@12-apps/notifications 4.7.1 → 4.9.0

package/dist/{create-web-notifications-BHCzaU2y.d.ts → create-web-notifications-B-xQ6R0B.d.ts}

@@ -1,6 +1,6 @@
 import { JSX, ComponentType } from 'react';
-import { L as ListNotificationsResult, a as ChannelRow, I as InboxNotification, N as NotificationMessages } from './wire-6dzyfDE7.js';
-import { b as NotificationChannel } from './types-CXLAG3UU.js';
+import { L as ListNotificationsResult, a as ChannelRow, I as InboxNotification, N as NotificationMessages } from './wire-_coV3tJk.js';
+import { c as NotificationChannel } from './types-BFmAY0P5.js';
 
 /**
  * How the notification screens reach their data (12-15) — the report-builder

package/dist/email/index.d.ts

@@ -0,0 +1,26 @@
+import { E as EmailDocument } from '../template-Dlt5S54z.js';
+export { a as EMAIL_CONTENT_WIDTH, b as EMAIL_FONT_STACK, c as EmailAction, d as EmailChromeCopy, e as EmailFact, f as EmailTheme, N as NEUTRAL_EMAIL_THEME, R as RenderedEmail, r as renderEmail, g as renderEmailHtml, s as safeHref } from '../template-Dlt5S54z.js';
+
+/**
+ * The plain-text half.
+ *
+ * Not a courtesy. Every major spam filter scores a `text/html` part with no
+ * `text/plain` twin, and a watch, a terminal client and a screen reader in
+ * plain-text mode show this and nothing else.
+ *
+ * It renders from the SAME `EmailDocument` the HTML half does, which is the
+ * property that matters: a line added to one is in the other, so the two cannot
+ * drift. Its own module only because the HTML renderer is already a file's
+ * worth of client workarounds — the seam is the output format, not the content.
+ */
+/**
+ * Render the document as the plain-text half.
+ *
+ * Not a courtesy. Every major spam filter scores a `text/html` part with no
+ * `text/plain` twin, and a watch, a terminal client and a screen reader in
+ * plain-text mode show this and nothing else. It is rendered from the SAME
+ * object, so it cannot say less than the HTML does.
+ */
+declare function renderEmailText(document: EmailDocument): string;
+
+export { EmailDocument, renderEmailText };

package/dist/email/index.js

@@ -0,0 +1,20 @@
+import {
+  EMAIL_CONTENT_WIDTH,
+  EMAIL_FONT_STACK,
+  NEUTRAL_EMAIL_THEME,
+  renderEmail,
+  renderEmailHtml,
+  renderEmailText,
+  safeHref
+} from "../chunk-EKUSNUBT.js";
+import "../chunk-7QVYU63E.js";
+export {
+  EMAIL_CONTENT_WIDTH,
+  EMAIL_FONT_STACK,
+  NEUTRAL_EMAIL_THEME,
+  renderEmail,
+  renderEmailHtml,
+  renderEmailText,
+  safeHref
+};
+//# sourceMappingURL=index.js.map

package/dist/email/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/email/locales.d.ts

@@ -0,0 +1,43 @@
+import { d as EmailChromeCopy } from '../template-Dlt5S54z.js';
+
+/** US English — the twin that makes {@link PT_BR_EMAIL_CHROME} a choice. */
+declare const EN_US_EMAIL_CHROME: EmailChromeCopy;
+
+/**
+ * Brazilian Portuguese, as a NAMED pack.
+ *
+ * A host passes this by name — `chrome: PT_BR_EMAIL_CHROME`, or
+ * `localeCopy(EMAIL_CHROME)` for a host whose readers do not share one
+ * language. It is never a default: a pack a host CHOOSES is a decision in a
+ * diff, and a pack a package applies silently is another product's voice in
+ * somebody's inbox.
+ *
+ * The tagline names the brand and stops. It is deliberately not a description
+ * of what the product does — that sentence is the host's, it belongs to a
+ * vocabulary this package cannot know, and a package that guessed one would be
+ * putting words in every adopter's footer.
+ */
+declare const PT_BR_EMAIL_CHROME: EmailChromeCopy;
+
+/**
+ * The layout's own words, in every language this package ships.
+ *
+ * Its own subpath (`@12-apps/notifications/email/locales`) for the reason every
+ * copy-shipping package here uses one: keeping the packs off the layout entry
+ * is what lets that entry stay the framework-free mechanism a browser can
+ * import, and it is what makes "which language" a decision a host takes by
+ * name rather than one this package takes by default.
+ *
+ * Shaped as `Record<tag, pack>` rather than importing `@12-apps/i18n`'s
+ * `LocalePack`: a package must stay liftable into a repo that has never heard
+ * of that one, so the type is a local structural mirror. The two agree by tag,
+ * and `scripts/locale-coverage-gate.mjs` is what checks that they do.
+ *
+ * A host with ONE audience passes a pack by name. A host whose readers do not
+ * share a language passes `localeCopy(EMAIL_CHROME)` and each message is
+ * written in its own recipient's language — which is the whole reason
+ * `EmailDocument.chrome` is resolved per message rather than at a mount.
+ */
+declare const EMAIL_CHROME: Readonly<Record<string, EmailChromeCopy>>;
+
+export { EMAIL_CHROME, EN_US_EMAIL_CHROME, PT_BR_EMAIL_CHROME };

package/dist/email/locales.js

@@ -0,0 +1,29 @@
+import {
+  __name
+} from "../chunk-7QVYU63E.js";
+
+// src/email/chrome.en-US.ts
+var EN_US_EMAIL_CHROME = {
+  fallbackHint: "If the button above does not work, copy and paste this address into your browser:",
+  automated: "This is an automated message. Please do not reply to this email.",
+  tagline: /* @__PURE__ */ __name((brand) => `Sent by ${brand}.`, "tagline")
+};
+
+// src/email/chrome.pt-BR.ts
+var PT_BR_EMAIL_CHROME = {
+  fallbackHint: "Se o bot\xE3o acima n\xE3o funcionar, copie e cole este endere\xE7o no seu navegador:",
+  automated: "Esta \xE9 uma mensagem autom\xE1tica. N\xE3o responda a este e-mail.",
+  tagline: /* @__PURE__ */ __name((brand) => `Enviado por ${brand}.`, "tagline")
+};
+
+// src/email/locales.ts
+var EMAIL_CHROME = {
+  "pt-BR": PT_BR_EMAIL_CHROME,
+  "en-US": EN_US_EMAIL_CHROME
+};
+export {
+  EMAIL_CHROME,
+  EN_US_EMAIL_CHROME,
+  PT_BR_EMAIL_CHROME
+};
+//# sourceMappingURL=locales.js.map

package/dist/email/locales.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/email/chrome.en-US.ts","../../src/email/chrome.pt-BR.ts","../../src/email/locales.ts"],"sourcesContent":["import type { EmailChromeCopy } from './template';\n\n/** US English — the twin that makes {@link PT_BR_EMAIL_CHROME} a choice. */\nexport const EN_US_EMAIL_CHROME: EmailChromeCopy = {\n  fallbackHint: 'If the button above does not work, copy and paste this address into your browser:',\n  automated: 'This is an automated message. Please do not reply to this email.',\n  tagline: (brand) => `Sent by ${brand}.`,\n};\n","import type { EmailChromeCopy } from './template';\n\n/**\n * Brazilian Portuguese, as a NAMED pack.\n *\n * A host passes this by name — `chrome: PT_BR_EMAIL_CHROME`, or\n * `localeCopy(EMAIL_CHROME)` for a host whose readers do not share one\n * language. It is never a default: a pack a host CHOOSES is a decision in a\n * diff, and a pack a package applies silently is another product's voice in\n * somebody's inbox.\n *\n * The tagline names the brand and stops. It is deliberately not a description\n * of what the product does — that sentence is the host's, it belongs to a\n * vocabulary this package cannot know, and a package that guessed one would be\n * putting words in every adopter's footer.\n */\nexport const PT_BR_EMAIL_CHROME: EmailChromeCopy = {\n  fallbackHint: 'Se o botão acima não funcionar, copie e cole este endereço no seu navegador:',\n  automated: 'Esta é uma mensagem automática. Não responda a este e-mail.',\n  tagline: (brand) => `Enviado por ${brand}.`,\n};\n","import { EN_US_EMAIL_CHROME } from './chrome.en-US';\nimport { PT_BR_EMAIL_CHROME } from './chrome.pt-BR';\nimport type { EmailChromeCopy } from './template';\n\n/**\n * The layout's own words, in every language this package ships.\n *\n * Its own subpath (`@12-apps/notifications/email/locales`) for the reason every\n * copy-shipping package here uses one: keeping the packs off the layout entry\n * is what lets that entry stay the framework-free mechanism a browser can\n * import, and it is what makes \"which language\" a decision a host takes by\n * name rather than one this package takes by default.\n *\n * Shaped as `Record<tag, pack>` rather than importing `@12-apps/i18n`'s\n * `LocalePack`: a package must stay liftable into a repo that has never heard\n * of that one, so the type is a local structural mirror. The two agree by tag,\n * and `scripts/locale-coverage-gate.mjs` is what checks that they do.\n *\n * A host with ONE audience passes a pack by name. A host whose readers do not\n * share a language passes `localeCopy(EMAIL_CHROME)` and each message is\n * written in its own recipient's language — which is the whole reason\n * `EmailDocument.chrome` is resolved per message rather than at a mount.\n */\nexport const EMAIL_CHROME: Readonly<Record<string, EmailChromeCopy>> = {\n  'pt-BR': PT_BR_EMAIL_CHROME,\n  'en-US': EN_US_EMAIL_CHROME,\n};\n\nexport { EN_US_EMAIL_CHROME, PT_BR_EMAIL_CHROME };\n"],"mappings":";;;;;AAGO,IAAM,qBAAsC;AAAA,EACjD,cAAc;AAAA,EACd,WAAW;AAAA,EACX,SAAS,wBAAC,UAAU,WAAW,KAAK,KAA3B;AACX;;;ACSO,IAAM,qBAAsC;AAAA,EACjD,cAAc;AAAA,EACd,WAAW;AAAA,EACX,SAAS,wBAAC,UAAU,eAAe,KAAK,KAA/B;AACX;;;ACGO,IAAM,eAA0D;AAAA,EACrE,SAAS;AAAA,EACT,SAAS;AACX;","names":[]}

package/dist/email/previews/hono.d.ts

@@ -0,0 +1,46 @@
+import { Context, Hono } from 'hono';
+import { E as EmailPreviewsConfig } from '../../catalog-BOVZ2b-b.js';
+import '../../template-Dlt5S54z.js';
+
+/**
+ * `@12-apps/notifications/email/previews/hono` — the catalogue as a router.
+ *
+ * The framework-neutral descriptors in `./server` are the contract; this is the
+ * adapter for the framework we happen to use, behind its own subpath with
+ * `hono` as an OPTIONAL peer — a host on Express, or one that only wants the
+ * layout, never resolves it.
+ *
+ * A host writes:
+ *
+ *   const previews = emailPreviewsRouter({ sources, locales, defaultLocale });
+ *   app.use('/api/platform/email-previews/*', requirePlatformOperator);
+ *   app.route('/api/platform/email-previews', previews.router);
+ *
+ * ## The `use` line above is not decoration
+ *
+ * This surface publishes a host's whole transactional-mail inventory and the
+ * exact wording of its verification and reset mails. The routes declare no
+ * session of their own because a package cannot know who a host lets look — so
+ * the gate is the host's, it is REQUIRED, and it is written here rather than
+ * left to be inferred, because the failure is silent: an ungated mount answers
+ * every stranger and nothing about it looks wrong.
+ */
+interface EmailPreviewsHonoConfig extends EmailPreviewsConfig {
+    /**
+     * Optional last-resort refusal, for a host that would rather state the gate
+     * once here than mount middleware around the router.
+     *
+     * Returning `false` answers 403 before any handler runs. Absent means the
+     * host has gated the mount itself — which is the ordinary case, and why this
+     * is not required: a package that demanded its own guard would be a second
+     * authorization system beside the one the host already runs.
+     */
+    readonly allow?: (c: Context) => Promise<boolean> | boolean;
+}
+/** The mounted router, plus the descriptors it was built from. */
+interface EmailPreviewsRouter {
+    router: Hono;
+}
+declare function emailPreviewsRouter(config: EmailPreviewsHonoConfig): EmailPreviewsRouter;
+
+export { type EmailPreviewsHonoConfig, type EmailPreviewsRouter, emailPreviewsRouter };

package/dist/email/previews/hono.js

@@ -0,0 +1,33 @@
+import {
+  emailPreviewRoutes
+} from "../../chunk-FTFLU6KH.js";
+import {
+  __name
+} from "../../chunk-7QVYU63E.js";
+
+// src/email/previews/hono.ts
+import { Hono } from "hono";
+function emailPreviewsRouter(config) {
+  const router = new Hono();
+  for (const route of emailPreviewRoutes(config)) {
+    router.get(route.path, async (c) => {
+      if (config.allow && !await config.allow(c)) {
+        return c.json({ error: "Forbidden." }, 403);
+      }
+      const response = await route.handle({
+        params: c.req.param(),
+        // `Object.fromEntries` over the parsed query rather than the raw string:
+        // a repeated `?locale=` is a caller error, and taking the last value is
+        // the same answer every framework here gives.
+        query: c.req.query()
+      });
+      return c.json(response.body, response.status);
+    });
+  }
+  return { router };
+}
+__name(emailPreviewsRouter, "emailPreviewsRouter");
+export {
+  emailPreviewsRouter
+};
+//# sourceMappingURL=hono.js.map

package/dist/email/previews/hono.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/email/previews/hono.ts"],"sourcesContent":["import { Hono } from 'hono';\nimport type { Context } from 'hono';\n\nimport { emailPreviewRoutes } from './routes';\nimport type { EmailPreviewsConfig } from './catalog';\n\n/**\n * `@12-apps/notifications/email/previews/hono` — the catalogue as a router.\n *\n * The framework-neutral descriptors in `./server` are the contract; this is the\n * adapter for the framework we happen to use, behind its own subpath with\n * `hono` as an OPTIONAL peer — a host on Express, or one that only wants the\n * layout, never resolves it.\n *\n * A host writes:\n *\n *   const previews = emailPreviewsRouter({ sources, locales, defaultLocale });\n *   app.use('/api/platform/email-previews/*', requirePlatformOperator);\n *   app.route('/api/platform/email-previews', previews.router);\n *\n * ## The `use` line above is not decoration\n *\n * This surface publishes a host's whole transactional-mail inventory and the\n * exact wording of its verification and reset mails. The routes declare no\n * session of their own because a package cannot know who a host lets look — so\n * the gate is the host's, it is REQUIRED, and it is written here rather than\n * left to be inferred, because the failure is silent: an ungated mount answers\n * every stranger and nothing about it looks wrong.\n */\n\nexport interface EmailPreviewsHonoConfig extends EmailPreviewsConfig {\n  /**\n   * Optional last-resort refusal, for a host that would rather state the gate\n   * once here than mount middleware around the router.\n   *\n   * Returning `false` answers 403 before any handler runs. Absent means the\n   * host has gated the mount itself — which is the ordinary case, and why this\n   * is not required: a package that demanded its own guard would be a second\n   * authorization system beside the one the host already runs.\n   */\n  readonly allow?: (c: Context) => Promise<boolean> | boolean;\n}\n\n/** The mounted router, plus the descriptors it was built from. */\nexport interface EmailPreviewsRouter {\n  router: Hono;\n}\n\nexport function emailPreviewsRouter(config: EmailPreviewsHonoConfig): EmailPreviewsRouter {\n  const router = new Hono();\n\n  for (const route of emailPreviewRoutes(config)) {\n    router.get(route.path, async (c) => {\n      if (config.allow && !(await config.allow(c))) {\n        return c.json({ error: 'Forbidden.' }, 403);\n      }\n      const response = await route.handle({\n        params: c.req.param() as Record<string, string | undefined>,\n        // `Object.fromEntries` over the parsed query rather than the raw string:\n        // a repeated `?locale=` is a caller error, and taking the last value is\n        // the same answer every framework here gives.\n        query: c.req.query() as Record<string, string | undefined>,\n      });\n      return c.json(response.body as Record<string, unknown>, response.status as 200 | 400 | 404);\n    });\n  }\n\n  return { router };\n}\n"],"mappings":";;;;;;;;AAAA,SAAS,YAAY;AAgDd,SAAS,oBAAoB,QAAsD;AACxF,QAAM,SAAS,IAAI,KAAK;AAExB,aAAW,SAAS,mBAAmB,MAAM,GAAG;AAC9C,WAAO,IAAI,MAAM,MAAM,OAAO,MAAM;AAClC,UAAI,OAAO,SAAS,CAAE,MAAM,OAAO,MAAM,CAAC,GAAI;AAC5C,eAAO,EAAE,KAAK,EAAE,OAAO,aAAa,GAAG,GAAG;AAAA,MAC5C;AACA,YAAM,WAAW,MAAM,MAAM,OAAO;AAAA,QAClC,QAAQ,EAAE,IAAI,MAAM;AAAA;AAAA;AAAA;AAAA,QAIpB,OAAO,EAAE,IAAI,MAAM;AAAA,MACrB,CAAC;AACD,aAAO,EAAE,KAAK,SAAS,MAAiC,SAAS,MAAyB;AAAA,IAC5F,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,OAAO;AAClB;AApBgB;","names":[]}

package/dist/email/previews/index.d.ts

@@ -0,0 +1,67 @@
+import { E as EmailPreviewsConfig } from '../../catalog-BOVZ2b-b.js';
+export { A as ApiEmailPreviews, D as DuplicateEmailPreviewIdError, a as EmailPreviewCoverage, b as EmailPreviewDetail, c as EmailPreviewIndex, d as EmailPreviewMessage, e as EmailPreviewRow, f as EmailPreviewSource, g as createEmailPreviews } from '../../catalog-BOVZ2b-b.js';
+import '../../template-Dlt5S54z.js';
+
+/**
+ * The two endpoints over the catalogue, as descriptors.
+ *
+ * `GET /` answers the list — one row per message, a subject each, no rendered
+ * bytes — and `GET /:id` answers one whole document. Two calls rather than one
+ * because a rendered mail is 6-10 KB and a catalogue of twenty would be twenty
+ * times that on a screen where the operator reads one.
+ *
+ * ## Nothing here can send anything
+ *
+ * The surface holds no driver, no transport and no address. `render` is pure by
+ * the contract `EmailPreviewMessage` states, so the one mistake a preview
+ * surface must be incapable of — putting a sample in somebody's inbox — is not
+ * reachable from this code at all rather than merely not done.
+ *
+ * ## The gate is the HOST's — but the POSTURE is declared here
+ *
+ * Every route carries `kind: 'authenticated'`, the wiring contract's own word
+ * for "behind the host's session resolution and its RBAC". A package cannot
+ * know WHICH gate a host uses, and this one does not try: it names no
+ * permission id, because the ids belong to whichever host mounts it.
+ *
+ * What it must not do is stay silent. `public` is the contract's word for
+ * anonymous-by-design, and the contract's DEFAULT is `authenticated` — so a
+ * descriptor that declared nothing would still read as authenticated to a
+ * host's gates, while saying nothing to the person adopting it. This surface
+ * publishes a host's whole transactional-mail inventory and the exact wording
+ * and link shape of its verification and password-reset mails, which is the
+ * reference somebody writing a convincing phishing mail would want. That is
+ * worth one word in the descriptor rather than a sentence in a document.
+ *
+ * `ADOPTING.md` states the obligation in prose as well, because a host still
+ * has to supply the gate this word only asks for.
+ *
+ * An unknown LOCALE is a 400 rather than a silent fall back to the default.
+ * This is a diagnostic surface: quietly answering the default language to
+ * `?locale=es-AR` looks exactly like a product with no Spanish, which is the
+ * question the operator was asking.
+ */
+/** Twin of the wiring contract's request; no import, so this package stays liftable. */
+interface EmailPreviewRequest {
+    /** The path segment after the mount, when the caller asked for one message. */
+    params?: Readonly<Record<string, string | undefined>>;
+    query?: Readonly<Record<string, string | undefined>>;
+}
+interface EmailPreviewResponse {
+    status: number;
+    body: unknown;
+}
+interface EmailPreviewRoute {
+    method: 'GET';
+    path: string;
+    /**
+     * The wiring contract's `WireRouteKind`, restated. Always `authenticated`
+     * here: the host supplies the gate, and this is the descriptor asking for
+     * one — see the docblock above for why silence was not an option.
+     */
+    kind: 'authenticated';
+    handle(request: EmailPreviewRequest): Promise<EmailPreviewResponse>;
+}
+declare function emailPreviewRoutes(config: EmailPreviewsConfig): EmailPreviewRoute[];
+
+export { type EmailPreviewRequest, type EmailPreviewResponse, type EmailPreviewRoute, EmailPreviewsConfig, emailPreviewRoutes };

package/dist/email/previews/index.js

@@ -0,0 +1,12 @@
+import {
+  DuplicateEmailPreviewIdError,
+  createEmailPreviews,
+  emailPreviewRoutes
+} from "../../chunk-FTFLU6KH.js";
+import "../../chunk-7QVYU63E.js";
+export {
+  DuplicateEmailPreviewIdError,
+  createEmailPreviews,
+  emailPreviewRoutes
+};
+//# sourceMappingURL=index.js.map

package/dist/email/previews/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/email/previews/react/index.d.ts

@@ -0,0 +1,43 @@
+import { E as EmailPreviewScreenCopy } from '../../../preview-screen-DYJRAnAY.js';
+export { a as EmailPreviewScreenConfig, c as createEmailPreviewScreen } from '../../../preview-screen-DYJRAnAY.js';
+import 'react';
+
+/** US English — the twin that makes {@link PT_BR_EMAIL_PREVIEW_COPY} a choice. */
+declare const EN_US_EMAIL_PREVIEW_COPY: EmailPreviewScreenCopy;
+
+/** Brazilian Portuguese, as a NAMED pack — never a default. */
+declare const PT_BR_EMAIL_PREVIEW_COPY: EmailPreviewScreenCopy;
+
+/**
+ * One rendered message, in the three ways it is worth looking at.
+ *
+ * - **HTML** — what most people will see, in a sandboxed frame at either of the
+ *   two widths that matter. A phone is not a nice-to-have: more than half of
+ *   transactional mail is opened on one, and the 600px card is exactly the
+ *   thing that either survives that or does not.
+ * - **Text** — the plain-text twin. Worth its own tab because it is what a spam
+ *   filter scores, what a watch shows, and what a screen reader in plain-text
+ *   mode reads — and because it is the half nobody ever looks at, which is how
+ *   it drifts out of step with the HTML.
+ * - **Source** — the markup itself, for the moment somebody is debugging why a
+ *   client rendered it oddly.
+ *
+ * ## Why an iframe, and why sandboxed
+ *
+ * The mail is a whole document with its own `<body>` background, and rendering
+ * that inside the console's DOM would both break the mail (the console's CSS
+ * reaches it) and break the console (the mail's body styles reach the page). A
+ * frame is the only honest preview.
+ *
+ * `sandbox=""` — no scripts, no forms, no top-level navigation. These documents
+ * come from the host's own renderer and carry no script, so this is less a
+ * containment measure than a statement that the preview is INERT: a click on a
+ * CTA inside a previewed mail must never navigate the operator anywhere, least
+ * of all to a sample verification link.
+ */
+/** The two widths the HTML view renders at. */
+type PreviewWidth = 'desktop' | 'mobile';
+/** Which of the three views is showing. */
+type PreviewTab = 'html' | 'text' | 'source';
+
+export { EN_US_EMAIL_PREVIEW_COPY, EmailPreviewScreenCopy, PT_BR_EMAIL_PREVIEW_COPY, type PreviewTab, type PreviewWidth };

package/dist/email/previews/react/index.js

@@ -0,0 +1,58 @@
+import {
+  createEmailPreviewScreen
+} from "../../../chunk-ZFIYBNZ7.js";
+import {
+  __name
+} from "../../../chunk-7QVYU63E.js";
+
+// src/email/previews/react/copy.en-US.ts
+var EN_US_EMAIL_PREVIEW_COPY = {
+  title: "Email previews",
+  description: "Every email this system sends, grouped by the package that owns it. Nothing is sent from here.",
+  searchLabel: "Filter",
+  searchPlaceholder: "subject, event or package",
+  noMatches: "No message matches the filter.",
+  pickOne: "Pick a message from the list to see its preview.",
+  tabHtml: "HTML",
+  tabText: "Text",
+  tabSource: "Source",
+  widthDesktop: "Desktop",
+  widthMobile: "Mobile",
+  subjectLabel: "Subject",
+  frameTitle: "Email preview",
+  coverageTitle: "Incomplete coverage",
+  missingSamples: /* @__PURE__ */ __name((keys) => `No sample data, so no preview: ${keys}.`, "missingSamples"),
+  orphanSamples: /* @__PURE__ */ __name((keys) => `A sample exists but nothing produces this message any more: ${keys}.`, "orphanSamples"),
+  loading: "Loading...",
+  loadError: "The previews could not be loaded.",
+  retry: "Try again"
+};
+
+// src/email/previews/react/copy.pt-BR.ts
+var PT_BR_EMAIL_PREVIEW_COPY = {
+  title: "Pr\xE9via de e-mails",
+  description: "Todos os e-mails que este sistema envia, agrupados por pacote. Nada \xE9 enviado a partir daqui.",
+  searchLabel: "Filtrar",
+  searchPlaceholder: "assunto, evento ou pacote",
+  noMatches: "Nenhuma mensagem corresponde ao filtro.",
+  pickOne: "Escolha uma mensagem na lista para ver a pr\xE9via.",
+  tabHtml: "HTML",
+  tabText: "Texto",
+  tabSource: "C\xF3digo",
+  widthDesktop: "Computador",
+  widthMobile: "Celular",
+  subjectLabel: "Assunto",
+  frameTitle: "Pr\xE9via do e-mail",
+  coverageTitle: "Cobertura incompleta",
+  missingSamples: /* @__PURE__ */ __name((keys) => `Sem dados de exemplo, ent\xE3o n\xE3o h\xE1 pr\xE9via: ${keys}.`, "missingSamples"),
+  orphanSamples: /* @__PURE__ */ __name((keys) => `H\xE1 exemplo, mas nada mais produz esta mensagem: ${keys}.`, "orphanSamples"),
+  loading: "Carregando...",
+  loadError: "N\xE3o foi poss\xEDvel carregar as pr\xE9vias.",
+  retry: "Tentar novamente"
+};
+export {
+  EN_US_EMAIL_PREVIEW_COPY,
+  PT_BR_EMAIL_PREVIEW_COPY,
+  createEmailPreviewScreen
+};
+//# sourceMappingURL=index.js.map

package/dist/email/previews/react/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/email/previews/react/copy.en-US.ts","../../../../src/email/previews/react/copy.pt-BR.ts"],"sourcesContent":["import type { EmailPreviewScreenCopy } from './copy';\n\n/** US English — the twin that makes {@link PT_BR_EMAIL_PREVIEW_COPY} a choice. */\nexport const EN_US_EMAIL_PREVIEW_COPY: EmailPreviewScreenCopy = {\n  title: 'Email previews',\n  description: 'Every email this system sends, grouped by the package that owns it. Nothing is sent from here.',\n  searchLabel: 'Filter',\n  searchPlaceholder: 'subject, event or package',\n  noMatches: 'No message matches the filter.',\n  pickOne: 'Pick a message from the list to see its preview.',\n  tabHtml: 'HTML',\n  tabText: 'Text',\n  tabSource: 'Source',\n  widthDesktop: 'Desktop',\n  widthMobile: 'Mobile',\n  subjectLabel: 'Subject',\n  frameTitle: 'Email preview',\n  coverageTitle: 'Incomplete coverage',\n  missingSamples: (keys) => `No sample data, so no preview: ${keys}.`,\n  orphanSamples: (keys) => `A sample exists but nothing produces this message any more: ${keys}.`,\n  loading: 'Loading...',\n  loadError: 'The previews could not be loaded.',\n  retry: 'Try again',\n};\n","import type { EmailPreviewScreenCopy } from './copy';\n\n/** Brazilian Portuguese, as a NAMED pack — never a default. */\nexport const PT_BR_EMAIL_PREVIEW_COPY: EmailPreviewScreenCopy = {\n  title: 'Prévia de e-mails',\n  description: 'Todos os e-mails que este sistema envia, agrupados por pacote. Nada é enviado a partir daqui.',\n  searchLabel: 'Filtrar',\n  searchPlaceholder: 'assunto, evento ou pacote',\n  noMatches: 'Nenhuma mensagem corresponde ao filtro.',\n  pickOne: 'Escolha uma mensagem na lista para ver a prévia.',\n  tabHtml: 'HTML',\n  tabText: 'Texto',\n  tabSource: 'Código',\n  widthDesktop: 'Computador',\n  widthMobile: 'Celular',\n  subjectLabel: 'Assunto',\n  frameTitle: 'Prévia do e-mail',\n  coverageTitle: 'Cobertura incompleta',\n  missingSamples: (keys) => `Sem dados de exemplo, então não há prévia: ${keys}.`,\n  orphanSamples: (keys) => `Há exemplo, mas nada mais produz esta mensagem: ${keys}.`,\n  loading: 'Carregando...',\n  loadError: 'Não foi possível carregar as prévias.',\n  retry: 'Tentar novamente',\n};\n"],"mappings":";;;;;;;;AAGO,IAAM,2BAAmD;AAAA,EAC9D,OAAO;AAAA,EACP,aAAa;AAAA,EACb,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,WAAW;AAAA,EACX,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,WAAW;AAAA,EACX,cAAc;AAAA,EACd,aAAa;AAAA,EACb,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,gBAAgB,wBAAC,SAAS,kCAAkC,IAAI,KAAhD;AAAA,EAChB,eAAe,wBAAC,SAAS,+DAA+D,IAAI,KAA7E;AAAA,EACf,SAAS;AAAA,EACT,WAAW;AAAA,EACX,OAAO;AACT;;;ACpBO,IAAM,2BAAmD;AAAA,EAC9D,OAAO;AAAA,EACP,aAAa;AAAA,EACb,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,WAAW;AAAA,EACX,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,WAAW;AAAA,EACX,cAAc;AAAA,EACd,aAAa;AAAA,EACb,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,gBAAgB,wBAAC,SAAS,0DAA8C,IAAI,KAA5D;AAAA,EAChB,eAAe,wBAAC,SAAS,sDAAmD,IAAI,KAAjE;AAAA,EACf,SAAS;AAAA,EACT,WAAW;AAAA,EACX,OAAO;AACT;","names":[]}

package/dist/{generators-B9xt3sRh.d.ts → generators-BsuXe8Mp.d.ts}

@@ -1,4 +1,4 @@
-import { e as NotificationGenerator } from './types-CXLAG3UU.js';
+import { N as NotificationGenerator } from './types-BFmAY0P5.js';
 
 /**
  * Generator registry: one {@link NotificationGenerator} per event `type`.

package/dist/hono/index.d.ts

@@ -1,9 +1,10 @@
 import { Hono, Context } from 'hono';
-import { A as ApiNotifications, N as NotificationsServerConfig, a as NotificationsActor } from '../create-api-notifications-B3u6Kx3x.js';
-import '../generators-B9xt3sRh.js';
-import '../types-CXLAG3UU.js';
-import '../wire-6dzyfDE7.js';
-import '../web-push-Cs14Wp9u.js';
+import { A as ApiNotifications, N as NotificationsServerConfig, a as NotificationsActor } from '../create-api-notifications-B-VMezVB.js';
+import '../generators-BsuXe8Mp.js';
+import '../types-BFmAY0P5.js';
+import '../wire-_coV3tJk.js';
+import '../web-push-D-ysQd5h.js';
+import '../template-Dlt5S54z.js';
 
 /**
  * `@12-apps/notifications/hono` — the account notification endpoints as a

package/dist/hono/index.js

@@ -1,11 +1,12 @@
 import {
   createApiNotifications
-} from "../chunk-WHBMPHQE.js";
-import "../chunk-HHMRCMQU.js";
-import "../chunk-XE7HZVMH.js";
+} from "../chunk-KZG7QGFA.js";
+import "../chunk-GGAZOLNN.js";
 import {
   messagesOf
 } from "../chunk-M2TVBVH2.js";
+import "../chunk-BGI4BQ66.js";
+import "../chunk-EKUSNUBT.js";
 import {
   __name
 } from "../chunk-7QVYU63E.js";

package/dist/hono/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/hono/index.ts"],"sourcesContent":["import { Hono } from 'hono';\nimport type { Context } from 'hono';\n\nimport { messagesOf } from '../messages';\n\nimport {\n  createApiNotifications,\n  type ApiNotifications,\n  type NotificationsServerConfig,\n} from '../server/create-api-notifications';\nimport type { NotificationsActor } from '../server/context';\n\n/**\n * `@12-apps/notifications/hono` — the account notification endpoints as a\n * mountable router.\n *\n * The framework-neutral descriptors in `/server` are the contract; this is the\n * adapter for the framework we happen to use, behind its own subpath with\n * `hono` as an OPTIONAL peer (the report-builder precedent — a host on Express,\n * or one that only wants the React surface, never resolves Hono).\n *\n * A host writes:\n *\n *   const notifications = notificationsRouter({ …config, resolveActor });\n *   app.route('/api/account', notifications.router);\n *\n * and keeps what is genuinely its own: who the caller is. Everything after\n * that — parsing, status codes, the envelope, the pt-BR copy — is the\n * package's.\n */\n\n/**\n * Resolve the caller. Returning `null` means unauthenticated, which answers 401\n * before any handler runs.\n *\n * Note the 401 is self-guarded HERE rather than assumed from middleware: these\n * paths sit under an API prefix that a host's page middleware typically does not\n * match, and an unauthenticated inbox read that fell through would answer\n * somebody else's rows or none at all — both worse than a 401.\n */\nexport type ResolveNotificationsActor = (\n  c: Context,\n) => Promise<NotificationsActor | null> | NotificationsActor | null;\n\nexport interface NotificationsHonoConfig extends NotificationsServerConfig {\n  resolveActor: ResolveNotificationsActor;\n}\n\nexport interface NotificationsHono extends ApiNotifications {\n  router: Hono;\n}\n\n/**\n * Reads the JSON body, tolerating an absent or malformed one — and only when\n * the caller SAID it was JSON.\n *\n * The content-type check is a CSRF speed bump, not a defence (see ADOPTING rule\n * 13, which names the actual one). `text/plain`, `multipart/form-data` and\n * `application/x-www-form-urlencoded` are the three types a cross-site `fetch`\n * or a plain `<form>` can send with NO preflight, so parsing a body regardless\n * of its type is what lets such a request reach these handlers at all. Refusing\n * them means a cross-site write has to earn a preflight first, which the browser\n * will then refuse on its own. The price is nil: every client of this surface,\n * the packaged one included, sends `application/json`.\n */\nfunction saysJson(c: Context): boolean {\n  const type = c.req.header('content-type');\n  if (!type) return false;\n  const mime = (type.split(';')[0] ?? '').trim().toLowerCase();\n  return mime === 'application/json' || mime.endsWith('+json');\n}\n\nasync function readBody(c: Context): Promise<unknown> {\n  if (c.req.method === 'GET') return undefined;\n  if (!saysJson(c)) return undefined;\n  try {\n    return await c.req.json();\n  } catch {\n    // A malformed body is the caller's error; the handler's own validation\n    // reports it far better than a parse failure would.\n    return undefined;\n  }\n}\n\nexport function notificationsRouter(config: NotificationsHonoConfig): NotificationsHono {\n  const api = createApiNotifications(config);\n  const messages = messagesOf(config);\n  const router = new Hono();\n\n  // Mounted IN DESCRIPTOR ORDER, which any adapter must preserve. Hono resolves\n  // by registration order, so a host route shaped `/notifications/:id` under the\n  // same prefix must be registered AFTER this router or it captures\n  // `/notifications/unread-count`.\n  for (const route of api.routes) {\n    const handler = async (c: Context): Promise<Response> => {\n      const actor = await config.resolveActor(c);\n      if (!actor) return c.json({ error: messages.unauthenticated }, 401);\n\n      const response = await route.handle({\n        actor,\n        params: c.req.param() as Record<string, string | undefined>,\n        query: c.req.query() as Record<string, string | undefined>,\n        body: await readBody(c),\n        headers: { 'user-agent': c.req.header('user-agent') },\n      });\n\n      // A handler that chose NO body means exactly that (204).\n      if (response.body === undefined) return c.body(null, response.status as 204);\n      // The status travels with the body the handler chose; the adapter never\n      // reinterprets either.\n      return c.json(response.body as Record<string, unknown>, response.status as 200);\n    };\n\n    if (route.method === 'GET') router.get(route.path, handler);\n    else if (route.method === 'POST') router.post(route.path, handler);\n    else if (route.method === 'PUT') router.put(route.path, handler);\n    else router.delete(route.path, handler);\n  }\n\n  return { ...api, router };\n}\n"],"mappings":";;;;;;;;;;;;;AAAA,SAAS,YAAY;AAiErB,SAAS,SAAS,GAAqB;AACrC,QAAM,OAAO,EAAE,IAAI,OAAO,cAAc;AACxC,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,QAAQ,KAAK,MAAM,GAAG,EAAE,CAAC,KAAK,IAAI,KAAK,EAAE,YAAY;AAC3D,SAAO,SAAS,sBAAsB,KAAK,SAAS,OAAO;AAC7D;AALS;AAOT,eAAe,SAAS,GAA8B;AACpD,MAAI,EAAE,IAAI,WAAW,MAAO,QAAO;AACnC,MAAI,CAAC,SAAS,CAAC,EAAG,QAAO;AACzB,MAAI;AACF,WAAO,MAAM,EAAE,IAAI,KAAK;AAAA,EAC1B,QAAQ;AAGN,WAAO;AAAA,EACT;AACF;AAVe;AAYR,SAAS,oBAAoB,QAAoD;AACtF,QAAM,MAAM,uBAAuB,MAAM;AACzC,QAAM,WAAW,WAAW,MAAM;AAClC,QAAM,SAAS,IAAI,KAAK;AAMxB,aAAW,SAAS,IAAI,QAAQ;AAC9B,UAAM,UAAU,8BAAO,MAAkC;AACvD,YAAM,QAAQ,MAAM,OAAO,aAAa,CAAC;AACzC,UAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,SAAS,gBAAgB,GAAG,GAAG;AAElE,YAAM,WAAW,MAAM,MAAM,OAAO;AAAA,QAClC;AAAA,QACA,QAAQ,EAAE,IAAI,MAAM;AAAA,QACpB,OAAO,EAAE,IAAI,MAAM;AAAA,QACnB,MAAM,MAAM,SAAS,CAAC;AAAA,QACtB,SAAS,EAAE,cAAc,EAAE,IAAI,OAAO,YAAY,EAAE;AAAA,MACtD,CAAC;AAGD,UAAI,SAAS,SAAS,OAAW,QAAO,EAAE,KAAK,MAAM,SAAS,MAAa;AAG3E,aAAO,EAAE,KAAK,SAAS,MAAiC,SAAS,MAAa;AAAA,IAChF,GAjBgB;AAmBhB,QAAI,MAAM,WAAW,MAAO,QAAO,IAAI,MAAM,MAAM,OAAO;AAAA,aACjD,MAAM,WAAW,OAAQ,QAAO,KAAK,MAAM,MAAM,OAAO;AAAA,aACxD,MAAM,WAAW,MAAO,QAAO,IAAI,MAAM,MAAM,OAAO;AAAA,QAC1D,QAAO,OAAO,MAAM,MAAM,OAAO;AAAA,EACxC;AAEA,SAAO,EAAE,GAAG,KAAK,OAAO;AAC1B;AApCgB;","names":[]}
+{"version":3,"sources":["../../src/hono/index.ts"],"sourcesContent":["import { Hono } from 'hono';\nimport type { Context } from 'hono';\n\nimport { messagesOf } from '../messages';\n\nimport {\n  createApiNotifications,\n  type ApiNotifications,\n  type NotificationsServerConfig,\n} from '../server/create-api-notifications';\nimport type { NotificationsActor } from '../server/context';\n\n/**\n * `@12-apps/notifications/hono` — the account notification endpoints as a\n * mountable router.\n *\n * The framework-neutral descriptors in `/server` are the contract; this is the\n * adapter for the framework we happen to use, behind its own subpath with\n * `hono` as an OPTIONAL peer (the report-builder precedent — a host on Express,\n * or one that only wants the React surface, never resolves Hono).\n *\n * A host writes:\n *\n *   const notifications = notificationsRouter({ …config, resolveActor });\n *   app.route('/api/account', notifications.router);\n *\n * and keeps what is genuinely its own: who the caller is. Everything after\n * that — parsing, status codes, the envelope, the pt-BR copy — is the\n * package's.\n */\n\n/**\n * Resolve the caller. Returning `null` means unauthenticated, which answers 401\n * before any handler runs.\n *\n * Note the 401 is self-guarded HERE rather than assumed from middleware: these\n * paths sit under an API prefix that a host's page middleware typically does not\n * match, and an unauthenticated inbox read that fell through would answer\n * somebody else's rows or none at all — both worse than a 401.\n */\nexport type ResolveNotificationsActor = (\n  c: Context,\n) => Promise<NotificationsActor | null> | NotificationsActor | null;\n\nexport interface NotificationsHonoConfig extends NotificationsServerConfig {\n  resolveActor: ResolveNotificationsActor;\n}\n\nexport interface NotificationsHono extends ApiNotifications {\n  router: Hono;\n}\n\n/**\n * Reads the JSON body, tolerating an absent or malformed one — and only when\n * the caller SAID it was JSON.\n *\n * The content-type check is a CSRF speed bump, not a defence (see ADOPTING rule\n * 13, which names the actual one). `text/plain`, `multipart/form-data` and\n * `application/x-www-form-urlencoded` are the three types a cross-site `fetch`\n * or a plain `<form>` can send with NO preflight, so parsing a body regardless\n * of its type is what lets such a request reach these handlers at all. Refusing\n * them means a cross-site write has to earn a preflight first, which the browser\n * will then refuse on its own. The price is nil: every client of this surface,\n * the packaged one included, sends `application/json`.\n */\nfunction saysJson(c: Context): boolean {\n  const type = c.req.header('content-type');\n  if (!type) return false;\n  const mime = (type.split(';')[0] ?? '').trim().toLowerCase();\n  return mime === 'application/json' || mime.endsWith('+json');\n}\n\nasync function readBody(c: Context): Promise<unknown> {\n  if (c.req.method === 'GET') return undefined;\n  if (!saysJson(c)) return undefined;\n  try {\n    return await c.req.json();\n  } catch {\n    // A malformed body is the caller's error; the handler's own validation\n    // reports it far better than a parse failure would.\n    return undefined;\n  }\n}\n\nexport function notificationsRouter(config: NotificationsHonoConfig): NotificationsHono {\n  const api = createApiNotifications(config);\n  const messages = messagesOf(config);\n  const router = new Hono();\n\n  // Mounted IN DESCRIPTOR ORDER, which any adapter must preserve. Hono resolves\n  // by registration order, so a host route shaped `/notifications/:id` under the\n  // same prefix must be registered AFTER this router or it captures\n  // `/notifications/unread-count`.\n  for (const route of api.routes) {\n    const handler = async (c: Context): Promise<Response> => {\n      const actor = await config.resolveActor(c);\n      if (!actor) return c.json({ error: messages.unauthenticated }, 401);\n\n      const response = await route.handle({\n        actor,\n        params: c.req.param() as Record<string, string | undefined>,\n        query: c.req.query() as Record<string, string | undefined>,\n        body: await readBody(c),\n        headers: { 'user-agent': c.req.header('user-agent') },\n      });\n\n      // A handler that chose NO body means exactly that (204).\n      if (response.body === undefined) return c.body(null, response.status as 204);\n      // The status travels with the body the handler chose; the adapter never\n      // reinterprets either.\n      return c.json(response.body as Record<string, unknown>, response.status as 200);\n    };\n\n    if (route.method === 'GET') router.get(route.path, handler);\n    else if (route.method === 'POST') router.post(route.path, handler);\n    else if (route.method === 'PUT') router.put(route.path, handler);\n    else router.delete(route.path, handler);\n  }\n\n  return { ...api, router };\n}\n"],"mappings":";;;;;;;;;;;;;;AAAA,SAAS,YAAY;AAiErB,SAAS,SAAS,GAAqB;AACrC,QAAM,OAAO,EAAE,IAAI,OAAO,cAAc;AACxC,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,QAAQ,KAAK,MAAM,GAAG,EAAE,CAAC,KAAK,IAAI,KAAK,EAAE,YAAY;AAC3D,SAAO,SAAS,sBAAsB,KAAK,SAAS,OAAO;AAC7D;AALS;AAOT,eAAe,SAAS,GAA8B;AACpD,MAAI,EAAE,IAAI,WAAW,MAAO,QAAO;AACnC,MAAI,CAAC,SAAS,CAAC,EAAG,QAAO;AACzB,MAAI;AACF,WAAO,MAAM,EAAE,IAAI,KAAK;AAAA,EAC1B,QAAQ;AAGN,WAAO;AAAA,EACT;AACF;AAVe;AAYR,SAAS,oBAAoB,QAAoD;AACtF,QAAM,MAAM,uBAAuB,MAAM;AACzC,QAAM,WAAW,WAAW,MAAM;AAClC,QAAM,SAAS,IAAI,KAAK;AAMxB,aAAW,SAAS,IAAI,QAAQ;AAC9B,UAAM,UAAU,8BAAO,MAAkC;AACvD,YAAM,QAAQ,MAAM,OAAO,aAAa,CAAC;AACzC,UAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,SAAS,gBAAgB,GAAG,GAAG;AAElE,YAAM,WAAW,MAAM,MAAM,OAAO;AAAA,QAClC;AAAA,QACA,QAAQ,EAAE,IAAI,MAAM;AAAA,QACpB,OAAO,EAAE,IAAI,MAAM;AAAA,QACnB,MAAM,MAAM,SAAS,CAAC;AAAA,QACtB,SAAS,EAAE,cAAc,EAAE,IAAI,OAAO,YAAY,EAAE;AAAA,MACtD,CAAC;AAGD,UAAI,SAAS,SAAS,OAAW,QAAO,EAAE,KAAK,MAAM,SAAS,MAAa;AAG3E,aAAO,EAAE,KAAK,SAAS,MAAiC,SAAS,MAAa;AAAA,IAChF,GAjBgB;AAmBhB,QAAI,MAAM,WAAW,MAAO,QAAO,IAAI,MAAM,MAAM,OAAO;AAAA,aACjD,MAAM,WAAW,OAAQ,QAAO,KAAK,MAAM,MAAM,OAAO;AAAA,aACxD,MAAM,WAAW,MAAO,QAAO,IAAI,MAAM,MAAM,OAAO;AAAA,QAC1D,QAAO,OAAO,MAAM,MAAM,OAAO;AAAA,EACxC;AAEA,SAAO,EAAE,GAAG,KAAK,OAAO;AAC1B;AApCgB;","names":[]}

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-export { D as DeliveryStatus, N as NOTIFICATION_CHANNELS, a as NotificationCategory, b as NotificationChannel, c as NotificationContent, d as NotificationEvent, e as NotificationGenerator, f as NotificationLogger, g as NotificationRecipient, h as NotificationTaxonomy, i as NotificationTransport, T as TransportRecipient, t as taxonomyOf } from './types-CXLAG3UU.js';
-export { N as NotificationGeneratorRegistry, c as createGeneratorRegistry } from './generators-B9xt3sRh.js';
-export { C as ChannelMatrix, a as ChannelRow, D as DEFAULT_CHANNEL_ROW, I as InboxNotification, L as ListNotificationsResult, N as NotificationMessages, b as NotificationRow, c as NotificationWireMessages, d as defaultChannelMatrix, e as enabledChannelsOf, i as inboxWire, m as mergeChoices, f as mergeStoredRow, g as messagesOf } from './wire-6dzyfDE7.js';
+export { D as DeliveryStatus, a as NOTIFICATION_CHANNELS, b as NotificationCategory, c as NotificationChannel, d as NotificationContent, e as NotificationEvent, f as NotificationGenerateContext, N as NotificationGenerator, g as NotificationLogger, h as NotificationRecipient, i as NotificationTaxonomy, j as NotificationTransport, T as TransportRecipient, t as taxonomyOf } from './types-BFmAY0P5.js';
+export { N as NotificationGeneratorRegistry, c as createGeneratorRegistry } from './generators-BsuXe8Mp.js';
+export { C as ChannelMatrix, a as ChannelRow, D as DEFAULT_CHANNEL_ROW, I as InboxNotification, L as ListNotificationsResult, N as NotificationMessages, b as NotificationRow, c as NotificationWireMessages, d as defaultChannelMatrix, e as enabledChannelsOf, i as inboxWire, m as mergeChoices, f as mergeStoredRow, g as messagesOf } from './wire-_coV3tJk.js';
 
 /** Thrown by `notify` when no generator is registered for the event type. */
 declare class UnknownNotificationTypeError extends Error {

package/dist/index.js

@@ -9,14 +9,14 @@ import {
   mergeChoices,
   mergeStoredRow,
   normalizePhoneE164
-} from "./chunk-HHMRCMQU.js";
-import {
-  NOTIFICATION_CHANNELS,
-  taxonomyOf
-} from "./chunk-XE7HZVMH.js";
+} from "./chunk-GGAZOLNN.js";
 import {
   messagesOf
 } from "./chunk-M2TVBVH2.js";
+import {
+  NOTIFICATION_CHANNELS,
+  taxonomyOf
+} from "./chunk-BGI4BQ66.js";
 import "./chunk-7QVYU63E.js";
 export {
   DEFAULT_CHANNEL_ROW,

package/dist/{jobs-BDZ7aGHV.d.ts → jobs-D64B_bg7.d.ts}

@@ -1,5 +1,5 @@
 import { WireJobBlueprint } from '@12-apps/wiring';
-import { A as ApiNotifications } from './create-api-notifications-B3u6Kx3x.js';
+import { A as ApiNotifications } from './create-api-notifications-B-VMezVB.js';
 
 /**
  * The two background jobs getting a message out actually needs.

package/dist/manifest/index.d.ts

@@ -63,5 +63,43 @@ declare const notificationsManifest: {
     readonly server: readonly ["http", "jobs"];
     readonly web: readonly ["surface"];
 };
+/**
+ * The e-mail PREVIEW console — a second manifest, from the same package.
+ *
+ * ## Why a second manifest and not two more keys on the first
+ *
+ * `notificationsManifest` has already spent both slots this surface needs:
+ * `http` is the account inbox at `/api/account`, `surface` is the bell and the
+ * preference matrix. A capability is singular by the contract's shape, so a
+ * package with two genuinely different surfaces declares two manifests — which
+ * is exactly what `@12-apps/auth` does with `@12-apps/auth-platform`, and for
+ * the same reason it gives: those two switches turn a sign-in method off for
+ * EVERYBODY, so they do not belong behind the same gate as "reset my password".
+ *
+ * The split here is the same one. The inbox ships to every signed-in user; this
+ * console publishes the product's whole transactional-mail inventory and the
+ * exact wording and link shape of its verification and reset mails, which is
+ * the reference someone writing a convincing phishing mail would want. Two
+ * manifests keep that expressible: a host mounts the inbox and DECLINES the
+ * console, in writing, rather than silently getting both behind one gate.
+ *
+ * ## What it deliberately does not declare
+ *
+ * No `db` — a catalogue is DERIVED from what a host already sends, so an
+ * adopter mounts it without touching its schema. No `notifications`, because
+ * this surface authors no alert. And no `email`: that capability is a DELIVERY
+ * port, and this manifest renders and never sends. The delivery port is the
+ * OTHER half of this package, and it stays where it is.
+ */
+declare const notificationEmailPreviewsManifest: {
+    readonly name: "@12-apps/notifications-email-previews";
+    readonly contract: 1;
+    /** A refusal to render a preview files under its own namespace, not nowhere. */
+    readonly observability: {
+        readonly namespace: "email-previews";
+    };
+    readonly server: readonly ["http"];
+    readonly web: readonly ["surface"];
+};
 
-export { notificationsManifest };
+export { notificationEmailPreviewsManifest, notificationsManifest };

package/dist/manifest/index.js

@@ -13,7 +13,16 @@ var notificationsManifest = {
   server: ["http", "jobs"],
   web: ["surface"]
 };
+var notificationEmailPreviewsManifest = {
+  name: "@12-apps/notifications-email-previews",
+  contract: 1,
+  /** A refusal to render a preview files under its own namespace, not nowhere. */
+  observability: { namespace: "email-previews" },
+  server: ["http"],
+  web: ["surface"]
+};
 export {
+  notificationEmailPreviewsManifest,
   notificationsManifest
 };
 //# sourceMappingURL=index.js.map