go-cart-actor's hand-rolled SMTP stack (SASL loginAuth/plainAuth, dial/
STARTTLS/auth/MAIL/RCPT/DATA wire code, MIME builders) is replaced by an
adapter over platform/email, which gains the multipart/mixed attachment
envelope ported from it. One SMTP implementation now serves both the
order/ledger senders and go-auth's AUTH_EMAIL_* flows; public surfaces
(SMTPEmailSenderConfig, NewSMTPEmailSender, EmailSender, EmailMessage)
are unchanged so all callers compile untouched. Bumps the go-cart-actor
pin to 7cad997.
Generated with Codebuff 🤖
Co-Authored-By: Codebuff <noreply@codebuff.com>
Give go-auth mail delivery on the shared platform/email sender (same
transport contract as the order service's ORDER_EMAIL_*): AUTH_EMAIL_SENDER=
smtp|log with the AUTH_EMAIL_SMTP_* knobs. /forgot emails a single-use
AOF-backed reset link (no enumeration, throttled) and /reset sets a new
password, revoking sessions, refresh tokens and remaining reset links;
admin invite + password-reset email credentials, and the create_user /
set_user_password MCP tools match (revoking outstanding reset links too).
Compose/k8s default to the log sender so the flows are exercisable without
SMTP credentials. Committed together with the Auth MCP server, its client-
registry admin UI, and the mcp-servers doc row they build on.
Generated with Codebuff 🤖
Co-Authored-By: Codebuff <noreply@codebuff.com>
mats