sently 0.4.6 → 0.5.1

package/dist/transports/ses.js

@@ -1,253 +1,7 @@
-import {
-  buildMIME
-} from "../chunk-x3szga4k.js";
-import {
-  extractEmails,
-  parseAddresses,
-  resolveAttachments,
-  toMIMEHeader
-} from "../chunk-f4c9ttmr.js";
-import {
-  encodeBase64
-} from "../chunk-794hc3m4.js";
-import"../chunk-v0bahtg2.js";
-
-// src/core/sigv4.ts
-var encoder = new TextEncoder;
-async function sha256Hex(data) {
-  const hash = await crypto.subtle.digest("SHA-256", encoder.encode(data));
-  return bytesToHex(new Uint8Array(hash));
-}
-async function hmacSHA256(key, data) {
-  const keyBytes = typeof key === "string" ? encoder.encode(key) : new Uint8Array(key);
-  const cryptoKey = await crypto.subtle.importKey("raw", keyBytes, { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
-  const signature = await crypto.subtle.sign("HMAC", cryptoKey, encoder.encode(data));
-  return new Uint8Array(signature);
-}
-async function signRequest(request) {
-  const { method, url, body, credentials } = request;
-  const parsed = new URL(url);
-  const amzDate = request._date ?? `${new Date().toISOString().replace(/[-:]/g, "").slice(0, 15)}Z`;
-  const dateStamp = amzDate.slice(0, 8);
-  const headers = {
-    ...Object.fromEntries(Object.entries(request.headers).map(([key, value]) => [key.toLowerCase(), value.trim()])),
-    host: parsed.host,
-    "x-amz-date": amzDate
-  };
-  if (credentials.sessionToken) {
-    headers["x-amz-security-token"] = credentials.sessionToken;
-  }
-  const signedHeaderNames = Object.keys(headers).map((name) => name.toLowerCase()).sort();
-  const signedHeaders = signedHeaderNames.join(";");
-  const canonicalHeaders = `${signedHeaderNames.map((name) => `${name}:${headers[name]}`).join(`
+import{k as A}from"../chunk-nhec1319.js";import{l as k}from"../chunk-cvmk9h1r.js";import{n as x,o as R,p as P}from"../chunk-kdqxhybf.js";import{G as T}from"../chunk-32dj0v9g.js";import"../chunk-rhade81v.js";var M=new TextEncoder;async function z(C){let F=await crypto.subtle.digest("SHA-256",M.encode(C));return K(new Uint8Array(F))}async function W(C,F){let J=typeof C==="string"?M.encode(C):new Uint8Array(C),L=await crypto.subtle.importKey("raw",J,{name:"HMAC",hash:"SHA-256"},!1,["sign"]),G=await crypto.subtle.sign("HMAC",L,M.encode(F));return new Uint8Array(G)}async function j(C){let{method:F,url:J,body:L,credentials:G}=C,X=new URL(J),Y=C._date??`${new Date().toISOString().replace(/[-:]/g,"").slice(0,15)}Z`,U=Y.slice(0,8),Z={...Object.fromEntries(Object.entries(C.headers).map(([O,E])=>[O.toLowerCase(),E.trim()])),host:X.host,"x-amz-date":Y};if(G.sessionToken)Z["x-amz-security-token"]=G.sessionToken;let $=Object.keys(Z).map((O)=>O.toLowerCase()).sort(),N=$.join(";"),_=`${$.map((O)=>`${O}:${Z[O]}`).join(`
 `)}
-`;
-  const canonicalQuery = normalizeQuery(parsed.searchParams);
-  const payloadHash = await sha256Hex(body);
-  const canonicalRequest = [
-    method.toUpperCase(),
-    canonicalUri(parsed.pathname),
-    canonicalQuery,
-    canonicalHeaders,
-    signedHeaders,
-    payloadHash
-  ].join(`
-`);
-  const credentialScope = `${dateStamp}/${credentials.region}/${credentials.service}/aws4_request`;
-  const stringToSign = [
-    "AWS4-HMAC-SHA256",
-    amzDate,
-    credentialScope,
-    await sha256Hex(canonicalRequest)
-  ].join(`
-`);
-  const signingKey = await deriveSigningKey(credentials.secretAccessKey, dateStamp, credentials.region, credentials.service);
-  const signature = bytesToHex(await hmacSHA256(signingKey, stringToSign));
-  const authorization = [
-    `AWS4-HMAC-SHA256 Credential=${credentials.accessKeyId}/${credentialScope}`,
-    `SignedHeaders=${signedHeaders}`,
-    `Signature=${signature}`
-  ].join(", ");
-  return {
-    headers: {
-      ...headers,
-      Authorization: authorization
-    }
-  };
-}
-async function deriveSigningKey(secretAccessKey, dateStamp, region, service) {
-  const kDate = await hmacSHA256(`AWS4${secretAccessKey}`, dateStamp);
-  const kRegion = await hmacSHA256(kDate, region);
-  const kService = await hmacSHA256(kRegion, service);
-  return hmacSHA256(kService, "aws4_request");
-}
-function canonicalUri(pathname) {
-  if (!pathname || pathname === "/") {
-    return "/";
-  }
-  return pathname.split("/").map((segment) => encodeURIComponent(decodeURIComponent(segment))).join("/");
-}
-function normalizeQuery(searchParams) {
-  const pairs = [];
-  for (const [key, value] of searchParams.entries()) {
-    pairs.push(`${encodeRfc3986(key)}=${encodeRfc3986(value)}`);
-  }
-  pairs.sort();
-  return pairs.join("&");
-}
-function encodeRfc3986(value) {
-  return encodeURIComponent(value).replace(/[!'()*]/g, (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`);
-}
-function bytesToHex(bytes) {
-  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
-}
-
-// src/transports/ses.ts
-class SESError extends Error {
-  statusCode;
-  code;
-  requestId;
-  constructor(message, statusCode, code, requestId) {
-    super(message);
-    this.statusCode = statusCode;
-    this.code = code;
-    this.requestId = requestId;
-    this.name = "SESError";
-  }
-}
-
-class SESTransport {
-  accessKeyId;
-  secretAccessKey;
-  region;
-  sessionToken;
-  dkim;
-  constructor(config) {
-    this.accessKeyId = config.accessKeyId;
-    this.secretAccessKey = config.secretAccessKey;
-    this.region = config.region ?? "us-east-1";
-    this.sessionToken = config.sessionToken;
-    this.dkim = config.dkim;
-  }
-  async send(options) {
-    const attachments = await resolveAttachments(options.attachments);
-    const resolvedOptions = { ...options, attachments };
-    const from = parseAddresses(options.from)[0];
-    const fromEmail = from ? toMIMEHeader(from) : "";
-    const toEmails = extractEmails(options.to);
-    const ccEmails = options.cc ? extractEmails(options.cc) : [];
-    const bccEmails = options.bcc ? extractEmails(options.bcc) : [];
-    const destination = {
-      ToAddresses: toEmails,
-      CcAddresses: ccEmails,
-      BccAddresses: bccEmails
-    };
-    let requestBody;
-    if (attachments.length > 0) {
-      const mime = await buildMIME(resolvedOptions, this.dkim);
-      requestBody = {
-        FromEmailAddress: fromEmail,
-        Destination: destination,
-        Content: {
-          Raw: {
-            Data: encodeBase64(mime.raw).replace(/\r\n/g, "")
-          }
-        }
-      };
-    } else {
-      requestBody = {
-        FromEmailAddress: fromEmail,
-        Destination: destination,
-        Content: {
-          Simple: {
-            Subject: { Data: options.subject, Charset: "UTF-8" },
-            Body: {
-              ...options.text ? { Text: { Data: options.text, Charset: "UTF-8" } } : {},
-              ...options.html ? { Html: { Data: options.html, Charset: "UTF-8" } } : {}
-            }
-          }
-        }
-      };
-    }
-    const body = JSON.stringify(requestBody);
-    const url = `https://email.${this.region}.amazonaws.com/v2/email/outbound-emails`;
-    const signed = await signRequest({
-      method: "POST",
-      url,
-      headers: {
-        "content-type": "application/json"
-      },
-      body,
-      credentials: {
-        accessKeyId: this.accessKeyId,
-        secretAccessKey: this.secretAccessKey,
-        region: this.region,
-        service: "ses",
-        ...this.sessionToken ? { sessionToken: this.sessionToken } : {}
-      }
-    });
-    const response = await fetch(url, {
-      method: "POST",
-      headers: signed.headers,
-      body
-    });
-    const payload = await response.json();
-    if (!response.ok) {
-      throw new SESError(payload.message ?? "SES API error", response.status, payload.Code ?? "", response.headers.get("x-amzn-requestid") ?? "");
-    }
-    const messageId = payload.MessageId ?? "";
-    return {
-      messageId,
-      accepted: [...toEmails, ...ccEmails, ...bccEmails],
-      rejected: [],
-      response: `MessageId: ${messageId}`,
-      envelope: {
-        from: from?.address ?? "",
-        to: toEmails
-      }
-    };
-  }
-  async verify() {
-    try {
-      const url = `https://email.${this.region}.amazonaws.com/v2/email/configuration-sets`;
-      const signed = await signRequest({
-        method: "GET",
-        url,
-        headers: {},
-        body: "",
-        credentials: {
-          accessKeyId: this.accessKeyId,
-          secretAccessKey: this.secretAccessKey,
-          region: this.region,
-          service: "ses",
-          ...this.sessionToken ? { sessionToken: this.sessionToken } : {}
-        }
-      });
-      const response = await fetch(url, {
-        method: "GET",
-        headers: signed.headers
-      });
-      const payload = await response.json().catch(() => ({}));
-      if (!response.ok) {
-        return {
-          ok: false,
-          provider: "ses",
-          message: payload.message ?? `HTTP ${response.status}`
-        };
-      }
-      return { ok: true, provider: "ses", message: "Credentials are valid" };
-    } catch (err) {
-      return {
-        ok: false,
-        provider: "ses",
-        message: err instanceof Error ? err.message : String(err)
-      };
-    }
-  }
-}
-export {
-  SESTransport,
-  SESError
-};
+`,D=h(X.searchParams),w=await z(L),Q=[F.toUpperCase(),S(X.pathname),D,_,N,w].join(`
+`),V=`${U}/${G.region}/${G.service}/aws4_request`,I=["AWS4-HMAC-SHA256",Y,V,await z(Q)].join(`
+`),b=await f(G.secretAccessKey,U,G.region,G.service),q=K(await W(b,I)),H=[`AWS4-HMAC-SHA256 Credential=${G.accessKeyId}/${V}`,`SignedHeaders=${N}`,`Signature=${q}`].join(", ");return{headers:{...Z,Authorization:H}}}async function f(C,F,J,L){let G=await W(`AWS4${C}`,F),X=await W(G,J),Y=await W(X,L);return W(Y,"aws4_request")}function S(C){if(!C||C==="/")return"/";return C.split("/").map((F)=>encodeURIComponent(decodeURIComponent(F))).join("/")}function h(C){let F=[];for(let[J,L]of C.entries())F.push(`${B(J)}=${B(L)}`);return F.sort(),F.join("&")}function B(C){return encodeURIComponent(C).replace(/[!'()*]/g,(F)=>`%${F.charCodeAt(0).toString(16).toUpperCase()}`)}function K(C){return Array.from(C,(F)=>F.toString(16).padStart(2,"0")).join("")}class v extends Error{statusCode;code;requestId;constructor(C,F,J,L){super(C);this.statusCode=F;this.code=J;this.requestId=L;this.name="SESError"}}class u{accessKeyId;secretAccessKey;region;sessionToken;dkim;constructor(C){this.accessKeyId=C.accessKeyId,this.secretAccessKey=C.secretAccessKey,this.region=C.region??"us-east-1",this.sessionToken=C.sessionToken,this.dkim=C.dkim}async send(C){let F=await k(C.attachments),J={...C,attachments:F},L=x(C.from)[0],G=L?R(L):"",X=P(C.to),Y=C.cc?P(C.cc):[],U=C.bcc?P(C.bcc):[],Z={ToAddresses:X,CcAddresses:Y,BccAddresses:U},$;if(F.length>0){let I=await A(J,this.dkim);$={FromEmailAddress:G,Destination:Z,Content:{Raw:{Data:T(I.raw).replace(/\r\n/g,"")}}}}else $={FromEmailAddress:G,Destination:Z,Content:{Simple:{Subject:{Data:C.subject,Charset:"UTF-8"},Body:{...C.text?{Text:{Data:C.text,Charset:"UTF-8"}}:{},...C.html?{Html:{Data:C.html,Charset:"UTF-8"}}:{}}}}};let N=JSON.stringify($),_=`https://email.${this.region}.amazonaws.com/v2/email/outbound-emails`,D=await j({method:"POST",url:_,headers:{"content-type":"application/json"},body:N,credentials:{accessKeyId:this.accessKeyId,secretAccessKey:this.secretAccessKey,region:this.region,service:"ses",...this.sessionToken?{sessionToken:this.sessionToken}:{}}}),w=await fetch(_,{method:"POST",headers:D.headers,body:N}),Q=await w.json();if(!w.ok)throw new v(Q.message??"SES API error",w.status,Q.Code??"",w.headers.get("x-amzn-requestid")??"");let V=Q.MessageId??"";return{messageId:V,accepted:[...X,...Y,...U],rejected:[],response:`MessageId: ${V}`,envelope:{from:L?.address??"",to:X}}}async verify(){try{let C=`https://email.${this.region}.amazonaws.com/v2/email/configuration-sets`,F=await j({method:"GET",url:C,headers:{},body:"",credentials:{accessKeyId:this.accessKeyId,secretAccessKey:this.secretAccessKey,region:this.region,service:"ses",...this.sessionToken?{sessionToken:this.sessionToken}:{}}}),J=await fetch(C,{method:"GET",headers:F.headers}),L=await J.json().catch(()=>({}));if(!J.ok)return{ok:!1,provider:"ses",message:L.message??`HTTP ${J.status}`};return{ok:!0,provider:"ses",message:"Credentials are valid"}}catch(C){return{ok:!1,provider:"ses",message:C instanceof Error?C.message:String(C)}}}}export{u as SESTransport,v as SESError};
 
-//# debugId=E3DA50CEC668691D64756E2164756E21
+//# debugId=40DB8C49111C4E7964756E2164756E21

package/dist/transports/ses.js.map

@@ -5,7 +5,7 @@
     "/**\n * @module\n * AWS Signature Version 4 signing using Web Crypto (HMAC-SHA256).\n * Works on Node.js, Bun, Deno, and Cloudflare Workers.\n * No external dependencies.\n *\n * @example\n * ```ts\n * import { signRequest } from \"sently/core/sigv4\";\n * const signed = await signRequest({\n *   method: \"POST\",\n *   url: \"https://email.us-east-1.amazonaws.com/v2/email/outbound-emails\",\n *   headers: { \"content-type\": \"application/json\" },\n *   body: '{\"...\"}',\n *   credentials: { accessKeyId, secretAccessKey, region: \"us-east-1\", service: \"ses\" },\n * });\n * ```\n */\n\n/** AWS credentials and signing scope for SigV4. */\nexport interface SigV4Credentials {\n  /** AWS access key ID. */\n  accessKeyId: string;\n  /** AWS secret access key. */\n  secretAccessKey: string;\n  /** AWS region (e.g. `us-east-1`). */\n  region: string;\n  /** AWS service name (e.g. `ses`, `s3`). */\n  service: string;\n  /** Optional STS session token for temporary credentials. */\n  sessionToken?: string;\n}\n\n/** HTTP request to sign with AWS Signature Version 4. */\nexport interface SigV4Request {\n  /** HTTP method (e.g. `POST`). */\n  method: string;\n  /** Full request URL including path and query. */\n  url: string;\n  /** Request headers to include in the signature. */\n  headers: Record<string, string>;\n  /** Request body as a string (empty for GET). */\n  body: string;\n  /** AWS credentials and signing scope. */\n  credentials: SigV4Credentials;\n  /** Override datetime for testing. Full 'YYYYMMDDTHHMMSSZ' when provided. */\n  _date?: string;\n}\n\n/** Signed request headers including Authorization. */\nexport interface SigV4Result {\n  /** All headers including Authorization, x-amz-date, and x-amz-security-token */\n  headers: Record<string, string>;\n}\n\nconst encoder = new TextEncoder();\n\n/**\n * Compute SHA-256 hash of a string using Web Crypto.\n * Returns lowercase hex string.\n * @internal\n */\nexport async function sha256Hex(data: string): Promise<string> {\n  const hash = await crypto.subtle.digest(\"SHA-256\", encoder.encode(data));\n  return bytesToHex(new Uint8Array(hash));\n}\n\n/**\n * Compute HMAC-SHA256 using Web Crypto.\n * @internal\n */\nexport async function hmacSHA256(key: Uint8Array | string, data: string): Promise<Uint8Array> {\n  const keyBytes = typeof key === \"string\" ? encoder.encode(key) : new Uint8Array(key);\n  const cryptoKey = await crypto.subtle.importKey(\n    \"raw\",\n    keyBytes,\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n  const signature = await crypto.subtle.sign(\"HMAC\", cryptoKey, encoder.encode(data));\n  return new Uint8Array(signature);\n}\n\n/**\n * Sign an HTTP request with AWS Signature Version 4.\n * Returns the complete set of headers to include in the request.\n */\nexport async function signRequest(request: SigV4Request): Promise<SigV4Result> {\n  const { method, url, body, credentials } = request;\n  const parsed = new URL(url);\n  const amzDate = request._date ?? `${new Date().toISOString().replace(/[-:]/g, \"\").slice(0, 15)}Z`;\n  const dateStamp = amzDate.slice(0, 8);\n\n  const headers: Record<string, string> = {\n    ...Object.fromEntries(\n      Object.entries(request.headers).map(([key, value]) => [key.toLowerCase(), value.trim()]),\n    ),\n    host: parsed.host,\n    \"x-amz-date\": amzDate,\n  };\n\n  if (credentials.sessionToken) {\n    headers[\"x-amz-security-token\"] = credentials.sessionToken;\n  }\n\n  const signedHeaderNames = Object.keys(headers)\n    .map((name) => name.toLowerCase())\n    .sort();\n  const signedHeaders = signedHeaderNames.join(\";\");\n  const canonicalHeaders = `${signedHeaderNames.map((name) => `${name}:${headers[name]}`).join(\"\\n\")}\\n`;\n  const canonicalQuery = normalizeQuery(parsed.searchParams);\n  const payloadHash = await sha256Hex(body);\n  const canonicalRequest = [\n    method.toUpperCase(),\n    canonicalUri(parsed.pathname),\n    canonicalQuery,\n    canonicalHeaders,\n    signedHeaders,\n    payloadHash,\n  ].join(\"\\n\");\n\n  const credentialScope = `${dateStamp}/${credentials.region}/${credentials.service}/aws4_request`;\n  const stringToSign = [\n    \"AWS4-HMAC-SHA256\",\n    amzDate,\n    credentialScope,\n    await sha256Hex(canonicalRequest),\n  ].join(\"\\n\");\n\n  const signingKey = await deriveSigningKey(\n    credentials.secretAccessKey,\n    dateStamp,\n    credentials.region,\n    credentials.service,\n  );\n  const signature = bytesToHex(await hmacSHA256(signingKey, stringToSign));\n  const authorization = [\n    `AWS4-HMAC-SHA256 Credential=${credentials.accessKeyId}/${credentialScope}`,\n    `SignedHeaders=${signedHeaders}`,\n    `Signature=${signature}`,\n  ].join(\", \");\n\n  return {\n    headers: {\n      ...headers,\n      Authorization: authorization,\n    },\n  };\n}\n\nasync function deriveSigningKey(\n  secretAccessKey: string,\n  dateStamp: string,\n  region: string,\n  service: string,\n): Promise<Uint8Array> {\n  const kDate = await hmacSHA256(`AWS4${secretAccessKey}`, dateStamp);\n  const kRegion = await hmacSHA256(kDate, region);\n  const kService = await hmacSHA256(kRegion, service);\n  return hmacSHA256(kService, \"aws4_request\");\n}\n\nfunction canonicalUri(pathname: string): string {\n  if (!pathname || pathname === \"/\") {\n    return \"/\";\n  }\n  return pathname\n    .split(\"/\")\n    .map((segment) => encodeURIComponent(decodeURIComponent(segment)))\n    .join(\"/\");\n}\n\nfunction normalizeQuery(searchParams: URLSearchParams): string {\n  const pairs: string[] = [];\n  for (const [key, value] of searchParams.entries()) {\n    pairs.push(`${encodeRfc3986(key)}=${encodeRfc3986(value)}`);\n  }\n  pairs.sort();\n  return pairs.join(\"&\");\n}\n\nfunction encodeRfc3986(value: string): string {\n  return encodeURIComponent(value).replace(\n    /[!'()*]/g,\n    (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`,\n  );\n}\n\nfunction bytesToHex(bytes: Uint8Array): string {\n  return Array.from(bytes, (byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n",
     "/**\n * @module\n * AWS SES v2 HTTP transport for sently.\n * Signs requests with AWS Signature Version 4 using Web Crypto.\n * Works on Node.js, Bun, Deno, and Cloudflare Workers.\n *\n * @example\n * ```ts\n * import { SESTransport } from \"sently/transports/ses\";\n * import { createMailer } from \"sently\";\n *\n * const mailer = await createMailer({\n *   transport: new SESTransport({\n *     accessKeyId: process.env.AWS_ACCESS_KEY_ID!,\n *     secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY!,\n *     region: \"us-east-1\",\n *   }),\n * });\n * ```\n */\nimport { extractEmails, parseAddresses, toMIMEHeader } from \"../core/address.js\";\nimport { encodeBase64 } from \"../core/base64.js\";\nimport { buildMIME } from \"../core/mime.js\";\nimport { signRequest } from \"../core/sigv4.js\";\nimport type { MailOptions, SESConfig, SendResult, Transport, VerifyResult } from \"../core/types.js\";\nimport { resolveAttachments } from \"./resolve-attachments.js\";\n\n/** Error thrown when the AWS SES API returns a non-success response. */\nexport class SESError extends Error {\n  /** Creates an AWS SES API error with status code, error code, and request ID. */\n  constructor(\n    message: string,\n    public readonly statusCode: number,\n    public readonly code: string,\n    public readonly requestId: string,\n  ) {\n    super(message);\n    this.name = \"SESError\";\n  }\n}\n\n/**\n * AWS SES v2 HTTP API transport.\n */\nexport class SESTransport implements Transport {\n  /** AWS access key ID for SigV4 signing. */\n  private readonly accessKeyId: string;\n  /** AWS secret access key for SigV4 signing. */\n  private readonly secretAccessKey: string;\n  /** AWS region for the SES endpoint. */\n  private readonly region: string;\n  /** Optional STS session token for temporary credentials. */\n  private readonly sessionToken: string | undefined;\n  /** Optional DKIM config for raw MIME attachment sends. */\n  private readonly dkim: SESConfig[\"dkim\"];\n\n  /** Creates an SES transport with AWS credentials. */\n  constructor(config: SESConfig) {\n    this.accessKeyId = config.accessKeyId;\n    this.secretAccessKey = config.secretAccessKey;\n    this.region = config.region ?? \"us-east-1\";\n    this.sessionToken = config.sessionToken;\n    this.dkim = config.dkim;\n  }\n\n  /** Sends an email via the AWS SES v2 HTTP API. */\n  async send(options: MailOptions): Promise<SendResult> {\n    const attachments = await resolveAttachments(options.attachments);\n    const resolvedOptions = { ...options, attachments };\n    const from = parseAddresses(options.from)[0];\n    const fromEmail = from ? toMIMEHeader(from) : \"\";\n    const toEmails = extractEmails(options.to);\n    const ccEmails = options.cc ? extractEmails(options.cc) : [];\n    const bccEmails = options.bcc ? extractEmails(options.bcc) : [];\n\n    const destination = {\n      ToAddresses: toEmails,\n      CcAddresses: ccEmails,\n      BccAddresses: bccEmails,\n    };\n\n    let requestBody: Record<string, unknown>;\n\n    if (attachments.length > 0) {\n      const mime = await buildMIME(resolvedOptions, this.dkim);\n      requestBody = {\n        FromEmailAddress: fromEmail,\n        Destination: destination,\n        Content: {\n          Raw: {\n            Data: encodeBase64(mime.raw).replace(/\\r\\n/g, \"\"),\n          },\n        },\n      };\n    } else {\n      requestBody = {\n        FromEmailAddress: fromEmail,\n        Destination: destination,\n        Content: {\n          Simple: {\n            Subject: { Data: options.subject, Charset: \"UTF-8\" },\n            Body: {\n              ...(options.text ? { Text: { Data: options.text, Charset: \"UTF-8\" } } : {}),\n              ...(options.html ? { Html: { Data: options.html, Charset: \"UTF-8\" } } : {}),\n            },\n          },\n        },\n      };\n    }\n\n    const body = JSON.stringify(requestBody);\n    const url = `https://email.${this.region}.amazonaws.com/v2/email/outbound-emails`;\n    const signed = await signRequest({\n      method: \"POST\",\n      url,\n      headers: {\n        \"content-type\": \"application/json\",\n      },\n      body,\n      credentials: {\n        accessKeyId: this.accessKeyId,\n        secretAccessKey: this.secretAccessKey,\n        region: this.region,\n        service: \"ses\",\n        ...(this.sessionToken ? { sessionToken: this.sessionToken } : {}),\n      },\n    });\n\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers: signed.headers,\n      body,\n    });\n\n    const payload = (await response.json()) as {\n      MessageId?: string;\n      message?: string;\n      Code?: string;\n    };\n\n    if (!response.ok) {\n      throw new SESError(\n        payload.message ?? \"SES API error\",\n        response.status,\n        payload.Code ?? \"\",\n        response.headers.get(\"x-amzn-requestid\") ?? \"\",\n      );\n    }\n\n    const messageId = payload.MessageId ?? \"\";\n    return {\n      messageId,\n      accepted: [...toEmails, ...ccEmails, ...bccEmails],\n      rejected: [],\n      response: `MessageId: ${messageId}`,\n      envelope: {\n        from: from?.address ?? \"\",\n        to: toEmails,\n      },\n    };\n  }\n\n  /** Verifies AWS credentials by listing SES configuration sets. */\n  async verify(): Promise<VerifyResult> {\n    try {\n      const url = `https://email.${this.region}.amazonaws.com/v2/email/configuration-sets`;\n      const signed = await signRequest({\n        method: \"GET\",\n        url,\n        headers: {},\n        body: \"\",\n        credentials: {\n          accessKeyId: this.accessKeyId,\n          secretAccessKey: this.secretAccessKey,\n          region: this.region,\n          service: \"ses\",\n          ...(this.sessionToken ? { sessionToken: this.sessionToken } : {}),\n        },\n      });\n\n      const response = await fetch(url, {\n        method: \"GET\",\n        headers: signed.headers,\n      });\n\n      const payload = (await response.json().catch(() => ({}))) as { message?: string };\n\n      if (!response.ok) {\n        return {\n          ok: false,\n          provider: \"ses\",\n          message: payload.message ?? `HTTP ${response.status}`,\n        };\n      }\n\n      return { ok: true, provider: \"ses\", message: \"Credentials are valid\" };\n    } catch (err) {\n      return {\n        ok: false,\n        provider: \"ses\",\n        message: err instanceof Error ? err.message : String(err),\n      };\n    }\n  }\n}\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;AAuDA,IAAM,UAAU,IAAI;AAOpB,eAAsB,SAAS,CAAC,MAA+B;AAAA,EAC7D,MAAM,OAAO,MAAM,OAAO,OAAO,OAAO,WAAW,QAAQ,OAAO,IAAI,CAAC;AAAA,EACvE,OAAO,WAAW,IAAI,WAAW,IAAI,CAAC;AAAA;AAOxC,eAAsB,UAAU,CAAC,KAA0B,MAAmC;AAAA,EAC5F,MAAM,WAAW,OAAO,QAAQ,WAAW,QAAQ,OAAO,GAAG,IAAI,IAAI,WAAW,GAAG;AAAA,EACnF,MAAM,YAAY,MAAM,OAAO,OAAO,UACpC,OACA,UACA,EAAE,MAAM,QAAQ,MAAM,UAAU,GAChC,OACA,CAAC,MAAM,CACT;AAAA,EACA,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK,QAAQ,WAAW,QAAQ,OAAO,IAAI,CAAC;AAAA,EAClF,OAAO,IAAI,WAAW,SAAS;AAAA;AAOjC,eAAsB,WAAW,CAAC,SAA6C;AAAA,EAC7E,QAAQ,QAAQ,KAAK,MAAM,gBAAgB;AAAA,EAC3C,MAAM,SAAS,IAAI,IAAI,GAAG;AAAA,EAC1B,MAAM,UAAU,QAAQ,SAAS,GAAG,IAAI,KAAK,EAAE,YAAY,EAAE,QAAQ,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE;AAAA,EAC7F,MAAM,YAAY,QAAQ,MAAM,GAAG,CAAC;AAAA,EAEpC,MAAM,UAAkC;AAAA,OACnC,OAAO,YACR,OAAO,QAAQ,QAAQ,OAAO,EAAE,IAAI,EAAE,KAAK,WAAW,CAAC,IAAI,YAAY,GAAG,MAAM,KAAK,CAAC,CAAC,CACzF;AAAA,IACA,MAAM,OAAO;AAAA,IACb,cAAc;AAAA,EAChB;AAAA,EAEA,IAAI,YAAY,cAAc;AAAA,IAC5B,QAAQ,0BAA0B,YAAY;AAAA,EAChD;AAAA,EAEA,MAAM,oBAAoB,OAAO,KAAK,OAAO,EAC1C,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,EAChC,KAAK;AAAA,EACR,MAAM,gBAAgB,kBAAkB,KAAK,GAAG;AAAA,EAChD,MAAM,mBAAmB,GAAG,kBAAkB,IAAI,CAAC,SAAS,GAAG,QAAQ,QAAQ,OAAO,EAAE,KAAK;AAAA,CAAI;AAAA;AAAA,EACjG,MAAM,iBAAiB,eAAe,OAAO,YAAY;AAAA,EACzD,MAAM,cAAc,MAAM,UAAU,IAAI;AAAA,EACxC,MAAM,mBAAmB;AAAA,IACvB,OAAO,YAAY;AAAA,IACnB,aAAa,OAAO,QAAQ;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK;AAAA,CAAI;AAAA,EAEX,MAAM,kBAAkB,GAAG,aAAa,YAAY,UAAU,YAAY;AAAA,EAC1E,MAAM,eAAe;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM,UAAU,gBAAgB;AAAA,EAClC,EAAE,KAAK;AAAA,CAAI;AAAA,EAEX,MAAM,aAAa,MAAM,iBACvB,YAAY,iBACZ,WACA,YAAY,QACZ,YAAY,OACd;AAAA,EACA,MAAM,YAAY,WAAW,MAAM,WAAW,YAAY,YAAY,CAAC;AAAA,EACvE,MAAM,gBAAgB;AAAA,IACpB,+BAA+B,YAAY,eAAe;AAAA,IAC1D,iBAAiB;AAAA,IACjB,aAAa;AAAA,EACf,EAAE,KAAK,IAAI;AAAA,EAEX,OAAO;AAAA,IACL,SAAS;AAAA,SACJ;AAAA,MACH,eAAe;AAAA,IACjB;AAAA,EACF;AAAA;AAGF,eAAe,gBAAgB,CAC7B,iBACA,WACA,QACA,SACqB;AAAA,EACrB,MAAM,QAAQ,MAAM,WAAW,OAAO,mBAAmB,SAAS;AAAA,EAClE,MAAM,UAAU,MAAM,WAAW,OAAO,MAAM;AAAA,EAC9C,MAAM,WAAW,MAAM,WAAW,SAAS,OAAO;AAAA,EAClD,OAAO,WAAW,UAAU,cAAc;AAAA;AAG5C,SAAS,YAAY,CAAC,UAA0B;AAAA,EAC9C,IAAI,CAAC,YAAY,aAAa,KAAK;AAAA,IACjC,OAAO;AAAA,EACT;AAAA,EACA,OAAO,SACJ,MAAM,GAAG,EACT,IAAI,CAAC,YAAY,mBAAmB,mBAAmB,OAAO,CAAC,CAAC,EAChE,KAAK,GAAG;AAAA;AAGb,SAAS,cAAc,CAAC,cAAuC;AAAA,EAC7D,MAAM,QAAkB,CAAC;AAAA,EACzB,YAAY,KAAK,UAAU,aAAa,QAAQ,GAAG;AAAA,IACjD,MAAM,KAAK,GAAG,cAAc,GAAG,KAAK,cAAc,KAAK,GAAG;AAAA,EAC5D;AAAA,EACA,MAAM,KAAK;AAAA,EACX,OAAO,MAAM,KAAK,GAAG;AAAA;AAGvB,SAAS,aAAa,CAAC,OAAuB;AAAA,EAC5C,OAAO,mBAAmB,KAAK,EAAE,QAC/B,YACA,CAAC,SAAS,IAAI,KAAK,WAAW,CAAC,EAAE,SAAS,EAAE,EAAE,YAAY,GAC5D;AAAA;AAGF,SAAS,UAAU,CAAC,OAA2B;AAAA,EAC7C,OAAO,MAAM,KAAK,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAAA;;;AClKzE,MAAM,iBAAiB,MAAM;AAAA,EAIhB;AAAA,EACA;AAAA,EACA;AAAA,EAJlB,WAAW,CACT,SACgB,YACA,MACA,WAChB;AAAA,IACA,MAAM,OAAO;AAAA,IAJG;AAAA,IACA;AAAA,IACA;AAAA,IAGhB,KAAK,OAAO;AAAA;AAEhB;AAAA;AAKO,MAAM,aAAkC;AAAA,EAE5B;AAAA,EAEA;AAAA,EAEA;AAAA,EAEA;AAAA,EAEA;AAAA,EAGjB,WAAW,CAAC,QAAmB;AAAA,IAC7B,KAAK,cAAc,OAAO;AAAA,IAC1B,KAAK,kBAAkB,OAAO;AAAA,IAC9B,KAAK,SAAS,OAAO,UAAU;AAAA,IAC/B,KAAK,eAAe,OAAO;AAAA,IAC3B,KAAK,OAAO,OAAO;AAAA;AAAA,OAIf,KAAI,CAAC,SAA2C;AAAA,IACpD,MAAM,cAAc,MAAM,mBAAmB,QAAQ,WAAW;AAAA,IAChE,MAAM,kBAAkB,KAAK,SAAS,YAAY;AAAA,IAClD,MAAM,OAAO,eAAe,QAAQ,IAAI,EAAE;AAAA,IAC1C,MAAM,YAAY,OAAO,aAAa,IAAI,IAAI;AAAA,IAC9C,MAAM,WAAW,cAAc,QAAQ,EAAE;AAAA,IACzC,MAAM,WAAW,QAAQ,KAAK,cAAc,QAAQ,EAAE,IAAI,CAAC;AAAA,IAC3D,MAAM,YAAY,QAAQ,MAAM,cAAc,QAAQ,GAAG,IAAI,CAAC;AAAA,IAE9D,MAAM,cAAc;AAAA,MAClB,aAAa;AAAA,MACb,aAAa;AAAA,MACb,cAAc;AAAA,IAChB;AAAA,IAEA,IAAI;AAAA,IAEJ,IAAI,YAAY,SAAS,GAAG;AAAA,MAC1B,MAAM,OAAO,MAAM,UAAU,iBAAiB,KAAK,IAAI;AAAA,MACvD,cAAc;AAAA,QACZ,kBAAkB;AAAA,QAClB,aAAa;AAAA,QACb,SAAS;AAAA,UACP,KAAK;AAAA,YACH,MAAM,aAAa,KAAK,GAAG,EAAE,QAAQ,SAAS,EAAE;AAAA,UAClD;AAAA,QACF;AAAA,MACF;AAAA,IACF,EAAO;AAAA,MACL,cAAc;AAAA,QACZ,kBAAkB;AAAA,QAClB,aAAa;AAAA,QACb,SAAS;AAAA,UACP,QAAQ;AAAA,YACN,SAAS,EAAE,MAAM,QAAQ,SAAS,SAAS,QAAQ;AAAA,YACnD,MAAM;AAAA,iBACA,QAAQ,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,MAAM,SAAS,QAAQ,EAAE,IAAI,CAAC;AAAA,iBACrE,QAAQ,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,MAAM,SAAS,QAAQ,EAAE,IAAI,CAAC;AAAA,YAC3E;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA;AAAA,IAGF,MAAM,OAAO,KAAK,UAAU,WAAW;AAAA,IACvC,MAAM,MAAM,iBAAiB,KAAK;AAAA,IAClC,MAAM,SAAS,MAAM,YAAY;AAAA,MAC/B,QAAQ;AAAA,MACR;AAAA,MACA,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA;AAAA,MACA,aAAa;AAAA,QACX,aAAa,KAAK;AAAA,QAClB,iBAAiB,KAAK;AAAA,QACtB,QAAQ,KAAK;AAAA,QACb,SAAS;AAAA,WACL,KAAK,eAAe,EAAE,cAAc,KAAK,aAAa,IAAI,CAAC;AAAA,MACjE;AAAA,IACF,CAAC;AAAA,IAED,MAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR,SAAS,OAAO;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,IAED,MAAM,UAAW,MAAM,SAAS,KAAK;AAAA,IAMrC,IAAI,CAAC,SAAS,IAAI;AAAA,MAChB,MAAM,IAAI,SACR,QAAQ,WAAW,iBACnB,SAAS,QACT,QAAQ,QAAQ,IAChB,SAAS,QAAQ,IAAI,kBAAkB,KAAK,EAC9C;AAAA,IACF;AAAA,IAEA,MAAM,YAAY,QAAQ,aAAa;AAAA,IACvC,OAAO;AAAA,MACL;AAAA,MACA,UAAU,CAAC,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS;AAAA,MACjD,UAAU,CAAC;AAAA,MACX,UAAU,cAAc;AAAA,MACxB,UAAU;AAAA,QACR,MAAM,MAAM,WAAW;AAAA,QACvB,IAAI;AAAA,MACN;AAAA,IACF;AAAA;AAAA,OAII,OAAM,GAA0B;AAAA,IACpC,IAAI;AAAA,MACF,MAAM,MAAM,iBAAiB,KAAK;AAAA,MAClC,MAAM,SAAS,MAAM,YAAY;AAAA,QAC/B,QAAQ;AAAA,QACR;AAAA,QACA,SAAS,CAAC;AAAA,QACV,MAAM;AAAA,QACN,aAAa;AAAA,UACX,aAAa,KAAK;AAAA,UAClB,iBAAiB,KAAK;AAAA,UACtB,QAAQ,KAAK;AAAA,UACb,SAAS;AAAA,aACL,KAAK,eAAe,EAAE,cAAc,KAAK,aAAa,IAAI,CAAC;AAAA,QACjE;AAAA,MACF,CAAC;AAAA,MAED,MAAM,WAAW,MAAM,MAAM,KAAK;AAAA,QAChC,QAAQ;AAAA,QACR,SAAS,OAAO;AAAA,MAClB,CAAC;AAAA,MAED,MAAM,UAAW,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAAA,MAEvD,IAAI,CAAC,SAAS,IAAI;AAAA,QAChB,OAAO;AAAA,UACL,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,SAAS,QAAQ,WAAW,QAAQ,SAAS;AAAA,QAC/C;AAAA,MACF;AAAA,MAEA,OAAO,EAAE,IAAI,MAAM,UAAU,OAAO,SAAS,wBAAwB;AAAA,MACrE,OAAO,KAAK;AAAA,MACZ,OAAO;AAAA,QACL,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MAC1D;AAAA;AAAA;AAGN;",
-  "debugId": "E3DA50CEC668691D64756E2164756E21",
+  "mappings": "mOAuDA,DAAM,HAAU,DAAI,OAOpB,eAAsB,CAAS,CAAC,EAA+B,CAC7D,IAAM,EAAO,MAAM,OAAO,OAAO,OAAO,UAAW,EAAQ,OAAO,CAAI,CAAC,EACvE,OAAO,EAAW,IAAI,WAAW,CAAI,CAAC,EAOxC,eAAsB,CAAU,CAAC,EAA0B,EAAmC,CAC5F,IAAM,EAAW,OAAO,IAAQ,SAAW,EAAQ,OAAO,CAAG,EAAI,IAAI,WAAW,CAAG,EAC7E,EAAY,MAAM,OAAO,OAAO,UACpC,MACA,EACA,CAAE,KAAM,OAAQ,KAAM,SAAU,EAChC,GACA,CAAC,MAAM,CACT,EACM,EAAY,MAAM,OAAO,OAAO,KAAK,OAAQ,EAAW,EAAQ,OAAO,CAAI,CAAC,EAClF,OAAO,IAAI,WAAW,CAAS,EAOjC,eAAsB,CAAW,CAAC,EAA6C,CAC7E,IAAQ,SAAQ,MAAK,OAAM,eAAgB,EACrC,EAAS,IAAI,IAAI,CAAG,EACpB,EAAU,EAAQ,OAAS,GAAG,IAAI,KAAK,EAAE,YAAY,EAAE,QAAQ,QAAS,EAAE,EAAE,MAAM,EAAG,EAAE,KACvF,EAAY,EAAQ,MAAM,EAAG,CAAC,EAE9B,EAAkC,IACnC,OAAO,YACR,OAAO,QAAQ,EAAQ,OAAO,EAAE,IAAI,EAAE,EAAK,KAAW,CAAC,EAAI,YAAY,EAAG,EAAM,KAAK,CAAC,CAAC,CACzF,EACA,KAAM,EAAO,KACb,aAAc,CAChB,EAEA,GAAI,EAAY,aACd,EAAQ,wBAA0B,EAAY,aAGhD,IAAM,EAAoB,OAAO,KAAK,CAAO,EAC1C,IAAI,CAAC,IAAS,EAAK,YAAY,CAAC,EAChC,KAAK,EACF,EAAgB,EAAkB,KAAK,GAAG,EAC1C,EAAmB,GAAG,EAAkB,IAAI,CAAC,IAAS,GAAG,KAAQ,EAAQ,IAAO,EAAE,KAAK;AAAA,CAAI;AAAA,EAC3F,EAAiB,EAAe,EAAO,YAAY,EACnD,EAAc,MAAM,EAAU,CAAI,EAClC,EAAmB,CACvB,EAAO,YAAY,EACnB,EAAa,EAAO,QAAQ,EAC5B,EACA,EACA,EACA,CACF,EAAE,KAAK;AAAA,CAAI,EAEL,EAAkB,GAAG,KAAa,EAAY,UAAU,EAAY,uBACpE,EAAe,CACnB,mBACA,EACA,EACA,MAAM,EAAU,CAAgB,CAClC,EAAE,KAAK;AAAA,CAAI,EAEL,EAAa,MAAM,EACvB,EAAY,gBACZ,EACA,EAAY,OACZ,EAAY,OACd,EACM,EAAY,EAAW,MAAM,EAAW,EAAY,CAAY,CAAC,EACjE,EAAgB,CACpB,+BAA+B,EAAY,eAAe,IAC1D,iBAAiB,IACjB,aAAa,GACf,EAAE,KAAK,IAAI,EAEX,MAAO,CACL,QAAS,IACJ,EACH,cAAe,CACjB,CACF,EAGF,eAAe,CAAgB,CAC7B,EACA,EACA,EACA,EACqB,CACrB,IAAM,EAAQ,MAAM,EAAW,OAAO,IAAmB,CAAS,EAC5D,EAAU,MAAM,EAAW,EAAO,CAAM,EACxC,EAAW,MAAM,EAAW,EAAS,CAAO,EAClD,OAAO,EAAW,EAAU,cAAc,EAG5C,SAAS,CAAY,CAAC,EAA0B,CAC9C,GAAI,CAAC,GAAY,IAAa,IAC5B,MAAO,IAET,OAAO,EACJ,MAAM,GAAG,EACT,IAAI,CAAC,IAAY,mBAAmB,mBAAmB,CAAO,CAAC,CAAC,EAChE,KAAK,GAAG,EAGb,SAAS,CAAc,CAAC,EAAuC,CAC7D,IAAM,EAAkB,CAAC,EACzB,QAAY,EAAK,KAAU,EAAa,QAAQ,EAC9C,EAAM,KAAK,GAAG,EAAc,CAAG,KAAK,EAAc,CAAK,GAAG,EAG5D,OADA,EAAM,KAAK,EACJ,EAAM,KAAK,GAAG,EAGvB,SAAS,CAAa,CAAC,EAAuB,CAC5C,OAAO,mBAAmB,CAAK,EAAE,QAC/B,WACA,CAAC,IAAS,IAAI,EAAK,WAAW,CAAC,EAAE,SAAS,EAAE,EAAE,YAAY,GAC5D,EAGF,SAAS,CAAU,CAAC,EAA2B,CAC7C,OAAO,MAAM,KAAK,EAAO,CAAC,IAAS,EAAK,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EClKzE,MAAM,UAAiB,KAAM,CAIhB,WACA,KACA,UAJlB,WAAW,CACT,EACgB,EACA,EACA,EAChB,CACA,MAAM,CAAO,EAJG,kBACA,YACA,iBAGhB,KAAK,KAAO,WAEhB,CAKO,MAAM,CAAkC,CAE5B,YAEA,gBAEA,OAEA,aAEA,KAGjB,WAAW,CAAC,EAAmB,CAC7B,KAAK,YAAc,EAAO,YAC1B,KAAK,gBAAkB,EAAO,gBAC9B,KAAK,OAAS,EAAO,QAAU,YAC/B,KAAK,aAAe,EAAO,aAC3B,KAAK,KAAO,EAAO,UAIf,KAAI,CAAC,EAA2C,CACpD,IAAM,EAAc,MAAM,EAAmB,EAAQ,WAAW,EAC1D,EAAkB,IAAK,EAAS,aAAY,EAC5C,EAAO,EAAe,EAAQ,IAAI,EAAE,GACpC,EAAY,EAAO,EAAa,CAAI,EAAI,GACxC,EAAW,EAAc,EAAQ,EAAE,EACnC,EAAW,EAAQ,GAAK,EAAc,EAAQ,EAAE,EAAI,CAAC,EACrD,EAAY,EAAQ,IAAM,EAAc,EAAQ,GAAG,EAAI,CAAC,EAExD,EAAc,CAClB,YAAa,EACb,YAAa,EACb,aAAc,CAChB,EAEI,EAEJ,GAAI,EAAY,OAAS,EAAG,CAC1B,IAAM,EAAO,MAAM,EAAU,EAAiB,KAAK,IAAI,EACvD,EAAc,CACZ,iBAAkB,EAClB,YAAa,EACb,QAAS,CACP,IAAK,CACH,KAAM,EAAa,EAAK,GAAG,EAAE,QAAQ,QAAS,EAAE,CAClD,CACF,CACF,EAEA,OAAc,CACZ,iBAAkB,EAClB,YAAa,EACb,QAAS,CACP,OAAQ,CACN,QAAS,CAAE,KAAM,EAAQ,QAAS,QAAS,OAAQ,EACnD,KAAM,IACA,EAAQ,KAAO,CAAE,KAAM,CAAE,KAAM,EAAQ,KAAM,QAAS,OAAQ,CAAE,EAAI,CAAC,KACrE,EAAQ,KAAO,CAAE,KAAM,CAAE,KAAM,EAAQ,KAAM,QAAS,OAAQ,CAAE,EAAI,CAAC,CAC3E,CACF,CACF,CACF,EAGF,IAAM,EAAO,KAAK,UAAU,CAAW,EACjC,EAAM,iBAAiB,KAAK,gDAC5B,EAAS,MAAM,EAAY,CAC/B,OAAQ,OACR,MACA,QAAS,CACP,eAAgB,kBAClB,EACA,OACA,YAAa,CACX,YAAa,KAAK,YAClB,gBAAiB,KAAK,gBACtB,OAAQ,KAAK,OACb,QAAS,SACL,KAAK,aAAe,CAAE,aAAc,KAAK,YAAa,EAAI,CAAC,CACjE,CACF,CAAC,EAEK,EAAW,MAAM,MAAM,EAAK,CAChC,OAAQ,OACR,QAAS,EAAO,QAChB,MACF,CAAC,EAEK,EAAW,MAAM,EAAS,KAAK,EAMrC,GAAI,CAAC,EAAS,GACZ,MAAM,IAAI,EACR,EAAQ,SAAW,gBACnB,EAAS,OACT,EAAQ,MAAQ,GAChB,EAAS,QAAQ,IAAI,kBAAkB,GAAK,EAC9C,EAGF,IAAM,EAAY,EAAQ,WAAa,GACvC,MAAO,CACL,YACA,SAAU,CAAC,GAAG,EAAU,GAAG,EAAU,GAAG,CAAS,EACjD,SAAU,CAAC,EACX,SAAU,cAAc,IACxB,SAAU,CACR,KAAM,GAAM,SAAW,GACvB,GAAI,CACN,CACF,OAII,OAAM,EAA0B,CACpC,GAAI,CACF,IAAM,EAAM,iBAAiB,KAAK,mDAC5B,EAAS,MAAM,EAAY,CAC/B,OAAQ,MACR,MACA,QAAS,CAAC,EACV,KAAM,GACN,YAAa,CACX,YAAa,KAAK,YAClB,gBAAiB,KAAK,gBACtB,OAAQ,KAAK,OACb,QAAS,SACL,KAAK,aAAe,CAAE,aAAc,KAAK,YAAa,EAAI,CAAC,CACjE,CACF,CAAC,EAEK,EAAW,MAAM,MAAM,EAAK,CAChC,OAAQ,MACR,QAAS,EAAO,OAClB,CAAC,EAEK,EAAW,MAAM,EAAS,KAAK,EAAE,MAAM,KAAO,CAAC,EAAE,EAEvD,GAAI,CAAC,EAAS,GACZ,MAAO,CACL,GAAI,GACJ,SAAU,MACV,QAAS,EAAQ,SAAW,QAAQ,EAAS,QAC/C,EAGF,MAAO,CAAE,GAAI,GAAM,SAAU,MAAO,QAAS,uBAAwB,EACrE,MAAO,EAAK,CACZ,MAAO,CACL,GAAI,GACJ,SAAU,MACV,QAAS,aAAe,MAAQ,EAAI,QAAU,OAAO,CAAG,CAC1D,GAGN",
+  "debugId": "40DB8C49111C4E7964756E2164756E21",
   "names": []
 }

package/dist/transports/smtp.js

@@ -1,27 +1,3 @@
-import {
-  SMTPTransport,
-  closeSMTPSession,
-  deliverSMTPMessage,
-  openSMTPSession,
-  readSMTPResponse,
-  resolveSMTPConfig
-} from "../chunk-7fqv71z1.js";
-import"../chunk-ym3zzv8b.js";
-import"../chunk-x3szga4k.js";
-import {
-  encodeLine
-} from "../chunk-tymfm441.js";
-import"../chunk-f4c9ttmr.js";
-import"../chunk-794hc3m4.js";
-import"../chunk-v0bahtg2.js";
-export {
-  resolveSMTPConfig,
-  readSMTPResponse,
-  openSMTPSession,
-  encodeLine,
-  deliverSMTPMessage,
-  closeSMTPSession,
-  SMTPTransport
-};
+import{a as b,b as c,c as d,d as e,e as f,f as g}from"../chunk-nj3wmg69.js";import"../chunk-j5m37k1c.js";import"../chunk-nhec1319.js";import"../chunk-cvmk9h1r.js";import"../chunk-kdqxhybf.js";import{F as a}from"../chunk-m2njnxre.js";import"../chunk-32dj0v9g.js";import"../chunk-rhade81v.js";export{c as resolveSMTPConfig,g as readSMTPResponse,d as openSMTPSession,a as encodeLine,e as deliverSMTPMessage,f as closeSMTPSession,b as SMTPTransport};
 
-//# debugId=8C0FAE0AFD5EFFCA64756E2164756E21
+//# debugId=6A679298EBA4014164756E2164756E21

package/dist/transports/smtp.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "8C0FAE0AFD5EFFCA64756E2164756E21",
+  "debugId": "6A679298EBA4014164756E2164756E21",
   "names": []
 }

package/dist/webhooks/brevo.d.ts

@@ -0,0 +1,3 @@
+import type { EmailEvent } from "./types.js";
+/** Parse a Brevo webhook payload into normalized {@link EmailEvent} records. */
+export declare function parse(payload: unknown): EmailEvent[];

package/dist/webhooks/mailgun.d.ts

@@ -0,0 +1,13 @@
+import type { EmailEvent } from "./types.js";
+/** Parse a Mailgun webhook payload into normalized {@link EmailEvent} records. */
+export declare function parse(payload: unknown): EmailEvent[];
+/**
+ * Verify a Mailgun webhook signature using HMAC-SHA256 (Web Crypto).
+ * signingKey is the Mailgun webhook signing key.
+ */
+export declare function verifySignature(timestamp: string, token: string, signature: string, signingKey: string): Promise<boolean>;
+/**
+ * Verify a Mailgun webhook payload using the nested `signature` object.
+ * Returns false when the payload shape is invalid.
+ */
+export declare function verifyPayload(payload: unknown, signingKey: string): Promise<boolean>;

package/dist/webhooks/postmark.d.ts

@@ -0,0 +1,3 @@
+import type { EmailEvent } from "./types.js";
+/** Parse a Postmark webhook payload into normalized {@link EmailEvent} records. */
+export declare function parse(payload: unknown): EmailEvent[];

package/dist/webhooks/resend.d.ts

@@ -0,0 +1,12 @@
+import type { EmailEvent } from "./types.js";
+/** Parse a Resend webhook payload into normalized {@link EmailEvent} records. */
+export declare function parse(payload: unknown): EmailEvent[];
+/**
+ * Verify a Resend webhook signature (Svix-style) using Web Crypto.
+ * Returns false when verification cannot be performed or the signature is invalid.
+ */
+export declare function verifySignature(payload: string, headers: {
+    "svix-id"?: string;
+    "svix-timestamp"?: string;
+    "svix-signature"?: string;
+}, secret: string): Promise<boolean>;

package/dist/webhooks/sendgrid.d.ts

@@ -0,0 +1,3 @@
+import type { EmailEvent } from "./types.js";
+/** Parse a SendGrid Event Webhook payload into normalized {@link EmailEvent} records. */
+export declare function parse(payload: unknown): EmailEvent[];

package/dist/webhooks/ses.d.ts

@@ -0,0 +1,6 @@
+import type { EmailEvent } from "./types.js";
+/**
+ * Parse an AWS SES webhook payload (SNS envelope) into normalized {@link EmailEvent} records.
+ * Handles SubscriptionConfirmation (returns `[]`) and double-encoded Notification messages.
+ */
+export declare function parse(payload: unknown): EmailEvent[];

package/dist/webhooks/timing-safe-equal.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Constant-time byte comparison for cryptographic signatures.
+ * Never short-circuits the XOR loop; length mismatch is folded into `diff`.
+ */
+export declare function timingSafeEqual(a: Uint8Array, b: Uint8Array): boolean;
+/** Decode a base64 string to bytes; returns null on invalid input. */
+export declare function decodeBase64Bytes(value: string): Uint8Array | null;
+/** Decode a lowercase hex string to bytes; returns null on invalid input. */
+export declare function decodeHexBytes(value: string): Uint8Array | null;

package/dist/webhooks/types.d.ts

@@ -0,0 +1,32 @@
+/** Normalized email lifecycle event from any provider webhook. */
+export interface EmailEvent {
+    /** Provider identifier (e.g. `"resend"`, `"sendgrid"`). */
+    provider: string;
+    /** Normalized event type. */
+    type: "delivered" | "bounced" | "complained" | "opened" | "clicked" | "deferred" | "unknown";
+    /** Provider message identifier when available. */
+    messageId?: string;
+    /** Recipient email address when available. */
+    recipient?: string;
+    /** Event timestamp when available. */
+    timestamp?: Date;
+    /** Original provider payload for debugging or custom handling. */
+    raw: unknown;
+}
+/** Map a provider-specific event string to a normalized {@link EmailEvent.type}. */
+export type EventTypeMapper = (event: string) => EmailEvent["type"];
+/** Default mapper — returns `"unknown"` for unrecognized events. */
+export declare function mapEventType(event: string, mapping: Record<string, EmailEvent["type"]>): EmailEvent["type"];
+/** Parse an ISO or Unix timestamp into a Date, or undefined when invalid. */
+export declare function parseTimestamp(value: unknown): Date | undefined;
+/** Ensure payload is an array (for providers that batch events). */
+export declare function asArray(payload: unknown): unknown[];
+/** Build an {@link EmailEvent} respecting exact optional property types. */
+export declare function emailEvent(input: {
+    provider: string;
+    type: EmailEvent["type"];
+    raw: unknown;
+    messageId?: string | undefined;
+    recipient?: string | undefined;
+    timestamp?: Date | undefined;
+}): EmailEvent;

package/dist/webhooks.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @module
+ * Provider webhook parsers — normalize delivery events into {@link EmailEvent}.
+ *
+ * Pure parsing only; no server framework required. Signature verification
+ * helpers are optional and never required to call `parse`.
+ *
+ * @example
+ * ```ts
+ * import { parseResendWebhook } from "sently/webhooks";
+ *
+ * const events = parseResendWebhook(await request.json());
+ * for (const event of events) {
+ *   if (event.type === "bounced") {
+ *     // handle bounce
+ *   }
+ * }
+ * ```
+ */
+export { parse as parseBrevoWebhook } from "./webhooks/brevo.js";
+export { parse as parseMailgunWebhook, verifyPayload as verifyMailgunPayload, verifySignature as verifyMailgunSignature, } from "./webhooks/mailgun.js";
+export { parse as parsePostmarkWebhook } from "./webhooks/postmark.js";
+export { parse as parseResendWebhook, verifySignature as verifyResendSignature, } from "./webhooks/resend.js";
+export { parse as parseSendGridWebhook } from "./webhooks/sendgrid.js";
+export { parse as parseSesWebhook } from "./webhooks/ses.js";
+export type { EmailEvent } from "./webhooks/types.js";

package/dist/webhooks.js

@@ -0,0 +1,3 @@
+import"./chunk-rhade81v.js";export{v as verifyResendSignature,t as verifyMailgunSignature,n as verifyMailgunPayload,k as parseSesWebhook,m as parseSendGridWebhook,l as parseResendWebhook,p as parsePostmarkWebhook,s as parseMailgunWebhook,o as parseBrevoWebhook};
+
+//# debugId=0ADA81CFDCA8B16A64756E2164756E21

package/dist/webhooks.js.map

@@ -0,0 +1,9 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [
+  ],
+  "mappings": "",
+  "debugId": "0ADA81CFDCA8B16A64756E2164756E21",
+  "names": []
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sently",
-  "version": "0.4.6",
+  "version": "0.5.1",
   "description": "Runtime-agnostic email library for Node.js, Bun, Deno, and Cloudflare Workers. ESM-native Nodemailer alternative with zero dependencies.",
   "type": "module",
   "sideEffects": false,
@@ -33,13 +33,20 @@
     "publish:jsr": "npx jsr publish",
     "publish:all-d": "bun run publish:npm-d && bun run publish:jsr-d",
     "publish:all": "bun run publish:npm && bun run publish:jsr",
-    "verify:publish": "bun run pack:npm"
+    "verify:publish": "bun run pack:npm",
+    "measure:size": "bun tools/measure-bundle-size.ts",
+    "measure:size:md": "bun tools/measure-bundle-size.ts --markdown",
+    "check:size": "bun tools/measure-bundle-size.ts --check"
   },
   "devDependencies": {
-    "@biomejs/biome": "latest",
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "@types/node": "^25.9.1",
-    "typescript": "latest"
+    "@biomejs/biome": "2.4.16",
+    "@modelcontextprotocol/sdk": "1.29.0",
+    "@react-email/render": "1.1.2",
+    "@types/node": "25.9.1",
+    "@types/react": "19.2.15",
+    "react": "19.2.6",
+    "react-dom": "19.2.6",
+    "typescript": "6.0.3"
   },
   "keywords": [
     "email",
@@ -146,6 +153,38 @@
     "./pool": {
       "import": "./dist/pool/pool.js",
       "types": "./dist/pool/pool.d.ts"
+    },
+    "./mailer": {
+      "import": "./dist/mailer.js",
+      "types": "./dist/mailer.d.ts"
+    },
+    "./dkim": {
+      "import": "./dist/dkim.js",
+      "types": "./dist/dkim.d.ts"
+    },
+    "./react": {
+      "import": "./dist/react.js",
+      "types": "./dist/react.d.ts"
+    },
+    "./idempotency": {
+      "import": "./dist/idempotency.js",
+      "types": "./dist/idempotency.d.ts"
+    },
+    "./webhooks": {
+      "import": "./dist/webhooks.js",
+      "types": "./dist/webhooks.d.ts"
+    }
+  },
+  "peerDependencies": {
+    "@react-email/render": ">=0.0.9",
+    "react": ">=18.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@react-email/render": {
+      "optional": true
+    },
+    "react": {
+      "optional": true
     }
   }
 }