@mavogel/awscdk-rootmail 0.1.4 → 0.1.6

package/node_modules/nodemailer/dist/esm/mime-node/index.js

@@ -61,6 +61,23 @@ function normalizeDomain(domain, toUnicode) {
     }
     return toUnicode ? punycode.toUnicode(domain) : punycode.toASCII(domain);
 }
+/**
+ * Removes the characters that must never reach a multipart delimiter line.
+ *
+ * A line break splits the delimiter, so the boundary declared in the header can never
+ * match it again and the parts go out as body lines instead. The other C0 controls and
+ * DEL do not split anything but must not be written either: RFC 5321 does not allow a
+ * NUL in DATA at all, and an MTA or a scanner that stops at one reads a different
+ * message than a client that does not, which is the same parser disagreement a split
+ * delimiter creates. Both sides are cleaned together, since the declared value and the
+ * delimiters come from this one result.
+ *
+ * @param value Value to clean
+ * @return Value with every control character removed
+ */
+function _stripBoundaryControls(value) {
+    return value.replace(/[\x00-\x1f\x7f]+/g, '');
+}
 /**
  * Creates a new mime tree node. Assumes 'multipart/*' as the content type
  * if it is a branch, anything else counts as leaf. If rootNode is missing from
@@ -81,10 +98,11 @@ class MimeNode {
         this.nodeCounter = 0;
         options = options || {};
         /**
-         * shared part of the unique multipart boundary
+         * shared part of the unique multipart boundary. Control characters are dropped
+         * here rather than at the delimiter, see _stripBoundaryControls
          */
-        this.baseBoundary = options.baseBoundary || crypto.randomBytes(8).toString('hex');
-        this.boundaryPrefix = options.boundaryPrefix || '--_NmP';
+        this.baseBoundary = _stripBoundaryControls(options.baseBoundary || crypto.randomBytes(8).toString('hex'));
+        this.boundaryPrefix = _stripBoundaryControls(options.boundaryPrefix || '--_NmP');
         this.disableFileAccess = !!options.disableFileAccess;
         this.disableUrlAccess = !!options.disableUrlAccess;
         this.normalizeHeaderKey = options.normalizeHeaderKey;
@@ -916,6 +934,7 @@ class MimeNode {
      *
      * @param flag Either 'disableFileAccess' or 'disableUrlAccess'
      * @return true if this node or an ancestor closed that access
+     * @internal
      */
     _accessDisabled(flag) {
         // eslint-disable-next-line @typescript-eslint/no-this-alias
@@ -933,6 +952,7 @@ class MimeNode {
      *
      * @param content Node content
      * @returns Stream object
+     * @internal
      */
     _getStream(content) {
         let contentStream;
@@ -999,19 +1019,41 @@ class MimeNode {
      *
      * @param addresses Addresses to be parsed
      * @return An array of address objects
+     * @internal
      */
     _parseAddresses(addresses) {
-        // Collected into one list as we go. concat.apply spreads the entries into arguments
-        // and throws a RangeError once a recipient array is long enough to pass the
-        // argument limit, which a large Bcc list reaches on its own.
         const flattened = [];
-        [].concat(addresses).forEach(address => {
+        // Nested arrays are flattened iteratively. concat.apply throws once a recipient list
+        // is long enough to pass the argument limit, and an array handed to addressparser is
+        // stringified, which recurses once per nesting level and exhausts the call stack on
+        // a deep enough value. Every array is walked once, which also ends a self-referential
+        // input
+        const seen = new WeakSet();
+        const stack = [];
+        const enter = (list) => {
+            if (!seen.has(list)) {
+                seen.add(list);
+                stack.push({ list, pos: 0 });
+            }
+        };
+        enter(Array.isArray(addresses) ? addresses : [addresses]);
+        while (stack.length) {
+            const frame = stack[stack.length - 1];
+            if (frame.pos >= frame.list.length) {
+                stack.pop();
+                continue;
+            }
+            const address = frame.list[frame.pos++];
+            if (Array.isArray(address)) {
+                enter(address);
+                continue;
+            }
             if (address && address.address) {
                 const normalized = this._normalizeAddress(address.address);
                 if (normalized === address.address && typeof address.name === 'string') {
                     // there is nothing to rewrite, so there is nothing to keep off the original
                     flattened.push(address);
-                    return;
+                    continue;
                 }
                 // rewriting would land on the object the caller passed in and might
                 // still hold a reference to, so rewrite a copy of it instead. An own
@@ -1021,13 +1063,13 @@ class MimeNode {
                 copy.address = normalized;
                 copy.name = address.name || '';
                 flattened.push(copy);
-                return;
+                continue;
             }
             const parsed = this._normalizeParsedAddresses(addressparser(address));
             for (let i = 0; i < parsed.length; i++) {
                 flattened.push(parsed[i]);
             }
-        });
+        }
         return flattened;
     }
     /**
@@ -1040,6 +1082,7 @@ class MimeNode {
      *
      * @param parsed An array of address objects, as returned by addressparser
      * @return The same array, with every address normalized
+     * @internal
      */
     _normalizeParsedAddresses(parsed) {
         // addressparser builds these objects, so no caller holds a reference to rewrite around
@@ -1062,6 +1105,7 @@ class MimeNode {
      *
      * @param addresses Addresses to be parsed
      * @return An array of address objects
+     * @internal
      */
     _parseEnvelopeAddresses(addresses) {
         return this._parseAddresses(addresses).map(entry => {
@@ -1076,6 +1120,7 @@ class MimeNode {
      *
      * @param key Key to be normalized
      * @return key in Camel-Case form
+     * @internal
      */
     _normalizeHeaderKey(key) {
         key = (key || '')
@@ -1098,13 +1143,26 @@ class MimeNode {
      * Doesn't return anything, modifies object argument instead.
      *
      * @param structured Parsed header value for 'Content-Type' key
+     * @internal
      */
     _handleContentType(structured) {
         this.contentType = structured.value.trim().toLowerCase();
         this.multipart = /^multipart\//i.test(this.contentType) ? this.contentType.substr(this.contentType.indexOf('/') + 1) : false;
         if (this.multipart) {
+            // The declared value and the delimiters are assigned from the same expression
+            // here, so whatever the header emitter then does with it, the two sides cannot
+            // disagree about which characters the boundary is made of.
+            //
+            // Stripping runs before the fallback rather than over the whole chain: a
+            // boundary made only of control characters would otherwise strip to '' and
+            // leave the node declaring no boundary and streaming bare '--' delimiters.
+            // _generateBoundary cleans what it builds, but this is the one place the boundary
+            // is written, so it cleans the value it is about to write rather than trusting
+            // where it came from. MimeNode is exported and subclassable, so the generator is
+            // not necessarily the one below. Stripping twice costs nothing, it is idempotent.
+            const declared = _stripBoundaryControls(structured.params.boundary || this.boundary || '');
             this.boundary = structured.params.boundary =
-                structured.params.boundary || this.boundary || this._generateBoundary();
+                declared || _stripBoundaryControls(this._generateBoundary());
         }
         else {
             this.boundary = false;
@@ -1114,15 +1172,19 @@ class MimeNode {
      * Generates a multipart boundary value
      *
      * @return boundary value
+     * @internal
      */
     _generateBoundary() {
-        return this.rootNode.boundaryPrefix + '-' + this.rootNode.baseBoundary + '-Part_' + this._nodeId;
+        // baseBoundary and boundaryPrefix are public, so they may hold something the
+        // constructor never cleaned, and the -Part_ suffix keeps the result non empty
+        return _stripBoundaryControls(this.rootNode.boundaryPrefix + '-' + this.rootNode.baseBoundary) + '-Part_' + this._nodeId;
     }
     /**
      * Encodes a header value for use in the generated rfc2822 email.
      *
      * @param key Header key
      * @param value Header value
+     * @internal
      */
     _encodeHeaderValue(key, value) {
         key = this._normalizeHeaderKey(key);
@@ -1195,6 +1257,7 @@ class MimeNode {
      * @param addresses An array of address objects
      * @param [uniqueList] An array to be populated with addresses
      * @return address string
+     * @internal
      */
     _convertAddresses(addresses, uniqueList, seenAddresses) {
         const values = [];
@@ -1239,6 +1302,7 @@ class MimeNode {
      *
      * @param address An array of address objects
      * @return address string
+     * @internal
      */
     _normalizeAddress(address) {
         address = (address || '')
@@ -1285,6 +1349,7 @@ class MimeNode {
      *
      * @param user Local part of an address
      * @return Local part as a dot-atom or as a quoted-string
+     * @internal
      */
     _normalizeLocalPart(user) {
         if (DOT_ATOM.test(user) || QUOTED_STRING.test(user)) {
@@ -1297,6 +1362,7 @@ class MimeNode {
      *
      * @param name Name part of an address
      * @returns Mime word encoded string if needed
+     * @internal
      */
     _encodeAddressName(name) {
         if (!/^[\w ]*$/.test(name)) {
@@ -1316,6 +1382,7 @@ class MimeNode {
      *
      * @param value Header value to encode
      * @returns Mime word encoded string if needed
+     * @internal
      */
     _encodeHeaderText(value) {
         return /[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/.test(value)
@@ -1328,6 +1395,7 @@ class MimeNode {
      *
      * @param name Name part of an address
      * @returns Mime word encoded string if needed
+     * @internal
      */
     _encodeWords(value) {
         // set encodeAll parameter to true even though it is against the recommendation of RFC2047,
@@ -1340,6 +1408,7 @@ class MimeNode {
      *
      * @param value Value to check for
      * @return either 'Q' or 'B'
+     * @internal
      */
     _getTextEncoding(value) {
         value = (value || '').toString();
@@ -1367,6 +1436,7 @@ class MimeNode {
      * Generates a message id
      *
      * @return Random Message-ID value
+     * @internal
      */
     _generateMessageId() {
         return ('<' +

package/node_modules/nodemailer/dist/esm/mime-node/last-newline.d.ts

@@ -1,7 +1,5 @@
-import { Transform, type TransformCallback } from 'node:stream';
+import { Transform } from 'node:stream';
 export default class LastNewline extends Transform {
     lastByte: number | false;
     constructor();
-    _transform(chunk: Buffer, encoding: BufferEncoding, done: TransformCallback): void;
-    _flush(done: TransformCallback): void;
 }

package/node_modules/nodemailer/dist/esm/mime-node/last-newline.js

@@ -4,6 +4,7 @@ export default class LastNewline extends Transform {
         super();
         this.lastByte = false;
     }
+    /** @internal */
     _transform(chunk, encoding, done) {
         if (chunk.length) {
             this.lastByte = chunk[chunk.length - 1];
@@ -11,6 +12,7 @@ export default class LastNewline extends Transform {
         this.push(chunk);
         done();
     }
+    /** @internal */
     _flush(done) {
         if (this.lastByte === 0x0a) {
             return done();

package/node_modules/nodemailer/dist/esm/mime-node/le-unix.d.ts

@@ -1,4 +1,4 @@
-import { Transform, type TransformCallback, type TransformOptions } from 'node:stream';
+import { Transform, type TransformOptions } from 'node:stream';
 /**
  * Ensures that only <LF> is used for linebreaks
  *
@@ -6,8 +6,4 @@ import { Transform, type TransformCallback, type TransformOptions } from 'node:s
  */
 export default class LeUnix extends Transform {
     constructor(options?: TransformOptions);
-    /**
-     * Escapes dots
-     */
-    _transform(chunk: Buffer, encoding: BufferEncoding, done: TransformCallback): void;
 }

package/node_modules/nodemailer/dist/esm/mime-node/le-unix.js

@@ -10,6 +10,7 @@ export default class LeUnix extends Transform {
     }
     /**
      * Escapes dots
+     * @internal
      */
     _transform(chunk, encoding, done) {
         let buf;

package/node_modules/nodemailer/dist/esm/mime-node/le-windows.d.ts

@@ -1,4 +1,4 @@
-import { Transform, type TransformCallback, type TransformOptions } from 'node:stream';
+import { Transform, type TransformOptions } from 'node:stream';
 /**
  * Ensures that only <CR><LF> sequences are used for linebreaks
  *
@@ -7,8 +7,4 @@ import { Transform, type TransformCallback, type TransformOptions } from 'node:s
 export default class LeWindows extends Transform {
     lastByte: number | false;
     constructor(options?: TransformOptions);
-    /**
-     * Escapes dots
-     */
-    _transform(chunk: Buffer, encoding: BufferEncoding, done: TransformCallback): void;
 }

package/node_modules/nodemailer/dist/esm/mime-node/le-windows.js

@@ -11,6 +11,7 @@ export default class LeWindows extends Transform {
     }
     /**
      * Escapes dots
+     * @internal
      */
     _transform(chunk, encoding, done) {
         let buf;

package/node_modules/nodemailer/dist/esm/nodemailer.d.ts

@@ -25,7 +25,7 @@ export interface TestAccount {
     pop3: TestAccountService;
     web: string;
     /** true if the account can also receive external mail */
-    mxEnabled?: boolean;
+    mxEnabled?: boolean | undefined;
     [key: string]: unknown;
 }
 /**
@@ -77,7 +77,7 @@ export declare function createTestAccount(apiUrl?: string | false | null): Promi
  * @returns URL of the message in the Ethereal web interface, or false if the response does not carry one
  */
 export declare function getTestMessageUrl(info?: {
-    response?: string | Buffer | null;
+    response?: string | Buffer | null | undefined;
 } | false | null): string | false;
 declare const nodemailer: {
     createTransport: typeof createTransport;

package/node_modules/nodemailer/dist/esm/package-info.d.ts

@@ -1,3 +1,3 @@
 export declare const name = "nodemailer";
-export declare const version = "10.0.0";
+export declare const version = "10.0.10";
 export declare const homepage = "https://nodemailer.com/";

package/node_modules/nodemailer/dist/esm/package-info.js

@@ -1,4 +1,4 @@
 // Generated by scripts/build.js from package.json. Do not edit by hand.
 export const name = 'nodemailer';
-export const version = '10.0.0';
+export const version = '10.0.10';
 export const homepage = 'https://nodemailer.com/';

package/node_modules/nodemailer/dist/esm/qp/index.d.ts

@@ -1,4 +1,4 @@
-import { Transform, type TransformCallback } from 'node:stream';
+import { Transform } from 'node:stream';
 export declare function encode(buffer: Buffer | string): string;
 /**
  * Adds soft line breaks to a Quoted-Printable string
@@ -13,7 +13,7 @@ export declare function wrap(str: string, lineLength?: number): string;
  */
 export interface QPEncoderOptions {
     /** Maximum length for lines, set to false to disable wrapping */
-    lineLength?: number | false;
+    lineLength?: number | false | undefined;
 }
 /**
  * Creates a transform stream for encoding data to Quoted-Printable encoding
@@ -26,8 +26,5 @@ export declare class Encoder extends Transform {
     options: QPEncoderOptions;
     inputBytes: number;
     outputBytes: number;
-    _curLine: string;
     constructor(options?: QPEncoderOptions);
-    _transform(chunk: Buffer | string, encoding: BufferEncoding | 'buffer', done: TransformCallback): void;
-    _flush(done: TransformCallback): void;
 }

package/node_modules/nodemailer/dist/esm/qp/index.js

@@ -152,6 +152,7 @@ export class Encoder extends Transform {
         this.inputBytes = 0;
         this.outputBytes = 0;
     }
+    /** @internal */
     _transform(chunk, encoding, done) {
         let qp;
         if (encoding !== 'buffer') {
@@ -180,6 +181,7 @@ export class Encoder extends Transform {
         }
         done();
     }
+    /** @internal */
     _flush(done) {
         if (this._curLine) {
             this.outputBytes += this._curLine.length;

package/node_modules/nodemailer/dist/esm/sendmail-transport/index.d.ts

@@ -1,4 +1,3 @@
-import { spawn } from 'node:child_process';
 import type { Logger } from '../shared/index.js';
 import type { MimeNodeEnvelope } from '../mime-node/index.js';
 import type MailMessage from '../mailer/mail-message.js';
@@ -8,13 +7,13 @@ import type { default as Mail, SentMessageInfo, SendMailOptions, TransportOption
  */
 export interface SendmailTransportOptions extends TransportOptions {
     /** Selects this transport in createTransport, the binary itself is set with `path` */
-    sendmail?: boolean | string;
+    sendmail?: boolean | string | undefined;
     /** Path to the sendmail binary, defaults to 'sendmail' */
-    path?: string;
+    path?: string | undefined;
     /** Either 'windows' or 'unix', the line ending of the message piped to sendmail */
-    newline?: string;
+    newline?: string | undefined;
     /** Arguments for the sendmail binary, replaces the default '-f <sender>' */
-    args?: string[];
+    args?: string[] | undefined;
 }
 /**
  * The value the Sendmail transport hands to the send callback
@@ -41,7 +40,6 @@ export interface SendmailSentMessageInfo extends SentMessageInfo {
  */
 declare class SendmailTransport {
     mailer: Mail<SendmailSentMessageInfo>;
-    _spawn: typeof spawn;
     options: SendmailTransportOptions;
     name: string;
     version: string;

package/node_modules/nodemailer/dist/esm/ses-transport/index.d.ts

@@ -12,9 +12,9 @@ export interface SESTransportOptions extends TransportOptions {
         /** SESv2Client instance. Its config.region provider is resolved for the domain of the returned Message-ID */
         sesClient: {
             config?: {
-                region?: () => Promise<string>;
+                region?: (() => Promise<string>) | undefined;
                 [key: string]: any;
-            };
+            } | undefined;
             send(command: unknown): Promise<any>;
         };
         /** SendEmailCommand class, constructed with the SendEmailCommandInput of every message */

package/node_modules/nodemailer/dist/esm/ses-transport/index.js

@@ -24,7 +24,11 @@ function tagSesError(err) {
 class SESTransport extends EventEmitter {
     constructor(options) {
         super();
-        options = options || {};
+        if (!options || !options.SES || !options.SES.sesClient) {
+            const error = new Error('Missing SES configuration, expecting { sesClient, SendEmailCommand } from @aws-sdk/client-sesv2, see https://nodemailer.com/transports/ses/');
+            error.code = errors.ECONFIG;
+            throw error;
+        }
         this.options = options;
         this.ses = this.options.SES;
         this.name = 'SESTransport';

package/node_modules/nodemailer/dist/esm/shared/index.d.ts

@@ -9,39 +9,36 @@ export { isProtoKey, copyOwnKeys };
  */
 export interface ResolveHostnameOptions {
     /** Hostname or IP address to resolve */
-    host?: string;
+    host?: string | undefined;
     /** Server name for TLS, used as the host when no host is set */
-    servername?: string;
+    servername?: string | undefined;
     /** Count loopback interfaces when checking which address families are usable */
-    allowInternalNetworkInterfaces?: boolean;
+    allowInternalNetworkInterfaces?: boolean | undefined;
     /** How long a resolved value stays cached, in milliseconds (default 5 minutes) */
-    dnsTtl?: number;
+    dnsTtl?: number | undefined;
     /** Query timeout in milliseconds, passed to dns.Resolver */
-    timeout?: number;
+    timeout?: number | undefined;
     /** Number of query attempts, passed to dns.Resolver */
-    tries?: number;
+    tries?: number | undefined;
 }
 /**
  * Resolved value handed to the resolveHostname callback
  */
 export interface ResolvedHostname {
     /** Server name to use for TLS, false when an IP literal was given without one */
-    servername?: string | false;
+    servername?: string | false | undefined;
     /** Address to connect to, picked at random from the resolved addresses */
-    host?: string | null;
-    /** All resolved addresses, for connection fallback support */
-    _addresses?: string[];
+    host?: string | null | undefined;
     /** Whether the value came from the DNS cache */
-    cached?: boolean;
+    cached?: boolean | undefined;
     /** The resolver error when a cached value was used because of it */
-    error?: Error;
+    error?: Error | undefined;
 }
 /**
  * Resolved addresses as stored in the DNS cache
  */
 export interface DnsCacheValue {
     addresses: string[];
-    servername: string | false;
 }
 /**
  * A DNS cache entry
@@ -49,26 +46,26 @@ export interface DnsCacheValue {
 export interface DnsCacheEntry {
     value: DnsCacheValue;
     /** Expiration time as a timestamp, entries without one never expire */
-    expires?: number;
+    expires?: number | undefined;
 }
 /**
  * Configuration object parsed from a connection url. Query parameters become
  * top level keys, `tls.*` parameters go into `tls`
  */
 export interface ConnectionUrlOptions {
-    secure?: boolean;
-    direct?: boolean;
-    port?: number;
-    host?: string;
+    secure?: boolean | undefined;
+    direct?: boolean | undefined;
+    port?: number | undefined;
+    host?: string | undefined;
     /** Well-known service name from the ?service= query parameter */
-    service?: string;
+    service?: string | undefined;
     auth?: {
         user: string;
         pass: string;
-    };
+    } | undefined;
     tls?: {
         [key: string]: unknown;
-    };
+    } | undefined;
     [key: string]: unknown;
 }
 /**
@@ -77,12 +74,12 @@ export interface ConnectionUrlOptions {
  */
 export interface LogEntry {
     /** 'server' or 'client' for SMTP transaction lines */
-    tnx?: string;
+    tnx?: string | undefined;
     /** Session id */
-    sid?: string;
+    sid?: string | undefined;
     /** Connection id */
-    cid?: string | number;
-    level?: string;
+    cid?: string | number | undefined;
+    level?: string | undefined;
     [key: string]: any;
 }
 export type LogLevel = 'trace' | 'debug' | 'info' | 'warn' | 'error' | 'fatal';
@@ -105,7 +102,7 @@ export interface ExternalLogger {
  */
 export interface GetLoggerOptions {
     /** A bunyan compatible logger, true for the default console logger, false or unset for no logging */
-    logger?: ExternalLogger | boolean;
+    logger?: ExternalLogger | boolean | undefined;
 }
 /**
  * The bunyan compatible logger interface returned by getLogger
@@ -137,9 +134,9 @@ export interface ParsedDataURI {
  */
 export interface ResolveContentOptions {
     /** Reject content that points to a file path */
-    disableFileAccess?: boolean;
+    disableFileAccess?: boolean | undefined;
     /** Reject content that points to a URL */
-    disableUrlAccess?: boolean;
+    disableUrlAccess?: boolean | undefined;
 }
 /**
  * An object value resolveContent understands. A plain string or Buffer value is returned as
@@ -148,23 +145,21 @@ export interface ResolveContentOptions {
  */
 export interface ContentDescriptor {
     /** The content itself, a string, a Buffer or a readable stream */
-    content?: string | Buffer | Readable;
+    content?: string | Buffer | Readable | undefined;
     /** Encoding of a string `content`, it is decoded into a Buffer unless it is utf8 or ascii */
-    encoding?: string;
+    encoding?: string | undefined;
     /** File path, http(s) URL or data URI to read the content from */
-    path?: string;
+    path?: string | undefined;
     /** URL to fetch the content from */
-    href?: string;
+    href?: string | undefined;
     /** Request headers for a URL fetch */
-    httpHeaders?: OutgoingHttpHeaders;
+    httpHeaders?: OutgoingHttpHeaders | undefined;
     /** TLS settings for a URL fetch, see nmfetch */
     tls?: {
         [key: string]: any;
-    };
+    } | undefined;
 }
 export type ResolveContentCallback = (err: Error | null, value?: any) => void;
-export declare const _lastCacheCleanup: () => number;
-export declare const _resetCacheCleanup: () => void;
 export declare let networkInterfaces: NodeJS.Dict<os.NetworkInterfaceInfo[]> | undefined;
 export declare const dnsCache: Map<string, DnsCacheEntry>;
 export declare const resolveHostname: (options: ResolveHostnameOptions | undefined, callback: (err: Error | null, result?: ResolvedHostname) => void) => void;
@@ -175,7 +170,6 @@ export declare const resolveHostname: (options: ResolveHostnameOptions | undefin
  * @return Configuration object
  */
 export declare const parseConnectionUrl: (str?: string | null) => ConnectionUrlOptions;
-export declare const _logFunc: (logger: ExternalLogger, level: string, defaults: LogEntry | undefined, data: LogEntry | undefined, message?: string, ...args: any[]) => void;
 /**
  * Returns a bunyan-compatible logger interface. Uses either provided logger or
  * creates a default console logger