@framers/agentos-ext-channel-email 0.6.3 → 0.6.4

package/dist/unsubscribeHandler.d.ts

@@ -0,0 +1,65 @@
+/**
+ * @fileoverview The route an unsubscribe link opens, as one function from a web `Request` to a `Response`, so a host
+ * mounts it on any server on Node.js that speaks them (a Next.js route handler on the Node.js runtime, Hono, a Node
+ * server through an adapter). The route reads the request with web APIs alone; the package it ships in loads Node's
+ * modules. A GET shows a page that asks and changes nothing, since link scanners follow links. A POST suppresses at
+ * once: a mailbox provider's one-click POST (RFC 8058 section 3.1) and the page's buttons alike, the token in the
+ * address the only thing it depends on. The route holds no transport, so an unsubscribe is never answered by a mail.
+ */
+import type { RecipientCapability } from './preferences/RecipientCapability.js';
+import type { SuppressionStore } from './preferences/SuppressionStore.js';
+/** What the route takes: the stores the service draws in and reads, and the page's words. */
+export interface UnsubscribeHandlerOptions {
+    /** The store the service's tokens were drawn in. */
+    readonly tokens: RecipientCapability;
+    /** The suppression record the service reads before each send. */
+    readonly suppressions: SuppressionStore;
+    /** The sender's name, shown above the page's heading. */
+    readonly productName?: string;
+    /** The words a page names each category by, such as `{ 'weekly-summary': 'weekly summary' }`; the category with its hyphens and underscores as spaces when not given. */
+    readonly categoryNames?: Readonly<Record<string, string>>;
+    /** Where a person deletes their account: an https address or a path, linked on the page of a required mail's link. */
+    readonly deleteAccountUrl?: string;
+    /** The clock the day of each suppression is read from, in epoch milliseconds: `Date.now` unless given. */
+    readonly now?: () => number;
+    /** Writes the page in place of the route's own, given what the token found and what was done. */
+    readonly render?: (view: UnsubscribeView) => string;
+}
+/**
+ * What a page shows. `category` is the category the link stops, or `null` for a required mail's link, which turns off
+ * every optional mail. `ask` carries the token, so a page of the host's own can post it back.
+ */
+export type UnsubscribeView = {
+    readonly state: 'ask';
+    readonly category: string | null;
+    readonly token: string;
+} | {
+    readonly state: 'done';
+    readonly category: string | null;
+    readonly all: boolean;
+} | {
+    readonly state: 'invalid';
+};
+/**
+ * The route an unsubscribe link opens, as a function from a `Request` to a `Response`, mounted at the path of the
+ * service's `pageUrl`:
+ *
+ * - GET and HEAD show a page that asks and change nothing: for a category's link, a button that stops the category and
+ *   one that turns off every optional mail; for a required mail's link, one button that turns off every optional mail,
+ *   what still comes and why, and a link to delete the account when `deleteAccountUrl` is given. A token that finds
+ *   nothing answers 404 with a page that says so.
+ * - POST suppresses at once, with the reason `manual` on the day `now` reads: a one-click POST, or any POST that names
+ *   no choice, writes the link's own list and answers a blank 200, never a redirect (RFC 8058 section 3.2); the page's
+ *   buttons post `choice=this` or `choice=all` and get the page that says what was done. A required mail's link always
+ *   writes `OPTIONAL_MAIL_SCOPE`. A token that finds nothing writes nothing and gets the same blank 200, or the 404
+ *   page from a button.
+ * - Any other method answers 405.
+ *
+ * Every answer is kept by no cache and sends no referrer. Nothing is mailed, so no unsubscribe is ever confirmed by a
+ * mail. An error of a store passes through as it was thrown, so the server answers 500 and a mailbox provider tries
+ * again.
+ *
+ * @param options The stores and the page's words; each is checked here, and a `TypeError` names the first one at fault.
+ */
+export declare function createUnsubscribeHandler(options: UnsubscribeHandlerOptions): (request: Request) => Promise<Response>;
+//# sourceMappingURL=unsubscribeHandler.d.ts.map

package/dist/unsubscribeHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsubscribeHandler.d.ts","sourceRoot":"","sources":["../src/unsubscribeHandler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAG1E,6FAA6F;AAC7F,MAAM,WAAW,yBAAyB;IACxC,oDAAoD;IACpD,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,iEAAiE;IACjE,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;IACxC,yDAAyD;IACzD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,yKAAyK;IACzK,QAAQ,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,sHAAsH;IACtH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,0GAA0G;IAC1G,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,iGAAiG;IACjG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,MAAM,CAAC;CACrD;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAA;CAAE,GACnF;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC;AAkHlC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA8FpH"}

package/dist/unsubscribeHandler.js

@@ -0,0 +1,218 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createUnsubscribeHandler = createUnsubscribeHandler;
+const unsubscribe_js_1 = require("./unsubscribe.js");
+/** The most bytes of a form the route reads; a longer body counts as a one-click POST. */
+const MOST_FORM_BYTES = 4096;
+/** Every answer: kept by no cache, sending no referrer, as the address carries the token, and kept out of search. */
+const PRIVATE = {
+    'Cache-Control': 'no-store',
+    'Referrer-Policy': 'no-referrer',
+    'X-Robots-Tag': 'noindex',
+};
+/** A page's answer: HTML that loads nothing, runs nothing and posts only to its own origin. */
+const PAGE_HEADERS = {
+    ...PRIVATE,
+    'Content-Type': 'text/html; charset=utf-8',
+    'Content-Security-Policy': "default-src 'none'; style-src 'unsafe-inline'; form-action 'self'; base-uri 'none'; frame-ancestors 'none'",
+    'X-Content-Type-Options': 'nosniff',
+};
+/** The page's style: phone first, 16-pixel text, 44-pixel buttons, light and dark. */
+const STYLE = [
+    ':root{color-scheme:light dark}',
+    'body{margin:0;font:16px/1.5 system-ui,-apple-system,"Segoe UI",Roboto,sans-serif}',
+    'main{max-width:32rem;margin:0 auto;padding:32px 16px}',
+    '.from{margin:0 0 8px;font-size:14px}',
+    'h1{font-size:22px;line-height:1.3;margin:0 0 16px}',
+    'p{margin:0 0 16px}',
+    'form{margin:0 0 12px}',
+    'button{font:inherit;width:100%;min-height:44px;padding:10px 16px;border-radius:8px;border:1px solid currentColor;background:transparent;color:inherit;cursor:pointer}',
+    'button.primary{background:#1a73e8;border-color:#1a73e8;color:#fff}',
+    '.note{font-size:14px}',
+].join('');
+/** What still comes once optional mail is off, said on every page that turns mail off. */
+const STILL_COMES = 'Mail that is part of your account still comes when it is due: sign-in codes you ask for, receipts when you pay, replies to mail you write to us, and security and legal notices.';
+/** A link on the page, checked: an https address or a path that starts with one slash. */
+function requireLink(value) {
+    if (typeof value === 'string' && !/[\s"'<>]/.test(value)) {
+        if (value.startsWith('/') && !value.startsWith('//'))
+            return value;
+        try {
+            if (new URL(value).protocol === 'https:')
+                return value;
+        }
+        catch {
+            // Refused below.
+        }
+    }
+    throw new TypeError('The deleteAccountUrl was refused: give an https address or a path that starts with one slash');
+}
+/** The day of an epoch reading in UTC, `YYYY-MM-DD`. */
+function dayOf(reading) {
+    return new Date(reading).toISOString().slice(0, 10);
+}
+/** The token an address carries in `t`, or the empty string. */
+function tokenOf(request) {
+    try {
+        return new URL(request.url).searchParams.get('t') ?? '';
+    }
+    catch {
+        return '';
+    }
+}
+/**
+ * What a token names when it is an unsubscribe link's: an address's hash with `OPTIONAL_MAIL_SCOPE` or a category's
+ * list. A token of any other scope, such as one a host drew for a purpose of its own in the same store, finds nothing,
+ * so a link can only ever stop mail.
+ */
+async function found(tokens, token) {
+    if (token === '')
+        return null;
+    const grant = await tokens.find(token);
+    if (grant === null || !unsubscribe_js_1.ADDRESS_HASH.test(grant.recipient))
+        return null;
+    if (grant.scope === unsubscribe_js_1.OPTIONAL_MAIL_SCOPE)
+        return { addressHash: grant.recipient, scope: grant.scope, category: null };
+    const category = (0, unsubscribe_js_1.categoryOfScope)(grant.scope);
+    return category === null ? null : { addressHash: grant.recipient, scope: grant.scope, category };
+}
+/**
+ * The page's choice from a form the route can read: `all` for every optional mail, `this` for the link's own list, and
+ * `null` for a one-click POST or any body that is no form, longer than 4,096 bytes or names no choice.
+ */
+async function choiceOf(request) {
+    const type = request.headers.get('content-type') ?? '';
+    if (!/^application\/x-www-form-urlencoded\b/i.test(type) || request.body === null)
+        return null;
+    const reader = request.body.getReader();
+    const decoder = new TextDecoder();
+    let form = '';
+    let bytes = 0;
+    for (;;) {
+        const next = await reader.read();
+        if (next.done)
+            break;
+        const chunk = next.value;
+        bytes += chunk.byteLength;
+        if (bytes > MOST_FORM_BYTES) {
+            await reader.cancel();
+            return null;
+        }
+        form += decoder.decode(chunk, { stream: true });
+    }
+    form += decoder.decode();
+    const choice = new URLSearchParams(form).get('choice');
+    if (choice === null)
+        return null;
+    return choice === 'all' ? 'all' : 'this';
+}
+/**
+ * The route an unsubscribe link opens, as a function from a `Request` to a `Response`, mounted at the path of the
+ * service's `pageUrl`:
+ *
+ * - GET and HEAD show a page that asks and change nothing: for a category's link, a button that stops the category and
+ *   one that turns off every optional mail; for a required mail's link, one button that turns off every optional mail,
+ *   what still comes and why, and a link to delete the account when `deleteAccountUrl` is given. A token that finds
+ *   nothing answers 404 with a page that says so.
+ * - POST suppresses at once, with the reason `manual` on the day `now` reads: a one-click POST, or any POST that names
+ *   no choice, writes the link's own list and answers a blank 200, never a redirect (RFC 8058 section 3.2); the page's
+ *   buttons post `choice=this` or `choice=all` and get the page that says what was done. A required mail's link always
+ *   writes `OPTIONAL_MAIL_SCOPE`. A token that finds nothing writes nothing and gets the same blank 200, or the 404
+ *   page from a button.
+ * - Any other method answers 405.
+ *
+ * Every answer is kept by no cache and sends no referrer. Nothing is mailed, so no unsubscribe is ever confirmed by a
+ * mail. An error of a store passes through as it was thrown, so the server answers 500 and a mailbox provider tries
+ * again.
+ *
+ * @param options The stores and the page's words; each is checked here, and a `TypeError` names the first one at fault.
+ */
+function createUnsubscribeHandler(options) {
+    if (typeof options !== 'object' || options === null)
+        throw new TypeError('The unsubscribe route options were refused: give them as an object');
+    const { tokens, suppressions } = options;
+    if (typeof tokens?.find !== 'function')
+        throw new TypeError('The unsubscribe route tokens were refused: give a store with find');
+    if (typeof suppressions?.suppress !== 'function')
+        throw new TypeError('The unsubscribe route suppressions were refused: give a store with suppress');
+    const productName = options.productName === undefined ? undefined : (0, unsubscribe_js_1.requireLine)('product name', options.productName, 120);
+    // A map, so a category no name is given for, such as `constructor`, finds no name an object inherits.
+    const names = new Map();
+    for (const [category, name] of Object.entries(options.categoryNames ?? {}))
+        names.set(category, (0, unsubscribe_js_1.requireLine)('category name', name, 120));
+    const deleteAccountUrl = options.deleteAccountUrl === undefined ? undefined : requireLink(options.deleteAccountUrl);
+    const now = options.now ?? Date.now;
+    if (typeof now !== 'function')
+        throw new TypeError('The unsubscribe route clock was refused: give a function or leave it out');
+    const render = options.render;
+    if (render !== undefined && typeof render !== 'function')
+        throw new TypeError('The unsubscribe route render was refused: give a function or leave it out');
+    /** The words a page names a category by. */
+    const nameOf = (category) => names.get(category) ?? category.replace(/[-_]+/g, ' ');
+    /** The route's own page for a view. */
+    const pageOf = (view) => {
+        const parts = [];
+        let title;
+        if (view.state === 'invalid') {
+            title = 'This link does not work';
+            parts.push(`<h1>${title}</h1>`, '<p>Use the unsubscribe link at the foot of a newer mail.</p>');
+        }
+        else if (view.state === 'done') {
+            title = 'You are unsubscribed';
+            const what = view.all || view.category === null ? 'Every optional mail to this address is off.' : `No more ${(0, unsubscribe_js_1.escapeHtml)(nameOf(view.category))} mail goes to this address.`;
+            parts.push(`<h1>${title}</h1>`, `<p>${what}</p>`, `<p class="note">${(0, unsubscribe_js_1.escapeHtml)(STILL_COMES)}</p>`);
+        }
+        else {
+            const action = `?t=${(0, unsubscribe_js_1.escapeHtml)(view.token)}`;
+            const button = (choice, words, primary) => `<form method="post" action="${action}"><input type="hidden" name="choice" value="${choice}"><button type="submit"${primary ? ' class="primary"' : ''}>${(0, unsubscribe_js_1.escapeHtml)(words)}</button></form>`;
+            if (view.category === null) {
+                title = 'Turn off optional mail';
+                parts.push(`<h1>${title}</h1>`, `<p>${(0, unsubscribe_js_1.escapeHtml)(STILL_COMES)}</p>`, '<p>Turn off every optional mail to this address?</p>', button('all', 'Turn off all optional mail', true));
+                if (deleteAccountUrl !== undefined) {
+                    parts.push(`<p class="note">To stop that mail too, <a href="${(0, unsubscribe_js_1.escapeHtml)(deleteAccountUrl)}">delete your account</a>.</p>`);
+                }
+            }
+            else {
+                title = 'Unsubscribe';
+                const name = (0, unsubscribe_js_1.escapeHtml)(nameOf(view.category));
+                parts.push(`<h1>${title}</h1>`, `<p>Stop ${name} mail to this address?</p>`, button('this', `Unsubscribe from ${nameOf(view.category)} mail`, true), button('all', 'Unsubscribe from all optional mail', false), `<p class="note">${(0, unsubscribe_js_1.escapeHtml)(STILL_COMES)}</p>`);
+            }
+        }
+        const from = productName === undefined ? '' : `<p class="from">${(0, unsubscribe_js_1.escapeHtml)(productName)}</p>`;
+        return [
+            '<!doctype html>',
+            '<html lang="en"><head><meta charset="utf-8">',
+            '<meta name="viewport" content="width=device-width, initial-scale=1">',
+            '<meta name="robots" content="noindex">',
+            `<title>${(0, unsubscribe_js_1.escapeHtml)(title)}</title><style>${STYLE}</style></head>`,
+            `<body><main>${from}${parts.join('')}</main></body></html>`,
+        ].join('');
+    };
+    /** A page's answer, its body left out for HEAD. */
+    const page = (view, status, head) => new Response(head ? null : render === undefined ? pageOf(view) : render(view), { status, headers: PAGE_HEADERS });
+    /** The blank answer a one-click POST gets. */
+    const blank = () => new Response(null, { status: 200, headers: PRIVATE });
+    return async (request) => {
+        const method = request.method.toUpperCase();
+        if (method !== 'GET' && method !== 'HEAD' && method !== 'POST') {
+            return new Response(null, { status: 405, headers: { ...PRIVATE, Allow: 'GET, HEAD, POST' } });
+        }
+        const token = tokenOf(request);
+        const link = await found(tokens, token);
+        if (method !== 'POST') {
+            return link === null
+                ? page({ state: 'invalid' }, 404, method === 'HEAD')
+                : page({ state: 'ask', category: link.category, token }, 200, method === 'HEAD');
+        }
+        const choice = await choiceOf(request);
+        if (link === null)
+            return choice === null ? blank() : page({ state: 'invalid' }, 404, false);
+        const day = dayOf(now());
+        await suppressions.suppress(link.scope, link.addressHash, 'manual', day);
+        const all = link.category === null || choice === 'all';
+        if (all && link.scope !== unsubscribe_js_1.OPTIONAL_MAIL_SCOPE)
+            await suppressions.suppress(unsubscribe_js_1.OPTIONAL_MAIL_SCOPE, link.addressHash, 'manual', day);
+        return choice === null ? blank() : page({ state: 'done', category: link.category, all }, 200, false);
+    };
+}
+//# sourceMappingURL=unsubscribeHandler.js.map

package/dist/unsubscribeHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsubscribeHandler.js","sourceRoot":"","sources":["../src/unsubscribeHandler.ts"],"names":[],"mappings":";;AA4KA,4DA8FC;AAhQD,qDAA+G;AAoC/G,0FAA0F;AAC1F,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,qHAAqH;AACrH,MAAM,OAAO,GAAqC;IAChD,eAAe,EAAE,UAAU;IAC3B,iBAAiB,EAAE,aAAa;IAChC,cAAc,EAAE,SAAS;CAC1B,CAAC;AAEF,+FAA+F;AAC/F,MAAM,YAAY,GAAqC;IACrD,GAAG,OAAO;IACV,cAAc,EAAE,0BAA0B;IAC1C,yBAAyB,EAAE,4GAA4G;IACvI,wBAAwB,EAAE,SAAS;CACpC,CAAC;AAEF,sFAAsF;AACtF,MAAM,KAAK,GAAG;IACZ,gCAAgC;IAChC,mFAAmF;IACnF,uDAAuD;IACvD,sCAAsC;IACtC,oDAAoD;IACpD,oBAAoB;IACpB,uBAAuB;IACvB,uKAAuK;IACvK,oEAAoE;IACpE,uBAAuB;CACxB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAEX,0FAA0F;AAC1F,MAAM,WAAW,GACf,kLAAkL,CAAC;AAErL,0FAA0F;AAC1F,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACnE,IAAI,CAAC;YACH,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,8FAA8F,CAAC,CAAC;AACtH,CAAC;AAED,wDAAwD;AACxD,SAAS,KAAK,CAAC,OAAe;IAC5B,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,gEAAgE;AAChE,SAAS,OAAO,CAAC,OAAgB;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,KAAK,CAAC,MAA2B,EAAE,KAAa;IAC7D,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,6BAAY,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,KAAK,CAAC,KAAK,KAAK,oCAAmB;QAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACrH,MAAM,QAAQ,GAAG,IAAA,gCAAe,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;AACnG,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,QAAQ,CAAC,OAAgB;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/F,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI;YAAE,MAAM;QACrB,MAAM,KAAK,GAAe,IAAI,CAAC,KAAK,CAAC;QACrC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;QAC1B,IAAI,KAAK,GAAG,eAAe,EAAE,CAAC;YAC5B,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAgB,wBAAwB,CAAC,OAAkC;IACzE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,oEAAoE,CAAC,CAAC;IAC/I,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IACzC,IAAI,OAAO,MAAM,EAAE,IAAI,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,mEAAmE,CAAC,CAAC;IACjI,IAAI,OAAO,YAAY,EAAE,QAAQ,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,6EAA6E,CAAC,CAAC;IACrJ,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,4BAAW,EAAC,cAAc,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC1H,sGAAsG;IACtG,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAA,4BAAW,EAAC,eAAe,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACzI,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACpH,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,0EAA0E,CAAC,CAAC;IAC/H,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,2EAA2E,CAAC,CAAC;IAE3J,4CAA4C;IAC5C,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAEpG,uCAAuC;IACvC,MAAM,MAAM,GAAG,CAAC,IAAqB,EAAU,EAAE;QAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,KAAa,CAAC;QAClB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,GAAG,yBAAyB,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,8DAA8D,CAAC,CAAC;QAClG,CAAC;aAAM,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YACjC,KAAK,GAAG,sBAAsB,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,WAAW,IAAA,2BAAU,EAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,6BAA6B,CAAC;YAC5K,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,MAAM,IAAI,MAAM,EAAE,mBAAmB,IAAA,2BAAU,EAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACtG,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAU,EAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,CAAC,MAAsB,EAAE,KAAa,EAAE,OAAgB,EAAU,EAAE,CACjF,+BAA+B,MAAM,+CAA+C,MAAM,0BAA0B,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,IAAI,IAAA,2BAAU,EAAC,KAAK,CAAC,kBAAkB,CAAC;YAC/L,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC3B,KAAK,GAAG,wBAAwB,CAAC;gBACjC,KAAK,CAAC,IAAI,CACR,OAAO,KAAK,OAAO,EACnB,MAAM,IAAA,2BAAU,EAAC,WAAW,CAAC,MAAM,EACnC,sDAAsD,EACtD,MAAM,CAAC,KAAK,EAAE,4BAA4B,EAAE,IAAI,CAAC,CAClD,CAAC;gBACF,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;oBACnC,KAAK,CAAC,IAAI,CAAC,mDAAmD,IAAA,2BAAU,EAAC,gBAAgB,CAAC,gCAAgC,CAAC,CAAC;gBAC9H,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,aAAa,CAAC;gBACtB,MAAM,IAAI,GAAG,IAAA,2BAAU,EAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC/C,KAAK,CAAC,IAAI,CACR,OAAO,KAAK,OAAO,EACnB,WAAW,IAAI,4BAA4B,EAC3C,MAAM,CAAC,MAAM,EAAE,oBAAoB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,EACtE,MAAM,CAAC,KAAK,EAAE,oCAAoC,EAAE,KAAK,CAAC,EAC1D,mBAAmB,IAAA,2BAAU,EAAC,WAAW,CAAC,MAAM,CACjD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,IAAA,2BAAU,EAAC,WAAW,CAAC,MAAM,CAAC;QAC/F,OAAO;YACL,iBAAiB;YACjB,8CAA8C;YAC9C,sEAAsE;YACtE,wCAAwC;YACxC,UAAU,IAAA,2BAAU,EAAC,KAAK,CAAC,kBAAkB,KAAK,iBAAiB;YACnE,eAAe,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,uBAAuB;SAC5D,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,CAAC,CAAC;IAEF,mDAAmD;IACnD,MAAM,IAAI,GAAG,CAAC,IAAqB,EAAE,MAAc,EAAE,IAAa,EAAY,EAAE,CAC9E,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAEpH,8CAA8C;IAC9C,MAAM,KAAK,GAAG,GAAa,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAEpF,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/D,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,IAAI,KAAK,IAAI;gBAClB,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;gBACpD,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7F,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACzB,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,KAAK,KAAK,CAAC;QACvD,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,KAAK,oCAAmB;YAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,oCAAmB,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACjI,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACvG,CAAC,CAAC;AACJ,CAAC"}

package/manifest.json

@@ -2,7 +2,7 @@
   "$schema": "https://agentos.sh/schemas/extension-manifest-v1.json",
   "id": "com.framers.channels.email",
   "name": "Email Channel Extension",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "description": "Bidirectional email integration: send through SMTP or Resend's HTTPS API; read, search, extract verification codes, reply, move, label, flag and delete through IMAP; keep a suppression record and unsubscribe tokens on a SQL database.",
   "categories": ["channel", "communication"],
   "platforms": ["email"],
@@ -24,6 +24,7 @@
     "Extract verification codes and OTPs from email bodies",
     "Reply to email threads maintaining conversation context",
     "Read every recipient, the threading and authentication headers, bounded text and HTML parts and attachments after a UID; move, label, flag and delete one message by UID",
-    "Keep a suppression record and opaque unsubscribe tokens, stored as hashes, on a SQL database"
+    "Keep a suppression record and opaque unsubscribe tokens, stored as hashes, on a SQL database",
+    "Put an unsubscribe link and RFC 8058 one-click fields on every mail, read the suppression record before each send, and answer the link: a GET asks, a POST suppresses"
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@framers/agentos-ext-channel-email",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "description": "Email channel adapter for AgentOS: send through SMTP or Resend's HTTPS API; read, search, extract codes, reply, move, label, flag and delete through IMAP; keep a suppression record and unsubscribe tokens on a SQL database.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -22,11 +22,12 @@
     "nodemailer": "^10.0.16"
   },
   "devDependencies": {
-    "@framers/sql-storage-adapter": "^0.8.3",
+    "@framers/sql-storage-adapter": "^0.9.2",
     "@types/node": "^20.0.0",
+    "parse5": "^8.0.1",
     "typescript": "^6.0.3",
     "vitest": "^3.2.7",
-    "@framers/agentos": "^0.15.77"
+    "@framers/agentos": "^0.15.105"
   },
   "repository": {
     "type": "git",
@@ -37,7 +38,7 @@
   "bugs": {
     "url": "https://github.com/framerslab/agentos-extensions/issues"
   },
-  "gitHead": "ca945fe0c72b6e3fe8599ddd2396ab1813681b04",
+  "gitHead": "fabef244aaa44de2e031567f3bdaafb162bfa32c",
   "scripts": {
     "build": "tsc",
     "dev": "tsc --watch",