django-nativemojo 0.1.15__py3-none-any.whl → 0.1.17__py3-none-any.whl

mojo/apps/aws/migrations/0001_initial.py

@@ -0,0 +1,206 @@
+# Generated by Django 4.2.21 on 2025-08-27 18:23
+
+from django.db import migrations, models
+import django.db.models.deletion
+import mojo.models.rest
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='EmailAttachment',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created', models.DateTimeField(auto_now_add=True)),
+                ('modified', models.DateTimeField(auto_now=True, db_index=True)),
+                ('filename', models.CharField(blank=True, help_text='Original filename (if provided by the sender)', max_length=512, null=True)),
+                ('content_type', models.CharField(blank=True, help_text='MIME content type (e.g., application/pdf)', max_length=255, null=True)),
+                ('size_bytes', models.IntegerField(default=0, help_text='Size of the stored attachment in bytes (approximate)')),
+                ('stored_as', models.CharField(help_text='Storage reference (e.g., s3://bucket/key)', max_length=512)),
+                ('metadata', models.JSONField(blank=True, default=dict, help_text='Arbitrary metadata (e.g., content-id, part headers)')),
+            ],
+            options={
+                'db_table': 'aws_email_attachment',
+                'ordering': ['-created', 'id'],
+            },
+            bases=(models.Model, mojo.models.rest.MojoModel),
+        ),
+        migrations.CreateModel(
+            name='EmailDomain',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('mojo_secrets', models.TextField(blank=True, default=None, null=True)),
+                ('created', models.DateTimeField(auto_now_add=True)),
+                ('modified', models.DateTimeField(auto_now=True, db_index=True)),
+                ('name', models.CharField(db_index=True, max_length=255, unique=True)),
+                ('region', models.CharField(default='us-west-2', help_text='AWS region for SES operations', max_length=64)),
+                ('status', models.CharField(db_index=True, default='pending', help_text='High-level status: pending, verified, error (free-form)', max_length=32)),
+                ('receiving_enabled', models.BooleanField(default=False, help_text='When true, domain-level catch-all receiving is enabled via SES receipt rules')),
+                ('s3_inbound_bucket', models.CharField(blank=True, help_text='S3 bucket for inbound emails (required if receiving_enabled)', max_length=255, null=True)),
+                ('s3_inbound_prefix', models.CharField(blank=True, default='', help_text='S3 prefix for inbound emails (e.g., inbound/example.com/)', max_length=255)),
+                ('dns_mode', models.CharField(default='manual', help_text='DNS automation mode: manual | route53 | godaddy', max_length=32)),
+                ('sns_topic_bounce_arn', models.CharField(blank=True, help_text='SNS topic ARN for SES bounce notifications', max_length=512, null=True)),
+                ('sns_topic_complaint_arn', models.CharField(blank=True, help_text='SNS topic ARN for SES complaint notifications', max_length=512, null=True)),
+                ('sns_topic_delivery_arn', models.CharField(blank=True, help_text='SNS topic ARN for SES delivery notifications', max_length=512, null=True)),
+                ('sns_topic_inbound_arn', models.CharField(blank=True, help_text='SNS topic ARN for SES inbound notifications', max_length=512, null=True)),
+                ('metadata', models.JSONField(blank=True, default=dict)),
+            ],
+            options={
+                'db_table': 'aws_email_domain',
+                'ordering': ['name'],
+            },
+            bases=(models.Model, mojo.models.rest.MojoModel),
+        ),
+        migrations.CreateModel(
+            name='Mailbox',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created', models.DateTimeField(auto_now_add=True)),
+                ('modified', models.DateTimeField(auto_now=True, db_index=True)),
+                ('email', models.EmailField(db_index=True, help_text='Full email address for this mailbox (e.g., support@example.com)', max_length=254, unique=True)),
+                ('allow_inbound', models.BooleanField(default=True, help_text='If true, inbound messages addressed to this mailbox will be processed')),
+                ('allow_outbound', models.BooleanField(default=True, help_text='If true, outbound messages can be sent from this mailbox')),
+                ('async_handler', models.CharField(blank=True, help_text="Dotted path to async handler: 'package.module:function'", max_length=255, null=True)),
+                ('metadata', models.JSONField(blank=True, default=dict)),
+                ('domain', models.ForeignKey(help_text='Owning email domain (SES identity)', on_delete=django.db.models.deletion.CASCADE, related_name='mailboxes', to='aws.emaildomain')),
+            ],
+            options={
+                'db_table': 'aws_mailbox',
+                'ordering': ['email'],
+            },
+            bases=(models.Model, mojo.models.rest.MojoModel),
+        ),
+        migrations.CreateModel(
+            name='SentMessage',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created', models.DateTimeField(auto_now_add=True)),
+                ('modified', models.DateTimeField(auto_now=True, db_index=True)),
+                ('ses_message_id', models.CharField(blank=True, db_index=True, help_text='AWS SES MessageId returned after a successful send', max_length=255, null=True)),
+                ('to_addresses', models.JSONField(blank=True, default=list, help_text='List of recipient addresses (To)')),
+                ('cc_addresses', models.JSONField(blank=True, default=list, help_text='List of recipient addresses (Cc)')),
+                ('bcc_addresses', models.JSONField(blank=True, default=list, help_text='List of recipient addresses (Bcc)')),
+                ('subject', models.CharField(blank=True, help_text='Email subject', max_length=512, null=True)),
+                ('body_text', models.TextField(blank=True, help_text='Plain text body', null=True)),
+                ('body_html', models.TextField(blank=True, help_text='HTML body', null=True)),
+                ('template_name', models.CharField(blank=True, help_text='Optional EmailTemplate name used to render this message', max_length=255, null=True)),
+                ('template_context', models.JSONField(blank=True, default=dict, help_text='Context used when rendering a template')),
+                ('status', models.CharField(choices=[('queued', 'Queued'), ('sending', 'Sending'), ('delivered', 'Delivered'), ('bounced', 'Bounced'), ('complained', 'Complained'), ('failed', 'Failed'), ('unknown', 'Unknown')], db_index=True, default='queued', help_text='Current delivery status', max_length=32)),
+                ('status_reason', models.TextField(blank=True, help_text='Details or raw payload for bounces/complaints/errors', null=True)),
+                ('metadata', models.JSONField(blank=True, default=dict, help_text='Arbitrary metadata for downstream processing/auditing')),
+                ('mailbox', models.ForeignKey(help_text='Mailbox used as the sender (envelope MAIL FROM = mailbox.email)', on_delete=django.db.models.deletion.CASCADE, related_name='sent_messages', to='aws.mailbox')),
+            ],
+            options={
+                'db_table': 'aws_sent_message',
+                'ordering': ['-created', 'id'],
+            },
+            bases=(models.Model, mojo.models.rest.MojoModel),
+        ),
+        migrations.CreateModel(
+            name='IncomingEmail',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created', models.DateTimeField(auto_now_add=True)),
+                ('modified', models.DateTimeField(auto_now=True, db_index=True)),
+                ('s3_object_url', models.CharField(help_text='S3 URL for the raw MIME message (e.g., s3://bucket/key)', max_length=512)),
+                ('message_id', models.CharField(blank=True, db_index=True, help_text='SMTP Message-ID header (if present)', max_length=255, null=True)),
+                ('from_address', models.CharField(blank=True, help_text='Raw From header address (may include name)', max_length=512, null=True)),
+                ('to_addresses', models.JSONField(blank=True, default=list, help_text='List of recipient addresses from To header')),
+                ('cc_addresses', models.JSONField(blank=True, default=list, help_text='List of recipient addresses from Cc header')),
+                ('subject', models.CharField(blank=True, help_text='Email subject', max_length=512, null=True)),
+                ('date_header', models.DateTimeField(blank=True, help_text='Parsed Date header from the message', null=True)),
+                ('headers', models.JSONField(blank=True, default=dict, help_text='All headers as a JSON object (flattened)')),
+                ('text_body', models.TextField(blank=True, help_text='Extracted plain text body (if available)', null=True)),
+                ('html_body', models.TextField(blank=True, help_text='Extracted HTML body (if available)', null=True)),
+                ('size_bytes', models.IntegerField(default=0, help_text='Approximate size of the raw message in bytes')),
+                ('received_at', models.DateTimeField(blank=True, db_index=True, help_text='Time message was received (from SNS/S3 event or set by parser)', null=True)),
+                ('processed', models.BooleanField(default=False, help_text='True if post-receive processing completed')),
+                ('process_status', models.CharField(db_index=True, default='pending', help_text='Processing status: pending | success | error', max_length=32)),
+                ('process_error', models.TextField(blank=True, help_text='Error details if processing failed', null=True)),
+                ('mailbox', models.ForeignKey(blank=True, help_text='Associated mailbox if any recipient matches', null=True, on_delete=django.db.models.deletion.CASCADE, related_name='incoming_emails', to='aws.mailbox')),
+            ],
+            options={
+                'db_table': 'aws_incoming_email',
+                'ordering': ['-received_at', '-created'],
+            },
+            bases=(models.Model, mojo.models.rest.MojoModel),
+        ),
+        migrations.CreateModel(
+            name='EmailTemplate',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created', models.DateTimeField(auto_now_add=True)),
+                ('modified', models.DateTimeField(auto_now=True, db_index=True)),
+                ('name', models.CharField(db_index=True, help_text='Unique template name (used by callers to reference this template)', max_length=255, unique=True)),
+                ('subject_template', models.TextField(blank=True, default='', help_text='Django template string for the email subject')),
+                ('html_template', models.TextField(blank=True, default='', help_text='Django template string for the HTML body')),
+                ('text_template', models.TextField(blank=True, default='', help_text='Django template string for the plain text body')),
+                ('metadata', models.JSONField(blank=True, default=dict, help_text='Arbitrary metadata for this template (e.g., description, tags)')),
+            ],
+            options={
+                'db_table': 'aws_email_template',
+                'ordering': ['name'],
+                'indexes': [models.Index(fields=['modified'], name='aws_email_t_modifie_cf76d6_idx'), models.Index(fields=['name'], name='aws_email_t_name_d1662a_idx')],
+            },
+            bases=(models.Model, mojo.models.rest.MojoModel),
+        ),
+        migrations.AddIndex(
+            model_name='emaildomain',
+            index=models.Index(fields=['status'], name='aws_email_d_status_398945_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='emaildomain',
+            index=models.Index(fields=['modified'], name='aws_email_d_modifie_66ca75_idx'),
+        ),
+        migrations.AddField(
+            model_name='emailattachment',
+            name='incoming_email',
+            field=models.ForeignKey(help_text='The inbound email this attachment belongs to', on_delete=django.db.models.deletion.CASCADE, related_name='attachments', to='aws.incomingemail'),
+        ),
+        migrations.AddIndex(
+            model_name='sentmessage',
+            index=models.Index(fields=['modified'], name='aws_sent_me_modifie_a26352_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='sentmessage',
+            index=models.Index(fields=['status'], name='aws_sent_me_status_63e619_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='sentmessage',
+            index=models.Index(fields=['ses_message_id'], name='aws_sent_me_ses_mes_b72855_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='mailbox',
+            index=models.Index(fields=['modified'], name='aws_mailbox_modifie_597f5d_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='mailbox',
+            index=models.Index(fields=['email'], name='aws_mailbox_email_e2c6d1_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='incomingemail',
+            index=models.Index(fields=['modified'], name='aws_incomin_modifie_8e68a9_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='incomingemail',
+            index=models.Index(fields=['received_at'], name='aws_incomin_receive_7b6d93_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='incomingemail',
+            index=models.Index(fields=['message_id'], name='aws_incomin_message_d8ca7f_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='emailattachment',
+            index=models.Index(fields=['modified'], name='aws_email_a_modifie_b283df_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='emailattachment',
+            index=models.Index(fields=['filename'], name='aws_email_a_filenam_da3c89_idx'),
+        ),
+    ]

mojo/apps/aws/migrations/0002_emaildomain_can_recv_emaildomain_can_send_and_more.py

@@ -0,0 +1,28 @@
+# Generated by Django 4.2.21 on 2025-08-27 21:38
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('aws', '0001_initial'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='emaildomain',
+            name='can_recv',
+            field=models.BooleanField(default=False, help_text='True if inbound receiving is ready per last audit'),
+        ),
+        migrations.AddField(
+            model_name='emaildomain',
+            name='can_send',
+            field=models.BooleanField(default=False, help_text='True if outbound sending is ready per last audit'),
+        ),
+        migrations.AlterField(
+            model_name='emaildomain',
+            name='status',
+            field=models.CharField(db_index=True, default='pending', help_text='Domain status: "pending" (created), "ready" (audit passed), or "missing" (audit failed)', max_length=32),
+        ),
+    ]

mojo/apps/aws/migrations/0003_mailbox_is_domain_default_mailbox_is_system_default_and_more.py

@@ -0,0 +1,31 @@
+# Generated by Django 4.2.21 on 2025-08-31 23:09
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('aws', '0002_emaildomain_can_recv_emaildomain_can_send_and_more'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='mailbox',
+            name='is_domain_default',
+            field=models.BooleanField(db_index=True, default=False, help_text='Default mailbox for this domain (one per domain)'),
+        ),
+        migrations.AddField(
+            model_name='mailbox',
+            name='is_system_default',
+            field=models.BooleanField(db_index=True, default=False, help_text='System-wide default mailbox (only one allowed)'),
+        ),
+        migrations.AddIndex(
+            model_name='mailbox',
+            index=models.Index(fields=['is_system_default'], name='aws_mailbox_is_syst_9911c7_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='mailbox',
+            index=models.Index(fields=['is_domain_default', 'domain'], name='aws_mailbox_is_doma_189efb_idx'),
+        ),
+    ]

mojo/apps/aws/migrations/0004_s3bucket.py

@@ -0,0 +1,39 @@
+# Generated by Django 4.2.23 on 2025-09-06 00:00
+
+from django.conf import settings
+from django.db import migrations, models
+import django.db.models.deletion
+import mojo.models.rest
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+        ('account', '0014_notificationdelivery_data_payload_and_more'),
+        ('aws', '0003_mailbox_is_domain_default_mailbox_is_system_default_and_more'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='S3Bucket',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('mojo_secrets', models.TextField(blank=True, default=None, null=True)),
+                ('created', models.DateTimeField(auto_now_add=True)),
+                ('modified', models.DateTimeField(auto_now=True, db_index=True)),
+                ('name', models.CharField(db_index=True, max_length=255, unique=True)),
+                ('region', models.CharField(default='us-west-2', help_text='AWS region for SES operations', max_length=64)),
+                ('metadata', models.JSONField(blank=True, default=dict)),
+                ('is_active', models.BooleanField(db_index=True, default=False)),
+                ('is_system_default', models.BooleanField(db_index=True, default=False)),
+                ('is_group_default', models.BooleanField(db_index=True, default=False)),
+                ('group', models.ForeignKey(default=None, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='s3_buckets', to='account.group')),
+                ('user', models.ForeignKey(default=None, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='s3_buckets', to=settings.AUTH_USER_MODEL)),
+            ],
+            options={
+                'abstract': False,
+            },
+            bases=(models.Model, mojo.models.rest.MojoModel),
+        ),
+    ]

mojo/apps/aws/migrations/0005_alter_emaildomain_region_delete_s3bucket.py

@@ -0,0 +1,21 @@
+# Generated by Django 4.2.23 on 2025-09-06 00:10
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('aws', '0004_s3bucket'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='emaildomain',
+            name='region',
+            field=models.CharField(default='us-east-1', help_text='AWS region for SES operations', max_length=64),
+        ),
+        migrations.DeleteModel(
+            name='S3Bucket',
+        ),
+    ]

mojo/apps/aws/models/__init__.py

@@ -0,0 +1,19 @@
+"""
+AWS models package exports
+"""
+
+from .email_domain import EmailDomain
+from .mailbox import Mailbox
+from .incoming_email import IncomingEmail
+from .email_attachment import EmailAttachment
+from .sent_message import SentMessage
+from .email_template import EmailTemplate
+
+__all__ = [
+    "EmailDomain",
+    "Mailbox",
+    "IncomingEmail",
+    "EmailAttachment",
+    "SentMessage",
+    "EmailTemplate",
+]

mojo/apps/aws/models/email_attachment.py

@@ -0,0 +1,99 @@
+from django.db import models
+from mojo.models import MojoModel
+
+
+class EmailAttachment(models.Model, MojoModel):
+    """
+    EmailAttachment
+
+    Represents a single attachment extracted from an incoming email. The binary
+    content is stored in the same inbound S3 bucket as the raw message, and
+    referenced by `stored_as` (e.g., s3://bucket/key).
+
+    Relationships:
+    - incoming_email: FK to IncomingEmail
+    """
+
+    created = models.DateTimeField(auto_now_add=True, editable=False)
+    modified = models.DateTimeField(auto_now=True, db_index=True)
+
+    incoming_email = models.ForeignKey(
+        "aws.IncomingEmail",
+        related_name="attachments",
+        on_delete=models.CASCADE,
+        help_text="The inbound email this attachment belongs to"
+    )
+
+    filename = models.CharField(
+        max_length=512,
+        null=True,
+        blank=True,
+        help_text="Original filename (if provided by the sender)"
+    )
+
+    content_type = models.CharField(
+        max_length=255,
+        null=True,
+        blank=True,
+        help_text="MIME content type (e.g., application/pdf)"
+    )
+
+    size_bytes = models.IntegerField(
+        default=0,
+        help_text="Size of the stored attachment in bytes (approximate)"
+    )
+
+    stored_as = models.CharField(
+        max_length=512,
+        help_text="Storage reference (e.g., s3://bucket/key)"
+    )
+
+    metadata = models.JSONField(
+        default=dict,
+        blank=True,
+        help_text="Arbitrary metadata (e.g., content-id, part headers)"
+    )
+
+    class Meta:
+        db_table = "aws_email_attachment"
+        indexes = [
+            models.Index(fields=["modified"]),
+            models.Index(fields=["filename"]),
+        ]
+        ordering = ["-created", "id"]
+
+    class RestMeta:
+        VIEW_PERMS = ["manage_aws"]
+        SAVE_PERMS = ["manage_aws"]
+        DELETE_PERMS = ["manage_aws"]
+        SEARCH_FIELDS = ["filename", "content_type", "stored_as"]
+        GRAPHS = {
+            "basic": {
+                "fields": [
+                    "id",
+                    "incoming_email",
+                    "filename",
+                    "content_type",
+                    "size_bytes",
+                    "created",
+                ],
+                "graphs": {"incoming_email": "basic"},
+            },
+            "default": {
+                "fields": [
+                    "id",
+                    "incoming_email",
+                    "filename",
+                    "content_type",
+                    "size_bytes",
+                    "stored_as",
+                    "metadata",
+                    "created",
+                    "modified",
+                ],
+                "graphs": {"incoming_email": "basic"},
+            },
+        }
+
+    def __str__(self) -> str:
+        return self.filename or self.stored_as or f"Attachment {self.pk}"

mojo/apps/aws/models/email_domain.py

@@ -0,0 +1,218 @@
+from django.db import models
+from mojo.models import MojoModel, MojoSecrets
+from mojo.helpers.settings import settings
+from mojo.helpers.aws.ses_domain import audit_domain_config, reconcile_domain_config
+from mojo.helpers import aws
+
+
+class EmailDomain(MojoSecrets, MojoModel):
+    """
+    EmailDomain
+
+    Minimal model for managing an SES-backed email domain configuration in MOJO.
+
+    Notes:
+    - 'name' is the domain (e.g., example.com).
+    - 'region' defaults to project AWS region (settings.AWS_REGION) or 'us-east-1'.
+    - 'receiving_enabled' toggles domain-level catch-all receiving (SES receipt rules).
+    - 's3_inbound_bucket' and 's3_inbound_prefix' identify where inbound emails are stored.
+    - 'status' is a lightweight lifecycle indicator: pending | verified | error (free-form for now).
+    - 'metadata' allows flexible per-domain extension without schema churn.
+    """
+
+    created = models.DateTimeField(auto_now_add=True, editable=False)
+    modified = models.DateTimeField(auto_now=True, db_index=True)
+
+    name = models.CharField(max_length=255, unique=True, db_index=True)
+    region = models.CharField(
+        max_length=64,
+        default=getattr(settings, 'AWS_REGION', 'us-east-1'),
+        help_text="AWS region for SES operations"
+    )
+
+    status = models.CharField(
+        max_length=32,
+        default='pending',
+        db_index=True,
+        help_text='Domain status: "pending" (created), "ready" (audit passed), or "missing" (audit failed)'
+    )
+
+    receiving_enabled = models.BooleanField(
+        default=False,
+        help_text="When true, domain-level catch-all receiving is enabled via SES receipt rules"
+    )
+
+    s3_inbound_bucket = models.CharField(
+        max_length=255,
+        null=True,
+        blank=True,
+        help_text="S3 bucket for inbound emails (required if receiving_enabled)"
+    )
+    s3_inbound_prefix = models.CharField(
+        max_length=255,
+        default='',
+        blank=True,
+        help_text="S3 prefix for inbound emails (e.g., inbound/example.com/)"
+    )
+
+    dns_mode = models.CharField(
+        max_length=32,
+        default='manual',
+        help_text="DNS automation mode: manual | route53 | godaddy"
+    )
+
+    sns_topic_bounce_arn = models.CharField(
+        max_length=512,
+        null=True,
+        blank=True,
+        help_text="SNS topic ARN for SES bounce notifications"
+    )
+    sns_topic_complaint_arn = models.CharField(
+        max_length=512,
+        null=True,
+        blank=True,
+        help_text="SNS topic ARN for SES complaint notifications"
+    )
+    sns_topic_delivery_arn = models.CharField(
+        max_length=512,
+        null=True,
+        blank=True,
+        help_text="SNS topic ARN for SES delivery notifications"
+    )
+    sns_topic_inbound_arn = models.CharField(
+        max_length=512,
+        null=True,
+        blank=True,
+        help_text="SNS topic ARN for SES inbound notifications"
+    )
+
+    metadata = models.JSONField(default=dict, blank=True)
+
+    # Computed readiness flags updated by audit runs
+    can_send = models.BooleanField(
+        default=False,
+        help_text="True if outbound sending is ready per last audit"
+    )
+    can_recv = models.BooleanField(
+        default=False,
+        help_text="True if inbound receiving is ready per last audit"
+    )
+
+    class Meta:
+        db_table = "aws_email_domain"
+        indexes = [
+            models.Index(fields=["status"]),
+            models.Index(fields=["modified"]),
+        ]
+        ordering = ["name"]
+
+    class RestMeta:
+        VIEW_PERMS = ["manage_aws"]
+        SAVE_PERMS = ["manage_aws"]
+        DELETE_PERMS = ["manage_aws"]
+        SEARCH_FIELDS = ["name", "region", "status"]
+        GRAPHS = {
+            "basic": {
+                "fields": [
+                    "id",
+                    "name",
+                    "region",
+                    "status",
+                    "receiving_enabled",
+                ]
+            },
+            "default": {
+                "fields": [
+                    "id",
+                    "name",
+                    "region",
+                    "status",
+                    "receiving_enabled",
+                    "s3_inbound_bucket",
+                    "s3_inbound_prefix",
+                    "dns_mode",
+                    "sns_topic_bounce_arn",
+                    "sns_topic_complaint_arn",
+                    "sns_topic_delivery_arn",
+                    "sns_topic_inbound_arn",
+                    "metadata",
+                    "created",
+                    "modified",
+                ],
+                "extra": [
+                    "aws_key",
+                    "aws_secret_masked"
+                ]
+            },
+        }
+
+    @property
+    def aws_key(self):
+        return self.get_secret('aws_key')
+
+    @property
+    def aws_secret(self):
+        return self.get_secret('aws_secret')
+
+    @property
+    def aws_secret_masked(self):
+        secret = self.get_secret('aws_secret', '')
+        if len(secret) > 4:
+            return '*' * (len(secret) - 4) + secret[-4:]
+        return secret
+
+
+    @property
+    def aws_region(self):
+        return self.region or getattr(settings, 'AWS_REGION', 'us-east-1')
+
+    @property
+    def is_verified(self):
+        return self.status in ["verified", "ready"]
+
+    def set_aws_key(self, key):
+        self.set_secret('aws_key', key)
+
+    def set_aws_secret(self, secret):
+        self.set_secret('aws_secret', secret)
+
+    def on_rest_created(self):
+        """
+        Automatically audit and reconcile SES/SNS configuration after this domain is created.
+        This keeps AWS-side resources aligned without requiring a separate call.
+        """
+        try:
+            region = self.aws_region
+            # Audit current state (best-effort; ignore failures)
+            try:
+                desired_receiving = None
+                if self.receiving_enabled and self.s3_inbound_bucket:
+                    desired_receiving = {
+                        'bucket': self.s3_inbound_bucket,
+                        'prefix': self.s3_inbound_prefix or '',
+                        'rule_set': 'mojo-default-receiving',
+                        'rule_name': f'mojo-{self.name}-catchall',
+                    }
+                audit_domain_config(
+                    domain=self.name,
+                    region=region,
+                    desired_receiving=desired_receiving,
+                )
+            except Exception:
+                # Non-fatal: continue with reconcile
+                pass
+
+            # Reconcile (idempotent): ensure topics/mappings and catch-all receipt rule if enabled
+            reconcile_domain_config(
+                domain=self.name,
+                region=region,
+                receiving_enabled=self.receiving_enabled,
+                s3_bucket=self.s3_inbound_bucket,
+                s3_prefix=self.s3_inbound_prefix or '',
+            )
+        except Exception:
+            # Swallow exceptions to avoid failing the create call; details can be inspected via /audit
+            pass
+
+    def __str__(self) -> str:
+        return self.name