@visulima/email 1.0.0-alpha.4 → 1.0.0-alpha.40

package/dist/utils/validation/check-mx-records.js

@@ -1 +1 @@
-var d=Object.defineProperty;var n=(r,e)=>d(r,"name",{value:e,configurable:!0});import{createRequire as l}from"node:module";const u=l(import.meta.url),c=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,p=n(r=>{if(typeof c<"u"&&c.versions&&c.versions.node){const[e,o]=c.versions.node.split(".").map(Number);if(e>22||e===22&&o>=3||e===20&&o>=16)return c.getBuiltinModule(r)}return u(r)},"__cjs_getBuiltinModule"),{resolveMx:h}=p("node:dns/promises");var f=Object.defineProperty,g=n((r,e)=>f(r,"name",{value:e,configurable:!0}),"h");const v=g(async(r,e={})=>{const o=e.ttl??36e5;if(e.cache){const t=await e.cache.get(r);if(t!==void 0)return t}try{const t=(await h(r)).map(i=>({exchange:i.exchange,priority:i.priority})),s={records:t.toSorted((i,a)=>i.priority-a.priority),valid:t.length>0};return e.cache&&await e.cache.set(r,s,o),s}catch(t){const s={error:t instanceof Error?t.message:String(t),valid:!1};return e.cache&&await e.cache.set(r,s,o),s}},"checkMxRecords");export{v as checkMxRecords};
+import{createRequire as a}from"node:module";const d=a(import.meta.url),c=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,l=o=>{if(typeof c<"u"&&c.versions&&c.versions.node){const[e,s]=c.versions.node.split(".").map(Number);if(e>22||e===22&&s>=3||e===20&&s>=16)return c.getBuiltinModule(o)}return d(o)},{resolveMx:p}=l("node:dns/promises"),h=async(o,e={})=>{const s=e.ttl??36e5;if(e.cache){const r=await e.cache.get(o);if(r!==void 0)return r}try{const r=(await p(o)).map(i=>({exchange:i.exchange,priority:i.priority})),t={records:r.toSorted((i,n)=>i.priority-n.priority),valid:r.length>0};return e.cache&&await e.cache.set(o,t,s),t}catch(r){const t={error:r instanceof Error?r.message:String(r),valid:!1};return e.cache&&await e.cache.set(o,t,s),t}};export{h as checkMxRecords};

package/dist/utils/validation/disposable-email-domains.d.ts

@@ -1,13 +1 @@
-/**
- * Re-exports all functionality from @visulima/disposable-email-domains.
- * This provides access to disposable email domain checking utilities.
- * @example
- * ```ts
- * import { isDisposableEmail, isDisposableDomain, getDomainList } from "\@visulima/email/validation/disposable-email-domains";
- *
- * if (isDisposableEmail("user@mailinator.com")) {
- *     console.log("Disposable email detected!");
- * }
- * ```
- */
-export * from "@visulima/disposable-email-domains";
+export * from '@visulima/disposable-email-domains';

package/dist/utils/validation/role-accounts.d.ts

@@ -1,21 +1,21 @@
 /**
- * Common role account prefixes that indicate non-personal email addresses.
- * Includes RFC 2142 standard role accounts and common business/operational prefixes.
- */
+* Common role account prefixes that indicate non-personal email addresses.
+* Includes RFC 2142 standard role accounts and common business/operational prefixes.
+*/
 declare const ROLE_ACCOUNT_PREFIXES: Set<string>;
 /**
- * Checks if an email address is a role account (non-personal).
- * @param email The email address to check.
- * @param customPrefixes Optional set of additional role account prefixes.
- * @returns True if the email is a role account, false otherwise.
- * @example
- * ```ts
- * import { isRoleAccount } from "@visulima/email/validation/role-accounts";
- *
- * if (isRoleAccount("noreply@example.com")) {
- *     console.log("This is a role account");
- * }
- * ```
- */
-export declare const isRoleAccount: (email: string, customPrefixes?: Set<string>) => boolean;
-export { ROLE_ACCOUNT_PREFIXES };
+* Checks if an email address is a role account (non-personal).
+* @param email The email address to check.
+* @param customPrefixes Optional set of additional role account prefixes.
+* @returns True if the email is a role account, false otherwise.
+* @example
+* ```ts
+* import { isRoleAccount } from "@visulima/email/validation/role-accounts";
+*
+* if (isRoleAccount("noreply@example.com")) {
+*     console.log("This is a role account");
+* }
+* ```
+*/
+declare const isRoleAccount: (email: string, customPrefixes?: Set<string>) => boolean;
+export { ROLE_ACCOUNT_PREFIXES, isRoleAccount };

package/dist/utils/validation/role-accounts.js

@@ -1 +1 @@
-var l=Object.defineProperty;var u=(e,r)=>l(e,"name",{value:r,configurable:!0});var p=Object.defineProperty,i=u((e,r)=>p(e,"name",{value:r,configurable:!0}),"n");const m=new Set(["abuse","accounts","admin","adminhelp","administrator","adminoffice","adminteam","affiliates","alarms","alert","alternative","analytics","anonymous","archive","audit","automated","autoreply","backoffice","backup","batch","billing","board","bot","bounce","bug","bugreport","build","careers","cert","chapter","chatbot","ci","compliance","contact","continuousintegration","cron","csirt","customer-care","customercare","customerservice","customersupport","cvs","daemon","default","demo","deploy","deployment","dev","development","devops","digest","director","dnsadmin","docs","donotreply","enquiry","errors","events","executive","faculty","failover","feed","feedback","finance","forensics","ftp","git","guardian","guest","help","helpdesk","helpsec","hostmaster","hr","incident","incidents","indexer","info","ingest","inquiry","issues","it","jobs","legal","list","list-request","log","logistics","logs","maildaemon","mailer-daemon","malicious","management","manager","marketing","media","membership","metrics","mod","moderator","mods","monitor","network","news","newsletter","no-reply","noc","noreply","notifications","notify","operations","operator","owner","owners","parent","partners","patches","payments","phish","phishing","pipeline","post","postmaster","pr","press","privacy","procurement","qa","recruitment","redundancy","registrar","releases","reminder","reminders","reply","report","reports","request","resource","root","sales","scheduler","secondary","secops","secretariat","secretary","security","server","service","spam","spamreport","staff","standby","student","subscribe","subscriptions","summaries","supervisor","supplychain","support","supportteam","svn","sync","sysadmin","system","system-alert","system-msg","team","tech","techsupport","temp","tertiary","test","threat","threats","tracker","trial","unknown","unsubscribe","update","updates","usenet","usergroup","uucp","volunteer","vuln","vulnerability","webinars","webmaster","www"]),o=i((e,r)=>m.has(e)||(r?.has(e)??!1),"checkRolePrefix"),d=i((e,r)=>{if(e.length<2)return!1;const t=["-",".","_"];for(const s of t){const n=`${e[0]}${s}${e[1]}`;if(o(n,r))return!0}return!1},"checkCombinedParts"),f=i((e,r)=>{for(const t of e)if(!o(t,r))return!1;return!0},"checkAllPartsAreRoleAccounts"),h=i((e,r)=>{if(!e||typeof e!="string")return!1;const t=e.toLowerCase().trim(),s=t.indexOf("@");if(s===-1||s===0)return!1;const n=t.slice(0,s);if(o(n,r))return!0;const a=n.split(/[+._-]/);if(a.length===1){const c=a[0];return c===void 0?!1:o(c,r)}return d(a,r)?!0:f(a,r)},"isRoleAccount");export{m as ROLE_ACCOUNT_PREFIXES,h as isRoleAccount};
+const c=new Set(["abuse","accounts","admin","adminhelp","administrator","adminoffice","adminteam","affiliates","alarms","alert","alternative","analytics","anonymous","archive","audit","automated","autoreply","backoffice","backup","batch","billing","board","bot","bounce","bug","bugreport","build","careers","cert","chapter","chatbot","ci","compliance","contact","continuousintegration","cron","csirt","customer-care","customercare","customerservice","customersupport","cvs","daemon","default","demo","deploy","deployment","dev","development","devops","digest","director","dnsadmin","docs","donotreply","enquiry","errors","events","executive","faculty","failover","feed","feedback","finance","forensics","ftp","git","guardian","guest","help","helpdesk","helpsec","hostmaster","hr","incident","incidents","indexer","info","ingest","inquiry","issues","it","jobs","legal","list","list-request","log","logistics","logs","maildaemon","mailer-daemon","malicious","management","manager","marketing","media","membership","metrics","mod","moderator","mods","monitor","network","news","newsletter","no-reply","noc","noreply","notifications","notify","operations","operator","owner","owners","parent","partners","patches","payments","phish","phishing","pipeline","post","postmaster","pr","press","privacy","procurement","qa","recruitment","redundancy","registrar","releases","reminder","reminders","reply","report","reports","request","resource","root","sales","scheduler","secondary","secops","secretariat","secretary","security","server","service","spam","spamreport","staff","standby","student","subscribe","subscriptions","summaries","supervisor","supplychain","support","supportteam","svn","sync","sysadmin","system","system-alert","system-msg","team","tech","techsupport","temp","tertiary","test","threat","threats","tracker","trial","unknown","unsubscribe","update","updates","usenet","usergroup","uucp","volunteer","vuln","vulnerability","webinars","webmaster","www"]),o=(e,r)=>c.has(e)||(r?.has(e)??!1),u=(e,r)=>{if(e.length<2)return!1;const t=["-",".","_"];for(const s of t){const n=`${e[0]}${s}${e[1]}`;if(o(n,r))return!0}return!1},p=(e,r)=>{for(const t of e)if(!o(t,r))return!1;return!0},l=(e,r)=>{if(!e||typeof e!="string")return!1;const t=e.toLowerCase().trim(),s=t.indexOf("@");if(s===-1||s===0)return!1;const n=t.slice(0,s);if(o(n,r))return!0;const a=n.split(/[+._-]/);if(a.length===1){const i=a[0];return i===void 0?!1:o(i,r)}return u(a,r)?!0:p(a,r)};export{c as ROLE_ACCOUNT_PREFIXES,l as isRoleAccount};

package/dist/utils/validation/validate-email.d.ts

@@ -1,7 +1,7 @@
 /**
- * Validates an email address format according to basic RFC standards.
- * @param email The email address string to validate.
- * @returns True if the email address is valid, false otherwise.
- */
+* Validates an email address format according to basic RFC standards.
+* @param email The email address string to validate.
+* @returns True if the email address is valid, false otherwise.
+*/
 declare const validateEmail: (email: string) => boolean;
-export default validateEmail;
+export { validateEmail as default };

package/dist/utils/validation/validate-email.js

@@ -1 +1 @@
-var l=Object.defineProperty;var i=(t,e)=>l(t,"name",{value:e,configurable:!0});var f=Object.defineProperty,u=i((t,e)=>f(t,"name",{value:e,configurable:!0}),"i");const c=u(t=>{if(!/^[^\s@]+@[^\s@][^\s.@]*\.[^\s@]+$/.test(t))return!1;const e=t.split("@");if(e.length!==2)return!1;const[r,s]=e;if(!r||!s||t.includes("..")||r.startsWith(".")||r.endsWith(".")||!s.includes(".")||s.startsWith("-")||s.endsWith("-"))return!1;const a=s.split(".");for(const n of a)if(n.startsWith("-")||n.endsWith("-")||n.length===0)return!1;return!0},"validateEmail");export{c as default};
+const f=s=>{if(!/^[^\s@]+@[^\s@][^\s.@]*\.[^\s@]+$/.test(s))return!1;const r=s.split("@");if(r.length!==2)return!1;const[e,t]=r;if(!e||!t||s.includes("..")||e.startsWith(".")||e.endsWith(".")||!t.includes(".")||t.startsWith("-")||t.endsWith("-"))return!1;const i=t.split(".");for(const n of i)if(n.startsWith("-")||n.endsWith("-")||n.length===0)return!1;return!0};export{f as default};

package/dist/utils/validation/verify-email.d.ts

@@ -1,47 +1,50 @@
-import type { SmtpVerificationOptions } from "./verify-smtp.d.ts";
+import { SmtpVerificationOptions } from "./verify-smtp.js";
+import "../cache.js";
+import "./check-mx-records.js";
 /**
- * Options for comprehensive email verification.
- */
-export interface EmailVerificationOptions extends SmtpVerificationOptions {
-    checkDisposable?: boolean;
-    checkMx?: boolean;
-    checkRoleAccount?: boolean;
-    checkSmtp?: boolean;
-    customDisposableDomains?: Set<string>;
-    customRolePrefixes?: Set<string>;
+* Options for comprehensive email verification.
+*/
+interface EmailVerificationOptions extends SmtpVerificationOptions {
+  checkDisposable?: boolean;
+  checkMx?: boolean;
+  checkRoleAccount?: boolean;
+  checkSmtp?: boolean;
+  customDisposableDomains?: Set<string>;
+  customRolePrefixes?: Set<string>;
 }
 /**
- * Result of comprehensive email verification.
- */
-export interface EmailVerificationResult {
-    disposable?: boolean;
-    errors: string[];
-    formatValid: boolean;
-    mxValid?: boolean;
-    roleAccount?: boolean;
-    smtpValid?: boolean;
-    valid: boolean;
-    warnings: string[];
+* Result of comprehensive email verification.
+*/
+interface EmailVerificationResult {
+  disposable?: boolean;
+  errors: string[];
+  formatValid: boolean;
+  mxValid?: boolean;
+  roleAccount?: boolean;
+  smtpValid?: boolean;
+  valid: boolean;
+  warnings: string[];
 }
 /**
- * Comprehensive email verification combining multiple checks.
- * @param email The email address to verify.
- * @param options Verification options.
- * @returns Detailed verification result.
- * @example
- * ```ts
- * import { verifyEmail } from "@visulima/email/validation/verify-email";
- *
- * const result = await verifyEmail("user@example.com", {
- *     checkDisposable: true,
- *     checkRoleAccount: true,
- *     checkMx: true,
- *     checkSmtp: false
- * });
- *
- * if (result.valid) {
- *     console.log("Email is valid!");
- * }
- * ```
- */
-export declare const verifyEmail: (email: string, options?: EmailVerificationOptions) => Promise<EmailVerificationResult>;
+* Comprehensive email verification combining multiple checks.
+* @param email The email address to verify.
+* @param options Verification options.
+* @returns Detailed verification result.
+* @example
+* ```ts
+* import { verifyEmail } from "@visulima/email/validation/verify-email";
+*
+* const result = await verifyEmail("user@example.com", {
+*     checkDisposable: true,
+*     checkRoleAccount: true,
+*     checkMx: true,
+*     checkSmtp: false
+* });
+*
+* if (result.valid) {
+*     console.log("Email is valid!");
+* }
+* ```
+*/
+declare const verifyEmail: (email: string, options?: EmailVerificationOptions) => Promise<EmailVerificationResult>;
+export { EmailVerificationOptions, EmailVerificationResult, verifyEmail };

package/dist/utils/validation/verify-email.js

@@ -1 +1 @@
-var V=Object.defineProperty;var f=(e,r)=>V(e,"name",{value:r,configurable:!0});import{checkMxRecords as y}from"./check-mx-records.js";import{isRoleAccount as k}from"./role-accounts.js";import w from"./validate-email.js";import{verifySmtp as E}from"./verify-smtp.js";import{isDisposableEmail as A}from"@visulima/disposable-email-domains";var D=Object.defineProperty,M=f((e,r)=>D(e,"name",{value:r,configurable:!0}),"f");const N=M(async(e,r={})=>{const{checkDisposable:p=!0,checkMx:d=!0,checkRoleAccount:u=!0,checkSmtp:h=!1,customDisposableDomains:v,customRolePrefixes:b,...g}=r,c=w(e),a=[],i=[];if(!c)return a.push("Invalid email format"),{errors:a,formatValid:!1,valid:!1,warnings:i};let s,l,m,n;if(p)try{s=A(e,v),s&&i.push("Email is from a disposable email service")}catch{}if(u&&(l=k(e,b),l&&i.push("Email appears to be a role account (non-personal)")),d){const o=e.split("@")[1];if(!o)return a.push("Invalid email format: missing domain"),{disposable:s,errors:a,formatValid:!1,mxValid:!1,roleAccount:l,valid:!1,warnings:i};const t=await y(o,{cache:r.cache});m=t.valid,t.valid||a.push(t.error||"No valid MX records found")}if(h){const o=await E(e,{...g,cache:r.cache,smtpCache:r.smtpCache});n=o.valid,!o.valid&&o.error&&a.push(`SMTP verification failed: ${o.error}`)}const x=c&&a.length===0;return{disposable:s,errors:a,formatValid:c,mxValid:m,roleAccount:l,smtpValid:n,valid:x,warnings:i}},"verifyEmail");export{N as verifyEmail};
+import{checkMxRecords as x}from"./check-mx-records.js";import{isRoleAccount as g}from"./role-accounts.js";import k from"./validate-email.js";import{verifySmtp as w}from"./verify-smtp.js";import{isDisposableEmail as y}from"@visulima/disposable-email-domains";const S=async(r,s={})=>{const{checkDisposable:f=!0,checkMx:p=!0,checkRoleAccount:d=!0,checkSmtp:u=!1,customDisposableDomains:h,customRolePrefixes:v,...b}=s,c=k(r),a=[],e=[];if(!c)return a.push("Invalid email format"),{errors:a,formatValid:!1,valid:!1,warnings:e};let o,l,m,n;if(f)try{o=y(r,h),o&&e.push("Email is from a disposable email service")}catch{}if(d&&(l=g(r,v),l&&e.push("Email appears to be a role account (non-personal)")),p){const i=r.split("@")[1];if(!i)return a.push("Invalid email format: missing domain"),{disposable:o,errors:a,formatValid:!1,mxValid:!1,roleAccount:l,valid:!1,warnings:e};const t=await x(i,{cache:s.cache});m=t.valid,t.valid||a.push(t.error??"No valid MX records found")}if(u){const i=await w(r,{...b,cache:s.cache,smtpCache:s.smtpCache});n=i.valid,!i.valid&&i.error&&a.push(`SMTP verification failed: ${i.error}`)}const V=c&&a.length===0;return{disposable:o,errors:a,formatValid:c,mxValid:m,roleAccount:l,smtpValid:n,valid:V,warnings:e}};export{S as verifyEmail};

package/dist/utils/validation/verify-smtp.d.ts

@@ -1,39 +1,40 @@
-import type { Cache } from "../cache.d.ts";
-import type { MxCheckResult, MxRecord } from "./check-mx-records.d.ts";
+import { Cache } from "../cache.js";
+import { MxCheckResult, MxRecord } from "./check-mx-records.js";
 /**
- * Options for SMTP verification.
- */
-export interface SmtpVerificationOptions {
-    cache?: Cache<MxCheckResult>;
-    fromEmail?: string;
-    port?: number;
-    smtpCache?: Cache<SmtpVerificationResult>;
-    timeout?: number;
-    ttl?: number;
+* Options for SMTP verification.
+*/
+interface SmtpVerificationOptions {
+  cache?: Cache<MxCheckResult>;
+  fromEmail?: string;
+  port?: number;
+  smtpCache?: Cache<SmtpVerificationResult>;
+  timeout?: number;
+  ttl?: number;
 }
 /**
- * Detailed result of SMTP verification attempt.
- */
-export interface SmtpVerificationResult {
-    error?: string;
-    mxRecords?: MxRecord[];
-    smtpResponse?: string;
-    valid: boolean;
+* Detailed result of SMTP verification attempt.
+*/
+interface SmtpVerificationResult {
+  error?: string;
+  mxRecords?: MxRecord[];
+  smtpResponse?: string;
+  valid: boolean;
 }
 /**
- * Verifies an email address by checking MX records and attempting SMTP verification.
- * Note: Many mail servers block SMTP verification to prevent email harvesting.
- * @param email The email address to verify.
- * @param options Verification options.
- * @returns Result containing verification status.
- * @example
- * ```ts
- * import { verifySmtp } from "@visulima/email/validation/verify-smtp";
- *
- * const result = await verifySmtp("user@example.com", {
- *     timeout: 5000,
- *     fromEmail: "test@example.com"
- * });
- * ```
- */
-export declare const verifySmtp: (email: string, options?: SmtpVerificationOptions) => Promise<SmtpVerificationResult>;
+* Verifies an email address by checking MX records and attempting SMTP verification.
+* Note: Many mail servers block SMTP verification to prevent email harvesting.
+* @param email The email address to verify.
+* @param options Verification options.
+* @returns Result containing verification status.
+* @example
+* ```ts
+* import { verifySmtp } from "@visulima/email/validation/verify-smtp";
+*
+* const result = await verifySmtp("user@example.com", {
+*     timeout: 5000,
+*     fromEmail: "test@example.com"
+* });
+* ```
+*/
+declare const verifySmtp: (email: string, options?: SmtpVerificationOptions) => Promise<SmtpVerificationResult>;
+export { SmtpVerificationOptions, SmtpVerificationResult, verifySmtp };

package/dist/utils/validation/verify-smtp.js

@@ -1,4 +1,4 @@
-var j=Object.defineProperty;var R=(t,e)=>j(t,"name",{value:e,configurable:!0});import{createRequire as S}from"node:module";import{checkMxRecords as C}from"./check-mx-records.js";const $=S(import.meta.url),u=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,O=R(t=>{if(typeof u<"u"&&u.versions&&u.versions.node){const[e,d]=u.versions.node.split(".").map(Number);if(e>22||e===22&&d>=3||e===20&&d>=16)return u.getBuiltinModule(t)}return $(t)},"__cjs_getBuiltinModule"),{Socket:P}=O("node:net");var E=Object.defineProperty,p=R((t,e)=>E(t,"name",{value:e,configurable:!0}),"n");const A=p(async(t,e={})=>{const{fromEmail:d="test@example.com",port:x=25,timeout:M=5e3,ttl:_=36e5}=e;if(!t||typeof t!="string")return{error:"Invalid email address",valid:!1};const l=t.toLowerCase().trim(),h=l.indexOf("@");if(h===-1||h===l.length-1)return{error:"Invalid email format",valid:!1};const{smtpCache:c}=e,g=`smtp:${l}:${d}:${x}`;if(c){const n=await c.get(g);if(n!==void 0)return n}const w=l.slice(h+1),W=e.cache,r=await C(w,{cache:W});if(!r.valid||!r.records||r.records.length===0){const n={error:r.error||"No MX records found",mxRecords:r.records,valid:!1};return c&&await c.set(g,n,_),n}const y=r.records[0];return new Promise(n=>{const o=new P;let v="",s="connected";const m=p(()=>{o.removeAllListeners(),o.destroy()},"cleanup"),f=p(a=>{c&&c.set(g,a,_).catch(()=>{}),n(a)},"cacheAndResolve"),T=p(a=>{m(),f({error:a.message,mxRecords:r.records,valid:!1})},"onError"),b=p(()=>{m(),f({error:"SMTP connection timeout",mxRecords:r.records,valid:!1})},"onTimeout");o.setTimeout(M),o.on("error",T),o.on("timeout",b),o.on("data",a=>{v+=a.toString();const i=v.slice(-3);s==="connected"&&(i.startsWith("220")||i.startsWith("250"))?(s="helo",o.write(`HELO ${w}\r
-`)):s==="helo"&&i.startsWith("250")?(s="mail-from",o.write(`MAIL FROM:<${d}>\r
-`)):s==="mail-from"&&i.startsWith("250")?(s="rcpt-to",o.write(`RCPT TO:<${l}>\r
-`)):s==="rcpt-to"&&i.startsWith("250")?(m(),f({mxRecords:r.records,smtpResponse:v,valid:!0})):s==="rcpt-to"&&(i.startsWith("550")||i.startsWith("551")||i.startsWith("553"))&&(m(),f({error:"Email address does not exist",mxRecords:r.records,smtpResponse:v,valid:!1}))}),y?o.connect(x,y.exchange):(m(),f({error:"No MX record available",mxRecords:r.records,valid:!1}))})},"verifySmtp");export{A as verifySmtp};
+import{createRequire as T}from"node:module";import{checkMxRecords as S}from"./check-mx-records.js";const $=T(import.meta.url),p=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,b=c=>{if(typeof p<"u"&&p.versions&&p.versions.node){const[o,d]=p.versions.node.split(".").map(Number);if(o>22||o===22&&d>=3||o===20&&d>=16)return p.getBuiltinModule(c)}return $(c)},{Socket:j}=b("node:net"),O=async(c,o={})=>{const{fromEmail:d="test@example.com",port:g=25,timeout:w=5e3,ttl:R=36e5}=o;if(!c||typeof c!="string")return{error:"Invalid email address",valid:!1};const l=c.toLowerCase().trim(),h=l.indexOf("@");if(h===-1||h===l.length-1)return{error:"Invalid email format",valid:!1};const{smtpCache:n}=o,v=`smtp:${l}:${d}:${g}`;if(n){const i=await n.get(v);if(i!==void 0)return i}const x=l.slice(h+1),M=o.cache,e=await S(x,{cache:M});if(!e.valid||!e.records||e.records.length===0){const i={error:e.error??"No MX records found",mxRecords:e.records,valid:!1};return n&&await n.set(v,i,R),i}const _=e.records[0];return new Promise(i=>{const r=new j;let u="",t="connected";const m=()=>{r.removeAllListeners(),r.destroy()},f=a=>{n&&n.set(v,a,R).catch(()=>{}),i(a)},W=a=>{m(),f({error:a.message,mxRecords:e.records,valid:!1})},y=()=>{m(),f({error:"SMTP connection timeout",mxRecords:e.records,valid:!1})};r.setTimeout(w),r.on("error",W),r.on("timeout",y),r.on("data",a=>{u+=a.toString();const s=u.slice(-3);t==="connected"&&(s.startsWith("220")||s.startsWith("250"))?(t="helo",r.write(`HELO ${x}\r
+`)):t==="helo"&&s.startsWith("250")?(t="mail-from",r.write(`MAIL FROM:<${d}>\r
+`)):t==="mail-from"&&s.startsWith("250")?(t="rcpt-to",r.write(`RCPT TO:<${l}>\r
+`)):t==="rcpt-to"&&s.startsWith("250")?(m(),f({mxRecords:e.records,smtpResponse:u,valid:!0})):t==="rcpt-to"&&(s.startsWith("550")||s.startsWith("551")||s.startsWith("553"))&&(m(),f({error:"Email address does not exist",mxRecords:e.records,smtpResponse:u,valid:!1}))}),_?r.connect(g,_.exchange):(m(),f({error:"No MX record available",mxRecords:e.records,valid:!1}))})};export{O as verifySmtp};

package/dist/webhooks/index.d.ts

@@ -0,0 +1,231 @@
+/**
+* Result of verifying an inbound webhook signature.
+*/
+interface WebhookVerificationResult {
+  /**
+  * Machine-readable reason when {@link WebhookVerificationResult.valid} is `false`.
+  */
+  reason?: string;
+  /**
+  * Whether the signature (and, when applicable, the timestamp) is valid.
+  */
+  valid: boolean;
+}
+/**
+* Headers passed to a webhook verifier. Either a plain record or a `Headers` instance.
+*
+* Lookups are case-insensitive.
+*/
+type WebhookHeaders = Headers | Record<string, string | string[] | undefined>;
+/**
+* Shared options for verifiers that enforce a timestamp tolerance to guard against replay attacks.
+*/
+interface TimestampToleranceOptions {
+  /**
+  * Maximum allowed difference, in seconds, between the signed timestamp and the current time.
+  *
+  * Set to `0` to disable the replay-protection window.
+  * @default 300
+  */
+  tolerance?: number;
+}
+/**
+* Options for {@link verifyMailgunWebhook}.
+*
+* Mailgun nests these three fields under a `signature` object in the webhook JSON body.
+*/
+interface MailgunWebhookOptions extends TimestampToleranceOptions {
+  /**
+  * Override the current time (milliseconds) — primarily for testing.
+  */
+  now?: number;
+  /**
+  * The HMAC value from `signature.signature`.
+  */
+  signature: string;
+  /**
+  * Your Mailgun HTTP webhook signing key (Settings → Webhooks).
+  */
+  signingKey: string;
+  /**
+  * The timestamp from `signature.timestamp` (unix seconds, as a string or number).
+  */
+  timestamp: number | string;
+  /**
+  * The token from `signature.token`.
+  */
+  token: string;
+}
+/**
+* Verifies a [Mailgun](https://documentation.mailgun.com/docs/mailgun/user-manual/tracking-messages/#webhooks) webhook.
+*
+* Mailgun computes `HMAC-SHA256(key = signingKey, message = timestamp + token)` and sends the hex
+* digest as `signature.signature`.
+* @param options Verification inputs. See {@link MailgunWebhookOptions}.
+* @returns The verification result.
+*/
+declare const verifyMailgunWebhook: (options: MailgunWebhookOptions) => WebhookVerificationResult;
+/**
+* Options for {@link verifyPostmarkWebhook}.
+*
+* Postmark does not sign webhook payloads; instead it supports HTTP Basic Auth credentials embedded
+* in the webhook URL (and IP allow-listing). This verifier checks the Basic Auth credentials.
+*/
+interface PostmarkWebhookOptions {
+  /**
+  * The value of the incoming `Authorization` header (e.g. `Basic dXNlcjpwYXNz`).
+  */
+  authorization: string | undefined;
+  /**
+  * The password configured on the Postmark webhook URL.
+  */
+  password: string;
+  /**
+  * The username configured on the Postmark webhook URL.
+  */
+  username: string;
+}
+/**
+* Verifies a [Postmark](https://postmarkapp.com/support/article/1213-securing-inbound-and-open-webhooks)
+* webhook by validating its HTTP Basic Auth credentials.
+* @param options Verification inputs. See {@link PostmarkWebhookOptions}.
+* @returns The verification result.
+*/
+declare const verifyPostmarkWebhook: (options: PostmarkWebhookOptions) => WebhookVerificationResult;
+/**
+* Options for {@link verifySendGridWebhook}.
+*/
+interface SendGridWebhookOptions extends TimestampToleranceOptions {
+  /**
+  * Override the current time (milliseconds) — primarily for testing.
+  */
+  now?: number;
+  /**
+  * The raw, unparsed request body exactly as received.
+  */
+  payload: string;
+  /**
+  * The verification key from the SendGrid Event Webhook settings.
+  *
+  * Either the base64-encoded DER (SPKI) string SendGrid displays, or a full PEM block.
+  */
+  publicKey: string;
+  /**
+  * The value of the `X-Twilio-Email-Event-Webhook-Signature` header (base64 DER ECDSA signature).
+  */
+  signature: string;
+  /**
+  * The value of the `X-Twilio-Email-Event-Webhook-Timestamp` header (unix epoch seconds).
+  */
+  timestamp: string;
+}
+/**
+* Verifies a [SendGrid Event Webhook](https://www.twilio.com/docs/sendgrid/for-developers/tracking-events/getting-started-event-webhook-security-features)
+* using its ECDSA (prime256v1) signature, and rejects stale requests to prevent replay.
+*
+* The signed message is `timestamp + payload`. The signature header is the base64-encoded DER
+* ECDSA signature. The timestamp is unix epoch seconds and must fall within `tolerance` of now.
+* @param options Verification inputs. See {@link SendGridWebhookOptions}.
+* @returns The verification result.
+* @throws {EmailError} When the supplied public key cannot be parsed.
+*/
+declare const verifySendGridWebhook: (options: SendGridWebhookOptions) => WebhookVerificationResult;
+/**
+* The subset of an Amazon SNS message envelope relevant to signature verification.
+*
+* AWS SES delivers events (deliveries, bounces, complaints) wrapped in SNS notifications.
+*/
+interface SnsMessage {
+  [key: string]: unknown;
+  Message?: string;
+  MessageId?: string;
+  Signature?: string;
+  SignatureVersion?: string;
+  SigningCertURL?: string;
+  Subject?: string;
+  SubscribeURL?: string;
+  Timestamp?: string;
+  Token?: string;
+  TopicArn?: string;
+  Type?: string;
+}
+/**
+* Resolves a signing-certificate URL to its PEM contents. Injectable for testing and caching.
+*/
+type CertificateResolver = (url: string) => Promise<string> | string;
+/**
+* Options for {@link verifySnsMessage}.
+*/
+interface SnsVerifyOptions {
+  /**
+  * Override how the signing certificate is fetched. Defaults to a `fetch`-based resolver that
+  * only accepts `https://*.amazonaws.com` URLs.
+  */
+  certificateResolver?: CertificateResolver;
+}
+/**
+* Validates that a signing-certificate URL points at an AWS SNS signing host over HTTPS.
+* @param url The `SigningCertURL` from the SNS message.
+* @returns `true` when the URL is an acceptable AWS SNS certificate endpoint.
+*/
+declare const isValidSigningCertUrl: (url: string) => boolean;
+/**
+* Verifies the RSA signature on an Amazon SNS message (used to wrap AWS SES events).
+*
+* Signature version `1` uses SHA1, version `2` uses SHA256. The signing certificate is fetched from
+* `SigningCertURL` (validated to be an `sns.&lt;region>.amazonaws.com` HTTPS endpoint with no userinfo
+* or explicit port) unless a custom {@link CertificateResolver} is supplied.
+* @param message The parsed SNS message envelope.
+* @param options Optional overrides. See {@link SnsVerifyOptions}.
+* @returns The verification result.
+* @throws {EmailError} When the certificate cannot be resolved.
+*/
+declare const verifySnsMessage: (message: SnsMessage, options?: SnsVerifyOptions) => Promise<WebhookVerificationResult>;
+/**
+* Options for {@link verifyStandardWebhook}.
+*/
+interface StandardWebhookOptions extends TimestampToleranceOptions {
+  /**
+  * The request headers, or the three signature headers as a plain record.
+  *
+  * Recognized header names (case-insensitive): `webhook-id` / `svix-id`,
+  * `webhook-timestamp` / `svix-timestamp`, and `webhook-signature` / `svix-signature`.
+  */
+  headers: WebhookHeaders;
+  /**
+  * Override the current time (milliseconds) — primarily for testing.
+  */
+  now?: number;
+  /**
+  * The raw, unparsed request body exactly as received.
+  *
+  * Parsing and re-serializing the body changes the bytes and breaks verification.
+  */
+  payload: string;
+  /**
+  * The signing secret. Supports the `whsec_`-prefixed, base64-encoded form used by Svix/Resend,
+  * or a raw secret string.
+  */
+  secret: string;
+}
+/**
+* Verifies a webhook signed according to the [Standard Webhooks](https://www.standardwebhooks.com/) spec.
+*
+* This is the scheme used by Svix and, by extension, Resend. The signed content is
+* `${id}.${timestamp}.${payload}`, HMAC-SHA256'd with the (base64-decoded) secret and base64-encoded.
+* The `webhook-signature` header may contain multiple space-separated `v1,&lt;sig>` entries; a match
+* against any one of them passes.
+* @param options Verification inputs. See {@link StandardWebhookOptions}.
+* @returns The verification result.
+*/
+declare const verifyStandardWebhook: (options: StandardWebhookOptions) => WebhookVerificationResult;
+/**
+* Verifies a [Resend](https://resend.com/docs/dashboard/webhooks/verify-webhooks-requests) webhook.
+*
+* Resend uses Svix, so this is an alias for {@link verifyStandardWebhook} that accepts the
+* `svix-*` headers.
+* @param options Verification inputs. See {@link StandardWebhookOptions}.
+* @returns The verification result.
+*/
+declare const verifyResendWebhook: (options: StandardWebhookOptions) => WebhookVerificationResult;
+export { type CertificateResolver, type MailgunWebhookOptions, type PostmarkWebhookOptions, type SendGridWebhookOptions, type SnsMessage, type SnsVerifyOptions, type StandardWebhookOptions, type TimestampToleranceOptions, type WebhookHeaders, type WebhookVerificationResult, isValidSigningCertUrl, verifyMailgunWebhook, verifyPostmarkWebhook, verifyResendWebhook, verifySendGridWebhook, verifySnsMessage, verifyStandardWebhook };

package/dist/webhooks/index.js

@@ -0,0 +1 @@
+import{verifyMailgunWebhook as r}from"../packem_shared/verifyMailgunWebhook-Cwl0OD3P.js";import{verifyPostmarkWebhook as f}from"../packem_shared/verifyPostmarkWebhook-C72ZvbrG.js";import{verifySendGridWebhook as n}from"../packem_shared/verifySendGridWebhook-Dbwc1tfG.js";import{isValidSigningCertUrl as d,verifySnsMessage as k}from"../packem_shared/isValidSigningCertUrl-Bii1AMGC.js";import{verifyResendWebhook as s,verifyStandardWebhook as v}from"../packem_shared/verifyResendWebhook-YK2zNDXR.js";export{d as isValidSigningCertUrl,r as verifyMailgunWebhook,f as verifyPostmarkWebhook,s as verifyResendWebhook,n as verifySendGridWebhook,k as verifySnsMessage,v as verifyStandardWebhook};