dkimkit 0.0.0-stage → 0.7.0

package/dist/src/providers/email/mailgun.d.ts

@@ -0,0 +1,36 @@
+import { type FetchLike } from '../../http.js';
+import type { DnsRecord, DomainAuthentication, EmailProvider, InboundAction, InboundParseOptions, ValidationResult } from '../../types.js';
+export interface MailgunOptions {
+    apiKey: string;
+    /** Where the Mailgun account lives. Default "us". */
+    region?: 'us' | 'eu';
+    baseUrl?: string;
+    fetch?: FetchLike;
+}
+/**
+ * Mailgun sending domains (usually a subdomain like mg.example.com): SPF and
+ * DKIM TXT records plus a tracking CNAME. Inbound mail is received on the
+ * Mailgun domain itself (MX to mxa/mxb.mailgun.org) and forwarded by a route.
+ */
+export declare class MailgunProvider implements EmailProvider {
+    private readonly opts;
+    readonly name = "mailgun";
+    readonly label = "Mailgun";
+    readonly supportsInbound = true;
+    private readonly baseUrl;
+    private readonly fetchImpl;
+    constructor(opts: MailgunOptions);
+    /** Mailgun only receives for domains added to it, so inbound goes to the sending domain itself. */
+    defaultInboundHostname(domain: string): string;
+    findDomain(domain: string): Promise<DomainAuthentication | null>;
+    ensureDomain(domain: string): Promise<DomainAuthentication>;
+    getDomain(id: string): Promise<DomainAuthentication>;
+    deleteDomain(id: string): Promise<void>;
+    validateDomain(id: string): Promise<ValidationResult>;
+    inboundRecords(hostname: string): DnsRecord[];
+    ensureInboundParse(opts: InboundParseOptions): Promise<InboundAction>;
+    deleteInboundParse(hostname: string): Promise<void>;
+    private routes;
+    /** Mailgun takes multipart form fields; repeated keys (e.g. `action`) come from arrays. */
+    private request;
+}

package/dist/src/providers/email/mailgun.js

@@ -0,0 +1,141 @@
+import { ConfigError, ApiError } from '../../errors.js';
+import { requestText } from '../../http.js';
+import { isSpf, normalizeName } from '../../records.js';
+const BASE_URLS = { us: 'https://api.mailgun.net', eu: 'https://api.eu.mailgun.net' };
+const RECEIVING_MX = ['mxa.mailgun.org', 'mxb.mailgun.org'];
+const routeDescription = (hostname) => `dkimkit inbound ${hostname}`;
+/**
+ * Mailgun sending domains (usually a subdomain like mg.example.com): SPF and
+ * DKIM TXT records plus a tracking CNAME. Inbound mail is received on the
+ * Mailgun domain itself (MX to mxa/mxb.mailgun.org) and forwarded by a route.
+ */
+export class MailgunProvider {
+    opts;
+    name = 'mailgun';
+    label = 'Mailgun';
+    supportsInbound = true;
+    baseUrl;
+    fetchImpl;
+    constructor(opts) {
+        this.opts = opts;
+        this.baseUrl = opts.baseUrl ?? BASE_URLS[opts.region ?? 'us'];
+        this.fetchImpl = opts.fetch ?? fetch;
+    }
+    /** Mailgun only receives for domains added to it, so inbound goes to the sending domain itself. */
+    defaultInboundHostname(domain) {
+        return normalizeName(domain);
+    }
+    async findDomain(domain) {
+        try {
+            return toAuthentication(await this.request('GET', `/v4/domains/${encodeURIComponent(normalizeName(domain))}`), false);
+        }
+        catch (err) {
+            if (err instanceof ApiError && err.status === 404)
+                return null;
+            throw err;
+        }
+    }
+    async ensureDomain(domain) {
+        const existing = await this.findDomain(domain);
+        if (existing)
+            return existing;
+        const created = await this.request('POST', '/v4/domains', { name: normalizeName(domain), web_scheme: 'https' });
+        return toAuthentication(created, true);
+    }
+    async getDomain(id) {
+        return toAuthentication(await this.request('GET', `/v4/domains/${encodeURIComponent(id)}`), false);
+    }
+    async deleteDomain(id) {
+        await this.request('DELETE', `/v3/domains/${encodeURIComponent(id)}`);
+    }
+    async validateDomain(id) {
+        const res = await this.request('PUT', `/v4/domains/${encodeURIComponent(id)}/verify`);
+        const records = toAuthentication(res, false).records;
+        return {
+            valid: res.domain.state === 'active',
+            results: (res.sending_dns_records ?? []).map((r, i) => {
+                const valid = r.valid === 'valid';
+                return { record: records[i]?.purpose ?? r.record_type.toLowerCase(), valid, ...(valid ? {} : { reason: 'Not found in DNS yet' }) };
+            }),
+        };
+    }
+    inboundRecords(hostname) {
+        return RECEIVING_MX.map((value, i) => ({
+            type: 'MX',
+            name: normalizeName(hostname),
+            value,
+            priority: 10,
+            purpose: i === 0 ? 'inbound_mx' : 'inbound_mx_2',
+        }));
+    }
+    async ensureInboundParse(opts) {
+        const hostname = normalizeName(opts.hostname);
+        if (!(await this.findDomain(hostname))) {
+            throw new ConfigError(`Mailgun only receives mail for domains added to Mailgun. Use the sending domain (such as mg.${hostname.split('.').slice(-2).join('.')}) as the inbound hostname.`);
+        }
+        if (/["\\]/.test(opts.url))
+            throw new ConfigError('The inbound webhook URL cannot contain quotes or backslashes.');
+        const expression = `match_recipient(".*@${hostname.replace(/\./g, '\\.')}")`;
+        const actions = [`forward("${opts.url}")`, 'stop()'];
+        const route = (await this.routes()).find((r) => r.description === routeDescription(hostname));
+        const form = { priority: '10', description: routeDescription(hostname), expression, action: actions };
+        if (!route) {
+            await this.request('POST', '/v3/routes', form);
+            return 'created';
+        }
+        if (route.expression === expression && JSON.stringify(route.actions ?? []) === JSON.stringify(actions))
+            return 'unchanged';
+        await this.request('PUT', `/v3/routes/${encodeURIComponent(route.id)}`, form);
+        return 'updated';
+    }
+    async deleteInboundParse(hostname) {
+        const route = (await this.routes()).find((r) => r.description === routeDescription(normalizeName(hostname)));
+        if (route)
+            await this.request('DELETE', `/v3/routes/${encodeURIComponent(route.id)}`);
+    }
+    async routes() {
+        return (await this.request('GET', '/v3/routes?limit=1000')).items ?? [];
+    }
+    /** Mailgun takes multipart form fields; repeated keys (e.g. `action`) come from arrays. */
+    async request(method, path, form) {
+        const text = await requestText(this.fetchImpl, 'Mailgun', this.baseUrl + path, () => {
+            let body;
+            if (form) {
+                body = new FormData();
+                for (const [k, v] of Object.entries(form))
+                    for (const item of [v].flat())
+                        body.append(k, item);
+            }
+            return {
+                method,
+                headers: { Authorization: `Basic ${Buffer.from(`api:${this.opts.apiKey}`).toString('base64')}`, Accept: 'application/json' },
+                body,
+            };
+        }, (t) => {
+            try {
+                return JSON.parse(t).message;
+            }
+            catch {
+                return undefined;
+            }
+        });
+        return (text ? JSON.parse(text) : {});
+    }
+}
+function toAuthentication(res, created) {
+    const domain = normalizeName(res.domain.name);
+    const records = (res.sending_dns_records ?? []).flatMap((r) => {
+        const type = r.record_type.toUpperCase();
+        if (type !== 'TXT' && type !== 'CNAME')
+            return [];
+        const name = normalizeName(r.name || domain);
+        if (type === 'CNAME')
+            return [{ type, name, value: normalizeName(r.value), purpose: 'tracking' }];
+        if (isSpf(r.value)) {
+            return [{ type, name, value: r.value, purpose: 'spf', note: 'If this name already has an SPF record (v=spf1 …), add include:mailgun.org to it instead of creating a second one.' }];
+        }
+        return [{ type, name, value: r.value, purpose: name.includes('._domainkey.') ? 'dkim' : 'txt' }];
+    });
+    return { id: domain, domain, valid: res.domain.state === 'active', records, created };
+}
+//# sourceMappingURL=mailgun.js.map

package/dist/src/providers/email/mailgun.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailgun.js","sourceRoot":"","sources":["../../../../src/providers/email/mailgun.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAkB,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGxD,MAAM,SAAS,GAAG,EAAE,EAAE,EAAE,yBAAyB,EAAE,EAAE,EAAE,4BAA4B,EAAE,CAAC;AACtF,MAAM,YAAY,GAAG,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;AA8B5D,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,mBAAmB,QAAQ,EAAE,CAAC;AAE7E;;;;GAIG;AACH,MAAM,OAAO,eAAe;IAOG;IANpB,IAAI,GAAG,SAAS,CAAC;IACjB,KAAK,GAAG,SAAS,CAAC;IAClB,eAAe,GAAG,IAAI,CAAC;IACf,OAAO,CAAS;IAChB,SAAS,CAAY;IAEtC,YAA6B,IAAoB;QAApB,SAAI,GAAJ,IAAI,CAAgB;QAC/C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACvC,CAAC;IAED,mGAAmG;IACnG,sBAAsB,CAAC,MAAc;QACnC,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,IAAI,CAAC;YACH,OAAO,gBAAgB,CAAC,MAAM,IAAI,CAAC,OAAO,CAAmB,KAAK,EAAE,eAAe,kBAAkB,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1I,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAC/D,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAmB,MAAM,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAClI,OAAO,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU;QACxB,OAAO,gBAAgB,CAAC,MAAM,IAAI,CAAC,OAAO,CAAmB,KAAK,EAAE,eAAe,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IACvH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU;QAC3B,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAmB,KAAK,EAAE,eAAe,kBAAkB,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;QACxG,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC;QACrD,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ;YACpC,OAAO,EAAE,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACpD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC;gBAClC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,EAAE,CAAC;YACrI,CAAC,CAAC;SACH,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,QAAgB;QAC7B,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACrC,IAAI,EAAE,IAAa;YACnB,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC;YAC7B,KAAK;YACL,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc;SACjD,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,IAAyB;QAChD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,WAAW,CAAC,+FAA+F,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC5L,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,+DAA+D,CAAC,CAAC;QACnH,MAAM,UAAU,GAAG,uBAAuB,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC;QAC7E,MAAM,OAAO,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9F,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACtG,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;YAC/C,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,OAAO,WAAW,CAAC;QAC3H,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QACvC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,gBAAgB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7G,IAAI,KAAK;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,cAAc,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAwB,KAAK,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;IACjG,CAAC;IAED,2FAA2F;IACnF,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAwC;QAC7F,MAAM,IAAI,GAAG,MAAM,WAAW,CAC5B,IAAI,CAAC,SAAS,EACd,SAAS,EACT,IAAI,CAAC,OAAO,GAAG,IAAI,EACnB,GAAG,EAAE;YACH,IAAI,IAA0B,CAAC;YAC/B,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;gBACtB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;oBAAE,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;wBAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACjG,CAAC;YACD,OAAO;gBACL,MAAM;gBACN,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBAC5H,IAAI;aACL,CAAC;QACJ,CAAC,EACD,CAAC,CAAC,EAAE,EAAE;YACJ,IAAI,CAAC;gBACH,OAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,CAA0B,CAAC,OAAO,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC,CACF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAM,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,GAAqB,EAAE,OAAgB;IAC/D,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAe,EAAE;QACzE,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,WAAW,EAAgB,CAAC;QACvD,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QAClG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACnB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,oHAAoH,EAAE,CAAC,CAAC;QACtL,CAAC;QACD,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACxF,CAAC"}

package/dist/src/providers/email/postmark.d.ts

@@ -0,0 +1,37 @@
+import { type FetchLike } from '../../http.js';
+import type { DnsRecord, DomainAuthentication, EmailProvider, InboundAction, InboundParseOptions, ValidationResult } from '../../types.js';
+export declare const POSTMARK_INBOUND_MX = "inbound.postmarkapp.com";
+export interface PostmarkOptions {
+    /** Account API token (X-Postmark-Account-Token). */
+    accountToken: string;
+    /** Server whose inbound stream receives mail. Postmark allows one inbound domain per server. */
+    inboundServerId?: string;
+    baseUrl?: string;
+    fetch?: FetchLike;
+}
+/**
+ * Postmark sender signatures for domains: a DKIM TXT record and a custom
+ * Return-Path CNAME. SPF is no longer required by Postmark.
+ */
+export declare class PostmarkProvider implements EmailProvider {
+    private readonly opts;
+    readonly name = "postmark";
+    readonly label = "Postmark";
+    readonly supportsInbound = true;
+    private readonly baseUrl;
+    private readonly fetchImpl;
+    constructor(opts: PostmarkOptions);
+    defaultInboundHostname(domain: string): string;
+    findDomain(domain: string): Promise<DomainAuthentication | null>;
+    ensureDomain(domain: string, opts?: {
+        subdomain?: string;
+    }): Promise<DomainAuthentication>;
+    getDomain(id: string): Promise<DomainAuthentication>;
+    deleteDomain(id: string): Promise<void>;
+    validateDomain(id: string): Promise<ValidationResult>;
+    inboundRecords(hostname: string): DnsRecord[];
+    ensureInboundParse(opts: InboundParseOptions): Promise<InboundAction>;
+    deleteInboundParse(hostname: string): Promise<void>;
+    private inboundServer;
+    private request;
+}

package/dist/src/providers/email/postmark.js

@@ -0,0 +1,121 @@
+import { ConfigError } from '../../errors.js';
+import { requestJson } from '../../http.js';
+import { normalizeName } from '../../records.js';
+export const POSTMARK_INBOUND_MX = 'inbound.postmarkapp.com';
+const DEFAULT_RETURN_PATH_CNAME = 'pm.mtasv.net';
+/**
+ * Postmark sender signatures for domains: a DKIM TXT record and a custom
+ * Return-Path CNAME. SPF is no longer required by Postmark.
+ */
+export class PostmarkProvider {
+    opts;
+    name = 'postmark';
+    label = 'Postmark';
+    supportsInbound = true;
+    baseUrl;
+    fetchImpl;
+    constructor(opts) {
+        this.opts = opts;
+        this.baseUrl = opts.baseUrl ?? 'https://api.postmarkapp.com';
+        this.fetchImpl = opts.fetch ?? fetch;
+    }
+    defaultInboundHostname(domain) {
+        return `parse.${normalizeName(domain)}`;
+    }
+    async findDomain(domain) {
+        const wanted = normalizeName(domain);
+        for (let offset = 0;; offset += 500) {
+            const page = await this.request('GET', `/domains?count=500&offset=${offset}`);
+            const hit = page.Domains.find((d) => normalizeName(d.Name) === wanted);
+            if (hit)
+                return this.getDomain(String(hit.ID));
+            if (page.Domains.length === 0 || offset + page.Domains.length >= page.TotalCount)
+                return null;
+        }
+    }
+    async ensureDomain(domain, opts = {}) {
+        const existing = await this.findDomain(domain);
+        if (existing)
+            return existing;
+        const name = normalizeName(domain);
+        const created = await this.request('POST', '/domains', {
+            body: { Name: name, ReturnPathDomain: `${opts.subdomain ?? 'pm-bounces'}.${name}` },
+        });
+        return toAuthentication(created, true);
+    }
+    async getDomain(id) {
+        return toAuthentication(await this.request('GET', `/domains/${encodeURIComponent(id)}`), false);
+    }
+    async deleteDomain(id) {
+        await this.request('DELETE', `/domains/${encodeURIComponent(id)}`);
+    }
+    async validateDomain(id) {
+        await this.request('PUT', `/domains/${encodeURIComponent(id)}/verifyDkim`);
+        // Both calls return the domain; the second has both up-to-date flags.
+        const d = await this.request('PUT', `/domains/${encodeURIComponent(id)}/verifyReturnPath`);
+        const dkim = Boolean(d.DKIMVerified);
+        const returnPath = Boolean(d.ReturnPathDomainVerified);
+        return {
+            valid: dkim && returnPath,
+            results: [
+                { record: 'dkim', valid: dkim, ...(dkim ? {} : { reason: 'DKIM record not found yet' }) },
+                { record: 'return_path', valid: returnPath, ...(returnPath ? {} : { reason: 'Return-Path CNAME not found yet' }) },
+            ],
+        };
+    }
+    inboundRecords(hostname) {
+        return [{ type: 'MX', name: normalizeName(hostname), value: POSTMARK_INBOUND_MX, priority: 10, purpose: 'inbound_mx' }];
+    }
+    async ensureInboundParse(opts) {
+        const server = await this.inboundServer();
+        const hostname = normalizeName(opts.hostname);
+        const current = server.InboundDomain ? normalizeName(server.InboundDomain) : '';
+        if (current && current !== hostname) {
+            throw new ConfigError(`Postmark server ${server.ID} already receives mail for ${current}. Postmark allows one inbound domain per server, so use another server for ${hostname}.`);
+        }
+        if (current === hostname && server.InboundHookUrl === opts.url)
+            return 'unchanged';
+        await this.request('PUT', `/servers/${server.ID}`, { body: { InboundDomain: hostname, InboundHookUrl: opts.url } });
+        return current ? 'updated' : 'created';
+    }
+    async deleteInboundParse(hostname) {
+        if (!this.opts.inboundServerId)
+            return;
+        const server = await this.inboundServer();
+        if (server.InboundDomain && normalizeName(server.InboundDomain) === normalizeName(hostname)) {
+            await this.request('PUT', `/servers/${server.ID}`, { body: { InboundDomain: '', InboundHookUrl: '' } });
+        }
+    }
+    inboundServer() {
+        if (!this.opts.inboundServerId)
+            throw new ConfigError('Receiving email with Postmark needs the id of the Postmark server to receive on.');
+        return this.request('GET', `/servers/${encodeURIComponent(this.opts.inboundServerId)}`);
+    }
+    request(method, path, opts = {}) {
+        return requestJson(this.fetchImpl, 'Postmark', this.baseUrl + path, { ...opts, method, headers: { 'X-Postmark-Account-Token': this.opts.accountToken } }, (body) => body?.Message);
+    }
+}
+function toAuthentication(d, created) {
+    const domain = normalizeName(d.Name);
+    // Postmark may give hosts relative to the domain.
+    const qualify = (host) => {
+        const h = normalizeName(host);
+        return h === domain || h.endsWith(`.${domain}`) ? h : `${h}.${domain}`;
+    };
+    const records = [];
+    // A new or rotating key is published at the pending host first.
+    const dkimHost = d.DKIMPendingHost || d.DKIMHost;
+    const dkimValue = d.DKIMPendingTextValue || d.DKIMTextValue;
+    if (dkimHost && dkimValue)
+        records.push({ type: 'TXT', name: qualify(dkimHost), value: dkimValue, purpose: 'dkim' });
+    if (d.ReturnPathDomain) {
+        records.push({
+            type: 'CNAME',
+            name: qualify(d.ReturnPathDomain),
+            value: d.ReturnPathDomainCNAMEValue || DEFAULT_RETURN_PATH_CNAME,
+            purpose: 'return_path',
+        });
+    }
+    return { id: String(d.ID), domain, valid: Boolean(d.DKIMVerified && d.ReturnPathDomainVerified), records, created };
+}
+//# sourceMappingURL=postmark.js.map

package/dist/src/providers/email/postmark.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postmark.js","sourceRoot":"","sources":["../../../../src/providers/email/postmark.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAuC,MAAM,eAAe,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGjD,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;AAC7D,MAAM,yBAAyB,GAAG,cAAc,CAAC;AAiCjD;;;GAGG;AACH,MAAM,OAAO,gBAAgB;IAOE;IANpB,IAAI,GAAG,UAAU,CAAC;IAClB,KAAK,GAAG,UAAU,CAAC;IACnB,eAAe,GAAG,IAAI,CAAC;IACf,OAAO,CAAS;IAChB,SAAS,CAAY;IAEtC,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;QAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,6BAA6B,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACvC,CAAC;IAED,sBAAsB,CAAC,MAAc;QACnC,OAAO,SAAS,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,KAAK,IAAI,MAAM,GAAG,CAAC,GAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAqD,KAAK,EAAE,6BAA6B,MAAM,EAAE,CAAC,CAAC;YAClI,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;YACvE,IAAI,GAAG;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/C,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC;QAChG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,OAA+B,EAAE;QAClE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAW,MAAM,EAAE,UAAU,EAAE;YAC/D,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,YAAY,IAAI,IAAI,EAAE,EAAE;SACpF,CAAC,CAAC;QACH,OAAO,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU;QACxB,OAAO,gBAAgB,CAAC,MAAM,IAAI,CAAC,OAAO,CAAW,KAAK,EAAE,YAAY,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5G,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU;QAC3B,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,kBAAkB,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;QAC3E,sEAAsE;QACtE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAW,KAAK,EAAE,YAAY,kBAAkB,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC;QACrG,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;QACvD,OAAO;YACL,KAAK,EAAE,IAAI,IAAI,UAAU;YACzB,OAAO,EAAE;gBACP,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,EAAE;gBACzF,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC,EAAE;aACnH;SACF,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,QAAgB;QAC7B,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAC1H,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,IAAyB;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,IAAI,OAAO,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,WAAW,CACnB,mBAAmB,MAAM,CAAC,EAAE,8BAA8B,OAAO,8EAA8E,QAAQ,GAAG,CAC3J,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC;QACnF,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACpH,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QACvC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,MAAM,IAAI,WAAW,CAAC,kFAAkF,CAAC,CAAC;QAC1I,OAAO,IAAI,CAAC,OAAO,CAAW,KAAK,EAAE,YAAY,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC;IAEO,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,OAAuB,EAAE;QACxE,OAAO,WAAW,CAChB,IAAI,CAAC,SAAS,EACd,UAAU,EACV,IAAI,CAAC,OAAO,GAAG,IAAI,EACnB,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,0BAA0B,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,EACpF,CAAC,IAAI,EAAE,EAAE,CAAE,IAAyC,EAAE,OAAO,CAC9D,CAAC;IACJ,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,CAAW,EAAE,OAAgB;IACrD,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrC,kDAAkD;IAClD,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE;QAC/B,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;IACzE,CAAC,CAAC;IACF,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,gEAAgE;IAChE,MAAM,QAAQ,GAAG,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,QAAQ,CAAC;IACjD,MAAM,SAAS,GAAG,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC,aAAa,CAAC;IAC5D,IAAI,QAAQ,IAAI,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACrH,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACjC,KAAK,EAAE,CAAC,CAAC,0BAA0B,IAAI,yBAAyB;YAChE,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,wBAAwB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACtH,CAAC"}

package/dist/src/providers/email/sendgrid.d.ts

@@ -0,0 +1,31 @@
+import { type FetchLike } from '../../http.js';
+import type { DnsRecord, DomainAuthentication, EmailProvider, InboundAction, InboundParseOptions, ValidationResult } from '../../types.js';
+export declare const SENDGRID_INBOUND_MX = "mx.sendgrid.net";
+export interface SendGridOptions {
+    apiKey: string;
+    /** Act on behalf of a subuser — how multi-tenant apps keep each customer's domains separate. */
+    onBehalfOf?: string;
+    baseUrl?: string;
+    fetch?: FetchLike;
+}
+export declare class SendGridProvider implements EmailProvider {
+    private readonly opts;
+    readonly name = "sendgrid";
+    readonly label = "SendGrid";
+    readonly supportsInbound = true;
+    defaultInboundHostname(domain: string): string;
+    private readonly baseUrl;
+    private readonly fetchImpl;
+    constructor(opts: SendGridOptions);
+    findDomain(domain: string, subdomain?: string): Promise<DomainAuthentication | null>;
+    ensureDomain(domain: string, opts?: {
+        subdomain?: string;
+    }): Promise<DomainAuthentication>;
+    getDomain(id: string): Promise<DomainAuthentication>;
+    deleteDomain(id: string): Promise<void>;
+    validateDomain(id: string): Promise<ValidationResult>;
+    inboundRecords(hostname: string): DnsRecord[];
+    ensureInboundParse(opts: InboundParseOptions): Promise<InboundAction>;
+    deleteInboundParse(hostname: string): Promise<void>;
+    private request;
+}

package/dist/src/providers/email/sendgrid.js

@@ -0,0 +1,109 @@
+import { requestJson } from '../../http.js';
+import { isRecordType, normalizeName } from '../../records.js';
+export const SENDGRID_INBOUND_MX = 'mx.sendgrid.net';
+export class SendGridProvider {
+    opts;
+    name = 'sendgrid';
+    label = 'SendGrid';
+    supportsInbound = true;
+    defaultInboundHostname(domain) {
+        return `parse.${normalizeName(domain)}`;
+    }
+    baseUrl;
+    fetchImpl;
+    constructor(opts) {
+        this.opts = opts;
+        this.baseUrl = opts.baseUrl ?? 'https://api.sendgrid.com/v3';
+        this.fetchImpl = opts.fetch ?? fetch;
+    }
+    async findDomain(domain, subdomain) {
+        // `domain` is a search filter on SendGrid's side, so match exactly here.
+        const wanted = normalizeName(domain);
+        const list = await this.request(`/whitelabel/domains?domain=${encodeURIComponent(wanted)}&limit=100`);
+        const match = list.find((d) => normalizeName(d.domain) === wanted &&
+            (!subdomain || d.subdomain?.toLowerCase() === subdomain.toLowerCase()));
+        return match ? toAuthentication(match, false) : null;
+    }
+    async ensureDomain(domain, opts = {}) {
+        const existing = await this.findDomain(domain, opts.subdomain);
+        if (existing)
+            return existing;
+        const created = await this.request('/whitelabel/domains', {
+            method: 'POST',
+            body: { domain: normalizeName(domain), subdomain: opts.subdomain, automatic_security: true },
+        });
+        return toAuthentication(created, true);
+    }
+    async getDomain(id) {
+        return toAuthentication(await this.request(`/whitelabel/domains/${encodeURIComponent(id)}`), false);
+    }
+    async deleteDomain(id) {
+        await this.request(`/whitelabel/domains/${encodeURIComponent(id)}`, { method: 'DELETE' });
+    }
+    async validateDomain(id) {
+        const res = await this.request(`/whitelabel/domains/${encodeURIComponent(id)}/validate`, {
+            method: 'POST',
+        });
+        return {
+            valid: res.valid,
+            results: Object.entries(res.validation_results ?? {}).map(([record, r]) => ({
+                record,
+                valid: r.valid,
+                ...(r.reason ? { reason: r.reason } : {}),
+            })),
+        };
+    }
+    inboundRecords(hostname) {
+        return [{ type: 'MX', name: normalizeName(hostname), value: SENDGRID_INBOUND_MX, priority: 10, purpose: 'inbound_mx' }];
+    }
+    async ensureInboundParse(opts) {
+        const hostname = normalizeName(opts.hostname);
+        const desired = { url: opts.url, spam_check: opts.spamCheck ?? false, send_raw: opts.sendRaw ?? false };
+        const { result = [] } = await this.request('/user/parse/settings');
+        const existing = result.find((s) => normalizeName(s.hostname) === hostname);
+        if (!existing) {
+            await this.request('/user/parse/settings', { method: 'POST', body: { hostname, ...desired } });
+            return 'created';
+        }
+        if (existing.url === desired.url &&
+            Boolean(existing.spam_check) === desired.spam_check &&
+            Boolean(existing.send_raw) === desired.send_raw) {
+            return 'unchanged';
+        }
+        await this.request(`/user/parse/settings/${encodeURIComponent(hostname)}`, { method: 'PATCH', body: desired });
+        return 'updated';
+    }
+    async deleteInboundParse(hostname) {
+        await this.request(`/user/parse/settings/${encodeURIComponent(normalizeName(hostname))}`, { method: 'DELETE' });
+    }
+    request(path, opts = {}) {
+        const headers = { Authorization: `Bearer ${this.opts.apiKey}` };
+        if (this.opts.onBehalfOf)
+            headers['on-behalf-of'] = this.opts.onBehalfOf;
+        return requestJson(this.fetchImpl, 'SendGrid', this.baseUrl + path, { ...opts, headers }, describeSendGridError);
+    }
+}
+function toAuthentication(d, created) {
+    const records = Object.entries(d.dns ?? {}).flatMap(([purpose, entry]) => {
+        const type = entry.type.toUpperCase();
+        if (!isRecordType(type))
+            return [];
+        return [
+            {
+                type,
+                name: normalizeName(entry.host),
+                value: entry.data,
+                purpose,
+                ...(type === 'MX' ? { priority: 10 } : {}),
+            },
+        ];
+    });
+    return { id: String(d.id), domain: d.domain, valid: d.valid, records, created };
+}
+function describeSendGridError(body) {
+    const errors = body?.errors;
+    if (!Array.isArray(errors) || errors.length === 0)
+        return undefined;
+    return errors.map((e) => (e.field ? `${e.message} (${e.field})` : e.message)).join('; ');
+}
+//# sourceMappingURL=sendgrid.js.map

package/dist/src/providers/email/sendgrid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sendgrid.js","sourceRoot":"","sources":["../../../../src/providers/email/sendgrid.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAuC,MAAM,eAAe,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAU/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAsCrD,MAAM,OAAO,gBAAgB;IAWE;IAVpB,IAAI,GAAG,UAAU,CAAC;IAClB,KAAK,GAAG,UAAU,CAAC;IACnB,eAAe,GAAG,IAAI,CAAC;IAEhC,sBAAsB,CAAC,MAAc;QACnC,OAAO,SAAS,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1C,CAAC;IACgB,OAAO,CAAS;IAChB,SAAS,CAAY;IAEtC,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;QAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,6BAA6B,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,SAAkB;QACjD,yEAAyE;QACzE,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAa,8BAA8B,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAClH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CACrB,CAAC,CAAC,EAAE,EAAE,CACJ,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,MAAM;YAClC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC,CACzE,CAAC;QACF,OAAO,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,OAA+B,EAAE;QAClE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAW,qBAAqB,EAAE;YAClE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,kBAAkB,EAAE,IAAI,EAAE;SAC7F,CAAC,CAAC;QACH,OAAO,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU;QACxB,OAAO,gBAAgB,CAAC,MAAM,IAAI,CAAC,OAAO,CAAW,uBAAuB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAChH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU;QAC3B,MAAM,IAAI,CAAC,OAAO,CAAC,uBAAuB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAe,uBAAuB,kBAAkB,CAAC,EAAE,CAAC,WAAW,EAAE;YACrG,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1E,MAAM;gBACN,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1C,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,QAAgB;QAC7B,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAC1H,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,IAAyB;QAChD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK,EAAE,CAAC;QACxG,MAAM,EAAE,MAAM,GAAG,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAgC,sBAAsB,CAAC,CAAC;QAClG,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC;QAE5E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC;YAC/F,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IACE,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;YAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,UAAU;YACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,QAAQ,EAC/C,CAAC;YACD,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,wBAAwB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/G,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QACvC,MAAM,IAAI,CAAC,OAAO,CAAC,wBAAwB,kBAAkB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClH,CAAC;IAEO,OAAO,CAAI,IAAY,EAAE,OAAuB,EAAE;QACxD,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACxF,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;QACzE,OAAO,WAAW,CAAI,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACtH,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,CAAW,EAAE,OAAgB;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAe,EAAE;QACpF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACnC,OAAO;YACL;gBACE,IAAI;gBACJ,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;gBAC/B,KAAK,EAAE,KAAK,CAAC,IAAI;gBACjB,OAAO;gBACP,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3C;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAa;IAC1C,MAAM,MAAM,GAAI,IAA+E,EAAE,MAAM,CAAC;IACxG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACpE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3F,CAAC"}

package/dist/src/providers/email/ses.d.ts

@@ -0,0 +1,39 @@
+import { type FetchLike } from '../../http.js';
+import type { DnsRecord, DomainAuthentication, EmailProvider, InboundAction, ValidationResult } from '../../types.js';
+import { type AwsCredentials } from '../dns/aws.js';
+export interface SesOptions {
+    credentials: AwsCredentials;
+    /** The SES region, e.g. us-east-1. */
+    region: string;
+    baseUrl?: string;
+    fetch?: FetchLike;
+}
+/**
+ * Amazon SES (API v2) domain identities with Easy DKIM (three CNAMEs) and a
+ * custom MAIL FROM subdomain (an MX for bounces and an SPF TXT). SES checks DNS
+ * by itself, so "validate" reads the current status.
+ */
+export declare class SesProvider implements EmailProvider {
+    private readonly opts;
+    readonly name = "ses";
+    readonly label = "Amazon SES";
+    readonly supportsInbound = false;
+    private readonly baseUrl;
+    private readonly fetchImpl;
+    constructor(opts: SesOptions);
+    defaultInboundHostname(domain: string): string;
+    findDomain(domain: string): Promise<DomainAuthentication | null>;
+    /** `subdomain` is the MAIL FROM label (default "mail", giving mail.<domain>). */
+    ensureDomain(domain: string, opts?: {
+        subdomain?: string;
+    }): Promise<DomainAuthentication>;
+    getDomain(id: string): Promise<DomainAuthentication>;
+    deleteDomain(id: string): Promise<void>;
+    validateDomain(id: string): Promise<ValidationResult>;
+    inboundRecords(): DnsRecord[];
+    ensureInboundParse(): Promise<InboundAction>;
+    deleteInboundParse(): Promise<void>;
+    private identity;
+    private toAuthentication;
+    private request;
+}