mailery 0.11.0 → 0.12.0

package/dist/index.cjs

@@ -4709,6 +4709,40 @@ ${input.plainText}`);
       });
     }
   }
+  const offDomain = findOffDomainLinkHosts(input.html, input.fromEmail);
+  if (offDomain.majority && offDomain.hosts.length > 0) {
+    issues.push({
+      rule: "offdomain_links",
+      severity: "warning",
+      message: `Most links point away from the From domain: ${offDomain.hosts.join(", ")}.`,
+      hint: "Link domains that match the sending domain build reputation. Route links through your own domain (or a tracking subdomain of it) where you can."
+    });
+  }
+  const insecure = findInsecureLinkHosts(input.html);
+  if (insecure.length > 0) {
+    issues.push({
+      rule: "insecure_link",
+      severity: "warning",
+      message: `Link uses plain http://: ${insecure.join(", ")}.`,
+      hint: "Mixed-content links get rewritten or warned about by some clients, and http:// correlates with stale spam templates. Use https://."
+    });
+  }
+  if (countImagesMissingAlt(input.html) > 0) {
+    issues.push({
+      rule: "image_missing_alt",
+      severity: "warning",
+      message: "One or more images have no alt text.",
+      hint: "Most clients block images by default on first open. Alt text is what the recipient actually sees, and screen readers need it."
+    });
+  }
+  if (hasImageOnlyLink(input.html)) {
+    issues.push({
+      rule: "image_only_link",
+      severity: "warning",
+      message: "A link wraps an image with no accompanying text.",
+      hint: "With images blocked, an image-only call-to-action is invisible and unclickable. Add a text label inside the link."
+    });
+  }
   const linkCount = countMatches(input.html, /<a\s[^>]*\bhref\s*=/gi);
   if (linkCount > 10) {
     issues.push({
@@ -4763,6 +4797,63 @@ function hasBareUrlInVisibleText(html) {
   const stripped = html.replace(/<a\b[^>]*>.*?<\/a>/gis, " ").replace(/<style\b[^>]*>.*?<\/style>/gis, " ").replace(/<script\b[^>]*>.*?<\/script>/gis, " ").replace(/<head\b[^>]*>.*?<\/head>/gis, " ");
   return /https?:\/\/[^\s<>"']+/i.test(stripped);
 }
+function findOffDomainLinkHosts(html, fromEmail) {
+  const fromDomain = fromEmail.split("@")[1]?.toLowerCase();
+  if (!fromDomain) return { hosts: [], majority: false };
+  const hosts = /* @__PURE__ */ new Set();
+  let total = 0;
+  let off = 0;
+  for (const href of extractHrefs(html)) {
+    if (href.includes("{{")) continue;
+    const host = hostnameOf(href);
+    if (!host) continue;
+    total++;
+    if (sameSite(host, fromDomain)) continue;
+    off++;
+    hosts.add(host);
+  }
+  return { hosts: Array.from(hosts), majority: total > 0 && off * 2 > total };
+}
+function sameSite(a, b) {
+  if (a === b) return true;
+  if (a.endsWith(`.${b}`) || b.endsWith(`.${a}`)) return true;
+  return lastLabels(a) === lastLabels(b);
+}
+function lastLabels(host) {
+  return host.split(".").slice(-2).join(".");
+}
+function findInsecureLinkHosts(html) {
+  const hits = /* @__PURE__ */ new Set();
+  for (const href of extractHrefs(html)) {
+    if (!/^http:\/\//i.test(href)) continue;
+    const host = hostnameOf(href);
+    if (host) hits.add(host);
+  }
+  return Array.from(hits);
+}
+function countImagesMissingAlt(html) {
+  let missing = 0;
+  const re = /<img\b[^>]*>/gi;
+  let m;
+  while (m = re.exec(html)) {
+    const tag = m[0];
+    const alt = /\balt\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s>]+))/i.exec(tag);
+    const value = alt ? alt[1] ?? alt[2] ?? alt[3] ?? "" : "";
+    if (value.trim().length === 0) missing++;
+  }
+  return missing;
+}
+function hasImageOnlyLink(html) {
+  const re = /<a\b[^>]*>(.*?)<\/a>/gis;
+  let m;
+  while (m = re.exec(html)) {
+    const inner = m[1];
+    if (!/<img\b/i.test(inner)) continue;
+    const text = inner.replace(/<[^>]*>/g, "").replace(/&nbsp;/gi, " ").trim();
+    if (text.length === 0) return true;
+  }
+  return false;
+}
 function findSpamSignals(text) {
   const out = /* @__PURE__ */ new Set();
   for (const { pattern, phrase } of SPAM_PHRASES) {
@@ -7626,7 +7717,7 @@ var DEDUPE_POLICIES = [
 ];
 
 // src/server/index.ts
-var VERSION = "0.11.0" ;
+var VERSION = "0.12.0" ;
 
 exports.DEDUPE_POLICIES = DEDUPE_POLICIES;
 exports.FLOW_STEP_KINDS = FLOW_STEP_KINDS;