Fix CI/CD

apps/backend/src/private/implementation

@@ -1 +1 @@
-Subproject commit ebe0d435e7bbe0251463c78d088d10edcb7ff5a0
+Subproject commit a815ddcd1354d4bf27042626d1035709c80abdc6

apps/backend/src/private/implementation-fallback/index.ts

@@ -1,6 +1,7 @@
 import { AiProxyBodyProcessor } from "@/lib/ai/proxy-preprocessing";
 import { SignUpRiskEngine } from "@/lib/risk-scores";
 import { createNeutralSignUpHeuristicFacts } from "@/lib/sign-up-heuristics";
+import type { SmtpEgressPolicyResult } from "../types";
 
 export const signUpRiskEngine: SignUpRiskEngine = {
   async calculateRiskAssessment() {
@@ -16,9 +17,9 @@ export const preprocessProxyBody: AiProxyBodyProcessor = ({ parsedBody }) => par
 export async function checkSmtpEgressPolicy(options: {
   host: string,
   port: number,
-}) {
+}): Promise<SmtpEgressPolicyResult> {
   return {
-    status: "ok" as const,
+    status: "ok",
     addresses: [options.host],
   };
 }

apps/backend/src/private/types.ts

@@ -0,0 +1,11 @@
+export type SmtpEgressPolicyViolation = {
+  reason: "disallowed-port" | "internal-ip-literal" | "internal-resolved-address" | "no-dns-addresses" | "dns-lookup-failed",
+  host: string,
+  port: number,
+  addresses?: string[],
+  cause?: unknown,
+};
+
+export type SmtpEgressPolicyResult =
+  | { status: "ok", addresses: string[] }
+  | { status: "error", violation: SmtpEgressPolicyViolation };