@adminiumjs/manifest 0.3.47 → 0.3.49

package/dist/instance.d.ts

@@ -0,0 +1,133 @@
+/**
+ * `instance` — the part of a self-made app that is the whole deployment's.
+ *
+ * A dashboard is saved with its look: the name and mark on the menu, the
+ * colours, which languages are on, the wording somebody changed, the system
+ * emails somebody edited, and a few plain settings. None of it is an app's;
+ * all of it is applied to the target as a whole, only when the person
+ * installing ticks it (off by default), and only by someone who may change
+ * the server's settings.
+ *
+ * What it never carries: any part of a secret setting (the mail server, the
+ * assistant's key), people, keys or rows. Settings are an allow-list, so a
+ * setting not on it is refused by name, whatever it holds.
+ *
+ * Files (the logo, the favicon) are package files, named by their path and
+ * their sha256, so the target uses exactly the bytes that were saved.
+ *
+ * Read here; applied by the engine under its own guards (a diff of each
+ * edited email with every link host, one transaction, the values it replaced
+ * kept for an undo).
+ */
+import { z } from 'zod';
+/** A file of the package, by its relative path, with the sha256 of its bytes. */
+export declare const instanceFileSchema: z.ZodObject<{
+    file: z.ZodString;
+    sha256: z.ZodString;
+}, z.core.$strict>;
+/**
+ * The system emails Adminium sends itself, each of which a person may edit
+ * (the engine's `BUILTIN_EMAIL_TEMPLATE_KEYS`; a server test keeps the two
+ * lists the same).
+ */
+export declare const INSTANCE_SYSTEM_EMAIL_KEYS: readonly ["password-reset", "user-invite", "notification", "document-ready", "booking-confirmation", "sign-in-code", "email-changed", "sign-in-link", "details-deleted", "payment-link", "payment-receipt", "sign-up-confirm"];
+/**
+ * The settings `instance` may carry: plain, portable words of the business,
+ * none of them secret (a server test checks each against the registry).
+ */
+export declare const INSTANCE_SETTING_KEYS: readonly ["assistant.name", "privacy.businessName", "privacy.noticeUrl", "email.postalAddress"];
+export declare const instanceSchema: z.ZodObject<{
+    branding: z.ZodOptional<z.ZodObject<{
+        appName: z.ZodOptional<z.ZodString>;
+        showVersion: z.ZodOptional<z.ZodBoolean>;
+        theme: z.ZodOptional<z.ZodEnum<{
+            system: "system";
+            light: "light";
+            dark: "dark";
+        }>>;
+        accent: z.ZodOptional<z.ZodEnum<{
+            indigo: "indigo";
+            blue: "blue";
+            teal: "teal";
+            violet: "violet";
+            rose: "rose";
+            red: "red";
+            orange: "orange";
+            black: "black";
+        }>>;
+        density: z.ZodOptional<z.ZodEnum<{
+            comfortable: "comfortable";
+            compact: "compact";
+        }>>;
+        logo: z.ZodOptional<z.ZodObject<{
+            file: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>>;
+        favicon: z.ZodOptional<z.ZodObject<{
+            file: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    languages: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodArray<z.ZodString>;
+        default: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    wording: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        locale: z.ZodString;
+        namespace: z.ZodString;
+        key: z.ZodString;
+        value: z.ZodString;
+    }, z.core.$strict>>>;
+    systemEmails: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        key: z.ZodEnum<{
+            notification: "notification";
+            "booking-confirmation": "booking-confirmation";
+            "password-reset": "password-reset";
+            "user-invite": "user-invite";
+            "document-ready": "document-ready";
+            "sign-in-code": "sign-in-code";
+            "email-changed": "email-changed";
+            "sign-in-link": "sign-in-link";
+            "details-deleted": "details-deleted";
+            "payment-link": "payment-link";
+            "payment-receipt": "payment-receipt";
+            "sign-up-confirm": "sign-up-confirm";
+        }>;
+        locale: z.ZodString;
+        content: z.ZodObject<{
+            subject: z.ZodString;
+            preheader: z.ZodOptional<z.ZodString>;
+            blocks: z.ZodArray<z.ZodObject<{
+                block: z.ZodString;
+                id: z.ZodOptional<z.ZodString>;
+                label: z.ZodOptional<z.ZodString>;
+                data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+                showWhen: z.ZodOptional<z.ZodObject<{
+                    var: z.ZodString;
+                }, z.core.$strict>>;
+                otherwise: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+            footer: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>>;
+    settings: z.ZodOptional<z.ZodObject<{
+        'assistant.name': z.ZodOptional<z.ZodString>;
+        'privacy.businessName': z.ZodOptional<z.ZodString>;
+        'privacy.noticeUrl': z.ZodOptional<z.ZodURL>;
+        'email.postalAddress': z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type InstancePart = z.infer<typeof instanceSchema>;
+interface Issue {
+    path: (string | number)[];
+    message: string;
+}
+/** Everything wrong with an app's `instance` part that its shape alone cannot see. */
+export declare function instanceIssues(m: {
+    publisher: {
+        id: string;
+    };
+    instance?: InstancePart | undefined;
+}): Issue[];
+export {};
+//# sourceMappingURL=instance.d.ts.map

package/dist/instance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance.d.ts","sourceRoot":"","sources":["../src/instance.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,iFAAiF;AACjF,eAAO,MAAM,kBAAkB;;;kBASpB,CAAC;AAEZ;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,gOAa7B,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,qBAAqB,iGAAkG,CAAC;AAErI,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgE2G,CAAC;AACvI,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE1D,UAAU,KAAK;IACb,IAAI,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,CAAC,EAAE;IAAE,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;CAAE,GAAG,KAAK,EAAE,CA2B7G"}

package/dist/instance.js

@@ -0,0 +1,157 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+/**
+ * `instance` — the part of a self-made app that is the whole deployment's.
+ *
+ * A dashboard is saved with its look: the name and mark on the menu, the
+ * colours, which languages are on, the wording somebody changed, the system
+ * emails somebody edited, and a few plain settings. None of it is an app's;
+ * all of it is applied to the target as a whole, only when the person
+ * installing ticks it (off by default), and only by someone who may change
+ * the server's settings.
+ *
+ * What it never carries: any part of a secret setting (the mail server, the
+ * assistant's key), people, keys or rows. Settings are an allow-list, so a
+ * setting not on it is refused by name, whatever it holds.
+ *
+ * Files (the logo, the favicon) are package files, named by their path and
+ * their sha256, so the target uses exactly the bytes that were saved.
+ *
+ * Read here; applied by the engine under its own guards (a diff of each
+ * edited email with every link host, one transaction, the values it replaced
+ * kept for an undo).
+ */
+import { z } from 'zod';
+import { emailContentSchema } from './outbox.js';
+const LOCAL_PUBLISHER_ID = 'local';
+/** A language as Adminium keeps it (`en_US`, `pt_BR`). */
+const localeIdSchema = z.string().regex(/^[a-z]{2,3}(_[A-Za-z0-9]{2,8}){0,2}$/, 'a language id such as "en_US"');
+/** A file of the package, by its relative path, with the sha256 of its bytes. */
+export const instanceFileSchema = z
+    .object({
+    file: z
+        .string()
+        .min(1)
+        .max(200)
+        .regex(/^(?!\/)(?!.*(?:^|\/)\.\.?(?:\/|$))[A-Za-z0-9._/-]+$/, 'a file of the package, by its relative path'),
+    sha256: z.string().regex(/^[0-9a-f]{64}$/, 'the sha256 of the file, in lower-case hex'),
+})
+    .strict();
+/**
+ * The system emails Adminium sends itself, each of which a person may edit
+ * (the engine's `BUILTIN_EMAIL_TEMPLATE_KEYS`; a server test keeps the two
+ * lists the same).
+ */
+export const INSTANCE_SYSTEM_EMAIL_KEYS = [
+    'password-reset',
+    'user-invite',
+    'notification',
+    'document-ready',
+    'booking-confirmation',
+    'sign-in-code',
+    'email-changed',
+    'sign-in-link',
+    'details-deleted',
+    'payment-link',
+    'payment-receipt',
+    'sign-up-confirm',
+];
+/**
+ * The settings `instance` may carry: plain, portable words of the business,
+ * none of them secret (a server test checks each against the registry).
+ */
+export const INSTANCE_SETTING_KEYS = ['assistant.name', 'privacy.businessName', 'privacy.noticeUrl', 'email.postalAddress'];
+export const instanceSchema = z
+    .object({
+    /** The menu's name and mark, and the look everybody starts with. */
+    branding: z
+        .object({
+        appName: z.string().min(1).max(60).optional(),
+        showVersion: z.boolean().optional(),
+        theme: z.enum(['light', 'dark', 'system']).optional(),
+        accent: z.enum(['indigo', 'blue', 'teal', 'violet', 'rose', 'red', 'orange', 'black']).optional(),
+        density: z.enum(['comfortable', 'compact']).optional(),
+        logo: instanceFileSchema.optional(),
+        favicon: instanceFileSchema.optional(),
+    })
+        .strict()
+        .optional(),
+    /** The languages switched on, and the one everybody starts in. */
+    languages: z
+        .object({
+        enabled: z.array(localeIdSchema).min(1).max(40),
+        default: localeIdSchema.optional(),
+    })
+        .strict()
+        .optional(),
+    /** Words of the interface somebody changed: a blank value is a word left out on purpose. */
+    wording: z
+        .array(z
+        .object({
+        locale: localeIdSchema,
+        namespace: z.string().regex(/^[a-z][A-Za-z0-9-]{0,39}$/, 'a wording namespace'),
+        key: z.string().regex(/^[A-Za-z0-9_.-]{1,200}$/, 'a wording key'),
+        value: z.string().max(4000),
+    })
+        .strict())
+        .min(1)
+        .max(5000)
+        .optional(),
+    /** System emails somebody edited, one language each. */
+    systemEmails: z
+        .array(z
+        .object({
+        key: z.enum(INSTANCE_SYSTEM_EMAIL_KEYS),
+        locale: localeIdSchema,
+        content: emailContentSchema,
+    })
+        .strict())
+        .min(1)
+        .max(INSTANCE_SYSTEM_EMAIL_KEYS.length * 40)
+        .optional(),
+    /** Plain settings of the business, from the allow-list only. */
+    settings: z
+        .object({
+        'assistant.name': z.string().min(1).max(40).optional(),
+        'privacy.businessName': z.string().trim().min(1).max(120).optional(),
+        'privacy.noticeUrl': z.url({ protocol: /^https$/ }).max(500).optional(),
+        'email.postalAddress': z.string().trim().min(1).max(300).optional(),
+    })
+        .strict()
+        .optional(),
+})
+    .strict()
+    .refine((instance) => Object.values(instance).some((part) => part !== undefined), { message: 'an instance part carries something' });
+/** Everything wrong with an app's `instance` part that its shape alone cannot see. */
+export function instanceIssues(m) {
+    const out = [];
+    const part = m.instance;
+    if (part === undefined)
+        return out;
+    if (m.publisher.id !== LOCAL_PUBLISHER_ID) {
+        out.push({ path: ['instance'], message: `"instance" is carried only by a self-made app (publisher "${LOCAL_PUBLISHER_ID}")` });
+    }
+    const languages = part.languages;
+    if (languages !== undefined) {
+        if (new Set(languages.enabled).size !== languages.enabled.length)
+            out.push({ path: ['instance', 'languages', 'enabled'], message: 'a language is named once' });
+        if (languages.default !== undefined && !languages.enabled.includes(languages.default)) {
+            out.push({ path: ['instance', 'languages', 'default'], message: `"${languages.default}" is not one of the languages switched on` });
+        }
+    }
+    const words = new Set();
+    (part.wording ?? []).forEach((word, w) => {
+        const id = `${word.locale}\u0000${word.namespace}\u0000${word.key}`;
+        if (words.has(id))
+            out.push({ path: ['instance', 'wording', w], message: `"${word.namespace}.${word.key}" in ${word.locale} is changed twice` });
+        words.add(id);
+    });
+    const emails = new Set();
+    (part.systemEmails ?? []).forEach((email, e) => {
+        const id = `${email.key}\u0000${email.locale}`;
+        if (emails.has(id))
+            out.push({ path: ['instance', 'systemEmails', e], message: `"${email.key}" in ${email.locale} is edited twice` });
+        emails.add(id);
+    });
+    return out;
+}
+//# sourceMappingURL=instance.js.map

package/dist/instance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance.js","sourceRoot":"","sources":["../src/instance.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC,0DAA0D;AAC1D,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,sCAAsC,EAAE,+BAA+B,CAAC,CAAC;AAEjH,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,qDAAqD,EAAE,6CAA6C,CAAC;IAC9G,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,2CAA2C,CAAC;CACxF,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,gBAAgB;IAChB,aAAa;IACb,cAAc;IACd,gBAAgB;IAChB,sBAAsB;IACtB,cAAc;IACd,eAAe;IACf,cAAc;IACd,iBAAiB;IACjB,cAAc;IACd,iBAAiB;IACjB,iBAAiB;CACT,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,gBAAgB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,qBAAqB,CAAU,CAAC;AAErI,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,oEAAoE;IACpE,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC7C,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACnC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;QACrD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;QACjG,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;QACtD,IAAI,EAAE,kBAAkB,CAAC,QAAQ,EAAE;QACnC,OAAO,EAAE,kBAAkB,CAAC,QAAQ,EAAE;KACvC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,kEAAkE;IAClE,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,4FAA4F;IAC5F,OAAO,EAAE,CAAC;SACP,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,MAAM,EAAE,cAAc;QACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,EAAE,qBAAqB,CAAC;QAC/E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,EAAE,eAAe,CAAC;QACjE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;KAC5B,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,EAAE;IACb,wDAAwD;IACxD,YAAY,EAAE,CAAC;SACZ,KAAK,CACJ,CAAC;SACE,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC;QACvC,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,kBAAkB;KAC5B,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,0BAA0B,CAAC,MAAM,GAAG,EAAE,CAAC;SAC3C,QAAQ,EAAE;IACb,gEAAgE;IAChE,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACtD,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACpE,mBAAmB,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACvE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACpE,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;AAQvI,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,CAAqE;IAClG,MAAM,GAAG,GAAY,EAAE,CAAC;IACxB,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC;IACxB,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACnC,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,kBAAkB,EAAE,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,6DAA6D,kBAAkB,IAAI,EAAE,CAAC,CAAC;IACjI,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,OAAO,CAAC,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAChK,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,SAAS,CAAC,OAAO,2CAA2C,EAAE,CAAC,CAAC;QACtI,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACvC,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,SAAS,IAAI,CAAC,SAAS,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC;QACpE,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC;QACjJ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,EAAE,GAAG,GAAG,KAAK,CAAC,GAAG,SAAS,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,KAAK,CAAC,GAAG,QAAQ,KAAK,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC;QACtI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/outbox.d.ts

@@ -846,6 +846,52 @@ export declare const outboxSchema: z.ZodObject<{
     }, z.core.$strict>]>>>;
 }, z.core.$strict>;
 export type Outbox = z.infer<typeof outboxSchema>;
+/** One language of a mail: its subject, blocks and footer. */
+export declare const emailContentSchema: z.ZodObject<{
+    subject: z.ZodString;
+    preheader: z.ZodOptional<z.ZodString>;
+    blocks: z.ZodArray<z.ZodObject<{
+        block: z.ZodString;
+        id: z.ZodOptional<z.ZodString>;
+        label: z.ZodOptional<z.ZodString>;
+        data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        showWhen: z.ZodOptional<z.ZodObject<{
+            var: z.ZodString;
+        }, z.core.$strict>>;
+        otherwise: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    footer: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** The marks a mail's brand may show: one of the twelve the renderer ships, or the workspace's logo (the template store's `emailMarkSchema`). */
+export declare const EMAIL_BRAND_MARKS: readonly ["hexagon", "circle", "square", "triangle", "gem", "zap", "flame", "leaf", "star", "heart", "command", "box", "logo"];
+/** A mail's own brand, as the template store keeps it. Its sender is checked against the configured senders when it sends. */
+export declare const emailTemplateBrandSchema: z.ZodObject<{
+    name: z.ZodString;
+    mark: z.ZodEnum<{
+        hexagon: "hexagon";
+        circle: "circle";
+        square: "square";
+        triangle: "triangle";
+        gem: "gem";
+        zap: "zap";
+        flame: "flame";
+        leaf: "leaf";
+        star: "star";
+        heart: "heart";
+        command: "command";
+        box: "box";
+        logo: "logo";
+    }>;
+    accent: z.ZodString;
+    fromName: z.ZodString;
+    fromEmail: z.ZodString;
+}, z.core.$strict>;
+/** The most files one mail carries. */
+export declare const EMAIL_ATTACHMENTS_MAX = 20;
+/** A file of the app's package a mail carries: a relative path, never out of the package. */
+export declare const emailTemplateAttachmentSchema: z.ZodObject<{
+    file: z.ZodString;
+}, z.core.$strict>;
 export declare const emailTemplateSchema: z.ZodObject<{
     key: z.ZodString;
     name: z.ZodUnion<readonly [z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>]>;
@@ -854,6 +900,39 @@ export declare const emailTemplateSchema: z.ZodObject<{
         link: z.ZodString;
         optional: z.ZodOptional<z.ZodLiteral<true>>;
     }, z.core.$strict>>;
+    kind: z.ZodOptional<z.ZodEnum<{
+        template: "template";
+        campaign: "campaign";
+    }>>;
+    category: z.ZodOptional<z.ZodEnum<{
+        marketing: "marketing";
+        transactional: "transactional";
+        lifecycle: "lifecycle";
+    }>>;
+    brand: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        mark: z.ZodEnum<{
+            hexagon: "hexagon";
+            circle: "circle";
+            square: "square";
+            triangle: "triangle";
+            gem: "gem";
+            zap: "zap";
+            flame: "flame";
+            leaf: "leaf";
+            star: "star";
+            heart: "heart";
+            command: "command";
+            box: "box";
+            logo: "logo";
+        }>;
+        accent: z.ZodString;
+        fromName: z.ZodString;
+        fromEmail: z.ZodString;
+    }, z.core.$strict>>;
+    attachments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        file: z.ZodString;
+    }, z.core.$strict>>>;
     vars: z.ZodOptional<z.ZodArray<z.ZodString>>;
     locales: z.ZodRecord<z.ZodString, z.ZodObject<{
         subject: z.ZodString;

package/dist/outbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"outbox.d.ts","sourceRoot":"","sources":["../src/outbox.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAI/C,OAAO,EAAkB,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,EAQL,KAAK,cAAc,EAEnB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAEnB,+DAA+D;AAC/D,eAAO,MAAM,eAAe,kDAAmD,CAAC;AAEhF,mEAAmE;AACnE,eAAO,MAAM,WAAW,SAAS,CAAC;AAElC,kGAAkG;AAClG,eAAO,MAAM,mBAAmB,uEAAwE,CAAC;AAuJzG,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBA+E/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AA4BlE,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAwGd,CAAC;AACZ,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAiDlD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;kBAgCrB,CAAC;AACZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMhE;;;;GAIG;AACH,eAAO,MAAM,cAAc,mHAAoH,CAAC;AAEhJ,+FAA+F;AAC/F,wBAAgB,cAAc,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CAE3E;AAED,gEAAgE;AAChE,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,qGAAqG;AACrG,eAAO,MAAM,cAAc,OAAO,CAAC;AACnC,mHAAmH;AACnH,eAAO,MAAM,eAAe,mBAAmB,CAAC;AAChD,+HAA+H;AAC/H,eAAO,MAAM,SAAS,aAAa,CAAC;AACpC,eAAO,MAAM,YAAY,gBAAgB,CAAC;AAE1C,mHAAmH;AACnH,eAAO,MAAM,cAAc;;;;;;;;;;;;CAa2B,CAAC;AAEvD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,IAAI,EAAE,cAAc,GAAG,WAAW,GAAG,MAAM,GAAG,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,CAYzH;AAED,oGAAoG;AACpG,wBAAgB,YAAY,CAC1B,CAAC,EAAE;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,cAAc,CAAC,EAAE,SAAS,aAAa,EAAE,GAAG,SAAS,CAAC;IACtD,MAAM,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAChC,oHAAoH;IACpH,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,EACxC,KAAK,EAAE,UAAU,GAChB,cAAc,EAAE,CA0blB;AA0FD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAAyD,CAAC;AAC1F,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAA2D,CAAC;AAG3G,eAAO,MAAM,qBAAqB,QAAkB,CAAC;AA8PrD,wEAAwE;AACxE,eAAO,MAAM,cAAc,IAAI,CAAC;AAEhC;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAA;CAAE,GAAG,OAAO,CAIlL;AAED,oFAAoF;AACpF,eAAO,MAAM,YAAY,YAAY,CAAC;AAEtC;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,SAAK,GAAG,MAAM,CAO/D;AAED,sFAAsF;AACtF,wBAAgB,YAAY,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAA;CAAE,GAAG,OAAO,CAEtG;AAED,gIAAgI;AAChI,eAAO,MAAM,eAAe,SAAS,CAAC;AAEtC,0KAA0K;AAC1K,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAA;CAAE,GAAG,SAAS,MAAM,EAAE,CAKrJ;AAED,+EAA+E;AAC/E,eAAO,MAAM,oBAAoB,gBAAgB,CAAC"}
+{"version":3,"file":"outbox.d.ts","sourceRoot":"","sources":["../src/outbox.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAI/C,OAAO,EAAkB,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,EAQL,KAAK,cAAc,EAEnB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAEnB,+DAA+D;AAC/D,eAAO,MAAM,eAAe,kDAAmD,CAAC;AAEhF,mEAAmE;AACnE,eAAO,MAAM,WAAW,SAAS,CAAC;AAElC,kGAAkG;AAClG,eAAO,MAAM,mBAAmB,uEAAwE,CAAC;AAuJzG,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBA+E/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AA4BlE,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAwGd,CAAC;AACZ,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AA0BlD,8DAA8D;AAC9D,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;kBAOpB,CAAC;AAgBZ,iJAAiJ;AACjJ,eAAO,MAAM,iBAAiB,gIAAiI,CAAC;AAEhK,8HAA8H;AAC9H,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;kBAQ1B,CAAC;AAEZ,uCAAuC;AACvC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,6FAA6F;AAC7F,eAAO,MAAM,6BAA6B;;kBAQ/B,CAAC;AAEZ,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAwCrB,CAAC;AACZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAMhE;;;;GAIG;AACH,eAAO,MAAM,cAAc,mHAAoH,CAAC;AAEhJ,+FAA+F;AAC/F,wBAAgB,cAAc,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CAE3E;AAED,gEAAgE;AAChE,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,qGAAqG;AACrG,eAAO,MAAM,cAAc,OAAO,CAAC;AACnC,mHAAmH;AACnH,eAAO,MAAM,eAAe,mBAAmB,CAAC;AAChD,+HAA+H;AAC/H,eAAO,MAAM,SAAS,aAAa,CAAC;AACpC,eAAO,MAAM,YAAY,gBAAgB,CAAC;AAE1C,mHAAmH;AACnH,eAAO,MAAM,cAAc;;;;;;;;;;;;CAa2B,CAAC;AAEvD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,IAAI,EAAE,cAAc,GAAG,WAAW,GAAG,MAAM,GAAG,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,CAYzH;AAED,oGAAoG;AACpG,wBAAgB,YAAY,CAC1B,CAAC,EAAE;IACD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,cAAc,CAAC,EAAE,SAAS,aAAa,EAAE,GAAG,SAAS,CAAC;IACtD,MAAM,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAChC,oHAAoH;IACpH,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,EACxC,KAAK,EAAE,UAAU,GAChB,cAAc,EAAE,CA4blB;AA0FD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAAyD,CAAC;AAC1F,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAA2D,CAAC;AAG3G,eAAO,MAAM,qBAAqB,QAAkB,CAAC;AA8PrD,wEAAwE;AACxE,eAAO,MAAM,cAAc,IAAI,CAAC;AAEhC;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAA;CAAE,GAAG,OAAO,CAIlL;AAED,oFAAoF;AACpF,eAAO,MAAM,YAAY,YAAY,CAAC;AAEtC;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,SAAK,GAAG,MAAM,CAO/D;AAED,sFAAsF;AACtF,wBAAgB,YAAY,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAA;CAAE,GAAG,OAAO,CAEtG;AAED,gIAAgI;AAChI,eAAO,MAAM,eAAe,SAAS,CAAC;AAEtC,0KAA0K;AAC1K,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG;IAAE,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAA;CAAE,GAAG,SAAS,MAAM,EAAE,CAKrJ;AAED,+EAA+E;AAC/E,eAAO,MAAM,oBAAoB,gBAAgB,CAAC"}

package/dist/outbox.js

@@ -414,7 +414,8 @@ const emailBlockSchema = z
     // Words nothing would ever print are a mistake, said at the install and not found in a sent mail.
     .refine((block) => block.otherwise === undefined || block.showWhen !== undefined, { message: '"otherwise" is what a block says when its "showWhen" value is missing: it needs a "showWhen"', path: ['otherwise'] })
     .refine((block) => block.otherwise === undefined || OTHERWISE_BLOCKS.includes(block.block), { message: 'only a text or a heading block can say other words ("otherwise")', path: ['otherwise'] });
-const emailContentSchema = z
+/** One language of a mail: its subject, blocks and footer. */
+export const emailContentSchema = z
     .object({
     subject: z.string().min(1).max(200),
     preheader: z.string().min(1).max(200).optional(),
@@ -432,6 +433,30 @@ const emailContentSchema = z
 const templateVariableSchema = z
     .string()
     .regex(/^(?:appName|addOn\.[a-z][a-z0-9-]*\.[A-Za-z][A-Za-z0-9_]*|[a-z_][a-z0-9_]*(?:\.[a-z_][a-z0-9_]*)*)$/, 'a variable such as patient.name or appName');
+/** The marks a mail's brand may show: one of the twelve the renderer ships, or the workspace's logo (the template store's `emailMarkSchema`). */
+export const EMAIL_BRAND_MARKS = ['hexagon', 'circle', 'square', 'triangle', 'gem', 'zap', 'flame', 'leaf', 'star', 'heart', 'command', 'box', 'logo'];
+/** A mail's own brand, as the template store keeps it. Its sender is checked against the configured senders when it sends. */
+export const emailTemplateBrandSchema = z
+    .object({
+    name: z.string().max(80),
+    mark: z.enum(EMAIL_BRAND_MARKS),
+    accent: z.string().regex(/^#[0-9a-fA-F]{6}$/, 'a six-digit hex colour'),
+    fromName: z.string().max(120),
+    fromEmail: z.string().max(320),
+})
+    .strict();
+/** The most files one mail carries. */
+export const EMAIL_ATTACHMENTS_MAX = 20;
+/** A file of the app's package a mail carries: a relative path, never out of the package. */
+export const emailTemplateAttachmentSchema = z
+    .object({
+    file: z
+        .string()
+        .min(1)
+        .max(200)
+        .regex(/^(?!\/)(?!.*(?:^|\/)\.\.?(?:\/|$))[A-Za-z0-9._/-]+$/, 'a file of the package, by its relative path'),
+})
+    .strict();
 export const emailTemplateSchema = z
     .object({
     /** `<app key>-<name>`: an app names only its own templates. */
@@ -457,6 +482,14 @@ export const emailTemplateSchema = z
     })
         .strict()
         .optional(),
+    /** A `template` an outbox or a rule sends (the default), or a `campaign` the owner sends to an audience. */
+    kind: z.enum(['template', 'campaign']).optional(),
+    /** What the mail is for: `transactional` (the default), `lifecycle` or `marketing`. */
+    category: z.enum(['transactional', 'lifecycle', 'marketing']).optional(),
+    /** The mail's own name, mark, colour and sender, in place of the workspace's. */
+    brand: emailTemplateBrandSchema.optional(),
+    /** Files of the package the mail carries, each by its path in the package (`emails/terms.pdf`). */
+    attachments: z.array(emailTemplateAttachmentSchema).min(1).max(EMAIL_ATTACHMENTS_MAX).optional(),
     /** The variables it reads, for the editor's list. */
     vars: z.array(templateVariableSchema).max(60).optional(),
     /** The template in each language it ships, US English always among them. */
@@ -592,7 +625,9 @@ export function outboxIssues(m, index) {
         };
         for (const rule of m.automations ?? [])
             collect(rule.graph);
-        const unsent = [...templates].filter((key) => !byRules.has(key));
+        // A campaign is sent by its owner, to an audience: nothing in the app sends it.
+        const campaigns = new Set((m.emailTemplates ?? []).filter((template) => template.kind === 'campaign').map((template) => template.key));
+        const unsent = [...templates].filter((key) => !byRules.has(key) && !campaigns.has(key));
         if (unsent.length > 0)
             out.push({ path: ['emailTemplates'], message: `templates are sent through an outbox or by a rule's step, and nothing sends ${unsent.map((key) => `"${key}"`).join(', ')}: this app declares no outbox` });
         return out;