@aglyn/shared-util-email 1.0.0-beta.199 → 1.0.0-beta.201

package/src/lib/email-deliverability.js

@@ -0,0 +1,461 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /*==========================================
+ * WILL THIS ADDRESS BOUNCE? — ANSWERED BEFORE THE SEND (AGL-3328).
+ *
+ * The one engine every email path asks: the Resend sender through
+ * `sendEmail`'s preflight seam, campaigns before their review count, the
+ * CRM at capture time, and Sequences at enrollment and before each send.
+ * It answers from three free facts and nothing else:
+ *
+ * 1. **The address itself** — its syntax, a typo'd provider domain
+ *    (`gmial.com`, which is SUGGESTED, never corrected), a disposable
+ *    domain, a role address (`info@`), which warns for bulk and cold mail
+ *    only.
+ * 2. **The domain's MX** — no MX at all, RFC 7505's null MX (`.`), or no MX
+ *    but an address record, which RFC 5321 §5.1 still delivers to and so
+ *    only warns.
+ * 3. **The gateway's history with the sending domain** — see
+ *    `mail-gateway.ts`: a gateway that refused this sender twice lately
+ *    holds the next BULK send into it.
+ *
+ * Never an SMTP `RCPT TO` probe. A probe is a connection to the recipient's
+ * server that sends nothing, which is exactly what a directory-harvest
+ * attack looks like, and gateways list the probing IP for it. Nor a paid
+ * verification API: the free checks are the whole of this module.
+ *
+ * ## The two severities that stop mail, and who they may stop
+ *
+ * - **refuse** — the domain takes no mail. Every purpose, transactional
+ *   included: a password reset to a domain with no MX is a hard bounce
+ *   charged to the sending domain, and nobody receives it either way.
+ * - **hold** — the gateway refused this sender twice. BULK and COLD mail
+ *   only. Mail the recipient asked for (a password reset, a receipt, a
+ *   booking confirmation) is never held for a gateway: the person is
+ *   waiting for it, and one more refusal costs less than their not getting
+ *   it.
+ *
+ * A public mailbox provider is never refused for its MX. `gmail.com` has MX
+ * records; a resolver that says otherwise is having a bad minute, and a
+ * refusal there would suppress real people.
+ *
+ * ## Pure
+ *
+ * DNS is handed in as a {@link MailDnsResolver}. This library's barrel
+ * reaches the browser, so `node:dns` belongs to the server layer that
+ * installs the preflight — `@aglyn/tenant-data-admin`.
+ *==========================================*/ import { classifyMailGateway, MAIL_DOMAIN_INTEL_TTL_MS, MAIL_DOMAIN_NEGATIVE_TTL_MS, mailGatewayHolds, mailGatewayHoldSentence, normalizeMailHost } from "./mail-gateway.js";
+/*==========================================
+ * THE ADDRESS
+ *==========================================*/ /** RFC 1035's ceiling on a name, which no real domain reaches. */ const DOMAIN_MAX = 253;
+/** A label: letters, digits and hyphens, not starting or ending on a hyphen. */ const LABEL = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+/** The local part a mailbox provider accepts in practice: RFC 5322's dot-atom. */ const LOCAL_PART = /^[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*$/;
+/** An address as the checks read it: trimmed and lowercased, or `null` when it is not one. */ export function normalizeDeliverabilityEmail(value) {
+    const address = String(value != null ? value : '').trim().toLowerCase();
+    const at = address.lastIndexOf('@');
+    if (at < 1 || at === address.length - 1 || address.length > 254) return null;
+    const local = address.slice(0, at);
+    const domain = address.slice(at + 1);
+    if (local.length > 64 || !LOCAL_PART.test(local)) return null;
+    if (!isDeliverabilityDomain(domain)) return null;
+    return address;
+}
+/** Whether a value is a domain with at least two labels and a non-numeric top level. */ export function isDeliverabilityDomain(value) {
+    const domain = String(value != null ? value : '');
+    if (!domain || domain.length > DOMAIN_MAX) return false;
+    const labels = domain.split('.');
+    if (labels.length < 2 || !labels.every((label)=>LABEL.test(label))) return false;
+    return !/^\d+$/.test(labels[labels.length - 1]);
+}
+/** The domain of an address, lowercased, or `null` for a value that is not one. */ export function emailAddressDomain(email) {
+    const address = normalizeDeliverabilityEmail(email);
+    return address ? address.slice(address.lastIndexOf('@') + 1) : null;
+}
+/**
+ * The mailboxes a company's shared inbox answers as rather than a person.
+ * Legal to mail and often read, but a cold email or a campaign sent there
+ * reaches nobody who asked for it, and a spam report from a shared inbox is
+ * a report from the whole company.
+ */ const ROLE_LOCAL_PARTS = new Set(// A word list rather than quoted strings: `marketing` is also a plugin's
+// id, and `check:plugin-domain-in-core` reads a quoted one as a plugin's
+// domain leaking into shared code — which a mailbox name is not.
+('abuse accounts admin administrator billing careers contact enquiries ' + 'help hello hr info inquiries jobs mail marketing media news no-reply ' + 'noreply office postmaster press privacy sales security service support ' + 'team webmaster').split(' '));
+/** Whether an address is a role mailbox (`info@`, `sales@`), read before any `+tag`. */ export function isRoleEmailAddress(email) {
+    const address = normalizeDeliverabilityEmail(email);
+    if (!address) return false;
+    const local = address.slice(0, address.lastIndexOf('@')).split('+')[0];
+    return ROLE_LOCAL_PARTS.has(local);
+}
+/**
+ * Domains that hand out a mailbox that expires. Not a complete list — no
+ * list is — but the ones a signup form actually meets.
+ */ const DISPOSABLE_DOMAINS = new Set([
+    '10minutemail.com',
+    '20minutemail.com',
+    'burnermail.io',
+    'discard.email',
+    'dispostable.com',
+    'emailondeck.com',
+    'fakeinbox.com',
+    'getairmail.com',
+    'getnada.com',
+    'guerrillamail.com',
+    'guerrillamail.net',
+    'guerrillamail.org',
+    'guerrillamailblock.com',
+    'maildrop.cc',
+    'mailinator.com',
+    'mailinator.net',
+    'mailnesia.com',
+    'mintemail.com',
+    'mohmal.com',
+    'mytemp.email',
+    'sharklasers.com',
+    'spamgourmet.com',
+    'temp-mail.org',
+    'tempail.com',
+    'tempmail.com',
+    'tempmailo.com',
+    'tempr.email',
+    'throwawaymail.com',
+    'trashmail.com',
+    'trashmail.de',
+    'yopmail.com',
+    'yopmail.net'
+]);
+/** Whether a domain is a disposable-mailbox provider. */ export function isDisposableEmailDomain(domain) {
+    return DISPOSABLE_DOMAINS.has(normalizeMailHost(domain));
+}
+/**
+ * The providers a mistyped domain is compared against. Long labels only: a
+ * three-letter label (`aol`, `msn`) is one keystroke from dozens of real
+ * domains, and a suggestion there would be noise.
+ */ const TYPO_TARGETS = [
+    'gmail.com',
+    'googlemail.com',
+    'yahoo.com',
+    'hotmail.com',
+    'outlook.com',
+    'icloud.com',
+    'comcast.net',
+    'protonmail.com',
+    'verizon.net',
+    'sbcglobal.net',
+    'bellsouth.net'
+];
+/** Real providers one keystroke from a target, which must never be "corrected". */ const TYPO_EXEMPT = new Set([
+    'mail.com',
+    'gmx.com',
+    'ymail.com',
+    'email.com',
+    'hotmail.co.uk',
+    'yahoo.co.uk',
+    'outlook.fr'
+]);
+/** Top-level domains that are a slip of `com` or `net`. */ const TLD_SLIPS = {
+    co: 'com',
+    con: 'com',
+    cm: 'com',
+    om: 'com',
+    comm: 'com',
+    cmo: 'com',
+    ocm: 'com',
+    vom: 'com',
+    xom: 'com',
+    cpm: 'com',
+    coom: 'com',
+    ne: 'net',
+    nte: 'net',
+    ner: 'net',
+    nett: 'net'
+};
+/** Damerau–Levenshtein distance, stopping early above 1: only "one slip" matters here. */ function withinOneEdit(a, b) {
+    if (a === b) return true;
+    if (Math.abs(a.length - b.length) > 1) return false;
+    if (a.length === b.length) {
+        const diffs = [];
+        for(let index = 0; index < a.length; index += 1){
+            if (a[index] !== b[index]) diffs.push(index);
+            if (diffs.length > 2) return false;
+        }
+        if (diffs.length === 1) return true;
+        // One transposition of neighbors: `gmial` for `gmail`.
+        return diffs.length === 2 && diffs[1] === diffs[0] + 1 && a[diffs[0]] === b[diffs[1]] && a[diffs[1]] === b[diffs[0]];
+    }
+    const [longer, shorter] = a.length > b.length ? [
+        a,
+        b
+    ] : [
+        b,
+        a
+    ];
+    for(let index = 0; index < longer.length; index += 1){
+        if (longer.slice(0, index) + longer.slice(index + 1) === shorter) return true;
+    }
+    return false;
+}
+/**
+ * The provider a domain most likely meant, or `null` — a SUGGESTION a
+ * surface may offer, never a correction applied: `gmial.com` may be a real
+ * domain somebody owns, and changing an address a person typed is sending
+ * their mail to someone else.
+ */ export function suggestEmailDomain(domain) {
+    const name = normalizeMailHost(domain);
+    if (!name || TYPO_EXEMPT.has(name) || TYPO_TARGETS.includes(name)) return null;
+    const dot = name.lastIndexOf('.');
+    if (dot < 1) return null;
+    const label = name.slice(0, dot);
+    const tld = name.slice(dot + 1);
+    for (const target of TYPO_TARGETS){
+        const targetDot = target.lastIndexOf('.');
+        const targetLabel = target.slice(0, targetDot);
+        const targetTld = target.slice(targetDot + 1);
+        if (label === targetLabel && TLD_SLIPS[tld] === targetTld) return target;
+        if (tld === targetTld && label.length >= 4 && withinOneEdit(label, targetLabel)) return target;
+    }
+    return null;
+}
+export const MAIL_DOMAIN_STATUSES = [
+    'mx',
+    'implicit_mx',
+    'null_mx',
+    'no_mx'
+];
+/** Whether a status means the domain takes no mail. */ export function mailDomainRefusesMail(status) {
+    return status === 'no_mx' || status === 'null_mx';
+}
+/** How long an answer is trusted: a week for a domain that takes mail, a day for one that does not. */ export function mailDomainIntelTtlMs(status) {
+    return mailDomainRefusesMail(status) ? MAIL_DOMAIN_NEGATIVE_TTL_MS : MAIL_DOMAIN_INTEL_TTL_MS;
+}
+/** Whether a cached answer is still trusted at `nowMs`. */ export function isMailDomainIntelFresh(intel, nowMs) {
+    return Boolean(intel) && intel.resolvedAtMs + mailDomainIntelTtlMs(intel.status) > nowMs;
+}
+/** The resolver's codes that mean "this domain has no such record", as opposed to "I could not ask". */ const NO_RECORD_CODES = new Set([
+    'ENOTFOUND',
+    'ENODATA',
+    'NXDOMAIN',
+    'NOTFOUND'
+]);
+/** Whether a resolver rejection is an answer ("no such record") rather than a failure to get one. */ export function isNoRecordDnsError(error) {
+    var _ref;
+    return NO_RECORD_CODES.has(String((_ref = error == null ? void 0 : error.code) != null ? _ref : '').toUpperCase());
+}
+/** A stored answer in its model shape, or `null` for no document or an unreadable one. */ export function readStoredMailDomainIntel(id, data) {
+    if (!data) return null;
+    const status = MAIL_DOMAIN_STATUSES.includes(data['status']) ? data['status'] : null;
+    if (!status) return null;
+    const mx = Array.isArray(data['mx']) ? data['mx'].filter((entry)=>typeof entry === 'string') : [];
+    const resolvedAtMs = typeof data['resolvedAtMs'] === 'number' && Number.isFinite(data['resolvedAtMs']) ? data['resolvedAtMs'] : 0;
+    return {
+        domain: typeof data['domain'] === 'string' && data['domain'] ? data['domain'] : id,
+        status,
+        mx,
+        gateway: status === 'mx' ? classifyMailGateway(mx) : status === 'implicit_mx' ? 'other' : 'none',
+        resolvedAtMs
+    };
+}
+/**
+ * A domain's mail setup, looked up — see {@link MailDomainStatus}. Rejects
+ * when the resolver could not answer, and the caller decides what a missing
+ * answer means; every path here reads it as "unknown" and sends.
+ */ export async function resolveMailDomain(resolver, domain, nowMs) {
+    let records;
+    try {
+        records = await resolver.resolveMx(domain);
+    } catch (error) {
+        if (!isNoRecordDnsError(error)) throw error;
+        records = [];
+    }
+    const exchanges = [
+        ...records != null ? records : []
+    ].filter((record)=>record && typeof record.exchange === 'string').sort((a, b)=>(Number(a.priority) || 0) - (Number(b.priority) || 0)).map((record)=>normalizeMailHost(record.exchange));
+    const real = exchanges.filter((exchange)=>exchange && exchange !== '.');
+    if (real.length) {
+        return {
+            domain,
+            status: 'mx',
+            mx: real,
+            gateway: classifyMailGateway(real),
+            resolvedAtMs: nowMs
+        };
+    }
+    // Records that are all "." (or empty, as Node reports a null MX) are RFC
+    // 7505's null MX: the domain says it takes no mail, whatever its A says.
+    if (exchanges.length) return {
+        domain,
+        status: 'null_mx',
+        mx: [],
+        gateway: 'none',
+        resolvedAtMs: nowMs
+    };
+    if (resolver.resolveAddress) {
+        let addressed;
+        try {
+            addressed = await resolver.resolveAddress(domain);
+        } catch (error) {
+            if (!isNoRecordDnsError(error)) throw error;
+            addressed = false;
+        }
+        if (addressed) return {
+            domain,
+            status: 'implicit_mx',
+            mx: [],
+            gateway: 'other',
+            resolvedAtMs: nowMs
+        };
+    }
+    return {
+        domain,
+        status: 'no_mx',
+        mx: [],
+        gateway: 'none',
+        resolvedAtMs: nowMs
+    };
+}
+const SEVERITY_RANK = {
+    refuse: 0,
+    hold: 1,
+    warn: 2
+};
+/** The whole verdict for one address — see the module note. */ export function assessEmailDeliverability(input) {
+    var _input_intel, _input_gateway;
+    const email = normalizeDeliverabilityEmail(input.email);
+    if (!email) {
+        var _input_email;
+        return {
+            email: null,
+            domain: null,
+            outcome: 'refused',
+            findings: [
+                {
+                    code: 'invalid_syntax',
+                    severity: 'refuse',
+                    message: `${String((_input_email = input.email) != null ? _input_email : '').trim() || 'This'} is not an email address.`
+                }
+            ],
+            intel: null,
+            gateway: null
+        };
+    }
+    const domain = email.slice(email.lastIndexOf('@') + 1);
+    const findings = [];
+    const bulk = input.purpose !== 'transactional';
+    const intel = (_input_intel = input.intel) != null ? _input_intel : null;
+    if (intel && !input.publicMailbox) {
+        if (intel.status === 'no_mx') {
+            findings.push({
+                code: 'no_mx',
+                severity: 'refuse',
+                message: `${domain} has no mail server, so ${email} would bounce.`
+            });
+        } else if (intel.status === 'null_mx') {
+            findings.push({
+                code: 'null_mx',
+                severity: 'refuse',
+                message: `${domain} publishes a null MX record: it says it accepts no email, so ${email} would bounce.`
+            });
+        } else if (intel.status === 'implicit_mx') {
+            findings.push({
+                code: 'implicit_mx',
+                severity: 'warn',
+                message: `${domain} has no MX record. Mail may still reach its web server's address, but most domains like this never set up email.`
+            });
+        }
+    }
+    const suggestion = suggestEmailDomain(domain);
+    if (suggestion) {
+        const local = email.slice(0, email.lastIndexOf('@'));
+        findings.push({
+            code: 'typo_domain',
+            severity: 'warn',
+            message: `Did you mean ${local}@${suggestion}? ${domain} looks like a typo.`,
+            suggestion: `${local}@${suggestion}`
+        });
+    }
+    if (isDisposableEmailDomain(domain)) {
+        findings.push({
+            code: 'disposable_domain',
+            severity: 'warn',
+            message: `${domain} hands out mailboxes that expire, so this address may stop working soon.`
+        });
+    }
+    if (bulk && isRoleEmailAddress(email)) {
+        findings.push({
+            code: 'role_address',
+            severity: 'warn',
+            message: `${email} is a shared role inbox rather than a person, which marketing and cold mail should avoid.`
+        });
+    }
+    const gateway = (_input_gateway = input.gateway) != null ? _input_gateway : null;
+    if (bulk && gateway && input.holdReleased !== true && mailGatewayHolds(gateway)) {
+        findings.push({
+            code: 'gateway_held',
+            severity: 'hold',
+            message: `${mailGatewayHoldSentence(gateway.gateway, gateway.blocked30)}, so bulk mail to ${domain} is held.`
+        });
+    }
+    findings.sort((a, b)=>SEVERITY_RANK[a.severity] - SEVERITY_RANK[b.severity]);
+    const outcome = findings.some((finding)=>finding.severity === 'refuse') ? 'refused' : findings.some((finding)=>finding.severity === 'hold') ? 'held' : intel ? 'deliverable' : 'unchecked';
+    return {
+        email,
+        domain,
+        outcome,
+        findings,
+        intel,
+        gateway
+    };
+}
+/** The finding that decided a refusal or a hold, or `null` when nothing stops the address. */ export function decidingDeliverabilityFinding(verdict) {
+    var _verdict_findings_find;
+    return (_verdict_findings_find = verdict.findings.find((finding)=>finding.severity !== 'warn')) != null ? _verdict_findings_find : null;
+}
+/**
+ * What a bulk send's review says about the addresses the checks took out,
+ * or `null` when they took out nobody: "3 recipients excluded: no mail
+ * server · 2 behind a gateway that refused this sender".
+ */ export function deliverabilityExclusionSummary(counts) {
+    const noMailServer = Math.max(0, Math.floor(Number(counts == null ? void 0 : counts.noMailServer) || 0));
+    const gatewayHeld = Math.max(0, Math.floor(Number(counts == null ? void 0 : counts.gatewayHeld) || 0));
+    const total = noMailServer + gatewayHeld;
+    if (!total) return null;
+    const parts = [
+        ...noMailServer ? [
+            `${noMailServer.toLocaleString('en-US')} no mail server`
+        ] : [],
+        ...gatewayHeld ? [
+            `${gatewayHeld.toLocaleString('en-US')} behind a gateway that refused this sender`
+        ] : []
+    ];
+    return `${total.toLocaleString('en-US')} ${total === 1 ? 'recipient' : 'recipients'} excluded: ${parts.join(' · ')}`;
+}
+let installedPreflight = null;
+/** Installs the durable preflight. Called once, from `@aglyn/tenant-data-admin`. */ export function setEmailDeliverabilityPreflight(preflight) {
+    installedPreflight = preflight;
+}
+/** The installed preflight, or `null` when nothing has been installed. */ export function getEmailDeliverabilityPreflight() {
+    return installedPreflight;
+}
+/** Test seam: forget any installed preflight. */ export function resetEmailDeliverabilityPreflightForTests() {
+    installedPreflight = null;
+}
+/**
+ * How long `sendEmail` waits for the preflight before sending anyway. A
+ * cold lookup is one DNS round trip and one document read; a preflight
+ * slower than this is an outage on the control, and a control outage must
+ * not become a mail outage.
+ */ export const EMAIL_DELIVERABILITY_PREFLIGHT_TIMEOUT_MS = 2500;
+
+//# sourceMappingURL=email-deliverability.js.map

package/src/lib/email-deliverability.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/shared/util/email/src/lib/email-deliverability.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/*==========================================\n * WILL THIS ADDRESS BOUNCE? — ANSWERED BEFORE THE SEND (AGL-3328).\n *\n * The one engine every email path asks: the Resend sender through\n * `sendEmail`'s preflight seam, campaigns before their review count, the\n * CRM at capture time, and Sequences at enrollment and before each send.\n * It answers from three free facts and nothing else:\n *\n * 1. **The address itself** — its syntax, a typo'd provider domain\n *    (`gmial.com`, which is SUGGESTED, never corrected), a disposable\n *    domain, a role address (`info@`), which warns for bulk and cold mail\n *    only.\n * 2. **The domain's MX** — no MX at all, RFC 7505's null MX (`.`), or no MX\n *    but an address record, which RFC 5321 §5.1 still delivers to and so\n *    only warns.\n * 3. **The gateway's history with the sending domain** — see\n *    `mail-gateway.ts`: a gateway that refused this sender twice lately\n *    holds the next BULK send into it.\n *\n * Never an SMTP `RCPT TO` probe. A probe is a connection to the recipient's\n * server that sends nothing, which is exactly what a directory-harvest\n * attack looks like, and gateways list the probing IP for it. Nor a paid\n * verification API: the free checks are the whole of this module.\n *\n * ## The two severities that stop mail, and who they may stop\n *\n * - **refuse** — the domain takes no mail. Every purpose, transactional\n *   included: a password reset to a domain with no MX is a hard bounce\n *   charged to the sending domain, and nobody receives it either way.\n * - **hold** — the gateway refused this sender twice. BULK and COLD mail\n *   only. Mail the recipient asked for (a password reset, a receipt, a\n *   booking confirmation) is never held for a gateway: the person is\n *   waiting for it, and one more refusal costs less than their not getting\n *   it.\n *\n * A public mailbox provider is never refused for its MX. `gmail.com` has MX\n * records; a resolver that says otherwise is having a bad minute, and a\n * refusal there would suppress real people.\n *\n * ## Pure\n *\n * DNS is handed in as a {@link MailDnsResolver}. This library's barrel\n * reaches the browser, so `node:dns` belongs to the server layer that\n * installs the preflight — `@aglyn/tenant-data-admin`.\n *==========================================*/\n\nimport {\n  classifyMailGateway,\n  MAIL_DOMAIN_INTEL_TTL_MS,\n  MAIL_DOMAIN_NEGATIVE_TTL_MS,\n  type MailGateway,\n  type MailGatewayStanding,\n  mailGatewayHolds,\n  mailGatewayHoldSentence,\n  normalizeMailHost,\n} from './mail-gateway'\n\n/*==========================================\n * THE ADDRESS\n *==========================================*/\n\n/** RFC 1035's ceiling on a name, which no real domain reaches. */\nconst DOMAIN_MAX = 253\n\n/** A label: letters, digits and hyphens, not starting or ending on a hyphen. */\nconst LABEL = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/\n\n/** The local part a mailbox provider accepts in practice: RFC 5322's dot-atom. */\nconst LOCAL_PART = /^[a-z0-9!#$%&'*+/=?^_`{|}~-]+(?:\\.[a-z0-9!#$%&'*+/=?^_`{|}~-]+)*$/\n\n/** An address as the checks read it: trimmed and lowercased, or `null` when it is not one. */\nexport function normalizeDeliverabilityEmail(value: unknown): string | null {\n  const address = String(value ?? '')\n    .trim()\n    .toLowerCase()\n  const at = address.lastIndexOf('@')\n  if (at < 1 || at === address.length - 1 || address.length > 254) return null\n  const local = address.slice(0, at)\n  const domain = address.slice(at + 1)\n  if (local.length > 64 || !LOCAL_PART.test(local)) return null\n  if (!isDeliverabilityDomain(domain)) return null\n  return address\n}\n\n/** Whether a value is a domain with at least two labels and a non-numeric top level. */\nexport function isDeliverabilityDomain(value: unknown): boolean {\n  const domain = String(value ?? '')\n  if (!domain || domain.length > DOMAIN_MAX) return false\n  const labels = domain.split('.')\n  if (labels.length < 2 || !labels.every((label) => LABEL.test(label))) return false\n  return !/^\\d+$/.test(labels[labels.length - 1])\n}\n\n/** The domain of an address, lowercased, or `null` for a value that is not one. */\nexport function emailAddressDomain(email: unknown): string | null {\n  const address = normalizeDeliverabilityEmail(email)\n  return address ? address.slice(address.lastIndexOf('@') + 1) : null\n}\n\n/**\n * The mailboxes a company's shared inbox answers as rather than a person.\n * Legal to mail and often read, but a cold email or a campaign sent there\n * reaches nobody who asked for it, and a spam report from a shared inbox is\n * a report from the whole company.\n */\nconst ROLE_LOCAL_PARTS: ReadonlySet<string> = new Set(\n  // A word list rather than quoted strings: `marketing` is also a plugin's\n  // id, and `check:plugin-domain-in-core` reads a quoted one as a plugin's\n  // domain leaking into shared code — which a mailbox name is not.\n  (\n    'abuse accounts admin administrator billing careers contact enquiries ' +\n    'help hello hr info inquiries jobs mail marketing media news no-reply ' +\n    'noreply office postmaster press privacy sales security service support ' +\n    'team webmaster'\n  ).split(' '),\n)\n\n/** Whether an address is a role mailbox (`info@`, `sales@`), read before any `+tag`. */\nexport function isRoleEmailAddress(email: unknown): boolean {\n  const address = normalizeDeliverabilityEmail(email)\n  if (!address) return false\n  const local = address.slice(0, address.lastIndexOf('@')).split('+')[0]\n  return ROLE_LOCAL_PARTS.has(local)\n}\n\n/**\n * Domains that hand out a mailbox that expires. Not a complete list — no\n * list is — but the ones a signup form actually meets.\n */\nconst DISPOSABLE_DOMAINS: ReadonlySet<string> = new Set([\n  '10minutemail.com',\n  '20minutemail.com',\n  'burnermail.io',\n  'discard.email',\n  'dispostable.com',\n  'emailondeck.com',\n  'fakeinbox.com',\n  'getairmail.com',\n  'getnada.com',\n  'guerrillamail.com',\n  'guerrillamail.net',\n  'guerrillamail.org',\n  'guerrillamailblock.com',\n  'maildrop.cc',\n  'mailinator.com',\n  'mailinator.net',\n  'mailnesia.com',\n  'mintemail.com',\n  'mohmal.com',\n  'mytemp.email',\n  'sharklasers.com',\n  'spamgourmet.com',\n  'temp-mail.org',\n  'tempail.com',\n  'tempmail.com',\n  'tempmailo.com',\n  'tempr.email',\n  'throwawaymail.com',\n  'trashmail.com',\n  'trashmail.de',\n  'yopmail.com',\n  'yopmail.net',\n])\n\n/** Whether a domain is a disposable-mailbox provider. */\nexport function isDisposableEmailDomain(domain: unknown): boolean {\n  return DISPOSABLE_DOMAINS.has(normalizeMailHost(domain))\n}\n\n/**\n * The providers a mistyped domain is compared against. Long labels only: a\n * three-letter label (`aol`, `msn`) is one keystroke from dozens of real\n * domains, and a suggestion there would be noise.\n */\nconst TYPO_TARGETS: readonly string[] = [\n  'gmail.com',\n  'googlemail.com',\n  'yahoo.com',\n  'hotmail.com',\n  'outlook.com',\n  'icloud.com',\n  'comcast.net',\n  'protonmail.com',\n  'verizon.net',\n  'sbcglobal.net',\n  'bellsouth.net',\n]\n\n/** Real providers one keystroke from a target, which must never be \"corrected\". */\nconst TYPO_EXEMPT: ReadonlySet<string> = new Set([\n  'mail.com',\n  'gmx.com',\n  'ymail.com',\n  'email.com',\n  'hotmail.co.uk',\n  'yahoo.co.uk',\n  'outlook.fr',\n])\n\n/** Top-level domains that are a slip of `com` or `net`. */\nconst TLD_SLIPS: Readonly<Record<string, string>> = {\n  co: 'com',\n  con: 'com',\n  cm: 'com',\n  om: 'com',\n  comm: 'com',\n  cmo: 'com',\n  ocm: 'com',\n  vom: 'com',\n  xom: 'com',\n  cpm: 'com',\n  coom: 'com',\n  ne: 'net',\n  nte: 'net',\n  ner: 'net',\n  nett: 'net',\n}\n\n/** Damerau–Levenshtein distance, stopping early above 1: only \"one slip\" matters here. */\nfunction withinOneEdit(a: string, b: string): boolean {\n  if (a === b) return true\n  if (Math.abs(a.length - b.length) > 1) return false\n  if (a.length === b.length) {\n    const diffs: number[] = []\n    for (let index = 0; index < a.length; index += 1) {\n      if (a[index] !== b[index]) diffs.push(index)\n      if (diffs.length > 2) return false\n    }\n    if (diffs.length === 1) return true\n    // One transposition of neighbors: `gmial` for `gmail`.\n    return (\n      diffs.length === 2 &&\n      diffs[1] === diffs[0] + 1 &&\n      a[diffs[0]] === b[diffs[1]] &&\n      a[diffs[1]] === b[diffs[0]]\n    )\n  }\n  const [longer, shorter] = a.length > b.length ? [a, b] : [b, a]\n  for (let index = 0; index < longer.length; index += 1) {\n    if (longer.slice(0, index) + longer.slice(index + 1) === shorter) return true\n  }\n  return false\n}\n\n/**\n * The provider a domain most likely meant, or `null` — a SUGGESTION a\n * surface may offer, never a correction applied: `gmial.com` may be a real\n * domain somebody owns, and changing an address a person typed is sending\n * their mail to someone else.\n */\nexport function suggestEmailDomain(domain: unknown): string | null {\n  const name = normalizeMailHost(domain)\n  if (!name || TYPO_EXEMPT.has(name) || TYPO_TARGETS.includes(name)) return null\n  const dot = name.lastIndexOf('.')\n  if (dot < 1) return null\n  const label = name.slice(0, dot)\n  const tld = name.slice(dot + 1)\n  for (const target of TYPO_TARGETS) {\n    const targetDot = target.lastIndexOf('.')\n    const targetLabel = target.slice(0, targetDot)\n    const targetTld = target.slice(targetDot + 1)\n    if (label === targetLabel && TLD_SLIPS[tld] === targetTld) return target\n    if (tld === targetTld && label.length >= 4 && withinOneEdit(label, targetLabel)) return target\n  }\n  return null\n}\n\n/*==========================================\n * THE DOMAIN'S MX\n *==========================================*/\n\n/** One MX record as a resolver answers it. */\nexport interface MailMxRecord {\n  exchange: string\n  priority: number\n}\n\n/**\n * The DNS the checks read, handed in by the server layer.\n *\n * `resolveMx` resolves the domain's MX records. A domain that publishes\n * none resolves `[]` or rejects with a `code` of `ENOTFOUND`, `ENODATA` or\n * `NXDOMAIN` — Node's own convention — and any other rejection is a\n * resolver that could not answer, which the checks read as \"unknown\" and\n * never as \"no MX\".\n *\n * `resolveAddress`, when given, answers whether the domain has an address\n * record (A or AAAA): the implicit MX a domain with no MX is still\n * delivered to. Omitted, a domain with no MX reads as `no_mx`.\n */\nexport interface MailDnsResolver {\n  resolveMx(domain: string): Promise<ReadonlyArray<MailMxRecord>>\n  resolveAddress?(domain: string): Promise<boolean>\n}\n\n/**\n * What a domain's DNS says about receiving mail.\n *\n * - `mx` — it publishes MX records.\n * - `implicit_mx` — no MX, but an address record, which RFC 5321 §5.1 still\n *   delivers to. Deliverable; warned, because it is usually a domain whose\n *   mail was never set up.\n * - `null_mx` — RFC 7505's `MX 0 .`: the domain says outright it takes no mail.\n * - `no_mx` — no MX and no address record: nothing to deliver to.\n */\nexport type MailDomainStatus = 'mx' | 'implicit_mx' | 'null_mx' | 'no_mx'\n\n/** One domain's answer, as the platform cache stores it. */\nexport interface MailDomainIntel {\n  domain: string\n  status: MailDomainStatus\n  /** The MX exchanges, lowest preference first; empty for every status but `mx`. */\n  mx: string[]\n  gateway: MailGateway\n  /** When the domain was looked up; trusted for {@link mailDomainIntelTtlMs}. */\n  resolvedAtMs: number\n}\n\nexport const MAIL_DOMAIN_STATUSES: readonly MailDomainStatus[] = ['mx', 'implicit_mx', 'null_mx', 'no_mx']\n\n/** Whether a status means the domain takes no mail. */\nexport function mailDomainRefusesMail(status: MailDomainStatus | null | undefined): boolean {\n  return status === 'no_mx' || status === 'null_mx'\n}\n\n/** How long an answer is trusted: a week for a domain that takes mail, a day for one that does not. */\nexport function mailDomainIntelTtlMs(status: MailDomainStatus): number {\n  return mailDomainRefusesMail(status) ? MAIL_DOMAIN_NEGATIVE_TTL_MS : MAIL_DOMAIN_INTEL_TTL_MS\n}\n\n/** Whether a cached answer is still trusted at `nowMs`. */\nexport function isMailDomainIntelFresh(intel: MailDomainIntel | null | undefined, nowMs: number): boolean {\n  return Boolean(intel) && intel.resolvedAtMs + mailDomainIntelTtlMs(intel.status) > nowMs\n}\n\n/** The resolver's codes that mean \"this domain has no such record\", as opposed to \"I could not ask\". */\nconst NO_RECORD_CODES = new Set(['ENOTFOUND', 'ENODATA', 'NXDOMAIN', 'NOTFOUND'])\n\n/** Whether a resolver rejection is an answer (\"no such record\") rather than a failure to get one. */\nexport function isNoRecordDnsError(error: unknown): boolean {\n  return NO_RECORD_CODES.has(String((error as { code?: unknown })?.code ?? '').toUpperCase())\n}\n\n/** A stored answer in its model shape, or `null` for no document or an unreadable one. */\nexport function readStoredMailDomainIntel(\n  id: string,\n  data: Record<string, unknown> | null | undefined,\n): MailDomainIntel | null {\n  if (!data) return null\n  const status = (MAIL_DOMAIN_STATUSES as readonly unknown[]).includes(data['status'])\n    ? (data['status'] as MailDomainStatus)\n    : null\n  if (!status) return null\n  const mx = Array.isArray(data['mx']) ? data['mx'].filter((entry): entry is string => typeof entry === 'string') : []\n  const resolvedAtMs = typeof data['resolvedAtMs'] === 'number' && Number.isFinite(data['resolvedAtMs']) ? data['resolvedAtMs'] : 0\n  return {\n    domain: typeof data['domain'] === 'string' && data['domain'] ? data['domain'] : id,\n    status,\n    mx,\n    gateway: status === 'mx' ? classifyMailGateway(mx) : status === 'implicit_mx' ? 'other' : 'none',\n    resolvedAtMs,\n  }\n}\n\n/**\n * A domain's mail setup, looked up — see {@link MailDomainStatus}. Rejects\n * when the resolver could not answer, and the caller decides what a missing\n * answer means; every path here reads it as \"unknown\" and sends.\n */\nexport async function resolveMailDomain(\n  resolver: MailDnsResolver,\n  domain: string,\n  nowMs: number,\n): Promise<MailDomainIntel> {\n  let records: ReadonlyArray<MailMxRecord>\n  try {\n    records = await resolver.resolveMx(domain)\n  } catch (error) {\n    if (!isNoRecordDnsError(error)) throw error\n    records = []\n  }\n  const exchanges = [...(records ?? [])]\n    .filter((record) => record && typeof record.exchange === 'string')\n    .sort((a, b) => (Number(a.priority) || 0) - (Number(b.priority) || 0))\n    .map((record) => normalizeMailHost(record.exchange))\n  const real = exchanges.filter((exchange) => exchange && exchange !== '.')\n  if (real.length) {\n    return { domain, status: 'mx', mx: real, gateway: classifyMailGateway(real), resolvedAtMs: nowMs }\n  }\n  // Records that are all \".\" (or empty, as Node reports a null MX) are RFC\n  // 7505's null MX: the domain says it takes no mail, whatever its A says.\n  if (exchanges.length) return { domain, status: 'null_mx', mx: [], gateway: 'none', resolvedAtMs: nowMs }\n  if (resolver.resolveAddress) {\n    let addressed: boolean\n    try {\n      addressed = await resolver.resolveAddress(domain)\n    } catch (error) {\n      if (!isNoRecordDnsError(error)) throw error\n      addressed = false\n    }\n    if (addressed) return { domain, status: 'implicit_mx', mx: [], gateway: 'other', resolvedAtMs: nowMs }\n  }\n  return { domain, status: 'no_mx', mx: [], gateway: 'none', resolvedAtMs: nowMs }\n}\n\n/*==========================================\n * THE VERDICT\n *==========================================*/\n\n/**\n * Who a message is for, which decides what may stop it — see the module\n * note. `transactional` is mail the recipient asked for; `bulk` is a\n * campaign, a workflow's marketing step, a sweep; `cold` is a sequence to\n * somebody who has not written to the sender.\n */\nexport type EmailSendPurpose = 'transactional' | 'bulk' | 'cold'\n\nexport type EmailDeliverabilityCode =\n  | 'invalid_syntax'\n  | 'no_mx'\n  | 'null_mx'\n  | 'implicit_mx'\n  | 'typo_domain'\n  | 'disposable_domain'\n  | 'role_address'\n  | 'gateway_held'\n\nexport type EmailDeliverabilitySeverity = 'refuse' | 'hold' | 'warn'\n\nexport interface EmailDeliverabilityFinding {\n  code: EmailDeliverabilityCode\n  severity: EmailDeliverabilitySeverity\n  /** A sentence a surface shows as is. */\n  message: string\n  /** `typo_domain` only: the address with the suggested domain. Never applied for the person. */\n  suggestion?: string\n}\n\n/**\n * What the checks conclude, worst first: `refused` (never sent), `held`\n * (bulk and cold mail wait for a person), `deliverable` (nothing stops it,\n * warnings or not), `unchecked` (the MX could not be read, so nothing is\n * known — and nothing is stopped).\n */\nexport type EmailDeliverabilityOutcome = 'refused' | 'held' | 'deliverable' | 'unchecked'\n\nexport interface EmailDeliverabilityVerdict {\n  /** The address, normalized, or `null` when it is not one. */\n  email: string | null\n  domain: string | null\n  outcome: EmailDeliverabilityOutcome\n  findings: EmailDeliverabilityFinding[]\n  intel: MailDomainIntel | null\n  gateway: MailGatewayStanding | null\n}\n\nexport interface EmailDeliverabilityInput {\n  email: unknown\n  purpose: EmailSendPurpose\n  /** The domain's MX answer; `null` or absent when it could not be read. */\n  intel?: MailDomainIntel | null\n  /** The gateway's standing with the sending domain, when the caller read the ledger. */\n  gateway?: MailGatewayStanding | null\n  /**\n   * The domain is a public mailbox provider (`gmail.com`), which is never\n   * refused for its MX. The list lives with the CRM's, so the caller asks.\n   */\n  publicMailbox?: boolean\n  /** A person already released the gateway hold for this address. */\n  holdReleased?: boolean\n}\n\nconst SEVERITY_RANK: Record<EmailDeliverabilitySeverity, number> = { refuse: 0, hold: 1, warn: 2 }\n\n/** The whole verdict for one address — see the module note. */\nexport function assessEmailDeliverability(input: EmailDeliverabilityInput): EmailDeliverabilityVerdict {\n  const email = normalizeDeliverabilityEmail(input.email)\n  if (!email) {\n    return {\n      email: null,\n      domain: null,\n      outcome: 'refused',\n      findings: [\n        {\n          code: 'invalid_syntax',\n          severity: 'refuse',\n          message: `${String(input.email ?? '').trim() || 'This'} is not an email address.`,\n        },\n      ],\n      intel: null,\n      gateway: null,\n    }\n  }\n  const domain = email.slice(email.lastIndexOf('@') + 1)\n  const findings: EmailDeliverabilityFinding[] = []\n  const bulk = input.purpose !== 'transactional'\n  const intel = input.intel ?? null\n\n  if (intel && !input.publicMailbox) {\n    if (intel.status === 'no_mx') {\n      findings.push({\n        code: 'no_mx',\n        severity: 'refuse',\n        message: `${domain} has no mail server, so ${email} would bounce.`,\n      })\n    } else if (intel.status === 'null_mx') {\n      findings.push({\n        code: 'null_mx',\n        severity: 'refuse',\n        message: `${domain} publishes a null MX record: it says it accepts no email, so ${email} would bounce.`,\n      })\n    } else if (intel.status === 'implicit_mx') {\n      findings.push({\n        code: 'implicit_mx',\n        severity: 'warn',\n        message: `${domain} has no MX record. Mail may still reach its web server's address, but most domains like this never set up email.`,\n      })\n    }\n  }\n\n  const suggestion = suggestEmailDomain(domain)\n  if (suggestion) {\n    const local = email.slice(0, email.lastIndexOf('@'))\n    findings.push({\n      code: 'typo_domain',\n      severity: 'warn',\n      message: `Did you mean ${local}@${suggestion}? ${domain} looks like a typo.`,\n      suggestion: `${local}@${suggestion}`,\n    })\n  }\n  if (isDisposableEmailDomain(domain)) {\n    findings.push({\n      code: 'disposable_domain',\n      severity: 'warn',\n      message: `${domain} hands out mailboxes that expire, so this address may stop working soon.`,\n    })\n  }\n  if (bulk && isRoleEmailAddress(email)) {\n    findings.push({\n      code: 'role_address',\n      severity: 'warn',\n      message: `${email} is a shared role inbox rather than a person, which marketing and cold mail should avoid.`,\n    })\n  }\n\n  const gateway = input.gateway ?? null\n  if (bulk && gateway && input.holdReleased !== true && mailGatewayHolds(gateway)) {\n    findings.push({\n      code: 'gateway_held',\n      severity: 'hold',\n      message: `${mailGatewayHoldSentence(gateway.gateway, gateway.blocked30)}, so bulk mail to ${domain} is held.`,\n    })\n  }\n\n  findings.sort((a, b) => SEVERITY_RANK[a.severity] - SEVERITY_RANK[b.severity])\n  const outcome: EmailDeliverabilityOutcome = findings.some((finding) => finding.severity === 'refuse')\n    ? 'refused'\n    : findings.some((finding) => finding.severity === 'hold')\n      ? 'held'\n      : intel\n        ? 'deliverable'\n        : 'unchecked'\n  return { email, domain, outcome, findings, intel, gateway }\n}\n\n/** The finding that decided a refusal or a hold, or `null` when nothing stops the address. */\nexport function decidingDeliverabilityFinding(verdict: EmailDeliverabilityVerdict): EmailDeliverabilityFinding | null {\n  return verdict.findings.find((finding) => finding.severity !== 'warn') ?? null\n}\n\n/**\n * What a bulk send's review says about the addresses the checks took out,\n * or `null` when they took out nobody: \"3 recipients excluded: no mail\n * server · 2 behind a gateway that refused this sender\".\n */\nexport function deliverabilityExclusionSummary(counts: {\n  noMailServer?: number | null\n  gatewayHeld?: number | null\n}): string | null {\n  const noMailServer = Math.max(0, Math.floor(Number(counts?.noMailServer) || 0))\n  const gatewayHeld = Math.max(0, Math.floor(Number(counts?.gatewayHeld) || 0))\n  const total = noMailServer + gatewayHeld\n  if (!total) return null\n  const parts = [\n    ...(noMailServer ? [`${noMailServer.toLocaleString('en-US')} no mail server`] : []),\n    ...(gatewayHeld ? [`${gatewayHeld.toLocaleString('en-US')} behind a gateway that refused this sender`] : []),\n  ]\n  return `${total.toLocaleString('en-US')} ${total === 1 ? 'recipient' : 'recipients'} excluded: ${parts.join(' · ')}`\n}\n\n/*==========================================\n * THE SEAM ON `sendEmail`\n *\n * `sendEmail` lives in this library and the store it would need lives in\n * `@aglyn/tenant-data-admin`, which imports this one — so the durable half\n * reaches the send by injection, the way the send-rate governor and the\n * marketing gate do. Nothing installed is nothing checked: a deployment\n * without the server layer sends as it always did.\n *==========================================*/\n\n/** What `sendEmail` asks before a message leaves. */\nexport interface EmailDeliverabilityPreflightRequest {\n  /** The recipients, normalized and lowercased. */\n  recipients: string[]\n  purpose: EmailSendPurpose\n  /** The domain the message leaves from, or `null` when it could not be read. */\n  sendingDomain: string | null\n  /**\n   * Whose reputation the sending domain is: a site's own verified domain\n   * (`custom`), the pooled tenant identity (`shared`), or Aglyn's own\n   * (`platform`). The last two are learned at platform level, where a block\n   * hurts every tenant.\n   */\n  sendingSource: 'custom' | 'shared' | 'platform'\n  context?: string\n  hostId?: string | null\n}\n\nexport interface EmailDeliverabilityPreflightVerdict {\n  /** Recipients whose domain takes no mail. Never sent, whatever the purpose. */\n  refused: Array<{ email: string; code: EmailDeliverabilityCode; reason: string }>\n  /** Recipients behind a gateway that refused this sender twice. Bulk and cold mail only. */\n  held: Array<{ email: string; gateway: MailGateway; reason: string }>\n}\n\nexport type EmailDeliverabilityPreflight = (\n  request: EmailDeliverabilityPreflightRequest,\n) => Promise<EmailDeliverabilityPreflightVerdict>\n\nlet installedPreflight: EmailDeliverabilityPreflight | null = null\n\n/** Installs the durable preflight. Called once, from `@aglyn/tenant-data-admin`. */\nexport function setEmailDeliverabilityPreflight(preflight: EmailDeliverabilityPreflight | null): void {\n  installedPreflight = preflight\n}\n\n/** The installed preflight, or `null` when nothing has been installed. */\nexport function getEmailDeliverabilityPreflight(): EmailDeliverabilityPreflight | null {\n  return installedPreflight\n}\n\n/** Test seam: forget any installed preflight. */\nexport function resetEmailDeliverabilityPreflightForTests(): void {\n  installedPreflight = null\n}\n\n/**\n * How long `sendEmail` waits for the preflight before sending anyway. A\n * cold lookup is one DNS round trip and one document read; a preflight\n * slower than this is an outage on the control, and a control outage must\n * not become a mail outage.\n */\nexport const EMAIL_DELIVERABILITY_PREFLIGHT_TIMEOUT_MS = 2_500\n"],"names":["classifyMailGateway","MAIL_DOMAIN_INTEL_TTL_MS","MAIL_DOMAIN_NEGATIVE_TTL_MS","mailGatewayHolds","mailGatewayHoldSentence","normalizeMailHost","DOMAIN_MAX","LABEL","LOCAL_PART","normalizeDeliverabilityEmail","value","address","String","trim","toLowerCase","at","lastIndexOf","length","local","slice","domain","test","isDeliverabilityDomain","labels","split","every","label","emailAddressDomain","email","ROLE_LOCAL_PARTS","Set","isRoleEmailAddress","has","DISPOSABLE_DOMAINS","isDisposableEmailDomain","TYPO_TARGETS","TYPO_EXEMPT","TLD_SLIPS","co","con","cm","om","comm","cmo","ocm","vom","xom","cpm","coom","ne","nte","ner","nett","withinOneEdit","a","b","Math","abs","diffs","index","push","longer","shorter","suggestEmailDomain","name","includes","dot","tld","target","targetDot","targetLabel","targetTld","MAIL_DOMAIN_STATUSES","mailDomainRefusesMail","status","mailDomainIntelTtlMs","isMailDomainIntelFresh","intel","nowMs","Boolean","resolvedAtMs","NO_RECORD_CODES","isNoRecordDnsError","error","code","toUpperCase","readStoredMailDomainIntel","id","data","mx","Array","isArray","filter","entry","Number","isFinite","gateway","resolveMailDomain","resolver","records","resolveMx","exchanges","record","exchange","sort","priority","map","real","resolveAddress","addressed","SEVERITY_RANK","refuse","hold","warn","assessEmailDeliverability","input","outcome","findings","severity","message","bulk","purpose","publicMailbox","suggestion","holdReleased","blocked30","some","finding","decidingDeliverabilityFinding","verdict","find","deliverabilityExclusionSummary","counts","noMailServer","max","floor","gatewayHeld","total","parts","toLocaleString","join","installedPreflight","setEmailDeliverabilityPreflight","preflight","getEmailDeliverabilityPreflight","resetEmailDeliverabilityPreflightForTests","EMAIL_DELIVERABILITY_PREFLIGHT_TIMEOUT_MS"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4CA4C4C,GAE5C,SACEA,mBAAmB,EACnBC,wBAAwB,EACxBC,2BAA2B,EAG3BC,gBAAgB,EAChBC,uBAAuB,EACvBC,iBAAiB,QACZ,oBAAgB;AAEvB;;4CAE4C,GAE5C,gEAAgE,GAChE,MAAMC,aAAa;AAEnB,8EAA8E,GAC9E,MAAMC,QAAQ;AAEd,gFAAgF,GAChF,MAAMC,aAAa;AAEnB,4FAA4F,GAC5F,OAAO,SAASC,6BAA6BC,KAAc;IACzD,MAAMC,UAAUC,OAAOF,gBAAAA,QAAS,IAC7BG,IAAI,GACJC,WAAW;IACd,MAAMC,KAAKJ,QAAQK,WAAW,CAAC;IAC/B,IAAID,KAAK,KAAKA,OAAOJ,QAAQM,MAAM,GAAG,KAAKN,QAAQM,MAAM,GAAG,KAAK,OAAO;IACxE,MAAMC,QAAQP,QAAQQ,KAAK,CAAC,GAAGJ;IAC/B,MAAMK,SAAST,QAAQQ,KAAK,CAACJ,KAAK;IAClC,IAAIG,MAAMD,MAAM,GAAG,MAAM,CAACT,WAAWa,IAAI,CAACH,QAAQ,OAAO;IACzD,IAAI,CAACI,uBAAuBF,SAAS,OAAO;IAC5C,OAAOT;AACT;AAEA,sFAAsF,GACtF,OAAO,SAASW,uBAAuBZ,KAAc;IACnD,MAAMU,SAASR,OAAOF,gBAAAA,QAAS;IAC/B,IAAI,CAACU,UAAUA,OAAOH,MAAM,GAAGX,YAAY,OAAO;IAClD,MAAMiB,SAASH,OAAOI,KAAK,CAAC;IAC5B,IAAID,OAAON,MAAM,GAAG,KAAK,CAACM,OAAOE,KAAK,CAAC,CAACC,QAAUnB,MAAMc,IAAI,CAACK,SAAS,OAAO;IAC7E,OAAO,CAAC,QAAQL,IAAI,CAACE,MAAM,CAACA,OAAON,MAAM,GAAG,EAAE;AAChD;AAEA,iFAAiF,GACjF,OAAO,SAASU,mBAAmBC,KAAc;IAC/C,MAAMjB,UAAUF,6BAA6BmB;IAC7C,OAAOjB,UAAUA,QAAQQ,KAAK,CAACR,QAAQK,WAAW,CAAC,OAAO,KAAK;AACjE;AAEA;;;;;CAKC,GACD,MAAMa,mBAAwC,IAAIC,IAIhD,AAHA,yEAAyE;AACzE,yEAAyE;AACzE,iEAAiE;AAE/D,CAAA,0EACA,0EACA,4EACA,gBAAe,EACfN,KAAK,CAAC;AAGV,sFAAsF,GACtF,OAAO,SAASO,mBAAmBH,KAAc;IAC/C,MAAMjB,UAAUF,6BAA6BmB;IAC7C,IAAI,CAACjB,SAAS,OAAO;IACrB,MAAMO,QAAQP,QAAQQ,KAAK,CAAC,GAAGR,QAAQK,WAAW,CAAC,MAAMQ,KAAK,CAAC,IAAI,CAAC,EAAE;IACtE,OAAOK,iBAAiBG,GAAG,CAACd;AAC9B;AAEA;;;CAGC,GACD,MAAMe,qBAA0C,IAAIH,IAAI;IACtD;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD;AAED,uDAAuD,GACvD,OAAO,SAASI,wBAAwBd,MAAe;IACrD,OAAOa,mBAAmBD,GAAG,CAAC3B,kBAAkBe;AAClD;AAEA;;;;CAIC,GACD,MAAMe,eAAkC;IACtC;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD;AAED,iFAAiF,GACjF,MAAMC,cAAmC,IAAIN,IAAI;IAC/C;IACA;IACA;IACA;IACA;IACA;IACA;CACD;AAED,yDAAyD,GACzD,MAAMO,YAA8C;IAClDC,IAAI;IACJC,KAAK;IACLC,IAAI;IACJC,IAAI;IACJC,MAAM;IACNC,KAAK;IACLC,KAAK;IACLC,KAAK;IACLC,KAAK;IACLC,KAAK;IACLC,MAAM;IACNC,IAAI;IACJC,KAAK;IACLC,KAAK;IACLC,MAAM;AACR;AAEA,wFAAwF,GACxF,SAASC,cAAcC,CAAS,EAAEC,CAAS;IACzC,IAAID,MAAMC,GAAG,OAAO;IACpB,IAAIC,KAAKC,GAAG,CAACH,EAAErC,MAAM,GAAGsC,EAAEtC,MAAM,IAAI,GAAG,OAAO;IAC9C,IAAIqC,EAAErC,MAAM,KAAKsC,EAAEtC,MAAM,EAAE;QACzB,MAAMyC,QAAkB,EAAE;QAC1B,IAAK,IAAIC,QAAQ,GAAGA,QAAQL,EAAErC,MAAM,EAAE0C,SAAS,EAAG;YAChD,IAAIL,CAAC,CAACK,MAAM,KAAKJ,CAAC,CAACI,MAAM,EAAED,MAAME,IAAI,CAACD;YACtC,IAAID,MAAMzC,MAAM,GAAG,GAAG,OAAO;QAC/B;QACA,IAAIyC,MAAMzC,MAAM,KAAK,GAAG,OAAO;QAC/B,uDAAuD;QACvD,OACEyC,MAAMzC,MAAM,KAAK,KACjByC,KAAK,CAAC,EAAE,KAAKA,KAAK,CAAC,EAAE,GAAG,KACxBJ,CAAC,CAACI,KAAK,CAAC,EAAE,CAAC,KAAKH,CAAC,CAACG,KAAK,CAAC,EAAE,CAAC,IAC3BJ,CAAC,CAACI,KAAK,CAAC,EAAE,CAAC,KAAKH,CAAC,CAACG,KAAK,CAAC,EAAE,CAAC;IAE/B;IACA,MAAM,CAACG,QAAQC,QAAQ,GAAGR,EAAErC,MAAM,GAAGsC,EAAEtC,MAAM,GAAG;QAACqC;QAAGC;KAAE,GAAG;QAACA;QAAGD;KAAE;IAC/D,IAAK,IAAIK,QAAQ,GAAGA,QAAQE,OAAO5C,MAAM,EAAE0C,SAAS,EAAG;QACrD,IAAIE,OAAO1C,KAAK,CAAC,GAAGwC,SAASE,OAAO1C,KAAK,CAACwC,QAAQ,OAAOG,SAAS,OAAO;IAC3E;IACA,OAAO;AACT;AAEA;;;;;CAKC,GACD,OAAO,SAASC,mBAAmB3C,MAAe;IAChD,MAAM4C,OAAO3D,kBAAkBe;IAC/B,IAAI,CAAC4C,QAAQ5B,YAAYJ,GAAG,CAACgC,SAAS7B,aAAa8B,QAAQ,CAACD,OAAO,OAAO;IAC1E,MAAME,MAAMF,KAAKhD,WAAW,CAAC;IAC7B,IAAIkD,MAAM,GAAG,OAAO;IACpB,MAAMxC,QAAQsC,KAAK7C,KAAK,CAAC,GAAG+C;IAC5B,MAAMC,MAAMH,KAAK7C,KAAK,CAAC+C,MAAM;IAC7B,KAAK,MAAME,UAAUjC,aAAc;QACjC,MAAMkC,YAAYD,OAAOpD,WAAW,CAAC;QACrC,MAAMsD,cAAcF,OAAOjD,KAAK,CAAC,GAAGkD;QACpC,MAAME,YAAYH,OAAOjD,KAAK,CAACkD,YAAY;QAC3C,IAAI3C,UAAU4C,eAAejC,SAAS,CAAC8B,IAAI,KAAKI,WAAW,OAAOH;QAClE,IAAID,QAAQI,aAAa7C,MAAMT,MAAM,IAAI,KAAKoC,cAAc3B,OAAO4C,cAAc,OAAOF;IAC1F;IACA,OAAO;AACT;AAqDA,OAAO,MAAMI,uBAAoD;IAAC;IAAM;IAAe;IAAW;CAAQ,CAAA;AAE1G,qDAAqD,GACrD,OAAO,SAASC,sBAAsBC,MAA2C;IAC/E,OAAOA,WAAW,WAAWA,WAAW;AAC1C;AAEA,qGAAqG,GACrG,OAAO,SAASC,qBAAqBD,MAAwB;IAC3D,OAAOD,sBAAsBC,UAAUxE,8BAA8BD;AACvE;AAEA,yDAAyD,GACzD,OAAO,SAAS2E,uBAAuBC,KAAyC,EAAEC,KAAa;IAC7F,OAAOC,QAAQF,UAAUA,MAAMG,YAAY,GAAGL,qBAAqBE,MAAMH,MAAM,IAAII;AACrF;AAEA,sGAAsG,GACtG,MAAMG,kBAAkB,IAAInD,IAAI;IAAC;IAAa;IAAW;IAAY;CAAW;AAEhF,mGAAmG,GACnG,OAAO,SAASoD,mBAAmBC,KAAc;;IAC/C,OAAOF,gBAAgBjD,GAAG,CAACpB,eAAQuE,yBAAD,AAACA,MAA8BC,IAAI,mBAAI,IAAIC,WAAW;AAC1F;AAEA,wFAAwF,GACxF,OAAO,SAASC,0BACdC,EAAU,EACVC,IAAgD;IAEhD,IAAI,CAACA,MAAM,OAAO;IAClB,MAAMd,SAAS,AAACF,qBAA4CP,QAAQ,CAACuB,IAAI,CAAC,SAAS,IAC9EA,IAAI,CAAC,SAAS,GACf;IACJ,IAAI,CAACd,QAAQ,OAAO;IACpB,MAAMe,KAAKC,MAAMC,OAAO,CAACH,IAAI,CAAC,KAAK,IAAIA,IAAI,CAAC,KAAK,CAACI,MAAM,CAAC,CAACC,QAA2B,OAAOA,UAAU,YAAY,EAAE;IACpH,MAAMb,eAAe,OAAOQ,IAAI,CAAC,eAAe,KAAK,YAAYM,OAAOC,QAAQ,CAACP,IAAI,CAAC,eAAe,IAAIA,IAAI,CAAC,eAAe,GAAG;IAChI,OAAO;QACLpE,QAAQ,OAAOoE,IAAI,CAAC,SAAS,KAAK,YAAYA,IAAI,CAAC,SAAS,GAAGA,IAAI,CAAC,SAAS,GAAGD;QAChFb;QACAe;QACAO,SAAStB,WAAW,OAAO1E,oBAAoByF,MAAMf,WAAW,gBAAgB,UAAU;QAC1FM;IACF;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeiB,kBACpBC,QAAyB,EACzB9E,MAAc,EACd0D,KAAa;IAEb,IAAIqB;IACJ,IAAI;QACFA,UAAU,MAAMD,SAASE,SAAS,CAAChF;IACrC,EAAE,OAAO+D,OAAO;QACd,IAAI,CAACD,mBAAmBC,QAAQ,MAAMA;QACtCgB,UAAU,EAAE;IACd;IACA,MAAME,YAAY;WAAKF,kBAAAA,UAAW,EAAE;KAAE,CACnCP,MAAM,CAAC,CAACU,SAAWA,UAAU,OAAOA,OAAOC,QAAQ,KAAK,UACxDC,IAAI,CAAC,CAAClD,GAAGC,IAAM,AAACuC,CAAAA,OAAOxC,EAAEmD,QAAQ,KAAK,CAAA,IAAMX,CAAAA,OAAOvC,EAAEkD,QAAQ,KAAK,CAAA,GAClEC,GAAG,CAAC,CAACJ,SAAWjG,kBAAkBiG,OAAOC,QAAQ;IACpD,MAAMI,OAAON,UAAUT,MAAM,CAAC,CAACW,WAAaA,YAAYA,aAAa;IACrE,IAAII,KAAK1F,MAAM,EAAE;QACf,OAAO;YAAEG;YAAQsD,QAAQ;YAAMe,IAAIkB;YAAMX,SAAShG,oBAAoB2G;YAAO3B,cAAcF;QAAM;IACnG;IACA,yEAAyE;IACzE,yEAAyE;IACzE,IAAIuB,UAAUpF,MAAM,EAAE,OAAO;QAAEG;QAAQsD,QAAQ;QAAWe,IAAI,EAAE;QAAEO,SAAS;QAAQhB,cAAcF;IAAM;IACvG,IAAIoB,SAASU,cAAc,EAAE;QAC3B,IAAIC;QACJ,IAAI;YACFA,YAAY,MAAMX,SAASU,cAAc,CAACxF;QAC5C,EAAE,OAAO+D,OAAO;YACd,IAAI,CAACD,mBAAmBC,QAAQ,MAAMA;YACtC0B,YAAY;QACd;QACA,IAAIA,WAAW,OAAO;YAAEzF;YAAQsD,QAAQ;YAAee,IAAI,EAAE;YAAEO,SAAS;YAAShB,cAAcF;QAAM;IACvG;IACA,OAAO;QAAE1D;QAAQsD,QAAQ;QAASe,IAAI,EAAE;QAAEO,SAAS;QAAQhB,cAAcF;IAAM;AACjF;AAqEA,MAAMgC,gBAA6D;IAAEC,QAAQ;IAAGC,MAAM;IAAGC,MAAM;AAAE;AAEjG,6DAA6D,GAC7D,OAAO,SAASC,0BAA0BC,KAA+B;QAqBzDA,cAiDEA;IArEhB,MAAMvF,QAAQnB,6BAA6B0G,MAAMvF,KAAK;IACtD,IAAI,CAACA,OAAO;YASeuF;QARzB,OAAO;YACLvF,OAAO;YACPR,QAAQ;YACRgG,SAAS;YACTC,UAAU;gBACR;oBACEjC,MAAM;oBACNkC,UAAU;oBACVC,SAAS,GAAG3G,QAAOuG,eAAAA,MAAMvF,KAAK,YAAXuF,eAAe,IAAItG,IAAI,MAAM,OAAO,yBAAyB,CAAC;gBACnF;aACD;YACDgE,OAAO;YACPmB,SAAS;QACX;IACF;IACA,MAAM5E,SAASQ,MAAMT,KAAK,CAACS,MAAMZ,WAAW,CAAC,OAAO;IACpD,MAAMqG,WAAyC,EAAE;IACjD,MAAMG,OAAOL,MAAMM,OAAO,KAAK;IAC/B,MAAM5C,SAAQsC,eAAAA,MAAMtC,KAAK,YAAXsC,eAAe;IAE7B,IAAItC,SAAS,CAACsC,MAAMO,aAAa,EAAE;QACjC,IAAI7C,MAAMH,MAAM,KAAK,SAAS;YAC5B2C,SAASzD,IAAI,CAAC;gBACZwB,MAAM;gBACNkC,UAAU;gBACVC,SAAS,GAAGnG,OAAO,wBAAwB,EAAEQ,MAAM,cAAc,CAAC;YACpE;QACF,OAAO,IAAIiD,MAAMH,MAAM,KAAK,WAAW;YACrC2C,SAASzD,IAAI,CAAC;gBACZwB,MAAM;gBACNkC,UAAU;gBACVC,SAAS,GAAGnG,OAAO,6DAA6D,EAAEQ,MAAM,cAAc,CAAC;YACzG;QACF,OAAO,IAAIiD,MAAMH,MAAM,KAAK,eAAe;YACzC2C,SAASzD,IAAI,CAAC;gBACZwB,MAAM;gBACNkC,UAAU;gBACVC,SAAS,GAAGnG,OAAO,gHAAgH,CAAC;YACtI;QACF;IACF;IAEA,MAAMuG,aAAa5D,mBAAmB3C;IACtC,IAAIuG,YAAY;QACd,MAAMzG,QAAQU,MAAMT,KAAK,CAAC,GAAGS,MAAMZ,WAAW,CAAC;QAC/CqG,SAASzD,IAAI,CAAC;YACZwB,MAAM;YACNkC,UAAU;YACVC,SAAS,CAAC,aAAa,EAAErG,MAAM,CAAC,EAAEyG,WAAW,EAAE,EAAEvG,OAAO,mBAAmB,CAAC;YAC5EuG,YAAY,GAAGzG,MAAM,CAAC,EAAEyG,YAAY;QACtC;IACF;IACA,IAAIzF,wBAAwBd,SAAS;QACnCiG,SAASzD,IAAI,CAAC;YACZwB,MAAM;YACNkC,UAAU;YACVC,SAAS,GAAGnG,OAAO,wEAAwE,CAAC;QAC9F;IACF;IACA,IAAIoG,QAAQzF,mBAAmBH,QAAQ;QACrCyF,SAASzD,IAAI,CAAC;YACZwB,MAAM;YACNkC,UAAU;YACVC,SAAS,GAAG3F,MAAM,yFAAyF,CAAC;QAC9G;IACF;IAEA,MAAMoE,WAAUmB,iBAAAA,MAAMnB,OAAO,YAAbmB,iBAAiB;IACjC,IAAIK,QAAQxB,WAAWmB,MAAMS,YAAY,KAAK,QAAQzH,iBAAiB6F,UAAU;QAC/EqB,SAASzD,IAAI,CAAC;YACZwB,MAAM;YACNkC,UAAU;YACVC,SAAS,GAAGnH,wBAAwB4F,QAAQA,OAAO,EAAEA,QAAQ6B,SAAS,EAAE,kBAAkB,EAAEzG,OAAO,SAAS,CAAC;QAC/G;IACF;IAEAiG,SAASb,IAAI,CAAC,CAAClD,GAAGC,IAAMuD,aAAa,CAACxD,EAAEgE,QAAQ,CAAC,GAAGR,aAAa,CAACvD,EAAE+D,QAAQ,CAAC;IAC7E,MAAMF,UAAsCC,SAASS,IAAI,CAAC,CAACC,UAAYA,QAAQT,QAAQ,KAAK,YACxF,YACAD,SAASS,IAAI,CAAC,CAACC,UAAYA,QAAQT,QAAQ,KAAK,UAC9C,SACAzC,QACE,gBACA;IACR,OAAO;QAAEjD;QAAOR;QAAQgG;QAASC;QAAUxC;QAAOmB;IAAQ;AAC5D;AAEA,4FAA4F,GAC5F,OAAO,SAASgC,8BAA8BC,OAAmC;QACxEA;IAAP,QAAOA,yBAAAA,QAAQZ,QAAQ,CAACa,IAAI,CAAC,CAACH,UAAYA,QAAQT,QAAQ,KAAK,mBAAxDW,yBAAmE;AAC5E;AAEA;;;;CAIC,GACD,OAAO,SAASE,+BAA+BC,MAG9C;IACC,MAAMC,eAAe7E,KAAK8E,GAAG,CAAC,GAAG9E,KAAK+E,KAAK,CAACzC,OAAOsC,0BAAAA,OAAQC,YAAY,KAAK;IAC5E,MAAMG,cAAchF,KAAK8E,GAAG,CAAC,GAAG9E,KAAK+E,KAAK,CAACzC,OAAOsC,0BAAAA,OAAQI,WAAW,KAAK;IAC1E,MAAMC,QAAQJ,eAAeG;IAC7B,IAAI,CAACC,OAAO,OAAO;IACnB,MAAMC,QAAQ;WACRL,eAAe;YAAC,GAAGA,aAAaM,cAAc,CAAC,SAAS,eAAe,CAAC;SAAC,GAAG,EAAE;WAC9EH,cAAc;YAAC,GAAGA,YAAYG,cAAc,CAAC,SAAS,0CAA0C,CAAC;SAAC,GAAG,EAAE;KAC5G;IACD,OAAO,GAAGF,MAAME,cAAc,CAAC,SAAS,CAAC,EAAEF,UAAU,IAAI,cAAc,aAAa,WAAW,EAAEC,MAAME,IAAI,CAAC,QAAQ;AACtH;AAyCA,IAAIC,qBAA0D;AAE9D,kFAAkF,GAClF,OAAO,SAASC,gCAAgCC,SAA8C;IAC5FF,qBAAqBE;AACvB;AAEA,wEAAwE,GACxE,OAAO,SAASC;IACd,OAAOH;AACT;AAEA,+CAA+C,GAC/C,OAAO,SAASI;IACdJ,qBAAqB;AACvB;AAEA;;;;;CAKC,GACD,OAAO,MAAMK,4CAA4C,KAAK"}

package/src/lib/email-delivery-events.d.ts

@@ -14,45 +14,6 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-/**
- * WHAT HAPPENED TO A MESSAGE, IN OUR OWN VOCABULARY.
- *
- * ## The seam
- *
- * A staff answer to "did they get the invite, and did they open it?" must not
- * be a question about Resend. Two things follow from that, and this module is
- * both of them:
- *
- * 1. **The stored shape is ours.** Nothing downstream — the delivery log, the
- *    staff card, a future export — reads a provider's field names or its event
- *    strings. Swapping the sender changes exactly one function in this file
- *    and nothing else in the tree.
- * 2. **The history is ours.** The log is written into our own Firestore and
- *    read from there, never from the provider on render. A provider's list
- *    endpoint is a different shape per vendor, has its own retention window,
- *    and disappears entirely with the account; a record we keep survives the
- *    migration that the seam exists to make possible.
- *
- *    That is a rule about the READ PATH, not a rule against ever reading the
- *    provider. The event feed only knows mail sent after it was connected, so
- *    a log fed by events alone is empty for all existing history — which is
- *    precisely the mail a support question is about. The second half of this
- *    module (see THE READ SIDE OF THE SEAM below) imports that history
- *    through the same neutral vocabulary, once, into the same store.
- *
- * ## Pure on purpose
- *
- * No Firestore and no admin SDK. `system-email-catalog` is imported by console
- * CLIENT components through this library's barrel, so anything reachable from
- * it that touched `firebase-admin` would drag the admin SDK into a browser
- * bundle. Normalisation is a pure function of a payload; the writing lives in
- * `@aglyn/tenant-data-admin/server/email-delivery-log`.
- *
- * The one `fetch` is `resendDeliveryHistorySource`, which is a function that
- * must be CALLED with a key to do anything — it holds no module state and is
- * unreachable from a client component, unlike an admin-SDK import, which
- * executes on load.
- */
 /**
  * The lifecycle of one message, in the order it normally happens.
  *
@@ -98,7 +59,23 @@ export interface EmailDeliveryEvent {
     bounceType: 'permanent' | 'transient' | 'undetermined' | null;
     /** Provider-supplied explanation, for the states that carry one. */
     detail: string | null;
+    /**
+     * The bare sender address, lowercased: the domain it names is the sending
+     * domain a gateway's verdict is filed against (AGL-3328). Absent from
+     * events normalized before it existed, and `null` when the provider sent
+     * none.
+     */
+    from?: string | null;
+    /**
+     * `bounced` only: the enhanced status code (`5.7.1`) and the receiving
+     * server the provider's bounce message names, read by `readBounceText` —
+     * what a Gmail DSN hands over as `Status` and `Remote-MTA` (AGL-3328).
+     */
+    bounceStatus?: string | null;
+    remoteMta?: string | null;
 }
+/** The bare address of a `From:` value (`"Acme" <hi@acme.com>` → `hi@acme.com`), lowercased. */
+export declare function bareSenderAddress(value: unknown): string | null;
 /** The later of two statuses on the lifecycle, worst winning a tie. */
 export declare function worstDeliveryStatus(current: EmailDeliveryEventType | null | undefined, next: EmailDeliveryEventType): EmailDeliveryEventType;
 /** Tags arrive as an array of `{name, value}` or a plain map — accept both. */