@endora-commerce/mod-email 0.100.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Endora sp. z o.o. and the Endora Commerce contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,49 @@
+<!-- Generated by `pnpm --filter backend run manifests:generate`. Delete this line to take the file over; a README without it is never regenerated. -->
+
+# @endora-commerce/mod-email
+
+Mailer abstraction with Console / SMTP drivers for transactional email.
+
+## What this is
+
+An **Endora Commerce module package**. Its module id is `email` — the identity of record in the platform's registries, in its migrations and in its setting, permission and translation codes.
+
+A module is not imported by application code. The platform discovers the extension packages an instance has installed, reads the manifest on the root subpath and composes the module from it, so installing this package and starting the instance is the whole integration.
+
+## Entry points
+
+| Import | Contents |
+| --- | --- |
+| `@endora-commerce/mod-email` | the module manifest — its id, version, dependencies, settings and activation |
+| `@endora-commerce/mod-email/backend` | the composition root the platform calls, with the entities, services, routes and workers it registers |
+| `@endora-commerce/mod-email/migrations` | the module’s own schema migrations, in the order the platform runs them |
+
+## Depends on
+
+Everything below is a **peer** dependency, so the application resolves exactly one copy of each — two copies of a host or of React are a runtime failure rather than a type error. An entry marked *optional* is needed only by the layers that use it.
+
+**Endora packages**
+
+- `@endora-commerce/contracts`
+- `@endora-commerce/platform`
+
+**Third-party**
+
+- `@mikro-orm/core` ^6
+- `@mikro-orm/migrations` ^6
+- `@mikro-orm/postgresql` ^6
+- `nodemailer` ^10
+
+## What the tarball carries
+
+- `dist/` — the compiled JavaScript and its type declarations
+
+## Install
+
+```bash
+pnpm add @endora-commerce/mod-email
+```
+
+## Licence
+
+MIT — the text is in `LICENSE`, beside this file.

package/dist/backend/entities/email-delivery.entity.d.ts

@@ -0,0 +1,53 @@
+import { OptionalProps } from '@mikro-orm/core';
+/**
+ * Persistent record of one outbound e-mail decision (D-59, issue #114).
+ *
+ * Deliberately the `webhook_deliveries` shape rather than a new invention: same
+ * problem (an outbound attempt whose outcome nothing survives), same position
+ * (written after the attempt, by the seam that made it), same answer (one row
+ * per attempt carrying the outcome, no queue, no `pending` state, no row that
+ * exists before something was attempted). D-58 refused the transactional outbox
+ * for the whole platform; D-59 keeps that refusal for invoice and KSeF document
+ * mail and buys the visibility with this row instead.
+ *
+ * Global rather than org-scoped, for the same reason `webhook_deliveries` is:
+ * the transport seam has no tenant — a boot-time send, a worker and an admin
+ * request all reach it — and the row is a platform-operator audit trail, read
+ * by the person answering "did this leave the building", not by a buyer.
+ */
+export declare class EmailDelivery {
+    [OptionalProps]?: 'id' | 'createdAt' | 'updatedAt' | 'attemptedAt' | 'reason' | 'detail' | 'subject' | 'salesChannelId' | 'documentType' | 'documentId' | 'context';
+    id: string;
+    /** The caller's idempotency key. Not unique: a resend is a second decision. */
+    messageId: string;
+    recipient: string;
+    /** The transactional-email code, or a legacy in-code builder's own kind. */
+    kind: string;
+    /**
+     * The three answers, and the split is the load-bearing part of this table.
+     *
+     * `suppressed` is the platform deliberately not sending — the operator
+     * switched this e-mail off, or the transport already accepted this message
+     * id. `failed` is a message that was meant to go out and did not: the
+     * transport raised, none is wired, or no template exists for the code. Since
+     * feature 074 shipped per-e-mail deactivation, fusing the two would tell an
+     * operator that a configuration they chose is an outage.
+     */
+    status: 'sent' | 'suppressed' | 'failed';
+    /** Which suppression or which failure, `null` for a delivered message. */
+    reason?: string | null;
+    /** Free text for the reason — a transport error message, typically. */
+    detail?: string | null;
+    subject?: string | null;
+    /** The channel the message was rendered for, `null` for platform-wide. */
+    salesChannelId?: string | null;
+    /** The business document delivered, e.g. `invoice` — D-59's whole subject. */
+    documentType?: string | null;
+    documentId?: string | null;
+    /** The sender's `meta` envelope, kept verbatim for the after-the-fact read. */
+    context?: Record<string, unknown> | null;
+    attemptedAt: Date;
+    createdAt: Date;
+    updatedAt: Date;
+}
+//# sourceMappingURL=email-delivery.entity.d.ts.map

package/dist/backend/entities/email-delivery.entity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-delivery.entity.d.ts","sourceRoot":"","sources":["../../../src/backend/entities/email-delivery.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,aAAa,EAAwB,MAAM,iBAAiB,CAAC;AAIrF;;;;;;;;;;;;;;;GAeG;AACH,qBAEa,aAAa;IACxB,CAAC,aAAa,CAAC,CAAC,EACZ,IAAI,GACJ,WAAW,GACX,WAAW,GACX,aAAa,GACb,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,gBAAgB,GAChB,cAAc,GACd,YAAY,GACZ,SAAS,CAAC;IAGd,EAAE,EAAE,MAAM,CAAgB;IAE1B,+EAA+E;IAG/E,SAAS,EAAG,MAAM,CAAC;IAInB,SAAS,EAAG,MAAM,CAAC;IAEnB,4EAA4E;IAG5E,IAAI,EAAG,MAAM,CAAC;IAEd;;;;;;;;;OASG;IAGH,MAAM,EAAG,MAAM,GAAG,YAAY,GAAG,QAAQ,CAAC;IAE1C,0EAA0E;IAE1E,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEvB,uEAAuE;IAEvE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGvB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAExB,0EAA0E;IAE1E,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE/B,8EAA8E;IAG9E,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAI7B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B,+EAA+E;IAE/E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAIzC,WAAW,EAAE,IAAI,CAAc;IAG/B,SAAS,EAAE,IAAI,CAAc;IAG7B,SAAS,EAAE,IAAI,CAAc;CAC9B"}

package/dist/backend/entities/email-delivery.entity.js

@@ -0,0 +1,136 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Entity, Index, OptionalProps, PrimaryKey, Property } from '@mikro-orm/core';
+import { GlobalEntity } from '@endora-commerce/platform/tenancy';
+import { randomUUID } from 'crypto';
+/**
+ * Persistent record of one outbound e-mail decision (D-59, issue #114).
+ *
+ * Deliberately the `webhook_deliveries` shape rather than a new invention: same
+ * problem (an outbound attempt whose outcome nothing survives), same position
+ * (written after the attempt, by the seam that made it), same answer (one row
+ * per attempt carrying the outcome, no queue, no `pending` state, no row that
+ * exists before something was attempted). D-58 refused the transactional outbox
+ * for the whole platform; D-59 keeps that refusal for invoice and KSeF document
+ * mail and buys the visibility with this row instead.
+ *
+ * Global rather than org-scoped, for the same reason `webhook_deliveries` is:
+ * the transport seam has no tenant — a boot-time send, a worker and an admin
+ * request all reach it — and the row is a platform-operator audit trail, read
+ * by the person answering "did this leave the building", not by a buyer.
+ */
+let EmailDelivery = class EmailDelivery {
+    [OptionalProps];
+    id = randomUUID();
+    /** The caller's idempotency key. Not unique: a resend is a second decision. */
+    messageId;
+    recipient;
+    /** The transactional-email code, or a legacy in-code builder's own kind. */
+    kind;
+    /**
+     * The three answers, and the split is the load-bearing part of this table.
+     *
+     * `suppressed` is the platform deliberately not sending — the operator
+     * switched this e-mail off, or the transport already accepted this message
+     * id. `failed` is a message that was meant to go out and did not: the
+     * transport raised, none is wired, or no template exists for the code. Since
+     * feature 074 shipped per-e-mail deactivation, fusing the two would tell an
+     * operator that a configuration they chose is an outage.
+     */
+    status;
+    /** Which suppression or which failure, `null` for a delivered message. */
+    reason;
+    /** Free text for the reason — a transport error message, typically. */
+    detail;
+    subject;
+    /** The channel the message was rendered for, `null` for platform-wide. */
+    salesChannelId;
+    /** The business document delivered, e.g. `invoice` — D-59's whole subject. */
+    documentType;
+    documentId;
+    /** The sender's `meta` envelope, kept verbatim for the after-the-fact read. */
+    context;
+    attemptedAt = new Date();
+    createdAt = new Date();
+    updatedAt = new Date();
+};
+__decorate([
+    PrimaryKey({ type: 'uuid' }),
+    __metadata("design:type", String)
+], EmailDelivery.prototype, "id", void 0);
+__decorate([
+    Property({ type: 'string', length: 191 }),
+    Index(),
+    __metadata("design:type", String)
+], EmailDelivery.prototype, "messageId", void 0);
+__decorate([
+    Property({ type: 'string', length: 320 }),
+    Index(),
+    __metadata("design:type", String)
+], EmailDelivery.prototype, "recipient", void 0);
+__decorate([
+    Property({ type: 'string', length: 64 }),
+    Index(),
+    __metadata("design:type", String)
+], EmailDelivery.prototype, "kind", void 0);
+__decorate([
+    Property({ type: 'string', length: 16 }),
+    Index(),
+    __metadata("design:type", String)
+], EmailDelivery.prototype, "status", void 0);
+__decorate([
+    Property({ type: 'string', length: 64, nullable: true }),
+    __metadata("design:type", Object)
+], EmailDelivery.prototype, "reason", void 0);
+__decorate([
+    Property({ type: 'string', length: 4000, nullable: true }),
+    __metadata("design:type", Object)
+], EmailDelivery.prototype, "detail", void 0);
+__decorate([
+    Property({ type: 'string', length: 998, nullable: true }),
+    __metadata("design:type", Object)
+], EmailDelivery.prototype, "subject", void 0);
+__decorate([
+    Property({ type: 'uuid', nullable: true }),
+    __metadata("design:type", Object)
+], EmailDelivery.prototype, "salesChannelId", void 0);
+__decorate([
+    Property({ type: 'string', length: 32, nullable: true }),
+    Index(),
+    __metadata("design:type", Object)
+], EmailDelivery.prototype, "documentType", void 0);
+__decorate([
+    Property({ type: 'string', length: 64, nullable: true }),
+    Index(),
+    __metadata("design:type", Object)
+], EmailDelivery.prototype, "documentId", void 0);
+__decorate([
+    Property({ type: 'json', nullable: true }),
+    __metadata("design:type", Object)
+], EmailDelivery.prototype, "context", void 0);
+__decorate([
+    Property({ type: 'datetime' }),
+    Index(),
+    __metadata("design:type", Date)
+], EmailDelivery.prototype, "attemptedAt", void 0);
+__decorate([
+    Property({ type: 'datetime', onCreate: () => new Date() }),
+    __metadata("design:type", Date)
+], EmailDelivery.prototype, "createdAt", void 0);
+__decorate([
+    Property({ type: 'datetime', onUpdate: () => new Date() }),
+    __metadata("design:type", Date)
+], EmailDelivery.prototype, "updatedAt", void 0);
+EmailDelivery = __decorate([
+    GlobalEntity(),
+    Entity({ tableName: 'email_deliveries' })
+], EmailDelivery);
+export { EmailDelivery };
+//# sourceMappingURL=email-delivery.entity.js.map

package/dist/backend/entities/email-delivery.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-delivery.entity.js","sourceRoot":"","sources":["../../../src/backend/entities/email-delivery.entity.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;;;;;;;;;;;;;;GAeG;AAGI,IAAM,aAAa,GAAnB,MAAM,aAAa;IACxB,CAAC,aAAa,CAAC,CAWD;IAGd,EAAE,GAAW,UAAU,EAAE,CAAC;IAE1B,+EAA+E;IAG/E,SAAS,CAAU;IAInB,SAAS,CAAU;IAEnB,4EAA4E;IAG5E,IAAI,CAAU;IAEd;;;;;;;;;OASG;IAGH,MAAM,CAAoC;IAE1C,0EAA0E;IAE1E,MAAM,CAAiB;IAEvB,uEAAuE;IAEvE,MAAM,CAAiB;IAGvB,OAAO,CAAiB;IAExB,0EAA0E;IAE1E,cAAc,CAAiB;IAE/B,8EAA8E;IAG9E,YAAY,CAAiB;IAI7B,UAAU,CAAiB;IAE3B,+EAA+E;IAE/E,OAAO,CAAkC;IAIzC,WAAW,GAAS,IAAI,IAAI,EAAE,CAAC;IAG/B,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;IAG7B,SAAS,GAAS,IAAI,IAAI,EAAE,CAAC;CAC9B,CAAA;AAnEC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;yCACH;AAK1B;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACzC,KAAK,EAAE;;gDACW;AAInB;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACzC,KAAK,EAAE;;gDACW;AAKnB;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxC,KAAK,EAAE;;2CACM;AAcd;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxC,KAAK,EAAE;;6CACkC;AAI1C;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;6CAClC;AAIvB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;6CACpC;AAGvB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;8CAClC;AAIxB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;qDACZ;AAK/B;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxD,KAAK,EAAE;;mDACqB;AAI7B;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxD,KAAK,EAAE;;iDACmB;AAI3B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;8CACF;AAIzC;IAFC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,KAAK,EAAE;8BACK,IAAI;kDAAc;AAG/B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAChD,IAAI;gDAAc;AAG7B;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;8BAChD,IAAI;gDAAc;AAjFlB,aAAa;IAFzB,YAAY,EAAE;IACd,MAAM,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC;GAC7B,aAAa,CAkFzB"}

package/dist/backend/index.d.ts

@@ -0,0 +1,63 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { EmailDeliveryRecorder, EmailMailerPort } from '@endora-commerce/contracts';
+import type { ModuleContext } from '@endora-commerce/platform/kernel';
+import { EmailDelivery } from './entities/email-delivery.entity.js';
+/**
+ * The Email module's backend entry point — converted to feature 072's
+ * `registerModule` contract (T079).
+ *
+ * `email` owns no route and no worker: it is the platform's mailer seam, and
+ * everything it contributes is three registrations. Before this conversion the
+ * *driver decision* — SMTP when the environment configures one, console
+ * otherwise — lived in `composition.ts`, while the test harness and two other
+ * modules each carried their own `new ConsoleMailer()` fallback. Four places
+ * decided which mailer the platform uses; now the module does.
+ *
+ * It owns one entity since D-59: the transport is where a message's fate is
+ * decided, so it is where the record of that fate belongs.
+ */
+/** What `email` resolves from the container, and the names it owns. */
+export interface EmailCradle {
+    /**
+     * The nodemailer connection URL, or `null` for the console driver. A
+     * registration rather than an inline `process.env` read so a composition
+     * root can pin it — the test harness relies on the environment carrying no
+     * SMTP configuration, and a name is something it can assert on.
+     */
+    readonly emailSmtpUrl: string | null;
+    readonly emFactory: () => EntityManager;
+    /**
+     * The driver — SMTP or console. Separated from `emailMailer` by D-59 so the
+     * delivery record wraps *the driver*, which is what makes the record
+     * unforgettable: a module resolves `emailMailer` and gets the recording one,
+     * with no way to reach the bare transport by accident.
+     */
+    readonly emailTransport: EmailMailerPort;
+    /** Where every delivery decision is written (D-59). */
+    readonly emailDeliveryRecorder: EmailDeliveryRecorder;
+    /**
+     * The platform's transactional mailer. Consumed by every sending module,
+     * against the `EmailMailerPort` contract since feature 075's Phase P.
+     *
+     * Still `ctx.di.register` rather than `providePort`: this module's manifest
+     * declares it non-deactivatable, so a gate on its effective state could never
+     * close, and a port advertising a 503 the platform cannot produce is worse
+     * than no port. The contract type says the same thing where a consumer reads
+     * it — which is the whole of what Phase P changes here.
+     */
+    readonly emailMailer: EmailMailerPort;
+}
+export declare function registerModule(ctx: ModuleContext): void;
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ */
+export declare const entities: (typeof EmailDelivery)[];
+//# sourceMappingURL=index.d.ts.map

package/dist/backend/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AACzF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAOtE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE;;;;;;;;;;;;;GAaG;AAEH,uEAAuE;AACvE,MAAM,WAAW,WAAW;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,aAAa,CAAC;IACxC;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,eAAe,CAAC;IACzC,uDAAuD;IACvD,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;IACtD;;;;;;;;;OASG;IACH,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;CACvC;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAiCvD;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,QAAQ,0BAEpB,CAAC"}

package/dist/backend/index.js

@@ -0,0 +1,43 @@
+import { resolveSmtpUrlFromEnv } from './resolve-smtp-url.js';
+import { ConsoleMailer } from './services/mailer.js';
+import { PersistentEmailDeliveryRecorder } from './services/email-delivery-recorder.js';
+import { RecordingMailer } from './services/recording-mailer.js';
+import { SmtpMailer } from './services/smtp-mailer.js';
+import { EmailDelivery } from './entities/email-delivery.entity.js';
+export function registerModule(ctx) {
+    ctx.di.register({
+        emailSmtpUrl: ctx.asFunction(() => resolveSmtpUrlFromEnv()).singleton(),
+        // Singleton, matching what the composition root constructed once at boot:
+        // `SmtpMailer` holds a nodemailer transport with its own connection pool,
+        // and `ConsoleMailer` deduplicates on `messageId`, so both are wrong as
+        // per-resolution instances.
+        emailTransport: ctx
+            .asFunction(({ emailSmtpUrl }) => emailSmtpUrl ? new SmtpMailer(emailSmtpUrl) : new ConsoleMailer())
+            .singleton(),
+        // Resolved by `transactional_emails` as well, for the three outcomes it
+        // decides before the transport is ever reached. An ordinary registration
+        // rather than a `providePort`, exactly like `emailMailer`: `email` is
+        // non-deactivatable (074, C3), so a gate over it could never close.
+        emailDeliveryRecorder: ctx
+            .asFunction(({ emFactory }) => new PersistentEmailDeliveryRecorder(emFactory))
+            .singleton(),
+        emailMailer: ctx
+            .asFunction(({ emailTransport, emailDeliveryRecorder }) => new RecordingMailer(emailTransport, emailDeliveryRecorder))
+            .singleton(),
+    });
+}
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ */
+export const entities = [
+    EmailDelivery,
+];
+//# sourceMappingURL=index.js.map

package/dist/backend/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,+BAA+B,EAAE,MAAM,uCAAuC,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAiDpE,MAAM,UAAU,cAAc,CAAC,GAAkB;IAC/C,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;QACd,YAAY,EAAE,GAAG,CAAC,UAAU,CAAC,GAAkB,EAAE,CAAC,qBAAqB,EAAE,CAAC,CAAC,SAAS,EAAE;QAEtF,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,4BAA4B;QAC5B,cAAc,EAAE,GAAG;aAChB,UAAU,CACT,CAAC,EAAE,YAAY,EAAe,EAAmB,EAAE,CACjD,YAAY,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,aAAa,EAAE,CACpE;aACA,SAAS,EAAE;QAEd,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,oEAAoE;QACpE,qBAAqB,EAAE,GAAG;aACvB,UAAU,CACT,CAAC,EAAE,SAAS,EAAe,EAAyB,EAAE,CACpD,IAAI,+BAA+B,CAAC,SAAS,CAAC,CACjD;aACA,SAAS,EAAE;QAEd,WAAW,EAAE,GAAG;aACb,UAAU,CACT,CAAC,EAAE,cAAc,EAAE,qBAAqB,EAAe,EAAmB,EAAE,CAC1E,IAAI,eAAe,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAC7D;aACA,SAAS,EAAE;KACf,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,aAAa;CACd,CAAC"}

package/dist/backend/resolve-smtp-url.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Nodemailer connection URL: `SMTP_URL` if set, else `SMTP_HOST` + `SMTP_PORT`
+ * when not using the console driver (see `backend/.env.example` for Mailhog).
+ */
+export declare function resolveSmtpUrlFromEnv(): string | null;
+//# sourceMappingURL=resolve-smtp-url.d.ts.map

package/dist/backend/resolve-smtp-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-smtp-url.d.ts","sourceRoot":"","sources":["../../src/backend/resolve-smtp-url.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,IAAI,CAoBrD"}

package/dist/backend/resolve-smtp-url.js

@@ -0,0 +1,24 @@
+/**
+ * Nodemailer connection URL: `SMTP_URL` if set, else `SMTP_HOST` + `SMTP_PORT`
+ * when not using the console driver (see `backend/.env.example` for Mailhog).
+ */
+export function resolveSmtpUrlFromEnv() {
+    const explicit = process.env['SMTP_URL']?.trim();
+    if (explicit)
+        return explicit;
+    if (process.env['MAIL_DRIVER'] === 'console') {
+        return null;
+    }
+    const host = process.env['SMTP_HOST']?.trim();
+    const port = process.env['SMTP_PORT']?.trim();
+    if (host && port) {
+        const user = process.env['SMTP_USER']?.trim() ?? '';
+        const pass = process.env['SMTP_PASSWORD']?.trim() ?? '';
+        if (user) {
+            return `smtp://${encodeURIComponent(user)}:${encodeURIComponent(pass)}@${host}:${port}`;
+        }
+        return `smtp://${host}:${port}`;
+    }
+    return null;
+}
+//# sourceMappingURL=resolve-smtp-url.js.map

package/dist/backend/resolve-smtp-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-smtp-url.js","sourceRoot":"","sources":["../../src/backend/resolve-smtp-url.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,SAAS,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACxD,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,UAAU,kBAAkB,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QAC1F,CAAC;QACD,OAAO,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/backend/services/email-delivery-recorder.d.ts

@@ -0,0 +1,19 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { EmailDeliveryRecordInput, EmailDeliveryRecorder } from '@endora-commerce/contracts';
+/**
+ * Where the delivery record is written (D-59, issue #114).
+ *
+ * One row per delivery decision, written after the decision — never before,
+ * because a row that exists before a send was attempted is the `pending` state
+ * of the outbox D-58 refused, one queue hop from the same problem.
+ */
+export type { EmailDeliveryReason, EmailDeliveryRecordInput, EmailDeliveryRecorder, EmailDeliveryStatus, } from '@endora-commerce/contracts';
+/** Where a record that could not be written is reported. Injectable for tests. */
+export type EmailDeliveryLog = (message: string, context: Record<string, unknown>) => void;
+export declare class PersistentEmailDeliveryRecorder implements EmailDeliveryRecorder {
+    private readonly emFactory;
+    private readonly log;
+    constructor(emFactory: () => EntityManager, log?: EmailDeliveryLog);
+    record(input: EmailDeliveryRecordInput): Promise<string | null>;
+}
+//# sourceMappingURL=email-delivery-recorder.d.ts.map

package/dist/backend/services/email-delivery-recorder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-delivery-recorder.d.ts","sourceRoot":"","sources":["../../../src/backend/services/email-delivery-recorder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,KAAK,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAGlG;;;;;;GAMG;AAOH,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AAEpC,kFAAkF;AAClF,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;AAE3F,qBAAa,+BAAgC,YAAW,qBAAqB;IAIzE,OAAO,CAAC,QAAQ,CAAC,SAAS;IAH5B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAmB;gBAGpB,SAAS,EAAE,MAAM,aAAa,EAC/C,GAAG,CAAC,EAAE,gBAAgB;IAKlB,MAAM,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAuCtE"}

package/dist/backend/services/email-delivery-recorder.js

@@ -0,0 +1,51 @@
+import { rethrowIfModuleDisabled } from '@endora-commerce/platform/kernel';
+import { EmailDelivery } from '../entities/email-delivery.entity.js';
+export class PersistentEmailDeliveryRecorder {
+    emFactory;
+    log;
+    constructor(emFactory, log) {
+        this.emFactory = emFactory;
+        this.log = log ?? ((message, context) => console.warn(message, context));
+    }
+    async record(input) {
+        // command-coverage-ignore: bookkeeping about a message that has already been
+        // sent or suppressed — there is no domain state here to undo, and the write
+        // that triggered the message is audited where it happened.
+        try {
+            const em = this.emFactory();
+            const row = em.create(EmailDelivery, {
+                messageId: input.messageId,
+                recipient: input.recipient,
+                kind: input.kind,
+                status: input.status,
+                attemptedAt: new Date(),
+                ...(input.reason !== undefined ? { reason: input.reason } : {}),
+                ...(input.detail !== undefined ? { detail: input.detail.slice(0, 4000) } : {}),
+                ...(input.subject !== undefined ? { subject: input.subject.slice(0, 998) } : {}),
+                ...(input.salesChannelId !== undefined ? { salesChannelId: input.salesChannelId } : {}),
+                ...(input.documentType !== undefined ? { documentType: input.documentType } : {}),
+                ...(input.documentId !== undefined ? { documentId: input.documentId } : {}),
+                ...(input.context !== undefined ? { context: input.context } : {}),
+            });
+            await em.persistAndFlush(row);
+            return row.id;
+        }
+        catch (error) {
+            // A switched-off module is a presence answer and travels: this recorder is
+            // reached across a module boundary, and flattening a 503 into "the record
+            // was not written" would turn fail-closed into fail-open for the caller.
+            rethrowIfModuleDisabled(error);
+            // Everything else is contained, and this is the narrow tolerance the
+            // ordering in `RecordingMailer` depends on: the message has already left
+            // (or already been suppressed), so a bookkeeping failure must cost the
+            // record and nothing else. It is named rather than silent.
+            this.log('[email] the delivery record was not written', {
+                messageId: input.messageId,
+                status: input.status,
+                error: error instanceof Error ? error.message : error,
+            });
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=email-delivery-recorder.js.map

package/dist/backend/services/email-delivery-recorder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-delivery-recorder.js","sourceRoot":"","sources":["../../../src/backend/services/email-delivery-recorder.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAyBrE,MAAM,OAAO,+BAA+B;IAIvB;IAHF,GAAG,CAAmB;IAEvC,YACmB,SAA8B,EAC/C,GAAsB;QADL,cAAS,GAAT,SAAS,CAAqB;QAG/C,IAAI,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA+B;QAC1C,6EAA6E;QAC7E,4EAA4E;QAC5E,2DAA2D;QAC3D,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE;gBACnC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,WAAW,EAAE,IAAI,IAAI,EAAE;gBACvB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9E,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvF,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE,CAAC,CAAC;YACH,MAAM,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YAC9B,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,2EAA2E;YAC3E,0EAA0E;YAC1E,yEAAyE;YACzE,uBAAuB,CAAC,KAAK,CAAC,CAAC;YAC/B,qEAAqE;YACrE,yEAAyE;YACzE,uEAAuE;YACvE,2DAA2D;YAC3D,IAAI,CAAC,GAAG,CAAC,6CAA6C,EAAE;gBACtD,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;aACtD,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/backend/services/mailer.d.ts

@@ -0,0 +1,34 @@
+import type { EmailMailerPort, EmailMailerSendInput, EmailMailerSendOutcome, EmailMailerSuppressionReason } from '@endora-commerce/contracts';
+/**
+ * Mailer abstraction (T136 + T178 helper).
+ *
+ * Every send is idempotent on the message id supplied by the caller — that
+ * lets retry loops re-send the same template without duplicating mail.
+ *
+ * The default `ConsoleMailer` writes to stdout so dev environments work
+ * without an SMTP server. Production composition wires a real SMTP
+ * transport (e.g. via nodemailer) by implementing this interface.
+ *
+ * The four shapes moved to `@endora-commerce/contracts` in feature 075's Phase P —
+ * thirty-two sites across eight modules named them at this path, and D-59's
+ * `MailerSendOutcome` is read one layer up by `transactional_emails`. They are
+ * aliased back here so the drivers below and the consumers Phase C has not
+ * reached yet keep compiling; the aliases go with the last of those consumers.
+ */
+export type MailerSendInput = EmailMailerSendInput;
+export type MailerSuppressionReason = EmailMailerSuppressionReason;
+export type MailerSendOutcome = EmailMailerSendOutcome;
+export type Mailer = EmailMailerPort;
+export declare class ConsoleMailer implements Mailer {
+    private readonly seen;
+    send(input: MailerSendInput): Promise<MailerSendOutcome>;
+}
+/**
+ * In-memory mailer for tests. Captures every sent message; tests assert
+ * against `sent`.
+ */
+export declare class InMemoryMailer implements Mailer {
+    readonly sent: MailerSendInput[];
+    send(input: MailerSendInput): Promise<MailerSendOutcome>;
+}
+//# sourceMappingURL=mailer.d.ts.map

package/dist/backend/services/mailer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailer.d.ts","sourceRoot":"","sources":["../../../src/backend/services/mailer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAEnD,MAAM,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;AAEnE,MAAM,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AAEvD,MAAM,MAAM,MAAM,GAAG,eAAe,CAAC;AAErC,qBAAa,aAAc,YAAW,MAAM;IAC1C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;IAEpC,IAAI,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAe/D;AAED;;;GAGG;AACH,qBAAa,cAAe,YAAW,MAAM;IAC3C,QAAQ,CAAC,IAAI,EAAE,eAAe,EAAE,CAAM;IAEhC,IAAI,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAI/D"}

package/dist/backend/services/mailer.js

@@ -0,0 +1,29 @@
+export class ConsoleMailer {
+    seen = new Set();
+    async send(input) {
+        if (this.seen.has(input.messageId))
+            return { status: 'suppressed', reason: 'duplicate_message_id' };
+        this.seen.add(input.messageId);
+        // eslint-disable-next-line no-console
+        console.log(JSON.stringify({
+            msg: 'console-mailer',
+            to: input.to,
+            subject: input.subject,
+            body: input.text,
+            meta: input.meta,
+        }));
+        return { status: 'sent' };
+    }
+}
+/**
+ * In-memory mailer for tests. Captures every sent message; tests assert
+ * against `sent`.
+ */
+export class InMemoryMailer {
+    sent = [];
+    async send(input) {
+        this.sent.push(input);
+        return { status: 'sent' };
+    }
+}
+//# sourceMappingURL=mailer.js.map

package/dist/backend/services/mailer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailer.js","sourceRoot":"","sources":["../../../src/backend/services/mailer.ts"],"names":[],"mappings":"AAgCA,MAAM,OAAO,aAAa;IACP,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1C,KAAK,CAAC,IAAI,CAAC,KAAsB;QAC/B,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QACpG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/B,sCAAsC;QACtC,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;YACb,GAAG,EAAE,gBAAgB;YACrB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CACH,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,cAAc;IAChB,IAAI,GAAsB,EAAE,CAAC;IAEtC,KAAK,CAAC,IAAI,CAAC,KAAsB;QAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;CACF"}

package/dist/backend/services/recording-mailer.d.ts

@@ -0,0 +1,35 @@
+import type { Mailer, MailerSendInput, MailerSendOutcome } from './mailer.js';
+import type { EmailDeliveryRecorder } from './email-delivery-recorder.js';
+/**
+ * The mailer every sending module resolves: a driver plus its delivery record
+ * (D-59, issue #114).
+ *
+ * A decorator rather than a line in each of the seventeen call sites, for the
+ * reason `providePort`'s gate is a wrapper rather than a call: a record the
+ * transport seam writes cannot be forgotten by the module somebody adds next
+ * month, and a hand-placed one demonstrably was — that is how "did the customer
+ * get the invoice" ended up answerable only from a log.
+ *
+ * **Ordering, which is the part with a wrong answer.** The transport is called
+ * first and the record written after it, in both directions:
+ *
+ *   - a send that succeeded is recorded, and if that write fails the recorder
+ *     answers `null` (it never throws) so the caller still sees `sent` — the
+ *     message did leave, and reporting otherwise would be a lie that could
+ *     trigger a resend;
+ *   - a send that raised is recorded as `failed` and the error is **re-thrown
+ *     unchanged**, so every caller's own tolerance keeps deciding what a failed
+ *     message means for the operation it followed.
+ *
+ * The other order — record first, then send — is the outbox D-58 refused: it
+ * buys atomicity between a business write and an enqueue that nothing here
+ * promises, and it costs a row that claims a message was attempted before
+ * anything was.
+ */
+export declare class RecordingMailer implements Mailer {
+    private readonly transport;
+    private readonly recorder;
+    constructor(transport: Mailer, recorder: EmailDeliveryRecorder);
+    send(input: MailerSendInput): Promise<MailerSendOutcome>;
+}
+//# sourceMappingURL=recording-mailer.d.ts.map

package/dist/backend/services/recording-mailer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recording-mailer.d.ts","sourceRoot":"","sources":["../../../src/backend/services/recording-mailer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,KAAK,EAAE,qBAAqB,EAA4B,MAAM,8BAA8B,CAAC;AAEpG;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,eAAgB,YAAW,MAAM;IAE1C,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,qBAAqB;IAG5C,IAAI,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAsB/D"}