@madewithremy/admin 0.1.48 → 0.1.49

package/CHANGELOG.md

@@ -4,6 +4,17 @@ What changed in `@madewithremy/admin`, newest first, each version under its own
 
 Versions before 0.1.44 aren't recorded here.
 
+## 0.1.49
+
+### New
+
+- A sending domain's `returnPathStatus` (`admin.email.addDomain`, `admin.email.verifyDomain`, the domain lists): where its bounce domain stands, `pending`, `verified` or `failed`, or null where the deployment's email provider has none of its own. On the cloud every sending domain gets one, `bounces.<domain>`, and its `dnsInstructions.records` carry its MX and SPF TXT, both recommended. With them published, the domain's mail bounces to the domain itself, so SPF matches the From address for DMARC as DKIM already does. Without them it sends as before.
+- `remy-admin email domains verify` on a sending domain whose bounce domain is `failed` starts it over, once its records are published.
+
+### Changed behavior
+
+- A sending domain on the cloud no longer lists an SPF TXT for the domain itself. It never applied to the mail, whose envelope sender was the provider's own address; the bounce domain's TXT replaces it. Check: a script that looks for a `v=spf1` record named for the domain.
+
 ## 0.1.48
 
 ### New

package/dist/index.d.ts

@@ -5147,7 +5147,8 @@ interface OutboundDnsRecord {
 /**
  * DNS records to create at the customer's DNS host for outbound sending:
  * whatever the deployment's email provider issues (on SES, three DKIM CNAMEs,
- * all required, and an SPF TXT, recommended; merge it into an existing one).
+ * all required, then the bounce domain's MX and SPF TXT on
+ * `bounces.<domain>`, recommended).
  */
 interface OutboundDnsInstructions {
     records: OutboundDnsRecord[];
@@ -5157,6 +5158,12 @@ interface OutboundEmailDomainView extends EmailDomainBase {
     verifiedAt: string | null;
     sesVerificationStatus: string | null;
     uiStatus: OutboundEmailDomainUiStatus;
+    /**
+     * Where the domain's bounce domain stands (`pending` until its MX is found),
+     * null where the provider has none of its own. Never part of `uiStatus`:
+     * the domain sends without it, from the provider's own bounce address.
+     */
+    returnPathStatus: 'pending' | 'verified' | 'failed' | null;
     verificationErrors: unknown[] | null;
     createdAt: string;
     dnsInstructions: OutboundDnsInstructions;