@voltro/plugin-mail 0.81.0 → 0.83.0

package/dist/index.js

@@ -1,310 +1,229 @@
-import { Config as e, Context as t, Duration as n, Effect as r, Fiber as i, Layer as a, ManagedRuntime as o, ParseResult as s, Redacted as c, Schedule as l, Schema as u } from "effect";
-import { definePlugin as d, pluginInstanceName as f } from "@voltro/protocol";
-import { pluginEnv as p } from "@voltro/env";
-import { createLogger as m } from "@voltro/logger";
-import { SqlClient as h } from "@effect/sql";
-import { PgClient as g } from "@effect/sql-pg";
-import { FetchHttpClient as _, HttpClient as v, HttpClientRequest as y } from "@effect/platform";
+import { Context as e, Duration as t, Effect as n, Fiber as r, Layer as i, ParseResult as a, Schedule as o, Schema as s } from "effect";
+import { definePlugin as c, pluginInstanceName as l } from "@voltro/protocol";
+import { pluginEnv as u } from "@voltro/env";
+import { createLogger as d } from "@voltro/logger";
+import { and as f, eq as p, id as m, inSet as h, queryFor as g, registerRetention as _, retentionTtlMsFromEnv as ee, table as v, text as y, timestamp as b } from "@voltro/database";
+import { FetchHttpClient as x, HttpClient as te, HttpClientRequest as S } from "@effect/platform";
 //#region src/types.ts
-var b = class extends u.TaggedError()("MailError", {
-	provider: u.String,
-	message: u.String,
-	transient: u.Boolean,
-	status: u.optional(u.Number)
-}) {}, x = (e) => ({
+var C = class extends s.TaggedError()("MailError", {
+	provider: s.String,
+	message: s.String,
+	transient: s.Boolean,
+	status: s.optional(s.Number)
+}) {}, w = class extends s.TaggedError()("MailWebhookError", {
+	provider: s.String,
+	message: s.String
+}) {}, T = (e) => ({
 	name: e.name,
 	props: e.props,
 	subject: e.subject,
 	render: e.render,
 	...e.locale === void 0 ? {} : { locale: e.locale },
 	...e.preview === void 0 ? {} : { preview: e.preview }
-}), S = class extends t.Tag("@voltro/plugin-mail/MailService")() {}, C = (e) => e === void 0 ? [] : typeof e == "string" ? [e] : e, ee = (e) => {
+}), ne = class extends e.Tag("@voltro/plugin-mail/MailService")() {}, E = (e) => e === void 0 ? [] : typeof e == "string" ? [e] : e, D = (e) => {
 	try {
-		let t = s.ArrayFormatter.formatErrorSync(e);
+		let t = a.ArrayFormatter.formatErrorSync(e);
 		return t.length === 0 ? String(e) : t.map((e) => `${e.path.length > 0 ? e.path.join(".") : "(root)"}: ${e.message}`).join("; ");
 	} catch {
 		return String(e);
 	}
-}, w = null, T = async () => {
-	if (!w) {
+}, O = null, re = async () => {
+	if (!O) {
 		let e = await import("@react-email/render");
-		if (w = e.render ?? e.default?.render ?? null, !w) throw Error("@react-email/render: `render` export not found (install @react-email/render + react + react-dom)");
+		if (O = e.render ?? e.default?.render ?? null, !O) throw Error("@react-email/render: `render` export not found (install @react-email/render + react + react-dom)");
 	}
-	return w;
-}, E = (e, t) => r.gen(function* () {
-	let n = e, i = yield* u.decodeUnknown(n.props)(t).pipe(r.mapError((t) => new b({
+	return O;
+}, k = (e, t) => n.gen(function* () {
+	let r = e, i = yield* s.decodeUnknown(r.props)(t).pipe(n.mapError((t) => new C({
 		provider: "template",
-		message: `invalid props for '${e.name}': ${ee(t)}`.slice(0, 500),
+		message: `invalid props for '${e.name}': ${D(t)}`.slice(0, 500),
 		transient: !1
-	}))), a = n.subject(i), o = n.render(i);
+	}))), a = r.subject(i), o = r.render(i);
 	return {
 		subject: a,
-		html: yield* r.tryPromise({
-			try: async () => (await T())(o, { plainText: !1 }),
-			catch: (t) => new b({
+		html: yield* n.tryPromise({
+			try: async () => (await re())(o, { plainText: !1 }),
+			catch: (t) => new C({
 				provider: "template",
 				message: `render failed for '${e.name}': ${String(t)}`.slice(0, 500),
 				transient: !1
 			})
 		}),
-		text: yield* r.tryPromise({
-			try: async () => (await T())(o, { plainText: !0 }),
-			catch: (t) => new b({
+		text: yield* n.tryPromise({
+			try: async () => (await re())(o, { plainText: !0 }),
+			catch: (t) => new C({
 				provider: "template",
 				message: `render(text) failed for '${e.name}': ${String(t)}`.slice(0, 500),
 				transient: !1
 			})
 		})
 	};
-}), D = /* @__PURE__ */ new Map(), te = (e) => e.locale ? `${e.name}:${e.locale}` : e.name, ne = (e) => {
-	for (let t of e) D.set(te(t), t);
-}, O = (e, t) => (t ? D.get(`${e}:${t}`) : void 0) ?? D.get(e), re = () => D.size, k = () => [...D.values()].map((e) => e.locale ? {
+}), A = /* @__PURE__ */ new Map(), ie = (e) => e.locale ? `${e.name}:${e.locale}` : e.name, ae = (e) => {
+	for (let t of e) A.set(ie(t), t);
+}, j = (e, t) => (t ? A.get(`${e}:${t}`) : void 0) ?? A.get(e), oe = () => A.size, se = () => [...A.values()].map((e) => e.locale ? {
 	name: e.name,
 	locale: e.locale
-} : { name: e.name }), ie = () => D.clear(), ae = (e) => {
+} : { name: e.name }), ce = () => A.clear(), le = (e) => {
 	if (typeof e != "object" || !e) return !1;
 	let t = e;
 	return typeof t.name == "string" && typeof t.subject == "function" && typeof t.render == "function" && t.props !== void 0;
-}, oe = m({ scope: "@voltro/plugin-mail" }), A = (e) => e.trim().toLowerCase(), se = "*", j = (e) => e ?? se, M = () => {
-	let e = /* @__PURE__ */ new Set(), t = (e, t) => `${j(e)}\u0000${A(t)}`;
-	return {
-		isSuppressed: (n, i) => r.sync(() => e.has(t(n, i)) || e.has(t(null, i))),
-		suppress: (n, i) => r.sync(() => void e.add(t(n, i))),
-		unsuppress: (n, i) => r.sync(() => void e.delete(t(n, i)))
-	};
-}, ce = (e) => {
-	let t = e.DB_URL ?? e.DB_PRIMARY_URL;
-	if (t) {
-		let e = new URL(t);
-		return {
-			host: e.hostname || "localhost",
-			port: e.port ? Number(e.port) : 5432,
-			username: decodeURIComponent(e.username || "app"),
-			password: decodeURIComponent(e.password || "app"),
-			database: e.pathname.replace(/^\//, "") || "app"
-		};
-	}
+}, M = "_voltro_mail_suppression", N = "_voltro_mail_idempotency", ue = v(M, {
+	id: m({ scheme: "numeric" }),
+	tenant: y().maxLength(191),
+	email: y().maxLength(320),
+	reason: y().nullable(),
+	createdAt: b().default("now")
+}).unique("mailSuppressionAddress", ["tenant", "email"]).nonReactive(), de = v(N, {
+	id: m({ scheme: "numeric" }),
+	tenant: y().maxLength(191),
+	key: y().maxLength(255),
+	resultId: y().nullable(),
+	resultProvider: y().nullable(),
+	createdAt: b().default("now")
+}).unique("mailIdempotencyKey", ["tenant", "key"]).nonReactive(), P = (e) => n.tryPromise({
+	try: e,
+	catch: (e) => e
+}), F = (e) => {
+	let t = [];
+	for (let n = e, r = 0; n != null && r < 4; n = n.cause, r++) t.push(n instanceof Error ? n.message : String(n));
+	return t.join(" ← ");
+}, fe = d({ scope: "@voltro/plugin-mail" }), I = (e) => e.trim().toLowerCase(), pe = "*", L = (e) => e ?? pe, R = () => {
+	let e = /* @__PURE__ */ new Set(), t = (e, t) => `${L(e)}\u0000${I(t)}`;
 	return {
-		host: e.DB_HOST ?? e.PG_HOST ?? "localhost",
-		port: Number(e.DB_PORT ?? e.PG_PORT ?? 5432),
-		username: e.DB_USER ?? e.PG_USER ?? "app",
-		password: e.DB_PASSWORD ?? e.PG_PASSWORD ?? "app",
-		database: e.DB_DATABASE ?? e.PG_DATABASE ?? "app"
+		isSuppressed: (r, i) => n.sync(() => e.has(t(r, i)) || e.has(t(null, i))),
+		suppress: (r, i) => n.sync(() => void e.add(t(r, i))),
+		unsuppress: (r, i) => n.sync(() => void e.delete(t(r, i)))
 	};
-}, le = (t = {}) => {
-	let n = t.table ?? "_voltro_mail_suppression", i = null, a = (n) => g.layerConfig({
-		host: e.succeed(n.host),
-		port: e.succeed(n.port),
-		username: e.succeed(n.username),
-		password: e.succeed(c.make(n.password)),
-		database: e.succeed(n.database),
-		...t.maxConnections === void 0 ? {} : { maxConnections: e.succeed(t.maxConnections) }
+}, me = () => {
+	let e = null, t = (e, t) => ({
+		tenant: L(e),
+		email: I(t)
 	});
 	return {
-		isSuppressed: (e, t) => {
-			let a = i;
-			if (!a) return r.succeed(!1);
-			let o = r.gen(function* () {
-				let r = yield* h.SqlClient;
-				return (yield* r`
-          SELECT 1 AS one FROM ${r(n)}
-          WHERE email = ${A(t)} AND tenant IN (${j(e)}, ${se}) LIMIT 1`).length > 0;
-			});
-			return r.tryPromise(() => a.runPromise(o)).pipe(r.catchAll(() => r.succeed(!1)));
-		},
-		suppress: (e, t, a) => {
-			let o = i;
-			if (!o) return r.void;
-			let s = r.gen(function* () {
-				let r = yield* h.SqlClient;
-				yield* r`
-          INSERT INTO ${r(n)} (tenant, email, reason, created_at)
-          VALUES (${j(e)}, ${A(t)}, ${a}, ${Date.now()})
-          ON CONFLICT (tenant, email) DO UPDATE SET reason = ${a}, created_at = ${Date.now()}`;
-			});
-			return r.tryPromise(() => o.runPromise(s)).pipe(r.catchAll((e) => r.sync(() => oe.warn("suppress write failed", {
-				email: A(t),
-				message: String(e)
-			}))));
+		isSuppressed: (t, r) => {
+			let i = e;
+			return i ? P(() => i.query(g(ue).where(f(p("email", I(r)), h("tenant", [L(t), pe]))).limit(1).descriptor)).pipe(n.map((e) => e.length > 0), n.catchAll(() => n.succeed(!1))) : n.succeed(!1);
 		},
-		unsuppress: (e, t) => {
-			let a = i;
-			if (!a) return r.void;
-			let o = r.gen(function* () {
-				let r = yield* h.SqlClient;
-				yield* r`DELETE FROM ${r(n)} WHERE tenant = ${j(e)} AND email = ${A(t)}`;
-			});
-			return r.tryPromise(() => a.runPromise(o)).pipe(r.catchAll(() => r.void));
+		suppress: (r, i, a) => {
+			let o = e;
+			return o ? P(() => o.upsert(M, {
+				...t(r, i),
+				reason: a,
+				createdAt: /* @__PURE__ */ new Date()
+			}, { conflictColumns: ["tenant", "email"] })).pipe(n.asVoid, n.catchAll((e) => n.sync(() => fe.warn("suppress write failed", {
+				email: I(i),
+				message: F(e)
+			})))) : n.void;
 		},
-		activate: async (e) => {
-			let t = o.make(a(ce(e)));
-			await t.runPromise(r.gen(function* () {
-				let e = yield* h.SqlClient;
-				yield* e`
-            CREATE TABLE IF NOT EXISTS ${e(n)} (
-              tenant     TEXT   NOT NULL,
-              email      TEXT   NOT NULL,
-              reason     TEXT,
-              created_at BIGINT NOT NULL,
-              PRIMARY KEY (tenant, email)
-            )`;
-			})), i = t;
+		unsuppress: (r, i) => {
+			let a = e;
+			if (!a) return n.void;
+			let { tenant: o, email: s } = t(r, i);
+			return P(() => a.deleteMany(M, { where: f(p("tenant", o), p("email", s)) })).pipe(n.asVoid, n.catchAll(() => n.void));
 		},
-		deactivate: async () => {
-			let e = i;
-			i = null, e && await e.dispose();
+		bind: async (t) => {
+			e = t;
 		}
 	};
-}, ue = m({ scope: "@voltro/plugin-mail" }), N = (e) => e ?? "*", P = () => {
-	let e = /* @__PURE__ */ new Map(), t = (e, t) => `${N(e)} ${t}`;
+}, he = d({ scope: "@voltro/plugin-mail" }), z = (e) => e ?? "*", B = () => {
+	let e = /* @__PURE__ */ new Map(), t = (e, t) => `${z(e)} ${t}`;
 	return {
-		reserve: (n, i) => r.sync(() => {
-			let r = t(n, i);
-			if (e.has(r)) {
-				let t = e.get(r);
+		reserve: (r, i) => n.sync(() => {
+			let n = t(r, i);
+			if (e.has(n)) {
+				let t = e.get(n);
 				return t ? {
 					won: !1,
 					prior: t
 				} : { won: !1 };
 			}
-			return e.set(r, null), { won: !0 };
+			return e.set(n, null), { won: !0 };
 		}),
-		record: (n, i, a) => r.sync(() => void e.set(t(n, i), a))
+		record: (r, i, a) => n.sync(() => void e.set(t(r, i), a))
 	};
-}, de = (e) => {
-	let t = e.DB_URL ?? e.DB_PRIMARY_URL;
-	if (t) {
-		let e = new URL(t);
-		return {
-			host: e.hostname || "localhost",
-			port: e.port ? Number(e.port) : 5432,
-			username: decodeURIComponent(e.username || "app"),
-			password: decodeURIComponent(e.password || "app"),
-			database: e.pathname.replace(/^\//, "") || "app"
-		};
-	}
-	return {
-		host: e.DB_HOST ?? e.PG_HOST ?? "localhost",
-		port: Number(e.DB_PORT ?? e.PG_PORT ?? 5432),
-		username: e.DB_USER ?? e.PG_USER ?? "app",
-		password: e.DB_PASSWORD ?? e.PG_PASSWORD ?? "app",
-		database: e.DB_DATABASE ?? e.PG_DATABASE ?? "app"
-	};
-}, F = (t = {}) => {
-	let n = t.table ?? "_voltro_mail_idempotency", i = null, a = (n) => g.layerConfig({
-		host: e.succeed(n.host),
-		port: e.succeed(n.port),
-		username: e.succeed(n.username),
-		password: e.succeed(c.make(n.password)),
-		database: e.succeed(n.database),
-		...t.maxConnections === void 0 ? {} : { maxConnections: e.succeed(t.maxConnections) }
-	});
+}, ge = () => {
+	let e = null;
 	return {
-		reserve: (e, t) => {
-			let a = i;
-			if (!a) return r.succeed({ won: !0 });
-			let o = r.gen(function* () {
-				let r = yield* h.SqlClient;
-				if ((yield* r`
-          INSERT INTO ${r(n)} (tenant, key, created_at)
-          VALUES (${N(e)}, ${t}, ${Date.now()})
-          ON CONFLICT (tenant, key) DO NOTHING
-          RETURNING key`).length > 0) return { won: !0 };
-				let i = (yield* r`
-          SELECT result_id, result_provider FROM ${r(n)}
-          WHERE tenant = ${N(e)} AND key = ${t} LIMIT 1`)[0];
-				return i && i.result_id && i.result_provider ? {
+		reserve: (t, r) => {
+			let i = e;
+			return i ? P(() => i.insertIgnoreWithOutcome(N, {
+				tenant: z(t),
+				key: r,
+				createdAt: /* @__PURE__ */ new Date()
+			}, { conflictColumns: ["tenant", "key"] })).pipe(n.map(({ row: e, outcome: t }) => {
+				if (t === "inserted") return { won: !0 };
+				let n = e.resultId, r = e.resultProvider;
+				return typeof n == "string" && typeof r == "string" ? {
 					won: !1,
 					prior: {
-						id: i.result_id,
-						provider: i.result_provider
+						id: n,
+						provider: r
 					}
 				} : { won: !1 };
-			});
-			return r.tryPromise(() => a.runPromise(o)).pipe(r.catchAll((e) => r.sync(() => (ue.warn("idempotency reserve failed — skipping send to avoid a double", {
-				key: t,
-				message: String(e)
-			}), { won: !1 }))));
+			}), n.catchAll((e) => n.sync(() => (he.warn("idempotency reserve failed — skipping send to avoid a double", {
+				key: r,
+				message: F(e)
+			}), { won: !1 })))) : n.succeed({ won: !0 });
 		},
-		record: (e, t, a) => {
-			let o = i;
-			if (!o) return r.void;
-			let s = r.gen(function* () {
-				let r = yield* h.SqlClient;
-				yield* r`
-          UPDATE ${r(n)} SET result_id = ${a.id}, result_provider = ${a.provider}
-          WHERE tenant = ${N(e)} AND key = ${t}`;
-			});
-			return r.tryPromise(() => o.runPromise(s)).pipe(r.catchAll((e) => r.sync(() => ue.warn("idempotency record failed", {
-				key: t,
-				message: String(e)
-			}))));
-		},
-		activate: async (e) => {
-			let t = o.make(a(de(e)));
-			await t.runPromise(r.gen(function* () {
-				let e = yield* h.SqlClient;
-				yield* e`
-            CREATE TABLE IF NOT EXISTS ${e(n)} (
-              tenant          TEXT   NOT NULL,
-              key             TEXT   NOT NULL,
-              result_id       TEXT,
-              result_provider TEXT,
-              created_at      BIGINT NOT NULL,
-              PRIMARY KEY (tenant, key)
-            )`;
-			})), i = t;
+		record: (t, r, i) => {
+			let a = e;
+			return a ? P(() => a.updateMany(N, {
+				resultId: i.id,
+				resultProvider: i.provider
+			}, { where: f(p("tenant", z(t)), p("key", r)) })).pipe(n.asVoid, n.catchAll((e) => n.sync(() => he.warn("idempotency record failed", {
+				key: r,
+				message: F(e)
+			})))) : n.void;
 		},
-		deactivate: async () => {
-			let e = i;
-			i = null, e && await e.dispose();
+		bind: async (t) => {
+			e = t;
 		}
 	};
-}, fe = m({ scope: "@voltro/plugin-mail" }), I = () => {
+}, _e = d({ scope: "@voltro/plugin-mail" }), V = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
-		hold: (t) => r.sync(() => void e.set(t.id, t)),
-		claimDue: (t) => r.sync(() => {
+		hold: (t) => n.sync(() => void e.set(t.id, t)),
+		claimDue: (t) => n.sync(() => {
 			let n = [];
 			for (let [r, i] of e) i.dueAt <= t && (n.push(i), e.delete(r));
 			return n;
 		}),
-		size: () => r.sync(() => e.size)
+		size: () => n.sync(() => e.size)
 	};
-}, pe = 0, L = (e) => e.idempotencyKey ?? `held-${pe += 1}`, R = (e) => ({
+}, ve = 0, ye = (e) => e.idempotencyKey ?? `held-${ve += 1}`, be = (e) => ({
 	shouldHold: (t) => !e.providerSchedules && t !== void 0 && t.getTime() > Date.now(),
 	hold: (t) => {
 		let { scheduledAt: n, ...r } = t;
 		return e.store.hold({
-			id: L(t),
+			id: ye(t),
 			dueAt: t.scheduledAt?.getTime() ?? Date.now(),
 			message: r
 		});
 	},
-	tick: (t = Date.now()) => r.gen(function* () {
-		let n = yield* e.store.claimDue(t);
-		for (let t of n) yield* e.flush(t.message).pipe(r.catchAll((e) => r.sync(() => fe.warn("scheduled flush failed", {
+	tick: (t = Date.now()) => n.gen(function* () {
+		let r = yield* e.store.claimDue(t);
+		for (let t of r) yield* e.flush(t.message).pipe(n.catchAll((e) => n.sync(() => _e.warn("scheduled flush failed", {
 			id: t.id,
 			message: String(e)
 		}))));
-		return n.length;
+		return r.length;
 	}),
 	pending: () => e.store.size()
-}), me = 0, z = (e) => `${e}-${me += 1}`, he = (e) => e === void 0 || e === 408 || e === 429 || e >= 500, B = (e, t) => {
+}), xe = 0, Se = (e) => `${e}-${xe += 1}`, Ce = (e) => e === void 0 || e === 408 || e === 429 || e >= 500, H = (e, t) => {
 	let n = t.status;
-	return new b({
+	return new C({
 		provider: e,
 		message: (t.message ?? "send failed").slice(0, 500),
-		transient: e === "smtp" ? n === void 0 || n >= 400 && n < 500 : he(n),
+		transient: e === "smtp" ? n === void 0 || n >= 400 && n < 500 : Ce(n),
 		...n === void 0 ? {} : { status: n }
 	});
-}, V = (e, t, n, i, a) => r.tryPromise({
+}, U = (e, t, r, i, a) => n.tryPromise({
 	try: async () => {
 		let e = await fetch(t, {
 			method: "POST",
 			headers: {
 				"content-type": "application/json",
-				...n
+				...r
 			},
 			body: JSON.stringify(i)
 		});
@@ -319,20 +238,97 @@ var b = class extends u.TaggedError()("MailError", {
 	},
 	catch: (t) => {
 		let n = t;
-		return B(e, {
+		return H(e, {
 			...typeof n.status == "number" ? { status: n.status } : {},
 			message: n.message ?? t?.message ?? String(t)
 		});
 	}
-}), H = (e) => ({
+}), W = 500, we = (e, t) => {
+	let n = e.stream === "broadcast" ? t?.broadcast ?? "broadcast" : t?.transactional;
+	return {
+		...n === void 0 ? {} : { route: n },
+		from: e.from,
+		to: E(e.to),
+		...e.cc ? { cc: E(e.cc) } : {},
+		...e.bcc ? { bcc: E(e.bcc) } : {},
+		...e.replyTo ? { reply_to: [e.replyTo] } : {},
+		subject: e.subject,
+		...e.html === void 0 ? {} : { html: e.html },
+		...e.text === void 0 ? {} : { text: e.text },
+		...e.headers ? { headers: e.headers } : {},
+		...e.metadata ? { metadata: e.metadata } : {},
+		...e.tags && e.tags.length > 0 ? { tags: e.tags.map((e) => ({
+			name: e,
+			value: "1"
+		})) } : {},
+		...e.scheduledAt ? { scheduled_at: e.scheduledAt.toISOString() } : {},
+		...e.attachments ? { attachments: e.attachments.map((e) => ({
+			filename: e.filename,
+			content: e.content,
+			...e.contentType ? { content_type: e.contentType } : {}
+		})) } : {}
+	};
+}, Te = (e, t, r, i = Math.floor(Date.now() / 1e3), a = 300) => n.tryPromise({
+	try: async () => {
+		let n = (e) => {
+			throw new w({
+				provider: "lettermint",
+				message: e
+			});
+		}, o = (t) => Object.entries(e).find(([e]) => e.toLowerCase() === t)?.[1];
+		r === "" && n("no webhook secret configured"), t === "" && n("empty body");
+		let s = o("x-lettermint-signature") ?? n("missing x-lettermint-signature"), c = o("x-lettermint-delivery") ?? n("missing x-lettermint-delivery"), l, u = [];
+		for (let e of s.split(",")) {
+			let [t, n] = e.trim().split("=", 2);
+			t === "t" && n !== void 0 && /^\d+$/.test(n) ? l = n : t === "v1" && n !== void 0 && /^[a-fA-F0-9]{64}$/.test(n) && u.push(n.toLowerCase());
+		}
+		(l === void 0 || u.length === 0) && n("malformed signature header"), c !== l && n("signature and delivery timestamps differ"), Math.abs(i - Number(l)) > a && n("signature timestamp outside the tolerance");
+		let { createHmac: d, timingSafeEqual: f } = await import("node:crypto"), p = d("sha256", r).update(`${l}.`).update(t).digest();
+		u.some((e) => f(Buffer.from(e, "hex"), p)) || n("signature does not match");
+		try {
+			return JSON.parse(t);
+		} catch {
+			return n("body is not JSON");
+		}
+	},
+	catch: (e) => e instanceof w ? e : new w({
+		provider: "lettermint",
+		message: e?.message ?? String(e)
+	})
+}), Ee = (e) => {
+	let t = (e.baseUrl ?? "https://api.lettermint.co/v1").replace(/\/+$/, ""), r = {
+		"x-lettermint-token": e.projectToken,
+		accept: "application/json"
+	};
+	return {
+		name: "lettermint",
+		supportsScheduling: !0,
+		managesUnsubscribe: !0,
+		send: (n) => U("lettermint", `${t}/send`, {
+			...r,
+			...n.idempotencyKey === void 0 ? {} : { "idempotency-key": n.idempotencyKey }
+		}, we(n, e.routes), async (e) => ({
+			id: (await e.json()).message_id ?? "lettermint",
+			provider: "lettermint"
+		})),
+		sendBatch: (i) => n.forEach(Array.from({ length: Math.ceil(i.length / W) }, (e, t) => i.slice(t * W, (t + 1) * W)), (n) => U("lettermint", `${t}/send/batch`, r, n.map((t) => we(t, e.routes)), async (e) => {
+			let t = await e.json();
+			return n.map((e, n) => ({
+				id: t[n]?.message_id ?? "lettermint",
+				provider: "lettermint"
+			}));
+		})).pipe(n.map((e) => e.flat())),
+		webhook: { verify: Te }
+	};
+}, De = (e) => ({
 	from: e.from,
-	to: C(e.to),
+	to: E(e.to),
 	subject: e.subject,
 	html: e.html,
 	text: e.text,
 	reply_to: e.replyTo,
-	cc: e.cc ? C(e.cc) : void 0,
-	bcc: e.bcc ? C(e.bcc) : void 0,
+	cc: e.cc ? E(e.cc) : void 0,
+	bcc: e.bcc ? E(e.bcc) : void 0,
 	headers: e.headers,
 	tags: e.tags?.map((e) => ({
 		name: e,
@@ -344,34 +340,40 @@ var b = class extends u.TaggedError()("MailError", {
 		content: e.content,
 		...e.contentType ? { content_type: e.contentType } : {}
 	}))
-}), U = (e) => ({
+}), Oe = (e) => ({
 	name: "resend",
 	supportsScheduling: !0,
-	send: (t) => V("resend", "https://api.resend.com/emails", { authorization: `Bearer ${e.apiKey}` }, H(t), async (e) => ({
+	send: (t) => U("resend", "https://api.resend.com/emails", { authorization: `Bearer ${e.apiKey}` }, De(t), async (e) => ({
 		id: (await e.json()).id ?? "resend",
 		provider: "resend"
 	})),
-	sendBatch: (t) => V("resend", "https://api.resend.com/emails/batch", { authorization: `Bearer ${e.apiKey}` }, t.map(H), async (e) => {
+	sendBatch: (t) => U("resend", "https://api.resend.com/emails/batch", { authorization: `Bearer ${e.apiKey}` }, t.map(De), async (e) => {
 		let n = (await e.json()).data ?? [];
 		return t.map((e, t) => ({
 			id: n[t]?.id ?? "resend",
 			provider: "resend"
 		}));
 	})
-}), W = (e) => ({
+}), ke = (e) => ({
 	name: "postmark",
-	send: (t) => V("postmark", "https://api.postmarkapp.com/email", {
+	send: (t) => U("postmark", "https://api.postmarkapp.com/email", {
 		"x-postmark-server-token": e.serverToken,
 		accept: "application/json"
 	}, {
 		From: t.from,
-		To: C(t.to).join(","),
+		To: E(t.to).join(","),
 		Subject: t.subject,
 		HtmlBody: t.html,
 		TextBody: t.text,
 		ReplyTo: t.replyTo,
-		Cc: t.cc ? C(t.cc).join(",") : void 0,
-		Bcc: t.bcc ? C(t.bcc).join(",") : void 0,
+		Cc: t.cc ? E(t.cc).join(",") : void 0,
+		Bcc: t.bcc ? E(t.bcc).join(",") : void 0,
+		MessageStream: t.stream === "broadcast" ? e.streams?.broadcast ?? "broadcast" : e.streams?.transactional ?? "outbound",
+		Headers: t.headers ? Object.entries(t.headers).map(([e, t]) => ({
+			Name: e,
+			Value: t
+		})) : void 0,
+		Metadata: t.metadata,
 		Attachments: t.attachments?.map((e) => ({
 			Name: e.filename,
 			Content: e.content,
@@ -381,44 +383,44 @@ var b = class extends u.TaggedError()("MailError", {
 		id: (await e.json()).MessageID ?? "postmark",
 		provider: "postmark"
 	}))
-}), G = (e) => [...e.text ? [{
+}), Ae = (e) => [...e.text ? [{
 	type: "text/plain",
 	value: e.text
 }] : [], ...e.html ? [{
 	type: "text/html",
 	value: e.html
-}] : []], K = (e) => ({
-	to: C(e.to).map((e) => ({ email: e })),
-	cc: e.cc ? C(e.cc).map((e) => ({ email: e })) : void 0,
-	bcc: e.bcc ? C(e.bcc).map((e) => ({ email: e })) : void 0,
+}] : []], je = (e) => ({
+	to: E(e.to).map((e) => ({ email: e })),
+	cc: e.cc ? E(e.cc).map((e) => ({ email: e })) : void 0,
+	bcc: e.bcc ? E(e.bcc).map((e) => ({ email: e })) : void 0,
 	subject: e.subject,
 	...e.scheduledAt ? { send_at: Math.floor(e.scheduledAt.getTime() / 1e3) } : {}
-}), ge = (e) => e.attachments?.map((e) => ({
+}), Me = (e) => e.attachments?.map((e) => ({
 	filename: e.filename,
 	content: e.content,
 	type: e.contentType ?? "application/octet-stream",
 	disposition: "attachment"
-})), _e = (e) => {
+})), Ne = (e) => {
 	let t = (e) => ({
-		personalizations: [K(e)],
+		personalizations: [je(e)],
 		from: { email: e.from },
 		reply_to: e.replyTo ? { email: e.replyTo } : void 0,
 		subject: e.subject,
-		content: G(e),
-		attachments: ge(e)
+		content: Ae(e),
+		attachments: Me(e)
 	});
 	return {
 		name: "sendgrid",
 		supportsScheduling: !0,
-		send: (n) => V("sendgrid", "https://api.sendgrid.com/v3/mail/send", { authorization: `Bearer ${e.apiKey}` }, t(n), async (e) => ({
+		send: (n) => U("sendgrid", "https://api.sendgrid.com/v3/mail/send", { authorization: `Bearer ${e.apiKey}` }, t(n), async (e) => ({
 			id: e.headers.get("x-message-id") ?? "sendgrid",
 			provider: "sendgrid"
 		})),
-		sendBatch: (t) => V("sendgrid", "https://api.sendgrid.com/v3/mail/send", { authorization: `Bearer ${e.apiKey}` }, {
-			personalizations: t.map(K),
+		sendBatch: (t) => U("sendgrid", "https://api.sendgrid.com/v3/mail/send", { authorization: `Bearer ${e.apiKey}` }, {
+			personalizations: t.map(je),
 			from: { email: t[0]?.from },
 			subject: t[0]?.subject,
-			content: G(t[0] ?? {})
+			content: Ae(t[0] ?? {})
 		}, async (e) => {
 			let n = e.headers.get("x-message-id") ?? "sendgrid";
 			return t.map((e, t) => ({
@@ -427,35 +429,35 @@ var b = class extends u.TaggedError()("MailError", {
 			}));
 		})
 	};
-}, ve = (e, t) => {
+}, Pe = (e, t) => {
 	let n = t, r = n.response?.status;
-	return B(e, {
+	return H(e, {
 		...typeof r == "number" ? { status: r } : {},
 		message: n.message ?? String(t)
 	});
-}, ye = (e, t, n) => r.gen(function* () {
-	let i = yield* (yield* v.HttpClient).execute(t);
+}, Fe = (e, t, r) => n.gen(function* () {
+	let i = yield* (yield* te.HttpClient).execute(t);
 	if (i.status < 200 || i.status >= 300) {
-		let t = yield* i.text.pipe(r.catchAll(() => r.succeed("")));
-		return yield* r.fail(B(e, {
+		let t = yield* i.text.pipe(n.catchAll(() => n.succeed("")));
+		return yield* n.fail(H(e, {
 			status: i.status,
 			message: t || `HTTP ${i.status}`
 		}));
 	}
-	return yield* n(i);
-}).pipe(r.catchAll((t) => t instanceof b ? r.fail(t) : r.fail(ve(e, t))), r.provide(_.layer)), be = (e) => ({ sign: async (t, n, r) => {
+	return yield* r(i);
+}).pipe(n.catchAll((t) => t instanceof C ? n.fail(t) : n.fail(Pe(e, t))), n.provide(x.layer)), Ie = (e) => ({ sign: async (t, n, r) => {
 	let { createHash: i, createHmac: a } = await import("node:crypto"), o = (e) => i("sha256").update(e).digest("hex"), s = (e, t) => a("sha256", e).update(t).digest(), c = (/* @__PURE__ */ new Date()).toISOString().replace(/[:-]|\.\d{3}/g, ""), l = c.slice(0, 8), u = `host:${new URL(t).host}\nx-amz-date:${c}\n` + (e.sessionToken ? `x-amz-security-token:${e.sessionToken}\n` : ""), d = e.sessionToken ? "host;x-amz-date;x-amz-security-token" : "host;x-amz-date", f = `POST\n${n}\n\n${u}\n${d}\n${o(r)}`, p = `${l}/${e.region}/ses/aws4_request`, m = `AWS4-HMAC-SHA256\n${c}\n${p}\n${o(f)}`, h = a("sha256", s(s(s(s(`AWS4${e.secretAccessKey}`, l), e.region), "ses"), "aws4_request")).update(m).digest("hex");
 	return {
 		authorization: `AWS4-HMAC-SHA256 Credential=${e.accessKeyId}/${p}, SignedHeaders=${d}, Signature=${h}`,
 		"x-amz-date": c,
 		...e.sessionToken ? { "x-amz-security-token": e.sessionToken } : {}
 	};
-} }), xe = (e) => JSON.stringify({
+} }), Le = (e) => JSON.stringify({
 	FromEmailAddress: e.from,
 	Destination: {
-		ToAddresses: C(e.to),
-		...e.cc ? { CcAddresses: C(e.cc) } : {},
-		...e.bcc ? { BccAddresses: C(e.bcc) } : {}
+		ToAddresses: E(e.to),
+		...e.cc ? { CcAddresses: E(e.cc) } : {},
+		...e.bcc ? { BccAddresses: E(e.bcc) } : {}
 	},
 	...e.replyTo ? { ReplyToAddresses: [e.replyTo] } : {},
 	Content: { Simple: {
@@ -474,51 +476,51 @@ var b = class extends u.TaggedError()("MailError", {
 			} } : {}
 		}
 	} }
-}), Se = (e) => {
-	let t = be(e), n = `https://email.${e.region}.amazonaws.com`, i = "/v2/email/outbound-emails";
+}), Re = (e) => {
+	let t = Ie(e), r = `https://email.${e.region}.amazonaws.com`, i = "/v2/email/outbound-emails";
 	return {
 		name: "ses",
-		send: (e) => r.gen(function* () {
-			let a = xe(e), o = yield* r.tryPromise({
-				try: () => t.sign(n, i, a),
-				catch: (e) => B("ses", { message: e?.message ?? String(e) })
+		send: (e) => n.gen(function* () {
+			let a = Le(e), o = yield* n.tryPromise({
+				try: () => t.sign(r, i, a),
+				catch: (e) => H("ses", { message: e?.message ?? String(e) })
 			});
-			return yield* ye("ses", y.post(`${n}${i}`).pipe(y.setHeaders({
+			return yield* Fe("ses", S.post(`${r}${i}`).pipe(S.setHeaders({
 				"content-type": "application/json",
 				...o
-			}), y.bodyUnsafeJson(JSON.parse(a))), (e) => e.json.pipe(r.map((e) => ({
+			}), S.bodyUnsafeJson(JSON.parse(a))), (e) => e.json.pipe(n.map((e) => ({
 				id: e.MessageId ?? "ses",
 				provider: "ses"
 			}))));
 		})
 	};
-}, Ce = (e) => {
+}, ze = (e) => {
 	let t = [["from", e.from], ["subject", e.subject]];
-	for (let n of C(e.to)) t.push(["to", n]);
-	if (e.cc) for (let n of C(e.cc)) t.push(["cc", n]);
-	if (e.bcc) for (let n of C(e.bcc)) t.push(["bcc", n]);
+	for (let n of E(e.to)) t.push(["to", n]);
+	if (e.cc) for (let n of E(e.cc)) t.push(["cc", n]);
+	if (e.bcc) for (let n of E(e.bcc)) t.push(["bcc", n]);
 	if (e.replyTo && t.push(["h:Reply-To", e.replyTo]), e.html && t.push(["html", e.html]), e.text && t.push(["text", e.text]), e.headers) for (let [n, r] of Object.entries(e.headers)) t.push([`h:${n}`, r]);
 	if (e.tags) for (let n of e.tags) t.push(["o:tag", n]);
 	return e.scheduledAt && t.push(["o:deliverytime", e.scheduledAt.toUTCString()]), t;
-}, we = (e) => {
+}, Be = (e) => {
 	let t = `${e.baseUrl ?? "https://api.mailgun.net"}/v3/${e.domain}/messages`;
 	return {
 		name: "mailgun",
 		supportsScheduling: !0,
-		send: (n) => {
+		send: (r) => {
 			let i = new URLSearchParams();
-			for (let [e, t] of Ce(n)) i.append(e, t);
-			return ye("mailgun", y.post(t).pipe(y.setHeader("authorization", `Basic ${Buffer.from(`api:${e.apiKey}`).toString("base64")}`), y.bodyText(i.toString(), "application/x-www-form-urlencoded")), (e) => e.json.pipe(r.map((e) => ({
+			for (let [e, t] of ze(r)) i.append(e, t);
+			return Fe("mailgun", S.post(t).pipe(S.setHeader("authorization", `Basic ${Buffer.from(`api:${e.apiKey}`).toString("base64")}`), S.bodyText(i.toString(), "application/x-www-form-urlencoded")), (e) => e.json.pipe(n.map((e) => ({
 				id: e.id ?? "mailgun",
 				provider: "mailgun"
 			}))));
 		}
 	};
-}, q = (e) => {
+}, G = (e) => {
 	let t = null;
 	return {
 		name: "smtp",
-		send: (n) => r.tryPromise({
+		send: (r) => n.tryPromise({
 			try: async () => {
 				if (!t) {
 					let n = await import("nodemailer"), r = n.createTransport ?? n.default?.createTransport;
@@ -532,16 +534,16 @@ var b = class extends u.TaggedError()("MailError", {
 				}
 				return {
 					id: (await t.sendMail({
-						from: n.from,
-						to: C(n.to),
-						cc: n.cc ? C(n.cc) : void 0,
-						bcc: n.bcc ? C(n.bcc) : void 0,
-						replyTo: n.replyTo,
-						subject: n.subject,
-						html: n.html,
-						text: n.text,
-						headers: n.headers,
-						attachments: n.attachments?.map((e) => ({
+						from: r.from,
+						to: E(r.to),
+						cc: r.cc ? E(r.cc) : void 0,
+						bcc: r.bcc ? E(r.bcc) : void 0,
+						replyTo: r.replyTo,
+						subject: r.subject,
+						html: r.html,
+						text: r.text,
+						headers: r.headers,
+						attachments: r.attachments?.map((e) => ({
 							filename: e.filename,
 							content: e.content,
 							encoding: "base64",
@@ -553,52 +555,53 @@ var b = class extends u.TaggedError()("MailError", {
 			},
 			catch: (e) => {
 				let t = e;
-				return B("smtp", {
+				return H("smtp", {
 					...typeof t.responseCode == "number" ? { status: t.responseCode } : {},
 					message: t.message ?? String(e)
 				});
 			}
 		})
 	};
-}, Te = (e) => ({
+}, Ve = (e) => ({
 	name: "console",
-	send: (t) => r.sync(() => {
-		let n = `✉  to=${C(t.to).join(",")} subject=${JSON.stringify(t.subject)}`;
+	send: (t) => n.sync(() => {
+		let n = `✉  to=${E(t.to).join(",")} subject=${JSON.stringify(t.subject)}`;
 		return e ? e(n, { from: t.from }) : process.stdout.write(`[mail:console] ${n}\n`), {
-			id: z("console"),
+			id: Se("console"),
 			provider: "console"
 		};
 	})
-}), J = [], Ee = () => [...J], De = () => {
-	J.length = 0;
-}, Oe = () => ({
+}), K = [], He = () => [...K], Ue = () => {
+	K.length = 0;
+}, We = () => ({
 	name: "memory",
-	send: (e) => r.sync(() => (J.push(e), {
-		id: z("mem"),
+	send: (e) => n.sync(() => (K.push(e), {
+		id: Se("mem"),
 		provider: "memory"
 	}))
-}), Y = m({ scope: "@voltro/plugin-mail" }), ke = (e) => {
+}), q = d({ scope: "@voltro/plugin-mail" }), Ge = (e) => {
 	if (e.provider !== void 0 && typeof e.provider != "string") return e.provider;
 	let t = e.env ?? {}, n = e.provider ?? t.MAIL_PROVIDER ?? "console", r = (e, t) => {
 		if (!t) throw Error(`@voltro/plugin-mail: provider '${n}' needs apiKey or ${e}`);
 		return t;
 	};
 	switch (n) {
-		case "resend": return U({ apiKey: r("RESEND_API_KEY", e.apiKey ?? t.RESEND_API_KEY) });
-		case "postmark": return W({ serverToken: r("POSTMARK_SERVER_TOKEN", e.apiKey ?? t.POSTMARK_SERVER_TOKEN) });
-		case "sendgrid": return _e({ apiKey: r("SENDGRID_API_KEY", e.apiKey ?? t.SENDGRID_API_KEY) });
-		case "ses": return Se({
+		case "lettermint": return Ee({ projectToken: r("LETTERMINT_PROJECT_TOKEN", e.apiKey ?? t.LETTERMINT_PROJECT_TOKEN) });
+		case "resend": return Oe({ apiKey: r("RESEND_API_KEY", e.apiKey ?? t.RESEND_API_KEY) });
+		case "postmark": return ke({ serverToken: r("POSTMARK_SERVER_TOKEN", e.apiKey ?? t.POSTMARK_SERVER_TOKEN) });
+		case "sendgrid": return Ne({ apiKey: r("SENDGRID_API_KEY", e.apiKey ?? t.SENDGRID_API_KEY) });
+		case "ses": return Re({
 			region: r("AWS_REGION", t.AWS_REGION),
 			accessKeyId: r("AWS_ACCESS_KEY_ID", t.AWS_ACCESS_KEY_ID),
 			secretAccessKey: r("AWS_SECRET_ACCESS_KEY", t.AWS_SECRET_ACCESS_KEY),
 			...t.AWS_SESSION_TOKEN ? { sessionToken: t.AWS_SESSION_TOKEN } : {}
 		});
-		case "mailgun": return we({
+		case "mailgun": return Be({
 			apiKey: r("MAILGUN_API_KEY", e.apiKey ?? t.MAILGUN_API_KEY),
 			domain: r("MAILGUN_DOMAIN", t.MAILGUN_DOMAIN),
 			...t.MAILGUN_BASE_URL ? { baseUrl: t.MAILGUN_BASE_URL } : {}
 		});
-		case "smtp": return t.SMTP_URL ? q({ url: t.SMTP_URL }) : q({
+		case "smtp": return t.SMTP_URL ? G({ url: t.SMTP_URL }) : G({
 			host: r("SMTP_URL/SMTP_HOST", t.SMTP_HOST),
 			...t.SMTP_PORT ? { port: Number(t.SMTP_PORT) } : {},
 			secure: t.SMTP_SECURE === "true",
@@ -607,37 +610,50 @@ var b = class extends u.TaggedError()("MailError", {
 				pass: t.SMTP_PASS
 			} } : {}
 		});
-		case "memory": return Oe();
-		default: return Te((e, t) => Y.info(e, t));
+		case "memory": return We();
+		default: return Ve((e, t) => q.info(e, t));
 	}
-}, X = (e) => {
-	let t = e.attempts ?? 3, n = e.suppression ?? M(), i = e.allowlist, a = e.production !== !0 && i !== void 0 && i.length > 0, o = (e) => i.some((t) => t.toLowerCase() === e.toLowerCase()), s = l.recurs(t).pipe(l.whileInput((e) => e.transient)), c = /* @__PURE__ */ new Map();
-	for (let t of e.templates ?? []) c.set(t.locale ? `${t.name}:${t.locale}` : t.name, t);
-	let u = (e, t) => (t ? c.get(`${e}:${t}`) : void 0) ?? c.get(e) ?? O(e, t), d = /* @__PURE__ */ new Map(), f = (e, t) => `${e.name}|${e.locale ?? ""}|${JSON.stringify(t ?? null)}`, p = (e, t) => {
+}, J = (e) => {
+	let t = e.attempts ?? 3, r = e.suppression ?? R(), i = e.allowlist, a = e.production !== !0 && i !== void 0 && i.length > 0, s = (e) => i.some((t) => t.toLowerCase() === e.toLowerCase()), c = o.recurs(t).pipe(o.whileInput((e) => e.transient)), l = /* @__PURE__ */ new Map();
+	for (let t of e.templates ?? []) l.set(t.locale ? `${t.name}:${t.locale}` : t.name, t);
+	let u = (e, t) => (t ? l.get(`${e}:${t}`) : void 0) ?? l.get(e) ?? j(e, t), d = /* @__PURE__ */ new Map(), f = (e, t) => `${e.name}|${e.locale ?? ""}|${JSON.stringify(t ?? null)}`, p = (e, t) => {
 		if (d.set(e, t), d.size > 500) {
 			let e = d.keys().next().value;
 			e !== void 0 && d.delete(e);
 		}
-	}, m = e.idempotency ?? P(), h = R({
-		store: e.schedule ?? I(),
+	}, m = e.idempotency ?? B(), h = be({
+		store: e.schedule ?? V(),
 		providerSchedules: e.provider.supportsScheduling === !0,
 		flush: (e) => v(e)
-	}), g = (t) => r.gen(function* () {
+	}), g = (t) => {
+		if (t.stream !== "broadcast" || e.provider.managesUnsubscribe === !0) return n.succeed(void 0);
+		let r = t.unsubscribe;
+		if (r === void 0 || !r.oneClickUrl.startsWith("https://")) return n.fail(new C({
+			provider: e.provider.name,
+			message: `a broadcast needs \`unsubscribe: { oneClickUrl }\` (an https URL) — '${e.provider.name}' does not unsubscribe recipients itself`,
+			transient: !1
+		}));
+		let i = [`<${r.oneClickUrl}>`, ...r.mailto === void 0 ? [] : [`<mailto:${r.mailto.replace(/^mailto:/, "")}>`]];
+		return n.succeed({
+			"List-Unsubscribe": i.join(", "),
+			"List-Unsubscribe-Post": "List-Unsubscribe=One-Click"
+		});
+	}, _ = (t) => n.gen(function* () {
 		let i = t.from ?? e.from;
-		if (!i) return yield* r.fail(new b({
+		if (!i) return yield* n.fail(new C({
 			provider: e.provider.name,
 			message: "no `from` — set mailPlugin({ from }) or pass message.from",
 			transient: !1
 		}));
-		let s = C(t.to);
+		let o = E(t.to);
 		if (a) {
-			let n = s.filter(o);
-			if (n.length === 0) return Y.warn("mail skipped — no recipient in allowlist (non-production)", {
-				to: s.join(","),
+			let n = o.filter(s);
+			if (n.length === 0) return q.warn("mail skipped — no recipient in allowlist (non-production)", {
+				to: o.join(","),
 				subject: t.subject
 			}), e.onSent?.({
 				id: "skipped-allowlist",
-				to: s,
+				to: o,
 				from: i,
 				subject: t.subject,
 				provider: "skipped",
@@ -650,16 +666,16 @@ var b = class extends u.TaggedError()("MailError", {
 					provider: "skipped"
 				}
 			};
-			s = n;
+			o = n;
 		}
 		let c = t.tenantId ?? null, l = [];
-		for (let e of s) (yield* n.isSuppressed(c, e)) || l.push(e);
-		if (l.length === 0) return Y.warn("mail skipped — all recipients suppressed", {
-			to: s.join(","),
+		for (let e of o) (yield* r.isSuppressed(c, e)) || l.push(e);
+		if (l.length === 0) return q.warn("mail skipped — all recipients suppressed", {
+			to: o.join(","),
 			subject: t.subject
 		}), e.onSent?.({
 			id: "skipped-suppressed",
-			to: s,
+			to: o,
 			from: i,
 			subject: t.subject,
 			provider: "suppressed",
@@ -672,41 +688,45 @@ var b = class extends u.TaggedError()("MailError", {
 				provider: "suppressed"
 			}
 		};
-		s = l;
-		let u = t.replyTo ?? e.replyTo;
+		o = l;
+		let u = t.replyTo ?? e.replyTo, d = yield* g(t), f = d === void 0 ? t.headers : {
+			...t.headers,
+			...d
+		};
 		return {
 			kind: "send",
 			message: {
 				...t,
 				from: i,
-				to: s,
-				...u === void 0 ? {} : { replyTo: u }
+				to: o,
+				...u === void 0 ? {} : { replyTo: u },
+				...f === void 0 ? {} : { headers: f }
 			}
 		};
-	}), _ = (t) => {
-		let n = C(t.to);
-		return e.provider.send(t).pipe(r.retry(s), r.tap((i) => r.sync(() => {
-			Y.info("mail sent", {
+	}), ee = (t) => {
+		let r = E(t.to);
+		return e.provider.send(t).pipe(n.retry(c), n.tap((i) => n.sync(() => {
+			q.info("mail sent", {
 				provider: i.provider,
 				id: i.id,
-				to: n.join(",")
+				to: r.join(",")
 			}), e.onSent?.({
 				id: i.id,
-				to: n,
+				to: r,
 				from: t.from,
 				subject: t.subject,
 				provider: i.provider,
 				ok: !0,
 				ts: Date.now()
 			});
-		})), r.tapError((i) => r.sync(() => {
-			Y.warn("mail failed", {
+		})), n.tapError((i) => n.sync(() => {
+			q.warn("mail failed", {
 				provider: i.provider,
 				status: i.status,
 				message: i.message
 			}), e.onSent?.({
 				id: `err-${Date.now()}`,
-				to: n,
+				to: r,
 				from: t.from,
 				subject: t.subject,
 				provider: i.provider,
@@ -715,14 +735,14 @@ var b = class extends u.TaggedError()("MailError", {
 				ts: Date.now()
 			});
 		})));
-	}, v = (t) => r.gen(function* () {
-		let n = yield* g(t);
-		return n.kind === "skip" ? n.result : h.shouldHold(t.scheduledAt) ? (yield* h.hold(n.message), Y.info("mail scheduled (held for later flush)", {
+	}, v = (t) => n.gen(function* () {
+		let n = yield* _(t);
+		return n.kind === "skip" ? n.result : h.shouldHold(t.scheduledAt) ? (yield* h.hold(n.message), q.info("mail scheduled (held for later flush)", {
 			subject: n.message.subject,
 			dueAt: t.scheduledAt?.toISOString()
 		}), e.onSent?.({
 			id: "scheduled",
-			to: C(n.message.to),
+			to: E(n.message.to),
 			from: n.message.from,
 			subject: n.message.subject,
 			provider: "scheduled",
@@ -731,24 +751,24 @@ var b = class extends u.TaggedError()("MailError", {
 		}), {
 			id: "scheduled",
 			provider: "scheduled"
-		}) : yield* _(n.message);
-	}), y = (e, t, n) => t === void 0 ? n : r.gen(function* () {
-		let r = yield* m.reserve(e, t);
-		if (!r.won) return Y.info("mail idempotent replay — skipped", { key: t }), r.prior ?? {
+		}) : yield* ee(n.message);
+	}), y = (e, t, r) => t === void 0 ? r : n.gen(function* () {
+		let n = yield* m.reserve(e, t);
+		if (!n.won) return q.info("mail idempotent replay — skipped", { key: t }), n.prior ?? {
 			id: "idempotent-replay",
 			provider: "idempotent"
 		};
-		let i = yield* n;
+		let i = yield* r;
 		return yield* m.record(e, t, i), i;
-	}), x = (e) => r.suspend(() => {
+	}), b = (e) => n.suspend(() => {
 		let t = u(e.template, e.locale);
-		if (!t) return r.fail(new b({
+		if (!t) return n.fail(new C({
 			provider: "template",
 			message: `unknown template '${e.template}'${e.locale ? ` (locale '${e.locale}')` : ""}`,
 			transient: !1
 		}));
-		let n = f(t, e.props), i = d.get(n);
-		return (i ? r.succeed(i) : E(t, e.props).pipe(r.tap((e) => r.sync(() => p(n, e))))).pipe(r.map((t) => ({
+		let r = f(t, e.props), i = d.get(r);
+		return (i ? n.succeed(i) : k(t, e.props).pipe(n.tap((e) => n.sync(() => p(r, e))))).pipe(n.map((t) => ({
 			to: e.to,
 			subject: t.subject,
 			html: t.html,
@@ -762,33 +782,36 @@ var b = class extends u.TaggedError()("MailError", {
 			...e.attachments === void 0 ? {} : { attachments: e.attachments },
 			...e.tenantId === void 0 ? {} : { tenantId: e.tenantId },
 			...e.scheduledAt === void 0 ? {} : { scheduledAt: e.scheduledAt },
-			...e.idempotencyKey === void 0 ? {} : { idempotencyKey: e.idempotencyKey }
+			...e.idempotencyKey === void 0 ? {} : { idempotencyKey: e.idempotencyKey },
+			...e.stream === void 0 ? {} : { stream: e.stream },
+			...e.unsubscribe === void 0 ? {} : { unsubscribe: e.unsubscribe },
+			...e.metadata === void 0 ? {} : { metadata: e.metadata }
 		})));
-	}), S = (e) => "template" in e ? x(e) : r.succeed(e);
+	}), x = (e) => "template" in e ? b(e) : n.succeed(e);
 	return {
 		service: {
-			send: (e) => r.gen(function* () {
-				let t = yield* S(e);
+			send: (e) => n.gen(function* () {
+				let t = yield* x(e);
 				return yield* y(t.tenantId ?? null, t.idempotencyKey, v(t));
 			}),
-			sendBatch: (t) => r.gen(function* () {
-				let n = yield* r.forEach(t, S), i = n.some((e) => e.idempotencyKey !== void 0 || h.shouldHold(e.scheduledAt));
+			sendBatch: (t) => n.gen(function* () {
+				let r = yield* n.forEach(t, x), i = r.some((e) => e.idempotencyKey !== void 0 || h.shouldHold(e.scheduledAt));
 				if (e.provider.sendBatch && !i) {
 					let t = [], i = [];
-					for (let e of n) {
-						let n = yield* g(e);
+					for (let e of r) {
+						let n = yield* _(e);
 						n.kind === "skip" ? i.push(n.result) : (i.push(t.length), t.push(n.message));
 					}
-					let a = t.length > 0 ? yield* e.provider.sendBatch(t).pipe(r.retry(s), r.tap((n) => r.sync(() => {
-						t.forEach((t, r) => {
-							let i = n[r];
-							i && (Y.info("mail sent (batch)", {
+					let a = t.length > 0 ? yield* e.provider.sendBatch(t).pipe(n.retry(c), n.tap((r) => n.sync(() => {
+						t.forEach((t, n) => {
+							let i = r[n];
+							i && (q.info("mail sent (batch)", {
 								provider: i.provider,
 								id: i.id,
-								to: C(t.to).join(",")
+								to: E(t.to).join(",")
 							}), e.onSent?.({
 								id: i.id,
-								to: C(t.to),
+								to: E(t.to),
 								from: t.from,
 								subject: t.subject,
 								provider: i.provider,
@@ -796,7 +819,7 @@ var b = class extends u.TaggedError()("MailError", {
 								ts: Date.now()
 							}));
 						});
-					})), r.tapError((e) => r.sync(() => Y.warn("mail batch failed", {
+					})), n.tapError((e) => n.sync(() => q.warn("mail batch failed", {
 						provider: e.provider,
 						status: e.status,
 						message: e.message
@@ -806,15 +829,60 @@ var b = class extends u.TaggedError()("MailError", {
 						provider: e.provider.name
 					} : t);
 				}
-				return yield* r.forEach(n, (e) => y(e.tenantId ?? null, e.idempotencyKey, v(e)));
+				return yield* n.forEach(r, (e) => y(e.tenantId ?? null, e.idempotencyKey, v(e)));
 			}),
-			suppress: n.suppress,
-			unsuppress: n.unsuppress,
-			isSuppressed: n.isSuppressed
+			suppress: r.suppress,
+			unsuppress: r.unsuppress,
+			isSuppressed: r.isSuppressed,
+			provider: {
+				name: e.provider.name,
+				managesUnsubscribe: e.provider.managesUnsubscribe === !0
+			}
 		},
 		scheduler: h
 	};
-}, Z = (e) => X(e).service, Ae = (e) => a.succeed(S, Z(e)), je = (e = 200) => {
+}, Ke = (e) => J(e).service, qe = (e) => i.succeed(ne, Ke(e)), Y = (e, t, n, r, i, a = {}) => {
+	if (!t) return null;
+	let o = a.metadata !== null && typeof a.metadata == "object" ? Object.fromEntries(Object.entries(a.metadata).filter(([, e]) => typeof e == "string")) : void 0;
+	return {
+		type: e,
+		email: t,
+		provider: n,
+		raw: i,
+		...r === void 0 ? {} : { messageId: r },
+		...a.eventId === void 0 ? {} : { eventId: a.eventId },
+		...o === void 0 ? {} : { metadata: o }
+	};
+}, Je = (e) => e === "message.hard_bounced" ? "bounced" : e === "message.spam_complaint" ? "complained" : e === "message.unsubscribed" ? "unsubscribed" : e === "message.delivered" ? "delivered" : e === "message.opened" ? "opened" : e === "message.clicked" ? "clicked" : "unknown", Ye = (e) => e === "hard_bounce" ? "bounced" : e === "spam_complaint" ? "complained" : e === "unsubscribe" ? "unsubscribed" : "unknown", Xe = (e) => e === "email.bounced" ? "bounced" : e === "email.complained" ? "complained" : e === "email.delivered" ? "delivered" : e === "email.opened" ? "opened" : e === "email.clicked" ? "clicked" : "unknown", Ze = (e) => e === "Bounce" ? "bounced" : e === "SpamComplaint" ? "complained" : e === "Delivery" ? "delivered" : e === "Open" ? "opened" : e === "Click" ? "clicked" : "unknown", Qe = (e) => e === "bounce" || e === "dropped" ? "bounced" : e === "spamreport" ? "complained" : e === "delivered" ? "delivered" : e === "open" ? "opened" : e === "click" ? "clicked" : "unknown", X = (e, t) => {
+	let n = [], r = (e) => {
+		e && n.push(e);
+	};
+	if (e === "sendgrid" && Array.isArray(t)) {
+		for (let e of t) r(Y(Qe(String(e.event)), e.email, "sendgrid", e.sg_message_id, e));
+		return n;
+	}
+	let i = t ?? {};
+	if (e === "lettermint") {
+		let e = String(i.event), a = i.data ?? {}, o = typeof i.id == "string" ? i.id : void 0;
+		return e === "suppression.added" ? (a.type === "email" && r(Y(Ye(String(a.reason)), a.value, "lettermint", void 0, t, { eventId: o })), n) : e === "suppression.removed" ? (a.type === "email" && r(Y("unsuppressed", a.value, "lettermint", void 0, t, { eventId: o })), n) : (e.startsWith("message.") && r(Y(Je(e), a.recipient, "lettermint", a.message_id, t, {
+			eventId: o,
+			metadata: a.metadata
+		})), n);
+	}
+	if (e === "resend") {
+		let e = i.data ?? {}, a = Array.isArray(e.to) ? e.to[0] : e.to ?? e.email;
+		return r(Y(Xe(String(i.type)), a, "resend", e.email_id, t)), n;
+	}
+	if (e === "postmark") {
+		let e = i.Email ?? i.Recipient;
+		return r(Y(Ze(String(i.RecordType)), e, "postmark", i.MessageID, t, { metadata: i.Metadata })), n;
+	}
+	return n;
+}, $e = (e, t, r, i = null) => n.gen(function* () {
+	let n = X(e, t);
+	for (let e of n) e.type === "bounced" || e.type === "complained" ? yield* r.suppress(i, e.email, e.type) : e.type === "unsuppressed" && (yield* r.unsuppress(i, e.email));
+	return n;
+}), et = (e = 200) => {
 	let t = [];
 	return {
 		record: (n) => {
@@ -825,7 +893,37 @@ var b = class extends u.TaggedError()("MailError", {
 			t.length = 0;
 		}
 	};
-}, Q = (e, t) => {
+}, tt = {
+	lettermint: "api.lettermint.co",
+	resend: "api.resend.com",
+	postmark: "api.postmarkapp.com",
+	sendgrid: "api.sendgrid.com"
+}, nt = (e) => {
+	try {
+		return new URL(e).host || void 0;
+	} catch {
+		return;
+	}
+}, rt = (e) => {
+	let t = e.env ?? {}, n = (e) => [{
+		destination: e,
+		purpose: "outgoing email: recipients, subject and body",
+		data: ["personal", "content"],
+		disable: "MAIL_PROVIDER=console (or memory) logs mail instead of sending it — none leaves"
+	}];
+	if (e.provider !== void 0 && typeof e.provider != "string") {
+		let t = e.provider.name;
+		return t === "console" || t === "memory" ? [] : n(`runtime:the '${t}' mail provider`);
+	}
+	let r = e.provider ?? t.MAIL_PROVIDER ?? "console", i = tt[r];
+	if (i !== void 0) return n(i);
+	switch (r) {
+		case "ses": return n(t.AWS_REGION ? `email.${t.AWS_REGION}.amazonaws.com` : "runtime:email.<AWS_REGION>.amazonaws.com");
+		case "mailgun": return n((t.MAILGUN_BASE_URL ? nt(t.MAILGUN_BASE_URL) : void 0) ?? "api.mailgun.net");
+		case "smtp": return n((t.SMTP_URL ? nt(t.SMTP_URL) : void 0) ?? (t.SMTP_HOST ? `${t.SMTP_HOST}${t.SMTP_PORT ? `:${t.SMTP_PORT}` : ""}` : void 0) ?? "runtime:SMTP_URL or SMTP_HOST");
+		default: return [];
+	}
+}, Z = (e, t) => {
 	if (t > 6) return null;
 	switch (e._tag) {
 		case "StringKeyword": return "";
@@ -835,50 +933,34 @@ var b = class extends u.TaggedError()("MailError", {
 		case "Enums": return e.enums.length > 0 ? e.enums[0][1] : null;
 		case "TypeLiteral": {
 			let n = {};
-			for (let r of e.propertySignatures) typeof r.name == "string" && (n[r.name] = Q(r.type, t + 1));
+			for (let r of e.propertySignatures) typeof r.name == "string" && (n[r.name] = Z(r.type, t + 1));
 			return n;
 		}
 		case "TupleType": return [];
-		case "Union": return e.types.length > 0 ? Q(e.types[0], t + 1) : null;
-		case "Refinement": return Q(e.from, t + 1);
-		case "Transformation": return Q(e.from, t + 1);
-		case "Suspend": return Q(e.f(), t + 1);
+		case "Union": return e.types.length > 0 ? Z(e.types[0], t + 1) : null;
+		case "Refinement": return Z(e.from, t + 1);
+		case "Transformation": return Z(e.from, t + 1);
+		case "Suspend": return Z(e.f(), t + 1);
 		default: return null;
 	}
-}, Me = (e) => Q(e.ast, 0), $ = (e, t, n, r, i) => t ? {
-	type: e,
-	email: t,
-	provider: n,
-	raw: i,
-	...r === void 0 ? {} : { messageId: r }
-} : null, Ne = (e) => e === "email.bounced" ? "bounced" : e === "email.complained" ? "complained" : e === "email.delivered" ? "delivered" : e === "email.opened" ? "opened" : e === "email.clicked" ? "clicked" : "unknown", Pe = (e) => e === "Bounce" ? "bounced" : e === "SpamComplaint" ? "complained" : e === "Delivery" ? "delivered" : e === "Open" ? "opened" : e === "Click" ? "clicked" : "unknown", Fe = (e) => e === "bounce" || e === "dropped" ? "bounced" : e === "spamreport" ? "complained" : e === "delivered" ? "delivered" : e === "open" ? "opened" : e === "click" ? "clicked" : "unknown", Ie = (e, t) => {
-	let n = [], r = (e) => {
-		e && n.push(e);
-	};
-	if (e === "sendgrid" && Array.isArray(t)) {
-		for (let e of t) r($(Fe(String(e.event)), e.email, "sendgrid", e.sg_message_id, e));
-		return n;
-	}
-	let i = t ?? {};
-	if (e === "resend") {
-		let e = i.data ?? {}, a = Array.isArray(e.to) ? e.to[0] : e.to ?? e.email;
-		return r($(Ne(String(i.type)), a, "resend", e.email_id, t)), n;
-	}
-	if (e === "postmark") {
-		let e = i.Email ?? i.Recipient;
-		return r($(Pe(String(i.RecordType)), e, "postmark", i.MessageID, t)), n;
-	}
-	return n;
-}, Le = (e, t, n, i = null) => r.gen(function* () {
-	let r = Ie(e, t);
-	for (let e of r) (e.type === "bounced" || e.type === "complained") && (yield* n.suppress(i, e.email, e.type));
-	return r;
-}), Re = p([
+}, it = (e) => Z(e.ast, 0), Q = u([
 	{
 		name: "MAIL_PROVIDER",
 		required: !1,
 		secret: !1,
-		description: "Provider to build from env: resend | postmark | sendgrid | ses | mailgun | smtp | console | memory. Default: console."
+		description: "Provider to build from env: lettermint | resend | postmark | sendgrid | ses | mailgun | smtp | console | memory. Default: console."
+	},
+	{
+		name: "LETTERMINT_PROJECT_TOKEN",
+		required: !1,
+		secret: !0,
+		description: "Lettermint project API token (lm_…) — needed only when the provider resolves to lettermint (or pass options.apiKey)."
+	},
+	{
+		name: "MAIL_WEBHOOK_SECRET",
+		required: !1,
+		secret: !0,
+		description: "Signing secret of the provider delivery-event webhook mounted by mailPlugin({ webhook })."
 	},
 	{
 		name: "RESEND_API_KEY",
@@ -981,202 +1063,182 @@ var b = class extends u.TaggedError()("MailError", {
 		required: !1,
 		secret: !1,
 		description: "Comma-separated recipient allowlist; in dev, mail to addresses outside it is skipped."
-	},
-	{
-		name: "DB_URL",
-		required: !1,
-		secret: !0,
-		description: "Postgres connection URL for the postgres suppression store (credential-carrying). Falls back to DB_PRIMARY_URL."
-	},
-	{
-		name: "DB_PRIMARY_URL",
-		required: !1,
-		secret: !0,
-		description: "Fallback Postgres connection URL for the postgres suppression store (credential-carrying)."
-	},
-	{
-		name: "DB_HOST",
-		required: !1,
-		secret: !1,
-		description: "Postgres host for the postgres suppression store when no URL is set. Falls back to PG_HOST, then localhost."
-	},
-	{
-		name: "PG_HOST",
-		required: !1,
-		secret: !1,
-		description: "Fallback Postgres host for the postgres suppression store."
-	},
-	{
-		name: "DB_PORT",
-		required: !1,
-		secret: !1,
-		description: "Postgres port for the postgres suppression store when no URL is set. Falls back to PG_PORT, then 5432."
-	},
-	{
-		name: "PG_PORT",
-		required: !1,
-		secret: !1,
-		description: "Fallback Postgres port for the postgres suppression store."
-	},
-	{
-		name: "DB_USER",
-		required: !1,
-		secret: !1,
-		description: "Postgres username for the postgres suppression store when no URL is set. Falls back to PG_USER, then \"app\"."
-	},
-	{
-		name: "PG_USER",
-		required: !1,
-		secret: !1,
-		description: "Fallback Postgres username for the postgres suppression store."
-	},
-	{
-		name: "DB_PASSWORD",
-		required: !1,
-		secret: !0,
-		description: "Postgres password for the postgres suppression store when no URL is set. Falls back to PG_PASSWORD."
-	},
-	{
-		name: "PG_PASSWORD",
-		required: !1,
-		secret: !0,
-		description: "Fallback Postgres password for the postgres suppression store."
-	},
-	{
-		name: "DB_DATABASE",
-		required: !1,
-		secret: !1,
-		description: "Postgres database name for the postgres suppression store when no URL is set. Falls back to PG_DATABASE, then \"app\"."
-	},
-	{
-		name: "PG_DATABASE",
-		required: !1,
-		secret: !1,
-		description: "Fallback Postgres database name for the postgres suppression store."
 	}
-]), ze = "@voltro/plugin-mail", Be = (e = {}) => {
-	let t = process.env, o = ke({
+]), at = "@voltro/plugin-mail", $ = (e, t) => ({
+	status: e,
+	contentType: "application/json",
+	body: JSON.stringify(t)
+}), ot = (e, t, r, i) => {
+	let a = e.webhook;
+	if (a === void 0) throw Error(`@voltro/plugin-mail: provider '${e.name}' has no webhook verifier — mailPlugin({ webhook }) needs one (lettermint)`);
+	let o = r.secret ?? Q.read("MAIL_WEBHOOK_SECRET");
+	if (!o && i) throw Error("@voltro/plugin-mail: mailPlugin({ webhook }) needs a signing secret in production — set MAIL_WEBHOOK_SECRET");
+	return {
+		method: "POST",
+		path: r.path ?? "/webhooks/mail",
+		handle: async (i) => {
+			if (!o) return $(503, { error: "mail webhook secret not configured" });
+			let s = await n.runPromise(n.either(a.verify(i.headers, new TextDecoder().decode(i.rawBody), o)));
+			if (s._tag === "Left") return $(401, { error: s.left.message });
+			let c = X(e.name, s.right);
+			try {
+				for (let e of c) {
+					e.type === "bounced" || e.type === "complained" ? await n.runPromise(t.suppress(null, e.email, e.type)) : e.type === "unsuppressed" && await n.runPromise(t.unsuppress(null, e.email));
+					let a = r.onEvent?.(e, { store: i.store });
+					n.isEffect(a) ? await n.runPromise(a) : await a;
+				}
+			} catch (e) {
+				return {
+					...$(500, { error: "mail event handling failed" }),
+					cause: e
+				};
+			}
+			return $(200, { received: c.length });
+		}
+	};
+}, st = (e = {}) => {
+	let a = process.env, s = Ge({
 		...e.provider === void 0 ? {} : { provider: e.provider },
 		...e.apiKey === void 0 ? {} : { apiKey: e.apiKey },
-		env: t
-	}), s = Re.read("MAIL_ALLOWLIST"), c = e.allowlist ?? (s ? s.split(",").map((e) => e.trim()).filter(Boolean) : void 0), u = t.NODE_ENV === "production", p = e.suppression === void 0 || e.suppression === "memory" ? M() : e.suppression === "postgres" ? le() : e.suppression, m = e.idempotency === void 0 || e.idempotency === "memory" ? P() : e.idempotency === "postgres" ? F() : e.idempotency, h = e.schedule ?? I(), g = je(), _ = X({
-		provider: o,
+		env: a
+	}), u = Q.read("MAIL_ALLOWLIST"), d = e.allowlist ?? (u ? u.split(",").map((e) => e.trim()).filter(Boolean) : void 0), f = a.NODE_ENV === "production", p = e.suppression === void 0 || e.suppression === "memory" ? R() : e.suppression === "postgres" ? me() : e.suppression, m = e.idempotency === void 0 || e.idempotency === "memory" ? B() : e.idempotency === "postgres" ? ge() : e.idempotency, h = e.schedule ?? V(), g = [...e.suppression === "postgres" ? [ue] : [], ...e.idempotency === "postgres" ? [de] : []];
+	e.idempotency === "postgres" && _({
+		source: "plugin",
+		table: N,
+		timeColumn: "createdAt",
+		ttlMs: ee(process.env.VOLTRO_MAIL_IDEMPOTENCY_TTL_HOURS, 720),
+		label: "mail idempotency keys"
+	});
+	let v = et(), y = J({
+		provider: s,
 		suppression: p,
 		idempotency: m,
 		schedule: h,
-		onSent: g.record,
+		onSent: v.record,
 		...e.from === void 0 ? {} : { from: e.from },
 		...e.replyTo === void 0 ? {} : { replyTo: e.replyTo },
-		...c === void 0 ? {} : { allowlist: c },
+		...d === void 0 ? {} : { allowlist: d },
 		...e.attempts === void 0 ? {} : { attempts: e.attempts },
 		...e.templates === void 0 ? {} : { templates: e.templates },
-		production: u
-	}), v = a.succeed(S, _.service), y = o.supportsScheduling !== !0, b = e.scheduleTickMs ?? 1e3, x, C = /* @__PURE__ */ new Map();
+		production: f
+	}), b = i.succeed(ne, y.service), x = s.supportsScheduling !== !0, te = e.scheduleTickMs ?? 1e3, S, C = /* @__PURE__ */ new Map();
 	for (let t of e.templates ?? []) C.set(t.locale ? `${t.name}:${t.locale}` : t.name, t);
-	let ee = (e, t) => (t ? C.get(`${e}:${t}`) : void 0) ?? C.get(e) ?? O(e, t), w = (e) => ({
+	let w = (e, t) => (t ? C.get(`${e}:${t}`) : void 0) ?? C.get(e) ?? j(e, t), T = (e) => ({
 		name: e.name,
 		...e.locale ? { locale: e.locale } : {},
-		props: e.preview ?? Me(e.props)
-	}), T = () => {
+		props: e.preview ?? it(e.props)
+	}), E = () => {
 		let t = /* @__PURE__ */ new Map();
-		for (let n of e.templates ?? []) t.set(n.locale ? `${n.name}:${n.locale}` : n.name, w(n));
-		for (let e of k()) {
-			let n = O(e.name, e.locale);
-			n && t.set(e.locale ? `${e.name}:${e.locale}` : e.name, w(n));
+		for (let n of e.templates ?? []) t.set(n.locale ? `${n.name}:${n.locale}` : n.name, T(n));
+		for (let e of se()) {
+			let n = j(e.name, e.locale);
+			n && t.set(e.locale ? `${e.name}:${e.locale}` : e.name, T(n));
 		}
 		return [...t.values()];
-	};
-	return d({
-		name: f({
-			base: ze,
-			alias: e.alias,
-			instance: e.name
-		}),
-		baseName: ze,
-		description: "Transactional email — MailService over Resend / Postmark / SendGrid / SMTP (+ console/memory), with default-from, transient retry and a dev allowlist.",
-		permissions: [
-			"network:outbound:*",
-			"inspect:read",
-			"inspect:write"
-		],
-		declaredEnv: Re.declared,
-		services: v,
-		inspectEndpoints: [
-			{
-				method: "GET",
-				path: "/outbox",
-				scope: "process",
-				description: "Recent sent mail (dev capture buffer), newest first",
-				handler: () => r.succeed({
-					kind: "json",
-					data: { sends: g.list() }
-				})
-			},
-			{
-				method: "GET",
-				path: "/templates",
-				scope: "declaration",
-				description: "Discovered + registered email templates",
-				handler: () => r.succeed({
-					kind: "json",
-					data: { templates: T() }
-				})
-			},
-			{
-				method: "POST",
-				path: "/preview",
-				description: "Render a template to html + text without sending — body { template, props, locale? }",
-				handler: (e) => r.gen(function* () {
-					let t = {};
-					try {
-						t = JSON.parse(e.body || "{}");
-					} catch {
-						return {
-							kind: "json",
-							status: 400,
-							data: { error: "invalid JSON body" }
-						};
-					}
-					if (!t.template) return {
-						kind: "json",
-						status: 400,
-						data: { error: "missing \"template\"" }
-					};
-					let n = ee(t.template, t.locale);
-					return n ? yield* E(n, t.props).pipe(r.map((e) => ({
-						kind: "json",
-						data: e
-					})), r.catchAll((e) => r.succeed({
+	}, D = e.webhook === void 0 ? [] : [ot(s, p, e.webhook, f)], O = [
+		{
+			method: "GET",
+			path: "/outbox",
+			scope: "process",
+			description: "Recent sent mail (dev capture buffer), newest first",
+			handler: () => n.succeed({
+				kind: "json",
+				data: { sends: v.list() }
+			})
+		},
+		{
+			method: "GET",
+			path: "/templates",
+			scope: "declaration",
+			description: "Discovered + registered email templates",
+			handler: () => n.succeed({
+				kind: "json",
+				data: { templates: E() }
+			})
+		},
+		{
+			method: "POST",
+			path: "/preview",
+			description: "Render a template to html + text without sending — body { template, props, locale? }",
+			handler: (e) => n.gen(function* () {
+				let t = {};
+				try {
+					t = JSON.parse(e.body || "{}");
+				} catch {
+					return {
 						kind: "json",
 						status: 400,
-						data: { error: e.message }
-					}))) : {
-						kind: "json",
-						status: 404,
-						data: { error: `unknown template '${t.template}'` }
+						data: { error: "invalid JSON body" }
 					};
-				})
-			}
-		],
-		onActivate: (t) => r.gen(function* () {
-			if (p.activate && (yield* r.promise(() => p.activate(t.env))), m.activate && (yield* r.promise(() => m.activate(t.env))), y) {
-				let e = _.scheduler.tick().pipe(r.repeat(l.spaced(n.millis(Math.max(50, b)))));
-				x = r.runFork(e);
-			}
-			t.logger.info("mail active", {
-				provider: o.name,
-				from: e.from ?? null,
-				allowlist: c?.length ?? 0,
-				suppression: typeof e.suppression == "string" ? e.suppression : e.suppression ? "custom" : "memory",
-				idempotency: typeof e.idempotency == "string" ? e.idempotency : e.idempotency ? "custom" : "memory",
-				scheduling: o.supportsScheduling === !0 ? "native" : "held",
-				production: u
-			});
+				}
+				if (!t.template) return {
+					kind: "json",
+					status: 400,
+					data: { error: "missing \"template\"" }
+				};
+				let r = w(t.template, t.locale);
+				return r ? yield* k(r, t.props).pipe(n.map((e) => ({
+					kind: "json",
+					data: e
+				})), n.catchAll((e) => n.succeed({
+					kind: "json",
+					status: 400,
+					data: { error: e.message }
+				}))) : {
+					kind: "json",
+					status: 404,
+					data: { error: `unknown template '${t.template}'` }
+				};
+			})
+		}
+	];
+	return {
+		...c({
+			name: l({
+				base: at,
+				alias: e.alias,
+				instance: e.name
+			}),
+			baseName: at,
+			description: "Transactional and broadcast email — MailService over Lettermint / Resend / Postmark / SendGrid / SES / Mailgun / SMTP (+ console/memory), with default-from, transient retry, suppression and a dev allowlist.",
+			permissions: [
+				"network:outbound:*",
+				"inspect:read",
+				"inspect:write"
+			],
+			declaredEnv: Q.declared,
+			egress: rt({
+				...e.provider === void 0 ? {} : { provider: e.provider },
+				env: a
+			}),
+			services: b,
+			inspectEndpoints: O,
+			...D.length > 0 ? { httpRoutes: D } : {},
+			...g.length > 0 ? { extendSchema: { tables: g } } : {},
+			bindDataStore: async (e) => {
+				await p.bind?.(e), await m.bind?.(e);
+			},
+			onActivate: (r) => n.gen(function* () {
+				if (p.activate && (yield* n.promise(() => p.activate(r.env))), m.activate && (yield* n.promise(() => m.activate(r.env))), x) {
+					let e = y.scheduler.tick().pipe(n.repeat(o.spaced(t.millis(Math.max(50, te)))));
+					S = n.runFork(e);
+				}
+				r.logger.info("mail active", {
+					provider: s.name,
+					from: e.from ?? null,
+					allowlist: d?.length ?? 0,
+					suppression: typeof e.suppression == "string" ? e.suppression : e.suppression ? "custom" : "memory",
+					idempotency: typeof e.idempotency == "string" ? e.idempotency : e.idempotency ? "custom" : "memory",
+					scheduling: s.supportsScheduling === !0 ? "native" : "held",
+					production: f
+				});
+			}),
+			onDeactivate: () => n.gen(function* () {
+				S !== void 0 && (yield* r.interrupt(S), S = void 0), p.deactivate && (yield* n.promise(() => p.deactivate())), m.deactivate && (yield* n.promise(() => m.deactivate()));
+			})
 		}),
-		onDeactivate: () => r.gen(function* () {
-			x !== void 0 && (yield* i.interrupt(x), x = void 0), p.deactivate && (yield* r.promise(() => p.deactivate())), m.deactivate && (yield* r.promise(() => m.deactivate()));
-		})
-	});
+		service: y.service
+	};
 };
 //#endregion
-export { b as MailError, S as MailService, Z as buildMailService, X as buildMailServiceWithScheduler, ie as clearGlobalTemplates, De as clearMailBuffer, Te as consoleProvider, je as createOutbox, x as defineEmail, re as globalTemplateCount, Le as handleMailEvents, L as heldId, ae as isEmailTemplate, k as listGlobalTemplates, O as lookupGlobalTemplate, Be as mailPlugin, Ae as mailServiceLayer, we as mailgunProvider, R as makeScheduler, P as memoryIdempotencyStore, Oe as memoryProvider, I as memoryScheduleStore, M as memorySuppressionStore, Ie as parseMailEvent, F as postgresIdempotencyStore, le as postgresSuppressionStore, W as postmarkProvider, Ee as readMailBuffer, ne as registerEmailTemplates, E as renderTemplate, U as resendProvider, ke as resolveProvider, _e as sendgridProvider, Se as sesProvider, q as smtpProvider };
+export { C as MailError, ne as MailService, w as MailWebhookError, Ke as buildMailService, J as buildMailServiceWithScheduler, ce as clearGlobalTemplates, Ue as clearMailBuffer, Ve as consoleProvider, et as createOutbox, T as defineEmail, oe as globalTemplateCount, $e as handleMailEvents, ye as heldId, le as isEmailTemplate, Ee as lettermintProvider, se as listGlobalTemplates, j as lookupGlobalTemplate, rt as mailEgressOf, st as mailPlugin, qe as mailServiceLayer, Be as mailgunProvider, be as makeScheduler, B as memoryIdempotencyStore, We as memoryProvider, V as memoryScheduleStore, R as memorySuppressionStore, X as parseMailEvent, ge as postgresIdempotencyStore, me as postgresSuppressionStore, ke as postmarkProvider, He as readMailBuffer, ae as registerEmailTemplates, k as renderTemplate, Oe as resendProvider, Ge as resolveProvider, Ne as sendgridProvider, Re as sesProvider, G as smtpProvider, Te as verifyLettermintSignature };