@softure-ai/mailing 0.2.0 → 0.2.2

package/dist/server/send-mail.js.map

@@ -1 +1 @@
-{"version":3,"file":"send-mail.js","sourceRoot":"","sources":["../../src/server/send-mail.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,oGAAoG;AACpG,mGAAmG;AACnG,mHAAmH;AACnH,8FAA8F;AAC9F,OAAO,EAAE,GAAG,EAAY,EAAE,EAAW,cAAc,EAAsB,MAAM,kBAAkB,CAAC;AAElG,OAAO,EACL,kBAAkB,GASnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,sBAAsB,EAAE,sBAAsB,EAAY,MAAM,uBAAuB,CAAC;AACvJ,OAAO,EAAE,YAAY,EAAkB,MAAM,oBAAoB,CAAC;AAWlE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAoB,EAAE,IAAkB,EAAE,UAA2B,EAAE;IACpG,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAElE,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,UAAU,CAAC,QAAQ,EAAE,uBAAuB,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAC/B,MAAM,MAAM,GAAG,sBAAsB,EAAE,CAAC,OAAO,CAAC;IAChD,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC5D,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9D,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IACvG,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3D,OAAO,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AACzG,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,MAAqB,EAAE,IAAkB,EAAE,UAA8B,EAAE;IACrG,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,GAAG,GAAG,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;IAC1F,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;IACnD,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,GAAG,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;IAC9I,OAAO,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,aAAa,GAA8D;IAC/E,QAAQ,EAAE,kBAAkB;IAC5B,WAAW,EAAE,qBAAqB;IAClC,OAAO,EAAE,0BAA0B;IACnC,cAAc,EAAE,wBAAwB;CACzC,CAAC;AAIF;;;GAGG;AACH,KAAK,UAAU,aAAa,CAAC,OAAoB,EAAE,IAAe,EAAE,MAAqB;IACvF,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,4BAA4B,sBAAsB,cAAc,MAAM,CAAC,6BAA6B,CAAC,wCAAwC,CAAC,CAAC;QAC7J,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,YAAY,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3H,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC5E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,MAAqB,EAAE,IAAe,EAAE,MAAqB;IACnF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC;IACxE,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,IAAI,OAAO,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;IACnF,IAAI,IAAI,KAAK,kBAAkB,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IACvF,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC7D,+EAA+E;IAC/E,MAAM,IAAI,GAAI,cAAc,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAqB,CAAC,MAAM,CAAC;IAC1G,OAAO;QACL,GAAG,QAAQ;QACX,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC;QAC3C,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC;QACvE,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,yBAAyB,CAAC,KAAK,CAAC,EAAE;KAClE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,YAAY,CAAC,QAAsB,EAAE,OAA4C,EAAE,SAAiB;IACjH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAgD,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,EAAE;QACvD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,8CAA8C,EAAE,cAAc,CAAC,CAAC,CAAC;YACnG,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QACrC,CAAC,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,QAAQ;SACrB,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;SAC5C,IAAI,CAAC,WAAW,EAAE,GAAoB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACtF,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,OAAmE,CAAC;IACvG,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;QACvE,MAAM,OAAO,GAAG,MAA+B,CAAC;QAChD,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,CAAC;AAC9F,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CACjB,QAAsB,EACtB,IAAsB,EACtB,OAAmG;IAEnG,MAAM,KAAK,GAAG,CAAC,YAAY,QAAQ,CAAC,IAAI,EAAE,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnK,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnF,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,KAAK,CAAC,wBAAwB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"send-mail.js","sourceRoot":"","sources":["../../src/server/send-mail.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,oGAAoG;AACpG,mGAAmG;AACnG,mHAAmH;AACnH,8FAA8F;AAC9F,OAAO,EAAE,GAAG,EAAY,EAAE,EAAW,cAAc,EAAsB,MAAM,kBAAkB,CAAC;AAElG,OAAO,EACL,kBAAkB,GASnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,sBAAsB,EAAE,sBAAsB,EAAY,MAAM,uBAAuB,CAAC;AACvJ,OAAO,EAAE,YAAY,EAAkB,MAAM,oBAAoB,CAAC;AAWlE;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAoB,EAAE,IAAkB,EAAE,UAA2B,EAAE;IACpG,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAElE,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,UAAU,CAAC,QAAQ,EAAE,uBAAuB,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAC/B,MAAM,MAAM,GAAG,sBAAsB,EAAE,CAAC,OAAO,CAAC;IAChD,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC5D,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9D,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IACvG,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3D,OAAO;QACL,GAAG,GAAG,CAAC,IAAI,CAAC;QACZ,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;QAC/E,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC;KACrG,CAAC;AACJ,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,MAAqB,EAAE,IAAkB,EAAE,UAA8B,EAAE;IACrG,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,GAAG,GAAG,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;IAC1F,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;IACnD,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,GAAG,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;IAC9I,OAAO,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,aAAa,GAA8D;IAC/E,QAAQ,EAAE,kBAAkB;IAC5B,WAAW,EAAE,qBAAqB;IAClC,OAAO,EAAE,0BAA0B;IACnC,cAAc,EAAE,wBAAwB;CACzC,CAAC;AAIF;;;GAGG;AACH,KAAK,UAAU,aAAa,CAAC,OAAoB,EAAE,IAAe,EAAE,MAAqB;IACvF,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,4BAA4B,sBAAsB,cAAc,MAAM,CAAC,6BAA6B,CAAC,wCAAwC,CAAC,CAAC;QAC7J,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,YAAY,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3H,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC5E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,MAAqB,EAAE,IAAe,EAAE,MAAqB;IACnF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC;IACxE,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,IAAI,OAAO,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;IACnF,IAAI,IAAI,KAAK,kBAAkB,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IACvF,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC7D,+EAA+E;IAC/E,MAAM,IAAI,GAAI,cAAc,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAqB,CAAC,MAAM,CAAC;IAC1G,OAAO;QACL,GAAG,QAAQ;QACX,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC;QAC3C,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC;QACvE,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,yBAAyB,CAAC,KAAK,CAAC,EAAE;KAClE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,YAAY,CAAC,QAAsB,EAAE,OAA4C,EAAE,SAAiB;IACjH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAgD,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,EAAE;QACvD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,8CAA8C,EAAE,cAAc,CAAC,CAAC,CAAC;YACnG,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QACrC,CAAC,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,QAAQ;SACrB,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;SAC5C,IAAI,CAAC,WAAW,EAAE,GAAoB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACtF,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,OAAgG,CAAC;IACvJ,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;QACvE,OAAO;YACL,MAAM,EAAE,MAA+B;YACvC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACnC,CAAC;AAED,6EAA6E;AAC7E,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,CAAC;AAC9F,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CACjB,QAAsB,EACtB,IAAsB,EACtB,OAAmG;IAEnG,MAAM,KAAK,GAAG,CAAC,YAAY,QAAQ,CAAC,IAAI,EAAE,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnK,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnF,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,KAAK,CAAC,wBAAwB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC3D,CAAC"}

package/module.json

@@ -1,7 +1,7 @@
 {
   "id": "mailing",
-  "version": "0.2.0",
-  "dependsOn": {},
+  "version": "0.2.2",
+  "dependsOn": { "jobs": "*?" },
   "dbSchema": "mailing",
   "tables": ["suppressions", "campaigns", "deliveries"],
   "env": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softure-ai/mailing",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "SOFTURE AI mailing module: sendMail over a provider adapter (Resend first) with plain-text and HTML bodies, sender and reply-to from config, idempotency keys, a timeout and a typed result; signed one-click unsubscribe (RFC 8058) with a suppression list for list mail; an exactly-once delivery ledger, campaigns sent from a content file by the softure-mail command, and a sender DNS check; a fake provider for tests.",
   "license": "MIT",
   "type": "module",
@@ -54,6 +54,11 @@
       "@softure-ai/source": "./src/cli/index.ts",
       "types": "./dist/cli/index.d.ts",
       "default": "./dist/cli/index.js"
+    },
+    "./jobs": {
+      "@softure-ai/source": "./src/jobs/index.ts",
+      "types": "./dist/jobs/index.d.ts",
+      "default": "./dist/jobs/index.js"
     }
   },
   "scripts": {
@@ -65,11 +70,17 @@
     "zod": "^4.6.5"
   },
   "peerDependencies": {
+    "@softure-ai/jobs": "^0.1.0",
     "@softure-ai/ui": "^0.3.0",
     "drizzle-orm": "^0.45.2",
     "next": "^16.0.0",
     "react": "^19.0.0"
   },
+  "peerDependenciesMeta": {
+    "@softure-ai/jobs": {
+      "optional": true
+    }
+  },
   "devDependencies": {
     "@softure-ai/ui": "^0.3.0"
   }

package/src/contract.ts

@@ -20,6 +20,13 @@ export type MailingErrorCode =
   /** The account's sending quota is spent (HTTP 429 that is not a rate limit). Stop sending; retry when it renews. */
   | "mailing.quota_exceeded";
 
+/** The codes a delivery job fails or retries with that are not a provider's answer (`@softure-ai/mailing/jobs`). */
+export type DeliveryJobErrorCode =
+  /** Another sender holds a fresh claim on the delivery; the job looks again once that claim could be stale. */
+  | "mailing.delivery_in_flight"
+  /** A claim older than the provider keeps its idempotency key is open: the mail may have gone out. Not retried. */
+  | "mailing.delivery_uncertain";
+
 /** The codes that are about the sending account, not the mail: a run of sends stops at the first one. */
 export const HALTING_ERROR_CODES: ReadonlySet<MailingErrorCode> = new Set(["mailing.provider_refused", "mailing.quota_exceeded"]);
 
@@ -149,8 +156,11 @@ export interface SentMail {
   readonly provider: string;
 }
 
-/** A failed send: the code, and the provider's HTTP status when it answered with one. */
-export type SendMailFailure = Err<MailingErrorCode> & { readonly httpStatus?: number };
+/**
+ * A failed send: the code, the provider's HTTP status when it answered with one, and how many seconds it asked to
+ * wait before the next try when it said so (`Retry-After`).
+ */
+export type SendMailFailure = Err<MailingErrorCode> & { readonly httpStatus?: number; readonly retryAfterSeconds?: number };
 
 export type SendMailResult = Ok<SentMail> | SendMailFailure;
 
@@ -169,10 +179,11 @@ export interface ProviderMessage {
 /**
  * What a provider answers. `httpStatus` is logged and returned with the failure; the mail never is. `refused` is the
  * provider refusing the sender (key, account), `quota_exceeded` a spent sending quota; `rejected` is about this mail.
+ * `retryAfterSeconds` is the wait the provider asked for (`Retry-After`), a whole number of seconds, 0 or more.
  */
 export type ProviderOutcome =
   | { readonly status: "sent"; readonly id: string }
-  | { readonly status: ProviderFailureStatus; readonly httpStatus?: number };
+  | { readonly status: ProviderFailureStatus; readonly httpStatus?: number; readonly retryAfterSeconds?: number };
 
 export type ProviderFailureStatus = "rejected" | "unavailable" | "refused" | "quota_exceeded";
 

package/src/index.ts

@@ -17,8 +17,8 @@ export const MODULE_ID = "mailing";
 export const mailing = defineModule({
   manifest: {
     id: MODULE_ID,
-    version: "0.2.0",
-    dependsOn: {},
+    version: "0.2.2",
+    dependsOn: { jobs: "*?" },
     dbSchema: "mailing",
     tables: ["suppressions", "campaigns", "deliveries"],
     env: [
@@ -69,6 +69,7 @@ export type {
   CampaignRecipient,
   CampaignRecipientFilter,
   CampaignRecipientSource,
+  DeliveryJobErrorCode,
   LegacyUnsubscribe,
   LegacyUnsubscribeParams,
   MailingErrorCode,
@@ -89,5 +90,5 @@ export type {
 } from "./contract.js";
 export { getMailingErrorMessage, mailingMessages, type MailingMessages } from "./messages/index.js";
 export { DEFAULT_STALE_CLAIM_MS, DEFAULT_TIMEOUT_MS, DEFAULT_UNCERTAIN_CLAIM_MS, type MailingOptions, type MailingOptionsInput } from "./options.js";
-export { resend, RESEND_API_KEY_ENV, RESEND_ENDPOINT, type ResendOptions } from "./providers/resend.js";
+export { readRetryAfter, resend, RESEND_API_KEY_ENV, RESEND_ENDPOINT, type ResendOptions } from "./providers/resend.js";
 export { campaigns, deliveries, mailingSchema, suppressions, type DeliveryStatus } from "./schema.js";

package/src/jobs/delivery-job.ts

@@ -0,0 +1,129 @@
+// Deliveries through @softure-ai/jobs: the app enqueues a delivery in its own transaction and the jobs worker sends
+// it, retrying while the provider is unavailable. The job runs at least once; the delivery ledger and its idempotency
+// key make the mail go out once. The job payload holds the ledger scope and the app's ids, never the mail: the
+// handler builds the mail from the app's data when it runs.
+import { err, ok, type Ok } from "@softure-ai/core";
+import { defineJobHandler, failJob, retryJobLater, type JobFailure, type JobHandler, type JobHandlerContext } from "@softure-ai/jobs";
+import { enqueueJob, type EnqueuedJob, type JobsContext } from "@softure-ai/jobs/server";
+import { z } from "zod";
+import type { OutgoingMail } from "../contract.js";
+export type { DeliveryJobErrorCode } from "../contract.js";
+
+/** What a delivery job returns: done, or a failure the jobs worker retries or fails. */
+export type DeliveryJobResult = Ok<undefined> | JobFailure;
+import { deliverOnce, isDeliveryScope, type DeliverOptions, type DeliveryOutcome } from "../server/deliveries.js";
+import { getMailingOptions } from "../server/options.js";
+
+export interface EnqueueDeliveryInput<TPayload> {
+  /** A queue defined in `jobs({ queues })` whose handler is a `defineDeliveryJobHandler`. */
+  readonly queue: string;
+  /**
+   * The ledger scope of the mail (`deliverOnce`'s `scope`), e.g. `auth.password-reset:<request id>`. Also the job's
+   * dedup key: while a job for this scope is pending or running, a second enqueue returns it.
+   */
+  readonly scope: string;
+  /** The app's ids the handler builds the mail from. JSON; no addresses, names or tokens. */
+  readonly payload: TPayload;
+  /** When the job becomes due; default now. Not together with `delaySeconds`. */
+  readonly runAt?: Date;
+  readonly delaySeconds?: number;
+  /** Overrides the queue's `maxAttempts` for this job. */
+  readonly maxAttempts?: number;
+}
+
+/**
+ * Enqueues a delivery. Pass the caller's transaction as `ctx.db`, so the job exists exactly when the caller's own
+ * change commits. Throws for a malformed scope, and like `enqueueJob` (an unknown queue, a database failure).
+ */
+export async function enqueueDelivery<TPayload>(ctx: JobsContext, input: EnqueueDeliveryInput<TPayload>): Promise<EnqueuedJob> {
+  if (!isDeliveryScope(input.scope)) {
+    throw new Error(`@softure-ai/mailing: enqueueDelivery scope "${input.scope}" must be lowercase letters, digits and ._:- (at most 128 characters)`);
+  }
+  return enqueueJob(ctx, {
+    queue: input.queue,
+    payload: { scope: input.scope, payload: input.payload },
+    dedupKey: input.scope,
+    ...(input.runAt === undefined ? {} : { runAt: input.runAt }),
+    ...(input.delaySeconds === undefined ? {} : { delaySeconds: input.delaySeconds }),
+    ...(input.maxAttempts === undefined ? {} : { maxAttempts: input.maxAttempts }),
+  });
+}
+
+/** What `buildMail` receives besides the app's payload: the job's context and the delivery's scope. */
+export interface DeliveryJobContext extends JobHandlerContext {
+  readonly scope: string;
+}
+
+export interface DeliveryJobHandlerOptions<TSchema extends z.ZodType> {
+  /** The schema of the app's payload (the `payload` given to `enqueueDelivery`). */
+  readonly payload: TSchema;
+  /**
+   * Builds the mail from the app's data. Called on every attempt, before the ledger is read, so it must have no side
+   * effects and return the same mail each time: a different body under the same idempotency key is refused by the
+   * provider. Return `null` when there is nothing to send any more (the account is gone); the job then succeeds.
+   */
+  readonly buildMail: (payload: z.output<TSchema>, context: DeliveryJobContext) => Promise<OutgoingMail | null>;
+  /** The ledger's claim windows; `maxAttempts` is the job's, so the ledger does not count attempts here. */
+  readonly deliverOptions?: Omit<DeliverOptions, "maxAttempts">;
+}
+
+/**
+ * A jobs handler that sends one delivery through the ledger (`deliverOnce`) and turns its outcome into the job's
+ * (`getDeliveryJobResult`). Register it for the queue `enqueueDelivery` writes to:
+ *
+ *   export const handlers: JobHandlers = {
+ *     "mail.welcome": defineDeliveryJobHandler({ payload: z.object({ userId: z.string() }), buildMail: buildWelcomeMail }),
+ *   };
+ */
+export function defineDeliveryJobHandler<TSchema extends z.ZodType>(
+  options: DeliveryJobHandlerOptions<TSchema>,
+): JobHandler<{ scope: string; payload: z.output<TSchema> }> {
+  // The cast keeps the payload's own output type, which zod's object inference widens for a generic schema.
+  const schema = z.object({
+    scope: z.string().refine(isDeliveryScope),
+    payload: options.payload,
+  }) as unknown as z.ZodType<{ scope: string; payload: z.output<TSchema> }>;
+  return defineJobHandler({
+    payload: schema,
+    run: async ({ scope, payload }, context) => {
+      const mail = await options.buildMail(payload, { ...context, scope });
+      if (mail === null) return ok();
+      const outcome = await deliverOnce(context, { scope, mail }, { ...options.deliverOptions, maxAttempts: null });
+      const staleClaimMs = options.deliverOptions?.staleClaimMs ?? getMailingOptions(context.config).staleClaimMs;
+      return getDeliveryJobResult(outcome, { staleClaimMs });
+    },
+  });
+}
+
+/**
+ * Turns a `deliverOnce` outcome into a job result, for an app that writes its own handler:
+ *
+ * - `sent`, `done`: done.
+ * - `rejected` (invalid, suppressed, refused mail): failed at once with its reason.
+ * - `retry-later`, `halted` (the provider is down, the account refused or out of quota): retried after the provider's
+ *   `Retry-After`, else after the queue's backoff.
+ * - `in-flight`: retried once the other sender's claim could be stale (`staleClaimMs`).
+ * - `uncertain`: failed with `mailing.delivery_uncertain`; the operator decides whether to send it again.
+ */
+export function getDeliveryJobResult(outcome: DeliveryOutcome, options: { readonly staleClaimMs: number }): DeliveryJobResult {
+  switch (outcome.status) {
+    case "sent":
+    case "done":
+      return ok();
+    case "rejected":
+      return failJob(outcome.reason);
+    case "retry-later":
+      return retryAfter("mailing.unavailable", outcome.retryAfterSeconds);
+    case "halted":
+      return retryAfter(outcome.reason, outcome.retryAfterSeconds);
+    case "in-flight":
+      // One second past the window: a claim exactly `staleClaimMs` old is still fresh.
+      return retryJobLater("mailing.delivery_in_flight", Math.ceil(options.staleClaimMs / 1000) + 1);
+    case "uncertain":
+      return failJob("mailing.delivery_uncertain");
+  }
+}
+
+function retryAfter(code: "mailing.unavailable" | "mailing.provider_refused" | "mailing.quota_exceeded", seconds: number | undefined): DeliveryJobResult {
+  return seconds === undefined ? err(code) : retryJobLater(code, seconds);
+}

package/src/jobs/index.ts

@@ -0,0 +1,12 @@
+// The jobs adapter of @softure-ai/mailing: deliveries sent by the @softure-ai/jobs worker, with retries (an optional
+// peer dependency; only apps that import this entry need it).
+export {
+  defineDeliveryJobHandler,
+  enqueueDelivery,
+  getDeliveryJobResult,
+  type DeliveryJobContext,
+  type DeliveryJobErrorCode,
+  type DeliveryJobHandlerOptions,
+  type DeliveryJobResult,
+  type EnqueueDeliveryInput,
+} from "./delivery-job.js";

package/src/messages/en.ts

@@ -7,6 +7,8 @@ export const en = {
       suppressed: "This address unsubscribed from these emails, so nothing was sent.",
       provider_refused: "The mail service refused our account, so nothing was sent. We need to fix it on our side.",
       quota_exceeded: "We reached our sending limit for now. Try again later.",
+      delivery_in_flight: "This message is being sent right now.",
+      delivery_uncertain: "This message may already have been sent. Check before sending it again.",
     },
   },
   footer: {

package/src/messages/index.ts

@@ -1,4 +1,4 @@
-import type { MailingErrorCode } from "../contract.js";
+import type { DeliveryJobErrorCode, MailingErrorCode } from "../contract.js";
 import { en } from "./en.js";
 
 /** The built-in English dictionary; an app passes partial overrides or its own translation per locale. */
@@ -7,7 +7,7 @@ export const mailingMessages = { en };
 export type MailingMessages = typeof en;
 
 /** The copy for a mailing error code; a code the dictionary does not know reads as `unavailable`. */
-export function getMailingErrorMessage(messages: MailingMessages, code: MailingErrorCode): string {
+export function getMailingErrorMessage(messages: MailingMessages, code: MailingErrorCode | DeliveryJobErrorCode): string {
   const group: Readonly<Record<string, string>> = messages.errors.mailing;
   const name = code.slice("mailing.".length);
   return (Object.hasOwn(group, name) ? group[name] : undefined) ?? messages.errors.mailing.unavailable;

package/src/next/actions.ts

@@ -1,34 +1,18 @@
 "use server";
 
-// The unsubscribe page's server action. It takes the signed link from the form (the same values
-// the page got in its URL), records the opt-out and redirects to the page's outcome. No session is
-// involved: the signature is the authorization. Next refuses an action whose Origin does not match
-// the host.
-import { errorLogLabel } from "@softure-ai/core";
+// The unsubscribe server action, for an app whose own form posts to it: it takes the signed link
+// from the form body, records the opt-out and redirects to the page's outcome. The package page
+// does not use it: a server action posts to the page's URL, which carries the link, so the page's
+// form posts to the one-click route's bare path instead (route.ts). Next refuses an action whose
+// Origin does not match the host.
 import { getSoftureConfig } from "@softure-ai/core/next";
 import { redirect } from "next/navigation";
-import { getMailingRoutes } from "../server/options.js";
-import { unsubscribe } from "../server/suppressions.js";
-import { getUnsubscribeLinkParams, readUnsubscribeLink } from "../server/unsubscribe-link.js";
+import { readUnsubscribeLink } from "../server/unsubscribe-link.js";
 import { getMailingContext } from "./context.js";
-import { UNSUBSCRIBE_STATUS_PARAM, type UnsubscribeStatus } from "./params.js";
+import { submitPageUnsubscribe } from "./page-submit.js";
 
 export async function unsubscribeAction(formData: FormData): Promise<void> {
   const config = getSoftureConfig();
   const link = readUnsubscribeLink(formData, config);
-  let status: UnsubscribeStatus;
-  try {
-    const result = await unsubscribe(await getMailingContext(config), link, "page");
-    status = result.ok ? "done" : "invalid";
-  } catch (error) {
-    // The label names the kind of failure, never its text: that can carry the link's values.
-    console.error(`@softure-ai/mailing: unsubscribe failed: ${errorLogLabel(error)}`);
-    status = "failed";
-  }
-  const query = new URLSearchParams({ [UNSUBSCRIBE_STATUS_PARAM]: status });
-  if (status === "failed" && link !== null) {
-    // The form comes back with the same link, so the person can try again.
-    for (const [name, value] of Object.entries(getUnsubscribeLinkParams(link))) query.set(name, value);
-  }
-  redirect(`${getMailingRoutes(config).unsubscribe}?${query.toString()}`);
+  redirect(await submitPageUnsubscribe({ config, link, getContext: () => getMailingContext(config) }));
 }

package/src/next/page-submit.ts

@@ -0,0 +1,35 @@
+// The page's submit, shared by the route (the package page's form posts there) and the server
+// action (for an app's own form): record the opt-out and name the page's outcome to send the
+// browser to. No session is involved: the signature is the authorization.
+import { errorLogLabel, type SoftureConfig } from "@softure-ai/core";
+import { getMailingRoutes } from "../server/options.js";
+import { unsubscribe, type SuppressionContext } from "../server/suppressions.js";
+import { getUnsubscribeLinkParams, type UnsubscribeLink } from "../server/unsubscribe-link.js";
+import { UNSUBSCRIBE_STATUS_PARAM, type UnsubscribeStatus } from "./params.js";
+
+export interface PageSubmit {
+  readonly config: SoftureConfig;
+  readonly link: UnsubscribeLink | null;
+  /** Opens the database; a failure there is a failed submit like any other. */
+  readonly getContext: () => Promise<SuppressionContext>;
+}
+
+/** Records the link from the page and returns the page's outcome URL (a path with its query). */
+export async function submitPageUnsubscribe({ config, link, getContext }: PageSubmit): Promise<string> {
+  let status: UnsubscribeStatus;
+  try {
+    const result = await unsubscribe(await getContext(), link, "page");
+    status = result.ok ? "done" : "invalid";
+  } catch (error) {
+    // The label names the kind of failure, never its text: that can carry the link's values.
+    console.error(`@softure-ai/mailing: unsubscribe failed: ${errorLogLabel(error)}`);
+    status = "failed";
+  }
+  const query = new URLSearchParams({ [UNSUBSCRIBE_STATUS_PARAM]: status });
+  if (status === "failed" && link !== null) {
+    // The form comes back with the same link, so the person can try again; the page strips it
+    // from the address bar again.
+    for (const [name, value] of Object.entries(getUnsubscribeLinkParams(link))) query.set(name, value);
+  }
+  return `${getMailingRoutes(config).unsubscribe}?${query.toString()}`;
+}

package/src/next/pages.tsx

@@ -1,17 +1,20 @@
 // The unsubscribe page, ready to mount with one line:
 // `export { UnsubscribePage as default } from "@softure-ai/mailing/next"`.
-// A server component without client JavaScript: the button is a plain form posting a server
-// action, so it works in any browser a mail client opens. Opening the page changes nothing (mail
-// scanners open links too) and does not check the signature: the submit does. It takes the
+// A server component: the button is a plain form posting the link, in hidden fields, to the
+// one-click route's bare path (route.ts), so it works without JavaScript in any browser a mail
+// client opens and the signed token never sits in a POST's request line. With JavaScript a small
+// client component also takes the link out of the address bar. Opening the page changes nothing
+// (mail scanners open links too) and does not check the signature: the submit does. It takes the
 // module's signed links and, with `mailing({ legacyUnsubscribe })`, the app's older ones: mount it
 // at the old links' path too.
 import { getSoftureConfig } from "@softure-ai/core/next";
 import { Button, Card, createSlotClassGetter, FormError, type ClassNames } from "@softure-ai/ui";
 import type { ComponentType, ReactNode } from "react";
+import { getMailingRoutes } from "../server/options.js";
 import { getUnsubscribeLinkParams, readUnsubscribeLink } from "../server/unsubscribe-link.js";
-import { unsubscribeAction } from "./actions.js";
 import { getMailingMessages } from "./messages.js";
 import { UNSUBSCRIBE_STATUS_PARAM } from "./params.js";
+import { StripLinkQuery } from "./strip-link-query.js";
 
 type SearchParams = Promise<Record<string, string | string[] | undefined>>;
 
@@ -111,7 +114,8 @@ async function renderUnsubscribePage(searchParams: SearchParams | undefined, opt
   const submit = slot("submit");
   return (
     <UnsubscribeLayout title={messages.title} lead={messages.lead} slot={slot} options={options}>
-      <form action={unsubscribeAction} className={slot("form")}>
+      <StripLinkQuery names={Object.keys(linkParams)} />
+      <form action={getMailingRoutes(config).oneClick} method="post" className={slot("form")}>
         {Object.entries(linkParams).map(([name, value]) => (
           <input key={name} type="hidden" name={name} value={value} />
         ))}

package/src/next/route.ts

@@ -8,27 +8,44 @@
 // purpose: a few provider addresses act for millions of people, so a bucket would refuse real
 // unsubscribes. The link is checked by shape and signature before the database is touched, and
 // the only write is an idempotent insert.
-import { errorLogLabel } from "@softure-ai/core";
+//
+// The package page's form posts here too, to the bare path with the link in its body, so the
+// signed token never sits in a POST's request line (a server action would post to the page's URL,
+// query included). No Origin check, as for a mail client: the signature is the authorization.
+import { errorLogLabel, type SoftureConfig } from "@softure-ai/core";
 import { getSoftureConfig } from "@softure-ai/core/next";
 import { getMailingOptions, getMailingRoutes } from "../server/options.js";
 import { unsubscribe } from "../server/suppressions.js";
-import { readUnsubscribeLink } from "../server/unsubscribe-link.js";
+import { readUnsubscribeLink, type UnsubscribeLink } from "../server/unsubscribe-link.js";
 import { getMailingContext } from "./context.js";
+import { submitPageUnsubscribe } from "./page-submit.js";
 
 const NO_STORE = { "cache-control": "no-store" };
 
 /**
- * Records the opt-out of the link in the URL. The body (`List-Unsubscribe=One-Click`) is not read:
+ * Records the opt-out of the link in the URL. Its body (`List-Unsubscribe=One-Click`) is not read:
  * anyone can send it, the signature is the proof. 200 once recorded (also again), 400 for a link
  * that does not verify (200 with `mailing({ oneClickInvalidLinkStatus: 200 })`, so the answer never
  * tells whether a token is live), 500 when the database fails: the client may retry, and 200 would
  * claim an opt-out that did not happen. A legacy link (`mailing({ legacyUnsubscribe })`) is handled the same
  * way; mount this route at the old link's path too.
+ *
+ * A POST without a link in the URL is the unsubscribe page's form: its link comes from the form
+ * body, and the answer is a 303 to the page's outcome (`?status=done`, `invalid` or `failed`).
  */
 export async function postUnsubscribeRoute(request: Request): Promise<Response> {
+  const config = getSoftureConfig();
+  const { searchParams } = new URL(request.url);
+  if (readUnsubscribeLink(searchParams, config) === null) {
+    const formLink = await readFormLink(request, config);
+    if (formLink !== null) {
+      const location = await submitPageUnsubscribe({ config, link: formLink, getContext: () => getMailingContext(config) });
+      return new Response(null, { status: 303, headers: { ...NO_STORE, location } });
+    }
+  }
   try {
     const ctx = await getMailingContext();
-    const link = readUnsubscribeLink(new URL(request.url).searchParams, ctx.config);
+    const link = readUnsubscribeLink(searchParams, ctx.config);
     const result = await unsubscribe(ctx, link, "one-click");
     return new Response(null, { status: result.ok ? 200 : getMailingOptions(ctx.config).oneClickInvalidLinkStatus, headers: NO_STORE });
   } catch (error) {
@@ -46,3 +63,41 @@ export function getUnsubscribeRoute(request: Request): Response {
   const { search } = new URL(request.url);
   return new Response(null, { status: 303, headers: { ...NO_STORE, location: `${getMailingRoutes(getSoftureConfig()).unsubscribe}${search}` } });
 }
+
+/**
+ * The page's form is URL-encoded and small (a signed link is about 100 bytes; a legacy one at most a few 512-character
+ * values). A larger body is no page submit, and is not read past this size.
+ */
+const MAX_FORM_BYTES = 8192;
+const FORM_CONTENT_TYPE = "application/x-www-form-urlencoded";
+
+/** The link in a URL-encoded form body, or null for any other body. */
+async function readFormLink(request: Request, config: SoftureConfig): Promise<UnsubscribeLink | null> {
+  if (request.headers.get("content-type")?.toLowerCase().startsWith(FORM_CONTENT_TYPE) !== true) return null;
+  const body = await readBoundedText(request, MAX_FORM_BYTES);
+  return body === null ? null : readUnsubscribeLink(new URLSearchParams(body), config);
+}
+
+/** The body as text, or null when it is longer than `maxBytes` (the rest is not read) or cannot be read. */
+async function readBoundedText(request: Request, maxBytes: number): Promise<string | null> {
+  if (request.body === null) return "";
+  const reader = request.body.getReader();
+  const chunks: Uint8Array[] = [];
+  let size = 0;
+  try {
+    for (;;) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      size += value.byteLength;
+      if (size > maxBytes) {
+        await reader.cancel();
+        return null;
+      }
+      chunks.push(value);
+    }
+  } catch {
+    // A client that drops the connection mid-body: no form to read.
+    return null;
+  }
+  return Buffer.concat(chunks).toString("utf8");
+}

package/src/next/strip-link-query.tsx

@@ -0,0 +1,30 @@
+"use client";
+
+// Takes the unsubscribe link's parameters out of the address bar once the page has loaded, so the
+// signed token does not stay in the tab's URL and the browser history. It renders nothing; without
+// JavaScript the address bar keeps the link, and the form still works.
+import { useEffect } from "react";
+
+export interface StripLinkQueryProps {
+  /** The query parameters that carry the link. */
+  readonly names: readonly string[];
+}
+
+export function StripLinkQuery({ names }: StripLinkQueryProps) {
+  useEffect(() => {
+    stripQueryParams(names);
+  }, [names]);
+  return null;
+}
+
+/**
+ * Replaces the current history entry with the URL minus `names`. The current `history.state` goes
+ * along: it carries Next's own marker, so its router lets the call through without a navigation.
+ */
+export function stripQueryParams(names: readonly string[]): void {
+  const url = new URL(location.href);
+  const present = names.filter((name) => url.searchParams.has(name));
+  if (present.length === 0) return;
+  for (const name of present) url.searchParams.delete(name);
+  history.replaceState(history.state, "", `${url.pathname}${url.search}${url.hash}`);
+}

package/src/providers/resend.ts

@@ -77,10 +77,29 @@ async function readOutcome(response: Response): Promise<ProviderOutcome> {
   // Only the error's `name` (an enum) is read: its `message` can echo the address back.
   const name = readString(payload, "name");
   const httpStatus = response.status;
-  if (REFUSED_STATUSES.has(httpStatus)) return { status: "refused", httpStatus };
-  if (httpStatus === 429) return { status: name === RATE_LIMIT_EXCEEDED ? "unavailable" : "quota_exceeded", httpStatus };
+  const retryAfterSeconds = readRetryAfter(response.headers.get("retry-after"), Date.now());
+  const failure = retryAfterSeconds === null ? { httpStatus } : { httpStatus, retryAfterSeconds };
+  if (REFUSED_STATUSES.has(httpStatus)) return { status: "refused", ...failure };
+  if (httpStatus === 429) return { status: name === RATE_LIMIT_EXCEEDED ? "unavailable" : "quota_exceeded", ...failure };
   const isRetryable = httpStatus >= 500 || httpStatus === 408 || (httpStatus === 409 && name === CONCURRENT_IDEMPOTENT_REQUESTS);
-  return { status: isRetryable ? "unavailable" : "rejected", httpStatus };
+  return { status: isRetryable ? "unavailable" : "rejected", ...failure };
+}
+
+const DELAY_SECONDS = /^\d{1,10}$/;
+/** The IMF-fixdate form of an HTTP date, the one senders must produce (RFC 9110 §5.6.7). */
+const HTTP_DATE = /^[A-Z][a-z]{2}, \d{2} [A-Z][a-z]{2} \d{4} \d{2}:\d{2}:\d{2} GMT$/;
+
+/**
+ * Reads a `Retry-After` header (RFC 9110 §10.2.3): a whole number of seconds, or an HTTP date (IMF-fixdate) turned into the seconds
+ * from `nowMs` to it (0 for a date in the past). `null` when there is none or it is malformed.
+ */
+export function readRetryAfter(value: string | null, nowMs: number): number | null {
+  const text = value?.trim() ?? "";
+  if (text === "") return null;
+  if (DELAY_SECONDS.test(text)) return Number(text);
+  const at = HTTP_DATE.test(text) ? Date.parse(text) : Number.NaN;
+  if (Number.isNaN(at)) return null;
+  return Math.max(0, Math.ceil((at - nowMs) / 1000));
 }
 
 function readString(payload: unknown, key: string): string | null {

package/src/server/deliveries.ts

@@ -92,13 +92,16 @@ export type DeliveryOutcome =
    * `retakeUncertain` sends it again.
    */
   | { readonly status: "uncertain" }
-  /** The provider was unavailable; the claim is released for a later run. */
-  | { readonly status: "retry-later"; readonly httpStatus?: number }
+  /**
+   * The provider was unavailable; the claim is released for a later run. `retryAfterSeconds` is the wait the provider
+   * asked for, when it named one.
+   */
+  | { readonly status: "retry-later"; readonly httpStatus?: number; readonly retryAfterSeconds?: number }
   /**
    * The provider refused the account or its quota is spent: the claim is released, its attempt given back. Stop
    * sending (every other mail fails the same way) and run again once the account can send.
    */
-  | { readonly status: "halted"; readonly reason: HaltingErrorCode; readonly httpStatus?: number };
+  | { readonly status: "halted"; readonly reason: HaltingErrorCode; readonly httpStatus?: number; readonly retryAfterSeconds?: number };
 
 /**
  * Sends `delivery.mail` unless the ledger already has an outcome (or a fresh claim) for its scope
@@ -125,13 +128,14 @@ export async function deliverOnce(ctx: DeliveryContext, delivery: Delivery, opti
   }
   const providerStatus = result.httpStatus ?? null;
   const httpStatus = result.httpStatus === undefined ? {} : { httpStatus: result.httpStatus };
+  const retryAfter = result.retryAfterSeconds === undefined ? {} : { retryAfterSeconds: result.retryAfterSeconds };
   if (isHaltingCode(result.error)) {
     await releaseDelivery(ctx, fence, { providerStatus, giveAttemptBack: true });
-    return { status: "halted", reason: result.error, ...httpStatus };
+    return { status: "halted", reason: result.error, ...httpStatus, ...retryAfter };
   }
   if (result.error === "mailing.unavailable" && (maxAttempts === null || attempt < maxAttempts)) {
     await releaseDelivery(ctx, fence, { providerStatus, giveAttemptBack: false });
-    return { status: "retry-later", ...httpStatus };
+    return { status: "retry-later", ...httpStatus, ...retryAfter };
   }
   await closeDelivery(ctx, fence, { status: "rejected", providerMessageId: null, reason: result.error, providerStatus });
   return { status: "rejected", reason: result.error, ...httpStatus };