fix(mailer): enforce Max access and preserve inbox resources on failure

[icecrasher321]

Summary

• Enforce hosted Sim Mailer eligibility using the workspace payer, including Max for Teams, and preserve inboxes when billing lookups fail during cleanup.
• Show enable, disable, and secret-access errors in settings without exposing raw provider responses.
• Provision replacement addresses before switching configuration. Commit inbox and webhook changes atomically, retain resource cleanup in the outbox, and prevent retries from deleting reused addresses or activating resources whose cleanup started.
• Keep the current per-workspace webhook model; provider capacity limits still apply.

Type of Change

• Bug fix

Testing

• 182 focused tests passed, including eligibility, settings errors, concurrent configuration changes, provider failures, and asynchronous deletion retries.
• App type-check, repository lint, all 46 repository audits, block-registry audit, and docs-manifest check passed.
• No database migration required. Deploy the updated outbox worker before the app so the new cleanup handler is available.

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Sep 17, 2026 11:16pm UTC

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge; no new actionable failure remains in the changes since the previous review.

Summary

This PR tightens hosted Sim Mailer eligibility, makes inbox replacement and cleanup failure-safe, and surfaces sanitized settings errors.

• Uses the workspace payer’s Max or enterprise entitlement while preserving resources when retention checks are uncertain.
• Provisions replacement resources before atomically switching configuration.
• Moves provider cleanup into the durable outbox with reuse, cancellation, and asynchronous-deletion safeguards.
• Expedites rollback cleanup after failed activation while retaining the queued fallback.
• Adds focused coverage for entitlement, provider responses, lifecycle races, cleanup retries, and settings errors.

Diagram

sequenceDiagram
  participant U as Settings request
  participant L as Inbox lifecycle
  participant A as AgentMail
  participant DB as Database
  participant O as Cleanup outbox

  U->>L: Enable or replace inbox
  L->>A: Create inbox
  L->>A: Create webhook
  L->>O: Queue delayed rollback
  L->>DB: Begin activation transaction
  L->>DB: Lock and verify current configuration
  L->>O: Cancel rollback in transaction
  L->>DB: Atomically install inbox and webhook

  alt Transaction commits
    DB-->>L: Activated
    L->>O: Queue old-resource cleanup
  else Transaction fails
    DB-->>L: Roll back rollback cancellation
    L->>O: Expedite queued rollback
    O->>A: Delete newly provisioned resources
  end

Loading

_{Reviews (3) · Last reviewed commit: "fix(mailer): expedite rollback after act..."}

[cubic-dev-ai]

All reported issues were addressed across 13 files

<sub>Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic</sub>

[icecrasher321]

@greptile

[icecrasher321]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@icecrasher321 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

All reported issues were addressed across 14 files

<sub>Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic</sub>

[icecrasher321]

@greptile

[icecrasher321]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@icecrasher321 I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 14 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}