@push.rocks/smartmta 8.0.1 → 8.1.1

package/changelog.md

@@ -1,5 +1,56 @@
 # Changelog
 
+## 2026-07-21 - 8.1.1
+
+### Features
+
+- add exact accepted-envelope dispatch for durable consumers
+  - Snapshot resolved per-recipient actions as immutable JSON-safe plans and replay them without consulting live routes.
+  - Scope parsed messages and SMTP sessions per envelope recipient while preserving the accepted raw RFC822 bytes unchanged.
+  - Queue forward, process, and deliver actions with durable deterministic idempotency keys and return their queue IDs.
+  - Persist bounded replay checkpoints through caller-managed storage; no filesystem persistence is introduced.
+  - Add backend-bounded prefix pagination and use it for convergent checkpoint and queue-tombstone cleanup.
+- add exact accepted-envelope dispatch (accepted-envelope-dispatch)
+  - Snapshot resolved per-recipient actions as immutable JSON-safe plans for replay without consulting live routes.
+  - Queue forward, process, and deliver actions with deterministic durable idempotency keys and return queue IDs.
+  - Add accepted-envelope replay checkpoints with bounded cleanup backed by caller-managed storage.
+  - Introduce backend-bounded prefix pagination and use it for checkpoint and queue tombstone cleanup.
+
+## 2026-07-21 - 8.1.0
+
+### Features
+
+- add fail-closed inbound storage policies and durable envelope acceptance
+  - Add per-domain store/reject fallbacks that run only after explicit recipient routes.
+  - Expose one awaited envelope hook with the exact raw message, complete SMTP envelope, resolved routes, typed security verdicts, and attachment count before the SMTP 250 response.
+  - Emit typed recipient-rejection observations with truthful local-mailbox and non-hosted-domain responses.
+- expose complete SMTP delivery evidence
+  - Preserve lossless outbound attachments across the TypeScript/Rust boundary, including binary payloads, Unicode filenames, content IDs, and hardened MIME parameters.
+  - Record structured DATA transfer bytes, write-chunk counts, and duration on SMTP transaction entries.
+  - Persist materialized attachment counts on managed queue records with backward-compatible hydration.
+- classify self-MX against the complete listener topology
+  - Normalize DNS names and IP literals, follow bounded CNAME chains, compare A/AAAA answers with explicit and dynamic listener identities, and fail closed on indeterminate DNS.
+  - Treat configured topology identity providers that return no proof, throw, or time out as indeterminate and perform no SMTP dial.
+  - Skip local MX candidates while continuing to eligible backup MX hosts, recording synthetic no-dial attempts for every skipped candidate.
+- add inbound storage policies and durable delivery evidence (mail)
+  - Add per-domain inbound store/reject policies with route validation and awaited envelope acceptance context.
+  - Preserve outbound attachments across the TypeScript/Rust bridge with hardened MIME parameter handling.
+  - Record SMTP DATA transfer statistics and persist queue attachment counts for delivery diagnostics.
+  - Classify self-MX candidates against listener topology, skip local MX hosts, and continue to eligible backups.
+  - Add a durable delivery-failure outbox for terminal transport and local-topology failures.
+
+### Fixes
+
+- preserve delivery semantics when retries are exhausted
+  - Terminalize unresolved recipients atomically with a separate durable delivery-failure operation.
+  - Drain delivery-failure operations in bounded startup and periodic batches with durable retry backoff and idempotent operation IDs.
+  - Keep local topology and transport exhaustion out of the SMTP-recipient suppression/bounce evidence path.
+  - Make explicit self-MX configuration failures terminal while allowing dynamic or DNS-derived topology to recover on retry.
+- preserve rejection and transfer diagnostics under failure pressure
+  - Observe RCPT policy callback exceptions and timeouts exactly once as policy errors before returning SMTP 451.
+  - Reserve the structured DATA transfer summary when the bounded SMTP transcript reaches its entry cap.
+- stop the rate-limiter cleanup timer when UnifiedEmailServer shuts down
+
 ## 2026-07-20 - 8.0.1
 
 ### Fixes

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@push.rocks/smartmta',
-    version: '8.0.1',
+    version: '8.1.1',
     description: 'A high-performance, enterprise-grade Mail Transfer Agent (MTA) built from scratch in TypeScript with Rust acceleration.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSxzQkFBc0I7SUFDNUIsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLHlIQUF5SDtDQUN2SSxDQUFBIn0=

package/dist_ts/index.d.ts

@@ -7,4 +7,10 @@ export declare const smartMtaCapabilities: Readonly<{
     readonly callerManagedDkimKeys: true;
     readonly structuredSmtpTransactions: true;
     readonly typedDeliveryFailures: true;
+    readonly inboundStorePolicies: true;
+    readonly smtpTransferStats: true;
+    readonly outboundAttachments: true;
+    readonly topologyAwareSelfMx: true;
+    readonly durableDeliveryFailureOutbox: true;
+    readonly exactAcceptedEnvelopeDispatch: true;
 }>;

package/dist_ts/index.js

@@ -7,5 +7,11 @@ export const smartMtaCapabilities = Object.freeze({
     callerManagedDkimKeys: true,
     structuredSmtpTransactions: true,
     typedDeliveryFailures: true,
+    inboundStorePolicies: true,
+    smtpTransferStats: true,
+    outboundAttachments: true,
+    topologyAwareSelfMx: true,
+    durableDeliveryFailureOutbox: true,
+    exactAcceptedEnvelopeDispatch: true,
 });
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/mail/delivery/classes.delivery.queue.d.ts

@@ -24,7 +24,8 @@ export interface IRecipientPermanentFailure {
 }
 export interface IBounceOperation {
     operationId: string;
-    kind: 'smtpFailure';
+    kind: 'smtpFailure' | 'deliveryFailure';
+    failureClass?: 'localTopology' | 'transport';
     recipient: string;
     normalizedRecipient: string;
     smtpCode: number;
@@ -40,8 +41,14 @@ export interface IBounceOperation {
  */
 export interface IQueueItem {
     id: string;
+    /** Stable caller-supplied key used to make enqueue replay-safe. */
+    idempotencyKey?: string;
+    /** Fingerprint of the exact work associated with the idempotency key. */
+    idempotencyFingerprint?: string;
     processingMode: EmailProcessingMode;
     processingResult: Email;
+    /** Materialized attachment count for queue/detail consumers. */
+    attachmentCount?: number;
     route?: IEmailRoute;
     status: QueueItemStatus;
     attempts: number;
@@ -56,9 +63,15 @@ export interface IQueueItem {
     bounceOperations?: IBounceOperation[];
     smtpTransactions?: ISmtpTransactionAttempt[];
 }
+export declare const ACCEPTED_ENVELOPE_IDEMPOTENCY_RETENTION_MS: number;
 export interface IQueueFailureOptions {
     /** Unknown failures default to retryable so temporary internal faults do not lose mail. */
     retryable?: boolean;
+    /** Durable work created atomically when unresolved recipients become terminal. */
+    terminalFailure?: {
+        failureClass: 'localTopology' | 'transport';
+        smtpCode?: number;
+    };
 }
 export interface IQueueFailureTransition {
     updated: boolean;
@@ -82,6 +95,14 @@ export interface IQueueOptions {
     baseRetryDelay?: number;
     maxRetryDelay?: number;
 }
+export interface IQueueEnqueueOptions {
+    /** Stable key that resolves to one deterministic queue item id. */
+    idempotencyKey?: string;
+    /** Required with idempotencyKey to reject reuse for different work. */
+    idempotencyFingerprint?: string;
+    /** Fail closed unless the queue is backed by managed blob storage. */
+    requireDurable?: boolean;
+}
 export interface IQueueStats {
     queueSize: number;
     status: {
@@ -115,12 +136,25 @@ export declare class UnifiedDeliveryQueue extends EventEmitter {
     private totalProcessed;
     private ownsManagedPrefix;
     private lifecycleState;
+    private readonly idempotentEnqueueFlights;
+    private idempotencyTombstoneCleanupCursor?;
     /**
      * Create a new unified delivery queue
      * @param options Queue options
      */
     constructor(options: IQueueOptions);
     private assertMutable;
+    /** Whether queue entries are committed through caller-managed blob storage. */
+    hasManagedStorage(): boolean;
+    /** Whether managed storage can list a backend-bounded page of keys. */
+    hasPaginatedManagedStorage(): boolean;
+    private idempotentQueueId;
+    private idempotencyTombstonePrefix;
+    private idempotencyTombstoneKey;
+    private readIdempotencyTombstone;
+    private parseIdempotencyTombstone;
+    private persistIdempotencyTombstone;
+    private cleanupExpiredIdempotencyTombstones;
     private createInitialRecipientStates;
     private createBounceOperationId;
     /**
@@ -149,7 +183,8 @@ export declare class UnifiedDeliveryQueue extends EventEmitter {
      * @param mode Processing mode
      * @param route Email route
      */
-    enqueue(processingResult: Email, mode: EmailProcessingMode, route?: IEmailRoute): Promise<string>;
+    enqueue(processingResult: Email, mode: EmailProcessingMode, route?: IEmailRoute, enqueueOptions?: IQueueEnqueueOptions): Promise<string>;
+    private enqueueNew;
     /**
      * Get an item from the queue
      * @param id Item ID
@@ -189,7 +224,12 @@ export declare class UnifiedDeliveryQueue extends EventEmitter {
         permanentFailures: string[];
     };
     /** Includes terminal queue items because bounce work outlives delivery status. */
-    listPendingBounceOperations(now?: Date): Array<{
+    listPendingBounceOperations(now?: Date, limitArg?: number): Array<{
+        itemId: string;
+        operation: IBounceOperation;
+    }>;
+    /** Durable terminal-delivery notices. These never enter SMTP recipient suppression. */
+    listPendingDeliveryFailureOperations(now?: Date, limitArg?: number): Array<{
         itemId: string;
         operation: IBounceOperation;
     }>;