feat(f6.2): add per-act representative signing and user smtp

api-v3/src/inspection-reports/smtp-delivery.service.ts

@@ -11,7 +11,7 @@ interface MailInput { to:string; subject:string; text:string; attachment:MailAtt
 interface Reply { code:number; text:string; }
 
 export interface EffectiveSmtpSettings {
-  source: 'DATABASE' | 'ENVIRONMENT';
+  source: 'USER' | 'DATABASE' | 'ENVIRONMENT';
   host: string;
   port: number;
   securityMode: SmtpSecurityMode;
@@ -47,10 +47,10 @@ export class SmtpDeliveryService {
     private readonly config:ConfigService,
   ){}
 
-  async configured():Promise<boolean>{return Boolean(await this.resolveSettings());}
+  async configured(userId?:string):Promise<boolean>{return Boolean(await this.resolveSettings(userId));}
 
-  async fromAddress():Promise<string|null>{
-    const settings=await this.resolveSettings();
+  async fromAddress(userId?:string):Promise<string|null>{
+    const settings=await this.resolveSettings(userId);
     if(!settings)return null;
     return settings.fromName?`${settings.fromName} <${settings.fromEmail}>`:settings.fromEmail;
   }
@@ -73,6 +73,56 @@ export class SmtpDeliveryService {
     }:{source:'NONE',enabled:false};
   }
 
+  async publicUserSettings(userId:string){
+    const [user]=await this.dataSource.query(`
+      SELECT email,first_name AS "firstName",last_name AS "lastName" FROM users WHERE id=$1
+    `,[userId]) as Array<{email:string;firstName:string;lastName:string}>;
+    if(!user)throw new Error('Usuario no encontrado');
+    const [row]=await this.dataSource.query(`
+      SELECT mode,host,port,security_mode AS "securityMode",username,
+        (password_enc IS NOT NULL) AS "hasPassword",from_name AS "fromName",
+        from_email AS "fromEmail",enabled,updated_at AS "updatedAt"
+      FROM user_smtp_settings WHERE user_id=$1
+    `,[userId]) as Array<Record<string,unknown>>;
+    return {
+      mode:row?.mode??'SYSTEM',email:user.email,generalConfigured:Boolean(await this.resolveSystemSettings()),
+      custom:row?{
+        host:row.host??'',port:row.port??587,securityMode:row.securityMode??'STARTTLS',
+        username:row.username??'',hasPassword:Boolean(row.hasPassword),
+        fromName:row.fromName??`${user.firstName} ${user.lastName}`,fromEmail:row.fromEmail??user.email,
+        enabled:row.enabled!==false,updatedAt:row.updatedAt??null,
+      }:null,
+    };
+  }
+
+  async saveUserSettings(userId:string,input:{
+    mode:'SYSTEM'|'CUSTOM';host?:string;port?:number;securityMode?:SmtpSecurityMode;
+    username?:string|null;password?:string|null;fromName?:string|null;enabled?:boolean;
+  }){
+    const [user]=await this.dataSource.query(`SELECT email,first_name AS "firstName",last_name AS "lastName" FROM users WHERE id=$1`,[userId]) as Array<{email:string;firstName:string;lastName:string}>;
+    if(!user?.email)throw new Error('El usuario debe tener un email configurado');
+    const [existing]=await this.dataSource.query(`SELECT password_enc AS "passwordEnc" FROM user_smtp_settings WHERE user_id=$1`,[userId]) as Array<{passwordEnc:string|null}>;
+    if(input.mode==='SYSTEM'){
+      await this.dataSource.query(`
+        INSERT INTO user_smtp_settings(user_id,mode,updated_by) VALUES($1,'SYSTEM',$1)
+        ON CONFLICT(user_id) DO UPDATE SET mode='SYSTEM',updated_by=$1,updated_at=CURRENT_TIMESTAMP
+      `,[userId]);
+      return this.publicUserSettings(userId);
+    }
+    if(!input.host||!input.port||!input.securityMode)throw new Error('La configuración SMTP propia está incompleta');
+    const passwordEnc=input.password===undefined?existing?.passwordEnc??null:input.password?this.encryptSecret(input.password):null;
+    const fromName=input.fromName?.trim()||`${user.firstName} ${user.lastName}`.trim();
+    await this.dataSource.query(`
+      INSERT INTO user_smtp_settings(user_id,mode,host,port,security_mode,username,password_enc,from_name,from_email,reply_to,enabled,updated_by)
+      VALUES($1,'CUSTOM',$2,$3,$4,$5,$6,$7,$8,$8,$9,$1)
+      ON CONFLICT(user_id) DO UPDATE SET mode='CUSTOM',host=EXCLUDED.host,port=EXCLUDED.port,
+        security_mode=EXCLUDED.security_mode,username=EXCLUDED.username,password_enc=EXCLUDED.password_enc,
+        from_name=EXCLUDED.from_name,from_email=EXCLUDED.from_email,reply_to=EXCLUDED.reply_to,
+        enabled=EXCLUDED.enabled,updated_by=$1,updated_at=CURRENT_TIMESTAMP
+    `,[userId,input.host,input.port,input.securityMode,input.username?.trim()||null,passwordEnc,fromName,user.email,input.enabled!==false]);
+    return this.publicUserSettings(userId);
+  }
+
   async saveSettings(input:{
     host:string;port:number;securityMode:SmtpSecurityMode;username?:string|null;
     password?:string|null;fromName:string;fromEmail:string;replyTo?:string|null;enabled:boolean;
@@ -96,8 +146,8 @@ export class SmtpDeliveryService {
     return this.publicSettings();
   }
 
-  async send(input:MailInput):Promise<{messageId:string}>{
-    const settings=await this.resolveSettings();
+  async send(input:MailInput,userId?:string):Promise<{messageId:string}>{
+    const settings=await this.resolveSettings(userId);
     if(!settings)throw new Error('SMTP no configurado');
     const {host,port,securityMode,userName,password}= {
       host:settings.host,port:settings.port,securityMode:settings.securityMode,
@@ -137,7 +187,33 @@ export class SmtpDeliveryService {
     return {messageId:match?.[1]??randomUUID()};
   }
 
-  private async resolveSettings():Promise<EffectiveSmtpSettings|null>{
+  private async resolveSettings(userId?:string):Promise<EffectiveSmtpSettings|null>{
+    if(userId){
+      const [row]=await this.dataSource.query(`
+        SELECT settings.mode,settings.host,settings.port,settings.security_mode AS "securityMode",
+          settings.username,settings.password_enc AS "passwordEnc",settings.from_name AS "fromName",
+          settings.enabled,user_account.email AS "userEmail"
+        FROM users user_account
+        LEFT JOIN user_smtp_settings settings ON settings.user_id=user_account.id
+        WHERE user_account.id=$1
+      `,[userId]) as Array<{
+        mode:'SYSTEM'|'CUSTOM'|null;host:string|null;port:number|null;securityMode:SmtpSecurityMode|null;
+        username:string|null;passwordEnc:string|null;fromName:string|null;enabled:boolean|null;userEmail:string;
+      }>;
+      if(row?.mode==='CUSTOM'&&row.enabled!==false&&row.host&&row.port&&row.securityMode&&row.userEmail){
+        return {
+          source:'USER',host:row.host,port:Number(row.port),securityMode:row.securityMode,
+          username:row.username,password:row.passwordEnc?this.decryptSecret(row.passwordEnc):'',
+          fromName:row.fromName,fromEmail:row.userEmail,replyTo:row.userEmail,
+        };
+      }
+      const general=await this.resolveSystemSettings();
+      return general&&row?.userEmail?{...general,replyTo:row.userEmail}:general;
+    }
+    return this.resolveSystemSettings();
+  }
+
+  private async resolveSystemSettings():Promise<EffectiveSmtpSettings|null>{
     const [row]=await this.dataSource.query(`
       SELECT host,port,security_mode AS "securityMode",username,password_enc AS "passwordEnc",
         from_name AS "fromName",from_email AS "fromEmail",reply_to AS "replyTo",enabled