@krizaka/mail 0.0.0-stage → 0.1.0

package/dist/index.js

@@ -0,0 +1,357 @@
+import {
+  DELIVERY_STATUS,
+  MAIL_BOUNDS,
+  MAIL_CODE,
+  MAIL_DEFAULTS,
+  MailError,
+  SUPPRESSION_REASON,
+  bareAddress,
+  checkAddress,
+  checkMessage,
+  checkSettings,
+  hashAddress,
+  normalizeAddress,
+  uuidOf
+} from "./chunk-YDSARDFP.js";
+
+// src/email-ports.ts
+function emailPorts(store, clock) {
+  return {
+    log: { record: (entry) => store.record({ ...entry, at: entry.at ? new Date(entry.at) : clock.now() }) },
+    suppression: {
+      has: (email) => store.isSuppressed(hashAddress(email)),
+      add: async (email, reason2) => {
+        await store.suppress(hashAddress(email), reason2, clock.now());
+      }
+    },
+    idempotency: {
+      claim: (key) => store.claimKey(key, clock.now()),
+      release: (key) => store.releaseKey(key)
+    }
+  };
+}
+
+// src/mail.ts
+import { subHours } from "@krizaka/time";
+var MAIL_TOPIC = "mail";
+var MAIL_EVENT = { requested: "evt.mail.requested.v1" };
+var isMessage = (payload) => typeof payload === "object" && payload !== null && "to" in payload && "idempotencyKey" in payload;
+var reason = (error) => (error instanceof Error ? error.message : String(error)).slice(0, 300);
+function createMail(deps) {
+  const settings = async () => typeof deps.settings === "function" ? await deps.settings() : deps.settings;
+  const log = (entry) => deps.store.record({ ...entry, at: deps.clock.now() });
+  return {
+    async queue(tx, message) {
+      checkMessage(message);
+      const id = uuidOf(message.idempotencyKey);
+      const { appended } = await deps.outbox.append(tx, { topic: MAIL_TOPIC, type: MAIL_EVENT.requested, payload: message, id });
+      return { id, queued: appended };
+    },
+    async deliver(queued) {
+      if (!isMessage(queued.payload)) throw new MailError(MAIL_CODE.badMessage, `message ${queued.id} is not a mail`);
+      const message = queued.payload;
+      checkMessage(message);
+      const hash = hashAddress(message.to);
+      const base = { template: message.template, category: message.category, locale: message.locale, to: hash, idempotencyKey: message.idempotencyKey };
+      if (await deps.store.isSuppressed(hash)) {
+        await log({ ...base, status: DELIVERY_STATUS.suppressed });
+        return DELIVERY_STATUS.suppressed;
+      }
+      if (await deps.store.hasKey(message.idempotencyKey)) {
+        await log({ ...base, status: DELIVERY_STATUS.duplicate });
+        return DELIVERY_STATUS.duplicate;
+      }
+      const s = await settings();
+      const provider = typeof deps.provider === "function" ? deps.provider(s) : deps.provider;
+      const replyTo = message.replyTo || s.replyTo;
+      try {
+        const sent = await provider.send({ ...message, from: s.from, ...replyTo ? { replyTo } : {} });
+        await deps.store.claimKey(message.idempotencyKey, deps.clock.now());
+        await log({ ...base, status: DELIVERY_STATUS.sent, messageId: sent.messageId ?? void 0, detail: provider.name });
+        return DELIVERY_STATUS.sent;
+      } catch (error) {
+        await log({ ...base, status: DELIVERY_STATUS.failed, detail: reason(error) });
+        throw error;
+      }
+    },
+    suppress: (s) => deps.store.suppress(hashAddress(bareAddress(s.address)), s.reason, deps.clock.now()),
+    unsuppress: (address) => deps.store.unsuppress(hashAddress(bareAddress(address))),
+    isSuppressed: (address) => deps.store.isSuppressed(hashAddress(bareAddress(address))),
+    async purge() {
+      const s = await settings();
+      return deps.store.purgeBefore(subHours(deps.clock.now(), s.retentionDays * 24));
+    }
+  };
+}
+
+// src/memory.ts
+function memoryMailStore() {
+  const log = [];
+  const suppressed = /* @__PURE__ */ new Map();
+  const keys = /* @__PURE__ */ new Map();
+  let seq = 0;
+  return {
+    async record({ at, ...entry }) {
+      seq += 1;
+      log.push({ ...entry, id: seq, at: at.toISOString(), when: at });
+    },
+    async recent(limit) {
+      return log.slice(-limit).reverse().map(({ when: _when, ...row }) => row);
+    },
+    async isSuppressed(hash) {
+      return suppressed.has(hash);
+    },
+    async suppress(hash, reason2) {
+      if (suppressed.has(hash)) return false;
+      suppressed.set(hash, reason2);
+      return true;
+    },
+    async unsuppress(hash) {
+      return suppressed.delete(hash);
+    },
+    async hasKey(key) {
+      return keys.has(key);
+    },
+    async claimKey(key, now) {
+      if (keys.has(key)) return false;
+      keys.set(key, now);
+      return true;
+    },
+    async releaseKey(key) {
+      keys.delete(key);
+    },
+    async purgeBefore(before) {
+      let n = 0;
+      for (let i = log.length - 1; i >= 0; i -= 1) {
+        if (log[i].when >= before) continue;
+        log.splice(i, 1);
+        n += 1;
+      }
+      for (const [key, at] of keys) {
+        if (at >= before) continue;
+        keys.delete(key);
+        n += 1;
+      }
+      return n;
+    }
+  };
+}
+
+// src/persistence.ts
+import { ident } from "@krizaka/db";
+function dbMailStore(query, schema = "mail") {
+  const s = ident(schema);
+  return {
+    async record(e) {
+      await query(`INSERT INTO ${s}.delivery (at, template, category, locale, to_hash, status, message_id, idempotency_key, detail) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9)`, [e.at, e.template, e.category, e.locale, e.to, e.status, e.messageId ?? null, e.idempotencyKey ?? null, e.detail ?? null]);
+    },
+    async recent(limit) {
+      const rows = await query(`SELECT * FROM ${s}.delivery ORDER BY id DESC LIMIT $1`, [limit]);
+      return rows.map((r) => ({ id: Number(r.id), at: r.at.toISOString(), template: r.template, category: r.category, locale: r.locale, to: r.to_hash, status: r.status, messageId: r.message_id ?? void 0, idempotencyKey: r.idempotency_key ?? void 0, detail: r.detail ?? void 0 }));
+    },
+    async isSuppressed(hash) {
+      return (await query(`SELECT 1 FROM ${s}.suppression WHERE address_hash = $1`, [hash])).length > 0;
+    },
+    async suppress(hash, reason2, now) {
+      return (await query(`INSERT INTO ${s}.suppression (address_hash, reason, created_at) VALUES ($1,$2,$3) ON CONFLICT DO NOTHING RETURNING 1`, [hash, reason2, now])).length > 0;
+    },
+    async unsuppress(hash) {
+      return (await query(`DELETE FROM ${s}.suppression WHERE address_hash = $1 RETURNING 1`, [hash])).length > 0;
+    },
+    async hasKey(key) {
+      return (await query(`SELECT 1 FROM ${s}.idempotency WHERE key = $1`, [key])).length > 0;
+    },
+    async claimKey(key, now) {
+      return (await query(`INSERT INTO ${s}.idempotency (key, created_at) VALUES ($1,$2) ON CONFLICT DO NOTHING RETURNING 1`, [key, now])).length > 0;
+    },
+    async releaseKey(key) {
+      await query(`DELETE FROM ${s}.idempotency WHERE key = $1`, [key]);
+    },
+    async purgeBefore(before) {
+      const logs = await query(`DELETE FROM ${s}.delivery WHERE at < $1 RETURNING 1`, [before]);
+      const keys = await query(`DELETE FROM ${s}.idempotency WHERE created_at < $1 RETURNING 1`, [before]);
+      return logs.length + keys.length;
+    }
+  };
+}
+
+// src/providers.ts
+var withoutTrailingSlashes = (url) => {
+  let end = url.length;
+  while (end > 0 && url[end - 1] === "/") end -= 1;
+  return url.slice(0, end);
+};
+var failure = (provider, status, body) => new MailError(MAIL_CODE.provider, `${provider} answered ${status}: ${body.slice(0, 200)}`);
+var idOf = (body, key) => {
+  try {
+    const value = JSON.parse(body)[key];
+    return typeof value === "string" ? value : null;
+  } catch {
+    return null;
+  }
+};
+function mailgunProvider(options) {
+  const base = withoutTrailingSlashes(options.apiUrl ?? "https://api.mailgun.net");
+  const auth = `Basic ${Buffer.from(`api:${options.apiKey}`).toString("base64")}`;
+  return {
+    name: "mailgun",
+    async send(mail) {
+      const form = new URLSearchParams({ from: mail.from, to: mail.to, subject: mail.subject, text: mail.text });
+      if (mail.html !== void 0) form.set("html", mail.html);
+      if (mail.replyTo) form.set("h:Reply-To", mail.replyTo);
+      form.set("v:idempotency-key", mail.idempotencyKey);
+      const res = await options.fetch(`${base}/v3/${encodeURIComponent(options.domain)}/messages`, { method: "POST", headers: { authorization: auth, "content-type": "application/x-www-form-urlencoded" }, body: form.toString() });
+      const body = await res.text();
+      if (!res.ok) throw failure("mailgun", res.status, body);
+      return { messageId: idOf(body, "id") };
+    }
+  };
+}
+function resendProvider(options) {
+  const base = withoutTrailingSlashes(options.apiUrl ?? "https://api.resend.com");
+  return {
+    name: "resend",
+    async send(mail) {
+      const body = { from: mail.from, to: [mail.to], subject: mail.subject, text: mail.text, ...mail.html === void 0 ? {} : { html: mail.html }, ...mail.replyTo ? { reply_to: mail.replyTo } : {} };
+      const res = await options.fetch(`${base}/emails`, { method: "POST", headers: { authorization: `Bearer ${options.apiKey}`, "content-type": "application/json", "idempotency-key": mail.idempotencyKey }, body: JSON.stringify(body) });
+      const answer = await res.text();
+      if (!res.ok) throw failure("resend", res.status, answer);
+      return { messageId: idOf(answer, "id") };
+    }
+  };
+}
+function logProvider(write) {
+  return {
+    name: "log",
+    async send(mail) {
+      write(JSON.stringify({ event: "mail.log", from: bareAddress(mail.from), template: mail.template, category: mail.category, locale: mail.locale, subject: mail.subject, idempotencyKey: mail.idempotencyKey }));
+      return { messageId: null };
+    }
+  };
+}
+function providerFor(kind, keys, fetch, write) {
+  if (kind === "log") return logProvider(write);
+  if (!keys.apiKey) throw new MailError(MAIL_CODE.badSettings, `mail.provider is ${kind} but its API key is not set`);
+  if (kind === "resend") return resendProvider({ apiKey: keys.apiKey, fetch, ...keys.apiUrl ? { apiUrl: keys.apiUrl } : {} });
+  if (!keys.domain) throw new MailError(MAIL_CODE.badSettings, "mail.provider is mailgun but its domain is not set");
+  return mailgunProvider({ apiKey: keys.apiKey, domain: keys.domain, fetch, ...keys.apiUrl ? { apiUrl: keys.apiUrl } : {} });
+}
+
+// src/schema.ts
+import { defineModule } from "@krizaka/db";
+var mailSchema = defineModule({
+  module: "mail",
+  migrations: [
+    {
+      version: 1,
+      name: "delivery, suppression and idempotency",
+      sql: (c) => `
+CREATE TABLE ${c.schema}.delivery (
+  id              bigserial PRIMARY KEY,
+  at              timestamptz NOT NULL,
+  template        text NOT NULL,
+  category        text NOT NULL,
+  locale          text NOT NULL,
+  to_hash         text NOT NULL CHECK (char_length(to_hash) = 64),
+  status          text NOT NULL CHECK (status IN ('sent', 'failed', 'suppressed', 'duplicate')),
+  message_id      text,
+  idempotency_key text,
+  detail          text
+);
+CREATE INDEX delivery_at ON ${c.schema}.delivery (at);
+CREATE TABLE ${c.schema}.suppression (
+  address_hash text PRIMARY KEY CHECK (char_length(address_hash) = 64),
+  reason       text NOT NULL CHECK (reason IN ('bounce', 'complaint', 'unsubscribed')),
+  created_at   timestamptz NOT NULL
+);
+CREATE TABLE ${c.schema}.idempotency (
+  key        text PRIMARY KEY CHECK (char_length(key) BETWEEN 1 AND 200),
+  created_at timestamptz NOT NULL
+);
+CREATE INDEX idempotency_created ON ${c.schema}.idempotency (created_at);`
+    }
+  ]
+});
+
+// src/webhooks.ts
+import { createHmac, timingSafeEqual } from "crypto";
+var TOLERANCE_SECONDS = 300;
+var equal = (a, b) => {
+  const x = Buffer.from(a);
+  const y = Buffer.from(b);
+  return x.length === y.length && timingSafeEqual(x, y);
+};
+var bad = (why) => new MailError(MAIL_CODE.badWebhook, why);
+var record = (value) => typeof value === "object" && value !== null ? value : {};
+var text = (value) => typeof value === "string" ? value : "";
+function parseMailgunWebhook(rawBody, signingKey, nowSeconds) {
+  let body;
+  try {
+    body = record(JSON.parse(rawBody));
+  } catch {
+    throw bad("the body is not JSON");
+  }
+  const sig = record(body.signature);
+  const timestamp = text(sig.timestamp);
+  const expected = createHmac("sha256", signingKey).update(timestamp + text(sig.token)).digest("hex");
+  if (!equal(expected, text(sig.signature))) throw bad("the signature does not match");
+  if (!/^\d+$/.test(timestamp) || Math.abs(nowSeconds - Number(timestamp)) > TOLERANCE_SECONDS) throw bad("the timestamp is stale");
+  const data = record(body["event-data"]);
+  const address = text(data.recipient);
+  if (address === "") return null;
+  const event = text(data.event);
+  if (event === "complained") return { address, reason: SUPPRESSION_REASON.complaint };
+  if (event === "unsubscribed") return { address, reason: SUPPRESSION_REASON.unsubscribed };
+  if (event === "failed" && text(data.severity) === "permanent") return { address, reason: SUPPRESSION_REASON.bounce };
+  return null;
+}
+function parseResendWebhook(rawBody, headers, secret, nowSeconds) {
+  const { id, timestamp, signature } = headers;
+  if (!id || !timestamp || !signature) throw bad("the signature headers are missing");
+  if (!/^\d+$/.test(timestamp) || Math.abs(nowSeconds - Number(timestamp)) > TOLERANCE_SECONDS) throw bad("the timestamp is stale");
+  const key = Buffer.from(secret.startsWith("whsec_") ? secret.slice(6) : secret, "base64");
+  const expected = createHmac("sha256", key).update(`${id}.${timestamp}.${rawBody}`).digest("base64");
+  const ok = signature.split(" ").some((part) => part.startsWith("v1,") && equal(part.slice(3), expected));
+  if (!ok) throw bad("the signature does not match");
+  let event;
+  try {
+    event = record(JSON.parse(rawBody));
+  } catch {
+    throw bad("the body is not JSON");
+  }
+  const data = record(event.data);
+  const to = Array.isArray(data.to) ? data.to.filter((a) => typeof a === "string") : [];
+  const type = text(event.type);
+  if (type === "email.complained") return to.map((address) => ({ address, reason: SUPPRESSION_REASON.complaint }));
+  if (type === "email.bounced" && text(record(data.bounce).type).toLowerCase() !== "transient") return to.map((address) => ({ address, reason: SUPPRESSION_REASON.bounce }));
+  return [];
+}
+export {
+  DELIVERY_STATUS,
+  MAIL_BOUNDS,
+  MAIL_CODE,
+  MAIL_DEFAULTS,
+  MAIL_EVENT,
+  MAIL_TOPIC,
+  MailError,
+  SUPPRESSION_REASON,
+  bareAddress,
+  checkAddress,
+  checkMessage,
+  checkSettings,
+  createMail,
+  dbMailStore,
+  emailPorts,
+  hashAddress,
+  logProvider,
+  mailSchema,
+  mailgunProvider,
+  memoryMailStore,
+  normalizeAddress,
+  parseMailgunWebhook,
+  parseResendWebhook,
+  providerFor,
+  resendProvider,
+  uuidOf
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/email-ports.ts","../src/mail.ts","../src/memory.ts","../src/persistence.ts","../src/providers.ts","../src/schema.ts","../src/webhooks.ts"],"sourcesContent":["import type { Clock, DeliveryEntry, MailStore, SuppressionReason } from \"./port\";\nimport { hashAddress } from \"./rules\";\n\n/**\n * The three ports of `@krizaka/email` (`DeliveryLog`, `SuppressionList`, `IdempotencyStore`) over this module's store, so a product\n * that calls `sendEmail` directly writes to the same tables as the queue. Structural: this package never imports `@krizaka/email`.\n */\nexport function emailPorts(store: MailStore, clock: Clock) {\n  return {\n    log: { record: (entry: Omit<DeliveryEntry, \"at\"> & { at?: string }) => store.record({ ...entry, at: entry.at ? new Date(entry.at) : clock.now() }) },\n    suppression: {\n      has: (email: string) => store.isSuppressed(hashAddress(email)),\n      add: async (email: string, reason: SuppressionReason): Promise<void> => {\n        await store.suppress(hashAddress(email), reason, clock.now());\n      },\n    },\n    idempotency: {\n      claim: (key: string) => store.claimKey(key, clock.now()),\n      release: (key: string) => store.releaseKey(key),\n    },\n  };\n}\n\n","import { subHours } from \"@krizaka/time\";\n\nimport { type Clock, DELIVERY_STATUS, type DeliveryEntry, MAIL_CODE, MailError, type MailMessage, type MailProvider, type MailSettings, type MailStore, type Query } from \"./port\";\nimport { bareAddress, checkMessage, hashAddress, uuidOf } from \"./rules\";\nimport type { Suppression } from \"./webhooks\";\n\n/** The topic the mail is queued on, and the event that names it: the outbox routes by these. */\nexport const MAIL_TOPIC = \"mail\";\nexport const MAIL_EVENT = { requested: \"evt.mail.requested.v1\" } as const;\n\n/** What the module needs of `@krizaka/outbox` (its `Outbox` satisfies it): append in the caller's transaction. */\nexport interface MailOutbox {\n  append(tx: Query, message: { topic: string; type: string; payload: unknown; id: string }): Promise<{ id: string; appended: boolean }>;\n}\n\n/** The part of an outbox message the deliverer reads (`OutboxMessage` satisfies it). */\nexport interface QueuedMail {\n  id: string;\n  payload: unknown;\n}\n\nexport interface MailDeps {\n  clock: Clock;\n  outbox: MailOutbox;\n  /** The settings, read at each call so the admin's change applies at once. */\n  settings: MailSettings | (() => MailSettings | Promise<MailSettings>);\n  /** The state of the module over a query (a pool; a transaction is never needed). */\n  store: MailStore;\n  /** The provider the admin chose: a function so a change of `mail.provider` applies at once. */\n  provider: MailProvider | ((settings: MailSettings) => MailProvider);\n}\n\nexport interface Mail {\n  /** Queues a mail INSIDE the caller's transaction: it is sent after the commit, and only if the transaction commits. `queued` is `false` when the same key was already queued. */\n  queue(tx: Query, message: MailMessage): Promise<{ id: string; queued: boolean }>;\n  /** Delivers one queued mail: skipped if its address is suppressed or its key was already sent, thrown (for a retry) if the provider fails. Give it to `runWorker` / `drainOnce` as `deliver`. */\n  deliver(message: QueuedMail): Promise<DeliveryEntry[\"status\"]>;\n  /** A provider's webhook said this address bounced, complained or unsubscribed: it is never mailed again. */\n  suppress(suppression: Suppression): Promise<boolean>;\n  /** Lifts a suppression. */\n  unsuppress(address: string): Promise<boolean>;\n  isSuppressed(address: string): Promise<boolean>;\n  /** Removes the log and the keys older than the retention. */\n  purge(): Promise<number>;\n}\n\nconst isMessage = (payload: unknown): payload is MailMessage => typeof payload === \"object\" && payload !== null && \"to\" in payload && \"idempotencyKey\" in payload;\nconst reason = (error: unknown) => (error instanceof Error ? error.message : String(error)).slice(0, 300);\n\n/**\n * The mail of a product.\n *\n * The guarantee is AT LEAST ONCE: a mail is sent, THEN its key is claimed, so a crash in between sends it again rather than never\n * (a duplicate reset mail beats a lost one). A second delivery after the claim is a no-op.\n * @param deps the clock, the outbox, the settings, the store and the provider\n * @returns the mail functions\n */\nexport function createMail(deps: MailDeps): Mail {\n  const settings = async () => (typeof deps.settings === \"function\" ? await deps.settings() : deps.settings);\n  const log = (entry: Omit<DeliveryEntry, \"at\">) => deps.store.record({ ...entry, at: deps.clock.now() });\n  return {\n    async queue(tx, message) {\n      checkMessage(message);\n      const id = uuidOf(message.idempotencyKey);\n      const { appended } = await deps.outbox.append(tx, { topic: MAIL_TOPIC, type: MAIL_EVENT.requested, payload: message, id });\n      return { id, queued: appended };\n    },\n    async deliver(queued) {\n      if (!isMessage(queued.payload)) throw new MailError(MAIL_CODE.badMessage, `message ${queued.id} is not a mail`);\n      const message = queued.payload;\n      checkMessage(message);\n      const hash = hashAddress(message.to);\n      const base = { template: message.template, category: message.category, locale: message.locale, to: hash, idempotencyKey: message.idempotencyKey };\n      if (await deps.store.isSuppressed(hash)) {\n        await log({ ...base, status: DELIVERY_STATUS.suppressed });\n        return DELIVERY_STATUS.suppressed;\n      }\n      if (await deps.store.hasKey(message.idempotencyKey)) {\n        await log({ ...base, status: DELIVERY_STATUS.duplicate });\n        return DELIVERY_STATUS.duplicate;\n      }\n      const s = await settings();\n      const provider = typeof deps.provider === \"function\" ? deps.provider(s) : deps.provider;\n      const replyTo = message.replyTo || s.replyTo;\n      try {\n        const sent = await provider.send({ ...message, from: s.from, ...(replyTo ? { replyTo } : {}) });\n        await deps.store.claimKey(message.idempotencyKey, deps.clock.now());\n        await log({ ...base, status: DELIVERY_STATUS.sent, messageId: sent.messageId ?? undefined, detail: provider.name });\n        return DELIVERY_STATUS.sent;\n      } catch (error) {\n        await log({ ...base, status: DELIVERY_STATUS.failed, detail: reason(error) });\n        throw error;\n      }\n    },\n    suppress: (s) => deps.store.suppress(hashAddress(bareAddress(s.address)), s.reason, deps.clock.now()),\n    unsuppress: (address) => deps.store.unsuppress(hashAddress(bareAddress(address))),\n    isSuppressed: (address) => deps.store.isSuppressed(hashAddress(bareAddress(address))),\n    async purge() {\n      const s = await settings();\n      return deps.store.purgeBefore(subHours(deps.clock.now(), s.retentionDays * 24));\n    },\n  };\n}\n","import type { DeliveryRecord, MailStore, SuppressionReason } from \"./port\";\n\n/** An in-memory store, for unit tests and demos: the behaviour of the database's (the contract kit runs on both). */\nexport function memoryMailStore(): MailStore {\n  const log: (DeliveryRecord & { when: Date })[] = [];\n  const suppressed = new Map<string, SuppressionReason>();\n  const keys = new Map<string, Date>();\n  let seq = 0;\n  return {\n    async record({ at, ...entry }) {\n      seq += 1;\n      log.push({ ...entry, id: seq, at: at.toISOString(), when: at });\n    },\n    async recent(limit) {\n      return log.slice(-limit).reverse().map(({ when: _when, ...row }) => row);\n    },\n    async isSuppressed(hash) {\n      return suppressed.has(hash);\n    },\n    async suppress(hash, reason) {\n      if (suppressed.has(hash)) return false;\n      suppressed.set(hash, reason);\n      return true;\n    },\n    async unsuppress(hash) {\n      return suppressed.delete(hash);\n    },\n    async hasKey(key) {\n      return keys.has(key);\n    },\n    async claimKey(key, now) {\n      if (keys.has(key)) return false;\n      keys.set(key, now);\n      return true;\n    },\n    async releaseKey(key) {\n      keys.delete(key);\n    },\n    async purgeBefore(before) {\n      let n = 0;\n      for (let i = log.length - 1; i >= 0; i -= 1) {\n        if (log[i]!.when >= before) continue;\n        log.splice(i, 1);\n        n += 1;\n      }\n      for (const [key, at] of keys) {\n        if (at >= before) continue;\n        keys.delete(key);\n        n += 1;\n      }\n      return n;\n    },\n  };\n}\n","import { ident, type Query } from \"@krizaka/db\";\n\nimport type { DeliveryRecord, MailStore, SuppressionReason } from \"./port\";\n\ninterface Row {\n  id: string;\n  at: Date;\n  template: string;\n  category: string;\n  locale: string;\n  to_hash: string;\n  status: DeliveryRecord[\"status\"];\n  message_id: string | null;\n  idempotency_key: string | null;\n  detail: string | null;\n}\n\n/**\n * The PostgreSQL store of « mail » over a `Query`, in schema `mail` (or the one the product renamed it to).\n * @param query a pool-level query\n * @param schema the Postgres schema, default `mail`\n */\nexport function dbMailStore(query: Query, schema = \"mail\"): MailStore {\n  const s = ident(schema);\n  return {\n    async record(e) {\n      await query(`INSERT INTO ${s}.delivery (at, template, category, locale, to_hash, status, message_id, idempotency_key, detail) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9)`, [e.at, e.template, e.category, e.locale, e.to, e.status, e.messageId ?? null, e.idempotencyKey ?? null, e.detail ?? null]);\n    },\n    async recent(limit) {\n      const rows = await query<Row>(`SELECT * FROM ${s}.delivery ORDER BY id DESC LIMIT $1`, [limit]);\n      return rows.map((r) => ({ id: Number(r.id), at: r.at.toISOString(), template: r.template, category: r.category, locale: r.locale, to: r.to_hash, status: r.status, messageId: r.message_id ?? undefined, idempotencyKey: r.idempotency_key ?? undefined, detail: r.detail ?? undefined }));\n    },\n    async isSuppressed(hash) {\n      return (await query(`SELECT 1 FROM ${s}.suppression WHERE address_hash = $1`, [hash])).length > 0;\n    },\n    async suppress(hash, reason: SuppressionReason, now) {\n      return (await query(`INSERT INTO ${s}.suppression (address_hash, reason, created_at) VALUES ($1,$2,$3) ON CONFLICT DO NOTHING RETURNING 1`, [hash, reason, now])).length > 0;\n    },\n    async unsuppress(hash) {\n      return (await query(`DELETE FROM ${s}.suppression WHERE address_hash = $1 RETURNING 1`, [hash])).length > 0;\n    },\n    async hasKey(key) {\n      return (await query(`SELECT 1 FROM ${s}.idempotency WHERE key = $1`, [key])).length > 0;\n    },\n    async claimKey(key, now) {\n      return (await query(`INSERT INTO ${s}.idempotency (key, created_at) VALUES ($1,$2) ON CONFLICT DO NOTHING RETURNING 1`, [key, now])).length > 0;\n    },\n    async releaseKey(key) {\n      await query(`DELETE FROM ${s}.idempotency WHERE key = $1`, [key]);\n    },\n    async purgeBefore(before) {\n      const logs = await query(`DELETE FROM ${s}.delivery WHERE at < $1 RETURNING 1`, [before]);\n      const keys = await query(`DELETE FROM ${s}.idempotency WHERE created_at < $1 RETURNING 1`, [before]);\n      return logs.length + keys.length;\n    },\n  };\n}\n","import { MAIL_CODE, MailError, type MailProvider, type MailSettings, type OutgoingMail } from \"./port\";\nimport { bareAddress } from \"./rules\";\n\n/** The part of `fetch` the providers use: inject the global one (`fetch`), or a fake in a test. */\nexport type FetchLike = (url: string, init: { method: \"POST\"; headers: Record<string, string>; body: string }) => Promise<{ ok: boolean; status: number; text(): Promise<string> }>;\n\n/** Trims trailing slashes without a regular expression (a long run of slashes must not be quadratic). */\nconst withoutTrailingSlashes = (url: string) => {\n  let end = url.length;\n  while (end > 0 && url[end - 1] === \"/\") end -= 1;\n  return url.slice(0, end);\n};\n\nconst failure = (provider: string, status: number, body: string) => new MailError(MAIL_CODE.provider, `${provider} answered ${status}: ${body.slice(0, 200)}`);\n\nconst idOf = (body: string, key: string): string | null => {\n  try {\n    const value = (JSON.parse(body) as Record<string, unknown>)[key];\n    return typeof value === \"string\" ? value : null;\n  } catch {\n    return null;\n  }\n};\n\nexport interface MailgunOptions {\n  apiKey: string;\n  /** The sending domain. */\n  domain: string;\n  /** `https://api.mailgun.net` (default) or `https://api.eu.mailgun.net`. */\n  apiUrl?: string;\n  fetch: FetchLike;\n}\n\n/** Mailgun's messages API (form-encoded, basic auth). */\nexport function mailgunProvider(options: MailgunOptions): MailProvider {\n  const base = withoutTrailingSlashes(options.apiUrl ?? \"https://api.mailgun.net\");\n  const auth = `Basic ${Buffer.from(`api:${options.apiKey}`).toString(\"base64\")}`;\n  return {\n    name: \"mailgun\",\n    async send(mail) {\n      const form = new URLSearchParams({ from: mail.from, to: mail.to, subject: mail.subject, text: mail.text });\n      if (mail.html !== undefined) form.set(\"html\", mail.html);\n      if (mail.replyTo) form.set(\"h:Reply-To\", mail.replyTo);\n      form.set(\"v:idempotency-key\", mail.idempotencyKey);\n      const res = await options.fetch(`${base}/v3/${encodeURIComponent(options.domain)}/messages`, { method: \"POST\", headers: { authorization: auth, \"content-type\": \"application/x-www-form-urlencoded\" }, body: form.toString() });\n      const body = await res.text();\n      if (!res.ok) throw failure(\"mailgun\", res.status, body);\n      return { messageId: idOf(body, \"id\") };\n    },\n  };\n}\n\nexport interface ResendOptions {\n  apiKey: string;\n  /** Default `https://api.resend.com`. */\n  apiUrl?: string;\n  fetch: FetchLike;\n}\n\n/** Resend's emails API (JSON, bearer key, its own `Idempotency-Key`). */\nexport function resendProvider(options: ResendOptions): MailProvider {\n  const base = withoutTrailingSlashes(options.apiUrl ?? \"https://api.resend.com\");\n  return {\n    name: \"resend\",\n    async send(mail) {\n      const body = { from: mail.from, to: [mail.to], subject: mail.subject, text: mail.text, ...(mail.html === undefined ? {} : { html: mail.html }), ...(mail.replyTo ? { reply_to: mail.replyTo } : {}) };\n      const res = await options.fetch(`${base}/emails`, { method: \"POST\", headers: { authorization: `Bearer ${options.apiKey}`, \"content-type\": \"application/json\", \"idempotency-key\": mail.idempotencyKey }, body: JSON.stringify(body) });\n      const answer = await res.text();\n      if (!res.ok) throw failure(\"resend\", res.status, answer);\n      return { messageId: idOf(answer, \"id\") };\n    },\n  };\n}\n\n/** The development provider: writes one JSON line per mail (without its body) and sends nothing. */\nexport function logProvider(write: (line: string) => void): MailProvider {\n  return {\n    name: \"log\",\n    async send(mail) {\n      write(JSON.stringify({ event: \"mail.log\", from: bareAddress(mail.from), template: mail.template, category: mail.category, locale: mail.locale, subject: mail.subject, idempotencyKey: mail.idempotencyKey }));\n      return { messageId: null };\n    },\n  };\n}\n\n/** The keys a provider needs: they stay in the environment, the product reads them and passes them here. */\nexport interface ProviderKeys {\n  apiKey?: string;\n  domain?: string;\n  apiUrl?: string;\n}\n\n/**\n * The provider the admin chose (`mail.provider`). A provider chosen without its key is refused loudly, never replaced by `log`:\n * a reset mail must not vanish silently.\n * @throws MailError when the chosen provider lacks its key (or its domain, for Mailgun)\n */\nexport function providerFor(kind: MailSettings[\"provider\"], keys: ProviderKeys, fetch: FetchLike, write: (line: string) => void): MailProvider {\n  if (kind === \"log\") return logProvider(write);\n  if (!keys.apiKey) throw new MailError(MAIL_CODE.badSettings, `mail.provider is ${kind} but its API key is not set`);\n  if (kind === \"resend\") return resendProvider({ apiKey: keys.apiKey, fetch, ...(keys.apiUrl ? { apiUrl: keys.apiUrl } : {}) });\n  if (!keys.domain) throw new MailError(MAIL_CODE.badSettings, \"mail.provider is mailgun but its domain is not set\");\n  return mailgunProvider({ apiKey: keys.apiKey, domain: keys.domain, fetch, ...(keys.apiUrl ? { apiUrl: keys.apiUrl } : {}) });\n}\n\nexport type { OutgoingMail };\n","import { defineModule } from \"@krizaka/db\";\n\n/**\n * The tables of « mail », in their own Postgres schema: `delivery` (the log, with the recipient as a hash, never a body),\n * `suppression` (the addresses never mailed again, as a SHA-256 hash: the list holds no address) and `idempotency` (the keys\n * already sent). They reference no product table. Version 1 is frozen once released: a change is version 2.\n */\nexport const mailSchema = defineModule({\n  module: \"mail\",\n  migrations: [\n    {\n      version: 1,\n      name: \"delivery, suppression and idempotency\",\n      sql: (c) => `\nCREATE TABLE ${c.schema}.delivery (\n  id              bigserial PRIMARY KEY,\n  at              timestamptz NOT NULL,\n  template        text NOT NULL,\n  category        text NOT NULL,\n  locale          text NOT NULL,\n  to_hash         text NOT NULL CHECK (char_length(to_hash) = 64),\n  status          text NOT NULL CHECK (status IN ('sent', 'failed', 'suppressed', 'duplicate')),\n  message_id      text,\n  idempotency_key text,\n  detail          text\n);\nCREATE INDEX delivery_at ON ${c.schema}.delivery (at);\nCREATE TABLE ${c.schema}.suppression (\n  address_hash text PRIMARY KEY CHECK (char_length(address_hash) = 64),\n  reason       text NOT NULL CHECK (reason IN ('bounce', 'complaint', 'unsubscribed')),\n  created_at   timestamptz NOT NULL\n);\nCREATE TABLE ${c.schema}.idempotency (\n  key        text PRIMARY KEY CHECK (char_length(key) BETWEEN 1 AND 200),\n  created_at timestamptz NOT NULL\n);\nCREATE INDEX idempotency_created ON ${c.schema}.idempotency (created_at);`,\n    },\n  ],\n});\n","import { createHmac, timingSafeEqual } from \"node:crypto\";\n\nimport { MAIL_CODE, MailError, SUPPRESSION_REASON, type SuppressionReason } from \"./port\";\n\n/** What a provider's webhook tells us about one address. */\nexport interface Suppression {\n  address: string;\n  reason: SuppressionReason;\n}\n\n// @fixed: how far a webhook's timestamp may be from now, in seconds (replay protection; the providers' own recommendation is minutes)\nconst TOLERANCE_SECONDS = 300;\n\nconst equal = (a: string, b: string) => {\n  const x = Buffer.from(a);\n  const y = Buffer.from(b);\n  return x.length === y.length && timingSafeEqual(x, y);\n};\nconst bad = (why: string) => new MailError(MAIL_CODE.badWebhook, why);\nconst record = (value: unknown): Record<string, unknown> => (typeof value === \"object\" && value !== null ? (value as Record<string, unknown>) : {});\nconst text = (value: unknown) => (typeof value === \"string\" ? value : \"\");\n\n/**\n * A Mailgun webhook (JSON body): checks the signature (HMAC-SHA256 of `timestamp + token` with the webhook signing key, hex) and\n * its age, then answers the address to suppress, or `null` for an event that is not a permanent bounce, a complaint or an unsubscribe.\n * @throws MailError when the body is not Mailgun's, the signature is wrong or the timestamp is stale\n */\nexport function parseMailgunWebhook(rawBody: string, signingKey: string, nowSeconds: number): Suppression | null {\n  let body: Record<string, unknown>;\n  try {\n    body = record(JSON.parse(rawBody));\n  } catch {\n    throw bad(\"the body is not JSON\");\n  }\n  const sig = record(body.signature);\n  const timestamp = text(sig.timestamp);\n  const expected = createHmac(\"sha256\", signingKey).update(timestamp + text(sig.token)).digest(\"hex\");\n  if (!equal(expected, text(sig.signature))) throw bad(\"the signature does not match\");\n  if (!/^\\d+$/.test(timestamp) || Math.abs(nowSeconds - Number(timestamp)) > TOLERANCE_SECONDS) throw bad(\"the timestamp is stale\");\n  const data = record(body[\"event-data\"]);\n  const address = text(data.recipient);\n  if (address === \"\") return null;\n  const event = text(data.event);\n  if (event === \"complained\") return { address, reason: SUPPRESSION_REASON.complaint };\n  if (event === \"unsubscribed\") return { address, reason: SUPPRESSION_REASON.unsubscribed };\n  if (event === \"failed\" && text(data.severity) === \"permanent\") return { address, reason: SUPPRESSION_REASON.bounce };\n  return null;\n}\n\nexport interface SvixHeaders {\n  id: string | null | undefined;\n  timestamp: string | null | undefined;\n  signature: string | null | undefined;\n}\n\n/**\n * A Resend webhook (signed the Svix way): HMAC-SHA256 over `id.timestamp.body` with the base64 secret that follows `whsec_`, any of\n * the space-separated `v1,<base64>` signatures matching. Answers the addresses to suppress (a hard bounce or a complaint).\n * @throws MailError when the headers are missing, the signature is wrong or the timestamp is stale\n */\nexport function parseResendWebhook(rawBody: string, headers: SvixHeaders, secret: string, nowSeconds: number): Suppression[] {\n  const { id, timestamp, signature } = headers;\n  if (!id || !timestamp || !signature) throw bad(\"the signature headers are missing\");\n  if (!/^\\d+$/.test(timestamp) || Math.abs(nowSeconds - Number(timestamp)) > TOLERANCE_SECONDS) throw bad(\"the timestamp is stale\");\n  const key = Buffer.from(secret.startsWith(\"whsec_\") ? secret.slice(6) : secret, \"base64\");\n  const expected = createHmac(\"sha256\", key).update(`${id}.${timestamp}.${rawBody}`).digest(\"base64\");\n  const ok = signature.split(\" \").some((part) => part.startsWith(\"v1,\") && equal(part.slice(3), expected));\n  if (!ok) throw bad(\"the signature does not match\");\n  let event: Record<string, unknown>;\n  try {\n    event = record(JSON.parse(rawBody));\n  } catch {\n    throw bad(\"the body is not JSON\");\n  }\n  const data = record(event.data);\n  const to = Array.isArray(data.to) ? data.to.filter((a): a is string => typeof a === \"string\") : [];\n  const type = text(event.type);\n  if (type === \"email.complained\") return to.map((address) => ({ address, reason: SUPPRESSION_REASON.complaint }));\n  if (type === \"email.bounced\" && text(record(data.bounce).type).toLowerCase() !== \"transient\") return to.map((address) => ({ address, reason: SUPPRESSION_REASON.bounce }));\n  return [];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAOO,SAAS,WAAW,OAAkB,OAAc;AACzD,SAAO;AAAA,IACL,KAAK,EAAE,QAAQ,CAAC,UAAuD,MAAM,OAAO,EAAE,GAAG,OAAO,IAAI,MAAM,KAAK,IAAI,KAAK,MAAM,EAAE,IAAI,MAAM,IAAI,EAAE,CAAC,EAAE;AAAA,IACnJ,aAAa;AAAA,MACX,KAAK,CAAC,UAAkB,MAAM,aAAa,YAAY,KAAK,CAAC;AAAA,MAC7D,KAAK,OAAO,OAAeA,YAA6C;AACtE,cAAM,MAAM,SAAS,YAAY,KAAK,GAAGA,SAAQ,MAAM,IAAI,CAAC;AAAA,MAC9D;AAAA,IACF;AAAA,IACA,aAAa;AAAA,MACX,OAAO,CAAC,QAAgB,MAAM,SAAS,KAAK,MAAM,IAAI,CAAC;AAAA,MACvD,SAAS,CAAC,QAAgB,MAAM,WAAW,GAAG;AAAA,IAChD;AAAA,EACF;AACF;;;ACrBA,SAAS,gBAAgB;AAOlB,IAAM,aAAa;AACnB,IAAM,aAAa,EAAE,WAAW,wBAAwB;AAsC/D,IAAM,YAAY,CAAC,YAA6C,OAAO,YAAY,YAAY,YAAY,QAAQ,QAAQ,WAAW,oBAAoB;AAC1J,IAAM,SAAS,CAAC,WAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,MAAM,GAAG,GAAG;AAUjG,SAAS,WAAW,MAAsB;AAC/C,QAAM,WAAW,YAAa,OAAO,KAAK,aAAa,aAAa,MAAM,KAAK,SAAS,IAAI,KAAK;AACjG,QAAM,MAAM,CAAC,UAAqC,KAAK,MAAM,OAAO,EAAE,GAAG,OAAO,IAAI,KAAK,MAAM,IAAI,EAAE,CAAC;AACtG,SAAO;AAAA,IACL,MAAM,MAAM,IAAI,SAAS;AACvB,mBAAa,OAAO;AACpB,YAAM,KAAK,OAAO,QAAQ,cAAc;AACxC,YAAM,EAAE,SAAS,IAAI,MAAM,KAAK,OAAO,OAAO,IAAI,EAAE,OAAO,YAAY,MAAM,WAAW,WAAW,SAAS,SAAS,GAAG,CAAC;AACzH,aAAO,EAAE,IAAI,QAAQ,SAAS;AAAA,IAChC;AAAA,IACA,MAAM,QAAQ,QAAQ;AACpB,UAAI,CAAC,UAAU,OAAO,OAAO,EAAG,OAAM,IAAI,UAAU,UAAU,YAAY,WAAW,OAAO,EAAE,gBAAgB;AAC9G,YAAM,UAAU,OAAO;AACvB,mBAAa,OAAO;AACpB,YAAM,OAAO,YAAY,QAAQ,EAAE;AACnC,YAAM,OAAO,EAAE,UAAU,QAAQ,UAAU,UAAU,QAAQ,UAAU,QAAQ,QAAQ,QAAQ,IAAI,MAAM,gBAAgB,QAAQ,eAAe;AAChJ,UAAI,MAAM,KAAK,MAAM,aAAa,IAAI,GAAG;AACvC,cAAM,IAAI,EAAE,GAAG,MAAM,QAAQ,gBAAgB,WAAW,CAAC;AACzD,eAAO,gBAAgB;AAAA,MACzB;AACA,UAAI,MAAM,KAAK,MAAM,OAAO,QAAQ,cAAc,GAAG;AACnD,cAAM,IAAI,EAAE,GAAG,MAAM,QAAQ,gBAAgB,UAAU,CAAC;AACxD,eAAO,gBAAgB;AAAA,MACzB;AACA,YAAM,IAAI,MAAM,SAAS;AACzB,YAAM,WAAW,OAAO,KAAK,aAAa,aAAa,KAAK,SAAS,CAAC,IAAI,KAAK;AAC/E,YAAM,UAAU,QAAQ,WAAW,EAAE;AACrC,UAAI;AACF,cAAM,OAAO,MAAM,SAAS,KAAK,EAAE,GAAG,SAAS,MAAM,EAAE,MAAM,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG,CAAC;AAC9F,cAAM,KAAK,MAAM,SAAS,QAAQ,gBAAgB,KAAK,MAAM,IAAI,CAAC;AAClE,cAAM,IAAI,EAAE,GAAG,MAAM,QAAQ,gBAAgB,MAAM,WAAW,KAAK,aAAa,QAAW,QAAQ,SAAS,KAAK,CAAC;AAClH,eAAO,gBAAgB;AAAA,MACzB,SAAS,OAAO;AACd,cAAM,IAAI,EAAE,GAAG,MAAM,QAAQ,gBAAgB,QAAQ,QAAQ,OAAO,KAAK,EAAE,CAAC;AAC5E,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU,CAAC,MAAM,KAAK,MAAM,SAAS,YAAY,YAAY,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,MAAM,IAAI,CAAC;AAAA,IACpG,YAAY,CAAC,YAAY,KAAK,MAAM,WAAW,YAAY,YAAY,OAAO,CAAC,CAAC;AAAA,IAChF,cAAc,CAAC,YAAY,KAAK,MAAM,aAAa,YAAY,YAAY,OAAO,CAAC,CAAC;AAAA,IACpF,MAAM,QAAQ;AACZ,YAAM,IAAI,MAAM,SAAS;AACzB,aAAO,KAAK,MAAM,YAAY,SAAS,KAAK,MAAM,IAAI,GAAG,EAAE,gBAAgB,EAAE,CAAC;AAAA,IAChF;AAAA,EACF;AACF;;;ACnGO,SAAS,kBAA6B;AAC3C,QAAM,MAA2C,CAAC;AAClD,QAAM,aAAa,oBAAI,IAA+B;AACtD,QAAM,OAAO,oBAAI,IAAkB;AACnC,MAAI,MAAM;AACV,SAAO;AAAA,IACL,MAAM,OAAO,EAAE,IAAI,GAAG,MAAM,GAAG;AAC7B,aAAO;AACP,UAAI,KAAK,EAAE,GAAG,OAAO,IAAI,KAAK,IAAI,GAAG,YAAY,GAAG,MAAM,GAAG,CAAC;AAAA,IAChE;AAAA,IACA,MAAM,OAAO,OAAO;AAClB,aAAO,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,OAAO,GAAG,IAAI,MAAM,GAAG;AAAA,IACzE;AAAA,IACA,MAAM,aAAa,MAAM;AACvB,aAAO,WAAW,IAAI,IAAI;AAAA,IAC5B;AAAA,IACA,MAAM,SAAS,MAAMC,SAAQ;AAC3B,UAAI,WAAW,IAAI,IAAI,EAAG,QAAO;AACjC,iBAAW,IAAI,MAAMA,OAAM;AAC3B,aAAO;AAAA,IACT;AAAA,IACA,MAAM,WAAW,MAAM;AACrB,aAAO,WAAW,OAAO,IAAI;AAAA,IAC/B;AAAA,IACA,MAAM,OAAO,KAAK;AAChB,aAAO,KAAK,IAAI,GAAG;AAAA,IACrB;AAAA,IACA,MAAM,SAAS,KAAK,KAAK;AACvB,UAAI,KAAK,IAAI,GAAG,EAAG,QAAO;AAC1B,WAAK,IAAI,KAAK,GAAG;AACjB,aAAO;AAAA,IACT;AAAA,IACA,MAAM,WAAW,KAAK;AACpB,WAAK,OAAO,GAAG;AAAA,IACjB;AAAA,IACA,MAAM,YAAY,QAAQ;AACxB,UAAI,IAAI;AACR,eAAS,IAAI,IAAI,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG;AAC3C,YAAI,IAAI,CAAC,EAAG,QAAQ,OAAQ;AAC5B,YAAI,OAAO,GAAG,CAAC;AACf,aAAK;AAAA,MACP;AACA,iBAAW,CAAC,KAAK,EAAE,KAAK,MAAM;AAC5B,YAAI,MAAM,OAAQ;AAClB,aAAK,OAAO,GAAG;AACf,aAAK;AAAA,MACP;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;;;ACrDA,SAAS,aAAyB;AAsB3B,SAAS,YAAY,OAAc,SAAS,QAAmB;AACpE,QAAM,IAAI,MAAM,MAAM;AACtB,SAAO;AAAA,IACL,MAAM,OAAO,GAAG;AACd,YAAM,MAAM,eAAe,CAAC,wIAAwI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,MAAM,EAAE,kBAAkB,MAAM,EAAE,UAAU,IAAI,CAAC;AAAA,IAC/R;AAAA,IACA,MAAM,OAAO,OAAO;AAClB,YAAM,OAAO,MAAM,MAAW,iBAAiB,CAAC,uCAAuC,CAAC,KAAK,CAAC;AAC9F,aAAO,KAAK,IAAI,CAAC,OAAO,EAAE,IAAI,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,YAAY,GAAG,UAAU,EAAE,UAAU,UAAU,EAAE,UAAU,QAAQ,EAAE,QAAQ,IAAI,EAAE,SAAS,QAAQ,EAAE,QAAQ,WAAW,EAAE,cAAc,QAAW,gBAAgB,EAAE,mBAAmB,QAAW,QAAQ,EAAE,UAAU,OAAU,EAAE;AAAA,IAC3R;AAAA,IACA,MAAM,aAAa,MAAM;AACvB,cAAQ,MAAM,MAAM,iBAAiB,CAAC,wCAAwC,CAAC,IAAI,CAAC,GAAG,SAAS;AAAA,IAClG;AAAA,IACA,MAAM,SAAS,MAAMC,SAA2B,KAAK;AACnD,cAAQ,MAAM,MAAM,eAAe,CAAC,wGAAwG,CAAC,MAAMA,SAAQ,GAAG,CAAC,GAAG,SAAS;AAAA,IAC7K;AAAA,IACA,MAAM,WAAW,MAAM;AACrB,cAAQ,MAAM,MAAM,eAAe,CAAC,oDAAoD,CAAC,IAAI,CAAC,GAAG,SAAS;AAAA,IAC5G;AAAA,IACA,MAAM,OAAO,KAAK;AAChB,cAAQ,MAAM,MAAM,iBAAiB,CAAC,+BAA+B,CAAC,GAAG,CAAC,GAAG,SAAS;AAAA,IACxF;AAAA,IACA,MAAM,SAAS,KAAK,KAAK;AACvB,cAAQ,MAAM,MAAM,eAAe,CAAC,oFAAoF,CAAC,KAAK,GAAG,CAAC,GAAG,SAAS;AAAA,IAChJ;AAAA,IACA,MAAM,WAAW,KAAK;AACpB,YAAM,MAAM,eAAe,CAAC,+BAA+B,CAAC,GAAG,CAAC;AAAA,IAClE;AAAA,IACA,MAAM,YAAY,QAAQ;AACxB,YAAM,OAAO,MAAM,MAAM,eAAe,CAAC,uCAAuC,CAAC,MAAM,CAAC;AACxF,YAAM,OAAO,MAAM,MAAM,eAAe,CAAC,kDAAkD,CAAC,MAAM,CAAC;AACnG,aAAO,KAAK,SAAS,KAAK;AAAA,IAC5B;AAAA,EACF;AACF;;;ACjDA,IAAM,yBAAyB,CAAC,QAAgB;AAC9C,MAAI,MAAM,IAAI;AACd,SAAO,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,IAAK,QAAO;AAC/C,SAAO,IAAI,MAAM,GAAG,GAAG;AACzB;AAEA,IAAM,UAAU,CAAC,UAAkB,QAAgB,SAAiB,IAAI,UAAU,UAAU,UAAU,GAAG,QAAQ,aAAa,MAAM,KAAK,KAAK,MAAM,GAAG,GAAG,CAAC,EAAE;AAE7J,IAAM,OAAO,CAAC,MAAc,QAA+B;AACzD,MAAI;AACF,UAAM,QAAS,KAAK,MAAM,IAAI,EAA8B,GAAG;AAC/D,WAAO,OAAO,UAAU,WAAW,QAAQ;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAYO,SAAS,gBAAgB,SAAuC;AACrE,QAAM,OAAO,uBAAuB,QAAQ,UAAU,yBAAyB;AAC/E,QAAM,OAAO,SAAS,OAAO,KAAK,OAAO,QAAQ,MAAM,EAAE,EAAE,SAAS,QAAQ,CAAC;AAC7E,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,KAAK,MAAM;AACf,YAAM,OAAO,IAAI,gBAAgB,EAAE,MAAM,KAAK,MAAM,IAAI,KAAK,IAAI,SAAS,KAAK,SAAS,MAAM,KAAK,KAAK,CAAC;AACzG,UAAI,KAAK,SAAS,OAAW,MAAK,IAAI,QAAQ,KAAK,IAAI;AACvD,UAAI,KAAK,QAAS,MAAK,IAAI,cAAc,KAAK,OAAO;AACrD,WAAK,IAAI,qBAAqB,KAAK,cAAc;AACjD,YAAM,MAAM,MAAM,QAAQ,MAAM,GAAG,IAAI,OAAO,mBAAmB,QAAQ,MAAM,CAAC,aAAa,EAAE,QAAQ,QAAQ,SAAS,EAAE,eAAe,MAAM,gBAAgB,oCAAoC,GAAG,MAAM,KAAK,SAAS,EAAE,CAAC;AAC7N,YAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAI,CAAC,IAAI,GAAI,OAAM,QAAQ,WAAW,IAAI,QAAQ,IAAI;AACtD,aAAO,EAAE,WAAW,KAAK,MAAM,IAAI,EAAE;AAAA,IACvC;AAAA,EACF;AACF;AAUO,SAAS,eAAe,SAAsC;AACnE,QAAM,OAAO,uBAAuB,QAAQ,UAAU,wBAAwB;AAC9E,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,KAAK,MAAM;AACf,YAAM,OAAO,EAAE,MAAM,KAAK,MAAM,IAAI,CAAC,KAAK,EAAE,GAAG,SAAS,KAAK,SAAS,MAAM,KAAK,MAAM,GAAI,KAAK,SAAS,SAAY,CAAC,IAAI,EAAE,MAAM,KAAK,KAAK,GAAI,GAAI,KAAK,UAAU,EAAE,UAAU,KAAK,QAAQ,IAAI,CAAC,EAAG;AACpM,YAAM,MAAM,MAAM,QAAQ,MAAM,GAAG,IAAI,WAAW,EAAE,QAAQ,QAAQ,SAAS,EAAE,eAAe,UAAU,QAAQ,MAAM,IAAI,gBAAgB,oBAAoB,mBAAmB,KAAK,eAAe,GAAG,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC;AACpO,YAAM,SAAS,MAAM,IAAI,KAAK;AAC9B,UAAI,CAAC,IAAI,GAAI,OAAM,QAAQ,UAAU,IAAI,QAAQ,MAAM;AACvD,aAAO,EAAE,WAAW,KAAK,QAAQ,IAAI,EAAE;AAAA,IACzC;AAAA,EACF;AACF;AAGO,SAAS,YAAY,OAA6C;AACvE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,KAAK,MAAM;AACf,YAAM,KAAK,UAAU,EAAE,OAAO,YAAY,MAAM,YAAY,KAAK,IAAI,GAAG,UAAU,KAAK,UAAU,UAAU,KAAK,UAAU,QAAQ,KAAK,QAAQ,SAAS,KAAK,SAAS,gBAAgB,KAAK,eAAe,CAAC,CAAC;AAC5M,aAAO,EAAE,WAAW,KAAK;AAAA,IAC3B;AAAA,EACF;AACF;AAcO,SAAS,YAAY,MAAgC,MAAoB,OAAkB,OAA6C;AAC7I,MAAI,SAAS,MAAO,QAAO,YAAY,KAAK;AAC5C,MAAI,CAAC,KAAK,OAAQ,OAAM,IAAI,UAAU,UAAU,aAAa,oBAAoB,IAAI,6BAA6B;AAClH,MAAI,SAAS,SAAU,QAAO,eAAe,EAAE,QAAQ,KAAK,QAAQ,OAAO,GAAI,KAAK,SAAS,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC,EAAG,CAAC;AAC5H,MAAI,CAAC,KAAK,OAAQ,OAAM,IAAI,UAAU,UAAU,aAAa,oDAAoD;AACjH,SAAO,gBAAgB,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,QAAQ,OAAO,GAAI,KAAK,SAAS,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC,EAAG,CAAC;AAC7H;;;ACvGA,SAAS,oBAAoB;AAOtB,IAAM,aAAa,aAAa;AAAA,EACrC,QAAQ;AAAA,EACR,YAAY;AAAA,IACV;AAAA,MACE,SAAS;AAAA,MACT,MAAM;AAAA,MACN,KAAK,CAAC,MAAM;AAAA,eACH,EAAE,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,8BAYO,EAAE,MAAM;AAAA,eACvB,EAAE,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,eAKR,EAAE,MAAM;AAAA;AAAA;AAAA;AAAA,sCAIe,EAAE,MAAM;AAAA,IAC1C;AAAA,EACF;AACF,CAAC;;;ACvCD,SAAS,YAAY,uBAAuB;AAW5C,IAAM,oBAAoB;AAE1B,IAAM,QAAQ,CAAC,GAAW,MAAc;AACtC,QAAM,IAAI,OAAO,KAAK,CAAC;AACvB,QAAM,IAAI,OAAO,KAAK,CAAC;AACvB,SAAO,EAAE,WAAW,EAAE,UAAU,gBAAgB,GAAG,CAAC;AACtD;AACA,IAAM,MAAM,CAAC,QAAgB,IAAI,UAAU,UAAU,YAAY,GAAG;AACpE,IAAM,SAAS,CAAC,UAA6C,OAAO,UAAU,YAAY,UAAU,OAAQ,QAAoC,CAAC;AACjJ,IAAM,OAAO,CAAC,UAAoB,OAAO,UAAU,WAAW,QAAQ;AAO/D,SAAS,oBAAoB,SAAiB,YAAoB,YAAwC;AAC/G,MAAI;AACJ,MAAI;AACF,WAAO,OAAO,KAAK,MAAM,OAAO,CAAC;AAAA,EACnC,QAAQ;AACN,UAAM,IAAI,sBAAsB;AAAA,EAClC;AACA,QAAM,MAAM,OAAO,KAAK,SAAS;AACjC,QAAM,YAAY,KAAK,IAAI,SAAS;AACpC,QAAM,WAAW,WAAW,UAAU,UAAU,EAAE,OAAO,YAAY,KAAK,IAAI,KAAK,CAAC,EAAE,OAAO,KAAK;AAClG,MAAI,CAAC,MAAM,UAAU,KAAK,IAAI,SAAS,CAAC,EAAG,OAAM,IAAI,8BAA8B;AACnF,MAAI,CAAC,QAAQ,KAAK,SAAS,KAAK,KAAK,IAAI,aAAa,OAAO,SAAS,CAAC,IAAI,kBAAmB,OAAM,IAAI,wBAAwB;AAChI,QAAM,OAAO,OAAO,KAAK,YAAY,CAAC;AACtC,QAAM,UAAU,KAAK,KAAK,SAAS;AACnC,MAAI,YAAY,GAAI,QAAO;AAC3B,QAAM,QAAQ,KAAK,KAAK,KAAK;AAC7B,MAAI,UAAU,aAAc,QAAO,EAAE,SAAS,QAAQ,mBAAmB,UAAU;AACnF,MAAI,UAAU,eAAgB,QAAO,EAAE,SAAS,QAAQ,mBAAmB,aAAa;AACxF,MAAI,UAAU,YAAY,KAAK,KAAK,QAAQ,MAAM,YAAa,QAAO,EAAE,SAAS,QAAQ,mBAAmB,OAAO;AACnH,SAAO;AACT;AAaO,SAAS,mBAAmB,SAAiB,SAAsB,QAAgB,YAAmC;AAC3H,QAAM,EAAE,IAAI,WAAW,UAAU,IAAI;AACrC,MAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAW,OAAM,IAAI,mCAAmC;AAClF,MAAI,CAAC,QAAQ,KAAK,SAAS,KAAK,KAAK,IAAI,aAAa,OAAO,SAAS,CAAC,IAAI,kBAAmB,OAAM,IAAI,wBAAwB;AAChI,QAAM,MAAM,OAAO,KAAK,OAAO,WAAW,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,QAAQ,QAAQ;AACxF,QAAM,WAAW,WAAW,UAAU,GAAG,EAAE,OAAO,GAAG,EAAE,IAAI,SAAS,IAAI,OAAO,EAAE,EAAE,OAAO,QAAQ;AAClG,QAAM,KAAK,UAAU,MAAM,GAAG,EAAE,KAAK,CAAC,SAAS,KAAK,WAAW,KAAK,KAAK,MAAM,KAAK,MAAM,CAAC,GAAG,QAAQ,CAAC;AACvG,MAAI,CAAC,GAAI,OAAM,IAAI,8BAA8B;AACjD,MAAI;AACJ,MAAI;AACF,YAAQ,OAAO,KAAK,MAAM,OAAO,CAAC;AAAA,EACpC,QAAQ;AACN,UAAM,IAAI,sBAAsB;AAAA,EAClC;AACA,QAAM,OAAO,OAAO,MAAM,IAAI;AAC9B,QAAM,KAAK,MAAM,QAAQ,KAAK,EAAE,IAAI,KAAK,GAAG,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,IAAI,CAAC;AACjG,QAAM,OAAO,KAAK,MAAM,IAAI;AAC5B,MAAI,SAAS,mBAAoB,QAAO,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,QAAQ,mBAAmB,UAAU,EAAE;AAC/G,MAAI,SAAS,mBAAmB,KAAK,OAAO,KAAK,MAAM,EAAE,IAAI,EAAE,YAAY,MAAM,YAAa,QAAO,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,QAAQ,mBAAmB,OAAO,EAAE;AACzK,SAAO,CAAC;AACV;","names":["reason","reason","reason"]}

package/dist/port-Pk4TboMq.d.ts

@@ -0,0 +1,110 @@
+/**
+ * The ports of « mail »: a message queued in the caller's transaction and delivered after the commit, once per idempotency key,
+ * never to a suppressed address. Generic: no vendor SDK (providers are adapters over an injected `fetch`), no environment variable
+ * (keys come in as parameters), no wall clock, no database client. The module takes mail ALREADY RENDERED: templates are
+ * `@krizaka/email`'s (a UI package this one never imports), and its three ports are satisfied structurally by `emailPorts`.
+ */
+
+/** Why an address is never mailed again. The same values as `@krizaka/email`'s `SuppressionReason`. */
+declare const SUPPRESSION_REASON: {
+    readonly bounce: "bounce";
+    readonly complaint: "complaint";
+    readonly unsubscribed: "unsubscribed";
+};
+type SuppressionReason = (typeof SUPPRESSION_REASON)[keyof typeof SUPPRESSION_REASON];
+/** The mail a product queues. */
+interface MailMessage {
+    to: string;
+    subject: string;
+    text: string;
+    html?: string;
+    /** What kind of mail it is (`transactional`, `notification`, `digest`…): lower-case token, kept in the delivery log. */
+    category: string;
+    /** The template that rendered it, for the log (never the body). */
+    template: string;
+    locale: string;
+    /** One key sends once: queueing it twice is one message, and delivering it twice sends one mail. */
+    idempotencyKey: string;
+    /** Overrides `mail.replyTo` for this message. */
+    replyTo?: string;
+}
+/** A mail the provider receives: the message with the sender the settings give. */
+interface OutgoingMail extends MailMessage {
+    from: string;
+}
+/** What the provider answered. */
+interface Sent {
+    messageId: string | null;
+}
+/** One provider of mail (an adapter over `fetch`). It resolves on acceptance and throws on any failure: the outbox retries. */
+interface MailProvider {
+    readonly name: string;
+    send(mail: OutgoingMail): Promise<Sent>;
+}
+declare const DELIVERY_STATUS: {
+    readonly sent: "sent";
+    readonly failed: "failed";
+    readonly suppressed: "suppressed";
+    readonly duplicate: "duplicate";
+};
+type DeliveryStatus = (typeof DELIVERY_STATUS)[keyof typeof DELIVERY_STATUS];
+/** One line of the delivery log: what, to whom (a hash, never the address), how it went. The shape of `@krizaka/email`'s `DeliveryLogEntry`. */
+interface DeliveryEntry {
+    at?: string;
+    template: string;
+    category: string;
+    locale: string;
+    to: string;
+    status: DeliveryStatus;
+    messageId?: string | undefined;
+    idempotencyKey?: string | undefined;
+    detail?: string | undefined;
+}
+/** A line to write: the instant is a `Date`. */
+type DeliveryInput = Omit<DeliveryEntry, "at"> & {
+    at: Date;
+};
+/** A line as read back. */
+interface DeliveryRecord extends DeliveryEntry {
+    id: number;
+    at: string;
+}
+/** Where the module keeps its state. Every adapter runs `mailStoreContract` (`@krizaka/mail/testkit`). Addresses arrive hashed. */
+interface MailStore {
+    record(entry: DeliveryInput): Promise<void>;
+    recent(limit: number): Promise<DeliveryRecord[]>;
+    isSuppressed(addressHash: string): Promise<boolean>;
+    /** `false` when the address was already suppressed (the first reason stays). */
+    suppress(addressHash: string, reason: SuppressionReason, now: Date): Promise<boolean>;
+    /** Lifts a suppression (the person re-subscribed, or it was a mistake). */
+    unsuppress(addressHash: string): Promise<boolean>;
+    hasKey(key: string): Promise<boolean>;
+    /** `true` the first time a key is claimed. */
+    claimKey(key: string, now: Date): Promise<boolean>;
+    releaseKey(key: string): Promise<void>;
+    /** Removes the keys and log lines older than `before` (suppressions are kept for good). Returns how many. */
+    purgeBefore(before: Date): Promise<number>;
+}
+interface MailSettings {
+    provider: "log" | "mailgun" | "resend";
+    /** The sender, `Name <address>` or an address. */
+    from: string;
+    /** Where replies go; empty for none. */
+    replyTo: string;
+    /** Days the delivery log and the idempotency keys are kept. */
+    retentionDays: number;
+}
+declare const MAIL_CODE: {
+    readonly badAddress: "MAIL_BAD_ADDRESS";
+    readonly badMessage: "MAIL_BAD_MESSAGE";
+    readonly badSettings: "MAIL_BAD_SETTINGS";
+    readonly provider: "MAIL_PROVIDER_FAILED";
+    readonly badWebhook: "MAIL_BAD_WEBHOOK";
+};
+type MailCode = (typeof MAIL_CODE)[keyof typeof MAIL_CODE];
+declare class MailError extends Error {
+    readonly code: MailCode;
+    constructor(code: MailCode, message: string);
+}
+
+export { type DeliveryEntry as D, type MailStore as M, type OutgoingMail as O, type SuppressionReason as S, type MailMessage as a, type MailSettings as b, type MailProvider as c, DELIVERY_STATUS as d, type DeliveryInput as e, type DeliveryRecord as f, type DeliveryStatus as g, MAIL_CODE as h, type MailCode as i, MailError as j, SUPPRESSION_REASON as k, type Sent as l };

package/dist/settings.d.ts

@@ -0,0 +1,18 @@
+import * as _krizaka_settings from '@krizaka/settings';
+import { b as MailSettings } from './port-Pk4TboMq.js';
+
+/**
+ * The settings of « mail », a fragment the product adds to its registry (`@krizaka/mail/settings`): the admin picks the provider and
+ * the sender without a redeploy. Secrets (the provider's key, domain and webhook signing keys) stay in the environment.
+ */
+declare const mailSettings: {
+    readonly "mail.provider": _krizaka_settings.Def<"log" | "mailgun" | "resend">;
+    readonly "mail.from": _krizaka_settings.Def<string>;
+    readonly "mail.replyTo": _krizaka_settings.Def<string>;
+    readonly "mail.retentionDays": _krizaka_settings.Def<number>;
+};
+type Reader = (key: keyof typeof mailSettings) => string | number | undefined | Promise<string | number | undefined>;
+/** The module's settings as `createMail` takes them, from the product's accessor (`(key) => service.get(key, ctx)`). A key the accessor does not know falls back to the default. */
+declare function readMailSettings(read: Reader): Promise<MailSettings>;
+
+export { mailSettings, readMailSettings };

package/dist/settings.js

@@ -0,0 +1,31 @@
+import {
+  MAIL_BOUNDS,
+  MAIL_DEFAULTS
+} from "./chunk-YDSARDFP.js";
+
+// src/settings.ts
+import { choice, integer, text } from "@krizaka/settings";
+var PROVIDERS = ["log", "mailgun", "resend"];
+var mailSettings = {
+  "mail.provider": choice("mail", PROVIDERS, MAIL_DEFAULTS.provider),
+  "mail.from": text("mail", MAIL_DEFAULTS.from),
+  "mail.replyTo": text("mail", MAIL_DEFAULTS.replyTo, { empty: true }),
+  "mail.retentionDays": integer("mail", MAIL_DEFAULTS.retentionDays, { min: MAIL_BOUNDS.retentionDays[0], max: MAIL_BOUNDS.retentionDays[1], unit: "days" })
+};
+async function readMailSettings(read) {
+  const provider = await read("mail.provider");
+  const from = await read("mail.from");
+  const replyTo = await read("mail.replyTo");
+  const retention = await read("mail.retentionDays");
+  return {
+    provider: PROVIDERS.find((p) => p === provider) ?? MAIL_DEFAULTS.provider,
+    from: typeof from === "string" && from !== "" ? from : MAIL_DEFAULTS.from,
+    replyTo: typeof replyTo === "string" ? replyTo : MAIL_DEFAULTS.replyTo,
+    retentionDays: typeof retention === "number" ? retention : MAIL_DEFAULTS.retentionDays
+  };
+}
+export {
+  mailSettings,
+  readMailSettings
+};
+//# sourceMappingURL=settings.js.map

package/dist/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/settings.ts"],"sourcesContent":["import { choice, integer, type Registry, text } from \"@krizaka/settings\";\n\nimport type { MailSettings } from \"./port\";\nimport { MAIL_BOUNDS, MAIL_DEFAULTS } from \"./rules\";\n\nconst PROVIDERS = [\"log\", \"mailgun\", \"resend\"] as const;\n\n/**\n * The settings of « mail », a fragment the product adds to its registry (`@krizaka/mail/settings`): the admin picks the provider and\n * the sender without a redeploy. Secrets (the provider's key, domain and webhook signing keys) stay in the environment.\n */\nexport const mailSettings = {\n  \"mail.provider\": choice(\"mail\", PROVIDERS, MAIL_DEFAULTS.provider),\n  \"mail.from\": text(\"mail\", MAIL_DEFAULTS.from),\n  \"mail.replyTo\": text(\"mail\", MAIL_DEFAULTS.replyTo, { empty: true }),\n  \"mail.retentionDays\": integer(\"mail\", MAIL_DEFAULTS.retentionDays, { min: MAIL_BOUNDS.retentionDays[0], max: MAIL_BOUNDS.retentionDays[1], unit: \"days\" }),\n} as const satisfies Registry;\n\ntype Reader = (key: keyof typeof mailSettings) => string | number | undefined | Promise<string | number | undefined>;\n\n/** The module's settings as `createMail` takes them, from the product's accessor (`(key) => service.get(key, ctx)`). A key the accessor does not know falls back to the default. */\nexport async function readMailSettings(read: Reader): Promise<MailSettings> {\n  const provider = await read(\"mail.provider\");\n  const from = await read(\"mail.from\");\n  const replyTo = await read(\"mail.replyTo\");\n  const retention = await read(\"mail.retentionDays\");\n  return {\n    provider: PROVIDERS.find((p) => p === provider) ?? MAIL_DEFAULTS.provider,\n    from: typeof from === \"string\" && from !== \"\" ? from : MAIL_DEFAULTS.from,\n    replyTo: typeof replyTo === \"string\" ? replyTo : MAIL_DEFAULTS.replyTo,\n    retentionDays: typeof retention === \"number\" ? retention : MAIL_DEFAULTS.retentionDays,\n  };\n}\n"],"mappings":";;;;;;AAAA,SAAS,QAAQ,SAAwB,YAAY;AAKrD,IAAM,YAAY,CAAC,OAAO,WAAW,QAAQ;AAMtC,IAAM,eAAe;AAAA,EAC1B,iBAAiB,OAAO,QAAQ,WAAW,cAAc,QAAQ;AAAA,EACjE,aAAa,KAAK,QAAQ,cAAc,IAAI;AAAA,EAC5C,gBAAgB,KAAK,QAAQ,cAAc,SAAS,EAAE,OAAO,KAAK,CAAC;AAAA,EACnE,sBAAsB,QAAQ,QAAQ,cAAc,eAAe,EAAE,KAAK,YAAY,cAAc,CAAC,GAAG,KAAK,YAAY,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC;AAC3J;AAKA,eAAsB,iBAAiB,MAAqC;AAC1E,QAAM,WAAW,MAAM,KAAK,eAAe;AAC3C,QAAM,OAAO,MAAM,KAAK,WAAW;AACnC,QAAM,UAAU,MAAM,KAAK,cAAc;AACzC,QAAM,YAAY,MAAM,KAAK,oBAAoB;AACjD,SAAO;AAAA,IACL,UAAU,UAAU,KAAK,CAAC,MAAM,MAAM,QAAQ,KAAK,cAAc;AAAA,IACjE,MAAM,OAAO,SAAS,YAAY,SAAS,KAAK,OAAO,cAAc;AAAA,IACrE,SAAS,OAAO,YAAY,WAAW,UAAU,cAAc;AAAA,IAC/D,eAAe,OAAO,cAAc,WAAW,YAAY,cAAc;AAAA,EAC3E;AACF;","names":[]}

package/dist/testkit.d.ts

@@ -0,0 +1,7 @@
+import { M as MailStore } from './port-Pk4TboMq.js';
+
+declare const T0: Date;
+/** What every `MailStore` adapter must do: the same behaviour behind the same port. `make` gives an empty store. */
+declare function mailStoreContract(name: string, make: () => MailStore | Promise<MailStore>): void;
+
+export { T0, mailStoreContract };