@visulima/email 2.1.8 → 3.0.0

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## @visulima/email [3.0.0](https://github.com/visulima/visulima/compare/%40visulima%2Femail%402.1.9...%40visulima%2Femail%403.0.0) (2026-08-18)
+
+
+### Dependencies
+
+* **@visulima/fs:** upgraded to 6.0.2
+
+## @visulima/email [2.1.9](https://github.com/visulima/visulima/compare/%40visulima%2Femail%402.1.8...%40visulima%2Femail%402.1.9) (2026-08-17)
+
+
+### Dependencies
+
+* **@visulima/fs:** upgraded to 6.0.1
+
 ## @visulima/email [2.1.8](https://github.com/visulima/visulima/compare/%40visulima%2Femail%402.1.7...%40visulima%2Femail%402.1.8) (2026-08-02)
 
 

package/LICENSE.md

@@ -427,9 +427,41 @@ Repository: git+https://github.com/visulima/visulima.git
 >
 > # Licenses of bundled types
 > The published @visulima/fs artifact additionally contains code with the following licenses:
-> ISC, MIT
+> MIT, (MIT OR CC0-1.0)
 >
 > # Bundled types:
+> ## @visulima/yaml
+> License: MIT
+> By: Daniel Bannert
+> Repository: git+https://github.com/visulima/visulima.git
+>
+> > MIT License
+> >
+> > Copyright (c) 2026 visulima
+> >
+> > Permission is hereby granted, free of charge, to any person obtaining a copy
+> > of this software and associated documentation files (the "Software"), to deal
+> > in the Software without restriction, including without limitation the rights
+> > to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+> > copies of the Software, and to permit persons to whom the Software is
+> > furnished to do so, subject to the following conditions:
+> >
+> > The above copyright notice and this permission notice shall be included in all
+> > copies or substantial portions of the Software.
+> >
+> > THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+> > IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+> > FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+> > AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+> > LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+> > OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+> > SOFTWARE.
+> >
+> > 
+> > 
+>
+> ---------------------------------------
+>
 > ## is-fs-case-sensitive
 > License: MIT
 > By: Hiroki Osame
@@ -488,24 +520,132 @@ Repository: git+https://github.com/visulima/visulima.git
 >
 > ---------------------------------------
 >
-> ## yaml
-> License: ISC
-> By: Eemeli Aro
-> Repository: github:eemeli/yaml
->
-> > Copyright Eemeli Aro <eemeli@gmail.com>
-> >
-> > Permission to use, copy, modify, and/or distribute this software for any purpose
-> > with or without fee is hereby granted, provided that the above copyright notice
-> > and this permission notice appear in all copies.
-> >
-> > THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
-> > REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
-> > FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
-> > INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS
-> > OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
-> > TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF
-> > THIS SOFTWARE.
+> ## type-fest
+> License: (MIT OR CC0-1.0)
+> By: Sindre Sorhus
+> Repository: sindresorhus/type-fest
+>
+> > Creative Commons Legal Code
+> >
+> > CC0 1.0 Universal
+> >
+> >     CREATIVE COMMONS CORPORATION IS NOT A LAW FIRM AND DOES NOT PROVIDE
+> >     LEGAL SERVICES. DISTRIBUTION OF THIS DOCUMENT DOES NOT CREATE AN
+> >     ATTORNEY-CLIENT RELATIONSHIP. CREATIVE COMMONS PROVIDES THIS
+> >     INFORMATION ON AN "AS-IS" BASIS. CREATIVE COMMONS MAKES NO WARRANTIES
+> >     REGARDING THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS
+> >     PROVIDED HEREUNDER, AND DISCLAIMS LIABILITY FOR DAMAGES RESULTING FROM
+> >     THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS PROVIDED
+> >     HEREUNDER.
+> >
+> > Statement of Purpose
+> >
+> > The laws of most jurisdictions throughout the world automatically confer
+> > exclusive Copyright and Related Rights (defined below) upon the creator
+> > and subsequent owner(s) (each and all, an "owner") of an original work of
+> > authorship and/or a database (each, a "Work").
+> >
+> > Certain owners wish to permanently relinquish those rights to a Work for
+> > the purpose of contributing to a commons of creative, cultural and
+> > scientific works ("Commons") that the public can reliably and without fear
+> > of later claims of infringement build upon, modify, incorporate in other
+> > works, reuse and redistribute as freely as possible in any form whatsoever
+> > and for any purposes, including without limitation commercial purposes.
+> > These owners may contribute to the Commons to promote the ideal of a free
+> > culture and the further production of creative, cultural and scientific
+> > works, or to gain reputation or greater distribution for their Work in
+> > part through the use and efforts of others.
+> >
+> > For these and/or other purposes and motivations, and without any
+> > expectation of additional consideration or compensation, the person
+> > associating CC0 with a Work (the "Affirmer"), to the extent that he or she
+> > is an owner of Copyright and Related Rights in the Work, voluntarily
+> > elects to apply CC0 to the Work and publicly distribute the Work under its
+> > terms, with knowledge of his or her Copyright and Related Rights in the
+> > Work and the meaning and intended legal effect of CC0 on those rights.
+> >
+> > 1. Copyright and Related Rights. A Work made available under CC0 may be
+> > protected by copyright and related or neighboring rights ("Copyright and
+> > Related Rights"). Copyright and Related Rights include, but are not
+> > limited to, the following:
+> >
+> >   i. the right to reproduce, adapt, distribute, perform, display,
+> >      communicate, and translate a Work;
+> >  ii. moral rights retained by the original author(s) and/or performer(s);
+> > iii. publicity and privacy rights pertaining to a person's image or
+> >      likeness depicted in a Work;
+> >  iv. rights protecting against unfair competition in regards to a Work,
+> >      subject to the limitations in paragraph 4(a), below;
+> >   v. rights protecting the extraction, dissemination, use and reuse of data
+> >      in a Work;
+> >  vi. database rights (such as those arising under Directive 96/9/EC of the
+> >      European Parliament and of the Council of 11 March 1996 on the legal
+> >      protection of databases, and under any national implementation
+> >      thereof, including any amended or successor version of such
+> >      directive); and
+> > vii. other similar, equivalent or corresponding rights throughout the
+> >      world based on applicable law or treaty, and any national
+> >      implementations thereof.
+> >
+> > 2. Waiver. To the greatest extent permitted by, but not in contravention
+> > of, applicable law, Affirmer hereby overtly, fully, permanently,
+> > irrevocably and unconditionally waives, abandons, and surrenders all of
+> > Affirmer's Copyright and Related Rights and associated claims and causes
+> > of action, whether now known or unknown (including existing as well as
+> > future claims and causes of action), in the Work (i) in all territories
+> > worldwide, (ii) for the maximum duration provided by applicable law or
+> > treaty (including future time extensions), (iii) in any current or future
+> > medium and for any number of copies, and (iv) for any purpose whatsoever,
+> > including without limitation commercial, advertising or promotional
+> > purposes (the "Waiver"). Affirmer makes the Waiver for the benefit of each
+> > member of the public at large and to the detriment of Affirmer's heirs and
+> > successors, fully intending that such Waiver shall not be subject to
+> > revocation, rescission, cancellation, termination, or any other legal or
+> > equitable action to disrupt the quiet enjoyment of the Work by the public
+> > as contemplated by Affirmer's express Statement of Purpose.
+> >
+> > 3. Public License Fallback. Should any part of the Waiver for any reason
+> > be judged legally invalid or ineffective under applicable law, then the
+> > Waiver shall be preserved to the maximum extent permitted taking into
+> > account Affirmer's express Statement of Purpose. In addition, to the
+> > extent the Waiver is so judged Affirmer hereby grants to each affected
+> > person a royalty-free, non transferable, non sublicensable, non exclusive,
+> > irrevocable and unconditional license to exercise Affirmer's Copyright and
+> > Related Rights in the Work (i) in all territories worldwide, (ii) for the
+> > maximum duration provided by applicable law or treaty (including future
+> > time extensions), (iii) in any current or future medium and for any number
+> > of copies, and (iv) for any purpose whatsoever, including without
+> > limitation commercial, advertising or promotional purposes (the
+> > "License"). The License shall be deemed effective as of the date CC0 was
+> > applied by Affirmer to the Work. Should any part of the License for any
+> > reason be judged legally invalid or ineffective under applicable law, such
+> > partial invalidity or ineffectiveness shall not invalidate the remainder
+> > of the License, and in such case Affirmer hereby affirms that he or she
+> > will not (i) exercise any of his or her remaining Copyright and Related
+> > Rights in the Work or (ii) assert any associated claims and causes of
+> > action with respect to the Work, in either case contrary to Affirmer's
+> > express Statement of Purpose.
+> >
+> > 4. Limitations and Disclaimers.
+> >
+> >  a. No trademark or patent rights held by Affirmer are waived, abandoned,
+> >     surrendered, licensed or otherwise affected by this document.
+> >  b. Affirmer offers the Work as-is and makes no representations or
+> >     warranties of any kind concerning the Work, express, implied,
+> >     statutory or otherwise, including without limitation warranties of
+> >     title, merchantability, fitness for a particular purpose, non
+> >     infringement, or the absence of latent or other defects, accuracy, or
+> >     the present or absence of errors, whether or not discoverable, all to
+> >     the greatest extent permissible under applicable law.
+> >  c. Affirmer disclaims responsibility for clearing rights of other persons
+> >     that may apply to the Work or any use thereof, including without
+> >     limitation any person's Copyright and Related Rights in the Work.
+> >     Further, Affirmer disclaims responsibility for obtaining any necessary
+> >     consents, permissions or other rights required for any use of the
+> >     Work.
+> >  d. Affirmer understands and acknowledges that Creative Commons is not a
+> >     party to this document and has no duty or obligation with respect to
+> >     this CC0 or use of the Work.
 
 ---------------------------------------
 

package/dist/crypto/index.d.ts

@@ -1,6 +1,6 @@
 import { KeyObject } from 'node:crypto';
+import { D as DkimOptions, S as SmimeEncryptOptions, E as EmailEncrypter, a as SmimeSignOptions, b as EmailSigner } from "../packem_shared/types.d-Cb5fls_X.js";
 import { E as EmailOptions } from "../packem_shared/types.d-B9295M4_.js";
-import { D as DkimOptions, E as EmailSigner, S as SmimeEncryptOptions, a as EmailEncrypter, b as SmimeSignOptions } from "../packem_shared/types.d-B0t3PQ3t.js";
 import 'node:buffer';
 /**
  * The signature algorithm for the ARC headers. RSA per RFC 8617, Ed25519 per RFC 8463.
@@ -104,11 +104,12 @@ interface ArcVerifyResult {
  * Computes the exact byte string that the ARC-Message-Signature `b=` value signs.
  *
  * Exposed so ARC verifiers (and tests) can re-derive the signing input.
- * @param email The email being sealed.
+ * @param message The serialized MIME message being sealed.
  * @param options The seal options.
  * @returns The AMS header (without the `b=` value) and the data signed.
+ * @throws {Error} When `message` has no header/body separator.
  */
-declare const arcMessageSignatureBase: (email: EmailOptions, options: ArcSealOptions) => {
+declare const arcMessageSignatureBase: (message: string, options: ArcSealOptions) => {
   header: string;
   signBase: string;
 };
@@ -133,57 +134,43 @@ declare const arcSealBase: (aarValue: string, amsValue: string, options: ArcSeal
  * your service forwards mail and wants downstream receivers to trust the authentication results you
  * observed. Supports RSA (default) and Ed25519 (`algorithm: "ed25519-sha256"`, RFC 8463) keys.
  *
- * IMPORTANT: the body hash (`bh=`) is computed over `text` + "\n\n" + `html` with relaxed
- * canonicalization — the same simplification as the DKIM signer. For a third-party ARC verifier to
- * accept the seal, the body actually transmitted on the wire must canonicalize to this same value, so
- * apply ARC at the point where the MIME body is finalized (or feed in the exact rendered body).
- * @param email The email to seal.
+ * Takes the serialized message rather than `EmailOptions`, because an ARC seal — like a DKIM
+ * signature — commits to the bytes on the wire: `bh=` hashes the transmitted body and `h=` covers
+ * the headers a downstream verifier will actually read. Forwarding is where ARC belongs, and there
+ * the raw message is what you already have.
+ * @param message The serialized MIME message to seal.
  * @param options The seal options. See {@link ArcSealOptions}.
- * @returns The email with the ARC header set added, and the raw {@link ArcHeaderSet}.
- * @throws {Error} When the private key cannot be loaded or signing fails.
+ * @returns The message with the ARC header set prepended, and the raw {@link ArcHeaderSet}.
+ * @throws {Error} When the message is not a complete MIME message, the private key cannot be
+ * loaded, or signing fails.
  */
-declare const signArc: (email: EmailOptions, options: ArcSealOptions) => Promise<{
-  email: EmailOptions;
+declare const signArc: (message: string, options: ArcSealOptions) => Promise<{
   headers: ArcHeaderSet;
+  message: string;
 }>;
 /**
  * Verifies an originating (i=1) ARC header set against the signing domain's public key.
  *
- * Re-derives the AMS and ARC-Seal signing inputs from `email` + the supplied ARC headers, recomputes
- * the body hash, and checks all three. The public key must be the one published for the seal's
- * `s=`/`d=` (the DKIM-style `&lt;selector>._domainkey.&lt;domain>` TXT `p=` value).
- * @param email The message that was sealed (same fields used when signing).
+ * Re-derives the AMS and ARC-Seal signing inputs from the message + the supplied ARC headers,
+ * recomputes the body hash, and checks all three. The public key must be the one published for the
+ * seal's `s=`/`d=` (the DKIM-style `&lt;selector>._domainkey.&lt;domain>` TXT `p=` value).
+ * @param message The serialized MIME message that was sealed, without the ARC header set.
  * @param headers The ARC header set (or any record containing the three `ARC-*` headers).
  * @param options Verification options. See {@link ArcVerifyOptions}.
  * @returns The verification result. See {@link ArcVerifyResult}.
  */
-declare const verifyArc: (email: EmailOptions, headers: ArcHeaderSet | Record<string, string>, options: ArcVerifyOptions) => ArcVerifyResult;
+declare const verifyArc: (message: string, headers: ArcHeaderSet | Record<string, string>, options: ArcVerifyOptions) => ArcVerifyResult;
 /**
- * DKIM signer implementation
+ * DKIM signer.
+ *
+ * DKIM signs the message **as transmitted**: the `bh=` tag is a hash of the canonicalized MIME
+ * body, and `h=` covers the headers the recipient's MTA will see. That means signing can only
+ * happen after the message has been serialized, so this deliberately does **not** implement
+ * `EmailSigner` — `MailMessage.sign()` runs at the `EmailOptions` layer, where the body does not
+ * exist yet, and passing a DKIM signer there is a compile error rather than a runtime surprise.
+ * Configure DKIM on a transport that emits raw MIME instead.
  */
-declare class DkimSigner implements EmailSigner {
-  /**
-   * Sanitizes a display name for use in quoted email headers per RFC 5322.
-   * Removes/replaces CR, LF, tabs with space, escapes backslashes and quotes,
-   * and strips non-printable control characters.
-   * @param name The display name to sanitize.
-   * @returns The sanitized display name, or empty string if nothing remains.
-   */
-  private static sanitizeDisplayName;
-  /**
-   * Formats an email address for use in email headers.
-   * @param address The email address object to format.
-   * @param address.email The email address string.
-   * @param address.name Optional display name for the email address.
-   * @returns The formatted email address string in RFC 5322 format.
-   */
-  private static formatAddress;
-  /**
-   * Formats email addresses for headers.
-   * @param addresses The email address(es) to format (single or array).
-   * @returns The formatted email addresses string (comma-separated if multiple).
-   */
-  private static formatAddresses;
+declare class DkimSigner {
   private readonly options;
   /**
    * Creates a new DKIM signer.
@@ -191,12 +178,18 @@ declare class DkimSigner implements EmailSigner {
    */
   constructor(options: DkimOptions);
   /**
-   * Signs an email message with DKIM.
-   * @param email The email options to sign.
-   * @returns The email options with DKIM signature header added.
-   * @throws {Error} When signing fails (e.g., invalid private key).
+   * Signs a fully-built MIME message and returns it with a `DKIM-Signature` header prepended.
+   * @param message The complete MIME message: headers, a blank line, then the body, CRLF-delimited.
+   * @returns The message with the signature prepended.
+   * @throws {Error} When the message has no header/body separator, has no signable `From` header,
+   * or signing fails (e.g. an unreadable or malformed private key).
+   * @example
+   * ```typescript
+   * const raw = await buildMimeMessage(emailOptions);
+   * const signed = await createDkimSigner({ domainName: "example.com", keySelector: "s1", privateKey }).signMimeMessage(raw);
+   * ```
    */
-  sign(email: EmailOptions): Promise<EmailOptions>;
+  signMimeMessage(message: string): Promise<string>;
 }
 /**
  * Creates a DKIM signer instance.
@@ -204,6 +197,16 @@ declare class DkimSigner implements EmailSigner {
  * @returns A new DkimSigner instance.
  */
 declare const createDkimSigner: (options: DkimOptions) => DkimSigner;
+/**
+ * Builds a signer for a transport that writes the MIME message itself.
+ *
+ * Canonicalization defaults to relaxed/relaxed rather than the `simple/simple` of
+ * {@link DkimOptions}: SMTP hops routinely re-wrap whitespace, which `simple` does not survive.
+ * Callers can still override either field.
+ * @param options DKIM signing options from the transport config.
+ * @returns A signer configured for on-the-wire use.
+ */
+declare const createTransportDkimSigner: (options: DkimOptions) => DkimSigner;
 /**
  * S/MIME encrypter implementation using PKIjs
  * Note: Requires pkijs and asn1js for S/MIME operations
@@ -301,4 +304,4 @@ declare class SmimeSigner implements EmailSigner {
  * @returns A new SmimeSigner instance ready to sign emails.
  */
 declare const createSmimeSigner: (options: SmimeSignOptions) => SmimeSigner;
-export { type ArcAlgorithm, type ArcHeaderSet, type ArcSealOptions, type ArcVerifyOptions, type ArcVerifyResult, type DkimOptions, DkimSigner, type EmailEncrypter, type EmailSigner, type SmimeEncryptOptions, SmimeEncrypter, type SmimeSignOptions, SmimeSigner, arcMessageSignatureBase, arcSealBase, createDkimSigner, createSmimeEncrypter, createSmimeSigner, signArc, verifyArc };
+export { type ArcAlgorithm, type ArcHeaderSet, type ArcSealOptions, type ArcVerifyOptions, type ArcVerifyResult, type DkimOptions, DkimSigner, type EmailEncrypter, type EmailSigner, type SmimeEncryptOptions, SmimeEncrypter, type SmimeSignOptions, SmimeSigner, arcMessageSignatureBase, arcSealBase, createDkimSigner, createSmimeEncrypter, createSmimeSigner, createTransportDkimSigner, signArc, verifyArc };

package/dist/crypto/index.js

@@ -1 +1 @@
-import{arcMessageSignatureBase as m,arcSealBase as i,signArc as a,verifyArc as t}from"../packem_shared/arcMessageSignatureBase-B2uArM48.js";import{DkimSigner as c,createDkimSigner as n}from"../packem_shared/DkimSigner-udCl3JXO.js";import{SmimeEncrypter as g,createSmimeEncrypter as p}from"../packem_shared/SmimeEncrypter-Dm9McVTQ.js";import{SmimeSigner as s,createSmimeSigner as x}from"../packem_shared/SmimeSigner-B6hkacNk.js";export{c as DkimSigner,g as SmimeEncrypter,s as SmimeSigner,m as arcMessageSignatureBase,i as arcSealBase,n as createDkimSigner,p as createSmimeEncrypter,x as createSmimeSigner,a as signArc,t as verifyArc};
+import{arcMessageSignatureBase as i,arcSealBase as m,signArc as a,verifyArc as t}from"../packem_shared/arcMessageSignatureBase-su9VTRB7.js";import{DkimSigner as c,createDkimSigner as n,createTransportDkimSigner as o}from"../packem_shared/DkimSigner-CCxFKitN.js";import{SmimeEncrypter as p,createSmimeEncrypter as s}from"../packem_shared/SmimeEncrypter-DnlfpjUX.js";import{SmimeSigner as x,createSmimeSigner as k}from"../packem_shared/SmimeSigner-DTvclzLq.js";export{c as DkimSigner,p as SmimeEncrypter,x as SmimeSigner,i as arcMessageSignatureBase,m as arcSealBase,n as createDkimSigner,s as createSmimeEncrypter,k as createSmimeSigner,o as createTransportDkimSigner,a as signArc,t as verifyArc};

package/dist/deliverability/dmarc-report.js

@@ -1 +1 @@
-import l from"../packem_shared/EmailError-2CCyVX1S.js";const g=a=>a==null?[]:Array.isArray(a)?a:[a],e=a=>{if(typeof a=="string")return a;if(typeof a=="number"||typeof a=="boolean")return String(a)},c=a=>{const r=e(a);if(r===void 0)return;const s=Number(r);return Number.isNaN(s)?void 0:s},f=a=>g(a).map(r=>({domain:e(r.domain),result:e(r.result)})),h=async a=>{let r;try{({XMLParser:r}=await import("fast-xml-parser"))}catch(t){throw t instanceof Error&&(t.code==="ERR_MODULE_NOT_FOUND"||t.message.includes("Cannot find module")||t.message.includes("Cannot find package"))?new l("deliverability","fast-xml-parser is not installed. Please install it: pnpm add fast-xml-parser",{cause:t}):new l("deliverability",`Failed to load fast-xml-parser: ${t.message}`,{cause:t})}let s;try{s=new r({ignoreAttributes:!0,parseTagValue:!1}).parse(a)}catch(t){throw new l("deliverability",`Failed to parse DMARC report: ${t.message}`,{cause:t})}const n=s.feedback??{},o=n.report_metadata??{},m=o.date_range??{},i=n.policy_published??{},y=g(n.record).map(t=>{const d=t.row??{},p=d.policy_evaluated??{},b=t.identifiers??{},u=t.auth_results??{};return{authResults:{dkim:f(u.dkim),spf:f(u.spf)},count:c(d.count)??0,disposition:e(p.disposition),dkim:e(p.dkim),headerFrom:e(b.header_from),sourceIp:e(d.source_ip),spf:e(p.spf)}});return{dateRangeBegin:e(m.begin),dateRangeEnd:e(m.end),email:e(o.email),organizationName:e(o.org_name),policyPublished:{adkim:e(i.adkim),aspf:e(i.aspf),domain:e(i.domain),p:e(i.p),pct:c(i.pct),sp:e(i.sp)},records:y,reportId:e(o.report_id)}};export{h as parseDmarcReport};
+import c from"../packem_shared/EmailError-BIaHK1Uw.js";const g=r=>r==null?[]:Array.isArray(r)?r:[r],e=r=>{if(typeof r=="string")return r;if(typeof r=="number"||typeof r=="boolean")return String(r)},u=r=>{const a=e(r);if(a===void 0)return;const i=Number(a);return Number.isNaN(i)?void 0:i},f=r=>g(r).map(a=>({domain:e(a.domain),result:e(a.result)})),_=async r=>{let a;try{({XMLParser:a}=await import("fast-xml-parser"))}catch(t){throw t instanceof Error&&(t.code==="ERR_MODULE_NOT_FOUND"||t.message.includes("Cannot find module")||t.message.includes("Cannot find package"))?new c("deliverability","fast-xml-parser is not installed. Please install it: pnpm add fast-xml-parser",{cause:t}):new c("deliverability",`Failed to load fast-xml-parser: ${t.message}`,{cause:t})}let i;try{i=new a({ignoreAttributes:!0,parseTagValue:!1}).parse(r)}catch(t){throw new c("deliverability",`Failed to parse DMARC report: ${t.message}`,{cause:t})}const n=i.feedback??{},o=n.report_metadata??{},m=o.date_range??{},s=n.policy_published??{},y=g(n.record).map(t=>{const d=t.row??{},p=d.policy_evaluated??{},b=t.identifiers??{},l=t.auth_results??{};return{authResults:{dkim:f(l.dkim),spf:f(l.spf)},count:u(d.count)??0,disposition:e(p.disposition),dkim:e(p.dkim),headerFrom:e(b.header_from),sourceIp:e(d.source_ip),spf:e(p.spf)}});return{dateRangeBegin:e(m.begin),dateRangeEnd:e(m.end),email:e(o.email),organizationName:e(o.org_name),policyPublished:{adkim:e(s.adkim),aspf:e(s.aspf),domain:e(s.domain),p:e(s.p),pct:u(s.pct),sp:e(s.sp)},records:y,reportId:e(o.report_id)}};export{_ as parseDmarcReport};

package/dist/deliverability/index.js

@@ -1 +1 @@
-import{parseArfReport as o}from"../packem_shared/parseArfReport-Ds6S3c4J.js";import{parseDmarcRecord as p}from"../packem_shared/parseDmarcRecord-DXZ-_rF0.js";import{buildListUnsubscribe as a,parseListUnsubscribe as i}from"../packem_shared/buildListUnsubscribe-Cdr8MvR_.js";import{buildMtaStsPolicy as m,parseMtaStsPolicy as c}from"../packem_shared/buildMtaStsPolicy-oEQg8y_C.js";import{createSuppressionStore as u,filterSuppressed as x}from"../packem_shared/createSuppressionStore-CeAZKCbY.js";import{parseTlsReport as b,parseTlsRptRecord as d}from"../packem_shared/parseTlsReport-wPe1lIDs.js";import{default as n}from"../packem_shared/MemorySuppressionStore-DZnbz-_B.js";export{n as MemorySuppressionStore,a as buildListUnsubscribe,m as buildMtaStsPolicy,u as createSuppressionStore,x as filterSuppressed,o as parseArfReport,p as parseDmarcRecord,i as parseListUnsubscribe,c as parseMtaStsPolicy,b as parseTlsReport,d as parseTlsRptRecord};
+import{parseArfReport as o}from"../packem_shared/parseArfReport-VbQeofN4.js";import{parseDmarcRecord as p}from"../packem_shared/parseDmarcRecord-9B3Qhba8.js";import{buildListUnsubscribe as a,parseListUnsubscribe as i}from"../packem_shared/buildListUnsubscribe-g1CoihSv.js";import{buildMtaStsPolicy as m,parseMtaStsPolicy as c}from"../packem_shared/buildMtaStsPolicy-BA2YXL72.js";import{createSuppressionStore as u,filterSuppressed as x}from"../packem_shared/createSuppressionStore-DbocihI8.js";import{parseTlsReport as b,parseTlsRptRecord as d}from"../packem_shared/parseTlsReport-DSiCaKFH.js";import{default as n}from"../packem_shared/MemorySuppressionStore-D_bge6rS.js";export{n as MemorySuppressionStore,a as buildListUnsubscribe,m as buildMtaStsPolicy,u as createSuppressionStore,x as filterSuppressed,o as parseArfReport,p as parseDmarcRecord,i as parseListUnsubscribe,c as parseMtaStsPolicy,b as parseTlsReport,d as parseTlsRptRecord};

package/dist/events/index.js

@@ -1 +1 @@
-import{ALL_EVENTS as r,EventBus as t}from"../packem_shared/ALL_EVENTS-3kwh5CBE.js";import{default as f}from"../packem_shared/MemoryEventStore-CuhfO9aj.js";export{r as ALL_EVENTS,t as EventBus,f as MemoryEventStore};
+import{ALL_EVENTS as r,EventBus as t}from"../packem_shared/ALL_EVENTS-CSpGgYbV.js";import{default as f}from"../packem_shared/MemoryEventStore-CuhfO9aj.js";export{r as ALL_EVENTS,t as EventBus,f as MemoryEventStore};

package/dist/inbound/index.js

@@ -1 +1 @@
-import{defineInboundHandler as o,parseInbound as a}from"../packem_shared/defineInboundHandler-CnL2BzlL.js";import{default as d}from"../packem_shared/parseCloudflareInbound-C__j-oNa.js";import{default as t}from"../packem_shared/parseMailgunInbound-BpC6uPNe.js";import{default as f}from"../packem_shared/parsePostmarkInbound-Co3_c6-9.js";import{default as l}from"../packem_shared/parseSendGridInbound-DsALoijO.js";import{default as x}from"../packem_shared/parseSesInbound-CH5tHIjp.js";import{extractReply as I}from"../packem_shared/extractReply-BUjIBt9A.js";import{normalizeMessageId as c,normalizeSubject as S,stitchThreads as g}from"../packem_shared/normalizeMessageId-DAx2pGe2.js";import{parseAddress as z,parseAddressList as A,parseReferences as M}from"../packem_shared/parseAddress-DdbViBAJ.js";export{o as defineInboundHandler,I as extractReply,c as normalizeMessageId,S as normalizeSubject,z as parseAddress,A as parseAddressList,d as parseCloudflareInbound,a as parseInbound,t as parseMailgunInbound,f as parsePostmarkInbound,M as parseReferences,l as parseSendGridInbound,x as parseSesInbound,g as stitchThreads};
+import{defineInboundHandler as o,parseInbound as a}from"../packem_shared/defineInboundHandler-CnYn10ex.js";import{default as d}from"../packem_shared/parseCloudflareInbound-BKZzk0De.js";import{default as t}from"../packem_shared/parseMailgunInbound-nY-DXZrK.js";import{default as f}from"../packem_shared/parsePostmarkInbound-0zG71J7F.js";import{default as l}from"../packem_shared/parseSendGridInbound-BzEhN-gd.js";import{default as x}from"../packem_shared/parseSesInbound-C4cRtAUq.js";import{extractReply as I}from"../packem_shared/extractReply-CLoWMY97.js";import{normalizeMessageId as c,normalizeSubject as S,stitchThreads as g}from"../packem_shared/normalizeMessageId-0yB1zeyC.js";import{parseAddress as z,parseAddressList as A,parseReferences as M}from"../packem_shared/parseAddress-DW9suGjV.js";export{o as defineInboundHandler,I as extractReply,c as normalizeMessageId,S as normalizeSubject,z as parseAddress,A as parseAddressList,d as parseCloudflareInbound,a as parseInbound,t as parseMailgunInbound,f as parsePostmarkInbound,M as parseReferences,l as parseSendGridInbound,x as parseSesInbound,g as stitchThreads};

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { type A as AttachmentDataOptions, type a as AttachmentOptions, type B as BatchBase, type b as BatchRenderer, D as DraftMailMessage, type F as FeatureCheckMode, M as Mail, type c as MailGlobalConfig, d as MailMessage, type e as MailOptions, type P as Personalization, type S as SendBatchOptions, type f as SendableMessage, g as createMail, h as detectMimeType, i as generateContentId, r as readFileAsBuffer } from "./packem_shared/mail.d-B9JyPxzq.js";
+export { type A as AttachmentDataOptions, type a as AttachmentOptions, type B as BatchBase, type b as BatchRenderer, D as DraftMailMessage, type F as FeatureCheckMode, M as Mail, type c as MailGlobalConfig, d as MailMessage, type e as MailOptions, type P as Personalization, type S as SendBatchOptions, type f as SendableMessage, g as createMail, h as detectMimeType, i as generateContentId, r as readFileAsBuffer } from "./packem_shared/mail.d-BdyyyQO5.js";
 export type { M as Middleware, S as SendFunction } from "./packem_shared/types.d-GKqPNk0I.js";
 export { type a as Provider, type P as ProviderFactory, d as defineProvider } from "./packem_shared/provider.d-Cx5YQJdP.js";
 export type { T as TemplateRenderer } from "./packem_shared/types.d-I-KeZ5w2.js";
@@ -8,8 +8,7 @@ export { type OkResult, isErr, isOk, mapOk, tryAsync, unwrap, unwrapOr } from ".
 export { type FeatureSupportResult, type FeatureViolation, default as checkFeatureSupport } from "./utils/validation/check-feature-support.js";
 import 'ical-generator';
 import 'node:buffer';
-import 'node:crypto';
-import "./packem_shared/types.d-B0t3PQ3t.js";
+import "./packem_shared/types.d-Cb5fls_X.js";
 interface ErrorProperties {
   cause?: unknown;
   hint?: ErrorHint;

package/dist/index.js

@@ -1 +1 @@
-import{detectMimeType as a,generateContentId as t,readFileAsBuffer as o}from"./packem_shared/detectMimeType-B9_7ujpC.js";import{default as p}from"./packem_shared/DraftMailMessage-BgP1OF1G.js";import{default as m}from"./packem_shared/EmailError-2CCyVX1S.js";import{default as l}from"./packem_shared/RequiredOptionError-BmpC5whN.js";import{Mail as u,createMail as x}from"./packem_shared/Mail-DduRntbB.js";import{default as M}from"./packem_shared/MailMessage-BRBT4Jea.js";import{defineProvider as E}from"./packem_shared/defineProvider-C9q-7iwt.js";import{default as g}from"./utils/parse-eml.js";import{isErr as y,isOk as w,mapOk as A,tryAsync as F,unwrap as h,unwrapOr as q}from"./utils/result.js";import{default as B}from"./utils/validation/check-feature-support.js";export{p as DraftMailMessage,m as EmailError,u as Mail,M as MailMessage,l as RequiredOptionError,B as checkFeatureSupport,x as createMail,E as defineProvider,a as detectMimeType,t as generateContentId,y as isErr,w as isOk,A as mapOk,g as parseEml,o as readFileAsBuffer,F as tryAsync,h as unwrap,q as unwrapOr};
+import{detectMimeType as a,generateContentId as t,readFileAsBuffer as o}from"./packem_shared/detectMimeType-BRz3Qjyz.js";import{default as p}from"./packem_shared/DraftMailMessage-B0gwf8n_.js";import{default as m}from"./packem_shared/EmailError-BIaHK1Uw.js";import{default as l}from"./packem_shared/RequiredOptionError-ctDEEB1s.js";import{Mail as u,createMail as x}from"./packem_shared/Mail-DmYNQ0KK.js";import{default as M}from"./packem_shared/MailMessage-DmmaNHHc.js";import{defineProvider as E}from"./packem_shared/defineProvider-C9q-7iwt.js";import{default as g}from"./utils/parse-eml.js";import{isErr as y,isOk as w,mapOk as A,tryAsync as F,unwrap as h,unwrapOr as q}from"./utils/result.js";import{default as B}from"./utils/validation/check-feature-support.js";export{p as DraftMailMessage,m as EmailError,u as Mail,M as MailMessage,l as RequiredOptionError,B as checkFeatureSupport,x as createMail,E as defineProvider,a as detectMimeType,t as generateContentId,y as isErr,w as isOk,A as mapOk,g as parseEml,o as readFileAsBuffer,F as tryAsync,h as unwrap,q as unwrapOr};

package/dist/middleware/index.d.ts

@@ -177,8 +177,16 @@ interface OAuth2MiddlewareOptions {
    */
   fetchToken: () => Promise<OAuth2Token> | OAuth2Token;
   /**
-   * The header to inject the credential into.
-   * @default "Authorization"
+   * Inject the credential into this **message** header.
+   *
+   * `EmailOptions.headers` are MIME headers written onto the outgoing message (see
+   * `buildMimeMessage`), so every recipient — and every hop — sees this value. Providers
+   * authenticate over their own transport (`apiKey` in the HTTP request, SMTP XOAUTH2), never
+   * from here, so there is no legitimate reason to set this to `Authorization`.
+   *
+   * Leave it unset unless a provider genuinely requires a custom credential header on the
+   * message itself. Use {@link OAuth2MiddlewareOptions.onToken} instead.
+   * @default undefined — no header is injected
    */
   headerName?: string;
   /**
@@ -203,13 +211,18 @@ interface OAuth2MiddlewareOptions {
   skewMs?: number;
 }
 /**
- * Injects an OAuth2 bearer credential into each outgoing message, refreshing it on demand and caching
- * it until just before expiry.
+ * Acquires an OAuth2 credential for each outgoing message, refreshing it on demand and caching it
+ * until just before expiry.
  *
- * Supplies the token to provider clients (Gmail, Microsoft 365) either via a request header or the
- * {@link OAuth2MiddlewareOptions.onToken} callback (for SMTP XOAUTH2).
+ * The token is handed to the caller through {@link OAuth2MiddlewareOptions.onToken} — the channel
+ * provider clients (Gmail, Microsoft 365, SMTP XOAUTH2) authenticate from. It is **not** written
+ * onto the message unless {@link OAuth2MiddlewareOptions.headerName} is set explicitly, because
+ * `EmailOptions.headers` are MIME headers the recipient can read.
  * @param options OAuth2 configuration. See {@link OAuth2MiddlewareOptions}.
  * @returns The middleware.
+ * @throws {TypeError} If neither `onToken` nor `headerName` is supplied — the token would have
+ * nowhere to go and the middleware would silently do nothing but burn token-endpoint calls — or if
+ * `headerName` is empty.
  */
 declare const oauth2Middleware: (options: OAuth2MiddlewareOptions) => Middleware;
 /**

package/dist/middleware/index.js

@@ -1 +1 @@
-import{circuitBreakerMiddleware as o}from"../packem_shared/circuitBreakerMiddleware-BSCPR72q.js";import{dedupeMiddleware as i}from"../packem_shared/dedupeMiddleware-CYYI_O7S.js";import{withEvents as p}from"../packem_shared/withEvents-CytsykaK.js";import{loggingMiddleware as f}from"../packem_shared/loggingMiddleware-CZIiVMVp.js";import{withMetrics as w}from"../packem_shared/withMetrics-DWywX_6M.js";import{oauth2Middleware as l}from"../packem_shared/oauth2Middleware-DQh-hIkv.js";import{RATE_LIMIT_PRESETS as h,rateLimitMiddleware as s}from"../packem_shared/RATE_LIMIT_PRESETS-BPADLgcA.js";import{default as c}from"../packem_shared/withRender-VP9wE5Yr.js";import{retryMiddleware as E}from"../packem_shared/retryMiddleware-DbViDX4r.js";import{withSuppression as g}from"../packem_shared/withSuppression-wDl4NTb-.js";import{withTelemetry as S}from"../packem_shared/withTelemetry-DL2qo0Hp.js";import{composeMiddleware as I}from"../packem_shared/composeMiddleware-BHwLLEzK.js";export{h as RATE_LIMIT_PRESETS,o as circuitBreakerMiddleware,I as composeMiddleware,i as dedupeMiddleware,f as loggingMiddleware,l as oauth2Middleware,s as rateLimitMiddleware,E as retryMiddleware,p as withEvents,w as withMetrics,c as withRender,g as withSuppression,S as withTelemetry};
+import{circuitBreakerMiddleware as o}from"../packem_shared/circuitBreakerMiddleware-DcBN7K6H.js";import{dedupeMiddleware as i}from"../packem_shared/dedupeMiddleware-BTo8Qjje.js";import{withEvents as p}from"../packem_shared/withEvents-BinK2hMw.js";import{loggingMiddleware as f}from"../packem_shared/loggingMiddleware-DNVf8O1B.js";import{withMetrics as w}from"../packem_shared/withMetrics-i3mZVfeE.js";import{oauth2Middleware as l}from"../packem_shared/oauth2Middleware-C0M1w3_2.js";import{RATE_LIMIT_PRESETS as h,rateLimitMiddleware as s}from"../packem_shared/RATE_LIMIT_PRESETS-BIFmRuh2.js";import{default as c}from"../packem_shared/withRender-Ce6leoYE.js";import{retryMiddleware as E}from"../packem_shared/retryMiddleware-CaTv0UIm.js";import{withSuppression as g}from"../packem_shared/withSuppression-B0eZ2xNQ.js";import{withTelemetry as S}from"../packem_shared/withTelemetry-DEKTis1I.js";import{composeMiddleware as I}from"../packem_shared/composeMiddleware-B3RCDFsy.js";export{h as RATE_LIMIT_PRESETS,o as circuitBreakerMiddleware,I as composeMiddleware,i as dedupeMiddleware,f as loggingMiddleware,l as oauth2Middleware,s as rateLimitMiddleware,E as retryMiddleware,p as withEvents,w as withMetrics,c as withRender,g as withSuppression,S as withTelemetry};