@mavogel/awscdk-rootmail 0.1.24 → 0.1.25

package/.jsii

@@ -14,7 +14,7 @@
     "@aws-sdk/client-ses": "^3.1152.0",
     "@aws-sdk/client-ssm": "^3.1152.0",
     "cdk-nag": "^3.0.1",
-    "mailparser": "^3.9.40",
+    "mailparser": "^3.9.46",
     "uuid": "^14.0.3"
   },
   "dependencies": {
@@ -9620,6 +9620,6 @@
       "symbolId": "src/ses-receive:SESReceiveProps"
     }
   },
-  "version": "0.1.24",
-  "fingerprint": "VsXTNX+CbDEHj6QL4Wk23mv6Fvtf5IcmZ+EaZ822B68="
+  "version": "0.1.25",
+  "fingerprint": "V07+5iN9P3qTtRjecyrSIsgSV/99qpcRilC+wyKH8FQ="
 }

package/lib/rootmail.js

@@ -11,7 +11,7 @@ const ses_receive_1 = require("./ses-receive");
  * Rootmail construct
  */
 class Rootmail extends constructs_1.Construct {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@mavogel/awscdk-rootmail.Rootmail", version: "0.1.24" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@mavogel/awscdk-rootmail.Rootmail", version: "0.1.25" };
     /**
      * The name parameter in SSM to store the domain name server.
      */

package/lib/ses-receive.js

@@ -11,7 +11,7 @@ const ses_receipt_ruleset_activation_1 = require("./ses-receipt-ruleset-activati
  * SES Receive construct
  */
 class SESReceive extends constructs_1.Construct {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@mavogel/awscdk-rootmail.SESReceive", version: "0.1.24" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@mavogel/awscdk-rootmail.SESReceive", version: "0.1.25" };
     constructor(scope, id, props) {
         super(scope, id);
         const filteredEmailSubjects = props.filteredEmailSubjects || [];

package/node_modules/@zone-eu/mailsplit/README.md

@@ -31,7 +31,7 @@ Where
 
 -   **options** is an optional options object
     -   **options.ignoreEmbedded** (boolean, defaults to false) if true then treat message/rfc822 node as normal leaf node and do not try to parse it
-    -   **options.maxHeadSize** (number, defaults to Infinity) limits message header size in bytes
+    -   **options.maxHeadSize** (number, defaults to 1 MiB) limits the header size of a MIME node in bytes, every header line counting for at least 64 bytes
 
 #### Events
 

package/node_modules/@zone-eu/mailsplit/lib/headers.js

@@ -365,10 +365,16 @@ class Headers {
             return;
         }
 
-        let rawLines = this.headers
-            .toString('binary')
-            .replace(/[\r\n]+$/, '')
-            .split(/\r?\n/);
+        let raw = this.headers.toString('binary');
+
+        // Trailing line breaks go with an index scan. /[\r\n]+$/ retried a run of carriage
+        // returns from every position in it, quadratic on a header line made of them
+        let end = raw.length;
+        while (end > 0 && (raw.charCodeAt(end - 1) === 0x0a || raw.charCodeAt(end - 1) === 0x0d)) {
+            end--;
+        }
+
+        let rawLines = raw.slice(0, end).split(/\r?\n/);
 
         // Single forward pass. Splicing folded lines out of the source array in place was
         // quadratic on a header block with many continuation lines.

package/node_modules/@zone-eu/mailsplit/lib/message-splitter.js

@@ -488,13 +488,14 @@ class MessageSplitter extends Transform {
     }
 
     /**
-     * Checks the header bytes collected for the current node against maxHeadSize.
+     * Checks the header bytes collected for the current node against maxHeadSize. See
+     * MimeNode#headerCost.
      *
      * @param {number} [extra] Bytes that belong to the header block but are not stored yet.
      * @returns {(Error & {code?: string}) | null} Error object if the limit was exceeded.
      */
     checkHeadSize(extra) {
-        if (this.node._headerlen + (extra || 0) > this.maxHeadSize) {
+        if (this.node.headerCost(extra) > this.maxHeadSize) {
             return maxLenError('Max header size for a MIME node exceeded');
         }
         return null;
@@ -630,12 +631,12 @@ class MessageSplitter extends Transform {
 
         switch (this.state) {
             case HEAD: {
-                this.node.addHeaderChunk(line);
+                let endsBlock = this.node.addHeaderChunk(line);
                 let headSizeError = this.checkHeadSize();
                 if (headSizeError) {
                     return next(headSizeError);
                 }
-                if (final || (line.length === 1 && line[0] === 0x0a) || (line.length === 2 && line[0] === 0x0d && line[1] === 0x0a)) {
+                if (final || endsBlock) {
                     let currentNode = this.node;
 
                     currentNode.parseHeaders();

package/node_modules/@zone-eu/mailsplit/lib/mime-node.d.ts

@@ -23,6 +23,7 @@ declare class MimeNode implements MimeNodeShape {
 
     /** Length, in bytes, of the raw header block collected for this node. */
     _headerlen: number;
+    _headerCost: number;
 
     /** Multipart subtype such as `mixed` or `alternative`, or `false` for leaf nodes. */
     multipart: string | false;
@@ -88,7 +89,9 @@ declare class MimeNode implements MimeNodeShape {
      * @param line Raw header line bytes; falsy values are ignored.
      * @returns Nothing.
      */
-    addHeaderChunk(line?: Buffer | false): void;
+    addHeaderChunk(line?: Buffer | false): boolean;
+    /** What the header lines count for against maxHeadSize, every line at least 64 bytes */
+    headerCost(extra?: number): number;
 
     /**
      * Parses collected header bytes and populates MIME metadata fields.

package/node_modules/@zone-eu/mailsplit/lib/mime-node.js

@@ -18,6 +18,10 @@ const pathlib = require('path');
 
 const Libmime = /** @type {any} */ (libmime.Libmime);
 
+// The least a header line counts for against maxHeadSize. A parsed line costs a fixed
+// overhead on top of its bytes, so 1 MiB of header is at most 16k lines
+const HEADER_LINE_MIN_COST = 64;
+
 /**
  * Removes everything from the first `(` to the last `)` of each line, the same result as
  * `value.replace(/\(.*\)/g, '')`, but in linear time. The regex backtracks quadratically
@@ -117,6 +121,7 @@ class MimeNode {
         /** @type {Buffer[]} */
         this._headersLines = [];
         this._headerlen = 0;
+        this._headerCost = 0;
 
         /** @type {StructuredHeader | false} */
         this._parsedContentType = false;
@@ -171,14 +176,28 @@ class MimeNode {
 
     /**
      * @param {Buffer | false} [line]
-     * @returns {void}
+     * @returns {boolean} Whether the line is the empty line that ends the header block.
      */
     addHeaderChunk(line) {
         if (!line) {
-            return;
+            return false;
         }
         this._headersLines.push(line);
         this._headerlen += line.length;
+        let endsBlock = (line.length === 1 && line[0] === 0x0a) || (line.length === 2 && line[0] === 0x0d && line[1] === 0x0a);
+        // the empty line that ends the block costs its bytes, every other line at least the floor
+        this._headerCost += endsBlock ? line.length : Math.max(line.length, HEADER_LINE_MIN_COST);
+        return endsBlock;
+    }
+
+    /**
+     * What the header lines of this node count for against maxHeadSize, see HEADER_LINE_MIN_COST.
+     *
+     * @param {number} [extra] Bytes of a header line that is not stored yet.
+     * @returns {number} The cost in bytes.
+     */
+    headerCost(extra) {
+        return this._headerCost + (extra ? Math.max(extra, HEADER_LINE_MIN_COST) : 0);
     }
 
     /**
@@ -189,6 +208,8 @@ class MimeNode {
             return;
         }
         this.headers = new Headers(Buffer.concat(this._headersLines, this._headerlen), this.config);
+        // the views held the input chunks alive, the block lives on in the copy
+        this._headersLines = [];
         let headers = this.headers;
 
         let dispositionHeader = headers.getFirst('Content-Disposition');

package/node_modules/@zone-eu/mailsplit/lib/types.d.ts

@@ -83,6 +83,8 @@ export interface MimeNode {
 
     /** Length, in bytes, of the raw header block collected for this node. */
     _headerlen: number;
+    _headerCost: number;
+    headerCost(extra?: number): number;
 
     /** Multipart subtype such as `mixed` or `alternative`, or `false` for leaf nodes. */
     multipart: string | false;
@@ -140,7 +142,7 @@ export interface MimeNode {
      * @param line Raw header line bytes; falsy values are ignored.
      * @returns Nothing.
      */
-    addHeaderChunk(line?: Buffer | false): void;
+    addHeaderChunk(line?: Buffer | false): boolean;
 
     /**
      * Parses collected header bytes and populates MIME metadata fields.

package/node_modules/@zone-eu/mailsplit/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@zone-eu/mailsplit",
-    "version": "5.4.23",
+    "version": "5.4.26",
     "description": "Split email messages into an object stream",
     "main": "index.js",
     "types": "index.d.ts",
@@ -15,9 +15,9 @@
     "author": "Andris Reinman",
     "license": "(MIT OR EUPL-1.1+)",
     "dependencies": {
-        "libbase64": "1.3.3",
-        "libmime": "5.4.9",
-        "libqp": "2.1.3"
+        "libbase64": "1.4.1",
+        "libmime": "5.5.1",
+        "libqp": "3.0.1"
     },
     "devDependencies": {
         "@types/eslint": "9.6.1",

package/node_modules/libbase64/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## [1.4.1](https://github.com/nodemailer/libbase64/compare/v1.4.0...v1.4.1) (2026-10-18)
+
+
+### Bug Fixes
+
+* skip characters outside of latin1 in decode() ([a46d7d0](https://github.com/nodemailer/libbase64/commit/a46d7d05306d5cb8c569135d1d80f90baf0cb66b))
+
+## [1.4.0](https://github.com/nodemailer/libbase64/compare/v1.3.3...v1.4.0) (2026-10-18)
+
+
+### Features
+
+* rewrite in TypeScript with ES module and CommonJS builds ([27f40e1](https://github.com/nodemailer/libbase64/commit/27f40e19e994f44460800fa195c04f1172abe013))
+
+
+### Bug Fixes
+
+* **decoder:** skip 8-bit input bytes instead of reading them as base64 characters ([27f40e1](https://github.com/nodemailer/libbase64/commit/27f40e19e994f44460800fa195c04f1172abe013))
+* **encoder:** encode a plain Uint8Array instead of its comma separated byte values ([27f40e1](https://github.com/nodemailer/libbase64/commit/27f40e19e994f44460800fa195c04f1172abe013))
+
 ## [1.3.3](https://github.com/nodemailer/libbase64/compare/v1.3.2...v1.3.3) (2026-10-14)
 
 

package/node_modules/libbase64/README.md

@@ -1,6 +1,6 @@
 # libbase64
 
-Encode and decode base64 strings.
+Encode and decode base64 strings. Written in TypeScript, published with both ES module and CommonJS builds and type declarations. Requires Node.js 20 or newer.
 
 ## Usage
 
@@ -14,6 +14,14 @@ Require in your script
 const libbase64 = require('libbase64');
 ```
 
+or import it as an ES module
+
+```javascript
+import libbase64 from 'libbase64';
+// or
+import { encode, decode, wrap, Encoder, Decoder } from 'libbase64';
+```
+
 ### Encode values
 
 Encode Buffer objects or unicode strings with
@@ -22,7 +30,7 @@ Encode Buffer objects or unicode strings with
 
 Where
 
--   **val** is a Buffer or an unicode string
+- **val** is a Buffer, an Uint8Array or an unicode string
 
 **Example**
 
@@ -31,6 +39,23 @@ libbase64.encode('jõgeva');
 // asO1Z2V2YQ==
 ```
 
+### Decode values
+
+Decode base64 strings to a Buffer with
+
+    libbase64.decode(str) → Buffer
+
+Where
+
+- **str** is a base64 encoded string. Line breaks and other characters outside of the base64 alphabet are ignored. Input made of several separately padded segments (eg. every line padded on its own) is decoded segment by segment
+
+**Example**
+
+```javascript
+libbase64.decode('asO1Z2V2YQ==').toString();
+// jõgeva
+```
+
 ### Wrap encoded values
 
 To enforce soft line breaks on lines longer than selected amount of characters, use `wrap`
@@ -39,8 +64,8 @@ To enforce soft line breaks on lines longer than selected amount of characters,
 
 Where
 
--   **str** is a base64 encoded string
--   **lineLength** (defaults to 76) is the maximum allowed line length
+- **str** is a base64 encoded string
+- **lineLength** (defaults to 76) is the maximum allowed line length
 
 **Example**
 
@@ -63,12 +88,14 @@ Create new Encoder Stream with
 
 Where
 
--   **options** is the optional stream options object
--   **options.lineLength** (Number) if you want to use any other line length than the default 76
-    characters (or set to `false` to turn the soft wrapping off completely)
--   **options.skipStartBytes** (Number) Optional. How many bytes to skip from output (default to 0)
--   **options.limitOutbutBytes** (Number) Optional. How many bytes to return (defaults to all bytes)
--   **options.startPadding** (String) Optional. Fills first line with provided padding string. Usually goes together with skipStartBytes to get line folding correct.
+- **options** is the optional stream options object
+- **options.lineLength** (Number) if you want to use any other line length than the default 76
+  characters (or set to `false` to turn the soft wrapping off completely)
+- **options.skipStartBytes** (Number) Optional. How many bytes to skip from output (default to 0)
+- **options.limitOutputBytes** (Number) Optional. How many bytes to return (defaults to all bytes). The misspelled `limitOutbutBytes` that earlier versions documented is still accepted
+- **options.startPadding** (String) Optional. Fills first line with provided padding string. Usually goes together with skipStartBytes to get line folding correct.
+
+The output is the same as `libbase64.wrap(libbase64.encode(input), lineLength)`, no matter how the input is split into chunks.
 
 **Example**
 
@@ -78,7 +105,7 @@ The following example script reads in a file, encodes it to base64 and saves the
 const libbase64 = require('libbase64');
 const fs = require('fs');
 const source = fs.createReadStream('source.txt');
-const encoded = fs.createReadStream('encoded.txt');
+const encoded = fs.createWriteStream('encoded.txt');
 const encoder = new libbase64.Encoder();
 
 source.pipe(encoder).pipe(encoded);
@@ -92,7 +119,7 @@ Create new Decoder Stream with
 
 Where
 
--   **options** is the optional stream options object
+- **options** is the optional stream options object
 
 **Example**
 
@@ -102,7 +129,7 @@ The following example script reads in a file in base64 encoding, decodes it and
 const libbase64 = require('libbase64');
 const fs = require('fs');
 const encoded = fs.createReadStream('encoded.txt');
-const dest = fs.createReadStream('dest.txt');
+const dest = fs.createWriteStream('dest.txt');
 const decoder = new libbase64.Decoder();
 
 encoded.pipe(decoder).pipe(dest);

package/node_modules/libbase64/dist/cjs/libbase64.d.ts

@@ -0,0 +1,80 @@
+import { Buffer } from 'node:buffer';
+import { Transform } from 'node:stream';
+/**
+ * Encodes a Buffer into a base64 encoded string
+ *
+ * @param buffer Buffer or unicode string to convert
+ * @returns base64 encoded string
+ */
+export declare function encode(buffer: Buffer | Uint8Array | string): string;
+/**
+ * Decodes a base64 encoded string to a Buffer object
+ *
+ * @param str base64 encoded string
+ * @returns Decoded value
+ */
+export declare function decode(str: string | Buffer | null | undefined): Buffer;
+/**
+ * Adds soft line breaks to a base64 string
+ *
+ * @param str base64 encoded string that might need line wrapping
+ * @param [lineLength=76] Maximum allowed length for a line
+ * @returns Soft-wrapped base64 encoded string
+ */
+export declare function wrap(str: string | Buffer | null | undefined, lineLength?: number | string | null): string;
+/**
+ * Options for the base64 encoder stream
+ */
+export interface EncoderOptions {
+    /** Maximum length for lines, 76 by default. Set to false to disable wrapping */
+    lineLength?: number | string | false | undefined;
+    /** Number of output bytes to drop from the start */
+    skipStartBytes?: number | undefined;
+    /** Maximum number of output bytes to emit */
+    limitOutputBytes?: number | undefined;
+    /**
+     * Misspelled name of `limitOutputBytes` that earlier versions read, still accepted
+     *
+     * @deprecated Use `limitOutputBytes`
+     */
+    limitOutbutBytes?: number | undefined;
+    /** Characters to prepend to the first line before wrapping, usually used together with `skipStartBytes` */
+    startPadding?: string | undefined;
+}
+/**
+ * Options for the base64 decoder stream, none are used at the moment
+ */
+export interface DecoderOptions {
+    [key: string]: unknown;
+}
+/**
+ * Creates a transform stream for encoding data to base64 encoding
+ *
+ * The output is the same as `wrap(encode(input), lineLength)` no matter how the input is split into
+ * chunks: every line but the last one ends with a line break, the last one does not
+ */
+export declare class Encoder extends Transform {
+    options: EncoderOptions;
+    skipStartBytes: number;
+    limitOutputBytes: number;
+    inputBytes: number;
+    outputBytes: number;
+    constructor(options?: EncoderOptions);
+}
+/**
+ * Creates a transform stream for decoding base64 encoded strings
+ */
+export declare class Decoder extends Transform {
+    options: DecoderOptions;
+    inputBytes: number;
+    outputBytes: number;
+    constructor(options?: DecoderOptions);
+}
+declare const libbase64: {
+    encode: typeof encode;
+    decode: typeof decode;
+    wrap: typeof wrap;
+    Encoder: typeof Encoder;
+    Decoder: typeof Decoder;
+};
+export default libbase64;