@softure-ai/mailing 0.0.0-stage → 0.1.6

package/dist/server/campaigns.js

@@ -0,0 +1,118 @@
+// Campaigns: one list mail to many recipients through the delivery ledger. The campaign row pins
+// the content (a hash of kind, subject and bodies), so a re-run with the same id sends the rest of
+// the same mail and nothing twice; other content under that id is refused.
+import { createHash } from "node:crypto";
+import { err, ok } from "@softure-ai/core";
+import { and, eq, inArray } from "drizzle-orm";
+import { campaigns, deliveries } from "../schema.js";
+import { getCampaignProblems } from "./campaign-file.js";
+import { deliverOnce } from "./deliveries.js";
+import { isSuppressed } from "./suppressions.js";
+import { getRecipientKey } from "./unsubscribe-link.js";
+/** Rejections the provider answered (the others never left the process). */
+const PROVIDER_REASONS = new Set(["mailing.rejected", "mailing.unavailable"]);
+/** sha256 (hex) of what a recipient reads: kind, subject, text and HTML. */
+export function getCampaignContentHash(content) {
+    return createHash("sha256").update(JSON.stringify([content.kind, content.subject, content.text, content.html])).digest("hex");
+}
+/**
+ * Records the campaign, or confirms that the stored one has the same content. Throws on a
+ * database failure and for content `getCampaignProblems` refuses.
+ */
+export async function registerCampaign(ctx, content) {
+    assertCampaign(content);
+    const contentHash = getCampaignContentHash(content);
+    await ctx.db
+        .insert(campaigns)
+        .values({ id: content.id, kind: content.kind, subject: content.subject, contentHash, createdAt: ctx.clock.now() })
+        .onConflictDoNothing();
+    const rows = await ctx.db.select({ contentHash: campaigns.contentHash }).from(campaigns).where(eq(campaigns.id, content.id)).limit(1);
+    return rows[0]?.contentHash === contentHash ? ok() : err("mailing.campaign_changed");
+}
+/**
+ * Sends `campaign` to every recipient that has no outcome yet, one at a time. Recipients who
+ * unsubscribed are rejected (`mailing.suppressed`) and never retried. Throws on a database failure.
+ */
+export async function sendCampaign(ctx, input, options = {}) {
+    const { pauseMs = 0, onDelivery, sleep = wait, ...deliverOptions } = options;
+    const { campaign } = input;
+    const registered = await registerCampaign(ctx, campaign);
+    if (!registered.ok)
+        return registered;
+    const counts = { sent: 0, done: 0, inFlight: 0, retryLater: 0, rejected: emptyRejections() };
+    const seen = new Set();
+    const scope = `campaign:${campaign.id}`;
+    for await (const address of input.recipients) {
+        const recipientKey = getRecipientKey(address);
+        if (seen.has(recipientKey))
+            continue;
+        seen.add(recipientKey);
+        const html = campaign.html === null ? {} : { html: campaign.html };
+        const outcome = await deliverOnce(ctx, { scope, campaignId: campaign.id, mail: { to: address, subject: campaign.subject, text: campaign.text, kind: campaign.kind, ...html } }, deliverOptions);
+        countOutcome(counts, outcome);
+        onDelivery?.(outcome);
+        const reachedProvider = outcome.status === "sent" || outcome.status === "retry-later" || (outcome.status === "rejected" && PROVIDER_REASONS.has(outcome.reason));
+        if (reachedProvider && pauseMs > 0)
+            await sleep(pauseMs);
+    }
+    return ok({ recipients: seen.size, ...counts });
+}
+/** What `sendCampaign` would do, without writing or sending anything. Throws on a database failure. */
+export async function planCampaign(ctx, input) {
+    const { campaign } = input;
+    assertCampaign(campaign);
+    const stored = await ctx.db.select({ contentHash: campaigns.contentHash }).from(campaigns).where(eq(campaigns.id, campaign.id)).limit(1);
+    const contentChanged = stored[0] !== undefined && stored[0].contentHash !== getCampaignContentHash(campaign);
+    const addresses = new Map();
+    for await (const address of input.recipients) {
+        const key = getRecipientKey(address);
+        if (!addresses.has(key))
+            addresses.set(key, address);
+    }
+    const closed = new Set();
+    const keys = [...addresses.keys()];
+    for (let start = 0; start < keys.length; start += 1_000) {
+        const rows = await ctx.db
+            .select({ recipientKey: deliveries.recipientKey })
+            .from(deliveries)
+            .where(and(eq(deliveries.scope, `campaign:${campaign.id}`), inArray(deliveries.status, ["sent", "rejected"]), inArray(deliveries.recipientKey, keys.slice(start, start + 1_000))));
+        rows.forEach((row) => closed.add(row.recipientKey));
+    }
+    let suppressed = 0;
+    for (const [key, address] of addresses) {
+        if (!closed.has(key) && (await isSuppressed(ctx, address)))
+            suppressed += 1;
+    }
+    return { recipients: addresses.size, done: closed.size, suppressed, toSend: addresses.size - closed.size - suppressed, contentChanged };
+}
+function assertCampaign(content) {
+    const problems = getCampaignProblems(content);
+    if (problems.length > 0)
+        throw new Error(`@softure-ai/mailing: campaign "${content.id}" cannot be sent: ${problems.join("; ")}`);
+}
+function emptyRejections() {
+    return { "mailing.invalid_input": 0, "mailing.rejected": 0, "mailing.unavailable": 0, "mailing.suppressed": 0 };
+}
+function countOutcome(counts, outcome) {
+    switch (outcome.status) {
+        case "sent":
+            counts.sent += 1;
+            return;
+        case "rejected":
+            counts.rejected[outcome.reason] += 1;
+            return;
+        case "done":
+            counts.done += 1;
+            return;
+        case "in-flight":
+            counts.inFlight += 1;
+            return;
+        case "retry-later":
+            counts.retryLater += 1;
+            return;
+    }
+}
+function wait(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=campaigns.js.map

package/dist/server/campaigns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaigns.js","sourceRoot":"","sources":["../../src/server/campaigns.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,mGAAmG;AACnG,2EAA2E;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAwB,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAmE,MAAM,iBAAiB,CAAC;AAC/G,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,4EAA4E;AAC5E,MAAM,gBAAgB,GAAkC,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC,CAAC;AA2B7G,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CAAC,OAAwB;IAC7D,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChI,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAoB,EAAE,OAAwB;IACnF,cAAc,CAAC,OAAO,CAAC,CAAC;IACxB,MAAM,WAAW,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,GAAG,CAAC,EAAE;SACT,MAAM,CAAC,SAAS,CAAC;SACjB,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC;SACjH,mBAAmB,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtI,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;AACvF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAoB,EACpB,KAA4G,EAC5G,UAA+B,EAAE;IAEjC,MAAM,EAAE,OAAO,GAAG,CAAC,EAAE,UAAU,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,CAAC;IAC7E,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC;IAEtC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,CAAC;IAC7F,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAG,YAAY,QAAQ,CAAC,EAAE,EAAE,CAAC;IACxC,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,SAAS;QACrC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEvB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,GAAG,EACH,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,EACvI,cAAc,CACf,CAAC;QACF,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACjK,IAAI,eAAe,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AAClD,CAAC;AAcD,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAoB,EACpB,KAA4G;IAE5G,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,cAAc,CAAC,QAAQ,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzI,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAE7G,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;aACtB,MAAM,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC;aACjD,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrL,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAAE,UAAU,IAAI,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,UAAU,EAAE,cAAc,EAAE,CAAC;AAC1I,CAAC;AAED,SAAS,cAAc,CAAC,OAAwB;IAC9C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,OAAO,CAAC,EAAE,qBAAqB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACnI,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,EAAE,uBAAuB,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,qBAAqB,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC;AAClH,CAAC;AAED,SAAS,YAAY,CACnB,MAAwH,EACxH,OAAwB;IAExB,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,MAAM;YACT,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;YACjB,OAAO;QACT,KAAK,UAAU;YACb,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO;QACT,KAAK,MAAM;YACT,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;YACjB,OAAO;QACT,KAAK,WAAW;YACd,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;YACrB,OAAO;QACT,KAAK,aAAa;YAChB,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;YACvB,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,EAAU;IACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/server/deliveries.d.ts

@@ -0,0 +1,56 @@
+import { type ModuleContext } from "@softure-ai/core";
+import type { Queryable } from "@softure-ai/db";
+import { type MailingErrorCode, type OutgoingMail } from "../contract.js";
+export type DeliveryContext = ModuleContext<Queryable>;
+/** How long a claim may stay open before another sender may take it over. */
+export declare const DEFAULT_STALE_CLAIM_MS: number;
+/** Claims a delivery gets before `mailing.unavailable` becomes its final outcome. */
+export declare const DEFAULT_MAX_ATTEMPTS = 5;
+export interface Delivery {
+    /**
+     * What the mail is about, unique per recipient: `campaign:<id>` for campaigns (set by
+     * `sendCampaign`), `<module>.<event>:<entity>` for lifecycle mail, e.g.
+     * `billing.trial-ending:sub_42`. Lowercase letters, digits and `._:-`, at most 128 characters.
+     */
+    readonly scope: string;
+    /** The mail. Its `kind` is stored with the row; the idempotency key comes from the ledger. */
+    readonly mail: OutgoingMail;
+    /** The campaign the delivery belongs to; its scope must then be `campaign:<id>`. */
+    readonly campaignId?: string;
+}
+export interface DeliverOptions {
+    readonly staleClaimMs?: number;
+    readonly maxAttempts?: number;
+}
+export type DeliveryOutcome = 
+/** Sent now; `id` is the provider's message id. */
+{
+    readonly status: "sent";
+    readonly id: string;
+}
+/** Refused now, for good (suppressed, rejected, invalid, or unavailable too many times). */
+ | {
+    readonly status: "rejected";
+    readonly reason: MailingErrorCode;
+}
+/** An earlier run already closed this delivery; nothing was sent. */
+ | {
+    readonly status: "done";
+    readonly outcome: "sent" | "rejected";
+}
+/** Another sender holds a fresh claim; nothing was sent. */
+ | {
+    readonly status: "in-flight";
+}
+/** The provider was unavailable; the claim is released for a later run. */
+ | {
+    readonly status: "retry-later";
+};
+/**
+ * Sends `delivery.mail` unless the ledger already has an outcome (or a fresh claim) for its scope
+ * and recipient, and records the outcome. Throws on a database failure (after a send, the claim
+ * stays open and becomes stale, so a later run re-sends with the same idempotency key), for a
+ * malformed scope or kind, and when `sendMail` throws.
+ */
+export declare function deliverOnce(ctx: DeliveryContext, delivery: Delivery, options?: DeliverOptions): Promise<DeliveryOutcome>;
+//# sourceMappingURL=deliveries.d.ts.map

package/dist/server/deliveries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deliveries.d.ts","sourceRoot":"","sources":["../../src/server/deliveries.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD,OAAO,EAAsB,KAAK,gBAAgB,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAK9F,MAAM,MAAM,eAAe,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;AAEvD,6EAA6E;AAC7E,eAAO,MAAM,sBAAsB,QAAc,CAAC;AAClD,qFAAqF;AACrF,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAKtC,MAAM,WAAW,QAAQ;IACvB;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8FAA8F;IAC9F,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,oFAAoF;IACpF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,eAAe;AACzB,mDAAmD;AACjD;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE;AAClD,4FAA4F;GAC1F;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE;AACpE,qEAAqE;GACnE;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE;AACpE,4DAA4D;GAC1D;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAAE;AAClC,2EAA2E;GACzE;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAEvC;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,eAAe,CAAC,CAsBlI"}

package/dist/server/deliveries.js

@@ -0,0 +1,100 @@
+// The delivery ledger (mailing.deliveries): a mail goes out at most once per scope and recipient.
+// The sender claims the row in one conditional upsert before it calls the provider, then closes it
+// with one outcome. A claim left behind by a crash is taken over once it is stale, and the mail is
+// sent again with the same idempotency key, so the provider folds it into the first send.
+import {} from "@softure-ai/core";
+import { and, eq, lt, or, sql } from "drizzle-orm";
+import { isMailKind } from "../address.js";
+import { TRANSACTIONAL_KIND } from "../contract.js";
+import { deliveries } from "../schema.js";
+import { sendMail } from "./send-mail.js";
+import { getRecipientKey } from "./unsubscribe-link.js";
+/** How long a claim may stay open before another sender may take it over. */
+export const DEFAULT_STALE_CLAIM_MS = 15 * 60_000;
+/** Claims a delivery gets before `mailing.unavailable` becomes its final outcome. */
+export const DEFAULT_MAX_ATTEMPTS = 5;
+const MAX_SCOPE_LENGTH = 128;
+const SCOPE = /^[a-z0-9][a-z0-9._:-]*$/;
+/**
+ * Sends `delivery.mail` unless the ledger already has an outcome (or a fresh claim) for its scope
+ * and recipient, and records the outcome. Throws on a database failure (after a send, the claim
+ * stays open and becomes stale, so a later run re-sends with the same idempotency key), for a
+ * malformed scope or kind, and when `sendMail` throws.
+ */
+export async function deliverOnce(ctx, delivery, options = {}) {
+    const { staleClaimMs = DEFAULT_STALE_CLAIM_MS, maxAttempts = DEFAULT_MAX_ATTEMPTS } = options;
+    const kind = delivery.mail.kind ?? TRANSACTIONAL_KIND;
+    assertDelivery(delivery, kind);
+    const recipientKey = getRecipientKey(delivery.mail.to);
+    const key = { scope: delivery.scope, recipientKey };
+    const attempt = await claimDelivery(ctx, { ...key, kind, campaignId: delivery.campaignId ?? null, staleClaimMs });
+    if (attempt === null)
+        return readClosedDelivery(ctx, key);
+    const result = await sendMail(ctx, delivery.mail, { idempotencyKey: `${delivery.scope}:${recipientKey}` });
+    const fence = { ...key, attempt };
+    if (result.ok) {
+        await closeDelivery(ctx, fence, { status: "sent", providerMessageId: result.value.id, reason: null });
+        return { status: "sent", id: result.value.id };
+    }
+    if (result.error === "mailing.unavailable" && attempt < maxAttempts) {
+        await releaseDelivery(ctx, fence);
+        return { status: "retry-later" };
+    }
+    await closeDelivery(ctx, fence, { status: "rejected", providerMessageId: null, reason: result.error });
+    return { status: "rejected", reason: result.error };
+}
+function assertDelivery(delivery, kind) {
+    if (delivery.scope.length > MAX_SCOPE_LENGTH || !SCOPE.test(delivery.scope)) {
+        throw new Error(`@softure-ai/mailing: deliverOnce scope "${delivery.scope}" must be lowercase letters, digits and ._:- (at most 128 characters)`);
+    }
+    if (!isMailKind(kind)) {
+        throw new Error(`@softure-ai/mailing: deliverOnce kind "${kind}" must be kebab-case (at most 64 characters)`);
+    }
+    if (delivery.campaignId !== undefined && delivery.scope !== `campaign:${delivery.campaignId}`) {
+        throw new Error(`@softure-ai/mailing: a delivery of campaign "${delivery.campaignId}" must use the scope "campaign:${delivery.campaignId}"`);
+    }
+}
+/**
+ * Takes the row in one statement: a new row, a `pending` one, or a claim older than
+ * `staleClaimMs`. Resolves with the attempt number that fences the outcome, or `null` when the row
+ * is closed or claimed by someone else.
+ */
+async function claimDelivery(ctx, claim) {
+    const now = ctx.clock.now();
+    const staleBefore = new Date(now.getTime() - claim.staleClaimMs);
+    const rows = await ctx.db
+        .insert(deliveries)
+        .values({ scope: claim.scope, recipientKey: claim.recipientKey, kind: claim.kind, campaignId: claim.campaignId, status: "claimed", attempts: 1, claimedAt: now, createdAt: now })
+        .onConflictDoUpdate({
+        target: [deliveries.scope, deliveries.recipientKey],
+        set: { status: "claimed", attempts: sql `${deliveries.attempts} + 1`, claimedAt: now },
+        setWhere: or(eq(deliveries.status, "pending"), and(eq(deliveries.status, "claimed"), lt(deliveries.claimedAt, staleBefore))),
+    })
+        .returning();
+    return rows[0]?.attempts ?? null;
+}
+async function readClosedDelivery(ctx, key) {
+    const rows = await ctx.db.select({ status: deliveries.status }).from(deliveries).where(matchKey(key)).limit(1);
+    const status = rows[0]?.status;
+    if (status === "sent" || status === "rejected")
+        return { status: "done", outcome: status };
+    // A fresh claim; `pending` only between another sender's release and this read.
+    return { status: "in-flight" };
+}
+/** Writes the outcome if this sender still holds the claim; a stale holder writes nothing. */
+async function closeDelivery(ctx, fence, outcome) {
+    await ctx.db
+        .update(deliveries)
+        .set({ ...outcome, finishedAt: ctx.clock.now() })
+        .where(and(matchKey(fence), eq(deliveries.status, "claimed"), eq(deliveries.attempts, fence.attempt)));
+}
+async function releaseDelivery(ctx, fence) {
+    await ctx.db
+        .update(deliveries)
+        .set({ status: "pending" })
+        .where(and(matchKey(fence), eq(deliveries.status, "claimed"), eq(deliveries.attempts, fence.attempt)));
+}
+function matchKey(key) {
+    return and(eq(deliveries.scope, key.scope), eq(deliveries.recipientKey, key.recipientKey));
+}
+//# sourceMappingURL=deliveries.js.map

package/dist/server/deliveries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deliveries.js","sourceRoot":"","sources":["../../src/server/deliveries.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,mGAAmG;AACnG,mGAAmG;AACnG,0FAA0F;AAC1F,OAAO,EAAsB,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAA4C,MAAM,gBAAgB,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAIxD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,MAAM,CAAC;AAClD,qFAAqF;AACrF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,KAAK,GAAG,yBAAyB,CAAC;AAgCxC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAoB,EAAE,QAAkB,EAAE,UAA0B,EAAE;IACtG,MAAM,EAAE,YAAY,GAAG,sBAAsB,EAAE,WAAW,GAAG,oBAAoB,EAAE,GAAG,OAAO,CAAC;IAC9F,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,kBAAkB,CAAC;IACtD,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAE/B,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAClH,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,GAAG,QAAQ,CAAC,KAAK,IAAI,YAAY,EAAE,EAAE,CAAC,CAAC;IAC3G,MAAM,KAAK,GAAG,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC;IAClC,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,MAAM,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACtG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,qBAAqB,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;QACpE,MAAM,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACnC,CAAC;IACD,MAAM,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACvG,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,cAAc,CAAC,QAAkB,EAAE,IAAY;IACtD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,gBAAgB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,CAAC,KAAK,uEAAuE,CAAC,CAAC;IACpJ,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,8CAA8C,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,YAAY,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,gDAAgD,QAAQ,CAAC,UAAU,kCAAkC,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC;IAC/I,CAAC;AACH,CAAC;AAOD;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAC1B,GAAoB,EACpB,KAAiH;IAEjH,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;SACtB,MAAM,CAAC,UAAU,CAAC;SAClB,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;SAChL,kBAAkB,CAAC;QAClB,MAAM,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,YAAY,CAAC;QACnD,GAAG,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAA,GAAG,UAAU,CAAC,QAAQ,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE;QACrF,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;KAC7H,CAAC;SACD,SAAS,EAAE,CAAC;IACf,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,GAAoB,EAAE,GAAgB;IACtE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/G,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;IAC/B,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC3F,gFAAgF;IAChF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACjC,CAAC;AAID,8FAA8F;AAC9F,KAAK,UAAU,aAAa,CAC1B,GAAoB,EACpB,KAAY,EACZ,OAA4H;IAE5H,MAAM,GAAG,CAAC,EAAE;SACT,MAAM,CAAC,UAAU,CAAC;SAClB,GAAG,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC;SAChD,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAoB,EAAE,KAAY;IAC/D,MAAM,GAAG,CAAC,EAAE;SACT,MAAM,CAAC,UAAU,CAAC;SAClB,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;SAC1B,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,QAAQ,CAAC,GAAgB;IAChC,OAAO,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;AAC7F,CAAC"}

package/dist/server/dns.d.ts

@@ -0,0 +1,33 @@
+export type DnsCheckStatus = "pass" | "warn" | "fail";
+export type DnsFinding = "found" | "missing" | "multiple" | "permissive" | "revoked" | "monitor-only" | "inherited" | "lookup-failed";
+export interface DnsCheck {
+    readonly status: DnsCheckStatus;
+    readonly finding: DnsFinding;
+    /** The name that answered (or the first one asked, when none did). */
+    readonly host: string;
+    /** The record that decided the status, when there is one. */
+    readonly record: string | null;
+}
+export interface SenderDnsReport {
+    readonly domain: string;
+    readonly spf: DnsCheck;
+    readonly dkim: DnsCheck;
+    readonly dmarc: DnsCheck;
+}
+export type ResolveTxt = (hostname: string) => Promise<string[][]>;
+export interface CheckSenderDnsOptions {
+    /** DKIM selectors to look up under `_domainkey`. Default `["resend"]`, the Resend selector. */
+    readonly dkimSelectors?: readonly string[];
+    /**
+     * Where SPF is published. Default: the domain itself. Resend checks SPF on `send.<domain>` (its
+     * return path); DMARC accepts that in relaxed alignment.
+     */
+    readonly spfHosts?: readonly string[];
+    readonly resolveTxt?: ResolveTxt;
+}
+export declare const DEFAULT_DKIM_SELECTORS: readonly string[];
+/** Reads the SPF, DKIM and DMARC records of `domain`. Never throws: a failed lookup is a finding. */
+export declare function checkSenderDns(domain: string, options?: CheckSenderDnsOptions): Promise<SenderDnsReport>;
+/** The domain part of a sender (`Plan <hello@mail.example.com>` gives `mail.example.com`). */
+export declare function getSenderDomain(from: string): string;
+//# sourceMappingURL=dns.d.ts.map

package/dist/server/dns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns.d.ts","sourceRoot":"","sources":["../../src/server/dns.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEtD,MAAM,MAAM,UAAU,GAClB,OAAO,GACP,SAAS,GACT,UAAU,GACV,YAAY,GACZ,SAAS,GACT,cAAc,GACd,WAAW,GACX,eAAe,CAAC;AAEpB,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,sEAAsE;IACtE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;CAC1B;AAED,MAAM,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEnE,MAAM,WAAW,qBAAqB;IACpC,+FAA+F;IAC/F,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;CAClC;AAED,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAAe,CAAC;AAEpE,qGAAqG;AACrG,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,OAAO,CAAC,eAAe,CAAC,CAUlH;AAED,8FAA8F;AAC9F,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOpD"}

package/dist/server/dns.js

@@ -0,0 +1,113 @@
+// The sender domain's DNS, as receivers check it: SPF (RFC 7208), DKIM (RFC 6376) and DMARC
+// (RFC 7489). Without all three, list mail lands in spam or is refused outright. The check only
+// reads public TXT records; it cannot see whether the provider signs with the published key.
+import { resolveTxt as resolveTxtRecords } from "node:dns/promises";
+export const DEFAULT_DKIM_SELECTORS = ["resend"];
+/** Reads the SPF, DKIM and DMARC records of `domain`. Never throws: a failed lookup is a finding. */
+export async function checkSenderDns(domain, options = {}) {
+    const name = domain.trim().toLowerCase().replace(/\.$/, "");
+    const resolveTxt = options.resolveTxt ?? resolveTxtRecords;
+    const lookup = (host) => lookupTxt(resolveTxt, host);
+    const [spf, dkim, dmarc] = await Promise.all([
+        checkSpf(lookup, options.spfHosts ?? [name]),
+        checkDkim(lookup, (options.dkimSelectors ?? DEFAULT_DKIM_SELECTORS).map((selector) => `${selector}._domainkey.${name}`)),
+        checkDmarc(lookup, name),
+    ]);
+    return { domain: name, spf, dkim, dmarc };
+}
+/** The domain part of a sender (`Plan <hello@mail.example.com>` gives `mail.example.com`). */
+export function getSenderDomain(from) {
+    // Index arithmetic, not a regular expression: `from` may come from anywhere, and a pattern over
+    // `<...>` backtracks polynomially on input like "<<<<".
+    const open = from.lastIndexOf("<");
+    const close = from.lastIndexOf(">");
+    const address = open !== -1 && close > open ? from.slice(open + 1, close) : from;
+    return address.slice(address.lastIndexOf("@") + 1).trim().toLowerCase();
+}
+const NO_RECORD_CODES = new Set(["ENOTFOUND", "ENODATA", "NXDOMAIN"]);
+async function lookupTxt(resolveTxt, host) {
+    try {
+        // A TXT record may arrive in 255-byte chunks; they form one string.
+        const records = (await resolveTxt(host)).map((chunks) => chunks.join(""));
+        return records.length === 0 ? { kind: "none" } : { kind: "records", records };
+    }
+    catch (error) {
+        const code = error?.code;
+        return typeof code === "string" && NO_RECORD_CODES.has(code) ? { kind: "none" } : { kind: "error" };
+    }
+}
+function startsWithTag(record, tag) {
+    return record.trim().toLowerCase().startsWith(tag);
+}
+/** One `v=spf1` record per host; `+all` (or a bare `all`) lets anyone send as the domain. */
+async function checkSpf(lookup, hosts) {
+    let lookupFailed = null;
+    for (const host of hosts) {
+        const answer = await lookup(host);
+        if (answer.kind === "error") {
+            lookupFailed ??= host;
+            continue;
+        }
+        const records = answer.kind === "records" ? answer.records.filter((record) => /^v=spf1(\s|$)/i.test(record.trim())) : [];
+        if (records.length > 1)
+            return { status: "fail", finding: "multiple", host, record: null };
+        const record = records[0];
+        if (record === undefined)
+            continue;
+        const permissive = /(^|\s)\+?all(\s|$)/i.test(record);
+        return permissive ? { status: "warn", finding: "permissive", host, record } : { status: "pass", finding: "found", host, record };
+    }
+    return lookupFailed === null ? { status: "fail", finding: "missing", host: hosts[0] ?? "", record: null } : { status: "fail", finding: "lookup-failed", host: lookupFailed, record: null };
+}
+/** A key record (`p=`) under one of the selectors; an empty `p=` means the key was revoked. */
+async function checkDkim(lookup, hosts) {
+    let fallback = { status: "fail", finding: "missing", host: hosts[0] ?? "", record: null };
+    for (const host of hosts) {
+        const answer = await lookup(host);
+        if (answer.kind === "error") {
+            if (fallback.finding === "missing")
+                fallback = { status: "fail", finding: "lookup-failed", host, record: null };
+            continue;
+        }
+        if (answer.kind === "none")
+            continue;
+        const record = answer.records.find((candidate) => /(^|;)\s*p=/i.test(candidate));
+        if (record === undefined)
+            continue;
+        const key = /(?:^|;)\s*p=([^;]*)/i.exec(record)?.[1]?.trim() ?? "";
+        if (key !== "")
+            return { status: "pass", finding: "found", host, record };
+        fallback = { status: "fail", finding: "revoked", host, record };
+    }
+    return fallback;
+}
+/**
+ * `_dmarc.<domain>`, or the nearest parent's record (the organisational domain's policy, with
+ * `sp=` for subdomains when it is set). `p=none` only reports; it protects nothing.
+ */
+async function checkDmarc(lookup, domain) {
+    const labels = domain.split(".");
+    const first = `_dmarc.${domain}`;
+    for (let index = 0; index <= labels.length - 2; index += 1) {
+        const host = `_dmarc.${labels.slice(index).join(".")}`;
+        const answer = await lookup(host);
+        if (answer.kind === "error")
+            return { status: "fail", finding: "lookup-failed", host, record: null };
+        if (answer.kind === "none")
+            continue;
+        const records = answer.records.filter((record) => startsWithTag(record, "v=dmarc1"));
+        if (records.length > 1)
+            return { status: "fail", finding: "multiple", host, record: null };
+        const record = records[0];
+        if (record === undefined)
+            continue;
+        const inherited = host !== first;
+        const tag = (name) => new RegExp(`(?:^|;)\\s*${name}=([^;]*)`, "i").exec(record)?.[1]?.trim().toLowerCase();
+        const policy = (inherited ? (tag("sp") ?? tag("p")) : tag("p")) ?? "none";
+        if (policy === "none")
+            return { status: "warn", finding: "monitor-only", host, record };
+        return inherited ? { status: "pass", finding: "inherited", host, record } : { status: "pass", finding: "found", host, record };
+    }
+    return { status: "fail", finding: "missing", host: first, record: null };
+}
+//# sourceMappingURL=dns.js.map

package/dist/server/dns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns.js","sourceRoot":"","sources":["../../src/server/dns.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gGAAgG;AAChG,6FAA6F;AAC7F,OAAO,EAAE,UAAU,IAAI,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AA2CpE,MAAM,CAAC,MAAM,sBAAsB,GAAsB,CAAC,QAAQ,CAAC,CAAC;AAEpE,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc,EAAE,UAAiC,EAAE;IACtF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC;IAC3D,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,QAAQ,eAAe,IAAI,EAAE,CAAC,CAAC;QACxH,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC;KACzB,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC5C,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,gGAAgG;IAChG,wDAAwD;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAC1E,CAAC;AAKD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAEtE,KAAK,UAAU,SAAS,CAAC,UAAsB,EAAE,IAAY;IAC3D,IAAI,CAAC;QACH,oEAAoE;QACpE,MAAM,OAAO,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1E,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAChF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAAmC,EAAE,IAAI,CAAC;QACxD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACtG,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,GAAW;IAChD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,6FAA6F;AAC7F,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,KAAwB;IAC9D,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,YAAY,KAAK,IAAI,CAAC;YACtB,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzH,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC3F,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnI,CAAC;IACD,OAAO,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC7L,CAAC;AAED,+FAA+F;AAC/F,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,KAAwB;IAC/D,IAAI,QAAQ,GAAa,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS;gBAAE,QAAQ,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAChH,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACjF,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACnE,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1E,QAAQ,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAClE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,MAAc;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,MAAM,EAAE,CAAC;IACjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,UAAU,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACrG,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACrC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QACrF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC3F,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,MAAM,SAAS,GAAG,IAAI,KAAK,KAAK,CAAC;QACjC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,cAAc,IAAI,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpH,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC;QAC1E,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACxF,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACjI,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC3E,CAAC"}

package/dist/server/health.d.ts

@@ -0,0 +1,3 @@
+import { type HealthCheck } from "@softure-ai/core";
+export declare const checkMailingTables: HealthCheck;
+//# sourceMappingURL=health.d.ts.map

package/dist/server/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/server/health.ts"],"names":[],"mappings":"AAEA,OAAO,EAAM,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAIxD,eAAO,MAAM,kBAAkB,EAAE,WAOhC,CAAC"}

package/dist/server/health.js

@@ -0,0 +1,13 @@
+// The module's readiness probe for `GET /api/health` of `@softure-ai/ops`: the suppression list,
+// the campaigns and the delivery ledger exist and answer, i.e. `softure migrate` ran. It reads no rows.
+import { ok } from "@softure-ai/core";
+import { sql } from "drizzle-orm";
+export const checkMailingTables = async (context) => {
+    // Core types `db` as unknown; the health route passes the @softure-ai/db handle.
+    const db = context.db;
+    await db.execute(sql `select 1 from mailing.suppressions limit 0`);
+    await db.execute(sql `select 1 from mailing.campaigns limit 0`);
+    await db.execute(sql `select 1 from mailing.deliveries limit 0`);
+    return ok();
+};
+//# sourceMappingURL=health.js.map

package/dist/server/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/server/health.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,wGAAwG;AACxG,OAAO,EAAE,EAAE,EAAoB,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,MAAM,CAAC,MAAM,kBAAkB,GAAgB,KAAK,EAAE,OAAO,EAAE,EAAE;IAC/D,iFAAiF;IACjF,MAAM,EAAE,GAAG,OAAO,CAAC,EAAe,CAAC;IACnC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,4CAA4C,CAAC,CAAC;IAClE,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,yCAAyC,CAAC,CAAC;IAC/D,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,0CAA0C,CAAC,CAAC;IAChE,OAAO,EAAE,EAAE,CAAC;AACd,CAAC,CAAC"}

package/dist/server/index.d.ts

@@ -0,0 +1,12 @@
+export { getCampaignProblems, parseCampaignFile, parseRecipientList, type CampaignContent, type CampaignFile, type CampaignFileResult } from "./campaign-file.js";
+export { getCampaignContentHash, planCampaign, registerCampaign, sendCampaign, type CampaignErrorCode, type CampaignPlan, type CampaignSummary, type SendCampaignOptions, } from "./campaigns.js";
+export { DEFAULT_MAX_ATTEMPTS, DEFAULT_STALE_CLAIM_MS, deliverOnce, type DeliverOptions, type Delivery, type DeliveryContext, type DeliveryOutcome, } from "./deliveries.js";
+export { checkSenderDns, DEFAULT_DKIM_SELECTORS, getSenderDomain, type CheckSenderDnsOptions, type DnsCheck, type DnsCheckStatus, type DnsFinding, type ResolveTxt, type SenderDnsReport, } from "./dns.js";
+export { checkMailingTables } from "./health.js";
+export { addHtmlFooter, addTextFooter, getListUnsubscribeHeaders, SIGNATURE_SEPARATOR } from "./list-mail.js";
+export { getMailingModule, getMailingOptions, getMailingRoutes, type MailingRoutes } from "./options.js";
+export { sendMail, type MailContext } from "./send-mail.js";
+export { isSuppressed, liftSuppression, suppressRecipient, unsubscribe, type SuppressionContext } from "./suppressions.js";
+export { buildUnsubscribeLinks, getRecipientKey, MIN_UNSUBSCRIBE_SECRET_LENGTH, readUnsubscribeSecrets, readUnsubscribeToken, RECIPIENT_PARAM, signRecipientKey, SIGNATURE_PARAM, UNSUBSCRIBE_PREVIOUS_SECRET_ENV, UNSUBSCRIBE_SECRET_ENV, verifyUnsubscribeToken, type Env, type UnsubscribeLinks, type UnsubscribeSecrets, type UnsubscribeToken, } from "./unsubscribe-link.js";
+export { validateMail, type MailValidation, type ValidMail } from "./validate-mail.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,KAAK,eAAe,EAAE,KAAK,YAAY,EAAE,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAClK,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,mBAAmB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,WAAW,EACX,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,KAAK,qBAAqB,EAC1B,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,eAAe,GACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC9G,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AACzG,OAAO,EAAE,QAAQ,EAAE,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC3H,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,6BAA6B,EAC7B,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,+BAA+B,EAC/B,sBAAsB,EACtB,sBAAsB,EACtB,KAAK,GAAG,EACR,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,KAAK,cAAc,EAAE,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,14 @@
+// Server-only logic of @softure-ai/mailing. Functions receive a context and never read request
+// scope; `next/*` imports are not allowed here (ESLint `no-restricted-imports`, NFR-3).
+export { getCampaignProblems, parseCampaignFile, parseRecipientList } from "./campaign-file.js";
+export { getCampaignContentHash, planCampaign, registerCampaign, sendCampaign, } from "./campaigns.js";
+export { DEFAULT_MAX_ATTEMPTS, DEFAULT_STALE_CLAIM_MS, deliverOnce, } from "./deliveries.js";
+export { checkSenderDns, DEFAULT_DKIM_SELECTORS, getSenderDomain, } from "./dns.js";
+export { checkMailingTables } from "./health.js";
+export { addHtmlFooter, addTextFooter, getListUnsubscribeHeaders, SIGNATURE_SEPARATOR } from "./list-mail.js";
+export { getMailingModule, getMailingOptions, getMailingRoutes } from "./options.js";
+export { sendMail } from "./send-mail.js";
+export { isSuppressed, liftSuppression, suppressRecipient, unsubscribe } from "./suppressions.js";
+export { buildUnsubscribeLinks, getRecipientKey, MIN_UNSUBSCRIBE_SECRET_LENGTH, readUnsubscribeSecrets, readUnsubscribeToken, RECIPIENT_PARAM, signRecipientKey, SIGNATURE_PARAM, UNSUBSCRIBE_PREVIOUS_SECRET_ENV, UNSUBSCRIBE_SECRET_ENV, verifyUnsubscribeToken, } from "./unsubscribe-link.js";
+export { validateMail } from "./validate-mail.js";
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,wFAAwF;AACxF,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,kBAAkB,EAAoE,MAAM,oBAAoB,CAAC;AAClK,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,EAChB,YAAY,GAKb,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,WAAW,GAKZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,eAAe,GAOhB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC9G,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAsB,MAAM,cAAc,CAAC;AACzG,OAAO,EAAE,QAAQ,EAAoB,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAA2B,MAAM,mBAAmB,CAAC;AAC3H,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,6BAA6B,EAC7B,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,+BAA+B,EAC/B,sBAAsB,EACtB,sBAAsB,GAKvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAuC,MAAM,oBAAoB,CAAC"}

package/dist/server/list-mail.d.ts

@@ -0,0 +1,20 @@
+import type { MailingMessages } from "../messages/index.js";
+import type { UnsubscribeLinks } from "./unsubscribe-link.js";
+/** The signature separator (RFC 3676): mail clients fold what follows it. */
+export declare const SIGNATURE_SEPARATOR = "-- ";
+type FooterCopy = MailingMessages["footer"];
+/** `text` with the unsubscribe footer under the signature separator. */
+export declare function addTextFooter(text: string, links: UnsubscribeLinks, copy: FooterCopy): string;
+/**
+ * `html` with an unsubscribe paragraph before its last `</body>`, or appended when it has none
+ * (a fragment). The copy is escaped; the link is ours and only needs its `&` escaped.
+ */
+export declare function addHtmlFooter(html: string, links: UnsubscribeLinks, copy: FooterCopy): string;
+/**
+ * RFC 8058: the mail client shows "Unsubscribe" next to the sender and POSTs to this URL itself,
+ * without opening a page or a session. Both headers must be covered by the DKIM signature, which
+ * the provider applies to every header it sends.
+ */
+export declare function getListUnsubscribeHeaders(links: UnsubscribeLinks): Record<string, string>;
+export {};
+//# sourceMappingURL=list-mail.d.ts.map

package/dist/server/list-mail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-mail.d.ts","sourceRoot":"","sources":["../../src/server/list-mail.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,6EAA6E;AAC7E,eAAO,MAAM,mBAAmB,QAAQ,CAAC;AAEzC,KAAK,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;AAE5C,wEAAwE;AACxE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,CAE7F;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,CAK7F;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAKzF"}

package/dist/server/list-mail.js

@@ -0,0 +1,31 @@
+/** The signature separator (RFC 3676): mail clients fold what follows it. */
+export const SIGNATURE_SEPARATOR = "-- ";
+/** `text` with the unsubscribe footer under the signature separator. */
+export function addTextFooter(text, links, copy) {
+    return [text, "", SIGNATURE_SEPARATOR, copy.text, links.page].join("\n");
+}
+/**
+ * `html` with an unsubscribe paragraph before its last `</body>`, or appended when it has none
+ * (a fragment). The copy is escaped; the link is ours and only needs its `&` escaped.
+ */
+export function addHtmlFooter(html, links, copy) {
+    const footer = `<p>${escapeHtml(copy.htmlLead)} <a href="${escapeHtml(links.page)}">${escapeHtml(copy.htmlLink)}</a></p>`;
+    // Searched on the original string: lowercasing can change its length (`İ` becomes two characters).
+    const bodyEnd = [...html.matchAll(/<\/body>/gi)].at(-1)?.index;
+    return bodyEnd === undefined ? `${html}\n${footer}` : `${html.slice(0, bodyEnd)}${footer}\n${html.slice(bodyEnd)}`;
+}
+/**
+ * RFC 8058: the mail client shows "Unsubscribe" next to the sender and POSTs to this URL itself,
+ * without opening a page or a session. Both headers must be covered by the DKIM signature, which
+ * the provider applies to every header it sends.
+ */
+export function getListUnsubscribeHeaders(links) {
+    return {
+        "List-Unsubscribe": `<${links.oneClick}>`,
+        "List-Unsubscribe-Post": "List-Unsubscribe=One-Click",
+    };
+}
+function escapeHtml(text) {
+    return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+//# sourceMappingURL=list-mail.js.map

package/dist/server/list-mail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-mail.js","sourceRoot":"","sources":["../../src/server/list-mail.ts"],"names":[],"mappings":"AAMA,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAIzC,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAuB,EAAE,IAAgB;IACnF,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAuB,EAAE,IAAgB;IACnF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC1H,mGAAmG;IACnG,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IAC/D,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;AACrH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAuB;IAC/D,OAAO;QACL,kBAAkB,EAAE,IAAI,KAAK,CAAC,QAAQ,GAAG;QACzC,uBAAuB,EAAE,4BAA4B;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACzG,CAAC"}

package/dist/server/options.d.ts

@@ -0,0 +1,14 @@
+import { type AnySoftureModule, type SoftureConfig } from "@softure-ai/core";
+import type { MailingOptions } from "../options.js";
+/** The paths of the unsubscribe page and the one-click route (overridable in `mailing({ routes })`). */
+export interface MailingRoutes {
+    readonly unsubscribe: string;
+    readonly oneClick: string;
+}
+/** The enabled module. Throws when the app did not enable it: sending then is a bug. */
+export declare function getMailingModule(config: SoftureConfig): AnySoftureModule;
+/** The module's options. Throws when the app did not enable it. */
+export declare function getMailingOptions(config: SoftureConfig): MailingOptions;
+/** The module's routes, with the app's overrides. Throws when the app did not enable it. */
+export declare function getMailingRoutes(config: SoftureConfig): MailingRoutes;
+//# sourceMappingURL=options.d.ts.map

package/dist/server/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../src/server/options.ts"],"names":[],"mappings":"AACA,OAAO,EAAa,KAAK,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD,wGAAwG;AACxG,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,wFAAwF;AACxF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,gBAAgB,CAMxE;AAED,mEAAmE;AACnE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,aAAa,GAAG,cAAc,CAGvE;AAED,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,CAGrE"}