quidproquo-actionprocessor-awslambda 0.1.9 → 0.1.11

package/lib/esm/logic/s3/generatePresignedUploadUrl.js

@@ -31,7 +31,7 @@ import { createAwsClient } from '../createAwsClient';
 //     fields: presignedPost.fields
 //   };
 // };
-export const generatePresignedUploadUrl = async (bucketName, objectKey, region, expirationMs, correlationId, contentType) => {
+export const generatePresignedUploadUrl = async (bucketName, objectKey, region, expirationMs, correlationId, contentType, contentDisposition) => {
     // WHEN_REQUIRED disables the SDK v3 default request checksum (CRC32). Otherwise the
     // presigner bakes an empty-body checksum (x-amz-checksum-crc32=AAAAAA==) into the signed
     // URL, which never matches the real body the browser PUTs — S3 then rejects the upload and
@@ -44,6 +44,9 @@ export const generatePresignedUploadUrl = async (bucketName, objectKey, region,
         Bucket: bucketName,
         Key: objectKey,
         ContentType: contentType,
+        // Signed into the URL: the client's PUT must send the matching Content-Disposition header, and
+        // S3 stores it so later GETs serve it back (e.g. 'inline' to preview a PDF instead of downloading).
+        ContentDisposition: contentDisposition,
         Metadata: {
             ...(correlationId && { 'correlation-id': correlationId }),
             'upload-timestamp': Date.now().toString(),

package/lib/esm/logic/s3/generatePresignedUploadUrl.js.map

@@ -1 +1 @@
-{"version":3,"file":"generatePresignedUploadUrl.js","sourceRoot":"","sources":["../../../../src/logic/s3/generatePresignedUploadUrl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D,oEAAoE;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,wDAAwD;AACxD,wBAAwB;AACxB,uBAAuB;AACvB,oBAAoB;AACpB,0BAA0B;AAC1B,qCAAqC;AACrC,sCAAsC;AACtC,mEAAmE;AACnE,4DAA4D;AAE5D,kCAAkC;AAElC,8CAA8C;AAC9C,uBAAuB;AACvB,6DAA6D;AAC7D,MAAM;AAEN,iDAAiD;AACjD,wBAAwB;AACxB,kEAAkE;AAClE,MAAM;AAEN,gEAAgE;AAChE,0BAA0B;AAC1B,sBAAsB;AACtB,8BAA8B;AAC9B,gDAAgD;AAChD,QAAQ;AAER,aAAa;AACb,8BAA8B;AAC9B,mCAAmC;AACnC,OAAO;AACP,KAAK;AAEL,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,EAC7C,UAAkB,EAClB,SAAiB,EACjB,MAAc,EACd,YAAoB,EACpB,aAAsB,EACtB,WAAoB,EACH,EAAE;IACnB,oFAAoF;IACpF,yFAAyF;IACzF,2FAA2F;IAC3F,+FAA+F;IAC/F,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE;QACzC,MAAM;QACN,0BAA0B,EAAE,eAAe;KAC5C,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC;QAC5C,MAAM,EAAE,UAAU;QAClB,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,WAAW;QAExB,QAAQ,EAAE;YACR,GAAG,CAAC,aAAa,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;YACzD,kBAAkB,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;SAC1C;KACF,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,gBAAgB,EAAE;QACzD,SAAS,EAAE,YAAY,GAAG,IAAI;KAC/B,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC,CAAC","sourcesContent":["import { PutObjectCommand, S3Client } from '@aws-sdk/client-s3';\nimport { getSignedUrl } from '@aws-sdk/s3-request-presigner';\n\n// import { createPresignedPost } from '@aws-sdk/s3-presigned-post';\nimport { createAwsClient } from '../createAwsClient';\n\n// export const generatePresignedUploadFormUrl = async (\n//   bucketName: string,\n//   objectKey: string,\n//   region: string,\n//   expirationMs: number,\n//   contentType: string | undefined,\n//   maxSizeBytes?: number | undefined\n// ): Promise<{ url: string; fields: Record<string, string> }> => {\n//   const s3Client = createAwsClient(S3Client, { region });\n\n//   const conditions: any[] = [];\n\n//   // Add content type condition if provided\n//   if (contentType) {\n//     conditions.push(['eq', '$Content-Type', contentType]);\n//   }\n\n//   // Add file size limit condition if provided\n//   if (maxSizeBytes) {\n//     conditions.push(['content-length-range', 0, maxSizeBytes]);\n//   }\n\n//   const presignedPost = await createPresignedPost(s3Client, {\n//     Bucket: bucketName,\n//     Key: objectKey,\n//     Conditions: conditions,\n//     Expires: Math.floor(expirationMs / 1000),\n//   });\n\n//   return {\n//     url: presignedPost.url,\n//     fields: presignedPost.fields\n//   };\n// };\n\nexport const generatePresignedUploadUrl = async (\n  bucketName: string,\n  objectKey: string,\n  region: string,\n  expirationMs: number,\n  correlationId?: string,\n  contentType?: string,\n): Promise<string> => {\n  // WHEN_REQUIRED disables the SDK v3 default request checksum (CRC32). Otherwise the\n  // presigner bakes an empty-body checksum (x-amz-checksum-crc32=AAAAAA==) into the signed\n  // URL, which never matches the real body the browser PUTs — S3 then rejects the upload and\n  // the failure surfaces in the browser as a CORS error (the error response has no ACAO header).\n  const s3Client = createAwsClient(S3Client, {\n    region,\n    requestChecksumCalculation: 'WHEN_REQUIRED',\n  });\n\n  const putObjectCommand = new PutObjectCommand({\n    Bucket: bucketName,\n    Key: objectKey,\n    ContentType: contentType,\n\n    Metadata: {\n      ...(correlationId && { 'correlation-id': correlationId }),\n      'upload-timestamp': Date.now().toString(),\n    },\n  });\n\n  const url = await getSignedUrl(s3Client, putObjectCommand, {\n    expiresIn: expirationMs / 1000,\n  });\n\n  return url;\n};\n"]}
+{"version":3,"file":"generatePresignedUploadUrl.js","sourceRoot":"","sources":["../../../../src/logic/s3/generatePresignedUploadUrl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D,oEAAoE;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,wDAAwD;AACxD,wBAAwB;AACxB,uBAAuB;AACvB,oBAAoB;AACpB,0BAA0B;AAC1B,qCAAqC;AACrC,sCAAsC;AACtC,mEAAmE;AACnE,4DAA4D;AAE5D,kCAAkC;AAElC,8CAA8C;AAC9C,uBAAuB;AACvB,6DAA6D;AAC7D,MAAM;AAEN,iDAAiD;AACjD,wBAAwB;AACxB,kEAAkE;AAClE,MAAM;AAEN,gEAAgE;AAChE,0BAA0B;AAC1B,sBAAsB;AACtB,8BAA8B;AAC9B,gDAAgD;AAChD,QAAQ;AAER,aAAa;AACb,8BAA8B;AAC9B,mCAAmC;AACnC,OAAO;AACP,KAAK;AAEL,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,EAC7C,UAAkB,EAClB,SAAiB,EACjB,MAAc,EACd,YAAoB,EACpB,aAAsB,EACtB,WAAoB,EACpB,kBAA2B,EACV,EAAE;IACnB,oFAAoF;IACpF,yFAAyF;IACzF,2FAA2F;IAC3F,+FAA+F;IAC/F,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE;QACzC,MAAM;QACN,0BAA0B,EAAE,eAAe;KAC5C,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC;QAC5C,MAAM,EAAE,UAAU;QAClB,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,WAAW;QACxB,+FAA+F;QAC/F,oGAAoG;QACpG,kBAAkB,EAAE,kBAAkB;QAEtC,QAAQ,EAAE;YACR,GAAG,CAAC,aAAa,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;YACzD,kBAAkB,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;SAC1C;KACF,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,gBAAgB,EAAE;QACzD,SAAS,EAAE,YAAY,GAAG,IAAI;KAC/B,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC,CAAC","sourcesContent":["import { PutObjectCommand, S3Client } from '@aws-sdk/client-s3';\nimport { getSignedUrl } from '@aws-sdk/s3-request-presigner';\n\n// import { createPresignedPost } from '@aws-sdk/s3-presigned-post';\nimport { createAwsClient } from '../createAwsClient';\n\n// export const generatePresignedUploadFormUrl = async (\n//   bucketName: string,\n//   objectKey: string,\n//   region: string,\n//   expirationMs: number,\n//   contentType: string | undefined,\n//   maxSizeBytes?: number | undefined\n// ): Promise<{ url: string; fields: Record<string, string> }> => {\n//   const s3Client = createAwsClient(S3Client, { region });\n\n//   const conditions: any[] = [];\n\n//   // Add content type condition if provided\n//   if (contentType) {\n//     conditions.push(['eq', '$Content-Type', contentType]);\n//   }\n\n//   // Add file size limit condition if provided\n//   if (maxSizeBytes) {\n//     conditions.push(['content-length-range', 0, maxSizeBytes]);\n//   }\n\n//   const presignedPost = await createPresignedPost(s3Client, {\n//     Bucket: bucketName,\n//     Key: objectKey,\n//     Conditions: conditions,\n//     Expires: Math.floor(expirationMs / 1000),\n//   });\n\n//   return {\n//     url: presignedPost.url,\n//     fields: presignedPost.fields\n//   };\n// };\n\nexport const generatePresignedUploadUrl = async (\n  bucketName: string,\n  objectKey: string,\n  region: string,\n  expirationMs: number,\n  correlationId?: string,\n  contentType?: string,\n  contentDisposition?: string,\n): Promise<string> => {\n  // WHEN_REQUIRED disables the SDK v3 default request checksum (CRC32). Otherwise the\n  // presigner bakes an empty-body checksum (x-amz-checksum-crc32=AAAAAA==) into the signed\n  // URL, which never matches the real body the browser PUTs — S3 then rejects the upload and\n  // the failure surfaces in the browser as a CORS error (the error response has no ACAO header).\n  const s3Client = createAwsClient(S3Client, {\n    region,\n    requestChecksumCalculation: 'WHEN_REQUIRED',\n  });\n\n  const putObjectCommand = new PutObjectCommand({\n    Bucket: bucketName,\n    Key: objectKey,\n    ContentType: contentType,\n    // Signed into the URL: the client's PUT must send the matching Content-Disposition header, and\n    // S3 stores it so later GETs serve it back (e.g. 'inline' to preview a PDF instead of downloading).\n    ContentDisposition: contentDisposition,\n\n    Metadata: {\n      ...(correlationId && { 'correlation-id': correlationId }),\n      'upload-timestamp': Date.now().toString(),\n    },\n  });\n\n  const url = await getSignedUrl(s3Client, putObjectCommand, {\n    expiresIn: expirationMs / 1000,\n  });\n\n  return url;\n};\n"]}

package/lib/esm/logic/sesV2/buildRawMimeMessage.d.ts

@@ -0,0 +1,2 @@
+import { EmailSendEmailActionPayload } from 'quidproquo-webserver';
+export declare const buildRawMimeMessage: (payload: EmailSendEmailActionPayload, boundarySeed?: string) => string;

package/lib/esm/logic/sesV2/buildRawMimeMessage.js

@@ -0,0 +1,74 @@
+const CRLF = '\r\n';
+// Header values must never contain CR/LF, or a caller-supplied string could inject extra headers
+const sanitizeHeaderValue = (value) => value.replace(/[\r\n]+/g, ' ').trim();
+// RFC 2047 encoded-word for header text that isn't printable ascii (e.g. subjects with emoji)
+const encodeHeaderText = (value) => {
+    const sanitized = sanitizeHeaderValue(value);
+    if (/^[\x20-\x7e]*$/.test(sanitized)) {
+        return sanitized;
+    }
+    return `=?UTF-8?B?${Buffer.from(sanitized, 'utf8').toString('base64')}?=`;
+};
+// RFC 2045 requires base64 body lines of at most 76 characters
+const wrapBase64 = (base64Data) => {
+    const lines = base64Data.match(/.{1,76}/g) || [];
+    return lines.join(CRLF);
+};
+const buildBodyPart = (contentType, content, boundary) => [
+    `--${boundary}`,
+    `Content-Type: ${contentType}; charset=UTF-8`,
+    'Content-Transfer-Encoding: base64',
+    '',
+    wrapBase64(Buffer.from(content, 'utf8').toString('base64')),
+];
+const buildAttachmentPart = (attachment, boundary) => {
+    const filename = encodeHeaderText(attachment.filename);
+    const contentDisposition = attachment.contentDisposition
+        ? sanitizeHeaderValue(attachment.contentDisposition)
+        : `attachment; filename="${filename}"`;
+    return [
+        `--${boundary}`,
+        `Content-Type: ${sanitizeHeaderValue(attachment.mimetype || 'application/octet-stream')}; name="${filename}"`,
+        'Content-Transfer-Encoding: base64',
+        `Content-Disposition: ${contentDisposition}`,
+        '',
+        wrapBase64(attachment.base64Data),
+    ];
+};
+// Builds an RFC 5322 message: multipart/mixed wrapping a multipart/alternative body plus one
+// part per attachment. Bcc recipients are deliberately never written into the headers; they
+// travel only in the SES Destination so other recipients can't see them. boundarySeed exists
+// so tests get deterministic output.
+export const buildRawMimeMessage = (payload, boundarySeed = 'qpq') => {
+    const mixedBoundary = `----=_${boundarySeed}_mixed`;
+    const alternativeBoundary = `----=_${boundarySeed}_alternative`;
+    const headers = [
+        `From: ${encodeHeaderText(payload.from)}`,
+        `To: ${payload.to.map(encodeHeaderText).join(', ')}`,
+        ...(payload.cc?.length ? [`Cc: ${payload.cc.map(encodeHeaderText).join(', ')}`] : []),
+        ...(payload.replyTo?.length ? [`Reply-To: ${payload.replyTo.map(encodeHeaderText).join(', ')}`] : []),
+        `Subject: ${encodeHeaderText(payload.subject)}`,
+        'MIME-Version: 1.0',
+        `Content-Type: multipart/mixed; boundary="${mixedBoundary}"`,
+    ];
+    const bodyParts = [
+        ...(payload.bodyText ? buildBodyPart('text/plain', payload.bodyText, alternativeBoundary) : []),
+        ...(payload.bodyHtml ? buildBodyPart('text/html', payload.bodyHtml, alternativeBoundary) : []),
+    ];
+    const attachmentParts = (payload.attachments || []).flatMap((attachment) => buildAttachmentPart(attachment, mixedBoundary));
+    const lines = [
+        ...headers,
+        '',
+        `--${mixedBoundary}`,
+        `Content-Type: multipart/alternative; boundary="${alternativeBoundary}"`,
+        '',
+        ...bodyParts,
+        `--${alternativeBoundary}--`,
+        '',
+        ...attachmentParts,
+        `--${mixedBoundary}--`,
+        '',
+    ];
+    return lines.join(CRLF);
+};
+//# sourceMappingURL=buildRawMimeMessage.js.map

package/lib/esm/logic/sesV2/buildRawMimeMessage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildRawMimeMessage.js","sourceRoot":"","sources":["../../../../src/logic/sesV2/buildRawMimeMessage.ts"],"names":[],"mappings":"AAGA,MAAM,IAAI,GAAG,MAAM,CAAC;AAEpB,iGAAiG;AACjG,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAE7F,8FAA8F;AAC9F,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAU,EAAE;IACjD,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE7C,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,aAAa,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;AAC5E,CAAC,CAAC;AAEF,+DAA+D;AAC/D,MAAM,UAAU,GAAG,CAAC,UAAkB,EAAU,EAAE;IAChD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAEjD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,WAAmB,EAAE,OAAe,EAAE,QAAgB,EAAY,EAAE,CAAC;IAC1F,KAAK,QAAQ,EAAE;IACf,iBAAiB,WAAW,iBAAiB;IAC7C,mCAAmC;IACnC,EAAE;IACF,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;CAC5D,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,UAAyB,EAAE,QAAgB,EAAY,EAAE;IACpF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,kBAAkB,GAAG,UAAU,CAAC,kBAAkB;QACtD,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,kBAAkB,CAAC;QACpD,CAAC,CAAC,yBAAyB,QAAQ,GAAG,CAAC;IAEzC,OAAO;QACL,KAAK,QAAQ,EAAE;QACf,iBAAiB,mBAAmB,CAAC,UAAU,CAAC,QAAQ,IAAI,0BAA0B,CAAC,WAAW,QAAQ,GAAG;QAC7G,mCAAmC;QACnC,wBAAwB,kBAAkB,EAAE;QAC5C,EAAE;QACF,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;KAClC,CAAC;AACJ,CAAC,CAAC;AAEF,6FAA6F;AAC7F,4FAA4F;AAC5F,6FAA6F;AAC7F,qCAAqC;AACrC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAoC,EAAE,eAAuB,KAAK,EAAU,EAAE;IAChH,MAAM,aAAa,GAAG,SAAS,YAAY,QAAQ,CAAC;IACpD,MAAM,mBAAmB,GAAG,SAAS,YAAY,cAAc,CAAC;IAEhE,MAAM,OAAO,GAAG;QACd,SAAS,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QACzC,OAAO,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACpD,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,YAAY,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;QAC/C,mBAAmB;QACnB,4CAA4C,aAAa,GAAG;KAC7D,CAAC;IAEF,MAAM,SAAS,GAAG;QAChB,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/F,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;IAE5H,MAAM,KAAK,GAAG;QACZ,GAAG,OAAO;QACV,EAAE;QACF,KAAK,aAAa,EAAE;QACpB,kDAAkD,mBAAmB,GAAG;QACxE,EAAE;QACF,GAAG,SAAS;QACZ,KAAK,mBAAmB,IAAI;QAC5B,EAAE;QACF,GAAG,eAAe;QAClB,KAAK,aAAa,IAAI;QACtB,EAAE;KACH,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC,CAAC","sourcesContent":["import { QPQBinaryData } from 'quidproquo-core';\nimport { EmailSendEmailActionPayload } from 'quidproquo-webserver';\n\nconst CRLF = '\\r\\n';\n\n// Header values must never contain CR/LF, or a caller-supplied string could inject extra headers\nconst sanitizeHeaderValue = (value: string): string => value.replace(/[\\r\\n]+/g, ' ').trim();\n\n// RFC 2047 encoded-word for header text that isn't printable ascii (e.g. subjects with emoji)\nconst encodeHeaderText = (value: string): string => {\n  const sanitized = sanitizeHeaderValue(value);\n\n  if (/^[\\x20-\\x7e]*$/.test(sanitized)) {\n    return sanitized;\n  }\n\n  return `=?UTF-8?B?${Buffer.from(sanitized, 'utf8').toString('base64')}?=`;\n};\n\n// RFC 2045 requires base64 body lines of at most 76 characters\nconst wrapBase64 = (base64Data: string): string => {\n  const lines = base64Data.match(/.{1,76}/g) || [];\n\n  return lines.join(CRLF);\n};\n\nconst buildBodyPart = (contentType: string, content: string, boundary: string): string[] => [\n  `--${boundary}`,\n  `Content-Type: ${contentType}; charset=UTF-8`,\n  'Content-Transfer-Encoding: base64',\n  '',\n  wrapBase64(Buffer.from(content, 'utf8').toString('base64')),\n];\n\nconst buildAttachmentPart = (attachment: QPQBinaryData, boundary: string): string[] => {\n  const filename = encodeHeaderText(attachment.filename);\n  const contentDisposition = attachment.contentDisposition\n    ? sanitizeHeaderValue(attachment.contentDisposition)\n    : `attachment; filename=\"${filename}\"`;\n\n  return [\n    `--${boundary}`,\n    `Content-Type: ${sanitizeHeaderValue(attachment.mimetype || 'application/octet-stream')}; name=\"${filename}\"`,\n    'Content-Transfer-Encoding: base64',\n    `Content-Disposition: ${contentDisposition}`,\n    '',\n    wrapBase64(attachment.base64Data),\n  ];\n};\n\n// Builds an RFC 5322 message: multipart/mixed wrapping a multipart/alternative body plus one\n// part per attachment. Bcc recipients are deliberately never written into the headers; they\n// travel only in the SES Destination so other recipients can't see them. boundarySeed exists\n// so tests get deterministic output.\nexport const buildRawMimeMessage = (payload: EmailSendEmailActionPayload, boundarySeed: string = 'qpq'): string => {\n  const mixedBoundary = `----=_${boundarySeed}_mixed`;\n  const alternativeBoundary = `----=_${boundarySeed}_alternative`;\n\n  const headers = [\n    `From: ${encodeHeaderText(payload.from)}`,\n    `To: ${payload.to.map(encodeHeaderText).join(', ')}`,\n    ...(payload.cc?.length ? [`Cc: ${payload.cc.map(encodeHeaderText).join(', ')}`] : []),\n    ...(payload.replyTo?.length ? [`Reply-To: ${payload.replyTo.map(encodeHeaderText).join(', ')}`] : []),\n    `Subject: ${encodeHeaderText(payload.subject)}`,\n    'MIME-Version: 1.0',\n    `Content-Type: multipart/mixed; boundary=\"${mixedBoundary}\"`,\n  ];\n\n  const bodyParts = [\n    ...(payload.bodyText ? buildBodyPart('text/plain', payload.bodyText, alternativeBoundary) : []),\n    ...(payload.bodyHtml ? buildBodyPart('text/html', payload.bodyHtml, alternativeBoundary) : []),\n  ];\n\n  const attachmentParts = (payload.attachments || []).flatMap((attachment) => buildAttachmentPart(attachment, mixedBoundary));\n\n  const lines = [\n    ...headers,\n    '',\n    `--${mixedBoundary}`,\n    `Content-Type: multipart/alternative; boundary=\"${alternativeBoundary}\"`,\n    '',\n    ...bodyParts,\n    `--${alternativeBoundary}--`,\n    '',\n    ...attachmentParts,\n    `--${mixedBoundary}--`,\n    '',\n  ];\n\n  return lines.join(CRLF);\n};\n"]}

package/lib/esm/logic/sesV2/sendEmail.d.ts

@@ -0,0 +1,2 @@
+import { EmailSendEmailActionPayload } from 'quidproquo-webserver';
+export declare const sendEmail: (payload: EmailSendEmailActionPayload, region: string) => Promise<string>;

package/lib/esm/logic/sesV2/sendEmail.js

@@ -0,0 +1,37 @@
+import { SendEmailCommand, SESv2Client } from '@aws-sdk/client-sesv2';
+import { createAwsClient } from '../createAwsClient';
+import { buildRawMimeMessage } from './buildRawMimeMessage';
+// SES Simple content can't carry attachments, so those emails go through the raw MIME path.
+// Either way the recipients come from Destination below, which is what keeps bcc addresses
+// out of the message the recipients see.
+const getEmailContent = (payload) => {
+    if (payload.attachments?.length) {
+        return {
+            Raw: { Data: new TextEncoder().encode(buildRawMimeMessage(payload)) },
+        };
+    }
+    return {
+        Simple: {
+            Subject: { Data: payload.subject, Charset: 'UTF-8' },
+            Body: {
+                ...(payload.bodyText ? { Text: { Data: payload.bodyText, Charset: 'UTF-8' } } : {}),
+                ...(payload.bodyHtml ? { Html: { Data: payload.bodyHtml, Charset: 'UTF-8' } } : {}),
+            },
+        },
+    };
+};
+export const sendEmail = async (payload, region) => {
+    const sesClient = createAwsClient(SESv2Client, { region });
+    const response = await sesClient.send(new SendEmailCommand({
+        FromEmailAddress: payload.from,
+        Destination: {
+            ToAddresses: payload.to,
+            CcAddresses: payload.cc,
+            BccAddresses: payload.bcc,
+        },
+        ReplyToAddresses: payload.replyTo,
+        Content: getEmailContent(payload),
+    }));
+    return response.MessageId || '';
+};
+//# sourceMappingURL=sendEmail.js.map

package/lib/esm/logic/sesV2/sendEmail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sendEmail.js","sourceRoot":"","sources":["../../../../src/logic/sesV2/sendEmail.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,gBAAgB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpF,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,4FAA4F;AAC5F,2FAA2F;AAC3F,yCAAyC;AACzC,MAAM,eAAe,GAAG,CAAC,OAAoC,EAAgB,EAAE;IAC7E,IAAI,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAChC,OAAO;YACL,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,EAAE;SACtE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE;YACN,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE;YACpD,IAAI,EAAE;gBACJ,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpF;SACF;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,OAAoC,EAAE,MAAc,EAAmB,EAAE;IACvG,MAAM,SAAS,GAAG,eAAe,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAE3D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CACnC,IAAI,gBAAgB,CAAC;QACnB,gBAAgB,EAAE,OAAO,CAAC,IAAI;QAC9B,WAAW,EAAE;YACX,WAAW,EAAE,OAAO,CAAC,EAAE;YACvB,WAAW,EAAE,OAAO,CAAC,EAAE;YACvB,YAAY,EAAE,OAAO,CAAC,GAAG;SAC1B;QACD,gBAAgB,EAAE,OAAO,CAAC,OAAO;QACjC,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC;KAClC,CAAC,CACH,CAAC;IAEF,OAAO,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC;AAClC,CAAC,CAAC","sourcesContent":["import { EmailSendEmailActionPayload } from 'quidproquo-webserver';\n\nimport { EmailContent, SendEmailCommand, SESv2Client } from '@aws-sdk/client-sesv2';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { buildRawMimeMessage } from './buildRawMimeMessage';\n\n// SES Simple content can't carry attachments, so those emails go through the raw MIME path.\n// Either way the recipients come from Destination below, which is what keeps bcc addresses\n// out of the message the recipients see.\nconst getEmailContent = (payload: EmailSendEmailActionPayload): EmailContent => {\n  if (payload.attachments?.length) {\n    return {\n      Raw: { Data: new TextEncoder().encode(buildRawMimeMessage(payload)) },\n    };\n  }\n\n  return {\n    Simple: {\n      Subject: { Data: payload.subject, Charset: 'UTF-8' },\n      Body: {\n        ...(payload.bodyText ? { Text: { Data: payload.bodyText, Charset: 'UTF-8' } } : {}),\n        ...(payload.bodyHtml ? { Html: { Data: payload.bodyHtml, Charset: 'UTF-8' } } : {}),\n      },\n    },\n  };\n};\n\nexport const sendEmail = async (payload: EmailSendEmailActionPayload, region: string): Promise<string> => {\n  const sesClient = createAwsClient(SESv2Client, { region });\n\n  const response = await sesClient.send(\n    new SendEmailCommand({\n      FromEmailAddress: payload.from,\n      Destination: {\n        ToAddresses: payload.to,\n        CcAddresses: payload.cc,\n        BccAddresses: payload.bcc,\n      },\n      ReplyToAddresses: payload.replyTo,\n      Content: getEmailContent(payload),\n    }),\n  );\n\n  return response.MessageId || '';\n};\n"]}