mesh-mail sends an approved mail from its own sender process, and tells a failed send once (ADR 0436, ADR 0438; issues 1172, 1193-1199) #371

Merged

mesh-tools merged 19 commits from feat/mail-sender into main 2026-10-19 11:36:51 +00:00

Conversation 2 Commits 19 Files Changed 27

+3782 -233

19 Commits

Author	SHA1	Message	Date
jochen	a2c0c58677	mesh-mail: a redelivery of a message whose send already finished (sent, failed, refused or not proven) is a repeat, terminated without recording, emitting or telling anything again (operator-approved change to ADR 0436 clause 10; issue 1196)	2026-10-19 13:29:31 +02:00
jochen	dd8305d97d	mesh-mail: the refused-sign-in acceptance test's wait excluded queued too, so it returned done on the very first look before the sender ever claimed anything (issue 1198)	2026-10-19 11:10:36 +02:00
jochen	06dfce87f5	mesh-mail: decide kept by settleSend's own returned revision, not its error, so a changed revision is actually retried instead of silently accepted as another writer's state; emit mail.send.failed from claimQueuedSend only once its own write lands (review round 2; issue 1198)	2026-10-19 11:07:24 +02:00
jochen	7db4bd215d	mesh-mail: fix the work-queue stream's real bus name (MAIL_SENDS, not MAIL-SENDS) and build the integration tests' stream, subject and duplicate window exactly as the controller composes them, exercising the send id's dedup (review round 1 finding 7; issue 1198)	2026-10-19 10:57:45 +02:00
jochen	1639269ad4	mesh-mail: on Approve the tools record the send queued directly, with no separate approved state, then publish; a stuck queued record is republished by the sweep past a short grace, never NakWithDelay'd by the sender (ADR 0436 clause 8, decided to replace the review round 1 item 2 work-around; issues 1194, 1196, 1199)	2026-10-19 10:53:32 +02:00
jochen	7397051771	mesh-mail: tighten tests that proved less than their criterion — attempt 5 and no mail received (1198/AC4), mail_health actually turning unhealthy (1199/AC2), and the words mail_send_status gives, not only its status (1199/AC4) (review round 1 finding 6)	2026-10-19 10:53:12 +02:00
jochen	95089762ef	mesh-mail: retry the outcome's own write on a changed revision, and never ack or emit an outcome that could not be kept (review round 1 finding 5; issue 1198)	2026-10-19 10:43:45 +02:00
jochen	ce3b12f349	mesh-mail: emit mail.send.failed when the sender's own claim refuses or finds a send already sending, same as a failed send after it (review round 1 finding 4; issue 1198)	2026-10-19 10:40:41 +02:00
jochen	acb82992ee	mesh-mail: index a send for a tell or mail_health's overdue check before its record carries the outcome, drop the old index entry only after, and report an index write that fails instead of dropping it silently (review round 1 finding 3; issues 1194, 1199)	2026-10-19 10:38:07 +02:00
jochen	0a7669b48f	mesh-mail: a send still approved (the tools' own publish-then-record race) is redelivered later, never refused or told (review round 1 finding 2; issue 1196)	2026-10-19 10:31:39 +02:00
jochen	f140099a75	mesh-mail: declare the sender's own secret broker-send, so the controller can issue its account (review round 1 finding 1; issue 1172)	2026-10-19 10:29:48 +02:00
jochen	f3a59ee63a	mesh-mail: tell the operator once for a failed approved send and once more if its sender has not taken it, make an overdue send unhealthy, and give mail_send_status its full vocabulary (ADR 0436 clauses 11, 12; issue 1199)	2026-10-19 10:22:27 +02:00
jochen	33a97e6d13	mesh-mail: the sender records a send's outcome, retries a not-taken failure and emits mail.send.sent or mail.send.failed, acknowledging only once it is kept (ADR 0436 clauses 10, 11; issue 1198)	2026-10-19 10:11:41 +02:00
jochen	e7dce9616c	mesh-mail: classify an SMTP send's outcome (not taken, refused, not proven), and carry the send id in the Message-ID (ADR 0436 clause 10; issue 1197)	2026-10-19 10:03:44 +02:00
jochen	1ccb617a86	mesh-mail: the sender verifies the operator's warrant again from the router's own record and claims a send once before any connection (ADR 0436 clauses 9, 10; issue 1196)	2026-10-19 09:57:07 +02:00
jochen	dd3ed68483	mesh-mail: a send process that connects on its own bus account and consumes the mail-sends queue, stopping cleanly on a signal (ADR 0436 clause 7; issue 1195)	2026-10-19 09:49:24 +02:00
jochen	428b42181d	mesh-mail: on the operator's Approve the tools record approved and queue the send for the sender, instead of sending it themselves (ADR 0436 clause 8; issue 1194)	2026-10-19 09:44:42 +02:00
jochen	59c0906c79	mesh-mail: move password reading out of the tools' reach into its own package, so only keep and the send actor import it (ADR 0436 clause 12; issue 1193)	2026-10-19 09:32:54 +02:00
jochen	75a9a45c6f	mesh-mail: pin mesh-sdk go to release 2, declare the sender account, bus process and work-queue stream (ADR 0436 clauses 7, 8; issue 1172)	2026-10-19 09:23:45 +02:00