@lacspace/email-verify 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Lacspace
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.cjs

@@ -0,0 +1,117 @@
+'use strict';
+
+var net = require('net');
+var promises = require('dns/promises');
+var os = require('os');
+var emailValidate = require('@lacspace/email-validate');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var net__default = /*#__PURE__*/_interopDefault(net);
+
+// src/index.ts
+async function resolveMx(domain) {
+  try {
+    const records = await promises.resolveMx(domain);
+    return records.sort((a, b) => a.priority - b.priority);
+  } catch {
+    return [];
+  }
+}
+function smtpCheck(email, mxHost, opts = {}) {
+  const timeout = opts.timeout ?? 1e4;
+  const from = opts.fromAddress ?? `verify@${os.hostname() || "localhost"}`;
+  return new Promise((resolve) => {
+    const socket = net__default.default.connect({ host: mxHost, port: 25 });
+    socket.setEncoding("utf8");
+    socket.setTimeout(timeout);
+    let buffer = "";
+    let step = 0;
+    let verdict = "unknown";
+    const steps = [
+      `EHLO ${os.hostname() || "localhost"}`,
+      `MAIL FROM:<${from}>`,
+      `RCPT TO:<${email}>`,
+      "QUIT"
+    ];
+    const finish = (v) => {
+      verdict = v;
+      try {
+        socket.write("QUIT\r\n");
+      } catch {
+      }
+      socket.destroy();
+      resolve(verdict);
+    };
+    const send = () => {
+      if (step < steps.length) socket.write(steps[step] + "\r\n");
+    };
+    socket.on("connect", () => {
+    });
+    socket.on("data", (chunk) => {
+      buffer += chunk;
+      const lines = buffer.split("\r\n");
+      buffer = lines.pop() ?? "";
+      for (const line of lines) {
+        if (!/^\d{3} /.test(line)) continue;
+        const code = parseInt(line.slice(0, 3), 10);
+        if (step === 0) {
+          if (code !== 220) return finish("unknown");
+          send();
+          step = 1;
+        } else if (step === 1) {
+          send();
+          step = 2;
+        } else if (step === 2) {
+          if (code >= 400) return finish("unknown");
+          send();
+          step = 3;
+        } else if (step === 3) {
+          if (code === 250 || code === 251) return finish("deliverable");
+          if (code === 550 || code === 551 || code === 553) return finish("undeliverable");
+          return finish("unknown");
+        }
+      }
+    });
+    socket.on("timeout", () => finish("unknown"));
+    socket.on("error", () => finish("unknown"));
+    socket.on("close", () => resolve(verdict));
+  });
+}
+async function verifyEmail(email, opts = {}) {
+  const v = emailValidate.validateEmail(email, { extraDisposable: opts.extraDisposable, suggestions: false });
+  const base = {
+    email,
+    valid: false,
+    syntax: v.valid,
+    disposable: v.disposable,
+    role: v.role,
+    mxFound: false,
+    mxRecords: [],
+    smtp: "unknown"
+  };
+  if (!v.valid || !v.domain) return { ...base, reason: "invalid syntax" };
+  const mx = await resolveMx(v.domain);
+  base.mxRecords = mx;
+  base.mxFound = mx.length > 0;
+  if (!base.mxFound) return { ...base, reason: "no MX records for domain" };
+  if (opts.checkSmtp === false) {
+    return { ...base, valid: !v.disposable };
+  }
+  const verdict = await smtpCheck(email, mx[0].exchange, {
+    fromAddress: opts.fromAddress,
+    timeout: opts.timeout
+  });
+  base.smtp = verdict;
+  return {
+    ...base,
+    valid: !v.disposable && verdict !== "undeliverable",
+    reason: verdict === "undeliverable" ? "mailbox rejected by server" : void 0
+  };
+}
+
+exports.resolveMx = resolveMx;
+exports.smtpCheck = smtpCheck;
+exports.verifyEmail = verifyEmail;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":["dnsResolveMx","hostname","net","validateEmail"],"mappings":";;;;;;;;;;;;AAoDA,eAAsB,UAAU,MAAA,EAAqC;AACnE,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,MAAMA,kBAAA,CAAa,MAAM,CAAA;AACzC,IAAA,OAAO,OAAA,CAAQ,KAAK,CAAC,CAAA,EAAG,MAAM,CAAA,CAAE,QAAA,GAAW,EAAE,QAAQ,CAAA;AAAA,EACvD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAMO,SAAS,SAAA,CACd,KAAA,EACA,MAAA,EACA,IAAA,GAAmD,EAAC,EAC9B;AACtB,EAAA,MAAM,OAAA,GAAU,KAAK,OAAA,IAAW,GAAA;AAChC,EAAA,MAAM,OAAO,IAAA,CAAK,WAAA,IAAe,CAAA,OAAA,EAAUC,WAAA,MAAc,WAAW,CAAA,CAAA;AAEpE,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC9B,IAAA,MAAM,MAAA,GAASC,qBAAI,OAAA,CAAQ,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AACrD,IAAA,MAAA,CAAO,YAAY,MAAM,CAAA;AACzB,IAAA,MAAA,CAAO,WAAW,OAAO,CAAA;AAEzB,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,IAAI,IAAA,GAAO,CAAA;AACX,IAAA,IAAI,OAAA,GAAuB,SAAA;AAC3B,IAAA,MAAM,KAAA,GAAQ;AAAA,MACZ,CAAA,KAAA,EAAQD,WAAA,EAAS,IAAK,WAAW,CAAA,CAAA;AAAA,MACjC,cAAc,IAAI,CAAA,CAAA,CAAA;AAAA,MAClB,YAAY,KAAK,CAAA,CAAA,CAAA;AAAA,MACjB;AAAA,KACF;AAEA,IAAA,MAAM,MAAA,GAAS,CAAC,CAAA,KAAmB;AACjC,MAAA,OAAA,GAAU,CAAA;AACV,MAAA,IAAI;AACF,QAAA,MAAA,CAAO,MAAM,UAAU,CAAA;AAAA,MACzB,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,MAAA,CAAO,OAAA,EAAQ;AACf,MAAA,OAAA,CAAQ,OAAO,CAAA;AAAA,IACjB,CAAA;AAEA,IAAA,MAAM,OAAO,MAAM;AACjB,MAAA,IAAI,IAAA,GAAO,MAAM,MAAA,EAAQ,MAAA,CAAO,MAAM,KAAA,CAAM,IAAI,IAAK,MAAM,CAAA;AAAA,IAC7D,CAAA;AAEA,IAAA,MAAA,CAAO,EAAA,CAAG,WAAW,MAAM;AAAA,IAE3B,CAAC,CAAA;AAED,IAAA,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACnC,MAAA,MAAA,IAAU,KAAA;AACV,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,MAAM,CAAA;AACjC,MAAA,MAAA,GAAS,KAAA,CAAM,KAAI,IAAK,EAAA;AACxB,MAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,QAAA,IAAI,CAAC,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,EAAG;AAC3B,QAAA,MAAM,OAAO,QAAA,CAAS,IAAA,CAAK,MAAM,CAAA,EAAG,CAAC,GAAG,EAAE,CAAA;AAE1C,QAAA,IAAI,SAAS,CAAA,EAAG;AACd,UAAA,IAAI,IAAA,KAAS,GAAA,EAAK,OAAO,MAAA,CAAO,SAAS,CAAA;AACzC,UAAA,IAAA,EAAK;AACL,UAAA,IAAA,GAAO,CAAA;AAAA,QACT,CAAA,MAAA,IAAW,SAAS,CAAA,EAAG;AACrB,UAAA,IAAA,EAAK;AACL,UAAA,IAAA,GAAO,CAAA;AAAA,QACT,CAAA,MAAA,IAAW,SAAS,CAAA,EAAG;AACrB,UAAA,IAAI,IAAA,IAAQ,GAAA,EAAK,OAAO,MAAA,CAAO,SAAS,CAAA;AACxC,UAAA,IAAA,EAAK;AACL,UAAA,IAAA,GAAO,CAAA;AAAA,QACT,CAAA,MAAA,IAAW,SAAS,CAAA,EAAG;AACrB,UAAA,IAAI,SAAS,GAAA,IAAO,IAAA,KAAS,GAAA,EAAK,OAAO,OAAO,aAAa,CAAA;AAC7D,UAAA,IAAI,IAAA,KAAS,OAAO,IAAA,KAAS,GAAA,IAAO,SAAS,GAAA,EAAK,OAAO,OAAO,eAAe,CAAA;AAC/E,UAAA,OAAO,OAAO,SAAS,CAAA;AAAA,QACzB;AAAA,MACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,MAAA,CAAO,EAAA,CAAG,SAAA,EAAW,MAAM,MAAA,CAAO,SAAS,CAAC,CAAA;AAC5C,IAAA,MAAA,CAAO,EAAA,CAAG,OAAA,EAAS,MAAM,MAAA,CAAO,SAAS,CAAC,CAAA;AAC1C,IAAA,MAAA,CAAO,EAAA,CAAG,OAAA,EAAS,MAAM,OAAA,CAAQ,OAAO,CAAC,CAAA;AAAA,EAC3C,CAAC,CAAA;AACH;AAGA,eAAsB,WAAA,CAAY,KAAA,EAAe,IAAA,GAAsB,EAAC,EAA0B;AAChG,EAAA,MAAM,CAAA,GAAIE,4BAAc,KAAA,EAAO,EAAE,iBAAiB,IAAA,CAAK,eAAA,EAAiB,WAAA,EAAa,KAAA,EAAO,CAAA;AAC5F,EAAA,MAAM,IAAA,GAAqB;AAAA,IACzB,KAAA;AAAA,IACA,KAAA,EAAO,KAAA;AAAA,IACP,QAAQ,CAAA,CAAE,KAAA;AAAA,IACV,YAAY,CAAA,CAAE,UAAA;AAAA,IACd,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,OAAA,EAAS,KAAA;AAAA,IACT,WAAW,EAAC;AAAA,IACZ,IAAA,EAAM;AAAA,GACR;AAEA,EAAA,IAAI,CAAC,CAAA,CAAE,KAAA,IAAS,CAAC,CAAA,CAAE,MAAA,EAAQ,OAAO,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,gBAAA,EAAiB;AAEtE,EAAA,MAAM,EAAA,GAAK,MAAM,SAAA,CAAU,CAAA,CAAE,MAAM,CAAA;AACnC,EAAA,IAAA,CAAK,SAAA,GAAY,EAAA;AACjB,EAAA,IAAA,CAAK,OAAA,GAAU,GAAG,MAAA,GAAS,CAAA;AAC3B,EAAA,IAAI,CAAC,KAAK,OAAA,EAAS,OAAO,EAAE,GAAG,IAAA,EAAM,QAAQ,0BAAA,EAA2B;AAExE,EAAA,IAAI,IAAA,CAAK,cAAc,KAAA,EAAO;AAC5B,IAAA,OAAO,EAAE,GAAG,IAAA,EAAM,KAAA,EAAO,CAAC,EAAE,UAAA,EAAW;AAAA,EACzC;AAEA,EAAA,MAAM,UAAU,MAAM,SAAA,CAAU,OAAO,EAAA,CAAG,CAAC,EAAG,QAAA,EAAU;AAAA,IACtD,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,SAAS,IAAA,CAAK;AAAA,GACf,CAAA;AACD,EAAA,IAAA,CAAK,IAAA,GAAO,OAAA;AAEZ,EAAA,OAAO;AAAA,IACL,GAAG,IAAA;AAAA,IACH,KAAA,EAAO,CAAC,CAAA,CAAE,UAAA,IAAc,OAAA,KAAY,eAAA;AAAA,IACpC,MAAA,EAAQ,OAAA,KAAY,eAAA,GAAkB,4BAAA,GAA+B;AAAA,GACvE;AACF","file":"index.cjs","sourcesContent":["/**\n * @lacspace/email-verify\n * Does this mailbox actually exist? — best-effort deliverability checks.\n *\n * Combines syntax + disposable checks (@lacspace/email-validate) with a real MX\n * record lookup and an optional SMTP RCPT probe, over Node's built-in `dns` and\n * `net`. No message is ever sent.\n *\n * ⚠️ Live SMTP verification is inherently unreliable: many servers greylist,\n * accept-all (catch-all), or block probes — expect \"unknown\" often. Treat a\n * positive as \"likely deliverable\", never as a guarantee.\n *\n * Node.js only · zero npm dependencies · fully typed.\n */\n\nimport net from \"node:net\";\nimport { resolveMx as dnsResolveMx } from \"node:dns/promises\";\nimport { hostname } from \"node:os\";\nimport { validateEmail } from \"@lacspace/email-validate\";\n\nexport interface MxRecord {\n  exchange: string;\n  priority: number;\n}\n\nexport type SmtpVerdict = \"deliverable\" | \"undeliverable\" | \"unknown\";\n\nexport interface VerifyOptions {\n  /** Also run the live SMTP RCPT probe (default true). */\n  checkSmtp?: boolean;\n  /** MAIL FROM address used in the probe. Default `verify@<your hostname>`. */\n  fromAddress?: string;\n  /** Per-connection timeout in ms (default 10000). */\n  timeout?: number;\n  /** Extra disposable domains. */\n  extraDisposable?: string[];\n}\n\nexport interface VerifyResult {\n  email: string;\n  /** Overall best-effort verdict: syntax ok, MX present, and SMTP not undeliverable. */\n  valid: boolean;\n  syntax: boolean;\n  disposable: boolean;\n  role: boolean;\n  mxFound: boolean;\n  mxRecords: MxRecord[];\n  smtp: SmtpVerdict;\n  reason?: string;\n}\n\n/** Look up and sort a domain's MX records (best priority first). */\nexport async function resolveMx(domain: string): Promise<MxRecord[]> {\n  try {\n    const records = await dnsResolveMx(domain);\n    return records.sort((a, b) => a.priority - b.priority);\n  } catch {\n    return [];\n  }\n}\n\n/**\n * Probe a mailbox with SMTP MAIL FROM / RCPT TO (no DATA, nothing sent).\n * Returns \"deliverable\" (250), \"undeliverable\" (550-class), or \"unknown\".\n */\nexport function smtpCheck(\n  email: string,\n  mxHost: string,\n  opts: { fromAddress?: string; timeout?: number } = {},\n): Promise<SmtpVerdict> {\n  const timeout = opts.timeout ?? 10000;\n  const from = opts.fromAddress ?? `verify@${hostname() || \"localhost\"}`;\n\n  return new Promise((resolve) => {\n    const socket = net.connect({ host: mxHost, port: 25 });\n    socket.setEncoding(\"utf8\");\n    socket.setTimeout(timeout);\n\n    let buffer = \"\";\n    let step = 0;\n    let verdict: SmtpVerdict = \"unknown\";\n    const steps = [\n      `EHLO ${hostname() || \"localhost\"}`,\n      `MAIL FROM:<${from}>`,\n      `RCPT TO:<${email}>`,\n      \"QUIT\",\n    ];\n\n    const finish = (v: SmtpVerdict) => {\n      verdict = v;\n      try {\n        socket.write(\"QUIT\\r\\n\");\n      } catch {\n        /* ignore */\n      }\n      socket.destroy();\n      resolve(verdict);\n    };\n\n    const send = () => {\n      if (step < steps.length) socket.write(steps[step]! + \"\\r\\n\");\n    };\n\n    socket.on(\"connect\", () => {\n      /* wait for 220 greeting before first command */\n    });\n\n    socket.on(\"data\", (chunk: string) => {\n      buffer += chunk;\n      const lines = buffer.split(\"\\r\\n\");\n      buffer = lines.pop() ?? \"\";\n      for (const line of lines) {\n        if (!/^\\d{3} /.test(line)) continue; // wait for final line of a reply\n        const code = parseInt(line.slice(0, 3), 10);\n\n        if (step === 0) {\n          if (code !== 220) return finish(\"unknown\");\n          send(); // EHLO\n          step = 1;\n        } else if (step === 1) {\n          send(); // MAIL FROM\n          step = 2;\n        } else if (step === 2) {\n          if (code >= 400) return finish(\"unknown\");\n          send(); // RCPT TO\n          step = 3;\n        } else if (step === 3) {\n          if (code === 250 || code === 251) return finish(\"deliverable\");\n          if (code === 550 || code === 551 || code === 553) return finish(\"undeliverable\");\n          return finish(\"unknown\");\n        }\n      }\n    });\n\n    socket.on(\"timeout\", () => finish(\"unknown\"));\n    socket.on(\"error\", () => finish(\"unknown\"));\n    socket.on(\"close\", () => resolve(verdict));\n  });\n}\n\n/** Full verification: syntax → disposable → MX → (optional) SMTP probe. */\nexport async function verifyEmail(email: string, opts: VerifyOptions = {}): Promise<VerifyResult> {\n  const v = validateEmail(email, { extraDisposable: opts.extraDisposable, suggestions: false });\n  const base: VerifyResult = {\n    email,\n    valid: false,\n    syntax: v.valid,\n    disposable: v.disposable,\n    role: v.role,\n    mxFound: false,\n    mxRecords: [],\n    smtp: \"unknown\",\n  };\n\n  if (!v.valid || !v.domain) return { ...base, reason: \"invalid syntax\" };\n\n  const mx = await resolveMx(v.domain);\n  base.mxRecords = mx;\n  base.mxFound = mx.length > 0;\n  if (!base.mxFound) return { ...base, reason: \"no MX records for domain\" };\n\n  if (opts.checkSmtp === false) {\n    return { ...base, valid: !v.disposable };\n  }\n\n  const verdict = await smtpCheck(email, mx[0]!.exchange, {\n    fromAddress: opts.fromAddress,\n    timeout: opts.timeout,\n  });\n  base.smtp = verdict;\n\n  return {\n    ...base,\n    valid: !v.disposable && verdict !== \"undeliverable\",\n    reason: verdict === \"undeliverable\" ? \"mailbox rejected by server\" : undefined,\n  };\n}\n"]}

package/dist/index.d.cts

@@ -0,0 +1,55 @@
+/**
+ * @lacspace/email-verify
+ * Does this mailbox actually exist? — best-effort deliverability checks.
+ *
+ * Combines syntax + disposable checks (@lacspace/email-validate) with a real MX
+ * record lookup and an optional SMTP RCPT probe, over Node's built-in `dns` and
+ * `net`. No message is ever sent.
+ *
+ * ⚠️ Live SMTP verification is inherently unreliable: many servers greylist,
+ * accept-all (catch-all), or block probes — expect "unknown" often. Treat a
+ * positive as "likely deliverable", never as a guarantee.
+ *
+ * Node.js only · zero npm dependencies · fully typed.
+ */
+interface MxRecord {
+    exchange: string;
+    priority: number;
+}
+type SmtpVerdict = "deliverable" | "undeliverable" | "unknown";
+interface VerifyOptions {
+    /** Also run the live SMTP RCPT probe (default true). */
+    checkSmtp?: boolean;
+    /** MAIL FROM address used in the probe. Default `verify@<your hostname>`. */
+    fromAddress?: string;
+    /** Per-connection timeout in ms (default 10000). */
+    timeout?: number;
+    /** Extra disposable domains. */
+    extraDisposable?: string[];
+}
+interface VerifyResult {
+    email: string;
+    /** Overall best-effort verdict: syntax ok, MX present, and SMTP not undeliverable. */
+    valid: boolean;
+    syntax: boolean;
+    disposable: boolean;
+    role: boolean;
+    mxFound: boolean;
+    mxRecords: MxRecord[];
+    smtp: SmtpVerdict;
+    reason?: string;
+}
+/** Look up and sort a domain's MX records (best priority first). */
+declare function resolveMx(domain: string): Promise<MxRecord[]>;
+/**
+ * Probe a mailbox with SMTP MAIL FROM / RCPT TO (no DATA, nothing sent).
+ * Returns "deliverable" (250), "undeliverable" (550-class), or "unknown".
+ */
+declare function smtpCheck(email: string, mxHost: string, opts?: {
+    fromAddress?: string;
+    timeout?: number;
+}): Promise<SmtpVerdict>;
+/** Full verification: syntax → disposable → MX → (optional) SMTP probe. */
+declare function verifyEmail(email: string, opts?: VerifyOptions): Promise<VerifyResult>;
+
+export { type MxRecord, type SmtpVerdict, type VerifyOptions, type VerifyResult, resolveMx, smtpCheck, verifyEmail };

package/dist/index.d.ts

@@ -0,0 +1,55 @@
+/**
+ * @lacspace/email-verify
+ * Does this mailbox actually exist? — best-effort deliverability checks.
+ *
+ * Combines syntax + disposable checks (@lacspace/email-validate) with a real MX
+ * record lookup and an optional SMTP RCPT probe, over Node's built-in `dns` and
+ * `net`. No message is ever sent.
+ *
+ * ⚠️ Live SMTP verification is inherently unreliable: many servers greylist,
+ * accept-all (catch-all), or block probes — expect "unknown" often. Treat a
+ * positive as "likely deliverable", never as a guarantee.
+ *
+ * Node.js only · zero npm dependencies · fully typed.
+ */
+interface MxRecord {
+    exchange: string;
+    priority: number;
+}
+type SmtpVerdict = "deliverable" | "undeliverable" | "unknown";
+interface VerifyOptions {
+    /** Also run the live SMTP RCPT probe (default true). */
+    checkSmtp?: boolean;
+    /** MAIL FROM address used in the probe. Default `verify@<your hostname>`. */
+    fromAddress?: string;
+    /** Per-connection timeout in ms (default 10000). */
+    timeout?: number;
+    /** Extra disposable domains. */
+    extraDisposable?: string[];
+}
+interface VerifyResult {
+    email: string;
+    /** Overall best-effort verdict: syntax ok, MX present, and SMTP not undeliverable. */
+    valid: boolean;
+    syntax: boolean;
+    disposable: boolean;
+    role: boolean;
+    mxFound: boolean;
+    mxRecords: MxRecord[];
+    smtp: SmtpVerdict;
+    reason?: string;
+}
+/** Look up and sort a domain's MX records (best priority first). */
+declare function resolveMx(domain: string): Promise<MxRecord[]>;
+/**
+ * Probe a mailbox with SMTP MAIL FROM / RCPT TO (no DATA, nothing sent).
+ * Returns "deliverable" (250), "undeliverable" (550-class), or "unknown".
+ */
+declare function smtpCheck(email: string, mxHost: string, opts?: {
+    fromAddress?: string;
+    timeout?: number;
+}): Promise<SmtpVerdict>;
+/** Full verification: syntax → disposable → MX → (optional) SMTP probe. */
+declare function verifyEmail(email: string, opts?: VerifyOptions): Promise<VerifyResult>;
+
+export { type MxRecord, type SmtpVerdict, type VerifyOptions, type VerifyResult, resolveMx, smtpCheck, verifyEmail };

package/dist/index.js

@@ -0,0 +1,109 @@
+import net from 'net';
+import { resolveMx as resolveMx$1 } from 'dns/promises';
+import { hostname } from 'os';
+import { validateEmail } from '@lacspace/email-validate';
+
+// src/index.ts
+async function resolveMx(domain) {
+  try {
+    const records = await resolveMx$1(domain);
+    return records.sort((a, b) => a.priority - b.priority);
+  } catch {
+    return [];
+  }
+}
+function smtpCheck(email, mxHost, opts = {}) {
+  const timeout = opts.timeout ?? 1e4;
+  const from = opts.fromAddress ?? `verify@${hostname() || "localhost"}`;
+  return new Promise((resolve) => {
+    const socket = net.connect({ host: mxHost, port: 25 });
+    socket.setEncoding("utf8");
+    socket.setTimeout(timeout);
+    let buffer = "";
+    let step = 0;
+    let verdict = "unknown";
+    const steps = [
+      `EHLO ${hostname() || "localhost"}`,
+      `MAIL FROM:<${from}>`,
+      `RCPT TO:<${email}>`,
+      "QUIT"
+    ];
+    const finish = (v) => {
+      verdict = v;
+      try {
+        socket.write("QUIT\r\n");
+      } catch {
+      }
+      socket.destroy();
+      resolve(verdict);
+    };
+    const send = () => {
+      if (step < steps.length) socket.write(steps[step] + "\r\n");
+    };
+    socket.on("connect", () => {
+    });
+    socket.on("data", (chunk) => {
+      buffer += chunk;
+      const lines = buffer.split("\r\n");
+      buffer = lines.pop() ?? "";
+      for (const line of lines) {
+        if (!/^\d{3} /.test(line)) continue;
+        const code = parseInt(line.slice(0, 3), 10);
+        if (step === 0) {
+          if (code !== 220) return finish("unknown");
+          send();
+          step = 1;
+        } else if (step === 1) {
+          send();
+          step = 2;
+        } else if (step === 2) {
+          if (code >= 400) return finish("unknown");
+          send();
+          step = 3;
+        } else if (step === 3) {
+          if (code === 250 || code === 251) return finish("deliverable");
+          if (code === 550 || code === 551 || code === 553) return finish("undeliverable");
+          return finish("unknown");
+        }
+      }
+    });
+    socket.on("timeout", () => finish("unknown"));
+    socket.on("error", () => finish("unknown"));
+    socket.on("close", () => resolve(verdict));
+  });
+}
+async function verifyEmail(email, opts = {}) {
+  const v = validateEmail(email, { extraDisposable: opts.extraDisposable, suggestions: false });
+  const base = {
+    email,
+    valid: false,
+    syntax: v.valid,
+    disposable: v.disposable,
+    role: v.role,
+    mxFound: false,
+    mxRecords: [],
+    smtp: "unknown"
+  };
+  if (!v.valid || !v.domain) return { ...base, reason: "invalid syntax" };
+  const mx = await resolveMx(v.domain);
+  base.mxRecords = mx;
+  base.mxFound = mx.length > 0;
+  if (!base.mxFound) return { ...base, reason: "no MX records for domain" };
+  if (opts.checkSmtp === false) {
+    return { ...base, valid: !v.disposable };
+  }
+  const verdict = await smtpCheck(email, mx[0].exchange, {
+    fromAddress: opts.fromAddress,
+    timeout: opts.timeout
+  });
+  base.smtp = verdict;
+  return {
+    ...base,
+    valid: !v.disposable && verdict !== "undeliverable",
+    reason: verdict === "undeliverable" ? "mailbox rejected by server" : void 0
+  };
+}
+
+export { resolveMx, smtpCheck, verifyEmail };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":["dnsResolveMx"],"mappings":";;;;;;AAoDA,eAAsB,UAAU,MAAA,EAAqC;AACnE,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,MAAMA,WAAA,CAAa,MAAM,CAAA;AACzC,IAAA,OAAO,OAAA,CAAQ,KAAK,CAAC,CAAA,EAAG,MAAM,CAAA,CAAE,QAAA,GAAW,EAAE,QAAQ,CAAA;AAAA,EACvD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAMO,SAAS,SAAA,CACd,KAAA,EACA,MAAA,EACA,IAAA,GAAmD,EAAC,EAC9B;AACtB,EAAA,MAAM,OAAA,GAAU,KAAK,OAAA,IAAW,GAAA;AAChC,EAAA,MAAM,OAAO,IAAA,CAAK,WAAA,IAAe,CAAA,OAAA,EAAU,QAAA,MAAc,WAAW,CAAA,CAAA;AAEpE,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC9B,IAAA,MAAM,MAAA,GAAS,IAAI,OAAA,CAAQ,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,IAAI,CAAA;AACrD,IAAA,MAAA,CAAO,YAAY,MAAM,CAAA;AACzB,IAAA,MAAA,CAAO,WAAW,OAAO,CAAA;AAEzB,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,IAAI,IAAA,GAAO,CAAA;AACX,IAAA,IAAI,OAAA,GAAuB,SAAA;AAC3B,IAAA,MAAM,KAAA,GAAQ;AAAA,MACZ,CAAA,KAAA,EAAQ,QAAA,EAAS,IAAK,WAAW,CAAA,CAAA;AAAA,MACjC,cAAc,IAAI,CAAA,CAAA,CAAA;AAAA,MAClB,YAAY,KAAK,CAAA,CAAA,CAAA;AAAA,MACjB;AAAA,KACF;AAEA,IAAA,MAAM,MAAA,GAAS,CAAC,CAAA,KAAmB;AACjC,MAAA,OAAA,GAAU,CAAA;AACV,MAAA,IAAI;AACF,QAAA,MAAA,CAAO,MAAM,UAAU,CAAA;AAAA,MACzB,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,MAAA,CAAO,OAAA,EAAQ;AACf,MAAA,OAAA,CAAQ,OAAO,CAAA;AAAA,IACjB,CAAA;AAEA,IAAA,MAAM,OAAO,MAAM;AACjB,MAAA,IAAI,IAAA,GAAO,MAAM,MAAA,EAAQ,MAAA,CAAO,MAAM,KAAA,CAAM,IAAI,IAAK,MAAM,CAAA;AAAA,IAC7D,CAAA;AAEA,IAAA,MAAA,CAAO,EAAA,CAAG,WAAW,MAAM;AAAA,IAE3B,CAAC,CAAA;AAED,IAAA,MAAA,CAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACnC,MAAA,MAAA,IAAU,KAAA;AACV,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,MAAM,CAAA;AACjC,MAAA,MAAA,GAAS,KAAA,CAAM,KAAI,IAAK,EAAA;AACxB,MAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,QAAA,IAAI,CAAC,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA,EAAG;AAC3B,QAAA,MAAM,OAAO,QAAA,CAAS,IAAA,CAAK,MAAM,CAAA,EAAG,CAAC,GAAG,EAAE,CAAA;AAE1C,QAAA,IAAI,SAAS,CAAA,EAAG;AACd,UAAA,IAAI,IAAA,KAAS,GAAA,EAAK,OAAO,MAAA,CAAO,SAAS,CAAA;AACzC,UAAA,IAAA,EAAK;AACL,UAAA,IAAA,GAAO,CAAA;AAAA,QACT,CAAA,MAAA,IAAW,SAAS,CAAA,EAAG;AACrB,UAAA,IAAA,EAAK;AACL,UAAA,IAAA,GAAO,CAAA;AAAA,QACT,CAAA,MAAA,IAAW,SAAS,CAAA,EAAG;AACrB,UAAA,IAAI,IAAA,IAAQ,GAAA,EAAK,OAAO,MAAA,CAAO,SAAS,CAAA;AACxC,UAAA,IAAA,EAAK;AACL,UAAA,IAAA,GAAO,CAAA;AAAA,QACT,CAAA,MAAA,IAAW,SAAS,CAAA,EAAG;AACrB,UAAA,IAAI,SAAS,GAAA,IAAO,IAAA,KAAS,GAAA,EAAK,OAAO,OAAO,aAAa,CAAA;AAC7D,UAAA,IAAI,IAAA,KAAS,OAAO,IAAA,KAAS,GAAA,IAAO,SAAS,GAAA,EAAK,OAAO,OAAO,eAAe,CAAA;AAC/E,UAAA,OAAO,OAAO,SAAS,CAAA;AAAA,QACzB;AAAA,MACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,MAAA,CAAO,EAAA,CAAG,SAAA,EAAW,MAAM,MAAA,CAAO,SAAS,CAAC,CAAA;AAC5C,IAAA,MAAA,CAAO,EAAA,CAAG,OAAA,EAAS,MAAM,MAAA,CAAO,SAAS,CAAC,CAAA;AAC1C,IAAA,MAAA,CAAO,EAAA,CAAG,OAAA,EAAS,MAAM,OAAA,CAAQ,OAAO,CAAC,CAAA;AAAA,EAC3C,CAAC,CAAA;AACH;AAGA,eAAsB,WAAA,CAAY,KAAA,EAAe,IAAA,GAAsB,EAAC,EAA0B;AAChG,EAAA,MAAM,CAAA,GAAI,cAAc,KAAA,EAAO,EAAE,iBAAiB,IAAA,CAAK,eAAA,EAAiB,WAAA,EAAa,KAAA,EAAO,CAAA;AAC5F,EAAA,MAAM,IAAA,GAAqB;AAAA,IACzB,KAAA;AAAA,IACA,KAAA,EAAO,KAAA;AAAA,IACP,QAAQ,CAAA,CAAE,KAAA;AAAA,IACV,YAAY,CAAA,CAAE,UAAA;AAAA,IACd,MAAM,CAAA,CAAE,IAAA;AAAA,IACR,OAAA,EAAS,KAAA;AAAA,IACT,WAAW,EAAC;AAAA,IACZ,IAAA,EAAM;AAAA,GACR;AAEA,EAAA,IAAI,CAAC,CAAA,CAAE,KAAA,IAAS,CAAC,CAAA,CAAE,MAAA,EAAQ,OAAO,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,gBAAA,EAAiB;AAEtE,EAAA,MAAM,EAAA,GAAK,MAAM,SAAA,CAAU,CAAA,CAAE,MAAM,CAAA;AACnC,EAAA,IAAA,CAAK,SAAA,GAAY,EAAA;AACjB,EAAA,IAAA,CAAK,OAAA,GAAU,GAAG,MAAA,GAAS,CAAA;AAC3B,EAAA,IAAI,CAAC,KAAK,OAAA,EAAS,OAAO,EAAE,GAAG,IAAA,EAAM,QAAQ,0BAAA,EAA2B;AAExE,EAAA,IAAI,IAAA,CAAK,cAAc,KAAA,EAAO;AAC5B,IAAA,OAAO,EAAE,GAAG,IAAA,EAAM,KAAA,EAAO,CAAC,EAAE,UAAA,EAAW;AAAA,EACzC;AAEA,EAAA,MAAM,UAAU,MAAM,SAAA,CAAU,OAAO,EAAA,CAAG,CAAC,EAAG,QAAA,EAAU;AAAA,IACtD,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,SAAS,IAAA,CAAK;AAAA,GACf,CAAA;AACD,EAAA,IAAA,CAAK,IAAA,GAAO,OAAA;AAEZ,EAAA,OAAO;AAAA,IACL,GAAG,IAAA;AAAA,IACH,KAAA,EAAO,CAAC,CAAA,CAAE,UAAA,IAAc,OAAA,KAAY,eAAA;AAAA,IACpC,MAAA,EAAQ,OAAA,KAAY,eAAA,GAAkB,4BAAA,GAA+B;AAAA,GACvE;AACF","file":"index.js","sourcesContent":["/**\n * @lacspace/email-verify\n * Does this mailbox actually exist? — best-effort deliverability checks.\n *\n * Combines syntax + disposable checks (@lacspace/email-validate) with a real MX\n * record lookup and an optional SMTP RCPT probe, over Node's built-in `dns` and\n * `net`. No message is ever sent.\n *\n * ⚠️ Live SMTP verification is inherently unreliable: many servers greylist,\n * accept-all (catch-all), or block probes — expect \"unknown\" often. Treat a\n * positive as \"likely deliverable\", never as a guarantee.\n *\n * Node.js only · zero npm dependencies · fully typed.\n */\n\nimport net from \"node:net\";\nimport { resolveMx as dnsResolveMx } from \"node:dns/promises\";\nimport { hostname } from \"node:os\";\nimport { validateEmail } from \"@lacspace/email-validate\";\n\nexport interface MxRecord {\n  exchange: string;\n  priority: number;\n}\n\nexport type SmtpVerdict = \"deliverable\" | \"undeliverable\" | \"unknown\";\n\nexport interface VerifyOptions {\n  /** Also run the live SMTP RCPT probe (default true). */\n  checkSmtp?: boolean;\n  /** MAIL FROM address used in the probe. Default `verify@<your hostname>`. */\n  fromAddress?: string;\n  /** Per-connection timeout in ms (default 10000). */\n  timeout?: number;\n  /** Extra disposable domains. */\n  extraDisposable?: string[];\n}\n\nexport interface VerifyResult {\n  email: string;\n  /** Overall best-effort verdict: syntax ok, MX present, and SMTP not undeliverable. */\n  valid: boolean;\n  syntax: boolean;\n  disposable: boolean;\n  role: boolean;\n  mxFound: boolean;\n  mxRecords: MxRecord[];\n  smtp: SmtpVerdict;\n  reason?: string;\n}\n\n/** Look up and sort a domain's MX records (best priority first). */\nexport async function resolveMx(domain: string): Promise<MxRecord[]> {\n  try {\n    const records = await dnsResolveMx(domain);\n    return records.sort((a, b) => a.priority - b.priority);\n  } catch {\n    return [];\n  }\n}\n\n/**\n * Probe a mailbox with SMTP MAIL FROM / RCPT TO (no DATA, nothing sent).\n * Returns \"deliverable\" (250), \"undeliverable\" (550-class), or \"unknown\".\n */\nexport function smtpCheck(\n  email: string,\n  mxHost: string,\n  opts: { fromAddress?: string; timeout?: number } = {},\n): Promise<SmtpVerdict> {\n  const timeout = opts.timeout ?? 10000;\n  const from = opts.fromAddress ?? `verify@${hostname() || \"localhost\"}`;\n\n  return new Promise((resolve) => {\n    const socket = net.connect({ host: mxHost, port: 25 });\n    socket.setEncoding(\"utf8\");\n    socket.setTimeout(timeout);\n\n    let buffer = \"\";\n    let step = 0;\n    let verdict: SmtpVerdict = \"unknown\";\n    const steps = [\n      `EHLO ${hostname() || \"localhost\"}`,\n      `MAIL FROM:<${from}>`,\n      `RCPT TO:<${email}>`,\n      \"QUIT\",\n    ];\n\n    const finish = (v: SmtpVerdict) => {\n      verdict = v;\n      try {\n        socket.write(\"QUIT\\r\\n\");\n      } catch {\n        /* ignore */\n      }\n      socket.destroy();\n      resolve(verdict);\n    };\n\n    const send = () => {\n      if (step < steps.length) socket.write(steps[step]! + \"\\r\\n\");\n    };\n\n    socket.on(\"connect\", () => {\n      /* wait for 220 greeting before first command */\n    });\n\n    socket.on(\"data\", (chunk: string) => {\n      buffer += chunk;\n      const lines = buffer.split(\"\\r\\n\");\n      buffer = lines.pop() ?? \"\";\n      for (const line of lines) {\n        if (!/^\\d{3} /.test(line)) continue; // wait for final line of a reply\n        const code = parseInt(line.slice(0, 3), 10);\n\n        if (step === 0) {\n          if (code !== 220) return finish(\"unknown\");\n          send(); // EHLO\n          step = 1;\n        } else if (step === 1) {\n          send(); // MAIL FROM\n          step = 2;\n        } else if (step === 2) {\n          if (code >= 400) return finish(\"unknown\");\n          send(); // RCPT TO\n          step = 3;\n        } else if (step === 3) {\n          if (code === 250 || code === 251) return finish(\"deliverable\");\n          if (code === 550 || code === 551 || code === 553) return finish(\"undeliverable\");\n          return finish(\"unknown\");\n        }\n      }\n    });\n\n    socket.on(\"timeout\", () => finish(\"unknown\"));\n    socket.on(\"error\", () => finish(\"unknown\"));\n    socket.on(\"close\", () => resolve(verdict));\n  });\n}\n\n/** Full verification: syntax → disposable → MX → (optional) SMTP probe. */\nexport async function verifyEmail(email: string, opts: VerifyOptions = {}): Promise<VerifyResult> {\n  const v = validateEmail(email, { extraDisposable: opts.extraDisposable, suggestions: false });\n  const base: VerifyResult = {\n    email,\n    valid: false,\n    syntax: v.valid,\n    disposable: v.disposable,\n    role: v.role,\n    mxFound: false,\n    mxRecords: [],\n    smtp: \"unknown\",\n  };\n\n  if (!v.valid || !v.domain) return { ...base, reason: \"invalid syntax\" };\n\n  const mx = await resolveMx(v.domain);\n  base.mxRecords = mx;\n  base.mxFound = mx.length > 0;\n  if (!base.mxFound) return { ...base, reason: \"no MX records for domain\" };\n\n  if (opts.checkSmtp === false) {\n    return { ...base, valid: !v.disposable };\n  }\n\n  const verdict = await smtpCheck(email, mx[0]!.exchange, {\n    fromAddress: opts.fromAddress,\n    timeout: opts.timeout,\n  });\n  base.smtp = verdict;\n\n  return {\n    ...base,\n    valid: !v.disposable && verdict !== \"undeliverable\",\n    reason: verdict === \"undeliverable\" ? \"mailbox rejected by server\" : undefined,\n  };\n}\n"]}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@lacspace/email-verify",
+  "version": "1.0.0",
+  "description": "Best-effort email deliverability checks for Node — syntax + disposable, MX record lookup and an optional SMTP RCPT probe (no mail sent). Zero npm dependencies.",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsup",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "email-verification",
+    "email-verify",
+    "mx-lookup",
+    "smtp-check",
+    "deliverability",
+    "mailbox-exists",
+    "disposable-email",
+    "typescript"
+  ],
+  "author": "Lacspace <contact@lacspace.com>",
+  "license": "MIT",
+  "homepage": "https://lacspace.com/packages",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lacspace/npm-packages.git",
+    "directory": "email-verify"
+  },
+  "bugs": {
+    "url": "https://github.com/lacspace/npm-packages/issues"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {
+    "@lacspace/email-validate": "^1.0.0"
+  }
+}