@zintrust/core 0.1.28 → 0.1.29

package/src/tools/mail/drivers/Smtp.js

@@ -0,0 +1,349 @@
+import { generateUuid } from '../../../common/utility.js';
+import { ErrorFactory } from '../../../exceptions/ZintrustError.js';
+import * as net from '../../../node-singletons/net.js';
+import * as tls from '../../../node-singletons/tls.js';
+const normalizeRecipients = (to) => (Array.isArray(to) ? to : [to]);
+const toBase64 = (value) => Buffer.from(value, 'utf8').toString('base64');
+const isNodeRuntime = () => typeof process !== 'undefined' && typeof process.versions?.node === 'string';
+const validateConfig = (config) => {
+    if (!isNodeRuntime()) {
+        throw ErrorFactory.createConfigError('SMTP driver requires Node.js runtime');
+    }
+    if (config.host.trim() === '') {
+        throw ErrorFactory.createConfigError('SMTP: missing MAIL_HOST');
+    }
+    if (!Number.isFinite(config.port) || config.port <= 0) {
+        throw ErrorFactory.createConfigError('SMTP: invalid MAIL_PORT');
+    }
+};
+const createSocket = async (config, implicitTls) => {
+    validateConfig(config);
+    return new Promise((resolve, reject) => {
+        const onError = (err) => {
+            reject(ErrorFactory.createConnectionError('SMTP connection failed', {
+                host: config.host,
+                port: config.port,
+                secure: implicitTls,
+                error: err,
+            }));
+        };
+        const socket = implicitTls
+            ? tls.connect({
+                host: config.host,
+                port: config.port,
+                servername: config.host,
+            })
+            : net.connect({ host: config.host, port: config.port });
+        if (implicitTls) {
+            socket.once('secureConnect', () => resolve(socket));
+        }
+        else {
+            socket.once('connect', () => resolve(socket));
+        }
+        socket.once('error', onError);
+    });
+};
+const upgradeToStartTls = async (socket, host) => {
+    return new Promise((resolve, reject) => {
+        const tlsSocket = tls.connect({ socket, servername: host });
+        tlsSocket.once('secureConnect', () => {
+            resolve(tlsSocket);
+        });
+        tlsSocket.once('error', (err) => {
+            reject(ErrorFactory.createConnectionError('SMTP STARTTLS upgrade failed', {
+                host,
+                error: err,
+            }));
+        });
+    });
+};
+const createLineReader = (socket) => {
+    let buffer = '';
+    const waiters = [];
+    const wake = () => {
+        while (waiters.length > 0) {
+            const w = waiters.shift();
+            if (w)
+                w();
+        }
+    };
+    const onData = (data) => {
+        buffer += data.toString('utf8');
+        wake();
+    };
+    socket.on('data', onData);
+    const tryReadLineFromBuffer = () => {
+        const idx = buffer.indexOf('\n');
+        if (idx < 0)
+            return undefined;
+        const line = buffer.slice(0, idx + 1);
+        buffer = buffer.slice(idx + 1);
+        return line.replace(/\r?\n$/, '');
+    };
+    const readLine = async () => {
+        const immediate = tryReadLineFromBuffer();
+        if (typeof immediate === 'string')
+            return immediate;
+        await new Promise((resolve) => waiters.push(resolve));
+        return readLine();
+    };
+    const readMultiline = async (code, message) => {
+        const line = await readLine();
+        const nextCodeStr = line.slice(0, 3);
+        const nextCode = Number.parseInt(nextCodeStr, 10);
+        const nextMsg = line.length > 4 ? line.slice(4) : '';
+        const nextMessage = `${message}\n${nextMsg}`.trim();
+        if (Number.isFinite(nextCode) && nextCode === code && line[3] === ' ')
+            return nextMessage;
+        return readMultiline(code, nextMessage);
+    };
+    const readResponse = async () => {
+        const first = await readLine();
+        const codeStr = first.slice(0, 3);
+        const code = Number.parseInt(codeStr, 10);
+        if (!Number.isFinite(code)) {
+            throw ErrorFactory.createConnectionError('SMTP: invalid response code', { first });
+        }
+        let message = first.length > 4 ? first.slice(4) : '';
+        // Multiline response: "250-..." then "250 ..."
+        if (first[3] === '-') {
+            message = await readMultiline(code, message);
+        }
+        return { code, message };
+    };
+    const close = () => {
+        socket.off('data', onData);
+    };
+    return { readResponse, close };
+};
+const writeLine = async (socket, line) => {
+    return new Promise((resolve, reject) => {
+        socket.write(`${line}\r\n`, (err) => {
+            if (err)
+                reject(err);
+            else
+                resolve();
+        });
+    });
+};
+const assertCode = (res, expected, context) => {
+    const allowed = Array.isArray(expected) ? expected : [expected];
+    if (!allowed.includes(res.code)) {
+        throw ErrorFactory.createConnectionError(`SMTP: unexpected response for ${context}`, {
+            expected: allowed,
+            got: res.code,
+            message: res.message,
+        });
+    }
+};
+const hasCapability = (res, capability) => {
+    const cap = capability.trim().toUpperCase();
+    if (cap === '')
+        return false;
+    return res.message
+        .split('\n')
+        .some((line) => line.trim().toUpperCase().startsWith(cap) || line.trim().toUpperCase().includes(cap));
+};
+const doEhlo = async (socket, reader) => {
+    await writeLine(socket, 'EHLO zintrust');
+    const res = await reader.readResponse();
+    assertCode(res, 250, 'EHLO');
+    return res;
+};
+const doAuthLoginIfNeeded = async (socket, reader, config) => {
+    const username = config.username ?? '';
+    const password = config.password ?? '';
+    const wantsAuth = username.trim() !== '' || password.trim() !== '';
+    if (!wantsAuth)
+        return;
+    if (username.trim() === '' || password.trim() === '') {
+        throw ErrorFactory.createConfigError('SMTP: both MAIL_USERNAME and MAIL_PASSWORD are required');
+    }
+    // Try AUTH PLAIN first (more widely supported)
+    try {
+        // AUTH PLAIN format: base64("\0username\0password")
+        const authPlainString = `\0${username}\0${password}`;
+        const authPlainEncoded = toBase64(authPlainString);
+        await writeLine(socket, `AUTH PLAIN ${authPlainEncoded}`);
+        const authPlain = await reader.readResponse();
+        assertCode(authPlain, 235, 'AUTH PLAIN');
+        return; // Success!
+    }
+    catch (plainError) {
+        // AUTH PLAIN failed, try AUTH LOGIN as fallback
+        try {
+            await writeLine(socket, 'AUTH LOGIN');
+            const auth1 = await reader.readResponse();
+            assertCode(auth1, 334, 'AUTH LOGIN');
+            await writeLine(socket, toBase64(username));
+            const auth2 = await reader.readResponse();
+            assertCode(auth2, 334, 'AUTH username');
+            await writeLine(socket, toBase64(password));
+            const auth3 = await reader.readResponse();
+            assertCode(auth3, 235, 'AUTH password');
+        }
+        catch (loginError) {
+            // Both methods failed, throw the original error
+            throw ErrorFactory.createConnectionError('SMTP authentication failed', {
+                error: plainError,
+                loginError,
+            });
+        }
+    }
+};
+const doMailFrom = async (socket, reader, fromEmail) => {
+    await writeLine(socket, `MAIL FROM:<${fromEmail}>`);
+    const mailFrom = await reader.readResponse();
+    assertCode(mailFrom, [250, 251], 'MAIL FROM');
+};
+const doRcptToAll = async (socket, reader, recipients) => {
+    if (recipients.length === 0) {
+        throw ErrorFactory.createValidationError('SMTP: missing recipients');
+    }
+    await recipients.reduce(async (prev, rcpt) => {
+        await prev;
+        await writeLine(socket, `RCPT TO:<${rcpt}>`);
+        const rcptRes = await reader.readResponse();
+        assertCode(rcptRes, [250, 251], 'RCPT TO');
+    }, Promise.resolve());
+};
+const doData = async (socket, reader, message) => {
+    await writeLine(socket, 'DATA');
+    const dataRes = await reader.readResponse();
+    assertCode(dataRes, 354, 'DATA');
+    const raw = buildRfc2822Message(message);
+    const stuffed = dotStuff(raw);
+    await new Promise((resolve, reject) => {
+        socket.write(`${stuffed}\r\n.\r\n`, (err) => {
+            if (err)
+                reject(err);
+            else
+                resolve();
+        });
+    });
+    const queued = await reader.readResponse();
+    assertCode(queued, 250, 'message body');
+};
+const doQuit = async (socket, reader) => {
+    await writeLine(socket, 'QUIT');
+    const quit = await reader.readResponse();
+    assertCode(quit, [221, 250], 'QUIT');
+};
+const buildRfc2822Message = (msg) => {
+    const toList = normalizeRecipients(msg.to);
+    const fromNameRaw = msg.from.name;
+    const fromName = typeof fromNameRaw === 'string' ? fromNameRaw.trim() : '';
+    const fromHeader = fromName === '' ? msg.from.email : `${fromName} <${msg.from.email}>`;
+    const toHeader = toList.join(', ');
+    const subject = msg.subject;
+    const headers = [
+        `From: ${fromHeader}`,
+        `To: ${toHeader}`,
+        `Subject: ${subject}`,
+        'MIME-Version: 1.0',
+    ];
+    const attachParts = (attachments, innerBody) => {
+        const mixedBoundary = `mixed_${generateUuid().replaceAll('-', '')}`;
+        const lines = [];
+        lines.push(`Content-Type: multipart/mixed; boundary="${mixedBoundary}"`, '', `--${mixedBoundary}`, innerBody);
+        // attachments
+        for (const a of attachments) {
+            const b64 = a.content.toString('base64');
+            lines.push(`--${mixedBoundary}`, `Content-Type: application/octet-stream; name="${a.filename}"`, 'Content-Transfer-Encoding: base64', `Content-Disposition: attachment; filename="${a.filename}"`, '');
+            // break base64 into 76 char lines per RFC
+            for (let i = 0; i < b64.length; i += 76) {
+                lines.push(b64.slice(i, i + 76));
+            }
+        }
+        lines.push(`--${mixedBoundary}--`, '');
+        return lines.join('\r\n');
+    };
+    if (typeof msg.html === 'string' && msg.html !== '') {
+        const boundary = `zintrust_${generateUuid().replaceAll('-', '')}`;
+        headers.push(`Content-Type: multipart/alternative; boundary="${boundary}"`);
+        const parts = [
+            `--${boundary}`,
+            'Content-Type: text/plain; charset=utf-8',
+            'Content-Transfer-Encoding: 7bit',
+            '',
+            msg.text,
+            `--${boundary}`,
+            'Content-Type: text/html; charset=utf-8',
+            'Content-Transfer-Encoding: 7bit',
+            '',
+            msg.html,
+            `--${boundary}--`,
+            '',
+        ];
+        const inner = `${parts.join('\r\n')}`;
+        if (msg.attachments && msg.attachments.length > 0) {
+            // wrap in multipart/mixed
+            const mixed = attachParts(msg.attachments, inner);
+            return `${headers.join('\r\n')}\r\n\r\n${mixed}`;
+        }
+        return `${headers.join('\r\n')}\r\n\r\n${inner}`;
+    }
+    // plain text
+    if (msg.attachments && msg.attachments.length > 0) {
+        const inner = ['Content-Type: text/plain; charset=utf-8', '', msg.text, ''].join('\r\n');
+        const mixed = attachParts(msg.attachments, inner);
+        return `${headers.join('\r\n')}\r\n\r\n${mixed}`;
+    }
+    headers.push('Content-Type: text/plain; charset=utf-8');
+    return `${headers.join('\r\n')}\r\n\r\n${msg.text}\r\n`;
+};
+const dotStuff = (data) => data
+    .replaceAll(/\r?\n/g, '\r\n')
+    .split('\r\n')
+    .map((line) => (line.startsWith('.') ? `.${line}` : line))
+    .join('\r\n');
+export const SmtpDriver = Object.freeze({
+    /**
+     * NOTE: This is a minimal SMTP implementation intended for Node.js runtimes.
+     * - `secure=true` means TLS from the start (SMTPS).
+     * - `secure='starttls'` performs STARTTLS after EHLO.
+     */
+    async send(config, message) {
+        let mode = 'none';
+        if (config.secure === true)
+            mode = 'tls';
+        if (config.secure === 'starttls')
+            mode = 'starttls';
+        let socket = await createSocket(config, mode === 'tls');
+        let reader = createLineReader(socket);
+        try {
+            const greeting = await reader.readResponse();
+            assertCode(greeting, 220, 'greeting');
+            const ehlo = await doEhlo(socket, reader);
+            if (mode === 'starttls') {
+                const supportsStartTls = hasCapability(ehlo, 'STARTTLS');
+                if (!supportsStartTls) {
+                    throw ErrorFactory.createConnectionError('SMTP server does not support STARTTLS');
+                }
+                await writeLine(socket, 'STARTTLS');
+                const startTls = await reader.readResponse();
+                assertCode(startTls, 220, 'STARTTLS');
+                // Swap reader/socket to the upgraded TLS stream
+                reader.close();
+                socket = await upgradeToStartTls(socket, config.host);
+                reader = createLineReader(socket);
+                // RFC: EHLO again after STARTTLS
+                await doEhlo(socket, reader);
+            }
+            await doAuthLoginIfNeeded(socket, reader, config);
+            await doMailFrom(socket, reader, message.from.email);
+            await doRcptToAll(socket, reader, normalizeRecipients(message.to));
+            await doData(socket, reader, message);
+            await doQuit(socket, reader);
+            return { ok: true, provider: 'smtp' };
+        }
+        catch (err) {
+            throw ErrorFactory.createConnectionError('SMTP send failed', { error: err });
+        }
+        finally {
+            reader.close();
+            socket.end();
+        }
+    },
+});
+export default SmtpDriver;

package/src/tools/mail/index.d.ts

@@ -0,0 +1,40 @@
+import { type AttachmentInput } from './attachments';
+export type SendMailInput = {
+    to: string | string[];
+    subject: string;
+    text: string;
+    html?: string;
+    from?: {
+        address?: string;
+        name?: string;
+    };
+    attachments?: AttachmentInput[];
+};
+export type SendMailResult = {
+    ok: boolean;
+    driver: 'sendgrid' | 'disabled' | 'smtp' | 'ses' | 'mailgun' | 'nodemailer';
+    messageId?: string;
+};
+export interface RenderMailInput {
+    template: string;
+    variables?: Record<string, unknown>;
+}
+export declare const Mail: Readonly<{
+    /**
+     * Render a template with variables and return HTML (preview only).
+     */
+    render(input: RenderMailInput): Promise<string>;
+    /** Alias of render */
+    view(input: RenderMailInput): Promise<string>;
+    /**
+     * Select a named mailer (key from mailConfig.drivers).
+     *
+     * Example: `Mail.mailer('transactional').send(...)`
+     */
+    mailer(name: string): Readonly<{
+        send: (input: SendMailInput) => Promise<SendMailResult>;
+    }>;
+    send(input: SendMailInput): Promise<SendMailResult>;
+}>;
+export default Mail;
+//# sourceMappingURL=index.d.ts.map

package/src/tools/mail/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/tools/mail/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAsB,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAI7E,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE;QACL,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,YAAY,CAAC;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAoJF,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAcD,eAAO,MAAM,IAAI;IACf;;OAEG;kBACiB,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAIrD,sBAAsB;gBACJ,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAGnD;;;;OAIG;iBACU,MAAM;cA5Db,CAAC,KAAK,EAAE,aAAa,KAAK,OAAO,CAAC,cAAc,CAAC;;gBAgErC,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;EAGzD,CAAC;AAEH,eAAe,IAAI,CAAC"}

package/src/tools/mail/index.js

@@ -0,0 +1,129 @@
+import { mailConfig } from '../../config/mail.js';
+import { ErrorFactory } from '../../exceptions/ZintrustError.js';
+import { SesDriver } from './drivers/Ses.js';
+import { resolveAttachments } from './attachments.js';
+import { MailDriverRegistry } from './MailDriverRegistry.js';
+import { Storage } from '../storage/index.js';
+const resolveFrom = (input) => {
+    const address = input?.address ?? mailConfig.from.address;
+    const name = input?.name ?? mailConfig.from.name;
+    if (address.trim() === '') {
+        const err = ErrorFactory.createConfigError('Mail: missing from address (set MAIL_FROM_ADDRESS or pass from.address)');
+        throw err;
+    }
+    return { email: address, name: name.trim() === '' ? undefined : name };
+};
+function assertStorageDiskLike(value) {
+    if (typeof value !== 'object' || value === null) {
+        const err = ErrorFactory.createConfigError('Storage disk is invalid (expected object)');
+        throw err;
+    }
+    const v = value;
+    const driver = v['driver'];
+    if (typeof driver !== 'object' || driver === null) {
+        const err = ErrorFactory.createConfigError('Storage disk driver is invalid (expected object)');
+        throw err;
+    }
+    const d = driver;
+    if (typeof d['get'] !== 'function') {
+        const err = ErrorFactory.createConfigError('Storage disk driver is missing get()');
+        throw err;
+    }
+    if (typeof d['exists'] !== 'function') {
+        const err = ErrorFactory.createConfigError('Storage disk driver is missing exists()');
+        throw err;
+    }
+}
+const getDiskSafe = (disk) => {
+    const diskValue = Storage.getDisk(disk);
+    assertStorageDiskLike(diskValue);
+    return diskValue;
+};
+const createStorageWrapper = () => ({
+    async get(disk, path) {
+        const d = getDiskSafe(disk);
+        const result = await Promise.resolve(d.driver.get(d.config, path));
+        return result;
+    },
+    async exists(disk, path) {
+        const d = getDiskSafe(disk);
+        const result = await Promise.resolve(d.driver.exists(d.config, path));
+        return Boolean(result);
+    },
+});
+const sendWithDriver = async (driver, message) => {
+    if (driver.driver === 'ses') {
+        const result = await SesDriver.send({ region: driver.region }, message);
+        return { ok: result.ok, driver: 'ses', messageId: result.messageId };
+    }
+    // Drivers resolve via MailDriverRegistry (external packages)
+    const external = MailDriverRegistry.get(driver.driver);
+    if (external !== undefined) {
+        const result = await external(driver, message);
+        return {
+            ok: Boolean(result?.ok),
+            driver: driver.driver,
+            messageId: typeof result?.messageId === 'string' ? result.messageId : undefined,
+        };
+    }
+    if (driver.driver === 'sendgrid' || driver.driver === 'mailgun' || driver.driver === 'smtp') {
+        throw ErrorFactory.createConfigError(`Mail driver not registered: ${driver.driver} (run \`zin add mail:${driver.driver}\` / \`npm i @zintrust/mail-${driver.driver}\`)`);
+    }
+    // Config exists for future drivers, but implementations are intentionally CLI/runtime-safe and added incrementally.
+    {
+        const err = ErrorFactory.createConfigError(`Mail driver not implemented: ${mailConfig.default}`);
+        throw err;
+    }
+};
+const createMailer = (name) => Object.freeze({
+    async send(input) {
+        const driver = mailConfig.getDriver(name);
+        if (driver.driver === 'disabled') {
+            const err = ErrorFactory.createConfigError('Mail driver is disabled (set MAIL_DRIVER)');
+            throw err;
+        }
+        const from = resolveFrom(input.from);
+        const storage = createStorageWrapper();
+        const attachments = await resolveAttachments(input.attachments, { storage });
+        return sendWithDriver(driver, {
+            to: input.to,
+            from,
+            subject: input.subject,
+            text: input.text,
+            html: input.html,
+            attachments,
+        });
+    },
+});
+async function renderTemplateToHtml(input) {
+    const { template, variables } = input;
+    // Import lazily to avoid circular deps
+    const { loadTemplate } = await import('./template-loader.js');
+    // template-loader expects full filename
+    const fileName = template.endsWith('.html') ? template : `${template}.html`;
+    return loadTemplate(fileName, (variables ?? {}));
+}
+export const Mail = Object.freeze({
+    /**
+     * Render a template with variables and return HTML (preview only).
+     */
+    async render(input) {
+        return renderTemplateToHtml(input);
+    },
+    /** Alias of render */
+    async view(input) {
+        return renderTemplateToHtml(input);
+    },
+    /**
+     * Select a named mailer (key from mailConfig.drivers).
+     *
+     * Example: `Mail.mailer('transactional').send(...)`
+     */
+    mailer(name) {
+        return createMailer(name);
+    },
+    async send(input) {
+        return createMailer().send(input);
+    },
+});
+export default Mail;

package/src/tools/mail/template-loader.d.ts

@@ -0,0 +1,10 @@
+import type { TemplateVariables } from './template-utils';
+/**
+ * Load and render email template with variable substitution
+ */
+export declare function loadTemplate(templateName: string, variables?: TemplateVariables): Promise<string>;
+/**
+ * Get list of available templates
+ */
+export declare function getAvailableTemplates(): string[];
+//# sourceMappingURL=template-loader.d.ts.map

package/src/tools/mail/template-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-loader.d.ts","sourceRoot":"","sources":["../../../../src/tools/mail/template-loader.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAG9D;;GAEG;AACH,wBAAsB,YAAY,CAChC,YAAY,EAAE,MAAM,EACpB,SAAS,GAAE,iBAAsB,GAChC,OAAO,CAAC,MAAM,CAAC,CA6CjB;AAuDD;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAShD"}

package/src/tools/mail/template-loader.js

@@ -0,0 +1,101 @@
+import { ErrorFactory } from '../../exceptions/ZintrustError.js';
+import { readFile } from '../../node-singletons/fs.js';
+import { dirname, join } from '../../node-singletons/path.js';
+import { fileURLToPath } from '../../node-singletons/url.js';
+import { Env } from '../../config/env.js';
+import { interpolate } from './template-utils.js';
+/**
+ * Load and render email template with variable substitution
+ */
+export async function loadTemplate(templateName, variables = {}) {
+    try {
+        const baseDir = dirname(fileURLToPath(import.meta.url));
+        const isPath = templateName.includes('/') || templateName.endsWith('.html');
+        let templatePath;
+        if (isPath) {
+            if (templateName.startsWith('/')) {
+                templatePath = templateName;
+            }
+            else {
+                templatePath = join(process.cwd(), templateName);
+            }
+        }
+        else {
+            templatePath = join(baseDir, 'templates', `${templateName}.html`);
+        }
+        let template;
+        try {
+            template = await readFile(templatePath, 'utf-8');
+        }
+        catch {
+            // Fallback to built-in directory if the supplied name looked like a file but wasn't found
+            const fallbackPath = join(baseDir, 'templates', templateName.endsWith('.html') ? templateName : `${templateName}.html`);
+            template = await readFile(fallbackPath, 'utf-8');
+        }
+        // Replace variables using shared interpolate util
+        const mergedVars = {
+            year: new Date().getFullYear().toString(),
+            APP_NAME: Env.APP_NAME ?? 'ZinTrust',
+            ...variables,
+        };
+        let rendered = interpolate(template, mergedVars);
+        // Handle conditional blocks {{#if_condition}}...{{/if_condition}}
+        rendered = renderConditionals(rendered, variables);
+        // Handle loops {{#each_array}}...{{/each_array}}
+        rendered = renderLoops(rendered, variables);
+        return rendered;
+    }
+    catch (error) {
+        throw ErrorFactory.createConfigError(`Failed to load template ${templateName}: ${error}`);
+    }
+}
+/**
+ * Render conditional blocks {{#if_condition}}...{{/if_condition}}
+ */
+function renderConditionals(template, variables) {
+    const conditionalRegex = /{{#if_(\w+)}}(.+?){{\/if_\1}}/gs;
+    return template.replaceAll(conditionalRegex, (_fullMatch, condition, content) => {
+        const value = variables[condition];
+        if (value === true || value === 'true') {
+            return content;
+        }
+        return '';
+    });
+}
+/**
+ * Render loop blocks {{#each_array}}...{{/each_array}}
+ */
+function renderLoops(template, variables) {
+    const loopRegex = /{{#each_(\w+)}}(.+?){{\/each_\1}}/gs;
+    return template.replaceAll(loopRegex, (_fullMatch, arrayName, content) => {
+        const array = variables[arrayName];
+        if (!Array.isArray(array)) {
+            return '';
+        }
+        return array
+            .map((item) => {
+            let rendered = content;
+            if (typeof item === 'object' && item !== null) {
+                for (const [key, value] of Object.entries(item)) {
+                    const regex = new RegExp(`{{${key}}}`, 'g');
+                    rendered = rendered.replaceAll(regex, String(value ?? ''));
+                }
+            }
+            return rendered;
+        })
+            .join('');
+    });
+}
+/**
+ * Get list of available templates
+ */
+export function getAvailableTemplates() {
+    return [
+        'welcome.html',
+        'password-reset.html',
+        'job-completed.html',
+        'worker-alert.html',
+        'performance-report.html',
+        'general.html',
+    ];
+}

package/src/tools/mail/template-utils.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Template utilities shared by mail modules.
+ */
+export type TemplateVariables = Record<string, unknown>;
+/**
+ * Simple handlebars‐style interpolation: replaces all occurrences of
+ * `{{ key }}` (whitespace optional) with String(value).
+ */
+export declare function interpolate(template: string, data: TemplateVariables): string;
+//# sourceMappingURL=template-utils.d.ts.map

package/src/tools/mail/template-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-utils.d.ts","sourceRoot":"","sources":["../../../../src/tools/mail/template-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAExD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAQ7E"}

package/src/tools/mail/template-utils.js

@@ -0,0 +1,16 @@
+/**
+ * Template utilities shared by mail modules.
+ */
+/**
+ * Simple handlebars‐style interpolation: replaces all occurrences of
+ * `{{ key }}` (whitespace optional) with String(value).
+ */
+export function interpolate(template, data) {
+    let out = template;
+    for (const [key, value] of Object.entries(data)) {
+        const replacement = value === null || value === undefined ? '' : String(value);
+        const regex = new RegExp(String.raw `{{\s*${key}\s*}}`, 'g');
+        out = out.replace(regex, replacement);
+    }
+    return out;
+}