spencermandClaude Opus 5.5
a82e056b6a
Admin: Departments (name and stations; add shows the three groups IT must create), Profiles (welder stamp, station limits, active) with a CSV import that previews and applies only when clean, Checklists (weld and plain), Security (session, lockout and rate-limit settings with bounds, alerts for the last 24 hours, the integrity result), Access log with filters and a guarded CSV, Who is in, Stamp check, Notifications, and the employeeID flags. Every Admin change is audited. Worker: ad-reconcile (nightly and on "refresh from AD now"), session-refresh (15 minutes), integrity (seals, asset hashes, missing and orphan files, the audit chain), backup-check, notify-send and notify-digest. Notifications route per event type to AD groups, users, mailboxes or the department Supervisor group, immediately or in a daily digest, over STARTTLS verified against the PESCO CA, with dry run on the test stack. Backups: scripts/backup/ps-backup.sh and ps-restore.sh with a systemd timer at 02:00 America/Denver. Restore rehearsed on the test stack 2026-10-21. CI: pip-audit and npm audit. pypdf 6.21.1 and certifi 2026.10.19. Migration 0010. Closes the app part of I6, M3, O1, O2 and S3. Co-Authored-By: Claude Opus 5.5 <[email protected]>
87 lines
3.4 KiB
Python
87 lines
3.4 KiB
Python
"""Send one message through the relay. STARTTLS verified against SMTP_CA_BUNDLE, never a plain-text fallback.
|
|
|
|
To: is the From address; the real recipients go in the envelope only, so nobody sees the list. No credentials.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import smtplib
|
|
import ssl
|
|
from collections.abc import Sequence
|
|
from email.message import EmailMessage
|
|
from email.utils import formatdate, make_msgid
|
|
|
|
from ..settings import Settings
|
|
|
|
TIMEOUT_SECONDS = 15
|
|
MAIL_OFF = "Mail is off: SMTP_HOST is empty."
|
|
|
|
|
|
class MailError(Exception):
|
|
"""The relay could not take the message. The text is safe to store and show (no secrets)."""
|
|
|
|
|
|
def tls_context(settings: Settings) -> ssl.SSLContext:
|
|
"""The same verified context the doctor uses: system trust plus SMTP_CA_BUNDLE when set."""
|
|
return ssl.create_default_context(cafile=str(settings.smtp_ca_bundle) if settings.smtp_ca_bundle else None)
|
|
|
|
|
|
def subject_prefix(settings: Settings) -> str:
|
|
return "[Packet Station]" if settings.stack == "prod" else "[Packet Station TEST]"
|
|
|
|
|
|
def full_subject(settings: Settings, title: str) -> str:
|
|
return f"{subject_prefix(settings)} {title}".strip()[:250]
|
|
|
|
|
|
def build_message(settings: Settings, subject: str, body: str) -> EmailMessage:
|
|
msg = EmailMessage()
|
|
msg["From"] = settings.smtp_from
|
|
msg["To"] = settings.smtp_from
|
|
msg["Subject"] = subject
|
|
msg["Date"] = formatdate(localtime=False)
|
|
domain = settings.smtp_from.rpartition("@")[2] or None
|
|
msg["Message-ID"] = make_msgid(domain=domain)
|
|
msg["Auto-Submitted"] = "auto-generated"
|
|
msg.set_content(body or subject)
|
|
return msg
|
|
|
|
|
|
def send(settings: Settings, subject: str, body: str, to: Sequence[str]) -> str | None:
|
|
"""Deliver one message to the envelope addresses `to`. Raises MailError when nothing was delivered.
|
|
|
|
Returns None, or a note naming the addresses the relay refused when it took the message for the rest."""
|
|
host = (settings.smtp_host or "").strip()
|
|
if not host:
|
|
raise MailError(MAIL_OFF)
|
|
if not to:
|
|
raise MailError("No recipients.")
|
|
msg = build_message(settings, subject, body)
|
|
try:
|
|
with smtplib.SMTP(host, settings.smtp_port, timeout=TIMEOUT_SECONDS) as smtp:
|
|
smtp.ehlo()
|
|
if settings.smtp_starttls:
|
|
# starttls raises SMTPNotSupportedError when the relay does not offer it: no fallback
|
|
smtp.starttls(context=tls_context(settings))
|
|
smtp.ehlo()
|
|
refused = smtp.send_message(msg, from_addr=settings.smtp_from, to_addrs=list(to))
|
|
except ssl.SSLError as e:
|
|
raise MailError(f"TLS: {e.reason or e}") from None
|
|
except ssl.CertificateError as e:
|
|
raise MailError(f"TLS: {e}") from None
|
|
except smtplib.SMTPNotSupportedError:
|
|
raise MailError("The relay does not offer STARTTLS; not sent.") from None
|
|
except smtplib.SMTPRecipientsRefused as e:
|
|
raise MailError(f"Every recipient was refused ({len(e.recipients)}).") from None
|
|
except smtplib.SMTPResponseException as e:
|
|
raise MailError(f"SMTP {e.smtp_code}: {_text(e.smtp_error)}") from None
|
|
except (OSError, smtplib.SMTPException) as e:
|
|
raise MailError(f"{type(e).__name__}: {e}") from None
|
|
if refused:
|
|
return f"Refused for {len(refused)} of {len(to)} recipients: {', '.join(sorted(refused))[:300]}"
|
|
return None
|
|
|
|
|
|
def _text(value: bytes | str) -> str:
|
|
return (value.decode("utf-8", "replace") if isinstance(value, bytes) else str(value))[:300]
|