@wildo-ai/saas-backend-lib 1.1.2 → 1.1.4

package/dist/esm/notifications/email/services/email-template-compiler.backend.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-template-compiler.backend.service.js","sourceRoot":"","sources":["../../../../../../src/notifications/email/services/email-template-compiler.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAgBpF,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAGzE,IAAM,mCAAmC,GAAzC,MAAM,mCAAmC;IAIQ;IAH5C,QAAQ,CAA+D;IAEjF,YACsD,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;QAEzE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,qCAAqC,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;IAChF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC,QAAQ,CAAC,4CAA4C,CAAC,CAAC;QAE5D,IAAI,CAAC;YACH,sBAAsB;YACtB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAExC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE;gBAChD,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,KAAK,EAAE,4BAA4B;gBAC3C,GAAG,EAAE,WAAW;gBAChB,eAAe,EAAE,OAAO;gBACxB,MAAM,EAAE,KAAK,EAAE,8BAA8B;gBAC7C,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,MAAM;gBAChB,mDAAmD;gBACnD,uCAAuC;aACxC,CAAC,CAAC;YAEH,mBAAmB;YACnB,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACtC,MAAM,GAAG,GAAG,QAAQ,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,GAAG,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;oBACrE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,uCAAuC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAEvE,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,MAAM,CAAC,IAAI;gBACzB,SAAS,EAAE,MAAM,CAAC,GAAG;gBACrB,MAAM;gBACN,QAAQ;gBACR,UAAU;aACX,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAgF,CAAC;YAC/F,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE1C,uBAAuB;YACvB,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC7B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YAE/E,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM;gBACN,QAAQ;gBACR,UAAU;aACX,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kBAAkB,CAAC,SAAiB;QAKxC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAE7C,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY;YACpC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC;YAChD,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,MAAM;YACN,SAAS;YACT,UAAU;SACX,CAAC;IACJ,CAAC;CACF,CAAA;AA1GY,mCAAmC;IAD/C,UAAU,EAAE;IAKR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;;GAJzB,mCAAmC,CA0G/C","sourcesContent":["/**\n * Email Template Compiler Backend Service\n *\n * Compiles TSX email templates to JavaScript modules using ESBuild.\n * The compiled modules can be executed in the VM sandbox for rendering.\n */\n\nimport { injectable, inject } from 'inversify';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// TYPES\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface CompilationResult {\n  success: boolean;\n  compiledCode?: string;\n  sourceMap?: string;\n  errors: string[];\n  warnings: string[];\n  durationMs: number;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// SERVICE\n// ─────────────────────────────────────────────────────────────────────────────\n\n@injectable()\nexport class EmailTemplateCompilerBackendService {\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: LoggerService,\n  ) {\n    this.logDebug = this.logger.debugByType('EmailTemplateCompilerBackendService');\n    this.logger.setDebugTypeLogging('EmailTemplateCompilerBackendService', false);\n  }\n\n  /**\n   * Compile TSX source to JavaScript module\n   *\n   * @param tsxSource - The TSX template source code\n   * @returns Compilation result with compiled code or errors\n   */\n  async compile(tsxSource: string): Promise<CompilationResult> {\n    const startTime = Date.now();\n    const errors: string[] = [];\n    const warnings: string[] = [];\n\n    this.logDebug('Compiling email template TSX to JavaScript');\n\n    try {\n      // Lazy import esbuild\n      const esbuild = await import('esbuild');\n\n      const result = await esbuild.transform(tsxSource, {\n        loader: 'tsx',\n        target: 'es2020',\n        format: 'cjs', // CommonJS for VM execution\n        jsx: 'automatic',\n        jsxImportSource: 'react',\n        minify: false, // Keep readable for debugging\n        sourcemap: true,\n        platform: 'node',\n        // Note: external is not available for transform(),\n        // VM sandbox handles module resolution\n      });\n\n      // Collect warnings\n      if (result.warnings && result.warnings.length > 0) {\n        for (const warning of result.warnings) {\n          const msg = `Line ${warning.location?.line || '?'}: ${warning.text}`;\n          warnings.push(msg);\n          this.logger.warn('ESBuild warning during compilation', { message: msg });\n        }\n      }\n\n      const durationMs = Date.now() - startTime;\n      this.logDebug('Email template compilation successful', { durationMs });\n\n      return {\n        success: true,\n        compiledCode: result.code,\n        sourceMap: result.map,\n        errors,\n        warnings,\n        durationMs,\n      };\n    } catch (err) {\n      const error = err as Error & { errors?: Array<{ text: string; location?: { line: number } }> };\n      const durationMs = Date.now() - startTime;\n\n      // ESBuild error format\n      if (error.errors && Array.isArray(error.errors)) {\n        for (const e of error.errors) {\n          errors.push(`Line ${e.location?.line || '?'}: ${e.text}`);\n        }\n      } else {\n        errors.push(error.message);\n      }\n\n      this.logger.error('Email template compilation failed', { errors, durationMs });\n\n      return {\n        success: false,\n        errors,\n        warnings,\n        durationMs,\n      };\n    }\n  }\n\n  /**\n   * Compile and return detailed information about the compilation\n   * Useful for debugging and development\n   */\n  async compileWithDetails(tsxSource: string): Promise<{\n    result: CompilationResult;\n    inputSize: number;\n    outputSize?: number;\n  }> {\n    const inputSize = Buffer.byteLength(tsxSource, 'utf8');\n    const result = await this.compile(tsxSource);\n\n    const outputSize = result.compiledCode\n      ? Buffer.byteLength(result.compiledCode, 'utf8')\n      : undefined;\n\n    return {\n      result,\n      inputSize,\n      outputSize,\n    };\n  }\n}\n"]}

package/dist/esm/notifications/email/services/email-template-sandbox.backend.service.d.ts

@@ -1,58 +0,0 @@
-/**
- * Email Template Sandbox Backend Service
- *
- * Provides a secure execution environment for running compiled email templates.
- * Uses Node.js VM with restricted globals and a controlled require function.
- */
-import type { LoggerService } from '../../../monitoring/logger/services/logger.service';
-import type { ErrorBuilderBackendService } from '../../../errors/services/error-builder.backend.service';
-export interface SandboxExecutionResult {
-    success: boolean;
-    result?: unknown;
-    error?: string;
-    durationMs: number;
-}
-export interface SandboxOptions {
-    /** Timeout in milliseconds (default: 5000) */
-    timeout?: number;
-    /** Additional context to pass to the template */
-    additionalContext?: Record<string, unknown>;
-}
-export declare class EmailTemplateSandboxBackendService {
-    private readonly logger;
-    private readonly errorBuilder;
-    private emailComponentsModule;
-    protected logDebug: (message: string, context?: Record<string, unknown>) => void;
-    constructor(logger: LoggerService, errorBuilder: ErrorBuilderBackendService);
-    /**
-     * Execute a compiled module in the sandbox
-     *
-     * @param compiledCode - The compiled JavaScript code
-     * @param context - The context to pass to the template
-     * @param options - Execution options
-     * @returns Execution result with the rendered output or error
-     */
-    execute(compiledCode: string, context: Record<string, unknown>, options?: SandboxOptions): Promise<SandboxExecutionResult>;
-    /**
-     * Create a safe require function that only allows specific modules
-     */
-    private createSandboxRequire;
-    /**
-     * Get the email components module (lazy loaded)
-     * Uses multiple resolution strategies for robustness across different build outputs
-     */
-    private getEmailComponentsModule;
-    /**
-     * Create a safe console that logs through our logger
-     */
-    private createSafeConsole;
-    /**
-     * Check if a module is allowed in the sandbox
-     */
-    isModuleAllowed(moduleName: string): boolean;
-    /**
-     * Get list of allowed modules (for LLM context)
-     */
-    getAllowedModules(): string[];
-}
-//# sourceMappingURL=email-template-sandbox.backend.service.d.ts.map

package/dist/esm/notifications/email/services/email-template-sandbox.backend.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-template-sandbox.backend.service.d.ts","sourceRoot":"","sources":["../../../../../../src/notifications/email/services/email-template-sandbox.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAMnH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAuBD,qBACa,kCAAkC;IAMR,OAAO,CAAC,QAAQ,CAAC,MAAM;IACV,OAAO,CAAC,QAAQ,CAAC,YAAY;IAN/E,OAAO,CAAC,qBAAqB,CAAwB;IAErD,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;gBAG3B,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B;IAM3G;;;;;;;OAOG;IACG,OAAO,CACX,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,sBAAsB,CAAC;IA8ElC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAqB5B;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAiChC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAoBzB;;OAEG;IACH,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAI5C;;OAEG;IACH,iBAAiB,IAAI,MAAM,EAAE;CAG9B"}

package/dist/esm/notifications/email/services/email-template-sandbox.backend.service.js

@@ -1,223 +0,0 @@
-/**
- * Email Template Sandbox Backend Service
- *
- * Provides a secure execution environment for running compiled email templates.
- * Uses Node.js VM with restricted globals and a controlled require function.
- */
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-import { injectable, inject } from 'inversify';
-import * as vm from 'vm';
-import { ErrorType, ErrorCustomMessageReference } from '@wildo-ai/saas-models';
-import { SAAS_SERVICE_TYPES } from '../../../inject/models/service-types.js';
-// ─────────────────────────────────────────────────────────────────────────────
-// CONSTANTS
-// ─────────────────────────────────────────────────────────────────────────────
-const DEFAULT_TIMEOUT_MS = 5000;
-/**
- * Allowed modules that can be required in the sandbox
- */
-const ALLOWED_MODULES = new Set([
-    'react',
-    'react-dom',
-    '@react-email/components',
-    '@react-email/render',
-    '@wildo-ai/email-components',
-]);
-// ─────────────────────────────────────────────────────────────────────────────
-// SERVICE
-// ─────────────────────────────────────────────────────────────────────────────
-let EmailTemplateSandboxBackendService = class EmailTemplateSandboxBackendService {
-    logger;
-    errorBuilder;
-    emailComponentsModule = null;
-    logDebug;
-    constructor(logger, errorBuilder) {
-        this.logger = logger;
-        this.errorBuilder = errorBuilder;
-        this.logDebug = this.logger.debugByType('EmailTemplateSandboxBackendService');
-        this.logger.setDebugTypeLogging('EmailTemplateSandboxBackendService', false);
-    }
-    /**
-     * Execute a compiled module in the sandbox
-     *
-     * @param compiledCode - The compiled JavaScript code
-     * @param context - The context to pass to the template
-     * @param options - Execution options
-     * @returns Execution result with the rendered output or error
-     */
-    async execute(compiledCode, context, options = {}) {
-        const startTime = Date.now();
-        const timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;
-        this.logDebug('Executing email template in sandbox', { timeout });
-        try {
-            // Create sandbox require function
-            const sandboxRequire = this.createSandboxRequire();
-            // Create sandbox globals
-            const sandbox = {
-                module: { exports: {} },
-                exports: {},
-                require: sandboxRequire,
-                console: this.createSafeConsole(),
-                // Pass context values
-                __context: context,
-                __brand: context.__brand || {},
-                // Provide Buffer for any serialization needs
-                Buffer: {
-                    from: Buffer.from.bind(Buffer),
-                    isBuffer: Buffer.isBuffer.bind(Buffer),
-                },
-            };
-            // Add additional context if provided
-            if (options.additionalContext) {
-                Object.assign(sandbox, options.additionalContext);
-            }
-            // Create VM context
-            vm.createContext(sandbox);
-            // Wrap the code to capture the default export
-            const wrappedCode = `
-        (function(module, exports, require, __context, __brand) {
-          ${compiledCode}
-          return module.exports.default || module.exports;
-        })(module, exports, require, __context, __brand);
-      `;
-            // Execute with timeout
-            const script = new vm.Script(wrappedCode, {
-                filename: 'email-template.js',
-            });
-            const result = script.runInContext(sandbox, {
-                timeout,
-                displayErrors: true,
-            });
-            const durationMs = Date.now() - startTime;
-            this.logDebug('Sandbox execution completed', { durationMs });
-            return {
-                success: true,
-                result,
-                durationMs,
-            };
-        }
-        catch (err) {
-            const error = err;
-            const durationMs = Date.now() - startTime;
-            this.logger.error('Sandbox execution failed', {
-                error: error.message,
-                durationMs,
-                isTimeout: error.message.includes('Script execution timed out'),
-            });
-            return {
-                success: false,
-                error: error.message,
-                durationMs,
-            };
-        }
-    }
-    /**
-     * Create a safe require function that only allows specific modules
-     */
-    createSandboxRequire() {
-        return (moduleName) => {
-            // Handle @wildo-ai/email-components specially - load our internal module
-            if (moduleName === '@wildo-ai/email-components') {
-                return this.getEmailComponentsModule();
-            }
-            // Check if module is in allowlist
-            if (!ALLOWED_MODULES.has(moduleName)) {
-                throw this.errorBuilder.buildError(ErrorType.VALIDATION, undefined, {
-                    customMessageReference: ErrorCustomMessageReference.SERVICE_RESOURCE_VALIDATION_FAILED,
-                    context: { moduleName }, // diagnostic (log-only)
-                });
-            }
-            // For allowed modules, use the real require
-            // eslint-disable-next-line @typescript-eslint/no-require-imports
-            return require(moduleName);
-        };
-    }
-    /**
-     * Get the email components module (lazy loaded)
-     * Uses multiple resolution strategies for robustness across different build outputs
-     */
-    getEmailComponentsModule() {
-        if (!this.emailComponentsModule) {
-            // Load our internal email components with multiple resolution strategies
-            const resolutionStrategies = [
-                // Strategy 1: Relative path from current file
-                () => require('../components/email-components'),
-                // Strategy 2: Absolute path using __dirname
-                () => require(require('path').resolve(__dirname, '../components/email-components')),
-                // Strategy 3: Try dist/esm path
-                () => require(require('path').resolve(__dirname, '../../dist/esm/notifications/email/components/email-components')),
-                // Strategy 4: Try dist/cjs path
-                () => require(require('path').resolve(__dirname, '../../dist/cjs/notifications/email/components/email-components')),
-            ];
-            for (const strategy of resolutionStrategies) {
-                try {
-                    this.emailComponentsModule = strategy();
-                    this.logDebug('Email components module loaded successfully');
-                    return this.emailComponentsModule;
-                }
-                catch {
-                    // Try next strategy
-                }
-            }
-            this.logger.error('Failed to load email components module with any strategy');
-            throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {
-                customMessageReference: ErrorCustomMessageReference.CONFIGURATION,
-                context: { message: 'Email components module not available' },
-            });
-        }
-        return this.emailComponentsModule;
-    }
-    /**
-     * Create a safe console that logs through our logger
-     */
-    createSafeConsole() {
-        return {
-            log: (...args) => {
-                this.logger.debug('Template console.log', { args });
-            },
-            warn: (...args) => {
-                this.logger.warn('Template console.warn', { args });
-            },
-            error: (...args) => {
-                this.logger.error('Template console.error', { args });
-            },
-            info: (...args) => {
-                this.logger.info('Template console.info', { args });
-            },
-            debug: (...args) => {
-                this.logger.debug('Template console.debug', { args });
-            },
-        };
-    }
-    /**
-     * Check if a module is allowed in the sandbox
-     */
-    isModuleAllowed(moduleName) {
-        return ALLOWED_MODULES.has(moduleName);
-    }
-    /**
-     * Get list of allowed modules (for LLM context)
-     */
-    getAllowedModules() {
-        return Array.from(ALLOWED_MODULES);
-    }
-};
-EmailTemplateSandboxBackendService = __decorate([
-    injectable(),
-    __param(0, inject(SAAS_SERVICE_TYPES.Logger)),
-    __param(1, inject(SAAS_SERVICE_TYPES.ErrorBuilderService)),
-    __metadata("design:paramtypes", [Function, Function])
-], EmailTemplateSandboxBackendService);
-export { EmailTemplateSandboxBackendService };
-//# sourceMappingURL=email-template-sandbox.backend.service.js.map

package/dist/esm/notifications/email/services/email-template-sandbox.backend.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"email-template-sandbox.backend.service.js","sourceRoot":"","sources":["../../../../../../src/notifications/email/services/email-template-sandbox.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAsBpF,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC;;GAEG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,OAAO;IACP,WAAW;IACX,yBAAyB;IACzB,qBAAqB;IACrB,4BAA4B;CAC7B,CAAC,CAAC;AAEH,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAGzE,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;IAMS;IACa;IAN3D,qBAAqB,GAAmB,IAAI,CAAC;IAE3C,QAAQ,CAA+D;IAEjF,YACsD,MAAqB,EACR,YAAwC;QADrD,WAAM,GAAN,MAAM,CAAe;QACR,iBAAY,GAAZ,YAAY,CAA4B;QAEzG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,oCAAoC,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;IAC/E,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CACX,YAAoB,EACpB,OAAgC,EAChC,UAA0B,EAAE;QAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,kBAAkB,CAAC;QAEtD,IAAI,CAAC,QAAQ,CAAC,qCAAqC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAElE,IAAI,CAAC;YACH,kCAAkC;YAClC,MAAM,cAAc,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAEnD,yBAAyB;YACzB,MAAM,OAAO,GAAe;gBAC1B,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBACvB,OAAO,EAAE,EAAE;gBACX,OAAO,EAAE,cAAc;gBACvB,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE;gBACjC,sBAAsB;gBACtB,SAAS,EAAE,OAAO;gBAClB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;gBAC9B,6CAA6C;gBAC7C,MAAM,EAAE;oBACN,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;oBAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;iBACvC;aACF,CAAC;YAEF,qCAAqC;YACrC,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;gBAC9B,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACpD,CAAC;YAED,oBAAoB;YACpB,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAE1B,8CAA8C;YAC9C,MAAM,WAAW,GAAG;;YAEd,YAAY;;;OAGjB,CAAC;YAEF,uBAAuB;YACvB,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE;gBACxC,QAAQ,EAAE,mBAAmB;aAC9B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE;gBAC1C,OAAO;gBACP,aAAa,EAAE,IAAI;aACpB,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,6BAA6B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAE7D,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM;gBACN,UAAU;aACX,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAY,CAAC;YAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBAC5C,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,UAAU;gBACV,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC;aAChE,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,UAAU;aACX,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,oBAAoB;QAC1B,OAAO,CAAC,UAAkB,EAAW,EAAE;YACrC,yEAAyE;YACzE,IAAI,UAAU,KAAK,4BAA4B,EAAE,CAAC;gBAChD,OAAO,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACzC,CAAC;YAED,kCAAkC;YAClC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE;oBAClE,sBAAsB,EAAE,2BAA2B,CAAC,kCAAkC;oBACtF,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,wBAAwB;iBAClD,CAAC,CAAC;YACL,CAAC;YAED,4CAA4C;YAC5C,iEAAiE;YACjE,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,wBAAwB;QAC9B,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAChC,yEAAyE;YACzE,MAAM,oBAAoB,GAAG;gBAC3B,8CAA8C;gBAC9C,GAAG,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC;gBAC/C,4CAA4C;gBAC5C,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;gBACnF,gCAAgC;gBAChC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,gEAAgE,CAAC,CAAC;gBACnH,gCAAgC;gBAChC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,gEAAgE,CAAC,CAAC;aACpH,CAAC;YAEF,KAAK,MAAM,QAAQ,IAAI,oBAAoB,EAAE,CAAC;gBAC5C,IAAI,CAAC;oBACH,IAAI,CAAC,qBAAqB,GAAG,QAAQ,EAAE,CAAC;oBACxC,IAAI,CAAC,QAAQ,CAAC,6CAA6C,CAAC,CAAC;oBAC7D,OAAO,IAAI,CAAC,qBAAqB,CAAC;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBACP,oBAAoB;gBACtB,CAAC;YACH,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC9E,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,aAAa;gBACjE,OAAO,EAAE,EAAE,OAAO,EAAE,uCAAuC,EAAE;aAC9D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,OAAO;YACL,GAAG,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gBAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,KAAK,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gBAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,KAAK,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;gBAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,UAAkB;QAChC,OAAO,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,OAAO,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACF,CAAA;AAxMY,kCAAkC;IAD9C,UAAU,EAAE;IAOR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;;GAPtC,kCAAkC,CAwM9C","sourcesContent":["/**\n * Email Template Sandbox Backend Service\n *\n * Provides a secure execution environment for running compiled email templates.\n * Uses Node.js VM with restricted globals and a controlled require function.\n */\n\nimport { injectable, inject } from 'inversify';\nimport * as vm from 'vm';\nimport { ErrorType, ErrorCustomMessageReference } from '@wildo-ai/saas-models';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport type { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// TYPES\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface SandboxExecutionResult {\n  success: boolean;\n  result?: unknown;\n  error?: string;\n  durationMs: number;\n}\n\nexport interface SandboxOptions {\n  /** Timeout in milliseconds (default: 5000) */\n  timeout?: number;\n  /** Additional context to pass to the template */\n  additionalContext?: Record<string, unknown>;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// CONSTANTS\n// ─────────────────────────────────────────────────────────────────────────────\n\nconst DEFAULT_TIMEOUT_MS = 5000;\n\n/**\n * Allowed modules that can be required in the sandbox\n */\nconst ALLOWED_MODULES = new Set([\n  'react',\n  'react-dom',\n  '@react-email/components',\n  '@react-email/render',\n  '@wildo-ai/email-components',\n]);\n\n// ─────────────────────────────────────────────────────────────────────────────\n// SERVICE\n// ─────────────────────────────────────────────────────────────────────────────\n\n@injectable()\nexport class EmailTemplateSandboxBackendService {\n  private emailComponentsModule: unknown | null = null;\n\n  protected logDebug: (message: string, context?: Record<string, unknown>) => void;\n\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) private readonly errorBuilder: ErrorBuilderBackendService,\n  ) {\n    this.logDebug = this.logger.debugByType('EmailTemplateSandboxBackendService');\n    this.logger.setDebugTypeLogging('EmailTemplateSandboxBackendService', false);\n  }\n\n  /**\n   * Execute a compiled module in the sandbox\n   *\n   * @param compiledCode - The compiled JavaScript code\n   * @param context - The context to pass to the template\n   * @param options - Execution options\n   * @returns Execution result with the rendered output or error\n   */\n  async execute(\n    compiledCode: string,\n    context: Record<string, unknown>,\n    options: SandboxOptions = {}\n  ): Promise<SandboxExecutionResult> {\n    const startTime = Date.now();\n    const timeout = options.timeout ?? DEFAULT_TIMEOUT_MS;\n\n    this.logDebug('Executing email template in sandbox', { timeout });\n\n    try {\n      // Create sandbox require function\n      const sandboxRequire = this.createSandboxRequire();\n\n      // Create sandbox globals\n      const sandbox: vm.Context = {\n        module: { exports: {} },\n        exports: {},\n        require: sandboxRequire,\n        console: this.createSafeConsole(),\n        // Pass context values\n        __context: context,\n        __brand: context.__brand || {},\n        // Provide Buffer for any serialization needs\n        Buffer: {\n          from: Buffer.from.bind(Buffer),\n          isBuffer: Buffer.isBuffer.bind(Buffer),\n        },\n      };\n\n      // Add additional context if provided\n      if (options.additionalContext) {\n        Object.assign(sandbox, options.additionalContext);\n      }\n\n      // Create VM context\n      vm.createContext(sandbox);\n\n      // Wrap the code to capture the default export\n      const wrappedCode = `\n        (function(module, exports, require, __context, __brand) {\n          ${compiledCode}\n          return module.exports.default || module.exports;\n        })(module, exports, require, __context, __brand);\n      `;\n\n      // Execute with timeout\n      const script = new vm.Script(wrappedCode, {\n        filename: 'email-template.js',\n      });\n\n      const result = script.runInContext(sandbox, {\n        timeout,\n        displayErrors: true,\n      });\n\n      const durationMs = Date.now() - startTime;\n      this.logDebug('Sandbox execution completed', { durationMs });\n\n      return {\n        success: true,\n        result,\n        durationMs,\n      };\n    } catch (err) {\n      const error = err as Error;\n      const durationMs = Date.now() - startTime;\n\n      this.logger.error('Sandbox execution failed', {\n        error: error.message,\n        durationMs,\n        isTimeout: error.message.includes('Script execution timed out'),\n      });\n\n      return {\n        success: false,\n        error: error.message,\n        durationMs,\n      };\n    }\n  }\n\n  /**\n   * Create a safe require function that only allows specific modules\n   */\n  private createSandboxRequire(): (moduleName: string) => unknown {\n    return (moduleName: string): unknown => {\n      // Handle @wildo-ai/email-components specially - load our internal module\n      if (moduleName === '@wildo-ai/email-components') {\n        return this.getEmailComponentsModule();\n      }\n\n      // Check if module is in allowlist\n      if (!ALLOWED_MODULES.has(moduleName)) {\n        throw this.errorBuilder.buildError(ErrorType.VALIDATION, undefined, {\n          customMessageReference: ErrorCustomMessageReference.SERVICE_RESOURCE_VALIDATION_FAILED,\n          context: { moduleName }, // diagnostic (log-only)\n        });\n      }\n\n      // For allowed modules, use the real require\n      // eslint-disable-next-line @typescript-eslint/no-require-imports\n      return require(moduleName);\n    };\n  }\n\n  /**\n   * Get the email components module (lazy loaded)\n   * Uses multiple resolution strategies for robustness across different build outputs\n   */\n  private getEmailComponentsModule(): unknown {\n    if (!this.emailComponentsModule) {\n      // Load our internal email components with multiple resolution strategies\n      const resolutionStrategies = [\n        // Strategy 1: Relative path from current file\n        () => require('../components/email-components'),\n        // Strategy 2: Absolute path using __dirname\n        () => require(require('path').resolve(__dirname, '../components/email-components')),\n        // Strategy 3: Try dist/esm path\n        () => require(require('path').resolve(__dirname, '../../dist/esm/notifications/email/components/email-components')),\n        // Strategy 4: Try dist/cjs path\n        () => require(require('path').resolve(__dirname, '../../dist/cjs/notifications/email/components/email-components')),\n      ];\n\n      for (const strategy of resolutionStrategies) {\n        try {\n          this.emailComponentsModule = strategy();\n          this.logDebug('Email components module loaded successfully');\n          return this.emailComponentsModule;\n        } catch {\n          // Try next strategy\n        }\n      }\n\n      this.logger.error('Failed to load email components module with any strategy');\n      throw this.errorBuilder.buildError(ErrorType.CONFIGURATION, undefined, {\n        customMessageReference: ErrorCustomMessageReference.CONFIGURATION,\n        context: { message: 'Email components module not available' },\n      });\n    }\n    return this.emailComponentsModule;\n  }\n\n  /**\n   * Create a safe console that logs through our logger\n   */\n  private createSafeConsole(): Partial<Console> {\n    return {\n      log: (...args: unknown[]) => {\n        this.logger.debug('Template console.log', { args });\n      },\n      warn: (...args: unknown[]) => {\n        this.logger.warn('Template console.warn', { args });\n      },\n      error: (...args: unknown[]) => {\n        this.logger.error('Template console.error', { args });\n      },\n      info: (...args: unknown[]) => {\n        this.logger.info('Template console.info', { args });\n      },\n      debug: (...args: unknown[]) => {\n        this.logger.debug('Template console.debug', { args });\n      },\n    };\n  }\n\n  /**\n   * Check if a module is allowed in the sandbox\n   */\n  isModuleAllowed(moduleName: string): boolean {\n    return ALLOWED_MODULES.has(moduleName);\n  }\n\n  /**\n   * Get list of allowed modules (for LLM context)\n   */\n  getAllowedModules(): string[] {\n    return Array.from(ALLOWED_MODULES);\n  }\n}\n"]}