docs(email): add migration plan for NeverBounce → Bouncer

[alexkgold]

Summary

• Adds .plans/neverbounce-to-bouncer.md documenting the full plan to replace NeverBounce with Bouncer for email verification
• Covers API differences, block logic decisions (allow risky, block undeliverable and domain.disposable === 'yes'), timeout tradeoffs, all files to change, test rewrite scope, and secrets rotation steps

Verification

N/A — docs-only change.

Visual Changes

N/A

Reviewer Notes

The plan flags a timeout decision that needs input before implementation: keep the current 5s client timeout (fail-open on slow Bouncer responses) vs. raise to 10s for better detection at the cost of slower magic-link UX for affected addresses.

[kilo-code-bot]

WARNING: This section points to the wrong billing worker file

neverbounce_rejected is still part of the SendResult.reason union in services/kiloclaw-billing/src/lifecycle.ts:55, so the migration plan also needs to update that worker contract. As written, this sends implementers to apps/web/src/lib/kiloclaw/billing-lifecycle-cron.ts, which does not exist, and risks leaving a compile error behind when email.ts starts returning bouncer_rejected.

[kilo-code-bot]

Code Review Summary

Status: 1 Issues Found | Recommendation: Address before merge

Overview

Severity	Count
CRITICAL	0
WARNING	1
SUGGESTION	0

Fix these issues in Kilo Cloud

Issue Details (click to expand)

WARNING

File	Line	Issue
.plans/neverbounce-to-bouncer.md	120	Plan references a non-existent billing worker path and misses the real services/kiloclaw-billing/src/lifecycle.ts SendResult.reason update needed for the bouncer_rejected rename.

Other Observations (not in diff)

Issues found in unchanged code that cannot receive inline comments:

None.

Files Reviewed (1 files)

• .plans/neverbounce-to-bouncer.md - 1 issue

---

_{Reviewed by gpt-5.4-20260305 · 278,297 tokens}