studio-engine 0.5.6 → 0.5.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7dde49831782823962437f0efab2c8334fe0efc4376873ee9b9c4c2486aa4d1f
-  data.tar.gz: c9cb4750ad4298869623db8a98e93662b101a1b2ce055fb779d15a3095ba1529
+  metadata.gz: 401a5db38e438ea4335d910bc67c88559739cb227a7377503c152cb2cea409ba
+  data.tar.gz: 12703eff81b8af83d9d73e26ebfbd7ec11b6a53444372c8330f32f7b09b89113
 SHA512:
-  metadata.gz: bb82ea299130783431b2dfea4fac8ddece0728b7f49d6ea15c1cff49d819fb6687a5a03f4eb80d4a0f8cb590cf78e45ccb1cdec410bc042ba6caed95bdde24b0
-  data.tar.gz: e93039393ac8e344f7eef097ce55629f41cdefdb8f48be418ad3f8a7228e1c01363a3646ecd23708cffa182d3e905e17a8c1b2f8eccbfe6b97a3c9ef203a855b
+  metadata.gz: 8eff2ade70b7a335ac0f50a15e2085fa05a0ba4d5ae7ff36ff7a03c8ec811022fb4d6ece26fed7639c9faf3431d66a1548cc86ed0f261cf255d2dcd4c84ad51e
+  data.tar.gz: 72df2ccff7e151d391edd34c62d1a1e1ac1782317a14548f0fcfd541e58646dba89fc13ea254a1a141d1347d9016ee42e04b7c475a426eb9c8eb959725c6a588

data/CHANGELOG.md

@@ -4,7 +4,32 @@ The format is [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). This pro
 
 ## Unreleased
 
-No entries yet.
+## v0.5.8 (2026-06-14)
+
+### Added
+- **`StudioEmailDeliveryHelper#email_delivery_banner_status`** — shared
+  non-production banner status text for whether the current process sends
+  external email and which transport is active (`resend`, `ses`, `capture`, or
+  the ActionMailer delivery method).
+
+## v0.5.7 (2026-06-14)
+
+### Added
+- **`Studio.mailer_from_for_transport` / `Studio.marketing_from_for_transport`** —
+  provider-aware sender helpers. SES-ready apps use app/domain-specific
+  `MAILER_FROM` and `MARKETING_MAILER_FROM`; Resend fallback uses
+  `RESEND_MAILER_FROM`, defaulting to `McRitchie Studio <team@mcritchie.studio>`
+  so new apps can send during SES sandbox/presetup without verifying a second
+  Resend domain.
+
+### Fixed
+- **`ses:check` / `ses:verify_domain` credential selection** now prefers
+  `SES_AWS_ACCESS_KEY_ID` / `SES_AWS_SECRET_ACCESS_KEY` before falling back to
+  generic `AWS_*` credentials, keeping SES account checks separate from
+  consumer app S3/ImageCache IAM users.
+- **`ses:verify_domain` existing identity handling** now accepts AWS SES's
+  `already exist` response wording and falls back to reading the existing
+  identity.
 
 ## v0.5.6 (2026-06-14)
 

data/README.md

@@ -11,7 +11,7 @@ Shared Rails engine for McRitchie apps. Provides authentication, error handling,
 gem "studio-engine", "~> 0.5"
 ```
 
-Then `bundle install`. The current release is **v0.5.5**; see [`CHANGELOG.md`](./CHANGELOG.md) for the history.
+Then `bundle install`. The current release is **v0.5.8**; see [`CHANGELOG.md`](./CHANGELOG.md) for the history.
 
 > Published to RubyGems as of v0.4.0 (2026-05-17). New installs should use the RubyGems form, which the consumer Rails apps (`mcritchie-studio`, `turf-monster`) already use.
 
@@ -35,7 +35,9 @@ Studio.configure do |config|
   config.auth_methods = %i[magic_link google]
   config.registration_params = [:name, :email]
   config.magic_link_token_name = "magic_link_my_app_v1"
-  config.mailer_from = ENV.fetch("MAILER_FROM", "noreply@example.com")
+  config.mailer_from = Studio.mailer_from_for_transport(
+    ses_from: "My App <team@example.com>"
+  )
   config.theme_primary = "#4BAF50"   # Override default violet
   config.theme_logos = ["logo.svg"]
 end
@@ -105,4 +107,7 @@ For short local experiments, temporarily point a consumer Gemfile at `path: "../
 
 ## Development Notes
 
-See [CLAUDE.md](./CLAUDE.md) only as legacy migration context while neutral agent docs are being extracted. Current cross-repo setup, ports, credentials, and workflow guidance live in McRitchie Studio's [`docs/agents/`](https://github.com/amcritchie/mcritchie-studio/tree/main/docs/agents).
+Use the docs in [`docs/`](./docs) for engine setup, release, email transport,
+and host-app contracts. Current cross-repo setup, ports, credentials, and
+workflow guidance live in McRitchie Studio's
+[`docs/agents/`](https://github.com/amcritchie/mcritchie-studio/tree/main/docs/agents).

data/app/helpers/studio_email_delivery_helper.rb

@@ -0,0 +1,35 @@
+module StudioEmailDeliveryHelper
+  NON_DELIVERING_EMAIL_METHODS = %w[test file].freeze
+
+  def email_delivery_banner_status
+    delivery_method = studio_email_delivery_method
+    capture_enabled = Studio.local_email_capture?
+    sends_email = studio_email_perform_deliveries? && !capture_enabled &&
+                  !NON_DELIVERING_EMAIL_METHODS.include?(delivery_method)
+
+    "EMAIL SEND #{sends_email} · #{email_delivery_transport_label(delivery_method, capture_enabled)}"
+  end
+
+  def email_delivery_transport_label(delivery_method = studio_email_delivery_method,
+                                     capture_enabled = Studio.local_email_capture?)
+    return "capture" if capture_enabled
+    return "ses" if Studio.ses_transport_ready?
+    return "resend" if delivery_method == "resend"
+
+    delivery_method.to_s.strip.empty? ? "unknown" : delivery_method
+  end
+
+  private
+
+  def studio_email_delivery_method
+    return "unknown" unless defined?(ActionMailer)
+
+    ActionMailer::Base.delivery_method.to_s
+  end
+
+  def studio_email_perform_deliveries?
+    return false unless defined?(ActionMailer)
+
+    ActionMailer::Base.perform_deliveries
+  end
+end

data/app/mailers/application_mailer.rb

@@ -3,5 +3,5 @@ class ApplicationMailer < ActionMailer::Base
   # the host's config/initializers/studio.rb, with an ENV fallback. No layout is
   # forced — ActionMailer renders bare if the host ships no mailer layout, and a
   # host that defines its own ApplicationMailer (e.g. turf-monster) wins outright.
-  default from: -> { Studio.mailer_from || ENV["MAILER_FROM"] || "no-reply@mcritchie.studio" }
+  default from: -> { Studio.mailer_from || ENV["MAILER_FROM"] || "McRitchie Studio <team@mcritchie.studio>" }
 end

data/lib/studio/version.rb

@@ -1,3 +1,3 @@
 module Studio
-  VERSION = "0.5.6"
+  VERSION = "0.5.8"
 end

data/lib/studio.rb

@@ -41,6 +41,7 @@ module Studio
   # Default From: for engine-sent mail (magic links). Apps set this to their
   # verified sending address in config/initializers/studio.rb.
   mattr_accessor :mailer_from, default: nil
+  mattr_accessor :resend_mailer_from, default: "McRitchie Studio <team@mcritchie.studio>"
 
   # Local/worktree email capture. nil means "auto": enabled when AGENT_WORKTREE
   # is truthy, otherwise disabled. Production always disables capture.
@@ -88,6 +89,36 @@ module Studio
     yield self
   end
 
+  def self.mailer_from_for_transport(env: ENV, ses_from:, resend_from: nil)
+    if ses_transport_ready?(env)
+      env_value(env, "MAILER_FROM") || ses_from
+    else
+      env_value(env, "RESEND_MAILER_FROM") || resend_from || resend_mailer_from
+    end
+  end
+
+  def self.marketing_from_for_transport(env: ENV, ses_from:, resend_from: nil)
+    if ses_transport_ready?(env)
+      env_value(env, "MARKETING_MAILER_FROM") || ses_from
+    else
+      env_value(env, "RESEND_MARKETING_FROM") ||
+        env_value(env, "RESEND_MAILER_FROM") ||
+        resend_from ||
+        resend_mailer_from
+    end
+  end
+
+  def self.ses_transport_ready?(env = ENV)
+    env["MAIL_TRANSPORT"].to_s.downcase == "ses" &&
+      env_value(env, "SES_SMTP_USERNAME") &&
+      env_value(env, "SES_SMTP_PASSWORD")
+  end
+
+  def self.env_value(env, key)
+    value = env[key]
+    value if value && !value.to_s.strip.empty?
+  end
+
   # True when the given sign-in method is enabled for this app.
   def self.auth_method?(method)
     auth_methods.include?(method.to_sym)

data/lib/tasks/studio_ses.rake

@@ -2,14 +2,39 @@
 
 unless Rake::Task.task_defined?("ses:check")
   namespace :ses do
+    def studio_ses_env_value(name)
+      value = ENV[name]
+      return nil if value.nil? || value.to_s.strip.empty?
+
+      value
+    end
+
+    def studio_ses_credential(name)
+      studio_ses_env_value("SES_#{name}") || studio_ses_env_value(name)
+    end
+
+    def studio_ses_credential_source(name)
+      return "SES_#{name}" if studio_ses_env_value("SES_#{name}")
+      return name if studio_ses_env_value(name)
+
+      "missing"
+    end
+
     def studio_ses_signer(region)
       require "aws-sigv4"
 
+      access_key_id = studio_ses_credential("AWS_ACCESS_KEY_ID")
+      secret_access_key = studio_ses_credential("AWS_SECRET_ACCESS_KEY")
+      missing = []
+      missing << "SES_AWS_ACCESS_KEY_ID or AWS_ACCESS_KEY_ID" unless access_key_id
+      missing << "SES_AWS_SECRET_ACCESS_KEY or AWS_SECRET_ACCESS_KEY" unless secret_access_key
+      abort "ses:* needs #{missing.join(' and ')}." if missing.any?
+
       Aws::Sigv4::Signer.new(
         service: "ses",
         region: region,
-        access_key_id: ENV.fetch("AWS_ACCESS_KEY_ID"),
-        secret_access_key: ENV.fetch("AWS_SECRET_ACCESS_KEY")
+        access_key_id: access_key_id,
+        secret_access_key: secret_access_key
       )
     rescue LoadError
       abort "ses:* needs aws-sigv4; it is usually available through aws-sdk-s3."
@@ -45,6 +70,7 @@ unless Rake::Task.task_defined?("ses:check")
 
       code, account = get.call("/v2/email/account")
       puts "GetAccount (region #{region}) -> HTTP #{code}"
+      puts "  CredentialSource=#{studio_ses_credential_source('AWS_ACCESS_KEY_ID')}"
       if code == 200
         puts "  SendingEnabled=#{account['SendingEnabled']} ProductionAccessEnabled=#{account['ProductionAccessEnabled']} Enforcement=#{account['EnforcementStatus']}"
       else
@@ -74,8 +100,9 @@ unless Rake::Task.task_defined?("ses:check")
       signer = studio_ses_signer(region)
       body = { EmailIdentity: domain }.to_json
       code, response = studio_ses_request(signer, region, "POST", "/v2/email/identities", body)
+      already_exists = "#{response['message']} #{response['Message']}".match?(/already exist/i)
 
-      if code == 409 || "#{response['message']}#{response['Message']}".match?(/already exists/i)
+      if code == 409 || ([400, 409].include?(code) && already_exists)
         code, response = studio_ses_request(signer, region, "GET", "/v2/email/identities/#{domain}")
       end
 

metadata

@@ -1,13 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: studio-engine
 version: !ruby/object:Gem::Version
-  version: 0.5.6
+  version: 0.5.8
 platform: ruby
 authors:
 - Alex McRitchie
+autorequire:
 bindir: bin
 cert_chain: []
-date: 1980-01-02 00:00:00.000000000 Z
+date: 2026-06-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -151,6 +152,7 @@ files:
 - app/controllers/solana_sessions_controller.rb
 - app/controllers/studio/local_emails_controller.rb
 - app/controllers/theme_settings_controller.rb
+- app/helpers/studio_email_delivery_helper.rb
 - app/helpers/studio_theme_helper.rb
 - app/jobs/error_log_cleanup_job.rb
 - app/jobs/studio/email_delivery_job.rb
@@ -226,6 +228,7 @@ metadata:
   source_code_uri: https://github.com/amcritchie/studio-engine/tree/main
   bug_tracker_uri: https://github.com/amcritchie/studio-engine/issues
   changelog_uri: https://github.com/amcritchie/studio-engine/blob/main/CHANGELOG.md
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -240,7 +243,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.9
+rubygems_version: 3.5.11
+signing_key:
 specification_version: 4
 summary: Shared Rails engine providing auth, SSO, error logging, theming, and S3-backed
   image caching