@private.me/xbind 3.0.1 → 3.0.2

package/dist-standalone/cjs/email-transport.js

@@ -1 +1,239 @@
-"use strict";var __importDefault=this&&this.__importDefault||function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(exports,"__esModule",{value:!0}),exports.EmailTransport=void 0;const shared_1=require("../_deps/shared/index.js"),email_templates_js_1=require("./email-templates.js"),nodemailer_1=__importDefault(require("nodemailer"));class EmailTransport{config;transporter;rateLimits;constructor(e){this.config={...e,rateLimit:e.rateLimit??10,tokenExpiryHours:e.tokenExpiryHours??48},this.transporter=nodemailer_1.default.createTransport({host:this.config.smtpHost,port:this.config.smtpPort,secure:!1,auth:{user:this.config.smtpUser,pass:this.config.smtpPass}}),this.rateLimits=new Map}async send(e,t){const{from:r,to:i,payload:s}=e;if(!this.isValidEmail(i))return(0,shared_1.err)("SEND_FAILED");if(!this.checkRateLimit(r).ok)return(0,shared_1.err)("SEND_FAILED");try{const t=await this.generateInviteToken(e),a=`${this.config.acceptBaseUrl}/${t}`,o=(0,email_templates_js_1.renderInviteEmail)({agentName:s.agentName||r,did:r,acceptUrl:a,message:s.message});return await this.transporter.sendMail({from:`"${this.config.fromName}" <${this.config.fromEmail}>`,to:i,subject:`${s.agentName||"Agent"} wants to connect`,html:o}),this.incrementRateLimit(r),(0,shared_1.ok)(void 0)}catch(e){return(0,shared_1.err)("NETWORK_ERROR")}}isValidEmail(e){return/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(e)}checkRateLimit(e){const t=Date.now(),r=this.rateLimits.get(e);return r?t>=r.resetAt?(this.rateLimits.delete(e),(0,shared_1.ok)(void 0)):r.count>=this.config.rateLimit?(0,shared_1.err)(void 0):(0,shared_1.ok)(void 0):(0,shared_1.ok)(void 0)}incrementRateLimit(e){const t=Date.now(),r=this.rateLimits.get(e);r?r.count+=1:this.rateLimits.set(e,{count:1,resetAt:t+36e5})}async generateInviteToken(e){const t={from:e.from,publicKey:e.payload.publicKey,endpoint:e.payload.endpoint,timestamp:Date.now(),expiresAt:Date.now()+60*this.config.tokenExpiryHours*60*1e3},r=JSON.stringify(t);return Buffer.from(r).toString("base64").replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}async verify(){try{return await this.transporter.verify(),(0,shared_1.ok)(void 0)}catch(e){return(0,shared_1.err)("NETWORK_ERROR")}}async close(){this.transporter.close()}onReceive(e){}dispose(){this.transporter.close()}}exports.EmailTransport=EmailTransport;
+"use strict";
+/**
+ * @module email-transport
+ * Email-based transport adapter for xBind agent invitations.
+ *
+ * Enables viral growth through email-based connection discovery:
+ * - Agent A sends email invite to Agent B
+ * - Email contains one-click acceptance link
+ * - Agent B clicks link, connection established
+ * - No manual DID exchange required
+ *
+ * @example
+ * ```ts
+ * import { EmailTransport } from '@private.me/xbind/email-transport';
+ *
+ * const transport = new EmailTransport({
+ *   smtpHost: process.env.SMTP_HOST,
+ *   smtpPort: 587,
+ *   smtpUser: process.env.SMTP_USER,
+ *   smtpPass: process.env.SMTP_PASS,
+ *   fromEmail: 'noreply@private.me',
+ *   acceptBaseUrl: 'https://private.me/xbind/accept'
+ * });
+ *
+ * const agent = await Agent.create({
+ *   name: 'payment-processor',
+ *   transport
+ * });
+ *
+ * await agent.invite({
+ *   to: 'fulfillment@acme.com',
+ *   message: 'Connect our systems'
+ * });
+ * ```
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailTransport = void 0;
+const shared_1 = require("../_deps/shared/index.js");
+const email_templates_js_1 = require("./email-templates.js");
+const nodemailer_1 = __importDefault(require("nodemailer"));
+/**
+ * Email-based transport adapter for xBind invitations.
+ *
+ * Sends invitation emails with branded templates and one-click acceptance links.
+ * Enforces rate limiting and token expiration for security.
+ *
+ * Note: Email transport is one-way (sending only). onReceive() is not supported.
+ */
+class EmailTransport {
+    config;
+    transporter;
+    rateLimits;
+    /**
+     * Create email transport adapter.
+     *
+     * @param config - SMTP and email configuration
+     */
+    constructor(config) {
+        this.config = {
+            ...config,
+            rateLimit: config.rateLimit ?? 10,
+            tokenExpiryHours: config.tokenExpiryHours ?? 48,
+        };
+        // Create nodemailer transporter
+        this.transporter = nodemailer_1.default.createTransport({
+            host: this.config.smtpHost,
+            port: this.config.smtpPort,
+            secure: false, // TLS on port 587
+            auth: {
+                user: this.config.smtpUser,
+                pass: this.config.smtpPass,
+            },
+        });
+        this.rateLimits = new Map();
+    }
+    /**
+     * Send invitation email.
+     *
+     * @param envelope - Transport envelope
+     * @param recipientDid - Recipient DID (email address for email transport)
+     * @returns Result with void on success
+     */
+    async send(envelope, recipientDid) {
+        // Extract invitation data from envelope
+        const { from, to, payload } = envelope;
+        // Validate email address
+        if (!this.isValidEmail(to)) {
+            return (0, shared_1.err)('SEND_FAILED');
+        }
+        // Check rate limit
+        const rateLimitCheck = this.checkRateLimit(from);
+        if (!rateLimitCheck.ok) {
+            return (0, shared_1.err)('SEND_FAILED');
+        }
+        try {
+            // Generate secure invitation token
+            const token = await this.generateInviteToken(envelope);
+            // Construct acceptance URL
+            const acceptUrl = `${this.config.acceptBaseUrl}/${token}`;
+            // Render branded email template
+            const html = (0, email_templates_js_1.renderInviteEmail)({
+                agentName: payload.agentName || from,
+                did: from,
+                acceptUrl,
+                message: payload.message,
+            });
+            // Send email via SMTP
+            await this.transporter.sendMail({
+                from: `"${this.config.fromName}" <${this.config.fromEmail}>`,
+                to,
+                subject: `${payload.agentName || 'Agent'} wants to connect`,
+                html,
+            });
+            // Update rate limit counter
+            this.incrementRateLimit(from);
+            return (0, shared_1.ok)(undefined);
+        }
+        catch (error) {
+            return (0, shared_1.err)('NETWORK_ERROR');
+        }
+    }
+    /**
+     * Validate email address format.
+     *
+     * @param email - Email address to validate
+     * @returns True if valid
+     */
+    isValidEmail(email) {
+        const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+        return emailRegex.test(email);
+    }
+    /**
+     * Check if agent has exceeded rate limit.
+     *
+     * @param agentDid - Agent DID
+     * @returns Result indicating if rate limit is OK
+     */
+    checkRateLimit(agentDid) {
+        const now = Date.now();
+        const entry = this.rateLimits.get(agentDid);
+        if (!entry) {
+            return (0, shared_1.ok)(undefined);
+        }
+        // Reset if hour has passed
+        if (now >= entry.resetAt) {
+            this.rateLimits.delete(agentDid);
+            return (0, shared_1.ok)(undefined);
+        }
+        // Check if limit exceeded
+        if (entry.count >= this.config.rateLimit) {
+            return (0, shared_1.err)(undefined);
+        }
+        return (0, shared_1.ok)(undefined);
+    }
+    /**
+     * Increment rate limit counter for agent.
+     *
+     * @param agentDid - Agent DID
+     */
+    incrementRateLimit(agentDid) {
+        const now = Date.now();
+        const entry = this.rateLimits.get(agentDid);
+        if (!entry) {
+            this.rateLimits.set(agentDid, {
+                count: 1,
+                resetAt: now + (60 * 60 * 1000), // 1 hour
+            });
+        }
+        else {
+            entry.count += 1;
+        }
+    }
+    /**
+     * Generate secure invitation token.
+     *
+     * Token contains: sender DID, sender public key, timestamp, expiry.
+     * Encoded as base64url for URL safety.
+     *
+     * @param envelope - Message envelope
+     * @returns Invitation token
+     */
+    async generateInviteToken(envelope) {
+        const tokenData = {
+            from: envelope.from,
+            publicKey: envelope.payload.publicKey,
+            endpoint: envelope.payload.endpoint,
+            timestamp: Date.now(),
+            expiresAt: Date.now() + (this.config.tokenExpiryHours * 60 * 60 * 1000),
+        };
+        // Encode as base64url
+        const json = JSON.stringify(tokenData);
+        const base64 = Buffer.from(json).toString('base64')
+            .replace(/\+/g, '-')
+            .replace(/\//g, '_')
+            .replace(/=/g, '');
+        return base64;
+    }
+    /**
+     * Verify connection to SMTP server.
+     *
+     * @returns Result indicating if SMTP connection is OK
+     */
+    async verify() {
+        try {
+            await this.transporter.verify();
+            return (0, shared_1.ok)(undefined);
+        }
+        catch (error) {
+            return (0, shared_1.err)('NETWORK_ERROR');
+        }
+    }
+    /**
+     * Close SMTP connection.
+     */
+    async close() {
+        this.transporter.close();
+    }
+    /**
+     * Register handler for incoming envelopes.
+     *
+     * Note: Email transport is one-way (sending only).
+     * This method exists for interface compliance but is a no-op.
+     *
+     * @param handler - Envelope handler (unused)
+     */
+    onReceive(handler) {
+        // Email transport is one-way - no incoming messages
+    }
+    /**
+     * Shut down the transport (close SMTP connection).
+     */
+    dispose() {
+        this.transporter.close();
+    }
+}
+exports.EmailTransport = EmailTransport;