@push.rocks/smartmta 11.0.2 → 12.0.0

package/changelog.md

@@ -1,5 +1,39 @@
 # Changelog
 
+## 2026-10-15 - 12.0.0
+
+### Breaking Changes
+
+- Inbound messages are parsed with `@push.rocks/smartmail` (postal-mime) instead of `mailparser`, and `Email.headers` changes with it: values are the raw field values as written (unfolded; a repeated field joins its values with `, `) instead of mailparser's interpreted forms. mailparser's derived keys are gone: `priority` (now the message's own `x-priority`/`importance` fields) and `list` (now `list-id`, `list-unsubscribe` and the other `list-*` fields), and structured fields such as `dkim-signature` and `list-*` carry their text instead of `[object Object]`. A route whose `match.headers` names `priority` or `list` no longer matches; name the raw field instead.
+
+### Fixes
+
+- Scoped authenticated senders can no longer place an out-of-scope identity in the header From. Every mailbox of every From field is now checked, with groups flattened into their members and repeated From fields all kept; before, a group (`From: Board: ceo@victim.test;`) or a second From field after an out-of-scope first one was accepted. A From field that yields no mailbox (an empty group, or an encoded word in place of the address), a message whose first line is a `From :` field (which an mbox reader drops as a postmark) and an unreadable header section are now refused with 553. A message without any From field is still accepted, because its sender is the scope-checked envelope MAIL FROM.
+- `Email.from` is the first mailbox of the From fields in message order, groups flattened, and falls back to the envelope MAIL FROM only when no From field yields a mailbox; before, a repeated From field gave the last one and a group gave the envelope sender.
+- The text of a message that carries only HTML is derived by smartmail's `htmlToText`: headings are no longer upper-cased, and a message whose HTML body sits in a `multipart/related` part (an inline image next to it) gets its text too instead of an empty one.
+- Inline images keep their `cid:` link in `Email.html`, and their attachment carries the `contentId` the link names, instead of the image being copied into the HTML as a `data:` URI.
+- Header To and Cc (used when the envelope has no recipients) include the members of a group; mailparser's addresses left them out.
+- A quoted local part keeps its quotes in the From mailboxes the sender scope is checked against (`"john doe"@one.test`), as the address is written.
+- Removes `mailparser` and its `nodemailer` / `deepmerge-ts` advisory subtree from the runtime dependencies; `@push.rocks/smartmail` moves to ^3.1.0.
+
+### Maintenance
+
+- release tooling: @git.zone/cli 9.0.1, @git.zone/tsrust 4.6.0
+
+## 2026-10-14 - 11.1.0
+
+### Features
+
+- Run inside Node.js single executable applications: `@push.rocks/smartrust` moves from `^1.3.2` to `^2.6.0`, so inside a SEA `RustSecurityBridge` runs the sidecar embedded under `mailer-bin` (`@git.zone/tssea`) and searches no local path; outside a SEA the bundled `dist_rust` binaries are found as before. The public API is unchanged.
+
+### Fixes
+
+- `engines.node` is `>=22.12.0`, the floor the dependencies need: `@push.rocks/smartsea` (through smartrust 2.6) requires Node.js 22.3 and `yargs-parser` 22 (through `@push.rocks/smartlog`) 22.12 on the 22 line. It said `>=22`.
+
+### Maintenance
+
+- release tooling: pnpm 12.10.1, @git.zone/tstest 8.0.0, @git.zone/tsrust 4.5.1
+
 ## 2026-10-13 - 11.0.2
 
 ### Maintenance

package/dist_rust/mailer-bin_linux_amd64.tsrust-build.json

@@ -3,11 +3,11 @@
   "binarySha256": "d698d8d0af565269b930e9af77e6046ca80d5c159e5aca55d2e2aa0c73a96f14",
   "buildInfo": {
     "projectName": "@push.rocks/smartmta",
-    "projectVersion": "11.0.2",
-    "gitCommit": "0d9918b6e3f1cbea47f970eea610dd28e8a64c29",
+    "projectVersion": "12.0.0",
+    "gitCommit": "b1d1024df37a33ff14a0e46195c500f11161fb17",
     "gitDirty": false,
-    "builtAt": "2026-10-13T14:24:07.178Z",
-    "tsrustVersion": "4.5.0",
+    "builtAt": "2026-10-15T06:23:07.408Z",
+    "tsrustVersion": "4.6.0",
     "binary": "mailer-bin",
     "target": "linux_amd64"
   }

package/dist_rust/mailer-bin_linux_arm64.tsrust-build.json

@@ -3,11 +3,11 @@
   "binarySha256": "2e5502aaff345b35f16840f14c28e7b50c13b45f7015025021913006d6774f1c",
   "buildInfo": {
     "projectName": "@push.rocks/smartmta",
-    "projectVersion": "11.0.2",
-    "gitCommit": "0d9918b6e3f1cbea47f970eea610dd28e8a64c29",
+    "projectVersion": "12.0.0",
+    "gitCommit": "b1d1024df37a33ff14a0e46195c500f11161fb17",
     "gitDirty": false,
-    "builtAt": "2026-10-13T14:31:01.528Z",
-    "tsrustVersion": "4.5.0",
+    "builtAt": "2026-10-15T06:25:31.432Z",
+    "tsrustVersion": "4.6.0",
     "binary": "mailer-bin",
     "target": "linux_arm64"
   }

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@push.rocks/smartmta',
-    version: '11.0.2',
+    version: '12.0.0',
     description: 'A high-performance, enterprise-grade Mail Transfer Agent (MTA) built from scratch in TypeScript with Rust acceleration.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSxzQkFBc0I7SUFDNUIsT0FBTyxFQUFFLFFBQVE7SUFDakIsV0FBVyxFQUFFLHlIQUF5SDtDQUN2SSxDQUFBIn0=

package/dist_ts/mail/routing/classes.unified.email.server.d.ts

@@ -663,14 +663,22 @@ export declare class UnifiedEmailServer extends EventEmitter {
      */
     private resolveSessionSenderScope;
     /**
-     * Extract every mailbox address from the parsed From header. The Email
-     * abstraction keeps only the first From mailbox, which is not sufficient
-     * for scope enforcement: `From: allowed@a.com, victim@b.com` must not
-     * pass. Parsing stops at the first CRLFCRLF header boundary when present
-     * (the Rust receiver normalizes line endings to CRLF); a bodyless message
-     * without one is parsed whole.
+     * The mailbox addresses of every From header field, one list per field in
+     * message order. Groups are flattened into their member mailboxes, and a
+     * repeated From field is kept rather than collapsed to one occurrence,
+     * because scope enforcement and Email.from must see every mailbox a
+     * recipient's client might display. A field that yields no mailbox, such
+     * as an empty group or an encoded word in place of an address, gives an
+     * empty list.
      */
-    private parseHeaderFromMailboxes;
+    private parseFromHeaderFields;
+    /**
+     * The From header fields of the header section of a raw message, see
+     * parseFromHeaderFields. Parsing stops at the first CRLFCRLF header
+     * boundary when present (the Rust receiver normalizes line endings to
+     * CRLF); a bodyless message without one is parsed whole.
+     */
+    private parseHeaderFromFields;
     /**
      * Header-From alignment for scoped authenticated accounts at DATA. The
      * envelope MAIL FROM is enforced per recipient via resolveRecipientPolicy
@@ -715,7 +723,6 @@ export declare class UnifiedEmailServer extends EventEmitter {
     private handleRustEmailReceived;
     private createEmailFromBuffer;
     private isStandardParsedHeader;
-    private stringifyParsedHeaderValue;
     /**
      * Compute SCRAM-SHA-256 credential fields from a plaintext password with a
      * fresh random salt (used for legacy plaintext credentials only; verifier