@agentcomms/resend 0.15.0 → 0.15.1

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { $ as exemptFromUpdateGate, B as UPDATE_CHECK_CHILD_COMMAND, C as policyChange, D as sendPolicyOf, E as removeAccountChange, Et as writeResult, F as CHANNEL_SERVERS, G as canPrompt, H as approvalsOf, I as CommsError, J as cliHandoffs, L as EXIT_CODES, N as checkNewName, Nt as VERSION, O as showAccount, Ot as RESEND_CALLER, Q as escapeForDisplay, R as PATH_OPTIONS, S as policyApprovalRefusal, T as policyWanted, Tt as wholeNumber, U as approveChangeAtTerminal, V as agentMarker, W as approveRefusedHint, X as commandPathOf, Y as colorEnabled, Z as describeFenceReport, _ as runDoctor, _t as serverPruneChange, a as revokeSendApproval, at as kindOf, b as listAccounts, bt as truncateDisplay, c as downloadReceived, ct as pathOverridesFromCliOptions, d as listReceived, dt as renderInstall, f as listScheduled, ft as renderPrune, g as showSentEmail, gt as serverInstallChange, h as showReceived, ht as runUpdateCheckChild, i as prepareSend, it as installExitStatus, k as ResendContext, l as getMetrics, lt as refuseUnclaimedApproval, m as listSuppressions, mt as runCommand, n as executeSend, nt as handoffSentence, o as sendStatus, ot as openCore, p as listSentEmails, pt as resolvePaths, r as finishSendApproval, rt as handoffSentenceToFill, s as cancelScheduledChange, st as paint, t as beginSendApproval, tt as gatedChangeAtTerminal, u as listDomains, ut as renderApprovalWait, v as addAccountChange, vt as terminalUpdateHooks, w as policyReport, wt as waitForApproval, x as modeOf, xt as updateGateAtTerminal, y as inspectKey, z as SEND_LOOKUP } from "./send-B16eep8e.mjs";
+import { $ as exemptFromUpdateGate, B as UPDATE_CHECK_CHILD_COMMAND, C as policyChange, D as sendPolicyOf, E as removeAccountChange, Et as writeResult, F as CHANNEL_SERVERS, G as canPrompt, H as approvalsOf, I as CommsError, J as cliHandoffs, L as EXIT_CODES, N as checkNewName, Nt as VERSION, O as showAccount, Ot as RESEND_CALLER, Q as escapeForDisplay, R as PATH_OPTIONS, S as policyApprovalRefusal, T as policyWanted, Tt as wholeNumber, U as approveChangeAtTerminal, V as agentMarker, W as approveRefusedHint, X as commandPathOf, Y as colorEnabled, Z as describeFenceReport, _ as runDoctor, _t as serverPruneChange, a as revokeSendApproval, at as kindOf, b as listAccounts, bt as truncateDisplay, c as downloadReceived, ct as pathOverridesFromCliOptions, d as listReceived, dt as renderInstall, f as listScheduled, ft as renderPrune, g as showSentEmail, gt as serverInstallChange, h as showReceived, ht as runUpdateCheckChild, i as prepareSend, it as installExitStatus, k as ResendContext, l as getMetrics, lt as refuseUnclaimedApproval, m as listSuppressions, mt as runCommand, n as executeSend, nt as handoffSentence, o as sendStatus, ot as openCore, p as listSentEmails, pt as resolvePaths, r as finishSendApproval, rt as handoffSentenceToFill, s as cancelScheduledChange, st as paint, t as beginSendApproval, tt as gatedChangeAtTerminal, u as listDomains, ut as renderApprovalWait, v as addAccountChange, vt as terminalUpdateHooks, w as policyReport, wt as waitForApproval, x as modeOf, xt as updateGateAtTerminal, y as inspectKey, z as SEND_LOOKUP } from "./send-BcM5UKMt.mjs";
 import path from "node:path";
 import { createInterface } from "node:readline/promises";
 import { stripVTControlCharacters } from "node:util";
@@ -3497,7 +3497,7 @@ is out: update first, or put it off (the stop names both commands) · 64 usage
 	}));
 	const mcp = program.command("mcp").description("run the MCP server on stdio, for a coding agent to connect to").option("--account <name>", "pin the server to one account; every tool then acts on it and no other").action(async (flags) => {
 		ran = true;
-		const startResendStdioServer = deps.startMcp ?? (await import("./stdio-entry-B-cIFAoE.mjs")).startResendStdioServer;
+		const startResendStdioServer = deps.startMcp ?? (await import("./stdio-entry-Ea4hMItp.mjs")).startResendStdioServer;
 		const core = coreForInvocation();
 		await startResendStdioServer({
 			...deps,

package/dist/index.d.mts

@@ -6203,6 +6203,20 @@ interface Core {
   handoffs?: CliHandoffs | undefined;
 }
 //#endregion
+//#region ../core/dist/index.d.mts
+interface SendPacing {
+  /**
+   * The wait before the next attempt, after a refusal that says "later" — or null when the send should stop now: no
+   * retries left, or the wait would run past the budget. A null spends no retry. `providerWaitMs` is the provider's own
+   * wait, when it gave a usable one.
+   */
+  next(providerWaitMs?: number): number | null;
+  /** Waits that long. */
+  wait(ms: number): Promise<void>;
+  /** The retries granted so far. */
+  readonly retries: number;
+}
+//#endregion
 //#region src/caller.d.ts
 /** This package's name, as its manifest has it: what core checks a caller against. */
 export declare const PACKAGE_NAME = "@agentcomms/resend";
@@ -13436,6 +13450,8 @@ interface ResendContextOptions {
   fetch?: FetchLike | undefined;
   /** The throttle's clock and pause. Tests shorten the pause; nothing a person or an agent passes can. */
   throttle?: ThrottleOptions | undefined;
+  /** How a throttled send waits (design 2026-10-08 §R2): core's pacing; a test injects one on the throttle's clock. */
+  sendPacing?: (() => SendPacing) | undefined;
 }
 //#endregion
 //#region src/mcp/server.d.ts

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import { At as RESEND_API_ORIGIN, Dt as PACKAGE_NAME, Mt as ROUTES, Nt as VERSION, Ot as RESEND_CALLER, jt as RESEND_DOWNLOAD_ORIGIN, kt as REFUSED } from "./send-B16eep8e.mjs";
-import { t as createResendMcpServer } from "./server-DjrE3qeD.mjs";
+import { At as RESEND_API_ORIGIN, Dt as PACKAGE_NAME, Mt as ROUTES, Nt as VERSION, Ot as RESEND_CALLER, jt as RESEND_DOWNLOAD_ORIGIN, kt as REFUSED } from "./send-BcM5UKMt.mjs";
+import { t as createResendMcpServer } from "./server-EV5f6d28.mjs";
 //#region src/index.ts
 /**
 * The library entry of `@agentcomms/resend`.

package/dist/{send-B16eep8e.mjs → send-BcM5UKMt.mjs}

@@ -12,7 +12,7 @@ import { execFile, spawn } from "node:child_process";
 //#endregion
 //#region src/version.ts
 /** The package version, read from package.json at build time. */
-const VERSION$1 = "0.15.0";
+const VERSION$1 = "0.15.1";
 //#endregion
 //#region src/api/routes.ts
 /**
@@ -201,7 +201,7 @@ const RESEND_CALLER = Object.freeze({
 	packageName: PACKAGE_NAME
 });
 //#endregion
-//#region ../core/dist/update-check-Cl4GJWEx.mjs
+//#region ../core/dist/update-check-CZwCVNLB.mjs
 /**
 * Every failure a user or an agent can act on carries a specific, stable code from this registry, a message, an
 * optional one-line hint and structured `details`. The code decides the process exit status; agents and skills branch
@@ -9040,7 +9040,7 @@ function folding(platform) {
 	return platform === "win32" ? (text) => text.toLowerCase() : (text) => text;
 }
 /** The package version, read from package.json at build time. */
-const VERSION = "0.15.0";
+const VERSION = "0.15.1";
 /**
 * Versions as semver writes and orders them — what an update compares, and what the daily update check's reader needs
 * to decide whether the release it last heard of is newer than the one running.
@@ -11726,7 +11726,7 @@ function serverPruneChange(core, env, request, own) {
 	};
 	const { packageName, version } = ownProduct(request.channel, own) ?? {
 		packageName: channelServer(request.channel).packageName,
-		version: "0.15.0"
+		version: "0.15.1"
 	};
 	const product = {
 		packageName,
@@ -13443,7 +13443,7 @@ function terminalUpdateHooks(core, env, options) {
 	};
 }
 //#endregion
-//#region ../core/dist/tool-arguments-lm3iAv61.mjs
+//#region ../core/dist/tool-arguments-jABbxaql.mjs
 const APPLIED = Symbol.for("agentcomms.strictToolArguments");
 const TARGET = "draft-2020-12";
 /**
@@ -24523,6 +24523,30 @@ function hiddenReason(element) {
 	if (element.attribs.style && hidesContent(parseStyle(element.attribs.style))) return `inline style: ${element.attribs.style.slice(0, 120)}`;
 	return "hidden by a stylesheet rule";
 }
+const BASE_MS = 1e3;
+function sendPacing(options = {}) {
+	const maxRetries = options.maxRetries ?? 3;
+	const budgetMs = options.budgetMs ?? 45e3;
+	const now = options.now ?? Date.now;
+	const sleep = options.sleep ?? ((ms) => setTimeout$1(ms).then(() => void 0));
+	const random = options.random ?? Math.random;
+	const startedAt = now();
+	let retries = 0;
+	return {
+		next(providerWaitMs) {
+			if (retries >= maxRetries) return null;
+			const step = BASE_MS * 2 ** retries;
+			const delay = typeof providerWaitMs === "number" && Number.isFinite(providerWaitMs) && providerWaitMs >= 0 ? Math.ceil(providerWaitMs) : Math.round(step / 2 + step / 2 * random());
+			if (now() - startedAt + delay > budgetMs) return null;
+			retries += 1;
+			return delay;
+		},
+		wait: (ms) => sleep(ms),
+		get retries() {
+			return retries;
+		}
+	};
+}
 /** The reason a send is recorded `failed` when its lease was lost before any provider step began. */
 const LEASE_LOST_BEFORE_SEND = "lease-lost-before-send";
 /**
@@ -24918,6 +24942,8 @@ var ResendContext = class {
 	handoffs;
 	accounts;
 	#fetch;
+	/** A fresh pacing for each send: how a throttled one waits before it tries again. */
+	sendPacing;
 	#throttle;
 	#teamDomains = /* @__PURE__ */ new Map();
 	constructor(options = {}) {
@@ -24935,6 +24961,7 @@ var ResendContext = class {
 		this.accounts = new AccountStore(() => this.core.config.load(), this.handoffs);
 		this.#fetch = options.fetch;
 		this.#throttle = new Throttle(this.core.paths.stateDir, options.throttle);
+		this.sendPacing = options.sendPacing ?? (() => sendPacing());
 	}
 	config() {
 		return this.core.config.load();
@@ -25145,6 +25172,65 @@ const REFUSED_BEFORE_ACTING = /* @__PURE__ */ new Set([
 function writeOutcomeOf(status) {
 	return status !== void 0 && REFUSED_BEFORE_ACTING.has(status) ? "not-sent" : "unknown";
 }
+/**
+* The limit a send's refusal names, or undefined when it names none.
+*
+* Only a `429` Resend gave before acting: `rate_limit_exceeded` (or no name) is requests per second; `daily_quota_exceeded`
+* resets at midnight UTC; `monthly_quota_exceeded` needs a larger plan (resend.com/docs/api-reference/errors, read
+* 2026-10-08).
+*/
+function sendThrottleOf(error, nowMs = Date.now()) {
+	if (!(error instanceof CommsError)) return void 0;
+	const details = error.details ?? {};
+	if (details.status !== 429 || details.outcome !== "not-sent") return void 0;
+	const name = details.resendError;
+	const limit = name === "daily_quota_exceeded" ? "daily-quota" : name === "monthly_quota_exceeded" ? "monthly-quota" : name === "rate_limit_exceeded" || name === "http_429" || name === void 0 ? "rate" : void 0;
+	if (limit === void 0) return void 0;
+	if (limit === "monthly-quota") return { limit };
+	if (limit === "daily-quota") {
+		const midnight = new Date(nowMs);
+		midnight.setUTCHours(24, 0, 0, 0);
+		return {
+			limit,
+			retryAt: midnight.toISOString()
+		};
+	}
+	const seconds = details.retryAfterSeconds;
+	if (typeof seconds !== "number" || !Number.isFinite(seconds) || seconds < 0) return { limit };
+	const waitMs = Math.max(1, seconds) * 1e3;
+	return {
+		limit,
+		waitMs,
+		retryAt: new Date(nowMs + waitMs).toISOString()
+	};
+}
+/**
+* The refusal a throttled send ends with, once it stops (design 2026-10-08 §R4, §R5). Nothing was sent; the send's
+* no-send bookkeeping says so in front of these words.
+*/
+function throttledRefusal(throttle, retries, cause) {
+	const tried = retries === 0 ? "" : ` (tried ${retries + 1} times)`;
+	const details = {
+		limit: throttle.limit,
+		retries,
+		...throttle.retryAt ? { retryAt: throttle.retryAt } : {}
+	};
+	if (throttle.limit === "monthly-quota") return new CommsError("TRANSIENT", "this Resend team's monthly sending quota is used up", {
+		hint: "A larger Resend plan raises it. Prepare the send again once it has.",
+		details,
+		cause
+	});
+	if (throttle.limit === "daily-quota") return new CommsError("TRANSIENT", "this Resend team's daily sending quota is used up", {
+		hint: `It resets at midnight UTC (${throttle.retryAt}). Prepare the send again then, or move to a plan without a daily quota.`,
+		details,
+		cause
+	});
+	return new CommsError("TRANSIENT", `Resend is rate-limiting this team${tried}`, {
+		hint: throttle.retryAt ? `Prepare the send again after ${throttle.retryAt}.` : "Prepare the send again in a minute.",
+		details,
+		cause
+	});
+}
 /** One API request. Resolves to the parsed JSON body of a 2xx, or throws a `CommsError` whose text holds no key. */
 async function resendRequest(transport, method, path, options = {}) {
 	const writing = method !== "GET";
@@ -27545,65 +27631,78 @@ async function claimAndSend(context, named, name, options, known, _seen, legacyD
 		} catch (error) {
 			throw await recordNoSend(context, records, bookkeeping, claimToken, claimedApproval, error);
 		}
-		const fenced = await fenceOrStop(context.core.approvals, options.approvalId, claimToken, { stepsStarted: 0 });
-		if (!fenced.proceed) {
-			const stopped = fenced.error ?? new CommsError("UNEXPECTED", "the sending lease ran out before anything was sent");
-			throw await recordNoSend(context, records, bookkeeping, claimToken, claimedApproval, stopped, "settled");
-		}
+		const pacing = context.sendPacing();
 		let resendId;
-		let requestIssued = false;
-		const innerFetch = transport.fetch ?? fetch;
-		const trackedTransport = {
-			...transport,
-			fetch: async (...args) => {
-				requestIssued = true;
-				return innerFetch(...args);
-			}
-		};
-		try {
-			const response = await spendOn(permit, options.approvalId, "emails.send", () => resendRequest(trackedTransport, "POST", "/emails", {
-				body: payloadOf(message, options.approvalId, contents),
-				idempotencyKey: options.approvalId
-			}));
-			resendId = typeof response.id === "string" && response.id.trim() !== "" ? response.id : void 0;
-		} catch (error) {
-			if (!requestIssued) throw await recordNoSend(context, records, bookkeeping, claimToken, claimedApproval, error);
-			const outcome = error instanceof CommsError && error.details?.outcome === "not-sent" ? "not-sent" : error instanceof CommsError && error.code === "SEND_REFUSED" ? "not-sent" : "unknown";
-			const said = error instanceof Error ? error.message : String(error);
-			if (outcome === "not-sent") throw await recordNoSend(context, records, bookkeeping, claimToken, claimedApproval, error);
-			const unrecorded = [];
-			try {
-				await records.record(named.account.id, {
-					approvalId: options.approvalId,
-					event: "unknown",
-					error: said.slice(0, 300)
-				});
-			} catch (failure) {
-				unrecorded.push(`the send record could not record this (${failure instanceof Error ? failure.message : String(failure)})`);
+		for (;;) {
+			const fenced = await fenceOrStop(context.core.approvals, options.approvalId, claimToken, { stepsStarted: 0 });
+			if (!fenced.proceed) {
+				const stopped = fenced.error ?? new CommsError("UNEXPECTED", "the sending lease ran out before anything was sent");
+				throw await recordNoSend(context, records, bookkeeping, claimToken, claimedApproval, stopped, "settled");
 			}
+			let requestIssued = false;
+			const innerFetch = transport.fetch ?? fetch;
+			const trackedTransport = {
+				...transport,
+				fetch: async (...args) => {
+					requestIssued = true;
+					return innerFetch(...args);
+				}
+			};
 			try {
-				await context.core.audit.append({
-					inboxId: named.account.id,
-					alias: name,
-					operation: "resend.send.execute",
-					outcome: "failed",
-					surface: context.surface,
-					approvalId: options.approvalId,
-					reason: `outcome unknown: ${said.slice(0, 200)}`
+				const response = await spendOn(permit, options.approvalId, "emails.send", () => resendRequest(trackedTransport, "POST", "/emails", {
+					body: payloadOf(message, options.approvalId, contents),
+					idempotencyKey: options.approvalId
+				}));
+				resendId = typeof response.id === "string" && response.id.trim() !== "" ? response.id : void 0;
+				break;
+			} catch (error) {
+				if (!requestIssued) throw await recordNoSend(context, records, bookkeeping, claimToken, claimedApproval, error);
+				const outcome = error instanceof CommsError && error.details?.outcome === "not-sent" ? "not-sent" : error instanceof CommsError && error.code === "SEND_REFUSED" ? "not-sent" : "unknown";
+				const said = error instanceof Error ? error.message : String(error);
+				if (outcome === "not-sent") {
+					const throttle = sendThrottleOf(error, context.now().getTime());
+					const delay = throttle?.limit === "rate" ? pacing.next(throttle.waitMs) : null;
+					if (delay !== null) {
+						await pacing.wait(delay);
+						continue;
+					}
+					const refusal = throttle ? throttledRefusal(throttle, pacing.retries, error) : error;
+					throw await recordNoSend(context, records, bookkeeping, claimToken, claimedApproval, refusal);
+				}
+				const unrecorded = [];
+				try {
+					await records.record(named.account.id, {
+						approvalId: options.approvalId,
+						event: "unknown",
+						error: said.slice(0, 300)
+					});
+				} catch (failure) {
+					unrecorded.push(`the send record could not record this (${failure instanceof Error ? failure.message : String(failure)})`);
+				}
+				try {
+					await context.core.audit.append({
+						inboxId: named.account.id,
+						alias: name,
+						operation: "resend.send.execute",
+						outcome: "failed",
+						surface: context.surface,
+						approvalId: options.approvalId,
+						reason: `outcome unknown: ${said.slice(0, 200)}`
+					});
+				} catch (failure) {
+					unrecorded.push(`the audit log could not record this (${failure instanceof Error ? failure.message : String(failure)})`);
+				}
+				throw new CommsError("SEND_OUTCOME_UNKNOWN", `whether the email was sent is not known: ${said}`, {
+					hint: [`Do not send it again, and do not prepare it again until you know it did not go. ${handoffSentence(statusCommand(context.handoffs, options.approvalId, name), (command) => `Check the Resend dashboard or ask the recipient, and check with ${command}; this approval is not used again.`, { instead: "Check the Resend dashboard or ask the recipient, and check with resend_send_status; this approval is not used again." })}`, ...unrecorded].join(" "),
+					details: {
+						...error instanceof CommsError ? error.details : {},
+						approvalId: options.approvalId,
+						outcome: "unknown",
+						approval: await approvalNow(context, options.approvalId, named.account.id, claimedApproval)
+					},
+					cause: error
 				});
-			} catch (failure) {
-				unrecorded.push(`the audit log could not record this (${failure instanceof Error ? failure.message : String(failure)})`);
 			}
-			throw new CommsError("SEND_OUTCOME_UNKNOWN", `whether the email was sent is not known: ${said}`, {
-				hint: [`Do not send it again, and do not prepare it again until you know it did not go. ${handoffSentence(statusCommand(context.handoffs, options.approvalId, name), (command) => `Check the Resend dashboard or ask the recipient, and check with ${command}; this approval is not used again.`, { instead: "Check the Resend dashboard or ask the recipient, and check with resend_send_status; this approval is not used again." })}`, ...unrecorded].join(" "),
-				details: {
-					...error instanceof CommsError ? error.details : {},
-					approvalId: options.approvalId,
-					outcome: "unknown",
-					approval: await approvalNow(context, options.approvalId, named.account.id, claimedApproval)
-				},
-				cause: error
-			});
 		}
 		const unrecorded = [];
 		let approval = null;

package/dist/{server-DjrE3qeD.mjs → server-EV5f6d28.mjs}

@@ -1,4 +1,4 @@
-import { A as CHANGE_POLICIES, C as policyChange, Ct as waitCallOptions, E as removeAccountChange, I as CommsError, K as changeToolResult, M as SEND_POLICIES, Nt as VERSION, O as showAccount, P as strictToolArguments, S as policyApprovalRefusal, St as updateToolGate, T as policyWanted, _ as runDoctor, b as listAccounts, c as downloadReceived, d as listReceived, et as gatedChange, f as listScheduled, g as showSentEmail, h as showReceived, i as prepareSend, j as MODES, k as ResendContext, l as getMetrics, lt as refuseUnclaimedApproval, m as listSuppressions, n as executeSend, o as sendStatus, p as listSentEmails, q as checkForUpdates, s as cancelScheduledChange, u as listDomains, w as policyReport, wt as waitForApproval, yt as toCommsError, z as SEND_LOOKUP } from "./send-B16eep8e.mjs";
+import { A as CHANGE_POLICIES, C as policyChange, Ct as waitCallOptions, E as removeAccountChange, I as CommsError, K as changeToolResult, M as SEND_POLICIES, Nt as VERSION, O as showAccount, P as strictToolArguments, S as policyApprovalRefusal, St as updateToolGate, T as policyWanted, _ as runDoctor, b as listAccounts, c as downloadReceived, d as listReceived, et as gatedChange, f as listScheduled, g as showSentEmail, h as showReceived, i as prepareSend, j as MODES, k as ResendContext, l as getMetrics, lt as refuseUnclaimedApproval, m as listSuppressions, n as executeSend, o as sendStatus, p as listSentEmails, q as checkForUpdates, s as cancelScheduledChange, u as listDomains, w as policyReport, wt as waitForApproval, yt as toCommsError, z as SEND_LOOKUP } from "./send-BcM5UKMt.mjs";
 import { S as union, c as boolean, g as object, h as number, s as array, x as string } from "./iso-USuVU_sk.mjs";
 import { t as McpServer } from "./mcp-DXXb3Vv3-kCxsVLO4.mjs";
 //#region src/mcp/server.ts

package/dist/{stdio-entry-B-cIFAoE.mjs → stdio-entry-Ea4hMItp.mjs}

@@ -1,4 +1,4 @@
-import { t as createResendMcpServer } from "./server-DjrE3qeD.mjs";
+import { t as createResendMcpServer } from "./server-EV5f6d28.mjs";
 //#region src/mcp/stdio-entry.ts
 /**
 * Starting the stdio server. On stdio, **stdout is the protocol**: one stray `console.log` corrupts the stream, so

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentcomms/resend",
-  "version": "0.15.0",
+  "version": "0.15.1",
   "description": "Resend for coding agents: read domains, sent and received mail, metrics and suppressions, and send mail that nothing sends without a person's approval of exactly what goes out.",
   "type": "module",
   "license": "MIT",
@@ -31,7 +31,7 @@
     "THIRD_PARTY_LICENSES"
   ],
   "dependencies": {
-    "@agentcomms/core": "0.15.0"
+    "@agentcomms/core": "0.15.1"
   },
   "optionalDependencies": {
     "@napi-rs/keyring": "2.1.0"
@@ -97,5 +97,5 @@
     "typecheck": "tsc -p tsconfig.json",
     "test": "node --experimental-strip-types --test --test-timeout=600000 \"test/**/*.test.ts\""
   },
-  "gitHead": "54f59874f2c075c4044e21fe5f85e789fe1aa820"
+  "gitHead": "813bc13b5d4172b66ef2def3020456c8c56c763e"
 }