@push.rocks/smartmta 6.5.2 → 8.0.0

package/changelog.md

@@ -1,5 +1,45 @@
 # Changelog
 
+## 2026-07-20 - 8.0.0
+
+### Breaking Changes
+
+- make recipient delivery and bounce processing durable per recipient (delivery)
+  - Queue schema V2 stores explicit unresolved, delivered, and permanent-failure recipient states plus a durable bounce outbox.
+  - V1 queue blobs remain readable and upgrade on their next mutation without synthesizing bounce work; V7 cannot read V2 blobs, so rollback after a V2 write is unsupported.
+  - Require Node.js 22 or newer.
+- introduce durable per-recipient delivery checkpoints and bounce outbox (delivery)
+  - Add queue schema V2 with explicit recipient dispositions, structured SMTP transaction history, and deterministic bounce operations.
+  - Record final SMTP outcomes per recipient so accepted recipients are not resent and permanent RCPT failures are checkpointed with bounce work.
+  - Make built-in bounce processing idempotent by durable operation ID and add readiness barriers for managed routing, suppression, and reputation state.
+  - Add typed SMTP delivery failures with bounded, redacted transcripts and exact recipient results across Rust and TypeScript.
+  - Support caller-managed DKIM keys with validation-only startup, fail-closed signing, and no automatic key or DNS provisioning.
+  - Require Node.js 22 and upgrade TypeScript/Rust dependencies and tooling.
+
+### Fixes
+
+- checkpoint final SMTP outcomes without duplicate delivery (smtp)
+  - Record acceptance only after the final 250 response, retry only unresolved 4xx recipients on later MX hosts, and never resend accepted or permanently rejected recipients.
+  - Atomically persist permanent 5xx recipient state with deterministic pending bounce operations.
+  - Drain pending bounce operations at startup and periodically across all queue statuses, isolating failures per recipient.
+- make bounce processing idempotent by durable operation ID (bounce)
+  - Deduplicate concurrent and restarted built-in bounce processing and await suppression persistence before recording completion.
+  - Bound the hot completed-operation cache to 10,000 entries with a 24-hour TTL; durable processed markers remain authoritative after cache eviction or restart.
+  - Preserve at-least-once delivery semantics; custom handlers receive operation IDs for their own durable deduplication.
+- isolate queue, delivery, security-log, and hook observers from committed state and statistics (events)
+- make caller-managed DKIM initialization validation-only with zero SmartMTA DNS handlers, writes, rotation, or key generation (dkim)
+- upgrade dependencies and make the stricter tsbuild 4.4.2 checks pass without skipLibCheck (tooling)
+
+## 2026-07-20 - 7.0.0
+
+### Breaking Changes
+
+- require managed storage for SmartMTA persistence (storage)
+  - Removes local filesystem persistence fallbacks for DKIM keys, bounce data, templates, reputation cache, TLS material, and queue storage.
+  - Adds explicit IStorageManager and IBlobStorageManager contracts with in-memory implementations for tests and non-durable runtimes.
+  - Requires explicit queue.storageMode configuration and supports managed blob-backed queue persistence with restart recovery.
+  - Replaces path-based TLS configuration and file-based SMTP message handoff with in-memory PEM and inline message transport.
+
 ## 2026-07-19 - 6.5.2
 
 ### Fixes

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@push.rocks/smartmta',
-    version: '6.5.2',
+    version: '8.0.0',
     description: 'A high-performance, enterprise-grade Mail Transfer Agent (MTA) built from scratch in TypeScript with Rust acceleration.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSxzQkFBc0I7SUFDNUIsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLHlIQUF5SDtDQUN2SSxDQUFBIn0=

package/dist_ts/functions.errors.d.ts

@@ -0,0 +1,3 @@
+/** Normalize values caught from promise and callback boundaries. */
+export declare function getErrorMessage(error: unknown): string;
+export declare function getErrorStack(error: unknown): string | undefined;

package/dist_ts/functions.errors.js

@@ -0,0 +1,8 @@
+/** Normalize values caught from promise and callback boundaries. */
+export function getErrorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+export function getErrorStack(error) {
+    return error instanceof Error ? error.stack : undefined;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/index.d.ts

@@ -4,4 +4,7 @@ export * from './security/index.js';
 export { baseLogger, logger } from './logger.js';
 export declare const smartMtaCapabilities: Readonly<{
     readonly selectorCorrectDkimSigning: true;
+    readonly callerManagedDkimKeys: true;
+    readonly structuredSmtpTransactions: true;
+    readonly typedDeliveryFailures: true;
 }>;

package/dist_ts/index.js

@@ -4,5 +4,8 @@ export * from './security/index.js';
 export { baseLogger, logger } from './logger.js';
 export const smartMtaCapabilities = Object.freeze({
     selectorCorrectDkimSigning: true,
+    callerManagedDkimKeys: true,
+    structuredSmtpTransactions: true,
+    typedDeliveryFailures: true,
 });
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi90cy9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxjQUFjLHlCQUF5QixDQUFDO0FBQ3hDLGNBQWMsaUJBQWlCLENBQUM7QUFDaEMsY0FBYyxxQkFBcUIsQ0FBQztBQUNwQyxPQUFPLEVBQUUsVUFBVSxFQUFFLE1BQU0sRUFBRSxNQUFNLGFBQWEsQ0FBQztBQUVqRCxNQUFNLENBQUMsTUFBTSxvQkFBb0IsR0FBRyxNQUFNLENBQUMsTUFBTSxDQUFDO0lBQ2hELDBCQUEwQixFQUFFLElBQUk7Q0FDeEIsQ0FBQyxDQUFDIn0=
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi90cy9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxjQUFjLHlCQUF5QixDQUFDO0FBQ3hDLGNBQWMsaUJBQWlCLENBQUM7QUFDaEMsY0FBYyxxQkFBcUIsQ0FBQztBQUNwQyxPQUFPLEVBQUUsVUFBVSxFQUFFLE1BQU0sRUFBRSxNQUFNLGFBQWEsQ0FBQztBQUVqRCxNQUFNLENBQUMsTUFBTSxvQkFBb0IsR0FBRyxNQUFNLENBQUMsTUFBTSxDQUFDO0lBQ2hELDBCQUEwQixFQUFFLElBQUk7SUFDaEMscUJBQXFCLEVBQUUsSUFBSTtJQUMzQiwwQkFBMEIsRUFBRSxJQUFJO0lBQ2hDLHFCQUFxQixFQUFFLElBQUk7Q0FDbkIsQ0FBQyxDQUFDIn0=

package/dist_ts/mail/core/classes.bouncemanager.d.ts

@@ -1,4 +1,4 @@
-import { type IStorageManagerLike } from '../interfaces.storage.js';
+import type { IStorageManager } from '../interfaces.storage.js';
 import type { Email } from './classes.email.js';
 /**
  * Bounce types for categorizing the reasons for bounces
@@ -34,6 +34,7 @@ export declare enum BounceCategory {
  */
 export interface BounceRecord {
     id: string;
+    operationId?: string;
     originalEmailId?: string;
     recipient: string;
     sender: string;
@@ -69,12 +70,17 @@ export declare class BounceManager {
     private bounceCache;
     private suppressionList;
     private storageManager?;
+    private initializationPromise;
+    private operationPromises;
+    private completedOperations;
     constructor(options?: {
         retryStrategy?: Partial<RetryStrategy>;
         maxCacheSize?: number;
         cacheTTL?: number;
-        storageManager?: IStorageManagerLike;
+        storageManager?: IStorageManager;
     });
+    /** Wait until the managed suppression state has been hydrated. */
+    initialize(): Promise<void>;
     /**
      * Process a bounce notification
      * @param bounceData Bounce data to process
@@ -89,11 +95,14 @@ export declare class BounceManager {
      * @returns Processed bounce record
      */
     processSmtpFailure(recipient: string, smtpResponse: string, options?: {
+        operationId?: string;
         sender?: string;
         originalEmailId?: string;
         statusCode?: string;
         headers?: Record<string, string>;
     }): Promise<BounceRecord>;
+    private processSmtpFailureOperation;
+    private readProcessedBounce;
     /**
      * Process a bounce notification email
      * @param bounceEmail The email containing bounce information
@@ -116,6 +125,8 @@ export declare class BounceManager {
      * @param reason Reason for suppression
      * @param expiresAt Expiration timestamp (undefined for permanent)
      */
+    private setSuppressionListEntry;
+    private addToSuppressionListAndPersist;
     addToSuppressionList(email: string, reason: string, expiresAt?: number): void;
     /**
      * Remove an email address from the suppression list
@@ -138,18 +149,11 @@ export declare class BounceManager {
         timestamp: number;
         expiresAt?: number;
     } | null;
-    /**
-     * Save suppression list to disk
-     */
+    /** Save the suppression list through managed storage when durability is configured. */
     private saveSuppressionList;
-    /**
-     * Load suppression list from disk
-     */
+    /** Load the suppression list from managed storage. */
     private loadSuppressionList;
-    /**
-     * Save bounce record to disk
-     * @param bounce Bounce record to save
-     */
+    /** Save one bounce record through managed storage when configured. */
     private saveBounceRecord;
     /**
      * Update bounce cache with new bounce information