mailifier 0.1.0

package/dist/mailifier.mjs

@@ -0,0 +1,384 @@
+#!/usr/bin/env node
+
+// src/server.ts
+import { createServer } from "node:http";
+
+// src/address.ts
+var LOCAL_RE = /^[a-z0-9!#$%&'*+/=?^_`{|}~.-]+$/;
+var LABEL_RE = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/;
+var PUNYCODE_RE = /^xn--[a-z0-9-]+$/;
+function emailSyntaxError(email) {
+  const parts = email.split("@");
+  if (parts.length !== 2) return "must contain exactly one @";
+  const [local, domain] = parts;
+  if (!local) return "empty local part";
+  if (local.length > 64) return "local part longer than 64 chars";
+  if (email.length > 254) return "address longer than 254 chars";
+  if (local.startsWith(".") || local.endsWith(".") || local.includes("..")) {
+    return "misplaced dot in local part";
+  }
+  if (!LOCAL_RE.test(local)) return "illegal character in local part";
+  if (!validDomain(domain)) return "invalid domain";
+  return null;
+}
+function validDomain(domain) {
+  if (!domain || domain.length > 253) return false;
+  const labels = domain.replace(/\.+$/, "").split(".");
+  if (labels.length < 2) return false;
+  if (!labels.every((l) => LABEL_RE.test(l) || PUNYCODE_RE.test(l))) return false;
+  const tld = labels[labels.length - 1];
+  return tld.length >= 2 && (/^[a-z]+$/.test(tld) || PUNYCODE_RE.test(tld));
+}
+
+// src/server.ts
+var MAX_BODY = 4096;
+function makeProbeServer(opts) {
+  const maxInFlight = opts.maxInFlight ?? 8;
+  const log = opts.log ?? (() => {
+  });
+  let inFlight = 0;
+  return createServer(async (req, res) => {
+    try {
+      if (req.method === "GET" && req.url === "/healthz") {
+        const port25 = opts.canary ? await opts.canary() : null;
+        return json(res, 200, { ok: true, in_flight: inFlight, port_25: port25 });
+      }
+      if (req.method !== "POST" || req.url !== "/verify") return json(res, 404, { error: "no" });
+      const offered = (req.headers.authorization ?? "").replace(/^Bearer\s+/i, "");
+      if (!timingSafeEqual(offered, opts.token)) return json(res, 401, { error: "no" });
+      if (inFlight >= maxInFlight) return json(res, 429, { error: "busy" });
+      const body = await readJson(req);
+      const email = typeof body.email === "string" ? body.email.trim() : "";
+      const syntax = email ? emailSyntaxError(email) : "missing email";
+      if (syntax) return json(res, 400, { error: syntax });
+      if (opts.canary && !await opts.canary()) {
+        log("port 25 closed from this host");
+        return json(res, 503, { error: "port 25 closed from this host" });
+      }
+      inFlight += 1;
+      try {
+        const t0 = Date.now();
+        const verdict = await opts.probe.verify(email);
+        log(`${verdict.result} ${String(verdict.raw.reason ?? "")} ${Date.now() - t0}ms`);
+        return json(res, 200, verdict);
+      } finally {
+        inFlight -= 1;
+      }
+    } catch (err) {
+      log(`error ${err instanceof Error ? err.name : "Error"}`);
+      return json(res, 500, { error: err instanceof Error ? err.name : "error" });
+    }
+  });
+}
+function json(res, status, payload) {
+  const text = JSON.stringify(payload);
+  res.writeHead(status, {
+    "content-type": "application/json",
+    "content-length": Buffer.byteLength(text)
+  });
+  res.end(text);
+}
+async function readJson(req) {
+  let text = "";
+  for await (const chunk of req) {
+    text += chunk;
+    if (text.length > MAX_BODY) throw new Error("body too large");
+  }
+  try {
+    const parsed = JSON.parse(text || "{}");
+    return parsed && typeof parsed === "object" ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+function timingSafeEqual(a, b) {
+  if (a.length !== b.length || b.length === 0) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return diff === 0;
+}
+
+// src/smtp.ts
+import { randomBytes } from "node:crypto";
+import { createConnection } from "node:net";
+
+// src/dns.ts
+var DOH_ENDPOINT = "https://cloudflare-dns.com/dns-query";
+var TYPE_CODES = { MX: 15, A: 1, AAAA: 28 };
+var NOERROR = 0;
+var NXDOMAIN = 3;
+var DohError = class extends Error {
+  name = "DohError";
+};
+var DohStatusError = class extends DohError {
+  name = "DohStatusError";
+};
+async function resolve(name, rtype, fetchImpl = fetch) {
+  const url = `${DOH_ENDPOINT}?${new URLSearchParams({ name, type: rtype })}`;
+  let resp;
+  try {
+    resp = await fetchImpl(url, {
+      headers: { accept: "application/dns-json" },
+      signal: AbortSignal.timeout(1e4)
+    });
+  } catch (err) {
+    throw new DohError(
+      `resolver unreachable for ${rtype} ${name}: ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+  if (!resp.ok) throw new DohError(`HTTP ${resp.status} for ${rtype} ${name}`);
+  let body;
+  try {
+    body = await resp.json();
+  } catch {
+    throw new DohStatusError(`non-JSON response for ${rtype} ${name}`);
+  }
+  if (body.Status === NXDOMAIN) return [];
+  if (body.Status !== NOERROR)
+    throw new DohStatusError(`DNS status ${body.Status} for ${rtype} ${name}`);
+  return (body.Answer ?? []).filter((a) => a.type === TYPE_CODES[rtype]).map((a) => a.data);
+}
+
+// src/smtp.ts
+var SMTP_PORT = 25;
+var CRLF = "\r\n";
+var DEFAULT_TIMEOUT_MS = 12e3;
+var MAX_MX_TRIED = 3;
+var SmtpReply = class extends Error {
+  constructor(code, text) {
+    super(`${code} ${text}`);
+    this.code = code;
+    this.text = text;
+    this.name = "SmtpReply";
+  }
+  code;
+  text;
+};
+var replyCode = (reply) => Number.parseInt(reply.slice(0, 3), 10);
+var REJECTED_USER = /user unknown|no such user|does not exist|unknown user|recipient rejected|recipient address rejected|invalid recipient|no mailbox|mailbox not found|mailbox unavailable|address rejected/i;
+var replyClass = (code) => Math.floor(code / 100);
+var enhanced = (reply) => /\b([245])\.(\d{1,3})\.(\d{1,3})\b/.exec(reply);
+async function mailHosts(domain, resolver) {
+  const mx = (await resolver(domain, "MX")).map((rr) => {
+    const [priority, host] = rr.trim().split(/\s+/);
+    return { priority: Number(priority), host: (host ?? "").replace(/\.$/, "").toLowerCase() };
+  }).filter((r) => r.host !== "" && r.host !== ".").sort((a2, b) => a2.priority - b.priority);
+  if (mx.length > 0) return [...new Set(mx.map((r) => r.host))];
+  const a = await resolver(domain, "A");
+  return a.length > 0 ? [domain] : [];
+}
+async function converse(conv, email, opts, transcript) {
+  const step = async (line) => {
+    if (line !== null) await conv.write(line);
+    const reply = await conv.read();
+    const code = replyCode(reply);
+    transcript.push({ sent: line, code, reply: reply.slice(0, 200) });
+    return { code, reply };
+  };
+  const expect = async (line, ok) => {
+    const r = await step(line);
+    if (r.code !== ok) throw new SmtpReply(r.code, r.reply);
+    return r;
+  };
+  await expect(null, 220);
+  await expect(`EHLO ${opts.helo}`, 250);
+  await expect(`MAIL FROM:<${opts.mailFrom}>`, 250);
+  const rcpt = await step(`RCPT TO:<${email}>`);
+  let randomAccepted = null;
+  if (replyClass(rcpt.code) === 2) {
+    const domain = email.slice(email.lastIndexOf("@") + 1);
+    const probe2 = await step(`RCPT TO:<${opts.random()}@${domain}>`);
+    randomAccepted = replyClass(probe2.code) === 2;
+  }
+  try {
+    await conv.write("QUIT");
+  } catch {
+  }
+  conv.close();
+  return { code: rcpt.code, reply: rcpt.reply, randomAccepted };
+}
+function readRcpt(code, reply, randomAccepted) {
+  const klass = replyClass(code);
+  if (klass === 2) {
+    return randomAccepted ? { result: "catch_all", reason: "catch_all" } : { result: "valid", reason: "accepted" };
+  }
+  const enh = enhanced(reply);
+  if (klass === 5) {
+    if (enh?.[2] === "1" || REJECTED_USER.test(reply))
+      return { result: "invalid", reason: "rejected" };
+    return { result: "risky", reason: "blocked" };
+  }
+  return { result: "risky", reason: "greylisted" };
+}
+async function probeMailbox(email, opts) {
+  const resolver = opts.resolver ?? ((n, t) => resolve(n, t));
+  const dial = opts.dial ?? dialTcp;
+  const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const conv = {
+    helo: opts.helo,
+    mailFrom: opts.mailFrom ?? `postmaster@${opts.helo}`,
+    random: opts.random ?? (() => `wren-${randomBytes(6).toString("hex")}`)
+  };
+  const domain = email.slice(email.lastIndexOf("@") + 1).toLowerCase();
+  const hosts = await mailHosts(domain, resolver);
+  const transcript = [];
+  if (hosts.length === 0)
+    return { result: "invalid", reason: "no_mx", mx: null, code: null, transcript };
+  let lastReason = "unreachable";
+  for (const host of hosts.slice(0, MAX_MX_TRIED)) {
+    let session;
+    try {
+      session = await dial(host, SMTP_PORT, timeoutMs);
+    } catch (err) {
+      transcript.push({ sent: null, code: 0, reply: `connect ${host}: ${errorName(err)}` });
+      lastReason = "unreachable";
+      continue;
+    }
+    try {
+      const { code, reply, randomAccepted } = await converse(session, email, conv, transcript);
+      return { ...readRcpt(code, reply, randomAccepted), mx: host, code, transcript };
+    } catch (err) {
+      session.close();
+      if (err instanceof SmtpReply) {
+        lastReason = replyClass(err.code) === 4 ? "greylisted" : "blocked";
+        continue;
+      }
+      transcript.push({ sent: null, code: 0, reply: `${host}: ${errorName(err)}` });
+      lastReason = "unreachable";
+    }
+  }
+  return { result: "risky", reason: lastReason, mx: null, code: null, transcript };
+}
+var errorName = (err) => err instanceof Error ? `${err.name}${err.code ? ` ${err.code}` : ""}` : String(err);
+var dialTcp = (host, port2, timeoutMs) => new Promise((resolveConn, reject) => {
+  const socket = createConnection({ host, port: port2 });
+  let buffer = "";
+  let waiting = null;
+  const fail = (err) => {
+    if (waiting) {
+      waiting.reject(err);
+      waiting = null;
+    } else reject(err);
+    socket.destroy();
+  };
+  socket.setTimeout(
+    timeoutMs,
+    () => fail(Object.assign(new Error("smtp timeout"), { code: "ETIMEDOUT" }))
+  );
+  socket.on("error", fail);
+  socket.on("close", () => fail(Object.assign(new Error("closed"), { code: "ECONNRESET" })));
+  const pump = () => {
+    const lines = buffer.split(CRLF);
+    const end = lines.findIndex((l) => /^\d{3} /.test(l) || l.length > 0 && /^\d{3}$/.test(l));
+    if (end < 0 || !waiting) return;
+    const reply = lines.slice(0, end + 1).join("\n");
+    buffer = lines.slice(end + 1).join(CRLF);
+    const w = waiting;
+    waiting = null;
+    w.resolve(reply);
+  };
+  socket.on("data", (chunk) => {
+    buffer += chunk.toString("latin1");
+    pump();
+  });
+  socket.once(
+    "connect",
+    () => resolveConn({
+      read: () => new Promise((res, rej) => {
+        waiting = { resolve: res, reject: rej };
+        pump();
+      }),
+      write: (line) => new Promise(
+        (res, rej) => socket.write(`${line}${CRLF}`, (err) => err ? rej(err) : res())
+      ),
+      close: () => {
+        socket.removeAllListeners("close");
+        socket.end();
+        socket.destroy();
+      }
+    })
+  );
+});
+var SmtpProbe = class {
+  constructor(opts) {
+    this.opts = opts;
+    this.gapMs = opts.perHostGapMs ?? 1500;
+    this.sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  }
+  opts;
+  name = "smtp";
+  lastByHost = /* @__PURE__ */ new Map();
+  gapMs;
+  sleep;
+  async verify(email) {
+    const domain = email.slice(email.lastIndexOf("@") + 1).toLowerCase();
+    const resolver = this.opts.resolver ?? ((n, t) => resolve(n, t));
+    const key = (await mailHosts(domain, resolver))[0] ?? domain;
+    const previous = this.lastByHost.get(key) ?? Promise.resolve();
+    const turn = previous.then(async () => {
+      const outcome2 = await probeMailbox(email, { ...this.opts, resolver });
+      await this.sleep(this.gapMs);
+      return outcome2;
+    });
+    this.lastByHost.set(
+      key,
+      turn.then(
+        () => void 0,
+        () => void 0
+      )
+    );
+    const outcome = await turn;
+    return {
+      result: outcome.result,
+      raw: {
+        reason: outcome.reason,
+        mx: outcome.mx,
+        code: outcome.code,
+        helo: this.opts.helo,
+        transcript: outcome.transcript
+      }
+    };
+  }
+};
+
+// src/main.ts
+var port = Number(process.env.PROBE_PORT ?? 2525);
+var token = process.env.PROBE_TOKEN ?? "";
+var helo = process.env.PROBE_HELO ?? "";
+if (!token || !helo) {
+  console.error("PROBE_TOKEN and PROBE_HELO are required");
+  process.exit(2);
+}
+var probe = new SmtpProbe({
+  helo,
+  perHostGapMs: Number(process.env.PROBE_HOST_GAP_MS ?? 1500)
+});
+var canaryHost = process.env.PROBE_CANARY_HOST ?? "gmail-smtp-in.l.google.com";
+var CANARY_TTL_MS = 10 * 6e4;
+var canaryOpenUntil = 0;
+async function port25Open() {
+  if (Date.now() < canaryOpenUntil) return true;
+  try {
+    const c = await dialTcp(canaryHost, SMTP_PORT, 8e3);
+    try {
+      const banner = await c.read();
+      if (!banner.startsWith("220")) return false;
+      await c.write("QUIT");
+    } finally {
+      c.close();
+    }
+    canaryOpenUntil = Date.now() + CANARY_TTL_MS;
+    return true;
+  } catch {
+    return false;
+  }
+}
+var server = makeProbeServer({
+  probe,
+  token,
+  canary: port25Open,
+  log: (line) => console.log((/* @__PURE__ */ new Date()).toISOString(), line)
+});
+server.listen(port, () => console.log(`mailifier listening on :${port} as ${helo}`));
+for (const sig of ["SIGINT", "SIGTERM"])
+  process.once(sig, () => server.close(() => process.exit(0)));

package/dist/main.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/main.js

@@ -0,0 +1,55 @@
+#!/usr/bin/env node
+import { makeProbeServer } from "./server.js";
+/**
+ * Serve the probe on PROBE_PORT (2525). Env: PROBE_TOKEN (required), PROBE_HELO
+ * (required), PROBE_HOST_GAP_MS, PROBE_CANARY_HOST (an MX known to answer; default
+ * Google's inbound).
+ */
+import { dialTcp, SMTP_PORT, SmtpProbe } from "./smtp.js";
+const port = Number(process.env.PROBE_PORT ?? 2525);
+const token = process.env.PROBE_TOKEN ?? "";
+const helo = process.env.PROBE_HELO ?? "";
+if (!token || !helo) {
+    console.error("PROBE_TOKEN and PROBE_HELO are required");
+    process.exit(2);
+}
+const probe = new SmtpProbe({
+    helo,
+    perHostGapMs: Number(process.env.PROBE_HOST_GAP_MS ?? 1500),
+});
+// One banner read from a well-known MX, remembered for ten minutes, says whether port
+// 25 is open from here. Open once = trusted for the window; closed = checked again.
+const canaryHost = process.env.PROBE_CANARY_HOST ?? "gmail-smtp-in.l.google.com";
+const CANARY_TTL_MS = 10 * 60_000;
+let canaryOpenUntil = 0;
+async function port25Open() {
+    if (Date.now() < canaryOpenUntil)
+        return true;
+    try {
+        const c = await dialTcp(canaryHost, SMTP_PORT, 8_000);
+        try {
+            const banner = await c.read();
+            if (!banner.startsWith("220"))
+                return false;
+            await c.write("QUIT");
+        }
+        finally {
+            c.close();
+        }
+        canaryOpenUntil = Date.now() + CANARY_TTL_MS;
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+const server = makeProbeServer({
+    probe,
+    token,
+    canary: port25Open,
+    log: (line) => console.log(new Date().toISOString(), line),
+});
+server.listen(port, () => console.log(`mailifier listening on :${port} as ${helo}`));
+for (const sig of ["SIGINT", "SIGTERM"])
+    process.once(sig, () => server.close(() => process.exit(0)));
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C;;;;GAIG;AACH,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE1D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;AACpD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;AAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;AAC1C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC;IAC1B,IAAI;IACJ,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC;CAC5D,CAAC,CAAC;AACH,sFAAsF;AACtF,oFAAoF;AACpF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,4BAA4B,CAAC;AACjF,MAAM,aAAa,GAAG,EAAE,GAAG,MAAM,CAAC;AAClC,IAAI,eAAe,GAAG,CAAC,CAAC;AACxB,KAAK,UAAU,UAAU;IACvB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC5C,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,CAAC;QACD,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,MAAM,GAAG,eAAe,CAAC;IAC7B,KAAK;IACL,KAAK;IACL,MAAM,EAAE,UAAU;IAClB,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC;CAC3D,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;AACrF,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU;IAC9C,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The probe as a service: `POST /verify {email}` → a verdict, run on a host that can
+ * open port 25. Bearer-authenticated; one process, one probe, so the per-MX gap holds
+ * across every caller. `GET /healthz` for the box's own checks. Nothing here sends
+ * mail: no DATA, no delivery, ever.
+ *
+ * The canary: before a verdict the server asks whether port 25 is open from here at
+ * all (most clouds close it until asked). Closed means 503, never a `risky` verdict
+ * per address: that is this host's problem, not the mailbox's.
+ */
+import { type Server } from "node:http";
+import type { MailboxProbe } from "./verdict.js";
+export interface ProbeServerOptions {
+    probe: MailboxProbe;
+    token: string;
+    /** Calls at once across all MX hosts; the probe still serialises per host. */
+    maxInFlight?: number;
+    /** Can this host open port 25 right now? Absent = assume yes. */
+    canary?: () => Promise<boolean>;
+    log?: (line: string) => void;
+}
+export declare function makeProbeServer(opts: ProbeServerOptions): Server;

package/dist/server.js

@@ -0,0 +1,89 @@
+/**
+ * The probe as a service: `POST /verify {email}` → a verdict, run on a host that can
+ * open port 25. Bearer-authenticated; one process, one probe, so the per-MX gap holds
+ * across every caller. `GET /healthz` for the box's own checks. Nothing here sends
+ * mail: no DATA, no delivery, ever.
+ *
+ * The canary: before a verdict the server asks whether port 25 is open from here at
+ * all (most clouds close it until asked). Closed means 503, never a `risky` verdict
+ * per address: that is this host's problem, not the mailbox's.
+ */
+import { createServer } from "node:http";
+import { emailSyntaxError } from "./address.js";
+const MAX_BODY = 4_096;
+export function makeProbeServer(opts) {
+    const maxInFlight = opts.maxInFlight ?? 8;
+    const log = opts.log ?? (() => { });
+    let inFlight = 0;
+    return createServer(async (req, res) => {
+        try {
+            if (req.method === "GET" && req.url === "/healthz") {
+                const port25 = opts.canary ? await opts.canary() : null;
+                return json(res, 200, { ok: true, in_flight: inFlight, port_25: port25 });
+            }
+            if (req.method !== "POST" || req.url !== "/verify")
+                return json(res, 404, { error: "no" });
+            const offered = (req.headers.authorization ?? "").replace(/^Bearer\s+/i, "");
+            if (!timingSafeEqual(offered, opts.token))
+                return json(res, 401, { error: "no" });
+            if (inFlight >= maxInFlight)
+                return json(res, 429, { error: "busy" });
+            const body = await readJson(req);
+            const email = typeof body.email === "string" ? body.email.trim() : "";
+            const syntax = email ? emailSyntaxError(email) : "missing email";
+            if (syntax)
+                return json(res, 400, { error: syntax });
+            if (opts.canary && !(await opts.canary())) {
+                log("port 25 closed from this host");
+                return json(res, 503, { error: "port 25 closed from this host" });
+            }
+            inFlight += 1;
+            try {
+                const t0 = Date.now();
+                const verdict = await opts.probe.verify(email);
+                log(`${verdict.result} ${String(verdict.raw.reason ?? "")} ${Date.now() - t0}ms`);
+                return json(res, 200, verdict);
+            }
+            finally {
+                inFlight -= 1;
+            }
+        }
+        catch (err) {
+            log(`error ${err instanceof Error ? err.name : "Error"}`);
+            return json(res, 500, { error: err instanceof Error ? err.name : "error" });
+        }
+    });
+}
+function json(res, status, payload) {
+    const text = JSON.stringify(payload);
+    res.writeHead(status, {
+        "content-type": "application/json",
+        "content-length": Buffer.byteLength(text),
+    });
+    res.end(text);
+}
+async function readJson(req) {
+    let text = "";
+    for await (const chunk of req) {
+        text += chunk;
+        if (text.length > MAX_BODY)
+            throw new Error("body too large");
+    }
+    try {
+        const parsed = JSON.parse(text || "{}");
+        return parsed && typeof parsed === "object" ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+/** Compare the whole string every time; no early exit on a wrong prefix. */
+function timingSafeEqual(a, b) {
+    if (a.length !== b.length || b.length === 0)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.length; i++)
+        diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+    return diff === 0;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAahD,MAAM,QAAQ,GAAG,KAAK,CAAC;AAEvB,MAAM,UAAU,eAAe,CAAC,IAAwB;IACtD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,OAAO,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACrC,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;gBACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBACxD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3F,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YAC7E,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,IAAI,QAAQ,IAAI,WAAW;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACtE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;YACjE,IAAI,MAAM;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACrD,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,+BAA+B,CAAC,CAAC;gBACrC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,QAAQ,IAAI,CAAC,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC/C,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBAClF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACjC,CAAC;oBAAS,CAAC;gBACT,QAAQ,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,SAAS,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,OAAgB;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;KAC1C,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,IAAI,IAAI,KAAK,CAAC;QACd,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QACjD,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC"}

package/dist/smtp.d.ts

@@ -0,0 +1,68 @@
+import { type Resolver } from "./dns.js";
+import type { MailboxProbe, MailboxResult, Verdict } from "./verdict.js";
+export declare const SMTP_PORT = 25;
+/** One line of SMTP conversation, kept for the verdict's `raw` (no addresses beyond ours). */
+export interface Exchange {
+    sent: string | null;
+    code: number;
+    reply: string;
+}
+/** What the wire said, before it is read as a verdict. */
+export interface ProbeOutcome {
+    result: MailboxResult;
+    /** Why, in one word: accepted, rejected, catch_all, greylisted, blocked, unreachable, no_mx. */
+    reason: string;
+    mx: string | null;
+    /** The RCPT reply for the address itself, when one was given. */
+    code: number | null;
+    transcript: Exchange[];
+}
+/** A connected line-oriented conversation; the real one is a TCP socket, tests hand in a script. */
+export interface Conversation {
+    /** Next reply (a full, possibly multi-line SMTP response). */
+    read(): Promise<string>;
+    write(line: string): Promise<void>;
+    close(): void;
+}
+export type Dialer = (host: string, port: number, timeoutMs: number) => Promise<Conversation>;
+export interface SmtpProbeOptions {
+    /** Our HELO name; forward and reverse DNS should agree on it. */
+    helo: string;
+    /** MAIL FROM address, defaults to postmaster@helo. */
+    mailFrom?: string;
+    timeoutMs?: number;
+    dial?: Dialer;
+    resolver?: Resolver;
+    random?: () => string;
+}
+/**
+ * MX hosts in priority order (lowest number first), falling back to the domain's own A
+ * record when there is none, as mail does. Empty = nothing to connect to.
+ */
+export declare function mailHosts(domain: string, resolver: Resolver): Promise<string[]>;
+/**
+ * Probe one address: the first MX that will talk decides. An MX that refuses us
+ * before RCPT (policy 5xx at EHLO/MAIL FROM) or cannot be reached is skipped for the
+ * next; when every one does, the verdict is risky, with the reason.
+ */
+export declare function probeMailbox(email: string, opts: SmtpProbeOptions): Promise<ProbeOutcome>;
+/** The real thing: a TCP socket read line by line, multi-line replies joined. */
+export declare const dialTcp: Dialer;
+export interface SmtpProbeSettings extends SmtpProbeOptions {
+    /** Least time between two probes at the same MX; ours is a guest there. */
+    perHostGapMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+}
+/**
+ * The probe over `probeMailbox`, serialising per MX host with a gap between them: one
+ * conversation at a time with any given server, because we are a guest there.
+ */
+export declare class SmtpProbe implements MailboxProbe {
+    private readonly opts;
+    readonly name = "smtp";
+    private readonly lastByHost;
+    private readonly gapMs;
+    private readonly sleep;
+    constructor(opts: SmtpProbeSettings);
+    verify(email: string): Promise<Verdict>;
+}