdminRoutes } from './adminRoutes.js';
-export { addMailgunWebhookRoutes } from './webhookRoutes.js';
-// Gmail (OAuth2 API transport + client for read/search/attachments)
-export { GmailClient, getGmailClient, listGmailAccounts, clearGmailClientCache, disconnectGmail, getGmailAuthUrl, startGmailOAuth, getGmailAuthServerStatus, resetGmailAuthServerState, exchangeGmailCode, addGmailOAuthRoutes, } from './gmail.js';
-// Sanitization
-export { escapeHtml, stripCRLF, sanitizeEmailHeader, stripHtml } from './sanitize.js';
-//# sourceMappingURL=index.js.map

package/dist/shared/email/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/shared/email/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,UAAU;AACV,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,oBAAoB;AACpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,kBAAkB;AAClB,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,oEAAoE;AACpE,OAAO,EACL,WAAW,EACX,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,eAAe,EACf,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAiBpB,eAAe;AACf,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC"}

package/dist/shared/email/mailgun.d.ts

@@ -1,18 +0,0 @@
-/**
- * Mailgun email helper — native fetch, no axios.
- * Graceful no-op when credentials are missing.
- */
-import type { MailgunResponse, EmailAttachment } from './types.js';
-export declare function sendMailgunEmail(params: {
-    from: string;
-    to: string;
-    subject: string;
-    html: string;
-    text?: string;
-    replyTo?: string;
-    attachments?: EmailAttachment[];
-    apiKey?: string;
-    domain?: string;
-    endpoint?: string;
-}): Promise<MailgunResponse>;
-//# sourceMappingURL=mailgun.d.ts.map

package/dist/shared/email/mailgun.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mailgun.d.ts","sourceRoot":"","sources":["../../../src/shared/email/mailgun.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAInE,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,eAAe,CAAC,CAyE3B"}

package/dist/shared/email/mailgun.js

@@ -1,76 +0,0 @@
-/**
- * Mailgun email helper — native fetch, no axios.
- * Graceful no-op when credentials are missing.
- */
-const DEFAULT_EU_ENDPOINT = 'https://api.eu.mailgun.net/v3';
-export async function sendMailgunEmail(params) {
-    const { apiKey, domain } = params;
-    if (!apiKey || !domain) {
-        console.warn('[email/mailgun] credentials missing — email not sent');
-        return { success: false, message: 'Mailgun not configured' };
-    }
-    const baseUrl = params.endpoint || DEFAULT_EU_ENDPOINT;
-    try {
-        let body;
-        let contentType;
-        if (params.attachments?.length) {
-            // Use FormData for multipart (attachments)
-            const formData = new FormData();
-            formData.append('from', params.from);
-            formData.append('to', params.to);
-            formData.append('subject', params.subject);
-            formData.append('html', params.html);
-            if (params.text)
-                formData.append('text', params.text);
-            if (params.replyTo)
-                formData.append('h:Reply-To', params.replyTo);
-            for (const att of params.attachments) {
-                const blob = new Blob([att.data], { type: att.contentType || 'application/octet-stream' });
-                formData.append('attachment', blob, att.filename);
-            }
-            body = formData;
-            // Let fetch set the Content-Type with boundary
-        }
-        else {
-            // Simple URL-encoded form (no attachments)
-            const formData = new URLSearchParams();
-            formData.append('from', params.from);
-            formData.append('to', params.to);
-            formData.append('subject', params.subject);
-            formData.append('html', params.html);
-            if (params.text)
-                formData.append('text', params.text);
-            if (params.replyTo)
-                formData.append('h:Reply-To', params.replyTo);
-            body = formData.toString();
-            contentType = 'application/x-www-form-urlencoded';
-        }
-        const headers = {
-            Authorization: 'Basic ' + Buffer.from(`api:${apiKey}`).toString('base64'),
-        };
-        if (contentType)
-            headers['Content-Type'] = contentType;
-        const resp = await fetch(`${baseUrl}/${domain}/messages`, {
-            method: 'POST',
-            headers,
-            body,
-        });
-        if (!resp.ok) {
-            const text = (await resp.text()).slice(0, 500);
-            console.error(`[email/mailgun] API error ${resp.status}: ${text}`);
-            return { success: false, message: `Mailgun error: ${resp.status}` };
-        }
-        const data = (await resp.json());
-        return {
-            success: true,
-            message: data.message || 'Email sent',
-            messageId: data.id,
-        };
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        console.error('[email/mailgun] send failed:', msg);
-        return { success: false, message: `Send failed: ${msg}` };
-    }
-}
-//# sourceMappingURL=mailgun.js.map

package/dist/shared/email/mailgun.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mailgun.js","sourceRoot":"","sources":["../../../src/shared/email/mailgun.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,mBAAmB,GAAG,+BAA+B,CAAC;AAE5D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAWtC;IACC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAElC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACrE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,IAAI,mBAAmB,CAAC;IAEvD,IAAI,CAAC;QACH,IAAI,IAAS,CAAC;QACd,IAAI,WAA+B,CAAC;QAEpC,IAAI,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;YAC/B,2CAA2C;YAC3C,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;YAChC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YACjC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC3C,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,MAAM,CAAC,IAAI;gBAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,OAAO;gBAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAElE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,IAA2B,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,IAAI,0BAA0B,EAAE,CAAC,CAAC;gBAClH,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,GAAG,QAAQ,CAAC;YAChB,+CAA+C;QACjD,CAAC;aAAM,CAAC;YACN,2CAA2C;YAC3C,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;YACvC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YACjC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC3C,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,MAAM,CAAC,IAAI;gBAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,OAAO;gBAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAElE,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC3B,WAAW,GAAG,mCAAmC,CAAC;QACpD,CAAC;QAED,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC1E,CAAC;QACF,IAAI,WAAW;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,WAAW,CAAC;QAEvD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,IAAI,MAAM,WAAW,EAAE;YACxD,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/C,OAAO,CAAC,KAAK,CAAC,6BAA6B,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;YACnE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACtE,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAsC,CAAC;QACtE,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,YAAY;YACrC,SAAS,EAAE,IAAI,CAAC,EAAE;SACnB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;QACnD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,GAAG,EAAE,EAAE,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/dist/shared/email/sanitize.d.ts

@@ -1,25 +0,0 @@
-/**
- * HTML sanitization helpers for email content.
- *
- * @module @soulbatical/tetra-core/email/sanitize
- */
-/**
- * Escape HTML special characters to prevent XSS in email templates.
- * Handles all OWASP-recommended characters: & < > " '
- */
-export declare function escapeHtml(str: string, maxLen?: number): string;
-/**
- * Strip CRLF characters to prevent SMTP header injection.
- * Use on ALL email header fields: to, from, subject, cc, bcc, reply-to.
- */
-export declare function stripCRLF(str: string): string;
-/**
- * Sanitize an email header field: strip CRLF + trim + length limit.
- * Combines SMTP injection prevention with basic hygiene.
- */
-export declare function sanitizeEmailHeader(str: string, maxLen?: number): string;
-/**
- * Strip all HTML tags from a string. Use for user input that should be plain text.
- */
-export declare function stripHtml(str: string): string;
-//# sourceMappingURL=sanitize.d.ts.map

package/dist/shared/email/sanitize.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../../src/shared/email/sanitize.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,SAAM,GAAG,MAAM,CAQ5D;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,SAAM,GAAG,MAAM,CAErE;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7C"}

package/dist/shared/email/sanitize.js

@@ -1,39 +0,0 @@
-/**
- * HTML sanitization helpers for email content.
- *
- * @module @soulbatical/tetra-core/email/sanitize
- */
-/**
- * Escape HTML special characters to prevent XSS in email templates.
- * Handles all OWASP-recommended characters: & < > " '
- */
-export function escapeHtml(str, maxLen = 500) {
-    return str
-        .slice(0, maxLen)
-        .replace(/&/g, '&amp;')
-        .replace(/</g, '&lt;')
-        .replace(/>/g, '&gt;')
-        .replace(/"/g, '&quot;')
-        .replace(/'/g, '&#x27;');
-}
-/**
- * Strip CRLF characters to prevent SMTP header injection.
- * Use on ALL email header fields: to, from, subject, cc, bcc, reply-to.
- */
-export function stripCRLF(str) {
-    return str.replace(/[\r\n]/g, '');
-}
-/**
- * Sanitize an email header field: strip CRLF + trim + length limit.
- * Combines SMTP injection prevention with basic hygiene.
- */
-export function sanitizeEmailHeader(str, maxLen = 200) {
-    return stripCRLF(str).trim().slice(0, maxLen);
-}
-/**
- * Strip all HTML tags from a string. Use for user input that should be plain text.
- */
-export function stripHtml(str) {
-    return str.replace(/<[^>]*>/g, '');
-}
-//# sourceMappingURL=sanitize.js.map

package/dist/shared/email/sanitize.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../../src/shared/email/sanitize.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,MAAM,GAAG,GAAG;IAClD,OAAO,GAAG;SACP,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC;SAChB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,MAAM,GAAG,GAAG;IAC3D,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC"}

package/dist/shared/email/smtp.d.ts

@@ -1,20 +0,0 @@
-/**
- * SMTP email helper — uses nodemailer for sending via SMTP (Gmail, Outlook, etc.).
- * Graceful no-op when credentials are missing.
- */
-import type { SmtpResponse, EmailAttachment } from './types.js';
-export declare function sendSmtpEmail(params: {
-    from: string;
-    to: string;
-    subject: string;
-    html: string;
-    text?: string;
-    replyTo?: string;
-    attachments?: EmailAttachment[];
-    smtpHost: string;
-    smtpPort: number;
-    smtpUser: string;
-    smtpPass: string;
-    smtpSecure?: boolean;
-}): Promise<SmtpResponse>;
-//# sourceMappingURL=smtp.d.ts.map

package/dist/shared/email/smtp.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"smtp.d.ts","sourceRoot":"","sources":["../../../src/shared/email/smtp.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEhE,wBAAsB,aAAa,CAAC,MAAM,EAAE;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,OAAO,CAAC,YAAY,CAAC,CAoDxB"}

package/dist/shared/email/smtp.js

@@ -1,53 +0,0 @@
-/**
- * SMTP email helper — uses nodemailer for sending via SMTP (Gmail, Outlook, etc.).
- * Graceful no-op when credentials are missing.
- */
-export async function sendSmtpEmail(params) {
-    const { smtpHost, smtpUser, smtpPass } = params;
-    if (!smtpHost || !smtpUser || !smtpPass) {
-        console.warn('[email/smtp] credentials missing — email not sent');
-        return { success: false, message: 'SMTP not configured' };
-    }
-    try {
-        // Dynamic import to keep nodemailer optional at runtime
-        const nodemailer = await import('nodemailer');
-        const transporter = nodemailer.default.createTransport({
-            host: params.smtpHost,
-            port: params.smtpPort,
-            secure: params.smtpSecure ?? params.smtpPort === 465,
-            auth: {
-                user: params.smtpUser,
-                pass: params.smtpPass,
-            },
-        });
-        const mailOpts = {
-            from: params.from,
-            to: params.to,
-            subject: params.subject,
-            html: params.html,
-        };
-        if (params.text)
-            mailOpts.text = params.text;
-        if (params.replyTo)
-            mailOpts.replyTo = params.replyTo;
-        if (params.attachments?.length) {
-            mailOpts.attachments = params.attachments.map(att => ({
-                filename: att.filename,
-                content: att.data,
-                contentType: att.contentType || 'application/octet-stream',
-            }));
-        }
-        const info = await transporter.sendMail(mailOpts);
-        return {
-            success: true,
-            message: 'Email sent via SMTP',
-            messageId: info.messageId,
-        };
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        console.error('[email/smtp] send failed:', msg);
-        return { success: false, message: `SMTP send failed: ${msg}` };
-    }
-}
-//# sourceMappingURL=smtp.js.map

package/dist/shared/email/smtp.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"smtp.js","sourceRoot":"","sources":["../../../src/shared/email/smtp.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAanC;IACC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAEhD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAClE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC;QACH,wDAAwD;QACxD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAE9C,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,eAAe,CAAC;YACrD,IAAI,EAAE,MAAM,CAAC,QAAQ;YACrB,IAAI,EAAE,MAAM,CAAC,QAAQ;YACrB,MAAM,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG;YACpD,IAAI,EAAE;gBACJ,IAAI,EAAE,MAAM,CAAC,QAAQ;gBACrB,IAAI,EAAE,MAAM,CAAC,QAAQ;aACtB;SACF,CAAC,CAAC;QAEH,MAAM,QAAQ,GAA4B;YACxC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;QAEF,IAAI,MAAM,CAAC,IAAI;YAAE,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC7C,IAAI,MAAM,CAAC,OAAO;YAAE,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAEtD,IAAI,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;YAC/B,QAAQ,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpD,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,OAAO,EAAE,GAAG,CAAC,IAAI;gBACjB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,0BAA0B;aAC3D,CAAC,CAAC,CAAC;QACN,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAElD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,qBAAqB;YAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,GAAG,EAAE,EAAE,CAAC;IACjE,CAAC;AACH,CAAC"}

package/dist/shared/email/types.d.ts

@@ -1,113 +0,0 @@
-/**
- * Email Module — Type definitions
- *
- * @module @soulbatical/tetra-core/email
- */
-export interface EmailAttachment {
-    filename: string;
-    data: Buffer;
-    contentType?: string;
-}
-export interface EmailConfig {
-    /** From address, e.g. "VinciFox <noreply@vincifox.com>" */
-    fromAddress: string;
-    /** Default language for template lookup fallback */
-    defaultLanguage: 'nl' | 'en';
-    /** Frontend URL for unsubscribe links etc. */
-    frontendUrl: string;
-    /** Transport: 'gmail', 'smtp', or 'mailgun' (default: auto-detect — gmail > smtp > mailgun) */
-    transport?: 'gmail' | 'smtp' | 'mailgun';
-    /** Mailgun API key — no-op when missing */
-    mailgunApiKey?: string;
-    /** Mailgun domain, e.g. mg.vincifox.com */
-    mailgunDomain?: string;
-    /** Mailgun API endpoint — defaults to EU endpoint */
-    mailgunEndpoint?: string;
-    /** Mailgun webhook signing key — required for webhook signature verification */
-    mailgunWebhookSigningKey?: string;
-    /** SMTP host, e.g. smtp.gmail.com */
-    smtpHost?: string;
-    /** SMTP port — defaults to 587 */
-    smtpPort?: number;
-    /** SMTP username (for Gmail: full email address) */
-    smtpUser?: string;
-    /** SMTP password (for Gmail: App Password, not account password) */
-    smtpPass?: string;
-    /** Use TLS on connect (port 465). Defaults to false (STARTTLS on 587). */
-    smtpSecure?: boolean;
-    /** Gmail: user ID (auth.users UUID) whose Gmail account to use for sending */
-    gmailUserId?: string;
-    /** Gmail: specific email to use (if user has multiple accounts). Optional. */
-    gmailEmail?: string;
-}
-export interface SendEmailOpts {
-    to: string;
-    templateSlug: string;
-    variables: Record<string, string>;
-    /** Language for template lookup, falls back to config.defaultLanguage */
-    language?: string;
-    organizationId?: string;
-    /** Reply-To address (e.g. for contact forms) */
-    replyTo?: string;
-    /** File attachments */
-    attachments?: EmailAttachment[];
-    /** Email type for logging/categorization (e.g. 'transactional', 'contact_admin') */
-    emailType?: string;
-    /** Arbitrary metadata stored in email_logs for tracking/debugging */
-    metadata?: Record<string, unknown>;
-    /** Optional FK — consuming project can use this for app-specific references */
-    feedbackId?: string;
-    /** Subject fallback when DB template is missing */
-    fallbackSubject?: string;
-    /** HTML fallback when DB template is missing */
-    fallbackHtml?: string;
-    /** Plain text fallback when DB template is missing */
-    fallbackText?: string;
-}
-export interface EmailTemplate {
-    id: string;
-    slug: string;
-    name: string;
-    subject: string;
-    body_html: string;
-    body_text: string | null;
-    variables: unknown[];
-    language: string;
-    category: string;
-    is_active: boolean;
-    organization_id: string | null;
-    created_at: string;
-    updated_at: string;
-}
-export interface EmailLogEntry {
-    id: string;
-    organization_id: string | null;
-    template_id: string | null;
-    to_email: string;
-    subject: string;
-    template_slug: string | null;
-    variables_used: Record<string, string>;
-    email_type: string | null;
-    metadata: Record<string, unknown> | null;
-    status: 'pending' | 'sent' | 'failed' | 'delivered' | 'opened' | 'clicked' | 'bounced' | 'complained';
-    error_message: string | null;
-    mailgun_message_id: string | null;
-    sent_at: string | null;
-    delivered_at: string | null;
-    opened_at: string | null;
-    clicked_at: string | null;
-    created_at: string;
-}
-export interface MailgunResponse {
-    success: boolean;
-    message: string;
-    messageId?: string;
-}
-export interface SmtpResponse {
-    success: boolean;
-    message: string;
-    messageId?: string;
-}
-/** Unified response from any email transport */
-export type EmailSendResponse = MailgunResponse | SmtpResponse;
-//# sourceMappingURL=types.d.ts.map

package/dist/shared/email/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/shared/email/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,eAAe,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,+FAA+F;IAC/F,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACzC,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gFAAgF;IAChF,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uBAAuB;IACvB,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;IAChC,oFAAoF;IACpF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,OAAO,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC;IACtG,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,gDAAgD;AAChD,MAAM,MAAM,iBAAiB,GAAG,eAAe,GAAG,YAAY,CAAC"}

package/dist/shared/email/types.js

@@ -1,7 +0,0 @@
-/**
- * Email Module — Type definitions
- *
- * @module @soulbatical/tetra-core/email
- */
-export {};
-//# sourceMappingURL=types.js.map

package/dist/shared/email/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/shared/email/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/shared/email/webhookRoutes.d.ts

@@ -1,29 +0,0 @@
-/**
- * Mailgun Webhook Routes — optional route factory for delivery tracking.
- *
- * Usage:
- *   import { addMailgunWebhookRoutes } from '@soulbatical/tetra-core';
- *   addMailgunWebhookRoutes(router, { signingKey: process.env.MAILGUN_WEBHOOK_SIGNING_KEY });
- *
- * @module @soulbatical/tetra-core/email
- */
-import { Router } from 'express';
-import type { SupabaseClient } from '@supabase/supabase-js';
-interface MailgunWebhookConfig {
-    /** Mailgun webhook signing key for signature verification */
-    signingKey?: string;
-    /** Supabase client (systemDB or service_role) for updating email_logs */
-    supabase: SupabaseClient;
-    /** Max age of webhook timestamp in seconds (default: 30) */
-    maxTimestampAge?: number;
-    /** Set true in development to skip signature verification */
-    skipVerification?: boolean;
-}
-/**
- * Add Mailgun webhook route to a router.
- * Handles: delivered, opened, clicked, bounced, failed, complained events.
- * Updates email_logs table with delivery tracking data.
- */
-export declare function addMailgunWebhookRoutes(router: Router, config: MailgunWebhookConfig): void;
-export {};
-//# sourceMappingURL=webhookRoutes.d.ts.map

package/dist/shared/email/webhookRoutes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"webhookRoutes.d.ts","sourceRoot":"","sources":["../../../src/shared/email/webhookRoutes.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AAEpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,UAAU,oBAAoB;IAC5B,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,QAAQ,EAAE,cAAc,CAAC;IACzB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AA2BD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,IAAI,CA0G1F"}

package/dist/shared/email/webhookRoutes.js

@@ -1,125 +0,0 @@
-/**
- * Mailgun Webhook Routes — optional route factory for delivery tracking.
- *
- * Usage:
- *   import { addMailgunWebhookRoutes } from '@soulbatical/tetra-core';
- *   addMailgunWebhookRoutes(router, { signingKey: process.env.MAILGUN_WEBHOOK_SIGNING_KEY });
- *
- * @module @soulbatical/tetra-core/email
- */
-import crypto from 'crypto';
-function verifySignature(timestamp, token, signature, signingKey, maxAge) {
-    const currentTime = Date.now() / 1000;
-    const webhookTime = parseInt(timestamp, 10);
-    const timestampAge = currentTime - webhookTime;
-    // Reject timestamps too far in the future (clock skew tolerance: 5 seconds)
-    if (timestampAge < -5)
-        return false;
-    // Reject timestamps older than maxAge
-    if (timestampAge > maxAge)
-        return false;
-    // Verify HMAC signature using timing-safe comparison
-    const hmac = crypto.createHmac('sha256', signingKey);
-    const digest = hmac.update(timestamp + token).digest('hex');
-    if (digest.length !== signature.length)
-        return false;
-    return crypto.timingSafeEqual(Buffer.from(digest, 'hex'), Buffer.from(signature, 'hex'));
-}
-/**
- * Add Mailgun webhook route to a router.
- * Handles: delivered, opened, clicked, bounced, failed, complained events.
- * Updates email_logs table with delivery tracking data.
- */
-export function addMailgunWebhookRoutes(router, config) {
-    const maxAge = config.maxTimestampAge ?? 30;
-    router.post('/mailgun', async (req, res) => {
-        try {
-            const event = req.body;
-            if (!event?.signature || !event?.['event-data']) {
-                res.status(400).json({ error: 'Invalid webhook structure' });
-                return;
-            }
-            // Verify signature
-            const { timestamp, token, signature } = event.signature;
-            if (!config.skipVerification) {
-                if (!config.signingKey) {
-                    console.error('[email/webhook] MAILGUN_WEBHOOK_SIGNING_KEY not configured');
-                    res.status(401).json({ error: 'Webhook signing key not configured' });
-                    return;
-                }
-                if (!verifySignature(timestamp, token, signature, config.signingKey, maxAge)) {
-                    console.warn('[email/webhook] Invalid Mailgun webhook signature');
-                    res.status(401).json({ error: 'Invalid signature' });
-                    return;
-                }
-            }
-            const eventData = event['event-data'];
-            const eventType = eventData.event;
-            const recipient = eventData.recipient?.toLowerCase();
-            const eventTimestamp = new Date(eventData.timestamp * 1000).toISOString();
-            if (!recipient) {
-                res.status(200).json({ message: 'No recipient' });
-                return;
-            }
-            // Find most recent email log for this recipient
-            const { data: emailLog } = await config.supabase
-                .from('email_logs')
-                .select('id, status, opened_at, clicked_at')
-                .eq('to_email', recipient)
-                .order('created_at', { ascending: false })
-                .limit(1)
-                .single();
-            if (!emailLog) {
-                res.status(200).json({ message: 'No matching log' });
-                return;
-            }
-            // Build updates based on event type
-            const updates = {};
-            switch (eventType) {
-                case 'delivered':
-                    updates.status = 'delivered';
-                    updates.delivered_at = eventTimestamp;
-                    break;
-                case 'opened':
-                    if (!emailLog.opened_at)
-                        updates.opened_at = eventTimestamp;
-                    if (emailLog.status === 'sent' || emailLog.status === 'delivered') {
-                        updates.status = 'opened';
-                    }
-                    break;
-                case 'clicked':
-                    if (!emailLog.clicked_at)
-                        updates.clicked_at = eventTimestamp;
-                    updates.status = 'clicked';
-                    break;
-                case 'bounced':
-                case 'failed':
-                    updates.status = eventType;
-                    updates.error_message =
-                        eventData['delivery-status']?.message ||
-                            eventData['delivery-status']?.description ||
-                            `Email ${eventType}`;
-                    break;
-                case 'complained':
-                    updates.status = 'complained';
-                    break;
-                default:
-                    res.status(200).json({ message: 'ok' });
-                    return;
-            }
-            if (Object.keys(updates).length > 0) {
-                await config.supabase
-                    .from('email_logs')
-                    .update(updates)
-                    .eq('id', emailLog.id);
-            }
-            res.status(200).json({ message: 'ok' });
-        }
-        catch (error) {
-            console.error('[email/webhook] Error processing webhook:', error);
-            // Return 200 to prevent Mailgun retries
-            res.status(200).json({ message: 'error logged' });
-        }
-    });
-}
-//# sourceMappingURL=webhookRoutes.js.map

package/dist/shared/email/webhookRoutes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"webhookRoutes.js","sourceRoot":"","sources":["../../../src/shared/email/webhookRoutes.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAgB5B,SAAS,eAAe,CACtB,SAAiB,EACjB,KAAa,EACb,SAAiB,EACjB,UAAkB,EAClB,MAAc;IAEd,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACtC,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,WAAW,GAAG,WAAW,CAAC;IAE/C,4EAA4E;IAC5E,IAAI,YAAY,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,sCAAsC;IACtC,IAAI,YAAY,GAAG,MAAM;QAAE,OAAO,KAAK,CAAC;IAExC,qDAAqD;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACrD,OAAO,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,MAA4B;IAClF,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;IAE5C,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC;YAEvB,IAAI,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;gBAChD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YAED,mBAAmB;YACnB,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;YAExD,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC7B,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;oBACvB,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;oBAC5E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;oBACtE,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;oBAC7E,OAAO,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;oBAClE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBACrD,OAAO;gBACT,CAAC;YACH,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;YACtC,MAAM,SAAS,GAAqB,SAAS,CAAC,KAAK,CAAC;YACpD,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC;YACrD,MAAM,cAAc,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAE1E,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YAED,gDAAgD;YAChD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ;iBAC7C,IAAI,CAAC,YAAY,CAAC;iBAClB,MAAM,CAAC,mCAAmC,CAAC;iBAC3C,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;iBACzB,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;iBACzC,KAAK,CAAC,CAAC,CAAC;iBACR,MAAM,EAAE,CAAC;YAEZ,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YAED,oCAAoC;YACpC,MAAM,OAAO,GAA4B,EAAE,CAAC;YAE5C,QAAQ,SAAS,EAAE,CAAC;gBAClB,KAAK,WAAW;oBACd,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;oBAC7B,OAAO,CAAC,YAAY,GAAG,cAAc,CAAC;oBACtC,MAAM;gBAER,KAAK,QAAQ;oBACX,IAAI,CAAC,QAAQ,CAAC,SAAS;wBAAE,OAAO,CAAC,SAAS,GAAG,cAAc,CAAC;oBAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;wBAClE,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;oBAC5B,CAAC;oBACD,MAAM;gBAER,KAAK,SAAS;oBACZ,IAAI,CAAC,QAAQ,CAAC,UAAU;wBAAE,OAAO,CAAC,UAAU,GAAG,cAAc,CAAC;oBAC9D,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;oBAC3B,MAAM;gBAER,KAAK,SAAS,CAAC;gBACf,KAAK,QAAQ;oBACX,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;oBAC3B,OAAO,CAAC,aAAa;wBACnB,SAAS,CAAC,iBAAiB,CAAC,EAAE,OAAO;4BACrC,SAAS,CAAC,iBAAiB,CAAC,EAAE,WAAW;4BACzC,SAAS,SAAS,EAAE,CAAC;oBACvB,MAAM;gBAER,KAAK,YAAY;oBACf,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC;oBAC9B,MAAM;gBAER;oBACE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;oBACxC,OAAO;YACX,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpC,MAAM,MAAM,CAAC,QAAQ;qBAClB,IAAI,CAAC,YAAY,CAAC;qBAClB,MAAM,CAAC,OAAO,CAAC;qBACf,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC3B,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;YAClE,wCAAwC;YACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/shared/mcp/index.d.ts

@@ -1,51 +0,0 @@
-/**
- * MCP Online Module
- *
- * Provides everything needed to expose MCP tools over HTTP:
- * - StreamableHTTP transport with Bearer token auth
- * - Browser-based login flow for token acquisition
- * - Token CRUD management
- * - Usage stats / audit logging
- * - Tenant isolation via AsyncLocalStorage
- *
- * Quick start:
- * ```typescript
- * import { addMcpRoutes, addMcpAuthRoutes, addMcpTokenRoutes, addMcpUsageRoutes } from '@soulbatical/tetra-core';
- * import { Router } from 'express';
- *
- * const tokenPrefix = 'myapp_';
- *
- * // MCP endpoint (Bearer API token auth)
- * const mcpRouter = Router();
- * addMcpRoutes(mcpRouter, { tools, handlers, tokenPrefix });
- * app.use('/api/mcp', mcpRouter);
- *
- * // Browser auth flow (public + JWT)
- * const mcpAuthRouter = Router();
- * addMcpAuthRoutes(mcpAuthRouter, { tokenPrefix });
- * app.use('/api/mcp-auth', mcpAuthRouter);
- *
- * // Token management (JWT auth)
- * const mcpTokensRouter = Router();
- * addMcpTokenRoutes(mcpTokensRouter, { tokenPrefix });
- * app.use('/api/mcp-tokens', mcpTokensRouter);
- *
- * // Usage stats (JWT auth)
- * const mcpUsageRouter = Router();
- * addMcpUsageRoutes(mcpUsageRouter);
- * app.use('/api/mcp-usage', mcpUsageRouter);
- * ```
- *
- * Database: requires `mcp_api_tokens` and `mcp_audit_log` tables.
- * See migrations/ directory for SQL.
- */
-export { addMcpRoutes } from './mcp-routes.js';
-export { addMcpAuthRoutes } from './mcp-auth-routes.js';
-export { addMcpTokenRoutes } from './mcp-tokens-routes.js';
-export { addMcpUsageRoutes } from './mcp-usage-routes.js';
-export { getMcpOrganizationId, getMcpTenantContext, runWithMcpTenant, validateMcpApiToken, generateMcpApiToken } from './tenant-context.js';
-export type { GenerateMcpApiTokenOptions } from './tenant-context.js';
-export { mcpDB, mcpScopedDB } from './mcp-db.js';
-export type { McpDBResult, McpDBLocalResult, McpDBOptions } from './mcp-db.js';
-export type { McpRoutesConfig, McpAuthRoutesConfig, McpToolDefinition, McpToolResult, McpToolHandler, TenantContext } from './types.js';
-//# sourceMappingURL=index.d.ts.map