@growth-labs/mailer 0.1.3

package/dist/routes/subscribe.js

@@ -0,0 +1,87 @@
+import { config } from 'virtual:growth-labs/mailer/config';
+import { drizzle } from 'drizzle-orm/d1';
+import { sendTransactional } from '../utils/send.js';
+import { createSubscriber } from '../utils/subscribers.js';
+import { generateToken } from '../utils/tokens.js';
+export const POST = async ({ request, locals }) => {
+    // 1. Parse request body
+    const body = (await request.json());
+    // 2. Validate required fields
+    if (!body.email || !body.turnstileToken) {
+        return Response.json({ error: 'Missing required fields' }, { status: 400 });
+    }
+    // 3. Basic email format validation
+    if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(body.email)) {
+        return Response.json({ error: 'Invalid email format' }, { status: 400 });
+    }
+    // 4. Validate Turnstile token
+    const turnstileResponse = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            secret: config.turnstileSecretKey,
+            response: body.turnstileToken,
+            remoteip: request.headers.get('cf-connecting-ip') ?? undefined,
+        }),
+    });
+    const turnstileResult = (await turnstileResponse.json());
+    if (!turnstileResult.success) {
+        return Response.json({ error: 'Turnstile verification failed' }, { status: 400 });
+    }
+    // 5. Resolve bindings
+    const runtimeEnv = locals.runtime?.env;
+    const d1 = runtimeEnv[config.d1Binding];
+    const queue = runtimeEnv[config.queueBinding];
+    const db = drizzle(d1);
+    const env = { DB: d1, QUEUE: queue };
+    // 6. Create subscriber
+    try {
+        const { subscriber, isNew } = await createSubscriber(db, {
+            email: body.email,
+            name: body.name,
+            source: body.source ?? 'form',
+            preferences: body.preferences,
+            doubleOptIn: config.doubleOptIn,
+        });
+        // 7. Send confirmation or welcome email
+        if (config.doubleOptIn && (isNew || subscriber.status === 'pending')) {
+            const confirmToken = await generateToken(config.signingSecret, {
+                subscriberId: subscriber.id,
+                action: 'confirm',
+            });
+            const confirmUrl = `${config.siteUrl}${config.confirmPath}?token=${confirmToken}`;
+            await sendTransactional(env, config, {
+                to: body.email,
+                subscriberId: subscriber.id,
+                subject: `Confirm your ${config.senderName} subscription`,
+                template: 'confirmation',
+                data: {
+                    name: body.name,
+                    confirmUrl,
+                },
+            });
+        }
+        else if (!config.doubleOptIn && isNew) {
+            await sendTransactional(env, config, {
+                to: body.email,
+                subscriberId: subscriber.id,
+                subject: `Welcome to ${config.senderName}`,
+                template: 'welcome',
+                data: { name: body.name },
+            });
+        }
+        // Return success (always 200 to avoid email enumeration)
+        return Response.json({
+            success: true,
+            requiresConfirmation: config.doubleOptIn,
+        });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        if (message.includes('bounced') || message.includes('complained')) {
+            return Response.json({ error: 'This email address cannot be subscribed' }, { status: 422 });
+        }
+        throw err;
+    }
+};
+//# sourceMappingURL=subscribe.js.map

package/dist/routes/subscribe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscribe.js","sourceRoot":"","sources":["../../src/routes/subscribe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAA;AAE1D,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAGxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,MAAM,CAAC,MAAM,IAAI,GAAa,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC3D,wBAAwB;IACxB,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAMjC,CAAA;IAED,8BAA8B;IAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IAC5E,CAAC;IAED,mCAAmC;IACnC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACzE,CAAC;IAED,8BAA8B;IAC9B,MAAM,iBAAiB,GAAG,MAAM,KAAK,CACpC,2DAA2D,EAC3D;QACC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,MAAM,EAAE,MAAM,CAAC,kBAAkB;YACjC,QAAQ,EAAE,IAAI,CAAC,cAAc;YAC7B,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,SAAS;SAC9D,CAAC;KACF,CACD,CAAA;IACD,MAAM,eAAe,GAAG,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,CAEtD,CAAA;IACD,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IAClF,CAAC;IAED,sBAAsB;IACtB,MAAM,UAAU,GAAI,MAAwB,CAAC,OAAO,EAAE,GAA8B,CAAA;IACpF,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAe,CAAA;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,YAAY,CAAU,CAAA;IACtD,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAA;IACtB,MAAM,GAAG,GAAc,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IAE/C,uBAAuB;IACvB,IAAI,CAAC;QACJ,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE;YACxD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;SAC/B,CAAC,CAAA;QAEF,wCAAwC;QACxC,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;YACtE,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE;gBAC9D,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,MAAM,EAAE,SAAS;aACjB,CAAC,CAAA;YACF,MAAM,UAAU,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,WAAW,UAAU,YAAY,EAAE,CAAA;YAEjF,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE;gBACpC,EAAE,EAAE,IAAI,CAAC,KAAK;gBACd,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,OAAO,EAAE,gBAAgB,MAAM,CAAC,UAAU,eAAe;gBACzD,QAAQ,EAAE,cAAc;gBACxB,IAAI,EAAE;oBACL,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,UAAU;iBACV;aACD,CAAC,CAAA;QACH,CAAC;aAAM,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,KAAK,EAAE,CAAC;YACzC,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE;gBACpC,EAAE,EAAE,IAAI,CAAC,KAAK;gBACd,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,OAAO,EAAE,cAAc,MAAM,CAAC,UAAU,EAAE;gBAC1C,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;aACzB,CAAC,CAAA;QACH,CAAC;QAED,yDAAyD;QACzD,OAAO,QAAQ,CAAC,IAAI,CAAC;YACpB,OAAO,EAAE,IAAI;YACb,oBAAoB,EAAE,MAAM,CAAC,WAAW;SACxC,CAAC,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChE,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACnE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yCAAyC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5F,CAAC;QACD,MAAM,GAAG,CAAA;IACV,CAAC;AACF,CAAC,CAAA"}

package/dist/routes/track-click.d.ts

@@ -0,0 +1,3 @@
+import type { APIRoute } from 'astro';
+export declare const GET: APIRoute;
+//# sourceMappingURL=track-click.d.ts.map

package/dist/routes/track-click.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"track-click.d.ts","sourceRoot":"","sources":["../../src/routes/track-click.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAKrC,eAAO,MAAM,GAAG,EAAE,QAkDjB,CAAA"}

package/dist/routes/track-click.js

@@ -0,0 +1,45 @@
+import { config } from 'virtual:growth-labs/mailer/config';
+import { and, eq, inArray } from 'drizzle-orm';
+import { drizzle } from 'drizzle-orm/d1';
+import { emailSends } from '../schema.js';
+export const GET = async ({ params, url, locals }) => {
+    const trackingId = params.trackingId;
+    const destination = url.searchParams.get('url');
+    if (!trackingId || !destination) {
+        return new Response('Bad request', { status: 400 });
+    }
+    // Validate: must be http or https (prevent javascript:, data:, etc.)
+    try {
+        const destUrl = new URL(destination);
+        if (!['http:', 'https:'].includes(destUrl.protocol)) {
+            return new Response('Invalid redirect', { status: 400 });
+        }
+    }
+    catch {
+        return new Response('Invalid URL', { status: 400 });
+    }
+    // Update status to 'clicked' only when it hasn't already reached 'clicked'
+    try {
+        const runtimeEnv = locals.runtime?.env;
+        if (runtimeEnv) {
+            const d1 = runtimeEnv[config.d1Binding];
+            const db = drizzle(d1);
+            await db
+                .update(emailSends)
+                .set({
+                status: 'clicked',
+                clickedAt: new Date().toISOString(),
+            })
+                .where(and(eq(emailSends.trackingId, trackingId), inArray(emailSends.status, ['sent', 'delivered', 'opened'])));
+        }
+    }
+    catch {
+        // Never fail the redirect on DB errors
+    }
+    // 302 redirect to original destination
+    return new Response(null, {
+        status: 302,
+        headers: { Location: destination },
+    });
+};
+//# sourceMappingURL=track-click.js.map

package/dist/routes/track-click.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"track-click.js","sourceRoot":"","sources":["../../src/routes/track-click.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAA;AAE1D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAEzC,MAAM,CAAC,MAAM,GAAG,GAAa,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;IACpC,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAE/C,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,OAAO,IAAI,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACpD,CAAC;IAED,qEAAqE;IACrE,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAA;QACpC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,QAAQ,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QACzD,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACpD,CAAC;IAED,2EAA2E;IAC3E,IAAI,CAAC;QACJ,MAAM,UAAU,GACf,MAGA,CAAC,OAAO,EAAE,GAAG,CAAA;QACd,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAe,CAAA;YACrD,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAA;YACtB,MAAM,EAAE;iBACN,MAAM,CAAC,UAAU,CAAC;iBAClB,GAAG,CAAC;gBACJ,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACnC,CAAC;iBACD,KAAK,CACL,GAAG,CACF,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,EACrC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAC3D,CACD,CAAA;QACH,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,uCAAuC;IACxC,CAAC;IAED,uCAAuC;IACvC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACzB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE;KAClC,CAAC,CAAA;AACH,CAAC,CAAA"}

package/dist/routes/track-open.d.ts

@@ -0,0 +1,3 @@
+import type { APIRoute } from 'astro';
+export declare const GET: APIRoute;
+//# sourceMappingURL=track-open.d.ts.map

package/dist/routes/track-open.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"track-open.d.ts","sourceRoot":"","sources":["../../src/routes/track-open.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAMrC,eAAO,MAAM,GAAG,EAAE,QA2CjB,CAAA"}

package/dist/routes/track-open.js

@@ -0,0 +1,40 @@
+import { config } from 'virtual:growth-labs/mailer/config';
+import { and, eq, inArray } from 'drizzle-orm';
+import { drizzle } from 'drizzle-orm/d1';
+import { emailSends } from '../schema.js';
+import { TRANSPARENT_GIF } from '../utils/tracking.js';
+export const GET = async ({ params, locals }) => {
+    const trackingId = params.trackingId;
+    if (!trackingId) {
+        return new Response(null, { status: 400 });
+    }
+    // Update status to 'opened' only when currently 'sent' or 'delivered'
+    // to avoid downgrading from 'clicked'.
+    try {
+        const runtimeEnv = locals.runtime?.env;
+        if (runtimeEnv) {
+            const d1 = runtimeEnv[config.d1Binding];
+            const db = drizzle(d1);
+            await db
+                .update(emailSends)
+                .set({
+                status: 'opened',
+                openedAt: new Date().toISOString(),
+            })
+                .where(and(eq(emailSends.trackingId, trackingId), inArray(emailSends.status, ['sent', 'delivered'])));
+        }
+    }
+    catch {
+        // Never fail the pixel response on DB errors
+    }
+    // 1x1 transparent GIF
+    return new Response(TRANSPARENT_GIF, {
+        status: 200,
+        headers: {
+            'Content-Type': 'image/gif',
+            'Cache-Control': 'no-store, no-cache, must-revalidate',
+            'Content-Length': String(TRANSPARENT_GIF.length),
+        },
+    });
+};
+//# sourceMappingURL=track-open.js.map

package/dist/routes/track-open.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"track-open.js","sourceRoot":"","sources":["../../src/routes/track-open.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAA;AAE1D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAEtD,MAAM,CAAC,MAAM,GAAG,GAAa,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;IACzD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;IACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IAC3C,CAAC;IAED,sEAAsE;IACtE,uCAAuC;IACvC,IAAI,CAAC;QACJ,MAAM,UAAU,GACf,MAGA,CAAC,OAAO,EAAE,GAAG,CAAA;QACd,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAe,CAAA;YACrD,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAA;YACtB,MAAM,EAAE;iBACN,MAAM,CAAC,UAAU,CAAC;iBAClB,GAAG,CAAC;gBACJ,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAClC,CAAC;iBACD,KAAK,CACL,GAAG,CACF,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,EACrC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CACjD,CACD,CAAA;QACH,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,6CAA6C;IAC9C,CAAC;IAED,sBAAsB;IACtB,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE;QACpC,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACR,cAAc,EAAE,WAAW;YAC3B,eAAe,EAAE,qCAAqC;YACtD,gBAAgB,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC;SAChD;KACD,CAAC,CAAA;AACH,CAAC,CAAA"}

package/dist/routes/unsubscribe.d.ts

@@ -0,0 +1,4 @@
+import type { APIRoute } from 'astro';
+export declare const GET: APIRoute;
+export declare const POST: APIRoute;
+//# sourceMappingURL=unsubscribe.d.ts.map

package/dist/routes/unsubscribe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsubscribe.d.ts","sourceRoot":"","sources":["../../src/routes/unsubscribe.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAmDrC,eAAO,MAAM,GAAG,EAAE,QAyBjB,CAAA;AAGD,eAAO,MAAM,IAAI,EAAE,QAelB,CAAA"}

package/dist/routes/unsubscribe.js

@@ -0,0 +1,81 @@
+import { config } from 'virtual:growth-labs/mailer/config';
+import { drizzle } from 'drizzle-orm/d1';
+import { sendTransactional } from '../utils/send.js';
+import { getSubscriberById, unsubscribeSubscriber } from '../utils/subscribers.js';
+import { generateToken, verifyToken } from '../utils/tokens.js';
+import { buildSiteUrl } from '../utils/urls.js';
+async function processUnsubscribe(locals, token) {
+    // Verify token
+    const payload = await verifyToken(config.signingSecret, token);
+    if (!payload || payload.action !== 'unsubscribe') {
+        return { error: 'Invalid or expired token', status: 400 };
+    }
+    // Resolve bindings
+    const runtimeEnv = locals.runtime?.env;
+    const d1 = runtimeEnv[config.d1Binding];
+    const queue = runtimeEnv[config.queueBinding];
+    const db = drizzle(d1);
+    const env = { DB: d1, QUEUE: queue };
+    // Get subscriber
+    const subscriber = await getSubscriberById(db, payload.subscriberId);
+    if (!subscriber) {
+        return { error: 'Subscriber not found', status: 404 };
+    }
+    // Unsubscribe
+    await unsubscribeSubscriber(db, payload.subscriberId);
+    // Send confirmation email
+    await sendTransactional(env, config, {
+        to: subscriber.email,
+        subscriberId: subscriber.id,
+        subject: `You've been unsubscribed from ${config.senderName}`,
+        template: 'unsubscribe-confirm',
+        data: {
+            name: subscriber.name,
+            resubscribeUrl: buildSiteUrl(config.siteUrl, config.subscribePath),
+        },
+    });
+    return {
+        success: true,
+        subscriberId: payload.subscriberId,
+    };
+}
+// GET: Link from email footer
+export const GET = async ({ url, locals }) => {
+    const token = url.searchParams.get('token');
+    if (!token) {
+        return Response.json({ error: 'Missing token' }, { status: 400 });
+    }
+    const result = await processUnsubscribe(locals, token);
+    if ('error' in result) {
+        return Response.json({ error: result.error }, { status: result.status });
+    }
+    // Generate preferences token for the redirect
+    const preferencesToken = await generateToken(config.signingSecret, {
+        subscriberId: result.subscriberId,
+        action: 'preferences',
+    });
+    const preferencesUrl = buildSiteUrl(config.siteUrl, config.preferencesPath, {
+        token: preferencesToken,
+        unsubscribed: true,
+    });
+    return new Response(null, {
+        status: 302,
+        headers: { Location: preferencesUrl },
+    });
+};
+// POST: RFC 8058 List-Unsubscribe-Post
+export const POST = async ({ request, locals }) => {
+    // RFC 8058: body is "List-Unsubscribe=One-Click"
+    // Token comes from List-Unsubscribe header URL
+    const url = new URL(request.url);
+    const token = url.searchParams.get('token');
+    if (!token) {
+        return new Response('Missing token', { status: 400 });
+    }
+    const result = await processUnsubscribe(locals, token);
+    if ('error' in result) {
+        return new Response(result.error, { status: result.status });
+    }
+    return new Response('OK', { status: 200 });
+};
+//# sourceMappingURL=unsubscribe.js.map

package/dist/routes/unsubscribe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsubscribe.js","sourceRoot":"","sources":["../../src/routes/unsubscribe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAA;AAE1D,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAGxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAClF,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAE/C,KAAK,UAAU,kBAAkB,CAAC,MAAqB,EAAE,KAAa;IACrE,eAAe;IACf,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;IAC9D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IAC1D,CAAC;IAED,mBAAmB;IACnB,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,EAAE,GAA8B,CAAA;IACjE,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAe,CAAA;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,YAAY,CAAU,CAAA;IACtD,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAA;IACtB,MAAM,GAAG,GAAc,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IAE/C,iBAAiB;IACjB,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IACpE,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IACtD,CAAC;IAED,cAAc;IACd,MAAM,qBAAqB,CAAC,EAAE,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAErD,0BAA0B;IAC1B,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE;QACpC,EAAE,EAAE,UAAU,CAAC,KAAK;QACpB,YAAY,EAAE,UAAU,CAAC,EAAE;QAC3B,OAAO,EAAE,iCAAiC,MAAM,CAAC,UAAU,EAAE;QAC7D,QAAQ,EAAE,qBAAqB;QAC/B,IAAI,EAAE;YACL,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,cAAc,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC;SAClE;KACD,CAAC,CAAA;IAEF,OAAO;QACN,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,OAAO,CAAC,YAAY;KAClC,CAAA;AACF,CAAC;AAED,8BAA8B;AAC9B,MAAM,CAAC,MAAM,GAAG,GAAa,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;IACtD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IAClE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAuB,EAAE,KAAK,CAAC,CAAA;IACvE,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IACzE,CAAC;IAED,8CAA8C;IAC9C,MAAM,gBAAgB,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE;QAClE,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,MAAM,EAAE,aAAa;KACrB,CAAC,CAAA;IACF,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,EAAE;QAC3E,KAAK,EAAE,gBAAgB;QACvB,YAAY,EAAE,IAAI;KAClB,CAAC,CAAA;IAEF,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACzB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;KACrC,CAAC,CAAA;AACH,CAAC,CAAA;AAED,uCAAuC;AACvC,MAAM,CAAC,MAAM,IAAI,GAAa,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC3D,iDAAiD;IACjD,+CAA+C;IAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,IAAI,QAAQ,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,MAAuB,EAAE,KAAK,CAAC,CAAA;IACvE,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACvB,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;AAC3C,CAAC,CAAA"}

package/dist/routes/webhook.d.ts

@@ -0,0 +1,3 @@
+import type { APIRoute } from 'astro';
+export declare const POST: APIRoute;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/routes/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/routes/webhook.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAYrC,eAAO,MAAM,IAAI,EAAE,QAkClB,CAAA"}

package/dist/routes/webhook.js

@@ -0,0 +1,30 @@
+import { config } from 'virtual:growth-labs/mailer/config';
+import { drizzle } from 'drizzle-orm/d1';
+import { handleBounce, handleComplaint, handleDelivery } from '../utils/bounce.js';
+export const POST = async ({ request, locals }) => {
+    const body = (await request.json());
+    if (!body.type || !body.email) {
+        return Response.json({ error: 'Invalid payload' }, { status: 400 });
+    }
+    const runtimeEnv = locals.runtime?.env;
+    if (!runtimeEnv) {
+        return Response.json({ error: 'Runtime not available' }, { status: 500 });
+    }
+    const d1 = runtimeEnv[config.d1Binding];
+    const db = drizzle(d1);
+    switch (body.type) {
+        case 'delivery':
+            if (body.trackingId) {
+                await handleDelivery(db, body.trackingId);
+            }
+            break;
+        case 'bounce':
+            await handleBounce(db, body.email, body.bounceType ?? 'hard');
+            break;
+        case 'complaint':
+            await handleComplaint(db, body.email);
+            break;
+    }
+    return Response.json({ ok: true });
+};
+//# sourceMappingURL=webhook.js.map

package/dist/routes/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../src/routes/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mCAAmC,CAAA;AAE1D,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAUlF,MAAM,CAAC,MAAM,IAAI,GAAa,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;IAC3D,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAmB,CAAA;IAErD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACpE,CAAC;IAED,MAAM,UAAU,GACf,MAGA,CAAC,OAAO,EAAE,GAAG,CAAA;IACd,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAe,CAAA;IACrD,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAA;IAEtB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,UAAU;YACd,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACrB,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YAC1C,CAAC;YACD,MAAK;QACN,KAAK,QAAQ;YACZ,MAAM,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,CAAA;YAC7D,MAAK;QACN,KAAK,WAAW;YACf,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;YACrC,MAAK;IACP,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;AACnC,CAAC,CAAA"}