@visulima/email 2.0.0 → 2.1.1

package/dist/providers/outlook365/index.d.ts

@@ -3,11 +3,25 @@ export type { a as Provider } from "../../packem_shared/provider.d-J-y6iogK.js";
 import { M as MaybePromise, B as BaseConfig, E as EmailOptions } from "../../packem_shared/types.d-ejzh-xBP.js";
 import 'node:buffer';
 /**
+* Which OAuth2 flow a config resolves to.
+*/
+type Outlook365AuthMode = "accessToken" | "clientCredentials" | "getAccessToken" | "refreshToken";
+/**
 * Outlook365 / Microsoft Graph configuration.
 *
-* Authentication is delegated: supply a static `accessToken` or an async
-* `getAccessToken` (e.g. backed by `@azure/msal-node`). The provider never bundles an
-* auth SDK, so it stays dependency-light and runtime-agnostic.
+* Four authentication modes are supported, in precedence order:
+*
+* 1. `getAccessToken` — bring your own async token source (e.g. `@azure/msal-node`).
+* 2. `accessToken` — a static token, for scripts and tests.
+* 3. `refreshToken` — delegated flow; the provider exchanges the refresh token for access tokens and caches them. Requires `tenantId` + `clientId`.
+* 4. `clientCredentials` (selected by supplying `clientSecret`) — app-only flow. Requires `tenantId` + `clientId`, and `userId` must name a real mailbox, since app-only tokens have no `me`.
+*
+* A confidential-client delegated config and an app-only config with a leftover `refreshToken`
+* are indistinguishable — both carry `tenantId`, `clientId`, `clientSecret` and `refreshToken`.
+* Set {@link Outlook365Config.authMode} to pin the flow when both are present.
+*
+* The built-in flows talk to the Azure AD token endpoint over `fetch` — no auth SDK is
+* bundled, so the provider stays dependency-light and runtime-agnostic.
 */
 interface Outlook365Config extends BaseConfig {
   /**
@@ -16,6 +30,28 @@ interface Outlook365Config extends BaseConfig {
   */
   accessToken?: string;
   /**
+  * Pins the authentication flow instead of inferring it from which credentials are present.
+  * Use it when a config could match more than one flow — most notably `clientCredentials`
+  * vs `refreshToken` when both a client secret and a refresh token are supplied.
+  */
+  authMode?: Outlook365AuthMode;
+  /**
+  * Azure AD login authority (default `https://login.microsoftonline.com`). Override for
+  * sovereign clouds, e.g. `https://login.microsoftonline.us`.
+  */
+  authority?: string;
+  /**
+  * Application (client) id of the Azure AD app registration. Required by the
+  * `refreshToken` and `clientSecret` flows.
+  */
+  clientId?: string;
+  /**
+  * Client secret of the Azure AD app registration. Supplying this without a
+  * {@link Outlook365Config.refreshToken} selects the app-only (client credentials) flow.
+  * It is also sent with the delegated flow when the app is a confidential client.
+  */
+  clientSecret?: string;
+  /**
   * API endpoint override (default `https://graph.microsoft.com/v1.0`).
   */
   endpoint?: string;
@@ -24,11 +60,50 @@ interface Outlook365Config extends BaseConfig {
   */
   getAccessToken?: () => MaybePromise<string>;
   /**
+  * Time source in milliseconds — injectable for tests. Defaults to `Date.now`.
+  */
+  now?: () => number;
+  /**
+  * Called whenever Azure AD rotates the refresh token, so it can be persisted. Awaited
+  * before the access token is handed out, so a rejected promise is reported rather than
+  * surfacing as an unhandled rejection.
+  *
+  * The rotated token is adopted in-process regardless of whether persisting succeeds — the
+  * previous token is already dead at Azure AD, so the new one is the only usable value. A
+  * persist failure is logged rather than failing the send, but the stored token is then
+  * stale and sending will break on restart.
+  * @param refreshToken The new refresh token.
+  */
+  onRefreshToken?: (refreshToken: string) => MaybePromise<void>;
+  /**
+  * A long-lived OAuth2 refresh token, selecting the delegated flow. Obtain it via the
+  * authorization-code flow with the `offline_access` scope.
+  */
+  refreshToken?: string;
+  /**
   * Whether to keep a copy in the Sent Items folder (default true).
   */
   saveToSentItems?: boolean;
   /**
+  * Scope override for the built-in flows. Defaults to
+  * `["https://graph.microsoft.com/.default"]` for the app-only flow and
+  * `["https://graph.microsoft.com/Mail.Send", "offline_access"]` for the delegated flow.
+  */
+  scopes?: string[];
+  /**
+  * Azure AD tenant id (or `common` / `organizations` for the delegated flow). Required by
+  * the `refreshToken` and `clientSecret` flows.
+  */
+  tenantId?: string;
+  /**
+  * Renew the access token this many milliseconds before it expires (default 60000).
+  * Negative values are clamped to 0. A value larger than the token lifetime disables
+  * caching, costing one token request per send.
+  */
+  tokenRefreshSkewMs?: number;
+  /**
   * The mailbox to send as: a user id/UPN. Defaults to `me` (the token's own mailbox).
+  * The app-only flow has no `me`, so it requires an explicit value.
   */
   userId?: string;
 }
@@ -43,6 +118,9 @@ interface Outlook365EmailOptions extends EmailOptions {
 }
 /**
 * Outlook365 provider — sends email through the Microsoft Graph `sendMail` endpoint.
+*
+* Authenticates with a caller-supplied token (`accessToken` / `getAccessToken`), the delegated
+* refresh-token flow, or the app-only client-credentials flow. See {@link Outlook365Config}.
 */
-declare const outlook365Provider: ProviderFactory<Outlook365Config>;
-export { type Outlook365Config, type Outlook365EmailOptions, type ProviderFactory, outlook365Provider };
+declare const outlook365Provider: ProviderFactory<Outlook365Config, unknown, Outlook365EmailOptions>;
+export { type Outlook365AuthMode, type Outlook365Config, type Outlook365EmailOptions, type ProviderFactory, outlook365Provider };

package/dist/providers/outlook365/index.js

@@ -1 +1 @@
-import{default as e}from"../../packem_shared/outlook365Provider-63ggDpqV.js";export{e as outlook365Provider};
+import{default as e}from"../../packem_shared/outlook365Provider-Btk4Emig.js";export{e as outlook365Provider};

package/dist/providers/plunk/index.js

@@ -1 +1 @@
-import{default as o}from"../../packem_shared/plunkProvider-yTlrJVEp.js";export{o as plunkProvider};
+import{default as o}from"../../packem_shared/plunkProvider-Bw8e6460.js";export{o as plunkProvider};

package/dist/providers/postal/index.js

@@ -1 +1 @@
-import{default as a}from"../../packem_shared/postalProvider-CRX_bMYD.js";export{a as postalProvider};
+import{default as a}from"../../packem_shared/postalProvider-CT8zr89z.js";export{a as postalProvider};

package/dist/providers/postmark/index.js

@@ -1 +1 @@
-import{default as a}from"../../packem_shared/postmarkProvider-CDx85Yge.js";export{a as postmarkProvider};
+import{default as a}from"../../packem_shared/postmarkProvider-CQSqZWDs.js";export{a as postmarkProvider};

package/dist/providers/resend/index.js

@@ -1 +1 @@
-import{default as d}from"../../packem_shared/resendProvider-CiclWxzr.js";export{d as resendProvider};
+import{default as d}from"../../packem_shared/resendProvider-drJYlvLP.js";export{d as resendProvider};

package/dist/providers/scaleway/index.js

@@ -1 +1 @@
-import{default as r}from"../../packem_shared/scalewayProvider-BcND48qO.js";export{r as scalewayProvider};
+import{default as r}from"../../packem_shared/scalewayProvider-DU5gXQrl.js";export{r as scalewayProvider};

package/dist/providers/sendgrid/index.js

@@ -1 +1 @@
-import{default as e}from"../../packem_shared/sendGridProvider-D8ZLgY62.js";export{e as sendGridProvider};
+import{default as e}from"../../packem_shared/sendGridProvider-BuTbEXW8.js";export{e as sendGridProvider};

package/dist/providers/smtp/index.js

@@ -1 +1 @@
-import{default as o}from"../../packem_shared/smtpProvider-Bm0yP97W.js";export{o as smtpProvider};
+import{default as o}from"../../packem_shared/smtpProvider-5MI3-EPh.js";export{o as smtpProvider};

package/dist/providers/sparkpost/index.js

@@ -1 +1 @@
-import{default as a}from"../../packem_shared/sparkpostProvider-CTYfSRaV.js";export{a as sparkpostProvider};
+import{default as a}from"../../packem_shared/sparkpostProvider-UAsFYIjP.js";export{a as sparkpostProvider};

package/dist/providers/sweego/index.js

@@ -1 +1 @@
-import{default as r}from"../../packem_shared/sweegoProvider-DOoin_vi.js";export{r as sweegoProvider};
+import{default as r}from"../../packem_shared/sweegoProvider-SUz0LIcA.js";export{r as sweegoProvider};

package/dist/providers/zeptomail/index.js

@@ -1 +1 @@
-import{default as r}from"../../packem_shared/zeptomailProvider-DKBPSHPj.js";export{r as zeptomailProvider};
+import{default as r}from"../../packem_shared/zeptomailProvider-DXNX9mG_.js";export{r as zeptomailProvider};

package/dist/test/index.js

@@ -1 +1 @@
-import{emailMatchers as a,registerEmailMatchers as o,toHaveSentMatching as r,toHaveSentTo as i,toHaveSentWithAttachment as m,toHaveSentWithSubject as h}from"../packem_shared/emailMatchers-DZDkrZ_3.js";import{toEmailSnapshot as c}from"../packem_shared/toEmailSnapshot-DeRqM5SJ.js";import{createTestEmail as s}from"../packem_shared/createTestEmail-D3XPGiHY.js";export{s as createTestEmail,a as emailMatchers,o as registerEmailMatchers,c as toEmailSnapshot,r as toHaveSentMatching,i as toHaveSentTo,m as toHaveSentWithAttachment,h as toHaveSentWithSubject};
+import{emailMatchers as a,registerEmailMatchers as o,toHaveSentMatching as r,toHaveSentTo as i,toHaveSentWithAttachment as m,toHaveSentWithSubject as h}from"../packem_shared/emailMatchers-DZDkrZ_3.js";import{toEmailSnapshot as c}from"../packem_shared/toEmailSnapshot-DeRqM5SJ.js";import{createTestEmail as s}from"../packem_shared/createTestEmail-f12yLlWn.js";export{s as createTestEmail,a as emailMatchers,o as registerEmailMatchers,c as toEmailSnapshot,r as toHaveSentMatching,i as toHaveSentTo,m as toHaveSentWithAttachment,h as toHaveSentWithSubject};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@visulima/email",
-  "version": "2.0.0",
+  "version": "2.1.1",
   "description": "A comprehensive email library with multi-provider support, crypto utilities, and template engines",
   "keywords": [
     "ahasend",
@@ -122,6 +122,10 @@
       "types": "./dist/template-engines/i18n.d.ts",
       "default": "./dist/template-engines/i18n.js"
     },
+    "./providers/autosend": {
+      "types": "./dist/providers/autosend/index.d.ts",
+      "default": "./dist/providers/autosend/index.js"
+    },
     "./providers/aws-ses": {
       "types": "./dist/providers/aws-ses/index.d.ts",
       "default": "./dist/providers/aws-ses/index.js"

package/dist/packem_shared/make-request-BlK_B72c.js

@@ -1 +0,0 @@
-import d from"./EmailError-B-sEf3bp.js";const y=globalThis.Buffer!==void 0,p=async(i,s={},r)=>{const l=typeof i=="string"?new URL(i):i;try{const e=new Headers;s.headers&&Object.entries(s.headers).forEach(([t,u])=>{e.set(t,u)});const o={headers:e,method:s.method??(r?"POST":"GET")};r&&(typeof r=="string"||r instanceof Uint8Array?o.body=r:y&&r instanceof globalThis.Buffer?o.body=new Uint8Array(r):o.body=new Uint8Array(r));let c,a;s.timeout&&(c=new AbortController,a=setTimeout(()=>{c?.abort()},s.timeout),o.signal=c.signal);try{const t=await fetch(l.toString(),o);a&&clearTimeout(a);const u=(t.headers.get("content-type")??"").includes("application/json");let n;if(u)try{n=await t.json()}catch{n=await t.text()}else n=await t.text();const f=t.status>=200&&t.status<300,h={};return t.headers.forEach((m,w)=>{h[w]=m}),{data:{body:n,headers:h,statusCode:t.status},error:f?void 0:new d("http",`Request failed with status ${t.status}`,{code:t.status.toString()}),success:f}}catch(t){if(a&&clearTimeout(a),t instanceof Error&&t.name==="AbortError")return{error:new d("http",`Request timed out after ${s.timeout}ms`),success:!1};throw t}}catch(e){return{error:new d("http",`Request failed: ${e instanceof Error?e.message:String(e)}`,{cause:e instanceof Error?e:new Error(String(e))}),success:!1}}};export{p as m};

package/dist/packem_shared/oauth2Middleware-CodqXkyj.js

@@ -1 +0,0 @@
-import{s as u}from"./headers-to-record-De1Eg951.js";const p=o=>{const{fetchToken:r,headerName:s="Authorization",now:t=Date.now,onToken:n,scheme:c="Bearer",skewMs:i=6e4}=o;let e;const h=async()=>(e&&(e.expiresAt===void 0||e.expiresAt-i>t())&&e||(e=await r(),n?.(e)),e);return async(a,d)=>{const w=await h(),k=a.headers?u(a.headers):{};return d({...a,headers:{...k,[s]:`${c} ${w.accessToken}`}})}};export{p as oauth2Middleware};

package/dist/packem_shared/outlook365Provider-63ggDpqV.js

@@ -1 +0,0 @@
-import u from"./EmailError-B-sEf3bp.js";import h from"./RequiredOptionError-DuNNY_a5.js";import{e as y}from"./generate-message-id-gXAuMz4g.js";import{m as k}from"./make-request-BlK_B72c.js";import{u as v}from"./retry-3pnxTuNs.js";import{f as A}from"./validate-email-options-mCM9dVug.js";import{defineProvider as b}from"./defineProvider-C9q-7iwt.js";import{c as w}from"./attachment-processor-CMp7qqMI.js";import{h as I,P as S,c as P}from"./provider-base-C7PuopYK.js";const a="outlook365",j="https://graph.microsoft.com/v1.0",R=3e4,x=3,o=t=>[t].flat(),c=t=>t.map(s=>({emailAddress:{address:s.email,...s.name?{name:s.name}:{}}})),q=b((t={})=>{if(!t.accessToken&&!t.getAccessToken)throw new h(a,["accessToken","getAccessToken"]);const s={accessToken:t.accessToken,debug:t.debug??!1,endpoint:t.endpoint??j,getAccessToken:t.getAccessToken,logger:t.logger,retries:t.retries??x,saveToSentItems:t.saveToSentItems??!0,timeout:t.timeout??R,userId:t.userId??"me"},p=new S,f=P(a,t.logger),g=async()=>s.getAccessToken?s.getAccessToken():s.accessToken;return{features:{attachments:!0,batchSending:!1,customHeaders:!0,html:!0,replyTo:!0,scheduling:!1,tagging:!1,templates:!1,tracking:!1},async initialize(){p.setInitialized()},async isAvailable(){return!!(s.accessToken??s.getAccessToken)},name:a,options:s,async sendEmail(e){try{const n=A(e);if(n.length>0)return{error:new u(a,`Invalid email options: ${n.join(", ")}`),success:!1};let d;try{d=await g()}catch(m){return{error:new u(a,"Failed to obtain access token",{cause:m}),success:!1}}const r={body:{content:e.html??e.text??"",contentType:e.html?"HTML":"Text"},subject:e.subject,toRecipients:c(o(e.to))};e.cc&&(r.ccRecipients=c(o(e.cc))),e.bcc&&(r.bccRecipients=c(o(e.bcc))),e.replyTo&&(r.replyTo=c(o(e.replyTo))),e.importance&&(r.importance=e.importance),e.attachments&&e.attachments.length>0&&(r.attachments=await Promise.all(e.attachments.map(async m=>{const l=await w(m,a);return{"@odata.type":"#microsoft.graph.fileAttachment",contentBytes:l.content,contentType:l.contentType,name:l.filename}})));const T=s.userId==="me"?"me":`users/${s.userId}`,i=await v(async()=>k(`${s.endpoint}/${T}/sendMail`,{headers:{Authorization:`Bearer ${d}`,"Content-Type":"application/json"},method:"POST",timeout:s.timeout},JSON.stringify({message:r,saveToSentItems:s.saveToSentItems})),s.retries);return i.success?{data:{messageId:y(),provider:a,response:i.data,sent:!0,timestamp:new Date},success:!0}:{error:i.error??new u(a,"Failed to send email"),success:!1}}catch(n){return{error:I(a,"send email",n,f),success:!1}}},async validateCredentials(){return this.isAvailable()}}});export{q as default};

package/dist/packem_shared/retry-3pnxTuNs.js

@@ -1 +0,0 @@
-const o=async(t,e=3,s=300)=>{try{const r=await t();return r.success||e<=0?r:(await new Promise(n=>{setTimeout(()=>{n()},s)}),o(t,e-1,s*2))}catch(r){return e<=0?{error:r instanceof Error?r:new Error(String(r)),success:!1}:(await new Promise(n=>{setTimeout(()=>{n()},s)}),o(t,e-1,s*2))}};export{o as u};