@lunora/mail 1.0.0-alpha.5 → 1.0.0-alpha.50

package/dist/index.d.ts

@@ -1,20 +1,20 @@
-import { M as MailTransport, L as LunoraMailOptions, a as Mailer, b as MailboxSink, S as SendOptions } from "./packem_shared/capture-transport.d-ChnhdPO2.js";
-export { type C as CapturedMail, type Q as QueueLike, type c as SendPayload, d as createCaptureTransport } from "./packem_shared/capture-transport.d-ChnhdPO2.js";
-import { D as DurableObjectJurisdiction } from "./packem_shared/shard.d-CL2Lmliv.js";
+import { M as MailTransport, L as LunoraMailOptions, a as Mailer, b as MailboxSink, S as SendOptions } from "./packem_shared/capture-transport.d-_rIl9W6N.js";
+export { type C as CapturedMail, type Q as QueueLike, type c as SendPayload, d as createCaptureTransport } from "./packem_shared/capture-transport.d-_rIl9W6N.js";
+import { D as DurableObjectJurisdiction } from "./packem_shared/shard.d-DVADjmEJ.js";
 import { ReactElement } from 'react';
 /**
-* Sends a raw RFC 822 message through a Worker's Email send binding. The Workers
-* runtime owns the binding, so the caller supplies this thin callback — keeping
-* `@lunora/mail` free of a `cloudflare:email` import and unit-testable. Wire it
-* in your project as:
-*
-* ```ts
-* send: async (from, to, raw) => {
-*     const { EmailMessage } = await import("cloudflare:email");
-*     await env.SEND_EMAIL.send(new EmailMessage(from, to, raw));
-* }
-* ```
-*/
+ * Sends a raw RFC 822 message through a Worker's Email send binding. The Workers
+ * runtime owns the binding, so the caller supplies this thin callback — keeping
+ * `@lunora/mail` free of a `cloudflare:email` import and unit-testable. Wire it
+ * in your project as:
+ *
+ * ```ts
+ * send: async (from, to, raw) => {
+ *     const { EmailMessage } = await import("cloudflare:email");
+ *     await env.SEND_EMAIL.send(new EmailMessage(from, to, raw));
+ * }
+ * ```
+ */
 type CloudflareSend = (from: string, to: string, raw: string) => Promise<void>;
 interface CloudflareTransportOptions {
   /** Default sender used when a `SendOptions.from` isn't supplied. */
@@ -23,34 +23,34 @@ interface CloudflareTransportOptions {
   send: CloudflareSend;
 }
 /**
-* Build the default Cloudflare Email Workers transport via `@visulima/email`.
-* Cloudflare's `send_email` binding is **single-recipient** and only delivers to
-* **verified Email Routing destination addresses**, and the underlying provider
-* rejects any `cc`/`bcc` or a non-single `to` outright. So this enforces a single
-* `to` recipient (throwing a clear error instead of silently dropping the rest)
-* and rejects `cc`/`bcc` rather than forwarding them into a generic "send failed".
-* Multi-recipient transactional mail must fan out one send per recipient at the
-* call site. In dev the capture transport intercepts before this runs, so the
-* verified-address constraint never bites the dev loop.
-*/
+ * Build the default Cloudflare Email Workers transport via `@visulima/email`.
+ * Cloudflare's `send_email` binding is **single-recipient** and only delivers to
+ * **verified Email Routing destination addresses**, and the underlying provider
+ * rejects any `cc`/`bcc` or a non-single `to` outright. So this enforces a single
+ * `to` recipient (throwing a clear error instead of silently dropping the rest)
+ * and rejects `cc`/`bcc` rather than forwarding them into a generic "send failed".
+ * Multi-recipient transactional mail must fan out one send per recipient at the
+ * call site. In dev the capture transport intercepts before this runs, so the
+ * verified-address constraint never bites the dev loop.
+ */
 declare const createCloudflareTransport: (options: CloudflareTransportOptions) => MailTransport;
 /**
-* Create a mailer bound to a transport.
-*
-* SECURITY — recipient policy and HTML content are the caller's responsibility.
-* The mailer fully blocks header/CRLF/comma injection in addresses
-* (`assertSafeAddresses` / `assertSafeHeaderValue`), but it does NOT decide WHO
-* you may send to or WHAT HTML you render.
-*
-* Open relay: derive `to`/`cc`/`bcc` from server-trusted state, never from raw
-* request input, and prefer a fixed/allowlisted `from` — sending to an arbitrary
-* user-supplied address turns your deployment into a spam relay.
-*
-* Template XSS / content injection: treat template HTML like any other HTML sink
-* — never interpolate untrusted data into raw markup (or a
-* `dangerouslySetInnerHTML`-style template) without escaping. The mailer sends
-* whatever HTML you hand it verbatim.
-*/
+ * Create a mailer bound to a transport.
+ *
+ * SECURITY — recipient policy and HTML content are the caller's responsibility.
+ * The mailer fully blocks header/CRLF/comma injection in addresses
+ * (`assertSafeAddresses` / `assertSafeHeaderValue`), but it does NOT decide WHO
+ * you may send to or WHAT HTML you render.
+ *
+ * Open relay: derive `to`/`cc`/`bcc` from server-trusted state, never from raw
+ * request input, and prefer a fixed/allowlisted `from` — sending to an arbitrary
+ * user-supplied address turns your deployment into a spam relay.
+ *
+ * Template XSS / content injection: treat template HTML like any other HTML sink
+ * — never interpolate untrusted data into raw markup (or a
+ * `dangerouslySetInnerHTML`-style template) without escaping. The mailer sends
+ * whatever HTML you hand it verbatim.
+ */
 declare const createMailer: (options: LunoraMailOptions) => Mailer;
 /** A Worker `env` projected as a plain record (vars, secrets, and bindings are `unknown`-valued). */
 type MailEnv = Record<string, unknown>;
@@ -59,39 +59,39 @@ interface FromEnvOptions {
   /** RFC 822 send callback bound to the Worker's `send_email` binding (Cloudflare default transport). */
   cloudflareSend?: CloudflareSend;
   /**
-  * Pin the captured-mail inbox shard to a Cloudflare data-residency
-  * jurisdiction. Pass the same value as the worker's `jurisdiction` so the
-  * dev inbox co-resides with app data. Omit for the un-pinned global namespace.
-  */
+   * Pin the captured-mail inbox shard to a Cloudflare data-residency
+   * jurisdiction. Pass the same value as the worker's `jurisdiction` so the
+   * dev inbox co-resides with app data. Omit for the un-pinned global namespace.
+   */
   jurisdiction?: DurableObjectJurisdiction;
   /** Shard the captured-mail inbox lives on; override if your worker sets a custom `defaultShardKey`. */
   rootShard?: string;
 }
 /**
-* Whether outbound mail should be captured (into the studio inbox) rather than
-* delivered. Explicit `LUNORA_MAIL_CAPTURE` (`"1"`/`"true"` vs `"0"`/`"false"`)
-* always wins; unset, capture is on only in a development environment. It does
-* NOT fall back to "no SEND_EMAIL binding ⇒ capture" — a production deploy that
-* forgot the binding must fail loudly on send, not silently swallow mail.
-*/
+ * Whether outbound mail should be captured (into the studio inbox) rather than
+ * delivered. Explicit `LUNORA_MAIL_CAPTURE` (`"1"`/`"true"` vs `"0"`/`"false"`)
+ * always wins; unset, capture is on only in a development environment. It does
+ * NOT fall back to "no SEND_EMAIL binding ⇒ capture" — a production deploy that
+ * forgot the binding must fail loudly on send, not silently swallow mail.
+ */
 declare const shouldCaptureMail: (env: MailEnv) => boolean;
 /**
-* Build the {@link MailboxSink} that records a captured message into the studio's
-* root-shard inbox via the reserved `recordMail` admin RPC — the same
-* worker→root-shard path the runtime uses for auth events. Best-effort: without
-* the `SHARD` binding or `LUNORA_ADMIN_TOKEN` it returns a sentinel id so a send
-* never fails for lack of somewhere to record.
-*/
+ * Build the {@link MailboxSink} that records a captured message into the studio's
+ * root-shard inbox via the reserved `recordMail` admin RPC — the same
+ * worker→root-shard path the runtime uses for auth events. Best-effort: without
+ * the `SHARD` binding or `LUNORA_ADMIN_TOKEN` it returns a sentinel id so a send
+ * never fails for lack of somewhere to record.
+ */
 declare const createCaptureSink: (env: MailEnv, rootShard?: string, jurisdiction?: DurableObjectJurisdiction) => MailboxSink;
 /**
-* Build a {@link Mailer} from a Worker `env`. In a dev environment every send is
-* captured into the studio's Mail inbox; otherwise it delivers via the supplied
-* `cloudflareSend` (the `SEND_EMAIL` binding) or, failing that, `RESEND_API_KEY`.
-* Throws when neither a capture context nor a real transport is available, so a
-* misconfigured production deploy fails loudly instead of silently dropping mail.
-*
-* `MAIL_FROM` is required (the default sender).
-*/
+ * Build a {@link Mailer} from a Worker `env`. In a dev environment every send is
+ * captured into the studio's Mail inbox; otherwise it delivers via the supplied
+ * `cloudflareSend` (the `SEND_EMAIL` binding) or, failing that, `RESEND_API_KEY`.
+ * Throws when neither a capture context nor a real transport is available, so a
+ * misconfigured production deploy fails loudly instead of silently dropping mail.
+ *
+ * `MAIL_FROM` is required (the default sender).
+ */
 declare const createMailerFromEnv: (env: MailEnv, options?: FromEnvOptions) => Mailer;
 /** Serializable representation of a `SendOptions` payload — drops the `react` field. */
 interface QueuedSend {
@@ -106,45 +106,45 @@ interface QueuedSend {
   to: string | string[];
 }
 /**
-* Narrow a `SendOptions` to its serializable `QueuedSend` shape by dropping the
-* non-cloneable `react` field. React elements are not structured-cloneable, so
-* the queue body must carry only the pre-rendered html/text and scalar fields.
-*/
+ * Narrow a `SendOptions` to its serializable `QueuedSend` shape by dropping the
+ * non-cloneable `react` field. React elements are not structured-cloneable, so
+ * the queue body must carry only the pre-rendered html/text and scalar fields.
+ */
 declare const toQueuedPayload: (options: SendOptions) => QueuedSend;
 /**
-* Helper used by Queue consumers: rehydrate a `QueuedSend` payload and forward
-* to a configured `Mailer.send()`. Use this inside your Worker's `queue()`
-* handler.
-*
-* ```ts
-* export default {
-*   queue: async (batch, env) => {
-*     const mailer = createMailer({ apiKey: env.RESEND_API_KEY, from: "..." });
-*     for (const message of batch.messages) {
-*       await consumeQueuedSend(mailer, message.body);
-*     }
-*   },
-* };
-* ```
-*/
+ * Helper used by Queue consumers: rehydrate a `QueuedSend` payload and forward
+ * to a configured `Mailer.send()`. Use this inside your Worker's `queue()`
+ * handler.
+ *
+ * ```ts
+ * export default {
+ *   queue: async (batch, env) => {
+ *     const mailer = createMailer({ apiKey: env.RESEND_API_KEY, from: "..." });
+ *     for (const message of batch.messages) {
+ *       await consumeQueuedSend(mailer, message.body);
+ *     }
+ *   },
+ * };
+ * ```
+ */
 declare const consumeQueuedSend: (mailer: Mailer, payload: unknown) => Promise<{
   id: string;
 }>;
 /**
-* Render a React element to an HTML/text pair suitable for inlining into a
-* provider payload. Wraps `@react-email/render` so we can swap to
-* `@visulima/email`'s react-email template engine without touching callers.
-*/
+ * Render a React element to an HTML/text pair suitable for inlining into a
+ * provider payload. Wraps `@react-email/render` so we can swap to
+ * `@visulima/email`'s react-email template engine without touching callers.
+ */
 declare const renderEmail: (element: ReactElement) => Promise<{
   html: string;
   text: string;
 }>;
 /**
-* Build a Resend-backed transport via `@visulima/email`. Wraps the provider's
-* `sendEmail()` into the minimal `{ send(payload) -> { id } }` shape the rest of
-* `@lunora/mail` consumes. Kept reachable as a named export so a project that
-* prefers Resend over the Cloudflare default can pass
-* `transport: createResendTransport(apiKey, from)` to `createMailer`.
-*/
+ * Build a Resend-backed transport via `@visulima/email`. Wraps the provider's
+ * `sendEmail()` into the minimal `{ send(payload) -> { id } }` shape the rest of
+ * `@lunora/mail` consumes. Kept reachable as a named export so a project that
+ * prefers Resend over the Cloudflare default can pass
+ * `transport: createResendTransport(apiKey, from)` to `createMailer`.
+ */
 declare const createResendTransport: (apiKey: string, defaultFrom: string) => MailTransport;
 export { type CloudflareSend, type CloudflareTransportOptions, type FromEnvOptions, type LunoraMailOptions, type MailEnv, type MailTransport, type MailboxSink, type Mailer, type QueuedSend, type SendOptions, consumeQueuedSend, createCaptureSink, createCloudflareTransport, createMailer, createMailerFromEnv, createResendTransport, renderEmail, shouldCaptureMail, toQueuedPayload };

package/dist/index.mjs

@@ -1,7 +1 @@
-export { createCaptureTransport } from './packem_shared/createCaptureTransport-Crz_8822.mjs';
-export { createCloudflareTransport } from './packem_shared/createCloudflareTransport-yHOVEsZv.mjs';
-export { default as createMailer } from './packem_shared/createMailer-oEKPAd4J.mjs';
-export { createCaptureSink, createMailerFromEnv, shouldCaptureMail } from './packem_shared/createCaptureSink-DeihS4LH.mjs';
-export { consumeQueuedSend, toQueuedPayload } from './packem_shared/consumeQueuedSend-BEKOdaxU.mjs';
-export { default as renderEmail } from './packem_shared/renderEmail-hyS1bpVP.mjs';
-export { default as createResendTransport } from './packem_shared/createResendTransport-oNIorpzv.mjs';
+import{createCaptureTransport as a}from"./packem_shared/createCaptureTransport-CKc6NpZR.mjs";import{createCloudflareTransport as t}from"./packem_shared/createCloudflareTransport-E-UdW8Dc.mjs";import{default as u}from"./packem_shared/createMailer-LHgKs5yh.mjs";import{createCaptureSink as f,createMailerFromEnv as l,shouldCaptureMail as m}from"./packem_shared/createCaptureSink-CE24od5h.mjs";import{consumeQueuedSend as s,toQueuedPayload as c}from"./packem_shared/consumeQueuedSend-8TXPj5o-.mjs";import{default as i}from"./packem_shared/renderEmail-BOUnr6i3.mjs";import{default as M}from"./packem_shared/createResendTransport-CG9s8iI9.mjs";export{s as consumeQueuedSend,f as createCaptureSink,a as createCaptureTransport,t as createCloudflareTransport,u as createMailer,l as createMailerFromEnv,M as createResendTransport,i as renderEmail,m as shouldCaptureMail,c as toQueuedPayload};

package/dist/packem_shared/address-BQ5RUGdT.mjs

@@ -0,0 +1,3 @@
+import{LunoraError as t}from"@lunora/errors";const n=320,a=256,d=/^([^<]*)<([^>]*)>\s*$/,i=(r,s)=>{if(s.includes("\r")||s.includes(`
+`)||s.includes(","))throw new t("INTERNAL",`@lunora/mail: address ${r} must not contain CR, LF, or comma`)},f=(r,s)=>{if(s.includes("\r")||s.includes(`
+`))throw new t("INTERNAL",`@lunora/mail: ${r} must not contain CR or LF`)},m=(r,s)=>{if(r.length>a)throw new t("INTERNAL",`@lunora/mail: address name must be <= ${String(a)} characters`);if(s.length>n)throw new t("INTERNAL",`@lunora/mail: address email must be <= ${String(n)} characters`);return r&&i("name",r),i("email",s),r?{email:s,name:r}:{email:s}},A=r=>{const s=r.trim();if(s.length>n)throw new t("INTERNAL",`@lunora/mail: address email must be <= ${String(n)} characters`);return i("email",s),{email:s}},c=r=>{const s=d.exec(r),e=(s?.[2]??"").trim();return s&&e?m((s[1]??"").trim(),e):A(r)},o=r=>r===void 0?void 0:(Array.isArray(r)?r:[r]).map(e=>c(e)),u=r=>{o(r.to),o(r.cc),o(r.bcc),r.from!==void 0&&c(r.from),r.replyTo!==void 0&&c(r.replyTo)};export{f as a,u as b,c,o as t};

package/dist/packem_shared/capture-transport.d-_rIl9W6N.d.mts

@@ -0,0 +1,117 @@
+import { ReactElement } from 'react';
+/**
+ * Minimal projection of a Cloudflare Queue binding — accepts a JSON payload
+ * via `.send()`. Declared structurally so callers can pass either the real
+ * `Queue` binding or a unit-test double.
+ */
+interface QueueLike {
+  send: (payload: unknown, options?: Record<string, unknown>) => Promise<void>;
+}
+/**
+ * Minimal projection of a transport adapter. Returning `{ id }` follows
+ * Resend's response shape; the real `@visulima/email` `MailManager` flattens
+ * provider responses to the same field for us.
+ */
+interface MailTransport {
+  send: (payload: SendPayload) => Promise<{
+    id: string;
+  }>;
+}
+interface SendPayload {
+  bcc?: string[];
+  cc?: string[];
+  from?: string;
+  headers?: Record<string, string>;
+  html?: string;
+  replyTo?: string;
+  subject: string;
+  text?: string;
+  to: string | string[];
+}
+interface SendOptions {
+  bcc?: string[];
+  cc?: string[];
+  from?: string;
+  headers?: Record<string, string>;
+  html?: string;
+  react?: ReactElement;
+  replyTo?: string;
+  subject: string;
+  text?: string;
+  to: string | string[];
+}
+interface LunoraMailOptions {
+  /** API key for the Resend transport (bring-your-own-provider). Ignored when `transport` or `cloudflareSend` is set. */
+  apiKey?: string;
+  /**
+   * RFC 822 send callback bound to the Worker's `send_email` binding. When set
+   * (and no explicit `transport` is supplied) the default transport is
+   * Cloudflare Email Workers — Lunora's default provider. Ignored when
+   * `transport` is set.
+   */
+  cloudflareSend?: (from: string, to: string, raw: string) => Promise<void>;
+  /** Default sender (`Name <addr@host>` or bare email). */
+  from: string;
+  /** Default queue binding for `mailer.queue()`. */
+  queue?: QueueLike;
+  /** Override the underlying transport. Useful for tests, the dev capture transport, + multi-provider setups. */
+  transport?: MailTransport;
+}
+interface Mailer {
+  queue: (options: SendOptions) => Promise<{
+    queued: true;
+  }>;
+  send: (options: SendOptions) => Promise<{
+    id: string;
+  }>;
+}
+/**
+ * One captured outbound message as persisted by the dev mail catcher. Extends
+ * the rendered, validated {@link SendPayload} with an `id` and a capture
+ * timestamp assigned by the sink (the root-shard mailbox), so the studio inbox
+ * can list and open it.
+ *
+ * **Canonical captured-mail wire type — single source of truth.** Every other
+ * representation of a captured message mirrors this shape; consumers import it
+ * directly wherever the package dependency direction allows.
+ *
+ * `@lunora/studio`'s `CapturedMail` re-exports this (type-only dep on
+ * `@lunora/mail`). `@lunora/do`'s `CapturedMailRow` / `RecordMailInput` are
+ * documented mirrors — the DO runtime stays free of any `@lunora/mail` *runtime*
+ * dep — guarded by a compile-time structural assertion against this type, so a
+ * field added here that isn't mirrored fails the `@lunora/do` build.
+ *
+ * Add or change a captured-mail field here first; the guards will point at the
+ * mirrors that need the matching change.
+ */
+interface CapturedMail extends SendPayload {
+  /** Epoch-ms the message was captured. */
+  capturedAt: number;
+  /** Stable id assigned to the captured message. */
+  id: string;
+}
+/**
+ * Minimal projection of the persistence target the capture transport writes to
+ * (the studio's root-shard mailbox). Declared structurally — like
+ * {@link import("./types").QueueLike} — so `@lunora/mail` stays free of any
+ * Durable Object / runtime dependency. The registry scaffold supplies the
+ * concrete sink that POSTs to the root shard's `__lunora_admin__:recordMail` RPC.
+ */
+interface MailboxSink {
+  record: (mail: SendPayload) => Promise<{
+    id: string;
+  }>;
+}
+/**
+ * Build a capture {@link MailTransport}: instead of delivering, it persists the
+ * fully rendered + validated payload to `sink` and returns the assigned id.
+ *
+ * Wired in dev by the mail registry scaffold so `lunora dev` shows every send in
+ * the studio's Mail inbox — including `@lunora/auth`'s verification and
+ * forgot-password mail — with no provider credentials and nothing leaving the
+ * machine. Address/header validation already ran in `createMailer.buildPayload`
+ * before the payload reaches here, so the captured message is the same one a
+ * real transport would have sent.
+ */
+declare const createCaptureTransport: (sink: MailboxSink) => MailTransport;
+export { CapturedMail as C, LunoraMailOptions as L, MailTransport as M, QueueLike as Q, SendOptions as S, Mailer as a, MailboxSink as b, SendPayload as c, createCaptureTransport as d };

package/dist/packem_shared/capture-transport.d-_rIl9W6N.d.ts

@@ -0,0 +1,117 @@
+import { ReactElement } from 'react';
+/**
+ * Minimal projection of a Cloudflare Queue binding — accepts a JSON payload
+ * via `.send()`. Declared structurally so callers can pass either the real
+ * `Queue` binding or a unit-test double.
+ */
+interface QueueLike {
+  send: (payload: unknown, options?: Record<string, unknown>) => Promise<void>;
+}
+/**
+ * Minimal projection of a transport adapter. Returning `{ id }` follows
+ * Resend's response shape; the real `@visulima/email` `MailManager` flattens
+ * provider responses to the same field for us.
+ */
+interface MailTransport {
+  send: (payload: SendPayload) => Promise<{
+    id: string;
+  }>;
+}
+interface SendPayload {
+  bcc?: string[];
+  cc?: string[];
+  from?: string;
+  headers?: Record<string, string>;
+  html?: string;
+  replyTo?: string;
+  subject: string;
+  text?: string;
+  to: string | string[];
+}
+interface SendOptions {
+  bcc?: string[];
+  cc?: string[];
+  from?: string;
+  headers?: Record<string, string>;
+  html?: string;
+  react?: ReactElement;
+  replyTo?: string;
+  subject: string;
+  text?: string;
+  to: string | string[];
+}
+interface LunoraMailOptions {
+  /** API key for the Resend transport (bring-your-own-provider). Ignored when `transport` or `cloudflareSend` is set. */
+  apiKey?: string;
+  /**
+   * RFC 822 send callback bound to the Worker's `send_email` binding. When set
+   * (and no explicit `transport` is supplied) the default transport is
+   * Cloudflare Email Workers — Lunora's default provider. Ignored when
+   * `transport` is set.
+   */
+  cloudflareSend?: (from: string, to: string, raw: string) => Promise<void>;
+  /** Default sender (`Name <addr@host>` or bare email). */
+  from: string;
+  /** Default queue binding for `mailer.queue()`. */
+  queue?: QueueLike;
+  /** Override the underlying transport. Useful for tests, the dev capture transport, + multi-provider setups. */
+  transport?: MailTransport;
+}
+interface Mailer {
+  queue: (options: SendOptions) => Promise<{
+    queued: true;
+  }>;
+  send: (options: SendOptions) => Promise<{
+    id: string;
+  }>;
+}
+/**
+ * One captured outbound message as persisted by the dev mail catcher. Extends
+ * the rendered, validated {@link SendPayload} with an `id` and a capture
+ * timestamp assigned by the sink (the root-shard mailbox), so the studio inbox
+ * can list and open it.
+ *
+ * **Canonical captured-mail wire type — single source of truth.** Every other
+ * representation of a captured message mirrors this shape; consumers import it
+ * directly wherever the package dependency direction allows.
+ *
+ * `@lunora/studio`'s `CapturedMail` re-exports this (type-only dep on
+ * `@lunora/mail`). `@lunora/do`'s `CapturedMailRow` / `RecordMailInput` are
+ * documented mirrors — the DO runtime stays free of any `@lunora/mail` *runtime*
+ * dep — guarded by a compile-time structural assertion against this type, so a
+ * field added here that isn't mirrored fails the `@lunora/do` build.
+ *
+ * Add or change a captured-mail field here first; the guards will point at the
+ * mirrors that need the matching change.
+ */
+interface CapturedMail extends SendPayload {
+  /** Epoch-ms the message was captured. */
+  capturedAt: number;
+  /** Stable id assigned to the captured message. */
+  id: string;
+}
+/**
+ * Minimal projection of the persistence target the capture transport writes to
+ * (the studio's root-shard mailbox). Declared structurally — like
+ * {@link import("./types").QueueLike} — so `@lunora/mail` stays free of any
+ * Durable Object / runtime dependency. The registry scaffold supplies the
+ * concrete sink that POSTs to the root shard's `__lunora_admin__:recordMail` RPC.
+ */
+interface MailboxSink {
+  record: (mail: SendPayload) => Promise<{
+    id: string;
+  }>;
+}
+/**
+ * Build a capture {@link MailTransport}: instead of delivering, it persists the
+ * fully rendered + validated payload to `sink` and returns the assigned id.
+ *
+ * Wired in dev by the mail registry scaffold so `lunora dev` shows every send in
+ * the studio's Mail inbox — including `@lunora/auth`'s verification and
+ * forgot-password mail — with no provider credentials and nothing leaving the
+ * machine. Address/header validation already ran in `createMailer.buildPayload`
+ * before the payload reaches here, so the captured message is the same one a
+ * real transport would have sent.
+ */
+declare const createCaptureTransport: (sink: MailboxSink) => MailTransport;
+export { CapturedMail as C, LunoraMailOptions as L, MailTransport as M, QueueLike as Q, SendOptions as S, Mailer as a, MailboxSink as b, SendPayload as c, createCaptureTransport as d };

package/dist/packem_shared/consumeQueuedSend-8TXPj5o-.mjs

@@ -0,0 +1 @@
+import{LunoraError as c}from"@lunora/errors";const d=n=>{const t={...n};return delete t.react,t},p=async(n,t)=>{if(!t||typeof t!="object"||Array.isArray(t))throw new c("INTERNAL","@lunora/mail: queue message body must be an object");const e=t;if(typeof e.subject!="string")throw new TypeError("@lunora/mail: queue message must have a string `subject`");const m=typeof e.to=="string",y=Array.isArray(e.to)&&e.to.every(s=>typeof s=="string");if(!m&&!y)throw new c("INTERNAL","@lunora/mail: queue message `to` must be a string or string[]");const o=(s,r)=>{if(r!==void 0){if(typeof r!="string")throw new TypeError(`@lunora/mail: queue message \`${s}\` must be a string`);return r}},a=(s,r)=>{if(r!==void 0){if(typeof r=="string")return[r];if(Array.isArray(r)&&r.every(i=>typeof i=="string"))return r;throw new TypeError(`@lunora/mail: queue message \`${s}\` must be a string or string[]`)}};let u;if(e.headers!==void 0){if(!e.headers||typeof e.headers!="object"||Array.isArray(e.headers))throw new TypeError("@lunora/mail: queue message `headers` must be an object of string values");const s=Object.entries(e.headers);for(const[r,i]of s)if(typeof i!="string")throw new TypeError(`@lunora/mail: queue message header "${r}" must be a string`);u=e.headers}const f={bcc:a("bcc",e.bcc),cc:a("cc",e.cc),from:o("from",e.from),headers:u,html:o("html",e.html),replyTo:o("replyTo",e.replyTo),subject:e.subject,text:o("text",e.text),to:e.to};return n.send(f)};export{p as consumeQueuedSend,d as toQueuedPayload};

package/dist/packem_shared/createCaptureSink-CE24od5h.mjs

@@ -0,0 +1 @@
+import{createCaptureTransport as d}from"./createCaptureTransport-CKc6NpZR.mjs";import"./createCloudflareTransport-E-UdW8Dc.mjs";import n from"./createMailer-LHgKs5yh.mjs";import{LunoraError as c}from"@lunora/errors";import{D as s,p as l}from"./shard-C0aRRoVy.mjs";import"./consumeQueuedSend-8TXPj5o-.mjs";import"./renderEmail-BOUnr6i3.mjs";import"./createResendTransport-CG9s8iI9.mjs";const E="__lunora_admin__:recordMail",p=/^(?:dev(?:elopment)?|local(?:host)?|test)$/iu,f=["CF_ENV","ENVIRONMENT","NODE_ENV","WORKER_ENV"],_=(t,e)=>{const r=t[e];if(typeof r!="string"||r==="")throw new c("INTERNAL",`@lunora/mail: missing env var \`${e}\` — set it in .dev.vars (and \`wrangler secret put ${e}\` for secrets).`);return r},N=t=>{const e=t.LUNORA_MAIL_CAPTURE;if(typeof e=="string"){const r=e.toLowerCase();if(r==="1"||r==="true")return!0;if(r==="0"||r==="false")return!1;console.warn(`@lunora/mail: unrecognized LUNORA_MAIL_CAPTURE value "${e}" — expected "1"/"true" or "0"/"false"; falling back to environment detection.`)}return f.some(r=>{const o=t[r];return typeof o=="string"&&p.test(o)})},m=(t,e=s,r)=>({record:async o=>{const i=t.SHARD,a=typeof t.LUNORA_ADMIN_TOKEN=="string"?t.LUNORA_ADMIN_TOKEN:void 0;if(i===void 0||a===void 0)return{id:"uncaptured"};try{return{id:(await l(i,{adminToken:a,envelope:{args:o,functionPath:E},jurisdiction:r,label:"@lunora/mail: recording captured mail",shardKey:e})).result?.id??"captured"}}catch(u){return console.error("@lunora/mail: failed to record captured mail into the studio inbox —",u),{id:"uncaptured"}}}}),L=(t,e={})=>{const r=_(t,"MAIL_FROM");if(N(t))return n({from:r,transport:d(m(t,e.rootShard,e.jurisdiction))});if(e.cloudflareSend)return n({cloudflareSend:e.cloudflareSend,from:r});const o=typeof t.RESEND_API_KEY=="string"?t.RESEND_API_KEY:void 0;if(o!==void 0&&o!=="")return n({apiKey:o,from:r});throw new c("INTERNAL","@lunora/mail: no transport configured — provide `cloudflareSend` (a SEND_EMAIL binding) or RESEND_API_KEY, or run in a dev environment to capture.")};export{m as createCaptureSink,L as createMailerFromEnv,N as shouldCaptureMail};

package/dist/packem_shared/createCaptureTransport-CKc6NpZR.mjs

@@ -0,0 +1 @@
+const t=Symbol.for("@lunora/mail.captureTransport"),a=r=>r[t]===!0,s=r=>({[t]:!0,send:async o=>r.record(o)});export{t as CAPTURE_TRANSPORT_BRAND,s as createCaptureTransport,a as isCaptureTransport};

package/dist/packem_shared/createCloudflareTransport-E-UdW8Dc.mjs

@@ -0,0 +1 @@
+import{LunoraError as n}from"@lunora/errors";import{cloudflareEmailProvider as l}from"@visulima/email/providers/cloudflare-email";import{r as d,t as u,i as m}from"./provider-transport-DXmTG_xv.mjs";const E=r=>{const t=l({send:r.send});return{send:async e=>{await t.initialize();const o=e.cc!==void 0&&e.cc.length>0,s=e.bcc!==void 0&&e.bcc.length>0;if(o||s)throw new n("INTERNAL","@lunora/mail: Cloudflare Email Workers does not support cc/bcc — fan out one send per recipient instead");const{first:c,list:i}=d(e.to);if(i.length>1)throw new n("INTERNAL",`@lunora/mail: Cloudflare Email Workers is single-recipient but received ${String(i.length)} \`to\` addresses — fan out one send per recipient instead`);const a=await t.sendEmail(u(e,r.from,c));return m(a)}}};export{E as createCloudflareTransport};

package/dist/packem_shared/createInboundEmailHandler-D2i0mEBB.mjs

@@ -0,0 +1 @@
+import{LunoraError as c}from"@lunora/errors";import{D as d,p as u}from"./shard-C0aRRoVy.mjs";const f="message could not be processed",h=(r,e)=>{console.error("@lunora/mail/inbound: dropping message —",r),e.message.setReject(f)},g=r=>{const e=r.onError??h;return async(n,t,s)=>{const a={ctx:s,env:t,message:n};try{const o=await r.parse(n.raw);if(r.verify&&await r.verify(o,a)===!1)throw new c("INTERNAL","@lunora/mail/inbound: sender verification rejected the message");await r.dispatch(o,a)}catch(o){await e(o,a)}}},i=32768,l=r=>{let e="";for(let n=0;n<r.length;n+=i)e+=String.fromCharCode(...r.subarray(n,n+i));return btoa(e)},E=r=>r.attachments.length===0?r:{...r,attachments:r.attachments.map(e=>{const{content:n}=e;if(typeof n=="string")return e;const t=n instanceof Uint8Array?n:new Uint8Array(n);return{...e,content:l(t),encoding:"base64"}})},y=r=>{const e=r.shardKey??d,n=r.resolveArgs??(t=>E(t));return async(t,s)=>{const a=r.adminToken??(typeof s.env.LUNORA_ADMIN_TOKEN=="string"?s.env.LUNORA_ADMIN_TOKEN:void 0);if(a===void 0||a==="")throw new c("INTERNAL","@lunora/mail/inbound: missing LUNORA_ADMIN_TOKEN — cannot authorize inbound dispatch to the shard RPC.");const o={args:n(t,s),functionPath:r.functionPath,shardKey:e};await u(r.shard,{adminToken:a,envelope:o,jurisdiction:r.jurisdiction,label:`@lunora/mail/inbound: dispatch to \`${r.functionPath}\``,shardKey:e})}};export{g as createInboundEmailHandler,y as dispatchToLunoraFunction};

package/dist/packem_shared/createMailer-LHgKs5yh.mjs

@@ -0,0 +1 @@
+import{LunoraError as f}from"@lunora/errors";import{a as l,b as n}from"./address-BQ5RUGdT.mjs";import{isCaptureTransport as o}from"./createCaptureTransport-CKc6NpZR.mjs";import{createCloudflareTransport as i}from"./createCloudflareTransport-E-UdW8Dc.mjs";import{toQueuedPayload as y}from"./consumeQueuedSend-8TXPj5o-.mjs";import b from"./renderEmail-BOUnr6i3.mjs";import h from"./createResendTransport-CG9s8iI9.mjs";const w=r=>{if(r.cloudflareSend)return i({from:r.from,send:r.cloudflareSend});if(r.apiKey)return h(r.apiKey,r.from);throw new f("INTERNAL","@lunora/mail: a transport is required — pass `transport`, `cloudflareSend` (Cloudflare Email Workers, the default), or `apiKey` (Resend)")},x=r=>{if(!r.from)throw new f("INTERNAL","@lunora/mail: `from` is required");const c=r.transport??w(r),d=async e=>{let{html:a}=e,{text:u}=e;if(e.react){const t=await b(e.react);a=a??t.html,u=u??t.text}if(l("subject",e.subject),e.headers)for(const[t,s]of Object.entries(e.headers))l(`header name "${t}"`,t),l(`header "${t}" value`,s);const m=e.from??r.from;return n({bcc:e.bcc,cc:e.cc,from:m,replyTo:e.replyTo,to:e.to}),{bcc:e.bcc,cc:e.cc,from:m,headers:e.headers,html:a,replyTo:e.replyTo,subject:e.subject,text:u,to:e.to}};return{queue:async e=>{if(!r.queue){if(o(c)){const u=await d(e);return await c.send(u),{queued:!0}}throw new f("INTERNAL","@lunora/mail: `queue` binding is required for mailer.queue()")}const a=await d(e);return await r.queue.send(y(a)),{queued:!0}},send:async e=>{const a=await d(e);return c.send(a)}}};export{x as default};

package/dist/packem_shared/createResendTransport-CG9s8iI9.mjs

@@ -0,0 +1 @@
+import{resendProvider as a}from"@visulima/email/providers/resend";import{r as d,t as c,i as l}from"./provider-transport-DXmTG_xv.mjs";const u=(i,s)=>{const e=a({apiKey:i});return{send:async r=>{await e.initialize();const{first:n,list:t}=d(r.to),o=await e.sendEmail(c(r,s,t.length===1?n:t));return l(o)}}};export{u as default};

package/dist/packem_shared/parseInboundEmail-Cxe54g-h.mjs

@@ -0,0 +1 @@
+import u from"postal-mime";import{a as r}from"./address-BQ5RUGdT.mjs";const s=(o,e)=>{if(e!==void 0)return r(`inbound ${o}`,e),e},m=o=>o.address!==void 0&&o.address!==""?o.name?`${o.name} <${o.address}>`:o.address:o.group?o.group.map(e=>e.address??"").filter(e=>e!=="").join(", "):o.name??"",t=(o,e)=>new RegExp(String.raw`\b${e}=([a-zA-Z]+)`,"i").exec(o)?.[1]?.toLowerCase()??null,p=o=>o===void 0||o===""?{dkim:null,dmarc:null,spf:null}:{dkim:t(o,"dkim"),dmarc:t(o,"dmarc"),spf:t(o,"spf")},b=async o=>{const e=await u.parse(o),i={};for(const n of e.headers)r(`inbound header \`${n.key}\``,n.value),i[n.key]=n.value;const c=e.headers.find(n=>n.key==="authentication-results")?.value,f=(e.to??[]).map(n=>{const a=m(n);return r("inbound to",a),a}),d=e.from?m(e.from):"";return r("inbound from",d),{attachments:e.attachments.map(n=>({content:n.content,disposition:n.disposition,...n.encoding===void 0?{}:{encoding:n.encoding},filename:n.filename,mimeType:n.mimeType})),authentication:p(c),from:d,headers:i,...e.html===void 0?{}:{html:e.html},...s("inReplyTo",e.inReplyTo)===void 0?{}:{inReplyTo:e.inReplyTo},...s("messageId",e.messageId)===void 0?{}:{messageId:e.messageId},...s("references",e.references)===void 0?{}:{references:e.references},...s("subject",e.subject)===void 0?{}:{subject:e.subject},...e.text===void 0?{}:{text:e.text},to:f}};export{b as parseInboundEmail};

package/dist/packem_shared/provider-transport-DXmTG_xv.mjs

@@ -0,0 +1 @@
+import{LunoraError as o}from"@lunora/errors";import{t as n,c as s}from"./address-BQ5RUGdT.mjs";const c=e=>e instanceof Error?e.message:e==null?"send failed":typeof e=="string"?e:typeof e=="number"||typeof e=="boolean"||typeof e=="bigint"?e.toString():JSON.stringify(e)??"send failed",u=e=>{const t=n(e),[i]=t??[];if(!t||i===void 0)throw new o("INTERNAL","@lunora/mail: at least one recipient is required");return{first:i,list:t}},d=(e,t,i)=>({bcc:n(e.bcc),cc:n(e.cc),from:s(e.from??t),headers:e.headers,html:e.html,replyTo:e.replyTo?s(e.replyTo):void 0,subject:e.subject,text:e.text,to:i}),m=e=>{if(!e.success||!e.data)throw console.error(`@lunora/mail: send failed: ${c(e.error)}`),new o("INTERNAL","@lunora/mail: send failed");return{id:e.data.messageId}};export{m as i,u as r,d as t};

package/dist/packem_shared/renderEmail-BOUnr6i3.mjs

@@ -0,0 +1 @@
+import{render as r}from"@react-email/render";const n=async t=>{const[e,a]=await Promise.all([r(t,{pretty:!1}),r(t,{plainText:!0})]);return{html:e,text:a}};export{n as default};

package/dist/packem_shared/shard-C0aRRoVy.mjs

@@ -0,0 +1 @@
+import{LunoraError as a}from"@lunora/errors";const u="__root__",s=(t,r)=>{if(r===void 0)return t;if(typeof t.jurisdiction!="function")throw new TypeError(`@lunora/mail: Durable Object namespace does not support jurisdiction("${r}") — update @cloudflare/workers-types or remove the jurisdiction option`);return t.jurisdiction(r)},l=async(t,r)=>{const i=s(t,r.jurisdiction),e=await i.get(i.idFromName(r.shardKey)).fetch("https://shard.internal/rpc",{body:JSON.stringify(r.envelope),headers:{authorization:`Bearer ${r.adminToken}`,"content-type":"application/json"},method:"POST"});if(e.ok===!1)throw new a("INTERNAL",`${r.label} failed (HTTP ${String(e.status??"?")}).`);const o=await e.json();if(typeof o=="object"&&o!==null&&"error"in o){const{error:n}=o;if(n!=null)throw new a("INTERNAL",`${r.label} returned an error: ${JSON.stringify(n)}`)}return o};export{u as D,l as p};

package/dist/packem_shared/shard.d-DVADjmEJ.d.mts

@@ -0,0 +1,29 @@
+/** Structural projection of one shard stub — only `fetch` returning a Fetch-`Response`-like object. */
+interface ShardStubLike {
+  fetch: (input: string, init?: {
+    body?: string;
+    headers?: Record<string, string>;
+    method?: string;
+  }) => Promise<{
+    json: () => Promise<unknown>;
+    ok?: boolean;
+    status?: number;
+  }>;
+}
+/**
+ * Cloudflare Durable Object data-residency jurisdiction. Widening union —
+ * Cloudflare adds values over time.
+ * @see https://developers.cloudflare.com/durable-objects/reference/data-location/
+ */
+type DurableObjectJurisdiction = "eu" | "fedramp" | "us";
+/** Structural projection of the `SHARD` Durable Object namespace. */
+interface ShardNamespaceLike {
+  get: (id: unknown) => ShardStubLike;
+  idFromName: (name: string) => unknown;
+  /**
+   * Derive a jurisdiction-restricted subnamespace. Optional because older
+   * workers-types releases (and test doubles) may not expose it.
+   */
+  jurisdiction?: (jurisdiction: DurableObjectJurisdiction) => ShardNamespaceLike;
+}
+export { DurableObjectJurisdiction as D, ShardNamespaceLike as S, ShardStubLike as a };

package/dist/packem_shared/shard.d-DVADjmEJ.d.ts

@@ -0,0 +1,29 @@
+/** Structural projection of one shard stub — only `fetch` returning a Fetch-`Response`-like object. */
+interface ShardStubLike {
+  fetch: (input: string, init?: {
+    body?: string;
+    headers?: Record<string, string>;
+    method?: string;
+  }) => Promise<{
+    json: () => Promise<unknown>;
+    ok?: boolean;
+    status?: number;
+  }>;
+}
+/**
+ * Cloudflare Durable Object data-residency jurisdiction. Widening union —
+ * Cloudflare adds values over time.
+ * @see https://developers.cloudflare.com/durable-objects/reference/data-location/
+ */
+type DurableObjectJurisdiction = "eu" | "fedramp" | "us";
+/** Structural projection of the `SHARD` Durable Object namespace. */
+interface ShardNamespaceLike {
+  get: (id: unknown) => ShardStubLike;
+  idFromName: (name: string) => unknown;
+  /**
+   * Derive a jurisdiction-restricted subnamespace. Optional because older
+   * workers-types releases (and test doubles) may not expose it.
+   */
+  jurisdiction?: (jurisdiction: DurableObjectJurisdiction) => ShardNamespaceLike;
+}
+export { DurableObjectJurisdiction as D, ShardNamespaceLike as S, ShardStubLike as a };

package/dist/testing.d.mts

@@ -1,4 +1,4 @@
-import { C as CapturedMail } from "./packem_shared/capture-transport.d-ChnhdPO2.mjs";
+import { C as CapturedMail } from "./packem_shared/capture-transport.d-_rIl9W6N.mjs";
 import 'react';
 /** Minimal `fetch` projection so a test can inject a stub. */
 type FetchLike = (input: string, init?: {
@@ -33,16 +33,16 @@ interface WaitForMailOptions extends InboxOptions {
 /** Read the captured-mail inbox (newest first). */
 declare const listCapturedMail: (options: InboxOptions) => Promise<CapturedMail[]>;
 /**
-* Poll the captured-mail inbox until a message addressed to `to` (optionally
-* matching `subjectMatch`) appears, then return it. Throws on timeout. Entries
-* are newest-first, so the most recent matching message wins.
-*/
+ * Poll the captured-mail inbox until a message addressed to `to` (optionally
+ * matching `subjectMatch`) appears, then return it. Throws on timeout. Entries
+ * are newest-first, so the most recent matching message wins.
+ */
 declare const waitForMail: (options: WaitForMailOptions) => Promise<CapturedMail>;
 /**
-* Pull the first link out of a captured message — html first, then text. Pass
-* `match` to require the URL contain a substring (e.g. `"/reset-password"`),
-* which disambiguates the action link from a logo/footer URL.
-*/
+ * Pull the first link out of a captured message — html first, then text. Pass
+ * `match` to require the URL contain a substring (e.g. `"/reset-password"`),
+ * which disambiguates the action link from a logo/footer URL.
+ */
 declare const extractLink: (mail: CapturedMail, options?: {
   match?: string;
 }) => string;