better-ship 0.10.0 → 0.12.0

package/dist/{application-DYfcAy-Q.js → application-CIxo_BpK.js}

@@ -1,6 +1,35 @@
-import { E as DatabaseError, T as unreachable, U as AppError, a as createLogger } from "./core-DC_4pOrI.js";
+import { E as DatabaseError, Q as AppError, T as unreachable, a as createLogger } from "./core-DG_cC8YT.js";
 import { panic } from "better-result";
 
+//#region src/application/email-service.ts
+/** Records every send for a test. Provider ids count up as `recorded-1`, `recorded-2`. */
+var RecordingEmailService = class {
+	/** Sends in call order, including repeated idempotency keys. */
+	sent = [];
+	/** Record the send before returning its provider id. */
+	async sendEmail(email) {
+		this.sent.push(email);
+		return { providerId: `recorded-${this.sent.length}` };
+	}
+};
+
+//#endregion
+//#region src/application/record-email-event.ts
+/**
+* Record a bounce or a complaint for every recipient inside the command's unit of work.
+* The command id is the provider's event id, so a redelivered webhook is `MessageAlreadyProcessedError`.
+*/
+async function recordEmailEvent(command, deps) {
+	await deps.uow.run(command.id, async ({ emailDeliverability }) => {
+		for (const address of command.recipients) if (command.event.type === "bounced") await emailDeliverability.recordBounce(address, {
+			type: command.event.bounceType,
+			subType: command.event.bounceSubType
+		});
+		else await emailDeliverability.recordComplaint(address);
+	});
+}
+
+//#endregion
 //#region src/application/message-already-processed.error.ts
 /** The message's effects already committed. A caller can skip duplicate delivery without repeating those effects. */
 var MessageAlreadyProcessedError = class MessageAlreadyProcessedError extends AppError {
@@ -127,5 +156,5 @@ var UnitOfWorkAlreadyActiveError = class extends AppError {
 };
 
 //#endregion
-export { MessageAlreadyProcessedError as i, UnitOfWork as n, MessageBus as r, UnitOfWorkAlreadyActiveError as t };
-//# sourceMappingURL=application-DYfcAy-Q.js.map
+export { recordEmailEvent as a, MessageAlreadyProcessedError as i, UnitOfWork as n, RecordingEmailService as o, MessageBus as r, UnitOfWorkAlreadyActiveError as t };
+//# sourceMappingURL=application-CIxo_BpK.js.map

package/dist/application-CIxo_BpK.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-CIxo_BpK.js","names":[],"sources":["../src/application/email-service.ts","../src/application/record-email-event.ts","../src/application/message-already-processed.error.ts","../src/application/message-bus.ts","../src/application/unit-of-work.ts","../src/application/unit-of-work.errors.ts"],"sourcesContent":["import type { EmailIdempotencyKey } from '@/core'\n\n/** A media type such as `application/pdf`. */\nexport type MimeType = `${string}/${string}`\n\n/** A file to attach. Binary content is bytes; the adapter encodes it for the provider. */\nexport type EmailAttachment = {\n  readonly filename: string\n  readonly content: string | Uint8Array\n  /** Optional MIME metadata; Resend accepts filename and content without it. */\n  readonly contentType?: MimeType\n}\n\n/**\n * One transactional email. Resend accepts 50 recipients, 75 tags with ASCII names and values,\n * and 40 MB of attachments after base64. Sources: https://resend.com/docs/api-reference/emails/send-email\n * and https://resend.com/docs/dashboard/emails/tags\n */\nexport type OutboundEmail = {\n  /** Override the default for this email, for example \"Display Name <address@domain.com>\". */\n  readonly from?: string\n  readonly to: string | readonly string[]\n  readonly subject: string\n  readonly html: string\n  /** The stable identity of this send. Resend deduplicates it for 24 hours. */\n  readonly idempotencyKey: EmailIdempotencyKey\n  /** Resend generates plain text from html when omitted. An empty string disables that generation. */\n  readonly text?: string\n  readonly replyTo?: string\n  /** Labels the provider stores with the email and returns on every delivery event. */\n  readonly tags?: Readonly<Record<string, string>>\n  readonly attachments?: readonly EmailAttachment[]\n}\n\n/** The provider accepted the email and assigned its id. */\nexport type EmailAccepted = { readonly providerId: string }\n\n/**\n * The adapter supplies the default sender and maps provider errors. Each email can override the sender.\n * A provider rejection throws `EmailServiceError`; unexpected SDK rejections propagate unchanged.\n */\nexport interface IEmailService {\n  /** Resolve after provider acceptance; this does not confirm delivery to the recipient. */\n  sendEmail(email: OutboundEmail): Promise<EmailAccepted>\n}\n\n/** Records every send for a test. Provider ids count up as `recorded-1`, `recorded-2`. */\nexport class RecordingEmailService implements IEmailService {\n  /** Sends in call order, including repeated idempotency keys. */\n  readonly sent: OutboundEmail[] = []\n\n  /** Record the send before returning its provider id. */\n  async sendEmail(email: OutboundEmail): Promise<EmailAccepted> {\n    this.sent.push(email)\n    return { providerId: `recorded-${this.sent.length}` }\n  }\n}\n","import type { BounceType, DomainCommand, EmailAddress, RecordEmailEventPayload } from '@/core'\n\nimport type { IUnitOfWork } from './unit-of-work.ts'\n\n/** What a bounce records for one address. */\nexport type EmailBounceRecord = {\n  readonly type: BounceType\n  readonly subType: string | null\n}\n\n/**\n * The application's deliverability state per address. An implementation keeps the higher bounce\n * severity with `shouldUpdateBounce`, and treats an unknown address as nothing to record.\n */\nexport interface IEmailDeliverabilityStore {\n  /** Keep the higher severity atomically. Equal severity permits replacement; the store owns timestamp ordering. */\n  recordBounce(address: EmailAddress, bounce: EmailBounceRecord): Promise<void>\n  /** Record a complaint without clearing existing suppression state. */\n  recordComplaint(address: EmailAddress): Promise<void>\n}\n\n/** The repositories the handler needs from the unit of work. */\nexport type RecordEmailEventRepos = { readonly emailDeliverability: IEmailDeliverabilityStore }\n\n/** The container slice the handler reads. */\nexport type RecordEmailEventDeps = { readonly uow: IUnitOfWork<RecordEmailEventRepos> }\n\n/** The command, under whatever name the application registered the payload. */\nexport type RecordEmailEventCommand = DomainCommand & RecordEmailEventPayload\n\n/**\n * Record a bounce or a complaint for every recipient inside the command's unit of work.\n * The command id is the provider's event id, so a redelivered webhook is `MessageAlreadyProcessedError`.\n */\nexport async function recordEmailEvent(\n  command: RecordEmailEventCommand,\n  deps: RecordEmailEventDeps,\n): Promise<void> {\n  await deps.uow.run(command.id, async ({ emailDeliverability }) => {\n    for (const address of command.recipients) {\n      if (command.event.type === 'bounced') {\n        // oxlint-disable-next-line no-await-in-loop -- Finish each transaction write before starting another; a failure must leave no pending writes.\n        await emailDeliverability.recordBounce(address, {\n          type: command.event.bounceType,\n          subType: command.event.bounceSubType,\n        })\n      } else {\n        // oxlint-disable-next-line no-await-in-loop -- A rejected write must stop the transaction before another write starts.\n        await emailDeliverability.recordComplaint(address)\n      }\n    }\n  })\n}\n","import { AppError, DatabaseError, type MessageId } from '@/core'\n\n/** The message's effects already committed. A caller can skip duplicate delivery without repeating those effects. */\nexport class MessageAlreadyProcessedError extends AppError {\n  readonly _tag = 'MessageAlreadyProcessedError'\n  readonly classification = 'terminal'\n\n  constructor(\n    readonly messageId: MessageId,\n    options?: { readonly cause: unknown },\n  ) {\n    super(`message ${messageId} already processed`, options)\n  }\n\n  /** Recognize only the processed-message primary key; preserve other failures unchanged at the call site. */\n  static from(cause: unknown, messageId: MessageId): MessageAlreadyProcessedError | undefined {\n    if (cause instanceof MessageAlreadyProcessedError) return cause\n    if (!(cause instanceof DatabaseError)) return undefined\n    const details = cause.details\n    const duplicate =\n      details.database === 'd1'\n        ? details.kind === 'unique' &&\n          details.table === 'processed_messages' &&\n          details.column === 'message_id'\n        : details.code === '23505' &&\n          details.table_name === 'processed_messages' &&\n          details.constraint_name === 'processed_messages_pkey'\n    if (!duplicate) return undefined\n    return new MessageAlreadyProcessedError(messageId, { cause })\n  }\n}\n","import { panic } from 'better-result'\n\nimport {\n  createLogger,\n  unreachable,\n  type DomainCommand,\n  type DomainEvent,\n  type DomainMessage,\n  type DomainQuery,\n} from '@/core'\n\nimport { MessageAlreadyProcessedError } from './message-already-processed.error.ts'\nimport type { Handlers, MessageResult, RegistryMessage } from './registry.ts'\n\nconst logger = createLogger('message-bus')\n\n/** The port an entrypoint dispatches through. `AppDeps` names this as `IMessageBus<typeof registry>`. */\nexport interface IMessageBus<TRegistry extends Handlers<never>> {\n  handle<TMessage extends DomainMessage & RegistryMessage<TRegistry>>(\n    message: TMessage,\n  ): Promise<MessageResult<TMessage, TRegistry>>\n}\n\n/**\n * Routes one message to its slot. The bus opens no transaction and keeps no outbox:\n * a handler that writes opens the unit of work itself.\n */\nexport class MessageBus<Deps, TRegistry extends Handlers<Deps>> implements IMessageBus<TRegistry> {\n  constructor(\n    private readonly deps: Deps,\n    private readonly registry: TRegistry,\n  ) {}\n\n  /** Resolves to the handler's own value for a command or query, and to void for an event. */\n  async handle<TMessage extends DomainMessage & RegistryMessage<TRegistry>>(\n    message: TMessage,\n  ): Promise<MessageResult<TMessage, TRegistry>> {\n    // SAFETY: the slot for this name is what `MessageResult` names, and dispatch returns its value.\n    return (await this.dispatch(message)) as MessageResult<TMessage, TRegistry>\n  }\n\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- one table holds every slot's value; `handle` names it.\n  private dispatch(message: DomainMessage): Promise<unknown> {\n    if (message.type === 'command') return this.handleCommand(message)\n    if (message.type === 'query') return this.handleQuery(message)\n    if (message.type === 'event') return this.handleEvent(message)\n    // A message parsed at a boundary cannot reach here; one that does must not resolve silently.\n    return unreachable(message)\n  }\n\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- see dispatch.\n  private handleCommand(command: DomainCommand): Promise<unknown> {\n    // `satisfies` proved the registry complete, so a missing slot is a broken registry object.\n    const handler = this.registry.commands[command.name]\n    if (handler === undefined) return panic(`No handler for command ${command.name}`)\n    logger.debug('handling_command', { name: command.name, id: command.id })\n    return handler(command, this.deps)\n  }\n\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- see dispatch.\n  private handleQuery(query: DomainQuery): Promise<unknown> {\n    const handler = this.registry.queries[query.name]\n    if (handler === undefined) return panic(`No handler for query ${query.name}`)\n    return handler(query, this.deps)\n  }\n\n  /**\n   * Every subscriber runs to completion. One failure is rethrown as is. Several are thrown as\n   * one `AggregateError`. A `MessageAlreadyProcessedError` means that subscriber already committed on\n   * an earlier delivery, so it counts as delivered.\n   */\n  private async handleEvent(event: DomainEvent): Promise<void> {\n    const subscriptions = this.registry.events[event.name] ?? []\n    const outcomes = await Promise.allSettled(\n      subscriptions.map((subscription) => subscription(event, this.deps)),\n    )\n    const failures: unknown[] = []\n    for (const [subscriber, outcome] of outcomes.entries()) {\n      if (outcome.status === 'fulfilled') continue\n      if (outcome.reason instanceof MessageAlreadyProcessedError) {\n        // The bus swallows this error, so this line is the only record that the skip happened.\n        logger.info('duplicate_subscriber_ignored', { event: event.name, id: event.id, subscriber })\n        continue\n      }\n      failures.push(outcome.reason)\n    }\n    if (failures.length === 1) throw failures[0]\n    if (failures.length > 1) {\n      throw new AggregateError(failures, `${event.name}: ${failures.length} subscribers failed`)\n    }\n  }\n}\n","import type { MessageId } from '@/core'\n\nimport type { IEventCollector } from './event-collector.ts'\nimport { MessageAlreadyProcessedError } from './message-already-processed.error.ts'\nimport type { IMessageStore } from './message-store.ts'\nimport type { IOutboxRelay } from './outbox-relay.ts'\nimport type { ITransaction } from './transaction.ts'\n\n/**\n * Commits the processed-message record, repository writes, and emitted events together before resolving.\n * An existing record rejects with `MessageAlreadyProcessedError`; external effects must run through the outbox after commit.\n * Nested calls reject with `UnitOfWorkAlreadyActiveError`; independent concurrent calls are allowed.\n */\nexport interface IUnitOfWork<Repos> {\n  run<T>(messageId: MessageId, work: (repos: Repos) => Promise<T>): Promise<T>\n}\n\nexport type UnitOfWorkDeps<Tx, Repos> = {\n  readonly transaction: ITransaction<Tx>\n  /** The processed-messages and outbox repository for this transaction. */\n  readonly messageStore: (tx: Tx) => IMessageStore\n  /** Repositories participate in the current transaction. */\n  readonly createRepositories: (tx: Tx) => Repos\n  readonly eventCollector: IEventCollector\n  readonly relay: IOutboxRelay\n}\n\n/** The unit of work: the boundary, the repositories, the events. Every database call is a port. */\nexport class UnitOfWork<Tx, Repos> implements IUnitOfWork<Repos> {\n  constructor(private readonly deps: UnitOfWorkDeps<Tx, Repos>) {}\n\n  async run<T>(messageId: MessageId, work: (repos: Repos) => Promise<T>): Promise<T> {\n    const { transaction, messageStore, createRepositories, eventCollector, relay } = this.deps\n    let written = 0\n\n    let value: T\n    try {\n      value = await transaction.transaction(async (tx) => {\n        const store = messageStore(tx)\n        await store.claim(messageId)\n        const repos = createRepositories(tx)\n        const result = await work(repos)\n        const pending = eventCollector.collect()\n        await store.persistEvents(pending)\n        written = pending.length\n        return result\n      })\n    } catch (error) {\n      throw MessageAlreadyProcessedError.from(error, messageId) ?? error\n    }\n\n    if (written > 0) relay.wake()\n    return value\n  }\n}\n","import { AppError } from '@/core'\n\n/** A boundary was opened inside another. One message, one atomic scope. */\nexport class UnitOfWorkAlreadyActiveError extends AppError {\n  readonly _tag = 'UnitOfWorkAlreadyActiveError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('a unit of work is already active')\n  }\n}\n"],"mappings":";;;;;AA+CA,IAAa,wBAAb,MAA4D;;CAE1D,AAAS,OAAwB,CAAC;;CAGlC,MAAM,UAAU,OAA8C;EAC5D,KAAK,KAAK,KAAK,KAAK;EACpB,OAAO,EAAE,YAAY,YAAY,KAAK,KAAK,SAAS;CACtD;AACF;;;;;;;;ACtBA,eAAsB,iBACpB,SACA,MACe;CACf,MAAM,KAAK,IAAI,IAAI,QAAQ,IAAI,OAAO,EAAE,0BAA0B;EAChE,KAAK,MAAM,WAAW,QAAQ,YAC5B,IAAI,QAAQ,MAAM,SAAS,WAEzB,MAAM,oBAAoB,aAAa,SAAS;GAC9C,MAAM,QAAQ,MAAM;GACpB,SAAS,QAAQ,MAAM;EACzB,CAAC;OAGD,MAAM,oBAAoB,gBAAgB,OAAO;CAGvD,CAAC;AACH;;;;;ACjDA,IAAa,+BAAb,MAAa,qCAAqC,SAAS;CAK9C;CAJX,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YACE,AAAS,WACT,SACA;EACA,MAAM,WAAW,UAAU,qBAAqB,OAAO;EAH9C;CAIX;;CAGA,OAAO,KAAK,OAAgB,WAAgE;EAC1F,IAAI,iBAAiB,8BAA8B,OAAO;EAC1D,IAAI,EAAE,iBAAiB,gBAAgB,OAAO;EAC9C,MAAM,UAAU,MAAM;EAStB,IAAI,EAPF,QAAQ,aAAa,OACjB,QAAQ,SAAS,YACjB,QAAQ,UAAU,wBAClB,QAAQ,WAAW,eACnB,QAAQ,SAAS,WACjB,QAAQ,eAAe,wBACvB,QAAQ,oBAAoB,4BAClB,OAAO;EACvB,OAAO,IAAI,6BAA6B,WAAW,EAAE,MAAM,CAAC;CAC9D;AACF;;;;AChBA,MAAM,SAAS,aAAa,aAAa;;;;;AAazC,IAAa,aAAb,MAAkG;CAE7E;CACA;CAFnB,YACE,AAAiB,MACjB,AAAiB,UACjB;EAFiB;EACA;CAChB;;CAGH,MAAM,OACJ,SAC6C;EAE7C,OAAQ,MAAM,KAAK,SAAS,OAAO;CACrC;CAGA,AAAQ,SAAS,SAA0C;EACzD,IAAI,QAAQ,SAAS,WAAW,OAAO,KAAK,cAAc,OAAO;EACjE,IAAI,QAAQ,SAAS,SAAS,OAAO,KAAK,YAAY,OAAO;EAC7D,IAAI,QAAQ,SAAS,SAAS,OAAO,KAAK,YAAY,OAAO;EAE7D,OAAO,YAAY,OAAO;CAC5B;CAGA,AAAQ,cAAc,SAA0C;EAE9D,MAAM,UAAU,KAAK,SAAS,SAAS,QAAQ;EAC/C,IAAI,YAAY,QAAW,OAAO,MAAM,0BAA0B,QAAQ,MAAM;EAChF,OAAO,MAAM,oBAAoB;GAAE,MAAM,QAAQ;GAAM,IAAI,QAAQ;EAAG,CAAC;EACvE,OAAO,QAAQ,SAAS,KAAK,IAAI;CACnC;CAGA,AAAQ,YAAY,OAAsC;EACxD,MAAM,UAAU,KAAK,SAAS,QAAQ,MAAM;EAC5C,IAAI,YAAY,QAAW,OAAO,MAAM,wBAAwB,MAAM,MAAM;EAC5E,OAAO,QAAQ,OAAO,KAAK,IAAI;CACjC;;;;;;CAOA,MAAc,YAAY,OAAmC;EAC3D,MAAM,gBAAgB,KAAK,SAAS,OAAO,MAAM,SAAS,CAAC;EAC3D,MAAM,WAAW,MAAM,QAAQ,WAC7B,cAAc,KAAK,iBAAiB,aAAa,OAAO,KAAK,IAAI,CAAC,CACpE;EACA,MAAM,WAAsB,CAAC;EAC7B,KAAK,MAAM,CAAC,YAAY,YAAY,SAAS,QAAQ,GAAG;GACtD,IAAI,QAAQ,WAAW,aAAa;GACpC,IAAI,QAAQ,kBAAkB,8BAA8B;IAE1D,OAAO,KAAK,gCAAgC;KAAE,OAAO,MAAM;KAAM,IAAI,MAAM;KAAI;IAAW,CAAC;IAC3F;GACF;GACA,SAAS,KAAK,QAAQ,MAAM;EAC9B;EACA,IAAI,SAAS,WAAW,GAAG,MAAM,SAAS;EAC1C,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,eAAe,UAAU,GAAG,MAAM,KAAK,IAAI,SAAS,OAAO,oBAAoB;CAE7F;AACF;;;;;AC/DA,IAAa,aAAb,MAAiE;CAClC;CAA7B,YAAY,AAAiB,MAAiC;EAAjC;CAAkC;CAE/D,MAAM,IAAO,WAAsB,MAAgD;EACjF,MAAM,EAAE,aAAa,cAAc,oBAAoB,gBAAgB,UAAU,KAAK;EACtF,IAAI,UAAU;EAEd,IAAI;EACJ,IAAI;GACF,QAAQ,MAAM,YAAY,YAAY,OAAO,OAAO;IAClD,MAAM,QAAQ,aAAa,EAAE;IAC7B,MAAM,MAAM,MAAM,SAAS;IAE3B,MAAM,SAAS,MAAM,KADP,mBAAmB,EACH,CAAC;IAC/B,MAAM,UAAU,eAAe,QAAQ;IACvC,MAAM,MAAM,cAAc,OAAO;IACjC,UAAU,QAAQ;IAClB,OAAO;GACT,CAAC;EACH,SAAS,OAAO;GACd,MAAM,6BAA6B,KAAK,OAAO,SAAS,KAAK;EAC/D;EAEA,IAAI,UAAU,GAAG,MAAM,KAAK;EAC5B,OAAO;CACT;AACF;;;;;ACnDA,IAAa,+BAAb,cAAkD,SAAS;CACzD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,kCAAkC;CAC1C;AACF"}

package/dist/application.d.ts

@@ -1,3 +1,3 @@
-import { G as DomainMessage, K as DomainQuery, U as DomainCommand, W as DomainEvent, q as MessageId } from "./index-6XMPJu7u.js";
-import { _ as RegistryMessage, a as UnitOfWorkDeps, b as EventHandler, c as IOutboxRelay, d as CommandRegistry, f as EventRegistry, g as QueryRegistry, h as MessageResult, i as UnitOfWork, l as IMessageBus, m as MessageRegistry, n as MessageAlreadyProcessedError, o as IEventCollector, p as Handlers, r as IUnitOfWork, s as ITransaction, t as UnitOfWorkAlreadyActiveError, u as MessageBus, v as IMessageStore, x as QueryHandler, y as CommandHandler } from "./index-_Cihfq1J.js";
-export { type CommandHandler, type CommandRegistry, type DomainCommand, type DomainEvent, type DomainMessage, type DomainQuery, type EventHandler, type EventRegistry, type Handlers, type IEventCollector, type IMessageBus, type IMessageStore, type IOutboxRelay, type ITransaction, type IUnitOfWork, MessageAlreadyProcessedError, MessageBus, type MessageId, type MessageRegistry, type MessageResult, type QueryHandler, type QueryRegistry, type RegistryMessage, UnitOfWork, UnitOfWorkAlreadyActiveError, type UnitOfWorkDeps };
+import { G as DomainMessage, K as DomainQuery, U as DomainCommand, W as DomainEvent, q as MessageId } from "./index-Bl0K1RQW.js";
+import { A as RecordingEmailService, C as IMessageStore, D as IEmailService, E as EmailAttachment, M as EventHandler, N as QueryHandler, O as MimeType, S as IOutboxRelay, T as EmailAccepted, _ as recordEmailEvent, a as CommandRegistry, b as UnitOfWorkDeps, c as MessageRegistry, d as RegistryMessage, f as EmailBounceRecord, g as RecordEmailEventRepos, h as RecordEmailEventDeps, i as MessageBus, j as CommandHandler, k as OutboundEmail, l as MessageResult, m as RecordEmailEventCommand, n as MessageAlreadyProcessedError, o as EventRegistry, p as IEmailDeliverabilityStore, r as IMessageBus, s as Handlers, t as UnitOfWorkAlreadyActiveError, u as QueryRegistry, v as IUnitOfWork, w as IEventCollector, x as ITransaction, y as UnitOfWork } from "./index-DwWxIdQP.js";
+export { type CommandHandler, type CommandRegistry, type DomainCommand, type DomainEvent, type DomainMessage, type DomainQuery, type EmailAccepted, type EmailAttachment, type EmailBounceRecord, type EventHandler, type EventRegistry, type Handlers, type IEmailDeliverabilityStore, type IEmailService, type IEventCollector, type IMessageBus, type IMessageStore, type IOutboxRelay, type ITransaction, type IUnitOfWork, MessageAlreadyProcessedError, MessageBus, type MessageId, type MessageRegistry, type MessageResult, type MimeType, type OutboundEmail, type QueryHandler, type QueryRegistry, type RecordEmailEventCommand, type RecordEmailEventDeps, type RecordEmailEventRepos, RecordingEmailService, type RegistryMessage, UnitOfWork, UnitOfWorkAlreadyActiveError, type UnitOfWorkDeps, recordEmailEvent };

package/dist/application.js

@@ -1,3 +1,3 @@
-import { i as MessageAlreadyProcessedError, n as UnitOfWork, r as MessageBus, t as UnitOfWorkAlreadyActiveError } from "./application-DYfcAy-Q.js";
+import { a as recordEmailEvent, i as MessageAlreadyProcessedError, n as UnitOfWork, o as RecordingEmailService, r as MessageBus, t as UnitOfWorkAlreadyActiveError } from "./application-CIxo_BpK.js";
 
-export { MessageAlreadyProcessedError, MessageBus, UnitOfWork, UnitOfWorkAlreadyActiveError };
+export { MessageAlreadyProcessedError, MessageBus, RecordingEmailService, UnitOfWork, UnitOfWorkAlreadyActiveError, recordEmailEvent };

package/dist/better-auth/apple-client-secret.d.ts

@@ -1,4 +1,4 @@
-import { kt as AppError } from "../index-6XMPJu7u.js";
+import { Ut as AppError } from "../index-Bl0K1RQW.js";
 //#region src/infrastructure/better-auth/apple-client-secret.d.ts
 /**
  * Apple's issuer and OAuth callback origin, and the `aud` claim of the client secret. Include it in

package/dist/better-auth/apple-client-secret.js

@@ -1,4 +1,4 @@
-import { U as AppError, a as createLogger } from "../core-DC_4pOrI.js";
+import { Q as AppError, a as createLogger } from "../core-DG_cC8YT.js";
 import { Buffer } from "node:buffer";
 import { createPrivateKey, sign } from "node:crypto";
 

package/dist/better-auth/auth-client.js

@@ -1,4 +1,4 @@
-import { V as RateLimitError } from "../core-DC_4pOrI.js";
+import { V as RateLimitError } from "../core-DG_cC8YT.js";
 import { createAuthClient } from "better-auth/client";
 
 //#region src/infrastructure/better-auth/auth-client.ts

package/dist/better-auth/rate-limit.d.ts

@@ -1,4 +1,4 @@
-import { kt as AppError } from "../index-6XMPJu7u.js";
+import { Ut as AppError } from "../index-Bl0K1RQW.js";
 import { BetterAuthOptions, BetterAuthRateLimitStorage } from "better-auth";
 //#region src/infrastructure/better-auth/rate-limit.d.ts
 /** A rule Better Auth passes to storage: a window in seconds and the requests it allows. */

package/dist/better-auth/rate-limit.js

@@ -1,4 +1,4 @@
-import { U as AppError, a as createLogger } from "../core-DC_4pOrI.js";
+import { Q as AppError, a as createLogger } from "../core-DG_cC8YT.js";
 
 //#region src/infrastructure/better-auth/rate-limit.ts
 /**

package/dist/better-auth.js

@@ -1,4 +1,4 @@
-import { a as createLogger } from "./core-DC_4pOrI.js";
+import { a as createLogger } from "./core-DG_cC8YT.js";
 import { v7 } from "uuid";
 import { isAPIError } from "better-auth/api";
 import { anonymous, bearer, captcha, deviceAuthorization, emailOTP, lastLoginMethod, magicLink, openAPI } from "better-auth/plugins";

package/dist/cloudflare/auth-secondary-storage.d.ts

@@ -1,4 +1,4 @@
-import { kt as AppError } from "../index-6XMPJu7u.js";
+import { Ut as AppError } from "../index-Bl0K1RQW.js";
 import { DurableObject } from "cloudflare:workers";
 //#region src/infrastructure/cloudflare/auth-secondary-storage.d.ts
 /** The supplied TTL cannot produce a valid expiry timestamp. Retrying the same input cannot fix it. */

package/dist/cloudflare/auth-secondary-storage.js

@@ -1,4 +1,4 @@
-import { U as AppError } from "../core-DC_4pOrI.js";
+import { Q as AppError } from "../core-DG_cC8YT.js";
 import { DurableObject } from "cloudflare:workers";
 
 //#region src/infrastructure/cloudflare/auth-secondary-storage.ts

package/dist/cloudflare/queue.d.ts

@@ -1,4 +1,4 @@
-import { At as FailureClassification, U as DomainCommand, W as DomainEvent, kt as AppError } from "../index-6XMPJu7u.js";
+import { U as DomainCommand, Ut as AppError, W as DomainEvent, Wt as FailureClassification } from "../index-Bl0K1RQW.js";
 import { z } from "zod";
 //#region src/infrastructure/cloudflare/queue/queue-message.d.ts
 /** A message a queue carries: a command from outside the request, or an event from the outbox. */

package/dist/cloudflare/queue.js

@@ -1,5 +1,5 @@
-import { U as AppError, a as createLogger, b as shouldRetryFailure, c as exponentialEqualJitterMs, d as classifyFailure, f as retryAfterSecondsOf, l as spreadJitterMs, u as classifyBoundaryError } from "../core-DC_4pOrI.js";
-import { i as MessageAlreadyProcessedError } from "../application-DYfcAy-Q.js";
+import { Q as AppError, a as createLogger, b as shouldRetryFailure, c as exponentialEqualJitterMs, d as classifyFailure, f as retryAfterSecondsOf, l as spreadJitterMs, u as classifyBoundaryError } from "../core-DG_cC8YT.js";
+import { i as MessageAlreadyProcessedError } from "../application-CIxo_BpK.js";
 import { Result } from "better-result";
 
 //#region src/infrastructure/cloudflare/queue/queue-limits.ts

package/dist/cloudflare/scheduled.d.ts

@@ -1,4 +1,4 @@
-import { q as MessageId } from "../index-6XMPJu7u.js";
+import { q as MessageId } from "../index-Bl0K1RQW.js";
 import { z } from "zod";
 //#region src/infrastructure/cloudflare/scheduled/scheduled-handler.d.ts
 /** The work one schedule runs. Nothing returns to the platform, so each run reports its own outcome. */

package/dist/cloudflare/scheduled.js

@@ -1,4 +1,4 @@
-import { a as createLogger } from "../core-DC_4pOrI.js";
+import { a as createLogger } from "../core-DG_cC8YT.js";
 import { z } from "zod";
 
 //#region src/infrastructure/cloudflare/scheduled/scheduled-handler.ts

package/dist/cloudflare.d.ts

@@ -1,6 +1,6 @@
-import { W as DomainEvent, et as D1ConstraintKind, nt as DatabaseFailure, q as MessageId, tt as DatabaseError } from "./index-6XMPJu7u.js";
-import { s as ITransaction, v as IMessageStore } from "./index-_Cihfq1J.js";
-import { n as DrizzleSchema, t as eventCollector } from "./unit-of-work-context-BWTJfYPW.js";
+import { W as DomainEvent, et as D1ConstraintKind, nt as DatabaseFailure, q as MessageId, tt as DatabaseError } from "./index-Bl0K1RQW.js";
+import { C as IMessageStore, x as ITransaction } from "./index-DwWxIdQP.js";
+import { n as DrizzleSchema, t as eventCollector } from "./unit-of-work-context-D5ytJIa-.js";
 import { BatchItem } from "drizzle-orm/batch";
 import { AnyD1Database, DrizzleD1Database } from "drizzle-orm/d1";
 //#region src/infrastructure/cloudflare/d1-database-types.d.ts

package/dist/cloudflare.js

@@ -1,6 +1,6 @@
-import { E as DatabaseError, U as AppError } from "./core-DC_4pOrI.js";
-import { i as MessageAlreadyProcessedError } from "./application-DYfcAy-Q.js";
-import { i as stageD1Statement, n as eventCollector, r as runWithUnitOfWorkContext, t as collectD1Statements } from "./unit-of-work-context-BFCmU92Z.js";
+import { E as DatabaseError, Q as AppError } from "./core-DG_cC8YT.js";
+import { i as MessageAlreadyProcessedError } from "./application-CIxo_BpK.js";
+import { i as stageD1Statement, n as eventCollector, r as runWithUnitOfWorkContext, t as collectD1Statements } from "./unit-of-work-context-BPE1In2f.js";
 import { DrizzleQueryError } from "drizzle-orm/errors";
 import { eq, sql } from "drizzle-orm";
 import { index, integer, sqliteTable, text } from "drizzle-orm/sqlite-core";

package/dist/{core-DC_4pOrI.js → core-DG_cC8YT.js}

@@ -17,6 +17,114 @@ var AppError = class extends Error {
 	}
 };
 
+//#endregion
+//#region src/core/email-address.ts
+/** A parsed email address for message payloads and webhook recipients. Ported from Typist's `EmailSchema`. */
+const EmailAddressSchema = z.email().brand();
+
+//#endregion
+//#region src/core/email-idempotency-key.ts
+const MAX_KEY_LENGTH = 256;
+/** A key outside 1 to 256 characters. Keys come from stable ids, so this is a defect, not a retry. */
+var InvalidEmailIdempotencyKeyError = class extends AppError {
+	length;
+	_tag = "InvalidEmailIdempotencyKeyError";
+	classification = "terminal";
+	constructor(length) {
+		super(`Email idempotency key must have 1 to ${MAX_KEY_LENGTH} characters`);
+		this.length = length;
+	}
+};
+/**
+* `<scope>/<id>` for one logical send. Resend deduplicates it for 24 hours.
+* Derive `id` from a stable identity: a message id, a job id, a user id with a template name.
+* The same key must map to an identical payload; a changed body is rejected as terminal.
+* A random `id` means every request is a deliberate new send, as a sign-in code resend is.
+* Source: https://resend.com/docs/dashboard/emails/idempotency-keys
+*/
+function emailIdempotencyKey(scope, id) {
+	const key = `${scope}/${id}`;
+	if (scope.length === 0 || id.length === 0 || key.length > MAX_KEY_LENGTH) throw new InvalidEmailIdempotencyKeyError(key.length);
+	return key;
+}
+
+//#endregion
+//#region src/core/email-service.error.ts
+const CLASSIFICATION_BY_REASON = {
+	rate_limited: "transient",
+	idempotency_conflict: "transient",
+	provider_error: "transient",
+	quota_exceeded: "terminal",
+	invalid_request: "terminal",
+	configuration: "terminal"
+};
+/**
+* The provider rejected a send. The boundary that awaited the send logs once; the adapter never does.
+* `retryAfter` is the server's delay in seconds when it sent one, so `retryAfterSecondsOf` reads it.
+*/
+var EmailServiceError = class extends AppError {
+	_tag = "EmailServiceError";
+	classification;
+	reason;
+	provider;
+	providerCode;
+	statusCode;
+	retryAfter;
+	constructor(args) {
+		super(`Email send failed: ${args.provider} ${args.providerCode}`, { cause: args.cause });
+		this.reason = args.reason;
+		this.classification = CLASSIFICATION_BY_REASON[args.reason];
+		this.provider = args.provider;
+		this.providerCode = args.providerCode;
+		this.statusCode = args.statusCode;
+		this.retryAfter = args.retryAfter;
+	}
+};
+
+//#endregion
+//#region src/core/email-deliverability.ts
+/** The bounce classes Resend reports, ported from Typist's comm-eligibility.ts. */
+const BounceTypeSchema = z.enum([
+	"Permanent",
+	"Transient",
+	"Undetermined"
+]);
+/** Parse a provider's bounce type. An unknown value is `Undetermined`, which suppresses. */
+function parseBounceType(value) {
+	const parsed = BounceTypeSchema.safeParse(value);
+	return parsed.success ? parsed.data : "Undetermined";
+}
+const BOUNCE_SEVERITY = {
+	Transient: 1,
+	Undetermined: 2,
+	Permanent: 3
+};
+/** Keep the higher severity. Equal severity permits replacement; callers own timestamp ordering. */
+function shouldUpdateBounce(incoming, current) {
+	if (current === null) return true;
+	return BOUNCE_SEVERITY[incoming] >= BOUNCE_SEVERITY[current];
+}
+/** Typist's send policy: no complaint, and either no bounce or a transient one. Delivery is not guaranteed. */
+function isEmailDeliverable(bounceType, complained) {
+	if (complained) return false;
+	return bounceType === null || bounceType === "Transient";
+}
+
+//#endregion
+//#region src/core/record-email-event.ts
+/**
+* The payload of the command an application registers to record a bounce or a complaint.
+* Register it under a name of the application's choice in `defineMessages`; `recordEmailEvent` handles it.
+*/
+const RecordEmailEventPayloadSchema = z.object({
+	recipients: z.array(EmailAddressSchema).min(1),
+	event: z.discriminatedUnion("type", [z.object({
+		type: z.literal("bounced"),
+		bounceType: BounceTypeSchema,
+		bounceSubType: z.string().nullable()
+	}), z.object({ type: z.literal("complained") })])
+});
+
 //#endregion
 //#region src/core/authentication.error.ts
 /** A protected operation requires a session that the caller did not provide. */
@@ -795,5 +903,5 @@ function createLogger(module, config) {
 }
 
 //#endregion
-export { ValidationProblemDetailsSchema as A, StaleSessionError as B, defineId as C, defineErrors as D, DatabaseError as E, UpgradeRequiredError as F, AuthenticationError as H, ValidationError as I, InternalServerError as L, MalformedRequestError as M, RequestTimeoutError as N, sharedErrors as O, ResourceNotFoundError as P, ServiceUnavailableError as R, defineMessages as S, unreachable as T, AppError as U, RateLimitError as V, isTransientCloudflareRuntimeError as _, createLogger as a, shouldRetryFailure as b, exponentialEqualJitterMs as c, classifyFailure as d, retryAfterSecondsOf as f, isCloudflareRetryableError as g, isCloudflareOverloadedError as h, consoleSink as i, ValidationProblemErrorSchema as j, ProblemDetailsSchema as k, spreadJitterMs as l, isCloudflareObjectResetError as m, Logger as n, setLogSink as o, CLOUDFLARE_TRANSIENT_ERROR_PATTERNS as p, configureLogger as r, setLoggerErrorHook as s, LogLevel as t, classifyBoundaryError as u, isAbortError as v, notImplemented as w, Entity as x, isTransientTransportError as y, NotAuthorizedError as z };
-//# sourceMappingURL=core-DC_4pOrI.js.map
+export { ValidationProblemDetailsSchema as A, StaleSessionError as B, defineId as C, defineErrors as D, DatabaseError as E, UpgradeRequiredError as F, isEmailDeliverable as G, AuthenticationError as H, ValidationError as I, EmailServiceError as J, parseBounceType as K, InternalServerError as L, MalformedRequestError as M, RequestTimeoutError as N, sharedErrors as O, ResourceNotFoundError as P, AppError as Q, ServiceUnavailableError as R, defineMessages as S, unreachable as T, RecordEmailEventPayloadSchema as U, RateLimitError as V, BounceTypeSchema as W, emailIdempotencyKey as X, InvalidEmailIdempotencyKeyError as Y, EmailAddressSchema as Z, isTransientCloudflareRuntimeError as _, createLogger as a, shouldRetryFailure as b, exponentialEqualJitterMs as c, classifyFailure as d, retryAfterSecondsOf as f, isCloudflareRetryableError as g, isCloudflareOverloadedError as h, consoleSink as i, ValidationProblemErrorSchema as j, ProblemDetailsSchema as k, spreadJitterMs as l, isCloudflareObjectResetError as m, Logger as n, setLogSink as o, CLOUDFLARE_TRANSIENT_ERROR_PATTERNS as p, shouldUpdateBounce as q, configureLogger as r, setLoggerErrorHook as s, LogLevel as t, classifyBoundaryError as u, isAbortError as v, notImplemented as w, Entity as x, isTransientTransportError as y, NotAuthorizedError as z };
+//# sourceMappingURL=core-DG_cC8YT.js.map