@12-apps/notifications 4.8.0 → 4.10.0

package/dist/{create-web-notifications-DrgqtU4Q.d.ts → create-web-notifications-_NVYmlvy.d.ts}

@@ -1,6 +1,7 @@
-import { JSX, ComponentType } from 'react';
-import { L as ListNotificationsResult, a as ChannelRow, I as InboxNotification, N as NotificationMessages } from './wire-CmRrB3_s.js';
-import { b as NotificationChannel } from './types-CYJN1xCM.js';
+import { ReactNode, JSX, ComponentType } from 'react';
+import { L as ListNotificationsResult, a as ChannelRow, I as InboxNotification, N as NotificationMessages } from './wire-BG1kuoXX.js';
+import { c as NotificationChannel } from './types-BlqZkCWZ.js';
+import { b as LiveActivity } from './live-DYxEFO49.js';
 
 /**
  * How the notification screens reach their data (12-15) — the report-builder
@@ -221,6 +222,81 @@ interface BellButtonProps {
     enabled?: boolean;
 }
 
+/**
+ * The host's half of live activities: where they come from, and what they say.
+ *
+ * Both are the host's because neither can be this package's. It has no idea
+ * what is happening — only the application does — and it has no words, for the
+ * same reason `NotificationMessages` is required rather than defaulted: a
+ * package that ships one product's sentences ships them to every other product
+ * too, and the adopter reached by saying nothing is the one who never notices.
+ */
+
+/**
+ * Where the surface gets the activities that are live RIGHT NOW.
+ *
+ * A HOOK rather than a fetcher, and rather than a factory-time `subscribe`,
+ * because the answer almost always lives in React context: the tenant, the
+ * session, the host's query client. `NotificationsSignalHook` exists for
+ * exactly this reason one seam over, and a host in that shape had no way to
+ * pass anything at all.
+ *
+ * `active` is whether the surface currently needs the answer. It is a HINT
+ * about need, never about correctness: a host that ignores it and always
+ * answers is behaving correctly and merely paying for it.
+ *
+ * What it is NOT is the only thing standing between a shut panel and a query.
+ * The panel is fetched lazily and renders nothing until somebody first opens
+ * the bell, and the drawer unmounts its content on close — so a host that
+ * simply reads `active` and ignores it still issues nothing while the panel is
+ * away. `active` is `false` for the frames of the closing transition, which is
+ * where it earns its keep: a query told to stand down there does not fire one
+ * last time on the way out.
+ *
+ * Return whatever is live, newest activity first or in whatever order the host
+ * means; the surface renders them in the order given. An empty array is the
+ * normal answer and renders nothing — no heading, no empty state, no gap.
+ */
+type LiveActivitiesHook = (options: {
+    active: boolean;
+}) => readonly LiveActivity[];
+/** The three sentences the live section says. */
+interface LiveActivityMessages {
+    /** The heading over the pinned entries, e.g. "Em andamento". */
+    sectionTitle: string;
+    /** The link's accessible name, e.g. `(title) => `Abrir ${title}``. */
+    openActivity: (title: string) => string;
+    /**
+     * The "last moved" line, given an already-relative time.
+     *
+     * Takes the phrase rather than the instant so the relative wording stays in
+     * ONE place — `relativeTime` and the inbox rows' `há 5 min` — and a host
+     * cannot end up with two vocabularies for the same duration in one panel.
+     */
+    updated: (relative: string) => string;
+}
+/** Live activities, as a host turns them on. */
+interface LiveActivitiesConfig {
+    useActivities: LiveActivitiesHook;
+    messages: LiveActivityMessages;
+    /**
+     * The mark on the left of a card — the fastest read, before any words.
+     *
+     * A node rather than a field on {@link LiveActivity} so the contract stays
+     * framework-free: the root entry is shared with the server half, and a
+     * `ReactNode` in it would put React on that import path for a backend that
+     * only ever writes rows. The host switches on `kind`, which is what `kind` is
+     * for. No renderer, no mark, and the card is text — never a placeholder box.
+     *
+     * **Return something PRESENTATIONAL.** The mark is drawn inside the card's
+     * own `<button>` and inside an `aria-hidden` wrapper, so a focusable node
+     * here is a button inside a button — invalid HTML, and the exact defect the
+     * card's structure exists to prevent — as well as a control hidden from the
+     * accessibility tree. An icon or an `<svg>`; not a control.
+     */
+    renderIcon?: (activity: LiveActivity) => ReactNode;
+}
+
 /**
  * The notification-centre slide-over: newest-first list with unread styling,
  * per-item open (marks read + deep-links), soft delete, mark-all, empty /
@@ -322,6 +398,15 @@ interface NotificationsWebConfig {
     useSignal?: NotificationsSignalHook;
     /** The browser push enable step's host seams (SW path, platform hint). */
     webPush?: WebPushSetupConfig;
+    /**
+     * LIVE ACTIVITIES — the ongoing-state entries pinned above the inbox list.
+     *
+     * Opt-in, and absent means absent: a host that passes nothing gets the panel
+     * it had, with no section, no heading and no reserved space. See
+     * `./live-config` for the two things a host has to supply (where they come
+     * from, and what the section says) and `../live` for what one IS.
+     */
+    liveActivities?: LiveActivitiesConfig;
 }
 interface WebNotifications {
     /**
@@ -362,4 +447,4 @@ interface WebNotifications {
 }
 declare function createWebNotifications(config: NotificationsWebConfig): WebNotifications;
 
-export { BADGE_POLL_MS as B, type InboxListStatus as I, type NotificationsApiClient as N, PAGE_SIZE as P, type WebNotifications as W, BADGE_RECONCILE_MS as a, type BellButtonProps as b, createWebNotifications as c, type InboxState as d, type InboxStore as e, NotificationsHttpError as f, type NotificationsPanelProps as g, type NotificationsResult as h, type NotificationsSignalHook as i, type NotificationsSubscribe as j, type NotificationsTransport as k, type NotificationsWebConfig as l, type PreferencesPayload as m, type PreferencesScreenProps as n, type PushRegistrationPayload as o, type WebPushPlatformHint as p, type WebPushSetupConfig as q, createInboxStore as r, createNotificationsApiClient as s, httpNotificationsTransport as t, useInboxList as u, useInboxState as v, useUnreadCount as w };
+export { BADGE_POLL_MS as B, type InboxListStatus as I, type LiveActivitiesConfig as L, type NotificationsApiClient as N, PAGE_SIZE as P, type WebNotifications as W, BADGE_RECONCILE_MS as a, type BellButtonProps as b, createWebNotifications as c, type InboxState as d, type InboxStore as e, type LiveActivitiesHook as f, type LiveActivityMessages as g, NotificationsHttpError as h, type NotificationsPanelProps as i, type NotificationsResult as j, type NotificationsSignalHook as k, type NotificationsSubscribe as l, type NotificationsTransport as m, type NotificationsWebConfig as n, type PreferencesPayload as o, type PreferencesScreenProps as p, type PushRegistrationPayload as q, type WebPushPlatformHint as r, type WebPushSetupConfig as s, createInboxStore as t, createNotificationsApiClient as u, httpNotificationsTransport as v, useInboxList as w, useInboxState as x, useUnreadCount as y };

package/dist/email/index.d.ts

@@ -0,0 +1,26 @@
+import { E as EmailDocument } from '../template-Dlt5S54z.js';
+export { a as EMAIL_CONTENT_WIDTH, b as EMAIL_FONT_STACK, c as EmailAction, d as EmailChromeCopy, e as EmailFact, f as EmailTheme, N as NEUTRAL_EMAIL_THEME, R as RenderedEmail, r as renderEmail, g as renderEmailHtml, s as safeHref } from '../template-Dlt5S54z.js';
+
+/**
+ * The plain-text half.
+ *
+ * Not a courtesy. Every major spam filter scores a `text/html` part with no
+ * `text/plain` twin, and a watch, a terminal client and a screen reader in
+ * plain-text mode show this and nothing else.
+ *
+ * It renders from the SAME `EmailDocument` the HTML half does, which is the
+ * property that matters: a line added to one is in the other, so the two cannot
+ * drift. Its own module only because the HTML renderer is already a file's
+ * worth of client workarounds — the seam is the output format, not the content.
+ */
+/**
+ * Render the document as the plain-text half.
+ *
+ * Not a courtesy. Every major spam filter scores a `text/html` part with no
+ * `text/plain` twin, and a watch, a terminal client and a screen reader in
+ * plain-text mode show this and nothing else. It is rendered from the SAME
+ * object, so it cannot say less than the HTML does.
+ */
+declare function renderEmailText(document: EmailDocument): string;
+
+export { EmailDocument, renderEmailText };

package/dist/email/index.js

@@ -0,0 +1,20 @@
+import {
+  EMAIL_CONTENT_WIDTH,
+  EMAIL_FONT_STACK,
+  NEUTRAL_EMAIL_THEME,
+  renderEmail,
+  renderEmailHtml,
+  renderEmailText,
+  safeHref
+} from "../chunk-EKUSNUBT.js";
+import "../chunk-7QVYU63E.js";
+export {
+  EMAIL_CONTENT_WIDTH,
+  EMAIL_FONT_STACK,
+  NEUTRAL_EMAIL_THEME,
+  renderEmail,
+  renderEmailHtml,
+  renderEmailText,
+  safeHref
+};
+//# sourceMappingURL=index.js.map

package/dist/email/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/email/locales.d.ts

@@ -0,0 +1,43 @@
+import { d as EmailChromeCopy } from '../template-Dlt5S54z.js';
+
+/** US English — the twin that makes {@link PT_BR_EMAIL_CHROME} a choice. */
+declare const EN_US_EMAIL_CHROME: EmailChromeCopy;
+
+/**
+ * Brazilian Portuguese, as a NAMED pack.
+ *
+ * A host passes this by name — `chrome: PT_BR_EMAIL_CHROME`, or
+ * `localeCopy(EMAIL_CHROME)` for a host whose readers do not share one
+ * language. It is never a default: a pack a host CHOOSES is a decision in a
+ * diff, and a pack a package applies silently is another product's voice in
+ * somebody's inbox.
+ *
+ * The tagline names the brand and stops. It is deliberately not a description
+ * of what the product does — that sentence is the host's, it belongs to a
+ * vocabulary this package cannot know, and a package that guessed one would be
+ * putting words in every adopter's footer.
+ */
+declare const PT_BR_EMAIL_CHROME: EmailChromeCopy;
+
+/**
+ * The layout's own words, in every language this package ships.
+ *
+ * Its own subpath (`@12-apps/notifications/email/locales`) for the reason every
+ * copy-shipping package here uses one: keeping the packs off the layout entry
+ * is what lets that entry stay the framework-free mechanism a browser can
+ * import, and it is what makes "which language" a decision a host takes by
+ * name rather than one this package takes by default.
+ *
+ * Shaped as `Record<tag, pack>` rather than importing `@12-apps/i18n`'s
+ * `LocalePack`: a package must stay liftable into a repo that has never heard
+ * of that one, so the type is a local structural mirror. The two agree by tag,
+ * and `scripts/locale-coverage-gate.mjs` is what checks that they do.
+ *
+ * A host with ONE audience passes a pack by name. A host whose readers do not
+ * share a language passes `localeCopy(EMAIL_CHROME)` and each message is
+ * written in its own recipient's language — which is the whole reason
+ * `EmailDocument.chrome` is resolved per message rather than at a mount.
+ */
+declare const EMAIL_CHROME: Readonly<Record<string, EmailChromeCopy>>;
+
+export { EMAIL_CHROME, EN_US_EMAIL_CHROME, PT_BR_EMAIL_CHROME };

package/dist/email/locales.js

@@ -0,0 +1,29 @@
+import {
+  __name
+} from "../chunk-7QVYU63E.js";
+
+// src/email/chrome.en-US.ts
+var EN_US_EMAIL_CHROME = {
+  fallbackHint: "If the button above does not work, copy and paste this address into your browser:",
+  automated: "This is an automated message. Please do not reply to this email.",
+  tagline: /* @__PURE__ */ __name((brand) => `Sent by ${brand}.`, "tagline")
+};
+
+// src/email/chrome.pt-BR.ts
+var PT_BR_EMAIL_CHROME = {
+  fallbackHint: "Se o bot\xE3o acima n\xE3o funcionar, copie e cole este endere\xE7o no seu navegador:",
+  automated: "Esta \xE9 uma mensagem autom\xE1tica. N\xE3o responda a este e-mail.",
+  tagline: /* @__PURE__ */ __name((brand) => `Enviado por ${brand}.`, "tagline")
+};
+
+// src/email/locales.ts
+var EMAIL_CHROME = {
+  "pt-BR": PT_BR_EMAIL_CHROME,
+  "en-US": EN_US_EMAIL_CHROME
+};
+export {
+  EMAIL_CHROME,
+  EN_US_EMAIL_CHROME,
+  PT_BR_EMAIL_CHROME
+};
+//# sourceMappingURL=locales.js.map

package/dist/email/locales.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/email/chrome.en-US.ts","../../src/email/chrome.pt-BR.ts","../../src/email/locales.ts"],"sourcesContent":["import type { EmailChromeCopy } from './template';\n\n/** US English — the twin that makes {@link PT_BR_EMAIL_CHROME} a choice. */\nexport const EN_US_EMAIL_CHROME: EmailChromeCopy = {\n  fallbackHint: 'If the button above does not work, copy and paste this address into your browser:',\n  automated: 'This is an automated message. Please do not reply to this email.',\n  tagline: (brand) => `Sent by ${brand}.`,\n};\n","import type { EmailChromeCopy } from './template';\n\n/**\n * Brazilian Portuguese, as a NAMED pack.\n *\n * A host passes this by name — `chrome: PT_BR_EMAIL_CHROME`, or\n * `localeCopy(EMAIL_CHROME)` for a host whose readers do not share one\n * language. It is never a default: a pack a host CHOOSES is a decision in a\n * diff, and a pack a package applies silently is another product's voice in\n * somebody's inbox.\n *\n * The tagline names the brand and stops. It is deliberately not a description\n * of what the product does — that sentence is the host's, it belongs to a\n * vocabulary this package cannot know, and a package that guessed one would be\n * putting words in every adopter's footer.\n */\nexport const PT_BR_EMAIL_CHROME: EmailChromeCopy = {\n  fallbackHint: 'Se o botão acima não funcionar, copie e cole este endereço no seu navegador:',\n  automated: 'Esta é uma mensagem automática. Não responda a este e-mail.',\n  tagline: (brand) => `Enviado por ${brand}.`,\n};\n","import { EN_US_EMAIL_CHROME } from './chrome.en-US';\nimport { PT_BR_EMAIL_CHROME } from './chrome.pt-BR';\nimport type { EmailChromeCopy } from './template';\n\n/**\n * The layout's own words, in every language this package ships.\n *\n * Its own subpath (`@12-apps/notifications/email/locales`) for the reason every\n * copy-shipping package here uses one: keeping the packs off the layout entry\n * is what lets that entry stay the framework-free mechanism a browser can\n * import, and it is what makes \"which language\" a decision a host takes by\n * name rather than one this package takes by default.\n *\n * Shaped as `Record<tag, pack>` rather than importing `@12-apps/i18n`'s\n * `LocalePack`: a package must stay liftable into a repo that has never heard\n * of that one, so the type is a local structural mirror. The two agree by tag,\n * and `scripts/locale-coverage-gate.mjs` is what checks that they do.\n *\n * A host with ONE audience passes a pack by name. A host whose readers do not\n * share a language passes `localeCopy(EMAIL_CHROME)` and each message is\n * written in its own recipient's language — which is the whole reason\n * `EmailDocument.chrome` is resolved per message rather than at a mount.\n */\nexport const EMAIL_CHROME: Readonly<Record<string, EmailChromeCopy>> = {\n  'pt-BR': PT_BR_EMAIL_CHROME,\n  'en-US': EN_US_EMAIL_CHROME,\n};\n\nexport { EN_US_EMAIL_CHROME, PT_BR_EMAIL_CHROME };\n"],"mappings":";;;;;AAGO,IAAM,qBAAsC;AAAA,EACjD,cAAc;AAAA,EACd,WAAW;AAAA,EACX,SAAS,wBAAC,UAAU,WAAW,KAAK,KAA3B;AACX;;;ACSO,IAAM,qBAAsC;AAAA,EACjD,cAAc;AAAA,EACd,WAAW;AAAA,EACX,SAAS,wBAAC,UAAU,eAAe,KAAK,KAA/B;AACX;;;ACGO,IAAM,eAA0D;AAAA,EACrE,SAAS;AAAA,EACT,SAAS;AACX;","names":[]}

package/dist/email/previews/hono.d.ts

@@ -0,0 +1,46 @@
+import { Context, Hono } from 'hono';
+import { E as EmailPreviewsConfig } from '../../catalog-BOVZ2b-b.js';
+import '../../template-Dlt5S54z.js';
+
+/**
+ * `@12-apps/notifications/email/previews/hono` — the catalogue as a router.
+ *
+ * The framework-neutral descriptors in `./server` are the contract; this is the
+ * adapter for the framework we happen to use, behind its own subpath with
+ * `hono` as an OPTIONAL peer — a host on Express, or one that only wants the
+ * layout, never resolves it.
+ *
+ * A host writes:
+ *
+ *   const previews = emailPreviewsRouter({ sources, locales, defaultLocale });
+ *   app.use('/api/platform/email-previews/*', requirePlatformOperator);
+ *   app.route('/api/platform/email-previews', previews.router);
+ *
+ * ## The `use` line above is not decoration
+ *
+ * This surface publishes a host's whole transactional-mail inventory and the
+ * exact wording of its verification and reset mails. The routes declare no
+ * session of their own because a package cannot know who a host lets look — so
+ * the gate is the host's, it is REQUIRED, and it is written here rather than
+ * left to be inferred, because the failure is silent: an ungated mount answers
+ * every stranger and nothing about it looks wrong.
+ */
+interface EmailPreviewsHonoConfig extends EmailPreviewsConfig {
+    /**
+     * Optional last-resort refusal, for a host that would rather state the gate
+     * once here than mount middleware around the router.
+     *
+     * Returning `false` answers 403 before any handler runs. Absent means the
+     * host has gated the mount itself — which is the ordinary case, and why this
+     * is not required: a package that demanded its own guard would be a second
+     * authorization system beside the one the host already runs.
+     */
+    readonly allow?: (c: Context) => Promise<boolean> | boolean;
+}
+/** The mounted router, plus the descriptors it was built from. */
+interface EmailPreviewsRouter {
+    router: Hono;
+}
+declare function emailPreviewsRouter(config: EmailPreviewsHonoConfig): EmailPreviewsRouter;
+
+export { type EmailPreviewsHonoConfig, type EmailPreviewsRouter, emailPreviewsRouter };

package/dist/email/previews/hono.js

@@ -0,0 +1,33 @@
+import {
+  emailPreviewRoutes
+} from "../../chunk-FTFLU6KH.js";
+import {
+  __name
+} from "../../chunk-7QVYU63E.js";
+
+// src/email/previews/hono.ts
+import { Hono } from "hono";
+function emailPreviewsRouter(config) {
+  const router = new Hono();
+  for (const route of emailPreviewRoutes(config)) {
+    router.get(route.path, async (c) => {
+      if (config.allow && !await config.allow(c)) {
+        return c.json({ error: "Forbidden." }, 403);
+      }
+      const response = await route.handle({
+        params: c.req.param(),
+        // `Object.fromEntries` over the parsed query rather than the raw string:
+        // a repeated `?locale=` is a caller error, and taking the last value is
+        // the same answer every framework here gives.
+        query: c.req.query()
+      });
+      return c.json(response.body, response.status);
+    });
+  }
+  return { router };
+}
+__name(emailPreviewsRouter, "emailPreviewsRouter");
+export {
+  emailPreviewsRouter
+};
+//# sourceMappingURL=hono.js.map

package/dist/email/previews/hono.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/email/previews/hono.ts"],"sourcesContent":["import { Hono } from 'hono';\nimport type { Context } from 'hono';\n\nimport { emailPreviewRoutes } from './routes';\nimport type { EmailPreviewsConfig } from './catalog';\n\n/**\n * `@12-apps/notifications/email/previews/hono` — the catalogue as a router.\n *\n * The framework-neutral descriptors in `./server` are the contract; this is the\n * adapter for the framework we happen to use, behind its own subpath with\n * `hono` as an OPTIONAL peer — a host on Express, or one that only wants the\n * layout, never resolves it.\n *\n * A host writes:\n *\n *   const previews = emailPreviewsRouter({ sources, locales, defaultLocale });\n *   app.use('/api/platform/email-previews/*', requirePlatformOperator);\n *   app.route('/api/platform/email-previews', previews.router);\n *\n * ## The `use` line above is not decoration\n *\n * This surface publishes a host's whole transactional-mail inventory and the\n * exact wording of its verification and reset mails. The routes declare no\n * session of their own because a package cannot know who a host lets look — so\n * the gate is the host's, it is REQUIRED, and it is written here rather than\n * left to be inferred, because the failure is silent: an ungated mount answers\n * every stranger and nothing about it looks wrong.\n */\n\nexport interface EmailPreviewsHonoConfig extends EmailPreviewsConfig {\n  /**\n   * Optional last-resort refusal, for a host that would rather state the gate\n   * once here than mount middleware around the router.\n   *\n   * Returning `false` answers 403 before any handler runs. Absent means the\n   * host has gated the mount itself — which is the ordinary case, and why this\n   * is not required: a package that demanded its own guard would be a second\n   * authorization system beside the one the host already runs.\n   */\n  readonly allow?: (c: Context) => Promise<boolean> | boolean;\n}\n\n/** The mounted router, plus the descriptors it was built from. */\nexport interface EmailPreviewsRouter {\n  router: Hono;\n}\n\nexport function emailPreviewsRouter(config: EmailPreviewsHonoConfig): EmailPreviewsRouter {\n  const router = new Hono();\n\n  for (const route of emailPreviewRoutes(config)) {\n    router.get(route.path, async (c) => {\n      if (config.allow && !(await config.allow(c))) {\n        return c.json({ error: 'Forbidden.' }, 403);\n      }\n      const response = await route.handle({\n        params: c.req.param() as Record<string, string | undefined>,\n        // `Object.fromEntries` over the parsed query rather than the raw string:\n        // a repeated `?locale=` is a caller error, and taking the last value is\n        // the same answer every framework here gives.\n        query: c.req.query() as Record<string, string | undefined>,\n      });\n      return c.json(response.body as Record<string, unknown>, response.status as 200 | 400 | 404);\n    });\n  }\n\n  return { router };\n}\n"],"mappings":";;;;;;;;AAAA,SAAS,YAAY;AAgDd,SAAS,oBAAoB,QAAsD;AACxF,QAAM,SAAS,IAAI,KAAK;AAExB,aAAW,SAAS,mBAAmB,MAAM,GAAG;AAC9C,WAAO,IAAI,MAAM,MAAM,OAAO,MAAM;AAClC,UAAI,OAAO,SAAS,CAAE,MAAM,OAAO,MAAM,CAAC,GAAI;AAC5C,eAAO,EAAE,KAAK,EAAE,OAAO,aAAa,GAAG,GAAG;AAAA,MAC5C;AACA,YAAM,WAAW,MAAM,MAAM,OAAO;AAAA,QAClC,QAAQ,EAAE,IAAI,MAAM;AAAA;AAAA;AAAA;AAAA,QAIpB,OAAO,EAAE,IAAI,MAAM;AAAA,MACrB,CAAC;AACD,aAAO,EAAE,KAAK,SAAS,MAAiC,SAAS,MAAyB;AAAA,IAC5F,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,OAAO;AAClB;AApBgB;","names":[]}

package/dist/email/previews/index.d.ts

@@ -0,0 +1,67 @@
+import { E as EmailPreviewsConfig } from '../../catalog-BOVZ2b-b.js';
+export { A as ApiEmailPreviews, D as DuplicateEmailPreviewIdError, a as EmailPreviewCoverage, b as EmailPreviewDetail, c as EmailPreviewIndex, d as EmailPreviewMessage, e as EmailPreviewRow, f as EmailPreviewSource, g as createEmailPreviews } from '../../catalog-BOVZ2b-b.js';
+import '../../template-Dlt5S54z.js';
+
+/**
+ * The two endpoints over the catalogue, as descriptors.
+ *
+ * `GET /` answers the list — one row per message, a subject each, no rendered
+ * bytes — and `GET /:id` answers one whole document. Two calls rather than one
+ * because a rendered mail is 6-10 KB and a catalogue of twenty would be twenty
+ * times that on a screen where the operator reads one.
+ *
+ * ## Nothing here can send anything
+ *
+ * The surface holds no driver, no transport and no address. `render` is pure by
+ * the contract `EmailPreviewMessage` states, so the one mistake a preview
+ * surface must be incapable of — putting a sample in somebody's inbox — is not
+ * reachable from this code at all rather than merely not done.
+ *
+ * ## The gate is the HOST's — but the POSTURE is declared here
+ *
+ * Every route carries `kind: 'authenticated'`, the wiring contract's own word
+ * for "behind the host's session resolution and its RBAC". A package cannot
+ * know WHICH gate a host uses, and this one does not try: it names no
+ * permission id, because the ids belong to whichever host mounts it.
+ *
+ * What it must not do is stay silent. `public` is the contract's word for
+ * anonymous-by-design, and the contract's DEFAULT is `authenticated` — so a
+ * descriptor that declared nothing would still read as authenticated to a
+ * host's gates, while saying nothing to the person adopting it. This surface
+ * publishes a host's whole transactional-mail inventory and the exact wording
+ * and link shape of its verification and password-reset mails, which is the
+ * reference somebody writing a convincing phishing mail would want. That is
+ * worth one word in the descriptor rather than a sentence in a document.
+ *
+ * `ADOPTING.md` states the obligation in prose as well, because a host still
+ * has to supply the gate this word only asks for.
+ *
+ * An unknown LOCALE is a 400 rather than a silent fall back to the default.
+ * This is a diagnostic surface: quietly answering the default language to
+ * `?locale=es-AR` looks exactly like a product with no Spanish, which is the
+ * question the operator was asking.
+ */
+/** Twin of the wiring contract's request; no import, so this package stays liftable. */
+interface EmailPreviewRequest {
+    /** The path segment after the mount, when the caller asked for one message. */
+    params?: Readonly<Record<string, string | undefined>>;
+    query?: Readonly<Record<string, string | undefined>>;
+}
+interface EmailPreviewResponse {
+    status: number;
+    body: unknown;
+}
+interface EmailPreviewRoute {
+    method: 'GET';
+    path: string;
+    /**
+     * The wiring contract's `WireRouteKind`, restated. Always `authenticated`
+     * here: the host supplies the gate, and this is the descriptor asking for
+     * one — see the docblock above for why silence was not an option.
+     */
+    kind: 'authenticated';
+    handle(request: EmailPreviewRequest): Promise<EmailPreviewResponse>;
+}
+declare function emailPreviewRoutes(config: EmailPreviewsConfig): EmailPreviewRoute[];
+
+export { type EmailPreviewRequest, type EmailPreviewResponse, type EmailPreviewRoute, EmailPreviewsConfig, emailPreviewRoutes };

package/dist/email/previews/index.js

@@ -0,0 +1,12 @@
+import {
+  DuplicateEmailPreviewIdError,
+  createEmailPreviews,
+  emailPreviewRoutes
+} from "../../chunk-FTFLU6KH.js";
+import "../../chunk-7QVYU63E.js";
+export {
+  DuplicateEmailPreviewIdError,
+  createEmailPreviews,
+  emailPreviewRoutes
+};
+//# sourceMappingURL=index.js.map

package/dist/email/previews/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/email/previews/react/index.d.ts

@@ -0,0 +1,43 @@
+import { E as EmailPreviewScreenCopy } from '../../../preview-screen-DYJRAnAY.js';
+export { a as EmailPreviewScreenConfig, c as createEmailPreviewScreen } from '../../../preview-screen-DYJRAnAY.js';
+import 'react';
+
+/** US English — the twin that makes {@link PT_BR_EMAIL_PREVIEW_COPY} a choice. */
+declare const EN_US_EMAIL_PREVIEW_COPY: EmailPreviewScreenCopy;
+
+/** Brazilian Portuguese, as a NAMED pack — never a default. */
+declare const PT_BR_EMAIL_PREVIEW_COPY: EmailPreviewScreenCopy;
+
+/**
+ * One rendered message, in the three ways it is worth looking at.
+ *
+ * - **HTML** — what most people will see, in a sandboxed frame at either of the
+ *   two widths that matter. A phone is not a nice-to-have: more than half of
+ *   transactional mail is opened on one, and the 600px card is exactly the
+ *   thing that either survives that or does not.
+ * - **Text** — the plain-text twin. Worth its own tab because it is what a spam
+ *   filter scores, what a watch shows, and what a screen reader in plain-text
+ *   mode reads — and because it is the half nobody ever looks at, which is how
+ *   it drifts out of step with the HTML.
+ * - **Source** — the markup itself, for the moment somebody is debugging why a
+ *   client rendered it oddly.
+ *
+ * ## Why an iframe, and why sandboxed
+ *
+ * The mail is a whole document with its own `<body>` background, and rendering
+ * that inside the console's DOM would both break the mail (the console's CSS
+ * reaches it) and break the console (the mail's body styles reach the page). A
+ * frame is the only honest preview.
+ *
+ * `sandbox=""` — no scripts, no forms, no top-level navigation. These documents
+ * come from the host's own renderer and carry no script, so this is less a
+ * containment measure than a statement that the preview is INERT: a click on a
+ * CTA inside a previewed mail must never navigate the operator anywhere, least
+ * of all to a sample verification link.
+ */
+/** The two widths the HTML view renders at. */
+type PreviewWidth = 'desktop' | 'mobile';
+/** Which of the three views is showing. */
+type PreviewTab = 'html' | 'text' | 'source';
+
+export { EN_US_EMAIL_PREVIEW_COPY, EmailPreviewScreenCopy, PT_BR_EMAIL_PREVIEW_COPY, type PreviewTab, type PreviewWidth };

package/dist/email/previews/react/index.js

@@ -0,0 +1,58 @@
+import {
+  createEmailPreviewScreen
+} from "../../../chunk-ZFIYBNZ7.js";
+import {
+  __name
+} from "../../../chunk-7QVYU63E.js";
+
+// src/email/previews/react/copy.en-US.ts
+var EN_US_EMAIL_PREVIEW_COPY = {
+  title: "Email previews",
+  description: "Every email this system sends, grouped by the package that owns it. Nothing is sent from here.",
+  searchLabel: "Filter",
+  searchPlaceholder: "subject, event or package",
+  noMatches: "No message matches the filter.",
+  pickOne: "Pick a message from the list to see its preview.",
+  tabHtml: "HTML",
+  tabText: "Text",
+  tabSource: "Source",
+  widthDesktop: "Desktop",
+  widthMobile: "Mobile",
+  subjectLabel: "Subject",
+  frameTitle: "Email preview",
+  coverageTitle: "Incomplete coverage",
+  missingSamples: /* @__PURE__ */ __name((keys) => `No sample data, so no preview: ${keys}.`, "missingSamples"),
+  orphanSamples: /* @__PURE__ */ __name((keys) => `A sample exists but nothing produces this message any more: ${keys}.`, "orphanSamples"),
+  loading: "Loading...",
+  loadError: "The previews could not be loaded.",
+  retry: "Try again"
+};
+
+// src/email/previews/react/copy.pt-BR.ts
+var PT_BR_EMAIL_PREVIEW_COPY = {
+  title: "Pr\xE9via de e-mails",
+  description: "Todos os e-mails que este sistema envia, agrupados por pacote. Nada \xE9 enviado a partir daqui.",
+  searchLabel: "Filtrar",
+  searchPlaceholder: "assunto, evento ou pacote",
+  noMatches: "Nenhuma mensagem corresponde ao filtro.",
+  pickOne: "Escolha uma mensagem na lista para ver a pr\xE9via.",
+  tabHtml: "HTML",
+  tabText: "Texto",
+  tabSource: "C\xF3digo",
+  widthDesktop: "Computador",
+  widthMobile: "Celular",
+  subjectLabel: "Assunto",
+  frameTitle: "Pr\xE9via do e-mail",
+  coverageTitle: "Cobertura incompleta",
+  missingSamples: /* @__PURE__ */ __name((keys) => `Sem dados de exemplo, ent\xE3o n\xE3o h\xE1 pr\xE9via: ${keys}.`, "missingSamples"),
+  orphanSamples: /* @__PURE__ */ __name((keys) => `H\xE1 exemplo, mas nada mais produz esta mensagem: ${keys}.`, "orphanSamples"),
+  loading: "Carregando...",
+  loadError: "N\xE3o foi poss\xEDvel carregar as pr\xE9vias.",
+  retry: "Tentar novamente"
+};
+export {
+  EN_US_EMAIL_PREVIEW_COPY,
+  PT_BR_EMAIL_PREVIEW_COPY,
+  createEmailPreviewScreen
+};
+//# sourceMappingURL=index.js.map

package/dist/email/previews/react/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/email/previews/react/copy.en-US.ts","../../../../src/email/previews/react/copy.pt-BR.ts"],"sourcesContent":["import type { EmailPreviewScreenCopy } from './copy';\n\n/** US English — the twin that makes {@link PT_BR_EMAIL_PREVIEW_COPY} a choice. */\nexport const EN_US_EMAIL_PREVIEW_COPY: EmailPreviewScreenCopy = {\n  title: 'Email previews',\n  description: 'Every email this system sends, grouped by the package that owns it. Nothing is sent from here.',\n  searchLabel: 'Filter',\n  searchPlaceholder: 'subject, event or package',\n  noMatches: 'No message matches the filter.',\n  pickOne: 'Pick a message from the list to see its preview.',\n  tabHtml: 'HTML',\n  tabText: 'Text',\n  tabSource: 'Source',\n  widthDesktop: 'Desktop',\n  widthMobile: 'Mobile',\n  subjectLabel: 'Subject',\n  frameTitle: 'Email preview',\n  coverageTitle: 'Incomplete coverage',\n  missingSamples: (keys) => `No sample data, so no preview: ${keys}.`,\n  orphanSamples: (keys) => `A sample exists but nothing produces this message any more: ${keys}.`,\n  loading: 'Loading...',\n  loadError: 'The previews could not be loaded.',\n  retry: 'Try again',\n};\n","import type { EmailPreviewScreenCopy } from './copy';\n\n/** Brazilian Portuguese, as a NAMED pack — never a default. */\nexport const PT_BR_EMAIL_PREVIEW_COPY: EmailPreviewScreenCopy = {\n  title: 'Prévia de e-mails',\n  description: 'Todos os e-mails que este sistema envia, agrupados por pacote. Nada é enviado a partir daqui.',\n  searchLabel: 'Filtrar',\n  searchPlaceholder: 'assunto, evento ou pacote',\n  noMatches: 'Nenhuma mensagem corresponde ao filtro.',\n  pickOne: 'Escolha uma mensagem na lista para ver a prévia.',\n  tabHtml: 'HTML',\n  tabText: 'Texto',\n  tabSource: 'Código',\n  widthDesktop: 'Computador',\n  widthMobile: 'Celular',\n  subjectLabel: 'Assunto',\n  frameTitle: 'Prévia do e-mail',\n  coverageTitle: 'Cobertura incompleta',\n  missingSamples: (keys) => `Sem dados de exemplo, então não há prévia: ${keys}.`,\n  orphanSamples: (keys) => `Há exemplo, mas nada mais produz esta mensagem: ${keys}.`,\n  loading: 'Carregando...',\n  loadError: 'Não foi possível carregar as prévias.',\n  retry: 'Tentar novamente',\n};\n"],"mappings":";;;;;;;;AAGO,IAAM,2BAAmD;AAAA,EAC9D,OAAO;AAAA,EACP,aAAa;AAAA,EACb,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,WAAW;AAAA,EACX,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,WAAW;AAAA,EACX,cAAc;AAAA,EACd,aAAa;AAAA,EACb,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,gBAAgB,wBAAC,SAAS,kCAAkC,IAAI,KAAhD;AAAA,EAChB,eAAe,wBAAC,SAAS,+DAA+D,IAAI,KAA7E;AAAA,EACf,SAAS;AAAA,EACT,WAAW;AAAA,EACX,OAAO;AACT;;;ACpBO,IAAM,2BAAmD;AAAA,EAC9D,OAAO;AAAA,EACP,aAAa;AAAA,EACb,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,WAAW;AAAA,EACX,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,WAAW;AAAA,EACX,cAAc;AAAA,EACd,aAAa;AAAA,EACb,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,gBAAgB,wBAAC,SAAS,0DAA8C,IAAI,KAA5D;AAAA,EAChB,eAAe,wBAAC,SAAS,sDAAmD,IAAI,KAAjE;AAAA,EACf,SAAS;AAAA,EACT,WAAW;AAAA,EACX,OAAO;AACT;","names":[]}

package/dist/{generators-CH5m8Ucj.d.ts → generators-qAD4fNPq.d.ts}

@@ -1,4 +1,4 @@
-import { f as NotificationGenerator } from './types-CYJN1xCM.js';
+import { N as NotificationGenerator } from './types-BlqZkCWZ.js';
 
 /**
  * Generator registry: one {@link NotificationGenerator} per event `type`.

package/dist/hono/index.d.ts

@@ -1,9 +1,10 @@
 import { Hono, Context } from 'hono';
-import { A as ApiNotifications, N as NotificationsServerConfig, a as NotificationsActor } from '../create-api-notifications-WaexrZnn.js';
-import '../generators-CH5m8Ucj.js';
-import '../types-CYJN1xCM.js';
-import '../wire-CmRrB3_s.js';
-import '../web-push-iER5StBm.js';
+import { A as ApiNotifications, N as NotificationsServerConfig, a as NotificationsActor } from '../create-api-notifications-CcPYrM3p.js';
+import '../generators-qAD4fNPq.js';
+import '../types-BlqZkCWZ.js';
+import '../wire-BG1kuoXX.js';
+import '../web-push-Dnyaha2z.js';
+import '../template-Dlt5S54z.js';
 
 /**
  * `@12-apps/notifications/hono` — the account notification endpoints as a

package/dist/hono/index.js

@@ -1,11 +1,13 @@
 import {
   createApiNotifications
-} from "../chunk-7234ROOP.js";
-import "../chunk-GGAZOLNN.js";
-import "../chunk-BGI4BQ66.js";
+} from "../chunk-WVRODNXQ.js";
+import "../chunk-SWOWHIFE.js";
 import {
   messagesOf
 } from "../chunk-M2TVBVH2.js";
+import "../chunk-RTURLH5U.js";
+import "../chunk-6W7INOYQ.js";
+import "../chunk-EKUSNUBT.js";
 import {
   __name
 } from "../chunk-7QVYU63E.js";

package/dist/hono/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/hono/index.ts"],"sourcesContent":["import { Hono } from 'hono';\nimport type { Context } from 'hono';\n\nimport { messagesOf } from '../messages';\n\nimport {\n  createApiNotifications,\n  type ApiNotifications,\n  type NotificationsServerConfig,\n} from '../server/create-api-notifications';\nimport type { NotificationsActor } from '../server/context';\n\n/**\n * `@12-apps/notifications/hono` — the account notification endpoints as a\n * mountable router.\n *\n * The framework-neutral descriptors in `/server` are the contract; this is the\n * adapter for the framework we happen to use, behind its own subpath with\n * `hono` as an OPTIONAL peer (the report-builder precedent — a host on Express,\n * or one that only wants the React surface, never resolves Hono).\n *\n * A host writes:\n *\n *   const notifications = notificationsRouter({ …config, resolveActor });\n *   app.route('/api/account', notifications.router);\n *\n * and keeps what is genuinely its own: who the caller is. Everything after\n * that — parsing, status codes, the envelope, the pt-BR copy — is the\n * package's.\n */\n\n/**\n * Resolve the caller. Returning `null` means unauthenticated, which answers 401\n * before any handler runs.\n *\n * Note the 401 is self-guarded HERE rather than assumed from middleware: these\n * paths sit under an API prefix that a host's page middleware typically does not\n * match, and an unauthenticated inbox read that fell through would answer\n * somebody else's rows or none at all — both worse than a 401.\n */\nexport type ResolveNotificationsActor = (\n  c: Context,\n) => Promise<NotificationsActor | null> | NotificationsActor | null;\n\nexport interface NotificationsHonoConfig extends NotificationsServerConfig {\n  resolveActor: ResolveNotificationsActor;\n}\n\nexport interface NotificationsHono extends ApiNotifications {\n  router: Hono;\n}\n\n/**\n * Reads the JSON body, tolerating an absent or malformed one — and only when\n * the caller SAID it was JSON.\n *\n * The content-type check is a CSRF speed bump, not a defence (see ADOPTING rule\n * 13, which names the actual one). `text/plain`, `multipart/form-data` and\n * `application/x-www-form-urlencoded` are the three types a cross-site `fetch`\n * or a plain `<form>` can send with NO preflight, so parsing a body regardless\n * of its type is what lets such a request reach these handlers at all. Refusing\n * them means a cross-site write has to earn a preflight first, which the browser\n * will then refuse on its own. The price is nil: every client of this surface,\n * the packaged one included, sends `application/json`.\n */\nfunction saysJson(c: Context): boolean {\n  const type = c.req.header('content-type');\n  if (!type) return false;\n  const mime = (type.split(';')[0] ?? '').trim().toLowerCase();\n  return mime === 'application/json' || mime.endsWith('+json');\n}\n\nasync function readBody(c: Context): Promise<unknown> {\n  if (c.req.method === 'GET') return undefined;\n  if (!saysJson(c)) return undefined;\n  try {\n    return await c.req.json();\n  } catch {\n    // A malformed body is the caller's error; the handler's own validation\n    // reports it far better than a parse failure would.\n    return undefined;\n  }\n}\n\nexport function notificationsRouter(config: NotificationsHonoConfig): NotificationsHono {\n  const api = createApiNotifications(config);\n  const messages = messagesOf(config);\n  const router = new Hono();\n\n  // Mounted IN DESCRIPTOR ORDER, which any adapter must preserve. Hono resolves\n  // by registration order, so a host route shaped `/notifications/:id` under the\n  // same prefix must be registered AFTER this router or it captures\n  // `/notifications/unread-count`.\n  for (const route of api.routes) {\n    const handler = async (c: Context): Promise<Response> => {\n      const actor = await config.resolveActor(c);\n      if (!actor) return c.json({ error: messages.unauthenticated }, 401);\n\n      const response = await route.handle({\n        actor,\n        params: c.req.param() as Record<string, string | undefined>,\n        query: c.req.query() as Record<string, string | undefined>,\n        body: await readBody(c),\n        headers: { 'user-agent': c.req.header('user-agent') },\n      });\n\n      // A handler that chose NO body means exactly that (204).\n      if (response.body === undefined) return c.body(null, response.status as 204);\n      // The status travels with the body the handler chose; the adapter never\n      // reinterprets either.\n      return c.json(response.body as Record<string, unknown>, response.status as 200);\n    };\n\n    if (route.method === 'GET') router.get(route.path, handler);\n    else if (route.method === 'POST') router.post(route.path, handler);\n    else if (route.method === 'PUT') router.put(route.path, handler);\n    else router.delete(route.path, handler);\n  }\n\n  return { ...api, router };\n}\n"],"mappings":";;;;;;;;;;;;;AAAA,SAAS,YAAY;AAiErB,SAAS,SAAS,GAAqB;AACrC,QAAM,OAAO,EAAE,IAAI,OAAO,cAAc;AACxC,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,QAAQ,KAAK,MAAM,GAAG,EAAE,CAAC,KAAK,IAAI,KAAK,EAAE,YAAY;AAC3D,SAAO,SAAS,sBAAsB,KAAK,SAAS,OAAO;AAC7D;AALS;AAOT,eAAe,SAAS,GAA8B;AACpD,MAAI,EAAE,IAAI,WAAW,MAAO,QAAO;AACnC,MAAI,CAAC,SAAS,CAAC,EAAG,QAAO;AACzB,MAAI;AACF,WAAO,MAAM,EAAE,IAAI,KAAK;AAAA,EAC1B,QAAQ;AAGN,WAAO;AAAA,EACT;AACF;AAVe;AAYR,SAAS,oBAAoB,QAAoD;AACtF,QAAM,MAAM,uBAAuB,MAAM;AACzC,QAAM,WAAW,WAAW,MAAM;AAClC,QAAM,SAAS,IAAI,KAAK;AAMxB,aAAW,SAAS,IAAI,QAAQ;AAC9B,UAAM,UAAU,8BAAO,MAAkC;AACvD,YAAM,QAAQ,MAAM,OAAO,aAAa,CAAC;AACzC,UAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,SAAS,gBAAgB,GAAG,GAAG;AAElE,YAAM,WAAW,MAAM,MAAM,OAAO;AAAA,QAClC;AAAA,QACA,QAAQ,EAAE,IAAI,MAAM;AAAA,QACpB,OAAO,EAAE,IAAI,MAAM;AAAA,QACnB,MAAM,MAAM,SAAS,CAAC;AAAA,QACtB,SAAS,EAAE,cAAc,EAAE,IAAI,OAAO,YAAY,EAAE;AAAA,MACtD,CAAC;AAGD,UAAI,SAAS,SAAS,OAAW,QAAO,EAAE,KAAK,MAAM,SAAS,MAAa;AAG3E,aAAO,EAAE,KAAK,SAAS,MAAiC,SAAS,MAAa;AAAA,IAChF,GAjBgB;AAmBhB,QAAI,MAAM,WAAW,MAAO,QAAO,IAAI,MAAM,MAAM,OAAO;AAAA,aACjD,MAAM,WAAW,OAAQ,QAAO,KAAK,MAAM,MAAM,OAAO;AAAA,aACxD,MAAM,WAAW,MAAO,QAAO,IAAI,MAAM,MAAM,OAAO;AAAA,QAC1D,QAAO,OAAO,MAAM,MAAM,OAAO;AAAA,EACxC;AAEA,SAAO,EAAE,GAAG,KAAK,OAAO;AAC1B;AApCgB;","names":[]}
+{"version":3,"sources":["../../src/hono/index.ts"],"sourcesContent":["import { Hono } from 'hono';\nimport type { Context } from 'hono';\n\nimport { messagesOf } from '../messages';\n\nimport {\n  createApiNotifications,\n  type ApiNotifications,\n  type NotificationsServerConfig,\n} from '../server/create-api-notifications';\nimport type { NotificationsActor } from '../server/context';\n\n/**\n * `@12-apps/notifications/hono` — the account notification endpoints as a\n * mountable router.\n *\n * The framework-neutral descriptors in `/server` are the contract; this is the\n * adapter for the framework we happen to use, behind its own subpath with\n * `hono` as an OPTIONAL peer (the report-builder precedent — a host on Express,\n * or one that only wants the React surface, never resolves Hono).\n *\n * A host writes:\n *\n *   const notifications = notificationsRouter({ …config, resolveActor });\n *   app.route('/api/account', notifications.router);\n *\n * and keeps what is genuinely its own: who the caller is. Everything after\n * that — parsing, status codes, the envelope, the pt-BR copy — is the\n * package's.\n */\n\n/**\n * Resolve the caller. Returning `null` means unauthenticated, which answers 401\n * before any handler runs.\n *\n * Note the 401 is self-guarded HERE rather than assumed from middleware: these\n * paths sit under an API prefix that a host's page middleware typically does not\n * match, and an unauthenticated inbox read that fell through would answer\n * somebody else's rows or none at all — both worse than a 401.\n */\nexport type ResolveNotificationsActor = (\n  c: Context,\n) => Promise<NotificationsActor | null> | NotificationsActor | null;\n\nexport interface NotificationsHonoConfig extends NotificationsServerConfig {\n  resolveActor: ResolveNotificationsActor;\n}\n\nexport interface NotificationsHono extends ApiNotifications {\n  router: Hono;\n}\n\n/**\n * Reads the JSON body, tolerating an absent or malformed one — and only when\n * the caller SAID it was JSON.\n *\n * The content-type check is a CSRF speed bump, not a defence (see ADOPTING rule\n * 13, which names the actual one). `text/plain`, `multipart/form-data` and\n * `application/x-www-form-urlencoded` are the three types a cross-site `fetch`\n * or a plain `<form>` can send with NO preflight, so parsing a body regardless\n * of its type is what lets such a request reach these handlers at all. Refusing\n * them means a cross-site write has to earn a preflight first, which the browser\n * will then refuse on its own. The price is nil: every client of this surface,\n * the packaged one included, sends `application/json`.\n */\nfunction saysJson(c: Context): boolean {\n  const type = c.req.header('content-type');\n  if (!type) return false;\n  const mime = (type.split(';')[0] ?? '').trim().toLowerCase();\n  return mime === 'application/json' || mime.endsWith('+json');\n}\n\nasync function readBody(c: Context): Promise<unknown> {\n  if (c.req.method === 'GET') return undefined;\n  if (!saysJson(c)) return undefined;\n  try {\n    return await c.req.json();\n  } catch {\n    // A malformed body is the caller's error; the handler's own validation\n    // reports it far better than a parse failure would.\n    return undefined;\n  }\n}\n\nexport function notificationsRouter(config: NotificationsHonoConfig): NotificationsHono {\n  const api = createApiNotifications(config);\n  const messages = messagesOf(config);\n  const router = new Hono();\n\n  // Mounted IN DESCRIPTOR ORDER, which any adapter must preserve. Hono resolves\n  // by registration order, so a host route shaped `/notifications/:id` under the\n  // same prefix must be registered AFTER this router or it captures\n  // `/notifications/unread-count`.\n  for (const route of api.routes) {\n    const handler = async (c: Context): Promise<Response> => {\n      const actor = await config.resolveActor(c);\n      if (!actor) return c.json({ error: messages.unauthenticated }, 401);\n\n      const response = await route.handle({\n        actor,\n        params: c.req.param() as Record<string, string | undefined>,\n        query: c.req.query() as Record<string, string | undefined>,\n        body: await readBody(c),\n        headers: { 'user-agent': c.req.header('user-agent') },\n      });\n\n      // A handler that chose NO body means exactly that (204).\n      if (response.body === undefined) return c.body(null, response.status as 204);\n      // The status travels with the body the handler chose; the adapter never\n      // reinterprets either.\n      return c.json(response.body as Record<string, unknown>, response.status as 200);\n    };\n\n    if (route.method === 'GET') router.get(route.path, handler);\n    else if (route.method === 'POST') router.post(route.path, handler);\n    else if (route.method === 'PUT') router.put(route.path, handler);\n    else router.delete(route.path, handler);\n  }\n\n  return { ...api, router };\n}\n"],"mappings":";;;;;;;;;;;;;;;AAAA,SAAS,YAAY;AAiErB,SAAS,SAAS,GAAqB;AACrC,QAAM,OAAO,EAAE,IAAI,OAAO,cAAc;AACxC,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,QAAQ,KAAK,MAAM,GAAG,EAAE,CAAC,KAAK,IAAI,KAAK,EAAE,YAAY;AAC3D,SAAO,SAAS,sBAAsB,KAAK,SAAS,OAAO;AAC7D;AALS;AAOT,eAAe,SAAS,GAA8B;AACpD,MAAI,EAAE,IAAI,WAAW,MAAO,QAAO;AACnC,MAAI,CAAC,SAAS,CAAC,EAAG,QAAO;AACzB,MAAI;AACF,WAAO,MAAM,EAAE,IAAI,KAAK;AAAA,EAC1B,QAAQ;AAGN,WAAO;AAAA,EACT;AACF;AAVe;AAYR,SAAS,oBAAoB,QAAoD;AACtF,QAAM,MAAM,uBAAuB,MAAM;AACzC,QAAM,WAAW,WAAW,MAAM;AAClC,QAAM,SAAS,IAAI,KAAK;AAMxB,aAAW,SAAS,IAAI,QAAQ;AAC9B,UAAM,UAAU,8BAAO,MAAkC;AACvD,YAAM,QAAQ,MAAM,OAAO,aAAa,CAAC;AACzC,UAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,SAAS,gBAAgB,GAAG,GAAG;AAElE,YAAM,WAAW,MAAM,MAAM,OAAO;AAAA,QAClC;AAAA,QACA,QAAQ,EAAE,IAAI,MAAM;AAAA,QACpB,OAAO,EAAE,IAAI,MAAM;AAAA,QACnB,MAAM,MAAM,SAAS,CAAC;AAAA,QACtB,SAAS,EAAE,cAAc,EAAE,IAAI,OAAO,YAAY,EAAE;AAAA,MACtD,CAAC;AAGD,UAAI,SAAS,SAAS,OAAW,QAAO,EAAE,KAAK,MAAM,SAAS,MAAa;AAG3E,aAAO,EAAE,KAAK,SAAS,MAAiC,SAAS,MAAa;AAAA,IAChF,GAjBgB;AAmBhB,QAAI,MAAM,WAAW,MAAO,QAAO,IAAI,MAAM,MAAM,OAAO;AAAA,aACjD,MAAM,WAAW,OAAQ,QAAO,KAAK,MAAM,MAAM,OAAO;AAAA,aACxD,MAAM,WAAW,MAAO,QAAO,IAAI,MAAM,MAAM,OAAO;AAAA,QAC1D,QAAO,OAAO,MAAM,MAAM,OAAO;AAAA,EACxC;AAEA,SAAO,EAAE,GAAG,KAAK,OAAO;AAC1B;AApCgB;","names":[]}

package/dist/index.d.ts

@@ -1,6 +1,7 @@
-export { D as DeliveryStatus, N as NOTIFICATION_CHANNELS, a as NotificationCategory, b as NotificationChannel, c as NotificationContent, d as NotificationEvent, e as NotificationGenerateContext, f as NotificationGenerator, g as NotificationLogger, h as NotificationRecipient, i as NotificationTaxonomy, j as NotificationTransport, T as TransportRecipient, t as taxonomyOf } from './types-CYJN1xCM.js';
-export { N as NotificationGeneratorRegistry, c as createGeneratorRegistry } from './generators-CH5m8Ucj.js';
-export { C as ChannelMatrix, a as ChannelRow, D as DEFAULT_CHANNEL_ROW, I as InboxNotification, L as ListNotificationsResult, N as NotificationMessages, b as NotificationRow, c as NotificationWireMessages, d as defaultChannelMatrix, e as enabledChannelsOf, i as inboxWire, m as mergeChoices, f as mergeStoredRow, g as messagesOf } from './wire-CmRrB3_s.js';
+export { D as DeliveryStatus, a as NOTIFICATION_CHANNELS, b as NotificationCategory, c as NotificationChannel, d as NotificationContent, e as NotificationEvent, f as NotificationGenerateContext, N as NotificationGenerator, g as NotificationLogger, h as NotificationRecipient, i as NotificationTaxonomy, j as NotificationTransport, T as TransportRecipient, t as taxonomyOf } from './types-BlqZkCWZ.js';
+export { N as NotificationGeneratorRegistry, c as createGeneratorRegistry } from './generators-qAD4fNPq.js';
+export { C as ChannelMatrix, a as ChannelRow, D as DEFAULT_CHANNEL_ROW, I as InboxNotification, L as ListNotificationsResult, N as NotificationMessages, b as NotificationRow, c as NotificationWireMessages, d as defaultChannelMatrix, e as enabledChannelsOf, i as inboxWire, m as mergeChoices, f as mergeStoredRow, g as messagesOf } from './wire-BG1kuoXX.js';
+export { L as LIVE_PUSH_TAG_PREFIX, a as LIVE_SUBJECT_KEY, b as LiveActivity, c as LiveActivityLane, d as LiveActivityStep, l as liveActivityLane, e as livePushTag } from './live-DYxEFO49.js';
 
 /** Thrown by `notify` when no generator is registered for the event type. */
 declare class UnknownNotificationTypeError extends Error {