glasswork 0.10.0 → 0.11.0

package/dist/email/types.d.ts

@@ -0,0 +1,128 @@
+/**
+ * Email module types and interfaces
+ */
+import type { SendEmailCommandInput } from '@aws-sdk/client-sesv2';
+/**
+ * Attachment for an email message
+ */
+export interface EmailAttachment {
+    /** Filename for the attachment */
+    filename: string;
+    /** Content of the attachment (base64 encoded or Buffer) */
+    content: string | Buffer;
+    /** MIME type of the attachment */
+    contentType?: string;
+    /** Content disposition (attachment or inline) */
+    disposition?: 'attachment' | 'inline';
+    /** Content ID for inline attachments */
+    contentId?: string;
+}
+/**
+ * Email message to be sent
+ */
+export interface EmailMessage {
+    /** Recipient email address(es) */
+    to: string | string[];
+    /** Email subject */
+    subject: string;
+    /** HTML body content */
+    html: string;
+    /** Plain text body content (auto-generated if not provided) */
+    text?: string;
+    /** Sender email address (overrides default) */
+    from?: string;
+    /** Reply-to email address */
+    replyTo?: string;
+    /** CC recipients */
+    cc?: string | string[];
+    /** BCC recipients */
+    bcc?: string | string[];
+    /** Email attachments */
+    attachments?: EmailAttachment[];
+    /** Custom headers */
+    headers?: Record<string, string>;
+}
+/**
+ * Result of sending an email
+ */
+export interface EmailResult {
+    /** Message ID returned by the email provider */
+    messageId: string;
+    /** Whether the send was successful */
+    success: boolean;
+    /** Additional metadata from the provider */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Email transport interface for sending emails
+ */
+export interface EmailTransport {
+    /** Transport name for logging/debugging */
+    readonly name: string;
+    /**
+     * Sends an email message
+     * @param message - The email message to send
+     * @returns Promise resolving to the send result
+     */
+    send(message: EmailMessage): Promise<EmailResult>;
+}
+/**
+ * SES transport configuration
+ */
+export interface SESTransportConfig {
+    /** AWS region for SES */
+    region: string;
+    /** SES configuration set name (enables delivery tracking) */
+    configurationSet?: string;
+    /** Custom endpoint (for local testing with LocalStack) */
+    endpoint?: string;
+    /** Optional pre-configured SES client (useful for testing/mocking) */
+    client?: {
+        send(command: unknown): Promise<{
+            MessageId?: string;
+        }>;
+    };
+    /** Optional SendEmailCommand constructor (useful for testing/mocking) */
+    sendEmailCommand?: new (input: SendEmailCommandInput) => unknown;
+}
+/**
+ * SMTP transport configuration
+ */
+export interface SMTPTransportConfig {
+    /** SMTP host */
+    host: string;
+    /** SMTP port */
+    port: number;
+    /** Use TLS */
+    secure?: boolean;
+    /** Authentication credentials */
+    auth?: {
+        user: string;
+        pass: string;
+    };
+}
+/**
+ * Email module configuration
+ */
+export interface EmailConfig {
+    /** Default sender email address */
+    from: string;
+    /** Default reply-to address */
+    replyTo?: string;
+    /** Transport configuration */
+    transport: EmailTransport;
+}
+/**
+ * Hook called after an email is successfully sent
+ */
+export type OnSentHook = (result: EmailResult, message: EmailMessage) => Promise<void> | void;
+/**
+ * Full email module options
+ */
+export interface EmailModuleOptions {
+    /** Email configuration */
+    config: EmailConfig;
+    /** Hook called after successful send (for tracking) */
+    onSent?: OnSentHook;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/email/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/email/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAEnE;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,WAAW,CAAC,EAAE,YAAY,GAAG,QAAQ,CAAC;IACtC,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,kCAAkC;IAClC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACtB,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB;IACpB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACvB,qBAAqB;IACrB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,wBAAwB;IACxB,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;IAChC,qBAAqB;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACnD;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,yBAAyB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,MAAM,CAAC,EAAE;QACP,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;YAAE,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACzD,CAAC;IACF,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,KACjB,KAAK,EAAE,qBAAqB,KACzB,OAAO,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,iCAAiC;IACjC,IAAI,CAAC,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,SAAS,EAAE,cAAc,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAE9F;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,0BAA0B;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,uDAAuD;IACvD,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB"}

package/dist/email/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/email/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/email/types.ts"],"names":[],"mappings":""}

package/dist/email/webhooks/handler-factory.d.ts

@@ -0,0 +1,41 @@
+import type { MiddlewareHandler } from 'hono';
+import type { CreateWebhookHandlerOptions } from './types.js';
+/**
+ * Creates a complete SES webhook handler with signature verification,
+ * subscription handling, and event parsing.
+ *
+ * This is a convenience factory that combines the individual middleware
+ * components. For more control, use the individual utilities directly.
+ *
+ * @example
+ * ```typescript
+ * import { createSESWebhookHandler } from 'glasswork';
+ *
+ * router.post('/webhooks/ses',
+ *   createSESWebhookHandler({
+ *     onDelivered: async (event, c) => {
+ *       const logger = c.get('logger');
+ *       logger.info({ messageId: event.messageId }, 'Email delivered');
+ *       await db.email.update({
+ *         where: { messageId: event.messageId },
+ *         data: { status: 'DELIVERED', deliveredAt: event.timestamp },
+ *       });
+ *     },
+ *     onBounced: async (event, c) => {
+ *       await db.email.update({
+ *         where: { messageId: event.messageId },
+ *         data: { status: 'BOUNCED', bounceType: event.bounceType },
+ *       });
+ *     },
+ *     onComplaint: async (event, c) => {
+ *       await db.email.update({
+ *         where: { messageId: event.messageId },
+ *         data: { status: 'COMPLAINT' },
+ *       });
+ *     },
+ *   })
+ * );
+ * ```
+ */
+export declare function createSESWebhookHandler(options?: CreateWebhookHandlerOptions): MiddlewareHandler;
+//# sourceMappingURL=handler-factory.d.ts.map

package/dist/email/webhooks/handler-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-factory.d.ts","sourceRoot":"","sources":["../../../src/email/webhooks/handler-factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAKvD,OAAO,KAAK,EAGV,2BAA2B,EAG5B,MAAM,YAAY,CAAC;AAIpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,2BAAgC,GACxC,iBAAiB,CA8BnB"}

package/dist/email/webhooks/handler-factory.js

@@ -0,0 +1,136 @@
+import { createLogger } from '../../utils/logger.js';
+import { parseSESNotification } from './notification-parser.js';
+import { verifySNSSignature } from './signature-verification.js';
+import { handleSNSSubscription } from './subscription-handler.js';
+const logger = createLogger('SES Webhook');
+/**
+ * Creates a complete SES webhook handler with signature verification,
+ * subscription handling, and event parsing.
+ *
+ * This is a convenience factory that combines the individual middleware
+ * components. For more control, use the individual utilities directly.
+ *
+ * @example
+ * ```typescript
+ * import { createSESWebhookHandler } from 'glasswork';
+ *
+ * router.post('/webhooks/ses',
+ *   createSESWebhookHandler({
+ *     onDelivered: async (event, c) => {
+ *       const logger = c.get('logger');
+ *       logger.info({ messageId: event.messageId }, 'Email delivered');
+ *       await db.email.update({
+ *         where: { messageId: event.messageId },
+ *         data: { status: 'DELIVERED', deliveredAt: event.timestamp },
+ *       });
+ *     },
+ *     onBounced: async (event, c) => {
+ *       await db.email.update({
+ *         where: { messageId: event.messageId },
+ *         data: { status: 'BOUNCED', bounceType: event.bounceType },
+ *       });
+ *     },
+ *     onComplaint: async (event, c) => {
+ *       await db.email.update({
+ *         where: { messageId: event.messageId },
+ *         data: { status: 'COMPLAINT' },
+ *       });
+ *     },
+ *   })
+ * );
+ * ```
+ */
+export function createSESWebhookHandler(options = {}) {
+    const { verifySignature = process.env.NODE_ENV === 'production', signatureOptions, onDelivered, onBounced, onComplaint, } = options;
+    return async (c, _next) => {
+        // Step 1: Verify signature (optional, enabled by default in production)
+        const verifyResult = await handleSignatureVerification(c, verifySignature, signatureOptions);
+        if (verifyResult)
+            return verifyResult;
+        // Step 2: Handle subscription confirmations
+        const subscriptionResult = await handleSubscriptionConfirmation(c);
+        if (subscriptionResult)
+            return subscriptionResult;
+        // Step 3: Parse the SES event
+        const event = await parseSESNotification(c);
+        if (!event) {
+            // Not an SES notification we handle (e.g., Send event)
+            return c.json({ received: true }, 200);
+        }
+        // Step 4: Route to the appropriate handler
+        await routeSESEvent(event, c, { onDelivered, onBounced, onComplaint });
+        return c.json({ received: true }, 200);
+    };
+}
+/**
+ * Handles signature verification step
+ */
+async function handleSignatureVerification(c, verifySignature, signatureOptions) {
+    if (verifySignature) {
+        const verifyMiddleware = verifySNSSignature(signatureOptions);
+        return await runMiddleware(verifyMiddleware, c);
+    }
+    // Still parse the body even without verification
+    try {
+        const body = await c.req.text();
+        c.set('snsMessageRaw', body);
+        c.set('snsMessage', JSON.parse(body));
+    }
+    catch {
+        return c.json({ error: 'Invalid JSON body' }, 400);
+    }
+    return undefined;
+}
+/**
+ * Handles subscription confirmation step
+ */
+async function handleSubscriptionConfirmation(c) {
+    const subscriptionMiddleware = handleSNSSubscription();
+    return await runMiddleware(subscriptionMiddleware, c);
+}
+/**
+ * Routes SES events to appropriate handlers
+ */
+async function routeSESEvent(event, c, handlers) {
+    try {
+        switch (event.type) {
+            case 'delivered':
+                if (handlers.onDelivered) {
+                    await handlers.onDelivered(event, c);
+                }
+                break;
+            case 'bounced':
+                if (handlers.onBounced) {
+                    await handlers.onBounced(event, c);
+                }
+                break;
+            case 'complaint':
+                if (handlers.onComplaint) {
+                    await handlers.onComplaint(event, c);
+                }
+                break;
+        }
+    }
+    catch (error) {
+        logger.error('Handler error:', error);
+        // Don't fail the request - we don't want SNS to retry indefinitely
+        // The error is logged and can be tracked
+    }
+}
+/**
+ * Helper to run middleware and capture early responses
+ */
+async function runMiddleware(middleware, c) {
+    let earlyResponse;
+    let nextCalled = false;
+    await middleware(c, async () => {
+        nextCalled = true;
+    });
+    // Check if middleware returned early (didn't call next)
+    if (!nextCalled) {
+        // The middleware returned a response
+        earlyResponse = c.res;
+    }
+    return earlyResponse;
+}
+//# sourceMappingURL=handler-factory.js.map

package/dist/email/webhooks/handler-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-factory.js","sourceRoot":"","sources":["../../../src/email/webhooks/handler-factory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AASlE,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAAuC,EAAE;IAEzC,MAAM,EACJ,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EACvD,gBAAgB,EAChB,WAAW,EACX,SAAS,EACT,WAAW,GACZ,GAAG,OAAO,CAAC;IAEZ,OAAO,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE;QACxB,wEAAwE;QACxE,MAAM,YAAY,GAAG,MAAM,2BAA2B,CAAC,CAAC,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;QAC7F,IAAI,YAAY;YAAE,OAAO,YAAY,CAAC;QAEtC,4CAA4C;QAC5C,MAAM,kBAAkB,GAAG,MAAM,8BAA8B,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,kBAAkB;YAAE,OAAO,kBAAkB,CAAC;QAElD,8BAA8B;QAC9B,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,uDAAuD;YACvD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;QAED,2CAA2C;QAC3C,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QAEvE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,2BAA2B,CACxC,CAAU,EACV,eAAwB,EACxB,gBAA2D;IAE3D,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QAC9D,OAAO,MAAM,aAAa,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,iDAAiD;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,8BAA8B,CAAC,CAAU;IACtD,MAAM,sBAAsB,GAAG,qBAAqB,EAAE,CAAC;IACvD,OAAO,MAAM,aAAa,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAC1B,KAAe,EACf,CAAU,EACV,QAIC;IAED,IAAI,CAAC;QACH,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,WAAW;gBACd,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;oBACzB,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACvC,CAAC;gBACD,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;oBACvB,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACrC,CAAC;gBACD,MAAM;YACR,KAAK,WAAW;gBACd,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;oBACzB,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACvC,CAAC;gBACD,MAAM;QACV,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QACtC,mEAAmE;QACnE,yCAAyC;IAC3C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,aAAa,CAC1B,UAA6B,EAC7B,CAAU;IAEV,IAAI,aAAmC,CAAC;IACxC,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,MAAM,UAAU,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE;QAC7B,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,wDAAwD;IACxD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,qCAAqC;QACrC,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC;IACxB,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/dist/email/webhooks/index.d.ts

@@ -0,0 +1,6 @@
+export { createSESWebhookHandler } from './handler-factory.js';
+export { parseSESNotification, parseSNSMessage } from './notification-parser.js';
+export { clearCertCache, verifySNSSignature, } from './signature-verification.js';
+export { type HandleSubscriptionOptions, handleSNSSubscription, } from './subscription-handler.js';
+export type { BouncedEvent, ComplaintEvent, CreateWebhookHandlerOptions, DeliveredEvent, SESBounceNotification, SESComplaintNotification, SESDeliveryNotification, SESEvent, SESMailObject, SESNotification, SESWebhookHandlers, SNSMessage, VerifySignatureOptions, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/email/webhooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/email/webhooks/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEjF,OAAO,EACL,cAAc,EACd,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,yBAAyB,EAC9B,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,YAAY,EACZ,cAAc,EACd,2BAA2B,EAC3B,cAAc,EACd,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,QAAQ,EACR,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,UAAU,EACV,sBAAsB,GACvB,MAAM,YAAY,CAAC"}

package/dist/email/webhooks/index.js

@@ -0,0 +1,9 @@
+// Webhook types
+// Handler factory
+export { createSESWebhookHandler } from './handler-factory.js';
+// Parsers
+export { parseSESNotification, parseSNSMessage } from './notification-parser.js';
+// Middleware
+export { clearCertCache, verifySNSSignature, } from './signature-verification.js';
+export { handleSNSSubscription, } from './subscription-handler.js';
+//# sourceMappingURL=index.js.map

package/dist/email/webhooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/email/webhooks/index.ts"],"names":[],"mappings":"AAAA,gBAAgB;AAEhB,kBAAkB;AAClB,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,UAAU;AACV,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AACjF,aAAa;AACb,OAAO,EACL,cAAc,EACd,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,qBAAqB,GACtB,MAAM,2BAA2B,CAAC"}

package/dist/email/webhooks/notification-parser.d.ts

@@ -0,0 +1,45 @@
+import type { Context } from 'hono';
+import type { SESEvent, SNSMessage } from './types.js';
+/**
+ * Parses an SES notification from an SNS message.
+ *
+ * Returns null if the message is not a notification (e.g., subscription confirmation)
+ * or if it's not an SES event we handle.
+ *
+ * @example
+ * ```typescript
+ * import { parseSESNotification, verifySNSSignature, handleSNSSubscription } from 'glasswork';
+ *
+ * router.post('/webhooks/ses',
+ *   verifySNSSignature(),
+ *   handleSNSSubscription(),
+ *   async (c) => {
+ *     const event = await parseSESNotification(c);
+ *
+ *     if (!event) {
+ *       return c.json({ received: true });
+ *     }
+ *
+ *     switch (event.type) {
+ *       case 'delivered':
+ *         console.log('Email delivered:', event.messageId);
+ *         break;
+ *       case 'bounced':
+ *         console.log('Email bounced:', event.messageId, event.bounceType);
+ *         break;
+ *       case 'complaint':
+ *         console.log('Complaint received:', event.messageId);
+ *         break;
+ *     }
+ *
+ *     return c.json({ received: true });
+ *   }
+ * );
+ * ```
+ */
+export declare function parseSESNotification(c: Context): Promise<SESEvent | null>;
+/**
+ * Lower-level function to parse just the SNS message
+ */
+export declare function parseSNSMessage(c: Context): Promise<SNSMessage>;
+//# sourceMappingURL=notification-parser.d.ts.map

package/dist/email/webhooks/notification-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-parser.d.ts","sourceRoot":"","sources":["../../../src/email/webhooks/notification-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,KAAK,EAOV,QAAQ,EACR,UAAU,EACX,MAAM,YAAY,CAAC;AAIpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CA8C/E;AAgED;;GAEG;AACH,wBAAsB,eAAe,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAWrE"}

package/dist/email/webhooks/notification-parser.js

@@ -0,0 +1,150 @@
+import { createLogger } from '../../utils/logger.js';
+const logger = createLogger('SES');
+/**
+ * Parses an SES notification from an SNS message.
+ *
+ * Returns null if the message is not a notification (e.g., subscription confirmation)
+ * or if it's not an SES event we handle.
+ *
+ * @example
+ * ```typescript
+ * import { parseSESNotification, verifySNSSignature, handleSNSSubscription } from 'glasswork';
+ *
+ * router.post('/webhooks/ses',
+ *   verifySNSSignature(),
+ *   handleSNSSubscription(),
+ *   async (c) => {
+ *     const event = await parseSESNotification(c);
+ *
+ *     if (!event) {
+ *       return c.json({ received: true });
+ *     }
+ *
+ *     switch (event.type) {
+ *       case 'delivered':
+ *         console.log('Email delivered:', event.messageId);
+ *         break;
+ *       case 'bounced':
+ *         console.log('Email bounced:', event.messageId, event.bounceType);
+ *         break;
+ *       case 'complaint':
+ *         console.log('Complaint received:', event.messageId);
+ *         break;
+ *     }
+ *
+ *     return c.json({ received: true });
+ *   }
+ * );
+ * ```
+ */
+export async function parseSESNotification(c) {
+    // Try to get the pre-parsed message from context
+    let snsMessage = c.get('snsMessage');
+    if (!snsMessage) {
+        // Parse from body
+        try {
+            const rawBody = c.get('snsMessageRaw');
+            const body = rawBody || (await c.req.text());
+            snsMessage = JSON.parse(body);
+        }
+        catch {
+            return null;
+        }
+    }
+    // Only handle notifications
+    if (snsMessage.Type !== 'Notification') {
+        return null;
+    }
+    // Parse the inner SES notification
+    let notification;
+    try {
+        notification = JSON.parse(snsMessage.Message);
+    }
+    catch {
+        logger.error('Failed to parse notification message');
+        return null;
+    }
+    // Route to the appropriate parser based on notification type
+    // SES can use either notificationType (older) or eventType (newer format)
+    const eventType = notification.notificationType ||
+        notification.eventType;
+    switch (eventType) {
+        case 'Delivery':
+            return parseDeliveryNotification(notification);
+        case 'Bounce':
+            return parseBounceNotification(notification);
+        case 'Complaint':
+            return parseComplaintNotification(notification);
+        default:
+            // Send event is ignored (we track via onSent hook)
+            return null;
+    }
+}
+/**
+ * Parses a delivery notification into a DeliveredEvent
+ */
+function parseDeliveryNotification(notification) {
+    const { mail, delivery } = notification;
+    const recipient = delivery.recipients[0] || mail.destination[0];
+    return {
+        type: 'delivered',
+        messageId: mail.messageId,
+        timestamp: new Date(delivery.timestamp),
+        recipient,
+        processingTimeMs: delivery.processingTimeMillis,
+        smtpResponse: delivery.smtpResponse,
+        raw: notification,
+    };
+}
+/**
+ * Parses a bounce notification into a BouncedEvent
+ */
+function parseBounceNotification(notification) {
+    const { mail, bounce } = notification;
+    const recipient = bounce.bouncedRecipients[0]?.emailAddress || mail.destination[0];
+    const bounceType = bounce.bounceType === 'Permanent' ? 'permanent' : 'transient';
+    // Build a human-readable reason
+    const diagnosticCode = bounce.bouncedRecipients[0]?.diagnosticCode || 'Unknown reason';
+    const reason = `${bounce.bounceSubType}: ${diagnosticCode}`;
+    return {
+        type: 'bounced',
+        messageId: mail.messageId,
+        timestamp: new Date(bounce.timestamp),
+        recipient,
+        bounceType,
+        bounceSubType: bounce.bounceSubType,
+        reason,
+        raw: notification,
+    };
+}
+/**
+ * Parses a complaint notification into a ComplaintEvent
+ */
+function parseComplaintNotification(notification) {
+    const { mail, complaint } = notification;
+    const recipient = complaint.complainedRecipients[0]?.emailAddress || mail.destination[0];
+    return {
+        type: 'complaint',
+        messageId: mail.messageId,
+        timestamp: new Date(complaint.timestamp),
+        recipient,
+        complaintType: complaint.complaintFeedbackType || 'unknown',
+        userAgent: complaint.userAgent,
+        raw: notification,
+    };
+}
+/**
+ * Lower-level function to parse just the SNS message
+ */
+export async function parseSNSMessage(c) {
+    // Try to get from context first
+    const cached = c.get('snsMessage');
+    if (cached) {
+        return cached;
+    }
+    // Parse from body
+    const rawBody = c.get('snsMessageRaw');
+    const body = rawBody || (await c.req.text());
+    return JSON.parse(body);
+}
+//# sourceMappingURL=notification-parser.js.map

package/dist/email/webhooks/notification-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification-parser.js","sourceRoot":"","sources":["../../../src/email/webhooks/notification-parser.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAYrD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,CAAU;IACnD,iDAAiD;IACjD,IAAI,UAAU,GAA2B,CAAC,CAAC,GAAG,CAAC,YAAY,CAA2B,CAAC;IAEvF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,kBAAkB;QAClB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,eAAe,CAAuB,CAAC;YAC7D,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mCAAmC;IACnC,IAAI,YAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAA4B,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6DAA6D;IAC7D,0EAA0E;IAC1E,MAAM,SAAS,GACZ,YAAY,CAAC,gBAAuC;QACpD,YAAY,CAAC,SAAgC,CAAC;IAEjD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,UAAU;YACb,OAAO,yBAAyB,CAAC,YAAkD,CAAC,CAAC;QACvF,KAAK,QAAQ;YACX,OAAO,uBAAuB,CAAC,YAAgD,CAAC,CAAC;QACnF,KAAK,WAAW;YACd,OAAO,0BAA0B,CAAC,YAAmD,CAAC,CAAC;QACzF;YACE,mDAAmD;YACnD,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,yBAAyB,CAAC,YAAqC;IACtE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC;IACxC,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAEhE,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QACvC,SAAS;QACT,gBAAgB,EAAE,QAAQ,CAAC,oBAAoB;QAC/C,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,GAAG,EAAE,YAAY;KAClB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,YAAmC;IAClE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC;IACtC,MAAM,SAAS,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAEnF,MAAM,UAAU,GACd,MAAM,CAAC,UAAU,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;IAEhE,gCAAgC;IAChC,MAAM,cAAc,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,cAAc,IAAI,gBAAgB,CAAC;IACvF,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,KAAK,cAAc,EAAE,CAAC;IAE5D,OAAO;QACL,IAAI,EAAE,SAAS;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QACrC,SAAS;QACT,UAAU;QACV,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,MAAM;QACN,GAAG,EAAE,YAAY;KAClB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,0BAA0B,CAAC,YAAsC;IACxE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;IACzC,MAAM,SAAS,GAAG,SAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,YAAY,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAEzF,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QACxC,SAAS;QACT,aAAa,EAAE,SAAS,CAAC,qBAAqB,IAAI,SAAS;QAC3D,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,GAAG,EAAE,YAAY;KAClB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,CAAU;IAC9C,gCAAgC;IAChC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAA2B,CAAC;IAC7D,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kBAAkB;IAClB,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,eAAe,CAAuB,CAAC;IAC7D,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;AACxC,CAAC"}

package/dist/email/webhooks/signature-verification.d.ts

@@ -0,0 +1,38 @@
+import type { MiddlewareHandler } from 'hono';
+import type { SNSMessage, VerifySignatureOptions } from './types.js';
+/**
+ * Builds the canonical string to sign for SNS message verification
+ *
+ * Ordering differs per message type:
+ * - Notification: Message, MessageId, optional Subject, Timestamp, TopicArn, Type
+ * - SubscriptionConfirmation/UnsubscribeConfirmation: Message, MessageId, SubscribeURL, Timestamp, Token, TopicArn, Type
+ *
+ * See: https://docs.aws.amazon.com/sns/latest/dg/sns-verify-signature-of-message.html
+ */
+export declare function buildStringToSign(message: SNSMessage): string;
+/**
+ * Middleware that verifies AWS SNS message signatures.
+ *
+ * Protects webhook endpoints from spoofed requests by validating
+ * that messages are genuinely from AWS SNS.
+ *
+ * @example
+ * ```typescript
+ * import { verifySNSSignature } from 'glasswork';
+ *
+ * router.post('/webhooks/ses',
+ *   verifySNSSignature(),
+ *   async (c) => {
+ *     // Message is verified to be from AWS SNS
+ *     const body = await c.req.json();
+ *     // ...
+ *   }
+ * );
+ * ```
+ */
+export declare function verifySNSSignature(options?: VerifySignatureOptions): MiddlewareHandler;
+/**
+ * Clears the certificate cache (useful for testing)
+ */
+export declare function clearCertCache(): void;
+//# sourceMappingURL=signature-verification.d.ts.map

package/dist/email/webhooks/signature-verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature-verification.d.ts","sourceRoot":"","sources":["../../../src/email/webhooks/signature-verification.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAgErE;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAmC7D;AAqBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,sBAA2B,GAAG,iBAAiB,CA6C1F;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAErC"}