@voltro/plugin-mail 0.84.0 → 0.86.0

package/dist/index.js

@@ -1,951 +1,22 @@
-import { Context as e, Duration as t, Effect as n, Fiber as r, Layer as i, ParseResult as a, Schedule as o, Schema as s } from "effect";
-import { definePlugin as c, pluginInstanceName as l } from "@voltro/protocol";
-import { pluginEnv as u } from "@voltro/env";
-import { createLogger as d } from "@voltro/logger";
-import { and as f, dropped as p, eq as m, id as h, inSet as g, queryFor as _, registerRetention as ee, retentionTtlMsFromEnv as v, table as y, text as b, timestamp as x } from "@voltro/database";
-import { FetchHttpClient as te, HttpClient as S, HttpClientRequest as C } from "@effect/platform";
-//#region src/types.ts
-var w = class extends s.TaggedError()("MailError", {
-	provider: s.String,
-	message: s.String,
-	transient: s.Boolean,
-	status: s.optional(s.Number)
-}) {}, T = class extends s.TaggedError()("MailWebhookError", {
-	provider: s.String,
-	message: s.String
-}) {}, ne = (e) => ({
-	name: e.name,
-	props: e.props,
-	subject: e.subject,
-	render: e.render,
-	...e.locale === void 0 ? {} : { locale: e.locale },
-	...e.preview === void 0 ? {} : { preview: e.preview }
-}), E = class extends e.Tag("@voltro/plugin-mail/MailService")() {}, D = (e) => e === void 0 ? [] : typeof e == "string" ? [e] : e, re = (e) => {
-	try {
-		let t = a.ArrayFormatter.formatErrorSync(e);
-		return t.length === 0 ? String(e) : t.map((e) => `${e.path.length > 0 ? e.path.join(".") : "(root)"}: ${e.message}`).join("; ");
-	} catch {
-		return String(e);
-	}
-}, O = null, ie = async () => {
-	if (!O) {
-		let e = await import("@react-email/render");
-		if (O = e.render ?? e.default?.render ?? null, !O) throw Error("@react-email/render: `render` export not found (install @react-email/render + react + react-dom)");
-	}
-	return O;
-}, k = (e, t) => n.gen(function* () {
-	let r = e, i = yield* s.decodeUnknown(r.props)(t).pipe(n.mapError((t) => new w({
-		provider: "template",
-		message: `invalid props for '${e.name}': ${re(t)}`.slice(0, 500),
-		transient: !1
-	}))), a = r.subject(i), o = r.render(i);
-	return {
-		subject: a,
-		html: yield* n.tryPromise({
-			try: async () => (await ie())(o, { plainText: !1 }),
-			catch: (t) => new w({
-				provider: "template",
-				message: `render failed for '${e.name}': ${String(t)}`.slice(0, 500),
-				transient: !1
-			})
-		}),
-		text: yield* n.tryPromise({
-			try: async () => (await ie())(o, { plainText: !0 }),
-			catch: (t) => new w({
-				provider: "template",
-				message: `render(text) failed for '${e.name}': ${String(t)}`.slice(0, 500),
-				transient: !1
-			})
-		})
-	};
-}), A = /* @__PURE__ */ new Map(), ae = (e) => e.locale ? `${e.name}:${e.locale}` : e.name, oe = (e) => {
-	for (let t of e) A.set(ae(t), t);
-}, j = (e, t) => (t ? A.get(`${e}:${t}`) : void 0) ?? A.get(e), se = () => A.size, ce = () => [...A.values()].map((e) => e.locale ? {
-	name: e.name,
-	locale: e.locale
-} : { name: e.name }), le = () => A.clear(), ue = (e) => {
-	if (typeof e != "object" || !e) return !1;
-	let t = e;
-	return typeof t.name == "string" && typeof t.subject == "function" && typeof t.render == "function" && t.props !== void 0;
-}, M = "_voltro_mail_suppression", N = "_voltro_mail_idempotency", de = y(M, {
-	id: h({ scheme: "numeric" }),
-	tenant: b().maxLength(191),
-	email: b().maxLength(320),
-	reason: b().nullable(),
-	createdAt: x().default("now"),
-	created_at: p()
-}).unique("mailSuppressionAddress", ["tenant", "email"]).nonReactive(), fe = y(N, {
-	id: h({ scheme: "numeric" }),
-	tenant: b().maxLength(191),
-	key: b().maxLength(255),
-	resultId: b().nullable().renamedFrom("result_id"),
-	resultProvider: b().nullable().renamedFrom("result_provider"),
-	createdAt: x().default("now"),
-	created_at: p()
-}).unique("mailIdempotencyKey", ["tenant", "key"]).nonReactive(), P = (e) => n.tryPromise({
-	try: e,
-	catch: (e) => e
-}), F = (e) => {
-	let t = [];
-	for (let n = e, r = 0; n != null && r < 4; n = n.cause, r++) t.push(n instanceof Error ? n.message : String(n));
-	return t.join(" ← ");
-}, pe = d({ scope: "@voltro/plugin-mail" }), I = (e) => e.trim().toLowerCase(), me = "*", L = (e) => e ?? me, R = () => {
-	let e = /* @__PURE__ */ new Set(), t = (e, t) => `${L(e)}\u0000${I(t)}`;
-	return {
-		isSuppressed: (r, i) => n.sync(() => e.has(t(r, i)) || e.has(t(null, i))),
-		suppress: (r, i) => n.sync(() => void e.add(t(r, i))),
-		unsuppress: (r, i) => n.sync(() => void e.delete(t(r, i)))
-	};
-}, he = () => {
-	let e = null, t = (e, t) => ({
-		tenant: L(e),
-		email: I(t)
-	});
-	return {
-		isSuppressed: (t, r) => {
-			let i = e;
-			return i ? P(() => i.query(_(de).where(f(m("email", I(r)), g("tenant", [L(t), me]))).limit(1).descriptor)).pipe(n.map((e) => e.length > 0), n.catchAll(() => n.succeed(!1))) : n.succeed(!1);
-		},
-		suppress: (r, i, a) => {
-			let o = e;
-			return o ? P(() => o.upsert(M, {
-				...t(r, i),
-				reason: a,
-				createdAt: /* @__PURE__ */ new Date()
-			}, { conflictColumns: ["tenant", "email"] })).pipe(n.asVoid, n.catchAll((e) => n.sync(() => pe.warn("suppress write failed", {
-				email: I(i),
-				message: F(e)
-			})))) : n.void;
-		},
-		unsuppress: (r, i) => {
-			let a = e;
-			if (!a) return n.void;
-			let { tenant: o, email: s } = t(r, i);
-			return P(() => a.deleteMany(M, { where: f(m("tenant", o), m("email", s)) })).pipe(n.asVoid, n.catchAll(() => n.void));
-		},
-		bind: async (t) => {
-			e = t;
-		}
-	};
-}, ge = d({ scope: "@voltro/plugin-mail" }), z = (e) => e ?? "*", B = () => {
-	let e = /* @__PURE__ */ new Map(), t = (e, t) => `${z(e)} ${t}`;
-	return {
-		reserve: (r, i) => n.sync(() => {
-			let n = t(r, i);
-			if (e.has(n)) {
-				let t = e.get(n);
-				return t ? {
-					won: !1,
-					prior: t
-				} : { won: !1 };
-			}
-			return e.set(n, null), { won: !0 };
-		}),
-		record: (r, i, a) => n.sync(() => void e.set(t(r, i), a))
-	};
-}, _e = () => {
-	let e = null;
-	return {
-		reserve: (t, r) => {
-			let i = e;
-			return i ? P(() => i.insertIgnoreWithOutcome(N, {
-				tenant: z(t),
-				key: r,
-				createdAt: /* @__PURE__ */ new Date()
-			}, { conflictColumns: ["tenant", "key"] })).pipe(n.map(({ row: e, outcome: t }) => {
-				if (t === "inserted") return { won: !0 };
-				let n = e.resultId, r = e.resultProvider;
-				return typeof n == "string" && typeof r == "string" ? {
-					won: !1,
-					prior: {
-						id: n,
-						provider: r
-					}
-				} : { won: !1 };
-			}), n.catchAll((e) => n.sync(() => (ge.warn("idempotency reserve failed — skipping send to avoid a double", {
-				key: r,
-				message: F(e)
-			}), { won: !1 })))) : n.succeed({ won: !0 });
-		},
-		record: (t, r, i) => {
-			let a = e;
-			return a ? P(() => a.updateMany(N, {
-				resultId: i.id,
-				resultProvider: i.provider
-			}, { where: f(m("tenant", z(t)), m("key", r)) })).pipe(n.asVoid, n.catchAll((e) => n.sync(() => ge.warn("idempotency record failed", {
-				key: r,
-				message: F(e)
-			})))) : n.void;
-		},
-		bind: async (t) => {
-			e = t;
-		}
-	};
-}, ve = d({ scope: "@voltro/plugin-mail" }), V = () => {
-	let e = /* @__PURE__ */ new Map();
-	return {
-		hold: (t) => n.sync(() => void e.set(t.id, t)),
-		claimDue: (t) => n.sync(() => {
-			let n = [];
-			for (let [r, i] of e) i.dueAt <= t && (n.push(i), e.delete(r));
-			return n;
-		}),
-		size: () => n.sync(() => e.size)
-	};
-}, ye = 0, be = (e) => e.idempotencyKey ?? `held-${ye += 1}`, xe = (e) => ({
-	shouldHold: (t) => !e.providerSchedules && t !== void 0 && t.getTime() > Date.now(),
-	hold: (t) => {
-		let { scheduledAt: n, ...r } = t;
-		return e.store.hold({
-			id: be(t),
-			dueAt: t.scheduledAt?.getTime() ?? Date.now(),
-			message: r
-		});
-	},
-	tick: (t = Date.now()) => n.gen(function* () {
-		let r = yield* e.store.claimDue(t);
-		for (let t of r) yield* e.flush(t.message).pipe(n.catchAll((e) => n.sync(() => ve.warn("scheduled flush failed", {
-			id: t.id,
-			message: String(e)
-		}))));
-		return r.length;
-	}),
-	pending: () => e.store.size()
-}), Se = 0, Ce = (e) => `${e}-${Se += 1}`, we = (e) => e === void 0 || e === 408 || e === 429 || e >= 500, H = (e, t) => {
-	let n = t.status;
-	return new w({
-		provider: e,
-		message: (t.message ?? "send failed").slice(0, 500),
-		transient: e === "smtp" ? n === void 0 || n >= 400 && n < 500 : we(n),
-		...n === void 0 ? {} : { status: n }
-	});
-}, U = (e, t, r, i, a) => n.tryPromise({
-	try: async () => {
-		let e = await fetch(t, {
-			method: "POST",
-			headers: {
-				"content-type": "application/json",
-				...r
-			},
-			body: JSON.stringify(i)
-		});
-		if (!e.ok) {
-			let t = await e.text().catch(() => "");
-			throw {
-				status: e.status,
-				message: t || `HTTP ${e.status}`
-			};
-		}
-		return await a(e);
-	},
-	catch: (t) => {
-		let n = t;
-		return H(e, {
-			...typeof n.status == "number" ? { status: n.status } : {},
-			message: n.message ?? t?.message ?? String(t)
-		});
-	}
-}), W = 500, Te = (e, t) => {
-	let n = e.stream === "broadcast" ? t?.broadcast ?? "broadcast" : t?.transactional;
-	return {
-		...n === void 0 ? {} : { route: n },
-		from: e.from,
-		to: D(e.to),
-		...e.cc ? { cc: D(e.cc) } : {},
-		...e.bcc ? { bcc: D(e.bcc) } : {},
-		...e.replyTo ? { reply_to: [e.replyTo] } : {},
-		subject: e.subject,
-		...e.html === void 0 ? {} : { html: e.html },
-		...e.text === void 0 ? {} : { text: e.text },
-		...e.headers ? { headers: e.headers } : {},
-		...e.metadata ? { metadata: e.metadata } : {},
-		...e.tags && e.tags.length > 0 ? { tags: e.tags.map((e) => ({
-			name: e,
-			value: "1"
-		})) } : {},
-		...e.scheduledAt ? { scheduled_at: e.scheduledAt.toISOString() } : {},
-		...e.attachments ? { attachments: e.attachments.map((e) => ({
-			filename: e.filename,
-			content: e.content,
-			...e.contentType ? { content_type: e.contentType } : {}
-		})) } : {}
-	};
-}, Ee = (e, t, r, i = Math.floor(Date.now() / 1e3), a = 300) => n.tryPromise({
-	try: async () => {
-		let n = (e) => {
-			throw new T({
-				provider: "lettermint",
-				message: e
-			});
-		}, o = (t) => Object.entries(e).find(([e]) => e.toLowerCase() === t)?.[1];
-		r === "" && n("no webhook secret configured"), t === "" && n("empty body");
-		let s = o("x-lettermint-signature") ?? n("missing x-lettermint-signature"), c = o("x-lettermint-delivery") ?? n("missing x-lettermint-delivery"), l, u = [];
-		for (let e of s.split(",")) {
-			let [t, n] = e.trim().split("=", 2);
-			t === "t" && n !== void 0 && /^\d+$/.test(n) ? l = n : t === "v1" && n !== void 0 && /^[a-fA-F0-9]{64}$/.test(n) && u.push(n.toLowerCase());
-		}
-		(l === void 0 || u.length === 0) && n("malformed signature header"), c !== l && n("signature and delivery timestamps differ"), Math.abs(i - Number(l)) > a && n("signature timestamp outside the tolerance");
-		let { createHmac: d, timingSafeEqual: f } = await import("node:crypto"), p = d("sha256", r).update(`${l}.`).update(t).digest();
-		u.some((e) => f(Buffer.from(e, "hex"), p)) || n("signature does not match");
-		try {
-			return JSON.parse(t);
-		} catch {
-			return n("body is not JSON");
-		}
-	},
-	catch: (e) => e instanceof T ? e : new T({
-		provider: "lettermint",
-		message: e?.message ?? String(e)
-	})
-}), De = (e) => {
-	let t = (e.baseUrl ?? "https://api.lettermint.co/v1").replace(/\/+$/, ""), r = {
-		"x-lettermint-token": e.projectToken,
-		accept: "application/json"
-	};
-	return {
-		name: "lettermint",
-		supportsScheduling: !0,
-		managesUnsubscribe: !0,
-		send: (n) => U("lettermint", `${t}/send`, {
-			...r,
-			...n.idempotencyKey === void 0 ? {} : { "idempotency-key": n.idempotencyKey }
-		}, Te(n, e.routes), async (e) => ({
-			id: (await e.json()).message_id ?? "lettermint",
-			provider: "lettermint"
-		})),
-		sendBatch: (i) => n.forEach(Array.from({ length: Math.ceil(i.length / W) }, (e, t) => i.slice(t * W, (t + 1) * W)), (n) => U("lettermint", `${t}/send/batch`, r, n.map((t) => Te(t, e.routes)), async (e) => {
-			let t = await e.json();
-			return n.map((e, n) => ({
-				id: t[n]?.message_id ?? "lettermint",
-				provider: "lettermint"
-			}));
-		})).pipe(n.map((e) => e.flat())),
-		webhook: { verify: Ee }
-	};
-}, Oe = (e) => ({
-	from: e.from,
-	to: D(e.to),
-	subject: e.subject,
-	html: e.html,
-	text: e.text,
-	reply_to: e.replyTo,
-	cc: e.cc ? D(e.cc) : void 0,
-	bcc: e.bcc ? D(e.bcc) : void 0,
-	headers: e.headers,
-	tags: e.tags?.map((e) => ({
-		name: e,
-		value: "1"
-	})),
-	...e.scheduledAt ? { scheduled_at: e.scheduledAt.toISOString() } : {},
-	attachments: e.attachments?.map((e) => ({
-		filename: e.filename,
-		content: e.content,
-		...e.contentType ? { content_type: e.contentType } : {}
-	}))
-}), ke = (e) => ({
-	name: "resend",
-	supportsScheduling: !0,
-	send: (t) => U("resend", "https://api.resend.com/emails", { authorization: `Bearer ${e.apiKey}` }, Oe(t), async (e) => ({
-		id: (await e.json()).id ?? "resend",
-		provider: "resend"
-	})),
-	sendBatch: (t) => U("resend", "https://api.resend.com/emails/batch", { authorization: `Bearer ${e.apiKey}` }, t.map(Oe), async (e) => {
-		let n = (await e.json()).data ?? [];
-		return t.map((e, t) => ({
-			id: n[t]?.id ?? "resend",
-			provider: "resend"
-		}));
-	})
-}), Ae = (e) => ({
-	name: "postmark",
-	send: (t) => U("postmark", "https://api.postmarkapp.com/email", {
-		"x-postmark-server-token": e.serverToken,
-		accept: "application/json"
-	}, {
-		From: t.from,
-		To: D(t.to).join(","),
-		Subject: t.subject,
-		HtmlBody: t.html,
-		TextBody: t.text,
-		ReplyTo: t.replyTo,
-		Cc: t.cc ? D(t.cc).join(",") : void 0,
-		Bcc: t.bcc ? D(t.bcc).join(",") : void 0,
-		MessageStream: t.stream === "broadcast" ? e.streams?.broadcast ?? "broadcast" : e.streams?.transactional ?? "outbound",
-		Headers: t.headers ? Object.entries(t.headers).map(([e, t]) => ({
-			Name: e,
-			Value: t
-		})) : void 0,
-		Metadata: t.metadata,
-		Attachments: t.attachments?.map((e) => ({
-			Name: e.filename,
-			Content: e.content,
-			ContentType: e.contentType ?? "application/octet-stream"
-		}))
-	}, async (e) => ({
-		id: (await e.json()).MessageID ?? "postmark",
-		provider: "postmark"
-	}))
-}), je = (e) => [...e.text ? [{
-	type: "text/plain",
-	value: e.text
-}] : [], ...e.html ? [{
-	type: "text/html",
-	value: e.html
-}] : []], Me = (e) => ({
-	to: D(e.to).map((e) => ({ email: e })),
-	cc: e.cc ? D(e.cc).map((e) => ({ email: e })) : void 0,
-	bcc: e.bcc ? D(e.bcc).map((e) => ({ email: e })) : void 0,
-	subject: e.subject,
-	...e.scheduledAt ? { send_at: Math.floor(e.scheduledAt.getTime() / 1e3) } : {}
-}), Ne = (e) => e.attachments?.map((e) => ({
-	filename: e.filename,
-	content: e.content,
-	type: e.contentType ?? "application/octet-stream",
-	disposition: "attachment"
-})), Pe = (e) => {
-	let t = (e) => ({
-		personalizations: [Me(e)],
-		from: { email: e.from },
-		reply_to: e.replyTo ? { email: e.replyTo } : void 0,
-		subject: e.subject,
-		content: je(e),
-		attachments: Ne(e)
-	});
-	return {
-		name: "sendgrid",
-		supportsScheduling: !0,
-		send: (n) => U("sendgrid", "https://api.sendgrid.com/v3/mail/send", { authorization: `Bearer ${e.apiKey}` }, t(n), async (e) => ({
-			id: e.headers.get("x-message-id") ?? "sendgrid",
-			provider: "sendgrid"
-		})),
-		sendBatch: (t) => U("sendgrid", "https://api.sendgrid.com/v3/mail/send", { authorization: `Bearer ${e.apiKey}` }, {
-			personalizations: t.map(Me),
-			from: { email: t[0]?.from },
-			subject: t[0]?.subject,
-			content: je(t[0] ?? {})
-		}, async (e) => {
-			let n = e.headers.get("x-message-id") ?? "sendgrid";
-			return t.map((e, t) => ({
-				id: `${n}-${t}`,
-				provider: "sendgrid"
-			}));
-		})
-	};
-}, Fe = (e, t) => {
-	let n = t, r = n.response?.status;
-	return H(e, {
-		...typeof r == "number" ? { status: r } : {},
-		message: n.message ?? String(t)
-	});
-}, Ie = (e, t, r) => n.gen(function* () {
-	let i = yield* (yield* S.HttpClient).execute(t);
-	if (i.status < 200 || i.status >= 300) {
-		let t = yield* i.text.pipe(n.catchAll(() => n.succeed("")));
-		return yield* n.fail(H(e, {
-			status: i.status,
-			message: t || `HTTP ${i.status}`
-		}));
-	}
-	return yield* r(i);
-}).pipe(n.catchAll((t) => t instanceof w ? n.fail(t) : n.fail(Fe(e, t))), n.provide(te.layer)), Le = (e) => ({ sign: async (t, n, r) => {
-	let { createHash: i, createHmac: a } = await import("node:crypto"), o = (e) => i("sha256").update(e).digest("hex"), s = (e, t) => a("sha256", e).update(t).digest(), c = (/* @__PURE__ */ new Date()).toISOString().replace(/[:-]|\.\d{3}/g, ""), l = c.slice(0, 8), u = `host:${new URL(t).host}\nx-amz-date:${c}\n` + (e.sessionToken ? `x-amz-security-token:${e.sessionToken}\n` : ""), d = e.sessionToken ? "host;x-amz-date;x-amz-security-token" : "host;x-amz-date", f = `POST\n${n}\n\n${u}\n${d}\n${o(r)}`, p = `${l}/${e.region}/ses/aws4_request`, m = `AWS4-HMAC-SHA256\n${c}\n${p}\n${o(f)}`, h = a("sha256", s(s(s(s(`AWS4${e.secretAccessKey}`, l), e.region), "ses"), "aws4_request")).update(m).digest("hex");
-	return {
-		authorization: `AWS4-HMAC-SHA256 Credential=${e.accessKeyId}/${p}, SignedHeaders=${d}, Signature=${h}`,
-		"x-amz-date": c,
-		...e.sessionToken ? { "x-amz-security-token": e.sessionToken } : {}
-	};
-} }), Re = (e) => JSON.stringify({
-	FromEmailAddress: e.from,
-	Destination: {
-		ToAddresses: D(e.to),
-		...e.cc ? { CcAddresses: D(e.cc) } : {},
-		...e.bcc ? { BccAddresses: D(e.bcc) } : {}
-	},
-	...e.replyTo ? { ReplyToAddresses: [e.replyTo] } : {},
-	Content: { Simple: {
-		Subject: {
-			Data: e.subject,
-			Charset: "UTF-8"
-		},
-		Body: {
-			...e.html ? { Html: {
-				Data: e.html,
-				Charset: "UTF-8"
-			} } : {},
-			...e.text ? { Text: {
-				Data: e.text,
-				Charset: "UTF-8"
-			} } : {}
-		}
-	} }
-}), ze = (e) => {
-	let t = Le(e), r = `https://email.${e.region}.amazonaws.com`, i = "/v2/email/outbound-emails";
-	return {
-		name: "ses",
-		send: (e) => n.gen(function* () {
-			let a = Re(e), o = yield* n.tryPromise({
-				try: () => t.sign(r, i, a),
-				catch: (e) => H("ses", { message: e?.message ?? String(e) })
-			});
-			return yield* Ie("ses", C.post(`${r}${i}`).pipe(C.setHeaders({
-				"content-type": "application/json",
-				...o
-			}), C.bodyUnsafeJson(JSON.parse(a))), (e) => e.json.pipe(n.map((e) => ({
-				id: e.MessageId ?? "ses",
-				provider: "ses"
-			}))));
-		})
-	};
-}, Be = (e) => {
-	let t = [["from", e.from], ["subject", e.subject]];
-	for (let n of D(e.to)) t.push(["to", n]);
-	if (e.cc) for (let n of D(e.cc)) t.push(["cc", n]);
-	if (e.bcc) for (let n of D(e.bcc)) t.push(["bcc", n]);
-	if (e.replyTo && t.push(["h:Reply-To", e.replyTo]), e.html && t.push(["html", e.html]), e.text && t.push(["text", e.text]), e.headers) for (let [n, r] of Object.entries(e.headers)) t.push([`h:${n}`, r]);
-	if (e.tags) for (let n of e.tags) t.push(["o:tag", n]);
-	return e.scheduledAt && t.push(["o:deliverytime", e.scheduledAt.toUTCString()]), t;
-}, Ve = (e) => {
-	let t = `${e.baseUrl ?? "https://api.mailgun.net"}/v3/${e.domain}/messages`;
-	return {
-		name: "mailgun",
-		supportsScheduling: !0,
-		send: (r) => {
-			let i = new URLSearchParams();
-			for (let [e, t] of Be(r)) i.append(e, t);
-			return Ie("mailgun", C.post(t).pipe(C.setHeader("authorization", `Basic ${Buffer.from(`api:${e.apiKey}`).toString("base64")}`), C.bodyText(i.toString(), "application/x-www-form-urlencoded")), (e) => e.json.pipe(n.map((e) => ({
-				id: e.id ?? "mailgun",
-				provider: "mailgun"
-			}))));
-		}
-	};
-}, G = (e) => {
-	let t = null;
-	return {
-		name: "smtp",
-		send: (r) => n.tryPromise({
-			try: async () => {
-				if (!t) {
-					let n = await import("nodemailer"), r = n.createTransport ?? n.default?.createTransport;
-					if (!r) throw Error("nodemailer: createTransport export not found");
-					t = r(e.url ?? {
-						host: e.host,
-						port: e.port,
-						secure: e.secure,
-						...e.auth ? { auth: e.auth } : {}
-					});
-				}
-				return {
-					id: (await t.sendMail({
-						from: r.from,
-						to: D(r.to),
-						cc: r.cc ? D(r.cc) : void 0,
-						bcc: r.bcc ? D(r.bcc) : void 0,
-						replyTo: r.replyTo,
-						subject: r.subject,
-						html: r.html,
-						text: r.text,
-						headers: r.headers,
-						attachments: r.attachments?.map((e) => ({
-							filename: e.filename,
-							content: e.content,
-							encoding: "base64",
-							...e.contentType ? { contentType: e.contentType } : {}
-						}))
-					}))?.messageId ?? "smtp",
-					provider: "smtp"
-				};
-			},
-			catch: (e) => {
-				let t = e;
-				return H("smtp", {
-					...typeof t.responseCode == "number" ? { status: t.responseCode } : {},
-					message: t.message ?? String(e)
-				});
-			}
-		})
-	};
-}, He = (e) => ({
-	name: "console",
-	send: (t) => n.sync(() => {
-		let n = `✉  to=${D(t.to).join(",")} subject=${JSON.stringify(t.subject)}`;
-		return e ? e(n, { from: t.from }) : process.stdout.write(`[mail:console] ${n}\n`), {
-			id: Ce("console"),
-			provider: "console"
-		};
-	})
-}), K = [], Ue = () => [...K], We = () => {
-	K.length = 0;
-}, Ge = () => ({
-	name: "memory",
-	send: (e) => n.sync(() => (K.push(e), {
-		id: Ce("mem"),
-		provider: "memory"
-	}))
-}), q = d({ scope: "@voltro/plugin-mail" }), Ke = (e) => {
-	if (e.provider !== void 0 && typeof e.provider != "string") return e.provider;
-	let t = e.env ?? {}, n = e.provider ?? t.MAIL_PROVIDER ?? "console", r = (e, t) => {
-		if (!t) throw Error(`@voltro/plugin-mail: provider '${n}' needs apiKey or ${e}`);
-		return t;
-	};
-	switch (n) {
-		case "lettermint": return De({ projectToken: r("LETTERMINT_PROJECT_TOKEN", e.apiKey ?? t.LETTERMINT_PROJECT_TOKEN) });
-		case "resend": return ke({ apiKey: r("RESEND_API_KEY", e.apiKey ?? t.RESEND_API_KEY) });
-		case "postmark": return Ae({ serverToken: r("POSTMARK_SERVER_TOKEN", e.apiKey ?? t.POSTMARK_SERVER_TOKEN) });
-		case "sendgrid": return Pe({ apiKey: r("SENDGRID_API_KEY", e.apiKey ?? t.SENDGRID_API_KEY) });
-		case "ses": return ze({
-			region: r("AWS_REGION", t.AWS_REGION),
-			accessKeyId: r("AWS_ACCESS_KEY_ID", t.AWS_ACCESS_KEY_ID),
-			secretAccessKey: r("AWS_SECRET_ACCESS_KEY", t.AWS_SECRET_ACCESS_KEY),
-			...t.AWS_SESSION_TOKEN ? { sessionToken: t.AWS_SESSION_TOKEN } : {}
-		});
-		case "mailgun": return Ve({
-			apiKey: r("MAILGUN_API_KEY", e.apiKey ?? t.MAILGUN_API_KEY),
-			domain: r("MAILGUN_DOMAIN", t.MAILGUN_DOMAIN),
-			...t.MAILGUN_BASE_URL ? { baseUrl: t.MAILGUN_BASE_URL } : {}
-		});
-		case "smtp": return t.SMTP_URL ? G({ url: t.SMTP_URL }) : G({
-			host: r("SMTP_URL/SMTP_HOST", t.SMTP_HOST),
-			...t.SMTP_PORT ? { port: Number(t.SMTP_PORT) } : {},
-			secure: t.SMTP_SECURE === "true",
-			...t.SMTP_USER && t.SMTP_PASS ? { auth: {
-				user: t.SMTP_USER,
-				pass: t.SMTP_PASS
-			} } : {}
-		});
-		case "memory": return Ge();
-		default: return He((e, t) => q.info(e, t));
-	}
-}, J = (e) => {
-	let t = e.attempts ?? 3, r = e.suppression ?? R(), i = e.allowlist, a = e.production !== !0 && i !== void 0 && i.length > 0, s = (e) => i.some((t) => t.toLowerCase() === e.toLowerCase()), c = o.recurs(t).pipe(o.whileInput((e) => e.transient)), l = /* @__PURE__ */ new Map();
-	for (let t of e.templates ?? []) l.set(t.locale ? `${t.name}:${t.locale}` : t.name, t);
-	let u = (e, t) => (t ? l.get(`${e}:${t}`) : void 0) ?? l.get(e) ?? j(e, t), d = /* @__PURE__ */ new Map(), f = (e, t) => `${e.name}|${e.locale ?? ""}|${JSON.stringify(t ?? null)}`, p = (e, t) => {
-		if (d.set(e, t), d.size > 500) {
-			let e = d.keys().next().value;
-			e !== void 0 && d.delete(e);
-		}
-	}, m = e.idempotency ?? B(), h = xe({
-		store: e.schedule ?? V(),
-		providerSchedules: e.provider.supportsScheduling === !0,
-		flush: (e) => v(e)
-	}), g = (t) => {
-		if (t.stream !== "broadcast" || e.provider.managesUnsubscribe === !0) return n.succeed(void 0);
-		let r = t.unsubscribe;
-		if (r === void 0 || !r.oneClickUrl.startsWith("https://")) return n.fail(new w({
-			provider: e.provider.name,
-			message: `a broadcast needs \`unsubscribe: { oneClickUrl }\` (an https URL) — '${e.provider.name}' does not unsubscribe recipients itself`,
-			transient: !1
-		}));
-		let i = [`<${r.oneClickUrl}>`, ...r.mailto === void 0 ? [] : [`<mailto:${r.mailto.replace(/^mailto:/, "")}>`]];
-		return n.succeed({
-			"List-Unsubscribe": i.join(", "),
-			"List-Unsubscribe-Post": "List-Unsubscribe=One-Click"
-		});
-	}, _ = (t) => n.gen(function* () {
-		let i = t.from ?? e.from;
-		if (!i) return yield* n.fail(new w({
-			provider: e.provider.name,
-			message: "no `from` — set mailPlugin({ from }) or pass message.from",
-			transient: !1
-		}));
-		let o = D(t.to);
-		if (a) {
-			let n = o.filter(s);
-			if (n.length === 0) return q.warn("mail skipped — no recipient in allowlist (non-production)", {
-				to: o.join(","),
-				subject: t.subject
-			}), e.onSent?.({
-				id: "skipped-allowlist",
-				to: o,
-				from: i,
-				subject: t.subject,
-				provider: "skipped",
-				ok: !0,
-				ts: Date.now()
-			}), {
-				kind: "skip",
-				result: {
-					id: "skipped-allowlist",
-					provider: "skipped"
-				}
-			};
-			o = n;
-		}
-		let c = t.tenantId ?? null, l = [];
-		for (let e of o) (yield* r.isSuppressed(c, e)) || l.push(e);
-		if (l.length === 0) return q.warn("mail skipped — all recipients suppressed", {
-			to: o.join(","),
-			subject: t.subject
-		}), e.onSent?.({
-			id: "skipped-suppressed",
-			to: o,
-			from: i,
-			subject: t.subject,
-			provider: "suppressed",
-			ok: !0,
-			ts: Date.now()
-		}), {
-			kind: "skip",
-			result: {
-				id: "skipped-suppressed",
-				provider: "suppressed"
-			}
-		};
-		o = l;
-		let u = t.replyTo ?? e.replyTo, d = yield* g(t), f = d === void 0 ? t.headers : {
-			...t.headers,
-			...d
-		};
-		return {
-			kind: "send",
-			message: {
-				...t,
-				from: i,
-				to: o,
-				...u === void 0 ? {} : { replyTo: u },
-				...f === void 0 ? {} : { headers: f }
-			}
-		};
-	}), ee = (t) => {
-		let r = D(t.to);
-		return e.provider.send(t).pipe(n.retry(c), n.tap((i) => n.sync(() => {
-			q.info("mail sent", {
-				provider: i.provider,
-				id: i.id,
-				to: r.join(",")
-			}), e.onSent?.({
-				id: i.id,
-				to: r,
-				from: t.from,
-				subject: t.subject,
-				provider: i.provider,
-				ok: !0,
-				ts: Date.now()
-			});
-		})), n.tapError((i) => n.sync(() => {
-			q.warn("mail failed", {
-				provider: i.provider,
-				status: i.status,
-				message: i.message
-			}), e.onSent?.({
-				id: `err-${Date.now()}`,
-				to: r,
-				from: t.from,
-				subject: t.subject,
-				provider: i.provider,
-				ok: !1,
-				error: i.message,
-				ts: Date.now()
-			});
-		})));
-	}, v = (t) => n.gen(function* () {
-		let n = yield* _(t);
-		return n.kind === "skip" ? n.result : h.shouldHold(t.scheduledAt) ? (yield* h.hold(n.message), q.info("mail scheduled (held for later flush)", {
-			subject: n.message.subject,
-			dueAt: t.scheduledAt?.toISOString()
-		}), e.onSent?.({
-			id: "scheduled",
-			to: D(n.message.to),
-			from: n.message.from,
-			subject: n.message.subject,
-			provider: "scheduled",
-			ok: !0,
-			ts: Date.now()
-		}), {
-			id: "scheduled",
-			provider: "scheduled"
-		}) : yield* ee(n.message);
-	}), y = (e, t, r) => t === void 0 ? r : n.gen(function* () {
-		let n = yield* m.reserve(e, t);
-		if (!n.won) return q.info("mail idempotent replay — skipped", { key: t }), n.prior ?? {
-			id: "idempotent-replay",
-			provider: "idempotent"
-		};
-		let i = yield* r;
-		return yield* m.record(e, t, i), i;
-	}), b = (e) => n.suspend(() => {
-		let t = u(e.template, e.locale);
-		if (!t) return n.fail(new w({
-			provider: "template",
-			message: `unknown template '${e.template}'${e.locale ? ` (locale '${e.locale}')` : ""}`,
-			transient: !1
-		}));
-		let r = f(t, e.props), i = d.get(r);
-		return (i ? n.succeed(i) : k(t, e.props).pipe(n.tap((e) => n.sync(() => p(r, e))))).pipe(n.map((t) => ({
-			to: e.to,
-			subject: t.subject,
-			html: t.html,
-			text: t.text,
-			...e.from === void 0 ? {} : { from: e.from },
-			...e.replyTo === void 0 ? {} : { replyTo: e.replyTo },
-			...e.cc === void 0 ? {} : { cc: e.cc },
-			...e.bcc === void 0 ? {} : { bcc: e.bcc },
-			...e.headers === void 0 ? {} : { headers: e.headers },
-			...e.tags === void 0 ? {} : { tags: e.tags },
-			...e.attachments === void 0 ? {} : { attachments: e.attachments },
-			...e.tenantId === void 0 ? {} : { tenantId: e.tenantId },
-			...e.scheduledAt === void 0 ? {} : { scheduledAt: e.scheduledAt },
-			...e.idempotencyKey === void 0 ? {} : { idempotencyKey: e.idempotencyKey },
-			...e.stream === void 0 ? {} : { stream: e.stream },
-			...e.unsubscribe === void 0 ? {} : { unsubscribe: e.unsubscribe },
-			...e.metadata === void 0 ? {} : { metadata: e.metadata }
-		})));
-	}), x = (e) => "template" in e ? b(e) : n.succeed(e);
-	return {
-		service: {
-			send: (e) => n.gen(function* () {
-				let t = yield* x(e);
-				return yield* y(t.tenantId ?? null, t.idempotencyKey, v(t));
-			}),
-			sendBatch: (t) => n.gen(function* () {
-				let r = yield* n.forEach(t, x), i = r.some((e) => e.idempotencyKey !== void 0 || h.shouldHold(e.scheduledAt));
-				if (e.provider.sendBatch && !i) {
-					let t = [], i = [];
-					for (let e of r) {
-						let n = yield* _(e);
-						n.kind === "skip" ? i.push(n.result) : (i.push(t.length), t.push(n.message));
-					}
-					let a = t.length > 0 ? yield* e.provider.sendBatch(t).pipe(n.retry(c), n.tap((r) => n.sync(() => {
-						t.forEach((t, n) => {
-							let i = r[n];
-							i && (q.info("mail sent (batch)", {
-								provider: i.provider,
-								id: i.id,
-								to: D(t.to).join(",")
-							}), e.onSent?.({
-								id: i.id,
-								to: D(t.to),
-								from: t.from,
-								subject: t.subject,
-								provider: i.provider,
-								ok: !0,
-								ts: Date.now()
-							}));
-						});
-					})), n.tapError((e) => n.sync(() => q.warn("mail batch failed", {
-						provider: e.provider,
-						status: e.status,
-						message: e.message
-					})))) : [];
-					return i.map((t) => typeof t == "number" ? a[t] ?? {
-						id: "batch",
-						provider: e.provider.name
-					} : t);
-				}
-				return yield* n.forEach(r, (e) => y(e.tenantId ?? null, e.idempotencyKey, v(e)));
-			}),
-			suppress: r.suppress,
-			unsuppress: r.unsuppress,
-			isSuppressed: r.isSuppressed,
-			provider: {
-				name: e.provider.name,
-				managesUnsubscribe: e.provider.managesUnsubscribe === !0
-			}
-		},
-		scheduler: h
-	};
-}, qe = (e) => J(e).service, Je = (e) => i.succeed(E, qe(e)), Y = (e, t, n, r, i, a = {}) => {
-	if (!t) return null;
-	let o = a.metadata !== null && typeof a.metadata == "object" ? Object.fromEntries(Object.entries(a.metadata).filter(([, e]) => typeof e == "string")) : void 0;
-	return {
-		type: e,
-		email: t,
-		provider: n,
-		raw: i,
-		...r === void 0 ? {} : { messageId: r },
-		...a.eventId === void 0 ? {} : { eventId: a.eventId },
-		...o === void 0 ? {} : { metadata: o }
-	};
-}, Ye = (e) => e === "message.hard_bounced" ? "bounced" : e === "message.spam_complaint" ? "complained" : e === "message.unsubscribed" ? "unsubscribed" : e === "message.delivered" ? "delivered" : e === "message.opened" ? "opened" : e === "message.clicked" ? "clicked" : "unknown", Xe = (e) => e === "hard_bounce" ? "bounced" : e === "spam_complaint" ? "complained" : e === "unsubscribe" ? "unsubscribed" : "unknown", Ze = (e) => e === "email.bounced" ? "bounced" : e === "email.complained" ? "complained" : e === "email.delivered" ? "delivered" : e === "email.opened" ? "opened" : e === "email.clicked" ? "clicked" : "unknown", Qe = (e) => e === "Bounce" ? "bounced" : e === "SpamComplaint" ? "complained" : e === "Delivery" ? "delivered" : e === "Open" ? "opened" : e === "Click" ? "clicked" : "unknown", $e = (e) => e === "bounce" || e === "dropped" ? "bounced" : e === "spamreport" ? "complained" : e === "delivered" ? "delivered" : e === "open" ? "opened" : e === "click" ? "clicked" : "unknown", X = (e, t) => {
-	let n = [], r = (e) => {
-		e && n.push(e);
-	};
-	if (e === "sendgrid" && Array.isArray(t)) {
-		for (let e of t) r(Y($e(String(e.event)), e.email, "sendgrid", e.sg_message_id, e));
-		return n;
-	}
-	let i = t ?? {};
-	if (e === "lettermint") {
-		let e = String(i.event), a = i.data ?? {}, o = typeof i.id == "string" ? i.id : void 0;
-		return e === "suppression.added" ? (a.type === "email" && r(Y(Xe(String(a.reason)), a.value, "lettermint", void 0, t, { eventId: o })), n) : e === "suppression.removed" ? (a.type === "email" && r(Y("unsuppressed", a.value, "lettermint", void 0, t, { eventId: o })), n) : (e.startsWith("message.") && r(Y(Ye(e), a.recipient, "lettermint", a.message_id, t, {
-			eventId: o,
-			metadata: a.metadata
-		})), n);
-	}
-	if (e === "resend") {
-		let e = i.data ?? {}, a = Array.isArray(e.to) ? e.to[0] : e.to ?? e.email;
-		return r(Y(Ze(String(i.type)), a, "resend", e.email_id, t)), n;
-	}
-	if (e === "postmark") {
-		let e = i.Email ?? i.Recipient;
-		return r(Y(Qe(String(i.RecordType)), e, "postmark", i.MessageID, t, { metadata: i.Metadata })), n;
-	}
-	return n;
-}, et = (e, t, r, i = null) => n.gen(function* () {
-	let n = X(e, t);
-	for (let e of n) e.type === "bounced" || e.type === "complained" ? yield* r.suppress(i, e.email, e.type) : e.type === "unsuppressed" && (yield* r.unsuppress(i, e.email));
-	return n;
-}), tt = (e = 200) => {
-	let t = [];
-	return {
-		record: (n) => {
-			t.push(n), t.length > e && t.splice(0, t.length - e);
-		},
-		list: () => [...t].reverse(),
-		clear: () => {
-			t.length = 0;
-		}
-	};
-}, nt = {
-	lettermint: "api.lettermint.co",
-	resend: "api.resend.com",
-	postmark: "api.postmarkapp.com",
-	sendgrid: "api.sendgrid.com"
-}, rt = (e) => {
-	try {
-		return new URL(e).host || void 0;
-	} catch {
-		return;
-	}
-}, it = (e) => {
-	let t = e.env ?? {}, n = (e) => [{
-		destination: e,
-		purpose: "outgoing email: recipients, subject and body",
-		data: ["personal", "content"],
-		disable: "MAIL_PROVIDER=console (or memory) logs mail instead of sending it — none leaves"
-	}];
-	if (e.provider !== void 0 && typeof e.provider != "string") {
-		let t = e.provider.name;
-		return t === "console" || t === "memory" ? [] : n(`runtime:the '${t}' mail provider`);
-	}
-	let r = e.provider ?? t.MAIL_PROVIDER ?? "console", i = nt[r];
-	if (i !== void 0) return n(i);
-	switch (r) {
-		case "ses": return n(t.AWS_REGION ? `email.${t.AWS_REGION}.amazonaws.com` : "runtime:email.<AWS_REGION>.amazonaws.com");
-		case "mailgun": return n((t.MAILGUN_BASE_URL ? rt(t.MAILGUN_BASE_URL) : void 0) ?? "api.mailgun.net");
-		case "smtp": return n((t.SMTP_URL ? rt(t.SMTP_URL) : void 0) ?? (t.SMTP_HOST ? `${t.SMTP_HOST}${t.SMTP_PORT ? `:${t.SMTP_PORT}` : ""}` : void 0) ?? "runtime:SMTP_URL or SMTP_HOST");
-		default: return [];
-	}
-}, Z = (e, t) => {
-	if (t > 6) return null;
-	switch (e._tag) {
-		case "StringKeyword": return "";
-		case "NumberKeyword": return 0;
-		case "BooleanKeyword": return !1;
-		case "Literal": return e.literal;
-		case "Enums": return e.enums.length > 0 ? e.enums[0][1] : null;
-		case "TypeLiteral": {
-			let n = {};
-			for (let r of e.propertySignatures) typeof r.name == "string" && (n[r.name] = Z(r.type, t + 1));
-			return n;
-		}
-		case "TupleType": return [];
-		case "Union": return e.types.length > 0 ? Z(e.types[0], t + 1) : null;
-		case "Refinement": return Z(e.from, t + 1);
-		case "Transformation": return Z(e.from, t + 1);
-		case "Suspend": return Z(e.f(), t + 1);
-		default: return null;
-	}
-}, at = (e) => Z(e.ast, 0), Q = u([
+import { MailError as e, MailService as t, MailWebhookError as n, defineEmail as r } from "./types.js";
+import { renderTemplate as i } from "./render.js";
+import { clearGlobalTemplates as a, globalTemplateCount as o, isEmailTemplate as s, listGlobalTemplates as c, lookupGlobalTemplate as l, registerEmailTemplates as u } from "./registry.js";
+import { MAIL_IDEMPOTENCY_TABLE as ee, mailIdempotencyTable as d, mailSuppressionTable as f } from "./storeTables.js";
+import { memorySuppressionStore as p, postgresSuppressionStore as m } from "./suppression.js";
+import { memoryIdempotencyStore as h, postgresIdempotencyStore as g } from "./idempotency.js";
+import { heldId as _, makeScheduler as v, memoryScheduleStore as y } from "./scheduler.js";
+import { clearMailBuffer as b, consoleProvider as x, lettermintProvider as S, mailgunProvider as C, memoryProvider as w, postmarkProvider as T, readMailBuffer as E, resendProvider as D, sendgridProvider as O, sesProvider as k, smtpProvider as A, verifyLettermintSignature as j } from "./providers.js";
+import { buildMailService as M, buildMailServiceWithScheduler as N, mailServiceLayer as P, resolveProvider as F } from "./service.js";
+import { handleMailEvents as I, parseMailEvent as L } from "./events.js";
+import { createOutbox as R } from "./outbox.js";
+import { mailEgressOf as z } from "./egress.js";
+import { schemaSkeleton as te } from "./skeleton.js";
+import { Duration as B, Effect as V, Fiber as H, Layer as U, Result as W, Schedule as G } from "effect";
+import { definePlugin as K, pluginInstanceName as q } from "@voltro/protocol";
+import { pluginEnv as J } from "@voltro/env";
+import { registerRetention as Y, retentionTtlMsFromEnv as X } from "@voltro/database";
+//#region src/index.ts
+var Z = J([
 	{
 		name: "MAIL_PROVIDER",
 		required: !1,
@@ -1066,28 +137,28 @@ var w = class extends s.TaggedError()("MailError", {
 		secret: !1,
 		description: "Comma-separated recipient allowlist; in dev, mail to addresses outside it is skipped."
 	}
-]), ot = "@voltro/plugin-mail", $ = (e, t) => ({
+]), Q = "@voltro/plugin-mail", $ = (e, t) => ({
 	status: e,
 	contentType: "application/json",
 	body: JSON.stringify(t)
-}), st = (e, t, r, i) => {
-	let a = e.webhook;
-	if (a === void 0) throw Error(`@voltro/plugin-mail: provider '${e.name}' has no webhook verifier — mailPlugin({ webhook }) needs one (lettermint)`);
-	let o = r.secret ?? Q.read("MAIL_WEBHOOK_SECRET");
-	if (!o && i) throw Error("@voltro/plugin-mail: mailPlugin({ webhook }) needs a signing secret in production — set MAIL_WEBHOOK_SECRET");
+}), ne = (e, t, n, r) => {
+	let i = e.webhook;
+	if (i === void 0) throw Error(`@voltro/plugin-mail: provider '${e.name}' has no webhook verifier — mailPlugin({ webhook }) needs one (lettermint)`);
+	let a = n.secret ?? Z.read("MAIL_WEBHOOK_SECRET");
+	if (!a && r) throw Error("@voltro/plugin-mail: mailPlugin({ webhook }) needs a signing secret in production — set MAIL_WEBHOOK_SECRET");
 	return {
 		method: "POST",
-		path: r.path ?? "/webhooks/mail",
-		handle: async (i) => {
-			if (!o) return $(503, { error: "mail webhook secret not configured" });
-			let s = await n.runPromise(n.either(a.verify(i.headers, new TextDecoder().decode(i.rawBody), o)));
-			if (s._tag === "Left") return $(401, { error: s.left.message });
-			let c = X(e.name, s.right);
+		path: n.path ?? "/webhooks/mail",
+		handle: async (r) => {
+			if (!a) return $(503, { error: "mail webhook secret not configured" });
+			let o = await V.runPromise(V.result(i.verify(r.headers, new TextDecoder().decode(r.rawBody), a)));
+			if (W.isFailure(o)) return $(401, { error: o.failure.message });
+			let s = L(e.name, o.success);
 			try {
-				for (let e of c) {
-					e.type === "bounced" || e.type === "complained" ? await n.runPromise(t.suppress(null, e.email, e.type)) : e.type === "unsuppressed" && await n.runPromise(t.unsuppress(null, e.email));
-					let a = r.onEvent?.(e, { store: i.store });
-					n.isEffect(a) ? await n.runPromise(a) : await a;
+				for (let e of s) {
+					e.type === "bounced" || e.type === "complained" ? await V.runPromise(t.suppress(null, e.email, e.type)) : e.type === "unsuppressed" && await V.runPromise(t.unsuppress(null, e.email));
+					let i = n.onEvent?.(e, { store: r.store });
+					V.isEffect(i) ? await V.runPromise(i) : await i;
 				}
 			} catch (e) {
 				return {
@@ -1095,57 +166,57 @@ var w = class extends s.TaggedError()("MailError", {
 					cause: e
 				};
 			}
-			return $(200, { received: c.length });
+			return $(200, { received: s.length });
 		}
 	};
-}, ct = (e = {}) => {
-	let a = process.env, s = Ke({
+}, re = (e = {}) => {
+	let n = process.env, r = F({
 		...e.provider === void 0 ? {} : { provider: e.provider },
 		...e.apiKey === void 0 ? {} : { apiKey: e.apiKey },
-		env: a
-	}), u = Q.read("MAIL_ALLOWLIST"), d = e.allowlist ?? (u ? u.split(",").map((e) => e.trim()).filter(Boolean) : void 0), f = a.NODE_ENV === "production", p = e.suppression === void 0 || e.suppression === "memory" ? R() : e.suppression === "postgres" ? he() : e.suppression, m = e.idempotency === void 0 || e.idempotency === "memory" ? B() : e.idempotency === "postgres" ? _e() : e.idempotency, h = e.schedule ?? V(), g = [...e.suppression === "postgres" ? [de] : [], ...e.idempotency === "postgres" ? [fe] : []];
-	e.idempotency === "postgres" && ee({
+		env: n
+	}), a = Z.read("MAIL_ALLOWLIST"), o = e.allowlist ?? (a ? a.split(",").map((e) => e.trim()).filter(Boolean) : void 0), s = n.NODE_ENV === "production", u = e.suppression === void 0 || e.suppression === "memory" ? p() : e.suppression === "postgres" ? m() : e.suppression, _ = e.idempotency === void 0 || e.idempotency === "memory" ? h() : e.idempotency === "postgres" ? g() : e.idempotency, v = e.schedule ?? y(), b = [...e.suppression === "postgres" ? [f] : [], ...e.idempotency === "postgres" ? [d] : []];
+	e.idempotency === "postgres" && Y({
 		source: "plugin",
-		table: N,
+		table: ee,
 		timeColumn: "createdAt",
-		ttlMs: v(process.env.VOLTRO_MAIL_IDEMPOTENCY_TTL_HOURS, 720),
+		ttlMs: X(process.env.VOLTRO_MAIL_IDEMPOTENCY_TTL_HOURS, 720),
 		label: "mail idempotency keys"
 	});
-	let _ = tt(), y = J({
-		provider: s,
-		suppression: p,
-		idempotency: m,
-		schedule: h,
-		onSent: _.record,
+	let x = R(), S = N({
+		provider: r,
+		suppression: u,
+		idempotency: _,
+		schedule: v,
+		onSent: x.record,
 		...e.from === void 0 ? {} : { from: e.from },
 		...e.replyTo === void 0 ? {} : { replyTo: e.replyTo },
-		...d === void 0 ? {} : { allowlist: d },
+		...o === void 0 ? {} : { allowlist: o },
 		...e.attempts === void 0 ? {} : { attempts: e.attempts },
 		...e.templates === void 0 ? {} : { templates: e.templates },
-		production: f
-	}), b = i.succeed(E, y.service), x = s.supportsScheduling !== !0, te = e.scheduleTickMs ?? 1e3, S, C = /* @__PURE__ */ new Map();
-	for (let t of e.templates ?? []) C.set(t.locale ? `${t.name}:${t.locale}` : t.name, t);
-	let w = (e, t) => (t ? C.get(`${e}:${t}`) : void 0) ?? C.get(e) ?? j(e, t), T = (e) => ({
+		production: s
+	}), C = U.succeed(t, S.service), w = r.supportsScheduling !== !0, T = e.scheduleTickMs ?? 1e3, E, D = /* @__PURE__ */ new Map();
+	for (let t of e.templates ?? []) D.set(t.locale ? `${t.name}:${t.locale}` : t.name, t);
+	let O = (e, t) => (t ? D.get(`${e}:${t}`) : void 0) ?? D.get(e) ?? l(e, t), k = (e) => ({
 		name: e.name,
 		...e.locale ? { locale: e.locale } : {},
-		props: e.preview ?? at(e.props)
-	}), ne = () => {
+		props: e.preview ?? te(e.props)
+	}), A = () => {
 		let t = /* @__PURE__ */ new Map();
-		for (let n of e.templates ?? []) t.set(n.locale ? `${n.name}:${n.locale}` : n.name, T(n));
-		for (let e of ce()) {
-			let n = j(e.name, e.locale);
-			n && t.set(e.locale ? `${e.name}:${e.locale}` : e.name, T(n));
+		for (let n of e.templates ?? []) t.set(n.locale ? `${n.name}:${n.locale}` : n.name, k(n));
+		for (let e of c()) {
+			let n = l(e.name, e.locale);
+			n && t.set(e.locale ? `${e.name}:${e.locale}` : e.name, k(n));
 		}
 		return [...t.values()];
-	}, D = e.webhook === void 0 ? [] : [st(s, p, e.webhook, f)], re = [
+	}, j = e.webhook === void 0 ? [] : [ne(r, u, e.webhook, s)], M = [
 		{
 			method: "GET",
 			path: "/outbox",
 			scope: "process",
 			description: "Recent sent mail (dev capture buffer), newest first",
-			handler: () => n.succeed({
+			handler: () => V.succeed({
 				kind: "json",
-				data: { sends: _.list() }
+				data: { sends: x.list() }
 			})
 		},
 		{
@@ -1153,16 +224,16 @@ var w = class extends s.TaggedError()("MailError", {
 			path: "/templates",
 			scope: "declaration",
 			description: "Discovered + registered email templates",
-			handler: () => n.succeed({
+			handler: () => V.succeed({
 				kind: "json",
-				data: { templates: ne() }
+				data: { templates: A() }
 			})
 		},
 		{
 			method: "POST",
 			path: "/preview",
 			description: "Render a template to html + text without sending — body { template, props, locale? }",
-			handler: (e) => n.gen(function* () {
+			handler: (e) => V.gen(function* () {
 				let t = {};
 				try {
 					t = JSON.parse(e.body || "{}");
@@ -1178,11 +249,11 @@ var w = class extends s.TaggedError()("MailError", {
 					status: 400,
 					data: { error: "missing \"template\"" }
 				};
-				let r = w(t.template, t.locale);
-				return r ? yield* k(r, t.props).pipe(n.map((e) => ({
+				let n = O(t.template, t.locale);
+				return n ? yield* i(n, t.props).pipe(V.map((e) => ({
 					kind: "json",
 					data: e
-				})), n.catchAll((e) => n.succeed({
+				})), V.catch((e) => V.succeed({
 					kind: "json",
 					status: 400,
 					data: { error: e.message }
@@ -1193,55 +264,55 @@ var w = class extends s.TaggedError()("MailError", {
 				};
 			})
 		}
-	], O = [
+	], P = [
 		"network:outbound:*",
 		"inspect:read",
 		"inspect:write",
-		...g.length > 0 ? ["store:write"] : []
+		...b.length > 0 ? ["store:write"] : []
 	];
 	return {
-		...c({
-			name: l({
-				base: ot,
+		...K({
+			name: q({
+				base: Q,
 				alias: e.alias,
 				instance: e.name
 			}),
-			baseName: ot,
+			baseName: Q,
 			description: "Transactional and broadcast email — MailService over Lettermint / Resend / Postmark / SendGrid / SES / Mailgun / SMTP (+ console/memory), with default-from, transient retry, suppression and a dev allowlist.",
-			permissions: O,
-			declaredEnv: Q.declared,
-			egress: it({
+			permissions: P,
+			declaredEnv: Z.declared,
+			egress: z({
 				...e.provider === void 0 ? {} : { provider: e.provider },
-				env: a
+				env: n
 			}),
-			services: b,
-			inspectEndpoints: re,
-			...D.length > 0 ? { httpRoutes: D } : {},
-			...g.length > 0 ? { extendSchema: { tables: g } } : {},
+			services: C,
+			inspectEndpoints: M,
+			...j.length > 0 ? { httpRoutes: j } : {},
+			...b.length > 0 ? { extendSchema: { tables: b } } : {},
 			bindDataStore: async (e) => {
-				await p.bind?.(e), await m.bind?.(e);
+				await u.bind?.(e), await _.bind?.(e);
 			},
-			onActivate: (r) => n.gen(function* () {
-				if (p.activate && (yield* n.promise(() => p.activate(r.env))), m.activate && (yield* n.promise(() => m.activate(r.env))), x) {
-					let e = y.scheduler.tick().pipe(n.repeat(o.spaced(t.millis(Math.max(50, te)))));
-					S = n.runFork(e);
+			onActivate: (t) => V.gen(function* () {
+				if (u.activate && (yield* V.promise(() => u.activate(t.env))), _.activate && (yield* V.promise(() => _.activate(t.env))), w) {
+					let e = S.scheduler.tick().pipe(V.repeat(G.spaced(B.millis(Math.max(50, T)))));
+					E = V.runFork(e);
 				}
-				r.logger.info("mail active", {
-					provider: s.name,
+				t.logger.info("mail active", {
+					provider: r.name,
 					from: e.from ?? null,
-					allowlist: d?.length ?? 0,
+					allowlist: o?.length ?? 0,
 					suppression: typeof e.suppression == "string" ? e.suppression : e.suppression ? "custom" : "memory",
 					idempotency: typeof e.idempotency == "string" ? e.idempotency : e.idempotency ? "custom" : "memory",
-					scheduling: s.supportsScheduling === !0 ? "native" : "held",
-					production: f
+					scheduling: r.supportsScheduling === !0 ? "native" : "held",
+					production: s
 				});
 			}),
-			onDeactivate: () => n.gen(function* () {
-				S !== void 0 && (yield* r.interrupt(S), S = void 0), p.deactivate && (yield* n.promise(() => p.deactivate())), m.deactivate && (yield* n.promise(() => m.deactivate()));
+			onDeactivate: () => V.gen(function* () {
+				E !== void 0 && (yield* H.interrupt(E), E = void 0), u.deactivate && (yield* V.promise(() => u.deactivate())), _.deactivate && (yield* V.promise(() => _.deactivate()));
 			})
 		}),
-		service: y.service
+		service: S.service
 	};
 };
 //#endregion
-export { w as MailError, E as MailService, T as MailWebhookError, qe as buildMailService, J as buildMailServiceWithScheduler, le as clearGlobalTemplates, We as clearMailBuffer, He as consoleProvider, tt as createOutbox, ne as defineEmail, se as globalTemplateCount, et as handleMailEvents, be as heldId, ue as isEmailTemplate, De as lettermintProvider, ce as listGlobalTemplates, j as lookupGlobalTemplate, it as mailEgressOf, ct as mailPlugin, Je as mailServiceLayer, Ve as mailgunProvider, xe as makeScheduler, B as memoryIdempotencyStore, Ge as memoryProvider, V as memoryScheduleStore, R as memorySuppressionStore, X as parseMailEvent, _e as postgresIdempotencyStore, he as postgresSuppressionStore, Ae as postmarkProvider, Ue as readMailBuffer, oe as registerEmailTemplates, k as renderTemplate, ke as resendProvider, Ke as resolveProvider, Pe as sendgridProvider, ze as sesProvider, G as smtpProvider, Ee as verifyLettermintSignature };
+export { e as MailError, t as MailService, n as MailWebhookError, M as buildMailService, N as buildMailServiceWithScheduler, a as clearGlobalTemplates, b as clearMailBuffer, x as consoleProvider, R as createOutbox, r as defineEmail, o as globalTemplateCount, I as handleMailEvents, _ as heldId, s as isEmailTemplate, S as lettermintProvider, c as listGlobalTemplates, l as lookupGlobalTemplate, z as mailEgressOf, re as mailPlugin, P as mailServiceLayer, C as mailgunProvider, v as makeScheduler, h as memoryIdempotencyStore, w as memoryProvider, y as memoryScheduleStore, p as memorySuppressionStore, L as parseMailEvent, g as postgresIdempotencyStore, m as postgresSuppressionStore, T as postmarkProvider, E as readMailBuffer, u as registerEmailTemplates, i as renderTemplate, D as resendProvider, F as resolveProvider, O as sendgridProvider, k as sesProvider, A as smtpProvider, j as verifyLettermintSignature };