@luca-emmert/worker-mailer 1.3.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) zou-yu
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,386 @@
+# Worker Mailer
+
+[English](./README.md) | [简体中文](./README_zh-CN.md)
+
+[![npm version](https://badge.fury.io/js/worker-mailer.svg)](https://badge.fury.io/js/worker-mailer)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+Worker Mailer is an SMTP client that runs on Cloudflare Workers. It leverages [Cloudflare TCP Sockets](https://developers.cloudflare.com/workers/runtime-apis/tcp-sockets/) and doesn't rely on any other dependencies.
+
+## Features
+
+- 🚀 Completely built on the Cloudflare Workers runtime with no other dependencies
+- 📝 Full TypeScript type support
+- 📧 Supports sending plain text and HTML emails with attachments
+- 🔒 Supports multiple SMTP authentication methods: `plain`, `login`, `CRAM-MD5` and `XOAUTH2`
+- ⚡ Uses SMTP `PIPELINING` so a message with many recipients costs two round trips instead of one per recipient
+- 📅 DSN support
+
+## Table of Contents
+
+- [Installation](#installation)
+- [Quick Start](#quick-start)
+- [API Reference](#api-reference)
+- [Limitations](#limitations)
+- [Contributing](#contributing)
+- [License](#license)
+
+## Installation
+
+```shell
+npm i worker-mailer
+```
+
+## Quick Start
+
+1. Configure your `wrangler.toml`:
+
+```toml
+compatibility_flags = ["nodejs_compat"]
+# or compatibility_flags = ["nodejs_compat_v2"]
+```
+
+2. Use in your code:
+
+```typescript
+import { WorkerMailer } from 'worker-mailer'
+
+// Connect to SMTP server
+const mailer = await WorkerMailer.connect({
+  credentials: {
+    username: 'bob@acme.com',
+    password: 'password',
+  },
+  authType: 'plain',
+  host: 'smtp.acme.com',
+  port: 587,
+  secure: true,
+  // The name announced in EHLO. Receiving servers score it — set it to a domain
+  // you control, otherwise the connection announces itself as `[127.0.0.1]`.
+  ehloName: 'acme.com',
+})
+
+// Send email
+await mailer.send({
+  from: { name: 'Bob', email: 'bob@acme.com' },
+  to: { name: 'Alice', email: 'alice@acme.com' },
+  subject: 'Hello from Worker Mailer',
+  text: 'This is a plain text message',
+  html: '<h1>Hello</h1><p>This is an HTML message</p>',
+})
+```
+
+3. Using with modern JavaScript frameworks (Next.js, Nuxt, SvelteKit, etc.)
+
+When working with frameworks that use Node.js as their development runtime, you'll need to handle the fact that Cloudflare Workers-specific APIs (like `cloudflare:sockets`) aren't available during local development.
+
+The recommended approach is to use conditional dynamic imports. Here's an example for Nuxt.js:
+
+```typescript
+export default defineEventHandler(async event => {
+  // Check if running in development environment
+  if (import.meta.dev) {
+    // Development: Use nodemailer (or any Node.js compatible email library)
+    const nodemailer = await import('nodemailer')
+    const transporter = nodemailer.default.createTransport()
+    return await transporter.sendMail()
+  } else {
+    // Production: Use worker-mailer in Cloudflare Workers environment
+    const { WorkerMailer } = await import('worker-mailer')
+    const mailer = await WorkerMailer.connect()
+    return await mailer.send()
+  }
+})
+```
+
+This pattern ensures your application works seamlessly in both development and production environments.
+
+## API Reference
+
+### WorkerMailer.connect(options)
+
+Creates a new SMTP connection.
+
+```typescript
+type WorkerMailerOptions = {
+  host: string // SMTP server hostname
+  port: number // SMTP server port (usually 587 or 465)
+  secure?: boolean // Use TLS (default: false)
+  startTls?: boolean // Upgrade to TLS if SMTP server supports (default: true)
+  requireTls?: boolean // Fail instead of sending unencrypted (default: false)
+  ehloName?: string // Name announced in EHLO (default: '[127.0.0.1]')
+  credentials?: {
+    // SMTP authentication credentials
+    username: string
+    password?: string // Required for plain, login and cram-md5
+    accessToken?: string // Required for xoauth2
+  }
+  authType?:
+    | 'plain'
+    | 'login'
+    | 'cram-md5'
+    | 'xoauth2'
+    | Array<'plain' | 'login' | 'cram-md5' | 'xoauth2'>
+  logLevel?: LogLevel // Logging level (default: LogLevel.INFO)
+  socketTimeoutMs?: number // Socket timeout in milliseconds (default: 60000)
+  responseTimeoutMs?: number // Server response timeout in milliseconds (default: 30000)
+  pipelining?: boolean // Batch MAIL/RCPT when the server supports it (default: true)
+  chunking?: boolean // Transfer with BDAT when the server supports it (default: false)
+  allowPartialRecipients?: boolean // Deliver even if some recipients are rejected (default: false)
+  dsn?: {
+    RET?: {
+      HEADERS?: boolean
+      FULL?: boolean
+    }
+    NOTIFY?: {
+      DELAY?: boolean
+      FAILURE?: boolean
+      SUCCESS?: boolean
+    }
+  }
+}
+```
+
+#### `ehloName`
+
+Every SMTP session opens by announcing a name. Receiving servers feed that name
+into their spam scoring, and some reject a name that is not a fully qualified
+domain. Set it to a domain you control:
+
+```typescript
+await WorkerMailer.connect({ host, port, ehloName: 'mail.acme.com' })
+```
+
+A bare IP address is wrapped in the address literal syntax RFC 5321 requires, so
+`'203.0.113.7'` is announced as `[203.0.113.7]`.
+
+#### `requireTls`
+
+By default the client upgrades to TLS when the server offers `STARTTLS` and
+otherwise authenticates over a plaintext connection. Set `requireTls: true` to
+fail the connection instead.
+
+#### `pipelining` and `chunking`
+
+`pipelining` sends `MAIL FROM` and every `RCPT TO` as a single batch when the
+server advertises `PIPELINING` (RFC 2920), which is what virtually every server
+does. A message to 20 recipients then costs two round trips instead of 22. Turn
+it off only to debug against a server that mishandles it.
+
+`chunking` transfers the message with `BDAT` (RFC 3030) instead of `DATA` when
+the server advertises `CHUNKING`. Because the message is length delimited it
+needs no dot-stuffing pass, which is worthwhile for large attachments. It is off
+by default because far less mail traffic goes through `BDAT` than through
+`DATA`.
+
+### mailer.send(options)
+
+Sends an email.
+
+```typescript
+type EmailOptions = {
+  from:
+    | string
+    | {
+        // Sender's email
+        name?: string
+        email: string
+      }
+  to:
+    | string
+    | string[]
+    | {
+        // Recipients (TO)
+        name?: string
+        email: string
+      }
+    | Array<{ name?: string; email: string }>
+  reply?:
+    | string
+    | {
+        // Reply-To address
+        name?: string
+        email: string
+      }
+  cc?:
+    | string
+    | string[]
+    | {
+        // Carbon Copy recipients
+        name?: string
+        email: string
+      }
+    | Array<{ name?: string; email: string }>
+  bcc?:
+    | string
+    | string[]
+    | {
+        // Blind Carbon Copy recipients
+        name?: string
+        email: string
+      }
+    | Array<{ name?: string; email: string }>
+  subject: string // Email subject
+  text?: string // Plain text content
+  html?: string // HTML content
+  headers?: Record<string, string> // Custom email headers
+  attachments?: {
+    filename: string
+    // Base64 string, or raw bytes which are base64-encoded for you
+    content: string | ArrayBuffer | Uint8Array
+    mimeType?: string // Inferred from the filename if not set
+  }[]
+  dsnOverride?: { // overrides dsn defined in WorkerMailer, if not set, it will take the WorkerMailer-Option.
+    envelopeId?: string | undefined
+    RET?: {
+      HEADERS?: boolean
+      FULL?: boolean
+    }
+    NOTIFY?: {
+      DELAY?: boolean
+      FAILURE?: boolean
+      SUCCESS?: boolean
+    }
+  }
+}
+```
+
+#### Return value
+
+`send()` resolves with the outcome of the transaction:
+
+```typescript
+type SendResult = {
+  accepted: User[] // Recipients the server accepted
+  rejected: { user: User; response: string }[] // Recipients it rejected, with the response
+  response: string // The server's final response to the message
+}
+```
+
+By default a single rejected recipient fails the whole message and `send()`
+rejects, so `rejected` is only ever populated when `allowPartialRecipients` is
+set:
+
+```typescript
+const mailer = await WorkerMailer.connect({
+  host,
+  port,
+  allowPartialRecipients: true,
+})
+const { accepted, rejected } = await mailer.send({ from, to, subject, text })
+if (rejected.length) {
+  console.warn(
+    'Not delivered to',
+    rejected.map(r => r.user.email),
+  )
+}
+```
+
+#### Bcc
+
+`bcc` recipients are sent in the SMTP envelope only and never written into the
+message, so the other recipients cannot see them. If you deliberately want a
+`Bcc` header in the message, set it yourself through `headers`.
+
+### Static Method: WorkerMailer.send()
+
+Send a one-off email without maintaining the connection.
+
+```typescript
+await WorkerMailer.send(
+  {
+    // WorkerMailerOptions
+    host: 'smtp.acme.com',
+    port: 587,
+    credentials: {
+      username: 'user',
+      password: 'pass',
+    },
+  },
+  {
+    // EmailOptions
+    from: 'sender@acme.com',
+    to: 'recipient@acme.com',
+    subject: 'Test',
+    text: 'Hello',
+    attachments: [
+      {
+        filename: 'test.txt',
+        content: 'SGVsbG8gV29ybGQ=', // base64-encoded string for "Hello World"
+        type: 'text/plain',
+      },
+    ],
+  },
+)
+```
+
+## Limitations
+
+- **Port Restrictions:** Cloudflare Workers cannot make outbound connections on port 25. You won't be able to send emails via port 25, but common ports like 587 and 465 are supported.
+- **Connection Limits:** Each Worker instance has a limit on the number of concurrent TCP connections. Make sure to properly close connections when done.
+
+## Contributing
+
+### Development Workflow
+
+> For major changes, please open an issue first to discuss what you would like to change.
+
+1. Fork and clone the repository
+2. Install dependencies:
+   ```bash
+   pnpm install
+   ```
+3. Create a new branch for your feature from `develop`:
+   ```bash
+   git checkout -b feat/your-feature-name
+   ```
+4. Make your changes and make sure all tests pass
+5. Update README.md & changelog `pnpm changeset` if needed
+6. Push your changes to your fork and create a pull request from your branch to `develop`
+
+### Testing
+
+1. Unit Tests:
+   ```bash
+   npm test
+   ```
+2. Integration Tests:
+   ```bash
+   pnpm dlx wrangler dev ./test/worker.ts
+   ```
+   Then, send a POST request to `http://127.0.0.1:8787` with the following JSON body:
+   ```json
+   {
+     "config": {
+       "credentials": {
+         "username": "xxx@xx.com",
+         "password": "xxxx"
+       },
+       "authType": "plain",
+       "host": "smtp.acme.com",
+       "port": 587,
+       "secure": false,
+       "startTls": true
+     },
+     "email": {
+       "from": "xxx@xx.com",
+       "to": "yyy@yy.com",
+       "subject": "Test Email",
+       "text": "Hello World"
+     }
+   }
+   ```
+
+### Reporting Issues
+
+When reporting issues, please include:
+
+- Version of worker-mailer you're using
+- A clear description of the problem
+- Steps to reproduce the issue
+- Expected vs actual behavior
+- Any relevant code snippets or error messages
+
+## License
+
+This project is licensed under the MIT License.

package/dist/index.d.mts

@@ -0,0 +1,246 @@
+declare function encodeHeader(text: string): string;
+type User = {
+    name?: string;
+    email: string;
+};
+declare function formatAddress(user: User): string;
+type AttachmentContent = string | ArrayBuffer | Uint8Array;
+type Attachment = {
+    filename: string;
+    /** Base64 string, or raw bytes which are base64-encoded for you. */
+    content: AttachmentContent;
+    mimeType?: string;
+};
+type DsnOptions = {
+    envelopeId?: string;
+    RET?: {
+        HEADERS?: boolean;
+        FULL?: boolean;
+    };
+    NOTIFY?: {
+        DELAY?: boolean;
+        FAILURE?: boolean;
+        SUCCESS?: boolean;
+    };
+};
+type EmailOptions = {
+    from: string | User;
+    to: string | string[] | User | User[];
+    reply?: string | User;
+    cc?: string | string[] | User | User[];
+    bcc?: string | string[] | User | User[];
+    subject: string;
+    text?: string;
+    html?: string;
+    headers?: Record<string, string>;
+    attachments?: Attachment[];
+    dsnOverride?: DsnOptions;
+};
+type SendResult = {
+    /** Recipients the server accepted. */
+    accepted: User[];
+    /** Recipients the server rejected, with the response that rejected them. */
+    rejected: {
+        user: User;
+        response: string;
+    }[];
+    /** The server's final response to the message. */
+    response: string;
+};
+type SerializeOptions = {
+    /** Set when the server advertised 8BITMIME. */
+    allow8bit?: boolean;
+};
+declare class Email {
+    readonly from: User;
+    readonly to: User[];
+    readonly reply?: User;
+    readonly cc?: User[];
+    readonly bcc?: User[];
+    readonly subject: string;
+    readonly text?: string;
+    readonly html?: string;
+    readonly dsnOverride?: DsnOptions;
+    readonly attachments?: Attachment[];
+    readonly headers: Record<string, string>;
+    /** Populated once the server has accepted (or rejected) the message. */
+    result?: SendResult;
+    setSent: () => void;
+    setSentError: (e: unknown) => void;
+    sent: Promise<void>;
+    constructor(options: EmailOptions);
+    private static toUsers;
+    /** Every envelope recipient, in the order they are sent to the server. */
+    get recipients(): User[];
+    /**
+     * Rough upper bound on the wire size, used to reject a message locally when
+     * the server advertised a smaller SIZE limit.
+     */
+    estimateSize(): number;
+    /**
+     * Yields the message piece by piece. Every chunk starts on a line boundary so
+     * the caller can dot-stuff and write them one at a time instead of building
+     * the whole message — attachments included — as a single string.
+     */
+    chunks(options?: SerializeOptions): Generator<string>;
+    /** The complete, dot-stuffed message including the SMTP terminator. */
+    getEmailData(options?: SerializeOptions): string;
+    private buildContentPart;
+    private renderTextPart;
+    private renderAttachment;
+    private messageHeaders;
+    private hasHeader;
+    private resolveHeader;
+    private resolveAddressHeader;
+    private resolveSubject;
+}
+
+declare enum LogLevel {
+    DEBUG = 0,
+    INFO = 1,
+    WARN = 2,
+    ERROR = 3,
+    NONE = 4
+}
+
+type AuthType = 'plain' | 'login' | 'cram-md5' | 'xoauth2';
+type Credentials = {
+    username: string;
+    password?: string;
+    /** OAuth 2.0 bearer token. Required for `xoauth2`, ignored otherwise. */
+    accessToken?: string;
+};
+type WorkerMailerOptions = {
+    host: string;
+    port: number;
+    secure?: boolean;
+    startTls?: boolean;
+    /** Refuse to authenticate or send over an unencrypted connection. */
+    requireTls?: boolean;
+    /**
+     * The name announced in EHLO. Should be a domain you control — receiving
+     * servers score it, and some reject a HELO name that is not a FQDN.
+     * A bare IP address is wrapped in the address literal syntax RFC 5321 wants.
+     */
+    ehloName?: string;
+    credentials?: Credentials;
+    authType?: AuthType | AuthType[];
+    logLevel?: LogLevel;
+    dsn?: DsnOptions | undefined;
+    socketTimeoutMs?: number;
+    responseTimeoutMs?: number;
+    /**
+     * Send MAIL FROM and RCPT TO as one batch when the server advertises
+     * PIPELINING (RFC 2920). Defaults to true.
+     */
+    pipelining?: boolean;
+    /**
+     * Transfer the message with BDAT when the server advertises CHUNKING
+     * (RFC 3030), which avoids the dot-stuffing pass over the whole message.
+     * Defaults to false, because far fewer servers see BDAT traffic than DATA.
+     */
+    chunking?: boolean;
+    /**
+     * Deliver to the recipients the server accepted even if it rejected others.
+     * Defaults to false, so a rejected recipient still fails the whole message.
+     */
+    allowPartialRecipients?: boolean;
+};
+declare class WorkerMailer {
+    private socket;
+    private readonly host;
+    private readonly port;
+    private readonly secure;
+    private readonly startTls;
+    private readonly requireTls;
+    private readonly ehloName;
+    private readonly authType;
+    private readonly credentials?;
+    private readonly socketTimeoutMs;
+    private readonly responseTimeoutMs;
+    private readonly pipelining;
+    private readonly chunking;
+    private readonly allowPartialRecipients;
+    private reader;
+    private writer;
+    private decoder;
+    /** Bytes received but not yet consumed as a complete response. */
+    private buffer;
+    private streamClosed;
+    private readonly logger;
+    private readonly dsn;
+    private active;
+    private tlsActive;
+    private emailSending;
+    private emailToBeSent;
+    /** SMTP server capabilities **/
+    private supportsDSN;
+    private allowAuth;
+    private authTypeSupported;
+    private supportsStartTls;
+    private supportsPipelining;
+    private supportsChunking;
+    private supports8BitMime;
+    private maxMessageSize;
+    private constructor();
+    /**
+     * RFC 5321 §4.1.3 wants either a fully qualified domain or a bracketed
+     * address literal. A bare `127.0.0.1` is neither, and strict servers say so.
+     */
+    private static resolveEhloName;
+    static connect(options: WorkerMailerOptions): Promise<WorkerMailer>;
+    send(options: EmailOptions): Promise<SendResult>;
+    static send(options: WorkerMailerOptions, email: EmailOptions): Promise<SendResult>;
+    private readTimeout;
+    /**
+     * Reads exactly one SMTP response. Anything the server sent beyond it stays
+     * buffered — with pipelining several responses routinely arrive in a single
+     * TCP segment, and dropping the remainder desynchronizes the connection.
+     */
+    private readResponse;
+    /** Removes one complete response from the buffer, or null if none is ready. */
+    private takeResponse;
+    private writeLine;
+    private write;
+    private writeBytes;
+    private initializeSmtpSession;
+    private start;
+    close(error?: Error): Promise<void>;
+    private waitForSocketConnected;
+    private greet;
+    private ehlo;
+    private helo;
+    private tls;
+    private parseCapabilities;
+    private defaultAuthOrder;
+    private selectAuthType;
+    private auth;
+    private requirePassword;
+    private authWithPlain;
+    private authWithLogin;
+    private authWithCramMD5;
+    private authWithXOAuth2;
+    /**
+     * Runs one mail transaction. MAIL FROM and every RCPT TO go out as a single
+     * batch when the server supports pipelining, turning N+2 round trips into 2.
+     */
+    private transaction;
+    private mailFromCommand;
+    private rcptToCommand;
+    private checkSize;
+    private serializeOptions;
+    /** Ends a data phase we entered but do not want to complete. */
+    private abortData;
+    private sendWithData;
+    /**
+     * RFC 3030 BDAT. The message is length-delimited, so it needs no dot-stuffing
+     * and no terminator scan. Commands are pipelined; responses are tiny and read
+     * once everything is on the wire.
+     */
+    private sendWithChunking;
+    private rset;
+    private notificationBuilder;
+    private retBuilder;
+}
+
+export { type Attachment, type AttachmentContent, type AuthType, type Credentials, type DsnOptions, Email, type EmailOptions, LogLevel, type SendResult, type SerializeOptions, type User, WorkerMailer, type WorkerMailerOptions, encodeHeader, formatAddress };

package/dist/index.d.ts

@@ -0,0 +1,246 @@
+declare function encodeHeader(text: string): string;
+type User = {
+    name?: string;
+    email: string;
+};
+declare function formatAddress(user: User): string;
+type AttachmentContent = string | ArrayBuffer | Uint8Array;
+type Attachment = {
+    filename: string;
+    /** Base64 string, or raw bytes which are base64-encoded for you. */
+    content: AttachmentContent;
+    mimeType?: string;
+};
+type DsnOptions = {
+    envelopeId?: string;
+    RET?: {
+        HEADERS?: boolean;
+        FULL?: boolean;
+    };
+    NOTIFY?: {
+        DELAY?: boolean;
+        FAILURE?: boolean;
+        SUCCESS?: boolean;
+    };
+};
+type EmailOptions = {
+    from: string | User;
+    to: string | string[] | User | User[];
+    reply?: string | User;
+    cc?: string | string[] | User | User[];
+    bcc?: string | string[] | User | User[];
+    subject: string;
+    text?: string;
+    html?: string;
+    headers?: Record<string, string>;
+    attachments?: Attachment[];
+    dsnOverride?: DsnOptions;
+};
+type SendResult = {
+    /** Recipients the server accepted. */
+    accepted: User[];
+    /** Recipients the server rejected, with the response that rejected them. */
+    rejected: {
+        user: User;
+        response: string;
+    }[];
+    /** The server's final response to the message. */
+    response: string;
+};
+type SerializeOptions = {
+    /** Set when the server advertised 8BITMIME. */
+    allow8bit?: boolean;
+};
+declare class Email {
+    readonly from: User;
+    readonly to: User[];
+    readonly reply?: User;
+    readonly cc?: User[];
+    readonly bcc?: User[];
+    readonly subject: string;
+    readonly text?: string;
+    readonly html?: string;
+    readonly dsnOverride?: DsnOptions;
+    readonly attachments?: Attachment[];
+    readonly headers: Record<string, string>;
+    /** Populated once the server has accepted (or rejected) the message. */
+    result?: SendResult;
+    setSent: () => void;
+    setSentError: (e: unknown) => void;
+    sent: Promise<void>;
+    constructor(options: EmailOptions);
+    private static toUsers;
+    /** Every envelope recipient, in the order they are sent to the server. */
+    get recipients(): User[];
+    /**
+     * Rough upper bound on the wire size, used to reject a message locally when
+     * the server advertised a smaller SIZE limit.
+     */
+    estimateSize(): number;
+    /**
+     * Yields the message piece by piece. Every chunk starts on a line boundary so
+     * the caller can dot-stuff and write them one at a time instead of building
+     * the whole message — attachments included — as a single string.
+     */
+    chunks(options?: SerializeOptions): Generator<string>;
+    /** The complete, dot-stuffed message including the SMTP terminator. */
+    getEmailData(options?: SerializeOptions): string;
+    private buildContentPart;
+    private renderTextPart;
+    private renderAttachment;
+    private messageHeaders;
+    private hasHeader;
+    private resolveHeader;
+    private resolveAddressHeader;
+    private resolveSubject;
+}
+
+declare enum LogLevel {
+    DEBUG = 0,
+    INFO = 1,
+    WARN = 2,
+    ERROR = 3,
+    NONE = 4
+}
+
+type AuthType = 'plain' | 'login' | 'cram-md5' | 'xoauth2';
+type Credentials = {
+    username: string;
+    password?: string;
+    /** OAuth 2.0 bearer token. Required for `xoauth2`, ignored otherwise. */
+    accessToken?: string;
+};
+type WorkerMailerOptions = {
+    host: string;
+    port: number;
+    secure?: boolean;
+    startTls?: boolean;
+    /** Refuse to authenticate or send over an unencrypted connection. */
+    requireTls?: boolean;
+    /**
+     * The name announced in EHLO. Should be a domain you control — receiving
+     * servers score it, and some reject a HELO name that is not a FQDN.
+     * A bare IP address is wrapped in the address literal syntax RFC 5321 wants.
+     */
+    ehloName?: string;
+    credentials?: Credentials;
+    authType?: AuthType | AuthType[];
+    logLevel?: LogLevel;
+    dsn?: DsnOptions | undefined;
+    socketTimeoutMs?: number;
+    responseTimeoutMs?: number;
+    /**
+     * Send MAIL FROM and RCPT TO as one batch when the server advertises
+     * PIPELINING (RFC 2920). Defaults to true.
+     */
+    pipelining?: boolean;
+    /**
+     * Transfer the message with BDAT when the server advertises CHUNKING
+     * (RFC 3030), which avoids the dot-stuffing pass over the whole message.
+     * Defaults to false, because far fewer servers see BDAT traffic than DATA.
+     */
+    chunking?: boolean;
+    /**
+     * Deliver to the recipients the server accepted even if it rejected others.
+     * Defaults to false, so a rejected recipient still fails the whole message.
+     */
+    allowPartialRecipients?: boolean;
+};
+declare class WorkerMailer {
+    private socket;
+    private readonly host;
+    private readonly port;
+    private readonly secure;
+    private readonly startTls;
+    private readonly requireTls;
+    private readonly ehloName;
+    private readonly authType;
+    private readonly credentials?;
+    private readonly socketTimeoutMs;
+    private readonly responseTimeoutMs;
+    private readonly pipelining;
+    private readonly chunking;
+    private readonly allowPartialRecipients;
+    private reader;
+    private writer;
+    private decoder;
+    /** Bytes received but not yet consumed as a complete response. */
+    private buffer;
+    private streamClosed;
+    private readonly logger;
+    private readonly dsn;
+    private active;
+    private tlsActive;
+    private emailSending;
+    private emailToBeSent;
+    /** SMTP server capabilities **/
+    private supportsDSN;
+    private allowAuth;
+    private authTypeSupported;
+    private supportsStartTls;
+    private supportsPipelining;
+    private supportsChunking;
+    private supports8BitMime;
+    private maxMessageSize;
+    private constructor();
+    /**
+     * RFC 5321 §4.1.3 wants either a fully qualified domain or a bracketed
+     * address literal. A bare `127.0.0.1` is neither, and strict servers say so.
+     */
+    private static resolveEhloName;
+    static connect(options: WorkerMailerOptions): Promise<WorkerMailer>;
+    send(options: EmailOptions): Promise<SendResult>;
+    static send(options: WorkerMailerOptions, email: EmailOptions): Promise<SendResult>;
+    private readTimeout;
+    /**
+     * Reads exactly one SMTP response. Anything the server sent beyond it stays
+     * buffered — with pipelining several responses routinely arrive in a single
+     * TCP segment, and dropping the remainder desynchronizes the connection.
+     */
+    private readResponse;
+    /** Removes one complete response from the buffer, or null if none is ready. */
+    private takeResponse;
+    private writeLine;
+    private write;
+    private writeBytes;
+    private initializeSmtpSession;
+    private start;
+    close(error?: Error): Promise<void>;
+    private waitForSocketConnected;
+    private greet;
+    private ehlo;
+    private helo;
+    private tls;
+    private parseCapabilities;
+    private defaultAuthOrder;
+    private selectAuthType;
+    private auth;
+    private requirePassword;
+    private authWithPlain;
+    private authWithLogin;
+    private authWithCramMD5;
+    private authWithXOAuth2;
+    /**
+     * Runs one mail transaction. MAIL FROM and every RCPT TO go out as a single
+     * batch when the server supports pipelining, turning N+2 round trips into 2.
+     */
+    private transaction;
+    private mailFromCommand;
+    private rcptToCommand;
+    private checkSize;
+    private serializeOptions;
+    /** Ends a data phase we entered but do not want to complete. */
+    private abortData;
+    private sendWithData;
+    /**
+     * RFC 3030 BDAT. The message is length-delimited, so it needs no dot-stuffing
+     * and no terminator scan. Commands are pipelined; responses are tiny and read
+     * once everything is on the wire.
+     */
+    private sendWithChunking;
+    private rset;
+    private notificationBuilder;
+    private retBuilder;
+}
+
+export { type Attachment, type AttachmentContent, type AuthType, type Credentials, type DsnOptions, Email, type EmailOptions, LogLevel, type SendResult, type SerializeOptions, type User, WorkerMailer, type WorkerMailerOptions, encodeHeader, formatAddress };

package/dist/index.js

@@ -0,0 +1,49 @@
+"use strict";var A=Object.defineProperty;var q=Object.getOwnPropertyDescriptor;var _=Object.getOwnPropertyNames;var Y=Object.prototype.hasOwnProperty;var G=(s,e)=>{for(var t in e)A(s,t,{get:e[t],enumerable:!0})},Q=(s,e,t,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let n of _(e))!Y.call(s,n)&&n!==t&&A(s,n,{get:()=>e[n],enumerable:!(r=q(e,n))||r.enumerable});return s};var X=s=>Q(A({},"__esModule",{value:!0}),s);var ae={};G(ae,{Email:()=>w,LogLevel:()=>U,WorkerMailer:()=>C,encodeHeader:()=>E,formatAddress:()=>B});module.exports=X(ae);var T=class{values=[];resolvers=[];enqueue(e){this.resolvers.length||this.addWrapper(),this.resolvers.shift()(e)}async dequeue(){return this.values.length||this.addWrapper(),this.values.shift()}get length(){return this.values.length}clear(){this.values=[],this.resolvers=[]}addWrapper(){this.values.push(new Promise(e=>{this.resolvers.push(e)}))}};async function x(s,e,t){let r;try{return await Promise.race([s,new Promise((n,i)=>{r=setTimeout(()=>i(t),e)})])}finally{clearTimeout(r)}}var V=new TextEncoder;function h(s){return V.encode(s)}var le=new TextDecoder("utf-8");function R(s){return s.replace(/\r\n|\r|\n/g,`\r
+`)}var Z=["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],J=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"];function D(s=new Date){let e=t=>String(t).padStart(2,"0");return`${Z[s.getUTCDay()]}, ${e(s.getUTCDate())} ${J[s.getUTCMonth()]} ${s.getUTCFullYear()} ${e(s.getUTCHours())}:${e(s.getUTCMinutes())}:${e(s.getUTCSeconds())} +0000`}function O(s){return s.replace(/\r\n[ \t]+/g," ").replace(/[\r\n]+/g," ")}function d(s,e,t=78){let r=O(e),n=`${s}: `;if(n.length+r.length<=t)return n+r;let i=[],a=n,o=!0;for(let l of r.split(" ")){if(l===""){a+=" ";continue}o?(a+=l,o=!1):a.length+1+l.length>t?(i.push(a),a=" "+l):a+=" "+l}return i.push(a),i.join(`\r
+`)}var K=/[A-Za-z0-9!#$&+\-.^_`|~]/;function $(s,e){let t=O(e);if(!/[^\x20-\x7E]/.test(t))return`${s}="${t.replace(/([\\"])/g,"\\$1")}"`;let r="";for(let n of h(t)){let i=String.fromCharCode(n);r+=K.test(i)?i:`%${n.toString(16).toUpperCase().padStart(2,"0")}`}return`${s}*=UTF-8''${r}`}function p(s){let e="";for(let r=0;r<s.length;r+=32768)e+=String.fromCharCode(...s.subarray(r,r+32768));return btoa(e)}function M(s){let e=atob(s.replace(/\s+/g,"")),t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}function v(s,e=76){let t=s.replace(/\s+/g,"");if(t.length<=e)return t;let r=[];for(let n=0;n<t.length;n+=e)r.push(t.slice(n,n+e));return r.join(`\r
+`)}function S(){let s=!0;return e=>{if(!e)return e;let t=e.replace(/\r\n\./g,`\r
+..`);return s&&t.startsWith(".")&&(t=`.${t}`),s=t.endsWith(`\r
+`),t}}function W(s){return s>126||s===61||s<32&&s!==9&&s!==10&&s!==13}function L(s){let e=0;for(let t of s)W(t)&&e++;return s.length+e*2}function P(s,e=76){let t=h(s),r=e-3,n=[],i="",a=0,o=()=>{let l=i.charCodeAt(i.length-1);l===32?i=i.slice(0,-1)+"=20":l===9&&(i=i.slice(0,-1)+"=09"),n.push(i,`=\r
+`),i=""};for(;a<t.length;){let l=t[a],c;if(l===10){n.push(i,`\r
+`),i="",a++;continue}else if(l===13){if(a+1<t.length&&t[a+1]===10){n.push(i,`\r
+`),i="",a+=2;continue}c="=0D"}if(c===void 0){let m=l===32||l===9,f=a+1>=t.length||t[a+1]===10||t[a+1]===13;c=W(l)||m&&f?`=${l.toString(16).toUpperCase().padStart(2,"0")}`:String.fromCharCode(l)}i.length+c.length>r&&o(),i+=c,a++}return n.push(i),n.join("")}var I="=?UTF-8?Q?",H="?=",ee=75-I.length-H.length;function E(s){if(!/[^\x20-\x7E]/.test(s))return s;let e=[],t="";for(let r of s){let n="";for(let i of h(r))i>=33&&i<=126&&i!==63&&i!==61&&i!==95?n+=String.fromCharCode(i):i===32?n+="_":n+=`=${i.toString(16).toUpperCase().padStart(2,"0")}`;t.length+n.length>ee&&(e.push(t),t=""),t+=n}return t&&e.push(t),e.map(r=>`${I}${r}${H}`).join(" ")}function B(s){if(!s.name)return s.email;let e=E(s.name);return e===s.name?`"${s.name.replace(/([\\"])/g,"\\$1")}" <${s.email}>`:`${e} <${s.email}>`}function F(s,e){let t=R(s),r=/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/.test(t),n=/[ \t]\r\n|[ \t]$/.test(t),i=0;for(let l of t.split(`\r
+`))l.length>i&&(i=l.length);if(!r&&!n){if(i<=990&&!/[^\x00-\x7F]/.test(t))return{encoding:"7bit",render:()=>t};if(e&&i<=240)return{encoding:"8bit",render:()=>t}}let a=h(t),o=Math.ceil(a.length/3)*4;return L(a)<=o?{encoding:"quoted-printable",render:()=>P(t)}:{encoding:"base64",render:()=>v(p(a))}}function te(s){return s instanceof Uint8Array?s.length:s.byteLength}var w=class s{from;to;reply;cc;bcc;subject;text;html;dsnOverride;attachments;headers;result;setSent;setSentError;sent=new Promise((e,t)=>{this.setSent=e,this.setSentError=t});constructor(e){if(!e.text&&!e.html)throw new Error("At least one of text or html must be provided");typeof e.from=="string"?this.from={email:e.from}:this.from=e.from,typeof e.reply=="string"?this.reply={email:e.reply}:this.reply=e.reply,this.to=s.toUsers(e.to),this.cc=s.toUsers(e.cc),this.bcc=s.toUsers(e.bcc),this.subject=e.subject,this.text=e.text,this.html=e.html,this.attachments=e.attachments,this.dsnOverride=e.dsnOverride,this.headers=e.headers||{}}static toUsers(e){if(e)return typeof e=="string"?[{email:e}]:Array.isArray(e)?e.map(t=>typeof t=="string"?{email:t}:t):[e]}get recipients(){return[...this.to,...this.cc||[],...this.bcc||[]]}estimateSize(){let e=2048;this.text&&(e+=Math.ceil(h(this.text).length*1.4)),this.html&&(e+=Math.ceil(h(this.html).length*1.4));for(let t of this.attachments||[])e+=typeof t.content=="string"?t.content.length:Math.ceil(te(t.content)/3)*4,e+=512;return e}*chunks(e={}){let t=!!e.allow8bit,r=this.messageHeaders(),n=this.buildContentPart(t);if(!this.attachments?.length){yield`${[...r,...n.headers].join(`\r
+`)}\r
+\r
+`,yield*n.body();return}let i=N("mixed");yield`${[...r,d("Content-Type",`multipart/mixed; boundary="${i}"`)].join(`\r
+`)}\r
+\r
+`,yield`--${i}\r
+${n.headers.join(`\r
+`)}\r
+\r
+`,yield*n.body();for(let a of this.attachments)yield*this.renderAttachment(i,a);yield`--${i}--\r
+`}getEmailData(e={}){let t=S(),r="";for(let n of this.chunks(e))r+=t(n);return r.endsWith(`\r
+`)||(r+=`\r
+`),`${r}.\r
+`}buildContentPart(e){let t=this.text,r=this.html;if(t!==void 0&&r!==void 0){let a=N("alternative"),o=this.renderTextPart.bind(this);return{headers:[d("Content-Type",`multipart/alternative; boundary="${a}"`)],*body(){yield*o(a,"text/plain",t,e),yield*o(a,"text/html",r,e),yield`--${a}--\r
+`}}}let n=t!==void 0?"text/plain":"text/html",i=F(t??r,e);return{headers:[d("Content-Type",`${n}; charset="UTF-8"`),`Content-Transfer-Encoding: ${i.encoding}`],*body(){yield`${i.render()}\r
+`}}}*renderTextPart(e,t,r,n){let i=F(r,n);yield`--${e}\r
+`+d("Content-Type",`${t}; charset="UTF-8"`)+`\r
+Content-Transfer-Encoding: ${i.encoding}\r
+\r
+`,yield`${i.render()}\r
+`}*renderAttachment(e,t){let r=t.mimeType||ie(t.filename),n=[d("Content-Type",`${r}; ${$("name",t.filename)}`),d("Content-Description",E(t.filename)),d("Content-Disposition",`attachment; ${$("filename",t.filename)}`),"Content-Transfer-Encoding: base64"];if(yield`--${e}\r
+${n.join(`\r
+`)}\r
+\r
+`,typeof t.content=="string"){yield`${v(t.content)}\r
+`;return}let i=t.content instanceof Uint8Array?t.content:new Uint8Array(t.content),a=57*96;for(let o=0;o<i.length;o+=a)yield`${v(p(i.subarray(o,o+a)))}\r
+`}messageHeaders(){this.resolveHeader();let e=["MIME-Version: 1.0"];for(let[t,r]of Object.entries(this.headers))e.push(d(t,r));return e}hasHeader(e){let t=e.toLowerCase();return Object.keys(this.headers).some(r=>r.toLowerCase()===t)}resolveHeader(){this.resolveAddressHeader("From",[this.from]),this.resolveAddressHeader("To",this.to),this.resolveAddressHeader("Reply-To",this.reply?[this.reply]:void 0),this.resolveAddressHeader("Cc",this.cc),this.resolveSubject(),this.hasHeader("Date")||(this.headers.Date=D()),this.hasHeader("Message-ID")||(this.headers["Message-ID"]=`<${crypto.randomUUID()}@${this.from.email.split("@").pop()}>`)}resolveAddressHeader(e,t){!t?.length||this.hasHeader(e)||(this.headers[e]=t.map(B).join(", "))}resolveSubject(){this.hasHeader("Subject")||!this.subject||(this.headers.Subject=E(this.subject))}};function N(s){let e=new Uint8Array(16);crypto.getRandomValues(e);let t=Array.from(e).map(r=>r.toString(16).padStart(2,"0")).join("");return`${s}_${t}`}var re={txt:"text/plain",html:"text/html",csv:"text/csv",pdf:"application/pdf",png:"image/png",jpg:"image/jpeg",jpeg:"image/jpeg",gif:"image/gif",zip:"application/zip"};function ie(s){let e=s.split(".").pop()?.toLowerCase();return re[e||"txt"]||"application/octet-stream"}var j=require("cloudflare:sockets");var U=(i=>(i[i.DEBUG=0]="DEBUG",i[i.INFO=1]="INFO",i[i.WARN=2]="WARN",i[i.ERROR=3]="ERROR",i[i.NONE=4]="NONE",i))(U||{}),y=class{constructor(e=1,t){this.level=e;this.prefix=t}prefix;debug(e,...t){this.level<=0&&console.debug(this.prefix+e,...t)}info(e,...t){this.level<=1&&console.info(this.prefix+e,...t)}warn(e,...t){this.level<=2&&console.warn(this.prefix+e,...t)}error(e,...t){this.level<=3&&console.error(this.prefix+e,...t)}};var se=262144,ne=32768,C=class s{socket;host;port;secure;startTls;requireTls;ehloName;authType;credentials;socketTimeoutMs;responseTimeoutMs;pipelining;chunking;allowPartialRecipients;reader;writer;decoder=new TextDecoder("utf-8");buffer="";streamClosed=!1;logger;dsn;active=!1;tlsActive=!1;emailSending=null;emailToBeSent=new T;supportsDSN=!1;allowAuth=!1;authTypeSupported=[];supportsStartTls=!1;supportsPipelining=!1;supportsChunking=!1;supports8BitMime=!1;maxMessageSize=0;constructor(e){this.port=e.port,this.host=e.host,this.secure=!!e.secure,Array.isArray(e.authType)?this.authType=e.authType:typeof e.authType=="string"?this.authType=[e.authType]:this.authType=[],this.startTls=e.startTls===void 0?!0:e.startTls,this.requireTls=!!e.requireTls,this.credentials=e.credentials,this.dsn=e.dsn||{},this.pipelining=e.pipelining!==!1,this.chunking=!!e.chunking,this.allowPartialRecipients=!!e.allowPartialRecipients,this.socketTimeoutMs=e.socketTimeoutMs||6e4,this.responseTimeoutMs=e.responseTimeoutMs||3e4,this.tlsActive=this.secure,this.socket=(0,j.connect)({hostname:this.host,port:this.port},{secureTransport:this.secure?"on":this.startTls?"starttls":"off",allowHalfOpen:!1}),this.reader=this.socket.readable.getReader(),this.writer=this.socket.writable.getWriter(),this.logger=new y(e.logLevel,`[WorkerMailer:${this.host}:${this.port}]`),this.ehloName=s.resolveEhloName(e.ehloName),e.ehloName||this.logger.warn("No ehloName set, announcing [127.0.0.1]. Set ehloName to a domain you control \u2014 receiving servers use it for spam scoring.")}static resolveEhloName(e){let t=e?.trim();return t?/^\[.+\]$/.test(t)?t:/^\d{1,3}(\.\d{1,3}){3}$/.test(t)?`[${t}]`:t.includes(":")?`[IPv6:${t}]`:t:"[127.0.0.1]"}static async connect(e){let t=new s(e);return await t.initializeSmtpSession(),t.start().catch(console.error),t}async send(e){if(!this.active)throw new Error("WorkerMailer is not connected");let t=new w(e);return this.emailToBeSent.enqueue(t),await t.sent,t.result}static async send(e,t){let r=await s.connect(e);try{return await r.send(t)}finally{await r.close()}}async readTimeout(){return x(this.readResponse(),this.responseTimeoutMs,new Error("Timeout while waiting for smtp server response"))}async readResponse(){for(;;){let e=this.takeResponse();if(e!==null)return e;if(this.streamClosed)throw new Error("SMTP server closed the connection");let{value:t,done:r}=await this.reader.read();if(r){this.streamClosed=!0;continue}if(!t)continue;let n=this.decoder.decode(t,{stream:!0});this.logger.debug(`SMTP server response:
+`+n),this.buffer+=n}}takeResponse(){let e=0;for(;;){let t=this.buffer.indexOf(`
+`,e);if(t===-1)return null;if(!/^\d{3}-/.test(this.buffer.slice(e,t))){let r=this.buffer.slice(0,t+1);return this.buffer=this.buffer.slice(t+1),r}e=t+1}}async writeLine(e){await this.write(`${e}\r
+`)}async write(e,t=!0){this.logger.debug(t?`Write to socket:
+`+e:`Write to socket: ${e.length} characters`),await this.writer.write(h(e))}async writeBytes(e){this.logger.debug(`Write to socket: ${e.byteLength} bytes`),await this.writer.write(e)}async initializeSmtpSession(){if(await this.waitForSocketConnected(),await this.greet(),await this.ehlo(),this.startTls&&!this.secure&&this.supportsStartTls&&(await this.tls(),await this.ehlo()),this.requireTls&&!this.tlsActive)throw new Error("requireTls is set but the connection is not encrypted (server does not support STARTTLS)");await this.auth(),this.active=!0}async start(){for(;this.active;){this.emailSending=await this.emailToBeSent.dequeue();try{this.emailSending.result=await this.transaction(this.emailSending),this.emailSending.setSent()}catch(e){if(this.logger.error("Failed to send email: "+e.message),!this.active)return;this.emailSending.setSentError(e);try{await this.rset()}catch(t){await this.close(t)}}this.emailSending=null}}async close(e){for(this.active=!1,this.logger.info("WorkerMailer is closed",e?.message||""),this.emailSending?.setSentError?.(e||new Error("WorkerMailer is shutting down"));this.emailToBeSent.length;)(await this.emailToBeSent.dequeue()).setSentError(e||new Error("WorkerMailer is shutting down"));try{await this.writeLine("QUIT"),await this.readTimeout(),this.socket.close().catch(()=>this.logger.error("Failed to close socket"))}catch{}}async waitForSocketConnected(){this.logger.info("Connecting to SMTP server"),await x(this.socket.opened,this.socketTimeoutMs,new Error("Socket timeout!")),this.logger.info("SMTP server connected")}async greet(){let e=await this.readTimeout();if(!e.startsWith("220"))throw new Error("Failed to connect to SMTP server: "+e)}async ehlo(){await this.writeLine(`EHLO ${this.ehloName}`);let e=await this.readTimeout();if(e.startsWith("421"))throw new Error(`Failed to EHLO. ${e}`);if(!e.startsWith("2")){await this.helo();return}this.parseCapabilities(e)}async helo(){await this.writeLine(`HELO ${this.ehloName}`);let e=await this.readTimeout();if(!e.startsWith("2"))throw new Error(`Failed to HELO. ${e}`)}async tls(){await this.writeLine("STARTTLS");let e=await this.readTimeout();if(!e.startsWith("220"))throw new Error("Failed to start TLS: "+e);this.reader.releaseLock(),this.writer.releaseLock(),this.socket=this.socket.startTls(),this.reader=this.socket.readable.getReader(),this.writer=this.socket.writable.getWriter(),this.decoder=new TextDecoder("utf-8"),this.buffer="",this.tlsActive=!0}parseCapabilities(e){this.allowAuth=!1,this.authTypeSupported=[],this.supportsStartTls=!1,this.supportsDSN=!1,this.supportsPipelining=!1,this.supportsChunking=!1,this.supports8BitMime=!1,this.maxMessageSize=0;let t=new Set;for(let r of e.split(/\r?\n/)){let n=r.replace(/^\d{3}[- ]?/,"").trim();if(!n)continue;let[i,...a]=n.split(/[ =]+/);switch(i.toUpperCase()){case"AUTH":this.allowAuth=!0;for(let o of a)switch(o.toUpperCase()){case"PLAIN":t.add("plain");break;case"LOGIN":t.add("login");break;case"CRAM-MD5":t.add("cram-md5");break;case"XOAUTH2":t.add("xoauth2");break}break;case"STARTTLS":this.supportsStartTls=!0;break;case"DSN":this.supportsDSN=!0;break;case"PIPELINING":this.supportsPipelining=!0;break;case"CHUNKING":this.supportsChunking=!0;break;case"8BITMIME":this.supports8BitMime=!0;break;case"SIZE":this.maxMessageSize=Number(a[0])||0;break}}this.authTypeSupported=[...t]}defaultAuthOrder(){return this.tlsActive?["plain","login","cram-md5"]:["cram-md5","plain","login"]}selectAuthType(){return(this.authType.length?this.authType:this.defaultAuthOrder()).find(t=>this.authTypeSupported.includes(t))}async auth(){if(this.allowAuth){if(!this.credentials)throw new Error("smtp server requires authentication, but no credentials found");switch(this.tlsActive||this.logger.warn("Authenticating over an unencrypted connection, credentials are sent in the clear"),this.selectAuthType()){case"plain":return this.authWithPlain();case"login":return this.authWithLogin();case"cram-md5":return this.authWithCramMD5();case"xoauth2":return this.authWithXOAuth2();default:throw new Error("No supported auth method found.")}}}requirePassword(){let e=this.credentials?.password;if(e===void 0)throw new Error("credentials.password is required for this auth method");return e}async authWithPlain(){let e=this.requirePassword(),t=p(h(`\0${this.credentials.username}\0${e}`));await this.writeLine(`AUTH PLAIN ${t}`);let r=await this.readTimeout();if(!r.startsWith("2"))throw new Error(`Failed to plain authentication: ${r}`)}async authWithLogin(){let e=this.requirePassword();await this.writeLine("AUTH LOGIN");let t=await this.readTimeout();if(!t.startsWith("3"))throw new Error("Invalid login: "+t);await this.writeLine(p(h(this.credentials.username)));let r=await this.readTimeout();if(!r.startsWith("3"))throw new Error("Failed to login authentication: "+r);await this.writeLine(p(h(e)));let n=await this.readTimeout();if(!n.startsWith("2"))throw new Error("Failed to login authentication: "+n)}async authWithCramMD5(){let e=this.requirePassword();await this.writeLine("AUTH CRAM-MD5");let t=await this.readTimeout(),r=t.match(/^334\s+(.+)$/m)?.pop()?.trim();if(!r)throw new Error("Invalid CRAM-MD5 challenge: "+t);let n=await crypto.subtle.importKey("raw",h(e),{name:"HMAC",hash:"MD5"},!1,["sign"]),i=await crypto.subtle.sign("HMAC",n,M(r)),a=Array.from(new Uint8Array(i)).map(l=>l.toString(16).padStart(2,"0")).join("");await this.writeLine(p(h(`${this.credentials.username} ${a}`)));let o=await this.readTimeout();if(!o.startsWith("2"))throw new Error(`Failed to cram-md5 authentication: ${o}`)}async authWithXOAuth2(){let e=this.credentials?.accessToken;if(!e)throw new Error("credentials.accessToken is required for xoauth2");let t=p(h(`user=${this.credentials.username}
auth=Bearer ${e}

`));await this.writeLine(`AUTH XOAUTH2 ${t}`);let r=await this.readTimeout();if(!r.startsWith("2"))throw r.startsWith("3")?(await this.writeLine(""),new Error(`Failed to xoauth2 authentication: ${await this.readTimeout()}`)):new Error(`Failed to xoauth2 authentication: ${r}`)}async transaction(e){let t=e.recipients;if(!t.length)throw new Error("Email has no recipients");this.checkSize(e);let r=this.chunking&&this.supportsChunking,n=this.mailFromCommand(e),i=t.map(u=>this.rcptToCommand(e,u)),a=!r&&(this.allowPartialRecipients||t.length===1),o,l=[],c=null;if(this.pipelining&&this.supportsPipelining){let u=[n,...i];a&&u.push("DATA"),await this.write(u.map(g=>`${g}\r
+`).join("")),o=await this.readTimeout();for(let g of i)l.push(await this.readTimeout());a&&(c=await this.readTimeout())}else if(await this.writeLine(n),o=await this.readTimeout(),o.startsWith("2"))for(let u of i)await this.writeLine(u),l.push(await this.readTimeout());if(!o.startsWith("2"))throw new Error(`Invalid ${n} ${o}`);let m=[],f=[];if(t.forEach((u,g)=>{let k=l[g];k?.startsWith("2")?m.push(u):f.push({user:u,response:(k||"").trim()})}),f.length&&(!m.length||!this.allowPartialRecipients)){c?.startsWith("3")&&await this.abortData();let{user:u,response:g}=f[0];throw new Error(`Invalid RCPT TO: <${u.email}> ${g}`)}f.length&&this.logger.warn(`Server rejected ${f.length} of ${t.length} recipients`);let z=r?await this.sendWithChunking(e):await this.sendWithData(e,c);return{accepted:m,rejected:f,response:z.trim()}}mailFromCommand(e){let t=`MAIL FROM: <${e.from.email}>`;if(this.supportsDSN){let r=this.retBuilder(e);r&&(t+=` ${r}`),e.dsnOverride?.envelopeId&&(t+=` ENVID=${e.dsnOverride.envelopeId}`)}return t}rcptToCommand(e,t){let r=`RCPT TO: <${t.email}>`;return this.supportsDSN&&(r+=this.notificationBuilder(e)),r}checkSize(e){if(!this.maxMessageSize)return;let t=e.estimateSize();if(t>this.maxMessageSize)throw new Error(`Message is roughly ${t} bytes but the server accepts at most ${this.maxMessageSize} bytes`)}serializeOptions(){return{allow8bit:this.supports8BitMime}}async abortData(){await this.write(`\r
+.\r
+`),await this.readTimeout()}async sendWithData(e,t){let r=t;if(r===null&&(await this.writeLine("DATA"),r=await this.readTimeout()),!r.startsWith("3"))throw new Error(`Failed to send DATA: ${r}`);let n=S(),i="",a=!0;for(let l of e.chunks(this.serializeOptions())){let c=n(l);a=c.endsWith(`\r
+`),i+=c,i.length>=ne&&(await this.write(i,!1),i="")}i+=a?`.\r
+`:`\r
+.\r
+`,await this.write(i,!1);let o=await this.readTimeout();if(!o.startsWith("2"))throw new Error("Failed send email body: "+o);return o}async sendWithChunking(e){let t="",r=0,n=async a=>{let o=h(t);t="",await this.write(`BDAT ${o.byteLength}${a?" LAST":""}\r
+`),await this.writeBytes(o),r++};for(let a of e.chunks(this.serializeOptions()))t+=a,t.length>=se&&await n(!1);await n(!0);let i="";for(let a=0;a<r;a++)if(i=await this.readTimeout(),!i.startsWith("2"))throw new Error("Failed send email body: "+i);return i}async rset(){await this.writeLine("RSET");let e=await this.readTimeout();if(!e.startsWith("2"))throw new Error(`Failed to reset: ${e}`)}notificationBuilder(e){let t=e.dsnOverride?.NOTIFY,r=t?void 0:this.dsn?.NOTIFY,n=[];return(t?.SUCCESS||r?.SUCCESS)&&n.push("SUCCESS"),(t?.FAILURE||r?.FAILURE)&&n.push("FAILURE"),(t?.DELAY||r?.DELAY)&&n.push("DELAY"),n.length>0?` NOTIFY=${n.join(",")}`:" NOTIFY=NEVER"}retBuilder(e){let t=e.dsnOverride?.RET,r=t?void 0:this.dsn?.RET,n=[];return(t?.HEADERS||r?.HEADERS)&&n.push("HDRS"),(t?.FULL||r?.FULL)&&n.push("FULL"),n.length>0?`RET=${n.join(",")}`:""}};0&&(module.exports={Email,LogLevel,WorkerMailer,encodeHeader,formatAddress});

package/dist/index.mjs

@@ -0,0 +1,49 @@
+var y=class{values=[];resolvers=[];enqueue(e){this.resolvers.length||this.addWrapper(),this.resolvers.shift()(e)}async dequeue(){return this.values.length||this.addWrapper(),this.values.shift()}get length(){return this.values.length}clear(){this.values=[],this.resolvers=[]}addWrapper(){this.values.push(new Promise(e=>{this.resolvers.push(e)}))}};async function A(s,e,t){let r;try{return await Promise.race([s,new Promise((n,i)=>{r=setTimeout(()=>i(t),e)})])}finally{clearTimeout(r)}}var j=new TextEncoder;function h(s){return j.encode(s)}var ee=new TextDecoder("utf-8");function C(s){return s.replace(/\r\n|\r|\n/g,`\r
+`)}var z=["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],q=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"];function k(s=new Date){let e=t=>String(t).padStart(2,"0");return`${z[s.getUTCDay()]}, ${e(s.getUTCDate())} ${q[s.getUTCMonth()]} ${s.getUTCFullYear()} ${e(s.getUTCHours())}:${e(s.getUTCMinutes())}:${e(s.getUTCSeconds())} +0000`}function R(s){return s.replace(/\r\n[ \t]+/g," ").replace(/[\r\n]+/g," ")}function d(s,e,t=78){let r=R(e),n=`${s}: `;if(n.length+r.length<=t)return n+r;let i=[],a=n,o=!0;for(let l of r.split(" ")){if(l===""){a+=" ";continue}o?(a+=l,o=!1):a.length+1+l.length>t?(i.push(a),a=" "+l):a+=" "+l}return i.push(a),i.join(`\r
+`)}var _=/[A-Za-z0-9!#$&+\-.^_`|~]/;function x(s,e){let t=R(e);if(!/[^\x20-\x7E]/.test(t))return`${s}="${t.replace(/([\\"])/g,"\\$1")}"`;let r="";for(let n of h(t)){let i=String.fromCharCode(n);r+=_.test(i)?i:`%${n.toString(16).toUpperCase().padStart(2,"0")}`}return`${s}*=UTF-8''${r}`}function p(s){let e="";for(let r=0;r<s.length;r+=32768)e+=String.fromCharCode(...s.subarray(r,r+32768));return btoa(e)}function D(s){let e=atob(s.replace(/\s+/g,"")),t=new Uint8Array(e.length);for(let r=0;r<e.length;r++)t[r]=e.charCodeAt(r);return t}function v(s,e=76){let t=s.replace(/\s+/g,"");if(t.length<=e)return t;let r=[];for(let n=0;n<t.length;n+=e)r.push(t.slice(n,n+e));return r.join(`\r
+`)}function S(){let s=!0;return e=>{if(!e)return e;let t=e.replace(/\r\n\./g,`\r
+..`);return s&&t.startsWith(".")&&(t=`.${t}`),s=t.endsWith(`\r
+`),t}}function O(s){return s>126||s===61||s<32&&s!==9&&s!==10&&s!==13}function M(s){let e=0;for(let t of s)O(t)&&e++;return s.length+e*2}function W(s,e=76){let t=h(s),r=e-3,n=[],i="",a=0,o=()=>{let l=i.charCodeAt(i.length-1);l===32?i=i.slice(0,-1)+"=20":l===9&&(i=i.slice(0,-1)+"=09"),n.push(i,`=\r
+`),i=""};for(;a<t.length;){let l=t[a],c;if(l===10){n.push(i,`\r
+`),i="",a++;continue}else if(l===13){if(a+1<t.length&&t[a+1]===10){n.push(i,`\r
+`),i="",a+=2;continue}c="=0D"}if(c===void 0){let m=l===32||l===9,f=a+1>=t.length||t[a+1]===10||t[a+1]===13;c=O(l)||m&&f?`=${l.toString(16).toUpperCase().padStart(2,"0")}`:String.fromCharCode(l)}i.length+c.length>r&&o(),i+=c,a++}return n.push(i),n.join("")}var F="=?UTF-8?Q?",N="?=",Y=75-F.length-N.length;function $(s){if(!/[^\x20-\x7E]/.test(s))return s;let e=[],t="";for(let r of s){let n="";for(let i of h(r))i>=33&&i<=126&&i!==63&&i!==61&&i!==95?n+=String.fromCharCode(i):i===32?n+="_":n+=`=${i.toString(16).toUpperCase().padStart(2,"0")}`;t.length+n.length>Y&&(e.push(t),t=""),t+=n}return t&&e.push(t),e.map(r=>`${F}${r}${N}`).join(" ")}function G(s){if(!s.name)return s.email;let e=$(s.name);return e===s.name?`"${s.name.replace(/([\\"])/g,"\\$1")}" <${s.email}>`:`${e} <${s.email}>`}function L(s,e){let t=C(s),r=/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/.test(t),n=/[ \t]\r\n|[ \t]$/.test(t),i=0;for(let l of t.split(`\r
+`))l.length>i&&(i=l.length);if(!r&&!n){if(i<=990&&!/[^\x00-\x7F]/.test(t))return{encoding:"7bit",render:()=>t};if(e&&i<=240)return{encoding:"8bit",render:()=>t}}let a=h(t),o=Math.ceil(a.length/3)*4;return M(a)<=o?{encoding:"quoted-printable",render:()=>W(t)}:{encoding:"base64",render:()=>v(p(a))}}function Q(s){return s instanceof Uint8Array?s.length:s.byteLength}var E=class s{from;to;reply;cc;bcc;subject;text;html;dsnOverride;attachments;headers;result;setSent;setSentError;sent=new Promise((e,t)=>{this.setSent=e,this.setSentError=t});constructor(e){if(!e.text&&!e.html)throw new Error("At least one of text or html must be provided");typeof e.from=="string"?this.from={email:e.from}:this.from=e.from,typeof e.reply=="string"?this.reply={email:e.reply}:this.reply=e.reply,this.to=s.toUsers(e.to),this.cc=s.toUsers(e.cc),this.bcc=s.toUsers(e.bcc),this.subject=e.subject,this.text=e.text,this.html=e.html,this.attachments=e.attachments,this.dsnOverride=e.dsnOverride,this.headers=e.headers||{}}static toUsers(e){if(e)return typeof e=="string"?[{email:e}]:Array.isArray(e)?e.map(t=>typeof t=="string"?{email:t}:t):[e]}get recipients(){return[...this.to,...this.cc||[],...this.bcc||[]]}estimateSize(){let e=2048;this.text&&(e+=Math.ceil(h(this.text).length*1.4)),this.html&&(e+=Math.ceil(h(this.html).length*1.4));for(let t of this.attachments||[])e+=typeof t.content=="string"?t.content.length:Math.ceil(Q(t.content)/3)*4,e+=512;return e}*chunks(e={}){let t=!!e.allow8bit,r=this.messageHeaders(),n=this.buildContentPart(t);if(!this.attachments?.length){yield`${[...r,...n.headers].join(`\r
+`)}\r
+\r
+`,yield*n.body();return}let i=P("mixed");yield`${[...r,d("Content-Type",`multipart/mixed; boundary="${i}"`)].join(`\r
+`)}\r
+\r
+`,yield`--${i}\r
+${n.headers.join(`\r
+`)}\r
+\r
+`,yield*n.body();for(let a of this.attachments)yield*this.renderAttachment(i,a);yield`--${i}--\r
+`}getEmailData(e={}){let t=S(),r="";for(let n of this.chunks(e))r+=t(n);return r.endsWith(`\r
+`)||(r+=`\r
+`),`${r}.\r
+`}buildContentPart(e){let t=this.text,r=this.html;if(t!==void 0&&r!==void 0){let a=P("alternative"),o=this.renderTextPart.bind(this);return{headers:[d("Content-Type",`multipart/alternative; boundary="${a}"`)],*body(){yield*o(a,"text/plain",t,e),yield*o(a,"text/html",r,e),yield`--${a}--\r
+`}}}let n=t!==void 0?"text/plain":"text/html",i=L(t??r,e);return{headers:[d("Content-Type",`${n}; charset="UTF-8"`),`Content-Transfer-Encoding: ${i.encoding}`],*body(){yield`${i.render()}\r
+`}}}*renderTextPart(e,t,r,n){let i=L(r,n);yield`--${e}\r
+`+d("Content-Type",`${t}; charset="UTF-8"`)+`\r
+Content-Transfer-Encoding: ${i.encoding}\r
+\r
+`,yield`${i.render()}\r
+`}*renderAttachment(e,t){let r=t.mimeType||V(t.filename),n=[d("Content-Type",`${r}; ${x("name",t.filename)}`),d("Content-Description",$(t.filename)),d("Content-Disposition",`attachment; ${x("filename",t.filename)}`),"Content-Transfer-Encoding: base64"];if(yield`--${e}\r
+${n.join(`\r
+`)}\r
+\r
+`,typeof t.content=="string"){yield`${v(t.content)}\r
+`;return}let i=t.content instanceof Uint8Array?t.content:new Uint8Array(t.content),a=57*96;for(let o=0;o<i.length;o+=a)yield`${v(p(i.subarray(o,o+a)))}\r
+`}messageHeaders(){this.resolveHeader();let e=["MIME-Version: 1.0"];for(let[t,r]of Object.entries(this.headers))e.push(d(t,r));return e}hasHeader(e){let t=e.toLowerCase();return Object.keys(this.headers).some(r=>r.toLowerCase()===t)}resolveHeader(){this.resolveAddressHeader("From",[this.from]),this.resolveAddressHeader("To",this.to),this.resolveAddressHeader("Reply-To",this.reply?[this.reply]:void 0),this.resolveAddressHeader("Cc",this.cc),this.resolveSubject(),this.hasHeader("Date")||(this.headers.Date=k()),this.hasHeader("Message-ID")||(this.headers["Message-ID"]=`<${crypto.randomUUID()}@${this.from.email.split("@").pop()}>`)}resolveAddressHeader(e,t){!t?.length||this.hasHeader(e)||(this.headers[e]=t.map(G).join(", "))}resolveSubject(){this.hasHeader("Subject")||!this.subject||(this.headers.Subject=$(this.subject))}};function P(s){let e=new Uint8Array(16);crypto.getRandomValues(e);let t=Array.from(e).map(r=>r.toString(16).padStart(2,"0")).join("");return`${s}_${t}`}var X={txt:"text/plain",html:"text/html",csv:"text/csv",pdf:"application/pdf",png:"image/png",jpg:"image/jpeg",jpeg:"image/jpeg",gif:"image/gif",zip:"application/zip"};function V(s){let e=s.split(".").pop()?.toLowerCase();return X[e||"txt"]||"application/octet-stream"}import{connect as Z}from"cloudflare:sockets";var I=(i=>(i[i.DEBUG=0]="DEBUG",i[i.INFO=1]="INFO",i[i.WARN=2]="WARN",i[i.ERROR=3]="ERROR",i[i.NONE=4]="NONE",i))(I||{}),w=class{constructor(e=1,t){this.level=e;this.prefix=t}prefix;debug(e,...t){this.level<=0&&console.debug(this.prefix+e,...t)}info(e,...t){this.level<=1&&console.info(this.prefix+e,...t)}warn(e,...t){this.level<=2&&console.warn(this.prefix+e,...t)}error(e,...t){this.level<=3&&console.error(this.prefix+e,...t)}};var J=262144,K=32768,H=class s{socket;host;port;secure;startTls;requireTls;ehloName;authType;credentials;socketTimeoutMs;responseTimeoutMs;pipelining;chunking;allowPartialRecipients;reader;writer;decoder=new TextDecoder("utf-8");buffer="";streamClosed=!1;logger;dsn;active=!1;tlsActive=!1;emailSending=null;emailToBeSent=new y;supportsDSN=!1;allowAuth=!1;authTypeSupported=[];supportsStartTls=!1;supportsPipelining=!1;supportsChunking=!1;supports8BitMime=!1;maxMessageSize=0;constructor(e){this.port=e.port,this.host=e.host,this.secure=!!e.secure,Array.isArray(e.authType)?this.authType=e.authType:typeof e.authType=="string"?this.authType=[e.authType]:this.authType=[],this.startTls=e.startTls===void 0?!0:e.startTls,this.requireTls=!!e.requireTls,this.credentials=e.credentials,this.dsn=e.dsn||{},this.pipelining=e.pipelining!==!1,this.chunking=!!e.chunking,this.allowPartialRecipients=!!e.allowPartialRecipients,this.socketTimeoutMs=e.socketTimeoutMs||6e4,this.responseTimeoutMs=e.responseTimeoutMs||3e4,this.tlsActive=this.secure,this.socket=Z({hostname:this.host,port:this.port},{secureTransport:this.secure?"on":this.startTls?"starttls":"off",allowHalfOpen:!1}),this.reader=this.socket.readable.getReader(),this.writer=this.socket.writable.getWriter(),this.logger=new w(e.logLevel,`[WorkerMailer:${this.host}:${this.port}]`),this.ehloName=s.resolveEhloName(e.ehloName),e.ehloName||this.logger.warn("No ehloName set, announcing [127.0.0.1]. Set ehloName to a domain you control \u2014 receiving servers use it for spam scoring.")}static resolveEhloName(e){let t=e?.trim();return t?/^\[.+\]$/.test(t)?t:/^\d{1,3}(\.\d{1,3}){3}$/.test(t)?`[${t}]`:t.includes(":")?`[IPv6:${t}]`:t:"[127.0.0.1]"}static async connect(e){let t=new s(e);return await t.initializeSmtpSession(),t.start().catch(console.error),t}async send(e){if(!this.active)throw new Error("WorkerMailer is not connected");let t=new E(e);return this.emailToBeSent.enqueue(t),await t.sent,t.result}static async send(e,t){let r=await s.connect(e);try{return await r.send(t)}finally{await r.close()}}async readTimeout(){return A(this.readResponse(),this.responseTimeoutMs,new Error("Timeout while waiting for smtp server response"))}async readResponse(){for(;;){let e=this.takeResponse();if(e!==null)return e;if(this.streamClosed)throw new Error("SMTP server closed the connection");let{value:t,done:r}=await this.reader.read();if(r){this.streamClosed=!0;continue}if(!t)continue;let n=this.decoder.decode(t,{stream:!0});this.logger.debug(`SMTP server response:
+`+n),this.buffer+=n}}takeResponse(){let e=0;for(;;){let t=this.buffer.indexOf(`
+`,e);if(t===-1)return null;if(!/^\d{3}-/.test(this.buffer.slice(e,t))){let r=this.buffer.slice(0,t+1);return this.buffer=this.buffer.slice(t+1),r}e=t+1}}async writeLine(e){await this.write(`${e}\r
+`)}async write(e,t=!0){this.logger.debug(t?`Write to socket:
+`+e:`Write to socket: ${e.length} characters`),await this.writer.write(h(e))}async writeBytes(e){this.logger.debug(`Write to socket: ${e.byteLength} bytes`),await this.writer.write(e)}async initializeSmtpSession(){if(await this.waitForSocketConnected(),await this.greet(),await this.ehlo(),this.startTls&&!this.secure&&this.supportsStartTls&&(await this.tls(),await this.ehlo()),this.requireTls&&!this.tlsActive)throw new Error("requireTls is set but the connection is not encrypted (server does not support STARTTLS)");await this.auth(),this.active=!0}async start(){for(;this.active;){this.emailSending=await this.emailToBeSent.dequeue();try{this.emailSending.result=await this.transaction(this.emailSending),this.emailSending.setSent()}catch(e){if(this.logger.error("Failed to send email: "+e.message),!this.active)return;this.emailSending.setSentError(e);try{await this.rset()}catch(t){await this.close(t)}}this.emailSending=null}}async close(e){for(this.active=!1,this.logger.info("WorkerMailer is closed",e?.message||""),this.emailSending?.setSentError?.(e||new Error("WorkerMailer is shutting down"));this.emailToBeSent.length;)(await this.emailToBeSent.dequeue()).setSentError(e||new Error("WorkerMailer is shutting down"));try{await this.writeLine("QUIT"),await this.readTimeout(),this.socket.close().catch(()=>this.logger.error("Failed to close socket"))}catch{}}async waitForSocketConnected(){this.logger.info("Connecting to SMTP server"),await A(this.socket.opened,this.socketTimeoutMs,new Error("Socket timeout!")),this.logger.info("SMTP server connected")}async greet(){let e=await this.readTimeout();if(!e.startsWith("220"))throw new Error("Failed to connect to SMTP server: "+e)}async ehlo(){await this.writeLine(`EHLO ${this.ehloName}`);let e=await this.readTimeout();if(e.startsWith("421"))throw new Error(`Failed to EHLO. ${e}`);if(!e.startsWith("2")){await this.helo();return}this.parseCapabilities(e)}async helo(){await this.writeLine(`HELO ${this.ehloName}`);let e=await this.readTimeout();if(!e.startsWith("2"))throw new Error(`Failed to HELO. ${e}`)}async tls(){await this.writeLine("STARTTLS");let e=await this.readTimeout();if(!e.startsWith("220"))throw new Error("Failed to start TLS: "+e);this.reader.releaseLock(),this.writer.releaseLock(),this.socket=this.socket.startTls(),this.reader=this.socket.readable.getReader(),this.writer=this.socket.writable.getWriter(),this.decoder=new TextDecoder("utf-8"),this.buffer="",this.tlsActive=!0}parseCapabilities(e){this.allowAuth=!1,this.authTypeSupported=[],this.supportsStartTls=!1,this.supportsDSN=!1,this.supportsPipelining=!1,this.supportsChunking=!1,this.supports8BitMime=!1,this.maxMessageSize=0;let t=new Set;for(let r of e.split(/\r?\n/)){let n=r.replace(/^\d{3}[- ]?/,"").trim();if(!n)continue;let[i,...a]=n.split(/[ =]+/);switch(i.toUpperCase()){case"AUTH":this.allowAuth=!0;for(let o of a)switch(o.toUpperCase()){case"PLAIN":t.add("plain");break;case"LOGIN":t.add("login");break;case"CRAM-MD5":t.add("cram-md5");break;case"XOAUTH2":t.add("xoauth2");break}break;case"STARTTLS":this.supportsStartTls=!0;break;case"DSN":this.supportsDSN=!0;break;case"PIPELINING":this.supportsPipelining=!0;break;case"CHUNKING":this.supportsChunking=!0;break;case"8BITMIME":this.supports8BitMime=!0;break;case"SIZE":this.maxMessageSize=Number(a[0])||0;break}}this.authTypeSupported=[...t]}defaultAuthOrder(){return this.tlsActive?["plain","login","cram-md5"]:["cram-md5","plain","login"]}selectAuthType(){return(this.authType.length?this.authType:this.defaultAuthOrder()).find(t=>this.authTypeSupported.includes(t))}async auth(){if(this.allowAuth){if(!this.credentials)throw new Error("smtp server requires authentication, but no credentials found");switch(this.tlsActive||this.logger.warn("Authenticating over an unencrypted connection, credentials are sent in the clear"),this.selectAuthType()){case"plain":return this.authWithPlain();case"login":return this.authWithLogin();case"cram-md5":return this.authWithCramMD5();case"xoauth2":return this.authWithXOAuth2();default:throw new Error("No supported auth method found.")}}}requirePassword(){let e=this.credentials?.password;if(e===void 0)throw new Error("credentials.password is required for this auth method");return e}async authWithPlain(){let e=this.requirePassword(),t=p(h(`\0${this.credentials.username}\0${e}`));await this.writeLine(`AUTH PLAIN ${t}`);let r=await this.readTimeout();if(!r.startsWith("2"))throw new Error(`Failed to plain authentication: ${r}`)}async authWithLogin(){let e=this.requirePassword();await this.writeLine("AUTH LOGIN");let t=await this.readTimeout();if(!t.startsWith("3"))throw new Error("Invalid login: "+t);await this.writeLine(p(h(this.credentials.username)));let r=await this.readTimeout();if(!r.startsWith("3"))throw new Error("Failed to login authentication: "+r);await this.writeLine(p(h(e)));let n=await this.readTimeout();if(!n.startsWith("2"))throw new Error("Failed to login authentication: "+n)}async authWithCramMD5(){let e=this.requirePassword();await this.writeLine("AUTH CRAM-MD5");let t=await this.readTimeout(),r=t.match(/^334\s+(.+)$/m)?.pop()?.trim();if(!r)throw new Error("Invalid CRAM-MD5 challenge: "+t);let n=await crypto.subtle.importKey("raw",h(e),{name:"HMAC",hash:"MD5"},!1,["sign"]),i=await crypto.subtle.sign("HMAC",n,D(r)),a=Array.from(new Uint8Array(i)).map(l=>l.toString(16).padStart(2,"0")).join("");await this.writeLine(p(h(`${this.credentials.username} ${a}`)));let o=await this.readTimeout();if(!o.startsWith("2"))throw new Error(`Failed to cram-md5 authentication: ${o}`)}async authWithXOAuth2(){let e=this.credentials?.accessToken;if(!e)throw new Error("credentials.accessToken is required for xoauth2");let t=p(h(`user=${this.credentials.username}
auth=Bearer ${e}

`));await this.writeLine(`AUTH XOAUTH2 ${t}`);let r=await this.readTimeout();if(!r.startsWith("2"))throw r.startsWith("3")?(await this.writeLine(""),new Error(`Failed to xoauth2 authentication: ${await this.readTimeout()}`)):new Error(`Failed to xoauth2 authentication: ${r}`)}async transaction(e){let t=e.recipients;if(!t.length)throw new Error("Email has no recipients");this.checkSize(e);let r=this.chunking&&this.supportsChunking,n=this.mailFromCommand(e),i=t.map(u=>this.rcptToCommand(e,u)),a=!r&&(this.allowPartialRecipients||t.length===1),o,l=[],c=null;if(this.pipelining&&this.supportsPipelining){let u=[n,...i];a&&u.push("DATA"),await this.write(u.map(g=>`${g}\r
+`).join("")),o=await this.readTimeout();for(let g of i)l.push(await this.readTimeout());a&&(c=await this.readTimeout())}else if(await this.writeLine(n),o=await this.readTimeout(),o.startsWith("2"))for(let u of i)await this.writeLine(u),l.push(await this.readTimeout());if(!o.startsWith("2"))throw new Error(`Invalid ${n} ${o}`);let m=[],f=[];if(t.forEach((u,g)=>{let U=l[g];U?.startsWith("2")?m.push(u):f.push({user:u,response:(U||"").trim()})}),f.length&&(!m.length||!this.allowPartialRecipients)){c?.startsWith("3")&&await this.abortData();let{user:u,response:g}=f[0];throw new Error(`Invalid RCPT TO: <${u.email}> ${g}`)}f.length&&this.logger.warn(`Server rejected ${f.length} of ${t.length} recipients`);let B=r?await this.sendWithChunking(e):await this.sendWithData(e,c);return{accepted:m,rejected:f,response:B.trim()}}mailFromCommand(e){let t=`MAIL FROM: <${e.from.email}>`;if(this.supportsDSN){let r=this.retBuilder(e);r&&(t+=` ${r}`),e.dsnOverride?.envelopeId&&(t+=` ENVID=${e.dsnOverride.envelopeId}`)}return t}rcptToCommand(e,t){let r=`RCPT TO: <${t.email}>`;return this.supportsDSN&&(r+=this.notificationBuilder(e)),r}checkSize(e){if(!this.maxMessageSize)return;let t=e.estimateSize();if(t>this.maxMessageSize)throw new Error(`Message is roughly ${t} bytes but the server accepts at most ${this.maxMessageSize} bytes`)}serializeOptions(){return{allow8bit:this.supports8BitMime}}async abortData(){await this.write(`\r
+.\r
+`),await this.readTimeout()}async sendWithData(e,t){let r=t;if(r===null&&(await this.writeLine("DATA"),r=await this.readTimeout()),!r.startsWith("3"))throw new Error(`Failed to send DATA: ${r}`);let n=S(),i="",a=!0;for(let l of e.chunks(this.serializeOptions())){let c=n(l);a=c.endsWith(`\r
+`),i+=c,i.length>=K&&(await this.write(i,!1),i="")}i+=a?`.\r
+`:`\r
+.\r
+`,await this.write(i,!1);let o=await this.readTimeout();if(!o.startsWith("2"))throw new Error("Failed send email body: "+o);return o}async sendWithChunking(e){let t="",r=0,n=async a=>{let o=h(t);t="",await this.write(`BDAT ${o.byteLength}${a?" LAST":""}\r
+`),await this.writeBytes(o),r++};for(let a of e.chunks(this.serializeOptions()))t+=a,t.length>=J&&await n(!1);await n(!0);let i="";for(let a=0;a<r;a++)if(i=await this.readTimeout(),!i.startsWith("2"))throw new Error("Failed send email body: "+i);return i}async rset(){await this.writeLine("RSET");let e=await this.readTimeout();if(!e.startsWith("2"))throw new Error(`Failed to reset: ${e}`)}notificationBuilder(e){let t=e.dsnOverride?.NOTIFY,r=t?void 0:this.dsn?.NOTIFY,n=[];return(t?.SUCCESS||r?.SUCCESS)&&n.push("SUCCESS"),(t?.FAILURE||r?.FAILURE)&&n.push("FAILURE"),(t?.DELAY||r?.DELAY)&&n.push("DELAY"),n.length>0?` NOTIFY=${n.join(",")}`:" NOTIFY=NEVER"}retBuilder(e){let t=e.dsnOverride?.RET,r=t?void 0:this.dsn?.RET,n=[];return(t?.HEADERS||r?.HEADERS)&&n.push("HDRS"),(t?.FULL||r?.FULL)&&n.push("FULL"),n.length>0?`RET=${n.join(",")}`:""}};export{E as Email,I as LogLevel,H as WorkerMailer,$ as encodeHeader,G as formatAddress};

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "@luca-emmert/worker-mailer",
+  "version": "1.3.0",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "keywords": [
+    "cloudflare",
+    "workers",
+    "cloudflare-workers",
+    "email",
+    "smtp"
+  ],
+  "author": "zou-yu, lucaemt",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/zou-yu/worker-mailer.git"
+  },
+  "license": "MIT",
+  "homepage": "https://github.com/zou-yu/worker-mailer",
+  "devDependencies": {
+    "@changesets/cli": "^2.27.9",
+    "@cloudflare/vitest-pool-workers": "^0.4.5",
+    "@cloudflare/workers-types": "^4.20240722.0",
+    "@types/libqp": "^1.1.3",
+    "@types/node": "^20.14.12",
+    "letterparser": "^0.1.8",
+    "libqp": "^2.1.1",
+    "prettier": "^3.3.3",
+    "tsup": "^8.2.3",
+    "typescript": "^5.5.2",
+    "vitest": "1.5.0",
+    "wrangler": "^3.60.3"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest",
+    "format": "prettier '**/*.{json,ts,js,cjs,mjs,md}' --write --ignore-path .gitignore"
+  }
+}