mailifier 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Wren Automation
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,105 @@
+# mailifier
+
+Ask a mail server whether an address exists. No mail is ever sent.
+
+This is the handshake the paid verification services run, from a host of yours:
+MX lookup → connect on port 25 → `EHLO` → `MAIL FROM` → `RCPT TO <the address>` →
+`QUIT`. The server's answer to `RCPT` is the verdict. There is no `DATA`, so nothing
+is ever delivered.
+
+Zero runtime dependencies. Node 22+.
+
+## Install
+
+```sh
+pnpm add mailifier
+```
+
+## Use it
+
+```ts
+import { LocalChecker, SmtpProbe } from "mailifier";
+
+// Stage 1: free, no sockets. Syntax, typosquats, disposable providers, MX routing.
+const local = await new LocalChecker().check("jane@acme.com");
+if (!local.passed) return local.failure; // "no_mx", "syntax: …", "disposable_domain"
+
+// Stage 2: ask the mail server.
+const probe = new SmtpProbe({ helo: "probe.example.com" });
+const verdict = await probe.verify("jane@acme.com");
+// { result: "valid", raw: { reason: "accepted", mx: "…", code: 250, transcript: [ … ] } }
+```
+
+## The four answers
+
+| result | means |
+| --- | --- |
+| `valid` | the server accepted the address |
+| `invalid` | the server refused it by name, or the domain takes no mail at all |
+| `catch_all` | the domain accepts everything, so acceptance proves nothing |
+| `risky` | nobody would tell us: greylisting, a refused connection, a policy block |
+
+Only `valid` and `invalid` are facts. `catch_all` is common on Microsoft 365 tenants.
+`risky` is about the conversation, never about the address — retry it later.
+
+## Running it somewhere that can
+
+Most clouds block outbound port 25 until you ask them to stop. So the usual shape is
+one small host that can talk SMTP, and everything else asking it over HTTP.
+
+On that host:
+
+```sh
+PROBE_TOKEN=… PROBE_HELO=probe.example.com npx mailifier
+```
+
+Everywhere else:
+
+```ts
+import { RemoteProbe } from "mailifier";
+const probe = new RemoteProbe(process.env.PROBE_URL, process.env.PROBE_TOKEN);
+```
+
+Both satisfy `MailboxProbe`, so the calling code never knows which one it has.
+
+The server is bearer-authenticated, caps calls in flight, and runs a canary before
+every verdict: if port 25 is not open from this host it answers **503**, never a
+`risky` verdict. A closed port is the host's problem, not the mailbox's — and a
+verifier that quietly reports `risky` for a working mailbox is worse than one that
+stops.
+
+`GET /healthz` → `{ ok, in_flight, port_25 }`.
+
+The published package also carries `dist/mailifier.mjs`: the whole server in one file,
+to drop on a box that has node and no npm. `pnpm bundle` rebuilds it.
+
+## Being a good guest
+
+- One conversation per MX at a time, with a gap between them (`perHostGapMs`, 1.5s).
+- `helo` should be a name whose forward and reverse DNS agree, and `MAIL FROM` is
+  `postmaster@` that name, so a curious postmaster can look you up. Use a name you
+  do not send real mail from.
+- At most three MX hosts tried per address.
+- DNS goes over HTTPS (Cloudflare), so it works in a container with no resolver.
+
+## Interfaces
+
+`MailboxProbe` is the only thing worth depending on:
+
+```ts
+interface MailboxProbe {
+  readonly name: string;
+  verify(email: string): Promise<Verdict>;
+}
+```
+
+Deliberately not on it: whether a verdict may be trusted, and whether it costs money.
+That is your policy about a probe, not something a probe knows about itself.
+
+Every network edge is injectable — `dial`, `resolver`, `fetch`, `sleep` — so the tests
+run with no sockets and no DNS.
+
+## Testing against it
+
+`src/smtp.test.ts` shows the pattern: hand `probeMailbox` a scripted `Conversation`
+and assert the verdict it reads out of the replies.

package/dist/address.d.ts

@@ -0,0 +1,17 @@
+/**
+ * What an address is, before anyone dials a mail server: normalization, pragmatic
+ * syntax rules, the freemail and role-account lists. Rules are pragmatic, not full
+ * RFC 5321 — addresses that need quoting do not survive real business mail anyway.
+ */
+/** Providers where the domain identifies a person, not a business. Advisory, never a failure. */
+export declare const FREEMAIL_DOMAINS: ReadonlySet<string>;
+/** Functional mailboxes (info@, hello@): a role, not a person. Advisory, never a failure. */
+export declare const ROLE_LOCALPARTS: ReadonlySet<string>;
+export declare function normalizeEmail(raw: string): string;
+/** Reason the (already normalized) address is undeliverable, or null. */
+export declare function emailSyntaxError(email: string): string | null;
+export declare function validDomain(domain: string): boolean;
+export declare function emailDomain(email: string): string;
+export declare function isFreemail(domain: string): boolean;
+/** True for a functional mailbox by its local part alone; plus-tags stripped. A bare word is never an address. */
+export declare function isRoleLocalpart(email: string): boolean;

package/dist/address.js

@@ -0,0 +1,144 @@
+/**
+ * What an address is, before anyone dials a mail server: normalization, pragmatic
+ * syntax rules, the freemail and role-account lists. Rules are pragmatic, not full
+ * RFC 5321 — addresses that need quoting do not survive real business mail anyway.
+ */
+/** Providers where the domain identifies a person, not a business. Advisory, never a failure. */
+export const FREEMAIL_DOMAINS = new Set([
+    "gmail.com",
+    "googlemail.com",
+    "yahoo.com",
+    "yahoo.co.uk",
+    "ymail.com",
+    "aol.com",
+    "outlook.com",
+    "hotmail.com",
+    "hotmail.co.uk",
+    "live.com",
+    "msn.com",
+    "icloud.com",
+    "me.com",
+    "mac.com",
+    "proton.me",
+    "protonmail.com",
+    "pm.me",
+    "gmx.com",
+    "gmx.net",
+    "mail.com",
+    "zoho.com",
+    "yandex.com",
+    "netscape.net",
+    "juno.com",
+    "netzero.net",
+    // Consumer ISPs, national and regional.
+    "att.net",
+    "bellsouth.net",
+    "centurylink.net",
+    "centurytel.net",
+    "charter.net",
+    "comcast.net",
+    "cox.net",
+    "earthlink.net",
+    "embarqmail.com",
+    "frontier.com",
+    "frontiernet.net",
+    "gpcom.net",
+    "hughes.net",
+    "mchsi.com",
+    "midconetwork.com",
+    "optimum.net",
+    "optonline.net",
+    "ptd.net",
+    "q.com",
+    "roadrunner.com",
+    "rr.com",
+    "sbcglobal.net",
+    "suddenlink.net",
+    "twc.com",
+    "verizon.net",
+    "windstream.net",
+    "wowway.com",
+    "zoominternet.net",
+]);
+/** Functional mailboxes (info@, hello@): a role, not a person. Advisory, never a failure. */
+export const ROLE_LOCALPARTS = new Set([
+    "abuse",
+    "admin",
+    "administrator",
+    "billing",
+    "contact",
+    "help",
+    "hello",
+    "hr",
+    "info",
+    "jobs",
+    "mail",
+    "marketing",
+    "no-reply",
+    "noreply",
+    "office",
+    "postmaster",
+    "privacy",
+    "sales",
+    "security",
+    "support",
+    "team",
+    "webmaster",
+]);
+const LOCAL_RE = /^[a-z0-9!#$%&'*+/=?^_`{|}~.-]+$/;
+const LABEL_RE = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/;
+// IDN labels arrive punycode-encoded ("xn--mnchen-3ya" = münchen).
+const PUNYCODE_RE = /^xn--[a-z0-9-]+$/;
+export function normalizeEmail(raw) {
+    let email = raw.trim().toLowerCase();
+    if (email.startsWith("mailto:"))
+        email = email.slice("mailto:".length);
+    return email.replace(/^[<>]+|[<>]+$/g, "").trim();
+}
+/** Reason the (already normalized) address is undeliverable, or null. */
+export function emailSyntaxError(email) {
+    const parts = email.split("@");
+    if (parts.length !== 2)
+        return "must contain exactly one @";
+    const [local, domain] = parts;
+    if (!local)
+        return "empty local part";
+    if (local.length > 64)
+        return "local part longer than 64 chars";
+    if (email.length > 254)
+        return "address longer than 254 chars";
+    if (local.startsWith(".") || local.endsWith(".") || local.includes("..")) {
+        return "misplaced dot in local part";
+    }
+    if (!LOCAL_RE.test(local))
+        return "illegal character in local part";
+    if (!validDomain(domain))
+        return "invalid domain";
+    return null;
+}
+export function validDomain(domain) {
+    if (!domain || domain.length > 253)
+        return false;
+    const labels = domain.replace(/\.+$/, "").split(".");
+    if (labels.length < 2)
+        return false;
+    if (!labels.every((l) => LABEL_RE.test(l) || PUNYCODE_RE.test(l)))
+        return false;
+    const tld = labels[labels.length - 1];
+    return tld.length >= 2 && (/^[a-z]+$/.test(tld) || PUNYCODE_RE.test(tld));
+}
+export function emailDomain(email) {
+    return email.slice(email.lastIndexOf("@") + 1);
+}
+export function isFreemail(domain) {
+    return FREEMAIL_DOMAINS.has(domain.toLowerCase());
+}
+/** True for a functional mailbox by its local part alone; plus-tags stripped. A bare word is never an address. */
+export function isRoleLocalpart(email) {
+    const at = email.indexOf("@");
+    if (at < 0)
+        return false;
+    const local = email.slice(0, at).trim().toLowerCase();
+    return ROLE_LOCALPARTS.has(local.split("+", 1)[0]);
+}
+//# sourceMappingURL=address.js.map

package/dist/address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.js","sourceRoot":"","sources":["../src/address.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,iGAAiG;AACjG,MAAM,CAAC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IAC3D,WAAW;IACX,gBAAgB;IAChB,WAAW;IACX,aAAa;IACb,WAAW;IACX,SAAS;IACT,aAAa;IACb,aAAa;IACb,eAAe;IACf,UAAU;IACV,SAAS;IACT,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,WAAW;IACX,gBAAgB;IAChB,OAAO;IACP,SAAS;IACT,SAAS;IACT,UAAU;IACV,UAAU;IACV,YAAY;IACZ,cAAc;IACd,UAAU;IACV,aAAa;IACb,wCAAwC;IACxC,SAAS;IACT,eAAe;IACf,iBAAiB;IACjB,gBAAgB;IAChB,aAAa;IACb,aAAa;IACb,SAAS;IACT,eAAe;IACf,gBAAgB;IAChB,cAAc;IACd,iBAAiB;IACjB,WAAW;IACX,YAAY;IACZ,WAAW;IACX,kBAAkB;IAClB,aAAa;IACb,eAAe;IACf,SAAS;IACT,OAAO;IACP,gBAAgB;IAChB,QAAQ;IACR,eAAe;IACf,gBAAgB;IAChB,SAAS;IACT,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,kBAAkB;CACnB,CAAC,CAAC;AAEH,6FAA6F;AAC7F,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IAC1D,OAAO;IACP,OAAO;IACP,eAAe;IACf,SAAS;IACT,SAAS;IACT,MAAM;IACN,OAAO;IACP,IAAI;IACJ,MAAM;IACN,MAAM;IACN,MAAM;IACN,WAAW;IACX,UAAU;IACV,SAAS;IACT,QAAQ;IACR,YAAY;IACZ,SAAS;IACT,OAAO;IACP,UAAU;IACV,SAAS;IACT,MAAM;IACN,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,iCAAiC,CAAC;AACnD,MAAM,QAAQ,GAAG,iCAAiC,CAAC;AACnD,mEAAmE;AACnE,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAEvC,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,4BAA4B,CAAC;IAC5D,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,KAAyB,CAAC;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO,kBAAkB,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,iCAAiC,CAAC;IAChE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,+BAA+B,CAAC;IAC/D,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzE,OAAO,6BAA6B,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,iCAAiC,CAAC;IACpE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAW,CAAC;IAChD,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtD,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;AAC/D,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,19 @@
+/**
+ * A probe that asks another host: `POST /verify {email}` to a `makeProbeServer` running
+ * somewhere port 25 is open, bearer-authenticated. The verdict is that host's own
+ * SmtpProbe verdict, so an answer reads the same whichever machine ran the handshake.
+ */
+import type { FetchLike } from "./dns.js";
+import { type MailboxProbe, type Verdict } from "./verdict.js";
+/** The far side did not answer, or answered with something other than a verdict: stop, do not guess. */
+export declare class RemoteProbeError extends Error {
+    name: string;
+}
+export declare class RemoteProbe implements MailboxProbe {
+    private readonly token;
+    private readonly fetchImpl;
+    readonly name = "smtp";
+    private readonly base;
+    constructor(baseUrl: string, token: string, fetchImpl?: FetchLike);
+    verify(email: string): Promise<Verdict>;
+}

package/dist/client.js

@@ -0,0 +1,53 @@
+/**
+ * A probe that asks another host: `POST /verify {email}` to a `makeProbeServer` running
+ * somewhere port 25 is open, bearer-authenticated. The verdict is that host's own
+ * SmtpProbe verdict, so an answer reads the same whichever machine ran the handshake.
+ */
+import { MAILBOX_RESULTS } from "./verdict.js";
+/** The far side did not answer, or answered with something other than a verdict: stop, do not guess. */
+export class RemoteProbeError extends Error {
+    name = "RemoteProbeError";
+}
+export class RemoteProbe {
+    token;
+    fetchImpl;
+    name = "smtp";
+    base;
+    constructor(baseUrl, token, fetchImpl = fetch) {
+        this.token = token;
+        this.fetchImpl = fetchImpl;
+        this.base = baseUrl.replace(/\/+$/, "");
+    }
+    async verify(email) {
+        let resp;
+        try {
+            resp = await this.fetchImpl(`${this.base}/verify`, {
+                method: "POST",
+                headers: { authorization: `Bearer ${this.token}`, "content-type": "application/json" },
+                body: JSON.stringify({ email }),
+                // A probe walks up to three MX hosts with a socket timeout each.
+                signal: AbortSignal.timeout(60_000),
+            });
+        }
+        catch (err) {
+            // The token rides in a header, never in a message; keep the error to its name.
+            throw new RemoteProbeError(`probe host unreachable: ${err instanceof Error ? err.name : "Error"}`);
+        }
+        if (!resp.ok) {
+            // The server's own error text (ours, short, never a secret); anything else is dropped.
+            const detail = await resp
+                .json()
+                .then((d) => d && typeof d === "object" ? d.error : null)
+                .catch(() => null);
+            throw new RemoteProbeError(`probe host HTTP ${resp.status}${typeof detail === "string" ? `: ${detail}` : ""}`);
+        }
+        const data = (await resp.json());
+        if (!MAILBOX_RESULTS.includes(data.result))
+            throw new RemoteProbeError(`unexpected verdict: ${JSON.stringify(data.result)}`);
+        return {
+            result: data.result,
+            raw: (data.raw ?? {}),
+        };
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,eAAe,EAAuD,MAAM,cAAc,CAAC;AAEpG,wGAAwG;AACxG,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,IAAI,GAAG,kBAAkB,CAAC;CACpC;AAED,MAAM,OAAO,WAAW;IAMH;IACA;IANV,IAAI,GAAG,MAAM,CAAC;IACN,IAAI,CAAS;IAE9B,YACE,OAAe,EACE,KAAa,EACb,YAAuB,KAAK;QAD5B,UAAK,GAAL,KAAK,CAAQ;QACb,cAAS,GAAT,SAAS,CAAmB;QAE7C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,IAAI,SAAS,EAAE;gBACjD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACtF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;gBAC/B,iEAAiE;gBACjE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,+EAA+E;YAC/E,MAAM,IAAI,gBAAgB,CACxB,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,uFAAuF;YACvF,MAAM,MAAM,GAAG,MAAM,IAAI;iBACtB,IAAI,EAAE;iBACN,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CACnB,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CACrE;iBACA,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACrB,MAAM,IAAI,gBAAgB,CACxB,mBAAmB,IAAI,CAAC,MAAM,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAwC,CAAC;QACxE,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAuB,CAAC;YACzD,MAAM,IAAI,gBAAgB,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnF,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAuB;YACpC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAA4B;SACjD,CAAC;IACJ,CAAC;CACF"}

package/dist/dns.d.ts

@@ -0,0 +1,23 @@
+/**
+ * DNS over HTTPS (Cloudflare's resolver), the little that mailbox checking needs: MX,
+ * A, AAAA. Over HTTPS so it works from a container with no resolver of its own, and so
+ * a wrong answer needs more than a spoofed UDP packet.
+ */
+export declare const DOH_ENDPOINT = "https://cloudflare-dns.com/dns-query";
+export type DnsType = "MX" | "A" | "AAAA";
+/** The resolver could not be reached or answered non-2xx: resolver trouble, not evidence about the name. */
+export declare class DohError extends Error {
+    name: string;
+}
+/**
+ * The resolver answered (HTTP 200) but the DNS status was neither NOERROR nor
+ * NXDOMAIN (SERVFAIL, REFUSED) or the body wasn't DNS-JSON. Callers must not treat
+ * it as a definitive empty answer.
+ */
+export declare class DohStatusError extends DohError {
+    name: string;
+}
+/** The lookup seam: every probe takes one, so tests never touch the network. */
+export type Resolver = (name: string, rtype: DnsType) => Promise<string[]>;
+export type FetchLike = (url: string, init?: RequestInit) => Promise<Response>;
+export declare function resolve(name: string, rtype: DnsType, fetchImpl?: FetchLike): Promise<string[]>;

package/dist/dns.js

@@ -0,0 +1,52 @@
+/**
+ * DNS over HTTPS (Cloudflare's resolver), the little that mailbox checking needs: MX,
+ * A, AAAA. Over HTTPS so it works from a container with no resolver of its own, and so
+ * a wrong answer needs more than a spoofed UDP packet.
+ */
+export const DOH_ENDPOINT = "https://cloudflare-dns.com/dns-query";
+const TYPE_CODES = { MX: 15, A: 1, AAAA: 28 };
+// DNS RCODEs carried in the DNS-JSON `Status` field (RFC 1035 §4.1.1).
+const NOERROR = 0;
+const NXDOMAIN = 3;
+/** The resolver could not be reached or answered non-2xx: resolver trouble, not evidence about the name. */
+export class DohError extends Error {
+    name = "DohError";
+}
+/**
+ * The resolver answered (HTTP 200) but the DNS status was neither NOERROR nor
+ * NXDOMAIN (SERVFAIL, REFUSED) or the body wasn't DNS-JSON. Callers must not treat
+ * it as a definitive empty answer.
+ */
+export class DohStatusError extends DohError {
+    name = "DohStatusError";
+}
+export async function resolve(name, rtype, fetchImpl = fetch) {
+    const url = `${DOH_ENDPOINT}?${new URLSearchParams({ name, type: rtype })}`;
+    let resp;
+    try {
+        resp = await fetchImpl(url, {
+            headers: { accept: "application/dns-json" },
+            signal: AbortSignal.timeout(10_000),
+        });
+    }
+    catch (err) {
+        throw new DohError(`resolver unreachable for ${rtype} ${name}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (!resp.ok)
+        throw new DohError(`HTTP ${resp.status} for ${rtype} ${name}`);
+    let body;
+    try {
+        body = (await resp.json());
+    }
+    catch {
+        throw new DohStatusError(`non-JSON response for ${rtype} ${name}`);
+    }
+    if (body.Status === NXDOMAIN)
+        return [];
+    if (body.Status !== NOERROR)
+        throw new DohStatusError(`DNS status ${body.Status} for ${rtype} ${name}`);
+    return (body.Answer ?? [])
+        .filter((a) => a.type === TYPE_CODES[rtype])
+        .map((a) => a.data);
+}
+//# sourceMappingURL=dns.js.map

package/dist/dns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns.js","sourceRoot":"","sources":["../src/dns.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,sCAAsC,CAAC;AAEnE,MAAM,UAAU,GAA4B,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACvE,uEAAuE;AACvE,MAAM,OAAO,GAAG,CAAC,CAAC;AAClB,MAAM,QAAQ,GAAG,CAAC,CAAC;AAEnB,4GAA4G;AAC5G,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,IAAI,GAAG,UAAU,CAAC;CAC5B;AACD;;;;GAIG;AACH,MAAM,OAAO,cAAe,SAAQ,QAAQ;IACjC,IAAI,GAAG,gBAAgB,CAAC;CAClC;AAMD,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,IAAY,EACZ,KAAc,EACd,YAAuB,KAAK;IAE5B,MAAM,GAAG,GAAG,GAAG,YAAY,IAAI,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC5E,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YAC1B,OAAO,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE;YAC3C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAChB,4BAA4B,KAAK,IAAI,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,QAAQ,CAAC,QAAQ,IAAI,CAAC,MAAM,QAAQ,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;IAC7E,IAAI,IAAsE,CAAC;IAC3E,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAgB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,yBAAyB,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;QACzB,MAAM,IAAI,cAAc,CAAC,cAAc,IAAI,CAAC,MAAM,QAAQ,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC;SAC3C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAc,CAAC,CAAC;AAClC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * mailifier: ask a mail server whether an address exists, without sending anything.
+ *
+ * Start at `verdict.ts` — `MailboxProbe` is the interface everything else implements,
+ * and the one thing a caller should depend on.
+ */
+export * from "./address.js";
+export * from "./client.js";
+export * from "./dns.js";
+export * from "./local.js";
+export * from "./server.js";
+export * from "./smtp.js";
+export * from "./verdict.js";

package/dist/index.js

@@ -0,0 +1,14 @@
+/**
+ * mailifier: ask a mail server whether an address exists, without sending anything.
+ *
+ * Start at `verdict.ts` — `MailboxProbe` is the interface everything else implements,
+ * and the one thing a caller should depend on.
+ */
+export * from "./address.js";
+export * from "./client.js";
+export * from "./dns.js";
+export * from "./local.js";
+export * from "./server.js";
+export * from "./smtp.js";
+export * from "./verdict.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,cAAc,CAAC"}

package/dist/local.d.ts

@@ -0,0 +1,29 @@
+import { type Resolver } from "./dns.js";
+/** Registered typosquats of the big providers: mail often ACCEPTS there, so "deliverable" is the wrong signal. */
+export declare const TYPO_DOMAINS: ReadonlySet<string>;
+export declare const DISPOSABLE_DOMAINS: ReadonlySet<string>;
+export type MxPath = "mx" | "a" | "aaaa";
+export type LocalFlag = "role_account" | "freemail" | "mx_fallback" | "mx_unresolved";
+export interface LocalCheck {
+    email: string;
+    /** null = passed stage 1 */
+    failure: string | null;
+    flags: readonly LocalFlag[];
+    /** Resolved MX hosts (lowercased, priority-stripped); empty whenever no real MX was found. */
+    mxHosts: readonly string[];
+    /** Which record type supplied deliverability. */
+    mxPath: MxPath | null;
+    passed: boolean;
+}
+export interface LocalCheckerLike {
+    check(email: string): Promise<LocalCheck>;
+}
+/** Checks one email at a time; MX lookups are cached per domain, since imports cluster on shared domains. */
+export declare class LocalChecker implements LocalCheckerLike {
+    private readonly resolver;
+    private readonly cache;
+    constructor(resolver?: Resolver);
+    check(email: string): Promise<LocalCheck>;
+    private mxStatus;
+    private lookup;
+}

package/dist/local.js

@@ -0,0 +1,117 @@
+/**
+ * Stage 1: everything knowable without dialling anyone, run before a probe opens a
+ * socket. Cheap, and it catches most of what a paid service would charge for.
+ *
+ * Failures are definitive (an `invalid` nobody needs to confirm): broken syntax, known
+ * typosquat domains, disposable providers, domains with no mail routing. Flags are
+ * advisory: role accounts and freemail are common for SMBs; the caller decides what to do with them.
+ * A DNS lookup that errors, or that the resolver couldn't answer authoritatively
+ * (SERVFAIL/REFUSED), flags mx_unresolved and passes: only an authoritative empty
+ * answer may mean "no mail routing".
+ */
+import { emailDomain, emailSyntaxError, isFreemail, isRoleLocalpart } from "./address.js";
+import { DohError, resolve } from "./dns.js";
+/** Registered typosquats of the big providers: mail often ACCEPTS there, so "deliverable" is the wrong signal. */
+export const TYPO_DOMAINS = new Set([
+    "gmial.com",
+    "gmal.com",
+    "gamil.com",
+    "gmai.com",
+    "gmil.com",
+    "gnail.com",
+    "gmaill.com",
+    "hotmial.com",
+    "hotmal.com",
+    "hotnail.com",
+    "yahooo.com",
+    "yaho.com",
+    "outlok.com",
+]);
+export const DISPOSABLE_DOMAINS = new Set([
+    "mailinator.com",
+    "guerrillamail.com",
+    "sharklasers.com",
+    "10minutemail.com",
+    "temp-mail.org",
+    "tempmail.com",
+    "yopmail.com",
+    "throwawaymail.com",
+    "getnada.com",
+    "maildrop.cc",
+    "trashmail.com",
+    "dispostable.com",
+    "fakeinbox.com",
+]);
+const check = (email, failure, flags = [], mxHosts = [], mxPath = null) => ({ email, failure, flags, mxHosts, mxPath, passed: failure === null });
+/** Checks one email at a time; MX lookups are cached per domain, since imports cluster on shared domains. */
+export class LocalChecker {
+    resolver;
+    cache = new Map();
+    constructor(resolver = (n, t) => resolve(n, t)) {
+        this.resolver = resolver;
+    }
+    async check(email) {
+        const reason = emailSyntaxError(email);
+        if (reason)
+            return check(email, `syntax: ${reason}`);
+        const domain = emailDomain(email);
+        if (TYPO_DOMAINS.has(domain))
+            return check(email, "typo_domain");
+        if (DISPOSABLE_DOMAINS.has(domain))
+            return check(email, "disposable_domain");
+        const flags = [];
+        if (isRoleLocalpart(email))
+            flags.push("role_account");
+        if (isFreemail(domain))
+            flags.push("freemail");
+        const mx = await this.mxStatus(domain);
+        return check(email, mx.failure, [...flags, ...mx.flags], mx.hosts, mx.path);
+    }
+    mxStatus(domain) {
+        let status = this.cache.get(domain);
+        if (!status) {
+            status = this.lookup(domain);
+            this.cache.set(domain, status);
+        }
+        return status;
+    }
+    async lookup(domain) {
+        let records;
+        try {
+            records = await this.resolver(domain, "MX");
+        }
+        catch (err) {
+            // A resolver hiccup is not evidence of anything about the domain: fail open.
+            if (err instanceof DohError)
+                return { failure: null, flags: ["mx_unresolved"], hosts: [], path: null };
+            throw err;
+        }
+        // RFC 7505 null MX: "0 ." declares the domain never receives mail.
+        const targets = records
+            .map((r) => r.trim().split(/\s+/).at(-1) ?? "")
+            .filter((_, i) => records[i]?.trim());
+        if (targets.length && targets.every((t) => t === "." || t === ""))
+            return { failure: "null_mx", flags: [], hosts: [], path: null };
+        if (targets.length) {
+            const hosts = [
+                ...new Set(targets.map((t) => t.replace(/\.+$/, "").toLowerCase()).filter(Boolean)),
+            ].sort();
+            return { failure: null, flags: [], hosts, path: "mx" };
+        }
+        // No MX: mail falls back to the domain's own address record, A then AAAA (RFC 5321 §5.1).
+        // Real routing but a weaker signal, so flagged; only a domain with none of MX/A/AAAA is undeliverable.
+        try {
+            if ((await this.resolver(domain, "A")).length)
+                return { failure: null, flags: ["mx_fallback"], hosts: [], path: "a" };
+            if ((await this.resolver(domain, "AAAA")).length)
+                return { failure: null, flags: ["mx_fallback"], hosts: [], path: "aaaa" };
+        }
+        catch (err) {
+            if (err instanceof DohError)
+                return { failure: null, flags: ["mx_unresolved"], hosts: [], path: null };
+            throw err;
+        }
+        return { failure: "no_mx", flags: [], hosts: [], path: null };
+    }
+}
+//# sourceMappingURL=local.js.map

package/dist/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../src/local.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAiB,OAAO,EAAE,MAAM,UAAU,CAAC;AAE5D,kHAAkH;AAClH,MAAM,CAAC,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC;IACvD,WAAW;IACX,UAAU;IACV,WAAW;IACX,UAAU;IACV,UAAU;IACV,WAAW;IACX,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,UAAU;IACV,YAAY;CACb,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,cAAc;IACd,aAAa;IACb,mBAAmB;IACnB,aAAa;IACb,aAAa;IACb,eAAe;IACf,iBAAiB;IACjB,eAAe;CAChB,CAAC,CAAC;AAwBH,MAAM,KAAK,GAAG,CACZ,KAAa,EACb,OAAsB,EACtB,QAA8B,EAAE,EAChC,UAA6B,EAAE,EAC/B,SAAwB,IAAI,EAChB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC;AAMxF,6GAA6G;AAC7G,MAAM,OAAO,YAAY;IAEM;IADZ,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC9D,YAA6B,WAAqB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;QAA5C,aAAQ,GAAR,QAAQ,CAAoC;IAAG,CAAC;IAE7E,KAAK,CAAC,KAAK,CAAC,KAAa;QACvB,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,MAAM;YAAE,OAAO,KAAK,CAAC,KAAK,EAAE,WAAW,MAAM,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACjE,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAgB,EAAE,CAAC;QAC9B,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACvD,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC;IAEO,QAAQ,CAAC,MAAc;QAC7B,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,MAAc;QACjC,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6EAA6E;YAC7E,IAAI,GAAG,YAAY,QAAQ;gBACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC5E,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,mEAAmE;QACnE,MAAM,OAAO,GAAG,OAAO;aACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/D,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAClE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG;gBACZ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;aACpF,CAAC,IAAI,EAAE,CAAC;YACT,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzD,CAAC;QACD,0FAA0F;QAC1F,uGAAuG;QACvG,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM;gBAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACzE,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM;gBAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,QAAQ;gBACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC5E,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;CACF"}