@ts-cloud/core 0.16.49 → 0.16.50

package/dist/types.d.ts

@@ -3955,8 +3955,9 @@ export interface MailServiceConfig {
     webmail?: boolean | MailWebmailConfig;
     /**
      * Mailboxes to create on first provision. Idempotent: an account that
-     * already exists has its password reset to what is declared here, so this
-     * stays the source of truth rather than drifting after the first boot.
+     * already exists keeps its password, so users can change it through webmail
+     * without a deploy undoing the change. Opt into `passwordPolicy: 'managed'`
+     * per account when the deployment must enforce its declared password.
      *
      * Passwords belong in the environment, not in a committed config - write
      * `password: process.env.MAIL_ADMIN_PASSWORD!` rather than a literal.
@@ -4064,10 +4065,16 @@ export interface MailWebmailConfig {
     port?: number;
     /**
      * Hostname to route to the UI through the box's gateway, e.g.
-     * `mail.example.com`. Without one the UI is reachable on its port only,
-     * which for a catcher is exactly right.
+     * `mail.example.com`. Defaults to the mail hostname for a real server;
+     * a catcher remains on its loopback port. Set `false` to disable routing.
      */
-    domain?: string;
+    domain?: string | false;
+    /** Additional HTTPS hostnames serving the same accounts. */
+    aliases?: string[];
+    /** Listener TLS. Off behind the HTTPS gateway; otherwise follows mail TLS. */
+    tls?: boolean;
+    /** Secure session cookies. On behind HTTPS or a TLS listener. */
+    secureCookies?: boolean;
 }
 /** A mailbox created on first provision. See {@link MailServiceConfig.accounts}. */
 export interface MailAccountConfig {
@@ -4075,6 +4082,12 @@ export interface MailAccountConfig {
     address: string;
     /** The password. Read it from the environment; never commit one. */
     password: string;
+    /**
+     * `initial` creates a missing account and preserves user password changes.
+     * `managed` reapplies the configured password on every deployment.
+     * @default 'initial'
+     */
+    passwordPolicy?: 'initial' | 'managed';
 }
 /** Inbound spam handling. See {@link MailServiceConfig.spam}. */
 export interface MailSpamConfig {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ts-cloud/core",
   "type": "module",
-  "version": "0.16.49",
+  "version": "0.16.50",
   "description": "Core CloudFormation generation library for ts-cloud",
   "author": "Chris Breuer <chris@stacksjs.com>",
   "license": "MIT",
@@ -31,7 +31,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@ts-cloud/aws-types": "0.16.49"
+    "@ts-cloud/aws-types": "0.16.50"
   },
   "devDependencies": {
     "typescript": "^7.0.2"