sently 0.4.6 → 0.4.7

package/CHANGELOG.md

@@ -1,5 +1,40 @@
 # Changelog
 
+## [Unreleased]
+
+## [0.4.7] — 2026-05-30
+
+### Added
+
+- **`sently/mailer` entry** — transport-only `createMailer` without SMTP code in the
+  bundle (~4.3 KB with HTTP transports vs ~14 KB from the main entry)
+- **`sently/dkim` entry** — optional DKIM signing; MIME lazy-loads it only when
+  `dkim` config is passed (~1.7 KB)
+- **`TransportMailerOptions`** type for the `sently/mailer` entry
+- **Bundle size CI gate** — `bun run check:size` enforces gzip budgets in
+  `tools/bundle-size-budgets.json`
+- **`bun run measure:size`** / **`measure:size:md`** — categorized bundle reports
+  for docs and CI
+- **Deno and Cloudflare adapter smoke tests** in CI
+
+### Changed
+
+- Lazy-load SMTP transport and pool from `createMailer` when using SMTP config
+- Extract `MailerImpl` to `src/mailer.ts`; full `createMailer` in `detect.ts` delegates
+  to it for custom transports
+- **`dist/index.js` generated from `src/index.ts`** via `scripts/generate-index-js.ts`
+  (no hand-maintained export list)
+- **Minified `dist/` output** in production builds
+- **Pinned devDependency versions** (Biome 2.4.16, TypeScript 6.0.3, `@types/node`
+  25.9.1, MCP SDK 1.29.0)
+
+### Documentation
+
+- README **Bundle Size** section — import-path guide, common stacks, per-subpath
+  tables, and HTTP stack breakdown
+- Inline JSDoc on `src/index.ts` barrel re-exports for JSR symbol documentation
+- Corrected bundle size figures (minified + gzip, one decimal KB)
+
 ## [0.4.6] — 2026-05-30
 
 ### Documentation

package/README.md

@@ -1,7 +1,7 @@
 # sently
 
 > Nodemailer hasn't been updated in years, doesn't run on Bun or Deno, and ships at 220KB.
-> sently is the modern replacement — same familiar API, runs everywhere, tree-shakes to ~6KB.
+> sently is the modern replacement — same familiar API, runs everywhere, HTTP stacks from ~4 KB via `sently/mailer`.
 
 ```bash
 bun add sently
@@ -20,7 +20,7 @@ bun add sently
 
 | Feature | Nodemailer | sently |
 |---------|-----------|--------|
-| Bundle size | ~220 KB | ~6 KB core |
+| Bundle size | ~220 KB always | ~4 KB HTTP · ~14 KB SMTP |
 | Runtimes | Node.js only | Node, Bun, Deno, CF Workers |
 | Module format | CommonJS | ESM only |
 | Dependencies | 3 | 0 |
@@ -40,7 +40,8 @@ bun add sently
 ## The 30-second tour
 
 ```typescript
-import { createMailer, type MailOptions } from "sently";
+import type { MailOptions } from "sently";
+import { createMailer } from "sently/mailer";
 import { ResendTransport } from "sently/transports/resend";
 import { PreviewTransport } from "sently/transports/preview";
 
@@ -93,7 +94,8 @@ bunx jsr add @alialnaghmoush/sently
 ```
 
 ```typescript
-import { createMailer } from "sently";
+import { createMailer } from "sently/mailer"; // HTTP transports
+import { createMailer as createSMTPMailer } from "sently"; // SMTP host/port config
 ```
 
 ---
@@ -125,7 +127,7 @@ await mailer.close();
 ### Resend HTTP transport (Vercel Edge compatible)
 
 ```typescript
-import { createMailer } from "sently";
+import { createMailer } from "sently/mailer";
 import { ResendTransport } from "sently/transports/resend";
 
 const mailer = await createMailer({
@@ -197,7 +199,7 @@ const mailer = await createMailer({
 ### SMTP
 
 ```typescript
-import { createMailer } from "sently";
+import { createMailer } from "sently/mailer";
 import { SMTPTransport } from "sently/transports/smtp";
 import { NodeAdapter } from "sently/adapters/node";
 
@@ -212,6 +214,8 @@ const mailer = await createMailer({ transport });
 await mailer.verify(); // test connection + auth
 ```
 
+Use `sently/mailer` instead of `sently` when passing `{ transport }` — keeps HTTP-only bundles ~4 KB smaller.
+
 **AUTH methods:** XOAUTH2, CRAM-MD5, LOGIN, and PLAIN (auto-negotiated from EHLO unless `auth.type` is set).
 
 **`requireTLS` (default `true` when `auth` is set):** sently refuses to send credentials over an unencrypted connection. If the link is not secured by direct TLS (`secure: true`) or a successful `STARTTLS` upgrade, authentication throws an `SMTPError` instead of leaking credentials — this defends against STARTTLS-stripping MITM attacks. Set `requireTLS: false` only if you fully trust the network (not recommended).
@@ -230,6 +234,8 @@ const mailer = await createMailer({
 });
 ```
 
+Pass `dkim` on SMTP config or use `signDKIM` from `sently/dkim` directly. MIME lazy-loads DKIM only when the option is set.
+
 #### Gmail OAuth2 (XOAUTH2)
 
 ```typescript
@@ -282,6 +288,7 @@ const pool = new SMTPPool({
 
 | Transport | Import path | Required config |
 |-----------|-------------|-----------------|
+| Mailer wrapper | `sently/mailer` | — (use with any transport below) |
 | Resend | `sently/transports/resend` | `apiKey` |
 | SendGrid | `sently/transports/sendgrid` | `apiKey` |
 | Postmark | `sently/transports/postmark` | `serverToken` |
@@ -299,7 +306,7 @@ Write emails to disk during local development instead of sending them:
 
 ```typescript
 import { PreviewTransport } from "sently/transports/preview";
-import { createMailer } from "sently";
+import { createMailer } from "sently/mailer";
 
 const mailer = await createMailer({
   transport: new PreviewTransport({
@@ -324,7 +331,7 @@ Wrap any transport with automatic retries and configurable backoff:
 ```typescript
 import { RetryTransport } from "sently/transports/retry";
 import { ResendTransport } from "sently/transports/resend";
-import { createMailer } from "sently";
+import { createMailer } from "sently/mailer";
 
 const transport = new RetryTransport(
   new ResendTransport({ apiKey: process.env.RESEND_API_KEY! }),
@@ -380,6 +387,9 @@ const mailer = await createMailer({
 Works with SMTP config or custom transports:
 
 ```typescript
+import { createMailer } from "sently/mailer";
+import { ResendTransport } from "sently/transports/resend";
+
 const mailer = await createMailer({
   transport: new ResendTransport({ apiKey: "re_..." }),
   plugins: [addFooter],
@@ -392,7 +402,7 @@ Render HTML from named templates with zero dependencies:
 
 ```typescript
 import { templatePlugin, simpleEngine } from "sently/plugins/template";
-import { createMailer } from "sently";
+import { createMailer } from "sently/mailer";
 import { ResendTransport } from "sently/transports/resend";
 
 const mailer = await createMailer({
@@ -550,59 +560,102 @@ MIME attachment filenames and custom attachment headers are likewise sanitized a
 
 ---
 
-## Tree-Shaking
+## Bundle Size
+
+All sizes are **minified + gzip**, measured by bundling each import path in isolation (`bun run measure:size`). CI enforces budgets on key entries (`bun run check:size`). Node built-ins and `cloudflare:sockets` are external — same as in your app bundle.
+
+**Nodemailer ships ~220 KB** whether you use SMTP or an HTTP plugin. sently tree-shakes per subpath.
 
-Each import path is a separate build entry point:
+### Choosing an import path
 
+| You send via… | Import | Why |
+|---------------|--------|-----|
+| Resend, SendGrid, Postmark, etc. | `sently/mailer` + `sently/transports/<provider>` | **~4 KB** — no SMTP code in the bundle |
+| SMTP relay (`host` / `port`) | `sently` | **~14 KB** — includes MIME + SMTP stack |
+| Raw transport, no plugins | `sently/transports/<provider>` only | **~4 KB** — skip `createMailer` wrapper |
+| DKIM signing | `sently/dkim` or `dkim` option on send | **~2 KB** add-on, lazy-loaded by MIME |
+
+```ts
+// Recommended — HTTP API (~4.3 KB bundled)
+import { createMailer } from "sently/mailer";
+import { ResendTransport } from "sently/transports/resend";
+
+// Avoid for HTTP-only apps — pulls SMTP into flat bundles (~14 KB)
+import { createMailer } from "sently";
 ```
-import { createMailer } from "sently"
-+ import { ResendTransport } from "sently/transports/resend"
-→ Bundle: core/mime (~8KB) + core/address (~2KB) + transports/resend (~2KB) ≈ ~12KB gzip
 
-vs. full Nodemailer: ~220KB
+### Common stacks
+
+| Use case | What you import | ~gzip |
+|----------|-----------------|-------|
+| HTTP — Resend | `sently/mailer` + `transports/resend` | **4.3 KB** |
+| HTTP — SendGrid | `sently/mailer` + `transports/sendgrid` | **4.3 KB** |
+| HTTP — transport only | `transports/resend` (call `.send()` directly) | **3.9 KB** |
+| SMTP relay | `sently` + `{ host, port, auth }` | **13.6 KB** |
+| SMTP + explicit adapter | `sently` + `adapters/node` | **13.6 KB** |
+| Main entry + HTTP ⚠️ | `sently` + `transports/resend` | **14.1 KB** |
+
+Adapters are **auto-selected at runtime** for SMTP unless you pass `adapter` explicitly. Only the adapter for your runtime is fetched (dynamic import).
+
+### Core entries
+
+| Export | ~gzip | Notes |
+|--------|-------|-------|
+| `sently/mailer` | 0.6 KB | `createMailer({ transport })` — plugins, `sendBulk`, `verify` |
+| `sently` | 13.6 KB | Full `createMailer` — SMTP config + lazy SMTP chunks |
+| `sently/dkim` | 1.7 KB | `signDKIM`, `importPrivateKey` — loaded when `dkim` option is set |
+
+### Transports
+
+| Export | ~gzip | Protocol |
+|--------|-------|----------|
+| `sently/transports/resend` | 3.9 KB | HTTP |
+| `sently/transports/sendgrid` | 3.9 KB | HTTP |
+| `sently/transports/postmark` | 3.9 KB | HTTP |
+| `sently/transports/mailgun` | 4.0 KB | HTTP |
+| `sently/transports/brevo` | 3.8 KB | HTTP |
+| `sently/transports/ses` | 7.3 KB | HTTP (SigV4) |
+| `sently/transports/smtp` | 10.0 KB | SMTP + MIME |
+| `sently/transports/preview` | 6.4 KB | Dev disk preview |
+
+HTTP transports share MIME/address parsing (~3.8 KB). SES is larger due to SigV4 signing.
+
+### Adapters (SMTP socket layer)
+
+| Export | ~gzip | Runtime |
+|--------|-------|---------|
+| `sently/adapters/node` | 1.2 KB | Node.js |
+| `sently/adapters/bun` | 1.2 KB | Bun |
+| `sently/adapters/deno` | 0.5 KB | Deno |
+| `sently/adapters/cf` | 0.6 KB | Cloudflare Workers |
+
+### What's inside an HTTP stack (~4.3 KB)
+
+```
+sently/mailer          0.6 KB   createMailer wrapper, plugins, sendBulk
+transports/resend      3.9 KB   fetch client + MIME/address parsing
+                       ─────
+total                  4.3 KB   vs Nodemailer ~220 KB
 ```
 
-Only code you import is bundled. Adapters and transports you never import are never included.
+Regenerate tables after changes: `bun run measure:size` (full report) or `bun tools/measure-bundle-size.ts --markdown`.
 
 ---
 
 ## Migrating from Nodemailer
 
 | Nodemailer | sently |
-|------------|-------|
+|------------|--------|
 | `nodemailer.createTransport({...})` | `await createMailer({...})` |
 | `transporter.sendMail(options)` | `mailer.send(options)` |
 | `transporter.verify()` | `mailer.verify()` |
 | `options.attachments[].path` | Same (Node/Bun/Deno); use `content` on edge |
-| `import nodemailer from 'nodemailer'` | `import { createMailer } from 'sently'` |
+| `import nodemailer from 'nodemailer'` | `import { createMailer } from 'sently/mailer'` (HTTP) or `'sently'` (SMTP) |
 | CommonJS | ESM only |
 | Node.js only | Node, Bun, Deno, CF Workers |
 
 ---
 
-## Bundle Size
-
-Approximate gzip sizes per subpath export:
-
-| Export | ~gzip |
-|--------|-------|
-| `sently` | ~6 KB |
-| `sently/transports/smtp` | ~10 KB |
-| `sently/transports/resend` | ~2 KB |
-| `sently/transports/sendgrid` | ~2 KB |
-| `sently/transports/postmark` | ~2 KB |
-| `sently/transports/mailgun` | ~3 KB |
-| `sently/transports/ses` | ~5 KB |
-| `sently/transports/brevo` | ~2 KB |
-| `sently/adapters/node` | ~3 KB |
-| `sently/adapters/bun` | ~3 KB |
-| `sently/adapters/deno` | ~2 KB |
-| `sently/adapters/cf` | ~2 KB |
-
-> **Example:** Resend only = core (~6 KB) + transport (~2 KB) = **~8 KB total**. Nodemailer ships 220 KB regardless of which transport you use.
-
----
-
 ## TypeScript
 
 ```typescript

package/dist/adapters/bun.js

@@ -1,184 +1,3 @@
-import"../chunk-v0bahtg2.js";
+import"../chunk-sqn04kae.js";import W from"node:net";import Q from"node:tls";function V(f){if(f.rejectUnauthorized===!1)console.warn("[sently] TLS certificate verification is disabled. Never use rejectUnauthorized: false in production.")}class X{socket=null;_secure;_connected=!1;connectionTimeout;tlsOptions;constructor(f={}){if(typeof Bun>"u")throw Error("BunAdapter requires the Bun runtime");this._secure=f.secure??!1,this.connectionTimeout=f.connectionTimeout??30000,this.tlsOptions=f.tls??{}}get secure(){return this._secure}get connected(){return this._connected}async connect(f,B){if(this._secure)await this.connectTls(f,B);else await this.connectPlain(f,B);this._connected=!0}async startTLS(f){if(!this.socket||this._secure)throw Error("Cannot STARTTLS: no plain socket available");let B=this.socket,y={...this.tlsOptions,...f};V(y),await new Promise((F,A)=>{let G=Q.connect({socket:B,servername:y.servername,rejectUnauthorized:y.rejectUnauthorized??!0,minVersion:y.minVersion});G.once("secureConnect",()=>{this.socket=G,this._secure=!0,F()}),G.once("error",A)})}async write(f){if(!this.socket)throw Error("Socket not connected");await new Promise((B,y)=>{this.socket?.write(Buffer.from(f),(F)=>{if(F)y(F);else B()})})}async*read(){if(!this.socket)throw Error("Socket not connected");let f=this.socket,B=[],y=null,F=!1,A=null,G=(H)=>{let I=new Uint8Array(H);if(y)y({value:I,done:!1}),y=null;else B.push(I)},J=(H)=>{if(A=H,F=!0,y)y({value:void 0,done:!0}),y=null},K=()=>{if(F=!0,y)y({value:void 0,done:!0}),y=null};f.on("data",G),f.on("error",J),f.on("close",K);try{while(!F||B.length>0){if(A)throw A;if(B.length>0){yield B.shift();continue}if(F)break;let H=await new Promise((I)=>{y=I});if(H.done)break;yield H.value}}finally{f.off("data",G),f.off("error",J),f.off("close",K)}}async close(){if(!this.socket)return;await new Promise((f)=>{this.socket?.end(()=>f())}),this.socket=null,this._connected=!1}connectPlain(f,B){return new Promise((y,F)=>{let A=W.connect({host:f,port:B},()=>y());A.setTimeout(this.connectionTimeout),A.once("timeout",()=>{A.destroy(),F(Error("Connection timeout"))}),A.once("error",F),this.socket=A})}connectTls(f,B){return V(this.tlsOptions),new Promise((y,F)=>{let A=Q.connect({host:f,port:B,servername:this.tlsOptions.servername??f,rejectUnauthorized:this.tlsOptions.rejectUnauthorized??!0,minVersion:this.tlsOptions.minVersion},()=>y());A.setTimeout(this.connectionTimeout),A.once("timeout",()=>{A.destroy(),F(Error("Connection timeout"))}),A.once("error",F),this.socket=A})}}export{X as BunAdapter};
 
-// src/adapters/bun.ts
-import net from "node:net";
-import tls from "node:tls";
-function warnRejectUnauthorizedDisabled(tls2) {
-  if (tls2.rejectUnauthorized === false) {
-    console.warn("[sently] TLS certificate verification is disabled. " + "Never use rejectUnauthorized: false in production.");
-  }
-}
-
-class BunAdapter {
-  socket = null;
-  _secure;
-  _connected = false;
-  connectionTimeout;
-  tlsOptions;
-  constructor(options = {}) {
-    if (typeof Bun === "undefined") {
-      throw new Error("BunAdapter requires the Bun runtime");
-    }
-    this._secure = options.secure ?? false;
-    this.connectionTimeout = options.connectionTimeout ?? 30000;
-    this.tlsOptions = options.tls ?? {};
-  }
-  get secure() {
-    return this._secure;
-  }
-  get connected() {
-    return this._connected;
-  }
-  async connect(host, port) {
-    if (this._secure) {
-      await this.connectTls(host, port);
-    } else {
-      await this.connectPlain(host, port);
-    }
-    this._connected = true;
-  }
-  async startTLS(options) {
-    if (!this.socket || this._secure) {
-      throw new Error("Cannot STARTTLS: no plain socket available");
-    }
-    const plain = this.socket;
-    const merged = { ...this.tlsOptions, ...options };
-    warnRejectUnauthorizedDisabled(merged);
-    await new Promise((resolve, reject) => {
-      const tlsSocket = tls.connect({
-        socket: plain,
-        servername: merged.servername,
-        rejectUnauthorized: merged.rejectUnauthorized ?? true,
-        minVersion: merged.minVersion
-      });
-      tlsSocket.once("secureConnect", () => {
-        this.socket = tlsSocket;
-        this._secure = true;
-        resolve();
-      });
-      tlsSocket.once("error", reject);
-    });
-  }
-  async write(data) {
-    if (!this.socket) {
-      throw new Error("Socket not connected");
-    }
-    await new Promise((resolve, reject) => {
-      this.socket?.write(Buffer.from(data), (err) => {
-        if (err) {
-          reject(err);
-        } else {
-          resolve();
-        }
-      });
-    });
-  }
-  async* read() {
-    if (!this.socket) {
-      throw new Error("Socket not connected");
-    }
-    const socket = this.socket;
-    const queue = [];
-    let resolveNext = null;
-    let done = false;
-    let error = null;
-    const onData = (chunk) => {
-      const data = new Uint8Array(chunk);
-      if (resolveNext) {
-        resolveNext({ value: data, done: false });
-        resolveNext = null;
-      } else {
-        queue.push(data);
-      }
-    };
-    const onError = (err) => {
-      error = err;
-      done = true;
-      if (resolveNext) {
-        resolveNext({ value: undefined, done: true });
-        resolveNext = null;
-      }
-    };
-    const onClose = () => {
-      done = true;
-      if (resolveNext) {
-        resolveNext({ value: undefined, done: true });
-        resolveNext = null;
-      }
-    };
-    socket.on("data", onData);
-    socket.on("error", onError);
-    socket.on("close", onClose);
-    try {
-      while (!done || queue.length > 0) {
-        if (error) {
-          throw error;
-        }
-        if (queue.length > 0) {
-          yield queue.shift();
-          continue;
-        }
-        if (done) {
-          break;
-        }
-        const chunk = await new Promise((resolve) => {
-          resolveNext = resolve;
-        });
-        if (chunk.done) {
-          break;
-        }
-        yield chunk.value;
-      }
-    } finally {
-      socket.off("data", onData);
-      socket.off("error", onError);
-      socket.off("close", onClose);
-    }
-  }
-  async close() {
-    if (!this.socket) {
-      return;
-    }
-    await new Promise((resolve) => {
-      this.socket?.end(() => resolve());
-    });
-    this.socket = null;
-    this._connected = false;
-  }
-  connectPlain(host, port) {
-    return new Promise((resolve, reject) => {
-      const socket = net.connect({ host, port }, () => resolve());
-      socket.setTimeout(this.connectionTimeout);
-      socket.once("timeout", () => {
-        socket.destroy();
-        reject(new Error("Connection timeout"));
-      });
-      socket.once("error", reject);
-      this.socket = socket;
-    });
-  }
-  connectTls(host, port) {
-    warnRejectUnauthorizedDisabled(this.tlsOptions);
-    return new Promise((resolve, reject) => {
-      const socket = tls.connect({
-        host,
-        port,
-        servername: this.tlsOptions.servername ?? host,
-        rejectUnauthorized: this.tlsOptions.rejectUnauthorized ?? true,
-        minVersion: this.tlsOptions.minVersion
-      }, () => resolve());
-      socket.setTimeout(this.connectionTimeout);
-      socket.once("timeout", () => {
-        socket.destroy();
-        reject(new Error("Connection timeout"));
-      });
-      socket.once("error", reject);
-      this.socket = socket;
-    });
-  }
-}
-export {
-  BunAdapter
-};
-
-//# debugId=55F886DB16D90CED64756E2164756E21
+//# debugId=94AAFD676203266764756E2164756E21

package/dist/adapters/bun.js.map

@@ -4,7 +4,7 @@
   "sourcesContent": [
     "/**\n * @module\n * Bun socket adapter for SMTP connections via the Node.js compatibility layer.\n *\n * @example\n * ```ts\n * import { BunAdapter } from \"sently/adapters/bun\";\n * import { createMailer } from \"sently\";\n *\n * const mailer = await createMailer({\n *   host: \"smtp.example.com\",\n *   adapter: new BunAdapter(),\n *   auth: { user: \"you@example.com\", pass: \"secret\" },\n * });\n * ```\n */\nimport net from \"node:net\";\nimport tls from \"node:tls\";\nimport type { SocketAdapter, TLSOptions } from \"../core/types.js\";\n\nfunction warnRejectUnauthorizedDisabled(tls: TLSOptions): void {\n  if (tls.rejectUnauthorized === false) {\n    console.warn(\n      \"[sently] TLS certificate verification is disabled. \" +\n        \"Never use rejectUnauthorized: false in production.\",\n    );\n  }\n}\n\ndeclare const Bun: { version: string } | undefined;\n\n/** Configuration options for {@link BunAdapter}. */\nexport interface BunAdapterOptions {\n  /** Use implicit TLS on connect (port 465). Default: false. */\n  secure?: boolean;\n  /** Socket connect timeout in milliseconds. Default: 30_000. */\n  connectionTimeout?: number;\n  /** TLS options passed to node:tls (Bun Node compat layer). */\n  tls?: TLSOptions;\n}\n\n/**\n * Bun socket adapter using node:net and node:tls (Node compat layer).\n */\nexport class BunAdapter implements SocketAdapter {\n  /** Underlying TCP or TLS socket (Node compat layer). */\n  private socket: net.Socket | tls.TLSSocket | null = null;\n  /** Whether the connection is currently encrypted. */\n  private _secure: boolean;\n  /** Whether the socket is connected. */\n  private _connected = false;\n  /** Socket connect timeout in milliseconds. */\n  private readonly connectionTimeout: number;\n  /** TLS options for direct TLS and STARTTLS upgrades. */\n  private readonly tlsOptions: TLSOptions;\n\n  /** Creates a Bun socket adapter (requires the Bun runtime). */\n  constructor(options: BunAdapterOptions = {}) {\n    if (typeof Bun === \"undefined\") {\n      throw new Error(\"BunAdapter requires the Bun runtime\");\n    }\n    this._secure = options.secure ?? false;\n    this.connectionTimeout = options.connectionTimeout ?? 30_000;\n    this.tlsOptions = options.tls ?? {};\n  }\n\n  /** Whether the connection uses TLS. */\n  get secure(): boolean {\n    return this._secure;\n  }\n\n  /** Whether the socket is currently connected. */\n  get connected(): boolean {\n    return this._connected;\n  }\n\n  /** Opens a TCP or TLS connection to the given host and port. */\n  async connect(host: string, port: number): Promise<void> {\n    if (this._secure) {\n      await this.connectTls(host, port);\n    } else {\n      await this.connectPlain(host, port);\n    }\n    this._connected = true;\n  }\n\n  /** Upgrades a plain connection to TLS via STARTTLS. */\n  async startTLS(options?: TLSOptions): Promise<void> {\n    if (!this.socket || this._secure) {\n      throw new Error(\"Cannot STARTTLS: no plain socket available\");\n    }\n\n    const plain = this.socket;\n    const merged = { ...this.tlsOptions, ...options };\n    warnRejectUnauthorizedDisabled(merged);\n\n    await new Promise<void>((resolve, reject) => {\n      const tlsSocket = tls.connect({\n        socket: plain,\n        servername: merged.servername,\n        rejectUnauthorized: merged.rejectUnauthorized ?? true,\n        minVersion: merged.minVersion,\n      });\n\n      tlsSocket.once(\"secureConnect\", () => {\n        this.socket = tlsSocket;\n        this._secure = true;\n        resolve();\n      });\n      tlsSocket.once(\"error\", reject);\n    });\n  }\n\n  /** Writes raw bytes to the socket. */\n  async write(data: Uint8Array): Promise<void> {\n    if (!this.socket) {\n      throw new Error(\"Socket not connected\");\n    }\n\n    await new Promise<void>((resolve, reject) => {\n      this.socket?.write(Buffer.from(data), (err: Error | null | undefined) => {\n        if (err) {\n          reject(err);\n        } else {\n          resolve();\n        }\n      });\n    });\n  }\n\n  /** Reads incoming socket data as an async iterable of byte chunks. */\n  async *read(): AsyncGenerator<Uint8Array, void, unknown> {\n    if (!this.socket) {\n      throw new Error(\"Socket not connected\");\n    }\n\n    const socket = this.socket;\n    const queue: Uint8Array[] = [];\n    let resolveNext: ((value: IteratorResult<Uint8Array>) => void) | null = null;\n    let done = false;\n    let error: Error | null = null;\n\n    const onData = (chunk: Buffer): void => {\n      const data = new Uint8Array(chunk);\n      if (resolveNext) {\n        resolveNext({ value: data, done: false });\n        resolveNext = null;\n      } else {\n        queue.push(data);\n      }\n    };\n\n    const onError = (err: Error): void => {\n      error = err;\n      done = true;\n      if (resolveNext) {\n        resolveNext({ value: undefined as unknown as Uint8Array, done: true });\n        resolveNext = null;\n      }\n    };\n\n    const onClose = (): void => {\n      done = true;\n      if (resolveNext) {\n        resolveNext({ value: undefined as unknown as Uint8Array, done: true });\n        resolveNext = null;\n      }\n    };\n\n    socket.on(\"data\", onData);\n    socket.on(\"error\", onError);\n    socket.on(\"close\", onClose);\n\n    try {\n      while (!done || queue.length > 0) {\n        if (error) {\n          throw error;\n        }\n        if (queue.length > 0) {\n          yield queue.shift() as Uint8Array;\n          continue;\n        }\n        if (done) {\n          break;\n        }\n        const chunk = await new Promise<IteratorResult<Uint8Array>>((resolve) => {\n          resolveNext = resolve;\n        });\n        if (chunk.done) {\n          break;\n        }\n        yield chunk.value;\n      }\n    } finally {\n      socket.off(\"data\", onData);\n      socket.off(\"error\", onError);\n      socket.off(\"close\", onClose);\n    }\n  }\n\n  /** Closes the socket connection. */\n  async close(): Promise<void> {\n    if (!this.socket) {\n      return;\n    }\n\n    await new Promise<void>((resolve) => {\n      this.socket?.end(() => resolve());\n    });\n    this.socket = null;\n    this._connected = false;\n  }\n\n  /** Opens a plain TCP connection to the SMTP server. */\n  private connectPlain(host: string, port: number): Promise<void> {\n    return new Promise((resolve, reject) => {\n      const socket = net.connect({ host, port }, () => resolve());\n      socket.setTimeout(this.connectionTimeout);\n      socket.once(\"timeout\", () => {\n        socket.destroy();\n        reject(new Error(\"Connection timeout\"));\n      });\n      socket.once(\"error\", reject);\n      this.socket = socket;\n    });\n  }\n\n  /** Opens a direct TLS connection to the SMTP server. */\n  private connectTls(host: string, port: number): Promise<void> {\n    warnRejectUnauthorizedDisabled(this.tlsOptions);\n    return new Promise((resolve, reject) => {\n      const socket = tls.connect(\n        {\n          host,\n          port,\n          servername: this.tlsOptions.servername ?? host,\n          rejectUnauthorized: this.tlsOptions.rejectUnauthorized ?? true,\n          minVersion: this.tlsOptions.minVersion,\n        },\n        () => resolve(),\n      );\n      socket.setTimeout(this.connectionTimeout);\n      socket.once(\"timeout\", () => {\n        socket.destroy();\n        reject(new Error(\"Connection timeout\"));\n      });\n      socket.once(\"error\", reject);\n      this.socket = socket;\n    });\n  }\n}\n"
   ],
-  "mappings": ";;;AAgBA;AACA;AAGA,SAAS,8BAA8B,CAAC,MAAuB;AAAA,EAC7D,IAAI,KAAI,uBAAuB,OAAO;AAAA,IACpC,QAAQ,KACN,wDACE,oDACJ;AAAA,EACF;AAAA;AAAA;AAkBK,MAAM,WAAoC;AAAA,EAEvC,SAA4C;AAAA,EAE5C;AAAA,EAEA,aAAa;AAAA,EAEJ;AAAA,EAEA;AAAA,EAGjB,WAAW,CAAC,UAA6B,CAAC,GAAG;AAAA,IAC3C,IAAI,OAAO,QAAQ,aAAa;AAAA,MAC9B,MAAM,IAAI,MAAM,qCAAqC;AAAA,IACvD;AAAA,IACA,KAAK,UAAU,QAAQ,UAAU;AAAA,IACjC,KAAK,oBAAoB,QAAQ,qBAAqB;AAAA,IACtD,KAAK,aAAa,QAAQ,OAAO,CAAC;AAAA;AAAA,MAIhC,MAAM,GAAY;AAAA,IACpB,OAAO,KAAK;AAAA;AAAA,MAIV,SAAS,GAAY;AAAA,IACvB,OAAO,KAAK;AAAA;AAAA,OAIR,QAAO,CAAC,MAAc,MAA6B;AAAA,IACvD,IAAI,KAAK,SAAS;AAAA,MAChB,MAAM,KAAK,WAAW,MAAM,IAAI;AAAA,IAClC,EAAO;AAAA,MACL,MAAM,KAAK,aAAa,MAAM,IAAI;AAAA;AAAA,IAEpC,KAAK,aAAa;AAAA;AAAA,OAId,SAAQ,CAAC,SAAqC;AAAA,IAClD,IAAI,CAAC,KAAK,UAAU,KAAK,SAAS;AAAA,MAChC,MAAM,IAAI,MAAM,4CAA4C;AAAA,IAC9D;AAAA,IAEA,MAAM,QAAQ,KAAK;AAAA,IACnB,MAAM,SAAS,KAAK,KAAK,eAAe,QAAQ;AAAA,IAChD,+BAA+B,MAAM;AAAA,IAErC,MAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAAA,MAC3C,MAAM,YAAY,IAAI,QAAQ;AAAA,QAC5B,QAAQ;AAAA,QACR,YAAY,OAAO;AAAA,QACnB,oBAAoB,OAAO,sBAAsB;AAAA,QACjD,YAAY,OAAO;AAAA,MACrB,CAAC;AAAA,MAED,UAAU,KAAK,iBAAiB,MAAM;AAAA,QACpC,KAAK,SAAS;AAAA,QACd,KAAK,UAAU;AAAA,QACf,QAAQ;AAAA,OACT;AAAA,MACD,UAAU,KAAK,SAAS,MAAM;AAAA,KAC/B;AAAA;AAAA,OAIG,MAAK,CAAC,MAAiC;AAAA,IAC3C,IAAI,CAAC,KAAK,QAAQ;AAAA,MAChB,MAAM,IAAI,MAAM,sBAAsB;AAAA,IACxC;AAAA,IAEA,MAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAAA,MAC3C,KAAK,QAAQ,MAAM,OAAO,KAAK,IAAI,GAAG,CAAC,QAAkC;AAAA,QACvE,IAAI,KAAK;AAAA,UACP,OAAO,GAAG;AAAA,QACZ,EAAO;AAAA,UACL,QAAQ;AAAA;AAAA,OAEX;AAAA,KACF;AAAA;AAAA,SAII,IAAI,GAA8C;AAAA,IACvD,IAAI,CAAC,KAAK,QAAQ;AAAA,MAChB,MAAM,IAAI,MAAM,sBAAsB;AAAA,IACxC;AAAA,IAEA,MAAM,SAAS,KAAK;AAAA,IACpB,MAAM,QAAsB,CAAC;AAAA,IAC7B,IAAI,cAAoE;AAAA,IACxE,IAAI,OAAO;AAAA,IACX,IAAI,QAAsB;AAAA,IAE1B,MAAM,SAAS,CAAC,UAAwB;AAAA,MACtC,MAAM,OAAO,IAAI,WAAW,KAAK;AAAA,MACjC,IAAI,aAAa;AAAA,QACf,YAAY,EAAE,OAAO,MAAM,MAAM,MAAM,CAAC;AAAA,QACxC,cAAc;AAAA,MAChB,EAAO;AAAA,QACL,MAAM,KAAK,IAAI;AAAA;AAAA;AAAA,IAInB,MAAM,UAAU,CAAC,QAAqB;AAAA,MACpC,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,IAAI,aAAa;AAAA,QACf,YAAY,EAAE,OAAO,WAAoC,MAAM,KAAK,CAAC;AAAA,QACrE,cAAc;AAAA,MAChB;AAAA;AAAA,IAGF,MAAM,UAAU,MAAY;AAAA,MAC1B,OAAO;AAAA,MACP,IAAI,aAAa;AAAA,QACf,YAAY,EAAE,OAAO,WAAoC,MAAM,KAAK,CAAC;AAAA,QACrE,cAAc;AAAA,MAChB;AAAA;AAAA,IAGF,OAAO,GAAG,QAAQ,MAAM;AAAA,IACxB,OAAO,GAAG,SAAS,OAAO;AAAA,IAC1B,OAAO,GAAG,SAAS,OAAO;AAAA,IAE1B,IAAI;AAAA,MACF,OAAO,CAAC,QAAQ,MAAM,SAAS,GAAG;AAAA,QAChC,IAAI,OAAO;AAAA,UACT,MAAM;AAAA,QACR;AAAA,QACA,IAAI,MAAM,SAAS,GAAG;AAAA,UACpB,MAAM,MAAM,MAAM;AAAA,UAClB;AAAA,QACF;AAAA,QACA,IAAI,MAAM;AAAA,UACR;AAAA,QACF;AAAA,QACA,MAAM,QAAQ,MAAM,IAAI,QAAoC,CAAC,YAAY;AAAA,UACvE,cAAc;AAAA,SACf;AAAA,QACD,IAAI,MAAM,MAAM;AAAA,UACd;AAAA,QACF;AAAA,QACA,MAAM,MAAM;AAAA,MACd;AAAA,cACA;AAAA,MACA,OAAO,IAAI,QAAQ,MAAM;AAAA,MACzB,OAAO,IAAI,SAAS,OAAO;AAAA,MAC3B,OAAO,IAAI,SAAS,OAAO;AAAA;AAAA;AAAA,OAKzB,MAAK,GAAkB;AAAA,IAC3B,IAAI,CAAC,KAAK,QAAQ;AAAA,MAChB;AAAA,IACF;AAAA,IAEA,MAAM,IAAI,QAAc,CAAC,YAAY;AAAA,MACnC,KAAK,QAAQ,IAAI,MAAM,QAAQ,CAAC;AAAA,KACjC;AAAA,IACD,KAAK,SAAS;AAAA,IACd,KAAK,aAAa;AAAA;AAAA,EAIZ,YAAY,CAAC,MAAc,MAA6B;AAAA,IAC9D,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,MAAM,SAAS,IAAI,QAAQ,EAAE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC;AAAA,MAC1D,OAAO,WAAW,KAAK,iBAAiB;AAAA,MACxC,OAAO,KAAK,WAAW,MAAM;AAAA,QAC3B,OAAO,QAAQ;AAAA,QACf,OAAO,IAAI,MAAM,oBAAoB,CAAC;AAAA,OACvC;AAAA,MACD,OAAO,KAAK,SAAS,MAAM;AAAA,MAC3B,KAAK,SAAS;AAAA,KACf;AAAA;AAAA,EAIK,UAAU,CAAC,MAAc,MAA6B;AAAA,IAC5D,+BAA+B,KAAK,UAAU;AAAA,IAC9C,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,MAAM,SAAS,IAAI,QACjB;AAAA,QACE;AAAA,QACA;AAAA,QACA,YAAY,KAAK,WAAW,cAAc;AAAA,QAC1C,oBAAoB,KAAK,WAAW,sBAAsB;AAAA,QAC1D,YAAY,KAAK,WAAW;AAAA,MAC9B,GACA,MAAM,QAAQ,CAChB;AAAA,MACA,OAAO,WAAW,KAAK,iBAAiB;AAAA,MACxC,OAAO,KAAK,WAAW,MAAM;AAAA,QAC3B,OAAO,QAAQ;AAAA,QACf,OAAO,IAAI,MAAM,oBAAoB,CAAC;AAAA,OACvC;AAAA,MACD,OAAO,KAAK,SAAS,MAAM;AAAA,MAC3B,KAAK,SAAS;AAAA,KACf;AAAA;AAEL;",
-  "debugId": "55F886DB16D90CED64756E2164756E21",
+  "mappings": "6BAgBA,wBACA,wBAGA,SAAS,CAA8B,CAAC,EAAuB,CAC7D,GAAI,EAAI,qBAAuB,GAC7B,QAAQ,KACN,uGAEF,EAmBG,MAAM,CAAoC,CAEvC,OAA4C,KAE5C,QAEA,WAAa,GAEJ,kBAEA,WAGjB,WAAW,CAAC,EAA6B,CAAC,EAAG,CAC3C,GAAI,OAAO,IAAQ,IACjB,MAAU,MAAM,qCAAqC,EAEvD,KAAK,QAAU,EAAQ,QAAU,GACjC,KAAK,kBAAoB,EAAQ,mBAAqB,MACtD,KAAK,WAAa,EAAQ,KAAO,CAAC,KAIhC,OAAM,EAAY,CACpB,OAAO,KAAK,WAIV,UAAS,EAAY,CACvB,OAAO,KAAK,gBAIR,QAAO,CAAC,EAAc,EAA6B,CACvD,GAAI,KAAK,QACP,MAAM,KAAK,WAAW,EAAM,CAAI,EAEhC,WAAM,KAAK,aAAa,EAAM,CAAI,EAEpC,KAAK,WAAa,QAId,SAAQ,CAAC,EAAqC,CAClD,GAAI,CAAC,KAAK,QAAU,KAAK,QACvB,MAAU,MAAM,4CAA4C,EAG9D,IAAM,EAAQ,KAAK,OACb,EAAS,IAAK,KAAK,cAAe,CAAQ,EAChD,EAA+B,CAAM,EAErC,MAAM,IAAI,QAAc,CAAC,EAAS,IAAW,CAC3C,IAAM,EAAY,EAAI,QAAQ,CAC5B,OAAQ,EACR,WAAY,EAAO,WACnB,mBAAoB,EAAO,oBAAsB,GACjD,WAAY,EAAO,UACrB,CAAC,EAED,EAAU,KAAK,gBAAiB,IAAM,CACpC,KAAK,OAAS,EACd,KAAK,QAAU,GACf,EAAQ,EACT,EACD,EAAU,KAAK,QAAS,CAAM,EAC/B,OAIG,MAAK,CAAC,EAAiC,CAC3C,GAAI,CAAC,KAAK,OACR,MAAU,MAAM,sBAAsB,EAGxC,MAAM,IAAI,QAAc,CAAC,EAAS,IAAW,CAC3C,KAAK,QAAQ,MAAM,OAAO,KAAK,CAAI,EAAG,CAAC,IAAkC,CACvE,GAAI,EACF,EAAO,CAAG,EAEV,OAAQ,EAEX,EACF,QAII,IAAI,EAA8C,CACvD,GAAI,CAAC,KAAK,OACR,MAAU,MAAM,sBAAsB,EAGxC,IAAM,EAAS,KAAK,OACd,EAAsB,CAAC,EACzB,EAAoE,KACpE,EAAO,GACP,EAAsB,KAEpB,EAAS,CAAC,IAAwB,CACtC,IAAM,EAAO,IAAI,WAAW,CAAK,EACjC,GAAI,EACF,EAAY,CAAE,MAAO,EAAM,KAAM,EAAM,CAAC,EACxC,EAAc,KAEd,OAAM,KAAK,CAAI,GAIb,EAAU,CAAC,IAAqB,CAGpC,GAFA,EAAQ,EACR,EAAO,GACH,EACF,EAAY,CAAE,MAAO,OAAoC,KAAM,EAAK,CAAC,EACrE,EAAc,MAIZ,EAAU,IAAY,CAE1B,GADA,EAAO,GACH,EACF,EAAY,CAAE,MAAO,OAAoC,KAAM,EAAK,CAAC,EACrE,EAAc,MAIlB,EAAO,GAAG,OAAQ,CAAM,EACxB,EAAO,GAAG,QAAS,CAAO,EAC1B,EAAO,GAAG,QAAS,CAAO,EAE1B,GAAI,CACF,MAAO,CAAC,GAAQ,EAAM,OAAS,EAAG,CAChC,GAAI,EACF,MAAM,EAER,GAAI,EAAM,OAAS,EAAG,CACpB,MAAM,EAAM,MAAM,EAClB,SAEF,GAAI,EACF,MAEF,IAAM,EAAQ,MAAM,IAAI,QAAoC,CAAC,IAAY,CACvE,EAAc,EACf,EACD,GAAI,EAAM,KACR,MAEF,MAAM,EAAM,cAEd,CACA,EAAO,IAAI,OAAQ,CAAM,EACzB,EAAO,IAAI,QAAS,CAAO,EAC3B,EAAO,IAAI,QAAS,CAAO,QAKzB,MAAK,EAAkB,CAC3B,GAAI,CAAC,KAAK,OACR,OAGF,MAAM,IAAI,QAAc,CAAC,IAAY,CACnC,KAAK,QAAQ,IAAI,IAAM,EAAQ,CAAC,EACjC,EACD,KAAK,OAAS,KACd,KAAK,WAAa,GAIZ,YAAY,CAAC,EAAc,EAA6B,CAC9D,OAAO,IAAI,QAAQ,CAAC,EAAS,IAAW,CACtC,IAAM,EAAS,EAAI,QAAQ,CAAE,OAAM,MAAK,EAAG,IAAM,EAAQ,CAAC,EAC1D,EAAO,WAAW,KAAK,iBAAiB,EACxC,EAAO,KAAK,UAAW,IAAM,CAC3B,EAAO,QAAQ,EACf,EAAW,MAAM,oBAAoB,CAAC,EACvC,EACD,EAAO,KAAK,QAAS,CAAM,EAC3B,KAAK,OAAS,EACf,EAIK,UAAU,CAAC,EAAc,EAA6B,CAE5D,OADA,EAA+B,KAAK,UAAU,EACvC,IAAI,QAAQ,CAAC,EAAS,IAAW,CACtC,IAAM,EAAS,EAAI,QACjB,CACE,OACA,OACA,WAAY,KAAK,WAAW,YAAc,EAC1C,mBAAoB,KAAK,WAAW,oBAAsB,GAC1D,WAAY,KAAK,WAAW,UAC9B,EACA,IAAM,EAAQ,CAChB,EACA,EAAO,WAAW,KAAK,iBAAiB,EACxC,EAAO,KAAK,UAAW,IAAM,CAC3B,EAAO,QAAQ,EACf,EAAW,MAAM,oBAAoB,CAAC,EACvC,EACD,EAAO,KAAK,QAAS,CAAM,EAC3B,KAAK,OAAS,EACf,EAEL",
+  "debugId": "94AAFD676203266764756E2164756E21",
   "names": []
 }

package/dist/adapters/cf.js

@@ -1,78 +1,3 @@
-import {
-  __require
-} from "../chunk-v0bahtg2.js";
+import{I as q}from"../chunk-sqn04kae.js";class w{socket=null;writer=null;_secure;_connected=!1;directTls;starttls;constructor(b={}){this._secure=b.secure??!1,this.directTls=b.secure??!1,this.starttls=b.starttls??!this.directTls}get secure(){return this._secure}get connected(){return this._connected}async connect(b,g){let{connect:j}=await import("cloudflare:sockets"),m=this.directTls?"on":this.starttls?"starttls":"off";this.socket=j({hostname:b,port:g},{secureTransport:m}),this.writer=this.socket.writable.getWriter(),this._connected=!0,this._secure=m==="on"}async startTLS(b){if(!this.socket||this._secure)throw Error("Cannot STARTTLS: no plain socket available");await this.writer?.close(),this.socket=this.socket.startTls(),this.writer=this.socket.writable.getWriter(),this._secure=!0}async write(b){if(!this.writer)throw Error("Socket not connected");await this.writer.write(b)}async*read(){if(!this.socket)throw Error("Socket not connected");let b=this.socket.readable.getReader();try{while(!0){let{value:g,done:j}=await b.read();if(j)break;if(g)yield g}}finally{b.releaseLock()}}async close(){await this.writer?.close(),await this.socket?.close(),this.writer=null,this.socket=null,this._connected=!1}}export{w as CloudflareAdapter};
 
-// src/adapters/cf.ts
-class CloudflareAdapter {
-  socket = null;
-  writer = null;
-  _secure;
-  _connected = false;
-  directTls;
-  starttls;
-  constructor(options = {}) {
-    this._secure = options.secure ?? false;
-    this.directTls = options.secure ?? false;
-    this.starttls = options.starttls ?? !this.directTls;
-  }
-  get secure() {
-    return this._secure;
-  }
-  get connected() {
-    return this._connected;
-  }
-  async connect(host, port) {
-    const { connect } = await import("cloudflare:sockets");
-    const secureTransport = this.directTls ? "on" : this.starttls ? "starttls" : "off";
-    this.socket = connect({ hostname: host, port }, { secureTransport });
-    this.writer = this.socket.writable.getWriter();
-    this._connected = true;
-    this._secure = secureTransport === "on";
-  }
-  async startTLS(_options) {
-    if (!this.socket || this._secure) {
-      throw new Error("Cannot STARTTLS: no plain socket available");
-    }
-    await this.writer?.close();
-    this.socket = this.socket.startTls();
-    this.writer = this.socket.writable.getWriter();
-    this._secure = true;
-  }
-  async write(data) {
-    if (!this.writer) {
-      throw new Error("Socket not connected");
-    }
-    await this.writer.write(data);
-  }
-  async* read() {
-    if (!this.socket) {
-      throw new Error("Socket not connected");
-    }
-    const reader = this.socket.readable.getReader();
-    try {
-      while (true) {
-        const { value, done } = await reader.read();
-        if (done) {
-          break;
-        }
-        if (value) {
-          yield value;
-        }
-      }
-    } finally {
-      reader.releaseLock();
-    }
-  }
-  async close() {
-    await this.writer?.close();
-    await this.socket?.close();
-    this.writer = null;
-    this.socket = null;
-    this._connected = false;
-  }
-}
-export {
-  CloudflareAdapter
-};
-
-//# debugId=035AC57F8987550264756E2164756E21
+//# debugId=698255E287F8C83164756E2164756E21

package/dist/adapters/cf.js.map

@@ -4,7 +4,7 @@
   "sourcesContent": [
     "/**\n * @module\n * Cloudflare Workers socket adapter for SMTP via cloudflare:sockets.\n *\n * @example\n * ```ts\n * import { CloudflareAdapter } from \"sently/adapters/cf\";\n * import { createMailer } from \"sently\";\n *\n * const mailer = await createMailer({\n *   host: \"smtp.example.com\",\n *   adapter: new CloudflareAdapter(),\n *   auth: { user: \"relay@example.com\", pass: \"secret\" },\n * });\n * ```\n */\nimport type { SocketAdapter, TLSOptions } from \"../core/types.js\";\n\ninterface CFSocket {\n  readonly readable: ReadableStream<Uint8Array>;\n  readonly writable: WritableStream<Uint8Array>;\n  readonly closed: Promise<void>;\n  close(): Promise<void>;\n  startTls(): CFSocket;\n}\n\ntype CFConnect = (\n  address: { hostname: string; port: number },\n  options?: { secureTransport?: \"off\" | \"on\" | \"starttls\"; allowHalfOpen?: boolean },\n) => CFSocket;\n\n/** Configuration options for {@link CloudflareAdapter}. */\nexport interface CloudflareAdapterOptions {\n  /** Use implicit TLS on connect (secureTransport: \"on\"). Default: false. */\n  secure?: boolean;\n  /** Enable STARTTLS upgrade after plain connect. Default: true when not secure. */\n  starttls?: boolean;\n  /** Reserved for future TLS tuning (Workers sockets API). */\n  tls?: TLSOptions;\n}\n\n/**\n * Cloudflare Workers socket adapter via cloudflare:sockets.\n *\n * Limitations:\n * - No connection pooling (isolate lifecycle)\n * - No file system access for attachment.path\n * - No DNS MX lookup — explicit SMTP relay host required\n */\nexport class CloudflareAdapter implements SocketAdapter {\n  /** Underlying Cloudflare Workers socket. */\n  private socket: CFSocket | null = null;\n  /** Writable stream writer for outbound bytes. */\n  private writer: WritableStreamDefaultWriter<Uint8Array> | null = null;\n  /** Whether the connection is currently encrypted. */\n  private _secure: boolean;\n  /** Whether the socket is connected. */\n  private _connected = false;\n  /** Whether implicit TLS is used on connect (port 465 style). */\n  private readonly directTls: boolean;\n  /** Whether STARTTLS upgrade is enabled after plain connect. */\n  private readonly starttls: boolean;\n\n  /** Creates a Cloudflare Workers socket adapter. */\n  constructor(options: CloudflareAdapterOptions = {}) {\n    this._secure = options.secure ?? false;\n    this.directTls = options.secure ?? false;\n    this.starttls = options.starttls ?? !this.directTls;\n  }\n\n  /** Whether the connection uses TLS. */\n  get secure(): boolean {\n    return this._secure;\n  }\n\n  /** Whether the socket is currently connected. */\n  get connected(): boolean {\n    return this._connected;\n  }\n\n  /** Opens a TCP or TLS connection to the given host and port. */\n  async connect(host: string, port: number): Promise<void> {\n    const { connect } = (await import(\"cloudflare:sockets\")) as { connect: CFConnect };\n\n    const secureTransport = this.directTls ? \"on\" : this.starttls ? \"starttls\" : \"off\";\n    this.socket = connect({ hostname: host, port }, { secureTransport });\n    this.writer = this.socket.writable.getWriter();\n    this._connected = true;\n    this._secure = secureTransport === \"on\";\n  }\n\n  /** Upgrades a plain connection to TLS via STARTTLS. */\n  async startTLS(_options?: TLSOptions): Promise<void> {\n    if (!this.socket || this._secure) {\n      throw new Error(\"Cannot STARTTLS: no plain socket available\");\n    }\n\n    await this.writer?.close();\n    this.socket = this.socket.startTls();\n    this.writer = this.socket.writable.getWriter();\n    this._secure = true;\n  }\n\n  /** Writes raw bytes to the socket. */\n  async write(data: Uint8Array): Promise<void> {\n    if (!this.writer) {\n      throw new Error(\"Socket not connected\");\n    }\n    await this.writer.write(data);\n  }\n\n  /** Reads incoming socket data as an async iterable of byte chunks. */\n  async *read(): AsyncGenerator<Uint8Array, void, unknown> {\n    if (!this.socket) {\n      throw new Error(\"Socket not connected\");\n    }\n\n    const reader = this.socket.readable.getReader();\n    try {\n      while (true) {\n        const { value, done } = await reader.read();\n        if (done) {\n          break;\n        }\n        if (value) {\n          yield value;\n        }\n      }\n    } finally {\n      reader.releaseLock();\n    }\n  }\n\n  /** Closes the socket connection. */\n  async close(): Promise<void> {\n    await this.writer?.close();\n    await this.socket?.close();\n    this.writer = null;\n    this.socket = null;\n    this._connected = false;\n  }\n}\n"
   ],
-  "mappings": ";;;;;AAiDO,MAAM,kBAA2C;AAAA,EAE9C,SAA0B;AAAA,EAE1B,SAAyD;AAAA,EAEzD;AAAA,EAEA,aAAa;AAAA,EAEJ;AAAA,EAEA;AAAA,EAGjB,WAAW,CAAC,UAAoC,CAAC,GAAG;AAAA,IAClD,KAAK,UAAU,QAAQ,UAAU;AAAA,IACjC,KAAK,YAAY,QAAQ,UAAU;AAAA,IACnC,KAAK,WAAW,QAAQ,YAAY,CAAC,KAAK;AAAA;AAAA,MAIxC,MAAM,GAAY;AAAA,IACpB,OAAO,KAAK;AAAA;AAAA,MAIV,SAAS,GAAY;AAAA,IACvB,OAAO,KAAK;AAAA;AAAA,OAIR,QAAO,CAAC,MAAc,MAA6B;AAAA,IACvD,QAAQ,YAAa,MAAa;AAAA,IAElC,MAAM,kBAAkB,KAAK,YAAY,OAAO,KAAK,WAAW,aAAa;AAAA,IAC7E,KAAK,SAAS,QAAQ,EAAE,UAAU,MAAM,KAAK,GAAG,EAAE,gBAAgB,CAAC;AAAA,IACnE,KAAK,SAAS,KAAK,OAAO,SAAS,UAAU;AAAA,IAC7C,KAAK,aAAa;AAAA,IAClB,KAAK,UAAU,oBAAoB;AAAA;AAAA,OAI/B,SAAQ,CAAC,UAAsC;AAAA,IACnD,IAAI,CAAC,KAAK,UAAU,KAAK,SAAS;AAAA,MAChC,MAAM,IAAI,MAAM,4CAA4C;AAAA,IAC9D;AAAA,IAEA,MAAM,KAAK,QAAQ,MAAM;AAAA,IACzB,KAAK,SAAS,KAAK,OAAO,SAAS;AAAA,IACnC,KAAK,SAAS,KAAK,OAAO,SAAS,UAAU;AAAA,IAC7C,KAAK,UAAU;AAAA;AAAA,OAIX,MAAK,CAAC,MAAiC;AAAA,IAC3C,IAAI,CAAC,KAAK,QAAQ;AAAA,MAChB,MAAM,IAAI,MAAM,sBAAsB;AAAA,IACxC;AAAA,IACA,MAAM,KAAK,OAAO,MAAM,IAAI;AAAA;AAAA,SAIvB,IAAI,GAA8C;AAAA,IACvD,IAAI,CAAC,KAAK,QAAQ;AAAA,MAChB,MAAM,IAAI,MAAM,sBAAsB;AAAA,IACxC;AAAA,IAEA,MAAM,SAAS,KAAK,OAAO,SAAS,UAAU;AAAA,IAC9C,IAAI;AAAA,MACF,OAAO,MAAM;AAAA,QACX,QAAQ,OAAO,SAAS,MAAM,OAAO,KAAK;AAAA,QAC1C,IAAI,MAAM;AAAA,UACR;AAAA,QACF;AAAA,QACA,IAAI,OAAO;AAAA,UACT,MAAM;AAAA,QACR;AAAA,MACF;AAAA,cACA;AAAA,MACA,OAAO,YAAY;AAAA;AAAA;AAAA,OAKjB,MAAK,GAAkB;AAAA,IAC3B,MAAM,KAAK,QAAQ,MAAM;AAAA,IACzB,MAAM,KAAK,QAAQ,MAAM;AAAA,IACzB,KAAK,SAAS;AAAA,IACd,KAAK,SAAS;AAAA,IACd,KAAK,aAAa;AAAA;AAEtB;",
-  "debugId": "035AC57F8987550264756E2164756E21",
+  "mappings": "yCAiDO,MAAM,CAA2C,CAE9C,OAA0B,KAE1B,OAAyD,KAEzD,QAEA,WAAa,GAEJ,UAEA,SAGjB,WAAW,CAAC,EAAoC,CAAC,EAAG,CAClD,KAAK,QAAU,EAAQ,QAAU,GACjC,KAAK,UAAY,EAAQ,QAAU,GACnC,KAAK,SAAW,EAAQ,UAAY,CAAC,KAAK,aAIxC,OAAM,EAAY,CACpB,OAAO,KAAK,WAIV,UAAS,EAAY,CACvB,OAAO,KAAK,gBAIR,QAAO,CAAC,EAAc,EAA6B,CACvD,IAAQ,WAAa,KAAa,8BAE5B,EAAkB,KAAK,UAAY,KAAO,KAAK,SAAW,WAAa,MAC7E,KAAK,OAAS,EAAQ,CAAE,SAAU,EAAM,MAAK,EAAG,CAAE,iBAAgB,CAAC,EACnE,KAAK,OAAS,KAAK,OAAO,SAAS,UAAU,EAC7C,KAAK,WAAa,GAClB,KAAK,QAAU,IAAoB,UAI/B,SAAQ,CAAC,EAAsC,CACnD,GAAI,CAAC,KAAK,QAAU,KAAK,QACvB,MAAU,MAAM,4CAA4C,EAG9D,MAAM,KAAK,QAAQ,MAAM,EACzB,KAAK,OAAS,KAAK,OAAO,SAAS,EACnC,KAAK,OAAS,KAAK,OAAO,SAAS,UAAU,EAC7C,KAAK,QAAU,QAIX,MAAK,CAAC,EAAiC,CAC3C,GAAI,CAAC,KAAK,OACR,MAAU,MAAM,sBAAsB,EAExC,MAAM,KAAK,OAAO,MAAM,CAAI,QAIvB,IAAI,EAA8C,CACvD,GAAI,CAAC,KAAK,OACR,MAAU,MAAM,sBAAsB,EAGxC,IAAM,EAAS,KAAK,OAAO,SAAS,UAAU,EAC9C,GAAI,CACF,MAAO,GAAM,CACX,IAAQ,QAAO,QAAS,MAAM,EAAO,KAAK,EAC1C,GAAI,EACF,MAEF,GAAI,EACF,MAAM,UAGV,CACA,EAAO,YAAY,QAKjB,MAAK,EAAkB,CAC3B,MAAM,KAAK,QAAQ,MAAM,EACzB,MAAM,KAAK,QAAQ,MAAM,EACzB,KAAK,OAAS,KACd,KAAK,OAAS,KACd,KAAK,WAAa,GAEtB",
+  "debugId": "698255E287F8C83164756E2164756E21",
   "names": []
 }