@push.rocks/smartmta 8.0.0 → 8.1.0

package/ts/mail/routing/functions.routing.validation.ts

@@ -0,0 +1,36 @@
+/**
+ * Reject retention values that cannot be represented and scheduled reliably.
+ */
+export function assertValidRetentionDays(
+  retentionDays: unknown,
+  owner: string,
+): asserts retentionDays is number {
+  if (
+    typeof retentionDays !== 'number'
+    || !Number.isSafeInteger(retentionDays)
+    || retentionDays <= 0
+  ) {
+    throw new Error(`${owner} retentionDays must be a finite positive integer`);
+  }
+}
+
+export function assertValidInboundPolicy(
+  inboundPolicy: {
+    defaultAction: unknown;
+    retentionDays: unknown;
+  },
+  domain: string,
+): void {
+  if (
+    inboundPolicy.defaultAction !== 'store'
+    && inboundPolicy.defaultAction !== 'reject'
+  ) {
+    throw new Error(
+      `Inbound policy for domain ${domain} defaultAction must be store or reject`,
+    );
+  }
+  assertValidRetentionDays(
+    inboundPolicy.retentionDays,
+    `Inbound policy for domain ${domain}`,
+  );
+}

package/ts/mail/routing/interfaces.ts

@@ -44,7 +44,7 @@ export interface IEmailMatch {
  */
 export interface IEmailAction {
   /** Type of action to perform */
-  type: 'forward' | 'deliver' | 'reject' | 'process';
+  type: 'forward' | 'deliver' | 'reject' | 'process' | 'store';
   /** Explicitly permits this route to relay to non-local recipients. */
   allowRelay?: boolean;
   
@@ -82,6 +82,12 @@ export interface IEmailAction {
     /** Delivery queue priority */
     queue?: 'normal' | 'priority' | 'bulk';
   };
+
+  /** Durable inbound storage configuration. */
+  store?: {
+    /** Number of days the stored message should be retained. */
+    retentionDays: number;
+  };
   
   /** Options for various action types */
   options?: {
@@ -173,6 +179,12 @@ export interface IEmailDomainConfig {
       requiredRecords?: ('MX' | 'SPF' | 'DKIM' | 'DMARC')[];
     };
   };
+
+  /** Default behavior after no explicit route matches an inbound recipient. */
+  inboundPolicy?: {
+    defaultAction: 'store' | 'reject';
+    retentionDays: number;
+  };
   
   /** Per-domain DKIM settings (DKIM always enabled) */
   dkim?: {

package/ts/plugins.ts

@@ -6,6 +6,7 @@ import * as net from 'net';
 import * as os from 'os';
 import * as path from 'path';
 import * as tls from 'tls';
+import * as url from 'url';
 import * as util from 'util';
 
 export {
@@ -16,6 +17,7 @@ export {
   os,
   path,
   tls,
+  url,
   util,
 }
 

package/ts/security/classes.rustsecuritybridge.ts

@@ -32,6 +32,28 @@ interface IDmarcResult {
   details: string | null;
 }
 
+export interface IInboundIpReputationResult {
+  score: number;
+  is_spam: boolean;
+  ip: string;
+  dnsbl: {
+    ip: string;
+    listed_count: number;
+    listed_on: string[];
+    total_checked: number;
+  };
+  ip_type: string;
+}
+
+export interface IInboundEmailSecurityResult {
+  dkim: IDkimVerificationResult[];
+  spf: ISpfResult | null;
+  dmarc: IDmarcResult | null;
+  contentScan: IContentScanResult;
+  ipReputation: IInboundIpReputationResult | null;
+}
+
+/** Compound verification response returned by the explicit verifyEmail command. */
 interface IEmailSecurityResult {
   dkim: IDkimVerificationResult[];
   spf: ISpfResult | null;
@@ -92,6 +114,11 @@ export interface ISmtpTranscriptEntry {
   direction: 'client' | 'server' | 'system';
   text: string;
   responseCode?: number;
+  transferStats?: {
+    bytes: number;
+    chunks: number;
+    durationMs: number;
+  };
 }
 
 /** Persisted SMTP traces are bounded by entries, Unicode code points, and UTF-8 bytes. */
@@ -167,6 +194,17 @@ export const normalizeSmtpTranscript = (entriesArg: unknown[]): ISmtpTranscriptE
       continue;
     }
 
+    const transferStats = value.transferStats;
+    const validTransferStats = transferStats
+      && typeof transferStats === 'object'
+      && Number.isSafeInteger(transferStats.bytes)
+      && transferStats.bytes >= 0
+      && Number.isSafeInteger(transferStats.chunks)
+      && transferStats.chunks >= 0
+      && Number.isSafeInteger(transferStats.durationMs)
+      && transferStats.durationMs >= 0
+      ? { ...transferStats }
+      : undefined;
     const direction = value.direction as ISmtpTranscriptEntry['direction'];
     const text = truncateCodePoints(redactAuthTranscriptText(value.phase, direction, value.text));
     const textBytes = utf8ByteLength(text);
@@ -186,6 +224,7 @@ export const normalizeSmtpTranscript = (entriesArg: unknown[]): ISmtpTranscriptE
       ...(typeof value.responseCode === 'number' && Number.isInteger(value.responseCode)
         ? { responseCode: value.responseCode }
         : {}),
+      ...(validTransferStats ? { transferStats: validTransferStats } : {}),
     });
     totalUtf8Bytes += textBytes;
   }
@@ -323,6 +362,12 @@ interface IOutboundEmail {
   text?: string;
   html?: string;
   headers?: Record<string, string>;
+  attachments?: Array<{
+    filename: string;
+    contentBase64: string;
+    contentType: string;
+    contentId?: string;
+  }>;
 }
 
 interface ISmtpSendResult {
@@ -445,7 +490,7 @@ interface IEmailReceivedEvent {
   clientHostname: string | null;
   secure: boolean;
   authenticatedUser: string | null;
-  securityResults: any | null;
+  securityResults: IInboundEmailSecurityResult | null;
 }
 
 interface IRcptToRequestEvent {

package/ts/security/index.ts

@@ -32,12 +32,15 @@ export {
   type ISpfResult,
   type IDmarcResult,
   type IEmailSecurityResult,
+  type IInboundEmailSecurityResult,
+  type IInboundIpReputationResult,
   type IValidationResult,
   type IBounceDetection,
   type IRustReputationResult,
   type IVersionInfo,
   type IOutboundEmail,
   type ISmtpSendResult,
+  type ISmtpRecipientResult,
   type ISmtpSendOptions,
   type ISmtpVerifyResult,
   type ISmtpPoolStatus,