alepha 0.23.0 → 0.24.0

package/dist/email/smtp/index.js

@@ -1,5 +1,5 @@
 import { createRequire } from "node:module";
-import { $atom, $env, $hook, $module, $state, t } from "alepha";
+import { $atom, $env, $hook, $module, $state, z } from "alepha";
 import { AlephaEmail, EmailError, EmailProvider } from "alepha/email";
 import { $logger } from "alepha/logger";
 //#region \0rolldown/runtime.js
@@ -24,11 +24,377 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	value: mod,
 	enumerable: true
 }) : target, mod));
-var __require = /* @__PURE__ */ createRequire(import.meta.url);
+var __require = /* #__PURE__ */ (() => createRequire(import.meta.url))();
+//#endregion
+//#region ../../../../node_modules/nodemailer/lib/punycode/index.js
+var require_punycode = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	/** Highest positive signed 32-bit float value */
+	const maxInt = 2147483647;
+	/** Bootstring parameters */
+	const base = 36;
+	const tMin = 1;
+	const tMax = 26;
+	const skew = 38;
+	const damp = 700;
+	const initialBias = 72;
+	const initialN = 128;
+	const delimiter = "-";
+	/** Regular expressions */
+	const regexPunycode = /^xn--/;
+	const regexNonASCII = /[^\0-\x7F]/;
+	const regexSeparators = /[\x2E\u3002\uFF0E\uFF61]/g;
+	/** Error messages */
+	const errors = {
+		overflow: "Overflow: input needs wider integers to process",
+		"not-basic": "Illegal input >= 0x80 (not a basic code point)",
+		"invalid-input": "Invalid input"
+	};
+	/** Convenience shortcuts */
+	const baseMinusTMin = base - tMin;
+	const floor = Math.floor;
+	const stringFromCharCode = String.fromCharCode;
+	/**
+	* A generic error utility function.
+	* @private
+	* @param {String} type The error type.
+	* @returns {Error} Throws a `RangeError` with the applicable error message.
+	*/
+	function error(type) {
+		throw new RangeError(errors[type]);
+	}
+	/**
+	* A generic `Array#map` utility function.
+	* @private
+	* @param {Array} array The array to iterate over.
+	* @param {Function} callback The function that gets called for every array
+	* item.
+	* @returns {Array} A new array of values returned by the callback function.
+	*/
+	function map(array, callback) {
+		const result = [];
+		let length = array.length;
+		while (length--) result[length] = callback(array[length]);
+		return result;
+	}
+	/**
+	* A simple `Array#map`-like wrapper to work with domain name strings or email
+	* addresses.
+	* @private
+	* @param {String} domain The domain name or email address.
+	* @param {Function} callback The function that gets called for every
+	* character.
+	* @returns {String} A new string of characters returned by the callback
+	* function.
+	*/
+	function mapDomain(domain, callback) {
+		const parts = domain.split("@");
+		let result = "";
+		if (parts.length > 1) {
+			result = parts[0] + "@";
+			domain = parts[1];
+		}
+		domain = domain.replace(regexSeparators, ".");
+		const encoded = map(domain.split("."), callback).join(".");
+		return result + encoded;
+	}
+	/**
+	* Creates an array containing the numeric code points of each Unicode
+	* character in the string. While JavaScript uses UCS-2 internally,
+	* this function will convert a pair of surrogate halves (each of which
+	* UCS-2 exposes as separate characters) into a single code point,
+	* matching UTF-16.
+	* @see `punycode.ucs2.encode`
+	* @see <https://mathiasbynens.be/notes/javascript-encoding>
+	* @memberOf punycode.ucs2
+	* @name decode
+	* @param {String} string The Unicode input string (UCS-2).
+	* @returns {Array} The new array of code points.
+	*/
+	function ucs2decode(string) {
+		const output = [];
+		let counter = 0;
+		const length = string.length;
+		while (counter < length) {
+			const value = string.charCodeAt(counter++);
+			if (value >= 55296 && value <= 56319 && counter < length) {
+				const extra = string.charCodeAt(counter++);
+				if ((extra & 64512) == 56320) output.push(((value & 1023) << 10) + (extra & 1023) + 65536);
+				else {
+					output.push(value);
+					counter--;
+				}
+			} else output.push(value);
+		}
+		return output;
+	}
+	/**
+	* Creates a string based on an array of numeric code points.
+	* @see `punycode.ucs2.decode`
+	* @memberOf punycode.ucs2
+	* @name encode
+	* @param {Array} codePoints The array of numeric code points.
+	* @returns {String} The new Unicode string (UCS-2).
+	*/
+	const ucs2encode = (codePoints) => String.fromCodePoint(...codePoints);
+	/**
+	* Converts a basic code point into a digit/integer.
+	* @see `digitToBasic()`
+	* @private
+	* @param {Number} codePoint The basic numeric code point value.
+	* @returns {Number} The numeric value of a basic code point (for use in
+	* representing integers) in the range `0` to `base - 1`, or `base` if
+	* the code point does not represent a value.
+	*/
+	const basicToDigit = function(codePoint) {
+		if (codePoint >= 48 && codePoint < 58) return 26 + (codePoint - 48);
+		if (codePoint >= 65 && codePoint < 91) return codePoint - 65;
+		if (codePoint >= 97 && codePoint < 123) return codePoint - 97;
+		return base;
+	};
+	/**
+	* Converts a digit/integer into a basic code point.
+	* @see `basicToDigit()`
+	* @private
+	* @param {Number} digit The numeric value of a basic code point.
+	* @returns {Number} The basic code point whose value (when used for
+	* representing integers) is `digit`, which needs to be in the range
+	* `0` to `base - 1`. If `flag` is non-zero, the uppercase form is
+	* used; else, the lowercase form is used. The behavior is undefined
+	* if `flag` is non-zero and `digit` has no uppercase form.
+	*/
+	const digitToBasic = function(digit, flag) {
+		return digit + 22 + 75 * (digit < 26) - ((flag != 0) << 5);
+	};
+	/**
+	* Bias adaptation function as per section 3.4 of RFC 3492.
+	* https://tools.ietf.org/html/rfc3492#section-3.4
+	* @private
+	*/
+	const adapt = function(delta, numPoints, firstTime) {
+		let k = 0;
+		delta = firstTime ? floor(delta / damp) : delta >> 1;
+		delta += floor(delta / numPoints);
+		for (; delta > 455; k += base) delta = floor(delta / baseMinusTMin);
+		return floor(k + 36 * delta / (delta + skew));
+	};
+	/**
+	* Converts a Punycode string of ASCII-only symbols to a string of Unicode
+	* symbols.
+	* @memberOf punycode
+	* @param {String} input The Punycode string of ASCII-only symbols.
+	* @returns {String} The resulting string of Unicode symbols.
+	*/
+	const decode = function(input) {
+		const output = [];
+		const inputLength = input.length;
+		let i = 0;
+		let n = initialN;
+		let bias = initialBias;
+		let basic = input.lastIndexOf(delimiter);
+		if (basic < 0) basic = 0;
+		for (let j = 0; j < basic; ++j) {
+			if (input.charCodeAt(j) >= 128) error("not-basic");
+			output.push(input.charCodeAt(j));
+		}
+		for (let index = basic > 0 ? basic + 1 : 0; index < inputLength;) {
+			const oldi = i;
+			for (let w = 1, k = base;; k += base) {
+				if (index >= inputLength) error("invalid-input");
+				const digit = basicToDigit(input.charCodeAt(index++));
+				if (digit >= base) error("invalid-input");
+				if (digit > floor((maxInt - i) / w)) error("overflow");
+				i += digit * w;
+				const t = k <= bias ? tMin : k >= bias + tMax ? tMax : k - bias;
+				if (digit < t) break;
+				const baseMinusT = base - t;
+				if (w > floor(maxInt / baseMinusT)) error("overflow");
+				w *= baseMinusT;
+			}
+			const out = output.length + 1;
+			bias = adapt(i - oldi, out, oldi == 0);
+			if (floor(i / out) > maxInt - n) error("overflow");
+			n += floor(i / out);
+			i %= out;
+			output.splice(i++, 0, n);
+		}
+		return String.fromCodePoint(...output);
+	};
+	/**
+	* Converts a string of Unicode symbols (e.g. a domain name label) to a
+	* Punycode string of ASCII-only symbols.
+	* @memberOf punycode
+	* @param {String} input The string of Unicode symbols.
+	* @returns {String} The resulting Punycode string of ASCII-only symbols.
+	*/
+	const encode = function(input) {
+		const output = [];
+		input = ucs2decode(input);
+		const inputLength = input.length;
+		let n = initialN;
+		let delta = 0;
+		let bias = initialBias;
+		for (const currentValue of input) if (currentValue < 128) output.push(stringFromCharCode(currentValue));
+		const basicLength = output.length;
+		let handledCPCount = basicLength;
+		if (basicLength) output.push(delimiter);
+		while (handledCPCount < inputLength) {
+			let m = maxInt;
+			for (const currentValue of input) if (currentValue >= n && currentValue < m) m = currentValue;
+			const handledCPCountPlusOne = handledCPCount + 1;
+			if (m - n > floor((maxInt - delta) / handledCPCountPlusOne)) error("overflow");
+			delta += (m - n) * handledCPCountPlusOne;
+			n = m;
+			for (const currentValue of input) {
+				if (currentValue < n && ++delta > maxInt) error("overflow");
+				if (currentValue === n) {
+					let q = delta;
+					for (let k = base;; k += base) {
+						const t = k <= bias ? tMin : k >= bias + tMax ? tMax : k - bias;
+						if (q < t) break;
+						const qMinusT = q - t;
+						const baseMinusT = base - t;
+						output.push(stringFromCharCode(digitToBasic(t + qMinusT % baseMinusT, 0)));
+						q = floor(qMinusT / baseMinusT);
+					}
+					output.push(stringFromCharCode(digitToBasic(q, 0)));
+					bias = adapt(delta, handledCPCountPlusOne, handledCPCount === basicLength);
+					delta = 0;
+					++handledCPCount;
+				}
+			}
+			++delta;
+			++n;
+		}
+		return output.join("");
+	};
+	/**
+	* Converts a Punycode string representing a domain name or an email address
+	* to Unicode. Only the Punycoded parts of the input will be converted, i.e.
+	* it doesn't matter if you call it on a string that has already been
+	* converted to Unicode.
+	* @memberOf punycode
+	* @param {String} input The Punycoded domain name or email address to
+	* convert to Unicode.
+	* @returns {String} The Unicode representation of the given Punycode
+	* string.
+	*/
+	const toUnicode = function(input) {
+		return mapDomain(input, function(string) {
+			return regexPunycode.test(string) ? decode(string.slice(4).toLowerCase()) : string;
+		});
+	};
+	/**
+	* Converts a Unicode string representing a domain name or an email address to
+	* Punycode. Only the non-ASCII parts of the domain name will be converted,
+	* i.e. it doesn't matter if you call it with a domain that's already in
+	* ASCII.
+	* @memberOf punycode
+	* @param {String} input The domain name or email address to convert, as a
+	* Unicode string.
+	* @returns {String} The Punycode representation of the given domain name or
+	* email address.
+	*/
+	const toASCII = function(input) {
+		return mapDomain(input, function(string) {
+			return regexNonASCII.test(string) ? "xn--" + encode(string) : string;
+		});
+	};
+	module.exports = {
+		/**
+		* A string representing the current Punycode.js version number.
+		* @memberOf punycode
+		* @type String
+		*/
+		version: "2.3.1",
+		/**
+		* An object of methods to convert from JavaScript's internal character
+		* representation (UCS-2) to Unicode code points, and back.
+		* @see <https://mathiasbynens.be/notes/javascript-encoding>
+		* @memberOf punycode
+		* @type Object
+		*/
+		ucs2: {
+			decode: ucs2decode,
+			encode: ucs2encode
+		},
+		decode,
+		encode,
+		toASCII,
+		toUnicode
+	};
+}));
+//#endregion
+//#region ../../../../node_modules/nodemailer/lib/shared/url.js
+var require_url = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	const urllib = __require("url");
+	const punycode = require_punycode();
+	const URLImpl = typeof URL !== "undefined" && URL || urllib.URL;
+	const SLASHLESS_AUTHORITY = /^([a-zA-Z][a-zA-Z0-9+.-]*:)(?!\/\/)(.+)$/;
+	function safeDecode(str) {
+		try {
+			return decodeURIComponent(str);
+		} catch (_err) {
+			return str;
+		}
+	}
+	function normalizeHostname(raw) {
+		let hostname = raw || "";
+		if (!hostname) return "";
+		if (hostname.charAt(0) === "[" && hostname.charAt(hostname.length - 1) === "]") return hostname.slice(1, -1);
+		return punycode.toASCII(safeDecode(hostname));
+	}
+	module.exports.parse = (input, parseQueryString) => {
+		input = input || "";
+		if (!URLImpl) return urllib.parse(input, parseQueryString);
+		const slashless = SLASHLESS_AUTHORITY.exec(input);
+		const normalized = slashless ? slashless[1] + "//" + slashless[2] : input;
+		let u;
+		try {
+			u = new URLImpl(normalized);
+		} catch (_err) {
+			return urllib.parse(input, parseQueryString);
+		}
+		const hostname = normalizeHostname(u.hostname);
+		const port = u.port || null;
+		const pathname = u.pathname || null;
+		const search = u.search || null;
+		let auth = null;
+		if (u.username || u.password) auth = safeDecode(u.username) + (u.password ? ":" + safeDecode(u.password) : "");
+		let query;
+		if (parseQueryString) {
+			query = Object.create(null);
+			u.searchParams.forEach((value, key) => {
+				if (Object.prototype.hasOwnProperty.call(query, key)) if (Array.isArray(query[key])) query[key].push(value);
+				else query[key] = [query[key], value];
+				else query[key] = value;
+			});
+		} else query = search ? search.slice(1) : null;
+		return {
+			protocol: u.protocol || null,
+			host: u.host || null,
+			hostname,
+			port,
+			pathname,
+			search,
+			path: (pathname || "") + (search || "") || null,
+			href: u.href,
+			auth,
+			query
+		};
+	};
+	module.exports.resolve = (from, to) => {
+		if (!URLImpl) return urllib.resolve(from, to);
+		try {
+			return new URLImpl(to, from).href;
+		} catch (_err) {
+			return urllib.resolve(from, to);
+		}
+	};
+}));
 //#endregion
 //#region ../../../../node_modules/nodemailer/lib/fetch/cookies.js
 var require_cookies = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const urllib$4 = __require("url");
+	const urllib = require_url();
 	const SESSION_TIMEOUT = 1800;
 	/**
 	* Creates a biskviit cookie jar for managing cookie values in memory
@@ -48,7 +414,7 @@ var require_cookies = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		* @param {String} url Current URL
 		*/
 		set(cookieStr, url) {
-			const urlparts = urllib$4.parse(url || "");
+			const urlparts = urllib.parse(url || "");
 			const cookie = this.parse(cookieStr);
 			let domain;
 			if (cookie.domain) {
@@ -138,7 +504,7 @@ var require_cookies = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		* @returns {Boolean} true if cookie is valid for specifiec URL
 		*/
 		match(cookie, url) {
-			const urlparts = urllib$4.parse(url || "");
+			const urlparts = urllib.parse(url || "");
 			if (urlparts.hostname !== cookie.domain && (cookie.domain.charAt(0) !== "." || ("." + urlparts.hostname).substr(-cookie.domain.length) !== cookie.domain)) return false;
 			if (this.getPath(urlparts.pathname).substr(0, cookie.path.length) !== cookie.path) return false;
 			if (cookie.secure && urlparts.protocol !== "https:") return false;
@@ -203,7 +569,7 @@ var require_cookies = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 var require_package = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = {
 		"name": "nodemailer",
-		"version": "8.0.10",
+		"version": "9.0.3",
 		"description": "Easy as cake e-mail sending from your Node.js applications",
 		"main": "lib/nodemailer.js",
 		"scripts": {
@@ -226,19 +592,19 @@ var require_package = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		"bugs": { "url": "https://github.com/nodemailer/nodemailer/issues" },
 		"homepage": "https://nodemailer.com/",
 		"devDependencies": {
-			"@aws-sdk/client-sesv2": "3.1037.0",
+			"@aws-sdk/client-sesv2": "3.1068.0",
 			"bunyan": "1.8.15",
 			"c8": "11.0.0",
-			"eslint": "10.2.1",
+			"eslint": "10.5.0",
 			"eslint-config-prettier": "10.1.8",
-			"globals": "17.5.0",
+			"globals": "17.6.0",
 			"libbase64": "1.3.0",
 			"libmime": "5.3.8",
 			"libqp": "2.1.1",
-			"prettier": "3.8.3",
+			"prettier": "3.8.4",
 			"proxy": "1.0.2",
 			"proxy-test-server": "1.0.0",
-			"smtp-server": "3.18.4"
+			"smtp-server": "3.19.0"
 		},
 		"engines": { "node": ">=6.0.0" }
 	};
@@ -290,7 +656,7 @@ var require_errors = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 var require_fetch = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const http = __require("http");
 	const https = __require("https");
-	const urllib$3 = __require("url");
+	const urllib = require_url();
 	const zlib = __require("zlib");
 	const { PassThrough: PassThrough$3 } = __require("stream");
 	const Cookies = require_cookies();
@@ -315,7 +681,7 @@ var require_fetch = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			options.cookie = false;
 		}
 		const fetchRes = options.fetchRes;
-		const parsed = urllib$3.parse(url);
+		const parsed = urllib.parse(url);
 		let method = (options.method || "").toString().trim().toUpperCase() || "GET";
 		let finished = false;
 		let cookies;
@@ -371,7 +737,7 @@ var require_fetch = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			path: parsed.path,
 			port: parsed.port ? parsed.port : parsed.protocol === "https:" ? 443 : 80,
 			headers,
-			rejectUnauthorized: false,
+			rejectUnauthorized: true,
 			agent: false
 		};
 		if (options.tls) Object.assign(reqOptions, options.tls);
@@ -434,7 +800,21 @@ var require_fetch = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				}
 				options.method = "GET";
 				options.body = false;
-				return nmfetch(urllib$3.resolve(url, res.headers.location), options);
+				const redirectUrl = urllib.resolve(url, res.headers.location);
+				const redirectParsed = urllib.parse(redirectUrl);
+				const crossHost = redirectParsed.hostname !== parsed.hostname;
+				const downgrade = parsed.protocol === "https:" && redirectParsed.protocol === "http:";
+				if (options.headers && (crossHost || downgrade)) {
+					const sensitive = [
+						"authorization",
+						"cookie",
+						"proxy-authorization"
+					];
+					Object.keys(options.headers).forEach((key) => {
+						if (sensitive.includes(key.toLowerCase())) delete options.headers[key];
+					});
+				}
+				return nmfetch(redirectUrl, options);
 			}
 			fetchRes.statusCode = res.statusCode;
 			fetchRes.headers = res.headers;
@@ -486,7 +866,7 @@ var require_fetch = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region ../../../../node_modules/nodemailer/lib/shared/index.js
 var require_shared = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const urllib$2 = __require("url");
+	const urllib = require_url();
 	const util$1 = __require("util");
 	const fs$2 = __require("fs");
 	const nmfetch = require_fetch();
@@ -545,10 +925,13 @@ var require_shared = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports.resolveHostname = (options, callback) => {
 		options = options || {};
 		if (!options.host && options.servername) options.host = options.servername;
-		if (!options.host || net$3.isIP(options.host)) return callback(null, formatDNSValue({
-			addresses: [options.host],
-			servername: options.servername || false
-		}, { cached: false }));
+		if (!options.host || net$3.isIP(options.host)) {
+			const value = {
+				addresses: [options.host],
+				servername: options.servername || false
+			};
+			return callback(null, formatDNSValue(value, { cached: false }));
+		}
 		let cached;
 		if (dnsCache.has(options.host)) {
 			cached = dnsCache.get(options.host);
@@ -650,7 +1033,7 @@ var require_shared = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports.parseConnectionUrl = (str) => {
 		str = str || "";
 		const options = {};
-		const url = urllib$2.parse(str, true);
+		const url = urllib.parse(str, true);
 		switch (url.protocol) {
 			case "smtp:":
 				options.secure = false;
@@ -825,6 +1208,10 @@ var require_shared = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		if (!callback) promise = new Promise((resolve, reject) => {
 			callback = module.exports.callbackPromise(resolve, reject);
 		});
+		resolveContentValue(data, key, options, callback);
+		return promise;
+	};
+	function resolveContentValue(data, key, options, callback) {
 		let content = data && data[key] && data[key].content || data[key];
 		const encoding = (typeof data[key] === "object" && data[key].encoding || "utf8").toString().toLowerCase().replace(/[-_\s]/g, "");
 		if (!content) return callback(null, content);
@@ -841,11 +1228,13 @@ var require_shared = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					err.code = errors.EURLACCESS;
 					callback(err);
 				});
-				return resolveStream(nmfetch(content.path || content.href), callback);
+				return resolveStream(nmfetch(content.path || content.href, {
+					headers: content.httpHeaders,
+					tls: content.tls
+				}), callback);
 			} else if (/^data:/i.test(content.path || content.href)) {
 				const parsedDataUri = module.exports.parseDataURI(content.path || content.href);
-				if (!parsedDataUri || !parsedDataUri.data) return callback(null, Buffer.from(0));
-				return callback(null, parsedDataUri.data);
+				return callback(null, parsedDataUri && parsedDataUri.data ? parsedDataUri.data : Buffer.alloc(0));
 			} else if (content.path) {
 				if (options.disableFileAccess) return setImmediate(() => {
 					const err = /* @__PURE__ */ new Error("File access rejected for " + content.path);
@@ -861,8 +1250,7 @@ var require_shared = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			"ascii"
 		].includes(encoding)) content = Buffer.from(data[key].content, encoding);
 		setImmediate(() => callback(null, content));
-		return promise;
-	};
+	}
 	/**
 	* Copies properties from source objects to target objects
 	*/
@@ -961,7 +1349,7 @@ var require_mime_types = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const path$1 = __require("path");
 	const defaultMimeType = "application/octet-stream";
 	const defaultExtension = "bin";
-	const mimeTypes = new Map([
+	const mimeTypes = /* @__PURE__ */ new Map([
 		["application/acad", "dwg"],
 		["application/applixware", "aw"],
 		["application/arj", "arj"],
@@ -2223,7 +2611,7 @@ var require_mime_types = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		["xgl/drawing", "xgz"],
 		["xgl/movie", "xmz"]
 	]);
-	const extensions = new Map([
+	const extensions = /* @__PURE__ */ new Map([
 		["123", "application/vnd.lotus-1-2-3"],
 		["323", "text/h323"],
 		["*", "application/octet-stream"],
@@ -3380,395 +3768,97 @@ var require_mime_types = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			"application/vnd.ms-excel",
 			"application/x-excel"
 		]],
-		["xlm", [
-			"application/vnd.ms-excel",
-			"application/excel",
-			"application/x-excel"
-		]],
-		["xls", [
-			"application/vnd.ms-excel",
-			"application/excel",
-			"application/x-msexcel",
-			"application/x-excel"
-		]],
-		["xlsb", "application/vnd.ms-excel.sheet.binary.macroenabled.12"],
-		["xlsm", "application/vnd.ms-excel.sheet.macroenabled.12"],
-		["xlsx", "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"],
-		["xlt", [
+		["xlm", [
 			"application/vnd.ms-excel",
 			"application/excel",
 			"application/x-excel"
 		]],
-		["xltm", "application/vnd.ms-excel.template.macroenabled.12"],
-		["xltx", "application/vnd.openxmlformats-officedocument.spreadsheetml.template"],
-		["xlv", ["application/excel", "application/x-excel"]],
-		["xlw", [
+		["xls", [
 			"application/vnd.ms-excel",
 			"application/excel",
 			"application/x-msexcel",
 			"application/x-excel"
 		]],
-		["xm", "audio/xm"],
-		["xml", [
-			"application/xml",
-			"text/xml",
-			"application/atom+xml",
-			"application/rss+xml"
-		]],
-		["xmz", "xgl/movie"],
-		["xo", "application/vnd.olpc-sugar"],
-		["xof", "x-world/x-vrml"],
-		["xop", "application/xop+xml"],
-		["xpi", "application/x-xpinstall"],
-		["xpix", "application/x-vnd.ls-xpix"],
-		["xpm", ["image/xpm", "image/x-xpixmap"]],
-		["xpr", "application/vnd.is-xpr"],
-		["xps", "application/vnd.ms-xpsdocument"],
-		["xpw", "application/vnd.intercon.formnet"],
-		["xslt", "application/xslt+xml"],
-		["xsm", "application/vnd.syncml+xml"],
-		["xspf", "application/xspf+xml"],
-		["xsr", "video/x-amt-showrun"],
-		["xul", "application/vnd.mozilla.xul+xml"],
-		["xwd", ["image/x-xwd", "image/x-xwindowdump"]],
-		["xyz", ["chemical/x-xyz", "chemical/x-pdb"]],
-		["yang", "application/yang"],
-		["yin", "application/yin+xml"],
-		["z", ["application/x-compressed", "application/x-compress"]],
-		["zaz", "application/vnd.zzazz.deck+xml"],
-		["zip", [
-			"application/zip",
-			"multipart/x-zip",
-			"application/x-zip-compressed",
-			"application/x-compressed"
-		]],
-		["zir", "application/vnd.zul"],
-		["zmm", "application/vnd.handheld-entertainment+xml"],
-		["zoo", "application/octet-stream"],
-		["zsh", "text/x-script.zsh"]
-	]);
-	module.exports = {
-		detectMimeType(filename) {
-			if (!filename) return defaultMimeType;
-			const parsed = path$1.parse(filename);
-			const extension = (parsed.ext.substr(1) || parsed.name || "").split("?").shift().trim().toLowerCase();
-			const value = extensions.has(extension) ? extensions.get(extension) : defaultMimeType;
-			if (Array.isArray(value)) return value[0];
-			return value;
-		},
-		detectExtension(mimeType) {
-			if (!mimeType) return defaultExtension;
-			const parts = (mimeType || "").toLowerCase().trim().split("/");
-			const rootType = parts.shift().trim();
-			const subType = parts.join("/").trim();
-			if (mimeTypes.has(rootType + "/" + subType)) {
-				const value = mimeTypes.get(rootType + "/" + subType);
-				if (Array.isArray(value)) return value[0];
-				return value;
-			}
-			switch (rootType) {
-				case "text": return "txt";
-				default: return "bin";
-			}
-		}
-	};
-}));
-//#endregion
-//#region ../../../../node_modules/nodemailer/lib/punycode/index.js
-var require_punycode = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	/** Highest positive signed 32-bit float value */
-	const maxInt = 2147483647;
-	/** Bootstring parameters */
-	const base = 36;
-	const tMin = 1;
-	const tMax = 26;
-	const skew = 38;
-	const damp = 700;
-	const initialBias = 72;
-	const initialN = 128;
-	const delimiter = "-";
-	/** Regular expressions */
-	const regexPunycode = /^xn--/;
-	const regexNonASCII = /[^\0-\x7F]/;
-	const regexSeparators = /[\x2E\u3002\uFF0E\uFF61]/g;
-	/** Error messages */
-	const errors = {
-		overflow: "Overflow: input needs wider integers to process",
-		"not-basic": "Illegal input >= 0x80 (not a basic code point)",
-		"invalid-input": "Invalid input"
-	};
-	/** Convenience shortcuts */
-	const baseMinusTMin = base - tMin;
-	const floor = Math.floor;
-	const stringFromCharCode = String.fromCharCode;
-	/**
-	* A generic error utility function.
-	* @private
-	* @param {String} type The error type.
-	* @returns {Error} Throws a `RangeError` with the applicable error message.
-	*/
-	function error(type) {
-		throw new RangeError(errors[type]);
-	}
-	/**
-	* A generic `Array#map` utility function.
-	* @private
-	* @param {Array} array The array to iterate over.
-	* @param {Function} callback The function that gets called for every array
-	* item.
-	* @returns {Array} A new array of values returned by the callback function.
-	*/
-	function map(array, callback) {
-		const result = [];
-		let length = array.length;
-		while (length--) result[length] = callback(array[length]);
-		return result;
-	}
-	/**
-	* A simple `Array#map`-like wrapper to work with domain name strings or email
-	* addresses.
-	* @private
-	* @param {String} domain The domain name or email address.
-	* @param {Function} callback The function that gets called for every
-	* character.
-	* @returns {String} A new string of characters returned by the callback
-	* function.
-	*/
-	function mapDomain(domain, callback) {
-		const parts = domain.split("@");
-		let result = "";
-		if (parts.length > 1) {
-			result = parts[0] + "@";
-			domain = parts[1];
-		}
-		domain = domain.replace(regexSeparators, ".");
-		const encoded = map(domain.split("."), callback).join(".");
-		return result + encoded;
-	}
-	/**
-	* Creates an array containing the numeric code points of each Unicode
-	* character in the string. While JavaScript uses UCS-2 internally,
-	* this function will convert a pair of surrogate halves (each of which
-	* UCS-2 exposes as separate characters) into a single code point,
-	* matching UTF-16.
-	* @see `punycode.ucs2.encode`
-	* @see <https://mathiasbynens.be/notes/javascript-encoding>
-	* @memberOf punycode.ucs2
-	* @name decode
-	* @param {String} string The Unicode input string (UCS-2).
-	* @returns {Array} The new array of code points.
-	*/
-	function ucs2decode(string) {
-		const output = [];
-		let counter = 0;
-		const length = string.length;
-		while (counter < length) {
-			const value = string.charCodeAt(counter++);
-			if (value >= 55296 && value <= 56319 && counter < length) {
-				const extra = string.charCodeAt(counter++);
-				if ((extra & 64512) == 56320) output.push(((value & 1023) << 10) + (extra & 1023) + 65536);
-				else {
-					output.push(value);
-					counter--;
-				}
-			} else output.push(value);
-		}
-		return output;
-	}
-	/**
-	* Creates a string based on an array of numeric code points.
-	* @see `punycode.ucs2.decode`
-	* @memberOf punycode.ucs2
-	* @name encode
-	* @param {Array} codePoints The array of numeric code points.
-	* @returns {String} The new Unicode string (UCS-2).
-	*/
-	const ucs2encode = (codePoints) => String.fromCodePoint(...codePoints);
-	/**
-	* Converts a basic code point into a digit/integer.
-	* @see `digitToBasic()`
-	* @private
-	* @param {Number} codePoint The basic numeric code point value.
-	* @returns {Number} The numeric value of a basic code point (for use in
-	* representing integers) in the range `0` to `base - 1`, or `base` if
-	* the code point does not represent a value.
-	*/
-	const basicToDigit = function(codePoint) {
-		if (codePoint >= 48 && codePoint < 58) return 26 + (codePoint - 48);
-		if (codePoint >= 65 && codePoint < 91) return codePoint - 65;
-		if (codePoint >= 97 && codePoint < 123) return codePoint - 97;
-		return base;
-	};
-	/**
-	* Converts a digit/integer into a basic code point.
-	* @see `basicToDigit()`
-	* @private
-	* @param {Number} digit The numeric value of a basic code point.
-	* @returns {Number} The basic code point whose value (when used for
-	* representing integers) is `digit`, which needs to be in the range
-	* `0` to `base - 1`. If `flag` is non-zero, the uppercase form is
-	* used; else, the lowercase form is used. The behavior is undefined
-	* if `flag` is non-zero and `digit` has no uppercase form.
-	*/
-	const digitToBasic = function(digit, flag) {
-		return digit + 22 + 75 * (digit < 26) - ((flag != 0) << 5);
-	};
-	/**
-	* Bias adaptation function as per section 3.4 of RFC 3492.
-	* https://tools.ietf.org/html/rfc3492#section-3.4
-	* @private
-	*/
-	const adapt = function(delta, numPoints, firstTime) {
-		let k = 0;
-		delta = firstTime ? floor(delta / damp) : delta >> 1;
-		delta += floor(delta / numPoints);
-		for (; delta > 455; k += base) delta = floor(delta / baseMinusTMin);
-		return floor(k + 36 * delta / (delta + skew));
-	};
-	/**
-	* Converts a Punycode string of ASCII-only symbols to a string of Unicode
-	* symbols.
-	* @memberOf punycode
-	* @param {String} input The Punycode string of ASCII-only symbols.
-	* @returns {String} The resulting string of Unicode symbols.
-	*/
-	const decode = function(input) {
-		const output = [];
-		const inputLength = input.length;
-		let i = 0;
-		let n = initialN;
-		let bias = initialBias;
-		let basic = input.lastIndexOf(delimiter);
-		if (basic < 0) basic = 0;
-		for (let j = 0; j < basic; ++j) {
-			if (input.charCodeAt(j) >= 128) error("not-basic");
-			output.push(input.charCodeAt(j));
-		}
-		for (let index = basic > 0 ? basic + 1 : 0; index < inputLength;) {
-			const oldi = i;
-			for (let w = 1, k = base;; k += base) {
-				if (index >= inputLength) error("invalid-input");
-				const digit = basicToDigit(input.charCodeAt(index++));
-				if (digit >= base) error("invalid-input");
-				if (digit > floor((maxInt - i) / w)) error("overflow");
-				i += digit * w;
-				const t = k <= bias ? tMin : k >= bias + tMax ? tMax : k - bias;
-				if (digit < t) break;
-				const baseMinusT = base - t;
-				if (w > floor(maxInt / baseMinusT)) error("overflow");
-				w *= baseMinusT;
+		["xlsb", "application/vnd.ms-excel.sheet.binary.macroenabled.12"],
+		["xlsm", "application/vnd.ms-excel.sheet.macroenabled.12"],
+		["xlsx", "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"],
+		["xlt", [
+			"application/vnd.ms-excel",
+			"application/excel",
+			"application/x-excel"
+		]],
+		["xltm", "application/vnd.ms-excel.template.macroenabled.12"],
+		["xltx", "application/vnd.openxmlformats-officedocument.spreadsheetml.template"],
+		["xlv", ["application/excel", "application/x-excel"]],
+		["xlw", [
+			"application/vnd.ms-excel",
+			"application/excel",
+			"application/x-msexcel",
+			"application/x-excel"
+		]],
+		["xm", "audio/xm"],
+		["xml", [
+			"application/xml",
+			"text/xml",
+			"application/atom+xml",
+			"application/rss+xml"
+		]],
+		["xmz", "xgl/movie"],
+		["xo", "application/vnd.olpc-sugar"],
+		["xof", "x-world/x-vrml"],
+		["xop", "application/xop+xml"],
+		["xpi", "application/x-xpinstall"],
+		["xpix", "application/x-vnd.ls-xpix"],
+		["xpm", ["image/xpm", "image/x-xpixmap"]],
+		["xpr", "application/vnd.is-xpr"],
+		["xps", "application/vnd.ms-xpsdocument"],
+		["xpw", "application/vnd.intercon.formnet"],
+		["xslt", "application/xslt+xml"],
+		["xsm", "application/vnd.syncml+xml"],
+		["xspf", "application/xspf+xml"],
+		["xsr", "video/x-amt-showrun"],
+		["xul", "application/vnd.mozilla.xul+xml"],
+		["xwd", ["image/x-xwd", "image/x-xwindowdump"]],
+		["xyz", ["chemical/x-xyz", "chemical/x-pdb"]],
+		["yang", "application/yang"],
+		["yin", "application/yin+xml"],
+		["z", ["application/x-compressed", "application/x-compress"]],
+		["zaz", "application/vnd.zzazz.deck+xml"],
+		["zip", [
+			"application/zip",
+			"multipart/x-zip",
+			"application/x-zip-compressed",
+			"application/x-compressed"
+		]],
+		["zir", "application/vnd.zul"],
+		["zmm", "application/vnd.handheld-entertainment+xml"],
+		["zoo", "application/octet-stream"],
+		["zsh", "text/x-script.zsh"]
+	]);
+	module.exports = {
+		detectMimeType(filename) {
+			if (!filename) return defaultMimeType;
+			const parsed = path$1.parse(filename);
+			const extension = (parsed.ext.substr(1) || parsed.name || "").split("?").shift().trim().toLowerCase();
+			const value = extensions.has(extension) ? extensions.get(extension) : defaultMimeType;
+			if (Array.isArray(value)) return value[0];
+			return value;
+		},
+		detectExtension(mimeType) {
+			if (!mimeType) return defaultExtension;
+			const parts = mimeType.toLowerCase().trim().split("/");
+			const rootType = parts.shift().trim();
+			const subType = parts.join("/").trim();
+			if (mimeTypes.has(rootType + "/" + subType)) {
+				const value = mimeTypes.get(rootType + "/" + subType);
+				if (Array.isArray(value)) return value[0];
+				return value;
 			}
-			const out = output.length + 1;
-			bias = adapt(i - oldi, out, oldi == 0);
-			if (floor(i / out) > maxInt - n) error("overflow");
-			n += floor(i / out);
-			i %= out;
-			output.splice(i++, 0, n);
-		}
-		return String.fromCodePoint(...output);
-	};
-	/**
-	* Converts a string of Unicode symbols (e.g. a domain name label) to a
-	* Punycode string of ASCII-only symbols.
-	* @memberOf punycode
-	* @param {String} input The string of Unicode symbols.
-	* @returns {String} The resulting Punycode string of ASCII-only symbols.
-	*/
-	const encode = function(input) {
-		const output = [];
-		input = ucs2decode(input);
-		const inputLength = input.length;
-		let n = initialN;
-		let delta = 0;
-		let bias = initialBias;
-		for (const currentValue of input) if (currentValue < 128) output.push(stringFromCharCode(currentValue));
-		const basicLength = output.length;
-		let handledCPCount = basicLength;
-		if (basicLength) output.push(delimiter);
-		while (handledCPCount < inputLength) {
-			let m = maxInt;
-			for (const currentValue of input) if (currentValue >= n && currentValue < m) m = currentValue;
-			const handledCPCountPlusOne = handledCPCount + 1;
-			if (m - n > floor((maxInt - delta) / handledCPCountPlusOne)) error("overflow");
-			delta += (m - n) * handledCPCountPlusOne;
-			n = m;
-			for (const currentValue of input) {
-				if (currentValue < n && ++delta > maxInt) error("overflow");
-				if (currentValue === n) {
-					let q = delta;
-					for (let k = base;; k += base) {
-						const t = k <= bias ? tMin : k >= bias + tMax ? tMax : k - bias;
-						if (q < t) break;
-						const qMinusT = q - t;
-						const baseMinusT = base - t;
-						output.push(stringFromCharCode(digitToBasic(t + qMinusT % baseMinusT, 0)));
-						q = floor(qMinusT / baseMinusT);
-					}
-					output.push(stringFromCharCode(digitToBasic(q, 0)));
-					bias = adapt(delta, handledCPCountPlusOne, handledCPCount === basicLength);
-					delta = 0;
-					++handledCPCount;
-				}
+			switch (rootType) {
+				case "text": return "txt";
+				default: return "bin";
 			}
-			++delta;
-			++n;
 		}
-		return output.join("");
-	};
-	/**
-	* Converts a Punycode string representing a domain name or an email address
-	* to Unicode. Only the Punycoded parts of the input will be converted, i.e.
-	* it doesn't matter if you call it on a string that has already been
-	* converted to Unicode.
-	* @memberOf punycode
-	* @param {String} input The Punycoded domain name or email address to
-	* convert to Unicode.
-	* @returns {String} The Unicode representation of the given Punycode
-	* string.
-	*/
-	const toUnicode = function(input) {
-		return mapDomain(input, function(string) {
-			return regexPunycode.test(string) ? decode(string.slice(4).toLowerCase()) : string;
-		});
-	};
-	/**
-	* Converts a Unicode string representing a domain name or an email address to
-	* Punycode. Only the non-ASCII parts of the domain name will be converted,
-	* i.e. it doesn't matter if you call it with a domain that's already in
-	* ASCII.
-	* @memberOf punycode
-	* @param {String} input The domain name or email address to convert, as a
-	* Unicode string.
-	* @returns {String} The Punycode representation of the given domain name or
-	* email address.
-	*/
-	const toASCII = function(input) {
-		return mapDomain(input, function(string) {
-			return regexNonASCII.test(string) ? "xn--" + encode(string) : string;
-		});
-	};
-	module.exports = {
-		/**
-		* A string representing the current Punycode.js version number.
-		* @memberOf punycode
-		* @type String
-		*/
-		version: "2.3.1",
-		/**
-		* An object of methods to convert from JavaScript's internal character
-		* representation (UCS-2) to Unicode code points, and back.
-		* @see <https://mathiasbynens.be/notes/javascript-encoding>
-		* @memberOf punycode
-		* @type Object
-		*/
-		ucs2: {
-			decode: ucs2decode,
-			encode: ucs2encode
-		},
-		decode,
-		encode,
-		toASCII,
-		toUnicode
 	};
 }));
 //#endregion
@@ -4544,6 +4634,7 @@ var require_addressparser = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 			this.operatorExpecting = "";
 			this.node = null;
 			this.escaped = false;
+			this.inDomainLiteral = false;
 			this.list = [];
 			/**
 			* Operator tokens and which tokens are expected to end the sequence
@@ -4581,6 +4672,10 @@ var require_addressparser = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 		* @param {String} chr Character from the address field
 		*/
 		checkChar(chr, nextChr) {
+			if (!this.escaped && !this.operatorExpecting) {
+				if (!this.inDomainLiteral && chr === "[") this.inDomainLiteral = true;
+				else if (this.inDomainLiteral && (chr === "]" || chr === "," || chr === ";")) this.inDomainLiteral = false;
+			}
 			if (this.escaped) {} else if (chr === this.operatorExpecting) {
 				this.node = {
 					type: "operator",
@@ -4599,7 +4694,7 @@ var require_addressparser = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 				this.operatorExpecting = "";
 				this.escaped = false;
 				return;
-			} else if (!this.operatorExpecting && chr in this.operators) {
+			} else if (!this.operatorExpecting && !this.inDomainLiteral && chr in this.operators) {
 				this.node = {
 					type: "operator",
 					value: chr
@@ -5513,7 +5608,10 @@ var require_mime_node = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					});
 					return contentStream;
 				}
-				return nmfetch(content.href, { headers: content.httpHeaders });
+				return nmfetch(content.href, {
+					headers: content.httpHeaders,
+					tls: content.tls
+				});
 			}
 			contentStream = new PassThrough$2();
 			setImmediate(() => {
@@ -5741,7 +5839,11 @@ var require_mail_composer = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 			this._useRelated = !!(this._htmlNode && this._attachments.related.length);
 			this._useAlternative = this._alternatives.length > 1;
 			this._useMixed = this._attachments.attached.length > 1 || this._alternatives.length && this._attachments.attached.length === 1;
-			if (this.mail.raw) this.message = new MimeNode("message/rfc822", { newline: this.mail.newline }).setRaw(this.mail.raw);
+			if (this.mail.raw) this.message = new MimeNode("message/rfc822", {
+				newline: this.mail.newline,
+				disableUrlAccess: this.mail.disableUrlAccess,
+				disableFileAccess: this.mail.disableFileAccess
+			}).setRaw(this.mail.raw);
 			else if (this._useMixed) this.message = this._createMixed();
 			else if (this._useAlternative) this.message = this._createAlternative();
 			else if (this._useRelated) this.message = this._createRelated();
@@ -5777,7 +5879,7 @@ var require_mail_composer = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 		* @returns {Object} An object of arrays (`related` and `attached`)
 		*/
 		getAttachments(findRelated) {
-			let icalEvent, eventObject;
+			let eventObject;
 			const attachments = [].concat(this.mail.attachments || []).map((attachment, i) => {
 				if (/^data:/i.test(attachment.path || attachment.href)) attachment = this._processDataUrl(attachment);
 				const contentType = attachment.contentType || mimeFuncs.detectMimeType(attachment.filename || attachment.path || attachment.href || "bin");
@@ -5807,7 +5909,8 @@ var require_mail_composer = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 				else if (attachment.path) data.content = { path: attachment.path };
 				else if (attachment.href) data.content = {
 					href: attachment.href,
-					httpHeaders: attachment.httpHeaders
+					httpHeaders: attachment.httpHeaders,
+					tls: attachment.tls
 				};
 				else data.content = attachment.content || "";
 				if (attachment.encoding) data.encoding = attachment.encoding;
@@ -5815,9 +5918,7 @@ var require_mail_composer = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 				return data;
 			});
 			if (this.mail.icalEvent) {
-				if (typeof this.mail.icalEvent === "object" && (this.mail.icalEvent.content || this.mail.icalEvent.path || this.mail.icalEvent.href || this.mail.icalEvent.raw)) icalEvent = this.mail.icalEvent;
-				else icalEvent = { content: this.mail.icalEvent };
-				eventObject = Object.assign({}, icalEvent);
+				eventObject = Object.assign({}, this._getIcalEvent());
 				eventObject.contentType = "application/ics";
 				if (!eventObject.headers) eventObject.headers = {};
 				eventObject.filename = eventObject.filename || "invite.ics";
@@ -5834,13 +5935,49 @@ var require_mail_composer = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 			};
 		}
 		/**
+		* Returns the icalEvent value with `path`/`href`/data uri input normalized into
+		* a `content` entry, the same way as for regular attachments. The same event is
+		* included twice (as a text/calendar alternative and as an application/ics
+		* attachment), so the shared content object is marked to be resolved just once
+		* and the buffered result is reused by the second node.
+		*
+		* @returns {Object} Normalized icalEvent data
+		*/
+		_getIcalEvent() {
+			if (!this._icalEvent) {
+				let icalEvent;
+				if (typeof this.mail.icalEvent === "object" && (this.mail.icalEvent.content || this.mail.icalEvent.path || this.mail.icalEvent.href || this.mail.icalEvent.raw)) icalEvent = Object.assign({}, this.mail.icalEvent);
+				else icalEvent = { content: this.mail.icalEvent };
+				if (/^data:/i.test(icalEvent.path || icalEvent.href)) icalEvent = this._processDataUrl(icalEvent);
+				if (/^https?:\/\//i.test(icalEvent.path)) {
+					icalEvent.href = icalEvent.path;
+					icalEvent.path = void 0;
+				}
+				if (!icalEvent.raw) {
+					if (icalEvent.path) {
+						icalEvent.content = { path: icalEvent.path };
+						icalEvent.path = void 0;
+					} else if (icalEvent.href) {
+						icalEvent.content = {
+							href: icalEvent.href,
+							httpHeaders: icalEvent.httpHeaders
+						};
+						icalEvent.href = void 0;
+					}
+				}
+				if (icalEvent.content && typeof icalEvent.content === "object") icalEvent.content._resolve = true;
+				this._icalEvent = icalEvent;
+			}
+			return this._icalEvent;
+		}
+		/**
 		* List alternatives. Resulting objects can be used as input for MimeNode nodes
 		*
 		* @returns {Array} An array of alternative elements. Includes the `text` and `html` values as well
 		*/
 		getAlternatives() {
 			const alternatives = [];
-			let text, html, watchHtml, amp, icalEvent, eventObject;
+			let text, html, watchHtml, amp, eventObject;
 			if (this.mail.text) {
 				if (typeof this.mail.text === "object" && (this.mail.text.content || this.mail.text.path || this.mail.text.href || this.mail.text.raw)) text = this.mail.text;
 				else text = { content: this.mail.text };
@@ -5857,10 +5994,7 @@ var require_mail_composer = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 				amp.contentType = "text/x-amp-html; charset=utf-8";
 			}
 			if (this.mail.icalEvent) {
-				if (typeof this.mail.icalEvent === "object" && (this.mail.icalEvent.content || this.mail.icalEvent.path || this.mail.icalEvent.href || this.mail.icalEvent.raw)) icalEvent = this.mail.icalEvent;
-				else icalEvent = { content: this.mail.icalEvent };
-				eventObject = Object.assign({}, icalEvent);
-				if (eventObject.content && typeof eventObject.content === "object") eventObject.content._resolve = true;
+				eventObject = Object.assign({}, this._getIcalEvent());
 				eventObject.filename = false;
 				eventObject.contentType = "text/calendar; charset=utf-8; method=" + (eventObject.method || "PUBLISH").toString().trim().toUpperCase();
 				if (!eventObject.headers) eventObject.headers = {};
@@ -6182,7 +6316,7 @@ var require_relaxed_body = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			options = options || {};
 			this.chunkBuffer = [];
 			this.chunkBufferLen = 0;
-			this.bodyHash = crypto$5.createHash(options.hashAlgo || "sha1");
+			this.bodyHash = crypto$5.createHash(options.hashAlgo || "sha256");
 			this.remainder = "";
 			this.byteLength = 0;
 			this.debug = options.debug;
@@ -6506,8 +6640,9 @@ var require_http_proxy_client = /* @__PURE__ */ __commonJSMin(((exports, module)
 	*/
 	const net$2 = __require("net");
 	const tls$1 = __require("tls");
-	const urllib$1 = __require("url");
+	const urllib = require_url();
 	const errors = require_errors();
+	const MAX_RESPONSE_HEADER_BYTES = 64 * 1024;
 	/**
 	* Establishes proxied connection to destinationPort
 	*
@@ -6518,17 +6653,29 @@ var require_http_proxy_client = /* @__PURE__ */ __commonJSMin(((exports, module)
 	* @param {String} proxyUrl proxy configuration, etg "http://proxy.host:3128/"
 	* @param {Number} destinationPort Port to open in destination host
 	* @param {String} destinationHost Destination hostname
+	* @param {Object} [tlsOptions] Optional TLS options for an HTTPS proxy (e.g. { rejectUnauthorized: false })
 	* @param {Function} callback Callback to run with the rocket object once connection is established
 	*/
-	function httpProxyClient(proxyUrl, destinationPort, destinationHost, callback) {
-		const proxy = urllib$1.parse(proxyUrl);
-		const options = {
+	function httpProxyClient(proxyUrl, destinationPort, destinationHost, tlsOptions, callback) {
+		if (typeof tlsOptions === "function") {
+			callback = tlsOptions;
+			tlsOptions = {};
+		}
+		tlsOptions = tlsOptions || {};
+		destinationPort = Number(destinationPort) || 0;
+		if (!destinationPort || /[\r\n]/.test(destinationHost)) {
+			const err = /* @__PURE__ */ new Error("Invalid proxy destination");
+			err.code = errors.EPROXY;
+			return setImmediate(() => callback(err));
+		}
+		const proxy = urllib.parse(proxyUrl);
+		const connectOptions = {
 			host: proxy.hostname,
 			port: Number(proxy.port) ? Number(proxy.port) : proxy.protocol === "https:" ? 443 : 80
 		};
 		let connect;
 		if (proxy.protocol === "https:") {
-			options.rejectUnauthorized = false;
+			connectOptions.rejectUnauthorized = tlsOptions.rejectUnauthorized !== false;
 			connect = tls$1.connect.bind(tls$1);
 		} else connect = net$2.connect.bind(net$2);
 		let socket;
@@ -6546,7 +6693,7 @@ var require_http_proxy_client = /* @__PURE__ */ __commonJSMin(((exports, module)
 			err.code = "ETIMEDOUT";
 			tempSocketErr(err);
 		};
-		socket = connect(options, () => {
+		socket = connect(connectOptions, () => {
 			if (finished) return;
 			const reqHeaders = {
 				Host: destinationHost + ":" + destinationPort,
@@ -6580,6 +6727,12 @@ var require_http_proxy_client = /* @__PURE__ */ __commonJSMin(((exports, module)
 					socket.setTimeout(0);
 					return callback(null, socket);
 				}
+				if (headers.length > MAX_RESPONSE_HEADER_BYTES) {
+					socket.removeListener("data", onSocketData);
+					const err = /* @__PURE__ */ new Error("Proxy response headers too large");
+					err.code = errors.EPROXY;
+					return tempSocketErr(err);
+				}
 			};
 			socket.on("data", onSocketData);
 		});
@@ -6781,7 +6934,7 @@ var require_mail_message = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 								let comment = (value.comment || "").toString().replace(/\r?\n|\r/g, " ");
 								if (mimeFuncs.isPlainText(comment)) comment = "\"" + comment + "\"";
 								else comment = mimeFuncs.encodeWord(comment);
-								return (value.comment ? comment + " " : "") + this._formatListUrl(value.url).replace(/^<[^:]+\/{,2}/, "");
+								return (value.comment ? comment + " " : "") + this._formatListUrl(value.url).replace(/^<[^:]+:\/{0,2}/, "<");
 							}
 							let comment = (value.comment || "").toString().replace(/\r?\n|\r/g, " ");
 							if (!mimeFuncs.isPlainText(comment)) comment = mimeFuncs.encodeWord(comment);
@@ -6812,7 +6965,7 @@ var require_mailer = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const httpProxyClient = require_http_proxy_client();
 	const errors = require_errors();
 	const util = __require("util");
-	const urllib = __require("url");
+	const urllib = require_url();
 	const packageData = require_package();
 	const MailMessage = require_mail_message();
 	const net$1 = __require("net");
@@ -7001,7 +7154,7 @@ var require_mailer = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				switch (protocol) {
 					case "http":
 					case "https":
-						httpProxyClient(proxy.href, options.port, options.host, (err, socket) => {
+						httpProxyClient(proxy.href, options.port, options.host, this.options.tls || {}, (err, socket) => {
 							if (err) return callback(err);
 							return callback(null, { connection: socket });
 						});
@@ -7215,9 +7368,9 @@ var require_smtp_connection = /* @__PURE__ */ __commonJSMin(((exports, module) =
 	*  * **requireTLS** - forces the client to use STARTTLS
 	*  * **name** - the name of the client server
 	*  * **localAddress** - outbound address to bind to (see: http://nodejs.org/api/net.html#net_net_connect_options_connectionlistener)
-	*  * **greetingTimeout** - Time to wait in ms until greeting message is received from the server (defaults to 10000)
-	*  * **connectionTimeout** - how many milliseconds to wait for the connection to establish
-	*  * **socketTimeout** - Time of inactivity until the connection is closed (defaults to 1 hour)
+	*  * **greetingTimeout** - Time to wait in ms until greeting message is received from the server (defaults to 30 seconds)
+	*  * **connectionTimeout** - how many milliseconds to wait for the connection to establish (defaults to 2 minutes)
+	*  * **socketTimeout** - Time of inactivity until the connection is closed (defaults to 10 minutes)
 	*  * **dnsTimeout** - Time to wait in ms for the DNS requests to be resolved (defaults to 30 seconds)
 	*  * **lmtp** - if true, uses LMTP instead of SMTP protocol
 	*  * **logger** - bunyan compatible logger interface
@@ -7403,6 +7556,13 @@ var require_smtp_connection = /* @__PURE__ */ __commonJSMin(((exports, module) =
 					try {
 						this._socket.connect(this.port, this.host, () => {
 							this._socket.setKeepAlive(true);
+							if (this.secureConnection && !this.alreadySecured) return this._upgradeConnection((err) => {
+								if (err) {
+									this._onError(/* @__PURE__ */ new Error("Error initiating TLS - " + (err.message || err)), "ETLS", false, "CONN");
+									return;
+								}
+								this._onConnect();
+							});
 							this._onConnect();
 						});
 						this._setupConnectionHandlers();
@@ -7449,6 +7609,7 @@ var require_smtp_connection = /* @__PURE__ */ __commonJSMin(((exports, module) =
 		* @param {Boolean} secure Whether to use TLS
 		*/
 		_connectToHost(opts, secure) {
+			if (this._destroyed || this._closing) return;
 			this._connectionAttemptId++;
 			const currentAttemptId = this._connectionAttemptId;
 			const connectFn = secure ? tls.connect : net.connect;
@@ -7494,6 +7655,7 @@ var require_smtp_connection = /* @__PURE__ */ __commonJSMin(((exports, module) =
 			if (this._socket) {
 				try {
 					this._socket.removeListener("error", this._onConnectionSocketError);
+					this._socket.on("error", TEARDOWN_NOOP);
 					this._socket.destroy();
 				} catch (_E) {}
 				this._socket = null;
@@ -7692,6 +7854,8 @@ var require_smtp_connection = /* @__PURE__ */ __commonJSMin(((exports, module) =
 		* @param {Function} callback Callback to return once connection is reset
 		*/
 		reset(callback) {
+			const isDestroyedMessage = this._isDestroyedMessage("reset");
+			if (isDestroyedMessage) return callback(this._formatError(isDestroyedMessage, "ECONNECTION", false, "API"));
 			this._sendCommand("RSET");
 			this._responseActions.push((str) => {
 				if (str.charAt(0) !== "2") return callback(this._formatError("Could not reset session state. response=" + str, "EPROTOCOL", str, "RSET"));
@@ -7724,6 +7888,7 @@ var require_smtp_connection = /* @__PURE__ */ __commonJSMin(((exports, module) =
 			this._socket.removeListener("close", this._onSocketClose);
 			this._socket.removeListener("end", this._onSocketEnd);
 			this._socket.removeListener("error", this._onConnectionSocketError);
+			this._socket.removeListener("error", this._onSocketError);
 			this._socket.on("error", this._onSocketError);
 			this._socket.on("data", this._onSocketData);
 			this._socket.once("close", this._onSocketClose);
@@ -7744,7 +7909,7 @@ var require_smtp_connection = /* @__PURE__ */ __commonJSMin(((exports, module) =
 		*/
 		_onData(chunk) {
 			if (this._destroyed || !chunk || !chunk.length) return;
-			let data = (chunk || "").toString("binary");
+			let data = chunk.toString("binary");
 			let lines = (this._remainder + data).split(/\r?\n/);
 			let lastline;
 			this._remainder = lines.pop();
@@ -7838,6 +8003,7 @@ var require_smtp_connection = /* @__PURE__ */ __commonJSMin(((exports, module) =
 		_destroy() {
 			if (this._destroyed) return;
 			this._destroyed = true;
+			this.destroyed = true;
 			this.emit("end");
 		}
 		/**
@@ -7847,6 +8013,8 @@ var require_smtp_connection = /* @__PURE__ */ __commonJSMin(((exports, module) =
 		*        has been secured
 		*/
 		_upgradeConnection(callback) {
+			this._remainder = "";
+			this._responseQueue = [];
 			this._socket.removeListener("data", this._onSocketData);
 			this._socket.removeListener("timeout", this._onSocketTimeout);
 			const socketPlain = this._socket;
@@ -7859,6 +8027,7 @@ var require_smtp_connection = /* @__PURE__ */ __commonJSMin(((exports, module) =
 				socketPlain.removeListener("close", this._onSocketClose);
 				socketPlain.removeListener("end", this._onSocketEnd);
 				socketPlain.removeListener("error", this._onSocketError);
+				socketPlain.removeListener("error", this._onConnectionSocketError);
 			};
 			this.upgrading = true;
 			try {
@@ -7882,15 +8051,20 @@ var require_smtp_connection = /* @__PURE__ */ __commonJSMin(((exports, module) =
 		}
 		/**
 		* Processes queued responses from the server
-		*
-		* @param {Boolean} force If true, ignores _processing flag
 		*/
 		_processResponse() {
 			if (!this._responseQueue.length) return false;
-			let str = this.lastServerResponse = decodeServerResponse((this._responseQueue.shift() || "").toString());
-			if (/^\d+-/.test(str.split("\n").pop())) return;
+			const raw = (this._responseQueue.shift() || "").toString();
+			if (!raw.trim()) {
+				setImmediate(() => this._processResponse());
+				return;
+			}
+			let str = this.lastServerResponse = decodeServerResponse(raw);
+			if (/^\d+-/.test(str.split("\n").pop())) {
+				this._responseQueue.unshift(raw);
+				return;
+			}
 			if (this.options.debug || this.options.transactionLog) this.logger.debug({ tnx: "server" }, str.replace(/\r?\n$/, ""));
-			if (!str.trim()) setImmediate(() => this._processResponse());
 			const action = this._responseActions.shift();
 			if (typeof action === "function") {
 				action.call(this, str);
@@ -7940,6 +8114,10 @@ var require_smtp_connection = /* @__PURE__ */ __commonJSMin(((exports, module) =
 			} catch (err) {
 				return callback(this._formatError("Invalid DSN " + err.message, "EENVELOPE", false, "API"));
 			}
+			if (this._envelope.requireTLSExtensionEnabled) {
+				if (!this.secure) return callback(this._formatError("REQUIRETLS can only be used over TLS connections (RFC 8689)", "EREQUIRETLS", false, "MAIL FROM"));
+				if (!this._supportedExtensions.includes("REQUIRETLS")) return callback(this._formatError("Server does not support REQUIRETLS extension (RFC 8689)", "EREQUIRETLS", false, "MAIL FROM"));
+			}
 			this._responseActions.push((str) => {
 				this._actionMAIL(str, callback);
 			});
@@ -7959,11 +8137,7 @@ var require_smtp_connection = /* @__PURE__ */ __commonJSMin(((exports, module) =
 				if (this._envelope.dsn.ret) args.push("RET=" + shared.encodeXText(this._envelope.dsn.ret));
 				if (this._envelope.dsn.envid) args.push("ENVID=" + shared.encodeXText(this._envelope.dsn.envid));
 			}
-			if (this._envelope.requireTLSExtensionEnabled) {
-				if (!this.secure) return callback(this._formatError("REQUIRETLS can only be used over TLS connections (RFC 8689)", "EREQUIRETLS", false, "MAIL FROM"));
-				if (!this._supportedExtensions.includes("REQUIRETLS")) return callback(this._formatError("Server does not support REQUIRETLS extension (RFC 8689)", "EREQUIRETLS", false, "MAIL FROM"));
-				args.push("REQUIRETLS");
-			}
+			if (this._envelope.requireTLSExtensionEnabled) args.push("REQUIRETLS");
 			this._sendCommand("MAIL FROM:<" + this._envelope.from + ">" + (args.length ? " " + args.join(" ") : ""));
 		}
 		_setDsnEnvelope(params) {
@@ -9963,8 +10137,11 @@ var require_smtp_transport = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 			return setImmediate(() => callback(null, false));
 		}
 		getAuth(authOpts) {
-			if (!authOpts) return this.auth;
-			const authData = Object.assign({}, this.options.auth && typeof this.options.auth === "object" ? this.options.auth : {}, authOpts && typeof authOpts === "object" ? authOpts : {});
+			if (!authOpts) {
+				if (this.auth && this.auth.oauth2 && this.mailer) this.auth.oauth2.provisionCallback = this.mailer.get("oauth2_provision_cb") || this.auth.oauth2.provisionCallback;
+				return this.auth;
+			}
+			const authData = Object.assign({}, this.options.auth && typeof this.options.auth === "object" ? this.options.auth : {}, typeof authOpts === "object" ? authOpts : {});
 			if (Object.keys(authData).length === 0) return false;
 			switch ((authData.type || "").toString().toUpperCase()) {
 				case "OAUTH2": {
@@ -10188,6 +10365,8 @@ var require_sendmail_transport = /* @__PURE__ */ __commonJSMin(((exports, module
 	const packageData = require_package();
 	const shared = require_shared();
 	const errors = require_errors();
+	const LeWindows = require_le_windows();
+	const LeUnix = require_le_unix();
 	/**
 	* Generates a Transport object for Sendmail
 	*
@@ -10215,6 +10394,12 @@ var require_sendmail_transport = /* @__PURE__ */ __commonJSMin(((exports, module
 				if (options.path) this.path = options.path;
 				if (Array.isArray(options.args)) this.args = options.args;
 			}
+			this.winbreak = [
+				"win",
+				"windows",
+				"dos",
+				"\r\n"
+			].includes((options.newline || "").toString().toLowerCase());
 		}
 		/**
 		* <p>Compiles a mailcomposer message and forwards it to handler that sends it.</p>
@@ -10292,7 +10477,12 @@ var require_sendmail_transport = /* @__PURE__ */ __commonJSMin(((exports, module
 					messageId
 				}, "Sending message %s to <%s>", messageId, recipients.join(", "));
 				const sourceStream = mail.message.createReadStream();
-				sourceStream.once("error", (err) => {
+				let stream = sourceStream;
+				if (this.options.newline) {
+					stream = sourceStream.pipe(this.winbreak ? new LeWindows() : new LeUnix());
+					sourceStream.once("error", (err) => stream.emit("error", err));
+				}
+				stream.once("error", (err) => {
 					this.logger.error({
 						err,
 						tnx: "stdin",
@@ -10301,7 +10491,7 @@ var require_sendmail_transport = /* @__PURE__ */ __commonJSMin(((exports, module
 					sendmail.kill("SIGINT");
 					callback(err);
 				});
-				sourceStream.pipe(sendmail.stdin);
+				stream.pipe(sendmail.stdin);
 			} else {
 				const err = /* @__PURE__ */ new Error("sendmail was not found");
 				err.code = errors.ESENDMAIL;
@@ -10316,6 +10506,8 @@ var require_sendmail_transport = /* @__PURE__ */ __commonJSMin(((exports, module
 var require_stream_transport = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const packageData = require_package();
 	const shared = require_shared();
+	const LeWindows = require_le_windows();
+	const LeUnix = require_le_unix();
 	/**
 	* Generates a Transport object for streaming
 	*
@@ -10361,6 +10553,11 @@ var require_stream_transport = /* @__PURE__ */ __commonJSMin(((exports, module)
 				let stream;
 				try {
 					stream = mail.message.createReadStream();
+					if (this.options.newline) {
+						const sourceStream = stream;
+						stream = sourceStream.pipe(this.winbreak ? new LeWindows() : new LeUnix());
+						sourceStream.once("error", (err) => stream.emit("error", err));
+					}
 				} catch (E) {
 					this.logger.error({
 						err: E,
@@ -10474,9 +10671,19 @@ var require_ses_transport = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 	const EventEmitter = __require("events");
 	const packageData = require_package();
 	const shared = require_shared();
+	const errors = require_errors();
 	const LeWindows = require_le_windows();
 	const MimeNode = require_mime_node();
 	/**
+	* Tags AWS SDK rejections that carry no `code` property (SDK v3 errors only
+	* have a `name`) with the generic SES transport error code, keeping the
+	* original error object intact
+	*/
+	function tagSesError(err) {
+		if (err && typeof err === "object" && !err.code) err.code = errors.ESES;
+		return err;
+	}
+	/**
 	* Generates a Transport object for AWS SES
 	*
 	* @constructor
@@ -10493,7 +10700,7 @@ var require_ses_transport = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 			this.logger = shared.getLogger(this.options, { component: this.options.component || "ses-transport" });
 		}
 		getRegion(cb) {
-			if (this.ses.sesClient.config && typeof this.ses.sesClient.config.region === "function") return this.ses.sesClient.config.region().then((region) => cb(null, region)).catch((err) => cb(err));
+			if (this.ses.sesClient.config && typeof this.ses.sesClient.config.region === "function") return this.ses.sesClient.config.region().then((region) => cb(null, region), (err) => cb(err));
 			return cb(null, false);
 		}
 		/**
@@ -10551,10 +10758,22 @@ var require_ses_transport = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 				}, mail.data.ses || {});
 				this.getRegion((err, region) => {
 					if (err || !region) region = "us-east-1";
-					const command = new this.ses.SendEmailCommand(sesMessage);
-					this.ses.sesClient.send(command).then((data) => {
+					let sendPromise;
+					try {
+						const command = new this.ses.SendEmailCommand(sesMessage);
+						sendPromise = this.ses.sesClient.send(command);
+					} catch (err) {
+						tagSesError(err);
+						this.logger.error({
+							err,
+							tnx: "send"
+						}, "Send error for %s: %s", messageId, err.message);
+						setImmediate(() => callback(err));
+						return;
+					}
+					sendPromise.then((data) => {
 						if (region === "us-east-1") region = "email";
-						callback(null, {
+						const info = {
 							envelope: {
 								from: envelope.from,
 								to: envelope.to
@@ -10562,13 +10781,15 @@ var require_ses_transport = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 							messageId: "<" + data.MessageId + (!/@/.test(data.MessageId) ? "@" + region + ".amazonses.com" : "") + ">",
 							response: data.MessageId,
 							raw
-						});
+						};
+						setImmediate(() => callback(null, info));
 					}).catch((err) => {
+						tagSesError(err);
 						this.logger.error({
 							err,
 							tnx: "send"
 						}, "Send error for %s: %s", messageId, err.message);
-						callback(err);
+						setImmediate(() => callback(err));
 					});
 				});
 			}));
@@ -10584,7 +10805,7 @@ var require_ses_transport = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 				callback = shared.callbackPromise(resolve, reject);
 			});
 			const cb = (err) => {
-				if (err && !["InvalidParameterValue", "MessageRejected"].includes(err.code || err.Code || err.name)) return callback(err);
+				if (err && !["InvalidParameterValue", "MessageRejected"].includes(err.code || err.Code || err.name)) return callback(tagSesError(err));
 				return callback(null, true);
 			};
 			const sesMessage = {
@@ -10592,10 +10813,16 @@ var require_ses_transport = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 				FromEmailAddress: "invalid@invalid",
 				Destination: { ToAddresses: ["invalid@invalid"] }
 			};
-			this.getRegion((err, region) => {
-				if (err || !region) region = "us-east-1";
-				const command = new this.ses.SendEmailCommand(sesMessage);
-				this.ses.sesClient.send(command).then((data) => cb(null, data)).catch((err) => cb(err));
+			this.getRegion(() => {
+				let sendPromise;
+				try {
+					const command = new this.ses.SendEmailCommand(sesMessage);
+					sendPromise = this.ses.sesClient.send(command);
+				} catch (err) {
+					setImmediate(() => cb(err));
+					return;
+				}
+				sendPromise.then(() => setImmediate(() => cb(null))).catch((err) => setImmediate(() => cb(err)));
 			});
 			return promise;
 		}
@@ -10703,11 +10930,13 @@ var import_nodemailer = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin((
 	module.exports.getTestMessageUrl = function(info) {
 		if (!info || !info.response) return false;
 		const infoProps = /* @__PURE__ */ new Map();
-		info.response.replace(/\[([^\]]+)\]$/, (m, props) => {
-			props.replace(/\b([A-Z0-9]+)=([^\s]+)/g, (m, key, value) => {
+		const response = info.response.toString();
+		if (response.length > 2 && response.charAt(response.length - 1) === "]") {
+			const open = response.indexOf("[", response.lastIndexOf("]", response.length - 2) + 1);
+			if (open >= 0 && open < response.length - 2) response.substring(open + 1, response.length - 1).replace(/\b([A-Z0-9]+)=([^\s]+)/g, (m, key, value) => {
 				infoProps.set(key, value);
 			});
-		});
+		}
 		if (infoProps.has("STATUS") && infoProps.has("MSGID")) return (testAccount.web || ETHEREAL_WEB) + "/message/" + infoProps.get("MSGID");
 		return false;
 	};
@@ -10715,31 +10944,25 @@ var import_nodemailer = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin((
 /**
 * Environment variables for nodemailer configuration
 */
-const envSchema = t.object({
-	EMAIL_HOST: t.optional(t.text({ description: "SMTP server host" })),
-	EMAIL_PORT: t.number({
-		default: 587,
-		description: "SMTP server port"
-	}),
-	EMAIL_USER: t.optional(t.text({ description: "SMTP authentication username" })),
-	EMAIL_PASS: t.optional(t.text({ description: "SMTP authentication password" })),
-	EMAIL_FROM: t.optional(t.text({ description: "Default from email address" })),
-	EMAIL_SECURE: t.boolean({
-		default: false,
-		description: "Use secure connection (TLS)"
-	})
+const envSchema = z.object({
+	EMAIL_HOST: z.text({ description: "SMTP server host" }).optional(),
+	EMAIL_PORT: z.number().describe("SMTP server port").default(587),
+	EMAIL_USER: z.text({ description: "SMTP authentication username" }).optional(),
+	EMAIL_PASS: z.text({ description: "SMTP authentication password" }).optional(),
+	EMAIL_FROM: z.text({ description: "Default from email address" }).optional(),
+	EMAIL_SECURE: z.boolean().describe("Use secure connection (TLS)").default(false)
 });
 /**
 * Nodemailer connection pooling and rate limiting options
 */
 const nodemailerEmailOptions = $atom({
 	name: "alepha.email.nodemailer.options",
-	schema: t.object({
-		pool: t.optional(t.boolean({ description: "Enable connection pooling" })),
-		maxConnections: t.optional(t.number({ description: "Maximum number of connections in pool" })),
-		maxMessages: t.optional(t.number({ description: "Maximum messages per connection" })),
-		rateDelta: t.optional(t.number({ description: "Time in milliseconds between message sends" })),
-		rateLimit: t.optional(t.number({ description: "Maximum number of messages per rateDelta" }))
+	schema: z.object({
+		pool: z.boolean().describe("Enable connection pooling").optional(),
+		maxConnections: z.number().describe("Maximum number of connections in pool").optional(),
+		maxMessages: z.number().describe("Maximum messages per connection").optional(),
+		rateDelta: z.number().describe("Time in milliseconds between message sends").optional(),
+		rateLimit: z.number().describe("Maximum number of messages per rateDelta").optional()
 	}),
 	default: {}
 });