
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
@fluojs/email
Advanced tools
Transport-agnostic email delivery core for Fluo with notifications and queue integration seams.
English 한국어
Transport-agnostic email delivery core for fluo. It provides a Nest-like module API, an injectable EmailService for standalone usage, and a first-party channel/queue adapter pair for @fluojs/notifications integration without hard-coding any runtime-specific transport.
npm install @fluojs/email
Install @fluojs/notifications and @fluojs/queue only when you want the built-in notifications channel and queue worker integration.
npm install @fluojs/notifications @fluojs/queue
Install nodemailer only when you use the explicit @fluojs/email/node subpath for Node-only SMTP delivery.
npm install @fluojs/email nodemailer
Node-specific SMTP delivery is available from the explicit @fluojs/email/node subpath. Queue-backed notifications integration is available from @fluojs/email/queue, and @fluojs/queue is declared as an optional peer for that subpath. The root @fluojs/email entrypoint stays transport-agnostic so Bun, Deno, Cloudflare, and custom HTTP transports do not inherit Node-only or queue-specific behavior.
@fluojs/notifications.@fluojs/queue instead of blocking request paths.import { Module } from '@fluojs/core';
import { EmailModule, type EmailTransport } from '@fluojs/email';
class ExampleTransport implements EmailTransport {
async send(message) {
return {
accepted: message.to.map((entry) => entry.address),
messageId: crypto.randomUUID(),
pending: [],
rejected: [],
};
}
}
@Module({
imports: [
EmailModule.forRoot({
defaultFrom: 'noreply@example.com',
transport: {
kind: 'example-http-transport',
create: async () => new ExampleTransport(),
},
}),
],
})
export class AppModule {}
import { Inject } from '@fluojs/core';
import { EmailService } from '@fluojs/email';
@Inject(EmailService)
export class WelcomeService {
constructor(private readonly email: EmailService) {}
async sendWelcome(address: string) {
await this.email.send({
to: [address],
subject: 'Welcome to fluo',
text: 'Your account is ready.',
});
}
}
The root @fluojs/email surface is intentionally module-first. Register email delivery through EmailModule.forRoot(...) or EmailModule.forRootAsync(...).
@fluojs/email/nodeUse the dedicated Node subpath when you want first-party Nodemailer/SMTP delivery without weakening the runtime-portable root package contract.
import { Module } from '@fluojs/core';
import { EmailModule } from '@fluojs/email';
import { createNodemailerEmailTransportFactory } from '@fluojs/email/node';
@Module({
imports: [
EmailModule.forRoot({
defaultFrom: 'noreply@example.com',
transport: createNodemailerEmailTransportFactory({
smtp: {
auth: {
pass: 'smtp-password',
user: 'smtp-user',
},
host: 'smtp.example.com',
port: 587,
secure: false,
},
}),
verifyOnModuleInit: true,
}),
],
})
export class AppModule {}
Behavioral contract notes:
createNodemailerEmailTransportFactory(...) is Node-only and is exported exclusively from @fluojs/email/node.EmailService can verify it on bootstrap and close it during shutdown.createNodemailerEmailTransport(...) wraps an existing Nodemailer transporter without transferring resource ownership.process.env directly.EmailServiceUse EmailService when your application wants direct email delivery without going through the notifications foundation.
EmailModule.forRootAsync({
inject: [ConfigService],
useFactory: (config) => ({
defaultFrom: config.mail.from,
transport: {
kind: config.mail.transportKind,
create: () => config.mail.transport,
ownsResources: false,
},
}),
});
Behavioral contract notes:
EmailService.send(...) resolves defaultFrom and defaultReplyTo before delivery.EmailService.send(...) rejects blank to recipients before handoff so transports never receive an empty delivery target.EmailService.send(...) and EmailService.sendNotification(...) honor an already-aborted AbortSignal before template rendering or transport handoff.EmailService.send(...) preserves accepted, pending, and rejected recipients separately so partial provider failures stay caller-visible.EmailService.sendMany(...) is fail-fast by default; pass continueOnError: true to collect failures in a batch result.EmailService.createPlatformStatusSnapshot() exposes lifecycle, readiness, health, and transport ownership details for diagnostics.verifyOnModuleInit: true, delivery waits until bootstrap verification has completed successfully before transport handoff.forRootAsync(...) option factories are not memoized permanently; the next provider resolution can retry configuration lookup.EmailService.send(...) and EmailService.sendNotification(...) fail with EmailLifecycleError instead of reusing or lazily creating transports; any in-flight factory-owned transport creation is awaited and closed by shutdown.verify() and close() provider errors are preserved as the cause of lifecycle failures for diagnostics.process.env directly. All configuration must enter through explicit options or DI.@fluojs/notificationsInject EMAIL_CHANNEL into NotificationsModule.forRootAsync(...) so the email package remains the only place that understands email-specific payload fields and template rendering.
import { Module } from '@fluojs/core';
import { EmailModule, EMAIL_CHANNEL } from '@fluojs/email';
import { NotificationsModule } from '@fluojs/notifications';
@Module({
imports: [
EmailModule.forRoot({
defaultFrom: 'noreply@example.com',
transport: {
kind: 'transactional-http',
create: () => transactionalTransport,
ownsResources: false,
},
}),
NotificationsModule.forRootAsync({
inject: [EMAIL_CHANNEL],
useFactory: (channel) => ({
channels: [channel],
}),
}),
],
})
export class AppModule {}
Supported notification payload fields:
to, cc, bcc, from, replyTotext, html, attachments, headerstemplateData when a renderer is configured on the moduleBehavioral contract notes:
EmailChannel treats any pending or rejected recipients as a failed notification dispatch instead of reporting the delivery as successful.EmailService.sendNotification(...) merges rendered template output with payload and notification metadata; payload fields override notification fallbacks.payload, metadata, locale, subject, and template; payload text, html, and notification subject override rendered fallbacks.When @fluojs/notifications should offload bulk email delivery to the background, import QueueModule, inject QueueLifecycleService, call createEmailNotificationsQueueAdapter(queue), and register EmailNotificationsQueueWorker as an application provider. The root EmailModule does not register the worker automatically, so applications that never import @fluojs/email/queue do not need @fluojs/queue at runtime.
import { Module } from '@fluojs/core';
import {
EmailModule,
EMAIL_CHANNEL,
} from '@fluojs/email';
import { createEmailNotificationsQueueAdapter, EmailNotificationsQueueWorker } from '@fluojs/email/queue';
import { NotificationsModule } from '@fluojs/notifications';
import { QueueLifecycleService, QueueModule } from '@fluojs/queue';
@Module({
imports: [
QueueModule.forRoot(),
EmailModule.forRoot({
defaultFrom: 'noreply@example.com',
transport: {
kind: 'bulk-email-api',
create: () => bulkEmailTransport,
ownsResources: false,
},
}),
NotificationsModule.forRootAsync({
inject: [EMAIL_CHANNEL, QueueLifecycleService],
useFactory: (channel, queue) => ({
channels: [channel],
queue: {
adapter: createEmailNotificationsQueueAdapter(queue),
bulkThreshold: 25,
},
}),
}),
],
providers: [EmailNotificationsQueueWorker],
})
export class AppModule {}
The built-in queue worker contract uses these defaults:
attempts: 3backoff: { type: 'exponential', delayMs: 1000 }concurrency: 5rateLimiter: { max: 50, duration: 1000 }jobName: 'fluo.email.notification'These defaults are exported from @fluojs/email/queue as DEFAULT_EMAIL_QUEUE_WORKER_OPTIONS so callers can document or mirror them when they build custom queue adapters/workers.
Behavioral contract notes:
@fluojs/email entrypoint and EmailModule do not import @fluojs/queue, register EmailNotificationsQueueWorker, or require queue peer installation.EmailNotificationsQueueWorker is exported from @fluojs/email/queue and must be registered by applications that enable queue-backed delivery.EmailChannel delivery semantics, so a queued job fails when the underlying transport reports zero accepted recipients or any pending/rejected recipients. This lets @fluojs/queue retry and dead-letter incomplete deliveries instead of acknowledging them as successful jobs.The email package intentionally does not:
process.envQueueModule or register queue workers automatically@fluojs/notificationsThese limitations are part of the package contract so transport selection, template strategy, and queue rollout stay explicit at the application boundary.
EmailModule.forRoot(options) / EmailModule.forRootAsync(options)EmailServiceEmailService.sendMany(messages, options)EmailService.sendNotification(notification, options)EmailService.createPlatformStatusSnapshot()EmailChannelEMAILEMAIL_CHANNELEmailMessageEmailTransportEmailTransportFactoryEmailTemplateRenderer@fluojs/email/queue: createEmailNotificationsQueueAdapter(queue), EmailNotificationQueueJob, EmailNotificationsQueueWorker, DEFAULT_EMAIL_QUEUE_WORKER_OPTIONS, EmailQueueWorkerOptionscreateEmailPlatformStatusSnapshot(...)EmailConfigurationErrorEmailLifecycleError: thrown by lifecycle-gated delivery, transport initialization or verification, and owned-resource shutdown failures. Catch this error when sends can race with application teardown.EmailMessageValidationErrorcreateNodemailerEmailTransport(...)createNodemailerEmailTransportFactory(...)NodemailerEmailTransportNodemailerTransporterNodemailerEmailTransportOptionsNodemailerEmailTransportFactoryOptions| Runtime | Subpath | Exports |
|---|---|---|
| Node.js | @fluojs/email/node | createNodemailerEmailTransport(...), createNodemailerEmailTransportFactory(...), NodemailerEmailTransport, NodemailerTransporter, NodemailerEmailTransportOptions, NodemailerEmailTransportFactoryOptions |
| Concern | Subpath | Exports |
|---|---|---|
| Queue-backed notifications integration | @fluojs/email/queue | createEmailNotificationsQueueAdapter(queue), EmailNotificationQueueJob, EmailNotificationsQueueWorker, DEFAULT_EMAIL_QUEUE_WORKER_OPTIONS, EmailQueueWorkerOptions |
@fluojs/notifications: Shared orchestration layer that consumes EMAIL_CHANNEL.@fluojs/queue: Recommended when bulk email delivery should run in the background.@fluojs/config: Recommended for resolving transport credentials and sender defaults without direct environment access.nodemailer: The Node-only SMTP implementation consumed by @fluojs/email/node.packages/email/src/module.test.ts: Module registration, option normalization, async wiring, lifecycle, and queue-backed notifications examples.packages/email/src/public-surface.test.ts: Public export and TypeScript contract verification.packages/email/src/node/node.test.ts: Node-only Nodemailer adapter mapping and lifecycle examples.packages/email/src/status.test.ts: Health/readiness contract examples.FAQs
Transport-agnostic email delivery core for Fluo with notifications and queue integration seams.
The npm package @fluojs/email receives a total of 75 weekly downloads. As such, @fluojs/email popularity was classified as not popular.
We found that @fluojs/email demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.