mailery 0.16.5 → 0.16.7

package/dist/index.cjs

@@ -471,6 +471,15 @@ var unsubscribeInputSchema = zod.z.object({
   source: zod.z.string().max(256).default("manual"),
   notes: zod.z.string().max(1024).optional()
 });
+var resubscribeInputSchema = zod.z.object({
+  externalId: externalIdSchema,
+  /** `marketing` clears marketing + all-scope opt-outs; `all` clears every scope. */
+  scope: zod.z.enum(["marketing", "all"]).default("marketing"),
+  source: zod.z.string().min(1).max(256),
+  consentTimestamp: zod.z.date().optional(),
+  consentIp: zod.z.string().optional(),
+  consentUserAgent: zod.z.string().optional()
+});
 var suppressInputSchema = zod.z.object({
   email: emailSchema,
   scope: unsubscribeScopeSchema,
@@ -1032,6 +1041,15 @@ function verifyDoiToken(token, secret, now = /* @__PURE__ */ new Date()) {
 }
 
 // src/server/unsubscribe.ts
+async function clearUnsubscribeSuppressions(collections, email, scope) {
+  const scopes = scope === "all" ? ["all", "marketing", "transactional"] : ["marketing", "all"];
+  const result = await collections.suppressions.deleteMany({
+    email,
+    reason: "unsubscribed",
+    scope: { $in: scopes }
+  });
+  return result.deletedCount ?? 0;
+}
 async function applyUnsubscribe(collections, input, now = /* @__PURE__ */ new Date()) {
   const normalized = input.email;
   await collections.suppressions.updateOne(
@@ -4735,6 +4753,38 @@ var Mailer = class _Mailer {
       }
     }
   }
+  /**
+   * An explicit opt-in from a contact who unsubscribed before.
+   *
+   * `upsertSubscription` alone is not enough: an unsubscribe also writes a
+   * `mailer_suppressions` row, and the suppression check runs at enqueue
+   * time regardless of subscription status — so a contact re-subscribed
+   * through `upsertSubscription` reads as subscribed while every send comes
+   * back `suppressed`. This clears the opt-out rows (only those: a bounce or
+   * complaint is not the contact's to reverse), then upserts the subscription
+   * through the normal path, double opt-in included.
+   *
+   * Deliberately a separate method rather than a side effect of
+   * `upsertSubscription`, so a backfill or a model hook that re-upserts every
+   * account cannot silently resurrect addresses that opted out.
+   */
+  async resubscribe(input) {
+    const parsed = resubscribeInputSchema.parse(input);
+    const contact = await this.adapter.getById(parsed.externalId);
+    if (!contact) throw new Error(`adapter has no contact for externalId ${parsed.externalId}`);
+    const removedSuppressions = await clearUnsubscribeSuppressions(this.collections, contact.email, parsed.scope);
+    const { scope: _scope, ...subscription } = parsed;
+    await this.upsertSubscription(subscription);
+    if (removedSuppressions > 0) {
+      await this.audit({
+        actor: `host:${parsed.source}`,
+        action: "contact.resubscribe",
+        resource: { collection: "mailer_suppressions", id: parsed.externalId },
+        diffSummary: `${contact.email}: removed ${removedSuppressions} unsubscribed suppression${removedSuppressions === 1 ? "" : "s"} (${parsed.scope})`
+      });
+    }
+    return { removedSuppressions };
+  }
   /**
    * The writes live in `server/unsubscribe.ts` so the pending-unsubscribe
    * drain (INVARIANT 8) replays a journaled opt-out through exactly this path
@@ -5226,7 +5276,7 @@ ${input.plainText}`);
       });
     }
   }
-  const offDomain = findOffDomainLinkHosts(input.html, input.fromEmail);
+  const offDomain = findOffDomainLinkHosts(input.html, input.fromEmail, ownHosts(config));
   if (offDomain.majority && offDomain.hosts.length > 0) {
     issues.push({
       rule: "offdomain_links",
@@ -5311,12 +5361,23 @@ function hostnameOf(url) {
   }
 }
 function hasBareUrlInVisibleText(html) {
-  const stripped = html.replace(/<a\b[^>]*>.*?<\/a>/gis, " ").replace(/<style\b[^>]*>.*?<\/style>/gis, " ").replace(/<script\b[^>]*>.*?<\/script>/gis, " ").replace(/<head\b[^>]*>.*?<\/head>/gis, " ");
+  const stripped = html.replace(/<a\b[^>]*>.*?<\/a>/gis, " ").replace(/<style\b[^>]*>.*?<\/style>/gis, " ").replace(/<script\b[^>]*>.*?<\/script>/gis, " ").replace(/<head\b[^>]*>.*?<\/head>/gis, " ").replace(/<[^>]*>/g, " ");
   return /https?:\/\/[^\s<>"']+/i.test(stripped);
 }
-function findOffDomainLinkHosts(html, fromEmail) {
+function ownHosts(config) {
+  const hosts = [];
+  const publicHost = config.publicUrl ? hostnameOf(config.publicUrl) : null;
+  if (publicHost) hosts.push(publicHost);
+  for (const d of config.linkDomains ?? []) {
+    const host = hostnameOf(/^https?:\/\//i.test(d) ? d : `https://${d}`);
+    if (host) hosts.push(host);
+  }
+  return hosts;
+}
+function findOffDomainLinkHosts(html, fromEmail, extraOwnHosts = []) {
   const fromDomain = fromEmail.split("@")[1]?.toLowerCase();
   if (!fromDomain) return { hosts: [], majority: false };
+  const own = [fromDomain, ...extraOwnHosts.map((h) => h.toLowerCase())];
   const hosts = /* @__PURE__ */ new Set();
   let total = 0;
   let off = 0;
@@ -5325,7 +5386,7 @@ function findOffDomainLinkHosts(html, fromEmail) {
     const host = hostnameOf(href);
     if (!host) continue;
     total++;
-    if (sameSite(host, fromDomain)) continue;
+    if (own.some((o) => sameSite(host, o))) continue;
     off++;
     hosts.add(host);
   }
@@ -7353,7 +7414,12 @@ function createAdminApiRouter(mailer, opts = {}) {
       if (!plainText && typeof tpl.body?.plainText === "string") plainText = tpl.body.plainText;
       const lint = lintTemplate(
         { subject, preheader, mjml, editorJson, html, plainText, kind, fromEmail },
-        { senderDomains: mailer.config.senderDomains, varsJsonSchema: varsSchema }
+        {
+          senderDomains: mailer.config.senderDomains,
+          varsJsonSchema: varsSchema,
+          publicUrl: mailer.config.publicUrl,
+          linkDomains: mailer.config.linkDomains
+        }
       );
       res.json({ ...lint, compileFailed: false });
     })
@@ -7404,7 +7470,12 @@ function createAdminApiRouter(mailer, opts = {}) {
           kind: tpl.kind,
           fromEmail: tpl.fromEmail
         },
-        { senderDomains: mailer.config.senderDomains, varsJsonSchema: varsSchema }
+        {
+          senderDomains: mailer.config.senderDomains,
+          varsJsonSchema: varsSchema,
+          publicUrl: mailer.config.publicUrl,
+          linkDomains: mailer.config.linkDomains
+        }
       );
       if (lint.errors.length > 0) {
         return res.status(422).json({
@@ -8271,7 +8342,11 @@ function unitToMs2(value, unit) {
 }
 
 // src/server/api/agent.ts
-var VERSION = "0.16.5" ;
+var VERSION = "0.16.7" ;
+var agentTagsInputSchema = zod.z.object({
+  add: zod.z.array(zod.z.string().min(1).max(128)).max(25).default([]),
+  remove: zod.z.array(zod.z.string().min(1).max(128)).max(25).default([])
+});
 var publishTemplateInputSchema = zod.z.object({
   name: zod.z.string().min(1).max(200),
   description: zod.z.string().max(2e3).default(""),
@@ -8516,7 +8591,12 @@ function createAgentRouter(mailer, opts) {
           kind: input.kind,
           fromEmail: input.fromEmail
         },
-        { senderDomains: mailer.config.senderDomains, varsJsonSchema: varsSchema }
+        {
+          senderDomains: mailer.config.senderDomains,
+          varsJsonSchema: varsSchema,
+          publicUrl: mailer.config.publicUrl,
+          linkDomains: mailer.config.linkDomains
+        }
       );
       if (lint.errors.length > 0) {
         return res.status(422).json({
@@ -8847,15 +8927,15 @@ function createAgentRouter(mailer, opts) {
       const contact = await loadContact(res, String(req.params.externalId));
       if (!contact) return;
       if (!guardTestContact(res, contact)) return;
-      await mailer.upsertSubscription({ externalId: contact.externalId, source: "agent" });
+      const { removedSuppressions } = await mailer.resubscribe({ externalId: contact.externalId, source: "agent" });
       const sub = await c.subscriptions.findOne({ externalId: contact.externalId });
       await mailer.audit({
         actor: actorOf(req),
         action: "agent.contact.subscribe",
         resource: { collection: "mailer_subscriptions", id: sub?._id },
-        diffSummary: contact.email
+        diffSummary: `${contact.email} (removed ${removedSuppressions} opt-out suppression${removedSuppressions === 1 ? "" : "s"})`
       });
-      res.json({ subscription: sub });
+      res.json({ subscription: sub, removedSuppressions });
     })
   );
   router.post(
@@ -8875,6 +8955,41 @@ function createAgentRouter(mailer, opts) {
       res.json({ subscription: sub });
     })
   );
+  router.post(
+    "/contacts/:externalId/tags",
+    wrap2(async (req, res) => {
+      const contact = await loadContact(res, String(req.params.externalId));
+      if (!contact) return;
+      if (!guardTestContact(res, contact)) return;
+      const parsed = agentTagsInputSchema.safeParse(req.body ?? {});
+      if (!parsed.success) {
+        return res.status(400).json({ error: "validation_failed", issues: parsed.error.issues });
+      }
+      const { add, remove } = parsed.data;
+      if (add.length === 0 && remove.length === 0) {
+        return res.status(400).json({ error: "no_tags", message: "Pass {add: [...]} and/or {remove: [...]}." });
+      }
+      const overlap = add.filter((t) => remove.includes(t));
+      if (overlap.length > 0) {
+        return res.status(400).json({ error: "tag_conflict", tags: overlap });
+      }
+      for (const tag of add) await mailer.tag(contact.externalId, tag);
+      for (const tag of remove) await mailer.untag(contact.externalId, tag);
+      const after = await mailer.adapter.getById(contact.externalId);
+      await mailer.audit({
+        actor: actorOf(req),
+        action: "agent.contact.tags",
+        resource: { collection: "contacts", id: contact.externalId },
+        diffSummary: `${contact.email}: ${add.length ? `+${add.join(", +")}` : ""}${add.length && remove.length ? " " : ""}${remove.length ? `-${remove.join(", -")}` : ""}`
+      });
+      res.json({
+        contact: { externalId: contact.externalId, email: contact.email },
+        added: add,
+        removed: remove,
+        tags: after?.tags ?? []
+      });
+    })
+  );
   router.post(
     "/contacts/:externalId/reset",
     wrap2(async (req, res) => {
@@ -9145,7 +9260,12 @@ async function verifyTemplate(mailer, tpl, contact, opts = {}) {
       kind: tpl.kind,
       fromEmail: tpl.fromEmail
     },
-    { senderDomains: mailer.config.senderDomains, varsJsonSchema: opts.varsSchema ?? null }
+    {
+      senderDomains: mailer.config.senderDomains,
+      varsJsonSchema: opts.varsSchema ?? null,
+      publicUrl: mailer.config.publicUrl,
+      linkDomains: mailer.config.linkDomains
+    }
   );
   push("lint", lint.errors.length ? "fail" : lint.warnings.length ? "warn" : "pass", {
     errors: lint.errors.map((i) => ({ rule: i.rule, message: i.message })),
@@ -9391,8 +9511,9 @@ var ENDPOINTS = [
   { method: "GET", path: "/contacts/:externalId", summary: "Contact with subscription, suppressions, recent events, sends and runs." },
   { method: "GET", path: "/contacts/by-email/:email", summary: "Same, looked up by email." },
   { method: "GET", path: "/contacts/:externalId/unsubscribe-url", summary: "A signed one-click unsubscribe URL for a test contact, to exercise POST /m/unsub/:token.", testContactsOnly: true },
-  { method: "POST", path: "/contacts/:externalId/subscribe", summary: "Subscribe a test contact.", testContactsOnly: true },
+  { method: "POST", path: "/contacts/:externalId/subscribe", summary: "Subscribe a test contact, clearing any opt-out suppression it has (never bounce/complaint rows).", testContactsOnly: true },
   { method: "POST", path: "/contacts/:externalId/unsubscribe", summary: "Unsubscribe a test contact (marketing scope).", testContactsOnly: true },
+  { method: "POST", path: "/contacts/:externalId/tags", summary: "Add or remove tags on a test contact ({add: [...], remove: [...]}), so a gated flow lets it through.", testContactsOnly: true },
   { method: "POST", path: "/contacts/:externalId/reset", summary: "Delete a test contact's runs, sends, events ({events: [names]} to narrow) and suppressions, then resubscribe. Each part can be turned off with false.", testContactsOnly: true },
   { method: "POST", path: "/tick", summary: "Run the runner tick now (trigger scan, sweeps, outbox, webhook backlog)." },
   { method: "GET", path: "/webhooks/status", summary: "Provider webhook ingest: last event received, counts by type (24h), unprocessed backlog." },
@@ -10109,7 +10230,7 @@ var DEDUPE_POLICIES = [
 ];
 
 // src/server/index.ts
-var VERSION2 = "0.16.5" ;
+var VERSION2 = "0.16.7" ;
 
 exports.DEDUPE_POLICIES = DEDUPE_POLICIES;
 exports.DEFAULT_BOT_UA_RE = DEFAULT_BOT_UA_RE;