hatchkit 0.1.41 → 0.1.43

package/dist/email/index.js

@@ -0,0 +1,251 @@
+/*
+ * `hatchkit email` command surface.
+ *
+ * Two entry points:
+ *   · `hatchkit email setup` — full setup or re-run on a given domain.
+ *     Flag-driven; missing flags get prompted (multi-select for the
+ *     forwarding addresses, single-input for the destination).
+ *   · `hatchkit email status` — print the current state of Email Routing
+ *     for the project's domain. No mutations. Useful inside a project
+ *     dir or after a setup to confirm verification went through.
+ *
+ * The same `runEmailSetupForDomain` is reused by the provision
+ * orchestrator's `email` service entry, so the setup logic exists in
+ * exactly one place — flags and prompts are the only difference.
+ */
+import { existsSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { confirm, input } from "@inquirer/prompts";
+import chalk from "chalk";
+import { ensureDefaultForwardingEmail, ensureDns, getDefaultForwardingEmail, getDnsConfig, } from "../config.js";
+import { readManifest } from "../scaffold/manifest.js";
+import { CloudflareApi } from "../utils/cloudflare-api.js";
+import { multiselect } from "../utils/multiselect.js";
+import { DEFAULT_CATCH_ALL, DEFAULT_FORWARD_PRESETS } from "./presets.js";
+import { printEmailSetupSummary, runEmailSetup, } from "./setup.js";
+/** Resolve a domain to set up email for. Precedence:
+ *    1. --domain flag
+ *    2. .hatchkit.json in cwd
+ *    3. interactive prompt
+ *  Used by both `hatchkit email setup` and the provision-service hook. */
+async function resolveDomain(flagDomain, cwd) {
+    if (flagDomain)
+        return flagDomain.trim();
+    const manifestPath = join(cwd, ".hatchkit.json");
+    if (existsSync(manifestPath)) {
+        const manifest = readManifest(cwd);
+        if (manifest?.domain) {
+            console.log(chalk.dim(`  Using domain from .hatchkit.json: ${manifest.domain}`));
+            return manifest.domain;
+        }
+    }
+    return input({
+        message: "Domain to set up email for (e.g. example.com):",
+        validate: (v) => /^[a-z0-9][a-z0-9.-]*\.[a-z]{2,}$/i.test(v.trim()) ? true : "Looks malformed.",
+    });
+}
+/** Prompt the user for which local parts to forward — or take them
+ *  straight from the `--addresses` flag. */
+async function resolveAddresses(flags, domain) {
+    if (flags.addresses) {
+        const list = flags.addresses
+            .split(",")
+            .map((s) => s.trim().toLowerCase())
+            .filter(Boolean);
+        return { addresses: list, catchAll: !flags.noCatchAll };
+    }
+    if (flags.allDefaults) {
+        return {
+            addresses: DEFAULT_FORWARD_PRESETS.filter((p) => p.defaultChecked).map((p) => p.localPart),
+            catchAll: !flags.noCatchAll,
+        };
+    }
+    const picked = await multiselect({
+        message: `Which addresses on ${domain} should forward to your inbox?`,
+        choices: DEFAULT_FORWARD_PRESETS.map((p) => ({
+            name: `${p.localPart}@${domain} — ${p.description}`,
+            value: p.localPart,
+            checked: p.defaultChecked,
+        })),
+        required: false,
+    });
+    const catchAll = flags.noCatchAll
+        ? false
+        : await confirm({
+            message: `Also enable catch-all (*@${domain} → your inbox)?`,
+            default: DEFAULT_CATCH_ALL,
+        });
+    return { addresses: picked, catchAll };
+}
+/** Probe the zone for an existing Resend DKIM record so we can auto-add
+ *  `_spf.resend.com` to the merged SPF when present. Returns the include
+ *  list to merge (empty when no Resend in evidence). Cheap one-call probe;
+ *  if it fails (token lacks read perm, zone not in account), returns []. */
+async function detectExtraSpfIncludes(token, zoneId, domain) {
+    try {
+        const cf = new CloudflareApi({ token });
+        const includes = [];
+        // Resend domains add a CNAME at `resend._domainkey.<zone>` — its
+        // presence is the cleanest signal that the zone sends via Resend.
+        // One name+type lookup is much cheaper than listing the zone.
+        const dkim = await cf.findRecordsByName(zoneId, `resend._domainkey.${domain}`, "CNAME");
+        if (dkim.length > 0) {
+            includes.push("_spf.resend.com");
+        }
+        return includes;
+    }
+    catch {
+        return [];
+    }
+}
+/** Shared setup runner used by both `hatchkit email setup` and the
+ *  provision-orchestrator "email" service. Resolves DNS config, runs
+ *  prompts that haven't been answered by flags, executes the setup,
+ *  and prints the summary. */
+export async function runEmailSetupForDomain(flags, cwd = process.cwd()) {
+    // DNS config is needed for the CF Bearer token + accountId. Lazy-prompt
+    // when missing — same contract as every other provider in the CLI.
+    let dns = await getDnsConfig();
+    if (!dns || !dns.apiToken)
+        dns = await ensureDns();
+    if (!dns?.apiToken) {
+        throw new Error("Cloudflare API token not configured. Run `hatchkit config add dns`.");
+    }
+    const domain = await resolveDomain(flags.domain, cwd);
+    const destination = flags.to?.trim() || getDefaultForwardingEmail() || (await ensureDefaultForwardingEmail());
+    const { addresses, catchAll } = await resolveAddresses(flags, domain);
+    // We need the zone id to detect resend SPF before the main setup runs.
+    // The setup orchestrator will look the zone up again — cheap; one API
+    // call. Keeping the two lookups separate keeps the orchestrator
+    // dependency-free of flag-parsing concerns.
+    let extraSpf = [];
+    if (!flags.noResendSpf) {
+        const cf = new CloudflareApi({ token: dns.apiToken, accountId: dns.accountId });
+        const zone = await cf.getZoneByName(domain);
+        if (zone) {
+            extraSpf = await detectExtraSpfIncludes(dns.apiToken, zone.id, domain);
+        }
+    }
+    const opts = {
+        token: dns.apiToken,
+        accountId: dns.accountId,
+        domain,
+        destination,
+        addresses,
+        catchAll,
+        extraSpfIncludes: extraSpf,
+        dmarcPolicy: flags.dmarcPolicy ?? "quarantine",
+    };
+    console.log(chalk.bold(`\n  hatchkit email setup`));
+    console.log(chalk.dim(`  Domain:       ${domain}`));
+    console.log(chalk.dim(`  Destination:  ${destination}`));
+    console.log(chalk.dim(`  Addresses:    ${addresses.length > 0 ? addresses.map((a) => `${a}@`).join(", ") : "(none — catch-all only)"}`));
+    console.log(chalk.dim(`  Catch-all:    ${catchAll ? "yes" : "no"}`));
+    console.log(chalk.dim(`  DMARC:        p=${opts.dmarcPolicy}`));
+    if (extraSpf.length > 0) {
+        console.log(chalk.dim(`  SPF merge:    ${extraSpf.join(", ")}`));
+    }
+    const result = await runEmailSetup(opts);
+    printEmailSetupSummary(result);
+    return result;
+}
+/** `hatchkit email status` — read-only state report for the current
+ *  project's (or `--domain`-overridden) zone. */
+export async function runEmailStatus(flags, cwd = process.cwd()) {
+    const dns = await getDnsConfig();
+    if (!dns?.apiToken) {
+        console.log(chalk.yellow("  DNS not configured. Run `hatchkit config add dns`."));
+        return;
+    }
+    const domain = await resolveDomain(flags.domain, cwd);
+    const cf = new CloudflareApi({ token: dns.apiToken, accountId: dns.accountId });
+    const zone = await cf.getZoneByName(domain);
+    if (!zone) {
+        console.log(chalk.yellow(`  No zone for ${domain} in this Cloudflare account.`));
+        return;
+    }
+    const accountId = dns.accountId ?? zone.account?.id;
+    const routing = await cf.getEmailRouting(zone.id);
+    const rules = routing?.enabled ? await cf.listEmailRoutingRules(zone.id) : [];
+    const destinations = accountId ? await cf.listEmailDestinations(accountId) : [];
+    const mx = await cf.findRecordsByName(zone.id, domain, "MX");
+    const spfAndDmarc = await cf.findRecordsByName(zone.id, domain, "TXT");
+    const dmarc = await cf.findRecordsByName(zone.id, `_dmarc.${domain}`, "TXT");
+    console.log(chalk.bold(`\n  ── Email status: ${domain} ───────────────────────────\n`));
+    console.log(`  Routing:      ${routing?.enabled ? chalk.green("enabled") : chalk.red("disabled")}${routing?.status ? chalk.dim(` (${routing.status})`) : ""}`);
+    console.log(`  MX records:   ${mx.length > 0 ? chalk.green(`${mx.length} (${mx.map((r) => r.content).join(", ")})`) : chalk.red("none")}`);
+    const spf = spfAndDmarc.find((r) => /v=spf1/i.test(r.content));
+    console.log(`  SPF:          ${spf ? chalk.green(spf.content) : chalk.red("missing")}`);
+    console.log(`  DMARC:        ${dmarc[0] ? chalk.green(dmarc[0].content) : chalk.red("missing")}`);
+    console.log(`  Destinations: ${destinations.length} on account`);
+    for (const d of destinations) {
+        const tag = d.verified === "active" ? chalk.green("✓ verified") : chalk.yellow("· pending");
+        console.log(`    ${tag} ${d.email}`);
+    }
+    console.log(`  Rules:        ${rules.length}`);
+    for (const r of rules) {
+        const to = r.matchers?.find((m) => m.field === "to")?.value;
+        const fwd = r.actions?.[0]?.value?.join(", ");
+        console.log(`    ${to ?? "?"} → ${fwd ?? "?"}`);
+    }
+}
+/** Parse `hatchkit email …` flags from the raw argv slice. Centralised
+ *  here so the index.ts dispatcher only deals with subcommand routing. */
+export function parseEmailFlags(rest) {
+    const flags = {};
+    for (let i = 0; i < rest.length; i++) {
+        const a = rest[i];
+        if (a === "--domain" && rest[i + 1])
+            flags.domain = rest[++i];
+        else if (a.startsWith("--domain="))
+            flags.domain = a.slice("--domain=".length);
+        else if (a === "--to" && rest[i + 1])
+            flags.to = rest[++i];
+        else if (a.startsWith("--to="))
+            flags.to = a.slice("--to=".length);
+        else if (a === "--addresses" && rest[i + 1])
+            flags.addresses = rest[++i];
+        else if (a.startsWith("--addresses="))
+            flags.addresses = a.slice("--addresses=".length);
+        else if (a === "--all-defaults")
+            flags.allDefaults = true;
+        else if (a === "--no-catch-all")
+            flags.noCatchAll = true;
+        else if (a === "--dmarc" && rest[i + 1])
+            flags.dmarcPolicy = rest[++i];
+        else if (a.startsWith("--dmarc="))
+            flags.dmarcPolicy = a.slice("--dmarc=".length);
+        else if (a === "--no-resend-spf")
+            flags.noResendSpf = true;
+    }
+    return flags;
+}
+/** Top-level `hatchkit email <sub>` dispatcher. */
+export async function handleEmailCommand(rest) {
+    const sub = rest[0];
+    const flags = parseEmailFlags(rest.slice(1));
+    switch (sub) {
+        case "setup":
+            await runEmailSetupForDomain(flags, resolve("."));
+            return;
+        case "status":
+            await runEmailStatus(flags, resolve("."));
+            return;
+        default:
+            console.log("Usage: hatchkit email <setup|status> [flags]");
+            console.log("");
+            console.log("  setup   Configure Cloudflare Email Routing + DNS for a domain");
+            console.log("  status  Print the current Email Routing state");
+            console.log("");
+            console.log("Flags (setup):");
+            console.log("  --domain <fqdn>           Override the project domain");
+            console.log("  --to <email>              Forwarding destination");
+            console.log("  --addresses <list>        Comma-separated local parts (skips prompt)");
+            console.log("  --all-defaults            Use every default preset; skip prompts");
+            console.log("  --no-catch-all            Don't set the *@domain catch-all rule");
+            console.log("  --dmarc <none|quarantine|reject>  DMARC policy (default: quarantine)");
+            console.log("  --no-resend-spf           Skip auto-merging _spf.resend.com");
+            process.exit(1);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/email/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/email/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EACL,4BAA4B,EAC5B,SAAS,EACT,yBAAyB,EACzB,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EAGL,sBAAsB,EACtB,aAAa,GACd,MAAM,YAAY,CAAC;AAmBpB;;;;0EAI0E;AAC1E,KAAK,UAAU,aAAa,CAAC,UAA8B,EAAE,GAAW;IACtE,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACjF,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;QACX,OAAO,EAAE,gDAAgD;QACzD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CACd,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB;KACjF,CAAC,CAAC;AACL,CAAC;AAED;4CAC4C;AAC5C,KAAK,UAAU,gBAAgB,CAC7B,KAAwB,EACxB,MAAc;IAEd,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS;aACzB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aAClC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACtB,OAAO;YACL,SAAS,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,QAAQ,EAAE,CAAC,KAAK,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAS;QACvC,OAAO,EAAE,sBAAsB,MAAM,gCAAgC;QACrE,OAAO,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,EAAE,GAAG,CAAC,CAAC,SAAS,IAAI,MAAM,MAAM,CAAC,CAAC,WAAW,EAAE;YACnD,KAAK,EAAE,CAAC,CAAC,SAAS;YAClB,OAAO,EAAE,CAAC,CAAC,cAAc;SAC1B,CAAC,CAAC;QACH,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU;QAC/B,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,MAAM,OAAO,CAAC;YACZ,OAAO,EAAE,4BAA4B,MAAM,iBAAiB;YAC5D,OAAO,EAAE,iBAAiB;SAC3B,CAAC,CAAC;IACP,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACzC,CAAC;AAED;;;4EAG4E;AAC5E,KAAK,UAAU,sBAAsB,CACnC,KAAa,EACb,MAAc,EACd,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,iEAAiE;QACjE,kEAAkE;QAClE,8DAA8D;QAC9D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,qBAAqB,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;QACxF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;8BAG8B;AAC9B,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAwB,EACxB,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,wEAAwE;IACxE,mEAAmE;IACnE,IAAI,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;IAC/B,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ;QAAE,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IACnD,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,WAAW,GACf,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,yBAAyB,EAAE,IAAI,CAAC,MAAM,4BAA4B,EAAE,CAAC,CAAC;IAE5F,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAEtE,uEAAuE;IACvE,sEAAsE;IACtE,gEAAgE;IAChE,4CAA4C;IAC5C,IAAI,QAAQ,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,IAAI,EAAE,CAAC;YACT,QAAQ,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAsB;QAC9B,KAAK,EAAE,GAAG,CAAC,QAAQ;QACnB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM;QACN,WAAW;QACX,SAAS;QACT,QAAQ;QACR,gBAAgB,EAAE,QAAQ;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,YAAY;KAC/C,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,WAAW,EAAE,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,mBAAmB,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,yBAAyB,EAAE,CACjH,CACF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACzC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;iDACiD;AACjD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAwB,EACxB,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;IACjC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sDAAsD,CAAC,CAAC,CAAC;QAClF,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,MAAM,8BAA8B,CAAC,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;IAE7E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,MAAM,gCAAgC,CAAC,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CACT,mBAAmB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAClJ,CAAC;IACF,OAAO,CAAC,GAAG,CACT,mBAAmB,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAC9H,CAAC;IACF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAClG,OAAO,CAAC,GAAG,CAAC,mBAAmB,YAAY,CAAC,MAAM,aAAa,CAAC,CAAC;IACjE,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5F,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,KAAK,CAAC;QAC5D,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED;0EAC0E;AAC1E,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACzD,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;aAC1E,IAAI,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACtD,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;aAC9D,IAAI,CAAC,KAAK,aAAa,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACpE,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;aACnF,IAAI,CAAC,KAAK,gBAAgB;YAAE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;aACrD,IAAI,CAAC,KAAK,gBAAgB;YAAE,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;aACpD,IAAI,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACrC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,CAAqC,CAAC;aAC/D,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;YAC/B,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAqC,CAAC;aAChF,IAAI,CAAC,KAAK,iBAAiB;YAAE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAc;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO;YACV,MAAM,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,OAAO;QACT,KAAK,QAAQ;YACX,MAAM,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1C,OAAO;QACT;YACE,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;YAC/E,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;YACtF,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;YAClF,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;YACjF,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;YACtF,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;YAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/email/presets.d.ts

@@ -0,0 +1,14 @@
+export interface EmailAddressPreset {
+    /** Local part. Joined with `@<domain>` at apply time. */
+    localPart: string;
+    /** Human-readable description shown in the multi-select prompt. */
+    description: string;
+    /** Whether this preset is ticked by default in the picker. */
+    defaultChecked: boolean;
+}
+export declare const DEFAULT_FORWARD_PRESETS: EmailAddressPreset[];
+/** Whether to enable a catch-all rule (`*@domain` → destination) by
+ *  default. Catch-all is a safety net for anything not matched by an
+ *  explicit rule — recommended for personal/operator domains. */
+export declare const DEFAULT_CATCH_ALL = true;
+//# sourceMappingURL=presets.d.ts.map

package/dist/email/presets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../src/email/presets.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,kBAAkB;IACjC,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,eAAO,MAAM,uBAAuB,EAAE,kBAAkB,EAMvD,CAAC;AAEF;;iEAEiE;AACjE,eAAO,MAAM,iBAAiB,OAAO,CAAC"}

package/dist/email/presets.js

@@ -0,0 +1,33 @@
+/*
+ * Email forwarding presets.
+ *
+ * Default set of local-parts to offer when configuring Cloudflare Email
+ * Routing on a new project's zone. The picker is multi-select so the
+ * user can untick anything that doesn't apply, or add custom entries.
+ *
+ * Curated to cover the common public-facing aliases without bloating
+ * the rule list (each rule is a distinct Email Routing entry):
+ *   · hello@  — generic first-touch contact
+ *   · rico@   — personal alias (the operator's first name)
+ *   · admin@  — system / infrastructure correspondence (TLS notices,
+ *               registrar alerts, dotenvx/Github billing receipts)
+ *   · support@— customer-facing support inbox
+ *   · hi@     — short personal alternative to hello@
+ *
+ * A catch-all rule (`*@domain`) is offered separately because
+ * Cloudflare's API treats it differently — it's exactly one rule per
+ * zone (PUT semantics), not a list. The default is "enable catch-all"
+ * so stray addresses (`careers@`, `dmarc@`, …) still reach the user.
+ */
+export const DEFAULT_FORWARD_PRESETS = [
+    { localPart: "hello", description: "general first-touch contact", defaultChecked: true },
+    { localPart: "rico", description: "personal alias", defaultChecked: true },
+    { localPart: "admin", description: "infrastructure / system alerts", defaultChecked: true },
+    { localPart: "support", description: "customer-facing support", defaultChecked: true },
+    { localPart: "hi", description: "short personal alias", defaultChecked: false },
+];
+/** Whether to enable a catch-all rule (`*@domain` → destination) by
+ *  default. Catch-all is a safety net for anything not matched by an
+ *  explicit rule — recommended for personal/operator domains. */
+export const DEFAULT_CATCH_ALL = true;
+//# sourceMappingURL=presets.js.map

package/dist/email/presets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presets.js","sourceRoot":"","sources":["../../src/email/presets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAWH,MAAM,CAAC,MAAM,uBAAuB,GAAyB;IAC3D,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,6BAA6B,EAAE,cAAc,EAAE,IAAI,EAAE;IACxF,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,IAAI,EAAE;IAC1E,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,gCAAgC,EAAE,cAAc,EAAE,IAAI,EAAE;IAC3F,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,yBAAyB,EAAE,cAAc,EAAE,IAAI,EAAE;IACtF,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,sBAAsB,EAAE,cAAc,EAAE,KAAK,EAAE;CAChF,CAAC;AAEF;;iEAEiE;AACjE,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC"}

package/dist/email/setup.d.ts

@@ -0,0 +1,93 @@
+import { type CfEmailDestination } from "../utils/cloudflare-api.js";
+/** Cloudflare-published MX hosts for Email Routing. Verified against
+ *  what `GET /zones/{id}/email/routing/dns` returns — kept hardcoded
+ *  so a hatchkit run can describe the records up-front without an
+ *  extra API call, and because the values have been stable since the
+ *  Email Routing product launched. The API stays the source of truth
+ *  in practice: the email module calls `getEmailRoutingDnsRecords()`
+ *  and uses *those* values, falling back to this list only if CF is
+ *  unreachable. */
+export declare const CLOUDFLARE_EMAIL_ROUTING_MX: {
+    host: string;
+    priority: number;
+}[];
+export interface EmailSetupOptions {
+    /** Bearer token with Zone:DNS:Edit + Zone:Email Routing Rules:Edit +
+     *  Account:Email Routing Addresses:Edit. */
+    token: string;
+    /** Optional Cloudflare account id. Discovered from the zone when
+     *  absent (since the destinations API is account-scoped, we always
+     *  need one before the call). */
+    accountId?: string;
+    /** Apex domain — must match a zone the token can access. */
+    domain: string;
+    /** Email address that will receive forwarded mail. CF sends a
+     *  verification email here on first add. */
+    destination: string;
+    /** Local parts to create forwarding rules for. Each becomes a
+     *  `<localPart>@<domain>` literal-match rule forwarding to
+     *  `destination`. Pass an empty list to skip individual rules
+     *  (still useful with `catchAll: true`). */
+    addresses: string[];
+    /** Whether to set a catch-all rule (`*@domain` → destination). */
+    catchAll: boolean;
+    /** SPF includes to merge with Cloudflare's. Use this when the zone
+     *  already sends via Resend / SES / etc. Pre-existing on-zone
+     *  records are also auto-merged. */
+    extraSpfIncludes?: string[];
+    /** DMARC policy. Defaults to "quarantine". */
+    dmarcPolicy?: "none" | "quarantine" | "reject";
+    /** Aggregate-report destination for DMARC. Defaults to
+     *  `dmarc@<domain>` (will be caught by the catch-all if enabled).
+     *  Override when you want CF Email Routing's reports forwarded to
+     *  a known inbox without relying on catch-all. */
+    dmarcRua?: string;
+}
+/** Per-resource report returned by {@link runEmailSetup}. The caller
+ *  feeds the ledger entries into `RunLedger.record()` for rollback. */
+export interface EmailSetupResult {
+    domain: string;
+    zoneId: string;
+    accountId: string;
+    /** True when this run was the one that enabled routing on the zone. */
+    routingEnabledThisRun: boolean;
+    destination: {
+        record: CfEmailDestination;
+        /** True when this run created the destination (verification email
+         *  was just sent). False when it already existed. */
+        createdThisRun: boolean;
+        /** "active" / "pending" — the user must click the verify link
+         *  before forwards land. */
+        verified: string | null;
+    };
+    /** DNS records the run created/updated. Each entry's `created` is
+     *  true when this run added it (use for the rollback ledger). */
+    dnsRecords: Array<{
+        id: string;
+        name: string;
+        type: "MX" | "TXT";
+        content: string;
+        created: boolean;
+        updated: boolean;
+    }>;
+    /** Per-address forwarding rules. */
+    rules: Array<{
+        address: string;
+        id: string;
+        created: boolean;
+        updated: boolean;
+    }>;
+    /** Catch-all is a zone-level singleton — toggled, not "created" in
+     *  the usual sense. `changed` is true when this run flipped its
+     *  enabled state or forward destination. */
+    catchAll?: {
+        enabled: boolean;
+        changed: boolean;
+    };
+}
+export declare function runEmailSetup(opts: EmailSetupOptions): Promise<EmailSetupResult>;
+/** Pretty-print the result for the CLI. Centralised here so both the
+ *  standalone command and the create/adopt-flow hook print the same
+ *  status block. */
+export declare function printEmailSetupSummary(result: EmailSetupResult): void;
+//# sourceMappingURL=setup.d.ts.map

package/dist/email/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/email/setup.ts"],"names":[],"mappings":"AA2BA,OAAO,EAEL,KAAK,kBAAkB,EAExB,MAAM,4BAA4B,CAAC;AAGpC;;;;;;;mBAOmB;AACnB,eAAO,MAAM,2BAA2B;;;GAIvC,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC;gDAC4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd;;qCAEiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf;gDAC4C;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB;;;gDAG4C;IAC5C,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,kEAAkE;IAClE,QAAQ,EAAE,OAAO,CAAC;IAClB;;wCAEoC;IACpC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,QAAQ,CAAC;IAC/C;;;sDAGkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;uEACuE;AACvE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,qBAAqB,EAAE,OAAO,CAAC;IAC/B,WAAW,EAAE;QACX,MAAM,EAAE,kBAAkB,CAAC;QAC3B;6DACqD;QACrD,cAAc,EAAE,OAAO,CAAC;QACxB;oCAC4B;QAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC;IACF;qEACiE;IACjE,UAAU,EAAE,KAAK,CAAC;QAChB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,IAAI,GAAG,KAAK,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC,CAAC;IACH,oCAAoC;IACpC,KAAK,EAAE,KAAK,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC,CAAC;IACH;;gDAE4C;IAC5C,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CACnD;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiKtF;AAgCD;;oBAEoB;AACpB,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAqDrE"}