@stacksjs/email 0.70.257 → 0.70.259

package/dist/template.js

@@ -1,170 +1,5 @@
-import { config } from "@stacksjs/config";
-import { log } from "@stacksjs/logging";
-import { fs } from "@stacksjs/storage";
-import { defaultsResourcesPath, resourcesPath } from "@stacksjs/path";
-import { join } from "node:path";
-import { inlineCss, shouldInlineByDefault } from "./css-inliner";
+import{config}from"@stacksjs/config";import{log}from"@stacksjs/logging";import{fs}from"@stacksjs/storage";import{defaultsResourcesPath,resourcesPath}from"@stacksjs/path";import{join}from"node:path";import{inlineCss,shouldInlineByDefault}from"./css-inliner";export class SafeHtml{value;__safeHtml=!0;constructor(value){this.value=value}}export function safe(html){return new SafeHtml(html)}function getDefaultVariables(){const primaryColor=config.app.primaryColor||"#3b82f6";return{appName:config.app.name||"Stacks",appUrl:config.app.url||"https://localhost",primaryColor,primaryColorDark:darkenColor(primaryColor,15),year:new Date().getFullYear()}}function darkenColor(hex,percent){const num=Number.parseInt(hex.replace("#",""),16),amt=Math.round(2.55*percent),R=Math.max(0,(num>>16)-amt),G=Math.max(0,(num>>8&255)-amt),B=Math.max(0,(num&255)-amt);return`#${(16777216+R*65536+G*256+B).toString(16).slice(1)}`}function escapeHtml(input){return input.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;")}function replaceVariables(html,variables){let result=html;for(const[key,value]of Object.entries(variables)){const escapedKey=key.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),regex=new RegExp(`\\{\\{\\s*${escapedKey}\\s*\\}\\}`,"g");result=result.replace(regex,renderTemplateValue(value))}return result}function renderTemplateValue(value){if(value===null||value===void 0)return"";if(value instanceof SafeHtml)return value.value;return escapeHtml(String(value))}const templateRoots=[(relativePath)=>resourcesPath(join("emails",relativePath)),(relativePath)=>defaultsResourcesPath(join("emails",relativePath))];function resolveTemplatePath(templateName){for(const root of templateRoots){if(templateName.endsWith(".stx")){const fullPath=root(templateName);if(fs.existsSync(fullPath))return{path:fullPath,type:"stx"};continue}if(templateName.endsWith(".html")){const fullPath=root(templateName);if(fs.existsSync(fullPath))return{path:fullPath,type:"html"};continue}const stxPath=root(`${templateName}.stx`);if(fs.existsSync(stxPath))return{path:stxPath,type:"stx"};const htmlPath=root(`${templateName}.html`);if(fs.existsSync(htmlPath))return{path:htmlPath,type:"html"}}return null}function loadHtmlTemplate(templatePath){const path=templatePath.endsWith(".html")?templatePath:`${templatePath}.html`;for(const root of templateRoots){const fullPath=root(path);if(fs.existsSync(fullPath))return fs.readFileSync(fullPath,"utf-8")}return null}function loadLayout(layoutName){return loadHtmlTemplate(`layouts/${layoutName}`)}function htmlToText(html){return html.replace(/<br\s*\/?>/gi,`
+`).replace(/<\/(p|div|h[1-6]|li|tr)>/gi,`
+`).replace(/<\/td>/gi,"\t").replace(/<[^>]*>/g,"").replace(/&nbsp;/g," ").replace(/&amp;/g,"&").replace(/&lt;/g,"<").replace(/&gt;/g,">").replace(/&quot;/g,'"').replace(/&#39;/g,"'").replace(/&copy;/g,"(c)").replace(/\n\s*\n\s*\n/g,`
 
-export class SafeHtml {
-  value;
-  __safeHtml = !0;
-  constructor(value) {
-    this.value = value;
-  }
-}
-export function safe(html) {
-  return new SafeHtml(html);
-}
-function getDefaultVariables() {
-  const primaryColor = config.app.primaryColor || "#3b82f6";
-  return {
-    appName: config.app.name || "Stacks",
-    appUrl: config.app.url || "https://localhost",
-    primaryColor,
-    primaryColorDark: darkenColor(primaryColor, 15),
-    year: new Date().getFullYear()
-  };
-}
-function darkenColor(hex, percent) {
-  const num = Number.parseInt(hex.replace("#", ""), 16), amt = Math.round(2.55 * percent), R = Math.max(0, (num >> 16) - amt), G = Math.max(0, (num >> 8 & 255) - amt), B = Math.max(0, (num & 255) - amt);
-  return `#${(16777216 + R * 65536 + G * 256 + B).toString(16).slice(1)}`;
-}
-function escapeHtml(input) {
-  return input.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
-}
-function replaceVariables(html, variables) {
-  let result = html;
-  for (const [key, value] of Object.entries(variables)) {
-    const escapedKey = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), regex = new RegExp(`\\{\\{\\s*${escapedKey}\\s*\\}\\}`, "g");
-    result = result.replace(regex, renderTemplateValue(value));
-  }
-  return result;
-}
-function renderTemplateValue(value) {
-  if (value === null || value === void 0)
-    return "";
-  if (value instanceof SafeHtml)
-    return value.value;
-  return escapeHtml(String(value));
-}
-const templateRoots = [
-  (relativePath) => resourcesPath(join("emails", relativePath)),
-  (relativePath) => defaultsResourcesPath(join("emails", relativePath))
-];
-function resolveTemplatePath(templateName) {
-  for (const root of templateRoots) {
-    if (templateName.endsWith(".stx")) {
-      const fullPath = root(templateName);
-      if (fs.existsSync(fullPath))
-        return { path: fullPath, type: "stx" };
-      continue;
-    }
-    if (templateName.endsWith(".html")) {
-      const fullPath = root(templateName);
-      if (fs.existsSync(fullPath))
-        return { path: fullPath, type: "html" };
-      continue;
-    }
-    const stxPath = root(`${templateName}.stx`);
-    if (fs.existsSync(stxPath))
-      return { path: stxPath, type: "stx" };
-    const htmlPath = root(`${templateName}.html`);
-    if (fs.existsSync(htmlPath))
-      return { path: htmlPath, type: "html" };
-  }
-  return null;
-}
-function loadHtmlTemplate(templatePath) {
-  const path = templatePath.endsWith(".html") ? templatePath : `${templatePath}.html`;
-  for (const root of templateRoots) {
-    const fullPath = root(path);
-    if (fs.existsSync(fullPath))
-      return fs.readFileSync(fullPath, "utf-8");
-  }
-  return null;
-}
-function loadLayout(layoutName) {
-  return loadHtmlTemplate(`layouts/${layoutName}`);
-}
-function htmlToText(html) {
-  return html.replace(/<br\s*\/?>/gi, `
-`).replace(/<\/(p|div|h[1-6]|li|tr)>/gi, `
-`).replace(/<\/td>/gi, "\t").replace(/<[^>]*>/g, "").replace(/&nbsp;/g, " ").replace(/&amp;/g, "&").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&#39;/g, "'").replace(/&copy;/g, "(c)").replace(/\n\s*\n\s*\n/g, `
-
-`).trim();
-}
-export async function template(templateName, options = {}) {
-  const {
-    variables = {},
-    layout = "base",
-    subject = "",
-    inline = shouldInlineByDefault()
-  } = options, allVariables = {
-    ...getDefaultVariables(),
-    subject,
-    ...variables
-  }, resolved = resolveTemplatePath(templateName);
-  if (!resolved) {
-    console.warn(`[Email Template] Template "${templateName}" not found`);
-    return { html: "", text: "" };
-  }
-  if (resolved.type === "stx")
-    try {
-      const { renderEmail } = await import("@stacksjs/stx"), result = await renderEmail(resolved.path, allVariables, {
-        componentsDir: defaultsResourcesPath("components/Email")
-      });
-      return {
-        ...result,
-        html: inlineCss(result.html, { inline })
-      };
-    } catch (error) {
-      log.warn(`[email] STX template rendering failed for ${templateName}: ${error instanceof Error ? error.message : String(error)}`);
-      return { html: "", text: "" };
-    }
-  let content = fs.readFileSync(resolved.path, "utf-8");
-  content = replaceVariables(content, allVariables);
-  let html;
-  if (layout !== !1) {
-    const layoutHtml = loadLayout(layout);
-    if (!layoutHtml) {
-      console.warn(`[Email Template] Layout "${layout}" not found, using content only`);
-      html = content;
-    } else {
-      allVariables.content = safe(content);
-      html = replaceVariables(layoutHtml, allVariables);
-    }
-  } else
-    html = content;
-  html = inlineCss(html, { inline });
-  const text = htmlToText(html);
-  return { html, text };
-}
-export function renderHtml(htmlContent, variables = {}) {
-  const allVariables = {
-    ...getDefaultVariables(),
-    ...variables
-  }, html = replaceVariables(htmlContent, allVariables), text = htmlToText(html);
-  return { html, text };
-}
-export function templateExists(templateName) {
-  return resolveTemplatePath(templateName) !== null;
-}
-export function listTemplates() {
-  const emailsPath = resourcesPath("emails");
-  if (!fs.existsSync(emailsPath))
-    return [];
-  const templates = [];
-  function scanDir(dir, prefix = "") {
-    const entries = fs.readdirSync(dir, { withFileTypes: !0 });
-    for (const entry of entries)
-      if (entry.isDirectory() && entry.name !== "layouts")
-        scanDir(join(dir, entry.name), `${prefix}${entry.name}/`);
-      else if (entry.isFile() && (entry.name.endsWith(".html") || entry.name.endsWith(".stx"))) {
-        const name = entry.name.replace(/\.(html|stx)$/, "");
-        if (!templates.includes(`${prefix}${name}`))
-          templates.push(`${prefix}${name}`);
-      }
-  }
-  scanDir(emailsPath);
-  return templates;
-}
+`).trim()}export async function template(templateName,options={}){const{variables={},layout="base",subject="",inline=shouldInlineByDefault()}=options,allVariables={...getDefaultVariables(),subject,...variables},resolved=resolveTemplatePath(templateName);if(!resolved){console.warn(`[Email Template] Template "${templateName}" not found`);return{html:"",text:""}}if(resolved.type==="stx")try{const{renderEmail}=await import("@stacksjs/stx"),result=await renderEmail(resolved.path,allVariables,{componentsDir:defaultsResourcesPath("components/Email")});return{...result,html:inlineCss(result.html,{inline})}}catch(error){log.warn(`[email] STX template rendering failed for ${templateName}: ${error instanceof Error?error.message:String(error)}`);return{html:"",text:""}}let content=fs.readFileSync(resolved.path,"utf-8");content=replaceVariables(content,allVariables);let html;if(layout!==!1){const layoutHtml=loadLayout(layout);if(!layoutHtml){console.warn(`[Email Template] Layout "${layout}" not found, using content only`);html=content}else{allVariables.content=safe(content);html=replaceVariables(layoutHtml,allVariables)}}else html=content;html=inlineCss(html,{inline});const text=htmlToText(html);return{html,text}}export function renderHtml(htmlContent,variables={}){const allVariables={...getDefaultVariables(),...variables},html=replaceVariables(htmlContent,allVariables),text=htmlToText(html);return{html,text}}export function templateExists(templateName){return resolveTemplatePath(templateName)!==null}export function listTemplates(){const emailsPath=resourcesPath("emails");if(!fs.existsSync(emailsPath))return[];const templates=[];function scanDir(dir,prefix=""){const entries=fs.readdirSync(dir,{withFileTypes:!0});for(const entry of entries)if(entry.isDirectory()&&entry.name!=="layouts")scanDir(join(dir,entry.name),`${prefix}${entry.name}/`);else if(entry.isFile()&&(entry.name.endsWith(".html")||entry.name.endsWith(".stx"))){const name=entry.name.replace(/\.(html|stx)$/,"");if(!templates.includes(`${prefix}${name}`))templates.push(`${prefix}${name}`)}}scanDir(emailsPath);return templates}

package/dist/unsubscribe.js

@@ -1,65 +1 @@
-import { createHmac, timingSafeEqual } from "node:crypto";
-import process from "node:process";
-import { Buffer } from "node:buffer";
-const DEFAULT_TTL_SECONDS = 2592000, DEFAULT_ROUTE = "/_stacks/email/unsubscribe";
-function getAppKey() {
-  const k = process.env.APP_KEY;
-  if (!k || k.length < 16) {
-    if (process.env.APP_ENV === "production" || process.env.NODE_ENV === "production")
-      throw Error("[email/unsubscribe] APP_KEY is missing or too short (need \u226516 chars). Cannot sign unsubscribe URL.");
-  }
-  return k || "stacks-default-key-dev-only-do-not-use-prod";
-}
-function b64UrlEncode(buf) {
-  return buf.toString("base64url");
-}
-function b64UrlDecode(s) {
-  return Buffer.from(s, "base64url");
-}
-export function createUnsubscribeToken(email, ttlSeconds = DEFAULT_TTL_SECONDS) {
-  if (!email)
-    throw Error("[email/unsubscribe] email is required");
-  const exp = Math.floor(Date.now() / 1000) + Math.floor(ttlSeconds), claims = {
-    email: String(email).trim().toLowerCase(),
-    exp,
-    iss: "stacks"
-  }, payload = b64UrlEncode(Buffer.from(JSON.stringify(claims))), sig = b64UrlEncode(createHmac("sha256", getAppKey()).update(payload).digest());
-  return `${payload}.${sig}`;
-}
-export function verifyUnsubscribeToken(token) {
-  if (typeof token !== "string")
-    return { valid: !1, reason: "malformed" };
-  const parts = token.split(".");
-  if (parts.length !== 2)
-    return { valid: !1, reason: "malformed" };
-  const [payload, sig] = parts, expectedSig = createHmac("sha256", getAppKey()).update(payload).digest();
-  let provided;
-  try {
-    provided = b64UrlDecode(sig);
-  } catch {
-    return { valid: !1, reason: "malformed" };
-  }
-  if (provided.length !== expectedSig.length || !timingSafeEqual(provided, expectedSig))
-    return { valid: !1, reason: "bad_signature" };
-  let claims;
-  try {
-    claims = JSON.parse(b64UrlDecode(payload).toString("utf8"));
-  } catch {
-    return { valid: !1, reason: "malformed" };
-  }
-  if (typeof claims.exp !== "number" || Math.floor(Date.now() / 1000) >= claims.exp)
-    return { valid: !1, reason: "expired" };
-  if (!claims.email || typeof claims.email !== "string")
-    return { valid: !1, reason: "malformed" };
-  return { valid: !0, email: claims.email };
-}
-export function buildUnsubscribeUrl(email, ttlSeconds, options = {}) {
-  const token = createUnsubscribeToken(email, ttlSeconds), base = (options.baseUrl || process.env.APP_URL || "http://localhost").replace(/\/$/, ""), route = (options.routePrefix || DEFAULT_ROUTE).replace(/\/$/, "");
-  return `${base}${route}/${token}`;
-}
-export function buildListUnsubscribeHeaders(email, ttlSeconds, options) {
-  return {
-    "List-Unsubscribe": `<${buildUnsubscribeUrl(email, ttlSeconds, options)}>`,
-    "List-Unsubscribe-Post": "List-Unsubscribe=One-Click"
-  };
-}
+import{createHmac,timingSafeEqual}from"node:crypto";import process from"node:process";import{Buffer}from"node:buffer";const DEFAULT_TTL_SECONDS=2592000,DEFAULT_ROUTE="/_stacks/email/unsubscribe";function getAppKey(){const k=process.env.APP_KEY;if(!k||k.length<16){if(process.env.APP_ENV==="production"||process.env.NODE_ENV==="production")throw Error("[email/unsubscribe] APP_KEY is missing or too short (need \u226516 chars). Cannot sign unsubscribe URL.")}return k||"stacks-default-key-dev-only-do-not-use-prod"}function b64UrlEncode(buf){return buf.toString("base64url")}function b64UrlDecode(s){return Buffer.from(s,"base64url")}export function createUnsubscribeToken(email,ttlSeconds=DEFAULT_TTL_SECONDS){if(!email)throw Error("[email/unsubscribe] email is required");const exp=Math.floor(Date.now()/1000)+Math.floor(ttlSeconds),claims={email:String(email).trim().toLowerCase(),exp,iss:"stacks"},payload=b64UrlEncode(Buffer.from(JSON.stringify(claims))),sig=b64UrlEncode(createHmac("sha256",getAppKey()).update(payload).digest());return`${payload}.${sig}`}export function verifyUnsubscribeToken(token){if(typeof token!=="string")return{valid:!1,reason:"malformed"};const parts=token.split(".");if(parts.length!==2)return{valid:!1,reason:"malformed"};const[payload,sig]=parts,expectedSig=createHmac("sha256",getAppKey()).update(payload).digest();let provided;try{provided=b64UrlDecode(sig)}catch{return{valid:!1,reason:"malformed"}}if(provided.length!==expectedSig.length||!timingSafeEqual(provided,expectedSig))return{valid:!1,reason:"bad_signature"};let claims;try{claims=JSON.parse(b64UrlDecode(payload).toString("utf8"))}catch{return{valid:!1,reason:"malformed"}}if(typeof claims.exp!=="number"||Math.floor(Date.now()/1000)>=claims.exp)return{valid:!1,reason:"expired"};if(!claims.email||typeof claims.email!=="string")return{valid:!1,reason:"malformed"};return{valid:!0,email:claims.email}}export function buildUnsubscribeUrl(email,ttlSeconds,options={}){const token=createUnsubscribeToken(email,ttlSeconds),base=(options.baseUrl||process.env.APP_URL||"http://localhost").replace(/\/$/,""),route=(options.routePrefix||DEFAULT_ROUTE).replace(/\/$/,"");return`${base}${route}/${token}`}export function buildListUnsubscribeHeaders(email,ttlSeconds,options){return{"List-Unsubscribe":`<${buildUnsubscribeUrl(email,ttlSeconds,options)}>`,"List-Unsubscribe-Post":"List-Unsubscribe=One-Click"}}

package/dist/utils/config.js

@@ -1,3 +1 @@
-import { notification } from "@stacksjs/config";
-export const email = notification.email;
-export default email;
+import{notification}from"@stacksjs/config";export const email=notification.email;export default email;

package/dist/validation.js

@@ -1,22 +1 @@
-export const ENVELOPE_ADDRESS = /^[^\s<>"\\\r\n\t]+@[^\s<>"\\\r\n\t]+$/;
-export function assertEnvelopeAddress(addr, role) {
-  if (typeof addr !== "string" || !ENVELOPE_ADDRESS.test(addr))
-    throw Error(`Email ${role} address is malformed or contains forbidden characters: ${JSON.stringify(addr)}`);
-}
-export function assertHeaderSafeSubject(subject) {
-  if (/[\r\n]/.test(subject))
-    throw Error("Email subject contains forbidden line break characters (CR/LF)");
-}
-export function filterStringHeaders(headers) {
-  if (!headers)
-    return;
-  const out = {};
-  for (const [k, v] of Object.entries(headers)) {
-    if (typeof v !== "string")
-      continue;
-    if (/[\r\n]/.test(k) || /[\r\n]/.test(v))
-      continue;
-    out[k] = v;
-  }
-  return Object.keys(out).length > 0 ? out : void 0;
-}
+export const ENVELOPE_ADDRESS=/^[^\s<>"\\\r\n\t]+@[^\s<>"\\\r\n\t]+$/;export function assertEnvelopeAddress(addr,role){if(typeof addr!=="string"||!ENVELOPE_ADDRESS.test(addr))throw Error(`Email ${role} address is malformed or contains forbidden characters: ${JSON.stringify(addr)}`)}export function assertHeaderSafeSubject(subject){if(/[\r\n]/.test(subject))throw Error("Email subject contains forbidden line break characters (CR/LF)")}export function filterStringHeaders(headers){if(!headers)return;const out={};for(const[k,v]of Object.entries(headers)){if(typeof v!=="string")continue;if(/[\r\n]/.test(k)||/[\r\n]/.test(v))continue;out[k]=v}return Object.keys(out).length>0?out:void 0}

package/dist/webhook-dedup.js

@@ -1,33 +1 @@
-import { db } from "@stacksjs/database";
-let warnedAboutMissingTable = !1;
-function warnOnceAboutMissingTable() {
-  if (warnedAboutMissingTable)
-    return;
-  warnedAboutMissingTable = !0;
-  console.warn("[email/webhook-dedup] email_webhook_events table missing \u2014 webhook idempotency NOT enforced. " + "Providers may double-deliver retries; run migrations to enable dedup.");
-}
-function isMissingTableError(err) {
-  const msg = err?.message ?? "";
-  return msg.includes("no such table") || msg.includes("doesn't exist");
-}
-export async function recordWebhookEventOrSkip(provider, eventId) {
-  if (!eventId)
-    return !0;
-  try {
-    await db.insertInto("email_webhook_events").values({
-      provider,
-      event_id: eventId,
-      processed_at: new Date().toISOString().slice(0, 19).replace("T", " ")
-    }).execute();
-    return !0;
-  } catch (err) {
-    if (isMissingTableError(err)) {
-      warnOnceAboutMissingTable();
-      return !0;
-    }
-    const msg = err?.message ?? "";
-    if (msg.includes("UNIQUE constraint") || msg.includes("Duplicate entry"))
-      return !1;
-    throw err;
-  }
-}
+import{db}from"@stacksjs/database";let warnedAboutMissingTable=!1;function warnOnceAboutMissingTable(){if(warnedAboutMissingTable)return;warnedAboutMissingTable=!0;console.warn("[email/webhook-dedup] email_webhook_events table missing \u2014 webhook idempotency NOT enforced. "+"Providers may double-deliver retries; run migrations to enable dedup.")}function isMissingTableError(err){const msg=err?.message??"";return msg.includes("no such table")||msg.includes("doesn't exist")}export async function recordWebhookEventOrSkip(provider,eventId){if(!eventId)return!0;try{await db.insertInto("email_webhook_events").values({provider,event_id:eventId,processed_at:new Date().toISOString().slice(0,19).replace("T"," ")}).execute();return!0}catch(err){if(isMissingTableError(err)){warnOnceAboutMissingTable();return!0}const msg=err?.message??"";if(msg.includes("UNIQUE constraint")||msg.includes("Duplicate entry"))return!1;throw err}}

package/dist/webhook-events.js

@@ -1,37 +1 @@
-async function emit(event, payload) {
-  try {
-    const mod = await import("@stacksjs/events").catch(() => null);
-    if (!mod)
-      return;
-    const dispatch = mod.dispatch;
-    if (typeof dispatch !== "function")
-      return;
-    dispatch(event, payload);
-  } catch {}
-}
-export async function emitEmailBounceHard(payload) {
-  await emit("email:bounce-hard", payload);
-  await emit("email:bounce", payload);
-}
-export async function emitEmailBounceSoft(payload) {
-  await emit("email:bounce-soft", payload);
-  await emit("email:bounce", payload);
-}
-export async function emitEmailComplaint(payload) {
-  await emit("email:complaint", payload);
-}
-export async function emitEmailUnsubscribe(payload) {
-  await emit("email:unsubscribe", payload);
-}
-export function suppressionTypeFor(classification) {
-  switch (classification) {
-    case "bounce-hard":
-      return "bounce";
-    case "complaint":
-      return "complaint";
-    case "unsubscribe":
-      return "unsubscribe";
-    default:
-      return null;
-  }
-}
+async function emit(event,payload){try{const mod=await import("@stacksjs/events").catch(()=>null);if(!mod)return;const dispatch=mod.dispatch;if(typeof dispatch!=="function")return;dispatch(event,payload)}catch{}}export async function emitEmailBounceHard(payload){await emit("email:bounce-hard",payload);await emit("email:bounce",payload)}export async function emitEmailBounceSoft(payload){await emit("email:bounce-soft",payload);await emit("email:bounce",payload)}export async function emitEmailComplaint(payload){await emit("email:complaint",payload)}export async function emitEmailUnsubscribe(payload){await emit("email:unsubscribe",payload)}export function suppressionTypeFor(classification){switch(classification){case"bounce-hard":return"bounce";case"complaint":return"complaint";case"unsubscribe":return"unsubscribe";default:return null}}

package/dist/webhook-handlers.js

@@ -1,264 +1 @@
-import { Buffer } from "node:buffer";
-import { suppress } from "./suppression";
-import { recordWebhookEventOrSkip } from "./webhook-dedup";
-import {
-  emitEmailBounceHard,
-  emitEmailBounceSoft,
-  emitEmailComplaint,
-  emitEmailUnsubscribe,
-  suppressionTypeFor
-} from "./webhook-events";
-import {
-  verifyMailgunSignature,
-  verifyPostmarkAuth,
-  verifySendgridSignature,
-  verifySesSnsSignature
-} from "./webhook-signatures";
-const OK_DUPLICATE = { status: 200, body: { ok: !0, processed: !1, reason: "duplicate" } };
-function unauthorized(reason) {
-  return { status: 401, body: { ok: !1, reason } };
-}
-function badRequest(reason) {
-  return { status: 400, body: { ok: !1, reason } };
-}
-async function dispatchClassifiedEvent(classification, payload) {
-  const suppressionType = suppressionTypeFor(classification);
-  if (suppressionType)
-    await suppress(payload.email, suppressionType, payload.reason);
-  switch (classification) {
-    case "bounce-hard":
-      await emitEmailBounceHard(payload);
-      break;
-    case "bounce-soft":
-      await emitEmailBounceSoft(payload);
-      break;
-    case "complaint":
-      await emitEmailComplaint(payload);
-      break;
-    case "unsubscribe":
-      await emitEmailUnsubscribe(payload);
-      break;
-    case "delivered":
-      break;
-  }
-}
-export async function handleMailgunWebhook(rawBody, config) {
-  let parsed;
-  try {
-    parsed = JSON.parse(rawBody);
-  } catch {
-    return badRequest("invalid-json");
-  }
-  const sig = parsed.signature, event = parsed["event-data"];
-  if (!sig || !event)
-    return badRequest("missing-fields");
-  const v = verifyMailgunSignature({
-    timestamp: sig.timestamp,
-    token: sig.token,
-    signature: sig.signature,
-    signingKey: config.signingKey,
-    toleranceSeconds: config.toleranceSeconds
-  });
-  if (!v.ok)
-    return unauthorized(v.reason);
-  if (!await recordWebhookEventOrSkip("mailgun", event.id))
-    return OK_DUPLICATE;
-  const classification = classifyMailgunEvent(event.event, event.severity);
-  if (!classification)
-    return { status: 200, body: { ok: !0, processed: !1, reason: "unhandled-event" } };
-  await dispatchClassifiedEvent(classification, {
-    email: event.recipient,
-    provider: "mailgun",
-    reason: event.reason,
-    raw: event
-  });
-  return { status: 200, body: { ok: !0, processed: !0, classification } };
-}
-function classifyMailgunEvent(event, severity) {
-  switch (event) {
-    case "failed":
-      return severity === "temporary" ? "bounce-soft" : "bounce-hard";
-    case "complained":
-      return "complaint";
-    case "unsubscribed":
-      return "unsubscribe";
-    case "delivered":
-      return "delivered";
-    default:
-      return null;
-  }
-}
-export async function handlePostmarkWebhook(rawBody, authorizationHeader, sourceIp, config) {
-  const v = verifyPostmarkAuth({
-    authorizationHeader,
-    expectedUsername: config.username,
-    expectedPassword: config.password,
-    sourceIp,
-    ipAllowlist: config.ipAllowlist
-  });
-  if (!v.ok)
-    return unauthorized(v.reason);
-  let parsed;
-  try {
-    parsed = JSON.parse(rawBody);
-  } catch {
-    return badRequest("invalid-json");
-  }
-  const eventId = String(parsed.ID ?? parsed.MessageID ?? ""), email = String(parsed.Email ?? parsed.Recipient ?? "");
-  if (!email)
-    return badRequest("missing-recipient");
-  if (!await recordWebhookEventOrSkip("postmark", eventId))
-    return OK_DUPLICATE;
-  const classification = classifyPostmarkEvent(parsed);
-  if (!classification)
-    return { status: 200, body: { ok: !0, processed: !1, reason: "unhandled-event" } };
-  await dispatchClassifiedEvent(classification, {
-    email,
-    provider: "postmark",
-    reason: parsed.Description,
-    raw: parsed
-  });
-  return { status: 200, body: { ok: !0, processed: !0, classification } };
-}
-function classifyPostmarkEvent(msg) {
-  switch (msg.RecordType) {
-    case "Bounce":
-      return msg.TypeCode === 1 ? "bounce-hard" : "bounce-soft";
-    case "SpamComplaint":
-      return "complaint";
-    case "SubscriptionChange":
-      return msg.SuppressSending ? "unsubscribe" : null;
-    case "Delivery":
-      return "delivered";
-    default:
-      return null;
-  }
-}
-export async function handleSesWebhook(rawBody, config = {}) {
-  let snsMessage;
-  try {
-    snsMessage = JSON.parse(rawBody);
-  } catch {
-    return badRequest("invalid-json");
-  }
-  const v = await verifySesSnsSignature({
-    message: snsMessage,
-    certUrlHostAllowlist: config.certUrlHostAllowlist,
-    fetchCert: config.fetchCert
-  });
-  if (!v.ok)
-    return unauthorized(v.reason);
-  if (snsMessage.Type === "SubscriptionConfirmation") {
-    if (config.autoConfirmSubscriptions !== !1 && snsMessage.SubscribeURL)
-      try {
-        await fetch(snsMessage.SubscribeURL);
-      } catch {}
-    return { status: 200, body: { ok: !0, processed: !0, reason: "subscription-confirmed" } };
-  }
-  if (snsMessage.Type === "UnsubscribeConfirmation")
-    return { status: 200, body: { ok: !0, processed: !0, reason: "subscription-removed" } };
-  let innerMessage;
-  try {
-    innerMessage = JSON.parse(snsMessage.Message);
-  } catch {
-    return badRequest("invalid-inner-json");
-  }
-  if (!await recordWebhookEventOrSkip("ses", snsMessage.MessageId))
-    return OK_DUPLICATE;
-  const dispatched = [];
-  if (innerMessage.notificationType === "Bounce" && innerMessage.bounce) {
-    const classification = innerMessage.bounce.bounceType === "Permanent" ? "bounce-hard" : "bounce-soft";
-    for (const r of innerMessage.bounce.bouncedRecipients) {
-      await dispatchClassifiedEvent(classification, {
-        email: r.emailAddress,
-        provider: "ses",
-        reason: r.diagnosticCode,
-        raw: innerMessage
-      });
-      dispatched.push(classification);
-    }
-  } else if (innerMessage.notificationType === "Complaint" && innerMessage.complaint)
-    for (const r of innerMessage.complaint.complainedRecipients) {
-      await dispatchClassifiedEvent("complaint", {
-        email: r.emailAddress,
-        provider: "ses",
-        reason: innerMessage.complaint.complaintFeedbackType,
-        raw: innerMessage
-      });
-      dispatched.push("complaint");
-    }
-  else if (innerMessage.notificationType === "Delivery" && innerMessage.delivery)
-    for (const r of innerMessage.delivery.recipients) {
-      await dispatchClassifiedEvent("delivered", { email: r, provider: "ses", raw: innerMessage });
-      dispatched.push("delivered");
-    }
-  return {
-    status: 200,
-    body: {
-      ok: !0,
-      processed: dispatched.length > 0,
-      classification: dispatched[0]
-    }
-  };
-}
-export async function handleSendgridWebhook(rawBody, signatureHeader, timestampHeader, config) {
-  const v = verifySendgridSignature({
-    body: rawBody,
-    signature: signatureHeader,
-    timestamp: timestampHeader,
-    publicKeyPem: config.publicKeyPem,
-    toleranceSeconds: config.toleranceSeconds
-  });
-  if (!v.ok)
-    return unauthorized(v.reason);
-  let events;
-  try {
-    events = JSON.parse(rawBody);
-  } catch {
-    return badRequest("invalid-json");
-  }
-  if (!Array.isArray(events))
-    return badRequest("expected-array");
-  let processed = 0;
-  const classifications = [];
-  for (const ev of events) {
-    if (!ev.email)
-      continue;
-    const id = ev.sg_event_id ?? `${ev.event}:${ev.email}:${Date.now()}`;
-    if (!await recordWebhookEventOrSkip("sendgrid", id))
-      continue;
-    const classification = classifySendgridEvent(ev.event, ev.type);
-    if (!classification)
-      continue;
-    await dispatchClassifiedEvent(classification, {
-      email: ev.email,
-      provider: "sendgrid",
-      reason: ev.reason,
-      raw: ev
-    });
-    processed++;
-    classifications.push(classification);
-  }
-  return {
-    status: 200,
-    body: { ok: !0, processed: processed > 0, classification: classifications[0] }
-  };
-}
-function classifySendgridEvent(event, type) {
-  switch (event) {
-    case "bounce":
-      return type === "blocked" ? "bounce-soft" : "bounce-hard";
-    case "dropped":
-      return "bounce-hard";
-    case "spamreport":
-      return "complaint";
-    case "unsubscribe":
-      return "unsubscribe";
-    case "group_unsubscribe":
-      return "unsubscribe";
-    case "delivered":
-      return "delivered";
-    default:
-      return null;
-  }
-}
+import{Buffer}from"node:buffer";import{suppress}from"./suppression";import{recordWebhookEventOrSkip}from"./webhook-dedup";import{emitEmailBounceHard,emitEmailBounceSoft,emitEmailComplaint,emitEmailUnsubscribe,suppressionTypeFor}from"./webhook-events";import{verifyMailgunSignature,verifyPostmarkAuth,verifySendgridSignature,verifySesSnsSignature}from"./webhook-signatures";const OK_DUPLICATE={status:200,body:{ok:!0,processed:!1,reason:"duplicate"}};function unauthorized(reason){return{status:401,body:{ok:!1,reason}}}function badRequest(reason){return{status:400,body:{ok:!1,reason}}}async function dispatchClassifiedEvent(classification,payload){const suppressionType=suppressionTypeFor(classification);if(suppressionType)await suppress(payload.email,suppressionType,payload.reason);switch(classification){case"bounce-hard":await emitEmailBounceHard(payload);break;case"bounce-soft":await emitEmailBounceSoft(payload);break;case"complaint":await emitEmailComplaint(payload);break;case"unsubscribe":await emitEmailUnsubscribe(payload);break;case"delivered":break}}export async function handleMailgunWebhook(rawBody,config){let parsed;try{parsed=JSON.parse(rawBody)}catch{return badRequest("invalid-json")}const sig=parsed.signature,event=parsed["event-data"];if(!sig||!event)return badRequest("missing-fields");const v=verifyMailgunSignature({timestamp:sig.timestamp,token:sig.token,signature:sig.signature,signingKey:config.signingKey,toleranceSeconds:config.toleranceSeconds});if(!v.ok)return unauthorized(v.reason);if(!await recordWebhookEventOrSkip("mailgun",event.id))return OK_DUPLICATE;const classification=classifyMailgunEvent(event.event,event.severity);if(!classification)return{status:200,body:{ok:!0,processed:!1,reason:"unhandled-event"}};await dispatchClassifiedEvent(classification,{email:event.recipient,provider:"mailgun",reason:event.reason,raw:event});return{status:200,body:{ok:!0,processed:!0,classification}}}function classifyMailgunEvent(event,severity){switch(event){case"failed":return severity==="temporary"?"bounce-soft":"bounce-hard";case"complained":return"complaint";case"unsubscribed":return"unsubscribe";case"delivered":return"delivered";default:return null}}export async function handlePostmarkWebhook(rawBody,authorizationHeader,sourceIp,config){const v=verifyPostmarkAuth({authorizationHeader,expectedUsername:config.username,expectedPassword:config.password,sourceIp,ipAllowlist:config.ipAllowlist});if(!v.ok)return unauthorized(v.reason);let parsed;try{parsed=JSON.parse(rawBody)}catch{return badRequest("invalid-json")}const eventId=String(parsed.ID??parsed.MessageID??""),email=String(parsed.Email??parsed.Recipient??"");if(!email)return badRequest("missing-recipient");if(!await recordWebhookEventOrSkip("postmark",eventId))return OK_DUPLICATE;const classification=classifyPostmarkEvent(parsed);if(!classification)return{status:200,body:{ok:!0,processed:!1,reason:"unhandled-event"}};await dispatchClassifiedEvent(classification,{email,provider:"postmark",reason:parsed.Description,raw:parsed});return{status:200,body:{ok:!0,processed:!0,classification}}}function classifyPostmarkEvent(msg){switch(msg.RecordType){case"Bounce":return msg.TypeCode===1?"bounce-hard":"bounce-soft";case"SpamComplaint":return"complaint";case"SubscriptionChange":return msg.SuppressSending?"unsubscribe":null;case"Delivery":return"delivered";default:return null}}export async function handleSesWebhook(rawBody,config={}){let snsMessage;try{snsMessage=JSON.parse(rawBody)}catch{return badRequest("invalid-json")}const v=await verifySesSnsSignature({message:snsMessage,certUrlHostAllowlist:config.certUrlHostAllowlist,fetchCert:config.fetchCert});if(!v.ok)return unauthorized(v.reason);if(snsMessage.Type==="SubscriptionConfirmation"){if(config.autoConfirmSubscriptions!==!1&&snsMessage.SubscribeURL)try{await fetch(snsMessage.SubscribeURL)}catch{}return{status:200,body:{ok:!0,processed:!0,reason:"subscription-confirmed"}}}if(snsMessage.Type==="UnsubscribeConfirmation")return{status:200,body:{ok:!0,processed:!0,reason:"subscription-removed"}};let innerMessage;try{innerMessage=JSON.parse(snsMessage.Message)}catch{return badRequest("invalid-inner-json")}if(!await recordWebhookEventOrSkip("ses",snsMessage.MessageId))return OK_DUPLICATE;const dispatched=[];if(innerMessage.notificationType==="Bounce"&&innerMessage.bounce){const classification=innerMessage.bounce.bounceType==="Permanent"?"bounce-hard":"bounce-soft";for(const r of innerMessage.bounce.bouncedRecipients){await dispatchClassifiedEvent(classification,{email:r.emailAddress,provider:"ses",reason:r.diagnosticCode,raw:innerMessage});dispatched.push(classification)}}else if(innerMessage.notificationType==="Complaint"&&innerMessage.complaint)for(const r of innerMessage.complaint.complainedRecipients){await dispatchClassifiedEvent("complaint",{email:r.emailAddress,provider:"ses",reason:innerMessage.complaint.complaintFeedbackType,raw:innerMessage});dispatched.push("complaint")}else if(innerMessage.notificationType==="Delivery"&&innerMessage.delivery)for(const r of innerMessage.delivery.recipients){await dispatchClassifiedEvent("delivered",{email:r,provider:"ses",raw:innerMessage});dispatched.push("delivered")}return{status:200,body:{ok:!0,processed:dispatched.length>0,classification:dispatched[0]}}}export async function handleSendgridWebhook(rawBody,signatureHeader,timestampHeader,config){const v=verifySendgridSignature({body:rawBody,signature:signatureHeader,timestamp:timestampHeader,publicKeyPem:config.publicKeyPem,toleranceSeconds:config.toleranceSeconds});if(!v.ok)return unauthorized(v.reason);let events;try{events=JSON.parse(rawBody)}catch{return badRequest("invalid-json")}if(!Array.isArray(events))return badRequest("expected-array");let processed=0;const classifications=[];for(const ev of events){if(!ev.email)continue;const id=ev.sg_event_id??`${ev.event}:${ev.email}:${Date.now()}`;if(!await recordWebhookEventOrSkip("sendgrid",id))continue;const classification=classifySendgridEvent(ev.event,ev.type);if(!classification)continue;await dispatchClassifiedEvent(classification,{email:ev.email,provider:"sendgrid",reason:ev.reason,raw:ev});processed++;classifications.push(classification)}return{status:200,body:{ok:!0,processed:processed>0,classification:classifications[0]}}}function classifySendgridEvent(event,type){switch(event){case"bounce":return type==="blocked"?"bounce-soft":"bounce-hard";case"dropped":return"bounce-hard";case"spamreport":return"complaint";case"unsubscribe":return"unsubscribe";case"group_unsubscribe":return"unsubscribe";case"delivered":return"delivered";default:return null}}