# @lssm-tech/integration.job-application-email

Opaque Resend inbox aliases, signed receiving webhooks, and verification effects.

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `2.0.4`
- Package path: `packages/integrations/job-application-email`
- Manifest path: `packages/integrations/job-application-email/package.json`
- Manifest Git blob: `5668d08fb5170db10fabfdde775cd106dce9e555`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/integration.job-application-email](https://lssm.co/docs/packages/integration.job-application-email/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-email)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-email/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-email/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/integration.job-application-email.txt)

## Package metadata

```json
{
  "layer": "integrations",
  "physicalArea": null,
  "primaryArea": "intelligence-and-research",
  "classification": {
    "privateDeclared": null,
    "catalogFamily": "integrations",
    "catalogKind": "integration",
    "catalogStatus": "active",
    "adoptionMode": "adoptable",
    "stability": "experimental"
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: not declared; publication is not verified.

Primary area: [Intelligence, research and applications](https://lssm.co/docs/areas/intelligence-and-research/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/integrations/job-application-email/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-email/README.md",
  "blobSha": "4669e7f40da5c1d3d521ac4f54529e1867310f83",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# `@lssm-tech/integration.job-application-email`

Allocates opaque per-application Resend aliases, verifies `email.received` webhooks over the raw body, deduplicates `svix-id`, authorizes the recipient before fetching content, sanitizes untrusted HTML, scans attachments, and reserves account-verification effects before opening links.

`createApplicationResendWebhookIngressV1` is the injectable API composition port.
Verification-link execution requires the current durable work item, lease owner,
and fence. The exact candidate URL is reserved before redirect resolution or any
browser action; replay, stale claims, and cancellation perform no link network
work.

Inbound messages with a verification-link or OTP candidate enqueue an opaque
candidate-scoped challenge only after the signed event is reserved and the
sanitized inbox object is stored. Queue payloads contain the message reference,
candidate kinds, and request digest—not links, codes, or message content.
`completeAccountVerificationOtpV1` then reserves the exact worker effect before
placing the short-lived code in the candidate material vault and gives the
browser only its opaque reference. Ambiguous codes, stale fences, unexpected
senders, expiry, replay, and cancellation fail closed.

`createResendReceivingContentClientV1` binds the receiving ports to Resend's Receiving API. The isolated inbox worker owns the API key and an explicit allowlist for Resend attachment hosts. Attachment downloads deny redirects, stream into a configured bound, require the provider-declared byte size, and never expose signed URLs to agent prompts or browser surfaces.


## Declared capabilities

### Integration Job Application Email

Capability ID: `package.lssm.tech.integration.job.application.email`

Opaque Resend inbox aliases, signed receiving webhooks, and verification effects.

Use cases:

- Adopt opaque resend inbox aliases, signed receiving webhooks, and verification effects

Constraints:

```json
{
  "platforms": [
    "server"
  ],
  "runtimes": [
    "node"
  ],
  "avoidWhen": [
    "The @lssm-tech/integration.job-application-email package constraints do not match the target runtime or platform."
  ],
  "requires": [
    "TypeScript"
  ]
}
```

Other capability declarations:

```json
{
  "status": "active",
  "aliases": [
    "integration",
    "job",
    "application",
    "email"
  ],
  "pythonEquivalents": [],
  "alternatives": [],
  "relationships": [],
  "resolutionPriority": 50
}
```

Capability imports:

```json
[
  {
    "from": "@lssm-tech/integration.job-application-email",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.job-application-email/alias",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.job-application-email/ingress",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.job-application-email/receiving",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.job-application-email/resend-content",
    "symbols": []
  },
  {
    "from": "@lssm-tech/integration.job-application-email/verification",
    "symbols": []
  }
]
```

## Catalogue metadata

```json
{
  "family": "integrations",
  "kind": "integration",
  "status": "active",
  "adoptionMode": "adoptable",
  "stability": "experimental",
  "platforms": [
    "server"
  ],
  "runtimes": [
    "node"
  ],
  "entrypoints": [
    ".",
    "./alias",
    "./ingress",
    "./receiving",
    "./resend-content",
    "./verification"
  ],
  "examples": [],
  "replacements": []
}
```

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[
  {
    "capabilityId": "package.lssm.tech.integration.job.application.email",
    "from": "@lssm-tech/integration.job-application-email",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.job.application.email",
    "from": "@lssm-tech/integration.job-application-email/alias",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.job.application.email",
    "from": "@lssm-tech/integration.job-application-email/ingress",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.job.application.email",
    "from": "@lssm-tech/integration.job-application-email/receiving",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.job.application.email",
    "from": "@lssm-tech/integration.job-application-email/resend-content",
    "symbols": []
  },
  {
    "capabilityId": "package.lssm.tech.integration.job.application.email",
    "from": "@lssm-tech/integration.job-application-email/verification",
    "symbols": []
  }
]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

- `@lssm-tech/integration.job-application-email` — subpath `.`
  - `unconditional`: `./src/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-email/src/index.ts); verified source file.

- `@lssm-tech/integration.job-application-email/alias` — subpath `./alias`
  - `unconditional`: `./src/alias.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-email/src/alias.ts); verified source file.

- `@lssm-tech/integration.job-application-email/ingress` — subpath `./ingress`
  - `unconditional`: `./src/ingress.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-email/src/ingress.ts); verified source file.

- `@lssm-tech/integration.job-application-email/receiving` — subpath `./receiving`
  - `unconditional`: `./src/receiving.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-email/src/receiving.ts); verified source file.

- `@lssm-tech/integration.job-application-email/receiving-types` — subpath `./receiving-types`
  - `unconditional`: `./src/receiving-types.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-email/src/receiving-types.ts); verified source file.

- `@lssm-tech/integration.job-application-email/resend-content` — subpath `./resend-content`
  - `unconditional`: `./src/resend-content.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-email/src/resend-content.ts); verified source file.

- `@lssm-tech/integration.job-application-email/verification` — subpath `./verification`
  - `unconditional`: `./src/verification.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/job-application-email/src/verification.ts); verified source file.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": "./dist/index.d.ts",
  "files": [
    "dist",
    "README.md"
  ],
  "publishExports": {
    ".": {
      "types": "./dist/index.d.ts",
      "browser": "./dist/browser/index.js",
      "bun": "./dist/index.js",
      "node": "./dist/node/index.js",
      "default": "./dist/index.js"
    },
    "./alias": {
      "types": "./dist/alias.d.ts",
      "browser": "./dist/browser/alias.js",
      "bun": "./dist/alias.js",
      "node": "./dist/node/alias.js",
      "default": "./dist/alias.js"
    },
    "./ingress": {
      "types": "./dist/ingress.d.ts",
      "browser": "./dist/browser/ingress.js",
      "bun": "./dist/ingress.js",
      "node": "./dist/node/ingress.js",
      "default": "./dist/ingress.js"
    },
    "./receiving": {
      "types": "./dist/receiving.d.ts",
      "browser": "./dist/browser/receiving.js",
      "bun": "./dist/receiving.js",
      "node": "./dist/node/receiving.js",
      "default": "./dist/receiving.js"
    },
    "./receiving-types": {
      "types": "./dist/receiving-types.d.ts",
      "browser": "./dist/browser/receiving-types.js",
      "bun": "./dist/receiving-types.js",
      "node": "./dist/node/receiving-types.js",
      "default": "./dist/receiving-types.js"
    },
    "./resend-content": {
      "types": "./dist/resend-content.d.ts",
      "browser": "./dist/browser/resend-content.js",
      "bun": "./dist/resend-content.js",
      "node": "./dist/node/resend-content.js",
      "default": "./dist/resend-content.js"
    },
    "./verification": {
      "types": "./dist/verification.d.ts",
      "browser": "./dist/browser/verification.js",
      "bun": "./dist/verification.js",
      "node": "./dist/node/verification.js",
      "default": "./dist/verification.js"
    }
  }
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- [@lssm-tech/integration.provider-email](https://lssm.co/docs/packages/integration.provider-email/): `workspace:^`
- [@lssm-tech/lib.job-application-runtime](https://lssm.co/docs/packages/lib.job-application-runtime/): `workspace:^`
- `resend`: `^6.28.1`

### Peer dependencies

No declarations in the inspected manifest.

### Optional dependencies

No declarations in the inspected manifest.

### Development dependencies

- [@lssm-tech/tool.bun](https://lssm.co/docs/packages/tool.bun/): `workspace:*`
- [@lssm-tech/tool.typescript](https://lssm.co/docs/packages/tool.typescript/): `workspace:*`
- `typescript`: `catalog:`

### Peer dependency metadata

```json
{}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "build": "contractspec-bun-build build",
  "build:bundle": "contractspec-bun-build transpile",
  "build:types": "contractspec-bun-build types",
  "clean": "rimraf dist .turbo",
  "lint:check": "node ../../../scripts/biome.cjs check .",
  "test": "bun test",
  "typecheck": "tsgo --noEmit"
}
```

## Declared documentation links

- [Integration Job Application Email documentation](https://www.npmjs.com/package/%40lssm-tech%2Fintegration.job-application-email) — declared link; destination not verified.

```json
{
  "url": "https://www.npmjs.com/package/%40lssm-tech%2Fintegration.job-application-email",
  "kind": "readme"
}
```

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/integration.job-application-email.txt",
  "route": "/llms/integration.job-application-email",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/integration.job-application-email.txt",
  "blobSha": "4669e7f40da5c1d3d521ac4f54529e1867310f83",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```