@molecule/api-emails-ses 1.0.0 → 1.0.2

package/README.md

@@ -0,0 +1,313 @@
+<!--
+AUTO-GENERATED — DO NOT EDIT THIS FILE.
+Generated by `mlcl sync-docs` from the package's src/index.ts JSDoc + mlcl/registry.json.
+Edits here are overwritten on the next commit (molecule's pre-commit hook regenerates).
+To change this document, edit the module-level JSDoc in src/index.ts.
+Generated: 2026-08-16T14:04:37.385Z
+-->
+
+# @molecule/api-emails-ses
+
+> **Auto-generated, AI-first package reference** for the [molecule.dev](https://molecule.dev) ecosystem.
+> It is written to be read by coding agents as much as by people, and is generated from this
+> package's source — edit `src/index.ts` JSDoc, not this file.
+
+AWS SES email provider for molecule.dev.
+
+## Quick Start
+
+```typescript
+import { setTransport } from '@molecule/api-emails'
+import { provider } from '@molecule/api-emails-ses'
+
+setTransport(provider)
+```
+
+## Type
+
+`provider`
+
+## Installation
+
+```bash
+npm install @molecule/api-emails-ses @aws-sdk/client-sesv2 @aws-sdk/credential-provider-node @molecule/api-bond @molecule/api-emails @molecule/api-proxy-agent @molecule/api-secrets nodemailer
+npm install -D @types/nodemailer
+```
+
+## API
+
+### Interfaces
+
+#### `EmailMessage`
+
+Email message options.
+
+```typescript
+interface EmailMessage {
+  /**
+   * Sender address.
+   */
+  from: string | EmailAddress
+  /**
+   * Recipient(s).
+   */
+  to: string | EmailAddress | (string | EmailAddress)[]
+  /**
+   * CC recipient(s).
+   */
+  cc?: string | EmailAddress | (string | EmailAddress)[]
+  /**
+   * BCC recipient(s).
+   */
+  bcc?: string | EmailAddress | (string | EmailAddress)[]
+  /**
+   * Reply-to address.
+   */
+  replyTo?: string | EmailAddress
+  /**
+   * Email subject.
+   */
+  subject: string
+  /**
+   * Plain text body.
+   */
+  text?: string
+  /**
+   * HTML body.
+   */
+  html?: string
+  /**
+   * File attachments.
+   */
+  attachments?: EmailAttachment[]
+  /**
+   * i18n key for the subject (for client-side translation).
+   */
+  subjectKey?: string
+  /**
+   * i18n key for the plain text body (for client-side translation).
+   */
+  textKey?: string
+  /**
+   * i18n key for the HTML body (for client-side translation).
+   */
+  htmlKey?: string
+}
+```
+
+#### `EmailSendResult`
+
+Result of sending an email.
+
+```typescript
+interface EmailSendResult {
+  /**
+   * Whether the email was accepted for delivery.
+   */
+  accepted: string[]
+  /**
+   * Addresses that were rejected.
+   */
+  rejected: string[]
+  /**
+   * Message ID from the provider.
+   */
+  messageId?: string
+  /**
+   * Raw response from the provider.
+   */
+  response?: string
+}
+```
+
+#### `EmailTransport`
+
+Email transport interface.
+
+All email providers must implement this interface.
+
+```typescript
+interface EmailTransport {
+  /**
+   * Sends an email message.
+   * @returns The send result.
+   */
+  sendMail(message: EmailMessage): Promise<EmailSendResult>
+}
+```
+
+### Functions
+
+#### `getSesClient()`
+
+Returns the AWS SESv2 client, constructing it from the environment on the
+FIRST call and memoizing thereafter.
+
+Construction is deferred to first use — NOT module load — so a region resolved
+into `process.env` AFTER this module is imported (late secrets resolution via
+a secrets bond) is honored: `AWS_SES_REGION` (default `us-east-1`) and the
+optional `AWS_SES_ENDPOINT` are read at send time, not frozen at import.
+Reading them at import instead pinned an empty/default region and every send
+failed in the WRONG region ("Email address is not verified"). Credentials
+still resolve lazily via the AWS default chain (`AWS_ACCESS_KEY_ID`/
+`AWS_SECRET_ACCESS_KEY`, shared config, or an instance role) at send time, so
+a missing credential surfaces then as a descriptive AWS SDK error.
+
+nodemailer 7 requires the SESv2 client + `SendEmailCommand` pair — the old
+`{ ses, aws }` (@aws-sdk/client-ses) shape made `createTransport` THROW
+("legacy SES configuration"), breaking every real consumer of this bond.
+
+```typescript
+function getSesClient(): SESv2Client
+```
+
+**Returns:** The configured SESv2 client.
+
+#### `sendMail(message)`
+
+Sends an email through AWS SES via nodemailer. The SES client and transport
+are configured lazily from the environment on the first call, so late-resolved
+region/credentials are honored.
+
+```typescript
+function sendMail(message: EmailMessage): Promise<EmailSendResult>
+```
+
+- `message` — The email message (to, from, subject, text/html, attachments).
+
+**Returns:** Send result with accepted/rejected addresses and message ID.
+
+### Constants
+
+#### `email` _(deprecated)_
+
+Raw nodemailer transport alias.
+
+```typescript
+const email: { sendMail: (msg: nodemailer.SendMailOptions) => Promise<any> }
+```
+
+#### `emailsSesSecretDefinitions`
+
+Secret definitions required by the AWS SES email bond.
+
+```typescript
+const emailsSesSecretDefinitions: SecretDefinition[]
+```
+
+#### `provider`
+
+The SES email provider implementing the `EmailTransport` interface.
+
+```typescript
+const provider: EmailTransport
+```
+
+#### `transport` _(deprecated)_
+
+Raw nodemailer transport for direct access. Lazily configured on first send.
+
+```typescript
+const transport: { sendMail: (msg: nodemailer.SendMailOptions) => Promise<any> }
+```
+
+## Core Interface
+
+Implements `@molecule/api-emails` interface.
+
+## Bond Wiring
+
+Setup function to register this provider with the core interface:
+
+```typescript
+import { setTransport } from '@molecule/api-emails'
+import { provider } from '@molecule/api-emails-ses'
+
+export function setupEmailsSes(): void {
+  setTransport(provider)
+}
+```
+
+## Injection Notes
+
+### Requirements
+
+Peer dependencies:
+
+- `@molecule/api-bond` ^1.0.1
+- `@molecule/api-emails` ^1.0.1
+- `@molecule/api-secrets` ^1.0.1
+
+### Environment Variables
+
+- `AWS_ACCESS_KEY_ID` _(required)_ — AWS access key ID
+  - Setup: Create an IAM user with the needed policy (SES/S3/SQS) and create an access key under Security credentials.
+  - Get it here: [https://console.aws.amazon.com/iam/](https://console.aws.amazon.com/iam/)
+  - Example: `AKIA...`
+- `AWS_SECRET_ACCESS_KEY` _(required)_ — AWS secret access key
+  - Setup: Shown once when creating the IAM access key — store it immediately.
+  - Get it here: [https://console.aws.amazon.com/iam/](https://console.aws.amazon.com/iam/)
+- `AWS_SES_REGION` _(required)_ — AWS SES region
+  - Setup: The AWS region where SES is set up (and out of sandbox for production sending).
+  - Example: `us-east-1`
+
+### Runtime Dependencies
+
+- `@aws-sdk/client-sesv2`
+- `@aws-sdk/credential-provider-node`
+- `@molecule/api-bond`
+- `@molecule/api-emails`
+- `@molecule/api-proxy-agent`
+- `@molecule/api-secrets`
+- `nodemailer`
+
+- **Configuration is lazy and env-driven**: the SES client is constructed on
+  the FIRST send — NOT at import — so `AWS_SES_REGION` (default `us-east-1`)
+  and the optional `AWS_SES_ENDPOINT` are read at send time. A region resolved
+  into env AFTER this module is imported (late secrets resolution via a
+  secrets bond) is honored; reading it at import instead froze the
+  default/empty region and sends failed in the WRONG region ("Email address
+  is not verified"). Credentials resolve lazily via the AWS default chain
+  (`AWS_ACCESS_KEY_ID`/`AWS_SECRET_ACCESS_KEY`, shared config, or an instance
+  role), so they may arrive after import too.
+- **No fail-fast**: because credentials can legitimately come from an instance
+  role or shared config (not env), missing credentials are not pre-checked —
+  they surface at first send as a descriptive AWS SDK error ("Could not load
+  credentials…"), not a tagged config error naming the env var.
+- New SES accounts are sandboxed: both the sender identity AND every
+  recipient must be verified until production access is granted.
+- On success `accepted` is mapped from `envelope.to` — nodemailer's SES
+  transport never sets `accepted`/`rejected` (the `@types/nodemailer` typings
+  claiming otherwise are drift); a resolved send means SES accepted the
+  message for every envelope recipient.
+- **Runs behind an outbound proxy when `HTTPS_PROXY` is set.** The AWS SDK v3
+  builds its own agent and reads no proxy variable, so on a host whose only
+  egress path is a proxy every send used to fail with a bare connection
+  error. The client now gets a CONNECT-capable agent through its own
+  `requestHandler` hook (`@molecule/api-proxy-agent`, resolved against
+  `AWS_SES_ENDPOINT` when set and the regional endpoint otherwise, so
+  `NO_PROXY` is honoured). With no proxy configured nothing is passed and the
+  SDK keeps its default handler. Allowlist `*.amazonaws.com` on the proxy.
+
+## E2E Tests
+
+Integration checklist — drive the real UI (live preview, no mocks). The
+sandbox CAPTURES outbound email instead of sending — read each message with
+the `read_activity` tool (filter type 'email'); the verification/reset link
+is in its payload. Never mock the send or modify production code to expose
+it. Adapt each item to this app's actual screens/flows, and check every box
+off one by one. A box you can't check is an integration bug to fix — not a
+skip:
+
+- [ ] Each email-triggering flow (signup verification, password-reset request,
+      invites/notifications the app defines) confirms the send in the UI ("check
+      your inbox") and a message actually reaches the transport.
+- [ ] The password-reset round-trip completes: request a reset → open the
+      captured message → follow its single-use link → set a new password → log
+      in with it (and the old password no longer works).
+- [ ] The message body contains a LINK, never the raw token/secret, and renders
+      with the app's real name/content (no `undefined` placeholders).
+- [ ] Requesting a reset for an unknown email shows the same neutral UI response
+      as a known one (no account-existence oracle).
+- [ ] Account emails go only to the account's own address — no UI or endpoint
+      lets an unauthenticated caller send to an arbitrary address.

package/dist/index.d.ts

@@ -24,6 +24,14 @@
  *   transport never sets `accepted`/`rejected` (the `@types/nodemailer` typings
  *   claiming otherwise are drift); a resolved send means SES accepted the
  *   message for every envelope recipient.
+ * - **Runs behind an outbound proxy when `HTTPS_PROXY` is set.** The AWS SDK v3
+ *   builds its own agent and reads no proxy variable, so on a host whose only
+ *   egress path is a proxy every send used to fail with a bare connection
+ *   error. The client now gets a CONNECT-capable agent through its own
+ *   `requestHandler` hook (`@molecule/api-proxy-agent`, resolved against
+ *   `AWS_SES_ENDPOINT` when set and the regional endpoint otherwise, so
+ *   `NO_PROXY` is honoured). With no proxy configured nothing is passed and the
+ *   SDK keeps its default handler. Allowlist `*.amazonaws.com` on the proxy.
  *
  * @example
  * ```typescript

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA"}

package/dist/index.js

@@ -24,6 +24,14 @@
  *   transport never sets `accepted`/`rejected` (the `@types/nodemailer` typings
  *   claiming otherwise are drift); a resolved send means SES accepted the
  *   message for every envelope recipient.
+ * - **Runs behind an outbound proxy when `HTTPS_PROXY` is set.** The AWS SDK v3
+ *   builds its own agent and reads no proxy variable, so on a host whose only
+ *   egress path is a proxy every send used to fail with a bare connection
+ *   error. The client now gets a CONNECT-capable agent through its own
+ *   `requestHandler` hook (`@molecule/api-proxy-agent`, resolved against
+ *   `AWS_SES_ENDPOINT` when set and the regional endpoint otherwise, so
+ *   `NO_PROXY` is honoured). With no proxy configured nothing is passed and the
+ *   SDK keeps its default handler. Allowlist `*.amazonaws.com` on the proxy.
  *
  * @example
  * ```typescript

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA"}

package/dist/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,cAAc,CAAA;AACrB,OAAO,EAAoB,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAErE,OAAO,UAAU,MAAM,YAAY,CAAA;AAGnC,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAWzF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,YAAY,QAAO,WAS/B,CAAA;AAkBD;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ,GAAU,SAAS,YAAY,KAAG,OAAO,CAAC,eAAe,CAsB7E,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,QAAQ,EAAE,cAEtB,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,SAAS;oBACJ,UAAU,CAAC,eAAe;CAC3C,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,KAAK;oBAPA,UAAU,CAAC,eAAe;CAOd,CAAA"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,cAAc,CAAA;AACrB,OAAO,EAAoB,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAErE,OAAO,UAAU,MAAM,YAAY,CAAA;AAGnC,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAYzF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,YAAY,QAAO,WAqB/B,CAAA;AAkBD;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ,GAAU,SAAS,YAAY,KAAG,OAAO,CAAC,eAAe,CAsB7E,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,QAAQ,EAAE,cAEtB,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,SAAS;oBACJ,UAAU,CAAC,eAAe;CAC3C,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,KAAK;oBAPA,UAAU,CAAC,eAAe;CAOd,CAAA"}

package/dist/provider.js

@@ -14,6 +14,7 @@ import { SendEmailCommand, SESv2Client } from '@aws-sdk/client-sesv2';
 import { defaultProvider } from '@aws-sdk/credential-provider-node';
 import nodemailer from 'nodemailer';
 import { getLogger } from '@molecule/api-bond';
+import { getProxyAgents } from '@molecule/api-proxy-agent';
 const logger = getLogger();
 /**
  * The lazily-constructed AWS SESv2 client and nodemailer transport. Both are
@@ -43,10 +44,22 @@ let _nodemailerTransport;
  */
 export const getSesClient = () => {
     if (!_ses) {
+        const region = process.env.AWS_SES_REGION || 'us-east-1';
+        const endpoint = process.env.AWS_SES_ENDPOINT;
+        // The AWS SDK v3 builds its own `https.Agent` and reads no proxy variable
+        // (`NODE_USE_ENV_PROXY` does not reach it either — it never goes through
+        // Node's proxy-aware paths), so on a host whose only egress path is a proxy
+        // every send failed with a bare connection error. `requestHandler` takes
+        // NodeHttpHandler OPTIONS, so the agent goes in with no `@smithy/*`
+        // dependency. Resolved against the endpoint actually in use so a custom
+        // endpoint's own NO_PROXY entry is honoured; undefined when nothing is
+        // proxied, leaving the SDK's default handler in place.
+        const proxy = getProxyAgents(endpoint || `https://email.${region}.amazonaws.com`);
         _ses = new SESv2Client({
-            region: process.env.AWS_SES_REGION || 'us-east-1',
+            region,
             credentialDefaultProvider: defaultProvider,
-            ...(process.env.AWS_SES_ENDPOINT ? { endpoint: process.env.AWS_SES_ENDPOINT } : {}),
+            ...(endpoint ? { endpoint } : {}),
+            ...(proxy ? { requestHandler: proxy } : {}),
         });
     }
     return _ses;

package/dist/provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,sEAAsE;AACtE,2EAA2E;AAC3E,oCAAoC;AACpC,OAAO,cAAc,CAAA;AACrB,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAA;AACnE,OAAO,UAAU,MAAM,YAAY,CAAA;AAEnC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAG9C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;AAE1B;;;GAGG;AACH,IAAI,IAA6B,CAAA;AACjC,IAAI,oBAAwD,CAAA;AAE5D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAgB,EAAE;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,IAAI,WAAW,CAAC;YACrB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,WAAW;YACjD,yBAAyB,EAAE,eAAe;YAC1C,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpF,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,GAA2B,EAAE;IAChD,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,oBAAoB,GAAG,UAAU,CAAC,eAAe,CAAC;YAChD,GAAG,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,gBAAgB,EAAE;SACD,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,oBAAoB,CAAA;AAC7B,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAqB,EAA4B,EAAE;IAChF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC,QAAQ,CAAC,OAAqC,CAAC,CAAA;QAEnF,OAAO;YACL,mEAAmE;YACnE,wEAAwE;YACxE,0EAA0E;YAC1E,yEAAyE;YACzE,gEAAgE;YAChE,4DAA4D;YAC5D,oEAAoE;YACpE,6BAA6B;YAC7B,QAAQ,EAAE,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAa;YACpE,QAAQ,EAAE,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAa;YAC7C,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAA;QAC1C,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAmB;IACtC,QAAQ;CACT,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,QAAQ,EAAE,CAAC,GAA+B,EAAE,EAAE,CAAC,YAAY,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;CAC5E,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,SAAS,CAAA"}
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,sEAAsE;AACtE,2EAA2E;AAC3E,oCAAoC;AACpC,OAAO,cAAc,CAAA;AACrB,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAA;AACnE,OAAO,UAAU,MAAM,YAAY,CAAA;AAEnC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAE9C,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAE1D,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;AAE1B;;;GAGG;AACH,IAAI,IAA6B,CAAA;AACjC,IAAI,oBAAwD,CAAA;AAE5D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAgB,EAAE;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,WAAW,CAAA;QACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAA;QAC7C,0EAA0E;QAC1E,yEAAyE;QACzE,4EAA4E;QAC5E,yEAAyE;QACzE,oEAAoE;QACpE,wEAAwE;QACxE,uEAAuE;QACvE,uDAAuD;QACvD,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,IAAI,iBAAiB,MAAM,gBAAgB,CAAC,CAAA;QACjF,IAAI,GAAG,IAAI,WAAW,CAAC;YACrB,MAAM;YACN,yBAAyB,EAAE,eAAe;YAC1C,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,YAAY,GAAG,GAA2B,EAAE;IAChD,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,oBAAoB,GAAG,UAAU,CAAC,eAAe,CAAC;YAChD,GAAG,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,gBAAgB,EAAE;SACD,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,oBAAoB,CAAA;AAC7B,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAqB,EAA4B,EAAE;IAChF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC,QAAQ,CAAC,OAAqC,CAAC,CAAA;QAEnF,OAAO;YACL,mEAAmE;YACnE,wEAAwE;YACxE,0EAA0E;YAC1E,yEAAyE;YACzE,gEAAgE;YAChE,4DAA4D;YAC5D,oEAAoE;YACpE,6BAA6B;YAC7B,QAAQ,EAAE,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAa;YACpE,QAAQ,EAAE,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAa;YAC7C,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAA;QAC1C,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAmB;IACtC,QAAQ;CACT,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,QAAQ,EAAE,CAAC,GAA+B,EAAE,EAAE,CAAC,YAAY,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;CAC5E,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,SAAS,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@molecule/api-emails-ses",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "AWS SES email provider for molecule.dev.",
   "type": "module",
   "main": "dist/index.js",
@@ -17,7 +17,8 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ],
   "keywords": [
     "molecule",
@@ -30,19 +31,20 @@
   "dependencies": {
     "@aws-sdk/client-sesv2": "3.1098.0",
     "@aws-sdk/credential-provider-node": "3.972.75",
+    "@molecule/api-proxy-agent": "1.1.0",
     "nodemailer": "9.0.3"
   },
   "devDependencies": {
-    "@molecule/api-bond": "1.0.0",
+    "@molecule/api-bond": "1.0.1",
     "@types/node": "26.1.2",
     "@types/nodemailer": "8.0.1",
     "typescript": "6.0.3",
     "vitest": "4.1.10"
   },
   "peerDependencies": {
-    "@molecule/api-bond": "^1.0.0",
-    "@molecule/api-emails": "^1.0.0",
-    "@molecule/api-secrets": "^1.0.0"
+    "@molecule/api-bond": "^1.0.1",
+    "@molecule/api-emails": "^1.0.1",
+    "@molecule/api-secrets": "^1.0.1"
   },
   "repository": {
     "type": "git",