@push.rocks/smartmta 5.3.3 → 6.0.1

package/changelog.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## 2026-06-06 - 6.0.1
+
+### Fixes
+
+- preserve custom parsed headers on buffered emails (routing)
+  - Store non-standard parsed headers on routed Email instances so queued processing results retain custom metadata.
+  - Exclude standard parsed fields such as subject from the preserved headers map.
+  - Add e2e coverage for retaining the cached email header during buffer processing.
+
+## 2026-06-06 - 6.0.0
+
+### Breaking Changes
+
+- enforce recipient validation and explicit relay permissions (smtp)
+  - enable RCPT TO validation by default and require explicit `allowRelay` route permission for non-local recipients.
+  - add awaited recipient and message acceptance callbacks so SMTP success is returned only after policy and consumer acceptance.
+  - add trusted PROXY protocol v1 support for backend listeners and fail closed when trusted peers are not configured.
+  - harden Rust SMTP shutdown, callback cleanup, temp-file cleanup, and bridge handler lifecycle.
+  - restrict npm platform metadata to the Linux targets built and published by the Rust release pipeline.
+  - migrate release configuration to current target-based GitZone release metadata.
+  - remove stale Deno-era Gitea workflows and release metadata that targeted the legacy `serve.zone/mailer` project.
+  - update SMTP relay policy documentation and contract coverage.
+
 ## 2026-04-14 - 5.3.3 - fix(build)
 migrate project config to .smartconfig.json and refresh package dependencies
 

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@push.rocks/smartmta',
-    version: '5.3.3',
+    version: '6.0.1',
     description: 'A high-performance, enterprise-grade Mail Transfer Agent (MTA) built from scratch in TypeScript with Rust acceleration.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSxzQkFBc0I7SUFDNUIsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLHlIQUF5SDtDQUN2SSxDQUFBIn0=

package/dist_ts/mail/routing/classes.unified.email.server.d.ts

@@ -25,6 +25,33 @@ export interface IExtendedSmtpSession extends ISmtpSession {
      */
     matchedRoute?: IEmailRoute;
 }
+export interface ISmtpDecision {
+    accepted: boolean;
+    smtpCode?: number;
+    smtpMessage?: string;
+}
+export interface IRcptToPolicyContext {
+    sessionId: string;
+    mailFrom: string;
+    rcptTo: string;
+    acceptedRcptTo: string[];
+    remoteAddress: string;
+    clientHostname: string | null;
+    secure: boolean;
+    authenticated: boolean;
+    authenticatedUser: string | null;
+    abortSignal?: AbortSignal;
+}
+export interface IMessageAcceptanceContext {
+    email: Email;
+    rawMessage: Buffer;
+    session: IExtendedSmtpSession;
+    abortSignal?: AbortSignal;
+}
+export interface IMessageAcceptanceDecision extends ISmtpDecision {
+    /** Continue SmartMTA's built-in route processing after the consumer accepted responsibility. */
+    continueProcessing?: boolean;
+}
 /**
  * Options for the unified email server
  */
@@ -59,6 +86,25 @@ export interface IUnifiedEmailServerOptions {
     connectionTimeout?: number;
     socketTimeout?: number;
     routes: IEmailRoute[];
+    smtp?: {
+        /** Enable route/hook based RCPT TO validation before DATA. Defaults to true; set false only for fully trusted private listeners. */
+        recipientValidation?: boolean;
+        /** Timeout for RCPT policy callbacks. Defaults to 5000 ms. */
+        recipientValidationTimeoutMs?: number;
+        /** Timeout for message acceptance callbacks. Defaults to 30000 ms. */
+        messageAcceptanceTimeoutMs?: number;
+        /** Require trusted PROXY v1 from the backend proxy before SMTP greeting. */
+        proxyProtocol?: {
+            required?: boolean;
+            trustedIps?: string[];
+        };
+    };
+    hooks?: {
+        /** Async recipient policy hook, called before each RCPT TO is accepted. */
+        onRcptTo?: (context: IRcptToPolicyContext) => Promise<ISmtpDecision>;
+        /** Async message acceptance hook, called after DATA before the final SMTP response. */
+        onMessageData?: (context: IMessageAcceptanceContext) => Promise<IMessageAcceptanceDecision>;
+    };
     defaults?: {
         dnsMode?: 'forward' | 'internal-dns' | 'external-dns';
         dkim?: IEmailDomainConfig['dkim'];
@@ -135,6 +181,11 @@ export declare class UnifiedEmailServer extends EventEmitter {
     private rateLimiter;
     private actionExecutor;
     private dkimManager;
+    private bridgeStateChangeHandler?;
+    private bridgeRcptToRequestHandler?;
+    private bridgeEmailReceivedHandler?;
+    private bridgeAuthRequestHandler?;
+    private bridgeScramCredentialRequestHandler?;
     constructor(dcRouter: DcRouter, options: IUnifiedEmailServerOptions);
     private getAdvertisedHostname;
     private getOutboundHostname;
@@ -159,15 +210,29 @@ export declare class UnifiedEmailServer extends EventEmitter {
     private startRustBridge;
     private initializeDkimAndDns;
     private registerBridgeEventHandlers;
+    private unregisterBridgeStateHandler;
+    private unregisterBridgeEventHandlers;
     private startSmtpServer;
     /**
      * Stop the unified email server
      */
     stop(): Promise<void>;
+    private handleRustRcptToRequest;
+    private evaluateDefaultRcptToPolicy;
+    private enforceAcceptedRcptToRelayPolicy;
+    private buildPolicySession;
+    private getAddressDomain;
+    private getRecipientValidationTimeoutMs;
+    private isRecipientValidationEnabled;
+    private getMessageAcceptanceTimeoutMs;
+    private runHookWithTimeout;
     /**
      * Handle an emailReceived event from the Rust SMTP server.
      */
     private handleRustEmailReceived;
+    private createEmailFromBuffer;
+    private isStandardParsedHeader;
+    private stringifyParsedHeaderValue;
     /**
      * Handle an authRequest event from the Rust SMTP server.
      */