@c9up/goldstone 0.0.0-stage → 0.1.0

package/dist/ReceivedMessage.js

@@ -0,0 +1,179 @@
+/**
+ * A received mail, parsed as the hostile input it is.
+ *
+ *   const message = await parseMessage(raw)
+ *   message.subject
+ *   message.html            // sanitized: safe to render
+ *   message.attachments[0].fileName   // safe to save under
+ *
+ * The parsing happens in Rust, in one call and off the JavaScript thread:
+ * the raw bytes go in, this comes out. The size is checked before a byte is
+ * parsed, the structure is bounded after, and what the sender controls — the
+ * HTML, the attachment names — is made safe before it reaches the
+ * application.
+ */
+import { fromNative, nativeOptions, } from "./authenticity.js";
+import { fromEngine, GoldstoneError } from "./errors.js";
+import { engine, snapshot } from "./native.js";
+export class ReceivedMessage {
+    messageId;
+    subject;
+    date;
+    from;
+    to;
+    cc;
+    bcc;
+    replyTo;
+    inReplyTo;
+    references;
+    headers;
+    text;
+    /**
+     * Sanitized for display: no script, no event handler, no `javascript:`
+     * URL, and no remote content unless `remoteContent: "allow"`.
+     */
+    html;
+    /**
+     * Why `html` is absent although the message has an HTML body: over
+     * `maxHtmlBytes` (`E_GOLDSTONE_HTML_TOO_LARGE`), nested too deep
+     * (`…_HTML_TOO_DEEP`), or building a tree out of proportion to its markup
+     * (`…_HTML_TOO_COMPLEX`). Sanitizing such HTML would cost time that grows
+     * faster than its size; the text and the rest of the message are there.
+     */
+    htmlError;
+    attachments;
+    /**
+     * Who really sent it — present when the message was read with
+     * {@link readMessage} (as a mailbox reads it), absent from
+     * {@link parseMessage}, which does no DNS.
+     */
+    authenticity;
+    #unsanitizedHtml;
+    constructor(parsed, authenticity) {
+        this.authenticity = authenticity;
+        this.messageId = parsed.messageId;
+        this.subject = parsed.subject;
+        this.date = parsed.date === undefined ? undefined : new Date(parsed.date);
+        this.from = parsed.from;
+        this.to = parsed.to;
+        this.cc = parsed.cc;
+        this.bcc = parsed.bcc;
+        this.replyTo = parsed.replyTo;
+        this.inReplyTo = parsed.inReplyTo;
+        this.references = parsed.references;
+        this.headers = parsed.headers;
+        this.text = parsed.text;
+        this.html = parsed.html;
+        this.htmlError =
+            parsed.htmlError === undefined ? undefined : fromEngine(parsed.htmlError);
+        this.#unsanitizedHtml = parsed.unsanitizedHtml;
+        this.attachments = parsed.attachments.map((a) => ({
+            fileName: a.fileName,
+            originalName: a.originalName,
+            contentType: a.contentType,
+            size: a.content.length,
+            content: a.content,
+            contentId: a.contentId,
+            inline: a.inline,
+        }));
+    }
+    /**
+     * The first header of that name, any case: the copy the message's
+     * fields (`from`, `subject`…) read too. Every copy is in `headers`.
+     */
+    header(name) {
+        const wanted = name.toLowerCase();
+        return this.headers.find((h) => h.name.toLowerCase() === wanted)?.value;
+    }
+    /**
+     * The HTML exactly as the sender wrote it. Never render it: it can carry
+     * scripts. It exists for what has to see the original — archiving,
+     * forwarding, forensic inspection.
+     */
+    unsanitizedHtml() {
+        return this.#unsanitizedHtml;
+    }
+}
+const LIMIT_KEYS = [
+    "maxBytes",
+    "maxParts",
+    "maxDepth",
+    "maxHeaders",
+    "maxHeaderBytes",
+    "maxAttachments",
+    "maxAttachmentBytes",
+    "maxHtmlBytes",
+];
+function nativeLimits(limits) {
+    if (limits === undefined)
+        return undefined;
+    for (const key of LIMIT_KEYS) {
+        const value = limits[key];
+        if (value !== undefined &&
+            !(Number.isInteger(value) && value > 0 && value <= 0xffff_ffff)) {
+            throw new GoldstoneError("E_GOLDSTONE_INVALID_LIMITS", `Goldstone: ${key} must be a positive integer under 2^32, got ${String(value)}`);
+        }
+    }
+    return { ...limits };
+}
+function htmlOptions(options) {
+    const { remoteContent } = options;
+    if (remoteContent !== undefined &&
+        remoteContent !== "block" &&
+        remoteContent !== "allow") {
+        throw new GoldstoneError("E_GOLDSTONE_INVALID_OPTIONS", `Goldstone: remoteContent must be "block" or "allow", got ${String(remoteContent)}`);
+    }
+    return { remoteContent: remoteContent === "allow" };
+}
+/**
+ * Parse one received message — raw RFC 5322 bytes, as IMAP fetches them or
+ * a provider posts them. The work runs off the event loop.
+ *
+ * Rejects with a `GoldstoneError` on a message over a limit
+ * (`E_GOLDSTONE_MESSAGE_TOO_LARGE`, `…_TOO_MANY_PARTS`, `…_TOO_DEEP`,
+ * `…_TOO_MANY_HEADERS`, `…_HEADERS_TOO_LARGE`, `…_MISSING_BOUNDARIES`,
+ * `…_BOUNDARY_TOO_LONG`, `…_TOO_MANY_ATTACHMENTS`, `…_ATTACHMENT_TOO_LARGE`) or not a message at
+ * all (`E_GOLDSTONE_NOT_A_MESSAGE`).
+ */
+export async function parseMessage(raw, options = {}) {
+    return new ReceivedMessage(await parseNative(raw, options));
+}
+async function parseNative(raw, options) {
+    const bounds = nativeLimits(options.limits);
+    const html = htmlOptions(options);
+    const bytes = snapshot(raw);
+    try {
+        return await engine().parseMessage(bytes, bounds, html);
+    }
+    catch (error) {
+        if (error instanceof GoldstoneError)
+            throw error;
+        throw fromEngine(error);
+    }
+}
+/**
+ * Parse a received message AND check who sent it, the verdict on
+ * `message.authenticity`. Both come from one parse: the From the verdict
+ * speaks for is the From the message shows.
+ */
+export async function readMessage(raw, options = {}) {
+    if (options.authenticate === false) {
+        return new ReceivedMessage(await parseNative(raw, options));
+    }
+    const bounds = nativeLimits(options.limits);
+    const html = htmlOptions(options);
+    const authOptions = nativeOptions(options.authenticate === true || options.authenticate === undefined
+        ? { maxBytes: options.limits?.maxBytes }
+        : { maxBytes: options.limits?.maxBytes, ...options.authenticate });
+    const bytes = snapshot(raw);
+    try {
+        const read = await engine().readMessage(bytes, bounds, authOptions, html);
+        return new ReceivedMessage(read.message, fromNative(read.authenticity));
+    }
+    catch (error) {
+        if (error instanceof GoldstoneError)
+            throw error;
+        throw fromEngine(error);
+    }
+}
+//# sourceMappingURL=ReceivedMessage.js.map

package/dist/ReceivedMessage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReceivedMessage.js","sourceRoot":"","sources":["../src/ReceivedMessage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAGN,UAAU,EACV,aAAa,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAyD/C,MAAM,OAAO,eAAe;IAClB,SAAS,CAAU;IACnB,OAAO,CAAU;IACjB,IAAI,CAAQ;IACZ,IAAI,CAAqB;IACzB,EAAE,CAAqB;IACvB,EAAE,CAAqB;IACvB,GAAG,CAAqB;IACxB,OAAO,CAAqB;IAC5B,SAAS,CAAoB;IAC7B,UAAU,CAAoB;IAC9B,OAAO,CAAoB;IAC3B,IAAI,CAAU;IACvB;;;OAGG;IACM,IAAI,CAAU;IACvB;;;;;;OAMG;IACM,SAAS,CAAkB;IAC3B,WAAW,CAAwB;IAC5C;;;;OAIG;IACM,YAAY,CAAgB;IAC5B,gBAAgB,CAAU;IAEnC,YAAY,MAAiB,EAAE,YAA2B;QACzD,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,SAAS;YACb,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjD,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM;SAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,IAAY;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC;IACzE,CAAC;IAED;;;;OAIG;IACH,eAAe;QACd,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC9B,CAAC;CACD;AAED,MAAM,UAAU,GAAG;IAClB,UAAU;IACV,UAAU;IACV,UAAU;IACV,YAAY;IACZ,gBAAgB;IAChB,gBAAgB;IAChB,oBAAoB;IACpB,cAAc;CACL,CAAC;AAEX,SAAS,YAAY,CAAC,MAA0B;IAC/C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IACC,KAAK,KAAK,SAAS;YACnB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,WAAW,CAAC,EAC9D,CAAC;YACF,MAAM,IAAI,cAAc,CACvB,4BAA4B,EAC5B,cAAc,GAAG,+CAA+C,MAAM,CAAC,KAAK,CAAC,EAAE,CAC/E,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;AACtB,CAAC;AAeD,SAAS,WAAW,CAAC,OAAqB;IACzC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAClC,IACC,aAAa,KAAK,SAAS;QAC3B,aAAa,KAAK,OAAO;QACzB,aAAa,KAAK,OAAO,EACxB,CAAC;QACF,MAAM,IAAI,cAAc,CACvB,6BAA6B,EAC7B,4DAA4D,MAAM,CAAC,aAAa,CAAC,EAAE,CACnF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,aAAa,KAAK,OAAO,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,GAAe,EACf,UAAwB,EAAE;IAE1B,OAAO,IAAI,eAAe,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,WAAW,CACzB,GAAe,EACf,OAAqB;IAErB,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC;QACJ,OAAO,MAAM,MAAM,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,cAAc;YAAE,MAAM,KAAK,CAAC;QACjD,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;AACF,CAAC;AAUD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAChC,GAAe,EACf,UAAuB,EAAE;IAEzB,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QACpC,OAAO,IAAI,eAAe,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,aAAa,CAChC,OAAO,CAAC,YAAY,KAAK,IAAI,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;QAClE,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE;QACxC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAClE,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QAC1E,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,cAAc;YAAE,MAAM,KAAK,CAAC;QACjD,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;AACF,CAAC"}

package/dist/augmentations.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Teach ream's `ContainerBindings` what `container.make(...)` returns for the
+ * tokens goldstone binds.
+ *
+ * Type-only, and ream stays an OPTIONAL peer: nothing here reaches a runtime
+ * import, and a `declare module` for a specifier that does not resolve is
+ * simply inert.
+ */
+import type { InboxManager } from "./InboxManager.js";
+declare module "@c9up/ream/types" {
+    interface ContainerBindings {
+        /** The configured mailboxes, bound by `GoldstoneProvider`. */
+        "goldstone.inbox": InboxManager;
+        /** The same binding under the bare role name. */
+        inbox: InboxManager;
+    }
+}
+//# sourceMappingURL=augmentations.d.ts.map

package/dist/augmentations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"augmentations.d.ts","sourceRoot":"","sources":["../src/augmentations.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,QAAQ,kBAAkB,CAAC;IACjC,UAAU,iBAAiB;QAC1B,8DAA8D;QAC9D,iBAAiB,EAAE,YAAY,CAAC;QAChC,iDAAiD;QACjD,KAAK,EAAE,YAAY,CAAC;KACpB;CACD"}

package/dist/augmentations.js

@@ -0,0 +1,10 @@
+/**
+ * Teach ream's `ContainerBindings` what `container.make(...)` returns for the
+ * tokens goldstone binds.
+ *
+ * Type-only, and ream stays an OPTIONAL peer: nothing here reaches a runtime
+ * import, and a `declare module` for a specifier that does not resolve is
+ * simply inert.
+ */
+export {};
+//# sourceMappingURL=augmentations.js.map

package/dist/augmentations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"augmentations.js","sourceRoot":"","sources":["../src/augmentations.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/authenticity.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Who really sent a message: DKIM, SPF, DMARC and ARC, checked in Rust
+ * against DNS.
+ *
+ *   const authenticity = await authenticate(raw)
+ *   if (authenticity.summary !== 'pass') {
+ *     // the From cannot be trusted
+ *   }
+ *
+ * `summary` is `pass` only when the From domain's DMARC passes — through a
+ * DKIM signature or an SPF result aligned with that domain — and that From
+ * is the one the message shows: exactly one From header holding exactly one
+ * address, whose domain is `fromDomain`. A From header repeated, a From with
+ * several addresses, or any header allowed once (Subject, Date, To…) that
+ * appears twice is a `fail`. A check that could not complete (DNS down, too
+ * slow) is `temperror`, never a pass.
+ *
+ * Only the address's domain is authenticated, never the display name:
+ * `"ceo@bank.test" <a@evil.test>` can pass, for `evil.test`.
+ */
+import type { JsAuthOptions, JsVerdict } from "./native/generated.js";
+/** A check's outcome, in the words of RFC 8601. */
+export type AuthResult = "pass" | "fail" | "softfail" | "neutral" | "none" | "temperror" | "permerror";
+export type DmarcPolicy = "none" | "quarantine" | "reject" | "unspecified";
+export interface DkimVerdict {
+    readonly result: AuthResult;
+    /** The signing domain (`d=`). */
+    readonly domain?: string;
+    readonly selector?: string;
+    /** Why it did not pass. */
+    readonly reason?: string;
+}
+export interface Authenticity {
+    /**
+     * One per signature: the ones verified (at most `maxDkimSignatures`),
+     * and the ones refused without a lookup, which do not count against it.
+     */
+    readonly dkim: readonly DkimVerdict[];
+    /** `none` when no envelope was given. */
+    readonly spf: AuthResult;
+    readonly dmarc: AuthResult;
+    readonly dmarcPolicy: DmarcPolicy;
+    /** The From domain DMARC was evaluated for. */
+    readonly dmarcDomain?: string;
+    /**
+     * The domain of the message's one From address: what `summary` speaks
+     * for. Absent when the From is missing or ambiguous (repeated, several
+     * addresses). The display name is never authenticated.
+     */
+    readonly fromDomain?: string;
+    readonly arc: AuthResult;
+    /**
+     * `pass` only when DMARC passed for `fromDomain`; `fail` when it failed
+     * or the From cannot be told apart; `temperror` when a check could not
+     * complete.
+     */
+    readonly summary: "pass" | "fail" | "none" | "temperror";
+}
+export interface AuthenticateOptions {
+    /**
+     * The IP of the server that delivered the message — with `helo` and
+     * `mailFrom`, what SPF checks. A provider's inbound webhook usually gives
+     * it; a message read over IMAP usually does not, and SPF is then `none`.
+     */
+    ip?: string;
+    helo?: string;
+    /** The SMTP MAIL FROM (return path). */
+    mailFrom?: string;
+    /** DKIM signatures checked, at most — each is a DNS lookup. Default 5. */
+    maxDkimSignatures?: number;
+    /** For the whole check; past it, `temperror`. Default 10 000 ms. */
+    timeoutMs?: number;
+    /** Size of the raw message, checked first. Default 25 MiB. */
+    maxBytes?: number;
+}
+/** The engine's verdict, as the application reads it. */
+export declare function fromNative(v: JsVerdict): Authenticity;
+export declare function nativeOptions(options: AuthenticateOptions | undefined): JsAuthOptions | undefined;
+/** Check one received message — raw RFC 5322 bytes. */
+export declare function authenticate(raw: Uint8Array, options?: AuthenticateOptions): Promise<Authenticity>;
+//# sourceMappingURL=authenticity.d.ts.map

package/dist/authenticity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticity.d.ts","sourceRoot":"","sources":["../src/authenticity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGtE,mDAAmD;AACnD,MAAM,MAAM,UAAU,GACnB,MAAM,GACN,MAAM,GACN,UAAU,GACV,SAAS,GACT,MAAM,GACN,WAAW,GACX,WAAW,CAAC;AAEf,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,YAAY,GAAG,QAAQ,GAAG,aAAa,CAAC;AAE3E,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,iCAAiC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,2BAA2B;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC5B;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,SAAS,WAAW,EAAE,CAAC;IACtC,yCAAyC;IACzC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,+CAA+C;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC;CACzD;AAED,MAAM,WAAW,mBAAmB;IACnC;;;;OAIG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAwCD,yDAAyD;AACzD,wBAAgB,UAAU,CAAC,CAAC,EAAE,SAAS,GAAG,YAAY,CAgBrD;AAID,wBAAgB,aAAa,CAC5B,OAAO,EAAE,mBAAmB,GAAG,SAAS,GACtC,aAAa,GAAG,SAAS,CAe3B;AAED,uDAAuD;AACvD,wBAAsB,YAAY,CACjC,GAAG,EAAE,UAAU,EACf,OAAO,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,CASvB"}

package/dist/authenticity.js

@@ -0,0 +1,102 @@
+/**
+ * Who really sent a message: DKIM, SPF, DMARC and ARC, checked in Rust
+ * against DNS.
+ *
+ *   const authenticity = await authenticate(raw)
+ *   if (authenticity.summary !== 'pass') {
+ *     // the From cannot be trusted
+ *   }
+ *
+ * `summary` is `pass` only when the From domain's DMARC passes — through a
+ * DKIM signature or an SPF result aligned with that domain — and that From
+ * is the one the message shows: exactly one From header holding exactly one
+ * address, whose domain is `fromDomain`. A From header repeated, a From with
+ * several addresses, or any header allowed once (Subject, Date, To…) that
+ * appears twice is a `fail`. A check that could not complete (DNS down, too
+ * slow) is `temperror`, never a pass.
+ *
+ * Only the address's domain is authenticated, never the display name:
+ * `"ceo@bank.test" <a@evil.test>` can pass, for `evil.test`.
+ */
+import { fromEngine, GoldstoneError } from "./errors.js";
+import { engine, snapshot } from "./native.js";
+function result(value) {
+    switch (value) {
+        case "pass":
+        case "fail":
+        case "softfail":
+        case "neutral":
+        case "none":
+        case "temperror":
+        case "permerror":
+            return value;
+        default:
+            // Not something the engine answers; whatever it is, not a pass.
+            return "permerror";
+    }
+}
+function policy(value) {
+    switch (value) {
+        case "none":
+        case "quarantine":
+        case "reject":
+            return value;
+        default:
+            return "unspecified";
+    }
+}
+function summary(value) {
+    switch (value) {
+        case "pass":
+        case "fail":
+        case "none":
+            return value;
+        default:
+            return "temperror";
+    }
+}
+/** The engine's verdict, as the application reads it. */
+export function fromNative(v) {
+    return {
+        dkim: v.dkim.map((d) => ({
+            result: result(d.result),
+            domain: d.domain,
+            selector: d.selector,
+            reason: d.reason,
+        })),
+        spf: result(v.spf),
+        dmarc: result(v.dmarc),
+        dmarcPolicy: policy(v.dmarcPolicy),
+        dmarcDomain: v.dmarcDomain,
+        fromDomain: v.fromDomain,
+        arc: result(v.arc),
+        summary: summary(v.summary),
+    };
+}
+const BOUNDED = ["maxDkimSignatures", "timeoutMs", "maxBytes"];
+export function nativeOptions(options) {
+    if (options === undefined)
+        return undefined;
+    for (const key of BOUNDED) {
+        const value = options[key];
+        if (value !== undefined &&
+            !(Number.isInteger(value) && value > 0 && value <= 0xffff_ffff)) {
+            throw new GoldstoneError("E_GOLDSTONE_INVALID_OPTIONS", `Goldstone: ${key} must be a positive integer under 2^32, got ${String(value)}`);
+        }
+    }
+    return { ...options };
+}
+/** Check one received message — raw RFC 5322 bytes. */
+export async function authenticate(raw, options) {
+    const bounds = nativeOptions(options);
+    const bytes = snapshot(raw);
+    try {
+        return fromNative(await engine().authenticateMessage(bytes, bounds));
+    }
+    catch (error) {
+        if (error instanceof GoldstoneError)
+            throw error;
+        throw fromEngine(error);
+    }
+}
+//# sourceMappingURL=authenticity.js.map

package/dist/authenticity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticity.js","sourceRoot":"","sources":["../src/authenticity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAoE/C,SAAS,MAAM,CAAC,KAAa;IAC5B,QAAQ,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,UAAU,CAAC;QAChB,KAAK,SAAS,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW;YACf,OAAO,KAAK,CAAC;QACd;YACC,gEAAgE;YAChE,OAAO,WAAW,CAAC;IACrB,CAAC;AACF,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC5B,QAAQ,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,YAAY,CAAC;QAClB,KAAK,QAAQ;YACZ,OAAO,KAAK,CAAC;QACd;YACC,OAAO,aAAa,CAAC;IACvB,CAAC;AACF,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC7B,QAAQ,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACV,OAAO,KAAK,CAAC;QACd;YACC,OAAO,WAAW,CAAC;IACrB,CAAC;AACF,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,UAAU,CAAC,CAAY;IACtC,OAAO;QACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACxB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;SAChB,CAAC,CAAC;QACH,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;QAClC,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;KAC3B,CAAC;AACH,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,mBAAmB,EAAE,WAAW,EAAE,UAAU,CAAU,CAAC;AAExE,MAAM,UAAU,aAAa,CAC5B,OAAwC;IAExC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IACC,KAAK,KAAK,SAAS;YACnB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,WAAW,CAAC,EAC9D,CAAC;YACF,MAAM,IAAI,cAAc,CACvB,6BAA6B,EAC7B,cAAc,GAAG,+CAA+C,MAAM,CAAC,KAAK,CAAC,EAAE,CAC/E,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;AACvB,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,GAAe,EACf,OAA6B;IAE7B,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC;QACJ,OAAO,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,cAAc;YAAE,MAAM,KAAK,CAAC;QACjD,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;AACF,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,85 @@
+/**
+ * The shape `config/inbox.ts` returns: the mailboxes the application reads.
+ *
+ *   export default defineConfig({
+ *     mailbox: 'support',
+ *     mailboxes: {
+ *       support: {
+ *         host: 'imap.example.com',
+ *         auth: { user: env.get('IMAP_USER'), pass: env.get('IMAP_PASSWORD') },
+ *       },
+ *       billing: {
+ *         host: 'outlook.office365.com',
+ *         auth: { user: 'billing@example.com', accessToken: () => tokens.for('billing') },
+ *       },
+ *     },
+ *   })
+ */
+import type { Limits, ParseOptions } from "./ReceivedMessage.js";
+export interface PasswordAuth {
+    user: string;
+    pass: string;
+}
+export interface TokenAuth {
+    user: string;
+    /**
+     * An OAuth2 access token for XOAUTH2 — or a function that answers one. The
+     * function is called on every connection, so a token that expired is
+     * asked for again when the connection is made anew.
+     */
+    accessToken: string | (() => string | Promise<string>);
+}
+export interface MailboxConfig {
+    host: string;
+    /** Default 993 with `secure`, 143 with `starttls`. */
+    port?: number;
+    /**
+     * TLS from the first byte (port 993). The default, unless `starttls` is
+     * set. Turn it off only for `starttls`, or — on a development machine —
+     * with `allowInsecure`.
+     */
+    secure?: boolean;
+    /**
+     * Upgrade a plaintext connection with STARTTLS (port 143, `secure` off by
+     * itself), and refuse to go on if the server does not offer it. Without this, a client upgrades only when
+     * the server says it can — and an attacker on the path can remove that.
+     */
+    starttls?: boolean;
+    /**
+     * Allow a connection without TLS, or without verifying the server's
+     * certificate. For a local test server only.
+     */
+    allowInsecure?: boolean;
+    /** Passed to Node's TLS: `ca` for a private CA, `servername`… */
+    tls?: {
+        ca?: string | Buffer;
+        servername?: string;
+        rejectUnauthorized?: boolean;
+    };
+    auth: PasswordAuth | TokenAuth;
+}
+export interface InboxConfig<Mailboxes extends Record<string, MailboxConfig>> {
+    /** The mailbox `inbox.mailbox()` returns with no argument. */
+    mailbox: keyof Mailboxes & string;
+    mailboxes: Mailboxes;
+    /** Bounds applied to every message read; see {@link Limits}. */
+    limits?: Limits;
+    /**
+     * Check DKIM, SPF and DMARC on every message read. Default `true`; see
+     * `message.authenticity`.
+     */
+    authenticate?: boolean;
+    /**
+     * Remote content in `message.html`: `"block"` (the default) or
+     * `"allow"`; see {@link ParseOptions}.
+     */
+    remoteContent?: ParseOptions["remoteContent"];
+}
+/**
+ * Type helper for `config/inbox.ts`. Refuses, at boot: no mailbox, a default
+ * that is not declared, and a mailbox that would talk without TLS or without
+ * checking the server's certificate unless `allowInsecure` says so.
+ */
+export declare function defineConfig<Mailboxes extends Record<string, MailboxConfig>>(config: InboxConfig<Mailboxes>): InboxConfig<Mailboxes>;
+export declare function assertSecure(name: string, mailbox: MailboxConfig): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEjE,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,WAAW,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iEAAiE;IACjE,GAAG,CAAC,EAAE;QACL,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC7B,CAAC;IACF,IAAI,EAAE,YAAY,GAAG,SAAS,CAAC;CAC/B;AAED,MAAM,WAAW,WAAW,CAAC,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC;IAC3E,8DAA8D;IAC9D,OAAO,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;OAGG;IACH,aAAa,CAAC,EAAE,YAAY,CAAC,eAAe,CAAC,CAAC;CAC9C;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,EAC3E,MAAM,EAAE,WAAW,CAAC,SAAS,CAAC,GAC5B,WAAW,CAAC,SAAS,CAAC,CAkBxB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,IAAI,CAoBvE"}

package/dist/config.js

@@ -0,0 +1,50 @@
+/**
+ * The shape `config/inbox.ts` returns: the mailboxes the application reads.
+ *
+ *   export default defineConfig({
+ *     mailbox: 'support',
+ *     mailboxes: {
+ *       support: {
+ *         host: 'imap.example.com',
+ *         auth: { user: env.get('IMAP_USER'), pass: env.get('IMAP_PASSWORD') },
+ *       },
+ *       billing: {
+ *         host: 'outlook.office365.com',
+ *         auth: { user: 'billing@example.com', accessToken: () => tokens.for('billing') },
+ *       },
+ *     },
+ *   })
+ */
+import { GoldstoneError } from "./errors.js";
+/**
+ * Type helper for `config/inbox.ts`. Refuses, at boot: no mailbox, a default
+ * that is not declared, and a mailbox that would talk without TLS or without
+ * checking the server's certificate unless `allowInsecure` says so.
+ */
+export function defineConfig(config) {
+    const names = Object.keys(config.mailboxes);
+    if (names.length === 0) {
+        throw new GoldstoneError("E_GOLDSTONE_INVALID_CONFIG", "[inbox] config declares no mailbox");
+    }
+    if (!names.includes(config.mailbox)) {
+        throw new GoldstoneError("E_GOLDSTONE_INVALID_CONFIG", `[inbox] default mailbox "${config.mailbox}" is not declared — got ${names.join(", ")}`);
+    }
+    for (const [name, mailbox] of Object.entries(config.mailboxes)) {
+        assertSecure(name, mailbox);
+    }
+    return config;
+}
+export function assertSecure(name, mailbox) {
+    if (mailbox.secure === true && mailbox.starttls === true) {
+        throw new GoldstoneError("E_GOLDSTONE_INVALID_CONFIG", `[inbox] mailbox "${name}" asks for TLS from the first byte and for STARTTLS — keep one: starttls: true alone upgrades a plaintext connection`);
+    }
+    if (mailbox.allowInsecure === true)
+        return;
+    if (mailbox.secure === false && mailbox.starttls !== true) {
+        throw new GoldstoneError("E_GOLDSTONE_INSECURE_CONNECTION", `[inbox] mailbox "${name}" would connect without TLS — set starttls: true, or allowInsecure for a local test server`);
+    }
+    if (mailbox.tls?.rejectUnauthorized === false) {
+        throw new GoldstoneError("E_GOLDSTONE_INSECURE_CONNECTION", `[inbox] mailbox "${name}" would not check the server's certificate — give its CA in tls.ca, or allowInsecure for a local test server`);
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAkE7C;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC3B,MAA8B;IAE9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,cAAc,CACvB,4BAA4B,EAC5B,oCAAoC,CACpC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,cAAc,CACvB,4BAA4B,EAC5B,4BAA4B,MAAM,CAAC,OAAO,2BAA2B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAChE,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAsB;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC1D,MAAM,IAAI,cAAc,CACvB,4BAA4B,EAC5B,oBAAoB,IAAI,sHAAsH,CAC9I,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI;QAAE,OAAO;IAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC3D,MAAM,IAAI,cAAc,CACvB,iCAAiC,EACjC,oBAAoB,IAAI,4FAA4F,CACpH,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,EAAE,kBAAkB,KAAK,KAAK,EAAE,CAAC;QAC/C,MAAM,IAAI,cAAc,CACvB,iCAAiC,EACjC,oBAAoB,IAAI,8GAA8G,CACtI,CAAC;IACH,CAAC;AACF,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Goldstone errors. No upstream package exists, so every code carries the
+ * namespace.
+ */
+export declare class GoldstoneError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string, options?: ErrorOptions);
+}
+/** The engine's `CODE: message`, back as a coded error. */
+export declare function fromEngine(error: unknown): GoldstoneError;
+/** Raised when parsing needs the Rust engine and it is not there. */
+export declare class GoldstoneNativeRequiredError extends GoldstoneError {
+    constructor(reason: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,qBAAa,cAAe,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAKjE;AAqBD,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAUzD;AAED,qEAAqE;AACrE,qBAAa,4BAA6B,SAAQ,cAAc;gBACnD,MAAM,EAAE,MAAM;CAO1B"}

package/dist/errors.js

@@ -0,0 +1,50 @@
+/**
+ * Goldstone errors. No upstream package exists, so every code carries the
+ * namespace.
+ */
+export class GoldstoneError extends Error {
+    code;
+    constructor(code, message, options) {
+        super(message, options);
+        this.name = new.target.name;
+        this.code = code;
+    }
+}
+/** The codes the engine raises, `E_GOLDSTONE_<REASON>: <message>`. */
+const ENGINE_CODES = new Set([
+    "E_GOLDSTONE_MESSAGE_TOO_LARGE",
+    "E_GOLDSTONE_NOT_A_MESSAGE",
+    "E_GOLDSTONE_TOO_MANY_PARTS",
+    "E_GOLDSTONE_TOO_DEEP",
+    "E_GOLDSTONE_TOO_MANY_HEADERS",
+    "E_GOLDSTONE_HEADERS_TOO_LARGE",
+    "E_GOLDSTONE_MISSING_BOUNDARIES",
+    "E_GOLDSTONE_BOUNDARY_TOO_LONG",
+    "E_GOLDSTONE_TOO_MANY_ATTACHMENTS",
+    "E_GOLDSTONE_ATTACHMENT_TOO_LARGE",
+    "E_GOLDSTONE_HTML_TOO_LARGE",
+    "E_GOLDSTONE_HTML_TOO_DEEP",
+    "E_GOLDSTONE_HTML_TOO_COMPLEX",
+    "E_GOLDSTONE_DNS_UNAVAILABLE",
+    "E_GOLDSTONE_INVALID_ENVELOPE",
+]);
+/** The engine's `CODE: message`, back as a coded error. */
+export function fromEngine(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    const separator = message.indexOf(": ");
+    const code = separator > 0 ? message.slice(0, separator) : "";
+    if (ENGINE_CODES.has(code)) {
+        return new GoldstoneError(code, message.slice(separator + 2), {
+            cause: error,
+        });
+    }
+    return new GoldstoneError("E_GOLDSTONE_ENGINE", message, { cause: error });
+}
+/** Raised when parsing needs the Rust engine and it is not there. */
+export class GoldstoneNativeRequiredError extends GoldstoneError {
+    constructor(reason) {
+        super("E_GOLDSTONE_NATIVE_REQUIRED", `The Rust mail engine is required but not loaded — ${reason}.\n` +
+            "Install the prebuilt binary for this platform, or build it with `pnpm build:napi`.");
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC/B,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe,EAAE,OAAsB;QAChE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,CAAC;CACD;AAED,sEAAsE;AACtE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC5B,+BAA+B;IAC/B,2BAA2B;IAC3B,4BAA4B;IAC5B,sBAAsB;IACtB,8BAA8B;IAC9B,+BAA+B;IAC/B,gCAAgC;IAChC,+BAA+B;IAC/B,kCAAkC;IAClC,kCAAkC;IAClC,4BAA4B;IAC5B,2BAA2B;IAC3B,8BAA8B;IAC9B,6BAA6B;IAC7B,8BAA8B;CAC9B,CAAC,CAAC;AAEH,2DAA2D;AAC3D,MAAM,UAAU,UAAU,CAAC,KAAc;IACxC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE;YAC7D,KAAK,EAAE,KAAK;SACZ,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,cAAc,CAAC,oBAAoB,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,qEAAqE;AACrE,MAAM,OAAO,4BAA6B,SAAQ,cAAc;IAC/D,YAAY,MAAc;QACzB,KAAK,CACJ,6BAA6B,EAC7B,qDAAqD,MAAM,KAAK;YAC/D,oFAAoF,CACrF,CAAC;IACH,CAAC;CACD"}