@push.rocks/smartmta 5.3.3 → 6.0.1

package/ts/security/classes.rustsecuritybridge.ts

@@ -158,6 +158,12 @@ interface ISmtpServerConfig {
   maxAuthFailures?: number;
   socketTimeoutSecs?: number;
   processingTimeoutSecs?: number;
+  recipientValidationEnabled?: boolean;
+  recipientValidationTimeoutSecs?: number;
+  proxyProtocol?: {
+    required?: boolean;
+    trustedIps?: string[];
+  };
   rateLimits?: IRateLimitConfig;
 }
 
@@ -187,6 +193,18 @@ interface IEmailReceivedEvent {
   securityResults: any | null;
 }
 
+interface IRcptToRequestEvent {
+  correlationId: string;
+  sessionId: string;
+  mailFrom: string;
+  rcptTo: string;
+  acceptedRcptTo: string[];
+  remoteAddr: string;
+  clientHostname: string | null;
+  secure: boolean;
+  authenticatedUser: string | null;
+}
+
 interface IAuthRequestEvent {
   correlationId: string;
   sessionId: string;
@@ -274,6 +292,15 @@ type TMailerCommands = {
     };
     result: { resolved: boolean };
   };
+  rcptToResult: {
+    params: {
+      correlationId: string;
+      accepted: boolean;
+      smtpCode?: number;
+      smtpMessage?: string;
+    };
+    result: { resolved: boolean };
+  };
   authResult: {
     params: {
       correlationId: string;
@@ -859,6 +886,19 @@ export class RustSecurityBridge extends EventEmitter {
     await this.bridge.sendCommand('emailProcessingResult', opts);
   }
 
+  /**
+   * Send the result of recipient policy validation back to the Rust SMTP server.
+   */
+  public async sendRcptToResult(opts: {
+    correlationId: string;
+    accepted: boolean;
+    smtpCode?: number;
+    smtpMessage?: string;
+  }): Promise<void> {
+    this.ensureRunning();
+    await this.bridge.sendCommand('rcptToResult', opts);
+  }
+
   /**
    * Send the result of authentication validation back to the Rust SMTP server.
    */
@@ -905,6 +945,13 @@ export class RustSecurityBridge extends EventEmitter {
     this.bridge.on('management:emailReceived', handler);
   }
 
+  /**
+   * Register a handler for RCPT TO policy requests from the Rust SMTP server.
+   */
+  public onRcptToRequest(handler: (data: IRcptToRequestEvent) => void): void {
+    this.bridge.on('management:rcptToRequest', handler);
+  }
+
   /**
    * Register a handler for authRequest events from the Rust SMTP server.
    * The handler must call sendAuthResult() with the correlationId.
@@ -926,6 +973,11 @@ export class RustSecurityBridge extends EventEmitter {
     this.bridge.off('management:emailReceived', handler);
   }
 
+  /** Remove an RCPT TO policy request handler. */
+  public offRcptToRequest(handler: (data: IRcptToRequestEvent) => void): void {
+    this.bridge.off('management:rcptToRequest', handler);
+  }
+
   /** Remove an authRequest event handler. */
   public offAuthRequest(handler: (data: IAuthRequestEvent) => void): void {
     this.bridge.off('management:authRequest', handler);
@@ -952,6 +1004,7 @@ export type {
   IRateLimitConfig,
   IEmailData,
   IEmailReceivedEvent,
+  IRcptToRequestEvent,
   IAuthRequestEvent,
   IScramCredentialRequestEvent,
   IOutboundEmail,