mxprobe-core 0.1.0 → 0.2.1

package/README.md

@@ -31,4 +31,10 @@ Options (all optional): `smtp`, `helo`, `from`, `port`, `hostOverride`,
 `autoDisableSmtp`, `resolver` (an object with `resolveMx`, `resolve4`,
 `resolve6`, `reverse`, for tests).
 
+Written in TypeScript; the package ships its declarations. `VerifyResult`,
+`Action`, `Verdict`, `SmtpCheck`, `Checks`, `Summary`, `VerifierOptions`,
+`Resolver` and the hosted API's response types (`SignupResponse`,
+`VerifyResponse`, `BalanceResponse`, `CheckoutResponse`, `ApiErrorBody`)
+are exported as types.
+
 MIT. Part of https://github.com/andrewchmr/mxprobe.

package/dist/address.d.ts

@@ -0,0 +1,17 @@
+export interface ParsedAddress {
+    /** The address with the domain lowercased and the trailing dot removed. */
+    email: string;
+    local: string;
+    domain: string;
+    error?: undefined;
+}
+export interface AddressError {
+    email: string;
+    error: string;
+    local?: undefined;
+    domain?: undefined;
+}
+export type ParseResult = ParsedAddress | AddressError;
+/** Split an address into local part and domain, or return { email, error }. */
+export declare function parseAddress(raw: unknown): ParseResult;
+//# sourceMappingURL=address.d.ts.map

package/dist/address.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.d.ts","sourceRoot":"","sources":["../src/address.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,MAAM,CAAC,EAAE,SAAS,CAAC;CACpB;AAED,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,YAAY,CAAC;AAEvD,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CAUtD"}

package/dist/address.js

@@ -0,0 +1,14 @@
+/** Split an address into local part and domain, or return { email, error }. */
+export function parseAddress(raw) {
+    const email = String(raw ?? "").trim();
+    const m = email.match(/^([^\s@]+)@([^\s@]+\.[^\s@]+)$/);
+    if (!m || m[1] === undefined || m[2] === undefined)
+        return { email, error: "not an email address" };
+    const local = m[1];
+    const domain = m[2].toLowerCase().replace(/\.$/, "");
+    if (local.length > 64 || domain.length > 253 || /\.\./.test(domain) || /[^a-z0-9.-]/.test(domain)) {
+        return { email, error: "malformed address" };
+    }
+    return { email: `${local}@${domain}`, local, domain };
+}
+//# sourceMappingURL=address.js.map

package/dist/address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.js","sourceRoot":"","sources":["../src/address.ts"],"names":[],"mappings":"AAiBA,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACxD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IACpG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,IAAI,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACxD,CAAC"}

package/dist/api.d.ts

@@ -0,0 +1,39 @@
+import type { Summary, VerifyResult } from "./types.ts";
+/** Every error response: { error, message } plus route-specific extras. */
+export interface ApiErrorBody {
+    error: string;
+    message: string;
+    retry_after_seconds?: number;
+    credits_left?: number;
+    needed?: number;
+    checkout_hint?: string;
+    max?: number;
+}
+export interface SignupResponse {
+    api_key: string;
+    email: string;
+    credits: number;
+    mailed: boolean;
+    message: string;
+}
+export interface VerifyResponse {
+    results: VerifyResult[];
+    summary: Summary;
+    credits_used: number;
+    credits_left: number;
+}
+export interface BalanceResponse {
+    email: string;
+    credits: number;
+    checks_total: number;
+    created_at: string;
+}
+export interface CheckoutResponse {
+    url: string;
+    credits: number;
+    amount_usd: number;
+    packs: number;
+    session_id: string;
+    message: string;
+}
+//# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAExD,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/api.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":""}

package/dist/dns.d.ts

@@ -0,0 +1,23 @@
+import { type VerifierOptions } from "./options.ts";
+import type { Verdict } from "./types.ts";
+export interface MxHost {
+    host: string;
+    /** Resolved for the primary; null for the secondary, which is resolved on demand. */
+    ip: string | null;
+}
+export interface DomainCheck {
+    verdict: Verdict;
+    reason: string;
+    /** The primary MX host name, or null when the domain is DEAD. */
+    mx: string | null;
+    /** The hosts to try in order. Empty when DEAD. */
+    mxHosts: MxHost[];
+}
+/** Name the web host behind an A record from its IP and reverse name. */
+export declare function labelWebHost(ip: string, ptr: string | null): string;
+/**
+ * The DNS tier for one domain. Returns the verdict, the primary MX host name
+ * (null when the domain is DEAD) and the sorted list of hosts to try.
+ */
+export declare function checkDomain(domain: string, opts?: VerifierOptions): Promise<DomainCheck>;
+//# sourceMappingURL=dns.d.ts.map

package/dist/dns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns.d.ts","sourceRoot":"","sources":["../src/dns.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,KAAK,EAAsB,OAAO,EAAE,MAAM,YAAY,CAAC;AAkB9D,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,kDAAkD;IAClD,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAwBD,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CASnE;AAID;;;GAGG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,CAwClG"}

package/dist/dns.js

@@ -0,0 +1,97 @@
+// Tier 1: DNS. Free and local. Finds domains that cannot receive mail: no MX
+// and a web host behind the A record, a null MX, an MX that does not resolve,
+// a domain that does not exist, a parking host as MX.
+import { resolveOptions } from "./options.js";
+import { errorCode, errorMessage, withTimeout } from "./util.js";
+// MX hosts that forward rather than hold mail. They bounce when the forward
+// target is dead, and some refuse relays outright.
+const FORWARDER_MX = [
+    /registrar-servers\.com$/i, // Namecheap eforward1..5
+    /improvmx\.com$/i,
+    /forwardemail\.net$/i,
+    /mx\.cloudflare\.net$/i, // Cloudflare Email Routing route1..3
+    /fwd\d*\.porkbun\.com$/i,
+    /mailforward\./i,
+    /forwardmx\./i,
+];
+// Hosts that serve web pages, not mail. An MX pointing here times out.
+const WEBHOST_MX = [/pixie\.porkbun\.com$/i, /parkingcrew\./i, /sedoparking\./i, /bodis\./i, /above\.com$/i];
+const isNullMx = (mx) => mx.length === 1 && mx[0]?.exchange === "" && mx[0]?.priority === 0;
+async function lookupAny(resolver, host) {
+    const [v4, v6] = await Promise.all([resolver.resolve4(host).catch(() => []), resolver.resolve6(host).catch(() => [])]);
+    return { v4, v6, all: [...v4, ...v6] };
+}
+async function reverseName(resolver, ip, ms) {
+    try {
+        const names = await withTimeout(resolver.reverse(ip), "reverse", ms);
+        return names[0] ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Name the web host behind an A record from its IP and reverse name. */
+export function labelWebHost(ip, ptr) {
+    const p = (ptr ?? "").toLowerCase();
+    if (ip === "75.2.60.5" || ip === "99.83.190.102" || p.includes("netlify"))
+        return "Netlify";
+    if (ip.startsWith("76.76.21.") || ip.startsWith("216.198.79.") || p.includes("vercel"))
+        return "Vercel";
+    if (ip.startsWith("104.21.") || ip.startsWith("172.67.") || ip.startsWith("188.114.9") || p.includes("cloudflare"))
+        return "Cloudflare";
+    if (p.includes("amazonaws") || p.includes("awsglobalaccelerator"))
+        return "AWS";
+    if (p.includes("github"))
+        return "GitHub Pages";
+    if (p.includes("squarespace") || p.includes("wixdns") || p.includes("webflow"))
+        return "site builder";
+    return ptr ?? "unknown host";
+}
+const dead = (reason) => ({ verdict: "DEAD", reason, mx: null, mxHosts: [] });
+/**
+ * The DNS tier for one domain. Returns the verdict, the primary MX host name
+ * (null when the domain is DEAD) and the sorted list of hosts to try.
+ */
+export async function checkDomain(domain, opts = {}) {
+    const o = resolveOptions(opts);
+    const { resolver } = o;
+    let mx;
+    try {
+        mx = await withTimeout(resolver.resolveMx(domain), "MX", o.dnsTimeoutMs);
+    }
+    catch (err) {
+        const code = errorCode(err) ?? "";
+        if (code === "ENOTFOUND")
+            return dead("domain does not exist (NXDOMAIN)");
+        if (code !== "ENODATA" && !/timed out/.test(errorMessage(err)))
+            return dead(`MX lookup failed (${code || errorMessage(err)})`);
+        mx = [];
+    }
+    if (mx.length === 0) {
+        const ips = await withTimeout(lookupAny(resolver, domain), "A/AAAA", o.dnsTimeoutMs);
+        const ip = ips.all[0];
+        if (ip === undefined)
+            return dead("no MX and no A/AAAA record");
+        const host = labelWebHost(ip, await reverseName(resolver, ip, o.dnsTimeoutMs));
+        return dead(`no MX record; mail falls back to the A record ${ip} (${host}), which does not take mail`);
+    }
+    if (isNullMx(mx))
+        return dead("null MX (RFC 7505): the domain accepts no mail");
+    const sorted = [...mx].sort((x, y) => x.priority - y.priority).map((r) => r.exchange.replace(/\.$/, "").toLowerCase());
+    const primary = sorted[0];
+    const secondary = sorted[1];
+    if (WEBHOST_MX.some((re) => re.test(primary)))
+        return dead(`MX ${primary} is a web or parking host, not a mail server`);
+    const primaryIps = await withTimeout(lookupAny(resolver, primary), "MX host", o.dnsTimeoutMs);
+    const primaryIp = primaryIps.v4[0] ?? primaryIps.v6[0];
+    if (primaryIp === undefined)
+        return dead(`MX host ${primary} does not resolve`);
+    const mxHosts = [{ host: primary, ip: primaryIp }];
+    if (secondary !== undefined && secondary !== primary)
+        mxHosts.push({ host: secondary, ip: null });
+    if (FORWARDER_MX.some((re) => re.test(primary))) {
+        return { verdict: "WEAK", reason: `MX ${primary} is a forwarder; it bounces when the forward target is dead`, mx: primary, mxHosts };
+    }
+    return { verdict: "OK", reason: `MX ${primary}`, mx: primary, mxHosts };
+}
+//# sourceMappingURL=dns.js.map

package/dist/dns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns.js","sourceRoot":"","sources":["../src/dns.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,8EAA8E;AAC9E,sDAAsD;AACtD,OAAO,EAAE,cAAc,EAAwB,MAAM,cAAc,CAAC;AAEpE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAEjE,4EAA4E;AAC5E,mDAAmD;AACnD,MAAM,YAAY,GAAsB;IACtC,0BAA0B,EAAE,yBAAyB;IACrD,iBAAiB;IACjB,qBAAqB;IACrB,uBAAuB,EAAE,qCAAqC;IAC9D,wBAAwB;IACxB,gBAAgB;IAChB,cAAc;CACf,CAAC;AAEF,uEAAuE;AACvE,MAAM,UAAU,GAAsB,CAAC,uBAAuB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;AAuBhI,MAAM,QAAQ,GAAG,CAAC,EAAuB,EAAW,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,KAAK,CAAC,CAAC;AAE1H,KAAK,UAAU,SAAS,CAAC,QAAkB,EAAE,IAAY;IACvD,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAAC,CAAC,CAAC;IAC/I,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAkB,EAAE,EAAU,EAAE,EAAU;IACnE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACrE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,EAAU,EAAE,GAAkB;IACzD,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,EAAE,KAAK,WAAW,IAAI,EAAE,KAAK,eAAe,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5F,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxG,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,YAAY,CAAC;IACxI,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,cAAc,CAAC;IAChD,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,cAAc,CAAC;IACtG,OAAO,GAAG,IAAI,cAAc,CAAC;AAC/B,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,MAAc,EAAe,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;AAEnG;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,IAAI,GAAoB,EAAE;IAC1E,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACvB,IAAI,EAAc,CAAC;IACnB,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC1E,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,qBAAqB,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/H,EAAE,GAAG,EAAE,CAAC;IACV,CAAC;IAED,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QACrF,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,EAAE,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,WAAW,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC,iDAAiD,EAAE,KAAK,IAAI,6BAA6B,CAAC,CAAC;IACzG,CAAC;IAED,IAAI,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAEhF,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACvH,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAW,CAAC;IACpC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAE5B,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,MAAM,OAAO,8CAA8C,CAAC,CAAC;IAExH,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IAC9F,MAAM,SAAS,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,WAAW,OAAO,mBAAmB,CAAC,CAAC;IAEhF,MAAM,OAAO,GAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7D,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAElG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,OAAO,6DAA6D,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACvI,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC1E,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+/** The package version, read from package.json so a bump is one edit there. */
+export declare const VERSION: string;
+export { parseAddress, type AddressError, type ParsedAddress, type ParseResult } from "./address.ts";
+export { checkDomain, labelWebHost, type DomainCheck, type MxHost } from "./dns.ts";
+export { DEFAULTS, resolveOptions, type ResolvedOptions, type VerifierOptions } from "./options.ts";
+export { probeMailbox, PORT_BLOCKED, type ProbeOptions, type ProbeResult, type ProbeSmtp } from "./smtp.ts";
+export { ACTIONS, VERDICTS, createVerifier, summarize, verify, verifyBatch, type Verifier, type VerifierState } from "./verifier.ts";
+export { errorMessage } from "./util.ts";
+export type { Action, Checks, MxRecord, Resolver, SmtpCheck, Summary, Verdict, VerifyResult } from "./types.ts";
+export type { ApiErrorBody, BalanceResponse, CheckoutResponse, SignupResponse, VerifyResponse } from "./api.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmBA,+EAA+E;AAC/E,eAAO,MAAM,OAAO,EAAE,MAA2F,CAAC;AAElH,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AACrG,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AACpF,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC5G,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AACrI,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAChH,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,26 @@
+// MX Probe engine. Zero dependencies, Node 20+.
+//
+// Two tiers, run in order:
+//   1. DNS. Free and local. Finds domains that cannot receive mail: no MX and
+//      a web host behind the A record, a null MX, an MX that does not resolve,
+//      a domain that does not exist, a parking host as MX.
+//   2. SMTP probe. Connects to the MX on port 25, says EHLO and MAIL FROM,
+//      asks RCPT TO for the address and for a random local part (the catch-all
+//      test), then QUITs. No message is ever sent. Needs outbound port 25.
+//
+// The verdict contract, the same in the CLI, the MCP server and the API:
+//   { email, action, verdict, reason, checks: { syntax, mx, smtp, catch_all } }
+//   action  = send | hold | kill
+//   verdict = OK   | WEAK | DEAD
+//   `hold` never becomes `kill` on a refusal, a greylist or a catch-all. Only
+//   a 5xx that names the mailbox kills.
+import { createRequire } from "node:module";
+/** The package version, read from package.json so a bump is one edit there. */
+export const VERSION = createRequire(import.meta.url)("../package.json").version;
+export { parseAddress } from "./address.js";
+export { checkDomain, labelWebHost } from "./dns.js";
+export { DEFAULTS, resolveOptions } from "./options.js";
+export { probeMailbox, PORT_BLOCKED } from "./smtp.js";
+export { ACTIONS, VERDICTS, createVerifier, summarize, verify, verifyBatch } from "./verifier.js";
+export { errorMessage } from "./util.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,2BAA2B;AAC3B,8EAA8E;AAC9E,+EAA+E;AAC/E,2DAA2D;AAC3D,2EAA2E;AAC3E,+EAA+E;AAC/E,2EAA2E;AAC3E,EAAE;AACF,yEAAyE;AACzE,gFAAgF;AAChF,iCAAiC;AACjC,iCAAiC;AACjC,8EAA8E;AAC9E,wCAAwC;AAExC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,+EAA+E;AAC/E,MAAM,CAAC,MAAM,OAAO,GAAY,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAyB,CAAC,OAAO,CAAC;AAElH,OAAO,EAAE,YAAY,EAA2D,MAAM,cAAc,CAAC;AACrG,OAAO,EAAE,WAAW,EAAE,YAAY,EAAiC,MAAM,UAAU,CAAC;AACpF,OAAO,EAAE,QAAQ,EAAE,cAAc,EAA8C,MAAM,cAAc,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,YAAY,EAAuD,MAAM,WAAW,CAAC;AAC5G,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAqC,MAAM,eAAe,CAAC;AACrI,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC"}

package/dist/options.d.ts

@@ -0,0 +1,29 @@
+import type { Resolver } from "./types.ts";
+export interface VerifierOptions {
+    /** Run the SMTP probe after the DNS tier. Needs outbound port 25. */
+    smtp?: boolean;
+    dnsTimeoutMs?: number;
+    smtpTimeoutMs?: number;
+    smtpConcurrency?: number;
+    dnsConcurrency?: number;
+    /** The name given in EHLO. Its reverse DNS should match the probing IP. */
+    helo?: string;
+    /** The MAIL FROM address. */
+    from?: string;
+    port?: number;
+    /** Connect here instead of the MX host, for tests against a local server. */
+    hostOverride?: string | null;
+    /**
+     * When true, an ECONNREFUSED / EHOSTUNREACH / ENETUNREACH on a probe turns
+     * the SMTP tier off for the rest of the run: the network blocks port 25.
+     * The hosted API sets this to false because its port is proven by a health
+     * check, and one refusing MX must not switch the tier off for everyone.
+     */
+    autoDisableSmtp?: boolean;
+    resolver?: Resolver;
+}
+export type ResolvedOptions = Required<VerifierOptions>;
+export declare const DEFAULTS: Readonly<ResolvedOptions>;
+/** Defaults under the caller's options. An explicit `undefined` keeps the default. */
+export declare function resolveOptions(opts?: VerifierOptions): ResolvedOptions;
+//# sourceMappingURL=options.d.ts.map

package/dist/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,eAAe,CAY7C,CAAC;AAEH,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,IAAI,GAAE,eAAoB,GAAG,eAAe,CAM1E"}

package/dist/options.js

@@ -0,0 +1,24 @@
+import { promises as dnsPromises } from "node:dns";
+export const DEFAULTS = Object.freeze({
+    smtp: false,
+    dnsTimeoutMs: 8000,
+    smtpTimeoutMs: 12000,
+    smtpConcurrency: 3,
+    dnsConcurrency: 20,
+    helo: "probe.mxprobe.dev",
+    from: "probe@mxprobe.dev",
+    port: 25,
+    hostOverride: null,
+    autoDisableSmtp: true,
+    resolver: dnsPromises,
+});
+/** Defaults under the caller's options. An explicit `undefined` keeps the default. */
+export function resolveOptions(opts = {}) {
+    const out = { ...DEFAULTS };
+    for (const [key, value] of Object.entries(opts)) {
+        if (value !== undefined)
+            out[key] = value;
+    }
+    return out;
+}
+//# sourceMappingURL=options.js.map

package/dist/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,UAAU,CAAC;AA6BnD,MAAM,CAAC,MAAM,QAAQ,GAA8B,MAAM,CAAC,MAAM,CAAC;IAC/D,IAAI,EAAE,KAAK;IACX,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,KAAK;IACpB,eAAe,EAAE,CAAC;IAClB,cAAc,EAAE,EAAE;IAClB,IAAI,EAAE,mBAAmB;IACzB,IAAI,EAAE,mBAAmB;IACzB,IAAI,EAAE,EAAE;IACR,YAAY,EAAE,IAAI;IAClB,eAAe,EAAE,IAAI;IACrB,QAAQ,EAAE,WAAW;CACtB,CAAC,CAAC;AAEH,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,IAAI,GAAoB,EAAE;IACvD,MAAM,GAAG,GAA4B,EAAE,GAAG,QAAQ,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC5C,CAAC;IACD,OAAO,GAAsB,CAAC;AAChC,CAAC"}

package/dist/smtp.d.ts

@@ -0,0 +1,23 @@
+import { type VerifierOptions } from "./options.ts";
+import type { SmtpCheck, Verdict } from "./types.ts";
+/** Connect errors that mean the network blocks port 25, not that one MX is down. */
+export declare const PORT_BLOCKED: ReadonlySet<string>;
+export type ProbeSmtp = Exclude<SmtpCheck, "skipped">;
+export interface ProbeResult {
+    verdict: Verdict;
+    reason: string;
+    smtp: ProbeSmtp;
+    catchAll: boolean | null;
+    /** The connect error code when smtp is `unreachable`. */
+    connectError?: string;
+}
+export interface ProbeOptions extends VerifierOptions {
+    /** Connect to this address (the resolved MX IP) while naming mxHost in the reason. */
+    connectHost?: string;
+}
+/**
+ * Probe one mailbox on one MX. `smtp` is accepted | rejected | refused |
+ * deferred | unreachable | dropped. Never sends DATA.
+ */
+export declare function probeMailbox(email: string, domain: string, mxHost: string, opts?: ProbeOptions): Promise<ProbeResult>;
+//# sourceMappingURL=smtp.d.ts.map

package/dist/smtp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smtp.d.ts","sourceRoot":"","sources":["../src/smtp.ts"],"names":[],"mappings":"AAKA,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAQrD,oFAAoF;AACpF,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,MAAM,CAA4D,CAAC;AAE1G,MAAM,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AAEtD,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAa,SAAQ,eAAe;IACnD,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA2FD;;;GAGG;AACH,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CA6C/H"}

package/dist/smtp.js

@@ -0,0 +1,143 @@
+// Tier 2: the SMTP probe. Connects to the MX on port 25, says EHLO and MAIL
+// FROM, asks RCPT TO for the address and for a random local part (the
+// catch-all test), then QUITs. No message is ever sent. Needs outbound port 25.
+import net from "node:net";
+import { randomBytes } from "node:crypto";
+import { resolveOptions } from "./options.js";
+import { errorCode, errorMessage, withTimeout } from "./util.js";
+// Reply text that means "this mailbox does not exist", as opposed to "we do
+// not like you" (5.7.x) or "not now" (4xx).
+const NO_SUCH_MAILBOX = /5\.1\.[0136]\b|5\.4\.1\b|user unknown|unknown user|does not exist|doesn't exist|no such (user|recipient|mailbox)|not found|not exist|no mailbox|invalid recipient|recipient rejected|recipient address rejected|unrouteable|unknown recipient|not our customer|mailbox unavailable|address rejected|invalid mailbox|unknown address/i;
+/** Connect errors that mean the network blocks port 25, not that one MX is down. */
+export const PORT_BLOCKED = new Set(["ECONNREFUSED", "EHOSTUNREACH", "ENETUNREACH"]);
+const codedError = (message, code) => Object.assign(new Error(message), { code });
+// A line-oriented SMTP client: connect, then read() a reply or send(cmd) and
+// read its reply. Multi-line replies (250-... 250 ...) come back as one.
+function connectSmtp(host, port, timeoutMs) {
+    return new Promise((resolve, reject) => {
+        const socket = net.createConnection({ host, port });
+        socket.setEncoding("utf8");
+        socket.setTimeout(timeoutMs);
+        let buffer = "";
+        let lines = [];
+        const queued = [];
+        let waiter = null;
+        let dead = null;
+        let connected = false;
+        const fail = (err) => {
+            dead = dead ?? err;
+            if (waiter) {
+                const w = waiter;
+                waiter = null;
+                w.reject(err);
+            }
+            if (!connected)
+                reject(err);
+            socket.destroy();
+        };
+        socket.on("timeout", () => fail(codedError("SMTP timeout", "ETIMEDOUT")));
+        socket.on("error", fail);
+        socket.on("close", () => fail(codedError("connection closed", "ECLOSED")));
+        socket.on("data", (chunk) => {
+            buffer += chunk;
+            let idx;
+            while ((idx = buffer.indexOf("\n")) !== -1) {
+                const line = buffer.slice(0, idx).replace(/\r$/, "");
+                buffer = buffer.slice(idx + 1);
+                lines.push(line);
+                if (/^\d{3}( |$)/.test(line)) {
+                    const reply = { code: Number(line.slice(0, 3)), text: lines.join(" | ") };
+                    lines = [];
+                    if (waiter) {
+                        const w = waiter;
+                        waiter = null;
+                        w.resolve(reply);
+                    }
+                    else {
+                        queued.push(reply);
+                    }
+                }
+            }
+        });
+        const read = () => new Promise((res, rej) => {
+            const next = queued.shift();
+            if (next)
+                return res(next);
+            if (dead)
+                return rej(dead);
+            waiter = { resolve: res, reject: rej };
+        });
+        const send = (cmd) => {
+            if (dead)
+                return Promise.reject(dead);
+            socket.write(`${cmd}\r\n`);
+            return read();
+        };
+        socket.once("connect", () => {
+            connected = true;
+            resolve({ read, send, close: () => socket.destroy() });
+        });
+    });
+}
+const firstLine = (reply) => reply.text.split(" | ")[0] ?? "";
+const refused = (reason) => ({ verdict: "WEAK", reason, smtp: "refused", catchAll: null });
+const deferred = (reason) => ({ verdict: "WEAK", reason, smtp: "deferred", catchAll: null });
+/**
+ * Probe one mailbox on one MX. `smtp` is accepted | rejected | refused |
+ * deferred | unreachable | dropped. Never sends DATA.
+ */
+export async function probeMailbox(email, domain, mxHost, opts = {}) {
+    const o = resolveOptions(opts);
+    const target = o.hostOverride ?? opts.connectHost ?? mxHost;
+    let s;
+    try {
+        s = await withTimeout(connectSmtp(target, o.port, o.smtpTimeoutMs), "connect", o.smtpTimeoutMs);
+    }
+    catch (err) {
+        const code = errorCode(err) ?? "EUNKNOWN";
+        return { verdict: "WEAK", reason: `cannot connect to ${mxHost}:${o.port} (${code})`, smtp: "unreachable", catchAll: null, connectError: code };
+    }
+    try {
+        const banner = await s.read();
+        if (banner.code !== 220)
+            return refused(`${mxHost} greeted with ${firstLine(banner)}`);
+        let r = await s.send(`EHLO ${o.helo}`);
+        if (r.code !== 250) {
+            r = await s.send(`HELO ${o.helo}`);
+            if (r.code !== 250)
+                return refused(`${mxHost} refused HELO (${firstLine(r)})`);
+        }
+        r = await s.send(`MAIL FROM:<${o.from}>`);
+        if (r.code !== 250) {
+            return r.code >= 500 ? refused(`${mxHost} refused the sender (${firstLine(r)})`) : deferred(`${mxHost} deferred the sender (${firstLine(r)})`);
+        }
+        r = await s.send(`RCPT TO:<${email}>`);
+        let result;
+        if (r.code === 250 || r.code === 251) {
+            const random = `${randomBytes(6).toString("hex")}-probe@${domain}`;
+            const c = await s.send(`RCPT TO:<${random}>`);
+            result =
+                c.code === 250 || c.code === 251
+                    ? { verdict: "WEAK", reason: `${domain} is catch-all: ${mxHost} accepts any local part, so the mailbox cannot be proven`, smtp: "accepted", catchAll: true }
+                    : { verdict: "OK", reason: `mailbox accepted by ${mxHost}`, smtp: "accepted", catchAll: false };
+        }
+        else if (r.code >= 500 && NO_SUCH_MAILBOX.test(r.text)) {
+            result = { verdict: "DEAD", reason: `${mxHost} says the mailbox does not exist (${firstLine(r)})`, smtp: "rejected", catchAll: null };
+        }
+        else if (r.code >= 500) {
+            result = refused(`${mxHost} refused the probe, not the mailbox (${firstLine(r)})`);
+        }
+        else {
+            result = deferred(`${mxHost} deferred (${firstLine(r)})`);
+        }
+        await s.send("QUIT").catch(() => { });
+        return result;
+    }
+    catch (err) {
+        return { verdict: "WEAK", reason: `${mxHost} dropped the session (${errorCode(err) ?? errorMessage(err)})`, smtp: "dropped", catchAll: null };
+    }
+    finally {
+        s.close();
+    }
+}
+//# sourceMappingURL=smtp.js.map

package/dist/smtp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smtp.js","sourceRoot":"","sources":["../src/smtp.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,sEAAsE;AACtE,gFAAgF;AAChF,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAwB,MAAM,cAAc,CAAC;AAEpE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAEjE,4EAA4E;AAC5E,4CAA4C;AAC5C,MAAM,eAAe,GACnB,sUAAsU,CAAC;AAEzU,oFAAoF;AACpF,MAAM,CAAC,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;AAmC1G,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,IAAY,EAAyB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAEzH,6EAA6E;AAC7E,yEAAyE;AACzE,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,SAAiB;IAChE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,MAAM,MAAM,GAAY,EAAE,CAAC;QAC3B,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,IAAI,GAAiB,IAAI,CAAC;QAC9B,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,MAAM,IAAI,GAAG,CAAC,GAAU,EAAQ,EAAE;YAChC,IAAI,GAAG,IAAI,IAAI,GAAG,CAAC;YACnB,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,GAAG,MAAM,CAAC;gBACjB,MAAM,GAAG,IAAI,CAAC;gBACd,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YACD,IAAI,CAAC,SAAS;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,GAAW,CAAC;YAChB,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACrD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,MAAM,KAAK,GAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACjF,KAAK,GAAG,EAAE,CAAC;oBACX,IAAI,MAAM,EAAE,CAAC;wBACX,MAAM,CAAC,GAAG,MAAM,CAAC;wBACjB,MAAM,GAAG,IAAI,CAAC;wBACd,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBACnB,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAmB,EAAE,CAChC,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,IAAI;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,IAAI;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzC,CAAC,CAAC,CAAC;QACL,MAAM,IAAI,GAAG,CAAC,GAAW,EAAkB,EAAE;YAC3C,IAAI,IAAI;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC;YAC3B,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC1B,SAAS,GAAG,IAAI,CAAC;YACjB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,KAAY,EAAU,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7E,MAAM,OAAO,GAAG,CAAC,MAAc,EAAe,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAChH,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAe,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAElH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAa,EAAE,MAAc,EAAE,MAAc,EAAE,IAAI,GAAiB,EAAE;IACvG,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC;IAC5D,IAAI,CAAc,CAAC;IACnB,IAAI,CAAC;QACH,CAAC,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;IAClG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACjJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG;YAAE,OAAO,OAAO,CAAC,GAAG,MAAM,iBAAiB,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;YACnB,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG;gBAAE,OAAO,OAAO,CAAC,GAAG,MAAM,kBAAkB,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACjF,CAAC;QACD,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,MAAM,wBAAwB,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,MAAM,yBAAyB,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACjJ,CAAC;QACD,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC;QACvC,IAAI,MAAmB,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,MAAM,EAAE,CAAC;YACnE,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,MAAM,GAAG,CAAC,CAAC;YAC9C,MAAM;gBACJ,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG;oBAC9B,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAkB,MAAM,0DAA0D,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC5J,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACtG,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,MAAM,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,qCAAqC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACxI,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;YACzB,MAAM,GAAG,OAAO,CAAC,GAAG,MAAM,wCAAwC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrF,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,QAAQ,CAAC,GAAG,MAAM,cAAc,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,yBAAyB,SAAS,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAChJ,CAAC;YAAS,CAAC;QACT,CAAC,CAAC,KAAK,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,36 @@
+export type Action = "send" | "hold" | "kill";
+export type Verdict = "OK" | "WEAK" | "DEAD";
+/** What the SMTP tier said. `skipped` on the DNS tier. */
+export type SmtpCheck = "skipped" | "accepted" | "rejected" | "refused" | "deferred" | "unreachable" | "dropped";
+export interface Checks {
+    syntax: boolean;
+    mx: string | null;
+    smtp: SmtpCheck;
+    catch_all: boolean | null;
+}
+export interface VerifyResult {
+    email: string;
+    action: Action;
+    verdict: Verdict;
+    reason: string;
+    checks: Checks;
+}
+/** Summary counts for a batch. */
+export interface Summary {
+    send: number;
+    hold: number;
+    kill: number;
+    total: number;
+}
+export interface MxRecord {
+    exchange: string;
+    priority: number;
+}
+/** The part of `node:dns` promises the engine uses. Tests pass a fake. */
+export interface Resolver {
+    resolveMx(hostname: string): Promise<MxRecord[]>;
+    resolve4(hostname: string): Promise<string[]>;
+    resolve6(hostname: string): Promise<string[]>;
+    reverse(ip: string): Promise<string[]>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAC9C,MAAM,MAAM,OAAO,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;AAE7C,0DAA0D;AAC1D,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,aAAa,GAAG,SAAS,CAAC;AAEjH,MAAM,WAAW,MAAM;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,IAAI,EAAE,SAAS,CAAC;IAChB,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,kCAAkC;AAClC,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,0EAA0E;AAC1E,MAAM,WAAW,QAAQ;IACvB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACxC"}

package/dist/types.js

@@ -0,0 +1,8 @@
+// The verdict contract, the same in the CLI, the MCP server and the API:
+//   { email, action, verdict, reason, checks: { syntax, mx, smtp, catch_all } }
+//   action  = send | hold | kill
+//   verdict = OK   | WEAK | DEAD
+//   `hold` never becomes `kill` on a refusal, a greylist or a catch-all. Only
+//   a 5xx that names the mailbox kills.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,gFAAgF;AAChF,iCAAiC;AACjC,iCAAiC;AACjC,8EAA8E;AAC9E,wCAAwC"}

package/dist/util.d.ts

@@ -0,0 +1,6 @@
+/** Reject after `ms` with a message that names the step. */
+export declare function withTimeout<T>(promise: Promise<T>, label: string, ms: number): Promise<T>;
+/** The `code` of a Node error (ENOTFOUND, ECONNREFUSED, ...), else undefined. */
+export declare function errorCode(err: unknown): string | undefined;
+export declare function errorMessage(err: unknown): string;
+//# sourceMappingURL=util.d.ts.map

package/dist/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAMzF;AAED,iFAAiF;AACjF,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAM1D;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAEjD"}

package/dist/util.js

@@ -0,0 +1,21 @@
+/** Reject after `ms` with a message that names the step. */
+export function withTimeout(promise, label, ms) {
+    let timer;
+    const timeout = new Promise((_, reject) => {
+        timer = setTimeout(() => reject(new Error(`${label}: timed out after ${ms} ms`)), ms);
+    });
+    return Promise.race([promise, timeout]).finally(() => clearTimeout(timer));
+}
+/** The `code` of a Node error (ENOTFOUND, ECONNREFUSED, ...), else undefined. */
+export function errorCode(err) {
+    if (typeof err === "object" && err !== null && "code" in err) {
+        const code = err.code;
+        if (typeof code === "string")
+            return code;
+    }
+    return undefined;
+}
+export function errorMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=util.js.map