diff options
Diffstat (limited to 'services/docker')
25 files changed, 3364 insertions, 7 deletions
diff --git a/services/docker/auto-backup/daemon.bash b/services/docker/auto-backup/daemon.bash index da9f853..c82e2d0 100755 --- a/services/docker/auto-backup/daemon.bash +++ b/services/docker/auto-backup/daemon.bash @@ -15,9 +15,7 @@ success() { echo -e "\033[32mSuccess: " "$@" "\033[0m" } -if [[ -z "$CRUPEST_AUTO_BACKUP_INTERVAL" ]]; then - die "Backup interval not set, please set it!" -fi +[[ -n "$CRUPEST_AUTO_BACKUP_INTERVAL" ]] || die "Backup interval not set, please set it!" note "Checking secrets..." [[ -n "$RCLONE_S3_PROVIDER" ]] || die "S3 provider not set!" diff --git a/services/docker/mail-server/Dockerfile b/services/docker/mail-server/Dockerfile new file mode 100644 index 0000000..4811067 --- /dev/null +++ b/services/docker/mail-server/Dockerfile @@ -0,0 +1,11 @@ +FROM denoland/deno AS deno-build +ADD relay /app/ +WORKDIR /app +RUN deno install +RUN deno task compile + +FROM dovecot/dovecot:latest-root +COPY --from=deno-build /app/out/crupest-relay /app/ +ADD dovecot.conf /etc/dovecot/dovecot.conf +ADD app/* /app/ +CMD ["/app/main.bash"] diff --git a/services/docker/mail-server/app/main.bash b/services/docker/mail-server/app/main.bash new file mode 100755 index 0000000..f57d254 --- /dev/null +++ b/services/docker/mail-server/app/main.bash @@ -0,0 +1,13 @@ +#!/usr/bin/bash + +set -e -o pipefail + +die() { + echo "$@" >&2 + exit 1 +} + +/app/crupest-relay init || die "crupest-relay failed to init." + +/app/crupest-relay real-serve & +/dovecot/sbin/dovecot -F diff --git a/services/docker/mail-server/aws-lambda.js b/services/docker/mail-server/aws-lambda.js new file mode 100644 index 0000000..d240c1a --- /dev/null +++ b/services/docker/mail-server/aws-lambda.js @@ -0,0 +1,23 @@ +export const handler = async (event, context, callback) => { + const sesNotification = event.Records[0].ses; + console.log("SES Notification:\n", JSON.stringify(sesNotification, null, 2)); + + const res = await fetch( + `https://mail.crupest.life/${process.env.CRUPEST_MAIL_SERVER_AWS_INBOUND_PATH}`, + { + method: "POST", + headers: { + "content-type": "application/json", + "Authorization": process.env.CRUPEST_MAIL_SERVER_AWS_INBOUND_KEY, + }, + body: JSON.stringify({ + key: sesNotification.mail.messageId, + recipients: sesNotification.receipt.recipients, + }), + }, + ); + console.log(res); + console.log(res.text()); + + callback(null, { "disposition": "CONTINUE" }); +}; diff --git a/services/docker/mail-server/dovecot.conf b/services/docker/mail-server/dovecot.conf new file mode 100644 index 0000000..5d2eaf4 --- /dev/null +++ b/services/docker/mail-server/dovecot.conf @@ -0,0 +1,197 @@ +dovecot_config_version = 2.4.1 +dovecot_storage_version = 2.4.0 + +base_dir = /run/dovecot +state_dir = /run/dovecot +log_path = /dev/stdout + +protocols = imap submission lmtp sieve +sendmail_path = /app/out/crupest-relay sendmail +submission_relay_host = 127.0.0.1 +submission_relay_port = 2346 +submission_relay_trusted = yes + +mail_driver = maildir +mail_home = /data/vmail/%{user | domain}/%{user | username} +mail_path = ~/mail +mail_log_events = delete undelete expunge save copy mailbox_create mailbox_delete mailbox_rename flag_change + +# Setup default mailboxes for inbox namespace +@mailbox_defaults = english + +namespace inbox { + mailbox Archive { + special_use = "\\Archive" + } +} + +mail_plugins { + fts = yes + fts_flatcurve = yes + mail_log = yes + notify = yes +} + +fts_autoindex = yes +fts_autoindex_max_recent_msgs = 999 +fts_search_add_missing = yes +language_filters = normalizer-icu snowball stopwords + +language_tokenizers = generic email-address +language_tokenizer_generic_algorithm = simple + +language en { + default = yes + filters = lowercase snowball english-possessive stopwords +} + +fts flatcurve { + substring_search = yes +} + +auth_mechanisms = plain login + +passdb passwd-file { + passwd_file_path = /data/userdb + default_password_scheme = SHA512-CRYPT +} + +userdb passwd-file { + passwd_file_path = /data/userdb + fields { + uid:default = vmail + gid:default = vmail + home:default = /data/vmail/%{user | domain}/%{user | username} + } +} + +ssl = yes +ssl_server { + cert_file = /etc/dovecot/ssl/tls.crt + key_file = /etc/dovecot/ssl/tls.key +} + +protocol imap { + mail_plugins { + imap_sieve = yes + imap_filter_sieve = yes + } +} + +protocol lmtp { + mail_plugins { + sieve = yes + } +} + +protocol lda { + mail_plugins { + sieve = yes + } +} + +service imap-login { + process_min_avail = 1 + client_limit = 100 +} + +service pop3-login { + process_min_avail = 1 + client_limit = 100 +} + +service submission-login { + process_min_avail = 1 + client_limit = 100 + + inet_listener submissions { + port = 465 + ssl = yes + } +} + +service managesieve-login { + process_min_avail = 1 + client_limit = 100 +} + +sieve_plugins = sieve_imapsieve sieve_extprograms + +event_exporter log { + format = json + time_format = rfc3339 +} + +# Add default backend metrics +@metric_defaults = backend + +# Log auth failures +metric auth_failures { + filter = event=auth_request_finished AND NOT success=yes + exporter = log +} + +metric imap_command { + filter = event=imap_command_finished + group_by cmd_name { + method discrete { + } + } + group_by tagged_reply_state { + method discrete { + } + } +} + +metric smtp_command { + filter = event=smtp_server_command_finished and protocol=submission + group_by cmd_name { + method discrete { + } + } + group_by status_code { + method discrete { + } + } + group_by duration { + method exponential { + base = 10 + min_magnitude = 1 + max_magnitude = 5 + } + } +} + +metric lmtp_command { + filter = event=smtp_server_command_finished and protocol=lmtp + group_by cmd_name { + method discrete { + } + } + group_by status_code { + method discrete { + } + } + group_by duration { + method exponential { + base = 10 + min_magnitude = 1 + max_magnitude = 5 + } + } +} + +# Add duration metrics for deliveries +metric mail_deliveries { + filter = event=mail_delivery_finished + group_by duration { + method exponential { + base = 10 + min_magnitude = 1 + max_magnitude = 5 + } + } +} + +!include_try vendor.d/*.conf +!include_try conf.d/*.conf diff --git a/services/docker/mail-server/relay/.gitignore b/services/docker/mail-server/relay/.gitignore new file mode 100644 index 0000000..6129c3d --- /dev/null +++ b/services/docker/mail-server/relay/.gitignore @@ -0,0 +1,4 @@ +out +.env.local +db.sqlite +test-mail.txt diff --git a/services/docker/mail-server/relay/app.ts b/services/docker/mail-server/relay/app.ts new file mode 100644 index 0000000..87a4d77 --- /dev/null +++ b/services/docker/mail-server/relay/app.ts @@ -0,0 +1,78 @@ +import { join } from "@std/path"; +import { Hono } from "hono"; +import { logger as honoLogger } from "hono/logger"; + +import log from "./log.ts"; +import config from "./config.ts"; +import { DbService } from "./db.ts"; +import { + AliasRecipientMailHook, + FallbackRecipientHook, + MailDeliverer, +} from "./mail.ts"; +import { DovecotMailDeliverer } from "./dovecot.ts"; +import { CronTask, CronTaskConfig } from "./cron.ts"; +import { DumbSMTPServer as DumbSmtpServer } from "./dumb-smtp-server.ts"; + +export abstract class AppBase { + protected readonly db: DbService; + protected readonly crons: CronTask[] = []; + protected readonly routes: Hono[] = []; + protected readonly inboundDeliverer: MailDeliverer; + protected readonly hono = new Hono(); + + protected abstract readonly outboundDeliverer: MailDeliverer; + + constructor() { + const dataPath = config.get("dataPath"); + Deno.mkdirSync(dataPath, { recursive: true }); + log.path = join(dataPath, "log"); + log.info(config); + + this.db = new DbService(join(dataPath, "db.sqlite")); + this.inboundDeliverer = new DovecotMailDeliverer(); + this.inboundDeliverer.preHooks.push( + new FallbackRecipientHook(new Set(config.getList("inboundFallback"))), + new AliasRecipientMailHook(join(dataPath, "aliases.csv")), + ); + + this.hono.onError((err, c) => { + log.error(err); + return c.json({ msg: "Server error, check its log." }, 500); + }); + + this.hono.use(honoLogger()); + this.hono.post("/send/raw", async (context) => { + const body = await context.req.text(); + if (body.trim().length === 0) { + return context.json({ msg: "Can't send an empty mail" }, 400); + } else { + const mail = await this.outboundDeliverer.deliverRaw(body); + return context.json({ + messageId: mail.messageId, + awsMessageId: mail.awsMessageId, + }); + } + }); + this.hono.post("/receive/raw", async (context) => { + await this.inboundDeliverer.deliverRaw(await context.req.text()); + return context.json({ "msg": "Done!" }); + }); + } + + createCron(config: CronTaskConfig): CronTask { + const cron = new CronTask(config); + this.crons.push(cron); + return cron; + } + + serve(): { smtp: DumbSmtpServer; http: Deno.HttpServer } { + const smtp = new DumbSmtpServer(this.outboundDeliverer); + smtp.serve(); + const http = Deno.serve({ + hostname: config.HTTP_HOST, + port: config.HTTP_PORT, + }, this.hono.fetch); + return { smtp, http }; + } +} diff --git a/services/docker/mail-server/relay/aws/app.ts b/services/docker/mail-server/relay/aws/app.ts new file mode 100644 index 0000000..9135d21 --- /dev/null +++ b/services/docker/mail-server/relay/aws/app.ts @@ -0,0 +1,124 @@ +import { parseArgs } from "@std/cli"; +import { z } from "zod"; +import { zValidator } from "@hono/zod-validator"; + +import log from "../log.ts"; +import config from "../config.ts"; +import { AppBase } from "../app.ts"; +import { AwsContext } from "./context.ts"; +import { AwsMailDeliverer } from "./deliver.ts"; +import { AwsMailRetriever } from "./retriever.ts"; + +export class AwsRelayApp extends AppBase { + readonly #aws = new AwsContext(); + readonly #retriever; + protected readonly outboundDeliverer = new AwsMailDeliverer(this.#aws); + + constructor() { + super(); + this.#retriever = new AwsMailRetriever(this.#aws, this.inboundDeliverer); + + this.hono.post( + `/${config.get("awsInboundPath")}`, + async (ctx, next) => { + const auth = ctx.req.header("Authorization"); + if (auth !== config.get("awsInboundKey")) { + return ctx.json({ "msg": "Bad auth!" }, 403); + } + await next(); + }, + zValidator( + "json", + z.object({ + key: z.string(), + recipients: z.array(z.string()).optional(), + }), + ), + async (ctx) => { + const { key, recipients } = ctx.req.valid("json"); + await this.#retriever.deliverS3Mail(key, recipients); + return ctx.json({ "msg": "Done!" }); + }, + ); + } + + realServe() { + this.createCron({ + name: "live-mail-recycler", + interval: 6 * 3600 * 1000, + callback: () => { + return this.#retriever.recycleLiveMails(); + }, + startNow: true, + }); + + return this.serve(); + } + + readonly cli = { + "init": (_: unknown) => { + log.info("Just init!"); + return Promise.resolve(); + }, + "list-lives": async (_: unknown) => { + const liveMails = await this.#retriever.listLiveMails(); + log.info(`Total ${liveMails.length}:`); + log.info(liveMails.join("\n")); + }, + "recycle-lives": async (_: unknown) => { + await this.#retriever.recycleLiveMails(); + }, + "serve": async (_: unknown) => { + await this.serve().http.finished; + }, + "real-serve": async (_: unknown) => { + await this.realServe().http.finished; + }, + } as const; +} + +const nonServerCli = { + "sendmail": async (_: unknown) => { + const decoder = new TextDecoder(); + let text = ""; + for await (const chunk of Deno.stdin.readable) { + text += decoder.decode(chunk); + } + + const res = await fetch( + `http://localhost:${config.HTTP_PORT}/send/raw`, + { + method: "post", + body: text, + }, + ); + log.infoOrError(!res.ok, res); + log.infoOrError(!res.ok, "Body\n" + await res.text()); + if (!res.ok) Deno.exit(-1); + }, +} as const; + +if (import.meta.main) { + const args = parseArgs(Deno.args); + + if (args._.length === 0) { + throw new Error("You must specify a command."); + } + + const command = args._[0]; + + if (command in nonServerCli) { + log.info(`Run non-server command ${command}.`); + await nonServerCli[command as keyof typeof nonServerCli](args); + Deno.exit(0); + } + + const app = new AwsRelayApp(); + if (command in app.cli) { + log.info(`Run command ${command}.`); + await app.cli[command as keyof AwsRelayApp["cli"]](args); + Deno.exit(0); + } else { + throw new Error(command + " is not a valid command."); + } +} diff --git a/services/docker/mail-server/relay/aws/context.ts b/services/docker/mail-server/relay/aws/context.ts new file mode 100644 index 0000000..b1e0336 --- /dev/null +++ b/services/docker/mail-server/relay/aws/context.ts @@ -0,0 +1,41 @@ +import { + CopyObjectCommand, + DeleteObjectCommand, + S3Client, +} from "@aws-sdk/client-s3"; +import { FetchHttpHandler } from "@smithy/fetch-http-handler"; + +import config from "../config.ts"; + +export class AwsContext { + readonly credentials = () => + Promise.resolve({ + accessKeyId: config.get("awsUser"), + secretAccessKey: config.get("awsPassword"), + }); + readonly requestHandler = new FetchHttpHandler(); + + get region() { + return config.get("awsRegion"); + } +} + +export async function s3MoveObject( + client: S3Client, + bucket: string, + path: string, + newPath: string, +): Promise<void> { + const copyCommand = new CopyObjectCommand({ + Bucket: bucket, + Key: newPath, + CopySource: `${bucket}/${path}`, + }); + await client.send(copyCommand); + + const deleteCommand = new DeleteObjectCommand({ + Bucket: bucket, + Key: path, + }); + await client.send(deleteCommand); +} diff --git a/services/docker/mail-server/relay/aws/deliver.ts b/services/docker/mail-server/relay/aws/deliver.ts new file mode 100644 index 0000000..9c62496 --- /dev/null +++ b/services/docker/mail-server/relay/aws/deliver.ts @@ -0,0 +1,52 @@ +import { SendEmailCommand, SESv2Client } from "@aws-sdk/client-sesv2"; + +import { AwsContext } from "./context.ts"; +import { + Mail, + MailDeliverContext, + MailDeliverer, + MailDeliverRecipientResult, +} from "./mail.ts"; +import log from "../log.ts"; + +export class AwsMailDeliverer extends MailDeliverer { + readonly name = "aws"; + readonly #ses; + + constructor(aws: AwsContext) { + super(); + this.#ses = new SESv2Client(aws); + } + + protected override async doDeliver( + mail: Mail, + context: MailDeliverContext, + ): Promise<void> { + log.info("Begin to call aws send-email api..."); + + const result: MailDeliverRecipientResult = { + kind: "done", + message: "Success to call send-email api of aws.", + }; + + try { + const sendCommand = new SendEmailCommand({ + Content: { + Raw: { Data: mail.toUtf8Bytes() }, + }, + }); + + const res = await this.#ses.send(sendCommand); + if (res.MessageId == null) { + log.warn("Aws send-email returns no message id."); + } + mail.awsMessageId = res.MessageId; + } catch (cause) { + result.kind = "fail"; + result.message = "An error was thrown when calling aws send-email." + + cause; + result.cause = cause; + } + context.result.set("*", result); + } +} diff --git a/services/docker/mail-server/relay/aws/mail.ts b/services/docker/mail-server/relay/aws/mail.ts new file mode 100644 index 0000000..a0f2639 --- /dev/null +++ b/services/docker/mail-server/relay/aws/mail.ts @@ -0,0 +1,7 @@ +export * from "../mail.ts"; + +declare module "../mail.ts" { + interface Mail { + awsMessageId?: string; + } +} diff --git a/services/docker/mail-server/relay/aws/retriever.ts b/services/docker/mail-server/relay/aws/retriever.ts new file mode 100644 index 0000000..daa3d8c --- /dev/null +++ b/services/docker/mail-server/relay/aws/retriever.ts @@ -0,0 +1,100 @@ +/// <reference types="npm:@types/node" /> + +import { + GetObjectCommand, + ListObjectsV2Command, + S3Client, +} from "@aws-sdk/client-s3"; + +import log from "../log.ts"; +import config from "../config.ts"; +import "../better-js.ts"; + +import { Mail, MailDeliverer } from "../mail.ts"; +import { AwsContext, s3MoveObject } from "./context.ts"; + +const AWS_SES_S3_SETUP_TAG = "AMAZON_SES_SETUP_NOTIFICATION"; + +export class AwsMailRetriever { + readonly liveMailPrefix = "mail/live/"; + readonly archiveMailPrefix = "mail/archive/"; + readonly mailBucket = config.get("awsMailBucket"); + + readonly #s3; + + constructor( + aws: AwsContext, + public readonly inboundDeliverer: MailDeliverer, + ) { + this.#s3 = new S3Client(aws); + } + + async listLiveMails(): Promise<string[]> { + log.info("Begin to retrieve live mails."); + + const listCommand = new ListObjectsV2Command({ + Bucket: this.mailBucket, + Prefix: this.liveMailPrefix, + }); + const res = await this.#s3.send(listCommand); + + if (res.Contents == null) { + log.warn("Listing live mails in S3 returns null Content."); + return []; + } + + const result: string[] = []; + for (const object of res.Contents) { + if (object.Key == null) { + log.warn("Listing live mails in S3 returns an object with no Key."); + continue; + } + + if (object.Key.endsWith(AWS_SES_S3_SETUP_TAG)) continue; + + result.push(object.Key.slice(this.liveMailPrefix.length)); + } + return result; + } + + async deliverS3Mail(s3Key: string, recipients: string[] = []) { + log.info(`Begin to deliver s3 mail ${s3Key} to ${recipients.join(" ")}...`); + + log.info(`Fetching s3 mail ${s3Key}...`); + const mailPath = `${this.liveMailPrefix}${s3Key}`; + const command = new GetObjectCommand({ + Bucket: this.mailBucket, + Key: mailPath, + }); + const res = await this.#s3.send(command); + + if (res.Body == null) { + throw new Error("S3 mail returns a null body."); + } + + const rawMail = await res.Body.transformToString(); + log.info(`Done fetching s3 mail ${s3Key}.`); + + log.info(`Delivering s3 mail ${s3Key}...`); + const mail = new Mail(rawMail); + await this.inboundDeliverer.deliver({ mail, recipients: recipients }); + log.info(`Done delivering s3 mail ${s3Key}.`); + + const date = mail.date ?? mail.simpleParseDate(); + const dateString = date?.toFileNameString(true) ?? "invalid-date"; + const newPath = `${this.archiveMailPrefix}${dateString}/${s3Key}`; + + log.info(`Archiving s3 mail ${s3Key} to ${newPath}...`); + await s3MoveObject(this.#s3, this.mailBucket, mailPath, newPath); + log.info(`Done delivering s3 mail ${s3Key}...`); + } + + async recycleLiveMails() { + log.info("Begin to recycle live mails..."); + const mails = await this.listLiveMails(); + log.info(`Found ${mails.length} live mails`); + for (const s3Key of mails) { + await this.deliverS3Mail(s3Key); + } + } +} diff --git a/services/docker/mail-server/relay/better-js.ts b/services/docker/mail-server/relay/better-js.ts new file mode 100644 index 0000000..a23dd0b --- /dev/null +++ b/services/docker/mail-server/relay/better-js.ts @@ -0,0 +1,14 @@ +declare global { + interface Date { + toFileNameString(dateOnly?: boolean): string; + } +} + +Object.defineProperty(Date.prototype, "toFileNameString", { + value: function (dateOnly?: boolean) { + const str = (this as Date).toISOString(); + return dateOnly === true + ? str.slice(0, str.indexOf("T")) + : str.replaceAll(/:|\./g, "-"); + }, +}); diff --git a/services/docker/mail-server/relay/config.ts b/services/docker/mail-server/relay/config.ts new file mode 100644 index 0000000..d58b163 --- /dev/null +++ b/services/docker/mail-server/relay/config.ts @@ -0,0 +1,103 @@ +export const APP_PREFIX = "crupest"; +export const APP_NAME = "mail-server"; + +export interface ConfigItemDefinition { + description: string; + default?: string; + secret?: boolean; +} + +export const CONFIG_DEFINITIONS = { + mailDomain: { + description: "the part after `@` of an address", + }, + dataPath: { + description: "path to save app persistent data", + }, + ldaPath: { + description: "full path of lda executable", + "default": "/dovecot/libexec/dovecot/dovecot-lda", + }, + inboundFallback: { + description: "comma separated addresses used as fallback recipients", + "default": "", + }, + awsInboundPath: { + description: "(random set) path for aws sns", + }, + awsInboundKey: { + description: "(random set) http header Authorization for aws sns", + }, + awsRegion: { + description: "aws region", + }, + awsUser: { + description: "aws access key id", + }, + awsPassword: { + description: "aws secret access key", + secret: true, + }, + awsMailBucket: { + description: "aws s3 bucket saving raw mails", + secret: true, + }, +} as const satisfies Record<string, ConfigItemDefinition>; + +type ConfigDefinitions = typeof CONFIG_DEFINITIONS; +type ConfigNames = keyof ConfigDefinitions; +type ConfigMap = { + [K in ConfigNames]: ConfigDefinitions[K] & { + readonly env: string; + readonly value: string; + }; +}; + +function resolveConfig(): ConfigMap { + const result: Record<string, ConfigMap[ConfigNames]> = {}; + for (const [name, def] of Object.entries(CONFIG_DEFINITIONS)) { + const env = `${APP_PREFIX}-${APP_NAME}-${ + name.replace(/[A-Z]/g, (m) => "-" + m.toLowerCase()) + }`.replaceAll("-", "_").toUpperCase(); + const value = Deno.env.get(env) ?? (def as ConfigItemDefinition).default; + if (value == null) { + throw new Error(`Required env ${env} (${def.description}) is not set.`); + } + result[name] = { ...def, env, value }; + } + return result as ConfigMap; +} + +export class Config { + #config = resolveConfig(); + + readonly HTTP_HOST = "0.0.0.0"; + readonly HTTP_PORT = 2345; + readonly SMTP_HOST = "127.0.0.1"; + readonly SMTP_PORT = 2346; + + getAllConfig<K extends ConfigNames>(key: K): ConfigMap[K] { + return this.#config[key]; + } + + get(key: ConfigNames): string { + return this.getAllConfig(key).value; + } + + getList(key: ConfigNames, separator: string = ","): string[] { + const value = this.get(key); + if (value.length === 0) return []; + return value.split(separator); + } + + [Symbol.for("Deno.customInspect")]() { + return Object.entries(this.#config).map(([key, item]) => + `${key} [env: ${item.env}]: ${ + (item as ConfigItemDefinition).secret === true ? "***" : item.value + }` + ).join("\n"); + } +} + +const config = new Config(); +export default config; diff --git a/services/docker/mail-server/relay/cron.ts b/services/docker/mail-server/relay/cron.ts new file mode 100644 index 0000000..bf0a0be --- /dev/null +++ b/services/docker/mail-server/relay/cron.ts @@ -0,0 +1,43 @@ +export type CronCallback = (task: CronTask) => Promise<void>; + +export interface CronTaskConfig { + readonly name: string; + readonly interval: number; + readonly callback: CronCallback; + readonly startNow?: boolean; +} + +export class CronTask { + #timerTag: number | null = null; + + constructor(public readonly config: CronTaskConfig) { + if (config.interval <= 0) { + throw new Error("Cron task interval must be positive."); + } + + if (config.startNow === true) { + this.start(); + } + } + + get running(): boolean { + return this.#timerTag != null; + } + + start() { + if (this.#timerTag == null) { + this.#timerTag = setInterval( + this.config.callback, + this.config.interval, + this, + ); + } + } + + stop() { + if (this.#timerTag != null) { + clearInterval(this.#timerTag); + this.#timerTag = null; + } + } +} diff --git a/services/docker/mail-server/relay/db.test.ts b/services/docker/mail-server/relay/db.test.ts new file mode 100644 index 0000000..eef3e1b --- /dev/null +++ b/services/docker/mail-server/relay/db.test.ts @@ -0,0 +1,24 @@ +import { describe, it } from "@std/testing/bdd"; +import { expect } from "@std/expect/expect"; + +import { DbService } from "./db.ts"; + +describe("DbService", () => { + const mockRow = { + message_id: "mock-message-id@mock.mock", + aws_message_id: "mock-aws-message-id@mock.mock", + raw: "a mock raw mail content", + }; + + it("works", async () => { + const db = new DbService(":memory:"); + await db.migrate(); + await db.addMail(mockRow); + expect(await db.messageIdToAws(mockRow.message_id)).toBe( + mockRow.aws_message_id, + ); + expect(await db.messageIdFromAws(mockRow.aws_message_id)).toBe( + mockRow.message_id, + ); + }); +}); diff --git a/services/docker/mail-server/relay/db.ts b/services/docker/mail-server/relay/db.ts new file mode 100644 index 0000000..ee8bad1 --- /dev/null +++ b/services/docker/mail-server/relay/db.ts @@ -0,0 +1,179 @@ +// spellchecker: words kysely insertable updateable introspector + +import { + Generated, + Insertable, + Kysely, + Migration, + Migrator, + SqliteDatabase, + SqliteDialect, + SqliteStatement, +} from "kysely"; +import * as sqlite from "@db/sqlite"; + +class SqliteStatementAdapter implements SqliteStatement { + constructor(public readonly stmt: sqlite.Statement) {} + + get reader(): boolean { + return this.stmt.columnNames().length >= 1; + } + + all(parameters: readonly unknown[]): unknown[] { + return this.stmt.all(...parameters as sqlite.BindValue[]); + } + + iterate(parameters: readonly unknown[]): IterableIterator<unknown> { + return this.stmt.iter(...parameters as sqlite.BindValue[]); + } + + run( + parameters: readonly unknown[], + ): { changes: number | bigint; lastInsertRowid: number | bigint } { + const { db } = this.stmt; + const totalChangesBefore = db.totalChanges; + const changes = this.stmt.run(...parameters as sqlite.BindValue[]); + return { + changes: totalChangesBefore === db.totalChanges ? 0 : changes, + lastInsertRowid: db.lastInsertRowId, + }; + } +} + +class SqliteDatabaseAdapter implements SqliteDatabase { + constructor(public readonly db: sqlite.Database) {} + + prepare(sql: string): SqliteStatementAdapter { + return new SqliteStatementAdapter(this.db.prepare(sql)); + } + + close(): void { + this.db.close(); + } +} + +export class DbError extends Error { +} + +const NAMES = { + mail: { + table: "mail", + columns: { + id: "id", + messageId: "message_id", + awsMessageId: "aws_message_id", + date: "date", + raw: "raw", + }, + }, +} as const; + +interface MailTable { + [NAMES.mail.columns.id]: Generated<number>; + [NAMES.mail.columns.messageId]: string; + [NAMES.mail.columns.awsMessageId]: string | null; + [NAMES.mail.columns.date]: string | null; + [NAMES.mail.columns.raw]: string; +} + +interface Database { + [NAMES.mail.table]: MailTable; +} + +const migrations: Record<string, Migration> = { + "0001-init": { + // deno-lint-ignore no-explicit-any + async up(db: Kysely<any>): Promise<void> { + await db.schema + .createTable(NAMES.mail.table) + .addColumn( + NAMES.mail.columns.id, + "integer", + (col) => col.primaryKey().autoIncrement(), + ) + .addColumn( + NAMES.mail.columns.messageId, + "text", + (col) => col.notNull().unique(), + ) + .addColumn( + NAMES.mail.columns.awsMessageId, + "text", + (col) => col.unique(), + ) + .addColumn(NAMES.mail.columns.date, "text") + .addColumn(NAMES.mail.columns.raw, "text", (col) => col.notNull()) + .execute(); + + for ( + const column of [ + NAMES.mail.columns.messageId, + NAMES.mail.columns.awsMessageId, + ] + ) { + await db.schema + .createIndex(`${NAMES.mail.table}_${column}`) + .on(NAMES.mail.table) + .column(column) + .execute(); + } + }, + + // deno-lint-ignore no-explicit-any + async down(db: Kysely<any>): Promise<void> { + await db.schema.dropTable(NAMES.mail.table).execute(); + }, + }, +}; + +export class DbService { + #db; + #kysely; + #migrator; + + constructor(public readonly path: string) { + this.#db = new sqlite.Database(path); + this.#kysely = new Kysely<Database>({ + dialect: new SqliteDialect( + { database: new SqliteDatabaseAdapter(this.#db) }, + ), + }); + this.#migrator = new Migrator({ + db: this.#kysely, + provider: { + getMigrations(): Promise<Record<string, Migration>> { + return Promise.resolve(migrations); + }, + }, + }); + } + + async migrate(): Promise<void> { + await this.#migrator.migrateToLatest(); + } + + async addMail(mail: Insertable<MailTable>): Promise<number> { + const inserted = await this.#kysely.insertInto(NAMES.mail.table).values( + mail, + ).executeTakeFirstOrThrow(); + return Number(inserted.insertId!); + } + + async messageIdToAws(messageId: string): Promise<string | null> { + const row = await this.#kysely.selectFrom(NAMES.mail.table).where( + NAMES.mail.columns.messageId, + "=", + messageId, + ).select(NAMES.mail.columns.awsMessageId).executeTakeFirst(); + return row?.aws_message_id ?? null; + } + + async messageIdFromAws(awsMessageId: string): Promise<string | null> { + const row = await this.#kysely.selectFrom(NAMES.mail.table).where( + NAMES.mail.columns.awsMessageId, + "=", + awsMessageId, + ).select(NAMES.mail.columns.messageId).executeTakeFirst(); + return row?.message_id ?? null; + } +} diff --git a/services/docker/mail-server/relay/deno.json b/services/docker/mail-server/relay/deno.json new file mode 100644 index 0000000..9208126 --- /dev/null +++ b/services/docker/mail-server/relay/deno.json @@ -0,0 +1,26 @@ +{ + "unstable": [ "cron" ], + "tasks": { + "run": "deno run -A aws/app.ts", + "test": "deno test -A", + "compile": "deno compile -o out/crupest-relay -A aws/app.ts" + }, + "imports": { + "@aws-sdk/client-s3": "npm:@aws-sdk/client-s3@^3.797.0", + "@aws-sdk/client-sesv2": "npm:@aws-sdk/client-sesv2@^3.782.0", + "@db/sqlite": "jsr:@db/sqlite@^0.12.0", + "@hono/zod-validator": "npm:@hono/zod-validator@^0.5.0", + "@smithy/fetch-http-handler": "npm:@smithy/fetch-http-handler@^5.0.4", + "@std/cli": "jsr:@std/cli@^1.0.17", + "@std/csv": "jsr:@std/csv@^1.0.6", + "@std/encoding": "jsr:@std/encoding@^1.0.10", + "@std/expect": "jsr:@std/expect@^1.0.16", + "@std/io": "jsr:@std/io@^0.225.2", + "@std/path": "jsr:@std/path@^1.0.9", + "@std/testing": "jsr:@std/testing@^1.0.12", + "email-addresses": "npm:email-addresses@^5.0.0", + "hono": "npm:hono@^4.7.10", + "kysely": "npm:kysely@^0.28.2", + "zod": "npm:zod@^3.25.20" + } +} diff --git a/services/docker/mail-server/relay/deno.lock b/services/docker/mail-server/relay/deno.lock new file mode 100644 index 0000000..19293f4 --- /dev/null +++ b/services/docker/mail-server/relay/deno.lock @@ -0,0 +1,1555 @@ +{ + "version": "5", + "specifiers": { + "jsr:@db/sqlite@0.12": "0.12.0", + "jsr:@denosaurs/plug@1": "1.1.0", + "jsr:@std/assert@0.217": "0.217.0", + "jsr:@std/assert@1": "1.0.13", + "jsr:@std/assert@^1.0.13": "1.0.13", + "jsr:@std/async@^1.0.13": "1.0.13", + "jsr:@std/bytes@^1.0.5": "1.0.6", + "jsr:@std/cli@^1.0.17": "1.0.17", + "jsr:@std/csv@^1.0.6": "1.0.6", + "jsr:@std/data-structures@^1.0.8": "1.0.8", + "jsr:@std/encoding@1": "1.0.10", + "jsr:@std/encoding@^1.0.10": "1.0.10", + "jsr:@std/expect@^1.0.16": "1.0.16", + "jsr:@std/fmt@1": "1.0.8", + "jsr:@std/fs@1": "1.0.17", + "jsr:@std/fs@^1.0.17": "1.0.17", + "jsr:@std/internal@^1.0.6": "1.0.7", + "jsr:@std/internal@^1.0.7": "1.0.7", + "jsr:@std/io@~0.225.2": "0.225.2", + "jsr:@std/path@0.217": "0.217.0", + "jsr:@std/path@1": "1.0.9", + "jsr:@std/path@^1.0.9": "1.0.9", + "jsr:@std/streams@^1.0.9": "1.0.9", + "jsr:@std/testing@^1.0.12": "1.0.12", + "npm:@aws-sdk/client-s3@^3.797.0": "3.797.0", + "npm:@aws-sdk/client-sesv2@^3.782.0": "3.782.0", + "npm:@hono/zod-validator@0.5": "0.5.0_hono@4.7.10_zod@3.25.20", + "npm:@smithy/fetch-http-handler@^5.0.4": "5.0.4", + "npm:@types/node@*": "22.15.15", + "npm:email-addresses@5": "5.0.0", + "npm:hono@^4.7.10": "4.7.10", + "npm:kysely@~0.28.2": "0.28.2", + "npm:zod@^3.25.20": "3.25.20" + }, + "jsr": { + "@db/sqlite@0.12.0": { + "integrity": "dd1ef7f621ad50fc1e073a1c3609c4470bd51edc0994139c5bf9851de7a6d85f", + "dependencies": [ + "jsr:@denosaurs/plug", + "jsr:@std/path@0.217" + ] + }, + "@denosaurs/plug@1.1.0": { + "integrity": "eb2f0b7546c7bca2000d8b0282c54d50d91cf6d75cb26a80df25a6de8c4bc044", + "dependencies": [ + "jsr:@std/encoding@1", + "jsr:@std/fmt", + "jsr:@std/fs@1", + "jsr:@std/path@1" + ] + }, + "@std/assert@0.217.0": { + "integrity": "c98e279362ca6982d5285c3b89517b757c1e3477ee9f14eb2fdf80a45aaa9642" + }, + "@std/assert@1.0.13": { + "integrity": "ae0d31e41919b12c656c742b22522c32fb26ed0cba32975cb0de2a273cb68b29", + "dependencies": [ + "jsr:@std/internal@^1.0.6" + ] + }, + "@std/async@1.0.13": { + "integrity": "1d76ca5d324aef249908f7f7fe0d39aaf53198e5420604a59ab5c035adc97c96" + }, + "@std/bytes@1.0.6": { + "integrity": "f6ac6adbd8ccd99314045f5703e23af0a68d7f7e58364b47d2c7f408aeb5820a" + }, + "@std/cli@1.0.17": { + "integrity": "e15b9abe629e17be90cc6216327f03a29eae613365f1353837fa749aad29ce7b" + }, + "@std/csv@1.0.6": { + "integrity": "52ef0e62799a0028d278fa04762f17f9bd263fad9a8e7f98c14fbd371d62d9fd", + "dependencies": [ + "jsr:@std/streams" + ] + }, + "@std/data-structures@1.0.8": { + "integrity": "2fb7219247e044c8fcd51341788547575653c82ae2c759ff209e0263ba7d9b66" + }, + "@std/encoding@1.0.10": { + "integrity": "8783c6384a2d13abd5e9e87a7ae0520a30e9f56aeeaa3bdf910a3eaaf5c811a1" + }, + "@std/expect@1.0.16": { + "integrity": "ceeef6dda21f256a5f0f083fcc0eaca175428b523359a9b1d9b3a1df11cc7391", + "dependencies": [ + "jsr:@std/assert@^1.0.13", + "jsr:@std/internal@^1.0.7" + ] + }, + "@std/fmt@1.0.8": { + "integrity": "71e1fc498787e4434d213647a6e43e794af4fd393ef8f52062246e06f7e372b7" + }, + "@std/fs@1.0.17": { + "integrity": "1c00c632677c1158988ef7a004cb16137f870aafdb8163b9dce86ec652f3952b", + "dependencies": [ + "jsr:@std/path@^1.0.9" + ] + }, + "@std/internal@1.0.7": { + "integrity": "39eeb5265190a7bc5d5591c9ff019490bd1f2c3907c044a11b0d545796158a0f" + }, + "@std/io@0.225.2": { + "integrity": "3c740cd4ee4c082e6cfc86458f47e2ab7cb353dc6234d5e9b1f91a2de5f4d6c7", + "dependencies": [ + "jsr:@std/bytes" + ] + }, + "@std/path@0.217.0": { + "integrity": "1217cc25534bca9a2f672d7fe7c6f356e4027df400c0e85c0ef3e4343bc67d11", + "dependencies": [ + "jsr:@std/assert@0.217" + ] + }, + "@std/path@1.0.9": { + "integrity": "260a49f11edd3db93dd38350bf9cd1b4d1366afa98e81b86167b4e3dd750129e" + }, + "@std/streams@1.0.9": { + "integrity": "a9d26b1988cdd7aa7b1f4b51e1c36c1557f3f252880fa6cc5b9f37078b1a5035" + }, + "@std/testing@1.0.12": { + "integrity": "fec973a45ccc62c540fb89296199051fee142409138fd6e3eae409366bcd4720", + "dependencies": [ + "jsr:@std/assert@^1.0.13", + "jsr:@std/async", + "jsr:@std/data-structures", + "jsr:@std/fs@^1.0.17", + "jsr:@std/internal@^1.0.7", + "jsr:@std/path@^1.0.9" + ] + } + }, + "npm": { + "@aws-crypto/crc32@5.2.0": { + "integrity": "sha512-nLbCWqQNgUiwwtFsen1AdzAtvuLRsQS8rYgMuxCrdKf9kOssamGLuPwyTY9wyYblNr9+1XM8v6zoDTPPSIeANg==", + "dependencies": [ + "@aws-crypto/util", + "@aws-sdk/types", + "tslib" + ] + }, + "@aws-crypto/crc32c@5.2.0": { + "integrity": "sha512-+iWb8qaHLYKrNvGRbiYRHSdKRWhto5XlZUEBwDjYNf+ly5SVYG6zEoYIdxvf5R3zyeP16w4PLBn3rH1xc74Rag==", + "dependencies": [ + "@aws-crypto/util", + "@aws-sdk/types", + "tslib" + ] + }, + "@aws-crypto/sha1-browser@5.2.0": { + "integrity": "sha512-OH6lveCFfcDjX4dbAvCFSYUjJZjDr/3XJ3xHtjn3Oj5b9RjojQo8npoLeA/bNwkOkrSQ0wgrHzXk4tDRxGKJeg==", + "dependencies": [ + "@aws-crypto/supports-web-crypto", + "@aws-crypto/util", + "@aws-sdk/types", + "@aws-sdk/util-locate-window", + "@smithy/util-utf8@2.3.0", + "tslib" + ] + }, + "@aws-crypto/sha256-browser@5.2.0": { + "integrity": "sha512-AXfN/lGotSQwu6HNcEsIASo7kWXZ5HYWvfOmSNKDsEqC4OashTp8alTmaz+F7TC2L083SFv5RdB+qU3Vs1kZqw==", + "dependencies": [ + "@aws-crypto/sha256-js", + "@aws-crypto/supports-web-crypto", + "@aws-crypto/util", + "@aws-sdk/types", + "@aws-sdk/util-locate-window", + "@smithy/util-utf8@2.3.0", + "tslib" + ] + }, + "@aws-crypto/sha256-js@5.2.0": { + "integrity": "sha512-FFQQyu7edu4ufvIZ+OadFpHHOt+eSTBaYaki44c+akjg7qZg9oOQeLlk77F6tSYqjDAFClrHJk9tMf0HdVyOvA==", + "dependencies": [ + "@aws-crypto/util", + "@aws-sdk/types", + "tslib" + ] + }, + "@aws-crypto/supports-web-crypto@5.2.0": { + "integrity": "sha512-iAvUotm021kM33eCdNfwIN//F77/IADDSs58i+MDaOqFrVjZo9bAal0NK7HurRuWLLpF1iLX7gbWrjHjeo+YFg==", + "dependencies": [ + "tslib" + ] + }, + "@aws-crypto/util@5.2.0": { + "integrity": "sha512-4RkU9EsI6ZpBve5fseQlGNUWKMa1RLPQ1dnjnQoe07ldfIzcsGb5hC5W0Dm7u423KWzawlrpbjXBrXCEv9zazQ==", + "dependencies": [ + "@aws-sdk/types", + "@smithy/util-utf8@2.3.0", + "tslib" + ] + }, + "@aws-sdk/client-s3@3.797.0": { + "integrity": "sha512-N7pB94mXi4fCt+rYmR9TzfbbwZsWs6Mnk/jDNX9sAZyWkZQnS3AZ/nRtnUmdCimdnOPOMNVjmAoZ4mW3Ff8LDw==", + "dependencies": [ + "@aws-crypto/sha1-browser", + "@aws-crypto/sha256-browser", + "@aws-crypto/sha256-js", + "@aws-sdk/core@3.796.0", + "@aws-sdk/credential-provider-node@3.797.0", + "@aws-sdk/middleware-bucket-endpoint", + "@aws-sdk/middleware-expect-continue", + "@aws-sdk/middleware-flexible-checksums", + "@aws-sdk/middleware-host-header", + "@aws-sdk/middleware-location-constraint", + "@aws-sdk/middleware-logger", + "@aws-sdk/middleware-recursion-detection", + "@aws-sdk/middleware-sdk-s3@3.796.0", + "@aws-sdk/middleware-ssec", + "@aws-sdk/middleware-user-agent@3.796.0", + "@aws-sdk/region-config-resolver", + "@aws-sdk/signature-v4-multi-region@3.796.0", + "@aws-sdk/types", + "@aws-sdk/util-endpoints@3.787.0", + "@aws-sdk/util-user-agent-browser", + "@aws-sdk/util-user-agent-node@3.796.0", + "@aws-sdk/xml-builder", + "@smithy/config-resolver", + "@smithy/core", + "@smithy/eventstream-serde-browser", + "@smithy/eventstream-serde-config-resolver", + "@smithy/eventstream-serde-node", + "@smithy/fetch-http-handler@5.0.2", + "@smithy/hash-blob-browser", + "@smithy/hash-node", + "@smithy/hash-stream-node", + "@smithy/invalid-dependency", + "@smithy/md5-js", + "@smithy/middleware-content-length", + "@smithy/middleware-endpoint", + "@smithy/middleware-retry", + "@smithy/middleware-serde", + "@smithy/middleware-stack", + "@smithy/node-config-provider", + "@smithy/node-http-handler", + "@smithy/protocol-http@5.1.0", + "@smithy/smithy-client", + "@smithy/types@4.2.0", + "@smithy/url-parser", + "@smithy/util-base64", + "@smithy/util-body-length-browser", + "@smithy/util-body-length-node", + "@smithy/util-defaults-mode-browser", + "@smithy/util-defaults-mode-node", + "@smithy/util-endpoints", + "@smithy/util-middleware", + "@smithy/util-retry", + "@smithy/util-stream", + "@smithy/util-utf8@4.0.0", + "@smithy/util-waiter", + "tslib" + ] + }, + "@aws-sdk/client-sesv2@3.782.0": { + "integrity": "sha512-h7Uhh+9BZ9UCE+SM5vld5d10M3VpF9gYbqmzW4+gWtBq9lmsLWjB9Dsk74Xrh4i7s9op7TEfVYm/o+ZB180BtQ==", + "dependencies": [ + "@aws-crypto/sha256-browser", + "@aws-crypto/sha256-js", + "@aws-sdk/core@3.775.0", + "@aws-sdk/credential-provider-node@3.782.0", + "@aws-sdk/middleware-host-header", + "@aws-sdk/middleware-logger", + "@aws-sdk/middleware-recursion-detection", + "@aws-sdk/middleware-user-agent@3.782.0", + "@aws-sdk/region-config-resolver", + "@aws-sdk/signature-v4-multi-region@3.775.0", + "@aws-sdk/types", + "@aws-sdk/util-endpoints@3.782.0", + "@aws-sdk/util-user-agent-browser", + "@aws-sdk/util-user-agent-node@3.782.0", + "@smithy/config-resolver", + "@smithy/core", + "@smithy/fetch-http-handler@5.0.2", + "@smithy/hash-node", + "@smithy/invalid-dependency", + "@smithy/middleware-content-length", + "@smithy/middleware-endpoint", + "@smithy/middleware-retry", + "@smithy/middleware-serde", + "@smithy/middleware-stack", + "@smithy/node-config-provider", + "@smithy/node-http-handler", + "@smithy/protocol-http@5.1.0", + "@smithy/smithy-client", + "@smithy/types@4.2.0", + "@smithy/url-parser", + "@smithy/util-base64", + "@smithy/util-body-length-browser", + "@smithy/util-body-length-node", + "@smithy/util-defaults-mode-browser", + "@smithy/util-defaults-mode-node", + "@smithy/util-endpoints", + "@smithy/util-middleware", + "@smithy/util-retry", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@aws-sdk/client-sso@3.782.0": { + "integrity": "sha512-5GlJBejo8wqMpSSEKb45WE82YxI2k73YuebjLH/eWDNQeE6VI5Bh9lA1YQ7xNkLLH8hIsb0pSfKVuwh0VEzVrg==", + "dependencies": [ + "@aws-crypto/sha256-browser", + "@aws-crypto/sha256-js", + "@aws-sdk/core@3.775.0", + "@aws-sdk/middleware-host-header", + "@aws-sdk/middleware-logger", + "@aws-sdk/middleware-recursion-detection", + "@aws-sdk/middleware-user-agent@3.782.0", + "@aws-sdk/region-config-resolver", + "@aws-sdk/types", + "@aws-sdk/util-endpoints@3.782.0", + "@aws-sdk/util-user-agent-browser", + "@aws-sdk/util-user-agent-node@3.782.0", + "@smithy/config-resolver", + "@smithy/core", + "@smithy/fetch-http-handler@5.0.2", + "@smithy/hash-node", + "@smithy/invalid-dependency", + "@smithy/middleware-content-length", + "@smithy/middleware-endpoint", + "@smithy/middleware-retry", + "@smithy/middleware-serde", + "@smithy/middleware-stack", + "@smithy/node-config-provider", + "@smithy/node-http-handler", + "@smithy/protocol-http@5.1.0", + "@smithy/smithy-client", + "@smithy/types@4.2.0", + "@smithy/url-parser", + "@smithy/util-base64", + "@smithy/util-body-length-browser", + "@smithy/util-body-length-node", + "@smithy/util-defaults-mode-browser", + "@smithy/util-defaults-mode-node", + "@smithy/util-endpoints", + "@smithy/util-middleware", + "@smithy/util-retry", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@aws-sdk/client-sso@3.797.0": { + "integrity": "sha512-9xuR918p7tShR67ZL+AOSbydpJxSHAOdXcQswxxWR/hKCF7tULX7tyL3gNo3l/ETp0CDcStvorOdH/nCbzEOjw==", + "dependencies": [ + "@aws-crypto/sha256-browser", + "@aws-crypto/sha256-js", + "@aws-sdk/core@3.796.0", + "@aws-sdk/middleware-host-header", + "@aws-sdk/middleware-logger", + "@aws-sdk/middleware-recursion-detection", + "@aws-sdk/middleware-user-agent@3.796.0", + "@aws-sdk/region-config-resolver", + "@aws-sdk/types", + "@aws-sdk/util-endpoints@3.787.0", + "@aws-sdk/util-user-agent-browser", + "@aws-sdk/util-user-agent-node@3.796.0", + "@smithy/config-resolver", + "@smithy/core", + "@smithy/fetch-http-handler@5.0.2", + "@smithy/hash-node", + "@smithy/invalid-dependency", + "@smithy/middleware-content-length", + "@smithy/middleware-endpoint", + "@smithy/middleware-retry", + "@smithy/middleware-serde", + "@smithy/middleware-stack", + "@smithy/node-config-provider", + "@smithy/node-http-handler", + "@smithy/protocol-http@5.1.0", + "@smithy/smithy-client", + "@smithy/types@4.2.0", + "@smithy/url-parser", + "@smithy/util-base64", + "@smithy/util-body-length-browser", + "@smithy/util-body-length-node", + "@smithy/util-defaults-mode-browser", + "@smithy/util-defaults-mode-node", + "@smithy/util-endpoints", + "@smithy/util-middleware", + "@smithy/util-retry", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@aws-sdk/core@3.775.0": { + "integrity": "sha512-8vpW4WihVfz0DX+7WnnLGm3GuQER++b0IwQG35JlQMlgqnc44M//KbJPsIHA0aJUJVwJAEShgfr5dUbY8WUzaA==", + "dependencies": [ + "@aws-sdk/types", + "@smithy/core", + "@smithy/node-config-provider", + "@smithy/property-provider", + "@smithy/protocol-http@5.1.0", + "@smithy/signature-v4@5.0.2", + "@smithy/smithy-client", + "@smithy/types@4.2.0", + "@smithy/util-middleware", + "fast-xml-parser", + "tslib" + ] + }, + "@aws-sdk/core@3.796.0": { + "integrity": "sha512-tH8Sp7lCxISVoLnkyv4AouuXs2CDlMhTuesWa0lq2NX1f+DXsMwSBtN37ttZdpFMw3F8mWdsJt27X9h2Oq868A==", + "dependencies": [ + "@aws-sdk/types", + "@smithy/core", + "@smithy/node-config-provider", + "@smithy/property-provider", + "@smithy/protocol-http@5.1.0", + "@smithy/signature-v4@5.1.0", + "@smithy/smithy-client", + "@smithy/types@4.2.0", + "@smithy/util-middleware", + "fast-xml-parser", + "tslib" + ] + }, + "@aws-sdk/credential-provider-env@3.775.0": { + "integrity": "sha512-6ESVxwCbGm7WZ17kY1fjmxQud43vzJFoLd4bmlR+idQSWdqlzGDYdcfzpjDKTcivdtNrVYmFvcH1JBUwCRAZhw==", + "dependencies": [ + "@aws-sdk/core@3.775.0", + "@aws-sdk/types", + "@smithy/property-provider", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/credential-provider-env@3.796.0": { + "integrity": "sha512-kQzGKm4IOYYO6vUrai2JocNwhJm4Aml2BsAV+tBhFhhkutE7khf9PUucoVjB78b0J48nF+kdSacqzY+gB81/Uw==", + "dependencies": [ + "@aws-sdk/core@3.796.0", + "@aws-sdk/types", + "@smithy/property-provider", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/credential-provider-http@3.775.0": { + "integrity": "sha512-PjDQeDH/J1S0yWV32wCj2k5liRo0ssXMseCBEkCsD3SqsU8o5cU82b0hMX4sAib/RkglCSZqGO0xMiN0/7ndww==", + "dependencies": [ + "@aws-sdk/core@3.775.0", + "@aws-sdk/types", + "@smithy/fetch-http-handler@5.0.2", + "@smithy/node-http-handler", + "@smithy/property-provider", + "@smithy/protocol-http@5.1.0", + "@smithy/smithy-client", + "@smithy/types@4.2.0", + "@smithy/util-stream", + "tslib" + ] + }, + "@aws-sdk/credential-provider-http@3.796.0": { + "integrity": "sha512-wWOT6VAHIKOuHdKFGm1iyKvx7f6+Kc/YTzFWJPuT+l+CPlXR6ylP1UMIDsHHLKpMzsrh3CH77QDsjkhQrnKkfg==", + "dependencies": [ + "@aws-sdk/core@3.796.0", + "@aws-sdk/types", + "@smithy/fetch-http-handler@5.0.2", + "@smithy/node-http-handler", + "@smithy/property-provider", + "@smithy/protocol-http@5.1.0", + "@smithy/smithy-client", + "@smithy/types@4.2.0", + "@smithy/util-stream", + "tslib" + ] + }, + "@aws-sdk/credential-provider-ini@3.782.0": { + "integrity": "sha512-wd4KdRy2YjLsE4Y7pz00470Iip06GlRHkG4dyLW7/hFMzEO2o7ixswCWp6J2VGZVAX64acknlv2Q0z02ebjmhw==", + "dependencies": [ + "@aws-sdk/core@3.775.0", + "@aws-sdk/credential-provider-env@3.775.0", + "@aws-sdk/credential-provider-http@3.775.0", + "@aws-sdk/credential-provider-process@3.775.0", + "@aws-sdk/credential-provider-sso@3.782.0", + "@aws-sdk/credential-provider-web-identity@3.782.0", + "@aws-sdk/nested-clients@3.782.0", + "@aws-sdk/types", + "@smithy/credential-provider-imds", + "@smithy/property-provider", + "@smithy/shared-ini-file-loader", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/credential-provider-ini@3.797.0": { + "integrity": "sha512-Zpj6pJ2hnebrhLDr+x61ArMUkjHG6mfJRfamHxeVTgZkhLcwHjC5aM4u9pWTVugIaPY+VBtgkKPbi3TRbHlt2g==", + "dependencies": [ + "@aws-sdk/core@3.796.0", + "@aws-sdk/credential-provider-env@3.796.0", + "@aws-sdk/credential-provider-http@3.796.0", + "@aws-sdk/credential-provider-process@3.796.0", + "@aws-sdk/credential-provider-sso@3.797.0", + "@aws-sdk/credential-provider-web-identity@3.797.0", + "@aws-sdk/nested-clients@3.797.0", + "@aws-sdk/types", + "@smithy/credential-provider-imds", + "@smithy/property-provider", + "@smithy/shared-ini-file-loader", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/credential-provider-node@3.782.0": { + "integrity": "sha512-HZiAF+TCEyKjju9dgysjiPIWgt/+VerGaeEp18mvKLNfgKz1d+/82A2USEpNKTze7v3cMFASx3CvL8yYyF7mJw==", + "dependencies": [ + "@aws-sdk/credential-provider-env@3.775.0", + "@aws-sdk/credential-provider-http@3.775.0", + "@aws-sdk/credential-provider-ini@3.782.0", + "@aws-sdk/credential-provider-process@3.775.0", + "@aws-sdk/credential-provider-sso@3.782.0", + "@aws-sdk/credential-provider-web-identity@3.782.0", + "@aws-sdk/types", + "@smithy/credential-provider-imds", + "@smithy/property-provider", + "@smithy/shared-ini-file-loader", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/credential-provider-node@3.797.0": { + "integrity": "sha512-xJSWvvnmzEfHbqbpN4F3E3mI9+zJ/VWLGiKOjzX1Inbspa5WqNn2GoMamolZR2TvvZS4F3Hp73TD1WoBzkIjuw==", + "dependencies": [ + "@aws-sdk/credential-provider-env@3.796.0", + "@aws-sdk/credential-provider-http@3.796.0", + "@aws-sdk/credential-provider-ini@3.797.0", + "@aws-sdk/credential-provider-process@3.796.0", + "@aws-sdk/credential-provider-sso@3.797.0", + "@aws-sdk/credential-provider-web-identity@3.797.0", + "@aws-sdk/types", + "@smithy/credential-provider-imds", + "@smithy/property-provider", + "@smithy/shared-ini-file-loader", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/credential-provider-process@3.775.0": { + "integrity": "sha512-A6k68H9rQp+2+7P7SGO90Csw6nrUEm0Qfjpn9Etc4EboZhhCLs9b66umUsTsSBHus4FDIe5JQxfCUyt1wgNogg==", + "dependencies": [ + "@aws-sdk/core@3.775.0", + "@aws-sdk/types", + "@smithy/property-provider", + "@smithy/shared-ini-file-loader", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/credential-provider-process@3.796.0": { + "integrity": "sha512-r4e8/4AdKn/qQbRVocW7oXkpoiuXdTv0qty8AASNLnbQnT1vjD1bvmP6kp4fbHPWgwY8I9h0Dqjp49uy9Bqyuw==", + "dependencies": [ + "@aws-sdk/core@3.796.0", + "@aws-sdk/types", + "@smithy/property-provider", + "@smithy/shared-ini-file-loader", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/credential-provider-sso@3.782.0": { + "integrity": "sha512-1y1ucxTtTIGDSNSNxriQY8msinilhe9gGvQpUDYW9gboyC7WQJPDw66imy258V6osdtdi+xoHzVCbCz3WhosMQ==", + "dependencies": [ + "@aws-sdk/client-sso@3.782.0", + "@aws-sdk/core@3.775.0", + "@aws-sdk/token-providers@3.782.0", + "@aws-sdk/types", + "@smithy/property-provider", + "@smithy/shared-ini-file-loader", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/credential-provider-sso@3.797.0": { + "integrity": "sha512-VlyWnjTsTnBXqXcEW0nw3S7nj00n9fYwF6uU6HPO9t860yIySG01lNPAWTvAt3DfVL5SRS0GANriCZF6ohcMcQ==", + "dependencies": [ + "@aws-sdk/client-sso@3.797.0", + "@aws-sdk/core@3.796.0", + "@aws-sdk/token-providers@3.797.0", + "@aws-sdk/types", + "@smithy/property-provider", + "@smithy/shared-ini-file-loader", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/credential-provider-web-identity@3.782.0": { + "integrity": "sha512-xCna0opVPaueEbJoclj5C6OpDNi0Gynj+4d7tnuXGgQhTHPyAz8ZyClkVqpi5qvHTgxROdUEDxWqEO5jqRHZHQ==", + "dependencies": [ + "@aws-sdk/core@3.775.0", + "@aws-sdk/nested-clients@3.782.0", + "@aws-sdk/types", + "@smithy/property-provider", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/credential-provider-web-identity@3.797.0": { + "integrity": "sha512-DIb05FEmdOX7bNsqSVEAB3UkaDgrYHonQ2+gcBLqZ7LoDNnovHIlvC5jii93usgEStxITZstnzw+49keNEgVWw==", + "dependencies": [ + "@aws-sdk/core@3.796.0", + "@aws-sdk/nested-clients@3.797.0", + "@aws-sdk/types", + "@smithy/property-provider", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/middleware-bucket-endpoint@3.775.0": { + "integrity": "sha512-qogMIpVChDYr4xiUNC19/RDSw/sKoHkAhouS6Skxiy6s27HBhow1L3Z1qVYXuBmOZGSWPU0xiyZCvOyWrv9s+Q==", + "dependencies": [ + "@aws-sdk/types", + "@aws-sdk/util-arn-parser", + "@smithy/node-config-provider", + "@smithy/protocol-http@5.1.0", + "@smithy/types@4.2.0", + "@smithy/util-config-provider", + "tslib" + ] + }, + "@aws-sdk/middleware-expect-continue@3.775.0": { + "integrity": "sha512-Apd3owkIeUW5dnk3au9np2IdW2N0zc9NjTjHiH+Mx3zqwSrc+m+ANgJVgk9mnQjMzU/vb7VuxJ0eqdEbp5gYsg==", + "dependencies": [ + "@aws-sdk/types", + "@smithy/protocol-http@5.1.0", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/middleware-flexible-checksums@3.796.0": { + "integrity": "sha512-JTqnyzGlbvXDcEnBtd5LFNrCFKUHnGyp/V9+BkvzNP02WXABLWzYvj1TCaf5pQySwK/b4kVn5lvbpTi0rXqjZw==", + "dependencies": [ + "@aws-crypto/crc32", + "@aws-crypto/crc32c", + "@aws-crypto/util", + "@aws-sdk/core@3.796.0", + "@aws-sdk/types", + "@smithy/is-array-buffer@4.0.0", + "@smithy/node-config-provider", + "@smithy/protocol-http@5.1.0", + "@smithy/types@4.2.0", + "@smithy/util-middleware", + "@smithy/util-stream", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@aws-sdk/middleware-host-header@3.775.0": { + "integrity": "sha512-tkSegM0Z6WMXpLB8oPys/d+umYIocvO298mGvcMCncpRl77L9XkvSLJIFzaHes+o7djAgIduYw8wKIMStFss2w==", + "dependencies": [ + "@aws-sdk/types", + "@smithy/protocol-http@5.1.0", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/middleware-location-constraint@3.775.0": { + "integrity": "sha512-8TMXEHZXZTFTckQLyBT5aEI8fX11HZcwZseRifvBKKpj0RZDk4F0EEYGxeNSPpUQ7n+PRWyfAEnnZNRdAj/1NQ==", + "dependencies": [ + "@aws-sdk/types", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/middleware-logger@3.775.0": { + "integrity": "sha512-FaxO1xom4MAoUJsldmR92nT1G6uZxTdNYOFYtdHfd6N2wcNaTuxgjIvqzg5y7QIH9kn58XX/dzf1iTjgqUStZw==", + "dependencies": [ + "@aws-sdk/types", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/middleware-recursion-detection@3.775.0": { + "integrity": "sha512-GLCzC8D0A0YDG5u3F5U03Vb9j5tcOEFhr8oc6PDk0k0vm5VwtZOE6LvK7hcCSoAB4HXyOUM0sQuXrbaAh9OwXA==", + "dependencies": [ + "@aws-sdk/types", + "@smithy/protocol-http@5.1.0", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/middleware-sdk-s3@3.775.0": { + "integrity": "sha512-zsvcu7cWB28JJ60gVvjxPCI7ZU7jWGcpNACPiZGyVtjYXwcxyhXbYEVDSWKsSA6ERpz9XrpLYod8INQWfW3ECg==", + "dependencies": [ + "@aws-sdk/core@3.775.0", + "@aws-sdk/types", + "@aws-sdk/util-arn-parser", + "@smithy/core", + "@smithy/node-config-provider", + "@smithy/protocol-http@5.1.0", + "@smithy/signature-v4@5.0.2", + "@smithy/smithy-client", + "@smithy/types@4.2.0", + "@smithy/util-config-provider", + "@smithy/util-middleware", + "@smithy/util-stream", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@aws-sdk/middleware-sdk-s3@3.796.0": { + "integrity": "sha512-5o78oE79sGOtYkL7Up02h2nmr9UhGQZJgxE29EBdTw4dZ1EaA46L+C8oA+fBCmAB5xPQsjQqvhRrsr4Lcp+jZQ==", + "dependencies": [ + "@aws-sdk/core@3.796.0", + "@aws-sdk/types", + "@aws-sdk/util-arn-parser", + "@smithy/core", + "@smithy/node-config-provider", + "@smithy/protocol-http@5.1.0", + "@smithy/signature-v4@5.1.0", + "@smithy/smithy-client", + "@smithy/types@4.2.0", + "@smithy/util-config-provider", + "@smithy/util-middleware", + "@smithy/util-stream", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@aws-sdk/middleware-ssec@3.775.0": { + "integrity": "sha512-Iw1RHD8vfAWWPzBBIKaojO4GAvQkHOYIpKdAfis/EUSUmSa79QsnXnRqsdcE0mCB0Ylj23yi+ah4/0wh9FsekA==", + "dependencies": [ + "@aws-sdk/types", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/middleware-user-agent@3.782.0": { + "integrity": "sha512-i32H2R6IItX+bQ2p4+v2gGO2jA80jQoJO2m1xjU9rYWQW3+ErWy4I5YIuQHTBfb6hSdAHbaRfqPDgbv9J2rjEg==", + "dependencies": [ + "@aws-sdk/core@3.775.0", + "@aws-sdk/types", + "@aws-sdk/util-endpoints@3.782.0", + "@smithy/core", + "@smithy/protocol-http@5.1.0", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/middleware-user-agent@3.796.0": { + "integrity": "sha512-IeNg+3jNWT37J45opi5Jx89hGF0lOnZjiNwlMp3rKq7PlOqy8kWq5J1Gxk0W3tIkPpuf68CtBs/QFrRXWOjsZw==", + "dependencies": [ + "@aws-sdk/core@3.796.0", + "@aws-sdk/types", + "@aws-sdk/util-endpoints@3.787.0", + "@smithy/core", + "@smithy/protocol-http@5.1.0", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/nested-clients@3.782.0": { + "integrity": "sha512-QOYC8q7luzHFXrP0xYAqBctoPkynjfV0r9dqntFu4/IWMTyC1vlo1UTxFAjIPyclYw92XJyEkVCVg9v/nQnsUA==", + "dependencies": [ + "@aws-crypto/sha256-browser", + "@aws-crypto/sha256-js", + "@aws-sdk/core@3.775.0", + "@aws-sdk/middleware-host-header", + "@aws-sdk/middleware-logger", + "@aws-sdk/middleware-recursion-detection", + "@aws-sdk/middleware-user-agent@3.782.0", + "@aws-sdk/region-config-resolver", + "@aws-sdk/types", + "@aws-sdk/util-endpoints@3.782.0", + "@aws-sdk/util-user-agent-browser", + "@aws-sdk/util-user-agent-node@3.782.0", + "@smithy/config-resolver", + "@smithy/core", + "@smithy/fetch-http-handler@5.0.2", + "@smithy/hash-node", + "@smithy/invalid-dependency", + "@smithy/middleware-content-length", + "@smithy/middleware-endpoint", + "@smithy/middleware-retry", + "@smithy/middleware-serde", + "@smithy/middleware-stack", + "@smithy/node-config-provider", + "@smithy/node-http-handler", + "@smithy/protocol-http@5.1.0", + "@smithy/smithy-client", + "@smithy/types@4.2.0", + "@smithy/url-parser", + "@smithy/util-base64", + "@smithy/util-body-length-browser", + "@smithy/util-body-length-node", + "@smithy/util-defaults-mode-browser", + "@smithy/util-defaults-mode-node", + "@smithy/util-endpoints", + "@smithy/util-middleware", + "@smithy/util-retry", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@aws-sdk/nested-clients@3.797.0": { + "integrity": "sha512-xCsRKdsv0GAg9E28fvYBdC3JR2xdtZ2o41MVknOs+pSFtMsZm3SsgxObN35p1OTMk/o/V0LORGVLnFQMlc5QiA==", + "dependencies": [ + "@aws-crypto/sha256-browser", + "@aws-crypto/sha256-js", + "@aws-sdk/core@3.796.0", + "@aws-sdk/middleware-host-header", + "@aws-sdk/middleware-logger", + "@aws-sdk/middleware-recursion-detection", + "@aws-sdk/middleware-user-agent@3.796.0", + "@aws-sdk/region-config-resolver", + "@aws-sdk/types", + "@aws-sdk/util-endpoints@3.787.0", + "@aws-sdk/util-user-agent-browser", + "@aws-sdk/util-user-agent-node@3.796.0", + "@smithy/config-resolver", + "@smithy/core", + "@smithy/fetch-http-handler@5.0.2", + "@smithy/hash-node", + "@smithy/invalid-dependency", + "@smithy/middleware-content-length", + "@smithy/middleware-endpoint", + "@smithy/middleware-retry", + "@smithy/middleware-serde", + "@smithy/middleware-stack", + "@smithy/node-config-provider", + "@smithy/node-http-handler", + "@smithy/protocol-http@5.1.0", + "@smithy/smithy-client", + "@smithy/types@4.2.0", + "@smithy/url-parser", + "@smithy/util-base64", + "@smithy/util-body-length-browser", + "@smithy/util-body-length-node", + "@smithy/util-defaults-mode-browser", + "@smithy/util-defaults-mode-node", + "@smithy/util-endpoints", + "@smithy/util-middleware", + "@smithy/util-retry", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@aws-sdk/region-config-resolver@3.775.0": { + "integrity": "sha512-40iH3LJjrQS3LKUJAl7Wj0bln7RFPEvUYKFxtP8a+oKFDO0F65F52xZxIJbPn6sHkxWDAnZlGgdjZXM3p2g5wQ==", + "dependencies": [ + "@aws-sdk/types", + "@smithy/node-config-provider", + "@smithy/types@4.2.0", + "@smithy/util-config-provider", + "@smithy/util-middleware", + "tslib" + ] + }, + "@aws-sdk/signature-v4-multi-region@3.775.0": { + "integrity": "sha512-cnGk8GDfTMJ8p7+qSk92QlIk2bmTmFJqhYxcXZ9PysjZtx0xmfCMxnG3Hjy1oU2mt5boPCVSOptqtWixayM17g==", + "dependencies": [ + "@aws-sdk/middleware-sdk-s3@3.775.0", + "@aws-sdk/types", + "@smithy/protocol-http@5.1.0", + "@smithy/signature-v4@5.0.2", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/signature-v4-multi-region@3.796.0": { + "integrity": "sha512-JAOLdvazTc9HlTFslSrIOrKRMuOruuM3FeGw0hyfLP/RIbjd9bqe/xLIzDSJr3wpCpJs0sXoofwJgXtgTipvjA==", + "dependencies": [ + "@aws-sdk/middleware-sdk-s3@3.796.0", + "@aws-sdk/types", + "@smithy/protocol-http@5.1.0", + "@smithy/signature-v4@5.1.0", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/token-providers@3.782.0": { + "integrity": "sha512-4tPuk/3+THPrzKaXW4jE2R67UyGwHLFizZ47pcjJWbhb78IIJAy94vbeqEQ+veS84KF5TXcU7g5jGTXC0D70Wg==", + "dependencies": [ + "@aws-sdk/nested-clients@3.782.0", + "@aws-sdk/types", + "@smithy/property-provider", + "@smithy/shared-ini-file-loader", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/token-providers@3.797.0": { + "integrity": "sha512-TLFkP4BBdkH2zCXhG3JjaYrRft25MMZ+6/YDz1C/ikq2Zk8krUbVoSmhtYMVz10JtxAPiQ++w0vI/qbz2JSDXg==", + "dependencies": [ + "@aws-sdk/nested-clients@3.797.0", + "@aws-sdk/types", + "@smithy/property-provider", + "@smithy/shared-ini-file-loader", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/types@3.775.0": { + "integrity": "sha512-ZoGKwa4C9fC9Av6bdfqcW6Ix5ot05F/S4VxWR2nHuMv7hzfmAjTOcUiWT7UR4hM/U0whf84VhDtXN/DWAk52KA==", + "dependencies": [ + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/util-arn-parser@3.723.0": { + "integrity": "sha512-ZhEfvUwNliOQROcAk34WJWVYTlTa4694kSVhDSjW6lE1bMataPnIN8A0ycukEzBXmd8ZSoBcQLn6lKGl7XIJ5w==", + "dependencies": [ + "tslib" + ] + }, + "@aws-sdk/util-endpoints@3.782.0": { + "integrity": "sha512-/RJOAO7o7HI6lEa4ASbFFLHGU9iPK876BhsVfnl54MvApPVYWQ9sHO0anOUim2S5lQTwd/6ghuH3rFYSq/+rdw==", + "dependencies": [ + "@aws-sdk/types", + "@smithy/types@4.2.0", + "@smithy/util-endpoints", + "tslib" + ] + }, + "@aws-sdk/util-endpoints@3.787.0": { + "integrity": "sha512-fd3zkiOkwnbdbN0Xp9TsP5SWrmv0SpT70YEdbb8wAj2DWQwiCmFszaSs+YCvhoCdmlR3Wl9Spu0pGpSAGKeYvQ==", + "dependencies": [ + "@aws-sdk/types", + "@smithy/types@4.2.0", + "@smithy/util-endpoints", + "tslib" + ] + }, + "@aws-sdk/util-locate-window@3.723.0": { + "integrity": "sha512-Yf2CS10BqK688DRsrKI/EO6B8ff5J86NXe4C+VCysK7UOgN0l1zOTeTukZ3H8Q9tYYX3oaF1961o8vRkFm7Nmw==", + "dependencies": [ + "tslib" + ] + }, + "@aws-sdk/util-user-agent-browser@3.775.0": { + "integrity": "sha512-txw2wkiJmZKVdDbscK7VBK+u+TJnRtlUjRTLei+elZg2ADhpQxfVAQl436FUeIv6AhB/oRHW6/K/EAGXUSWi0A==", + "dependencies": [ + "@aws-sdk/types", + "@smithy/types@4.2.0", + "bowser", + "tslib" + ] + }, + "@aws-sdk/util-user-agent-node@3.782.0": { + "integrity": "sha512-dMFkUBgh2Bxuw8fYZQoH/u3H4afQ12VSkzEi//qFiDTwbKYq+u+RYjc8GLDM6JSK1BShMu5AVR7HD4ap1TYUnA==", + "dependencies": [ + "@aws-sdk/middleware-user-agent@3.782.0", + "@aws-sdk/types", + "@smithy/node-config-provider", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/util-user-agent-node@3.796.0": { + "integrity": "sha512-9fQpNcHgVFitf1tbTT8V1xGRoRHSmOAWjrhevo6Tc0WoINMAKz+4JNqfVGWRE5Tmtpq0oHKo1RmvxXQQtJYciA==", + "dependencies": [ + "@aws-sdk/middleware-user-agent@3.796.0", + "@aws-sdk/types", + "@smithy/node-config-provider", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@aws-sdk/xml-builder@3.775.0": { + "integrity": "sha512-b9NGO6FKJeLGYnV7Z1yvcP1TNU4dkD5jNsLWOF1/sygZoASaQhNOlaiJ/1OH331YQ1R1oWk38nBb0frsYkDsOQ==", + "dependencies": [ + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@hono/zod-validator@0.5.0_hono@4.7.10_zod@3.25.20": { + "integrity": "sha512-ds5bW6DCgAnNHP33E3ieSbaZFd5dkV52ZjyaXtGoR06APFrCtzAsKZxTHwOrJNBdXsi0e5wNwo5L4nVEVnJUdg==", + "dependencies": [ + "hono", + "zod" + ] + }, + "@libsql/darwin-arm64@0.3.19": { + "integrity": "sha512-rmOqsLcDI65zzxlUOoEiPJLhqmbFsZF6p4UJQ2kMqB+Kc0Rt5/A1OAdOZ/Wo8fQfJWjR1IbkbpEINFioyKf+nQ==", + "os": ["darwin"], + "cpu": ["arm64"] + }, + "@libsql/darwin-x64@0.3.19": { + "integrity": "sha512-q9O55B646zU+644SMmOQL3FIfpmEvdWpRpzubwFc2trsa+zoBlSkHuzU9v/C+UNoPHQVRMP7KQctJ455I/h/xw==", + "os": ["darwin"], + "cpu": ["x64"] + }, + "@libsql/linux-arm64-gnu@0.3.19": { + "integrity": "sha512-mgeAUU1oqqh57k7I3cQyU6Trpdsdt607eFyEmH5QO7dv303ti+LjUvh1pp21QWV6WX7wZyjeJV1/VzEImB+jRg==", + "os": ["linux"], + "cpu": ["arm64"] + }, + "@libsql/linux-arm64-musl@0.3.19": { + "integrity": "sha512-VEZtxghyK6zwGzU9PHohvNxthruSxBEnRrX7BSL5jQ62tN4n2JNepJ6SdzXp70pdzTfwroOj/eMwiPt94gkVRg==", + "os": ["linux"], + "cpu": ["arm64"] + }, + "@libsql/linux-x64-gnu@0.3.19": { + "integrity": "sha512-2t/J7LD5w2f63wGihEO+0GxfTyYIyLGEvTFEsMO16XI5o7IS9vcSHrxsvAJs4w2Pf907uDjmc7fUfMg6L82BrQ==", + "os": ["linux"], + "cpu": ["x64"] + }, + "@libsql/linux-x64-musl@0.3.19": { + "integrity": "sha512-BLsXyJaL8gZD8+3W2LU08lDEd9MIgGds0yPy5iNPp8tfhXx3pV/Fge2GErN0FC+nzt4DYQtjL+A9GUMglQefXQ==", + "os": ["linux"], + "cpu": ["x64"] + }, + "@libsql/win32-x64-msvc@0.3.19": { + "integrity": "sha512-ay1X9AobE4BpzG0XPw1gplyLZPGHIgJOovvW23gUrukRegiUP62uzhpRbKNogLlUOynyXeq//prHgPXiebUfWg==", + "os": ["win32"], + "cpu": ["x64"] + }, + "@smithy/abort-controller@4.0.2": { + "integrity": "sha512-Sl/78VDtgqKxN2+1qduaVE140XF+Xg+TafkncspwM4jFP/LHr76ZHmIY/y3V1M0mMLNk+Je6IGbzxy23RSToMw==", + "dependencies": [ + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/chunked-blob-reader-native@4.0.0": { + "integrity": "sha512-R9wM2yPmfEMsUmlMlIgSzOyICs0x9uu7UTHoccMyt7BWw8shcGM8HqB355+BZCPBcySvbTYMs62EgEQkNxz2ig==", + "dependencies": [ + "@smithy/util-base64", + "tslib" + ] + }, + "@smithy/chunked-blob-reader@5.0.0": { + "integrity": "sha512-+sKqDBQqb036hh4NPaUiEkYFkTUGYzRsn3EuFhyfQfMy6oGHEUJDurLP9Ufb5dasr/XiAmPNMr6wa9afjQB+Gw==", + "dependencies": [ + "tslib" + ] + }, + "@smithy/config-resolver@4.1.0": { + "integrity": "sha512-8smPlwhga22pwl23fM5ew4T9vfLUCeFXlcqNOCD5M5h8VmNPNUE9j6bQSuRXpDSV11L/E/SwEBQuW8hr6+nS1A==", + "dependencies": [ + "@smithy/node-config-provider", + "@smithy/types@4.2.0", + "@smithy/util-config-provider", + "@smithy/util-middleware", + "tslib" + ] + }, + "@smithy/core@3.2.0": { + "integrity": "sha512-k17bgQhVZ7YmUvA8at4af1TDpl0NDMBuBKJl8Yg0nrefwmValU+CnA5l/AriVdQNthU/33H3nK71HrLgqOPr1Q==", + "dependencies": [ + "@smithy/middleware-serde", + "@smithy/protocol-http@5.1.0", + "@smithy/types@4.2.0", + "@smithy/util-body-length-browser", + "@smithy/util-middleware", + "@smithy/util-stream", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@smithy/credential-provider-imds@4.0.2": { + "integrity": "sha512-32lVig6jCaWBHnY+OEQ6e6Vnt5vDHaLiydGrwYMW9tPqO688hPGTYRamYJ1EptxEC2rAwJrHWmPoKRBl4iTa8w==", + "dependencies": [ + "@smithy/node-config-provider", + "@smithy/property-provider", + "@smithy/types@4.2.0", + "@smithy/url-parser", + "tslib" + ] + }, + "@smithy/eventstream-codec@4.0.2": { + "integrity": "sha512-p+f2kLSK7ZrXVfskU/f5dzksKTewZk8pJLPvER3aFHPt76C2MxD9vNatSfLzzQSQB4FNO96RK4PSXfhD1TTeMQ==", + "dependencies": [ + "@aws-crypto/crc32", + "@smithy/types@4.2.0", + "@smithy/util-hex-encoding", + "tslib" + ] + }, + "@smithy/eventstream-serde-browser@4.0.2": { + "integrity": "sha512-CepZCDs2xgVUtH7ZZ7oDdZFH8e6Y2zOv8iiX6RhndH69nlojCALSKK+OXwZUgOtUZEUaZ5e1hULVCHYbCn7pug==", + "dependencies": [ + "@smithy/eventstream-serde-universal", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/eventstream-serde-config-resolver@4.1.0": { + "integrity": "sha512-1PI+WPZ5TWXrfj3CIoKyUycYynYJgZjuQo8U+sphneOtjsgrttYybdqESFReQrdWJ+LKt6NEdbYzmmfDBmjX2A==", + "dependencies": [ + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/eventstream-serde-node@4.0.2": { + "integrity": "sha512-C5bJ/C6x9ENPMx2cFOirspnF9ZsBVnBMtP6BdPl/qYSuUawdGQ34Lq0dMcf42QTjUZgWGbUIZnz6+zLxJlb9aw==", + "dependencies": [ + "@smithy/eventstream-serde-universal", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/eventstream-serde-universal@4.0.2": { + "integrity": "sha512-St8h9JqzvnbB52FtckiHPN4U/cnXcarMniXRXTKn0r4b4XesZOGiAyUdj1aXbqqn1icSqBlzzUsCl6nPB018ng==", + "dependencies": [ + "@smithy/eventstream-codec", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/fetch-http-handler@5.0.2": { + "integrity": "sha512-+9Dz8sakS9pe7f2cBocpJXdeVjMopUDLgZs1yWeu7h++WqSbjUYv/JAJwKwXw1HV6gq1jyWjxuyn24E2GhoEcQ==", + "dependencies": [ + "@smithy/protocol-http@5.1.0", + "@smithy/querystring-builder@4.0.2", + "@smithy/types@4.2.0", + "@smithy/util-base64", + "tslib" + ] + }, + "@smithy/fetch-http-handler@5.0.4": { + "integrity": "sha512-AMtBR5pHppYMVD7z7G+OlHHAcgAN7v0kVKEpHuTO4Gb199Gowh0taYi9oDStFeUhetkeP55JLSVlTW1n9rFtUw==", + "dependencies": [ + "@smithy/protocol-http@5.1.2", + "@smithy/querystring-builder@4.0.4", + "@smithy/types@4.3.1", + "@smithy/util-base64", + "tslib" + ] + }, + "@smithy/hash-blob-browser@4.0.2": { + "integrity": "sha512-3g188Z3DyhtzfBRxpZjU8R9PpOQuYsbNnyStc/ZVS+9nVX1f6XeNOa9IrAh35HwwIZg+XWk8bFVtNINVscBP+g==", + "dependencies": [ + "@smithy/chunked-blob-reader", + "@smithy/chunked-blob-reader-native", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/hash-node@4.0.2": { + "integrity": "sha512-VnTpYPnRUE7yVhWozFdlxcYknv9UN7CeOqSrMH+V877v4oqtVYuoqhIhtSjmGPvYrYnAkaM61sLMKHvxL138yg==", + "dependencies": [ + "@smithy/types@4.2.0", + "@smithy/util-buffer-from@4.0.0", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@smithy/hash-stream-node@4.0.2": { + "integrity": "sha512-POWDuTznzbIwlEXEvvXoPMS10y0WKXK790soe57tFRfvf4zBHyzE529HpZMqmDdwG9MfFflnyzndUQ8j78ZdSg==", + "dependencies": [ + "@smithy/types@4.2.0", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@smithy/invalid-dependency@4.0.2": { + "integrity": "sha512-GatB4+2DTpgWPday+mnUkoumP54u/MDM/5u44KF9hIu8jF0uafZtQLcdfIKkIcUNuF/fBojpLEHZS/56JqPeXQ==", + "dependencies": [ + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/is-array-buffer@2.2.0": { + "integrity": "sha512-GGP3O9QFD24uGeAXYUjwSTXARoqpZykHadOmA8G5vfJPK0/DC67qa//0qvqrJzL1xc8WQWX7/yc7fwudjPHPhA==", + "dependencies": [ + "tslib" + ] + }, + "@smithy/is-array-buffer@4.0.0": { + "integrity": "sha512-saYhF8ZZNoJDTvJBEWgeBccCg+yvp1CX+ed12yORU3NilJScfc6gfch2oVb4QgxZrGUx3/ZJlb+c/dJbyupxlw==", + "dependencies": [ + "tslib" + ] + }, + "@smithy/md5-js@4.0.2": { + "integrity": "sha512-Hc0R8EiuVunUewCse2syVgA2AfSRco3LyAv07B/zCOMa+jpXI9ll+Q21Nc6FAlYPcpNcAXqBzMhNs1CD/pP2bA==", + "dependencies": [ + "@smithy/types@4.2.0", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@smithy/middleware-content-length@4.0.2": { + "integrity": "sha512-hAfEXm1zU+ELvucxqQ7I8SszwQ4znWMbNv6PLMndN83JJN41EPuS93AIyh2N+gJ6x8QFhzSO6b7q2e6oClDI8A==", + "dependencies": [ + "@smithy/protocol-http@5.1.0", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/middleware-endpoint@4.1.0": { + "integrity": "sha512-xhLimgNCbCzsUppRTGXWkZywksuTThxaIB0HwbpsVLY5sceac4e1TZ/WKYqufQLaUy+gUSJGNdwD2jo3cXL0iA==", + "dependencies": [ + "@smithy/core", + "@smithy/middleware-serde", + "@smithy/node-config-provider", + "@smithy/shared-ini-file-loader", + "@smithy/types@4.2.0", + "@smithy/url-parser", + "@smithy/util-middleware", + "tslib" + ] + }, + "@smithy/middleware-retry@4.1.0": { + "integrity": "sha512-2zAagd1s6hAaI/ap6SXi5T3dDwBOczOMCSkkYzktqN1+tzbk1GAsHNAdo/1uzxz3Ky02jvZQwbi/vmDA6z4Oyg==", + "dependencies": [ + "@smithy/node-config-provider", + "@smithy/protocol-http@5.1.0", + "@smithy/service-error-classification", + "@smithy/smithy-client", + "@smithy/types@4.2.0", + "@smithy/util-middleware", + "@smithy/util-retry", + "tslib", + "uuid" + ] + }, + "@smithy/middleware-serde@4.0.3": { + "integrity": "sha512-rfgDVrgLEVMmMn0BI8O+8OVr6vXzjV7HZj57l0QxslhzbvVfikZbVfBVthjLHqib4BW44QhcIgJpvebHlRaC9A==", + "dependencies": [ + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/middleware-stack@4.0.2": { + "integrity": "sha512-eSPVcuJJGVYrFYu2hEq8g8WWdJav3sdrI4o2c6z/rjnYDd3xH9j9E7deZQCzFn4QvGPouLngH3dQ+QVTxv5bOQ==", + "dependencies": [ + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/node-config-provider@4.0.2": { + "integrity": "sha512-WgCkILRZfJwJ4Da92a6t3ozN/zcvYyJGUTmfGbgS/FkCcoCjl7G4FJaCDN1ySdvLvemnQeo25FdkyMSTSwulsw==", + "dependencies": [ + "@smithy/property-provider", + "@smithy/shared-ini-file-loader", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/node-http-handler@4.0.4": { + "integrity": "sha512-/mdqabuAT3o/ihBGjL94PUbTSPSRJ0eeVTdgADzow0wRJ0rN4A27EOrtlK56MYiO1fDvlO3jVTCxQtQmK9dZ1g==", + "dependencies": [ + "@smithy/abort-controller", + "@smithy/protocol-http@5.1.0", + "@smithy/querystring-builder@4.0.2", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/property-provider@4.0.2": { + "integrity": "sha512-wNRoQC1uISOuNc2s4hkOYwYllmiyrvVXWMtq+TysNRVQaHm4yoafYQyjN/goYZS+QbYlPIbb/QRjaUZMuzwQ7A==", + "dependencies": [ + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/protocol-http@5.1.0": { + "integrity": "sha512-KxAOL1nUNw2JTYrtviRRjEnykIDhxc84qMBzxvu1MUfQfHTuBlCG7PA6EdVwqpJjH7glw7FqQoFxUJSyBQgu7g==", + "dependencies": [ + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/protocol-http@5.1.2": { + "integrity": "sha512-rOG5cNLBXovxIrICSBm95dLqzfvxjEmuZx4KK3hWwPFHGdW3lxY0fZNXfv2zebfRO7sJZ5pKJYHScsqopeIWtQ==", + "dependencies": [ + "@smithy/types@4.3.1", + "tslib" + ] + }, + "@smithy/querystring-builder@4.0.2": { + "integrity": "sha512-NTOs0FwHw1vimmQM4ebh+wFQvOwkEf/kQL6bSM1Lock+Bv4I89B3hGYoUEPkmvYPkDKyp5UdXJYu+PoTQ3T31Q==", + "dependencies": [ + "@smithy/types@4.2.0", + "@smithy/util-uri-escape", + "tslib" + ] + }, + "@smithy/querystring-builder@4.0.4": { + "integrity": "sha512-SwREZcDnEYoh9tLNgMbpop+UTGq44Hl9tdj3rf+yeLcfH7+J8OXEBaMc2kDxtyRHu8BhSg9ADEx0gFHvpJgU8w==", + "dependencies": [ + "@smithy/types@4.3.1", + "@smithy/util-uri-escape", + "tslib" + ] + }, + "@smithy/querystring-parser@4.0.2": { + "integrity": "sha512-v6w8wnmZcVXjfVLjxw8qF7OwESD9wnpjp0Dqry/Pod0/5vcEA3qxCr+BhbOHlxS8O+29eLpT3aagxXGwIoEk7Q==", + "dependencies": [ + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/service-error-classification@4.0.2": { + "integrity": "sha512-LA86xeFpTKn270Hbkixqs5n73S+LVM0/VZco8dqd+JT75Dyx3Lcw/MraL7ybjmz786+160K8rPOmhsq0SocoJQ==", + "dependencies": [ + "@smithy/types@4.2.0" + ] + }, + "@smithy/shared-ini-file-loader@4.0.2": { + "integrity": "sha512-J9/gTWBGVuFZ01oVA6vdb4DAjf1XbDhK6sLsu3OS9qmLrS6KB5ygpeHiM3miIbj1qgSJ96GYszXFWv6ErJ8QEw==", + "dependencies": [ + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/signature-v4@5.0.2": { + "integrity": "sha512-Mz+mc7okA73Lyz8zQKJNyr7lIcHLiPYp0+oiqiMNc/t7/Kf2BENs5d63pEj7oPqdjaum6g0Fc8wC78dY1TgtXw==", + "dependencies": [ + "@smithy/is-array-buffer@4.0.0", + "@smithy/protocol-http@5.1.0", + "@smithy/types@4.2.0", + "@smithy/util-hex-encoding", + "@smithy/util-middleware", + "@smithy/util-uri-escape", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@smithy/signature-v4@5.1.0": { + "integrity": "sha512-4t5WX60sL3zGJF/CtZsUQTs3UrZEDO2P7pEaElrekbLqkWPYkgqNW1oeiNYC6xXifBnT9dVBOnNQRvOE9riU9w==", + "dependencies": [ + "@smithy/is-array-buffer@4.0.0", + "@smithy/protocol-http@5.1.0", + "@smithy/types@4.2.0", + "@smithy/util-hex-encoding", + "@smithy/util-middleware", + "@smithy/util-uri-escape", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@smithy/smithy-client@4.2.0": { + "integrity": "sha512-Qs65/w30pWV7LSFAez9DKy0Koaoh3iHhpcpCCJ4waj/iqwsuSzJna2+vYwq46yBaqO5ZbP9TjUsATUNxrKeBdw==", + "dependencies": [ + "@smithy/core", + "@smithy/middleware-endpoint", + "@smithy/middleware-stack", + "@smithy/protocol-http@5.1.0", + "@smithy/types@4.2.0", + "@smithy/util-stream", + "tslib" + ] + }, + "@smithy/types@4.2.0": { + "integrity": "sha512-7eMk09zQKCO+E/ivsjQv+fDlOupcFUCSC/L2YUPgwhvowVGWbPQHjEFcmjt7QQ4ra5lyowS92SV53Zc6XD4+fg==", + "dependencies": [ + "tslib" + ] + }, + "@smithy/types@4.3.1": { + "integrity": "sha512-UqKOQBL2x6+HWl3P+3QqFD4ncKq0I8Nuz9QItGv5WuKuMHuuwlhvqcZCoXGfc+P1QmfJE7VieykoYYmrOoFJxA==", + "dependencies": [ + "tslib" + ] + }, + "@smithy/url-parser@4.0.2": { + "integrity": "sha512-Bm8n3j2ScqnT+kJaClSVCMeiSenK6jVAzZCNewsYWuZtnBehEz4r2qP0riZySZVfzB+03XZHJeqfmJDkeeSLiQ==", + "dependencies": [ + "@smithy/querystring-parser", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/util-base64@4.0.0": { + "integrity": "sha512-CvHfCmO2mchox9kjrtzoHkWHxjHZzaFojLc8quxXY7WAAMAg43nuxwv95tATVgQFNDwd4M9S1qFzj40Ul41Kmg==", + "dependencies": [ + "@smithy/util-buffer-from@4.0.0", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@smithy/util-body-length-browser@4.0.0": { + "integrity": "sha512-sNi3DL0/k64/LO3A256M+m3CDdG6V7WKWHdAiBBMUN8S3hK3aMPhwnPik2A/a2ONN+9doY9UxaLfgqsIRg69QA==", + "dependencies": [ + "tslib" + ] + }, + "@smithy/util-body-length-node@4.0.0": { + "integrity": "sha512-q0iDP3VsZzqJyje8xJWEJCNIu3lktUGVoSy1KB0UWym2CL1siV3artm+u1DFYTLejpsrdGyCSWBdGNjJzfDPjg==", + "dependencies": [ + "tslib" + ] + }, + "@smithy/util-buffer-from@2.2.0": { + "integrity": "sha512-IJdWBbTcMQ6DA0gdNhh/BwrLkDR+ADW5Kr1aZmd4k3DIF6ezMV4R2NIAmT08wQJ3yUK82thHWmC/TnK/wpMMIA==", + "dependencies": [ + "@smithy/is-array-buffer@2.2.0", + "tslib" + ] + }, + "@smithy/util-buffer-from@4.0.0": { + "integrity": "sha512-9TOQ7781sZvddgO8nxueKi3+yGvkY35kotA0Y6BWRajAv8jjmigQ1sBwz0UX47pQMYXJPahSKEKYFgt+rXdcug==", + "dependencies": [ + "@smithy/is-array-buffer@4.0.0", + "tslib" + ] + }, + "@smithy/util-config-provider@4.0.0": { + "integrity": "sha512-L1RBVzLyfE8OXH+1hsJ8p+acNUSirQnWQ6/EgpchV88G6zGBTDPdXiiExei6Z1wR2RxYvxY/XLw6AMNCCt8H3w==", + "dependencies": [ + "tslib" + ] + }, + "@smithy/util-defaults-mode-browser@4.0.8": { + "integrity": "sha512-ZTypzBra+lI/LfTYZeop9UjoJhhGRTg3pxrNpfSTQLd3AJ37r2z4AXTKpq1rFXiiUIJsYyFgNJdjWRGP/cbBaQ==", + "dependencies": [ + "@smithy/property-provider", + "@smithy/smithy-client", + "@smithy/types@4.2.0", + "bowser", + "tslib" + ] + }, + "@smithy/util-defaults-mode-node@4.0.8": { + "integrity": "sha512-Rgk0Jc/UDfRTzVthye/k2dDsz5Xxs9LZaKCNPgJTRyoyBoeiNCnHsYGOyu1PKN+sDyPnJzMOz22JbwxzBp9NNA==", + "dependencies": [ + "@smithy/config-resolver", + "@smithy/credential-provider-imds", + "@smithy/node-config-provider", + "@smithy/property-provider", + "@smithy/smithy-client", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/util-endpoints@3.0.2": { + "integrity": "sha512-6QSutU5ZyrpNbnd51zRTL7goojlcnuOB55+F9VBD+j8JpRY50IGamsjlycrmpn8PQkmJucFW8A0LSfXj7jjtLQ==", + "dependencies": [ + "@smithy/node-config-provider", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/util-hex-encoding@4.0.0": { + "integrity": "sha512-Yk5mLhHtfIgW2W2WQZWSg5kuMZCVbvhFmC7rV4IO2QqnZdbEFPmQnCcGMAX2z/8Qj3B9hYYNjZOhWym+RwhePw==", + "dependencies": [ + "tslib" + ] + }, + "@smithy/util-middleware@4.0.2": { + "integrity": "sha512-6GDamTGLuBQVAEuQ4yDQ+ti/YINf/MEmIegrEeg7DdB/sld8BX1lqt9RRuIcABOhAGTA50bRbPzErez7SlDtDQ==", + "dependencies": [ + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/util-retry@4.0.2": { + "integrity": "sha512-Qryc+QG+7BCpvjloFLQrmlSd0RsVRHejRXd78jNO3+oREueCjwG1CCEH1vduw/ZkM1U9TztwIKVIi3+8MJScGg==", + "dependencies": [ + "@smithy/service-error-classification", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@smithy/util-stream@4.2.0": { + "integrity": "sha512-Vj1TtwWnuWqdgQI6YTUF5hQ/0jmFiOYsc51CSMgj7QfyO+RF4EnT2HNjoviNlOOmgzgvf3f5yno+EiC4vrnaWQ==", + "dependencies": [ + "@smithy/fetch-http-handler@5.0.2", + "@smithy/node-http-handler", + "@smithy/types@4.2.0", + "@smithy/util-base64", + "@smithy/util-buffer-from@4.0.0", + "@smithy/util-hex-encoding", + "@smithy/util-utf8@4.0.0", + "tslib" + ] + }, + "@smithy/util-uri-escape@4.0.0": { + "integrity": "sha512-77yfbCbQMtgtTylO9itEAdpPXSog3ZxMe09AEhm0dU0NLTalV70ghDZFR+Nfi1C60jnJoh/Re4090/DuZh2Omg==", + "dependencies": [ + "tslib" + ] + }, + "@smithy/util-utf8@2.3.0": { + "integrity": "sha512-R8Rdn8Hy72KKcebgLiv8jQcQkXoLMOGGv5uI1/k0l+snqkOzQ1R0ChUBCxWMlBsFMekWjq0wRudIweFs7sKT5A==", + "dependencies": [ + "@smithy/util-buffer-from@2.2.0", + "tslib" + ] + }, + "@smithy/util-utf8@4.0.0": { + "integrity": "sha512-b+zebfKCfRdgNJDknHCob3O7FpeYQN6ZG6YLExMcasDHsCXlsXCEuiPZeLnJLpwa5dvPetGlnGCiMHuLwGvFow==", + "dependencies": [ + "@smithy/util-buffer-from@4.0.0", + "tslib" + ] + }, + "@smithy/util-waiter@4.0.3": { + "integrity": "sha512-JtaY3FxmD+te+KSI2FJuEcfNC9T/DGGVf551babM7fAaXhjJUt7oSYurH1Devxd2+BOSUACCgt3buinx4UnmEA==", + "dependencies": [ + "@smithy/abort-controller", + "@smithy/types@4.2.0", + "tslib" + ] + }, + "@types/node@22.15.15": { + "integrity": "sha512-R5muMcZob3/Jjchn5LcO8jdKwSCbzqmPB6ruBxMcf9kbxtniZHP327s6C37iOfuw8mbKK3cAQa7sEl7afLrQ8A==", + "dependencies": [ + "undici-types" + ] + }, + "bowser@2.11.0": { + "integrity": "sha512-AlcaJBi/pqqJBIQ8U9Mcpc9i8Aqxn88Skv5d+xBX006BY5u8N3mGLHa5Lgppa7L/HfwgwLgZ6NYs+Ag6uUmJRA==" + }, + "email-addresses@5.0.0": { + "integrity": "sha512-4OIPYlA6JXqtVn8zpHpGiI7vE6EQOAg16aGnDMIAlZVinnoZ8208tW1hAbjWydgN/4PLTT9q+O1K6AH/vALJGw==" + }, + "fast-xml-parser@4.4.1": { + "integrity": "sha512-xkjOecfnKGkSsOwtZ5Pz7Us/T6mrbPQrq0nh+aCO5V9nk5NLWmasAHumTKjiPJPWANe+kAZ84Jc8ooJkzZ88Sw==", + "dependencies": [ + "strnum" + ], + "bin": true + }, + "hono@4.7.10": { + "integrity": "sha512-QkACju9MiN59CKSY5JsGZCYmPZkA6sIW6OFCUp7qDjZu6S6KHtJHhAc9Uy9mV9F8PJ1/HQ3ybZF2yjCa/73fvQ==" + }, + "kysely@0.28.2": { + "integrity": "sha512-4YAVLoF0Sf0UTqlhgQMFU9iQECdah7n+13ANkiuVfRvlK+uI0Etbgd7bVP36dKlG+NXWbhGua8vnGt+sdhvT7A==" + }, + "strnum@1.1.2": { + "integrity": "sha512-vrN+B7DBIoTTZjnPNewwhx6cBA/H+IS7rfW68n7XxC1y7uoiGQBxaKzqucGUgavX15dJgiGztLJ8vxuEzwqBdA==" + }, + "tslib@2.8.1": { + "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==" + }, + "undici-types@6.21.0": { + "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==" + }, + "uuid@9.0.1": { + "integrity": "sha512-b+1eJOlsR9K8HJpow9Ok3fiWOWSIcIzXodvv0rQjVoOVNpWMpxf1wZNpt4y9h10odCNrqnYp1OBzRktckBe3sA==", + "bin": true + }, + "ws@8.18.1": { + "integrity": "sha512-RKW2aJZMXeMxVpnZ6bck+RswznaxmzdULiBr6KY7XkTnW8uvt0iT9H5DkHUChXrc+uurzwa0rVI16n/Xzjdz1w==" + }, + "zod@3.25.20": { + "integrity": "sha512-z03fqpTMDF1G02VLKUMt6vyACE7rNWkh3gpXVHgPTw28NPtDFRGvcpTtPwn2kMKtQ0idtYJUTxchytmnqYswcw==" + } + }, + "workspace": { + "dependencies": [ + "jsr:@db/sqlite@0.12", + "jsr:@std/cli@^1.0.17", + "jsr:@std/csv@^1.0.6", + "jsr:@std/encoding@^1.0.10", + "jsr:@std/expect@^1.0.16", + "jsr:@std/io@~0.225.2", + "jsr:@std/path@^1.0.9", + "jsr:@std/testing@^1.0.12", + "npm:@aws-sdk/client-s3@^3.797.0", + "npm:@aws-sdk/client-sesv2@^3.782.0", + "npm:@hono/zod-validator@0.5", + "npm:@smithy/fetch-http-handler@^5.0.4", + "npm:email-addresses@5", + "npm:hono@^4.7.10", + "npm:kysely@~0.28.2", + "npm:zod@^3.25.20" + ] + } +} diff --git a/services/docker/mail-server/relay/dovecot.ts b/services/docker/mail-server/relay/dovecot.ts new file mode 100644 index 0000000..a8f4b2a --- /dev/null +++ b/services/docker/mail-server/relay/dovecot.ts @@ -0,0 +1,94 @@ +import { basename } from "@std/path"; + +import config from "./config.ts"; +import log from "./log.ts"; +import { + Mail, + MailDeliverContext, + MailDeliverer, + MailDeliverRecipientResult, + RecipientFromHeadersHook, +} from "./mail.ts"; + +export class DovecotMailDeliverer extends MailDeliverer { + readonly name = "dovecot"; + + constructor() { + super(); + this.preHooks.push( + new RecipientFromHeadersHook(), + ); + } + + protected override async doDeliver( + mail: Mail, + context: MailDeliverContext, + ): Promise<void> { + const ldaPath = config.get("ldaPath"); + const ldaBinName = basename(ldaPath); + const utf8Stream = mail.toUtf8Bytes(); + + const recipients = [...context.recipients]; + if (recipients.length === 0) { + throw new Error("No recipients found."); + } + + log.info(`Deliver to ${recipients.join(", ")}.`); + + for (const recipient of recipients) { + log.info(`Call ${ldaBinName} for ${recipient}...`); + + const result: MailDeliverRecipientResult = { + kind: "done", + message: `${ldaBinName} exited with success.`, + }; + + try { + const ldaCommand = new Deno.Command(ldaPath, { + args: ["-d", recipient], + stdin: "piped", + stdout: "piped", + stderr: "piped", + }); + + const ldaProcess = ldaCommand.spawn(); + using logFiles = await log.openLogForProgram(ldaBinName); + ldaProcess.stdout.pipeTo(logFiles.stdout.writable); + ldaProcess.stderr.pipeTo(logFiles.stderr.writable); + + const stdinWriter = ldaProcess.stdin.getWriter(); + await stdinWriter.write(utf8Stream); + await stdinWriter.close(); + + const status = await ldaProcess.status; + + if (!status.success) { + result.kind = "fail"; + result.message = + `${ldaBinName} exited with error code ${status.code}`; + + if (status.signal != null) { + result.message += ` (signal ${status.signal})`; + } + + // https://doc.dovecot.org/main/core/man/dovecot-lda.1.html + switch (status.code) { + case 67: + result.message += ", recipient user not known"; + break; + case 75: + result.kind = "retry"; + break; + } + + result.message += "."; + } + } catch (e) { + result.kind = "fail"; + result.message = "An error was thrown when running lda process: " + e; + result.cause = e; + } + context.result.set(recipient, result); + } + } +} diff --git a/services/docker/mail-server/relay/dumb-smtp-server.ts b/services/docker/mail-server/relay/dumb-smtp-server.ts new file mode 100644 index 0000000..af2a69f --- /dev/null +++ b/services/docker/mail-server/relay/dumb-smtp-server.ts @@ -0,0 +1,122 @@ +import config from "./config.ts"; +import log from "./log.ts"; +import { MailDeliverer } from "./mail.ts"; + +const CRLF = "\r\n"; + +const SERVER_NAME = `[${config.SMTP_HOST}]:${config.SMTP_PORT}`; + +const RESPONSES = { + "READY": `220 ${SERVER_NAME} SMTP Ready`, + "EHLO": `250 ${SERVER_NAME}`, + "MAIL": "250 2.1.0 Sender OK", + "RCPT": "250 2.1.5 Recipient OK", + "DATA": "354 Start mail input; end with <CRLF>.<CRLF>", + "QUIT": `211 2.0.0 ${SERVER_NAME} closing connection`, + "INVALID": "500 5.5.1 Error: command not recognized", +} as const; + +export class DumbSMTPServer { + #deliverer: MailDeliverer; + + constructor(deliverer: MailDeliverer) { + this.#deliverer = deliverer; + } + + async #send(rawMail: string): Promise<{ message: string }> { + const mail = await this.#deliverer.deliverRaw(rawMail); + return { + message: mail.deliverMessage ?? "Success", + }; + } + + async #handleConnection(conn: Deno.Conn) { + using disposeStack = new DisposableStack(); + disposeStack.defer(() => { + log.info("Close smtp session tcp connection."); + conn.close(); + }); + const writer = conn.writable.getWriter(); + disposeStack.defer(() => writer.releaseLock()); + const reader = conn.readable.getReader(); + disposeStack.defer(() => reader.releaseLock()); + + const [decoder, encoder] = [new TextDecoder(), new TextEncoder()]; + const decode = (data: Uint8Array) => decoder.decode(data); + const send = async (s: string) => + await writer.write(encoder.encode(s + CRLF)); + + let buffer: string = ""; + let rawMail: string | null = null; + + await send(RESPONSES["READY"]); + + while (true) { + const { value, done } = await reader.read(); + if (done) break; + + buffer += decode(value); + + while (true) { + const eolPos = buffer.indexOf(CRLF); + if (eolPos === -1) break; + + const line = buffer.slice(0, eolPos); + buffer = buffer.slice(eolPos + CRLF.length); + + if (rawMail == null) { + log.info("Smtp server received line:", line); + const upperLine = line.toUpperCase(); + if (upperLine.startsWith("EHLO") || upperLine.startsWith("HELO")) { + await send(RESPONSES["EHLO"]); + } else if (upperLine.startsWith("MAIL FROM:")) { + await send(RESPONSES["MAIL"]); + } else if (upperLine.startsWith("RCPT TO:")) { + await send(RESPONSES["RCPT"]); + } else if (upperLine === "DATA") { + await send(RESPONSES["DATA"]); + log.info("Begin to receive mail data..."); + rawMail = ""; + } else if (upperLine === "QUIT") { + await send(RESPONSES["QUIT"]); + return; + } else { + log.warn("Smtp server command unrecognized:", line); + await send(RESPONSES["INVALID"]); + return; + } + } else { + if (line === ".") { + try { + log.info("Done receiving mail data..."); + const { message } = await this.#send(rawMail); + await send(`250 2.6.0 ${message}`); + rawMail = null; + log.info("Done SMTP mail session."); + } catch (err) { + log.info(err); + await send("554 5.3.0 Error: check server log"); + return; + } + } else { + const dataLine = line.startsWith("..") ? line.slice(1) : line; + rawMail += dataLine + CRLF; + } + } + } + } + } + + async serve() { + const listener = Deno.listen({ + hostname: config.SMTP_HOST, + port: config.SMTP_PORT, + }); + listener.unref(); + log.info(`Dumb SMTP server running on port ${config.SMTP_PORT}.`); + + for await (const conn of listener) { + await this.#handleConnection(conn); + } + } +} diff --git a/services/docker/mail-server/relay/log.ts b/services/docker/mail-server/relay/log.ts new file mode 100644 index 0000000..ce27eca --- /dev/null +++ b/services/docker/mail-server/relay/log.ts @@ -0,0 +1,116 @@ +import { join } from "@std/path"; +import { toWritableStream, Writer } from "@std/io"; + +import "./better-js.ts"; + +export interface LogOptions { + time?: Date; + error?: boolean; +} + +export type LogFile = Pick<Deno.FsFile, "writable"> & Disposable; + +export class Log { + #path: string | null = null; + + #wrapWriter(writer: Writer): LogFile { + return { + writable: toWritableStream(writer, { autoClose: false }), + [Symbol.dispose]() {}, + }; + } + + #stdoutWrapper: LogFile = this.#wrapWriter(Deno.stdout); + #stderrWrapper: LogFile = this.#wrapWriter(Deno.stderr); + + constructor() { + } + + get path() { + return this.#path; + } + + set path(path) { + this.#path = path; + if (path != null) { + Deno.mkdirSync(path, { recursive: true }); + } + } + + infoOrError(isError: boolean, ...args: unknown[]) { + this[isError ? "error" : "info"].call(this, ...args); + } + + info(...args: unknown[]) { + console.log(...args); + } + + warn(...args: unknown[]) { + console.warn(...args); + } + + error(...args: unknown[]) { + console.error(...args); + } + + #extractOptions(options?: LogOptions): Required<LogOptions> { + return { + time: options?.time ?? new Date(), + error: options?.error ?? false, + }; + } + + async openLog( + prefix: string, + suffix: string, + options?: LogOptions, + ): Promise<LogFile> { + if (prefix.includes("/")) { + throw new Error(`Log file prefix ${prefix} contains '/'.`); + } + if (suffix.includes("/")) { + throw new Error(`Log file suffix ${suffix} contains '/'.`); + } + + const { time, error } = this.#extractOptions(options); + if (this.#path == null) { + return error ? this.#stderrWrapper : this.#stdoutWrapper; + } + + const logPath = join( + this.#path, + `${prefix}-${time.toFileNameString()}-${suffix}`, + ); + return await Deno.open(logPath, { + read: false, + write: true, + append: true, + create: true, + }); + } + + async openLogForProgram( + program: string, + options?: Omit<LogOptions, "error">, + ): Promise<{ stdout: LogFile; stderr: LogFile } & Disposable> { + const stdout = await this.openLog(program, "stdout", { + ...options, + error: false, + }); + const stderr = await this.openLog(program, "stderr", { + ...options, + error: true, + }); + return { + stdout, + stderr, + [Symbol.dispose]: () => { + stdout[Symbol.dispose](); + stderr[Symbol.dispose](); + }, + }; + } +} + +const log = new Log(); +export default log; diff --git a/services/docker/mail-server/relay/mail.test.ts b/services/docker/mail-server/relay/mail.test.ts new file mode 100644 index 0000000..69cc5d9 --- /dev/null +++ b/services/docker/mail-server/relay/mail.test.ts @@ -0,0 +1,115 @@ +import { describe, it } from "@std/testing/bdd"; +import { expect, fn } from "@std/expect"; + +import { Mail, MailDeliverer } from "./mail.ts"; + +const mockDate = "Fri, 02 May 2025 08:33:02 +0000"; +const mockBodyStr = `This is body content. +Line 2 + +Line 4`; +const mockHeaders = [ + ["Content-Disposition", "inline"], + ["Content-Transfer-Encoding", "quoted-printable"], + ["MIME-Version", "1.0"], + ["X-Mailer", "MIME-tools 5.509 (Entity 5.509)"], + ["Content-Type", "text/plain; charset=utf-8"], + ["From", '"Mock From" <mock@from.mock>'], + [ + "To", + `"John \\"Big\\" Doe" <john@example.com>, "Alice (Work)" <alice+work@example.com>, + undisclosed-recipients:;, "Group: Team" <team@company.com>, + "Escaped, Name" <escape@test.com>, just@email.com, + "Comment (This is valid)" <comment@domain.net>, + "Odd @Chars" <weird!#$%'*+-/=?^_\`{|}~@char-test.com>, + "Non-ASCII 用户" <user@例子.中国>, + admin@[192.168.1.1]`, + ], + ["CC", "Mock CC <mock@cc.mock>"], + ["Subject", "A very long mock\n subject"], + ["Message-ID", "<abcdef@from.mock>"], + ["Date", mockDate], +]; +const mockHeaderStr = mockHeaders.map((h) => h[0] + ": " + h[1]).join("\n"); +const mockMailStr = mockHeaderStr + "\n\n" + mockBodyStr; +const mockCrlfMailStr = mockMailStr.replaceAll("\n", "\r\n"); +const mockToAddresses = [ + "john@example.com", + "alice+work@example.com", + "team@company.com", + "escape@test.com", + "just@email.com", + "comment@domain.net", + "weird!#$%'*+-/=?^_`{|}~@char-test.com", + "user@例子.中国", + "admin@[192.168.1.1]", +]; +const mockCcAddresses = ["mock@cc.mock"]; + +describe("Mail", () => { + it("simple parse", () => { + const parsed = new Mail(mockMailStr).simpleParse(); + expect(parsed.sections.header).toEqual(mockHeaderStr); + expect(parsed.sections.body).toEqual(mockBodyStr); + expect(parsed.sep).toBe("\n"); + expect(parsed.eol).toBe("\n"); + }); + + it("simple parse crlf", () => { + const parsed = new Mail(mockCrlfMailStr).simpleParse(); + expect(parsed.sep).toBe("\r\n"); + expect(parsed.eol).toBe("\r\n"); + }); + + it("simple parse date", () => { + expect(new Mail(mockMailStr).simpleParseDate()).toEqual(new Date(mockDate)); + }); + + it("simple parse headers", () => { + expect( + new Mail(mockMailStr).simpleParseHeaders(), + ).toEqual(mockHeaders.map( + (h) => [h[0], " " + h[1].replaceAll("\n", "")], + )); + }); + + it("append headers", () => { + const mail = new Mail(mockMailStr); + const mockMoreHeaders = [["abc", "123"], ["def", "456"]] satisfies [ + string, + string, + ][]; + mail.appendHeaders(mockMoreHeaders); + + expect(mail.raw).toBe( + mockHeaderStr + "\n" + + mockMoreHeaders.map((h) => h[0] + ": " + h[1]).join("\n") + + "\n\n" + mockBodyStr, + ); + }); + + it("parse recipients", () => { + const mail = new Mail(mockMailStr); + expect(mail.simpleParseRecipients()).toEqual([ + ...mockToAddresses, + ...mockCcAddresses, + ]); + expect(mail.simpleParseRecipients({domain: "example.com"})).toEqual([ + ...mockToAddresses, + ...mockCcAddresses, + ].filter(a => a.endsWith("example.com"))); + }); +}); + +describe("MailDeliverer", () => { + class MockMailDeliverer extends MailDeliverer { + name = "mock"; + override doDeliver = fn() as MailDeliverer["doDeliver"]; + } + const mockDeliverer = new MockMailDeliverer(); + + it("deliver success", async () => { + await mockDeliverer.deliverRaw(mockMailStr); + expect(mockDeliverer.doDeliver).toHaveBeenCalledTimes(1); + }); +}); diff --git a/services/docker/mail-server/relay/mail.ts b/services/docker/mail-server/relay/mail.ts new file mode 100644 index 0000000..7727b8b --- /dev/null +++ b/services/docker/mail-server/relay/mail.ts @@ -0,0 +1,318 @@ +import { encodeBase64 } from "@std/encoding/base64"; +import { parse } from "@std/csv/parse"; +import emailAddresses from "email-addresses"; + +import log from "./log.ts"; +import config from "./config.ts"; + +class MailParseError extends Error { + constructor( + message: string, + public readonly mail: Mail, + public readonly lineNumber?: number, + options?: ErrorOptions, + ) { + if (lineNumber != null) message += `(at line ${lineNumber})`; + super(message, options); + } +} + +interface ParsedMail { + sections: { + header: string; + body: string; + }; + /** + * The empty line between headers and body. + */ + sep: string; + eol: string; +} + +export class Mail { + date?: Date; + messageId?: string; + deliverMessage?: string; + + constructor(public raw: string) {} + + toUtf8Bytes(): Uint8Array { + const utf8Encoder = new TextEncoder(); + return utf8Encoder.encode(this.raw); + } + + toBase64(): string { + return encodeBase64(this.raw); + } + + simpleParse(): ParsedMail { + const twoEolMatch = this.raw.match(/(\r?\n)(\r?\n)/); + if (twoEolMatch == null) { + throw new MailParseError( + "No header/body section separator (2 successive EOLs) found.", + this, + ); + } + + const [eol, sep] = [twoEolMatch[1], twoEolMatch[2]]; + + if (eol !== sep) { + log.warn("Different EOLs (\\r\\n, \\n) found."); + } + + return { + sections: { + header: this.raw.slice(0, twoEolMatch.index!), + body: this.raw.slice(twoEolMatch.index! + eol.length + sep.length), + }, + sep, + eol, + }; + } + + simpleParseHeaders(): [key: string, value: string][] { + const { sections } = this.simpleParse(); + const headers: [string, string][] = []; + + let field: string | null = null; + let lineNumber = 1; + + const handleField = () => { + if (field == null) return; + const sepPos = field.indexOf(":"); + if (sepPos === -1) { + throw new MailParseError( + "No ':' in the header field.", + this, + lineNumber, + ); + } + headers.push([field.slice(0, sepPos).trim(), field.slice(sepPos + 1)]); + field = null; + }; + + for (const line of sections.header.trimEnd().split(/\r?\n|\r/)) { + if (line.match(/^\s/)) { + if (field == null) { + throw new MailParseError( + "Header field starts with a space.", + this, + lineNumber, + ); + } + field += line; + } else { + handleField(); + field = line; + } + lineNumber += 1; + } + + handleField(); + + return headers; + } + + simpleParseDate<T = undefined>( + invalidValue: T | undefined = undefined, + ): Date | T | undefined { + const headers = this.simpleParseHeaders(); + for (const [key, value] of headers) { + if (key.toLowerCase() === "date") { + const date = new Date(value); + if (isNaN(date.getTime())) { + log.warn(`Invalid date string (${value}) found in header.`); + return invalidValue; + } + return date; + } + } + return undefined; + } + + simpleParseRecipients( + options?: { domain?: string; headers?: string[] }, + ): Set<string> { + const domain = options?.domain; + const headers = options?.headers ?? ["to", "cc", "bcc", "x-original-to"]; + const recipients = new Set<string>(); + for (const [key, value] of this.simpleParseHeaders()) { + if (headers.includes(key.toLowerCase())) { + emailAddresses.parseAddressList(value)?.flatMap((a) => + a.type === "mailbox" ? a.address : a.addresses.map((a) => a.address) + )?.forEach((a) => { + if (domain == null || a.endsWith(domain)) { + recipients.add(a); + } + }); + } + } + return recipients; + } + + // TODO: Add folding. + appendHeaders(headers: [key: string, value: string][]) { + const { sections, sep, eol } = this.simpleParse(); + + this.raw = sections.header + eol + + headers.map(([k, v]) => `${k}: ${v}`).join(eol) + eol + sep + + sections.body; + } +} + +export type MailDeliverResultKind = "done" | "fail" | "retry"; + +export interface MailDeliverRecipientResult { + kind: MailDeliverResultKind; + message: string; + cause?: unknown; +} + +export class MailDeliverResult { + readonly recipients: Map<string, MailDeliverRecipientResult> = new Map(); + + add( + recipient: string, + kind: MailDeliverResultKind, + message: string, + cause?: unknown, + ) { + this.recipients.set(recipient, { kind, message, cause }); + } + + set(recipient: string, result: MailDeliverRecipientResult) { + this.recipients.set(recipient, result); + } + + [Symbol.for("Deno.customInspect")]() { + return [ + ...this.recipients.entries().map(([recipient, result]) => + `${recipient} [${result.kind}]: ${result.message}` + ), + ].join("\n"); + } +} + +export class MailDeliverContext { + readonly recipients: Set<string> = new Set(); + readonly result: MailDeliverResult = new MailDeliverResult(); + + constructor(public mail: Mail) {} +} + +export interface MailDeliverHook { + callback(context: MailDeliverContext): Promise<void>; +} + +export abstract class MailDeliverer { + abstract readonly name: string; + preHooks: MailDeliverHook[] = []; + postHooks: MailDeliverHook[] = []; + + protected abstract doDeliver( + mail: Mail, + context: MailDeliverContext, + ): Promise<void>; + + async deliverRaw(rawMail: string): Promise<Mail> { + const mail = new Mail(rawMail); + await this.deliver({ mail }); + return mail; + } + + async deliver( + options: { mail: Mail; recipients?: string[] }, + ): Promise<MailDeliverResult> { + log.info(`Begin to deliver mail via ${this.name}...`); + + const context = new MailDeliverContext(options.mail); + options.recipients?.forEach((r) => context.recipients.add(r)); + + for (const hook of this.preHooks) { + await hook.callback(context); + } + + await this.doDeliver(context.mail, context); + + for (const hook of this.postHooks) { + await hook.callback(context); + } + + log.info("Deliver result:"); + log.info(context.result); + + if (context.result.recipients.values().some((r) => r.kind !== "done")) { + throw new Error("Mail failed to deliver."); + } + + return context.result; + } +} + +export class RecipientFromHeadersHook implements MailDeliverHook { + callback(context: MailDeliverContext) { + if (context.recipients.size !== 0) { + log.warn( + "Recipients are already filled. Won't set them with ones in headers.", + ); + } else { + context.mail.simpleParseRecipients({ + domain: config.get("mailDomain"), + }).forEach((r) => context.recipients.add(r)); + + log.info( + "Recipients found from mail headers: ", + [...context.recipients].join(" "), + ); + } + return Promise.resolve(); + } +} + +export class FallbackRecipientHook implements MailDeliverHook { + constructor(public fallback: Set<string> = new Set()) {} + + callback(context: MailDeliverContext) { + if (context.recipients.size === 0) { + log.info( + "No recipients, fill with fallback: ", + [...this.fallback].join(" "), + ); + this.fallback.forEach((a) => context.recipients.add(a)); + } + return Promise.resolve(); + } +} + +export class AliasRecipientMailHook implements MailDeliverHook { + #aliasFile; + + constructor(aliasFile: string) { + this.#aliasFile = aliasFile; + } + + async #parseAliasFile(): Promise<Map<string, string>> { + const result = new Map(); + if ((await Deno.stat(this.#aliasFile)).isFile) { + log.info(`Found recipients alias file: ${this.#aliasFile}.`); + const text = await Deno.readTextFile(this.#aliasFile); + const csv = parse(text); + for (const [real, ...aliases] of csv) { + aliases.forEach((a) => result.set(a, real)); + } + } + return result; + } + + async callback(context: MailDeliverContext) { + const aliases = await this.#parseAliasFile(); + for (const recipient of [...context.recipients]) { + const realRecipients = aliases.get(recipient); + if (realRecipients != null) { + log.info(`Recipient alias resolved: ${recipient} => ${realRecipients}.`); + context.recipients.delete(recipient); + context.recipients.add(realRecipients); + } + } + } +} diff --git a/services/docker/nginx/configs/templates/mail.conf.template b/services/docker/nginx/configs/templates/mail.conf.template index 7f5f215..c47630f 100644 --- a/services/docker/nginx/configs/templates/mail.conf.template +++ b/services/docker/nginx/configs/templates/mail.conf.template @@ -6,14 +6,14 @@ server { root /srv/mail; } - location / { + location = /${CRUPEST_MAIL_SERVER_AWS_INBOUND_PATH} { include common/proxy-common; - proxy_pass http://roundcubemail:80/; + proxy_pass http://mail-server:2345/${CRUPEST_MAIL_SERVER_AWS_INBOUND_PATH}; } - location /rspamd/ { + location / { include common/proxy-common; - proxy_pass http://mailserver:11334/; + proxy_pass http://roundcubemail:80/; } client_max_body_size 5G; |