@lunora/mail 1.0.0-alpha.1 → 1.0.0-alpha.2

package/dist/inbound/index.d.mts

@@ -1,3 +1,5 @@
+import { D as DurableObjectJurisdiction, S as ShardNamespaceLike } from "../packem_shared/shard.d-CL2Lmliv.mjs";
+export type { a as ShardStubLike } from "../packem_shared/shard.d-CL2Lmliv.mjs";
 /** A raw RFC 822 message as accepted by the parser. */
 type RawInboundEmail = ArrayBuffer | ReadableStream<Uint8Array> | string | Uint8Array;
 /** One parsed attachment. `content` is preserved as the parser decoded it. */
@@ -68,28 +70,6 @@ interface InboundEmail {
 */
 declare const parseInboundEmail: (raw: RawInboundEmail) => Promise<InboundEmail>;
 /**
-* Structural projections of the `SHARD` Durable Object namespace + one shard
-* stub, shared by the inbound dispatcher. Mirrors the shapes the outbound dev
-* capture sink uses (`packages/mail/src/from-env.ts`) so inbound dispatch routes
-* a parsed message into a Lunora function over the exact same admin-RPC-over-shard
-* path — without importing any Cloudflare types into `@lunora/mail`.
-*/
-/** Structural projection of one shard stub — only `fetch` returning something with `.json()`. */
-interface ShardStubLike {
-  fetch: (input: string, init?: {
-    body?: string;
-    headers?: Record<string, string>;
-    method?: string;
-  }) => Promise<{
-    json: () => Promise<unknown>;
-  }>;
-}
-/** Structural projection of the `SHARD` Durable Object namespace. */
-interface ShardNamespaceLike {
-  get: (id: unknown) => ShardStubLike;
-  idFromName: (name: string) => unknown;
-}
-/**
 * Structural projection of Cloudflare's `ForwardableEmailMessage` (verified
 * against `@cloudflare/workers-types`' `ForwardableEmailMessage`). Only the
 * members the handler touches are modelled, so the host can pass the real
@@ -181,6 +161,12 @@ interface DispatchToLunoraFunctionOptions<TEnv = Record<string, unknown>> {
   /** `functionPath` of the target mutation/action (e.g. `"inbound:onEmail"`). */
   functionPath: string;
   /**
+  * Pin inbound dispatch to a Cloudflare data-residency jurisdiction. Pass the
+  * same value as the worker's `jurisdiction` so inbound mail routes to the
+  * jurisdiction-pinned shard. Omit for the un-pinned global namespace.
+  */
+  jurisdiction?: DurableObjectJurisdiction;
+  /**
   * Map the parsed message into the function's args. Defaults to passing the
   * whole {@link InboundEmail} with binary attachment `content` base64-encoded
   * (see {@link toJsonSafeEmail}) so it survives the JSON-serialised RPC body.
@@ -204,4 +190,4 @@ interface DispatchToLunoraFunctionOptions<TEnv = Record<string, unknown>> {
 * making any trust decision in the target function.
 */
 declare const dispatchToLunoraFunction: <TEnv extends Record<string, unknown> = Record<string, unknown>>(options: DispatchToLunoraFunctionOptions<TEnv>) => InboundDispatch<TEnv>;
-export { type DispatchToLunoraFunctionOptions, type ForwardableEmailMessageLike, type InboundAttachment, type InboundAuthentication, type InboundDispatch, type InboundDispatchContext, type InboundEmail, type InboundEmailHandler, type InboundEmailHandlerOptions, type InboundVerify, type RawInboundEmail, type RpcEnvelope, type ShardNamespaceLike, type ShardStubLike, createInboundEmailHandler, dispatchToLunoraFunction, parseInboundEmail };
+export { type DispatchToLunoraFunctionOptions, type ForwardableEmailMessageLike, type InboundAttachment, type InboundAuthentication, type InboundDispatch, type InboundDispatchContext, type InboundEmail, type InboundEmailHandler, type InboundEmailHandlerOptions, type InboundVerify, type RawInboundEmail, type RpcEnvelope, type ShardNamespaceLike, createInboundEmailHandler, dispatchToLunoraFunction, parseInboundEmail };

package/dist/inbound/index.d.ts

@@ -1,3 +1,5 @@
+import { D as DurableObjectJurisdiction, S as ShardNamespaceLike } from "../packem_shared/shard.d-CL2Lmliv.js";
+export type { a as ShardStubLike } from "../packem_shared/shard.d-CL2Lmliv.js";
 /** A raw RFC 822 message as accepted by the parser. */
 type RawInboundEmail = ArrayBuffer | ReadableStream<Uint8Array> | string | Uint8Array;
 /** One parsed attachment. `content` is preserved as the parser decoded it. */
@@ -68,28 +70,6 @@ interface InboundEmail {
 */
 declare const parseInboundEmail: (raw: RawInboundEmail) => Promise<InboundEmail>;
 /**
-* Structural projections of the `SHARD` Durable Object namespace + one shard
-* stub, shared by the inbound dispatcher. Mirrors the shapes the outbound dev
-* capture sink uses (`packages/mail/src/from-env.ts`) so inbound dispatch routes
-* a parsed message into a Lunora function over the exact same admin-RPC-over-shard
-* path — without importing any Cloudflare types into `@lunora/mail`.
-*/
-/** Structural projection of one shard stub — only `fetch` returning something with `.json()`. */
-interface ShardStubLike {
-  fetch: (input: string, init?: {
-    body?: string;
-    headers?: Record<string, string>;
-    method?: string;
-  }) => Promise<{
-    json: () => Promise<unknown>;
-  }>;
-}
-/** Structural projection of the `SHARD` Durable Object namespace. */
-interface ShardNamespaceLike {
-  get: (id: unknown) => ShardStubLike;
-  idFromName: (name: string) => unknown;
-}
-/**
 * Structural projection of Cloudflare's `ForwardableEmailMessage` (verified
 * against `@cloudflare/workers-types`' `ForwardableEmailMessage`). Only the
 * members the handler touches are modelled, so the host can pass the real
@@ -181,6 +161,12 @@ interface DispatchToLunoraFunctionOptions<TEnv = Record<string, unknown>> {
   /** `functionPath` of the target mutation/action (e.g. `"inbound:onEmail"`). */
   functionPath: string;
   /**
+  * Pin inbound dispatch to a Cloudflare data-residency jurisdiction. Pass the
+  * same value as the worker's `jurisdiction` so inbound mail routes to the
+  * jurisdiction-pinned shard. Omit for the un-pinned global namespace.
+  */
+  jurisdiction?: DurableObjectJurisdiction;
+  /**
   * Map the parsed message into the function's args. Defaults to passing the
   * whole {@link InboundEmail} with binary attachment `content` base64-encoded
   * (see {@link toJsonSafeEmail}) so it survives the JSON-serialised RPC body.
@@ -204,4 +190,4 @@ interface DispatchToLunoraFunctionOptions<TEnv = Record<string, unknown>> {
 * making any trust decision in the target function.
 */
 declare const dispatchToLunoraFunction: <TEnv extends Record<string, unknown> = Record<string, unknown>>(options: DispatchToLunoraFunctionOptions<TEnv>) => InboundDispatch<TEnv>;
-export { type DispatchToLunoraFunctionOptions, type ForwardableEmailMessageLike, type InboundAttachment, type InboundAuthentication, type InboundDispatch, type InboundDispatchContext, type InboundEmail, type InboundEmailHandler, type InboundEmailHandlerOptions, type InboundVerify, type RawInboundEmail, type RpcEnvelope, type ShardNamespaceLike, type ShardStubLike, createInboundEmailHandler, dispatchToLunoraFunction, parseInboundEmail };
+export { type DispatchToLunoraFunctionOptions, type ForwardableEmailMessageLike, type InboundAttachment, type InboundAuthentication, type InboundDispatch, type InboundDispatchContext, type InboundEmail, type InboundEmailHandler, type InboundEmailHandlerOptions, type InboundVerify, type RawInboundEmail, type RpcEnvelope, type ShardNamespaceLike, createInboundEmailHandler, dispatchToLunoraFunction, parseInboundEmail };

package/dist/inbound/index.mjs

@@ -1,2 +1,2 @@
-export { createInboundEmailHandler, dispatchToLunoraFunction } from '../packem_shared/createInboundEmailHandler-Cd8dyzB7.mjs';
+export { createInboundEmailHandler, dispatchToLunoraFunction } from '../packem_shared/createInboundEmailHandler-D0uCOrU-.mjs';
 export { parseInboundEmail } from '../packem_shared/parseInboundEmail-Bw9u_1oc.mjs';

package/dist/index.d.mts

@@ -1,5 +1,6 @@
 import { M as MailTransport, L as LunoraMailOptions, a as Mailer, b as MailboxSink, S as SendOptions } from "./packem_shared/capture-transport.d-ChnhdPO2.mjs";
 export { type C as CapturedMail, type Q as QueueLike, type c as SendPayload, d as createCaptureTransport } from "./packem_shared/capture-transport.d-ChnhdPO2.mjs";
+import { D as DurableObjectJurisdiction } from "./packem_shared/shard.d-CL2Lmliv.mjs";
 import { ReactElement } from 'react';
 /**
 * Sends a raw RFC 822 message through a Worker's Email send binding. The Workers
@@ -40,6 +41,12 @@ type MailEnv = Record<string, unknown>;
 interface FromEnvOptions {
   /** RFC 822 send callback bound to the Worker's `send_email` binding (Cloudflare default transport). */
   cloudflareSend?: CloudflareSend;
+  /**
+  * Pin the captured-mail inbox shard to a Cloudflare data-residency
+  * jurisdiction. Pass the same value as the worker's `jurisdiction` so the
+  * dev inbox co-resides with app data. Omit for the un-pinned global namespace.
+  */
+  jurisdiction?: DurableObjectJurisdiction;
   /** Shard the captured-mail inbox lives on; override if your worker sets a custom `defaultShardKey`. */
   rootShard?: string;
 }
@@ -58,7 +65,7 @@ declare const shouldCaptureMail: (env: MailEnv) => boolean;
 * the `SHARD` binding or `LUNORA_ADMIN_TOKEN` it returns a sentinel id so a send
 * never fails for lack of somewhere to record.
 */
-declare const createCaptureSink: (env: MailEnv, rootShard?: string) => MailboxSink;
+declare const createCaptureSink: (env: MailEnv, rootShard?: string, jurisdiction?: DurableObjectJurisdiction) => MailboxSink;
 /**
 * Build a {@link Mailer} from a Worker `env`. In a dev environment every send is
 * captured into the studio's Mail inbox; otherwise it delivers via the supplied

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 import { M as MailTransport, L as LunoraMailOptions, a as Mailer, b as MailboxSink, S as SendOptions } from "./packem_shared/capture-transport.d-ChnhdPO2.js";
 export { type C as CapturedMail, type Q as QueueLike, type c as SendPayload, d as createCaptureTransport } from "./packem_shared/capture-transport.d-ChnhdPO2.js";
+import { D as DurableObjectJurisdiction } from "./packem_shared/shard.d-CL2Lmliv.js";
 import { ReactElement } from 'react';
 /**
 * Sends a raw RFC 822 message through a Worker's Email send binding. The Workers
@@ -40,6 +41,12 @@ type MailEnv = Record<string, unknown>;
 interface FromEnvOptions {
   /** RFC 822 send callback bound to the Worker's `send_email` binding (Cloudflare default transport). */
   cloudflareSend?: CloudflareSend;
+  /**
+  * Pin the captured-mail inbox shard to a Cloudflare data-residency
+  * jurisdiction. Pass the same value as the worker's `jurisdiction` so the
+  * dev inbox co-resides with app data. Omit for the un-pinned global namespace.
+  */
+  jurisdiction?: DurableObjectJurisdiction;
   /** Shard the captured-mail inbox lives on; override if your worker sets a custom `defaultShardKey`. */
   rootShard?: string;
 }
@@ -58,7 +65,7 @@ declare const shouldCaptureMail: (env: MailEnv) => boolean;
 * the `SHARD` binding or `LUNORA_ADMIN_TOKEN` it returns a sentinel id so a send
 * never fails for lack of somewhere to record.
 */
-declare const createCaptureSink: (env: MailEnv, rootShard?: string) => MailboxSink;
+declare const createCaptureSink: (env: MailEnv, rootShard?: string, jurisdiction?: DurableObjectJurisdiction) => MailboxSink;
 /**
 * Build a {@link Mailer} from a Worker `env`. In a dev environment every send is
 * captured into the studio's Mail inbox; otherwise it delivers via the supplied

package/dist/index.mjs

@@ -1,7 +1,7 @@
 export { createCaptureTransport } from './packem_shared/createCaptureTransport-Crz_8822.mjs';
 export { createCloudflareTransport } from './packem_shared/createCloudflareTransport-yHOVEsZv.mjs';
-export { default as createMailer } from './packem_shared/createMailer-CMVVTp0F.mjs';
-export { createCaptureSink, createMailerFromEnv, shouldCaptureMail } from './packem_shared/createCaptureSink-CNhqLMZ1.mjs';
-export { consumeQueuedSend, toQueuedPayload } from './packem_shared/toQueuedPayload-BEKOdaxU.mjs';
+export { default as createMailer } from './packem_shared/createMailer-oEKPAd4J.mjs';
+export { createCaptureSink, createMailerFromEnv, shouldCaptureMail } from './packem_shared/createCaptureSink-DeihS4LH.mjs';
+export { consumeQueuedSend, toQueuedPayload } from './packem_shared/consumeQueuedSend-BEKOdaxU.mjs';
 export { default as renderEmail } from './packem_shared/renderEmail-hyS1bpVP.mjs';
 export { default as createResendTransport } from './packem_shared/createResendTransport-oNIorpzv.mjs';

package/dist/packem_shared/{createCaptureSink-CNhqLMZ1.mjs → createCaptureSink-DeihS4LH.mjs}

@@ -1,5 +1,6 @@
 import { createCaptureTransport } from './createCaptureTransport-Crz_8822.mjs';
-import createMailer from './createMailer-CMVVTp0F.mjs';
+import createMailer from './createMailer-oEKPAd4J.mjs';
+import { a as applyJurisdiction } from './shard-CJ-TvmfT.mjs';
 
 const RECORD_MAIL_OP = "__lunora_admin__:recordMail";
 const DEFAULT_ROOT_SHARD = "__root__";
@@ -22,14 +23,15 @@ const shouldCaptureMail = (env) => {
     return typeof value === "string" && DEV_ENVIRONMENT_PATTERN.test(value);
   });
 };
-const createCaptureSink = (env, rootShard = DEFAULT_ROOT_SHARD) => {
+const createCaptureSink = (env, rootShard = DEFAULT_ROOT_SHARD, jurisdiction) => {
   return {
     record: async (mail) => {
-      const namespace = env["SHARD"];
+      const binding = env["SHARD"];
       const adminToken = typeof env["LUNORA_ADMIN_TOKEN"] === "string" ? env["LUNORA_ADMIN_TOKEN"] : void 0;
-      if (namespace === void 0 || adminToken === void 0) {
+      if (binding === void 0 || adminToken === void 0) {
         return { id: "uncaptured" };
       }
+      const namespace = applyJurisdiction(binding, jurisdiction);
       const stub = namespace.get(namespace.idFromName(rootShard));
       const response = await stub.fetch("https://shard.internal/rpc", {
         body: JSON.stringify({ args: mail, functionPath: RECORD_MAIL_OP }),
@@ -44,7 +46,7 @@ const createCaptureSink = (env, rootShard = DEFAULT_ROOT_SHARD) => {
 const createMailerFromEnv = (env, options = {}) => {
   const from = requireStringEnv(env, "MAIL_FROM");
   if (shouldCaptureMail(env)) {
-    return createMailer({ from, transport: createCaptureTransport(createCaptureSink(env, options.rootShard)) });
+    return createMailer({ from, transport: createCaptureTransport(createCaptureSink(env, options.rootShard, options.jurisdiction)) });
   }
   if (options.cloudflareSend) {
     return createMailer({ cloudflareSend: options.cloudflareSend, from });

package/dist/packem_shared/{createInboundEmailHandler-Cd8dyzB7.mjs → createInboundEmailHandler-D0uCOrU-.mjs}

@@ -1,3 +1,5 @@
+import { a as applyJurisdiction } from './shard-CJ-TvmfT.mjs';
+
 const GENERIC_REJECT_REASON = "message could not be processed";
 const rejectOnError = (error, context) => {
   console.error("@lunora/mail/inbound: dropping message —", error);
@@ -58,7 +60,8 @@ const dispatchToLunoraFunction = (options) => {
       functionPath: options.functionPath,
       shardKey
     };
-    const stub = options.shard.get(options.shard.idFromName(shardKey));
+    const namespace = applyJurisdiction(options.shard, options.jurisdiction);
+    const stub = namespace.get(namespace.idFromName(shardKey));
     const response = await stub.fetch("https://shard.internal/rpc", {
       body: JSON.stringify(envelope),
       headers: { authorization: `Bearer ${adminToken}`, "content-type": "application/json" },

package/dist/packem_shared/{createMailer-CMVVTp0F.mjs → createMailer-oEKPAd4J.mjs}

@@ -1,7 +1,7 @@
 import { a as assertSafeHeaderValue, b as assertSafeAddresses } from './address-fkXxLKza.mjs';
 import { isCaptureTransport } from './createCaptureTransport-Crz_8822.mjs';
 import { createCloudflareTransport } from './createCloudflareTransport-yHOVEsZv.mjs';
-import { toQueuedPayload } from './toQueuedPayload-BEKOdaxU.mjs';
+import { toQueuedPayload } from './consumeQueuedSend-BEKOdaxU.mjs';
 import renderEmail from './renderEmail-hyS1bpVP.mjs';
 import createResendTransport from './createResendTransport-oNIorpzv.mjs';
 

package/dist/packem_shared/shard-CJ-TvmfT.mjs

@@ -0,0 +1,13 @@
+const applyJurisdiction = (namespace, jurisdiction) => {
+  if (jurisdiction === void 0) {
+    return namespace;
+  }
+  if (typeof namespace.jurisdiction !== "function") {
+    throw new TypeError(
+      `@lunora/mail: Durable Object namespace does not support jurisdiction("${jurisdiction}") — update @cloudflare/workers-types or remove the jurisdiction option`
+    );
+  }
+  return namespace.jurisdiction(jurisdiction);
+};
+
+export { applyJurisdiction as a };

package/dist/packem_shared/shard.d-CL2Lmliv.d.mts

@@ -0,0 +1,39 @@
+/**
+* Structural projections of the `SHARD` Durable Object namespace + one shard
+* stub, shared by the inbound dispatcher. Mirrors the shapes the outbound dev
+* capture sink uses (`packages/mail/src/from-env.ts`) so inbound dispatch routes
+* a parsed message into a Lunora function over the exact same admin-RPC-over-shard
+* path — without importing any Cloudflare types into `@lunora/mail`.
+*/
+/** Structural projection of one shard stub — only `fetch` returning something with `.json()`. */
+interface ShardStubLike {
+  fetch: (input: string, init?: {
+    body?: string;
+    headers?: Record<string, string>;
+    method?: string;
+  }) => Promise<{
+    json: () => Promise<unknown>;
+  }>;
+}
+/**
+* Cloudflare Durable Object data-residency jurisdiction. Widening union —
+* Cloudflare adds values over time.
+* @see https://developers.cloudflare.com/durable-objects/reference/data-location/
+*/
+type DurableObjectJurisdiction = "eu" | "fedramp" | "us";
+/** Structural projection of the `SHARD` Durable Object namespace. */
+interface ShardNamespaceLike {
+  get: (id: unknown) => ShardStubLike;
+  idFromName: (name: string) => unknown;
+  /**
+  * Derive a jurisdiction-restricted subnamespace. Optional because older
+  * workers-types releases (and test doubles) may not expose it.
+  */
+  jurisdiction?: (jurisdiction: DurableObjectJurisdiction) => ShardNamespaceLike;
+}
+/**
+* Return a jurisdiction-restricted view of `namespace`, or `namespace`
+* unchanged when no jurisdiction is configured. Fail-closed when the binding
+* lacks `.jurisdiction()` so a residency constraint is never silently dropped.
+*/
+export { DurableObjectJurisdiction as D, ShardNamespaceLike as S, ShardStubLike as a };

package/dist/packem_shared/shard.d-CL2Lmliv.d.ts

@@ -0,0 +1,39 @@
+/**
+* Structural projections of the `SHARD` Durable Object namespace + one shard
+* stub, shared by the inbound dispatcher. Mirrors the shapes the outbound dev
+* capture sink uses (`packages/mail/src/from-env.ts`) so inbound dispatch routes
+* a parsed message into a Lunora function over the exact same admin-RPC-over-shard
+* path — without importing any Cloudflare types into `@lunora/mail`.
+*/
+/** Structural projection of one shard stub — only `fetch` returning something with `.json()`. */
+interface ShardStubLike {
+  fetch: (input: string, init?: {
+    body?: string;
+    headers?: Record<string, string>;
+    method?: string;
+  }) => Promise<{
+    json: () => Promise<unknown>;
+  }>;
+}
+/**
+* Cloudflare Durable Object data-residency jurisdiction. Widening union —
+* Cloudflare adds values over time.
+* @see https://developers.cloudflare.com/durable-objects/reference/data-location/
+*/
+type DurableObjectJurisdiction = "eu" | "fedramp" | "us";
+/** Structural projection of the `SHARD` Durable Object namespace. */
+interface ShardNamespaceLike {
+  get: (id: unknown) => ShardStubLike;
+  idFromName: (name: string) => unknown;
+  /**
+  * Derive a jurisdiction-restricted subnamespace. Optional because older
+  * workers-types releases (and test doubles) may not expose it.
+  */
+  jurisdiction?: (jurisdiction: DurableObjectJurisdiction) => ShardNamespaceLike;
+}
+/**
+* Return a jurisdiction-restricted view of `namespace`, or `namespace`
+* unchanged when no jurisdiction is configured. Fail-closed when the binding
+* lacks `.jurisdiction()` so a residency constraint is never silently dropped.
+*/
+export { DurableObjectJurisdiction as D, ShardNamespaceLike as S, ShardStubLike as a };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/mail",
-  "version": "1.0.0-alpha.1",
+  "version": "1.0.0-alpha.2",
   "description": "Email for Lunora: Resend adapter, TSX templates, and queue-backed sends",
   "keywords": [
     "cloudflare",