@step-func-emailer/handlers 0.2.0

package/src/lib/template-renderer.ts

@@ -0,0 +1,52 @@
+import { S3Client, GetObjectCommand } from "@aws-sdk/client-s3";
+import { Liquid } from "liquidjs";
+import { TEMPLATE_CACHE_TTL_MS } from "@step-func-emailer/shared";
+import { createLogger } from "./logger.js";
+
+const logger = createLogger("template-renderer");
+const s3 = new S3Client({});
+const liquid = new Liquid();
+
+// Module-level cache survives across warm invocations
+const templateCache = new Map<string, { html: string; fetchedAt: number }>();
+
+async function fetchTemplate(bucket: string, templateKey: string): Promise<string> {
+  const cached = templateCache.get(templateKey);
+  if (cached && Date.now() - cached.fetchedAt < TEMPLATE_CACHE_TTL_MS) {
+    logger.debug("Template cache hit", { templateKey });
+    return cached.html;
+  }
+
+  logger.debug("Fetching template from S3", { bucket, key: `${templateKey}.html` });
+  const result = await s3.send(
+    new GetObjectCommand({
+      Bucket: bucket,
+      Key: `${templateKey}.html`,
+    }),
+  );
+
+  const html = (await result.Body?.transformToString()) ?? "";
+  templateCache.set(templateKey, { html, fetchedAt: Date.now() });
+  logger.debug("Template fetched and cached", { templateKey, length: html.length });
+  return html;
+}
+
+export interface RenderContext {
+  email: string;
+  firstName: string;
+  unsubscribeUrl: string;
+  currentYear: number;
+  [key: string]: unknown;
+}
+
+export async function renderTemplate(
+  bucket: string,
+  templateKey: string,
+  context: RenderContext,
+): Promise<string> {
+  logger.info("Rendering template", { templateKey, email: context.email });
+  const html = await fetchTemplate(bucket, templateKey);
+  const rendered = await liquid.parseAndRender(html, context);
+  logger.debug("Template rendered", { templateKey, outputLength: rendered.length });
+  return rendered;
+}

package/src/lib/unsubscribe-token.ts

@@ -0,0 +1,53 @@
+import { createHmac } from "node:crypto";
+
+const EXPIRY_DAYS = 90;
+
+export function generateToken(email: string, secret: string): string {
+  const sendTimestamp = new Date().toISOString();
+  const expiry = new Date(Date.now() + EXPIRY_DAYS * 24 * 3600 * 1000).toISOString();
+
+  const payload = `${email}|${sendTimestamp}|${expiry}`;
+  const signature = createHmac("sha256", secret).update(payload).digest("hex");
+
+  const token = Buffer.from(`${payload}|${signature}`).toString("base64url");
+  return token;
+}
+
+export interface ValidatedToken {
+  valid: true;
+  email: string;
+  sendTimestamp: string;
+  expiryTimestamp: string;
+}
+
+export interface InvalidToken {
+  valid: false;
+  reason: string;
+}
+
+export function validateToken(token: string, secret: string): ValidatedToken | InvalidToken {
+  try {
+    const decoded = Buffer.from(token, "base64url").toString("utf8");
+    const parts = decoded.split("|");
+    if (parts.length !== 4) {
+      return { valid: false, reason: "malformed token" };
+    }
+
+    const [email, sendTimestamp, expiryTimestamp, signature] = parts;
+
+    const payload = `${email}|${sendTimestamp}|${expiryTimestamp}`;
+    const expectedSignature = createHmac("sha256", secret).update(payload).digest("hex");
+
+    if (signature !== expectedSignature) {
+      return { valid: false, reason: "invalid signature" };
+    }
+
+    if (new Date(expiryTimestamp) < new Date()) {
+      return { valid: false, reason: "token expired" };
+    }
+
+    return { valid: true, email, sendTimestamp, expiryTimestamp };
+  } catch {
+    return { valid: false, reason: "invalid token format" };
+  }
+}