@vibesdotdev/auth 0.0.0-stage → 1.0.0-rc.4

package/dist/features/email/email.config.descriptor.js

@@ -0,0 +1,14 @@
+import { EmailEnvSchema } from "./env.schema.js";
+const descriptor = {
+    kind: 'config/manifest', id: 'auth.email', name: 'Auth Email',
+    description: 'Auth email policy and credential references; delivery belongs to email integration providers.',
+    namespace: 'auth.email', schema: EmailEnvSchema,
+    // No cloud owner serves auth.email's stored layer, so storage.cloud-api is
+    // not offered: an ownerless cloud binding refuses every ConfigClient.revision.
+    allowedAdapters: ['storage.localdb', 'storage.drizzle', 'storage.json'],
+    fields: {},
+    scope: 'global', version: 1, tier: 'system', category: 'auth', internal: false,
+    customTables: false
+};
+export default descriptor;
+//# sourceMappingURL=email.config.descriptor.js.map

package/dist/features/email/email.config.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.config.descriptor.js","sourceRoot":"","sources":["../../../src/features/email/email.config.descriptor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,MAAM,UAAU,GAA6B;IAC5C,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY;IAC7D,WAAW,EAAE,+FAA+F;IAC5G,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc;IAC/C,2EAA2E;IAC3E,+EAA+E;IAC/E,eAAe,EAAE,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,cAAc,CAAC;IACvE,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK;IAC9E,YAAY,EAAE,KAAK;CACnB,CAAC;AACF,eAAe,UAAU,CAAC"}

package/dist/features/email/env.d.ts

@@ -0,0 +1,6 @@
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import { type EmailEnv } from './env.schema.ts';
+/** Compatibility name: this projects auth.email config, and never reads env. */
+export declare function getEmailEnv(runtime: VibesRuntime): Promise<EmailEnv>;
+export type { EmailEnv } from './env.schema.ts';
+//# sourceMappingURL=env.d.ts.map

package/dist/features/email/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/features/email/env.ts"],"names":[],"mappings":"AACA,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEhE,gFAAgF;AAChF,wBAAsB,WAAW,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAM1E;AACD,YAAY,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/features/email/env.js

@@ -0,0 +1,14 @@
+import * as z from 'zod/v4';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { EmailEnvSchema } from "./env.schema.js";
+/** Compatibility name: this projects auth.email config, and never reads env. */
+export async function getEmailEnv(runtime) {
+    if (!runtime)
+        throw new CapabilityError('Auth email requires the caller runtime.', 'UNAVAILABLE', { reason: 'email-runtime-required', retryable: false });
+    const manifest = await runtime.query('config/manifest').withId('auth.email').resolve();
+    const parsed = EmailEnvSchema.safeParse(await manifest.load() ?? {});
+    if (!parsed.success)
+        throw new CapabilityError('Auth email configuration is invalid.', 'INVALID_INPUT', { reason: 'auth-email-config-invalid', cause: parsed.error });
+    return parsed.data;
+}
+//# sourceMappingURL=env.js.map

package/dist/features/email/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../src/features/email/env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAqB,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAiB,MAAM,iBAAiB,CAAC;AAEhE,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAqB;IACtD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,eAAe,CAAC,yCAAyC,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1J,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAA4F,iBAAiB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;IAClL,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,eAAe,CAAC,sCAAsC,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACtK,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC"}

package/dist/features/email/env.schema.d.ts

@@ -0,0 +1,50 @@
+import * as z from 'zod/v4';
+/** Auth mail policy is configuration. Credentials are references, never values. */
+export declare const EmailEnvSchema: z.ZodObject<{
+    email: z.ZodDefault<z.ZodObject<{
+        provider: z.ZodDefault<z.ZodEnum<{
+            console: "console";
+            smtp: "smtp";
+            "proton-smtp": "proton-smtp";
+            resend: "resend";
+            "cloudflare-email": "cloudflare-email";
+        }>>;
+        console: z.ZodDefault<z.ZodBoolean>;
+        from: z.ZodOptional<z.ZodString>;
+        host: z.ZodOptional<z.ZodString>;
+        port: z.ZodDefault<z.ZodString>;
+        secure: z.ZodDefault<z.ZodBoolean>;
+        user: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"secret">;
+            key: z.ZodString;
+            store: z.ZodOptional<z.ZodString>;
+            operation: z.ZodOptional<z.ZodCustom<object, object>>;
+        }, z.core.$strict>], "source">>;
+        pass: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            source: z.ZodLiteral<"secret">;
+            key: z.ZodString;
+            store: z.ZodOptional<z.ZodString>;
+            operation: z.ZodOptional<z.ZodCustom<object, object>>;
+        }, z.core.$strict>], "source">>;
+        protonSmtp: z.ZodDefault<z.ZodObject<{
+            host: z.ZodOptional<z.ZodString>;
+            port: z.ZodDefault<z.ZodString>;
+            secure: z.ZodDefault<z.ZodBoolean>;
+            user: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                source: z.ZodLiteral<"secret">;
+                key: z.ZodString;
+                store: z.ZodOptional<z.ZodString>;
+                operation: z.ZodOptional<z.ZodCustom<object, object>>;
+            }, z.core.$strict>], "source">>;
+            token: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                source: z.ZodLiteral<"secret">;
+                key: z.ZodString;
+                store: z.ZodOptional<z.ZodString>;
+                operation: z.ZodOptional<z.ZodCustom<object, object>>;
+            }, z.core.$strict>], "source">>;
+            from: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type EmailEnv = z.infer<typeof EmailEnvSchema>;
+//# sourceMappingURL=env.schema.d.ts.map

package/dist/features/email/env.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.schema.d.ts","sourceRoot":"","sources":["../../../src/features/email/env.schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,mFAAmF;AACnF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAmBhB,CAAC;AACZ,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/features/email/env.schema.js

@@ -0,0 +1,25 @@
+import * as z from 'zod/v4';
+import { CredentialReferenceSchema } from '@vibesdotdev/kernel/credentials';
+import { EmailProviderModeSchema } from "./schemas/transport.js";
+/** Auth mail policy is configuration. Credentials are references, never values. */
+export const EmailEnvSchema = z.object({
+    email: z.object({
+        provider: EmailProviderModeSchema.default('console'),
+        console: z.boolean().default(false),
+        from: z.string().optional(),
+        host: z.string().optional(),
+        port: z.string().default('587'),
+        secure: z.boolean().default(false),
+        user: CredentialReferenceSchema.optional(),
+        pass: CredentialReferenceSchema.optional(),
+        protonSmtp: z.object({
+            host: z.string().optional(),
+            port: z.string().default('587'),
+            secure: z.boolean().default(false),
+            user: CredentialReferenceSchema.optional(),
+            token: CredentialReferenceSchema.optional(),
+            from: z.string().optional()
+        }).strict().default({ port: '587', secure: false })
+    }).strict().default({ provider: 'console', console: false, port: '587', secure: false, protonSmtp: { port: '587', secure: false } })
+}).strict();
+//# sourceMappingURL=env.schema.js.map

package/dist/features/email/env.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.schema.js","sourceRoot":"","sources":["../../../src/features/email/env.schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,mFAAmF;AACnF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC;QACpD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QAC/B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QAClC,IAAI,EAAE,yBAAyB,CAAC,QAAQ,EAAE;QAC1C,IAAI,EAAE,yBAAyB,CAAC,QAAQ,EAAE;QAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;YAC/B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;YAClC,IAAI,EAAE,yBAAyB,CAAC,QAAQ,EAAE;YAC1C,KAAK,EAAE,yBAAyB,CAAC,QAAQ,EAAE;YAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SAC3B,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;KACnD,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;CACpI,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/features/email/provider.d.ts

@@ -0,0 +1,8 @@
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import type { EmailProviderMode, ResolvedTransportOptions } from './schemas/transport.ts';
+/** Policy inspection only. The email integration owns delivery and credential use. */
+export declare function resolveEmailProviderMode(runtime: VibesRuntime): Promise<EmailProviderMode>;
+/** Return declared transport options with references, never resolved secret values. */
+export declare function resolveTransportOptions(runtime: VibesRuntime): Promise<ResolvedTransportOptions>;
+export type { EmailProviderMode, ResolvedSmtpConfig, ResolvedTransportOptions, TransportOptions } from './schemas/transport.ts';
+//# sourceMappingURL=provider.d.ts.map

package/dist/features/email/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../src/features/email/provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,OAAO,KAAK,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAE1F,sFAAsF;AACtF,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAEhG;AAED,uFAAuF;AACvF,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAetG;AACD,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/features/email/provider.js

@@ -0,0 +1,25 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { getEmailEnv } from "./env.js";
+/** Policy inspection only. The email integration owns delivery and credential use. */
+export async function resolveEmailProviderMode(runtime) {
+    return (await getEmailEnv(runtime)).email.provider;
+}
+/** Return declared transport options with references, never resolved secret values. */
+export async function resolveTransportOptions(runtime) {
+    const { email } = await getEmailEnv(runtime);
+    if (email.provider === 'smtp' || email.provider === 'proton-smtp') {
+        const config = email.provider === 'smtp' ? email : email.protonSmtp;
+        const password = email.provider === 'smtp' ? email.pass : email.protonSmtp.token;
+        const from = config.from ?? email.from;
+        const port = Number(config.port);
+        if (!config.host || !config.user || !password || !from || !Number.isInteger(port) || port < 1 || port > 65535) {
+            throw new CapabilityError('Declared SMTP configuration is incomplete.', 'INVALID_INPUT', { reason: 'auth-email-config-incomplete' });
+        }
+        return { provider: email.provider, from, options: { host: config.host, port, secure: config.secure, auth: { user: config.user, pass: password } } };
+    }
+    const result = { provider: email.provider };
+    if (email.from)
+        result.from = email.from;
+    return result;
+}
+//# sourceMappingURL=provider.js.map

package/dist/features/email/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../src/features/email/provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAGvC,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAAqB;IACnE,OAAO,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;AACpD,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAqB;IAClE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;QACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACjF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;YAC/G,MAAM,IAAI,eAAe,CAAC,4CAA4C,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACtI,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACrJ,CAAC;IACD,MAAM,MAAM,GAA6B,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IACtE,IAAI,KAAK,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACzC,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/features/email/resolver.d.ts

@@ -0,0 +1,48 @@
+/**
+ * `notifications/email-resolver` factory for the auth feature.
+ *
+ * The notifications-email channel adapter looks up `userId → email` through
+ * `runtime.query('notifications/email-resolver')`. Auth owns the canonical
+ * user identity in this repository-collection, so auth registers the impl — but the
+ * actual DB query lives in the consuming app (e.g. `apps/auth-web`) because
+ * the users table is app-local Drizzle. This factory takes the app's
+ * lookup callback and returns the impl ready to register.
+ *
+ * Usage at bootstrap (`apps/auth-web/src/lib/app/vibeskit.ts` or similar):
+ *
+ * ```ts
+ * import { createAuthEmailResolver, authEmailResolverDescriptor } from '@vibesdotdev/auth/features/email/resolver';
+ *
+ * runtime.registerDescriptor('notifications/email-resolver', authEmailResolverDescriptor);
+ * runtime.registerLoader('notifications/email-resolver', authEmailResolverDescriptor.id, async () => ({
+ *   impl: createAuthEmailResolver(async (userId) => {
+ *     const user = await db.query.users.findFirst({ where: eq(users.id, userId) });
+ *     return user?.email ?? null;
+ *   })
+ * }));
+ * ```
+ */
+import type { NotificationEmailResolverImplementation } from '@vibesdotdev/notifications/schemas';
+/**
+ * Canonical descriptor for auth's `notifications/email-resolver` impl.
+ * Apps register this verbatim; only the loader (which closes over the
+ * app's DB lookup) is app-specific.
+ */
+export declare const authEmailResolverDescriptor: {
+    kind: "notifications/email-resolver";
+    id: string;
+    name: string;
+    description: string;
+    priority: number;
+    enabled: true;
+    tags: string[];
+};
+/**
+ * Wrap an app-provided lookup function in the
+ * `NotificationEmailResolverImplementation` contract. The lookup is called
+ * for every outbound `notifications/delivery-channel` `email` send; apps
+ * should keep it cheap (cache the user table in memory, or hit a single
+ * indexed row).
+ */
+export declare function createAuthEmailResolver(lookup: (userId: string) => Promise<string | null> | string | null): NotificationEmailResolverImplementation;
+//# sourceMappingURL=resolver.d.ts.map

package/dist/features/email/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../src/features/email/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAEX,uCAAuC,EACvC,MAAM,oCAAoC,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;CASO,CAAC;AAEhD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACtC,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,GAChE,uCAAuC,CAOzC"}

package/dist/features/email/resolver.js

@@ -0,0 +1,54 @@
+/**
+ * `notifications/email-resolver` factory for the auth feature.
+ *
+ * The notifications-email channel adapter looks up `userId → email` through
+ * `runtime.query('notifications/email-resolver')`. Auth owns the canonical
+ * user identity in this repository-collection, so auth registers the impl — but the
+ * actual DB query lives in the consuming app (e.g. `apps/auth-web`) because
+ * the users table is app-local Drizzle. This factory takes the app's
+ * lookup callback and returns the impl ready to register.
+ *
+ * Usage at bootstrap (`apps/auth-web/src/lib/app/vibeskit.ts` or similar):
+ *
+ * ```ts
+ * import { createAuthEmailResolver, authEmailResolverDescriptor } from '@vibesdotdev/auth/features/email/resolver';
+ *
+ * runtime.registerDescriptor('notifications/email-resolver', authEmailResolverDescriptor);
+ * runtime.registerLoader('notifications/email-resolver', authEmailResolverDescriptor.id, async () => ({
+ *   impl: createAuthEmailResolver(async (userId) => {
+ *     const user = await db.query.users.findFirst({ where: eq(users.id, userId) });
+ *     return user?.email ?? null;
+ *   })
+ * }));
+ * ```
+ */
+/**
+ * Canonical descriptor for auth's `notifications/email-resolver` impl.
+ * Apps register this verbatim; only the loader (which closes over the
+ * app's DB lookup) is app-specific.
+ */
+export const authEmailResolverDescriptor = {
+    kind: 'notifications/email-resolver',
+    id: 'auth.email-resolver',
+    name: 'Auth user → email resolver',
+    description: 'Translates `userId` to the recipient email address by looking it up against the app-local users table.',
+    priority: 100,
+    enabled: true,
+    tags: ['auth', 'email-resolver']
+};
+/**
+ * Wrap an app-provided lookup function in the
+ * `NotificationEmailResolverImplementation` contract. The lookup is called
+ * for every outbound `notifications/delivery-channel` `email` send; apps
+ * should keep it cheap (cache the user table in memory, or hit a single
+ * indexed row).
+ */
+export function createAuthEmailResolver(lookup) {
+    return {
+        descriptor: authEmailResolverDescriptor,
+        resolve(userId) {
+            return lookup(userId);
+        }
+    };
+}
+//# sourceMappingURL=resolver.js.map

package/dist/features/email/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../../src/features/email/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAOH;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IAC1C,IAAI,EAAE,8BAA8B;IACpC,EAAE,EAAE,qBAAqB;IACzB,IAAI,EAAE,4BAA4B;IAClC,WAAW,EACV,wGAAwG;IACzG,QAAQ,EAAE,GAAG;IACb,OAAO,EAAE,IAAI;IACb,IAAI,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACc,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACtC,MAAkE;IAElE,OAAO;QACN,UAAU,EAAE,2BAA2B;QACvC,OAAO,CAAC,MAAc;YACrB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/features/email/schemas/common.d.ts

@@ -0,0 +1,146 @@
+import * as z from 'zod/v4';
+export declare const emailTemplateTypeSchema: z.ZodEnum<{
+    verification: "verification";
+    "password-reset": "password-reset";
+    welcome: "welcome";
+    "login-notification": "login-notification";
+    "account-approved": "account-approved";
+    "referral-qualified": "referral-qualified";
+    "organization-invitation": "organization-invitation";
+}>;
+export declare const emailDataSchema: z.ZodObject<{
+    to: z.ZodEmail;
+    subject: z.ZodString;
+    template: z.ZodEnum<{
+        verification: "verification";
+        "password-reset": "password-reset";
+        welcome: "welcome";
+        "login-notification": "login-notification";
+        "account-approved": "account-approved";
+        "referral-qualified": "referral-qualified";
+        "organization-invitation": "organization-invitation";
+    }>;
+    data: z.ZodObject<{
+        name: z.ZodString;
+        url: z.ZodOptional<z.ZodURL>;
+        code: z.ZodOptional<z.ZodString>;
+        expiresInMinutes: z.ZodOptional<z.ZodNumber>;
+        referredName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        referredEmail: z.ZodOptional<z.ZodString>;
+        qualifiedCount: z.ZodOptional<z.ZodNumber>;
+        threshold: z.ZodOptional<z.ZodNumber>;
+        organizationName: z.ZodOptional<z.ZodString>;
+        inviterName: z.ZodOptional<z.ZodString>;
+        role: z.ZodOptional<z.ZodString>;
+        inviteEmail: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const emailRateLimitSchema: z.ZodObject<{
+    key: z.ZodString;
+    limit: z.ZodNumber;
+    window: z.ZodNumber;
+    remaining: z.ZodNumber;
+    resetAt: z.ZodDate;
+}, z.core.$strip>;
+export declare const emailTemplateContextSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+export declare const emailConfigSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+export declare const emailSendResultSchema: z.ZodObject<{
+    success: z.ZodBoolean;
+    messageId: z.ZodOptional<z.ZodString>;
+    error: z.ZodOptional<z.ZodString>;
+    rateLimited: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type EmailTemplateType = z.infer<typeof emailTemplateTypeSchema>;
+export type EmailData = z.infer<typeof emailDataSchema>;
+export type EmailRateLimit = z.infer<typeof emailRateLimitSchema>;
+export type EmailSendResult = z.infer<typeof emailSendResultSchema>;
+export declare const emailTemplateDataSchema: z.ZodObject<{
+    type: z.ZodEnum<{
+        verification: "verification";
+        "password-reset": "password-reset";
+        welcome: "welcome";
+        "login-notification": "login-notification";
+        "account-approved": "account-approved";
+        "referral-qualified": "referral-qualified";
+        "organization-invitation": "organization-invitation";
+    }>;
+    context: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    subject: z.ZodString;
+    previewText: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type EmailTemplateData = z.infer<typeof emailTemplateDataSchema>;
+export declare const emailQueueJobSchema: z.ZodObject<{
+    id: z.ZodString;
+    type: z.ZodEnum<{
+        verification: "verification";
+        "password-reset": "password-reset";
+        welcome: "welcome";
+        "login-notification": "login-notification";
+        "account-approved": "account-approved";
+        "referral-qualified": "referral-qualified";
+        "organization-invitation": "organization-invitation";
+    }>;
+    recipient: z.ZodEmail;
+    templateData: z.ZodObject<{
+        type: z.ZodEnum<{
+            verification: "verification";
+            "password-reset": "password-reset";
+            welcome: "welcome";
+            "login-notification": "login-notification";
+            "account-approved": "account-approved";
+            "referral-qualified": "referral-qualified";
+            "organization-invitation": "organization-invitation";
+        }>;
+        context: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        subject: z.ZodString;
+        previewText: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    attempts: z.ZodDefault<z.ZodNumber>;
+    maxAttempts: z.ZodDefault<z.ZodNumber>;
+    priority: z.ZodDefault<z.ZodNumber>;
+    delay: z.ZodDefault<z.ZodNumber>;
+    createdAt: z.ZodDate;
+    scheduledAt: z.ZodOptional<z.ZodDate>;
+}, z.core.$strip>;
+export type EmailQueueJob = z.infer<typeof emailQueueJobSchema>;
+export declare const emailStatsSchema: z.ZodObject<{
+    sent: z.ZodNumber;
+    failed: z.ZodNumber;
+    queued: z.ZodNumber;
+    rateLimited: z.ZodNumber;
+    lastSentAt: z.ZodNullable<z.ZodDate>;
+    lastFailureAt: z.ZodNullable<z.ZodDate>;
+}, z.core.$strip>;
+export type EmailStats = z.infer<typeof emailStatsSchema>;
+export declare const emailProviderSchema: z.ZodEnum<{
+    console: "console";
+    smtp: "smtp";
+    "proton-smtp": "proton-smtp";
+    resend: "resend";
+    "cloudflare-email": "cloudflare-email";
+    nodemailer: "nodemailer";
+}>;
+export type EmailProvider = z.infer<typeof emailProviderSchema>;
+export declare const emailServiceConfigSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        console: "console";
+        smtp: "smtp";
+        "proton-smtp": "proton-smtp";
+        resend: "resend";
+        "cloudflare-email": "cloudflare-email";
+        nodemailer: "nodemailer";
+    }>;
+    config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    rateLimit: z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        maxEmails: z.ZodDefault<z.ZodNumber>;
+        windowSeconds: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>;
+    queue: z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        maxRetries: z.ZodDefault<z.ZodNumber>;
+        retryDelay: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type EmailServiceConfig = z.infer<typeof emailServiceConfigSchema>;
+//# sourceMappingURL=common.d.ts.map

package/dist/features/email/schemas/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../../src/features/email/schemas/common.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAK5B,eAAO,MAAM,uBAAuB;;;;;;;;EAQlC,CAAC;AAGH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqB1B,CAAC;AAGH,eAAO,MAAM,oBAAoB;;;;;;iBAM/B,CAAC;AAKH,eAAO,MAAM,0BAA0B,wCAAoC,CAAC;AAG5E,eAAO,MAAM,iBAAiB,wCAAoC,CAAC;AAGnE,eAAO,MAAM,qBAAqB;;;;;iBAKhC,CAAC;AAIH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAGpE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;iBAKlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAGxE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAW9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAGhE,eAAO,MAAM,gBAAgB;;;;;;;iBAO3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,eAAO,MAAM,mBAAmB;;;;;;;EAO9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAGhE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;iBAanC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/features/email/schemas/common.js

@@ -0,0 +1,109 @@
+import * as z from 'zod/v4';
+// BASE SCHEMAS - Primary source of truth
+// Email template types
+export const emailTemplateTypeSchema = z.enum([
+    'verification',
+    'password-reset',
+    'welcome',
+    'login-notification',
+    'account-approved',
+    'referral-qualified',
+    'organization-invitation'
+]);
+// Base email data schema
+export const emailDataSchema = z.object({
+    to: z.email(),
+    subject: z.string(),
+    template: emailTemplateTypeSchema,
+    data: z.object({
+        name: z.string(),
+        url: z.url().optional(),
+        code: z.string().optional(),
+        expiresInMinutes: z.number().optional(),
+        // Referral-qualified fields. Optional so existing templates aren't
+        // affected; only referral-qualified touches these.
+        referredName: z.string().nullable().optional(),
+        referredEmail: z.string().optional(),
+        qualifiedCount: z.number().int().nonnegative().optional(),
+        threshold: z.number().int().nonnegative().optional(),
+        // Organization invitation fields
+        organizationName: z.string().optional(),
+        inviterName: z.string().optional(),
+        role: z.string().optional(),
+        inviteEmail: z.string().optional()
+    })
+});
+// Rate limit schema
+export const emailRateLimitSchema = z.object({
+    key: z.string(),
+    limit: z.number().int().positive(),
+    window: z.number().int().positive(), // seconds
+    remaining: z.number().int().min(0),
+    resetAt: z.date()
+});
+// COMPOSITE SCHEMAS
+// Email template context schema
+export const emailTemplateContextSchema = z.record(z.string(), z.unknown());
+// Email config schema
+export const emailConfigSchema = z.record(z.string(), z.unknown());
+// Email send result
+export const emailSendResultSchema = z.object({
+    success: z.boolean(),
+    messageId: z.string().optional(),
+    error: z.string().optional(),
+    rateLimited: z.boolean().default(false)
+});
+// Email template data schema
+export const emailTemplateDataSchema = z.object({
+    type: emailTemplateTypeSchema,
+    context: emailTemplateContextSchema,
+    subject: z.string(),
+    previewText: z.string().optional()
+});
+// Email queue job schema
+export const emailQueueJobSchema = z.object({
+    id: z.string(),
+    type: emailTemplateTypeSchema,
+    recipient: z.email(),
+    templateData: emailTemplateDataSchema,
+    attempts: z.number().int().min(0).default(0),
+    maxAttempts: z.number().int().positive().default(3),
+    priority: z.number().int().min(1).max(10).default(5),
+    delay: z.number().int().min(0).default(0), // milliseconds
+    createdAt: z.date(),
+    scheduledAt: z.date().optional()
+});
+// Email statistics schema
+export const emailStatsSchema = z.object({
+    sent: z.number().int().min(0),
+    failed: z.number().int().min(0),
+    queued: z.number().int().min(0),
+    rateLimited: z.number().int().min(0),
+    lastSentAt: z.date().nullable(),
+    lastFailureAt: z.date().nullable()
+});
+// Email provider schema
+export const emailProviderSchema = z.enum([
+    'smtp',
+    'proton-smtp',
+    'console',
+    'nodemailer',
+    'resend',
+    'cloudflare-email'
+]);
+// Email service configuration schema
+export const emailServiceConfigSchema = z.object({
+    provider: emailProviderSchema,
+    config: emailConfigSchema.optional(),
+    rateLimit: z.object({
+        enabled: z.boolean().default(true),
+        maxEmails: z.number().int().positive().default(10),
+        windowSeconds: z.number().int().positive().default(3600) // 1 hour
+    }),
+    queue: z.object({
+        enabled: z.boolean().default(false),
+        maxRetries: z.number().int().positive().default(3),
+        retryDelay: z.number().int().positive().default(5000) // 5 seconds
+    })
+});
+//# sourceMappingURL=common.js.map

package/dist/features/email/schemas/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../../src/features/email/schemas/common.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,yCAAyC;AAEzC,uBAAuB;AACvB,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7C,cAAc;IACd,gBAAgB;IAChB,SAAS;IACT,oBAAoB;IACpB,kBAAkB;IAClB,oBAAoB;IACpB,yBAAyB;CACzB,CAAC,CAAC;AAEH,yBAAyB;AACzB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE;IACb,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,uBAAuB;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,mEAAmE;QACnE,mDAAmD;QACnD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACpC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QACpD,iCAAiC;QACjC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC;CACF,CAAC,CAAC;AAEH,oBAAoB;AACpB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,UAAU;IAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;CACjB,CAAC,CAAC;AAEH,oBAAoB;AAEpB,gCAAgC;AAChC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAE5E,sBAAsB;AACtB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAEnE,oBAAoB;AACpB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACvC,CAAC,CAAC;AASH,6BAA6B;AAC7B,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,uBAAuB;IAC7B,OAAO,EAAE,0BAA0B;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,yBAAyB;AACzB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,uBAAuB;IAC7B,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE;IACpB,YAAY,EAAE,uBAAuB;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe;IAC1D,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAGH,0BAA0B;AAC1B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC/B,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,wBAAwB;AACxB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC;IACzC,MAAM;IACN,aAAa;IACb,SAAS;IACT,YAAY;IACZ,QAAQ;IACR,kBAAkB;CAClB,CAAC,CAAC;AAGH,qCAAqC;AACrC,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,QAAQ,EAAE,mBAAmB;IAC7B,MAAM,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS;KAClE,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAClD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY;KAClE,CAAC;CACF,CAAC,CAAC"}

package/dist/features/email/schemas/forms.d.ts

@@ -0,0 +1,72 @@
+import * as z from 'zod/v4';
+export declare const emailVerificationRequestSchema: z.ZodObject<{
+    email: z.ZodEmail;
+    redirectUrl: z.ZodOptional<z.ZodURL>;
+}, z.core.$strip>;
+export type EmailVerificationRequest = z.infer<typeof emailVerificationRequestSchema>;
+export declare const passwordResetRequestSchema: z.ZodObject<{
+    email: z.ZodEmail;
+    redirectUrl: z.ZodOptional<z.ZodURL>;
+}, z.core.$strip>;
+export type PasswordResetRequest = z.infer<typeof passwordResetRequestSchema>;
+export declare const emailVerificationTokenSchema: z.ZodObject<{
+    token: z.ZodString;
+    email: z.ZodOptional<z.ZodEmail>;
+}, z.core.$strip>;
+export type EmailVerificationToken = z.infer<typeof emailVerificationTokenSchema>;
+export declare const passwordResetTokenSchema: z.ZodObject<{
+    token: z.ZodString;
+    email: z.ZodOptional<z.ZodEmail>;
+    newPassword: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type PasswordResetToken = z.infer<typeof passwordResetTokenSchema>;
+export declare const emailTemplateFormSchema: z.ZodObject<{
+    templateType: z.ZodEnum<{
+        verification: "verification";
+        "password-reset": "password-reset";
+        welcome: "welcome";
+        "login-notification": "login-notification";
+    }>;
+    recipient: z.ZodEmail;
+    context: z.ZodObject<{
+        displayName: z.ZodOptional<z.ZodString>;
+        url: z.ZodOptional<z.ZodURL>;
+        token: z.ZodOptional<z.ZodString>;
+        expiresAt: z.ZodOptional<z.ZodISODateTime>;
+    }, z.core.$strip>;
+    subject: z.ZodString;
+    previewText: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type EmailTemplateForm = z.infer<typeof emailTemplateFormSchema>;
+export declare const bulkEmailSendSchema: z.ZodObject<{
+    recipients: z.ZodArray<z.ZodEmail>;
+    templateType: z.ZodEnum<{
+        verification: "verification";
+        "password-reset": "password-reset";
+        welcome: "welcome";
+        "login-notification": "login-notification";
+    }>;
+    subject: z.ZodString;
+    context: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    scheduleAt: z.ZodOptional<z.ZodISODateTime>;
+}, z.core.$strip>;
+export type BulkEmailSend = z.infer<typeof bulkEmailSendSchema>;
+export declare const emailPreferencesSchema: z.ZodObject<{
+    marketing: z.ZodDefault<z.ZodBoolean>;
+    security: z.ZodDefault<z.ZodBoolean>;
+    product: z.ZodDefault<z.ZodBoolean>;
+    system: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type EmailPreferences = z.infer<typeof emailPreferencesSchema>;
+export declare const emailBounceSchema: z.ZodObject<{
+    email: z.ZodEmail;
+    bounceType: z.ZodEnum<{
+        hard: "hard";
+        soft: "soft";
+    }>;
+    reason: z.ZodString;
+    timestamp: z.ZodISODateTime;
+    messageId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type EmailBounce = z.infer<typeof emailBounceSchema>;
+//# sourceMappingURL=forms.d.ts.map

package/dist/features/email/schemas/forms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms.d.ts","sourceRoot":"","sources":["../../../../src/features/email/schemas/forms.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,8BAA8B;;;iBAGzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAGtF,eAAO,MAAM,0BAA0B;;;iBAGrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAG9E,eAAO,MAAM,4BAA4B;;;iBAGvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAGlF,eAAO,MAAM,wBAAwB;;;;iBAInC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAG1E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;iBAWlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAGxE,eAAO,MAAM,mBAAmB;;;;;;;;;;;iBAS9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAGhE,eAAO,MAAM,sBAAsB;;;;;iBAKjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAGtE,eAAO,MAAM,iBAAiB;;;;;;;;;iBAM5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}