Add missing parameter validation to prevent /path/undefined API calls: - dub: require --url for links create - google-search-console: require --sitemap-url for sitemaps submit - kit: validate IDs and emails for subscribers, forms, sequences, tags, broadcasts - mailchimp: validate IDs for lists get, campaigns get/create/send, members add, reports get - resend: validate --from/--to/--subject for send, audience/contact IDs for contacts - rewardful: validate IDs for affiliates get/update, commissions get, links create - semrush: require --domain/--phrase for all domain and keyword commands - sendgrid: validate --from/--to/--subject for send, campaign IDs, email for validate Wrap bare JSON.parse() calls in try/catch for user-provided JSON: - dub (--links), ga4 (--params), kit (--fields x4), mixpanel (--properties x2), onesignal (--filters), paddle (--scheduled-change, --items x2), resend (--emails, --variables x2), segment (--properties, --traits, --events), sendgrid (--template-data) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
211 lines
6.9 KiB
JavaScript
Executable file
211 lines
6.9 KiB
JavaScript
Executable file
#!/usr/bin/env node
|
|
|
|
const API_KEY = process.env.SENDGRID_API_KEY
|
|
const BASE_URL = 'https://api.sendgrid.com/v3'
|
|
|
|
if (!API_KEY) {
|
|
console.error(JSON.stringify({ error: 'SENDGRID_API_KEY environment variable required' }))
|
|
process.exit(1)
|
|
}
|
|
|
|
async function api(method, path, body) {
|
|
if (args['dry-run']) {
|
|
return { _dry_run: true, method, url: `${BASE_URL}${path}`, headers: { 'Authorization': '***', 'Content-Type': 'application/json' }, body: body || undefined }
|
|
}
|
|
const res = await fetch(`${BASE_URL}${path}`, {
|
|
method,
|
|
headers: {
|
|
'Authorization': `Bearer ${API_KEY}`,
|
|
'Content-Type': 'application/json',
|
|
},
|
|
body: body ? JSON.stringify(body) : undefined,
|
|
})
|
|
const text = await res.text()
|
|
try {
|
|
return JSON.parse(text)
|
|
} catch {
|
|
return { status: res.status, body: text }
|
|
}
|
|
}
|
|
|
|
function parseArgs(args) {
|
|
const result = { _: [] }
|
|
for (let i = 0; i < args.length; i++) {
|
|
const arg = args[i]
|
|
if (arg.startsWith('--')) {
|
|
const key = arg.slice(2)
|
|
const next = args[i + 1]
|
|
if (next && !next.startsWith('--')) {
|
|
result[key] = next
|
|
i++
|
|
} else {
|
|
result[key] = true
|
|
}
|
|
} else {
|
|
result._.push(arg)
|
|
}
|
|
}
|
|
return result
|
|
}
|
|
|
|
const args = parseArgs(process.argv.slice(2))
|
|
const [cmd, sub, ...rest] = args._
|
|
|
|
async function main() {
|
|
let result
|
|
|
|
switch (cmd) {
|
|
case 'send': {
|
|
if (!args.from || !args.to || !args.subject) { result = { error: '--from, --to, and --subject required' }; break }
|
|
const body = {
|
|
personalizations: [{
|
|
to: args.to.split(',').map(e => ({ email: e.trim() })),
|
|
}],
|
|
from: { email: args.from },
|
|
subject: args.subject,
|
|
}
|
|
if (args['template-id']) {
|
|
body.template_id = args['template-id']
|
|
if (args['template-data']) {
|
|
try { body.personalizations[0].dynamic_template_data = JSON.parse(args['template-data']) } catch (e) { result = { error: 'Invalid JSON for --template-data: ' + e.message }; break }
|
|
}
|
|
} else {
|
|
const content = []
|
|
if (args.text) content.push({ type: 'text/plain', value: args.text })
|
|
if (args.html) content.push({ type: 'text/html', value: args.html })
|
|
if (content.length > 0) body.content = content
|
|
}
|
|
if (args.cc) body.personalizations[0].cc = args.cc.split(',').map(e => ({ email: e.trim() }))
|
|
if (args.bcc) body.personalizations[0].bcc = args.bcc.split(',').map(e => ({ email: e.trim() }))
|
|
if (args['reply-to']) body.reply_to = { email: args['reply-to'] }
|
|
result = await api('POST', '/mail/send', body)
|
|
break
|
|
}
|
|
|
|
case 'contacts':
|
|
switch (sub) {
|
|
case 'list':
|
|
result = await api('GET', '/marketing/contacts')
|
|
break
|
|
case 'add': {
|
|
const body = {
|
|
contacts: [{
|
|
email: args.email,
|
|
}],
|
|
}
|
|
if (args['first-name']) body.contacts[0].first_name = args['first-name']
|
|
if (args['last-name']) body.contacts[0].last_name = args['last-name']
|
|
if (args['list-ids']) body.list_ids = args['list-ids'].split(',')
|
|
result = await api('PUT', '/marketing/contacts', body)
|
|
break
|
|
}
|
|
case 'search': {
|
|
const body = { query: args.query }
|
|
result = await api('POST', '/marketing/contacts/search', body)
|
|
break
|
|
}
|
|
default:
|
|
result = { error: 'Unknown contacts subcommand. Use: list, add, search' }
|
|
}
|
|
break
|
|
|
|
case 'campaigns':
|
|
switch (sub) {
|
|
case 'list': {
|
|
const params = new URLSearchParams()
|
|
if (args.limit) params.set('page_size', args.limit)
|
|
result = await api('GET', `/marketing/campaigns?${params}`)
|
|
break
|
|
}
|
|
case 'get':
|
|
if (!rest[0]) { result = { error: 'Campaign ID required' }; break }
|
|
result = await api('GET', `/marketing/campaigns/${rest[0]}`)
|
|
break
|
|
default:
|
|
result = { error: 'Unknown campaigns subcommand. Use: list, get' }
|
|
}
|
|
break
|
|
|
|
case 'stats': {
|
|
switch (sub) {
|
|
case 'get': {
|
|
const params = new URLSearchParams()
|
|
if (args['start-date']) params.set('start_date', args['start-date'])
|
|
if (args['end-date']) params.set('end_date', args['end-date'])
|
|
result = await api('GET', `/stats?${params}`)
|
|
break
|
|
}
|
|
default:
|
|
result = { error: 'Unknown stats subcommand. Use: get' }
|
|
}
|
|
break
|
|
}
|
|
|
|
case 'bounces':
|
|
switch (sub) {
|
|
case 'list': {
|
|
const params = new URLSearchParams()
|
|
if (args['start-time']) params.set('start_time', args['start-time'])
|
|
if (args['end-time']) params.set('end_time', args['end-time'])
|
|
if (args.limit) params.set('limit', args.limit)
|
|
result = await api('GET', `/suppression/bounces?${params}`)
|
|
break
|
|
}
|
|
default:
|
|
result = { error: 'Unknown bounces subcommand. Use: list' }
|
|
}
|
|
break
|
|
|
|
case 'spam-reports':
|
|
switch (sub) {
|
|
case 'list': {
|
|
const params = new URLSearchParams()
|
|
if (args['start-time']) params.set('start_time', args['start-time'])
|
|
if (args['end-time']) params.set('end_time', args['end-time'])
|
|
if (args.limit) params.set('limit', args.limit)
|
|
result = await api('GET', `/suppression/spam_reports?${params}`)
|
|
break
|
|
}
|
|
default:
|
|
result = { error: 'Unknown spam-reports subcommand. Use: list' }
|
|
}
|
|
break
|
|
|
|
case 'validate':
|
|
switch (sub) {
|
|
case 'email': {
|
|
if (!args.email && !rest[0]) { result = { error: '--email required' }; break }
|
|
const body = { email: args.email || rest[0] }
|
|
result = await api('POST', '/validations/email', body)
|
|
break
|
|
}
|
|
default: {
|
|
const body = { email: sub }
|
|
result = await api('POST', '/validations/email', body)
|
|
break
|
|
}
|
|
}
|
|
break
|
|
|
|
default:
|
|
result = {
|
|
error: 'Unknown command',
|
|
usage: {
|
|
send: 'send --from <email> --to <email> --subject <subject> --html <html> [--text <text>] [--template-id <id>] [--template-data <json>]',
|
|
contacts: 'contacts [list|add|search] [--email <email>] [--first-name <name>] [--last-name <name>] [--list-ids <ids>] [--query <sgql>]',
|
|
campaigns: 'campaigns [list|get] [id] [--limit <n>]',
|
|
stats: 'stats get [--start-date <YYYY-MM-DD>] [--end-date <YYYY-MM-DD>]',
|
|
bounces: 'bounces list [--start-time <ts>] [--end-time <ts>] [--limit <n>]',
|
|
'spam-reports': 'spam-reports list [--start-time <ts>] [--end-time <ts>] [--limit <n>]',
|
|
validate: 'validate <email> OR validate email --email <email>',
|
|
}
|
|
}
|
|
}
|
|
|
|
console.log(JSON.stringify(result, null, 2))
|
|
}
|
|
|
|
main().catch(err => {
|
|
console.error(JSON.stringify({ error: err.message }))
|
|
process.exit(1)
|
|
})
|