sently 0.2.1 → 0.3.2

package/dist/{chunk-tch6s785.js → chunk-qb05tsqn.js}

@@ -1,352 +1,21 @@
+import {
+  buildMIME
+} from "./chunk-dhbe64fc.js";
 import {
   OAuth2Client
-} from "./chunk-vm70w4e3.js";
+} from "./chunk-ym3zzv8b.js";
 import {
-  extractEmails,
-  parseAddresses,
-  resolveAttachments,
-  toMIMEHeader
+  resolveAttachments
 } from "./chunk-hdqpvsm8.js";
 import {
   decodeBase64,
   encodeBase64,
-  encodeHeader,
   encodeUtf8
 } from "./chunk-794hc3m4.js";
 import {
   __require
 } from "./chunk-v0bahtg2.js";
 
-// src/core/dkim.ts
-var CRLF = `\r
-`;
-var DEFAULT_HEADER_FIELDS = "from:to:subject:date:message-id:mime-version:content-type";
-function canonicalizeHeadersRelaxed(headers, fieldNames) {
-  const parsed = parseHeaders(headers);
-  const lines = [];
-  for (const name of fieldNames) {
-    const key = name.toLowerCase().trim();
-    const values = parsed.get(key);
-    if (!values) {
-      continue;
-    }
-    for (const value of values) {
-      const unfolded = value.replace(/\r?\n/g, "").replace(/\s+/g, " ").trim();
-      lines.push(`${key}:${unfolded}`);
-    }
-  }
-  return lines.length > 0 ? `${lines.join(CRLF)}${CRLF}` : "";
-}
-function canonicalizeBodyRelaxed(body) {
-  const normalized = body.replace(/\r\n/g, `
-`).replace(/\r/g, `
-`);
-  const lines = normalized.split(`
-`).map((line) => line.replace(/[ \t]+$/g, "").replace(/[ \t]+/g, " ")).filter((line) => line.length > 0);
-  if (lines.length === 0) {
-    return CRLF;
-  }
-  return `${lines.join(CRLF)}${CRLF}`;
-}
-async function importPrivateKey(pem, algorithm) {
-  if (algorithm === "ed25519-sha256" && /OPENSSH PRIVATE KEY/i.test(pem)) {
-    throw new Error("Ed25519 keys must be in PKCS#8 PEM format (-----BEGIN PRIVATE KEY-----). Convert with: openssl pkcs8 -topk8 -nocrypt -in key.pem -out key_pkcs8.pem");
-  }
-  const der = pemToDer(pem);
-  const derBuffer = toArrayBuffer(der);
-  try {
-    if (algorithm === "ed25519-sha256") {
-      return await crypto.subtle.importKey("pkcs8", derBuffer, { name: "Ed25519" }, false, [
-        "sign"
-      ]);
-    }
-    return await crypto.subtle.importKey("pkcs8", derBuffer, { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" }, false, ["sign"]);
-  } catch (err) {
-    if (algorithm === "ed25519-sha256" && err instanceof DOMException) {
-      throw new Error("Ed25519 DKIM requires Node.js ≥ 18.4, Bun ≥ 1.0, or Cloudflare Workers", {
-        cause: err
-      });
-    }
-    throw err;
-  }
-}
-async function signDKIM(rawMessage, config) {
-  const algorithm = config.algorithm ?? "rsa-sha256";
-  const fieldList = (config.headerFieldNames ?? DEFAULT_HEADER_FIELDS).split(":").map((f) => f.trim().toLowerCase()).filter(Boolean);
-  const skip = new Set((config.skipFields ?? "").split(":").map((f) => f.trim().toLowerCase()).filter(Boolean));
-  const signFields = fieldList.filter((f) => !skip.has(f));
-  const text = new TextDecoder().decode(rawMessage);
-  const sep = text.indexOf(`\r
-\r
-`);
-  const headerPart = sep >= 0 ? text.slice(0, sep) : text;
-  const bodyPart = sep >= 0 ? text.slice(sep + 4) : "";
-  const bodyCanonical = canonicalizeBodyRelaxed(bodyPart);
-  const bodyHash = await sha256Base64(encodeUtf8(bodyCanonical));
-  const dkimAlgo = algorithm === "ed25519-sha256" ? "ed25519-sha256" : "rsa-sha256";
-  const headerList = signFields.join(":");
-  const timestamp = Math.floor(Date.now() / 1000);
-  const dkimWithoutSig = [
-    `v=1`,
-    `a=${dkimAlgo}`,
-    `c=relaxed/relaxed`,
-    `d=${config.domainName}`,
-    `s=${config.keySelector}`,
-    `h=${headerList}`,
-    `bh=${bodyHash}`,
-    `b=`,
-    `t=${timestamp}`
-  ].join("; ");
-  const dkimHeaderName = "dkim-signature";
-  const dkimHeaderValue = dkimWithoutSig;
-  const headersWithDkim = `${headerPart}${CRLF}${dkimHeaderName}:${dkimHeaderValue}`;
-  const canonical = canonicalizeHeadersRelaxed(headersWithDkim, [...signFields, dkimHeaderName]);
-  const key = await importPrivateKey(config.privateKey, algorithm);
-  const data = encodeUtf8(canonical);
-  const signature = await signData(key, data, algorithm);
-  const bValue = encodeBase64(signature).replace(/\r\n/g, "");
-  const header = `DKIM-Signature: v=1; a=${dkimAlgo}; c=relaxed/relaxed; d=${config.domainName}; s=${config.keySelector}; h=${headerList}; bh=${bodyHash}; b=${bValue}; t=${timestamp}`;
-  return { header };
-}
-function parseHeaders(headerBlock) {
-  const map = new Map;
-  const lines = headerBlock.split(/\r?\n/).filter((l) => l.length > 0);
-  let currentName = "";
-  let currentValue = "";
-  const flush = () => {
-    if (!currentName) {
-      return;
-    }
-    const key = currentName.toLowerCase();
-    const list = map.get(key) ?? [];
-    list.push(currentValue);
-    map.set(key, list);
-    currentName = "";
-    currentValue = "";
-  };
-  for (const line of lines) {
-    if (/^[ \t]/.test(line) && currentName) {
-      currentValue += ` ${line.trim()}`;
-      continue;
-    }
-    flush();
-    const colon = line.indexOf(":");
-    if (colon > 0) {
-      currentName = line.slice(0, colon).trim();
-      currentValue = line.slice(colon + 1).trim();
-    }
-  }
-  flush();
-  return map;
-}
-function pemToDer(pem) {
-  const lines = pem.replace(/-----BEGIN[^-]+-----/g, "").replace(/-----END[^-]+-----/g, "").replace(/\s/g, "");
-  const binary = atob(lines);
-  const der = new Uint8Array(binary.length);
-  for (let i = 0;i < binary.length; i++) {
-    der[i] = binary.charCodeAt(i);
-  }
-  return der;
-}
-function toArrayBuffer(bytes) {
-  return bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
-}
-async function sha256Base64(data) {
-  const hash = await crypto.subtle.digest("SHA-256", toArrayBuffer(data));
-  return encodeBase64(new Uint8Array(hash)).replace(/\r\n/g, "");
-}
-async function signData(key, data, algorithm) {
-  const buf = toArrayBuffer(data);
-  if (algorithm === "ed25519-sha256") {
-    const sig2 = await crypto.subtle.sign("Ed25519", key, buf);
-    return new Uint8Array(sig2);
-  }
-  const sig = await crypto.subtle.sign({ name: "RSASSA-PKCS1-v1_5" }, key, buf);
-  return new Uint8Array(sig);
-}
-
-// src/core/mime.ts
-var CRLF2 = `\r
-`;
-async function buildMIME(options, dkim) {
-  const messageId = options.messageId ?? generateMessageId();
-  const date = (options.date ?? new Date).toUTCString();
-  const fromAddrs = parseAddresses(options.from);
-  const toAddrs = parseAddresses(options.to);
-  const ccAddrs = options.cc ? parseAddresses(options.cc) : [];
-  if (fromAddrs.length === 0) {
-    throw new Error("Missing from address");
-  }
-  if (toAddrs.length === 0) {
-    throw new Error("Missing to address");
-  }
-  const envelope = {
-    from: fromAddrs[0]?.address ?? "",
-    to: [
-      ...extractEmails(options.to),
-      ...options.cc ? extractEmails(options.cc) : [],
-      ...options.bcc ? extractEmails(options.bcc) : []
-    ]
-  };
-  const attachments = options.attachments ?? [];
-  const inlineAttachments = attachments.filter((a) => a.inline || a.contentId);
-  const regularAttachments = attachments.filter((a) => !a.inline && !a.contentId);
-  let root = buildSimpleBody(options);
-  if (inlineAttachments.length > 0) {
-    const boundary = generateBoundary();
-    root = {
-      contentType: `multipart/related; boundary="${boundary}"`,
-      content: assembleMultipart(boundary, [
-        formatNestedPart(buildSimpleBody(options)),
-        ...inlineAttachments.map(formatAttachmentPart)
-      ])
-    };
-  }
-  if (regularAttachments.length > 0) {
-    const boundary = generateBoundary();
-    root = {
-      contentType: `multipart/mixed; boundary="${boundary}"`,
-      content: assembleMultipart(boundary, [
-        formatNestedPart(root),
-        ...regularAttachments.map(formatAttachmentPart)
-      ])
-    };
-  }
-  const headers = [
-    foldHeader("From", fromAddrs.map(toMIMEHeader).join(", ")),
-    foldHeader("To", toAddrs.map(toMIMEHeader).join(", "))
-  ];
-  if (ccAddrs.length > 0) {
-    headers.push(foldHeader("Cc", ccAddrs.map(toMIMEHeader).join(", ")));
-  }
-  if (options.replyTo) {
-    headers.push(foldHeader("Reply-To", parseAddresses(options.replyTo).map(toMIMEHeader).join(", ")));
-  }
-  headers.push(foldHeader("Subject", encodeHeader(options.subject)), foldHeader("Date", date), foldHeader("Message-ID", messageId), "MIME-Version: 1.0");
-  if (options.priority === "high") {
-    headers.push("X-Priority: 1", "Importance: high");
-  } else if (options.priority === "low") {
-    headers.push("X-Priority: 5", "Importance: low");
-  }
-  if (options.headers) {
-    for (const [key, value] of Object.entries(options.headers)) {
-      headers.push(foldHeader(key, value));
-    }
-  }
-  headers.push(`Content-Type: ${root.contentType}`);
-  if (root.contentTransferEncoding) {
-    headers.push(`Content-Transfer-Encoding: ${root.contentTransferEncoding}`);
-  }
-  const rawText = `${headers.join(CRLF2)}${CRLF2}${CRLF2}${root.content}`;
-  let raw = encodeUtf8(rawText);
-  if (dkim) {
-    const { header } = await signDKIM(raw, dkim);
-    const signedText = `${header}${CRLF2}${rawText}`;
-    raw = encodeUtf8(signedText);
-  }
-  return { raw, envelope, messageId, size: raw.length };
-}
-function buildSimpleBody(options) {
-  const hasText = Boolean(options.text);
-  const hasHtml = Boolean(options.html);
-  if (hasText && hasHtml) {
-    const boundary = generateBoundary();
-    return {
-      contentType: `multipart/alternative; boundary="${boundary}"`,
-      content: assembleMultipart(boundary, [
-        formatSimplePart({
-          contentType: "text/plain; charset=utf-8",
-          contentTransferEncoding: "8bit",
-          content: options.text ?? ""
-        }),
-        formatSimplePart({
-          contentType: "text/html; charset=utf-8",
-          contentTransferEncoding: "8bit",
-          content: options.html ?? ""
-        })
-      ])
-    };
-  }
-  if (hasHtml) {
-    return {
-      contentType: "text/html; charset=utf-8",
-      contentTransferEncoding: "8bit",
-      content: options.html ?? ""
-    };
-  }
-  return {
-    contentType: "text/plain; charset=utf-8",
-    contentTransferEncoding: "8bit",
-    content: options.text ?? ""
-  };
-}
-function formatSimplePart(part) {
-  const headers = [`Content-Type: ${part.contentType}`];
-  if (part.contentTransferEncoding) {
-    headers.push(`Content-Transfer-Encoding: ${part.contentTransferEncoding}`);
-  }
-  return `${headers.join(CRLF2)}${CRLF2}${CRLF2}${part.content}`;
-}
-function formatNestedPart(part) {
-  const headers = [`Content-Type: ${part.contentType}`];
-  if (part.contentTransferEncoding) {
-    headers.push(`Content-Transfer-Encoding: ${part.contentTransferEncoding}`);
-  }
-  return `${headers.join(CRLF2)}${CRLF2}${CRLF2}${part.content}`;
-}
-function formatAttachmentPart(attachment) {
-  if (!attachment.content || typeof attachment.content === "string") {
-    throw new Error(`Attachment "${attachment.filename}" requires Uint8Array content`);
-  }
-  const headers = [
-    `Content-Type: ${attachment.contentType ?? "application/octet-stream"}`,
-    "Content-Transfer-Encoding: base64",
-    `Content-Disposition: ${attachment.inline ? "inline" : "attachment"}; filename="${attachment.filename}"`
-  ];
-  if (attachment.contentId) {
-    headers.push(`Content-ID: <${attachment.contentId}>`);
-  }
-  if (attachment.headers) {
-    for (const [key, value] of Object.entries(attachment.headers)) {
-      headers.push(`${key}: ${value}`);
-    }
-  }
-  return `${headers.join(CRLF2)}${CRLF2}${CRLF2}${encodeBase64(attachment.content)}`;
-}
-function assembleMultipart(boundary, parts) {
-  const segments = parts.map((part) => `--${boundary}${CRLF2}${part}`);
-  segments.push(`--${boundary}--`);
-  return segments.join(CRLF2);
-}
-function generateMessageId() {
-  const random = crypto.getRandomValues(new Uint8Array(8));
-  const hex = Array.from(random, (b) => b.toString(16).padStart(2, "0")).join("");
-  return `<${Date.now()}.${hex}@sently>`;
-}
-function generateBoundary() {
-  const random = crypto.getRandomValues(new Uint8Array(12));
-  const hex = Array.from(random, (b) => b.toString(16).padStart(2, "0")).join("");
-  return `----sently_${hex}`;
-}
-function foldHeader(name, value) {
-  const line = `${name}: ${value}`;
-  if (line.length <= 76) {
-    return line;
-  }
-  const chunks = [];
-  let remaining = line;
-  while (remaining.length > 76) {
-    let breakAt = remaining.lastIndexOf(" ", 76);
-    if (breakAt <= name.length + 1) {
-      breakAt = 76;
-    }
-    chunks.push(remaining.slice(0, breakAt));
-    remaining = ` ${remaining.slice(breakAt).trimStart()}`;
-  }
-  chunks.push(remaining);
-  return chunks.join(`${CRLF2} `);
-}
-
 // src/core/cram-md5.ts
 var BLOCK_SIZE = 64;
 function u32(x) {
@@ -622,9 +291,15 @@ function encodeCommand(cmd) {
       line = `AUTH XOAUTH2 ${cmd.xoauth2String}`;
       break;
     case "MAIL_FROM":
+      if (/[\r\n]/.test(cmd.address)) {
+        throw new SMTPError(`Invalid address: contains CRLF`, 0, "MAIL FROM", cmd.address);
+      }
       line = `MAIL FROM:<${cmd.address}>`;
       break;
     case "RCPT_TO":
+      if (/[\r\n]/.test(cmd.address)) {
+        throw new SMTPError(`Invalid address: contains CRLF`, 0, "RCPT TO", cmd.address);
+      }
       line = `RCPT TO:<${cmd.address}>`;
       break;
     case "DATA":
@@ -938,6 +613,6 @@ async function resolveMX(domain) {
   records.sort((a, b) => a.priority - b.priority);
   return records[0]?.exchange ?? domain;
 }
-export { buildMIME, encodeLine, SMTPTransport, resolveSMTPConfig, openSMTPSession, deliverSMTPMessage, closeSMTPSession, readSMTPResponse };
+export { encodeLine, SMTPTransport, resolveSMTPConfig, openSMTPSession, deliverSMTPMessage, closeSMTPSession, readSMTPResponse };
 
-//# debugId=6E41A48857F001F464756E2164756E21
+//# debugId=D513C6B3F9A57AFC64756E2164756E21

package/dist/chunk-qb05tsqn.js.map

@@ -0,0 +1,12 @@
+{
+  "version": 3,
+  "sources": ["../src/core/cram-md5.ts", "../src/core/smtp.ts", "../src/transports/smtp.ts"],
+  "sourcesContent": [
+    "/**\n * @module\n * Pure-JS HMAC-MD5 implementation for SMTP CRAM-MD5 authentication.\n * Web Crypto does not support MD5, so this is implemented in pure TypeScript\n * with no external dependencies.\n *\n * @example\n * ```ts\n * import { computeCRAMMD5 } from \"sently/core/cram-md5\";\n * const response = await computeCRAMMD5(\"<challenge>\", \"user\", \"pass\");\n * ```\n */\nimport { decodeBase64, encodeBase64, encodeUtf8 } from \"./base64.js\";\n\n/** MD5 block size in bytes (HMAC block size per RFC 2104). */\nconst BLOCK_SIZE = 64;\n\n/** Coerce to unsigned 32-bit integer. */\nfunction u32(x: number): number {\n  return x >>> 0;\n}\n\n/**\n * Compute an MD5 hash of the given data (RFC 1321).\n */\nexport function md5(data: Uint8Array): Uint8Array {\n  const padded = padMessage(data);\n\n  let a0 = 0x67452301;\n  let b0 = 0xefcdab89;\n  let c0 = 0x98badcfe;\n  let d0 = 0x10325476;\n\n  for (let i = 0; i < padded.length; i += 64) {\n    const block = padded.subarray(i, i + 64);\n    const m = new Uint32Array(16);\n    for (let j = 0; j < 16; j++) {\n      const o = j * 4;\n      m[j] = u32(\n        (block[o] ?? 0) |\n          ((block[o + 1] ?? 0) << 8) |\n          ((block[o + 2] ?? 0) << 16) |\n          ((block[o + 3] ?? 0) << 24),\n      );\n    }\n\n    let a = a0;\n    let b = b0;\n    let c = c0;\n    let d = d0;\n\n    for (let k = 0; k < 64; k++) {\n      let f: number;\n      let g: number;\n      if (k < 16) {\n        f = u32((b & c) | (~b & d));\n        g = k;\n      } else if (k < 32) {\n        f = u32((b & d) | (c & ~d));\n        g = u32((5 * k + 1) % 16);\n      } else if (k < 48) {\n        f = u32(b ^ c ^ d);\n        g = u32((3 * k + 5) % 16);\n      } else {\n        f = u32(c ^ (b | ~d));\n        g = u32((7 * k) % 16);\n      }\n\n      const temp = d;\n      d = c;\n      c = b;\n      b = u32(b + leftRotate(u32(a + f + u32((K[k] ?? 0) + (m[g] ?? 0))), S[k] ?? 0));\n      a = temp;\n    }\n\n    a0 = u32(a0 + a);\n    b0 = u32(b0 + b);\n    c0 = u32(c0 + c);\n    d0 = u32(d0 + d);\n  }\n\n  const out = new Uint8Array(16);\n  const view = new DataView(out.buffer);\n  view.setUint32(0, a0, true);\n  view.setUint32(4, b0, true);\n  view.setUint32(8, c0, true);\n  view.setUint32(12, d0, true);\n  return out;\n}\n\nconst S = [\n  7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22, 5, 9, 14, 20, 5, 9, 14, 20, 5, 9, 14,\n  20, 5, 9, 14, 20, 4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23, 6, 10, 15, 21, 6,\n  10, 15, 21, 6, 10, 15, 21, 6, 10, 15, 21,\n];\n\nconst K = new Uint32Array([\n  0xd76aa478, 0xe8c7b756, 0x242070db, 0xc1bdceee, 0xf57c0faf, 0x4787c62a, 0xa8304613, 0xfd469501,\n  0x698098d8, 0x8b44f7af, 0xffff5bb1, 0x895cd7be, 0x6b901122, 0xfd987193, 0xa679438e, 0x49b40821,\n  0xf61e2562, 0xc040b340, 0x265e5a51, 0xe9b6c7aa, 0xd62f105d, 0x02441453, 0xd8a1e681, 0xe7d3fbc8,\n  0x21e1cde6, 0xc33707d6, 0xf4d50d87, 0x455a14ed, 0xa9e3e905, 0xfcefa3f8, 0x676f02d9, 0x8d2a4c8a,\n  0xfffa3942, 0x8771f681, 0x6d9d6122, 0xfde5380c, 0xa4beea44, 0x4bdecfa9, 0xf6bb4b60, 0xbebfbc70,\n  0x289b7ec6, 0xeaa127fa, 0xd4ef3085, 0x04881d05, 0xd9d4d039, 0xe6db99e5, 0x1fa27cf8, 0xc4ac5665,\n  0xf4292244, 0x432aff97, 0xab9423a7, 0xfc93a039, 0x655b59c3, 0x8f0ccc92, 0xffeff47d, 0x85845dd1,\n  0x6fa87e4f, 0xfe2ce6e0, 0xa3014314, 0x4e0811a1, 0xf7537e82, 0xbd3af235, 0x2ad7d2bb, 0xeb86d391,\n]);\n\nfunction leftRotate(value: number, shift: number): number {\n  return u32((value << shift) | (value >>> (32 - shift)));\n}\n\nfunction padMessage(data: Uint8Array): Uint8Array {\n  const bitLen = data.length * 8;\n  const padLen = (56 - ((data.length + 1) % 64) + 64) % 64;\n  const totalLen = data.length + 1 + padLen + 8;\n  const padded = new Uint8Array(totalLen);\n  padded.set(data);\n  padded[data.length] = 0x80;\n\n  const view = new DataView(padded.buffer);\n  view.setUint32(totalLen - 8, bitLen >>> 0, true);\n  view.setUint32(totalLen - 4, Math.floor(bitLen / 0x100000000), true);\n  return padded;\n}\n\n/**\n * Compute HMAC-MD5(key, data) per RFC 2104.\n */\nexport function hmacMD5(key: Uint8Array, data: Uint8Array): Uint8Array {\n  let k = key;\n  if (k.length > BLOCK_SIZE) {\n    k = md5(k);\n  }\n  const paddedKey = new Uint8Array(BLOCK_SIZE);\n  paddedKey.set(k);\n\n  const ipad = new Uint8Array(BLOCK_SIZE);\n  const opad = new Uint8Array(BLOCK_SIZE);\n  for (let i = 0; i < BLOCK_SIZE; i++) {\n    ipad[i] = (paddedKey[i] ?? 0) ^ 0x36;\n    opad[i] = (paddedKey[i] ?? 0) ^ 0x5c;\n  }\n\n  const inner = new Uint8Array(ipad.length + data.length);\n  inner.set(ipad);\n  inner.set(data, ipad.length);\n  const innerHash = md5(inner);\n\n  const outer = new Uint8Array(opad.length + innerHash.length);\n  outer.set(opad);\n  outer.set(innerHash, opad.length);\n  return md5(outer);\n}\n\nfunction bytesToHex(bytes: Uint8Array): string {\n  return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/**\n * Compute the CRAM-MD5 response string for SMTP authentication.\n *\n * @param challenge - base64-encoded challenge from server\n * @param user - SMTP username\n * @param pass - SMTP password\n * @returns base64-encoded CRAM-MD5 response\n */\nexport async function computeCRAMMD5(\n  challenge: string,\n  user: string,\n  pass: string,\n): Promise<string> {\n  const challengeBytes = decodeBase64(challenge.trim());\n  const passBytes = encodeUtf8(pass);\n  const digest = hmacMD5(passBytes, challengeBytes);\n  const hex = bytesToHex(digest);\n  return encodeBase64(`${user} ${hex}`).replace(/\\r\\n/g, \"\");\n}\n",
+    "// src/core/smtp.ts\nimport { encodeBase64, encodeUtf8 } from \"./base64.js\";\n\nexport { computeCRAMMD5 } from \"./cram-md5.js\";\n\n/** SMTP command to send to the server. */\nexport type SMTPCommand =\n  | { type: \"EHLO\"; domain: string }\n  | { type: \"STARTTLS\" }\n  | { type: \"AUTH_LOGIN\"; user: string; pass: string }\n  | { type: \"AUTH_PLAIN\"; user: string; pass: string }\n  | { type: \"AUTH_CRAM_MD5_INIT\" }\n  | { type: \"AUTH_CRAM_MD5_RESPONSE\"; response: string }\n  | { type: \"AUTH_XOAUTH2\"; xoauth2String: string }\n  | { type: \"MAIL_FROM\"; address: string }\n  | { type: \"RCPT_TO\"; address: string }\n  | { type: \"DATA\" }\n  | { type: \"DATA_BODY\"; content: Uint8Array }\n  | { type: \"QUIT\" }\n  | { type: \"RSET\" }\n  | { type: \"NOOP\" };\n\n/** Parsed SMTP server response. */\nexport interface SMTPResponse {\n  code: number;\n  message: string;\n  isSuccess: boolean;\n  isReady: boolean;\n  isError: boolean;\n}\n\n/** SMTP protocol error with server response details. */\nexport class SMTPError extends Error {\n  /** Creates an SMTP protocol error. */\n  constructor(\n    message: string,\n    public readonly code: number,\n    public readonly command: string,\n    public readonly response: string,\n  ) {\n    super(message);\n    this.name = \"SMTPError\";\n  }\n}\n\n/**\n * Encode an SMTPCommand into a Uint8Array for sending over the socket.\n */\nexport function encodeCommand(cmd: SMTPCommand): Uint8Array {\n  let line: string;\n\n  switch (cmd.type) {\n    case \"EHLO\":\n      line = `EHLO ${cmd.domain}`;\n      break;\n    case \"STARTTLS\":\n      line = \"STARTTLS\";\n      break;\n    case \"AUTH_LOGIN\":\n      line = \"AUTH LOGIN\";\n      break;\n    case \"AUTH_PLAIN\":\n      line = `AUTH PLAIN ${encodeBase64(`\\0${cmd.user}\\0${cmd.pass}`).replace(/\\r\\n/g, \"\")}`;\n      break;\n    case \"AUTH_CRAM_MD5_INIT\":\n      line = \"AUTH CRAM-MD5\";\n      break;\n    case \"AUTH_CRAM_MD5_RESPONSE\":\n      return encodeUtf8(`${cmd.response}\\r\\n`);\n    case \"AUTH_XOAUTH2\":\n      line = `AUTH XOAUTH2 ${cmd.xoauth2String}`;\n      break;\n    case \"MAIL_FROM\":\n      if (/[\\r\\n]/.test(cmd.address)) {\n        throw new SMTPError(`Invalid address: contains CRLF`, 0, \"MAIL FROM\", cmd.address);\n      }\n      line = `MAIL FROM:<${cmd.address}>`;\n      break;\n    case \"RCPT_TO\":\n      if (/[\\r\\n]/.test(cmd.address)) {\n        throw new SMTPError(`Invalid address: contains CRLF`, 0, \"RCPT TO\", cmd.address);\n      }\n      line = `RCPT TO:<${cmd.address}>`;\n      break;\n    case \"DATA\":\n      line = \"DATA\";\n      break;\n    case \"DATA_BODY\":\n      return encodeUtf8(applyDotStuffing(cmd.content));\n    case \"QUIT\":\n      line = \"QUIT\";\n      break;\n    case \"RSET\":\n      line = \"RSET\";\n      break;\n    case \"NOOP\":\n      line = \"NOOP\";\n      break;\n  }\n\n  return encodeUtf8(`${line}\\r\\n`);\n}\n\n/**\n * Parse raw bytes from the server into an SMTPResponse.\n */\nexport function parseResponse(data: Uint8Array): SMTPResponse {\n  const text = new TextDecoder().decode(data).trim();\n  const lines = text.split(/\\r?\\n/);\n  const lastLine = lines[lines.length - 1] ?? \"\";\n  const match = lastLine.match(/^(\\d{3})([\\s-])(.*)$/);\n\n  if (!match) {\n    throw new SMTPError(\"Invalid SMTP response\", 0, \"PARSE\", text);\n  }\n\n  const code = Number.parseInt(match[1] ?? \"0\", 10);\n  const message = lines.map((l) => l.replace(/^\\d{3}[\\s-]/, \"\")).join(\" \");\n\n  return {\n    code,\n    message,\n    isSuccess: code >= 200 && code < 300,\n    isReady: code >= 300 && code < 400,\n    isError: code >= 400,\n  };\n}\n\n/**\n * Accumulate byte chunks until a complete SMTP response is received.\n */\nexport function accumulateResponse(chunks: Uint8Array[]): Uint8Array | null {\n  if (chunks.length === 0) {\n    return null;\n  }\n\n  const total = chunks.reduce((sum, c) => sum + c.length, 0);\n  const combined = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    combined.set(chunk, offset);\n    offset += chunk.length;\n  }\n\n  const text = new TextDecoder().decode(combined);\n  const lines = text.split(/\\r?\\n/).filter((l) => l.length > 0);\n\n  if (lines.length === 0) {\n    return null;\n  }\n\n  const lastLine = lines[lines.length - 1] ?? \"\";\n  if (/^\\d{3} /.test(lastLine)) {\n    return combined;\n  }\n\n  return null;\n}\n\n/**\n * Select the best AUTH method from EHLO capability lines.\n * Priority: XOAUTH2 > CRAM-MD5 > LOGIN > PLAIN.\n */\nexport function selectAuthMethod(\n  capabilities: string[],\n): \"LOGIN\" | \"PLAIN\" | \"CRAM-MD5\" | \"OAUTH2\" {\n  const upper = capabilities.map((c) => c.toUpperCase());\n  if (upper.some((c) => c.includes(\"AUTH\") && c.includes(\"XOAUTH2\"))) {\n    return \"OAUTH2\";\n  }\n  if (upper.some((c) => c.includes(\"AUTH\") && c.includes(\"CRAM-MD5\"))) {\n    return \"CRAM-MD5\";\n  }\n  if (upper.some((c) => c.includes(\"AUTH\") && c.includes(\"LOGIN\"))) {\n    return \"LOGIN\";\n  }\n  if (upper.some((c) => c.includes(\"AUTH\") && c.includes(\"PLAIN\"))) {\n    return \"PLAIN\";\n  }\n  throw new SMTPError(\"No supported AUTH method\", 0, \"EHLO\", capabilities.join(\" \"));\n}\n\n/**\n * Parse an EHLO multi-line response and extract capability keywords.\n */\nexport function parseEHLO(response: SMTPResponse): string[] {\n  return response.message\n    .split(/\\s+/)\n    .flatMap((part) => part.split(/\\r?\\n/))\n    .filter(Boolean);\n}\n\n/**\n * Assert that an SMTPResponse code is within the expected set.\n */\nexport function assertResponse(\n  response: SMTPResponse,\n  expectedCodes: number[],\n  command: string,\n): void {\n  if (!expectedCodes.includes(response.code)) {\n    throw new SMTPError(\n      `Unexpected SMTP response for ${command}`,\n      response.code,\n      command,\n      response.message,\n    );\n  }\n}\n\nfunction applyDotStuffing(content: Uint8Array): string {\n  const text = new TextDecoder().decode(content);\n  const lines = text.split(/\\r?\\n/);\n  const stuffed = lines.map((line) => (line.startsWith(\".\") ? `.${line}` : line));\n  return `${stuffed.join(\"\\r\\n\")}\\r\\n.\\r\\n`;\n}\n\n/** Encode AUTH LOGIN password step (second base64 chunk). */\nexport function encodeAuthLoginPass(pass: string): Uint8Array {\n  return encodeUtf8(`${encodeBase64(pass).replace(/\\r\\n/g, \"\")}\\r\\n`);\n}\n\n/** Encode AUTH LOGIN user step when sent separately after 334. */\nexport function encodeAuthLoginUser(user: string): Uint8Array {\n  return encodeUtf8(`${encodeBase64(user).replace(/\\r\\n/g, \"\")}\\r\\n`);\n}\n\n/** Encode CRAM-MD5 response after challenge. */\nexport function encodeAuthCramResponse(response: string): Uint8Array {\n  return encodeUtf8(`${response}\\r\\n`);\n}\n\n/** Encode raw SMTP line with CRLF. */\nexport function encodeLine(line: string): Uint8Array {\n  return encodeUtf8(`${line}\\r\\n`);\n}\n",
+    "/**\n * @module\n * SMTP transport — orchestrates socket adapter, MIME builder, and protocol logic.\n *\n * @example\n * ```ts\n * import { SMTPTransport } from \"sently/transports/smtp\";\n * import { NodeAdapter } from \"sently/adapters/node\";\n * import { createMailer } from \"sently\";\n *\n * const mailer = await createMailer({\n *   transport: new SMTPTransport({\n *     host: \"smtp.example.com\",\n *     auth: { user: \"you@example.com\", pass: \"secret\" },\n *     adapter: new NodeAdapter(),\n *   }),\n * });\n * ```\n */\nimport { OAuth2Client } from \"../auth/oauth2.js\";\nimport { buildMIME, type MIMEBuildResult } from \"../core/mime.js\";\nimport type { SMTPResponse } from \"../core/smtp.js\";\nimport {\n  accumulateResponse,\n  assertResponse,\n  computeCRAMMD5,\n  encodeAuthLoginPass,\n  encodeAuthLoginUser,\n  encodeCommand,\n  encodeLine,\n  parseEHLO,\n  parseResponse,\n  SMTPError,\n  selectAuthMethod,\n} from \"../core/smtp.js\";\nimport type {\n  MailOptions,\n  SendResult,\n  SMTPConfig,\n  SocketAdapter,\n  Transport,\n} from \"../core/types.js\";\nimport { resolveAttachments } from \"./resolve-attachments.js\";\n\n/**\n * SMTP transport orchestrating adapter, MIME builder, and protocol logic.\n */\nexport class SMTPTransport implements Transport {\n  private readonly config: ResolvedSMTPConfig;\n  private adapter: SocketAdapter | null = null;\n\n  /** Creates an SMTP transport with the given configuration. */\n  constructor(config: SMTPConfig) {\n    this.config = resolveSMTPConfig(config);\n  }\n\n  /** Sends an email via SMTP using the configured adapter. */\n  async send(options: MailOptions): Promise<SendResult> {\n    const resolvedOptions = {\n      ...options,\n      attachments: await resolveAttachments(options.attachments),\n    };\n    const mime = await buildMIME(resolvedOptions, this.config.dkim);\n    const adapter = await this.getAdapter();\n\n    const host = this.config.direct\n      ? await resolveMX(mime.envelope.from.split(\"@\")[1] ?? this.config.host)\n      : this.config.host;\n\n    await adapter.connect(host, this.config.port);\n    this.adapter = adapter;\n\n    try {\n      await openSMTPSession(adapter, this.config);\n      return await deliverSMTPMessage(adapter, mime);\n    } finally {\n      await closeSMTPSession(adapter);\n      this.adapter = null;\n    }\n  }\n\n  /** Verifies SMTP connectivity and authentication without sending mail. */\n  async verify(): Promise<boolean> {\n    const adapter = await this.getAdapter();\n    await adapter.connect(this.config.host, this.config.port);\n\n    try {\n      await openSMTPSession(adapter, this.config);\n      return true;\n    } finally {\n      await closeSMTPSession(adapter);\n    }\n  }\n\n  /** Closes the underlying socket adapter if connected. */\n  async close(): Promise<void> {\n    if (this.adapter) {\n      await this.adapter.close();\n      this.adapter = null;\n    }\n  }\n\n  private async getAdapter(): Promise<SocketAdapter> {\n    if (!this.config.adapter) {\n      throw new SMTPError(\"No socket adapter configured\", 0, \"CONNECT\", \"\");\n    }\n    return this.config.adapter;\n  }\n}\n\n/** Resolved SMTP transport configuration with defaults applied. */\nexport interface ResolvedSMTPConfig {\n  host: string;\n  port: number;\n  secure: boolean;\n  auth?: SMTPConfig[\"auth\"];\n  tls?: SMTPConfig[\"tls\"];\n  dkim?: SMTPConfig[\"dkim\"];\n  connectionTimeout?: number;\n  greetingTimeout?: number;\n  socketTimeout?: number;\n  direct?: boolean;\n  adapter?: SocketAdapter;\n}\n\n/** Apply defaults to SMTP configuration. */\nexport function resolveSMTPConfig(config: SMTPConfig): ResolvedSMTPConfig {\n  const secure = config.secure ?? false;\n  return {\n    host: config.host,\n    port: config.port ?? (secure ? 465 : 587),\n    secure,\n    ...(config.auth !== undefined ? { auth: config.auth } : {}),\n    ...(config.dkim !== undefined ? { dkim: config.dkim } : {}),\n    ...(config.tls !== undefined ? { tls: config.tls } : {}),\n    ...(config.connectionTimeout !== undefined\n      ? { connectionTimeout: config.connectionTimeout }\n      : {}),\n    ...(config.greetingTimeout !== undefined ? { greetingTimeout: config.greetingTimeout } : {}),\n    ...(config.socketTimeout !== undefined ? { socketTimeout: config.socketTimeout } : {}),\n    ...(config.direct !== undefined ? { direct: config.direct } : {}),\n    ...(config.adapter !== undefined ? { adapter: config.adapter } : {}),\n  };\n}\n\n/**\n * Connect greeting, EHLO, optional STARTTLS, and AUTH on an open adapter.\n */\nexport async function openSMTPSession(\n  adapter: SocketAdapter,\n  config: ResolvedSMTPConfig,\n): Promise<void> {\n  const greeting = await readSMTPResponse(adapter);\n  assertResponse(greeting, [220], \"greeting\");\n\n  let capabilities = await ehlo(adapter, config.host);\n  if (!config.secure && !adapter.secure) {\n    await sendRaw(adapter, encodeCommand({ type: \"STARTTLS\" }));\n    const starttlsResp = await readSMTPResponse(adapter);\n    assertResponse(starttlsResp, [220], \"STARTTLS\");\n    await adapter.startTLS(config.tls);\n    capabilities = await ehlo(adapter, config.host);\n  }\n\n  if (config.auth) {\n    await authenticate(adapter, config.auth, capabilities);\n  }\n}\n\n/**\n * MAIL FROM, RCPT TO, and DATA for a built MIME message on an authenticated session.\n */\nexport async function deliverSMTPMessage(\n  adapter: SocketAdapter,\n  mime: MIMEBuildResult,\n): Promise<SendResult> {\n  await sendCommand(adapter, { type: \"MAIL_FROM\", address: mime.envelope.from });\n  const mailResp = await readSMTPResponse(adapter);\n  assertResponse(mailResp, [250], \"MAIL FROM\");\n\n  const accepted: string[] = [];\n  const rejected: string[] = [];\n\n  for (const recipient of mime.envelope.to) {\n    await sendRaw(adapter, encodeCommand({ type: \"RCPT_TO\", address: recipient }));\n    const rcptResp = await readSMTPResponse(adapter);\n    if (rcptResp.isSuccess) {\n      accepted.push(recipient);\n    } else {\n      rejected.push(recipient);\n    }\n  }\n\n  await sendCommand(adapter, { type: \"DATA\" });\n  const dataResp = await readSMTPResponse(adapter);\n  assertResponse(dataResp, [354], \"DATA\");\n\n  let finalResp: SMTPResponse;\n  try {\n    await sendRaw(adapter, encodeCommand({ type: \"DATA_BODY\", content: mime.raw }));\n    finalResp = await readSMTPResponse(adapter);\n  } catch (err) {\n    await sendRaw(adapter, encodeCommand({ type: \"DATA_BODY\", content: mime.raw }));\n    finalResp = await readSMTPResponse(adapter);\n    if (finalResp.isError) {\n      throw err;\n    }\n  }\n  assertResponse(finalResp, [250], \"DATA end\");\n\n  return {\n    messageId: mime.messageId,\n    accepted,\n    rejected,\n    response: finalResp.message,\n    envelope: mime.envelope,\n  };\n}\n\n/**\n * QUIT and close an SMTP session adapter.\n */\nexport async function closeSMTPSession(adapter: SocketAdapter): Promise<void> {\n  try {\n    await sendCommand(adapter, { type: \"QUIT\" });\n    await readSMTPResponse(adapter);\n  } catch {\n    // ignore errors during shutdown\n  } finally {\n    await adapter.close();\n  }\n}\n\nasync function ehlo(adapter: SocketAdapter, host: string): Promise<string[]> {\n  await sendCommand(adapter, { type: \"EHLO\", domain: host });\n  const response = await readSMTPResponse(adapter);\n  assertResponse(response, [250], \"EHLO\");\n  return parseEHLO(response);\n}\n\nasync function authenticate(\n  adapter: SocketAdapter,\n  auth: NonNullable<SMTPConfig[\"auth\"]>,\n  capabilities: string[],\n): Promise<void> {\n  if (auth.type === \"OAUTH2\" && auth.oauth2) {\n    const client = new OAuth2Client(auth.oauth2);\n    const xoauth2 = await client.buildXOAUTH2();\n    await sendCommand(adapter, { type: \"AUTH_XOAUTH2\", xoauth2String: xoauth2 });\n    let resp = await readSMTPResponse(adapter);\n    if (resp.code === 334) {\n      await sendRaw(adapter, encodeLine(\"\"));\n      resp = await readSMTPResponse(adapter);\n    }\n    assertResponse(resp, [235], \"AUTH XOAUTH2\");\n    return;\n  }\n\n  const method = auth.type ?? selectAuthMethod(capabilities);\n\n  if (method === \"CRAM-MD5\") {\n    const pass = requirePassword(auth, \"CRAM-MD5\");\n    await sendCommand(adapter, { type: \"AUTH_CRAM_MD5_INIT\" });\n    let resp = await readSMTPResponse(adapter);\n    assertResponse(resp, [334], \"AUTH CRAM-MD5\");\n    const challenge = resp.message.trim();\n    const response = await computeCRAMMD5(challenge, auth.user, pass);\n    await sendCommand(adapter, { type: \"AUTH_CRAM_MD5_RESPONSE\", response });\n    resp = await readSMTPResponse(adapter);\n    assertResponse(resp, [235], \"AUTH CRAM-MD5 response\");\n    return;\n  }\n\n  if (method === \"PLAIN\") {\n    const pass = requirePassword(auth, \"PLAIN\");\n    await sendRaw(adapter, encodeCommand({ type: \"AUTH_PLAIN\", user: auth.user, pass }));\n    const resp = await readSMTPResponse(adapter);\n    assertResponse(resp, [235], \"AUTH PLAIN\");\n    return;\n  }\n\n  const pass = requirePassword(auth, \"LOGIN\");\n  await sendRaw(adapter, encodeCommand({ type: \"AUTH_LOGIN\", user: auth.user, pass }));\n  let resp = await readSMTPResponse(adapter);\n  assertResponse(resp, [334], \"AUTH LOGIN\");\n\n  await sendRaw(adapter, encodeAuthLoginUser(auth.user));\n  resp = await readSMTPResponse(adapter);\n  assertResponse(resp, [334], \"AUTH LOGIN user\");\n\n  await sendRaw(adapter, encodeAuthLoginPass(pass));\n  resp = await readSMTPResponse(adapter);\n  assertResponse(resp, [235], \"AUTH LOGIN pass\");\n}\n\nfunction requirePassword(auth: NonNullable<SMTPConfig[\"auth\"]>, method: string): string {\n  if (!auth.pass) {\n    throw new SMTPError(`Password required for ${method} authentication`, 0, `AUTH ${method}`, \"\");\n  }\n  return auth.pass;\n}\n\nasync function sendCommand(\n  adapter: SocketAdapter,\n  command: Parameters<typeof encodeCommand>[0],\n): Promise<void> {\n  await sendRaw(adapter, encodeCommand(command));\n}\n\nasync function sendRaw(adapter: SocketAdapter, data: Uint8Array): Promise<void> {\n  await adapter.write(data);\n}\n\n/** Reads and parses a complete SMTP response from the adapter. */\nasync function readSMTPResponse(adapter: SocketAdapter): Promise<SMTPResponse> {\n  const chunks: Uint8Array[] = [];\n  for await (const chunk of adapter.read()) {\n    chunks.push(chunk);\n    const complete = accumulateResponse(chunks);\n    if (complete) {\n      return parseResponse(complete);\n    }\n  }\n  throw new SMTPError(\"Connection closed while reading SMTP response\", 0, \"READ\", \"\");\n}\n\nasync function resolveMX(domain: string): Promise<string> {\n  const dns = await import(\"node:dns/promises\");\n  const records = await dns.resolveMx(domain);\n  if (records.length === 0) {\n    throw new SMTPError(`No MX records for ${domain}`, 0, \"MX\", \"\");\n  }\n  records.sort((a: { priority: number }, b: { priority: number }) => a.priority - b.priority);\n  return records[0]?.exchange ?? domain;\n}\n\n/** @internal Test helper for raw line writes. */\nexport { encodeLine, readSMTPResponse };\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;AAeA,IAAM,aAAa;AAGnB,SAAS,GAAG,CAAC,GAAmB;AAAA,EAC9B,OAAO,MAAM;AAAA;AAMR,SAAS,GAAG,CAAC,MAA8B;AAAA,EAChD,MAAM,SAAS,WAAW,IAAI;AAAA,EAE9B,IAAI,KAAK;AAAA,EACT,IAAI,KAAK;AAAA,EACT,IAAI,KAAK;AAAA,EACT,IAAI,KAAK;AAAA,EAET,SAAS,IAAI,EAAG,IAAI,OAAO,QAAQ,KAAK,IAAI;AAAA,IAC1C,MAAM,QAAQ,OAAO,SAAS,GAAG,IAAI,EAAE;AAAA,IACvC,MAAM,IAAI,IAAI,YAAY,EAAE;AAAA,IAC5B,SAAS,IAAI,EAAG,IAAI,IAAI,KAAK;AAAA,MAC3B,MAAM,IAAI,IAAI;AAAA,MACd,EAAE,KAAK,KACJ,MAAM,MAAM,MACT,MAAM,IAAI,MAAM,MAAM,KACtB,MAAM,IAAI,MAAM,MAAM,MACtB,MAAM,IAAI,MAAM,MAAM,EAC5B;AAAA,IACF;AAAA,IAEA,IAAI,IAAI;AAAA,IACR,IAAI,IAAI;AAAA,IACR,IAAI,IAAI;AAAA,IACR,IAAI,IAAI;AAAA,IAER,SAAS,IAAI,EAAG,IAAI,IAAI,KAAK;AAAA,MAC3B,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI,IAAI,IAAI;AAAA,QACV,IAAI,IAAK,IAAI,IAAM,CAAC,IAAI,CAAE;AAAA,QAC1B,IAAI;AAAA,MACN,EAAO,SAAI,IAAI,IAAI;AAAA,QACjB,IAAI,IAAK,IAAI,IAAM,IAAI,CAAC,CAAE;AAAA,QAC1B,IAAI,KAAK,IAAI,IAAI,KAAK,EAAE;AAAA,MAC1B,EAAO,SAAI,IAAI,IAAI;AAAA,QACjB,IAAI,IAAI,IAAI,IAAI,CAAC;AAAA,QACjB,IAAI,KAAK,IAAI,IAAI,KAAK,EAAE;AAAA,MAC1B,EAAO;AAAA,QACL,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE;AAAA,QACpB,IAAI,IAAK,IAAI,IAAK,EAAE;AAAA;AAAA,MAGtB,MAAM,OAAO;AAAA,MACb,IAAI;AAAA,MACJ,IAAI;AAAA,MACJ,IAAI,IAAI,IAAI,WAAW,IAAI,IAAI,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAAA,MAC9E,IAAI;AAAA,IACN;AAAA,IAEA,KAAK,IAAI,KAAK,CAAC;AAAA,IACf,KAAK,IAAI,KAAK,CAAC;AAAA,IACf,KAAK,IAAI,KAAK,CAAC;AAAA,IACf,KAAK,IAAI,KAAK,CAAC;AAAA,EACjB;AAAA,EAEA,MAAM,MAAM,IAAI,WAAW,EAAE;AAAA,EAC7B,MAAM,OAAO,IAAI,SAAS,IAAI,MAAM;AAAA,EACpC,KAAK,UAAU,GAAG,IAAI,IAAI;AAAA,EAC1B,KAAK,UAAU,GAAG,IAAI,IAAI;AAAA,EAC1B,KAAK,UAAU,GAAG,IAAI,IAAI;AAAA,EAC1B,KAAK,UAAU,IAAI,IAAI,IAAI;AAAA,EAC3B,OAAO;AAAA;AAGT,IAAM,IAAI;AAAA,EACR;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAG;AAAA,EAC9F;AAAA,EAAI;AAAA,EAAG;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAC7F;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AAAA,EAAI;AAAA,EAAG;AAAA,EAAI;AAAA,EAAI;AACxC;AAEA,IAAM,IAAI,IAAI,YAAY;AAAA,EACxB;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EACpF;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EACpF;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EACpF;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EACpF;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EACpF;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EACpF;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EACpF;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AAAA,EAAY;AACtF,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,OAAuB;AAAA,EACxD,OAAO,IAAK,SAAS,QAAU,UAAW,KAAK,KAAO;AAAA;AAGxD,SAAS,UAAU,CAAC,MAA8B;AAAA,EAChD,MAAM,SAAS,KAAK,SAAS;AAAA,EAC7B,MAAM,UAAU,MAAO,KAAK,SAAS,KAAK,KAAM,MAAM;AAAA,EACtD,MAAM,WAAW,KAAK,SAAS,IAAI,SAAS;AAAA,EAC5C,MAAM,SAAS,IAAI,WAAW,QAAQ;AAAA,EACtC,OAAO,IAAI,IAAI;AAAA,EACf,OAAO,KAAK,UAAU;AAAA,EAEtB,MAAM,OAAO,IAAI,SAAS,OAAO,MAAM;AAAA,EACvC,KAAK,UAAU,WAAW,GAAG,WAAW,GAAG,IAAI;AAAA,EAC/C,KAAK,UAAU,WAAW,GAAG,KAAK,MAAM,SAAS,UAAW,GAAG,IAAI;AAAA,EACnE,OAAO;AAAA;AAMF,SAAS,OAAO,CAAC,KAAiB,MAA8B;AAAA,EACrE,IAAI,IAAI;AAAA,EACR,IAAI,EAAE,SAAS,YAAY;AAAA,IACzB,IAAI,IAAI,CAAC;AAAA,EACX;AAAA,EACA,MAAM,YAAY,IAAI,WAAW,UAAU;AAAA,EAC3C,UAAU,IAAI,CAAC;AAAA,EAEf,MAAM,OAAO,IAAI,WAAW,UAAU;AAAA,EACtC,MAAM,OAAO,IAAI,WAAW,UAAU;AAAA,EACtC,SAAS,IAAI,EAAG,IAAI,YAAY,KAAK;AAAA,IACnC,KAAK,MAAM,UAAU,MAAM,KAAK;AAAA,IAChC,KAAK,MAAM,UAAU,MAAM,KAAK;AAAA,EAClC;AAAA,EAEA,MAAM,QAAQ,IAAI,WAAW,KAAK,SAAS,KAAK,MAAM;AAAA,EACtD,MAAM,IAAI,IAAI;AAAA,EACd,MAAM,IAAI,MAAM,KAAK,MAAM;AAAA,EAC3B,MAAM,YAAY,IAAI,KAAK;AAAA,EAE3B,MAAM,QAAQ,IAAI,WAAW,KAAK,SAAS,UAAU,MAAM;AAAA,EAC3D,MAAM,IAAI,IAAI;AAAA,EACd,MAAM,IAAI,WAAW,KAAK,MAAM;AAAA,EAChC,OAAO,IAAI,KAAK;AAAA;AAGlB,SAAS,UAAU,CAAC,OAA2B;AAAA,EAC7C,OAAO,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAAA;AAW1E,eAAsB,cAAc,CAClC,WACA,MACA,MACiB;AAAA,EACjB,MAAM,iBAAiB,aAAa,UAAU,KAAK,CAAC;AAAA,EACpD,MAAM,YAAY,WAAW,IAAI;AAAA,EACjC,MAAM,SAAS,QAAQ,WAAW,cAAc;AAAA,EAChD,MAAM,MAAM,WAAW,MAAM;AAAA,EAC7B,OAAO,aAAa,GAAG,QAAQ,KAAK,EAAE,QAAQ,SAAS,EAAE;AAAA;;;AC/IpD,MAAM,kBAAkB,MAAM;AAAA,EAIjB;AAAA,EACA;AAAA,EACA;AAAA,EAJlB,WAAW,CACT,SACgB,MACA,SACA,UAChB;AAAA,IACA,MAAM,OAAO;AAAA,IAJG;AAAA,IACA;AAAA,IACA;AAAA,IAGhB,KAAK,OAAO;AAAA;AAEhB;AAKO,SAAS,aAAa,CAAC,KAA8B;AAAA,EAC1D,IAAI;AAAA,EAEJ,QAAQ,IAAI;AAAA,SACL;AAAA,MACH,OAAO,QAAQ,IAAI;AAAA,MACnB;AAAA,SACG;AAAA,MACH,OAAO;AAAA,MACP;AAAA,SACG;AAAA,MACH,OAAO;AAAA,MACP;AAAA,SACG;AAAA,MACH,OAAO,cAAc,aAAa,OAAK,IAAI,WAAS,IAAI,MAAM,EAAE,QAAQ,SAAS,EAAE;AAAA,MACnF;AAAA,SACG;AAAA,MACH,OAAO;AAAA,MACP;AAAA,SACG;AAAA,MACH,OAAO,WAAW,GAAG,IAAI;AAAA,CAAc;AAAA,SACpC;AAAA,MACH,OAAO,gBAAgB,IAAI;AAAA,MAC3B;AAAA,SACG;AAAA,MACH,IAAI,SAAS,KAAK,IAAI,OAAO,GAAG;AAAA,QAC9B,MAAM,IAAI,UAAU,kCAAkC,GAAG,aAAa,IAAI,OAAO;AAAA,MACnF;AAAA,MACA,OAAO,cAAc,IAAI;AAAA,MACzB;AAAA,SACG;AAAA,MACH,IAAI,SAAS,KAAK,IAAI,OAAO,GAAG;AAAA,QAC9B,MAAM,IAAI,UAAU,kCAAkC,GAAG,WAAW,IAAI,OAAO;AAAA,MACjF;AAAA,MACA,OAAO,YAAY,IAAI;AAAA,MACvB;AAAA,SACG;AAAA,MACH,OAAO;AAAA,MACP;AAAA,SACG;AAAA,MACH,OAAO,WAAW,iBAAiB,IAAI,OAAO,CAAC;AAAA,SAC5C;AAAA,MACH,OAAO;AAAA,MACP;AAAA,SACG;AAAA,MACH,OAAO;AAAA,MACP;AAAA,SACG;AAAA,MACH,OAAO;AAAA,MACP;AAAA;AAAA,EAGJ,OAAO,WAAW,GAAG;AAAA,CAAU;AAAA;AAM1B,SAAS,aAAa,CAAC,MAAgC;AAAA,EAC5D,MAAM,OAAO,IAAI,YAAY,EAAE,OAAO,IAAI,EAAE,KAAK;AAAA,EACjD,MAAM,QAAQ,KAAK,MAAM,OAAO;AAAA,EAChC,MAAM,WAAW,MAAM,MAAM,SAAS,MAAM;AAAA,EAC5C,MAAM,QAAQ,SAAS,MAAM,sBAAsB;AAAA,EAEnD,IAAI,CAAC,OAAO;AAAA,IACV,MAAM,IAAI,UAAU,yBAAyB,GAAG,SAAS,IAAI;AAAA,EAC/D;AAAA,EAEA,MAAM,OAAO,OAAO,SAAS,MAAM,MAAM,KAAK,EAAE;AAAA,EAChD,MAAM,UAAU,MAAM,IAAI,CAAC,MAAM,EAAE,QAAQ,eAAe,EAAE,CAAC,EAAE,KAAK,GAAG;AAAA,EAEvE,OAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,WAAW,QAAQ,OAAO,OAAO;AAAA,IACjC,SAAS,QAAQ,OAAO,OAAO;AAAA,IAC/B,SAAS,QAAQ;AAAA,EACnB;AAAA;AAMK,SAAS,kBAAkB,CAAC,QAAyC;AAAA,EAC1E,IAAI,OAAO,WAAW,GAAG;AAAA,IACvB,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,QAAQ,OAAO,OAAO,CAAC,KAAK,MAAM,MAAM,EAAE,QAAQ,CAAC;AAAA,EACzD,MAAM,WAAW,IAAI,WAAW,KAAK;AAAA,EACrC,IAAI,SAAS;AAAA,EACb,WAAW,SAAS,QAAQ;AAAA,IAC1B,SAAS,IAAI,OAAO,MAAM;AAAA,IAC1B,UAAU,MAAM;AAAA,EAClB;AAAA,EAEA,MAAM,OAAO,IAAI,YAAY,EAAE,OAAO,QAAQ;AAAA,EAC9C,MAAM,QAAQ,KAAK,MAAM,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;AAAA,EAE5D,IAAI,MAAM,WAAW,GAAG;AAAA,IACtB,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,WAAW,MAAM,MAAM,SAAS,MAAM;AAAA,EAC5C,IAAI,UAAU,KAAK,QAAQ,GAAG;AAAA,IAC5B,OAAO;AAAA,EACT;AAAA,EAEA,OAAO;AAAA;AAOF,SAAS,gBAAgB,CAC9B,cAC2C;AAAA,EAC3C,MAAM,QAAQ,aAAa,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;AAAA,EACrD,IAAI,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM,KAAK,EAAE,SAAS,SAAS,CAAC,GAAG;AAAA,IAClE,OAAO;AAAA,EACT;AAAA,EACA,IAAI,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM,KAAK,EAAE,SAAS,UAAU,CAAC,GAAG;AAAA,IACnE,OAAO;AAAA,EACT;AAAA,EACA,IAAI,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM,KAAK,EAAE,SAAS,OAAO,CAAC,GAAG;AAAA,IAChE,OAAO;AAAA,EACT;AAAA,EACA,IAAI,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM,KAAK,EAAE,SAAS,OAAO,CAAC,GAAG;AAAA,IAChE,OAAO;AAAA,EACT;AAAA,EACA,MAAM,IAAI,UAAU,4BAA4B,GAAG,QAAQ,aAAa,KAAK,GAAG,CAAC;AAAA;AAM5E,SAAS,SAAS,CAAC,UAAkC;AAAA,EAC1D,OAAO,SAAS,QACb,MAAM,KAAK,EACX,QAAQ,CAAC,SAAS,KAAK,MAAM,OAAO,CAAC,EACrC,OAAO,OAAO;AAAA;AAMZ,SAAS,cAAc,CAC5B,UACA,eACA,SACM;AAAA,EACN,IAAI,CAAC,cAAc,SAAS,SAAS,IAAI,GAAG;AAAA,IAC1C,MAAM,IAAI,UACR,gCAAgC,WAChC,SAAS,MACT,SACA,SAAS,OACX;AAAA,EACF;AAAA;AAGF,SAAS,gBAAgB,CAAC,SAA6B;AAAA,EACrD,MAAM,OAAO,IAAI,YAAY,EAAE,OAAO,OAAO;AAAA,EAC7C,MAAM,QAAQ,KAAK,MAAM,OAAO;AAAA,EAChC,MAAM,UAAU,MAAM,IAAI,CAAC,SAAU,KAAK,WAAW,GAAG,IAAI,IAAI,SAAS,IAAK;AAAA,EAC9E,OAAO,GAAG,QAAQ,KAAK;AAAA,CAAM;AAAA;AAAA;AAAA;AAIxB,SAAS,mBAAmB,CAAC,MAA0B;AAAA,EAC5D,OAAO,WAAW,GAAG,aAAa,IAAI,EAAE,QAAQ,SAAS,EAAE;AAAA,CAAO;AAAA;AAI7D,SAAS,mBAAmB,CAAC,MAA0B;AAAA,EAC5D,OAAO,WAAW,GAAG,aAAa,IAAI,EAAE,QAAQ,SAAS,EAAE;AAAA,CAAO;AAAA;AAS7D,SAAS,UAAU,CAAC,MAA0B;AAAA,EACnD,OAAO,WAAW,GAAG;AAAA,CAAU;AAAA;;;AC3L1B,MAAM,cAAmC;AAAA,EAC7B;AAAA,EACT,UAAgC;AAAA,EAGxC,WAAW,CAAC,QAAoB;AAAA,IAC9B,KAAK,SAAS,kBAAkB,MAAM;AAAA;AAAA,OAIlC,KAAI,CAAC,SAA2C;AAAA,IACpD,MAAM,kBAAkB;AAAA,SACnB;AAAA,MACH,aAAa,MAAM,mBAAmB,QAAQ,WAAW;AAAA,IAC3D;AAAA,IACA,MAAM,OAAO,MAAM,UAAU,iBAAiB,KAAK,OAAO,IAAI;AAAA,IAC9D,MAAM,UAAU,MAAM,KAAK,WAAW;AAAA,IAEtC,MAAM,OAAO,KAAK,OAAO,SACrB,MAAM,UAAU,KAAK,SAAS,KAAK,MAAM,GAAG,EAAE,MAAM,KAAK,OAAO,IAAI,IACpE,KAAK,OAAO;AAAA,IAEhB,MAAM,QAAQ,QAAQ,MAAM,KAAK,OAAO,IAAI;AAAA,IAC5C,KAAK,UAAU;AAAA,IAEf,IAAI;AAAA,MACF,MAAM,gBAAgB,SAAS,KAAK,MAAM;AAAA,MAC1C,OAAO,MAAM,mBAAmB,SAAS,IAAI;AAAA,cAC7C;AAAA,MACA,MAAM,iBAAiB,OAAO;AAAA,MAC9B,KAAK,UAAU;AAAA;AAAA;AAAA,OAKb,OAAM,GAAqB;AAAA,IAC/B,MAAM,UAAU,MAAM,KAAK,WAAW;AAAA,IACtC,MAAM,QAAQ,QAAQ,KAAK,OAAO,MAAM,KAAK,OAAO,IAAI;AAAA,IAExD,IAAI;AAAA,MACF,MAAM,gBAAgB,SAAS,KAAK,MAAM;AAAA,MAC1C,OAAO;AAAA,cACP;AAAA,MACA,MAAM,iBAAiB,OAAO;AAAA;AAAA;AAAA,OAK5B,MAAK,GAAkB;AAAA,IAC3B,IAAI,KAAK,SAAS;AAAA,MAChB,MAAM,KAAK,QAAQ,MAAM;AAAA,MACzB,KAAK,UAAU;AAAA,IACjB;AAAA;AAAA,OAGY,WAAU,GAA2B;AAAA,IACjD,IAAI,CAAC,KAAK,OAAO,SAAS;AAAA,MACxB,MAAM,IAAI,UAAU,gCAAgC,GAAG,WAAW,EAAE;AAAA,IACtE;AAAA,IACA,OAAO,KAAK,OAAO;AAAA;AAEvB;AAkBO,SAAS,iBAAiB,CAAC,QAAwC;AAAA,EACxE,MAAM,SAAS,OAAO,UAAU;AAAA,EAChC,OAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,MAAM,OAAO,SAAS,SAAS,MAAM;AAAA,IACrC;AAAA,OACI,OAAO,SAAS,YAAY,EAAE,MAAM,OAAO,KAAK,IAAI,CAAC;AAAA,OACrD,OAAO,SAAS,YAAY,EAAE,MAAM,OAAO,KAAK,IAAI,CAAC;AAAA,OACrD,OAAO,QAAQ,YAAY,EAAE,KAAK,OAAO,IAAI,IAAI,CAAC;AAAA,OAClD,OAAO,sBAAsB,YAC7B,EAAE,mBAAmB,OAAO,kBAAkB,IAC9C,CAAC;AAAA,OACD,OAAO,oBAAoB,YAAY,EAAE,iBAAiB,OAAO,gBAAgB,IAAI,CAAC;AAAA,OACtF,OAAO,kBAAkB,YAAY,EAAE,eAAe,OAAO,cAAc,IAAI,CAAC;AAAA,OAChF,OAAO,WAAW,YAAY,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,OAC3D,OAAO,YAAY,YAAY,EAAE,SAAS,OAAO,QAAQ,IAAI,CAAC;AAAA,EACpE;AAAA;AAMF,eAAsB,eAAe,CACnC,SACA,QACe;AAAA,EACf,MAAM,WAAW,MAAM,iBAAiB,OAAO;AAAA,EAC/C,eAAe,UAAU,CAAC,GAAG,GAAG,UAAU;AAAA,EAE1C,IAAI,eAAe,MAAM,KAAK,SAAS,OAAO,IAAI;AAAA,EAClD,IAAI,CAAC,OAAO,UAAU,CAAC,QAAQ,QAAQ;AAAA,IACrC,MAAM,QAAQ,SAAS,cAAc,EAAE,MAAM,WAAW,CAAC,CAAC;AAAA,IAC1D,MAAM,eAAe,MAAM,iBAAiB,OAAO;AAAA,IACnD,eAAe,cAAc,CAAC,GAAG,GAAG,UAAU;AAAA,IAC9C,MAAM,QAAQ,SAAS,OAAO,GAAG;AAAA,IACjC,eAAe,MAAM,KAAK,SAAS,OAAO,IAAI;AAAA,EAChD;AAAA,EAEA,IAAI,OAAO,MAAM;AAAA,IACf,MAAM,aAAa,SAAS,OAAO,MAAM,YAAY;AAAA,EACvD;AAAA;AAMF,eAAsB,kBAAkB,CACtC,SACA,MACqB;AAAA,EACrB,MAAM,YAAY,SAAS,EAAE,MAAM,aAAa,SAAS,KAAK,SAAS,KAAK,CAAC;AAAA,EAC7E,MAAM,WAAW,MAAM,iBAAiB,OAAO;AAAA,EAC/C,eAAe,UAAU,CAAC,GAAG,GAAG,WAAW;AAAA,EAE3C,MAAM,WAAqB,CAAC;AAAA,EAC5B,MAAM,WAAqB,CAAC;AAAA,EAE5B,WAAW,aAAa,KAAK,SAAS,IAAI;AAAA,IACxC,MAAM,QAAQ,SAAS,cAAc,EAAE,MAAM,WAAW,SAAS,UAAU,CAAC,CAAC;AAAA,IAC7E,MAAM,WAAW,MAAM,iBAAiB,OAAO;AAAA,IAC/C,IAAI,SAAS,WAAW;AAAA,MACtB,SAAS,KAAK,SAAS;AAAA,IACzB,EAAO;AAAA,MACL,SAAS,KAAK,SAAS;AAAA;AAAA,EAE3B;AAAA,EAEA,MAAM,YAAY,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,EAC3C,MAAM,WAAW,MAAM,iBAAiB,OAAO;AAAA,EAC/C,eAAe,UAAU,CAAC,GAAG,GAAG,MAAM;AAAA,EAEtC,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,MAAM,QAAQ,SAAS,cAAc,EAAE,MAAM,aAAa,SAAS,KAAK,IAAI,CAAC,CAAC;AAAA,IAC9E,YAAY,MAAM,iBAAiB,OAAO;AAAA,IAC1C,OAAO,KAAK;AAAA,IACZ,MAAM,QAAQ,SAAS,cAAc,EAAE,MAAM,aAAa,SAAS,KAAK,IAAI,CAAC,CAAC;AAAA,IAC9E,YAAY,MAAM,iBAAiB,OAAO;AAAA,IAC1C,IAAI,UAAU,SAAS;AAAA,MACrB,MAAM;AAAA,IACR;AAAA;AAAA,EAEF,eAAe,WAAW,CAAC,GAAG,GAAG,UAAU;AAAA,EAE3C,OAAO;AAAA,IACL,WAAW,KAAK;AAAA,IAChB;AAAA,IACA;AAAA,IACA,UAAU,UAAU;AAAA,IACpB,UAAU,KAAK;AAAA,EACjB;AAAA;AAMF,eAAsB,gBAAgB,CAAC,SAAuC;AAAA,EAC5E,IAAI;AAAA,IACF,MAAM,YAAY,SAAS,EAAE,MAAM,OAAO,CAAC;AAAA,IAC3C,MAAM,iBAAiB,OAAO;AAAA,IAC9B,MAAM,WAEN;AAAA,IACA,MAAM,QAAQ,MAAM;AAAA;AAAA;AAIxB,eAAe,IAAI,CAAC,SAAwB,MAAiC;AAAA,EAC3E,MAAM,YAAY,SAAS,EAAE,MAAM,QAAQ,QAAQ,KAAK,CAAC;AAAA,EACzD,MAAM,WAAW,MAAM,iBAAiB,OAAO;AAAA,EAC/C,eAAe,UAAU,CAAC,GAAG,GAAG,MAAM;AAAA,EACtC,OAAO,UAAU,QAAQ;AAAA;AAG3B,eAAe,YAAY,CACzB,SACA,MACA,cACe;AAAA,EACf,IAAI,KAAK,SAAS,YAAY,KAAK,QAAQ;AAAA,IACzC,MAAM,SAAS,IAAI,aAAa,KAAK,MAAM;AAAA,IAC3C,MAAM,UAAU,MAAM,OAAO,aAAa;AAAA,IAC1C,MAAM,YAAY,SAAS,EAAE,MAAM,gBAAgB,eAAe,QAAQ,CAAC;AAAA,IAC3E,IAAI,QAAO,MAAM,iBAAiB,OAAO;AAAA,IACzC,IAAI,MAAK,SAAS,KAAK;AAAA,MACrB,MAAM,QAAQ,SAAS,WAAW,EAAE,CAAC;AAAA,MACrC,QAAO,MAAM,iBAAiB,OAAO;AAAA,IACvC;AAAA,IACA,eAAe,OAAM,CAAC,GAAG,GAAG,cAAc;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,KAAK,QAAQ,iBAAiB,YAAY;AAAA,EAEzD,IAAI,WAAW,YAAY;AAAA,IACzB,MAAM,QAAO,gBAAgB,MAAM,UAAU;AAAA,IAC7C,MAAM,YAAY,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAAA,IACzD,IAAI,QAAO,MAAM,iBAAiB,OAAO;AAAA,IACzC,eAAe,OAAM,CAAC,GAAG,GAAG,eAAe;AAAA,IAC3C,MAAM,YAAY,MAAK,QAAQ,KAAK;AAAA,IACpC,MAAM,WAAW,MAAM,eAAe,WAAW,KAAK,MAAM,KAAI;AAAA,IAChE,MAAM,YAAY,SAAS,EAAE,MAAM,0BAA0B,SAAS,CAAC;AAAA,IACvE,QAAO,MAAM,iBAAiB,OAAO;AAAA,IACrC,eAAe,OAAM,CAAC,GAAG,GAAG,wBAAwB;AAAA,IACpD;AAAA,EACF;AAAA,EAEA,IAAI,WAAW,SAAS;AAAA,IACtB,MAAM,QAAO,gBAAgB,MAAM,OAAO;AAAA,IAC1C,MAAM,QAAQ,SAAS,cAAc,EAAE,MAAM,cAAc,MAAM,KAAK,MAAM,YAAK,CAAC,CAAC;AAAA,IACnF,MAAM,QAAO,MAAM,iBAAiB,OAAO;AAAA,IAC3C,eAAe,OAAM,CAAC,GAAG,GAAG,YAAY;AAAA,IACxC;AAAA,EACF;AAAA,EAEA,MAAM,OAAO,gBAAgB,MAAM,OAAO;AAAA,EAC1C,MAAM,QAAQ,SAAS,cAAc,EAAE,MAAM,cAAc,MAAM,KAAK,MAAM,KAAK,CAAC,CAAC;AAAA,EACnF,IAAI,OAAO,MAAM,iBAAiB,OAAO;AAAA,EACzC,eAAe,MAAM,CAAC,GAAG,GAAG,YAAY;AAAA,EAExC,MAAM,QAAQ,SAAS,oBAAoB,KAAK,IAAI,CAAC;AAAA,EACrD,OAAO,MAAM,iBAAiB,OAAO;AAAA,EACrC,eAAe,MAAM,CAAC,GAAG,GAAG,iBAAiB;AAAA,EAE7C,MAAM,QAAQ,SAAS,oBAAoB,IAAI,CAAC;AAAA,EAChD,OAAO,MAAM,iBAAiB,OAAO;AAAA,EACrC,eAAe,MAAM,CAAC,GAAG,GAAG,iBAAiB;AAAA;AAG/C,SAAS,eAAe,CAAC,MAAuC,QAAwB;AAAA,EACtF,IAAI,CAAC,KAAK,MAAM;AAAA,IACd,MAAM,IAAI,UAAU,yBAAyB,yBAAyB,GAAG,QAAQ,UAAU,EAAE;AAAA,EAC/F;AAAA,EACA,OAAO,KAAK;AAAA;AAGd,eAAe,WAAW,CACxB,SACA,SACe;AAAA,EACf,MAAM,QAAQ,SAAS,cAAc,OAAO,CAAC;AAAA;AAG/C,eAAe,OAAO,CAAC,SAAwB,MAAiC;AAAA,EAC9E,MAAM,QAAQ,MAAM,IAAI;AAAA;AAI1B,eAAe,gBAAgB,CAAC,SAA+C;AAAA,EAC7E,MAAM,SAAuB,CAAC;AAAA,EAC9B,iBAAiB,SAAS,QAAQ,KAAK,GAAG;AAAA,IACxC,OAAO,KAAK,KAAK;AAAA,IACjB,MAAM,WAAW,mBAAmB,MAAM;AAAA,IAC1C,IAAI,UAAU;AAAA,MACZ,OAAO,cAAc,QAAQ;AAAA,IAC/B;AAAA,EACF;AAAA,EACA,MAAM,IAAI,UAAU,iDAAiD,GAAG,QAAQ,EAAE;AAAA;AAGpF,eAAe,SAAS,CAAC,QAAiC;AAAA,EACxD,MAAM,MAAM,MAAa;AAAA,EACzB,MAAM,UAAU,MAAM,IAAI,UAAU,MAAM;AAAA,EAC1C,IAAI,QAAQ,WAAW,GAAG;AAAA,IACxB,MAAM,IAAI,UAAU,qBAAqB,UAAU,GAAG,MAAM,EAAE;AAAA,EAChE;AAAA,EACA,QAAQ,KAAK,CAAC,GAAyB,MAA4B,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1F,OAAO,QAAQ,IAAI,YAAY;AAAA;",
+  "debugId": "D513C6B3F9A57AFC64756E2164756E21",
+  "names": []
+}

package/dist/{chunk-vm70w4e3.js → chunk-ym3zzv8b.js}

@@ -12,6 +12,7 @@ class OAuth2Client {
   config;
   cachedToken = null;
   expiresAt = 0;
+  refreshPromise = null;
   constructor(config) {
     this.config = config;
     if (config.accessToken) {
@@ -26,7 +27,12 @@ class OAuth2Client {
     if (this.cachedToken && Date.now() < this.expiresAt - EXPIRY_BUFFER_MS) {
       return this.cachedToken;
     }
-    return this.refreshAccessToken();
+    if (!this.refreshPromise) {
+      this.refreshPromise = this.refreshAccessToken().finally(() => {
+        this.refreshPromise = null;
+      });
+    }
+    return this.refreshPromise;
   }
   async refreshAccessToken() {
     if (this.config.getToken) {
@@ -65,4 +71,4 @@ class OAuth2Client {
 
 export { GOOGLE_TOKEN_URL, MICROSOFT_TOKEN_URL, OAuth2Client };
 
-//# debugId=3021E90811E124E364756E2164756E21
+//# debugId=3609E75C0C54F13D64756E2164756E21

package/dist/chunk-ym3zzv8b.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/auth/oauth2.ts"],
+  "sourcesContent": [
+    "/**\n * @module\n * OAuth2 / XOAUTH2 authentication for SMTP.\n * Supports Gmail, Microsoft 365, and custom OAuth2 providers.\n *\n * @example\n * ```ts\n * import { OAuth2Client } from \"sently/auth/oauth2\";\n * const client = new OAuth2Client({\n *   user: \"me@gmail.com\",\n *   clientId: \"...\",\n *   clientSecret: \"...\",\n *   refreshToken: \"...\",\n * });\n * const token = await client.getAccessToken();\n * ```\n */\nimport { encodeBase64, encodeUtf8 } from \"../core/base64.js\";\nimport type { OAuth2Config } from \"../core/types.js\";\n\n/** Default Google OAuth2 token endpoint. */\nexport const GOOGLE_TOKEN_URL = \"https://oauth2.googleapis.com/token\";\n\n/** Microsoft OAuth2 token endpoint (common tenant). */\nexport const MICROSOFT_TOKEN_URL = \"https://login.microsoftonline.com/common/oauth2/v2.0/token\";\n\n/** OAuth2 token endpoint response shape. */\nexport interface TokenResponse {\n  access_token: string;\n  expires_in: number;\n  token_type: string;\n}\n\nconst EXPIRY_BUFFER_MS = 30_000;\n\n/**\n * OAuth2 client with in-memory token cache and automatic refresh.\n */\nexport class OAuth2Client {\n  private readonly config: OAuth2Config;\n  private cachedToken: string | null = null;\n  private expiresAt = 0;\n  private refreshPromise: Promise<string> | null = null;\n\n  /** Creates an OAuth2 client from configuration. */\n  constructor(config: OAuth2Config) {\n    this.config = config;\n    if (config.accessToken) {\n      this.cachedToken = config.accessToken;\n      this.expiresAt = Date.now() + 3_600_000;\n    }\n  }\n\n  /**\n   * Get a valid access token (cached when still valid, refreshed otherwise).\n   */\n  async getAccessToken(): Promise<string> {\n    if (this.config.getToken) {\n      return this.config.getToken();\n    }\n\n    if (this.cachedToken && Date.now() < this.expiresAt - EXPIRY_BUFFER_MS) {\n      return this.cachedToken;\n    }\n\n    if (!this.refreshPromise) {\n      this.refreshPromise = this.refreshAccessToken().finally(() => {\n        this.refreshPromise = null;\n      });\n    }\n    return this.refreshPromise;\n  }\n\n  /**\n   * Force-refresh the access token regardless of expiry.\n   */\n  async refreshAccessToken(): Promise<string> {\n    if (this.config.getToken) {\n      const token = await this.config.getToken();\n      this.cachedToken = token;\n      this.expiresAt = Date.now() + 3_600_000;\n      return token;\n    }\n\n    const tokenUrl = this.config.tokenUrl ?? GOOGLE_TOKEN_URL;\n    const body = new URLSearchParams({\n      client_id: this.config.clientId,\n      client_secret: this.config.clientSecret,\n      refresh_token: this.config.refreshToken,\n      grant_type: \"refresh_token\",\n    });\n\n    const response = await fetch(tokenUrl, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n      body: body.toString(),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`OAuth2 token refresh failed (${response.status}): ${text}`);\n    }\n\n    const data = (await response.json()) as TokenResponse;\n    this.cachedToken = data.access_token;\n    this.expiresAt = Date.now() + data.expires_in * 1000;\n    return data.access_token;\n  }\n\n  /**\n   * Build the XOAUTH2 SASL string for SMTP AUTH (base64-encoded).\n   */\n  async buildXOAUTH2(): Promise<string> {\n    const token = await this.getAccessToken();\n    const raw = `user=${this.config.user}\\x01auth=Bearer ${token}\\x01\\x01`;\n    return encodeBase64(encodeUtf8(raw)).replace(/\\r\\n/g, \"\");\n  }\n}\n"
+  ],
+  "mappings": ";;;;;;AAqBO,IAAM,mBAAmB;AAGzB,IAAM,sBAAsB;AASnC,IAAM,mBAAmB;AAAA;AAKlB,MAAM,aAAa;AAAA,EACP;AAAA,EACT,cAA6B;AAAA,EAC7B,YAAY;AAAA,EACZ,iBAAyC;AAAA,EAGjD,WAAW,CAAC,QAAsB;AAAA,IAChC,KAAK,SAAS;AAAA,IACd,IAAI,OAAO,aAAa;AAAA,MACtB,KAAK,cAAc,OAAO;AAAA,MAC1B,KAAK,YAAY,KAAK,IAAI,IAAI;AAAA,IAChC;AAAA;AAAA,OAMI,eAAc,GAAoB;AAAA,IACtC,IAAI,KAAK,OAAO,UAAU;AAAA,MACxB,OAAO,KAAK,OAAO,SAAS;AAAA,IAC9B;AAAA,IAEA,IAAI,KAAK,eAAe,KAAK,IAAI,IAAI,KAAK,YAAY,kBAAkB;AAAA,MACtE,OAAO,KAAK;AAAA,IACd;AAAA,IAEA,IAAI,CAAC,KAAK,gBAAgB;AAAA,MACxB,KAAK,iBAAiB,KAAK,mBAAmB,EAAE,QAAQ,MAAM;AAAA,QAC5D,KAAK,iBAAiB;AAAA,OACvB;AAAA,IACH;AAAA,IACA,OAAO,KAAK;AAAA;AAAA,OAMR,mBAAkB,GAAoB;AAAA,IAC1C,IAAI,KAAK,OAAO,UAAU;AAAA,MACxB,MAAM,QAAQ,MAAM,KAAK,OAAO,SAAS;AAAA,MACzC,KAAK,cAAc;AAAA,MACnB,KAAK,YAAY,KAAK,IAAI,IAAI;AAAA,MAC9B,OAAO;AAAA,IACT;AAAA,IAEA,MAAM,WAAW,KAAK,OAAO,YAAY;AAAA,IACzC,MAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,WAAW,KAAK,OAAO;AAAA,MACvB,eAAe,KAAK,OAAO;AAAA,MAC3B,eAAe,KAAK,OAAO;AAAA,MAC3B,YAAY;AAAA,IACd,CAAC;AAAA,IAED,MAAM,WAAW,MAAM,MAAM,UAAU;AAAA,MACrC,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,oCAAoC;AAAA,MAC/D,MAAM,KAAK,SAAS;AAAA,IACtB,CAAC;AAAA,IAED,IAAI,CAAC,SAAS,IAAI;AAAA,MAChB,MAAM,OAAO,MAAM,SAAS,KAAK;AAAA,MACjC,MAAM,IAAI,MAAM,gCAAgC,SAAS,YAAY,MAAM;AAAA,IAC7E;AAAA,IAEA,MAAM,OAAQ,MAAM,SAAS,KAAK;AAAA,IAClC,KAAK,cAAc,KAAK;AAAA,IACxB,KAAK,YAAY,KAAK,IAAI,IAAI,KAAK,aAAa;AAAA,IAChD,OAAO,KAAK;AAAA;AAAA,OAMR,aAAY,GAAoB;AAAA,IACpC,MAAM,QAAQ,MAAM,KAAK,eAAe;AAAA,IACxC,MAAM,MAAM,QAAQ,KAAK,OAAO,uBAAuB;AAAA,IACvD,OAAO,aAAa,WAAW,GAAG,CAAC,EAAE,QAAQ,SAAS,EAAE;AAAA;AAE5D;",
+  "debugId": "3609E75C0C54F13D64756E2164756E21",
+  "names": []
+}

package/dist/src/adapters/bun.js

@@ -3,6 +3,11 @@ import"../../chunk-v0bahtg2.js";
 // src/adapters/bun.ts
 import net from "node:net";
 import tls from "node:tls";
+function warnRejectUnauthorizedDisabled(tls2) {
+  if (tls2.rejectUnauthorized === false) {
+    console.warn("[sently] TLS certificate verification is disabled. " + "Never use rejectUnauthorized: false in production.");
+  }
+}
 
 class BunAdapter {
   socket = null;
@@ -38,11 +43,13 @@ class BunAdapter {
     }
     const plain = this.socket;
     const merged = { ...this.tlsOptions, ...options };
+    warnRejectUnauthorizedDisabled(merged);
     await new Promise((resolve, reject) => {
       const tlsSocket = tls.connect({
         socket: plain,
         servername: merged.servername,
-        rejectUnauthorized: merged.rejectUnauthorized ?? true
+        rejectUnauthorized: merged.rejectUnauthorized ?? true,
+        minVersion: merged.minVersion
       });
       tlsSocket.once("secureConnect", () => {
         this.socket = tlsSocket;
@@ -151,12 +158,14 @@ class BunAdapter {
     });
   }
   connectTls(host, port) {
+    warnRejectUnauthorizedDisabled(this.tlsOptions);
     return new Promise((resolve, reject) => {
       const socket = tls.connect({
         host,
         port,
         servername: this.tlsOptions.servername ?? host,
-        rejectUnauthorized: this.tlsOptions.rejectUnauthorized ?? true
+        rejectUnauthorized: this.tlsOptions.rejectUnauthorized ?? true,
+        minVersion: this.tlsOptions.minVersion
       }, () => resolve());
       socket.setTimeout(this.connectionTimeout);
       socket.once("timeout", () => {
@@ -172,4 +181,4 @@ export {
   BunAdapter
 };
 
-//# debugId=3155B06C8BAF12C764756E2164756E21
+//# debugId=55F886DB16D90CED64756E2164756E21

package/dist/src/adapters/bun.js.map

@@ -2,9 +2,9 @@
   "version": 3,
   "sources": ["../src/adapters/bun.ts"],
   "sourcesContent": [
-    "/**\n * @module\n * Bun socket adapter for SMTP connections via the Node.js compatibility layer.\n *\n * @example\n * ```ts\n * import { BunAdapter } from \"sently/adapters/bun\";\n * import { createMailer } from \"sently\";\n *\n * const mailer = await createMailer({\n *   host: \"smtp.example.com\",\n *   adapter: new BunAdapter(),\n *   auth: { user: \"you@example.com\", pass: \"secret\" },\n * });\n * ```\n */\nimport net from \"node:net\";\nimport tls from \"node:tls\";\nimport type { SocketAdapter, TLSOptions } from \"../core/types.js\";\n\ndeclare const Bun: { version: string } | undefined;\n\n/** Configuration options for {@link BunAdapter}. */\nexport interface BunAdapterOptions {\n  secure?: boolean;\n  connectionTimeout?: number;\n  tls?: TLSOptions;\n}\n\n/**\n * Bun socket adapter using node:net and node:tls (Node compat layer).\n */\nexport class BunAdapter implements SocketAdapter {\n  private socket: net.Socket | tls.TLSSocket | null = null;\n  private _secure: boolean;\n  private _connected = false;\n  private readonly connectionTimeout: number;\n  private readonly tlsOptions: TLSOptions;\n\n  /** Creates a Bun socket adapter (requires the Bun runtime). */\n  constructor(options: BunAdapterOptions = {}) {\n    if (typeof Bun === \"undefined\") {\n      throw new Error(\"BunAdapter requires the Bun runtime\");\n    }\n    this._secure = options.secure ?? false;\n    this.connectionTimeout = options.connectionTimeout ?? 30_000;\n    this.tlsOptions = options.tls ?? {};\n  }\n\n  /** Whether the connection uses TLS. */\n  get secure(): boolean {\n    return this._secure;\n  }\n\n  /** Whether the socket is currently connected. */\n  get connected(): boolean {\n    return this._connected;\n  }\n\n  /** Opens a TCP or TLS connection to the given host and port. */\n  async connect(host: string, port: number): Promise<void> {\n    if (this._secure) {\n      await this.connectTls(host, port);\n    } else {\n      await this.connectPlain(host, port);\n    }\n    this._connected = true;\n  }\n\n  /** Upgrades a plain connection to TLS via STARTTLS. */\n  async startTLS(options?: TLSOptions): Promise<void> {\n    if (!this.socket || this._secure) {\n      throw new Error(\"Cannot STARTTLS: no plain socket available\");\n    }\n\n    const plain = this.socket;\n    const merged = { ...this.tlsOptions, ...options };\n\n    await new Promise<void>((resolve, reject) => {\n      const tlsSocket = tls.connect({\n        socket: plain,\n        servername: merged.servername,\n        rejectUnauthorized: merged.rejectUnauthorized ?? true,\n      });\n\n      tlsSocket.once(\"secureConnect\", () => {\n        this.socket = tlsSocket;\n        this._secure = true;\n        resolve();\n      });\n      tlsSocket.once(\"error\", reject);\n    });\n  }\n\n  /** Writes raw bytes to the socket. */\n  async write(data: Uint8Array): Promise<void> {\n    if (!this.socket) {\n      throw new Error(\"Socket not connected\");\n    }\n\n    await new Promise<void>((resolve, reject) => {\n      this.socket?.write(Buffer.from(data), (err: Error | null | undefined) => {\n        if (err) {\n          reject(err);\n        } else {\n          resolve();\n        }\n      });\n    });\n  }\n\n  /** Reads incoming socket data as an async iterable of byte chunks. */\n  async *read(): AsyncGenerator<Uint8Array, void, unknown> {\n    if (!this.socket) {\n      throw new Error(\"Socket not connected\");\n    }\n\n    const socket = this.socket;\n    const queue: Uint8Array[] = [];\n    let resolveNext: ((value: IteratorResult<Uint8Array>) => void) | null = null;\n    let done = false;\n    let error: Error | null = null;\n\n    const onData = (chunk: Buffer): void => {\n      const data = new Uint8Array(chunk);\n      if (resolveNext) {\n        resolveNext({ value: data, done: false });\n        resolveNext = null;\n      } else {\n        queue.push(data);\n      }\n    };\n\n    const onError = (err: Error): void => {\n      error = err;\n      done = true;\n      if (resolveNext) {\n        resolveNext({ value: undefined as unknown as Uint8Array, done: true });\n        resolveNext = null;\n      }\n    };\n\n    const onClose = (): void => {\n      done = true;\n      if (resolveNext) {\n        resolveNext({ value: undefined as unknown as Uint8Array, done: true });\n        resolveNext = null;\n      }\n    };\n\n    socket.on(\"data\", onData);\n    socket.on(\"error\", onError);\n    socket.on(\"close\", onClose);\n\n    try {\n      while (!done || queue.length > 0) {\n        if (error) {\n          throw error;\n        }\n        if (queue.length > 0) {\n          yield queue.shift() as Uint8Array;\n          continue;\n        }\n        if (done) {\n          break;\n        }\n        const chunk = await new Promise<IteratorResult<Uint8Array>>((resolve) => {\n          resolveNext = resolve;\n        });\n        if (chunk.done) {\n          break;\n        }\n        yield chunk.value;\n      }\n    } finally {\n      socket.off(\"data\", onData);\n      socket.off(\"error\", onError);\n      socket.off(\"close\", onClose);\n    }\n  }\n\n  /** Closes the socket connection. */\n  async close(): Promise<void> {\n    if (!this.socket) {\n      return;\n    }\n\n    await new Promise<void>((resolve) => {\n      this.socket?.end(() => resolve());\n    });\n    this.socket = null;\n    this._connected = false;\n  }\n\n  private connectPlain(host: string, port: number): Promise<void> {\n    return new Promise((resolve, reject) => {\n      const socket = net.connect({ host, port }, () => resolve());\n      socket.setTimeout(this.connectionTimeout);\n      socket.once(\"timeout\", () => {\n        socket.destroy();\n        reject(new Error(\"Connection timeout\"));\n      });\n      socket.once(\"error\", reject);\n      this.socket = socket;\n    });\n  }\n\n  private connectTls(host: string, port: number): Promise<void> {\n    return new Promise((resolve, reject) => {\n      const socket = tls.connect(\n        {\n          host,\n          port,\n          servername: this.tlsOptions.servername ?? host,\n          rejectUnauthorized: this.tlsOptions.rejectUnauthorized ?? true,\n        },\n        () => resolve(),\n      );\n      socket.setTimeout(this.connectionTimeout);\n      socket.once(\"timeout\", () => {\n        socket.destroy();\n        reject(new Error(\"Connection timeout\"));\n      });\n      socket.once(\"error\", reject);\n      this.socket = socket;\n    });\n  }\n}\n"
+    "/**\n * @module\n * Bun socket adapter for SMTP connections via the Node.js compatibility layer.\n *\n * @example\n * ```ts\n * import { BunAdapter } from \"sently/adapters/bun\";\n * import { createMailer } from \"sently\";\n *\n * const mailer = await createMailer({\n *   host: \"smtp.example.com\",\n *   adapter: new BunAdapter(),\n *   auth: { user: \"you@example.com\", pass: \"secret\" },\n * });\n * ```\n */\nimport net from \"node:net\";\nimport tls from \"node:tls\";\nimport type { SocketAdapter, TLSOptions } from \"../core/types.js\";\n\nfunction warnRejectUnauthorizedDisabled(tls: TLSOptions): void {\n  if (tls.rejectUnauthorized === false) {\n    console.warn(\n      \"[sently] TLS certificate verification is disabled. \" +\n        \"Never use rejectUnauthorized: false in production.\",\n    );\n  }\n}\n\ndeclare const Bun: { version: string } | undefined;\n\n/** Configuration options for {@link BunAdapter}. */\nexport interface BunAdapterOptions {\n  secure?: boolean;\n  connectionTimeout?: number;\n  tls?: TLSOptions;\n}\n\n/**\n * Bun socket adapter using node:net and node:tls (Node compat layer).\n */\nexport class BunAdapter implements SocketAdapter {\n  private socket: net.Socket | tls.TLSSocket | null = null;\n  private _secure: boolean;\n  private _connected = false;\n  private readonly connectionTimeout: number;\n  private readonly tlsOptions: TLSOptions;\n\n  /** Creates a Bun socket adapter (requires the Bun runtime). */\n  constructor(options: BunAdapterOptions = {}) {\n    if (typeof Bun === \"undefined\") {\n      throw new Error(\"BunAdapter requires the Bun runtime\");\n    }\n    this._secure = options.secure ?? false;\n    this.connectionTimeout = options.connectionTimeout ?? 30_000;\n    this.tlsOptions = options.tls ?? {};\n  }\n\n  /** Whether the connection uses TLS. */\n  get secure(): boolean {\n    return this._secure;\n  }\n\n  /** Whether the socket is currently connected. */\n  get connected(): boolean {\n    return this._connected;\n  }\n\n  /** Opens a TCP or TLS connection to the given host and port. */\n  async connect(host: string, port: number): Promise<void> {\n    if (this._secure) {\n      await this.connectTls(host, port);\n    } else {\n      await this.connectPlain(host, port);\n    }\n    this._connected = true;\n  }\n\n  /** Upgrades a plain connection to TLS via STARTTLS. */\n  async startTLS(options?: TLSOptions): Promise<void> {\n    if (!this.socket || this._secure) {\n      throw new Error(\"Cannot STARTTLS: no plain socket available\");\n    }\n\n    const plain = this.socket;\n    const merged = { ...this.tlsOptions, ...options };\n    warnRejectUnauthorizedDisabled(merged);\n\n    await new Promise<void>((resolve, reject) => {\n      const tlsSocket = tls.connect({\n        socket: plain,\n        servername: merged.servername,\n        rejectUnauthorized: merged.rejectUnauthorized ?? true,\n        minVersion: merged.minVersion,\n      });\n\n      tlsSocket.once(\"secureConnect\", () => {\n        this.socket = tlsSocket;\n        this._secure = true;\n        resolve();\n      });\n      tlsSocket.once(\"error\", reject);\n    });\n  }\n\n  /** Writes raw bytes to the socket. */\n  async write(data: Uint8Array): Promise<void> {\n    if (!this.socket) {\n      throw new Error(\"Socket not connected\");\n    }\n\n    await new Promise<void>((resolve, reject) => {\n      this.socket?.write(Buffer.from(data), (err: Error | null | undefined) => {\n        if (err) {\n          reject(err);\n        } else {\n          resolve();\n        }\n      });\n    });\n  }\n\n  /** Reads incoming socket data as an async iterable of byte chunks. */\n  async *read(): AsyncGenerator<Uint8Array, void, unknown> {\n    if (!this.socket) {\n      throw new Error(\"Socket not connected\");\n    }\n\n    const socket = this.socket;\n    const queue: Uint8Array[] = [];\n    let resolveNext: ((value: IteratorResult<Uint8Array>) => void) | null = null;\n    let done = false;\n    let error: Error | null = null;\n\n    const onData = (chunk: Buffer): void => {\n      const data = new Uint8Array(chunk);\n      if (resolveNext) {\n        resolveNext({ value: data, done: false });\n        resolveNext = null;\n      } else {\n        queue.push(data);\n      }\n    };\n\n    const onError = (err: Error): void => {\n      error = err;\n      done = true;\n      if (resolveNext) {\n        resolveNext({ value: undefined as unknown as Uint8Array, done: true });\n        resolveNext = null;\n      }\n    };\n\n    const onClose = (): void => {\n      done = true;\n      if (resolveNext) {\n        resolveNext({ value: undefined as unknown as Uint8Array, done: true });\n        resolveNext = null;\n      }\n    };\n\n    socket.on(\"data\", onData);\n    socket.on(\"error\", onError);\n    socket.on(\"close\", onClose);\n\n    try {\n      while (!done || queue.length > 0) {\n        if (error) {\n          throw error;\n        }\n        if (queue.length > 0) {\n          yield queue.shift() as Uint8Array;\n          continue;\n        }\n        if (done) {\n          break;\n        }\n        const chunk = await new Promise<IteratorResult<Uint8Array>>((resolve) => {\n          resolveNext = resolve;\n        });\n        if (chunk.done) {\n          break;\n        }\n        yield chunk.value;\n      }\n    } finally {\n      socket.off(\"data\", onData);\n      socket.off(\"error\", onError);\n      socket.off(\"close\", onClose);\n    }\n  }\n\n  /** Closes the socket connection. */\n  async close(): Promise<void> {\n    if (!this.socket) {\n      return;\n    }\n\n    await new Promise<void>((resolve) => {\n      this.socket?.end(() => resolve());\n    });\n    this.socket = null;\n    this._connected = false;\n  }\n\n  private connectPlain(host: string, port: number): Promise<void> {\n    return new Promise((resolve, reject) => {\n      const socket = net.connect({ host, port }, () => resolve());\n      socket.setTimeout(this.connectionTimeout);\n      socket.once(\"timeout\", () => {\n        socket.destroy();\n        reject(new Error(\"Connection timeout\"));\n      });\n      socket.once(\"error\", reject);\n      this.socket = socket;\n    });\n  }\n\n  private connectTls(host: string, port: number): Promise<void> {\n    warnRejectUnauthorizedDisabled(this.tlsOptions);\n    return new Promise((resolve, reject) => {\n      const socket = tls.connect(\n        {\n          host,\n          port,\n          servername: this.tlsOptions.servername ?? host,\n          rejectUnauthorized: this.tlsOptions.rejectUnauthorized ?? true,\n          minVersion: this.tlsOptions.minVersion,\n        },\n        () => resolve(),\n      );\n      socket.setTimeout(this.connectionTimeout);\n      socket.once(\"timeout\", () => {\n        socket.destroy();\n        reject(new Error(\"Connection timeout\"));\n      });\n      socket.once(\"error\", reject);\n      this.socket = socket;\n    });\n  }\n}\n"
   ],
-  "mappings": ";;;AAgBA;AACA;AAAA;AAeO,MAAM,WAAoC;AAAA,EACvC,SAA4C;AAAA,EAC5C;AAAA,EACA,aAAa;AAAA,EACJ;AAAA,EACA;AAAA,EAGjB,WAAW,CAAC,UAA6B,CAAC,GAAG;AAAA,IAC3C,IAAI,OAAO,QAAQ,aAAa;AAAA,MAC9B,MAAM,IAAI,MAAM,qCAAqC;AAAA,IACvD;AAAA,IACA,KAAK,UAAU,QAAQ,UAAU;AAAA,IACjC,KAAK,oBAAoB,QAAQ,qBAAqB;AAAA,IACtD,KAAK,aAAa,QAAQ,OAAO,CAAC;AAAA;AAAA,MAIhC,MAAM,GAAY;AAAA,IACpB,OAAO,KAAK;AAAA;AAAA,MAIV,SAAS,GAAY;AAAA,IACvB,OAAO,KAAK;AAAA;AAAA,OAIR,QAAO,CAAC,MAAc,MAA6B;AAAA,IACvD,IAAI,KAAK,SAAS;AAAA,MAChB,MAAM,KAAK,WAAW,MAAM,IAAI;AAAA,IAClC,EAAO;AAAA,MACL,MAAM,KAAK,aAAa,MAAM,IAAI;AAAA;AAAA,IAEpC,KAAK,aAAa;AAAA;AAAA,OAId,SAAQ,CAAC,SAAqC;AAAA,IAClD,IAAI,CAAC,KAAK,UAAU,KAAK,SAAS;AAAA,MAChC,MAAM,IAAI,MAAM,4CAA4C;AAAA,IAC9D;AAAA,IAEA,MAAM,QAAQ,KAAK;AAAA,IACnB,MAAM,SAAS,KAAK,KAAK,eAAe,QAAQ;AAAA,IAEhD,MAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAAA,MAC3C,MAAM,YAAY,IAAI,QAAQ;AAAA,QAC5B,QAAQ;AAAA,QACR,YAAY,OAAO;AAAA,QACnB,oBAAoB,OAAO,sBAAsB;AAAA,MACnD,CAAC;AAAA,MAED,UAAU,KAAK,iBAAiB,MAAM;AAAA,QACpC,KAAK,SAAS;AAAA,QACd,KAAK,UAAU;AAAA,QACf,QAAQ;AAAA,OACT;AAAA,MACD,UAAU,KAAK,SAAS,MAAM;AAAA,KAC/B;AAAA;AAAA,OAIG,MAAK,CAAC,MAAiC;AAAA,IAC3C,IAAI,CAAC,KAAK,QAAQ;AAAA,MAChB,MAAM,IAAI,MAAM,sBAAsB;AAAA,IACxC;AAAA,IAEA,MAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAAA,MAC3C,KAAK,QAAQ,MAAM,OAAO,KAAK,IAAI,GAAG,CAAC,QAAkC;AAAA,QACvE,IAAI,KAAK;AAAA,UACP,OAAO,GAAG;AAAA,QACZ,EAAO;AAAA,UACL,QAAQ;AAAA;AAAA,OAEX;AAAA,KACF;AAAA;AAAA,SAII,IAAI,GAA8C;AAAA,IACvD,IAAI,CAAC,KAAK,QAAQ;AAAA,MAChB,MAAM,IAAI,MAAM,sBAAsB;AAAA,IACxC;AAAA,IAEA,MAAM,SAAS,KAAK;AAAA,IACpB,MAAM,QAAsB,CAAC;AAAA,IAC7B,IAAI,cAAoE;AAAA,IACxE,IAAI,OAAO;AAAA,IACX,IAAI,QAAsB;AAAA,IAE1B,MAAM,SAAS,CAAC,UAAwB;AAAA,MACtC,MAAM,OAAO,IAAI,WAAW,KAAK;AAAA,MACjC,IAAI,aAAa;AAAA,QACf,YAAY,EAAE,OAAO,MAAM,MAAM,MAAM,CAAC;AAAA,QACxC,cAAc;AAAA,MAChB,EAAO;AAAA,QACL,MAAM,KAAK,IAAI;AAAA;AAAA;AAAA,IAInB,MAAM,UAAU,CAAC,QAAqB;AAAA,MACpC,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,IAAI,aAAa;AAAA,QACf,YAAY,EAAE,OAAO,WAAoC,MAAM,KAAK,CAAC;AAAA,QACrE,cAAc;AAAA,MAChB;AAAA;AAAA,IAGF,MAAM,UAAU,MAAY;AAAA,MAC1B,OAAO;AAAA,MACP,IAAI,aAAa;AAAA,QACf,YAAY,EAAE,OAAO,WAAoC,MAAM,KAAK,CAAC;AAAA,QACrE,cAAc;AAAA,MAChB;AAAA;AAAA,IAGF,OAAO,GAAG,QAAQ,MAAM;AAAA,IACxB,OAAO,GAAG,SAAS,OAAO;AAAA,IAC1B,OAAO,GAAG,SAAS,OAAO;AAAA,IAE1B,IAAI;AAAA,MACF,OAAO,CAAC,QAAQ,MAAM,SAAS,GAAG;AAAA,QAChC,IAAI,OAAO;AAAA,UACT,MAAM;AAAA,QACR;AAAA,QACA,IAAI,MAAM,SAAS,GAAG;AAAA,UACpB,MAAM,MAAM,MAAM;AAAA,UAClB;AAAA,QACF;AAAA,QACA,IAAI,MAAM;AAAA,UACR;AAAA,QACF;AAAA,QACA,MAAM,QAAQ,MAAM,IAAI,QAAoC,CAAC,YAAY;AAAA,UACvE,cAAc;AAAA,SACf;AAAA,QACD,IAAI,MAAM,MAAM;AAAA,UACd;AAAA,QACF;AAAA,QACA,MAAM,MAAM;AAAA,MACd;AAAA,cACA;AAAA,MACA,OAAO,IAAI,QAAQ,MAAM;AAAA,MACzB,OAAO,IAAI,SAAS,OAAO;AAAA,MAC3B,OAAO,IAAI,SAAS,OAAO;AAAA;AAAA;AAAA,OAKzB,MAAK,GAAkB;AAAA,IAC3B,IAAI,CAAC,KAAK,QAAQ;AAAA,MAChB;AAAA,IACF;AAAA,IAEA,MAAM,IAAI,QAAc,CAAC,YAAY;AAAA,MACnC,KAAK,QAAQ,IAAI,MAAM,QAAQ,CAAC;AAAA,KACjC;AAAA,IACD,KAAK,SAAS;AAAA,IACd,KAAK,aAAa;AAAA;AAAA,EAGZ,YAAY,CAAC,MAAc,MAA6B;AAAA,IAC9D,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,MAAM,SAAS,IAAI,QAAQ,EAAE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC;AAAA,MAC1D,OAAO,WAAW,KAAK,iBAAiB;AAAA,MACxC,OAAO,KAAK,WAAW,MAAM;AAAA,QAC3B,OAAO,QAAQ;AAAA,QACf,OAAO,IAAI,MAAM,oBAAoB,CAAC;AAAA,OACvC;AAAA,MACD,OAAO,KAAK,SAAS,MAAM;AAAA,MAC3B,KAAK,SAAS;AAAA,KACf;AAAA;AAAA,EAGK,UAAU,CAAC,MAAc,MAA6B;AAAA,IAC5D,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,MAAM,SAAS,IAAI,QACjB;AAAA,QACE;AAAA,QACA;AAAA,QACA,YAAY,KAAK,WAAW,cAAc;AAAA,QAC1C,oBAAoB,KAAK,WAAW,sBAAsB;AAAA,MAC5D,GACA,MAAM,QAAQ,CAChB;AAAA,MACA,OAAO,WAAW,KAAK,iBAAiB;AAAA,MACxC,OAAO,KAAK,WAAW,MAAM;AAAA,QAC3B,OAAO,QAAQ;AAAA,QACf,OAAO,IAAI,MAAM,oBAAoB,CAAC;AAAA,OACvC;AAAA,MACD,OAAO,KAAK,SAAS,MAAM;AAAA,MAC3B,KAAK,SAAS;AAAA,KACf;AAAA;AAEL;",
-  "debugId": "3155B06C8BAF12C764756E2164756E21",
+  "mappings": ";;;AAgBA;AACA;AAGA,SAAS,8BAA8B,CAAC,MAAuB;AAAA,EAC7D,IAAI,KAAI,uBAAuB,OAAO;AAAA,IACpC,QAAQ,KACN,wDACE,oDACJ;AAAA,EACF;AAAA;AAAA;AAeK,MAAM,WAAoC;AAAA,EACvC,SAA4C;AAAA,EAC5C;AAAA,EACA,aAAa;AAAA,EACJ;AAAA,EACA;AAAA,EAGjB,WAAW,CAAC,UAA6B,CAAC,GAAG;AAAA,IAC3C,IAAI,OAAO,QAAQ,aAAa;AAAA,MAC9B,MAAM,IAAI,MAAM,qCAAqC;AAAA,IACvD;AAAA,IACA,KAAK,UAAU,QAAQ,UAAU;AAAA,IACjC,KAAK,oBAAoB,QAAQ,qBAAqB;AAAA,IACtD,KAAK,aAAa,QAAQ,OAAO,CAAC;AAAA;AAAA,MAIhC,MAAM,GAAY;AAAA,IACpB,OAAO,KAAK;AAAA;AAAA,MAIV,SAAS,GAAY;AAAA,IACvB,OAAO,KAAK;AAAA;AAAA,OAIR,QAAO,CAAC,MAAc,MAA6B;AAAA,IACvD,IAAI,KAAK,SAAS;AAAA,MAChB,MAAM,KAAK,WAAW,MAAM,IAAI;AAAA,IAClC,EAAO;AAAA,MACL,MAAM,KAAK,aAAa,MAAM,IAAI;AAAA;AAAA,IAEpC,KAAK,aAAa;AAAA;AAAA,OAId,SAAQ,CAAC,SAAqC;AAAA,IAClD,IAAI,CAAC,KAAK,UAAU,KAAK,SAAS;AAAA,MAChC,MAAM,IAAI,MAAM,4CAA4C;AAAA,IAC9D;AAAA,IAEA,MAAM,QAAQ,KAAK;AAAA,IACnB,MAAM,SAAS,KAAK,KAAK,eAAe,QAAQ;AAAA,IAChD,+BAA+B,MAAM;AAAA,IAErC,MAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAAA,MAC3C,MAAM,YAAY,IAAI,QAAQ;AAAA,QAC5B,QAAQ;AAAA,QACR,YAAY,OAAO;AAAA,QACnB,oBAAoB,OAAO,sBAAsB;AAAA,QACjD,YAAY,OAAO;AAAA,MACrB,CAAC;AAAA,MAED,UAAU,KAAK,iBAAiB,MAAM;AAAA,QACpC,KAAK,SAAS;AAAA,QACd,KAAK,UAAU;AAAA,QACf,QAAQ;AAAA,OACT;AAAA,MACD,UAAU,KAAK,SAAS,MAAM;AAAA,KAC/B;AAAA;AAAA,OAIG,MAAK,CAAC,MAAiC;AAAA,IAC3C,IAAI,CAAC,KAAK,QAAQ;AAAA,MAChB,MAAM,IAAI,MAAM,sBAAsB;AAAA,IACxC;AAAA,IAEA,MAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAAA,MAC3C,KAAK,QAAQ,MAAM,OAAO,KAAK,IAAI,GAAG,CAAC,QAAkC;AAAA,QACvE,IAAI,KAAK;AAAA,UACP,OAAO,GAAG;AAAA,QACZ,EAAO;AAAA,UACL,QAAQ;AAAA;AAAA,OAEX;AAAA,KACF;AAAA;AAAA,SAII,IAAI,GAA8C;AAAA,IACvD,IAAI,CAAC,KAAK,QAAQ;AAAA,MAChB,MAAM,IAAI,MAAM,sBAAsB;AAAA,IACxC;AAAA,IAEA,MAAM,SAAS,KAAK;AAAA,IACpB,MAAM,QAAsB,CAAC;AAAA,IAC7B,IAAI,cAAoE;AAAA,IACxE,IAAI,OAAO;AAAA,IACX,IAAI,QAAsB;AAAA,IAE1B,MAAM,SAAS,CAAC,UAAwB;AAAA,MACtC,MAAM,OAAO,IAAI,WAAW,KAAK;AAAA,MACjC,IAAI,aAAa;AAAA,QACf,YAAY,EAAE,OAAO,MAAM,MAAM,MAAM,CAAC;AAAA,QACxC,cAAc;AAAA,MAChB,EAAO;AAAA,QACL,MAAM,KAAK,IAAI;AAAA;AAAA;AAAA,IAInB,MAAM,UAAU,CAAC,QAAqB;AAAA,MACpC,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,IAAI,aAAa;AAAA,QACf,YAAY,EAAE,OAAO,WAAoC,MAAM,KAAK,CAAC;AAAA,QACrE,cAAc;AAAA,MAChB;AAAA;AAAA,IAGF,MAAM,UAAU,MAAY;AAAA,MAC1B,OAAO;AAAA,MACP,IAAI,aAAa;AAAA,QACf,YAAY,EAAE,OAAO,WAAoC,MAAM,KAAK,CAAC;AAAA,QACrE,cAAc;AAAA,MAChB;AAAA;AAAA,IAGF,OAAO,GAAG,QAAQ,MAAM;AAAA,IACxB,OAAO,GAAG,SAAS,OAAO;AAAA,IAC1B,OAAO,GAAG,SAAS,OAAO;AAAA,IAE1B,IAAI;AAAA,MACF,OAAO,CAAC,QAAQ,MAAM,SAAS,GAAG;AAAA,QAChC,IAAI,OAAO;AAAA,UACT,MAAM;AAAA,QACR;AAAA,QACA,IAAI,MAAM,SAAS,GAAG;AAAA,UACpB,MAAM,MAAM,MAAM;AAAA,UAClB;AAAA,QACF;AAAA,QACA,IAAI,MAAM;AAAA,UACR;AAAA,QACF;AAAA,QACA,MAAM,QAAQ,MAAM,IAAI,QAAoC,CAAC,YAAY;AAAA,UACvE,cAAc;AAAA,SACf;AAAA,QACD,IAAI,MAAM,MAAM;AAAA,UACd;AAAA,QACF;AAAA,QACA,MAAM,MAAM;AAAA,MACd;AAAA,cACA;AAAA,MACA,OAAO,IAAI,QAAQ,MAAM;AAAA,MACzB,OAAO,IAAI,SAAS,OAAO;AAAA,MAC3B,OAAO,IAAI,SAAS,OAAO;AAAA;AAAA;AAAA,OAKzB,MAAK,GAAkB;AAAA,IAC3B,IAAI,CAAC,KAAK,QAAQ;AAAA,MAChB;AAAA,IACF;AAAA,IAEA,MAAM,IAAI,QAAc,CAAC,YAAY;AAAA,MACnC,KAAK,QAAQ,IAAI,MAAM,QAAQ,CAAC;AAAA,KACjC;AAAA,IACD,KAAK,SAAS;AAAA,IACd,KAAK,aAAa;AAAA;AAAA,EAGZ,YAAY,CAAC,MAAc,MAA6B;AAAA,IAC9D,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,MAAM,SAAS,IAAI,QAAQ,EAAE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC;AAAA,MAC1D,OAAO,WAAW,KAAK,iBAAiB;AAAA,MACxC,OAAO,KAAK,WAAW,MAAM;AAAA,QAC3B,OAAO,QAAQ;AAAA,QACf,OAAO,IAAI,MAAM,oBAAoB,CAAC;AAAA,OACvC;AAAA,MACD,OAAO,KAAK,SAAS,MAAM;AAAA,MAC3B,KAAK,SAAS;AAAA,KACf;AAAA;AAAA,EAGK,UAAU,CAAC,MAAc,MAA6B;AAAA,IAC5D,+BAA+B,KAAK,UAAU;AAAA,IAC9C,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,MAAM,SAAS,IAAI,QACjB;AAAA,QACE;AAAA,QACA;AAAA,QACA,YAAY,KAAK,WAAW,cAAc;AAAA,QAC1C,oBAAoB,KAAK,WAAW,sBAAsB;AAAA,QAC1D,YAAY,KAAK,WAAW;AAAA,MAC9B,GACA,MAAM,QAAQ,CAChB;AAAA,MACA,OAAO,WAAW,KAAK,iBAAiB;AAAA,MACxC,OAAO,KAAK,WAAW,MAAM;AAAA,QAC3B,OAAO,QAAQ;AAAA,QACf,OAAO,IAAI,MAAM,oBAAoB,CAAC;AAAA,OACvC;AAAA,MACD,OAAO,KAAK,SAAS,MAAM;AAAA,MAC3B,KAAK,SAAS;AAAA,KACf;AAAA;AAEL;",
+  "debugId": "55F886DB16D90CED64756E2164756E21",
   "names": []
 }