@nymbalhq/email-mailgun 0.0.0-stage → 1.5.0

package/README.md

@@ -1,3 +1,44 @@
-# Temporary Holding Version
+# @nymbalhq/email-mailgun
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+The `mailgun` email provider for Nymbal. It sends every transactional mail over Mailgun's SMTP relay, and takes
+Mailgun's bounce and complaint webhooks, so a permanent failure or a spam complaint stops alert mail to that address.
+
+```sh
+npm install @nymbalhq/email-mailgun nodemailer
+```
+
+```ts
+// nymbal.config.ts
+commerce: {
+  email: {
+    provider: 'mailgun',
+    config: {
+      from: 'shop@mg.example.com',
+      region: 'us', // 'eu' for a domain in Mailgun's EU region
+      smtp: { user: 'postmaster@mg.example.com', pass: env('MAILGUN_SMTP_PASSWORD') },
+      webhookSigningKey: env('MAILGUN_WEBHOOK_SIGNING_KEY'),
+    },
+  },
+}
+```
+
+- `smtp.host` defaults to `smtp.mailgun.org` (`smtp.eu.mailgun.org` for `region: 'eu'`) and `smtp.port` to 587.
+- `smtp.pass` and `webhookSigningKey` may be left out of the config and saved in the admin's Settings instead.
+- `webhookSigningKey` is the domain's HTTP webhook signing key (Mailgun: Sending, Webhooks). Without it the store
+  refuses every webhook post and the email slot's health is `degraded`.
+
+## Webhooks
+
+In Mailgun, for the sending domain, point these webhooks at `<api origin>/api/webhooks/mailgun`:
+
+- Permanent failure
+- Temporary failure
+- Spam complaint
+
+A permanent failure is recorded as a hard bounce (`mailgun.bounced.v1`) and a complaint as `mailgun.complained.v1`;
+both stop alert mail to the address. A temporary failure is a soft bounce and stops nothing. Any other event posted
+to the same URL is answered 200 and ignored.
+
+Only a post signed with the key, with a timestamp within five minutes of the server's clock, is accepted. Each
+signature is accepted for one event: Mailgun's retry of that event is accepted again, the same signature on any other
+event is refused. That memory is per API process.

package/dist/index.d.ts

@@ -0,0 +1,32 @@
+import { Logger, EmailAdapter, AdapterContext, AdapterSetting } from '@nymbalhq/types';
+
+interface MailgunEmailAdapterConfig {
+    from?: string;
+    /** Mailgun's SMTP relay: the domain's SMTP login, with the host from `region` and port 587 unless given. */
+    smtp?: {
+        host?: string;
+        port?: number;
+        user?: string;
+        pass?: string;
+        secure?: boolean;
+    };
+    region?: 'us' | 'eu';
+    /** The domain's HTTP webhook signing key. Without it every webhook post is refused, and health says so. */
+    webhookSigningKey?: string;
+}
+declare function createMailgunEmailAdapter(deps: {
+    logger: Logger;
+    config?: MailgunEmailAdapterConfig;
+}): EmailAdapter;
+
+/** What this package serves: the kernel refuses it on any other slot or provider. */
+declare const slot = "email";
+declare const provider = "mailgun";
+
+/** The fields the admin's Settings may fill; without the signing key the slot runs, degraded, and refuses every post. */
+declare const settings: AdapterSetting[];
+/** The kernel's entry: `email: { provider: 'mailgun', config: MailgunEmailAdapterConfig }`. */
+declare function createAdapter(ctx: AdapterContext): EmailAdapter;
+
+export { createAdapter, createMailgunEmailAdapter, provider, settings, slot };
+export type { MailgunEmailAdapterConfig };

package/dist/index.js

@@ -0,0 +1,197 @@
+// src/index.ts
+import {
+  ConfigError
+} from "@nymbalhq/types";
+
+// src/mailgun-adapter.ts
+import { createSmtpTransportSender } from "@nymbalhq/email-smtp";
+import {
+  AdapterError,
+  boundedHealthCheck,
+  EVT_CART_ABANDONED,
+  EVT_CUSTOMER_CREATED,
+  EVT_ORDER_PLACED,
+  EVT_ORDER_SHIPPED
+} from "@nymbalhq/types";
+
+// src/webhook.ts
+import { createHmac, timingSafeEqual } from "crypto";
+import { emailFeedbackType } from "@nymbalhq/types";
+var MAILGUN_BOUNCED = emailFeedbackType("mailgun", "bounced");
+var MAILGUN_COMPLAINED = emailFeedbackType("mailgun", "complained");
+var WINDOW_SECONDS = 300;
+var isObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+function notVerified() {
+  return { verified: false, deliveryId: "", events: [] };
+}
+function parse(rawBody) {
+  try {
+    const body = JSON.parse(rawBody.toString("utf8"));
+    return isObject(body) ? body : null;
+  } catch {
+    return null;
+  }
+}
+function signedWith(key, timestamp, token, signature) {
+  const expected = Buffer.from(
+    createHmac("sha256", key).update(timestamp).update(token).digest("hex"),
+    "utf8"
+  );
+  const given = Buffer.from(signature, "utf8");
+  return given.length === expected.length && timingSafeEqual(given, expected);
+}
+function messageIdOf(data) {
+  const message = data["message"];
+  const headers = isObject(message) ? message["headers"] : void 0;
+  const id = isObject(headers) ? headers["message-id"] : void 0;
+  return typeof id === "string" ? id : null;
+}
+function occurredAtOf(data) {
+  const seconds = data["timestamp"];
+  if (typeof seconds !== "number") return null;
+  const at = new Date(seconds * 1e3);
+  return Number.isNaN(at.getTime()) ? null : at.toISOString();
+}
+function eventsOf(data) {
+  const recipient = data["recipient"];
+  const messageId = messageIdOf(data);
+  const occurredAt = occurredAtOf(data);
+  if (data["event"] === "failed") {
+    const bounce = data["severity"] === "permanent" ? "hard" : "soft";
+    return [{ type: MAILGUN_BOUNCED, payload: { recipient, bounce, messageId, occurredAt } }];
+  }
+  if (data["event"] === "complained") {
+    return [{ type: MAILGUN_COMPLAINED, payload: { recipient, messageId, occurredAt } }];
+  }
+  return [];
+}
+function createMailgunWebhookReceiver(signingKey) {
+  const tokens = /* @__PURE__ */ new Map();
+  return async (rawBody) => {
+    const now = Date.now();
+    for (const [token2, entry] of tokens) {
+      if (entry.expiresAt < now) tokens.delete(token2);
+    }
+    const key = signingKey();
+    const body = parse(rawBody);
+    const signature = body?.["signature"];
+    const data = body?.["event-data"];
+    if (key === void 0 || !isObject(signature) || !isObject(data)) return notVerified();
+    const { timestamp, token, signature: given } = signature;
+    if (typeof timestamp !== "string" || typeof token !== "string" || typeof given !== "string") {
+      return notVerified();
+    }
+    if (!signedWith(key, timestamp, token, given)) return notVerified();
+    const signedAt = Number(timestamp);
+    if (!Number.isFinite(signedAt) || Math.abs(now / 1e3 - signedAt) > WINDOW_SECONDS) {
+      return notVerified();
+    }
+    const eventId = data["id"];
+    if (typeof eventId !== "string" || eventId === "") return notVerified();
+    const seen = tokens.get(token);
+    if (seen !== void 0 && seen.eventId !== eventId) return notVerified();
+    if (seen === void 0) {
+      tokens.set(token, { eventId, expiresAt: (signedAt + WINDOW_SECONDS) * 1e3 });
+    }
+    return { verified: true, deliveryId: eventId, events: eventsOf(data) };
+  };
+}
+
+// src/mailgun-adapter.ts
+var RELAY_HOSTS = { us: "smtp.mailgun.org", eu: "smtp.eu.mailgun.org" };
+var RELAY_PORT = 587;
+var NO_KEY = "webhook signing key not set";
+function missingLogin(cfg) {
+  const missing = [];
+  if (typeof cfg.smtp?.user !== "string" || cfg.smtp.user === "") missing.push("smtp.user");
+  if (typeof cfg.smtp?.pass !== "string" || cfg.smtp.pass === "") missing.push("smtp.pass");
+  return missing;
+}
+function loginText(missing) {
+  return `Mailgun SMTP login incomplete: ${missing.join(", ")} not set`;
+}
+function transportConfig(cfg) {
+  const smtp = cfg.smtp;
+  return {
+    ...cfg.from !== void 0 && { from: cfg.from },
+    smtp: {
+      host: smtp?.host ?? RELAY_HOSTS[cfg.region === "eu" ? "eu" : "us"],
+      port: smtp?.port ?? RELAY_PORT,
+      ...smtp?.user !== void 0 && { user: smtp.user },
+      ...smtp?.pass !== void 0 && { pass: smtp.pass },
+      ...smtp?.secure !== void 0 && { secure: smtp.secure }
+    }
+  };
+}
+function createMailgunEmailAdapter(deps) {
+  const log = deps.logger.child({ adapter: "email", provider: "mailgun" });
+  let cfg = deps.config ?? {};
+  const sender = createSmtpTransportSender(transportConfig(cfg), log);
+  const signingKey = () => typeof cfg.webhookSigningKey === "string" && cfg.webhookSigningKey !== "" ? cfg.webhookSigningKey : void 0;
+  const receive = createMailgunWebhookReceiver(signingKey);
+  return {
+    kind: "email",
+    providerName: "mailgun",
+    capabilities: () => ["transactional", "list-sync"],
+    producesEvents: [MAILGUN_BOUNCED, MAILGUN_COMPLAINED],
+    consumesEvents: [EVT_ORDER_PLACED, EVT_ORDER_SHIPPED, EVT_CUSTOMER_CREATED, EVT_CART_ABANDONED],
+    async initialize(rawConfig) {
+      cfg = { ...cfg, ...rawConfig };
+      sender.configure(transportConfig(cfg));
+    },
+    healthCheck: () => boundedHealthCheck(async () => {
+      const smtp = await sender.verify();
+      const missing = missingLogin(cfg);
+      const problems = [
+        ...missing.length > 0 ? [`${loginText(missing)}: Mailgun refuses every send`] : [],
+        ...signingKey() === void 0 ? [`${NO_KEY}: every Mailgun webhook post is refused`] : []
+      ];
+      if (problems.length === 0) return smtp;
+      return smtp.status === "healthy" ? { status: "degraded", detail: problems.join("; ") } : {
+        status: smtp.status,
+        detail: [smtp.detail ?? "SMTP verify failed", ...problems].join("; ")
+      };
+    }),
+    sendTransactional: (params) => {
+      const missing = missingLogin(cfg);
+      if (missing.length > 0) {
+        return Promise.reject(
+          new AdapterError("email.misconfigured", loginText(missing), { context: { missing } })
+        );
+      }
+      return sender.sendTransactional(params);
+    },
+    syncCustomerToList: (customer) => sender.syncCustomerToList(customer),
+    removeCustomerFromList: (customerId) => sender.removeCustomerFromList(customerId),
+    receiveWebhook: (rawBody) => receive(rawBody)
+  };
+}
+
+// src/index.ts
+var slot = "email";
+var provider = "mailgun";
+var settings = [
+  { path: "smtp.user", label: "Mailgun SMTP user", secret: false },
+  { path: "smtp.pass", label: "Mailgun SMTP password", secret: true },
+  { path: "webhookSigningKey", label: "Webhook signing key", secret: true, optional: true }
+];
+function createAdapter(ctx) {
+  if (ctx.slot !== "email") {
+    throw new ConfigError(`@nymbalhq/email-mailgun serves email, not ${ctx.slot}`, {
+      code: "adapter.wrong_slot",
+      context: { slot: ctx.slot }
+    });
+  }
+  return createMailgunEmailAdapter({
+    logger: ctx.logger,
+    config: ctx.config
+  });
+}
+export {
+  createAdapter,
+  createMailgunEmailAdapter,
+  provider,
+  settings,
+  slot
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/mailgun-adapter.ts","../src/webhook.ts"],"sourcesContent":["import {\n  ConfigError,\n  type AdapterContext,\n  type AdapterSetting,\n  type EmailAdapter,\n} from '@nymbalhq/types'\nimport { createMailgunEmailAdapter, type MailgunEmailAdapterConfig } from './mailgun-adapter.js'\n\n/** What this package serves: the kernel refuses it on any other slot or provider. */\nexport const slot = 'email'\nexport const provider = 'mailgun'\n\nexport { createMailgunEmailAdapter, type MailgunEmailAdapterConfig }\n\n/** The fields the admin's Settings may fill; without the signing key the slot runs, degraded, and refuses every post. */\nexport const settings: AdapterSetting[] = [\n  { path: 'smtp.user', label: 'Mailgun SMTP user', secret: false },\n  { path: 'smtp.pass', label: 'Mailgun SMTP password', secret: true },\n  { path: 'webhookSigningKey', label: 'Webhook signing key', secret: true, optional: true },\n]\n\n/** The kernel's entry: `email: { provider: 'mailgun', config: MailgunEmailAdapterConfig }`. */\nexport function createAdapter(ctx: AdapterContext): EmailAdapter {\n  if (ctx.slot !== 'email') {\n    throw new ConfigError(`@nymbalhq/email-mailgun serves email, not ${ctx.slot}`, {\n      code: 'adapter.wrong_slot',\n      context: { slot: ctx.slot },\n    })\n  }\n  return createMailgunEmailAdapter({\n    logger: ctx.logger,\n    config: ctx.config as unknown as MailgunEmailAdapterConfig,\n  })\n}\n","import { createSmtpTransportSender, type SmtpTransportConfig } from '@nymbalhq/email-smtp'\nimport {\n  AdapterError,\n  boundedHealthCheck,\n  EVT_CART_ABANDONED,\n  EVT_CUSTOMER_CREATED,\n  EVT_ORDER_PLACED,\n  EVT_ORDER_SHIPPED,\n  type EmailAdapter,\n  type Logger,\n} from '@nymbalhq/types'\nimport { createMailgunWebhookReceiver, MAILGUN_BOUNCED, MAILGUN_COMPLAINED } from './webhook.js'\n\nexport interface MailgunEmailAdapterConfig {\n  from?: string\n  /** Mailgun's SMTP relay: the domain's SMTP login, with the host from `region` and port 587 unless given. */\n  smtp?: {\n    host?: string\n    port?: number\n    user?: string\n    pass?: string\n    secure?: boolean\n  }\n  region?: 'us' | 'eu'\n  /** The domain's HTTP webhook signing key. Without it every webhook post is refused, and health says so. */\n  webhookSigningKey?: string\n}\n\nconst RELAY_HOSTS = { us: 'smtp.mailgun.org', eu: 'smtp.eu.mailgun.org' } as const\nconst RELAY_PORT = 587\nconst NO_KEY = 'webhook signing key not set'\n\n/** Mailgun refuses an unauthenticated relay, and nodemailer only logs in with both fields: name each one missing. */\nfunction missingLogin(cfg: MailgunEmailAdapterConfig): string[] {\n  const missing: string[] = []\n  if (typeof cfg.smtp?.user !== 'string' || cfg.smtp.user === '') missing.push('smtp.user')\n  if (typeof cfg.smtp?.pass !== 'string' || cfg.smtp.pass === '') missing.push('smtp.pass')\n  return missing\n}\n\nfunction loginText(missing: string[]): string {\n  return `Mailgun SMTP login incomplete: ${missing.join(', ')} not set`\n}\n\nfunction transportConfig(cfg: MailgunEmailAdapterConfig): SmtpTransportConfig {\n  const smtp = cfg.smtp\n  return {\n    ...(cfg.from !== undefined && { from: cfg.from }),\n    smtp: {\n      host: smtp?.host ?? RELAY_HOSTS[cfg.region === 'eu' ? 'eu' : 'us'],\n      port: smtp?.port ?? RELAY_PORT,\n      ...(smtp?.user !== undefined && { user: smtp.user }),\n      ...(smtp?.pass !== undefined && { pass: smtp.pass }),\n      ...(smtp?.secure !== undefined && { secure: smtp.secure }),\n    },\n  }\n}\n\nexport function createMailgunEmailAdapter(deps: {\n  logger: Logger\n  config?: MailgunEmailAdapterConfig\n}): EmailAdapter {\n  const log = deps.logger.child({ adapter: 'email', provider: 'mailgun' })\n  let cfg: MailgunEmailAdapterConfig = deps.config ?? {}\n  const sender = createSmtpTransportSender(transportConfig(cfg), log)\n  const signingKey = () =>\n    typeof cfg.webhookSigningKey === 'string' && cfg.webhookSigningKey !== ''\n      ? cfg.webhookSigningKey\n      : undefined\n  const receive = createMailgunWebhookReceiver(signingKey)\n\n  return {\n    kind: 'email',\n    providerName: 'mailgun',\n    capabilities: () => ['transactional', 'list-sync'],\n    producesEvents: [MAILGUN_BOUNCED, MAILGUN_COMPLAINED],\n    consumesEvents: [EVT_ORDER_PLACED, EVT_ORDER_SHIPPED, EVT_CUSTOMER_CREATED, EVT_CART_ABANDONED],\n    async initialize(rawConfig) {\n      cfg = { ...cfg, ...(rawConfig as MailgunEmailAdapterConfig) }\n      sender.configure(transportConfig(cfg))\n    },\n    healthCheck: () =>\n      boundedHealthCheck(async () => {\n        const smtp = await sender.verify()\n        const missing = missingLogin(cfg)\n        const problems = [\n          ...(missing.length > 0 ? [`${loginText(missing)}: Mailgun refuses every send`] : []),\n          ...(signingKey() === undefined\n            ? [`${NO_KEY}: every Mailgun webhook post is refused`]\n            : []),\n        ]\n        if (problems.length === 0) return smtp\n        // A relay that is down, or refuses the login, keeps its status; each missing field is named beside it.\n        return smtp.status === 'healthy'\n          ? { status: 'degraded', detail: problems.join('; ') }\n          : {\n              status: smtp.status,\n              detail: [smtp.detail ?? 'SMTP verify failed', ...problems].join('; '),\n            }\n      }),\n    sendTransactional: (params) => {\n      const missing = missingLogin(cfg)\n      if (missing.length > 0) {\n        return Promise.reject(\n          new AdapterError('email.misconfigured', loginText(missing), { context: { missing } }),\n        )\n      }\n      return sender.sendTransactional(params)\n    },\n    syncCustomerToList: (customer) => sender.syncCustomerToList(customer),\n    removeCustomerFromList: (customerId) => sender.removeCustomerFromList(customerId),\n    receiveWebhook: (rawBody) => receive(rawBody),\n  }\n}\n","import { createHmac, timingSafeEqual } from 'node:crypto'\nimport { emailFeedbackType, type WebhookDelivery, type WebhookEventDraft } from '@nymbalhq/types'\n\nexport const MAILGUN_BOUNCED = emailFeedbackType('mailgun', 'bounced')\nexport const MAILGUN_COMPLAINED = emailFeedbackType('mailgun', 'complained')\n\n/** How far `signature.timestamp` may be from now, either way. */\nconst WINDOW_SECONDS = 300\n\ntype Json = Record<string, unknown>\n\nconst isObject = (value: unknown): value is Json =>\n  typeof value === 'object' && value !== null && !Array.isArray(value)\n\nfunction notVerified(): WebhookDelivery {\n  return { verified: false, deliveryId: '', events: [] }\n}\n\nfunction parse(rawBody: Buffer): Json | null {\n  try {\n    const body: unknown = JSON.parse(rawBody.toString('utf8'))\n    return isObject(body) ? body : null\n  } catch {\n    return null\n  }\n}\n\n/** Mailgun's HMAC is over `timestamp` then `token`, the strings as posted; `event-data` is not signed. */\nfunction signedWith(key: string, timestamp: string, token: string, signature: string): boolean {\n  const expected = Buffer.from(\n    createHmac('sha256', key).update(timestamp).update(token).digest('hex'),\n    'utf8',\n  )\n  const given = Buffer.from(signature, 'utf8')\n  return given.length === expected.length && timingSafeEqual(given, expected)\n}\n\nfunction messageIdOf(data: Json): string | null {\n  const message = data['message']\n  const headers = isObject(message) ? message['headers'] : undefined\n  const id = isObject(headers) ? headers['message-id'] : undefined\n  return typeof id === 'string' ? id : null\n}\n\n/** `event-data.timestamp`, epoch seconds with a fraction, as ISO 8601; null leaves the kernel to refuse it. */\nfunction occurredAtOf(data: Json): string | null {\n  const seconds = data['timestamp']\n  if (typeof seconds !== 'number') return null\n  const at = new Date(seconds * 1000)\n  return Number.isNaN(at.getTime()) ? null : at.toISOString()\n}\n\n/**\n * A permanent failure is a hard bounce and any other failure soft; events other than failures and complaints carry\n * none. The recipient is handed on as given: the kernel normalises it, and refuses a delivery whose payload is malformed.\n */\nfunction eventsOf(data: Json): WebhookEventDraft[] {\n  const recipient = data['recipient']\n  const messageId = messageIdOf(data)\n  const occurredAt = occurredAtOf(data)\n  if (data['event'] === 'failed') {\n    const bounce = data['severity'] === 'permanent' ? 'hard' : 'soft'\n    return [{ type: MAILGUN_BOUNCED, payload: { recipient, bounce, messageId, occurredAt } }]\n  }\n  if (data['event'] === 'complained') {\n    return [{ type: MAILGUN_COMPLAINED, payload: { recipient, messageId, occurredAt } }]\n  }\n  return []\n}\n\n/**\n * Mailgun's webhook posts, verified. Since the body is unsigned, one captured signature would carry any `event-data`\n * while its timestamp is fresh, so each accepted token is bound to its event id until the timestamp leaves the window:\n * the same token with the same id is Mailgun's retry, with another id a forgery. The binding is per process.\n */\nexport function createMailgunWebhookReceiver(\n  signingKey: () => string | undefined,\n): (rawBody: Buffer) => Promise<WebhookDelivery> {\n  const tokens = new Map<string, { eventId: string; expiresAt: number }>()\n\n  return async (rawBody) => {\n    const now = Date.now()\n    for (const [token, entry] of tokens) {\n      if (entry.expiresAt < now) tokens.delete(token)\n    }\n\n    const key = signingKey()\n    const body = parse(rawBody)\n    const signature = body?.['signature']\n    const data = body?.['event-data']\n    if (key === undefined || !isObject(signature) || !isObject(data)) return notVerified()\n    const { timestamp, token, signature: given } = signature\n    if (typeof timestamp !== 'string' || typeof token !== 'string' || typeof given !== 'string') {\n      return notVerified()\n    }\n    if (!signedWith(key, timestamp, token, given)) return notVerified()\n    const signedAt = Number(timestamp)\n    if (!Number.isFinite(signedAt) || Math.abs(now / 1000 - signedAt) > WINDOW_SECONDS) {\n      return notVerified()\n    }\n    const eventId = data['id']\n    if (typeof eventId !== 'string' || eventId === '') return notVerified()\n    const seen = tokens.get(token)\n    if (seen !== undefined && seen.eventId !== eventId) return notVerified()\n    if (seen === undefined) {\n      tokens.set(token, { eventId, expiresAt: (signedAt + WINDOW_SECONDS) * 1000 })\n    }\n\n    return { verified: true, deliveryId: eventId, events: eventsOf(data) }\n  }\n}\n"],"mappings":";AAAA;AAAA,EACE;AAAA,OAIK;;;ACLP,SAAS,iCAA2D;AACpE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAGK;;;ACVP,SAAS,YAAY,uBAAuB;AAC5C,SAAS,yBAAuE;AAEzE,IAAM,kBAAkB,kBAAkB,WAAW,SAAS;AAC9D,IAAM,qBAAqB,kBAAkB,WAAW,YAAY;AAG3E,IAAM,iBAAiB;AAIvB,IAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,SAAS,cAA+B;AACtC,SAAO,EAAE,UAAU,OAAO,YAAY,IAAI,QAAQ,CAAC,EAAE;AACvD;AAEA,SAAS,MAAM,SAA8B;AAC3C,MAAI;AACF,UAAM,OAAgB,KAAK,MAAM,QAAQ,SAAS,MAAM,CAAC;AACzD,WAAO,SAAS,IAAI,IAAI,OAAO;AAAA,EACjC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,SAAS,WAAW,KAAa,WAAmB,OAAe,WAA4B;AAC7F,QAAM,WAAW,OAAO;AAAA,IACtB,WAAW,UAAU,GAAG,EAAE,OAAO,SAAS,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AAAA,IACtE;AAAA,EACF;AACA,QAAM,QAAQ,OAAO,KAAK,WAAW,MAAM;AAC3C,SAAO,MAAM,WAAW,SAAS,UAAU,gBAAgB,OAAO,QAAQ;AAC5E;AAEA,SAAS,YAAY,MAA2B;AAC9C,QAAM,UAAU,KAAK,SAAS;AAC9B,QAAM,UAAU,SAAS,OAAO,IAAI,QAAQ,SAAS,IAAI;AACzD,QAAM,KAAK,SAAS,OAAO,IAAI,QAAQ,YAAY,IAAI;AACvD,SAAO,OAAO,OAAO,WAAW,KAAK;AACvC;AAGA,SAAS,aAAa,MAA2B;AAC/C,QAAM,UAAU,KAAK,WAAW;AAChC,MAAI,OAAO,YAAY,SAAU,QAAO;AACxC,QAAM,KAAK,IAAI,KAAK,UAAU,GAAI;AAClC,SAAO,OAAO,MAAM,GAAG,QAAQ,CAAC,IAAI,OAAO,GAAG,YAAY;AAC5D;AAMA,SAAS,SAAS,MAAiC;AACjD,QAAM,YAAY,KAAK,WAAW;AAClC,QAAM,YAAY,YAAY,IAAI;AAClC,QAAM,aAAa,aAAa,IAAI;AACpC,MAAI,KAAK,OAAO,MAAM,UAAU;AAC9B,UAAM,SAAS,KAAK,UAAU,MAAM,cAAc,SAAS;AAC3D,WAAO,CAAC,EAAE,MAAM,iBAAiB,SAAS,EAAE,WAAW,QAAQ,WAAW,WAAW,EAAE,CAAC;AAAA,EAC1F;AACA,MAAI,KAAK,OAAO,MAAM,cAAc;AAClC,WAAO,CAAC,EAAE,MAAM,oBAAoB,SAAS,EAAE,WAAW,WAAW,WAAW,EAAE,CAAC;AAAA,EACrF;AACA,SAAO,CAAC;AACV;AAOO,SAAS,6BACd,YAC+C;AAC/C,QAAM,SAAS,oBAAI,IAAoD;AAEvE,SAAO,OAAO,YAAY;AACxB,UAAM,MAAM,KAAK,IAAI;AACrB,eAAW,CAACA,QAAO,KAAK,KAAK,QAAQ;AACnC,UAAI,MAAM,YAAY,IAAK,QAAO,OAAOA,MAAK;AAAA,IAChD;AAEA,UAAM,MAAM,WAAW;AACvB,UAAM,OAAO,MAAM,OAAO;AAC1B,UAAM,YAAY,OAAO,WAAW;AACpC,UAAM,OAAO,OAAO,YAAY;AAChC,QAAI,QAAQ,UAAa,CAAC,SAAS,SAAS,KAAK,CAAC,SAAS,IAAI,EAAG,QAAO,YAAY;AACrF,UAAM,EAAE,WAAW,OAAO,WAAW,MAAM,IAAI;AAC/C,QAAI,OAAO,cAAc,YAAY,OAAO,UAAU,YAAY,OAAO,UAAU,UAAU;AAC3F,aAAO,YAAY;AAAA,IACrB;AACA,QAAI,CAAC,WAAW,KAAK,WAAW,OAAO,KAAK,EAAG,QAAO,YAAY;AAClE,UAAM,WAAW,OAAO,SAAS;AACjC,QAAI,CAAC,OAAO,SAAS,QAAQ,KAAK,KAAK,IAAI,MAAM,MAAO,QAAQ,IAAI,gBAAgB;AAClF,aAAO,YAAY;AAAA,IACrB;AACA,UAAM,UAAU,KAAK,IAAI;AACzB,QAAI,OAAO,YAAY,YAAY,YAAY,GAAI,QAAO,YAAY;AACtE,UAAM,OAAO,OAAO,IAAI,KAAK;AAC7B,QAAI,SAAS,UAAa,KAAK,YAAY,QAAS,QAAO,YAAY;AACvE,QAAI,SAAS,QAAW;AACtB,aAAO,IAAI,OAAO,EAAE,SAAS,YAAY,WAAW,kBAAkB,IAAK,CAAC;AAAA,IAC9E;AAEA,WAAO,EAAE,UAAU,MAAM,YAAY,SAAS,QAAQ,SAAS,IAAI,EAAE;AAAA,EACvE;AACF;;;ADlFA,IAAM,cAAc,EAAE,IAAI,oBAAoB,IAAI,sBAAsB;AACxE,IAAM,aAAa;AACnB,IAAM,SAAS;AAGf,SAAS,aAAa,KAA0C;AAC9D,QAAM,UAAoB,CAAC;AAC3B,MAAI,OAAO,IAAI,MAAM,SAAS,YAAY,IAAI,KAAK,SAAS,GAAI,SAAQ,KAAK,WAAW;AACxF,MAAI,OAAO,IAAI,MAAM,SAAS,YAAY,IAAI,KAAK,SAAS,GAAI,SAAQ,KAAK,WAAW;AACxF,SAAO;AACT;AAEA,SAAS,UAAU,SAA2B;AAC5C,SAAO,kCAAkC,QAAQ,KAAK,IAAI,CAAC;AAC7D;AAEA,SAAS,gBAAgB,KAAqD;AAC5E,QAAM,OAAO,IAAI;AACjB,SAAO;AAAA,IACL,GAAI,IAAI,SAAS,UAAa,EAAE,MAAM,IAAI,KAAK;AAAA,IAC/C,MAAM;AAAA,MACJ,MAAM,MAAM,QAAQ,YAAY,IAAI,WAAW,OAAO,OAAO,IAAI;AAAA,MACjE,MAAM,MAAM,QAAQ;AAAA,MACpB,GAAI,MAAM,SAAS,UAAa,EAAE,MAAM,KAAK,KAAK;AAAA,MAClD,GAAI,MAAM,SAAS,UAAa,EAAE,MAAM,KAAK,KAAK;AAAA,MAClD,GAAI,MAAM,WAAW,UAAa,EAAE,QAAQ,KAAK,OAAO;AAAA,IAC1D;AAAA,EACF;AACF;AAEO,SAAS,0BAA0B,MAGzB;AACf,QAAM,MAAM,KAAK,OAAO,MAAM,EAAE,SAAS,SAAS,UAAU,UAAU,CAAC;AACvE,MAAI,MAAiC,KAAK,UAAU,CAAC;AACrD,QAAM,SAAS,0BAA0B,gBAAgB,GAAG,GAAG,GAAG;AAClE,QAAM,aAAa,MACjB,OAAO,IAAI,sBAAsB,YAAY,IAAI,sBAAsB,KACnE,IAAI,oBACJ;AACN,QAAM,UAAU,6BAA6B,UAAU;AAEvD,SAAO;AAAA,IACL,MAAM;AAAA,IACN,cAAc;AAAA,IACd,cAAc,MAAM,CAAC,iBAAiB,WAAW;AAAA,IACjD,gBAAgB,CAAC,iBAAiB,kBAAkB;AAAA,IACpD,gBAAgB,CAAC,kBAAkB,mBAAmB,sBAAsB,kBAAkB;AAAA,IAC9F,MAAM,WAAW,WAAW;AAC1B,YAAM,EAAE,GAAG,KAAK,GAAI,UAAwC;AAC5D,aAAO,UAAU,gBAAgB,GAAG,CAAC;AAAA,IACvC;AAAA,IACA,aAAa,MACX,mBAAmB,YAAY;AAC7B,YAAM,OAAO,MAAM,OAAO,OAAO;AACjC,YAAM,UAAU,aAAa,GAAG;AAChC,YAAM,WAAW;AAAA,QACf,GAAI,QAAQ,SAAS,IAAI,CAAC,GAAG,UAAU,OAAO,CAAC,8BAA8B,IAAI,CAAC;AAAA,QAClF,GAAI,WAAW,MAAM,SACjB,CAAC,GAAG,MAAM,yCAAyC,IACnD,CAAC;AAAA,MACP;AACA,UAAI,SAAS,WAAW,EAAG,QAAO;AAElC,aAAO,KAAK,WAAW,YACnB,EAAE,QAAQ,YAAY,QAAQ,SAAS,KAAK,IAAI,EAAE,IAClD;AAAA,QACE,QAAQ,KAAK;AAAA,QACb,QAAQ,CAAC,KAAK,UAAU,sBAAsB,GAAG,QAAQ,EAAE,KAAK,IAAI;AAAA,MACtE;AAAA,IACN,CAAC;AAAA,IACH,mBAAmB,CAAC,WAAW;AAC7B,YAAM,UAAU,aAAa,GAAG;AAChC,UAAI,QAAQ,SAAS,GAAG;AACtB,eAAO,QAAQ;AAAA,UACb,IAAI,aAAa,uBAAuB,UAAU,OAAO,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAAA,QACtF;AAAA,MACF;AACA,aAAO,OAAO,kBAAkB,MAAM;AAAA,IACxC;AAAA,IACA,oBAAoB,CAAC,aAAa,OAAO,mBAAmB,QAAQ;AAAA,IACpE,wBAAwB,CAAC,eAAe,OAAO,uBAAuB,UAAU;AAAA,IAChF,gBAAgB,CAAC,YAAY,QAAQ,OAAO;AAAA,EAC9C;AACF;;;ADxGO,IAAM,OAAO;AACb,IAAM,WAAW;AAKjB,IAAM,WAA6B;AAAA,EACxC,EAAE,MAAM,aAAa,OAAO,qBAAqB,QAAQ,MAAM;AAAA,EAC/D,EAAE,MAAM,aAAa,OAAO,yBAAyB,QAAQ,KAAK;AAAA,EAClE,EAAE,MAAM,qBAAqB,OAAO,uBAAuB,QAAQ,MAAM,UAAU,KAAK;AAC1F;AAGO,SAAS,cAAc,KAAmC;AAC/D,MAAI,IAAI,SAAS,SAAS;AACxB,UAAM,IAAI,YAAY,6CAA6C,IAAI,IAAI,IAAI;AAAA,MAC7E,MAAM;AAAA,MACN,SAAS,EAAE,MAAM,IAAI,KAAK;AAAA,IAC5B,CAAC;AAAA,EACH;AACA,SAAO,0BAA0B;AAAA,IAC/B,QAAQ,IAAI;AAAA,IACZ,QAAQ,IAAI;AAAA,EACd,CAAC;AACH;","names":["token"]}

package/package.json

@@ -1,6 +1,51 @@
 {
   "name": "@nymbalhq/email-mailgun",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "1.5.0",
+  "description": "Mailgun email for Nymbal: the `mailgun` email provider (SMTP relay, bounce and complaint webhooks)",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/nymbalhq/nymbal.git",
+    "directory": "packages/adapters/email/mailgun"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@nymbalhq/email-smtp": "^1.5.0"
+  },
+  "peerDependencies": {
+    "@nymbalhq/types": "^1.5.0",
+    "nodemailer": "^6.9.16"
+  },
+  "devDependencies": {
+    "@nymbalhq/types": "1.5.0",
+    "@types/nodemailer": "^6.4.17",
+    "@typescript/native": "npm:typescript@^7.0.2",
+    "fast-check": "^4.10.2",
+    "nodemailer": "^6.9.16",
+    "tsup": "^9.0.0",
+    "typescript": "npm:@typescript/typescript6@^6.0.2",
+    "vitest": "^3.0.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc -p tsconfig.json --noEmit --rootDir ../../../.."
+  }
 }