belt-messaging 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 57f12b22980eee716c98dcd00612c63b7b72a964cb3fef007fc0c1e594893cef
-  data.tar.gz: 81c05386abb62cfd11aceb9c68fb089dc81e5aa870904cfad5f27920d7bf6590
+  metadata.gz: e3f46b8a5c65296c353f37726532835ef2c4b65a988861f8d6c26efbf433a7d8
+  data.tar.gz: 64d9a505cfd10b21c606f78e7cea5c208147c6857bad19629e2a0b307e24a659
 SHA512:
-  metadata.gz: add692f4eed8cf815613228ed61aa4e9905c9be7bf07289e7f31e736ae943fae216749938282f766bb39a848f4ea7aab5f6e0bfa8e7e2bf85a02c600b68f8910
-  data.tar.gz: b016a16412ad2bfad897cddd6dd3a765e1a2a0a4760bd1229d960843021331e6964d5512236c09679a0a2ed396a3e6ab8f29e07bc035793b380ba6d1abd9ba96
+  metadata.gz: 217d18276f86e6efd68ae4149a105a01e1a4d541afea332f22fd1e132dd1d39dbc0c21f01ecc16dc45637c30d5d6f6b7d4a809d74e6144adfd07eba465a7f289
+  data.tar.gz: 5b5161710702b061b8739c8145a2c92f2023958c73742a20a9bca90c51f1c5ac50582380e98d23da7f09a72fbcf4a9e74aabb0ca590b8f60f761a502eaba8eac

data/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.2.0
+
+- `Belt::Messaging.send_email` accepts `headers:` (Hash of extra message headers) and `reply_to:` (String or Array). Headers go through SESv2 simple content, so you can set `List-Unsubscribe` + `List-Unsubscribe-Post: List-Unsubscribe=One-Click` (RFC 8058) and get the Gmail/Yahoo one-click unsubscribe button. Invalid reply-to addresses reject the send, same as invalid recipients.
+- Require `aws-sdk-sesv2 ~> 1.45` (first release with SendEmail custom headers).
+
+## 0.1.1
+
+- Fix Terraform `email_send` IAM policy failing to apply on a fresh deploy: its `count` was gated on the SES identity ARN, a computed attribute unknown until apply, which raised `Invalid count argument`. Gate the policy document, policy resource, and `email_send_policy_arn` output on a plan-time-known local derived from input variables instead. Without this, the Lambda role never received `ses:SendEmail` and outbound transactional email silently never sent.
+
 ## 0.1.0
 
 - Add `Belt::Messaging.send_email(to:, subject:, body:, html:)` — send email via AWS SESv2

data/README.md

@@ -44,6 +44,18 @@ Belt::Messaging.send_email(
   html: '<h1>Weekly Update</h1><p>HTML version...</p>'
 )
 
+# Reply-To and custom headers (e.g. RFC 8058 one-click unsubscribe)
+Belt::Messaging.send_email(
+  to: 'user@example.com',
+  subject: 'You were invited',
+  body: 'Join us... Stop these emails: https://example.com/unsub?t=abc',
+  reply_to: 'support@example.com',
+  headers: {
+    'List-Unsubscribe' => '<https://example.com/unsub?t=abc>',
+    'List-Unsubscribe-Post' => 'List-Unsubscribe=One-Click'
+  }
+)
+
 # Phone number utilities
 Belt::Messaging::PhoneFormatter.format_e164('(555) 123-4567') #=> '+15551234567'
 Belt::Messaging::PhoneFormatter.valid?('555-123-4567')         #=> true

data/lib/belt/messaging/email.rb

@@ -20,8 +20,12 @@ module Belt
       # @param body [String] Email body (plain text)
       # @param html [String, nil] Optional HTML body
       # @param from [String, nil] Override the configured from address
+      # @param reply_to [String, Array<String>, nil] Reply-To address(es)
+      # @param headers [Hash{String => String}] Extra message headers, e.g.
+      #   { 'List-Unsubscribe' => '<https://example.com/unsub?t=abc>',
+      #     'List-Unsubscribe-Post' => 'List-Unsubscribe=One-Click' }
       # @return [Boolean] true if sent successfully, false otherwise
-      def self.send(to:, subject:, body:, html: nil, from: nil)
+      def self.send(to:, subject:, body:, html: nil, from: nil, reply_to: nil, headers: {})
         config = Belt::Messaging.configuration
 
         unless config.email_enabled?
@@ -48,6 +52,13 @@ module Belt
           return false
         end
 
+        reply_to_addresses = Array(reply_to)
+        invalid_reply_to = reply_to_addresses.reject { |email| valid_email?(email) }
+        if invalid_reply_to.any?
+          log(:error, 'Invalid reply-to address format', invalid: invalid_reply_to)
+          return false
+        end
+
         from_address = from || config.email_from_address
         if from_address.nil? || from_address.empty?
           log(:error, 'EMAIL_FROM_ADDRESS not configured')
@@ -57,13 +68,16 @@ module Belt
         begin
           client = Aws::SESV2::Client.new(region: config.aws_region)
 
-          email_content = build_email_content(subject, body, html)
+          email_content = build_email_content(subject, body, html, headers)
 
-          client.send_email({
+          params = {
             from_email_address: from_address,
             destination: { to_addresses: recipients },
             content: { simple: email_content }
-          })
+          }
+          params[:reply_to_addresses] = reply_to_addresses if reply_to_addresses.any?
+
+          client.send_email(params)
 
           log(:info, 'Email sent successfully', to: recipients, subject: subject)
           true
@@ -91,7 +105,7 @@ module Belt
         email.match?(/\A[^@\s]+@[^@\s]+\.[^@\s]+\z/)
       end
 
-      def self.build_email_content(subject, body, html)
+      def self.build_email_content(subject, body, html, headers)
         content = {
           subject: { data: subject, charset: 'UTF-8' },
           body: {
@@ -99,6 +113,9 @@ module Belt
           }
         }
         content[:body][:html] = { data: html, charset: 'UTF-8' } if html
+        if headers && !headers.empty?
+          content[:headers] = headers.map { |name, value| { name: name.to_s, value: value.to_s } }
+        end
         content
       end
       private_class_method :build_email_content

data/lib/belt/messaging/templates/terraform/main.tf.erb

@@ -25,9 +25,16 @@ locals {
     ManagedBy   = "Terraform"
   }
 
+  # Whether an email identity will be created — known entirely from input vars at
+  # plan time. Gate the email_send policy's count on THIS, not on the resulting ARN:
+  # the ARN is a computed attribute of the SES identity and isn't known until apply,
+  # so using it in a count throws "Invalid count argument".
+  email_identity_enabled = var.enable_email && (var.email_domain != "" || var.email_from_address != "")
+
   # Safe three-way resolution: domain takes precedence, then address, then empty.
   # If enable_email is true but neither identity var is set, this resolves to ""
-  # and the email_send policy is skipped (count gated on this being non-empty).
+  # (email_identity_enabled is false, so nothing references it). Used only inside
+  # resource bodies, where an unknown-until-apply value is fine.
   email_identity_arn = var.enable_email ? (
     var.email_domain != "" ? aws_sesv2_email_identity.domain[0].arn : (
       var.email_from_address != "" ? aws_sesv2_email_identity.address[0].arn : ""
@@ -243,7 +250,7 @@ check "email_identity_configured" {
 }
 
 data "aws_iam_policy_document" "email_send" {
-  count = var.enable_email && local.email_identity_arn != "" ? 1 : 0
+  count = local.email_identity_enabled ? 1 : 0
 
   statement {
     effect = "Allow"
@@ -256,7 +263,7 @@ data "aws_iam_policy_document" "email_send" {
 }
 
 resource "aws_iam_policy" "email_send" {
-  count = var.enable_email && local.email_identity_arn != "" ? 1 : 0
+  count = local.email_identity_enabled ? 1 : 0
 
   name        = "${var.app_name}-${var.environment}-email-send"
   description = "Allow Lambda to send email via SESv2"

data/lib/belt/messaging/templates/terraform/outputs.tf.erb

@@ -41,7 +41,7 @@ output "email_identity_verification_status" {
 
 output "email_send_policy_arn" {
   description = "ARN of IAM policy granting ses:SendEmail"
-  value       = var.enable_email && local.email_identity_arn != "" ? aws_iam_policy.email_send[0].arn : ""
+  value       = local.email_identity_enabled ? aws_iam_policy.email_send[0].arn : ""
 }
 
 output "email_domain_dkim_tokens" {

data/lib/belt/messaging/version.rb

@@ -2,6 +2,6 @@
 
 module Belt
   module Messaging
-    VERSION = '0.1.0'
+    VERSION = '0.2.0'
   end
 end

data/lib/belt/messaging.rb

@@ -49,9 +49,12 @@ module Belt
       # @param body [String] Email body (plain text)
       # @param html [String, nil] Optional HTML body
       # @param from [String, nil] Override configured from address
+      # @param reply_to [String, Array<String>, nil] Reply-To address(es)
+      # @param headers [Hash{String => String}] Extra message headers (e.g. List-Unsubscribe)
       # @return [Boolean] true if sent successfully
-      def send_email(to:, subject:, body:, html: nil, from: nil)
-        Email.send(to: to, subject: subject, body: body, html: html, from: from)
+      def send_email(to:, subject:, body:, html: nil, from: nil, reply_to: nil, headers: {})
+        Email.send(to: to, subject: subject, body: body, html: html, from: from,
+                   reply_to: reply_to, headers: headers)
       end
     end
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: belt-messaging
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Stowzilla
@@ -43,14 +43,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: '1.45'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.0'
+        version: '1.45'
 description: Belt plugin providing SMS and email messaging. SMS via AWS PinpointSMSVoiceV2,
   email via AWS SESv2. Includes phone verification, opt-in/opt-out handling, and Terraform
   infrastructure.