@lunora/mail 1.0.0-alpha.4 → 1.0.0-alpha.6

package/dist/inbound/index.mjs

@@ -1,2 +1,2 @@
-export { createInboundEmailHandler, dispatchToLunoraFunction } from '../packem_shared/createInboundEmailHandler-D0uCOrU-.mjs';
-export { parseInboundEmail } from '../packem_shared/parseInboundEmail-Bw9u_1oc.mjs';
+export { createInboundEmailHandler, dispatchToLunoraFunction } from '../packem_shared/createInboundEmailHandler-BW_s0-Vc.mjs';
+export { parseInboundEmail } from '../packem_shared/parseInboundEmail-6lafQBT1.mjs';

package/dist/index.d.mts

@@ -34,6 +34,23 @@ interface CloudflareTransportOptions {
 * verified-address constraint never bites the dev loop.
 */
 declare const createCloudflareTransport: (options: CloudflareTransportOptions) => MailTransport;
+/**
+* Create a mailer bound to a transport.
+*
+* SECURITY — recipient policy and HTML content are the caller's responsibility.
+* The mailer fully blocks header/CRLF/comma injection in addresses
+* (`assertSafeAddresses` / `assertSafeHeaderValue`), but it does NOT decide WHO
+* you may send to or WHAT HTML you render.
+*
+* Open relay: derive `to`/`cc`/`bcc` from server-trusted state, never from raw
+* request input, and prefer a fixed/allowlisted `from` — sending to an arbitrary
+* user-supplied address turns your deployment into a spam relay.
+*
+* Template XSS / content injection: treat template HTML like any other HTML sink
+* — never interpolate untrusted data into raw markup (or a
+* `dangerouslySetInnerHTML`-style template) without escaping. The mailer sends
+* whatever HTML you hand it verbatim.
+*/
 declare const createMailer: (options: LunoraMailOptions) => Mailer;
 /** A Worker `env` projected as a plain record (vars, secrets, and bindings are `unknown`-valued). */
 type MailEnv = Record<string, unknown>;

package/dist/index.d.ts

@@ -34,6 +34,23 @@ interface CloudflareTransportOptions {
 * verified-address constraint never bites the dev loop.
 */
 declare const createCloudflareTransport: (options: CloudflareTransportOptions) => MailTransport;
+/**
+* Create a mailer bound to a transport.
+*
+* SECURITY — recipient policy and HTML content are the caller's responsibility.
+* The mailer fully blocks header/CRLF/comma injection in addresses
+* (`assertSafeAddresses` / `assertSafeHeaderValue`), but it does NOT decide WHO
+* you may send to or WHAT HTML you render.
+*
+* Open relay: derive `to`/`cc`/`bcc` from server-trusted state, never from raw
+* request input, and prefer a fixed/allowlisted `from` — sending to an arbitrary
+* user-supplied address turns your deployment into a spam relay.
+*
+* Template XSS / content injection: treat template HTML like any other HTML sink
+* — never interpolate untrusted data into raw markup (or a
+* `dangerouslySetInnerHTML`-style template) without escaping. The mailer sends
+* whatever HTML you hand it verbatim.
+*/
 declare const createMailer: (options: LunoraMailOptions) => Mailer;
 /** A Worker `env` projected as a plain record (vars, secrets, and bindings are `unknown`-valued). */
 type MailEnv = Record<string, unknown>;

package/dist/index.mjs

@@ -1,7 +1,7 @@
 export { createCaptureTransport } from './packem_shared/createCaptureTransport-Crz_8822.mjs';
-export { createCloudflareTransport } from './packem_shared/createCloudflareTransport-yHOVEsZv.mjs';
-export { default as createMailer } from './packem_shared/createMailer-oEKPAd4J.mjs';
-export { createCaptureSink, createMailerFromEnv, shouldCaptureMail } from './packem_shared/createCaptureSink-DeihS4LH.mjs';
-export { consumeQueuedSend, toQueuedPayload } from './packem_shared/consumeQueuedSend-BEKOdaxU.mjs';
+export { createCloudflareTransport } from './packem_shared/createCloudflareTransport-DXh1nUNi.mjs';
+export { default as createMailer } from './packem_shared/createMailer-B4Z_Cgiu.mjs';
+export { createCaptureSink, createMailerFromEnv, shouldCaptureMail } from './packem_shared/createCaptureSink-Di-5AJUs.mjs';
+export { consumeQueuedSend, toQueuedPayload } from './packem_shared/consumeQueuedSend-B9hTDOZ6.mjs';
 export { default as renderEmail } from './packem_shared/renderEmail-hyS1bpVP.mjs';
-export { default as createResendTransport } from './packem_shared/createResendTransport-oNIorpzv.mjs';
+export { default as createResendTransport } from './packem_shared/createResendTransport-CMQWjZoi.mjs';

package/dist/packem_shared/{address-fkXxLKza.mjs → address-vSUAVU2T.mjs}

@@ -1,22 +1,24 @@
+import { LunoraError } from '@lunora/errors';
+
 const MAX_EMAIL_LENGTH = 320;
 const MAX_NAME_LENGTH = 256;
 const ADDRESS_PATTERN = /^([^<]*)<([^>]*)>\s*$/;
 const assertSafeAddressField = (field, value) => {
   if (value.includes("\r") || value.includes("\n") || value.includes(",")) {
-    throw new Error(`@lunora/mail: address ${field} must not contain CR, LF, or comma`);
+    throw new LunoraError("INTERNAL", `@lunora/mail: address ${field} must not contain CR, LF, or comma`);
   }
 };
 const assertSafeHeaderValue = (label, value) => {
   if (value.includes("\r") || value.includes("\n")) {
-    throw new Error(`@lunora/mail: ${label} must not contain CR or LF`);
+    throw new LunoraError("INTERNAL", `@lunora/mail: ${label} must not contain CR or LF`);
   }
 };
 const toBracketedAddress = (name, email) => {
   if (name.length > MAX_NAME_LENGTH) {
-    throw new Error(`@lunora/mail: address name must be <= ${String(MAX_NAME_LENGTH)} characters`);
+    throw new LunoraError("INTERNAL", `@lunora/mail: address name must be <= ${String(MAX_NAME_LENGTH)} characters`);
   }
   if (email.length > MAX_EMAIL_LENGTH) {
-    throw new Error(`@lunora/mail: address email must be <= ${String(MAX_EMAIL_LENGTH)} characters`);
+    throw new LunoraError("INTERNAL", `@lunora/mail: address email must be <= ${String(MAX_EMAIL_LENGTH)} characters`);
   }
   if (name) {
     assertSafeAddressField("name", name);
@@ -27,7 +29,7 @@ const toBracketedAddress = (name, email) => {
 const toBareAddress = (input) => {
   const email = input.trim();
   if (email.length > MAX_EMAIL_LENGTH) {
-    throw new Error(`@lunora/mail: address email must be <= ${String(MAX_EMAIL_LENGTH)} characters`);
+    throw new LunoraError("INTERNAL", `@lunora/mail: address email must be <= ${String(MAX_EMAIL_LENGTH)} characters`);
   }
   assertSafeAddressField("email", email);
   return { email };

package/dist/packem_shared/{consumeQueuedSend-BEKOdaxU.mjs → consumeQueuedSend-B9hTDOZ6.mjs}

@@ -1,3 +1,5 @@
+import { LunoraError } from '@lunora/errors';
+
 const toQueuedPayload = (options) => {
   return {
     bcc: options.bcc,
@@ -13,7 +15,7 @@ const toQueuedPayload = (options) => {
 };
 const consumeQueuedSend = async (mailer, payload) => {
   if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
-    throw new Error("@lunora/mail: queue message body must be an object");
+    throw new LunoraError("INTERNAL", "@lunora/mail: queue message body must be an object");
   }
   const candidate = payload;
   if (typeof candidate.subject !== "string") {
@@ -22,7 +24,7 @@ const consumeQueuedSend = async (mailer, payload) => {
   const recipientIsString = typeof candidate.to === "string";
   const recipientIsStringArray = Array.isArray(candidate.to) && candidate.to.every((value) => typeof value === "string");
   if (!recipientIsString && !recipientIsStringArray) {
-    throw new Error("@lunora/mail: queue message `to` must be a string or string[]");
+    throw new LunoraError("INTERNAL", "@lunora/mail: queue message `to` must be a string or string[]");
   }
   const assertOptionalString = (field, value) => {
     if (value === void 0) {

package/dist/packem_shared/{createCaptureSink-DeihS4LH.mjs → createCaptureSink-Di-5AJUs.mjs}

@@ -1,5 +1,6 @@
+import { LunoraError } from '@lunora/errors';
 import { createCaptureTransport } from './createCaptureTransport-Crz_8822.mjs';
-import createMailer from './createMailer-oEKPAd4J.mjs';
+import createMailer from './createMailer-B4Z_Cgiu.mjs';
 import { a as applyJurisdiction } from './shard-CJ-TvmfT.mjs';
 
 const RECORD_MAIL_OP = "__lunora_admin__:recordMail";
@@ -9,7 +10,7 @@ const ENVIRONMENT_VARS = ["CF_ENV", "ENVIRONMENT", "NODE_ENV", "WORKER_ENV"];
 const requireStringEnv = (env, name) => {
   const value = env[name];
   if (typeof value !== "string" || value === "") {
-    throw new Error(`@lunora/mail: missing env var \`${name}\` — set it in .dev.vars (and \`wrangler secret put ${name}\` for secrets).`);
+    throw new LunoraError("INTERNAL", `@lunora/mail: missing env var \`${name}\` — set it in .dev.vars (and \`wrangler secret put ${name}\` for secrets).`);
   }
   return value;
 };
@@ -55,7 +56,8 @@ const createMailerFromEnv = (env, options = {}) => {
   if (apiKey !== void 0 && apiKey !== "") {
     return createMailer({ apiKey, from });
   }
-  throw new Error(
+  throw new LunoraError(
+    "INTERNAL",
     "@lunora/mail: no transport configured — provide `cloudflareSend` (a SEND_EMAIL binding) or RESEND_API_KEY, or run in a dev environment to capture."
   );
 };

package/dist/packem_shared/{createCloudflareTransport-yHOVEsZv.mjs → createCloudflareTransport-DXh1nUNi.mjs}

@@ -1,5 +1,6 @@
+import { LunoraError } from '@lunora/errors';
 import { cloudflareEmailProvider } from '@visulima/email/providers/cloudflare-email';
-import { r as requireRecipients, t as toProviderEmail, i as interpretSendResult } from './provider-transport-C5CVbjRF.mjs';
+import { r as requireRecipients, t as toProviderEmail, i as interpretSendResult } from './provider-transport-C0xHi3oy.mjs';
 
 const createCloudflareTransport = (options) => {
   const provider = cloudflareEmailProvider({ send: options.send });
@@ -9,11 +10,12 @@ const createCloudflareTransport = (options) => {
       const hasCc = payload.cc !== void 0 && payload.cc.length > 0;
       const hasBcc = payload.bcc !== void 0 && payload.bcc.length > 0;
       if (hasCc || hasBcc) {
-        throw new Error("@lunora/mail: Cloudflare Email Workers does not support cc/bcc — fan out one send per recipient instead");
+        throw new LunoraError("INTERNAL", "@lunora/mail: Cloudflare Email Workers does not support cc/bcc — fan out one send per recipient instead");
       }
       const { first, list } = requireRecipients(payload.to);
       if (list.length > 1) {
-        throw new Error(
+        throw new LunoraError(
+          "INTERNAL",
           `@lunora/mail: Cloudflare Email Workers is single-recipient but received ${String(list.length)} \`to\` addresses — fan out one send per recipient instead`
         );
       }

package/dist/packem_shared/{createInboundEmailHandler-D0uCOrU-.mjs → createInboundEmailHandler-BW_s0-Vc.mjs}

@@ -1,3 +1,4 @@
+import { LunoraError } from '@lunora/errors';
 import { a as applyJurisdiction } from './shard-CJ-TvmfT.mjs';
 
 const GENERIC_REJECT_REASON = "message could not be processed";
@@ -14,7 +15,7 @@ const createInboundEmailHandler = (options) => {
       if (options.verify) {
         const verified = await options.verify(parsed, context);
         if (verified === false) {
-          throw new Error("@lunora/mail/inbound: sender verification rejected the message");
+          throw new LunoraError("INTERNAL", "@lunora/mail/inbound: sender verification rejected the message");
         }
       }
       await options.dispatch(parsed, context);
@@ -53,7 +54,7 @@ const dispatchToLunoraFunction = (options) => {
   return async (email, context) => {
     const adminToken = options.adminToken ?? (typeof context.env["LUNORA_ADMIN_TOKEN"] === "string" ? context.env["LUNORA_ADMIN_TOKEN"] : void 0);
     if (adminToken === void 0 || adminToken === "") {
-      throw new Error("@lunora/mail/inbound: missing LUNORA_ADMIN_TOKEN — cannot authorize inbound dispatch to the shard RPC.");
+      throw new LunoraError("INTERNAL", "@lunora/mail/inbound: missing LUNORA_ADMIN_TOKEN — cannot authorize inbound dispatch to the shard RPC.");
     }
     const envelope = {
       args: resolveArgs(email, context),
@@ -68,13 +69,13 @@ const dispatchToLunoraFunction = (options) => {
       method: "POST"
     });
     if (response.ok === false) {
-      throw new Error(`@lunora/mail/inbound: dispatch to \`${options.functionPath}\` failed (HTTP ${String(response.status ?? "?")}).`);
+      throw new LunoraError("INTERNAL", `@lunora/mail/inbound: dispatch to \`${options.functionPath}\` failed (HTTP ${String(response.status ?? "?")}).`);
     }
     const body = await response.json();
     if (typeof body === "object" && body !== null && "error" in body) {
       const { error } = body;
       if (error !== void 0 && error !== null) {
-        throw new Error(`@lunora/mail/inbound: dispatch to \`${options.functionPath}\` returned an error: ${JSON.stringify(error)}`);
+        throw new LunoraError("INTERNAL", `@lunora/mail/inbound: dispatch to \`${options.functionPath}\` returned an error: ${JSON.stringify(error)}`);
       }
     }
   };

package/dist/packem_shared/{createMailer-oEKPAd4J.mjs → createMailer-B4Z_Cgiu.mjs}

@@ -1,9 +1,10 @@
-import { a as assertSafeHeaderValue, b as assertSafeAddresses } from './address-fkXxLKza.mjs';
+import { LunoraError } from '@lunora/errors';
+import { a as assertSafeHeaderValue, b as assertSafeAddresses } from './address-vSUAVU2T.mjs';
 import { isCaptureTransport } from './createCaptureTransport-Crz_8822.mjs';
-import { createCloudflareTransport } from './createCloudflareTransport-yHOVEsZv.mjs';
-import { toQueuedPayload } from './consumeQueuedSend-BEKOdaxU.mjs';
+import { createCloudflareTransport } from './createCloudflareTransport-DXh1nUNi.mjs';
+import { toQueuedPayload } from './consumeQueuedSend-B9hTDOZ6.mjs';
 import renderEmail from './renderEmail-hyS1bpVP.mjs';
-import createResendTransport from './createResendTransport-oNIorpzv.mjs';
+import createResendTransport from './createResendTransport-CMQWjZoi.mjs';
 
 const buildDefaultTransport = (options) => {
   if (options.cloudflareSend) {
@@ -12,11 +13,14 @@ const buildDefaultTransport = (options) => {
   if (options.apiKey) {
     return createResendTransport(options.apiKey, options.from);
   }
-  throw new Error("@lunora/mail: a transport is required — pass `transport`, `cloudflareSend` (Cloudflare Email Workers, the default), or `apiKey` (Resend)");
+  throw new LunoraError(
+    "INTERNAL",
+    "@lunora/mail: a transport is required — pass `transport`, `cloudflareSend` (Cloudflare Email Workers, the default), or `apiKey` (Resend)"
+  );
 };
 const createMailer = (options) => {
   if (!options.from) {
-    throw new Error("@lunora/mail: `from` is required");
+    throw new LunoraError("INTERNAL", "@lunora/mail: `from` is required");
   }
   const transport = options.transport ?? buildDefaultTransport(options);
   const buildPayload = async (options_) => {
@@ -65,7 +69,7 @@ const createMailer = (options) => {
         await transport.send(captured);
         return { queued: true };
       }
-      throw new Error("@lunora/mail: `queue` binding is required for mailer.queue()");
+      throw new LunoraError("INTERNAL", "@lunora/mail: `queue` binding is required for mailer.queue()");
     }
     const payload = await buildPayload(options_);
     await options.queue.send(toQueuedPayload(payload));

package/dist/packem_shared/{createResendTransport-oNIorpzv.mjs → createResendTransport-CMQWjZoi.mjs}

@@ -1,5 +1,5 @@
 import { resendProvider } from '@visulima/email/providers/resend';
-import { r as requireRecipients, t as toProviderEmail, i as interpretSendResult } from './provider-transport-C5CVbjRF.mjs';
+import { r as requireRecipients, t as toProviderEmail, i as interpretSendResult } from './provider-transport-C0xHi3oy.mjs';
 
 const createResendTransport = (apiKey, defaultFrom) => {
   const provider = resendProvider({ apiKey });

package/dist/packem_shared/{parseInboundEmail-Bw9u_1oc.mjs → parseInboundEmail-6lafQBT1.mjs}

@@ -1,5 +1,5 @@
 import PostalMime from 'postal-mime';
-import { a as assertSafeHeaderValue } from './address-fkXxLKza.mjs';
+import { a as assertSafeHeaderValue } from './address-vSUAVU2T.mjs';
 
 const safe = (label, value) => {
   if (value === void 0) {

package/dist/packem_shared/{provider-transport-C5CVbjRF.mjs → provider-transport-C0xHi3oy.mjs}

@@ -1,4 +1,5 @@
-import { t as toAddressList, c as toAddress } from './address-fkXxLKza.mjs';
+import { LunoraError } from '@lunora/errors';
+import { t as toAddressList, c as toAddress } from './address-vSUAVU2T.mjs';
 
 const reasonOf = (rawError) => {
   if (rawError instanceof Error) {
@@ -19,7 +20,7 @@ const requireRecipients = (to) => {
   const list = toAddressList(to);
   const [first] = list ?? [];
   if (!list || first === void 0) {
-    throw new Error("@lunora/mail: at least one recipient is required");
+    throw new LunoraError("INTERNAL", "@lunora/mail: at least one recipient is required");
   }
   return { first, list };
 };
@@ -39,7 +40,7 @@ const toProviderEmail = (payload, defaultFrom, to) => {
 const interpretSendResult = (result) => {
   if (!result.success || !result.data) {
     console.error(`@lunora/mail: send failed: ${reasonOf(result.error)}`);
-    throw new Error("@lunora/mail: send failed");
+    throw new LunoraError("INTERNAL", "@lunora/mail: send failed");
   }
   return { id: result.data.messageId };
 };

package/dist/testing.mjs

@@ -1,3 +1,5 @@
+import { LunoraError } from '@lunora/errors';
+
 const GET_CAPTURED_MAIL_OP = "__lunora_admin__:getCapturedMail";
 const DEFAULT_RPC_PATH = "/_lunora/rpc";
 const TRAILING_SLASH = /\/$/;
@@ -14,7 +16,7 @@ const listCapturedMail = async (options) => {
     method: "POST"
   });
   if (!response.ok) {
-    throw new Error(`@lunora/mail/testing: getCapturedMail failed (HTTP ${String(response.status)})`);
+    throw new LunoraError("INTERNAL", `@lunora/mail/testing: getCapturedMail failed (HTTP ${String(response.status)})`);
   }
   const body = await response.json();
   return body.result?.entries ?? [];
@@ -32,7 +34,8 @@ const waitForMail = async (options) => {
       return match;
     }
     if (Date.now() >= deadline) {
-      throw new Error(
+      throw new LunoraError(
+        "INTERNAL",
         `@lunora/mail/testing: no mail to "${options.to}"${options.subjectMatch === void 0 ? "" : ` matching "${options.subjectMatch}"`} within ${String(timeoutMs)}ms`
       );
     }
@@ -51,7 +54,10 @@ const extractLink = (mail, options = {}) => {
       return link;
     }
   }
-  throw new Error(`@lunora/mail/testing: no link${options.match === void 0 ? "" : ` containing "${options.match}"`} found in the captured message`);
+  throw new LunoraError(
+    "INTERNAL",
+    `@lunora/mail/testing: no link${options.match === void 0 ? "" : ` containing "${options.match}"`} found in the captured message`
+  );
 };
 
 export { extractLink, listCapturedMail, waitForMail };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/mail",
-  "version": "1.0.0-alpha.4",
+  "version": "1.0.0-alpha.6",
   "description": "Email for Lunora: Resend adapter, TSX templates, and queue-backed sends",
   "keywords": [
     "cloudflare",
@@ -54,6 +54,7 @@
     "access": "public"
   },
   "dependencies": {
+    "@lunora/errors": "1.0.0-alpha.1",
     "@react-email/render": "2.0.9",
     "@visulima/email": "1.0.0-alpha.41",
     "postal-mime": "2.7.5"