@12-apps/notifications 4.7.1 → 4.9.0

package/dist/chunk-EKUSNUBT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/email/text.ts","../src/email/theme.ts","../src/email/template.ts"],"sourcesContent":["import type { EmailDocument } from './template';\n\n/**\n * The plain-text half.\n *\n * Not a courtesy. Every major spam filter scores a `text/html` part with no\n * `text/plain` twin, and a watch, a terminal client and a screen reader in\n * plain-text mode show this and nothing else.\n *\n * It renders from the SAME `EmailDocument` the HTML half does, which is the\n * property that matters: a line added to one is in the other, so the two cannot\n * drift. Its own module only because the HTML renderer is already a file's\n * worth of client workarounds — the seam is the output format, not the content.\n */\n\n/**\n * Render the document as the plain-text half.\n *\n * Not a courtesy. Every major spam filter scores a `text/html` part with no\n * `text/plain` twin, and a watch, a terminal client and a screen reader in\n * plain-text mode show this and nothing else. It is rendered from the SAME\n * object, so it cannot say less than the HTML does.\n */\nexport function renderEmailText(document: EmailDocument): string {\n  const blocks = [\n    document.heading,\n    \"\",\n    ...textParagraphs(document),\n    ...textFacts(document),\n    ...textAction(document),\n    ...textNotes(document),\n    \"--\",\n    document.chrome.tagline(document.brand),\n    document.chrome.automated,\n  ];\n  return `${blocks.join(\"\\n\").replace(/\\n{3,}/g, \"\\n\\n\").trimEnd()}\\n`;\n}\n\n/** One blank line after each paragraph, as prose reads. */\nfunction textParagraphs(document: EmailDocument): string[] {\n  return (document.paragraphs ?? []).flatMap((text) => [text, \"\"]);\n}\n\n/** `Label: value` per row, as a receipt is quoted back over the phone. */\nfunction textFacts(document: EmailDocument): string[] {\n  const rows = document.facts ?? [];\n  return rows.length === 0 ? [] : [...rows.map((f) => `${f.label}: ${f.value}`), \"\"];\n}\n\n/** The CTA as label + URL: a plain-text reader has no button to press. */\nfunction textAction(document: EmailDocument): string[] {\n  return document.action ? [`${document.action.label}: ${document.action.href}`, \"\"] : [];\n}\n\nfunction textNotes(document: EmailDocument): string[] {\n  const notes = document.notes ?? [];\n  return notes.length === 0 ? [] : [...notes, \"\"];\n}\n\n","/**\n * The layout's design tokens — the nine colours a mail is drawn from.\n *\n * ## Why a theme is a VALUE here and copy is required config\n *\n * The copy-portability doctrine is that a package ships no user-facing\n * sentences: a default in the origin host's language reads as finished to the\n * next host right up until somebody's customer gets mail in a language they do\n * not speak. Colour is not that. {@link NEUTRAL_EMAIL_THEME} is not anybody's\n * brand — it is grey on white, which reads as *unstyled but tidy* rather than\n * as *somebody else's product*. A host that passes nothing gets a mail that\n * looks plain, not a mail that looks like a different company.\n *\n * So this one has a default and the copy does not, and the difference is\n * exactly whether getting it wrong is invisible. A missing theme is visible in\n * the first preview; a wrong-language default is invisible until a customer\n * complains.\n *\n * ## What a host should know before overriding it\n *\n * Two rungs of most brand palettes cannot carry light text, and a mail has no\n * theme to fall back on when a client ignores a colour. {@link accent} is the\n * one that MUST clear 4.5:1 against white — it is the CTA fill and every link.\n * A warm mid-tone that looks fine on a screen at 2.6:1 is unreadable in an\n * inbox, and nothing in the pipeline will say so.\n */\nexport interface EmailTheme {\n  /** The page behind the card. Never pure white: a white card needs a ground. */\n  readonly page: string;\n  /** The card itself. */\n  readonly surface: string;\n  /** A quieter panel inside the card — the facts table. */\n  readonly panel: string;\n  /** Every hairline. */\n  readonly border: string;\n  /** Body text. */\n  readonly ink: string;\n  /** Secondary text: the footer, the fallback link, a fact's label. */\n  readonly muted: string;\n  /** The action colour — the CTA fill and every link. Must clear 4.5:1 on white. */\n  readonly accent: string;\n  /** Ink ON {@link accent}. */\n  readonly onAccent: string;\n  /** The rule under the wordmark. Decorative — nothing is written on it. */\n  readonly rule: string;\n}\n\n/**\n * A brand-free default: greys, one blue, nothing anybody would mistake for a\n * product. Every value clears its contrast requirement against its own ground.\n */\nexport const NEUTRAL_EMAIL_THEME: EmailTheme = {\n  page: '#F5F6F8',\n  surface: '#FFFFFF',\n  panel: '#F5F6F8',\n  border: '#E1E4E9',\n  ink: '#1A1D23',\n  muted: '#5C6470',\n  accent: '#1F5EDB',\n  onAccent: '#FFFFFF',\n  rule: '#1F5EDB',\n};\n\n/**\n * The font stack, as one string.\n *\n * System fonts only, and no web font: a `@font-face` is stripped by Gmail and\n * by Outlook, so a mail that depends on one renders in whatever the client\n * substitutes — never the fallback the designer chose. The stack ends in the\n * emoji faces so a status glyph in a subject line does not drop to a tofu box\n * on Windows.\n */\nexport const EMAIL_FONT_STACK =\n  \"-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji'\";\n\n/** The card's width. 600px is the width every client lays out without scroll. */\nexport const EMAIL_CONTENT_WIDTH = 600;\n","import { renderEmailText } from './text';\nimport {\n  EMAIL_CONTENT_WIDTH,\n  EMAIL_FONT_STACK,\n  NEUTRAL_EMAIL_THEME,\n  type EmailTheme,\n} from './theme';\n\n/**\n * THE transactional-mail layout: one document model, one HTML renderer, one\n * plain-text twin.\n *\n * ## The problem it exists for\n *\n * A host that sends mail from more than one place ends up rendering it in more\n * than one way — the notification pipeline emits a bold paragraph and a bare\n * anchor, the sign-in flow emits a `div` with a max-width, the receipt builds\n * its own list — and each grows its own `escapeHtml` and its own text twin. The\n * three look like three different products, because a paragraph with no\n * document around it inherits whatever the client decides: 13px Arial in Gmail,\n * Times New Roman in Outlook, no centring anywhere.\n *\n * That is a LAYOUT problem rather than a wording one, which is what makes it a\n * package's to solve. The words stay the host's; the document does not.\n *\n * ## Why the document is a MODEL and not a string\n *\n * Every caller hands over structure — a heading, some paragraphs, an optional\n * facts table, at most one call to action — and never markup. Three things fall\n * out of that, and each is a real defect in the hand-rolled renderers this\n * replaces:\n *\n * 1. **Escaping cannot be forgotten.** Every field is escaped here, once. Of\n *    the three renderers this was extracted from, two escaped the body and\n *    interpolated the LINK raw.\n * 2. **The plain-text twin cannot drift.** Both halves render from the same\n *    object, so a line added to one is in the other. A `text/html` part with no\n *    `text/plain` twin is scored by every major spam filter, and it is what a\n *    watch, a terminal client and a screen reader in plain-text mode show.\n * 3. **A preview is honest.** `./server`'s catalogue renders exactly this, from\n *    exactly these inputs, so a preview cannot be right about a mail nobody\n *    gets.\n *\n * ## The client constraints this encodes\n *\n * Stated once here, so no caller has to know them:\n *\n * - **Tables, not divs.** Outlook 2016+ on Windows lays HTML out with Word,\n *   which supports no `flex`, no `grid` and no reliable `max-width` on a block.\n *   A centred 600px table is the one construction every client agrees on.\n * - **Inline styles.** Gmail strips `<style>` from the document it renders in\n *   several contexts, and always in the Gmail app for a non-Gmail account. The\n *   `<style>` block below therefore carries only the mobile media query —\n *   progressive enhancement, never anything the layout depends on.\n * - **No web fonts, no `color-mix()`, no CSS variables.** See `./theme`.\n * - **A preheader.** The inbox list shows the first text in the body after the\n *   subject; without one it shows the footer's legal line.\n * - **`role=\"presentation\"`** on every layout table, so a screen reader reads\n *   the message rather than announcing a five-column grid.\n */\n\n/** The words the LAYOUT itself needs — never the message's own sentences. */\nexport interface EmailChromeCopy {\n  /** \"If the button does not work, paste this address into your browser:\" */\n  readonly fallbackHint: string;\n  /** \"This is an automated message — please do not reply.\" */\n  readonly automated: string;\n  /** The footer's one line about the product, given the brand name. */\n  readonly tagline: (brand: string) => string;\n}\n\n/** The one call to action a message may carry. More than one dilutes both. */\nexport interface EmailAction {\n  readonly label: string;\n  readonly href: string;\n}\n\n/** One row of the facts panel — a receipt's total, an order's reference. */\nexport interface EmailFact {\n  readonly label: string;\n  readonly value: string;\n  /** Renders bolder and larger — the one number the reader came for. */\n  readonly emphasis?: boolean;\n}\n\n/** Everything a message says, with no opinion about how it looks. */\nexport interface EmailDocument {\n  /** The subject line. Also the document `<title>`. */\n  readonly subject: string;\n  /**\n   * The inbox-list preview, ~90 chars. Falls back to the first paragraph,\n   * which is right far more often than it is wrong.\n   */\n  readonly preheader?: string;\n  /** The `<h1>`. Usually a restatement of the subject in the reader's terms. */\n  readonly heading: string;\n  /** The body, one entry per paragraph. Plain sentences — never markup. */\n  readonly paragraphs?: readonly string[];\n  /** An optional label/value panel under the body. */\n  readonly facts?: readonly EmailFact[];\n  /** At most one CTA. */\n  readonly action?: EmailAction;\n  /** Small print under the CTA — a deadline, a \"you can ignore this\". */\n  readonly notes?: readonly string[];\n  /**\n   * The layout's own words, in the recipient's language.\n   *\n   * REQUIRED, with no default in any language — the copy-portability doctrine.\n   * `@12-apps/notifications/email/locales` ships a pack per language and a host\n   * passes one BY\n   * NAME, which is a decision rather than a silence.\n   */\n  readonly chrome: EmailChromeCopy;\n  /**\n   * The product name in the header and the footer. REQUIRED: a package that\n   * defaulted this would sign another company's mail.\n   */\n  readonly brand: string;\n  /** The recipient's language, for the document's `lang` attribute. */\n  readonly locale: string;\n  /** Defaults to {@link NEUTRAL_EMAIL_THEME} — see `./theme` for why this one may. */\n  readonly theme?: EmailTheme;\n}\n\n/**\n * Escape everything that reaches the HTML body.\n *\n * A store name, a buyer's display name and a product title are all user input\n * that reaches a mail, and the ONE thing a shared layout must guarantee is that\n * none of them can close a tag. Single quotes are escaped too: attribute values\n * below are double-quoted, but a caller reading this should not have to check.\n */\nfunction escapeHtml(value: string): string {\n  return value\n    .replaceAll(\"&\", \"&amp;\")\n    .replaceAll(\"<\", \"&lt;\")\n    .replaceAll(\">\", \"&gt;\")\n    .replaceAll('\"', \"&quot;\")\n    .replaceAll(\"'\", \"&#39;\");\n}\n\n/**\n * The schemes a link in a mail may use.\n *\n * `javascript:` is inert in every mail client, so this is not the XSS guard it\n * would be on a page — it is the guard for the PREVIEW, which renders the same\n * HTML in a browser, and for the day some part of this markup is reused on a\n * screen. A rejected href drops to `#`, which fails visibly rather than\n * silently linking somewhere unexpected.\n */\nconst SAFE_LINK_SCHEMES = new Set([\"http:\", \"https:\", \"mailto:\"]);\n\n/** A URL as an attribute value, or `#` when it is not one this layout will emit. */\nexport function safeHref(href: string): string {\n  const trimmed = href.trim();\n  // A relative link is fine and common — every caller that has an origin\n  // resolves it before it gets here, and one that does not is better off with\n  // a path than with nothing.\n  if (trimmed.startsWith(\"/\")) return escapeHtml(trimmed);\n  try {\n    const url = new URL(trimmed);\n    return SAFE_LINK_SCHEMES.has(url.protocol) ? escapeHtml(url.toString()) : \"#\";\n  } catch {\n    return \"#\";\n  }\n}\n\n/** The message's own first sentence, when the caller named no preheader. */\nfunction preheaderOf(document: EmailDocument): string {\n  return document.preheader ?? document.paragraphs?.[0] ?? document.heading;\n}\n\n/** A `<td>` of body copy. One paragraph, at the layout's own rhythm. */\nfunction paragraph(text: string, theme: EmailTheme): string {\n  return `<p style=\"margin:0 0 16px;font-size:16px;line-height:1.6;color:${theme.ink}\">${escapeHtml(text)}</p>`;\n}\n\n/**\n * The facts panel — a receipt's four lines, an order's reference.\n *\n * Two cells per row rather than a definition list: `<dl>` is styled\n * inconsistently across clients and collapses to a single column in Outlook,\n * which is the one place these are read side by side.\n */\nfunction facts(rows: readonly EmailFact[], theme: EmailTheme): string {\n  if (rows.length === 0) return \"\";\n  const cells = rows\n    .map((row, index) => {\n      const divider =\n        index === 0 ? \"\" : `border-top:1px solid ${theme.border};`;\n      const value = row.emphasis\n        ? `font-size:20px;font-weight:700;color:${theme.ink}`\n        : `font-size:15px;color:${theme.ink}`;\n      return [\n        `<tr>`,\n        `<td style=\"${divider}padding:12px 0 12px 16px;font-size:13px;line-height:1.4;color:${theme.muted};text-transform:uppercase;letter-spacing:.4px;white-space:nowrap\">${escapeHtml(row.label)}</td>`,\n        `<td align=\"right\" style=\"${divider}padding:12px 16px 12px 0;line-height:1.4;${value}\">${escapeHtml(row.value)}</td>`,\n        `</tr>`,\n      ].join(\"\");\n    })\n    .join(\"\");\n  return [\n    `<table role=\"presentation\" width=\"100%\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" style=\"border-collapse:separate;background:${theme.page};border:1px solid ${theme.border};border-radius:10px;margin:0 0 24px\">`,\n    cells,\n    `</table>`,\n  ].join(\"\");\n}\n\n/**\n * The CTA.\n *\n * A single-cell table with `bgcolor` AND a background style: Outlook reads the\n * attribute and ignores the property, every other client does the reverse, and\n * a button that loses its fill is invisible ink on white. `border-radius` is\n * simply dropped by Word — a square button is the accepted degradation, and the\n * alternative (a VML rounded rectangle) is forty lines of conditional comment\n * that then has to be kept in step with the colour.\n */\nfunction action(cta: EmailAction, theme: EmailTheme): string {\n  return [\n    `<table role=\"presentation\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" style=\"margin:8px 0 24px\">`,\n    `<tr>`,\n    `<td align=\"center\" bgcolor=\"${theme.accent}\" style=\"border-radius:8px;background:${theme.accent}\">`,\n    `<a href=\"${safeHref(cta.href)}\" style=\"display:inline-block;padding:14px 32px;font-family:${EMAIL_FONT_STACK};font-size:16px;font-weight:600;line-height:1;color:${theme.onAccent};text-decoration:none;border-radius:8px\">${escapeHtml(cta.label)}</a>`,\n    `</td>`,\n    `</tr>`,\n    `</table>`,\n  ].join(\"\");\n}\n\n/**\n * The \"paste this address\" fallback, printed whenever there is a CTA.\n *\n * Not optional, and the reason is measured elsewhere in this repo: corporate\n * mail gateways rewrite link targets, and a reader whose gateway mangles the\n * button has no other way to reach a verification or reset link. `word-break`\n * because a signed URL is longer than the card.\n */\nfunction fallback(cta: EmailAction, chrome: EmailChromeCopy, theme: EmailTheme): string {\n  return [\n    `<p style=\"margin:0 0 8px;font-size:13px;line-height:1.5;color:${theme.muted}\">${escapeHtml(chrome.fallbackHint)}</p>`,\n    `<p style=\"margin:0 0 24px;font-size:13px;line-height:1.5;word-break:break-all\"><a href=\"${safeHref(cta.href)}\" style=\"color:${theme.accent};text-decoration:underline\">${escapeHtml(cta.href)}</a></p>`,\n  ].join(\"\");\n}\n\n/** The brand header: wordmark over the ramp's rule. */\nfunction header(document: EmailDocument, theme: EmailTheme): string {\n  return [\n    `<tr>`,\n    `<td style=\"padding:32px 40px 0\">`,\n    `<table role=\"presentation\" width=\"100%\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\">`,\n    `<tr><td style=\"font-size:20px;font-weight:700;letter-spacing:-.2px;color:${theme.ink}\">${escapeHtml(document.brand)}</td></tr>`,\n    `<tr><td style=\"padding-top:12px\"><div style=\"height:3px;width:44px;background:${theme.rule};border-radius:2px;font-size:0;line-height:0\">&nbsp;</div></td></tr>`,\n    `</table>`,\n    `</td>`,\n    `</tr>`,\n  ].join(\"\");\n}\n\n/** The footer: the tagline, the \"do not reply\" line, and nothing else. */\nfunction footer(document: EmailDocument, theme: EmailTheme): string {\n  const { chrome, brand } = document;\n  return [\n    `<tr>`,\n    `<td style=\"padding:0 40px 40px\">`,\n    `<table role=\"presentation\" width=\"100%\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\">`,\n    `<tr><td style=\"border-top:1px solid ${theme.border};padding-top:20px\">`,\n    `<p style=\"margin:0 0 6px;font-size:13px;line-height:1.5;color:${theme.muted}\">${escapeHtml(chrome.tagline(brand))}</p>`,\n    `<p style=\"margin:0;font-size:12px;line-height:1.5;color:${theme.muted}\">${escapeHtml(chrome.automated)}</p>`,\n    `</td></tr>`,\n    `</table>`,\n    `</td>`,\n    `</tr>`,\n  ].join(\"\");\n}\n\n/**\n * The mobile media query — the one thing in a `<style>` block.\n *\n * Everything it does is also correct without it: the card is already\n * `width:100%` up to 600px, so a client that strips this renders a slightly\n * roomier mail rather than a broken one. That is the test for whether a rule\n * belongs here at all.\n */\nfunction styleBlock(): string {\n  return [\n    `<style>`,\n    `@media only screen and (max-width:620px){`,\n    `.fp-card{width:100%!important;border-radius:0!important;border-left:0!important;border-right:0!important}`,\n    `.fp-pad{padding-left:24px!important;padding-right:24px!important}`,\n    `.fp-h1{font-size:22px!important}`,\n    `}`,\n    `</style>`,\n  ].join(\"\");\n}\n\n/**\n * Render the document as the HTML half of the message.\n *\n * A complete document rather than a fragment: a `<!DOCTYPE>` is what puts\n * Outlook into standards mode, and `x-apple-disable-message-reformatting` is\n * what stops iOS Mail re-flowing the card to the screen width and shrinking the\n * type with it.\n */\nexport function renderEmailHtml(document: EmailDocument): string {\n  const theme = document.theme ?? NEUTRAL_EMAIL_THEME;\n  const body = [\n    `<h1 class=\"fp-h1\" style=\"margin:0 0 16px;font-size:26px;line-height:1.25;font-weight:700;letter-spacing:-.3px;color:${theme.ink}\">${escapeHtml(document.heading)}</h1>`,\n    ...(document.paragraphs ?? []).map((text) => paragraph(text, theme)),\n    facts(document.facts ?? [], theme),\n    ...(document.action ? [action(document.action, theme)] : []),\n    ...(document.action ? [fallback(document.action, document.chrome, theme)] : []),\n    ...(document.notes ?? []).map(\n      (note) =>\n        `<p style=\"margin:0 0 8px;font-size:13px;line-height:1.5;color:${theme.muted}\">${escapeHtml(note)}</p>`,\n    ),\n  ].join(\"\\n      \");\n\n  return `<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n<html xmlns=\"http://www.w3.org/1999/xhtml\" lang=\"${escapeHtml(document.locale)}\">\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\" />\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n<meta name=\"x-apple-disable-message-reformatting\" />\n<meta name=\"color-scheme\" content=\"light\" />\n<meta name=\"supported-color-schemes\" content=\"light\" />\n<title>${escapeHtml(document.subject)}</title>\n${styleBlock()}\n</head>\n<body style=\"margin:0;padding:0;background:${theme.page};font-family:${EMAIL_FONT_STACK};-webkit-font-smoothing:antialiased\">\n<div style=\"display:none;max-height:0;overflow:hidden;opacity:0;mso-hide:all\">${escapeHtml(preheaderOf(document))}</div>\n<table role=\"presentation\" width=\"100%\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" style=\"background:${theme.page}\">\n<tr>\n<td align=\"center\" style=\"padding:32px 12px\">\n<table role=\"presentation\" class=\"fp-card\" width=\"${EMAIL_CONTENT_WIDTH}\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" style=\"width:${EMAIL_CONTENT_WIDTH}px;max-width:100%;background:${theme.surface};border:1px solid ${theme.border};border-radius:14px\">\n${header(document, theme)}\n<tr>\n<td class=\"fp-pad\" style=\"padding:24px 40px 8px\">\n      ${body}\n</td>\n</tr>\n${footer(document, theme)}\n</table>\n</td>\n</tr>\n</table>\n</body>\n</html>`;\n}\n\n/** Both halves plus the subject — what every driver in this repo is handed. */\nexport interface RenderedEmail {\n  readonly subject: string;\n  readonly html: string;\n  readonly text: string;\n}\n\n/** Render one document into the message shape `EmailDriver.send` takes. */\nexport function renderEmail(document: EmailDocument): RenderedEmail {\n  return {\n    subject: document.subject,\n    html: renderEmailHtml(document),\n    text: renderEmailText(document),\n  };\n}\n"],"mappings":";;;;;AAuBO,SAAS,gBAAgB,UAAiC;AAC/D,QAAM,SAAS;AAAA,IACb,SAAS;AAAA,IACT;AAAA,IACA,GAAG,eAAe,QAAQ;AAAA,IAC1B,GAAG,UAAU,QAAQ;AAAA,IACrB,GAAG,WAAW,QAAQ;AAAA,IACtB,GAAG,UAAU,QAAQ;AAAA,IACrB;AAAA,IACA,SAAS,OAAO,QAAQ,SAAS,KAAK;AAAA,IACtC,SAAS,OAAO;AAAA,EAClB;AACA,SAAO,GAAG,OAAO,KAAK,IAAI,EAAE,QAAQ,WAAW,MAAM,EAAE,QAAQ,CAAC;AAAA;AAClE;AAbgB;AAgBhB,SAAS,eAAe,UAAmC;AACzD,UAAQ,SAAS,cAAc,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;AACjE;AAFS;AAKT,SAAS,UAAU,UAAmC;AACpD,QAAM,OAAO,SAAS,SAAS,CAAC;AAChC,SAAO,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE;AACnF;AAHS;AAMT,SAAS,WAAW,UAAmC;AACrD,SAAO,SAAS,SAAS,CAAC,GAAG,SAAS,OAAO,KAAK,KAAK,SAAS,OAAO,IAAI,IAAI,EAAE,IAAI,CAAC;AACxF;AAFS;AAIT,SAAS,UAAU,UAAmC;AACpD,QAAM,QAAQ,SAAS,SAAS,CAAC;AACjC,SAAO,MAAM,WAAW,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,EAAE;AAChD;AAHS;;;ACHF,IAAM,sBAAkC;AAAA,EAC7C,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,KAAK;AAAA,EACL,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,MAAM;AACR;AAWO,IAAM,mBACX;AAGK,IAAM,sBAAsB;;;ACwDnC,SAAS,WAAW,OAAuB;AACzC,SAAO,MACJ,WAAW,KAAK,OAAO,EACvB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,QAAQ,EACxB,WAAW,KAAK,OAAO;AAC5B;AAPS;AAkBT,IAAM,oBAAoB,oBAAI,IAAI,CAAC,SAAS,UAAU,SAAS,CAAC;AAGzD,SAAS,SAAS,MAAsB;AAC7C,QAAM,UAAU,KAAK,KAAK;AAI1B,MAAI,QAAQ,WAAW,GAAG,EAAG,QAAO,WAAW,OAAO;AACtD,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,OAAO;AAC3B,WAAO,kBAAkB,IAAI,IAAI,QAAQ,IAAI,WAAW,IAAI,SAAS,CAAC,IAAI;AAAA,EAC5E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAZgB;AAehB,SAAS,YAAY,UAAiC;AACpD,SAAO,SAAS,aAAa,SAAS,aAAa,CAAC,KAAK,SAAS;AACpE;AAFS;AAKT,SAAS,UAAU,MAAc,OAA2B;AAC1D,SAAO,kEAAkE,MAAM,GAAG,KAAK,WAAW,IAAI,CAAC;AACzG;AAFS;AAWT,SAAS,MAAM,MAA4B,OAA2B;AACpE,MAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,QAAM,QAAQ,KACX,IAAI,CAAC,KAAK,UAAU;AACnB,UAAM,UACJ,UAAU,IAAI,KAAK,wBAAwB,MAAM,MAAM;AACzD,UAAM,QAAQ,IAAI,WACd,wCAAwC,MAAM,GAAG,KACjD,wBAAwB,MAAM,GAAG;AACrC,WAAO;AAAA,MACL;AAAA,MACA,cAAc,OAAO,iEAAiE,MAAM,KAAK,qEAAqE,WAAW,IAAI,KAAK,CAAC;AAAA,MAC3L,4BAA4B,OAAO,4CAA4C,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC;AAAA,MAC9G;AAAA,IACF,EAAE,KAAK,EAAE;AAAA,EACX,CAAC,EACA,KAAK,EAAE;AACV,SAAO;AAAA,IACL,iIAAiI,MAAM,IAAI,qBAAqB,MAAM,MAAM;AAAA,IAC5K;AAAA,IACA;AAAA,EACF,EAAE,KAAK,EAAE;AACX;AAtBS;AAkCT,SAAS,OAAO,KAAkB,OAA2B;AAC3D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,+BAA+B,MAAM,MAAM,yCAAyC,MAAM,MAAM;AAAA,IAChG,YAAY,SAAS,IAAI,IAAI,CAAC,+DAA+D,gBAAgB,uDAAuD,MAAM,QAAQ,4CAA4C,WAAW,IAAI,KAAK,CAAC;AAAA,IACnP;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,EAAE;AACX;AAVS;AAoBT,SAAS,SAAS,KAAkB,QAAyB,OAA2B;AACtF,SAAO;AAAA,IACL,iEAAiE,MAAM,KAAK,KAAK,WAAW,OAAO,YAAY,CAAC;AAAA,IAChH,2FAA2F,SAAS,IAAI,IAAI,CAAC,kBAAkB,MAAM,MAAM,+BAA+B,WAAW,IAAI,IAAI,CAAC;AAAA,EAChM,EAAE,KAAK,EAAE;AACX;AALS;AAQT,SAAS,OAAO,UAAyB,OAA2B;AAClE,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,4EAA4E,MAAM,GAAG,KAAK,WAAW,SAAS,KAAK,CAAC;AAAA,IACpH,iFAAiF,MAAM,IAAI;AAAA,IAC3F;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,EAAE;AACX;AAXS;AAcT,SAAS,OAAO,UAAyB,OAA2B;AAClE,QAAM,EAAE,QAAQ,MAAM,IAAI;AAC1B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,uCAAuC,MAAM,MAAM;AAAA,IACnD,iEAAiE,MAAM,KAAK,KAAK,WAAW,OAAO,QAAQ,KAAK,CAAC,CAAC;AAAA,IAClH,2DAA2D,MAAM,KAAK,KAAK,WAAW,OAAO,SAAS,CAAC;AAAA,IACvG;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,EAAE;AACX;AAdS;AAwBT,SAAS,aAAqB;AAC5B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,EAAE;AACX;AAVS;AAoBF,SAAS,gBAAgB,UAAiC;AAC/D,QAAM,QAAQ,SAAS,SAAS;AAChC,QAAM,OAAO;AAAA,IACX,uHAAuH,MAAM,GAAG,KAAK,WAAW,SAAS,OAAO,CAAC;AAAA,IACjK,IAAI,SAAS,cAAc,CAAC,GAAG,IAAI,CAAC,SAAS,UAAU,MAAM,KAAK,CAAC;AAAA,IACnE,MAAM,SAAS,SAAS,CAAC,GAAG,KAAK;AAAA,IACjC,GAAI,SAAS,SAAS,CAAC,OAAO,SAAS,QAAQ,KAAK,CAAC,IAAI,CAAC;AAAA,IAC1D,GAAI,SAAS,SAAS,CAAC,SAAS,SAAS,QAAQ,SAAS,QAAQ,KAAK,CAAC,IAAI,CAAC;AAAA,IAC7E,IAAI,SAAS,SAAS,CAAC,GAAG;AAAA,MACxB,CAAC,SACC,iEAAiE,MAAM,KAAK,KAAK,WAAW,IAAI,CAAC;AAAA,IACrG;AAAA,EACF,EAAE,KAAK,UAAU;AAEjB,SAAO;AAAA,mDAC0C,WAAW,SAAS,MAAM,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,SAOrE,WAAW,SAAS,OAAO,CAAC;AAAA,EACnC,WAAW,CAAC;AAAA;AAAA,6CAE+B,MAAM,IAAI,gBAAgB,gBAAgB;AAAA,gFACP,WAAW,YAAY,QAAQ,CAAC,CAAC;AAAA,uGACV,MAAM,IAAI;AAAA;AAAA;AAAA,oDAG7D,mBAAmB,6DAA6D,mBAAmB,gCAAgC,MAAM,OAAO,qBAAqB,MAAM,MAAM;AAAA,EACnO,OAAO,UAAU,KAAK,CAAC;AAAA;AAAA;AAAA,QAGjB,IAAI;AAAA;AAAA;AAAA,EAGV,OAAO,UAAU,KAAK,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAOzB;AA5CgB;AAsDT,SAAS,YAAY,UAAwC;AAClE,SAAO;AAAA,IACL,SAAS,SAAS;AAAA,IAClB,MAAM,gBAAgB,QAAQ;AAAA,IAC9B,MAAM,gBAAgB,QAAQ;AAAA,EAChC;AACF;AANgB;","names":[]}

package/dist/chunk-FTFLU6KH.js

@@ -0,0 +1,114 @@
+import {
+  __name
+} from "./chunk-7QVYU63E.js";
+
+// src/email/previews/catalog.ts
+var DuplicateEmailPreviewIdError = class _DuplicateEmailPreviewIdError extends Error {
+  static {
+    __name(this, "DuplicateEmailPreviewIdError");
+  }
+  constructor(id) {
+    super(`@12-apps/notifications: two e-mail preview messages share the id "${id}".`);
+    this.name = "DuplicateEmailPreviewIdError";
+    Object.setPrototypeOf(this, _DuplicateEmailPreviewIdError.prototype);
+  }
+};
+function collect(sources) {
+  const owned = sources.flatMap(
+    (source) => source.list().map((message) => ({ owner: source.owner, message }))
+  );
+  const seen = /* @__PURE__ */ new Set();
+  for (const { message } of owned) {
+    if (seen.has(message.id)) throw new DuplicateEmailPreviewIdError(message.id);
+    seen.add(message.id);
+  }
+  return owned;
+}
+__name(collect, "collect");
+function createEmailPreviews(config) {
+  const { sources, locales, defaultLocale } = config;
+  const localeOf = /* @__PURE__ */ __name((locale) => locale && locales.includes(locale) ? locale : defaultLocale, "localeOf");
+  const rowOf = /* @__PURE__ */ __name(({ owner, message }, locale) => ({
+    id: message.id,
+    key: message.key,
+    family: message.family,
+    owner,
+    subject: message.render(locale).subject
+  }), "rowOf");
+  return {
+    index(locale) {
+      const tag = localeOf(locale);
+      return {
+        locale: tag,
+        locales,
+        items: collect(sources).map((owned) => rowOf(owned, tag)),
+        coverage: this.coverage()
+      };
+    },
+    render(id, locale) {
+      const owned = collect(sources).find((entry) => entry.message.id === id);
+      if (!owned) return null;
+      const tag = localeOf(locale);
+      const message = owned.message.render(tag);
+      return { ...rowOf(owned, tag), locale: tag, html: message.html, text: message.text };
+    },
+    coverage() {
+      const missing = [];
+      const orphan = [];
+      for (const source of sources) {
+        const gap = source.coverage?.();
+        if (!gap) continue;
+        missing.push(...gap.missing);
+        orphan.push(...gap.orphan);
+      }
+      return { missing: missing.sort(), orphan: orphan.sort() };
+    },
+    supportsLocale: /* @__PURE__ */ __name((locale) => locales.includes(locale), "supportsLocale")
+  };
+}
+__name(createEmailPreviews, "createEmailPreviews");
+
+// src/email/previews/routes.ts
+var ok = /* @__PURE__ */ __name((body) => ({ status: 200, body: { data: body } }), "ok");
+var fail = /* @__PURE__ */ __name((status, error) => ({ status, body: { error } }), "fail");
+function readLocale(previews, request) {
+  const tag = request.query?.locale;
+  if (tag === void 0 || tag === "") return { ok: true };
+  return previews.supportsLocale(tag) ? { ok: true, locale: tag } : { ok: false, tag };
+}
+__name(readLocale, "readLocale");
+function emailPreviewRoutes(config) {
+  const previews = createEmailPreviews(config);
+  return [
+    {
+      method: "GET",
+      path: "/",
+      kind: "authenticated",
+      handle: /* @__PURE__ */ __name((request) => {
+        const locale = readLocale(previews, request);
+        if (!locale.ok) return Promise.resolve(fail(400, `Unknown locale "${locale.tag}".`));
+        return Promise.resolve(ok(previews.index(locale.locale)));
+      }, "handle")
+    },
+    {
+      method: "GET",
+      path: "/:id",
+      kind: "authenticated",
+      handle: /* @__PURE__ */ __name((request) => {
+        const locale = readLocale(previews, request);
+        if (!locale.ok) return Promise.resolve(fail(400, `Unknown locale "${locale.tag}".`));
+        const id = request.params?.id ?? "";
+        const detail = previews.render(id, locale.locale);
+        return Promise.resolve(detail ? ok(detail) : fail(404, `No e-mail preview named "${id}".`));
+      }, "handle")
+    }
+  ];
+}
+__name(emailPreviewRoutes, "emailPreviewRoutes");
+
+export {
+  DuplicateEmailPreviewIdError,
+  createEmailPreviews,
+  emailPreviewRoutes
+};
+//# sourceMappingURL=chunk-FTFLU6KH.js.map

package/dist/chunk-FTFLU6KH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/email/previews/catalog.ts","../src/email/previews/routes.ts"],"sourcesContent":["import type { RenderedEmail } from '../template';\n\n/**\n * The preview catalogue: every message a host can send, as a navigable set.\n *\n * ## The problem it exists for\n *\n * There is normally no way to SEE a transactional mail without triggering the\n * event that sends it — signing up with a throwaway address to look at the\n * verification mail, settling an order to look at the receipt, exhausting a\n * quota to look at that alert. So nobody looks, and a host that renders mail in\n * three different ways does not find out.\n *\n * A layout nobody can see is one release from being three layouts again, which\n * is why this ships in the same package as the layout rather than beside it.\n *\n * ## What is the package's and what is the host's\n *\n * The MECHANISM is here: group by owner, render one message for one reader,\n * report what cannot be shown. WHICH messages exist is the host's, and it\n * cannot be otherwise — a package cannot know that a host sends a\n * \"your quota is exhausted\" notice, let alone what data that notice is\n * rendered from.\n *\n * So a host declares SOURCES. Each names an owner and answers with its\n * messages, and the catalogue is the union. That inverts the obvious design,\n * where the package would hold a registry a host writes into: a source is\n * asked, per request, so a source backed by a registry that fills at import\n * time answers with whatever is registered NOW rather than with whatever had\n * been registered when the mount was built.\n *\n * ## Why coverage is a first-class output\n *\n * A catalogue that quietly omits a message looks exactly like a product that\n * does not send it. So a source may report what it knows it cannot show —\n * a message with no sample data, or sample data for a message that no longer\n * exists — and the surface returns that beside the list rather than swallowing\n * it. A gap that is visible is a gap somebody closes.\n */\n\n/** One previewable message. */\nexport interface EmailPreviewMessage {\n  /**\n   * Stable id, and the path segment the console navigates by.\n   *\n   * The host chooses the spelling; the surface only requires it to be unique\n   * across every source. Ids that survive a rename are what make a link to one\n   * mail worth sending to a colleague.\n   */\n  readonly id: string;\n  /** The wire identity — an event type, a template key. Shown beside the subject. */\n  readonly key: string;\n  /** Which mail path this belongs to, for grouping inside one owner. */\n  readonly family: string;\n  /** Render it for one reader. MUST be pure — nothing may be sent. */\n  render(locale: string): RenderedEmail;\n}\n\n/** What a source knows it cannot show. Both directions are worth reporting. */\nexport interface EmailPreviewCoverage {\n  /** Messages that exist but have no sample data, so no preview. */\n  readonly missing: readonly string[];\n  /** Sample data for a message nothing produces any more. */\n  readonly orphan: readonly string[];\n}\n\n/** One group of messages, owned by whichever code words them. */\nexport interface EmailPreviewSource {\n  /**\n   * Who owns these messages — a package name, or the host's own module.\n   *\n   * This is the console's grouping, and it is the answer to \"which parts of\n   * this system send mail\", which is a question most hosts cannot otherwise\n   * answer at all.\n   */\n  readonly owner: string;\n  /** Called PER REQUEST — see the docblock above for why that matters. */\n  list(): readonly EmailPreviewMessage[];\n  /** Optional: what this source cannot show. Absent means \"nothing missing\". */\n  coverage?(): EmailPreviewCoverage;\n}\n\n/** One catalogue row: everything the sidebar needs, and no rendered bytes. */\nexport interface EmailPreviewRow {\n  readonly id: string;\n  readonly key: string;\n  readonly family: string;\n  readonly owner: string;\n  /** The subject in the requested language, so the list reads as an inbox. */\n  readonly subject: string;\n}\n\n/** One rendered message: what the vendor would be handed, verbatim. */\nexport interface EmailPreviewDetail extends EmailPreviewRow {\n  readonly locale: string;\n  readonly html: string;\n  readonly text: string;\n}\n\nexport interface EmailPreviewIndex {\n  readonly locale: string;\n  readonly locales: readonly string[];\n  readonly items: readonly EmailPreviewRow[];\n  readonly coverage: EmailPreviewCoverage;\n}\n\nexport interface EmailPreviewsConfig {\n  /** The host's sources, in the order the console should list their owners. */\n  readonly sources: readonly EmailPreviewSource[];\n  /**\n   * The languages a preview may be asked for.\n   *\n   * REQUIRED, and not derived from the shipped packs: a host's own messages may\n   * be written in languages this package has never heard of, and a preview that\n   * silently refused one of them would look exactly like a product with no\n   * translation.\n   */\n  readonly locales: readonly string[];\n  /** The language a preview opens in when the caller names none. */\n  readonly defaultLocale: string;\n}\n\n/** An id that appears in more than one source — the one thing that must not happen. */\nexport class DuplicateEmailPreviewIdError extends Error {\n  constructor(id: string) {\n    super(`@12-apps/notifications: two e-mail preview messages share the id \"${id}\".`);\n    this.name = 'DuplicateEmailPreviewIdError';\n    Object.setPrototypeOf(this, DuplicateEmailPreviewIdError.prototype);\n  }\n}\n\n/** The catalogue, assembled from every source. */\nexport interface ApiEmailPreviews {\n  /** Every message, with each subject rendered in `locale`. */\n  index(locale?: string): EmailPreviewIndex;\n  /** One rendered message, or `null` when no source owns that id. */\n  render(id: string, locale?: string): EmailPreviewDetail | null;\n  /** The union of every source's gaps. */\n  coverage(): EmailPreviewCoverage;\n  /** Is this a language the host said it writes in? */\n  supportsLocale(locale: string): boolean;\n}\n\n/** One source's messages, tagged with their owner. */\ninterface OwnedMessage {\n  readonly owner: string;\n  readonly message: EmailPreviewMessage;\n}\n\nfunction collect(sources: readonly EmailPreviewSource[]): OwnedMessage[] {\n  const owned = sources.flatMap((source) =>\n    source.list().map((message) => ({ owner: source.owner, message })),\n  );\n  const seen = new Set<string>();\n  for (const { message } of owned) {\n    // A duplicate id makes one message unreachable and the other ambiguous —\n    // and silently, since the console would simply show whichever came first.\n    // Throwing here surfaces it on the request that would have hidden it.\n    if (seen.has(message.id)) throw new DuplicateEmailPreviewIdError(message.id);\n    seen.add(message.id);\n  }\n  return owned;\n}\n\nexport function createEmailPreviews(config: EmailPreviewsConfig): ApiEmailPreviews {\n  const { sources, locales, defaultLocale } = config;\n  const localeOf = (locale?: string): string =>\n    locale && locales.includes(locale) ? locale : defaultLocale;\n\n  const rowOf = ({ owner, message }: OwnedMessage, locale: string): EmailPreviewRow => ({\n    id: message.id,\n    key: message.key,\n    family: message.family,\n    owner,\n    subject: message.render(locale).subject,\n  });\n\n  return {\n    index(locale) {\n      const tag = localeOf(locale);\n      return {\n        locale: tag,\n        locales,\n        items: collect(sources).map((owned) => rowOf(owned, tag)),\n        coverage: this.coverage(),\n      };\n    },\n    render(id, locale) {\n      const owned = collect(sources).find((entry) => entry.message.id === id);\n      if (!owned) return null;\n      const tag = localeOf(locale);\n      const message = owned.message.render(tag);\n      return { ...rowOf(owned, tag), locale: tag, html: message.html, text: message.text };\n    },\n    coverage() {\n      const missing: string[] = [];\n      const orphan: string[] = [];\n      for (const source of sources) {\n        const gap = source.coverage?.();\n        if (!gap) continue;\n        missing.push(...gap.missing);\n        orphan.push(...gap.orphan);\n      }\n      return { missing: missing.sort(), orphan: orphan.sort() };\n    },\n    supportsLocale: (locale) => locales.includes(locale),\n  };\n}\n","import {\n  createEmailPreviews,\n  type ApiEmailPreviews,\n  type EmailPreviewsConfig,\n} from './catalog';\n\n/**\n * The two endpoints over the catalogue, as descriptors.\n *\n * `GET /` answers the list — one row per message, a subject each, no rendered\n * bytes — and `GET /:id` answers one whole document. Two calls rather than one\n * because a rendered mail is 6-10 KB and a catalogue of twenty would be twenty\n * times that on a screen where the operator reads one.\n *\n * ## Nothing here can send anything\n *\n * The surface holds no driver, no transport and no address. `render` is pure by\n * the contract `EmailPreviewMessage` states, so the one mistake a preview\n * surface must be incapable of — putting a sample in somebody's inbox — is not\n * reachable from this code at all rather than merely not done.\n *\n * ## The gate is the HOST's — but the POSTURE is declared here\n *\n * Every route carries `kind: 'authenticated'`, the wiring contract's own word\n * for \"behind the host's session resolution and its RBAC\". A package cannot\n * know WHICH gate a host uses, and this one does not try: it names no\n * permission id, because the ids belong to whichever host mounts it.\n *\n * What it must not do is stay silent. `public` is the contract's word for\n * anonymous-by-design, and the contract's DEFAULT is `authenticated` — so a\n * descriptor that declared nothing would still read as authenticated to a\n * host's gates, while saying nothing to the person adopting it. This surface\n * publishes a host's whole transactional-mail inventory and the exact wording\n * and link shape of its verification and password-reset mails, which is the\n * reference somebody writing a convincing phishing mail would want. That is\n * worth one word in the descriptor rather than a sentence in a document.\n *\n * `ADOPTING.md` states the obligation in prose as well, because a host still\n * has to supply the gate this word only asks for.\n *\n * An unknown LOCALE is a 400 rather than a silent fall back to the default.\n * This is a diagnostic surface: quietly answering the default language to\n * `?locale=es-AR` looks exactly like a product with no Spanish, which is the\n * question the operator was asking.\n */\n\n/** Twin of the wiring contract's request; no import, so this package stays liftable. */\nexport interface EmailPreviewRequest {\n  /** The path segment after the mount, when the caller asked for one message. */\n  params?: Readonly<Record<string, string | undefined>>;\n  query?: Readonly<Record<string, string | undefined>>;\n}\n\nexport interface EmailPreviewResponse {\n  status: number;\n  body: unknown;\n}\n\nexport interface EmailPreviewRoute {\n  method: 'GET';\n  path: string;\n  /**\n   * The wiring contract's `WireRouteKind`, restated. Always `authenticated`\n   * here: the host supplies the gate, and this is the descriptor asking for\n   * one — see the docblock above for why silence was not an option.\n   */\n  kind: 'authenticated';\n  handle(request: EmailPreviewRequest): Promise<EmailPreviewResponse>;\n}\n\nconst ok = (body: unknown): EmailPreviewResponse => ({ status: 200, body: { data: body } });\nconst fail = (status: number, error: string): EmailPreviewResponse => ({ status, body: { error } });\n\n/** `undefined` passes through as \"not asked\"; anything unknown is refused. */\nfunction readLocale(\n  previews: ApiEmailPreviews,\n  request: EmailPreviewRequest,\n): { ok: true; locale?: string } | { ok: false; tag: string } {\n  const tag = request.query?.locale;\n  if (tag === undefined || tag === '') return { ok: true };\n  return previews.supportsLocale(tag) ? { ok: true, locale: tag } : { ok: false, tag };\n}\n\nexport function emailPreviewRoutes(config: EmailPreviewsConfig): EmailPreviewRoute[] {\n  const previews = createEmailPreviews(config);\n\n  return [\n    {\n      method: 'GET',\n      path: '/',\n      kind: 'authenticated',\n      handle: (request) => {\n        const locale = readLocale(previews, request);\n        if (!locale.ok) return Promise.resolve(fail(400, `Unknown locale \"${locale.tag}\".`));\n        return Promise.resolve(ok(previews.index(locale.locale)));\n      },\n    },\n    {\n      method: 'GET',\n      path: '/:id',\n      kind: 'authenticated',\n      handle: (request) => {\n        const locale = readLocale(previews, request);\n        if (!locale.ok) return Promise.resolve(fail(400, `Unknown locale \"${locale.tag}\".`));\n        const id = request.params?.id ?? '';\n        const detail = previews.render(id, locale.locale);\n        return Promise.resolve(detail ? ok(detail) : fail(404, `No e-mail preview named \"${id}\".`));\n      },\n    },\n  ];\n}\n"],"mappings":";;;;;AA2HO,IAAM,+BAAN,MAAM,sCAAqC,MAAM;AAAA,EA3HxD,OA2HwD;AAAA;AAAA;AAAA,EACtD,YAAY,IAAY;AACtB,UAAM,qEAAqE,EAAE,IAAI;AACjF,SAAK,OAAO;AACZ,WAAO,eAAe,MAAM,8BAA6B,SAAS;AAAA,EACpE;AACF;AAoBA,SAAS,QAAQ,SAAwD;AACvE,QAAM,QAAQ,QAAQ;AAAA,IAAQ,CAAC,WAC7B,OAAO,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,OAAO,OAAO,QAAQ,EAAE;AAAA,EACnE;AACA,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,EAAE,QAAQ,KAAK,OAAO;AAI/B,QAAI,KAAK,IAAI,QAAQ,EAAE,EAAG,OAAM,IAAI,6BAA6B,QAAQ,EAAE;AAC3E,SAAK,IAAI,QAAQ,EAAE;AAAA,EACrB;AACA,SAAO;AACT;AAbS;AAeF,SAAS,oBAAoB,QAA+C;AACjF,QAAM,EAAE,SAAS,SAAS,cAAc,IAAI;AAC5C,QAAM,WAAW,wBAAC,WAChB,UAAU,QAAQ,SAAS,MAAM,IAAI,SAAS,eAD/B;AAGjB,QAAM,QAAQ,wBAAC,EAAE,OAAO,QAAQ,GAAiB,YAAqC;AAAA,IACpF,IAAI,QAAQ;AAAA,IACZ,KAAK,QAAQ;AAAA,IACb,QAAQ,QAAQ;AAAA,IAChB;AAAA,IACA,SAAS,QAAQ,OAAO,MAAM,EAAE;AAAA,EAClC,IANc;AAQd,SAAO;AAAA,IACL,MAAM,QAAQ;AACZ,YAAM,MAAM,SAAS,MAAM;AAC3B,aAAO;AAAA,QACL,QAAQ;AAAA,QACR;AAAA,QACA,OAAO,QAAQ,OAAO,EAAE,IAAI,CAAC,UAAU,MAAM,OAAO,GAAG,CAAC;AAAA,QACxD,UAAU,KAAK,SAAS;AAAA,MAC1B;AAAA,IACF;AAAA,IACA,OAAO,IAAI,QAAQ;AACjB,YAAM,QAAQ,QAAQ,OAAO,EAAE,KAAK,CAAC,UAAU,MAAM,QAAQ,OAAO,EAAE;AACtE,UAAI,CAAC,MAAO,QAAO;AACnB,YAAM,MAAM,SAAS,MAAM;AAC3B,YAAM,UAAU,MAAM,QAAQ,OAAO,GAAG;AACxC,aAAO,EAAE,GAAG,MAAM,OAAO,GAAG,GAAG,QAAQ,KAAK,MAAM,QAAQ,MAAM,MAAM,QAAQ,KAAK;AAAA,IACrF;AAAA,IACA,WAAW;AACT,YAAM,UAAoB,CAAC;AAC3B,YAAM,SAAmB,CAAC;AAC1B,iBAAW,UAAU,SAAS;AAC5B,cAAM,MAAM,OAAO,WAAW;AAC9B,YAAI,CAAC,IAAK;AACV,gBAAQ,KAAK,GAAG,IAAI,OAAO;AAC3B,eAAO,KAAK,GAAG,IAAI,MAAM;AAAA,MAC3B;AACA,aAAO,EAAE,SAAS,QAAQ,KAAK,GAAG,QAAQ,OAAO,KAAK,EAAE;AAAA,IAC1D;AAAA,IACA,gBAAgB,wBAAC,WAAW,QAAQ,SAAS,MAAM,GAAnC;AAAA,EAClB;AACF;AA3CgB;;;AC9FhB,IAAM,KAAK,wBAAC,UAAyC,EAAE,QAAQ,KAAK,MAAM,EAAE,MAAM,KAAK,EAAE,IAA9E;AACX,IAAM,OAAO,wBAAC,QAAgB,WAAyC,EAAE,QAAQ,MAAM,EAAE,MAAM,EAAE,IAApF;AAGb,SAAS,WACP,UACA,SAC4D;AAC5D,QAAM,MAAM,QAAQ,OAAO;AAC3B,MAAI,QAAQ,UAAa,QAAQ,GAAI,QAAO,EAAE,IAAI,KAAK;AACvD,SAAO,SAAS,eAAe,GAAG,IAAI,EAAE,IAAI,MAAM,QAAQ,IAAI,IAAI,EAAE,IAAI,OAAO,IAAI;AACrF;AAPS;AASF,SAAS,mBAAmB,QAAkD;AACnF,QAAM,WAAW,oBAAoB,MAAM;AAE3C,SAAO;AAAA,IACL;AAAA,MACE,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,QAAQ,wBAAC,YAAY;AACnB,cAAM,SAAS,WAAW,UAAU,OAAO;AAC3C,YAAI,CAAC,OAAO,GAAI,QAAO,QAAQ,QAAQ,KAAK,KAAK,mBAAmB,OAAO,GAAG,IAAI,CAAC;AACnF,eAAO,QAAQ,QAAQ,GAAG,SAAS,MAAM,OAAO,MAAM,CAAC,CAAC;AAAA,MAC1D,GAJQ;AAAA,IAKV;AAAA,IACA;AAAA,MACE,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,QAAQ,wBAAC,YAAY;AACnB,cAAM,SAAS,WAAW,UAAU,OAAO;AAC3C,YAAI,CAAC,OAAO,GAAI,QAAO,QAAQ,QAAQ,KAAK,KAAK,mBAAmB,OAAO,GAAG,IAAI,CAAC;AACnF,cAAM,KAAK,QAAQ,QAAQ,MAAM;AACjC,cAAM,SAAS,SAAS,OAAO,IAAI,OAAO,MAAM;AAChD,eAAO,QAAQ,QAAQ,SAAS,GAAG,MAAM,IAAI,KAAK,KAAK,4BAA4B,EAAE,IAAI,CAAC;AAAA,MAC5F,GANQ;AAAA,IAOV;AAAA,EACF;AACF;AA3BgB;","names":[]}

package/dist/{chunk-HHMRCMQU.js → chunk-GGAZOLNN.js}

@@ -1,6 +1,6 @@
 import {
   NOTIFICATION_CHANNELS
-} from "./chunk-XE7HZVMH.js";
+} from "./chunk-BGI4BQ66.js";
 import {
   __name
 } from "./chunk-7QVYU63E.js";
@@ -131,4 +131,4 @@ export {
   normalizePhoneE164,
   inboxWire
 };
-//# sourceMappingURL=chunk-HHMRCMQU.js.map
+//# sourceMappingURL=chunk-GGAZOLNN.js.map

package/dist/{chunk-CUZW62JS.js → chunk-KU4FVOFA.js}

@@ -1,7 +1,7 @@
 import {
   UnknownNotificationRecipientError,
   UnknownNotificationTypeError
-} from "./chunk-HHMRCMQU.js";
+} from "./chunk-GGAZOLNN.js";
 import {
   __name
 } from "./chunk-7QVYU63E.js";
@@ -91,4 +91,4 @@ export {
   NOTIFICATIONS_DRAIN_LEASE_MS,
   NOTIFICATIONS_JOBS
 };
-//# sourceMappingURL=chunk-CUZW62JS.js.map
+//# sourceMappingURL=chunk-KU4FVOFA.js.map

package/dist/{chunk-WHBMPHQE.js → chunk-KZG7QGFA.js}

@@ -7,14 +7,17 @@ import {
   mergeChoices,
   mergeStoredRow,
   normalizePhoneE164
-} from "./chunk-HHMRCMQU.js";
+} from "./chunk-GGAZOLNN.js";
+import {
+  messagesOf
+} from "./chunk-M2TVBVH2.js";
 import {
   NOTIFICATION_CHANNELS,
   taxonomyOf
-} from "./chunk-XE7HZVMH.js";
+} from "./chunk-BGI4BQ66.js";
 import {
-  messagesOf
-} from "./chunk-M2TVBVH2.js";
+  renderEmail
+} from "./chunk-EKUSNUBT.js";
 import {
   __name
 } from "./chunk-7QVYU63E.js";
@@ -278,6 +281,7 @@ var EMAIL_DRIVERS = {
 function formatEmail(content, declaration) {
   const href = absoluteLink(content.link, declaration.appUrl);
   const label = declaration.linkLabel;
+  if (declaration.layout) return layoutEmail(content, declaration.layout, href, label);
   return {
     subject: content.title,
     text: href ? `${content.body}
@@ -291,6 +295,20 @@ ${href}` : content.body,
   };
 }
 __name(formatEmail, "formatEmail");
+function layoutEmail(content, layout, href, label) {
+  const rendered = renderEmail({
+    subject: content.title,
+    heading: content.title,
+    paragraphs: [content.body],
+    action: href ? { label, href } : void 0,
+    chrome: layout.chrome,
+    brand: layout.brand,
+    locale: layout.locale,
+    theme: layout.theme
+  });
+  return { subject: rendered.subject, text: rendered.text, html: rendered.html };
+}
+__name(layoutEmail, "layoutEmail");
 function emailTransport(declaration, extraDrivers = {}) {
   const driver = resolveDriver("EMAIL", declaration, { ...EMAIL_DRIVERS, ...extraDrivers });
   return {
@@ -665,6 +683,10 @@ async function loadRecipient(deps, userId) {
     userId,
     email: contact.email,
     phone: contact.phone,
+    // Carried through UNRESOLVED and only where the host supplied one: the
+    // absent case has to stay distinguishable from a stated language, because
+    // that is what lets a generator apply its own default in one place.
+    ...contact.locale === void 0 ? {} : { locale: contact.locale },
     pushSubscriptionCount: await deps.pushSubscriptions.count(userId)
   };
 }
@@ -1206,9 +1228,9 @@ function createNotificationRouter(deps) {
     drainPending: /* @__PURE__ */ __name((olderThanMs = DEFAULT_SWEEP_CUTOFF_MS, take = DEFAULT_SWEEP_TAKE) => drainPending(deps, olderThanMs, take), "drainPending"),
     async notify(event, options = {}) {
       const generator = deps.generators.resolve(event.type);
-      const content = generator.generate(event.payload);
       const recipient = await loadRecipient(deps, event.recipient.userId);
       if (!recipient) throw new UnknownNotificationRecipientError(event.recipient.userId);
+      const content = generator.generate(event.payload, { locale: recipient.locale });
       const channels = await resolveChannels(deps, event, generator.category, recipient);
       const notification = await commit(deps, event, generator.category, content, channels);
       announce(deps, {
@@ -1327,4 +1349,4 @@ export {
   createTransportRegistry,
   createApiNotifications
 };
-//# sourceMappingURL=chunk-WHBMPHQE.js.map
+//# sourceMappingURL=chunk-KZG7QGFA.js.map