@agent-native/core 0.140.0 → 0.141.0

package/dist/server/better-auth-instance.js

@@ -18,7 +18,6 @@ import { TEMPLATES } from "../cli/templates-meta.js";
 import { getDbExec, isPostgres } from "../db/client.js";
 import { getDialect, getDatabaseUrl, getDatabaseAuthToken, closePgliteClients, getPgliteClient, isPgliteUrl, loadPgliteDrizzle, pgPoolOptions, neonPoolMax, attachNeonPoolErrorLogger, sharedDbPool, onSharedDbPoolsClosed, onSharedDbPoolReplaced, } from "../db/client.js";
 import { ensureTableExists } from "../db/ddl-guard.js";
-import { CORE_RESET_PASSWORD_EMAIL_ID, CORE_VERIFY_SIGNUP_EMAIL_ID, } from "../email-catalog/system-emails.js";
 import { saveOAuthTokens } from "../oauth-tokens/store.js";
 import { acceptPendingInvitationsForEmail } from "../org/accept-pending.js";
 import { getAuthEmailForUserId, getRequiredAuthProviderForEmail, } from "../org/auth-policy.js";
@@ -919,14 +918,7 @@ async function createBetterAuthInstance(config) {
                     email: user.email,
                     resetUrl,
                 });
-                await sendEmail({
-                    to: user.email,
-                    subject,
-                    html,
-                    text,
-                    appSender,
-                    templateId: CORE_RESET_PASSWORD_EMAIL_ID,
-                });
+                await sendEmail({ to: user.email, subject, html, text, appSender });
             },
         },
         emailVerification: {
@@ -950,14 +942,7 @@ async function createBetterAuthInstance(config) {
                     email: user.email,
                     verifyUrl,
                 });
-                await sendEmail({
-                    to: user.email,
-                    subject,
-                    html,
-                    text,
-                    appSender,
-                    templateId: CORE_VERIFY_SIGNUP_EMAIL_ID,
-                });
+                await sendEmail({ to: user.email, subject, html, text, appSender });
             },
         },
         socialProviders,

package/dist/server/email.d.ts

@@ -58,15 +58,6 @@ export interface SendEmailArgs {
     references?: string;
     attachments?: EmailAttachment[];
     timeoutMs?: number;
-    /**
-     * Registered transactional email id (see `defineTransactionalEmail`), e.g.
-     * `calendar.booking-confirmed`. Tags the message at the provider so delivery
-     * and open metrics attribute to one email instead of to the whole account,
-     * and keys the row written to `email_log`. Omit for genuinely one-off sends.
-     */
-    templateId?: string;
-    /** App slug that owns the send. Defaults to the running app. */
-    app?: string;
 }
 export declare function isEmailConfigured(): Promise<boolean>;
 /**

package/dist/server/email.js

@@ -10,8 +10,6 @@
  * so the reset-password flow still works end-to-end for local development.
  */
 import { FAVICON_PNG_BASE64 } from "../assets/branding/favicon-base64.js";
-import { recordEmailSend } from "../email-catalog/log.js";
-import { getAppSlug } from "./app-name.js";
 import { resolveSecret } from "./credential-provider.js";
 import { AGENT_NATIVE_EMAIL_LOGO_CONTENT_ID } from "./email-template.js";
 let cachedAgentNativeLogo;
@@ -156,7 +154,7 @@ function resolveAppSender(configuredFrom, appSender) {
         replyTo: appSender.replyTo,
     };
 }
-async function deliverEmail(args, signal) {
+async function sendEmailWithSignal(args, signal) {
     const config = await resolveEmailTransport();
     signal?.throwIfAborted();
     const provider = config.provider;
@@ -208,7 +206,7 @@ async function deliverEmail(args, signal) {
             const body = await res.text().catch(() => "");
             throw new Error(`Resend error ${res.status}: ${body}`);
         }
-        return { provider, from };
+        return;
     }
     if (provider === "sendgrid") {
         const personalization = {
@@ -229,12 +227,6 @@ async function deliverEmail(args, signal) {
         };
         if (replyTo)
             sgPayload.reply_to = parseSendGridFrom(replyTo);
-        // Categories are how per-email delivery/open stats are attributed. Without
-        // them every send lands in one undifferentiated account-wide bucket, which
-        // is indistinguishable from an email that never sent.
-        const categories = [args.templateId, args.app ?? getAppSlug()].filter((value) => Boolean(value));
-        if (categories.length)
-            sgPayload.categories = categories;
         const sgHeaders = {};
         if (args.inReplyTo)
             sgHeaders["In-Reply-To"] = args.inReplyTo;
@@ -266,7 +258,7 @@ async function deliverEmail(args, signal) {
             const body = await res.text().catch(() => "");
             throw new Error(`SendGrid error ${res.status}: ${body}`);
         }
-        return { provider, from };
+        return;
     }
     // Dev fallback — no provider configured. Logging the full body exposes
     // reset tokens, so only do it outside production. In production, refuse
@@ -278,39 +270,6 @@ async function deliverEmail(args, signal) {
         `Save RESEND_API_KEY or SENDGRID_API_KEY in settings to send real emails.\n` +
         `---\nTo: ${args.to}\nFrom: ${from}\nSubject: ${args.subject}\n\n` +
         `${args.text || stripHtml(args.html)}\n---\n`);
-    return { provider, from };
-}
-/**
- * Deliver, then record the attempt. Recording lives here rather than in each
- * provider branch so a new transport cannot be added without being logged.
- */
-async function sendEmailWithSignal(args, signal) {
-    let outcome;
-    try {
-        outcome = await deliverEmail(args, signal);
-    }
-    catch (error) {
-        await recordEmailSend({
-            templateId: args.templateId,
-            app: args.app ?? getAppSlug() ?? "unknown",
-            recipient: args.to,
-            sender: outcome?.from ?? args.from ?? "unknown",
-            subject: args.subject,
-            status: "failed",
-            error: error instanceof Error ? error.message : String(error),
-            provider: outcome?.provider ?? "unknown",
-        });
-        throw error;
-    }
-    await recordEmailSend({
-        templateId: args.templateId,
-        app: args.app ?? getAppSlug() ?? "unknown",
-        recipient: args.to,
-        sender: outcome.from,
-        subject: args.subject,
-        status: "sent",
-        provider: outcome.provider,
-    });
 }
 export async function sendEmail(args) {
     const requestedTimeoutMs = Number(args.timeoutMs);

package/dist/server/index.d.ts

@@ -66,7 +66,6 @@ export { builderDesignSystemUrl, builderProjectBranchUrl, buildBuilderDesignSyst
 export { getBuilderBranchProjectId, isBuilderBranchingEnabled, requestBuilderBrowserConnection, resolveBuilderBranchProjectId, resolveIsBuilderBranchingEnabled, runBuilderAgent, type RunBuilderAgentResult, } from "./builder-browser.js";
 export { ensureFusionContainer, sendFusionBranchMessage, pushFusionBranch, reserveFusionHostingSlug, deployFusionProject, getFusionDeploys, getFusionBranchEditorUrl, getFusionHostingUrl, type FusionBranchRef, type EnsureFusionContainerResult, type SendFusionMessageResult, } from "./fusion-app.js";
 export { sendEmail, isEmailConfigured, getEmailProvider, type EmailAttachment, type EmailProvider, type SendEmailArgs, } from "./email.js";
-export { defineTransactionalEmail, listTransactionalEmails, getTransactionalEmail, renderTransactionalEmailPreview, type TransactionalEmailDefinition, type RegisteredTransactionalEmail, } from "../email-catalog/registry.js";
 export { notifyActivity, runActivityNotification, resolveActivityRecipients, type ActivityDeliveryFailure, type ActivityNotificationResult, type ActivityNotificationStatus, type NotifyActivityInput, type ResolveActivityRecipientsInput, } from "./activity-notifications.js";
 export { renderEmail, emailStrong, emailLink, type RenderEmailArgs, type RenderedEmail, type EmailCta, } from "./email-template.js";
 export { getAppProductionUrl, getFirstPartyProdUrl } from "./app-url.js";

package/dist/server/index.js

@@ -67,7 +67,6 @@ export { builderDesignSystemUrl, builderProjectBranchUrl, buildBuilderDesignSyst
 export { getBuilderBranchProjectId, isBuilderBranchingEnabled, requestBuilderBrowserConnection, resolveBuilderBranchProjectId, resolveIsBuilderBranchingEnabled, runBuilderAgent, } from "./builder-browser.js";
 export { ensureFusionContainer, sendFusionBranchMessage, pushFusionBranch, reserveFusionHostingSlug, deployFusionProject, getFusionDeploys, getFusionBranchEditorUrl, getFusionHostingUrl, } from "./fusion-app.js";
 export { sendEmail, isEmailConfigured, getEmailProvider, } from "./email.js";
-export { defineTransactionalEmail, listTransactionalEmails, getTransactionalEmail, renderTransactionalEmailPreview, } from "../email-catalog/registry.js";
 export { notifyActivity, runActivityNotification, resolveActivityRecipients, } from "./activity-notifications.js";
 export { renderEmail, emailStrong, emailLink, } from "./email-template.js";
 export { getAppProductionUrl, getFirstPartyProdUrl } from "./app-url.js";

package/dist/server/transcribe-voice.d.ts

@@ -20,7 +20,7 @@ export declare function createTranscribeVoiceHandler(): import("h3").EventHandle
     error: string;
     text?: undefined;
 } | {
-    error?: undefined;
     text: string;
+    error?: undefined;
 }>>;
 //# sourceMappingURL=transcribe-voice.d.ts.map

package/dist/templates/workspace-core/.agents/skills/authentication/SKILL.md

@@ -20,9 +20,10 @@ Auth is powered by **Better Auth** with account-first design. Every new user cre
 | Mode                      | Behavior                                                                                                                                 |
 | ------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- |
 | **Development (default)** | Real Better Auth — same flow as production. There is **no auth bypass**. On first run the framework auto-creates a throwaway dev account and signs you in without printing its credentials (disable with `AGENT_NATIVE_DISABLE_AUTO_DEV_ACCOUNT=1`), so you are not stuck at a login wall. `getSession()` returns the signed-in user or `null` — it never falls back to a sentinel identity. |
-| **Production (default)**  | Better Auth with email/password + social providers (Google, GitHub). Organizations built in.                                             |
+| **Production (default)**  | Magic-link-first Better Auth when outbound email is ready, with email/password fallback and social providers (Google, GitHub). Organizations built in. |
 | **`AUTH_MODE=local`**     | **Not** a browser auth bypass, and never returns `local@localhost`. It only affects CLI/agent identity: it lets `pnpm action` / the local agent loop auto-bind to the single real signed-in dev user from the `sessions` table (see `scripts/dev-session.ts`). Browser login is unchanged. |
-| **`AUTH_SKIP_EMAIL_VERIFICATION=1`** | QA/preview escape hatch for real email/password accounts. Signup skips email verification and does not send the signup verification email. Local dev/test skips verification by default; set `AUTH_SKIP_EMAIL_VERIFICATION=0` only when testing verification itself. Use `+qa` emails for test accounts. |
+| **`AUTH_SKIP_EMAIL_VERIFICATION=1`** | QA/preview escape hatch for password-fallback accounts. Signup skips email verification and does not send the signup verification email. Local dev/test skips verification by default; set `AUTH_SKIP_EMAIL_VERIFICATION=0` only when testing verification itself. It does not change magic-link delivery. Use `+qa` emails for test accounts. |
+| **`AUTH_MAGIC_LINK=0`** | Force the email/password fallback even when outbound email is ready. |
 | **`AUTH_DISABLED=true`** | Skip login/signup entirely — every request runs as `dev@local.test`. For local dev, cloud previews, and internal demos only; not for production with real users. |
 | **`ACCESS_TOKEN` / `ACCESS_TOKENS`** | Static bearer fallback for MCP/connect clients that cannot use OAuth. Not browser auth and never a token login page.         |
 | **Custom**                | Pass your own `getSession` to `autoMountAuth(app, { getSession })`.                                                                     |

package/docs/content/authentication.mdx

@@ -1,6 +1,6 @@
 ---
 title: "Authentication"
-description: "Better Auth integration with email/password, social providers, organizations, and MCP bearer credentials."
+description: "Magic-link-first Better Auth integration with password fallback, social providers, organizations, and MCP bearer credentials."
 ---
 
 # Authentication
@@ -11,7 +11,7 @@ Agent-native apps use [Better Auth](https://better-auth.com) for authentication
 
 Auth is configured automatically via `autoMountAuth(app)` in the auth server plugin. There are three modes:
 
-- **Default:** Better Auth with email/password + social providers. Onboarding page shown on first visit.
+- **Default:** Magic-link-first Better Auth when outbound email is ready, with email/password fallback and social providers. Onboarding page shown on first visit.
 - **Remote MCP OAuth:** Standard OAuth 2.1 for MCP hosts such as Claude Code and ChatGPT connectors.
 - **Custom:** Bring your own auth via `getSession` callback.
 
@@ -24,7 +24,7 @@ Auth is configured automatically via `autoMountAuth(app)` in the auth server plu
       <span class="diagram-pill accent">Default</span
       ><strong>Better Auth</strong
       ><small class="diagram-muted"
-        >email/password &middot; Google &middot; GitHub</small
+        >magic link / password &middot; Google &middot; GitHub</small
       >
     </div>
     <div class="diagram-card">
@@ -84,11 +84,11 @@ Auth is configured automatically via `autoMountAuth(app)` in the auth server plu
 
 The browser flow is the same Better Auth flow everywhere — there is **no dev auth bypass**, and `getSession()` never falls back to a `local@localhost` sentinel. What changes between environments is signup friction, not the login wall:
 
-| Environment      | First-load behavior                                                           | Email verification                              |
-| ---------------- | ----------------------------------------------------------------------------- | ----------------------------------------------- |
-| **Local dev**    | Auto-creates a throwaway dev account and signs you in (no login wall)         | Skipped by default (and when no email provider) |
-| **QA / preview** | Normal signup, but verification can be skipped so testers don't wait on email | Skip with `AUTH_SKIP_EMAIL_VERIFICATION=1`      |
-| **Production**   | Normal Better Auth signup/login                                               | Required (when an email provider is configured) |
+| Environment      | First-load behavior                                                                     | Email verification                                              |
+| ---------------- | --------------------------------------------------------------------------------------- | --------------------------------------------------------------- |
+| **Local dev**    | Auto-creates a throwaway dev account and signs you in (no login wall)                   | Skipped by default (and when no email provider)                 |
+| **QA / preview** | Normal signup, but verification can be skipped so testers don't wait on email           | Skip with `AUTH_SKIP_EMAIL_VERIFICATION=1`                      |
+| **Production**   | Magic-link signup/login when outbound email is ready; email/password fallback otherwise | Required for magic links (when an email provider is configured) |
 
 A few flags tune this; full details are in the [Environment Variables](#environment-variables) table:
 
@@ -104,9 +104,12 @@ A few flags tune this; full details are in the [Environment Variables](#environm
 
 ## Better Auth (Default) {#better-auth}
 
-By default, Better Auth powers authentication. It provides:
+By default, Better Auth powers authentication. When outbound email is ready,
+magic-link signup/login is the primary browser flow. Email/password remains
+the fallback when email is unavailable, or when `AUTH_MAGIC_LINK=0` is set. It
+provides:
 
-- Email/password registration and login
+- Magic-link registration and login, with email/password fallback
 - Social providers (Google, GitHub, and 35+ others)
 - Organizations with roles and invitations
 - JWT tokens for API and A2A access
@@ -115,7 +118,8 @@ By default, Better Auth powers authentication. It provides:
 Better Auth routes are mounted at `/_agent-native/auth/ba/*`. The framework also provides backward-compatible endpoints:
 
 - `GET /_agent-native/auth/session` — get current session
-- `POST /_agent-native/auth/login` — email/password login
+- `POST /_agent-native/auth/magic-link` — request a magic-link email
+- `POST /_agent-native/auth/login` — email/password fallback login
 - `POST /_agent-native/auth/register` — create account
 - `POST /_agent-native/auth/logout` — sign out
 
@@ -142,9 +146,10 @@ subdomains, set `AGENT_NATIVE_SHARE_COOKIE_DOMAIN=1` alongside
 
 ## QA Accounts {#qa-accounts}
 
-Local development and tests skip signup email verification by default, so you
-can create real email/password accounts without waiting on an inbox. To force
-verification locally while testing that flow, set `AUTH_SKIP_EMAIL_VERIFICATION=0`.
+Local development and tests skip password-signup email verification by default,
+so the email/password fallback can be tested without waiting on an inbox. To
+force verification locally while testing that fallback, set
+`AUTH_SKIP_EMAIL_VERIFICATION=0`.
 
 For hosted QA environments where testers need real accounts but should not wait
 on email delivery, set:
@@ -153,9 +158,9 @@ on email delivery, set:
 AUTH_SKIP_EMAIL_VERIFICATION=1
 ```
 
-When this flag is set, email/password signup does not require email
-verification and the signup verification email is not sent. Use it only for QA
-or preview environments, and name test accounts with a `+qa` address
+When this flag is set, password fallback signup does not require email
+verification and the signup verification email is not sent. It does not change
+magic-link delivery. Use it only for QA or preview environments, and name test accounts with a `+qa` address
 (`name+qa@example.com`) so they are easy to identify.
 
 ## Social Providers {#social-providers}
@@ -382,7 +387,7 @@ Templates with **public pages** (share links, embeds, marketing pages) often nee
 /_agent-native/sign-in?return=<same-origin-path>
 ```
 
-When an anonymous viewer hits this URL, the framework's login page is served. After a successful sign-in (any flow — token, email/password, or Google OAuth), the browser returns to `return`.
+When an anonymous viewer hits this URL, the framework's login page is served. After a successful sign-in (magic link, email/password, token, or Google OAuth), the browser returns to `return`.
 
 The `return` parameter is validated as a **same-origin path**. Network-path references (`//evil.com/...`), absolute URLs, `data:` / `javascript:` schemes, and embedded control characters all fall back to `/`. The validated path is reconstructed from the URL parser, not echoed back from the input.
 
@@ -429,7 +434,8 @@ The default `/_agent-native/google/auth-url` route does this automatically — o
 | Variable                                | Purpose                                                                                                                                      |
 | --------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------- |
 | `BETTER_AUTH_SECRET`                    | Signing key for Better Auth (auto-generated if not set)                                                                                      |
-| `AUTH_SKIP_EMAIL_VERIFICATION`          | Set to `1` in QA/preview environments to let email/password signups proceed without verification; local dev/test skips by default            |
+| `AUTH_SKIP_EMAIL_VERIFICATION`          | Set to `1` in QA/preview environments to let password-fallback signups proceed without verification; local dev/test skips by default         |
+| `AUTH_MAGIC_LINK`                       | Set to `0`, `false`, or `off` to force the email/password fallback even when outbound email is ready                                         |
 | `AUTH_DISABLED`                         | Set to `true` or `1` to skip login/signup; all requests run as one shared user (local dev/preview only — not for production with real users) |
 | `AGENT_NATIVE_DISABLE_AUTO_DEV_ACCOUNT` | Set to `1` to disable localhost auto-sign-in on a fresh dev database                                                                         |
 | `AUTH_MODE`                             | `local` resolves CLI/agent identity only (which dev user `pnpm action` runs as); never a browser login bypass                                |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.140.0",
+  "version": "0.141.0",
   "description": "Framework for agent-native application development — where AI agents and UI share SQL state, actions, and context",
   "homepage": "https://github.com/BuilderIO/agent-native#readme",
   "bugs": {

package/src/templates/workspace-core/.agents/skills/authentication/SKILL.md

@@ -20,9 +20,10 @@ Auth is powered by **Better Auth** with account-first design. Every new user cre
 | Mode                      | Behavior                                                                                                                                 |
 | ------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- |
 | **Development (default)** | Real Better Auth — same flow as production. There is **no auth bypass**. On first run the framework auto-creates a throwaway dev account and signs you in without printing its credentials (disable with `AGENT_NATIVE_DISABLE_AUTO_DEV_ACCOUNT=1`), so you are not stuck at a login wall. `getSession()` returns the signed-in user or `null` — it never falls back to a sentinel identity. |
-| **Production (default)**  | Better Auth with email/password + social providers (Google, GitHub). Organizations built in.                                             |
+| **Production (default)**  | Magic-link-first Better Auth when outbound email is ready, with email/password fallback and social providers (Google, GitHub). Organizations built in. |
 | **`AUTH_MODE=local`**     | **Not** a browser auth bypass, and never returns `local@localhost`. It only affects CLI/agent identity: it lets `pnpm action` / the local agent loop auto-bind to the single real signed-in dev user from the `sessions` table (see `scripts/dev-session.ts`). Browser login is unchanged. |
-| **`AUTH_SKIP_EMAIL_VERIFICATION=1`** | QA/preview escape hatch for real email/password accounts. Signup skips email verification and does not send the signup verification email. Local dev/test skips verification by default; set `AUTH_SKIP_EMAIL_VERIFICATION=0` only when testing verification itself. Use `+qa` emails for test accounts. |
+| **`AUTH_SKIP_EMAIL_VERIFICATION=1`** | QA/preview escape hatch for password-fallback accounts. Signup skips email verification and does not send the signup verification email. Local dev/test skips verification by default; set `AUTH_SKIP_EMAIL_VERIFICATION=0` only when testing verification itself. It does not change magic-link delivery. Use `+qa` emails for test accounts. |
+| **`AUTH_MAGIC_LINK=0`** | Force the email/password fallback even when outbound email is ready. |
 | **`AUTH_DISABLED=true`** | Skip login/signup entirely — every request runs as `dev@local.test`. For local dev, cloud previews, and internal demos only; not for production with real users. |
 | **`ACCESS_TOKEN` / `ACCESS_TOKENS`** | Static bearer fallback for MCP/connect clients that cannot use OAuth. Not browser auth and never a token login page.         |
 | **Custom**                | Pass your own `getSession` to `autoMountAuth(app, { getSession })`.                                                                     |

package/corpus/templates/analytics/server/lib/emails.ts

@@ -1,51 +0,0 @@
-/**
- * Catalog entries for the transactional emails Analytics sends.
- *
- * Registered from `server/plugins/transactional-emails.ts` so Dispatch can list
- * and preview them without the app having sent anything yet.
- */
-
-import { defineTransactionalEmail } from "@agent-native/core/email-catalog";
-import { emailStrong, renderEmail } from "@agent-native/core/server";
-
-export const ANALYTICS_DASHBOARD_REPORT_EMAIL_ID = "analytics.dashboard-report";
-
-let registered = false;
-
-export function registerAnalyticsEmails(): void {
-  if (registered) return;
-  registered = true;
-
-  defineTransactionalEmail({
-    id: ANALYTICS_DASHBOARD_REPORT_EMAIL_ID,
-    name: "Scheduled dashboard report",
-    trigger:
-      "A dashboard report subscription comes due and at least one panel produced usable data. A run where every queried panel failed throws instead of mailing, and a degraded run is skipped when the subscription asks for complete reports only.",
-    recipientLabel: "Subscription recipients",
-    recipient:
-      "The normalized recipient list stored on the subscription. One email per address, all carrying the same rendered snapshot.",
-    senderLabel: "Default sender",
-    sender:
-      "The configured default sender. This call site sets no `from`, `fromName`, `replyTo`, or `appSender`.",
-    // The real renderer runs every panel query and rasterizes charts, so it
-    // cannot back a preview that must stay offline. This shows the frame a
-    // recipient sees; the panel body is whatever that run produced.
-    preview: () => ({
-      subject: "Daily dashboard: Growth overview — 3/4/2025",
-      ...renderEmail({
-        preheader: "Your daily Growth overview report is ready.",
-        heading: "Daily dashboard: Growth overview",
-        paragraphs: [
-          `This report renders each panel of ${emailStrong("Growth overview")} as of the run time, with charts drawn server-side and attached inline.`,
-          "Panels that could not be queried are called out in place rather than dropped, so a partial report never reads as a complete one.",
-        ],
-        cta: {
-          label: "Open dashboard",
-          url: "https://example.com/dashboards/dash_sample",
-        },
-        footer:
-          "You received this because you are on the recipient list for this dashboard report.",
-      }),
-    }),
-  });
-}

package/corpus/templates/analytics/server/plugins/transactional-emails.ts

@@ -1,5 +0,0 @@
-import { registerAnalyticsEmails } from "../lib/emails";
-
-export default function registerTransactionalEmails(): void {
-  registerAnalyticsEmails();
-}

package/corpus/templates/calendar/server/lib/emails.ts

@@ -1,167 +0,0 @@
-/**
- * Catalog entries for the transactional emails Calendar sends.
- *
- * Registered from `server/plugins/transactional-emails.ts` so Dispatch can list
- * and preview them without the app having sent anything yet.
- */
-
-import { defineTransactionalEmail } from "@agent-native/core/email-catalog";
-
-import {
-  renderBookingCancelledEmail,
-  renderBookingCancelledHostEmail,
-  renderBookingConfirmedEmail,
-  renderBookingReceivedEmail,
-} from "./booking-emails.js";
-import { renderEventGuestNote } from "./event-guest-notifications.js";
-
-/** Obviously-fake sample data — these render in a preview pane, never send. */
-const SAMPLE_TITLE = "Intro call";
-const SAMPLE_WHEN = "Tuesday, March 4, 2025, 10:00 AM - 10:30 AM PST";
-const SAMPLE_HOST = "dana.hill@example.com";
-const SAMPLE_GUEST = "sam.rivera@example.com";
-const SAMPLE_GUEST_NAME = "Sam Rivera";
-const SAMPLE_MANAGE_URL = "https://example.com/book/dana/manage/sample-token";
-const SAMPLE_BOOK_AGAIN_URL = "https://example.com/book/dana/intro-call";
-const SAMPLE_MEETING_LINK = "https://meet.example.com/sample-intro-call";
-
-export const CALENDAR_BOOKING_CONFIRMED_EMAIL_ID = "calendar.booking-confirmed";
-export const CALENDAR_BOOKING_RECEIVED_EMAIL_ID = "calendar.booking-received";
-export const CALENDAR_BOOKING_CANCELLED_EMAIL_ID = "calendar.booking-cancelled";
-export const CALENDAR_BOOKING_CANCELLED_HOST_EMAIL_ID =
-  "calendar.booking-cancelled-host";
-export const CALENDAR_EVENT_UPDATE_NOTE_EMAIL_ID = "calendar.event-update-note";
-export const CALENDAR_EVENT_CANCELLATION_NOTE_EMAIL_ID =
-  "calendar.event-cancellation-note";
-
-let registered = false;
-
-export function registerCalendarEmails(): void {
-  if (registered) return;
-  registered = true;
-
-  defineTransactionalEmail({
-    id: CALENDAR_BOOKING_CONFIRMED_EMAIL_ID,
-    name: "Booking confirmed (guest)",
-    trigger:
-      "A guest completes a booking on a public `/book/{username}/{slug}` page and the booking row is created.",
-    recipientLabel: "Booking guest",
-    recipient:
-      "The email address the guest typed into the booking form (`booking.email`).",
-    senderLabel: "Default, reply-to host",
-    sender:
-      "The configured EMAIL_FROM, with reply-to set to the booking link owner's address.",
-    preview: () =>
-      renderBookingConfirmedEmail({
-        title: SAMPLE_TITLE,
-        when: SAMPLE_WHEN,
-        host: SAMPLE_HOST,
-        manageUrl: SAMPLE_MANAGE_URL,
-        meetingLink: SAMPLE_MEETING_LINK,
-      }),
-  });
-
-  defineTransactionalEmail({
-    id: CALENDAR_BOOKING_RECEIVED_EMAIL_ID,
-    name: "New booking (host)",
-    trigger:
-      "Sent alongside the guest confirmation, immediately after a public booking is created.",
-    recipientLabel: "Booking link owner",
-    recipient:
-      "The owner of the booking link, looked up from the link's slug at send time.",
-    senderLabel: "Default, reply-to guest",
-    sender:
-      "The configured EMAIL_FROM, with reply-to set to the guest so the host can reply directly.",
-    preview: () =>
-      renderBookingReceivedEmail({
-        title: SAMPLE_TITLE,
-        when: SAMPLE_WHEN,
-        attendeeName: SAMPLE_GUEST_NAME,
-        attendee: SAMPLE_GUEST,
-        manageUrl: SAMPLE_MANAGE_URL,
-        meetingLink: SAMPLE_MEETING_LINK,
-      }),
-  });
-
-  defineTransactionalEmail({
-    id: CALENDAR_BOOKING_CANCELLED_EMAIL_ID,
-    name: "Booking cancelled (guest)",
-    trigger:
-      "A booking that was not already cancelled is cancelled, either by the guest through the manage/cancel token link or by someone with access to the booking link.",
-    recipientLabel: "Booking guest",
-    recipient: "The guest address stored on the booking row.",
-    senderLabel: "Default, reply-to host",
-    sender:
-      "The configured EMAIL_FROM, with reply-to set to the host when a host address could be resolved from the link slug.",
-    preview: () =>
-      renderBookingCancelledEmail({
-        title: SAMPLE_TITLE,
-        when: SAMPLE_WHEN,
-        host: SAMPLE_HOST,
-        bookAgainUrl: SAMPLE_BOOK_AGAIN_URL,
-      }),
-  });
-
-  defineTransactionalEmail({
-    id: CALENDAR_BOOKING_CANCELLED_HOST_EMAIL_ID,
-    name: "Booking cancelled (host)",
-    trigger:
-      "Sent after the guest cancellation notice, and only when a host address could be resolved from the booking link slug.",
-    recipientLabel: "Booking link owner",
-    recipient: "The booking link owner's address.",
-    senderLabel: "Default, reply-to guest",
-    sender:
-      "The configured EMAIL_FROM, with reply-to set to the guest who was booked.",
-    preview: () =>
-      renderBookingCancelledHostEmail({
-        title: SAMPLE_TITLE,
-        when: SAMPLE_WHEN,
-        attendeeName: SAMPLE_GUEST_NAME,
-        attendee: SAMPLE_GUEST,
-      }),
-  });
-
-  defineTransactionalEmail({
-    id: CALENDAR_EVENT_UPDATE_NOTE_EMAIL_ID,
-    name: "Event update note",
-    trigger:
-      "`update-event` runs with a non-empty guest notification message. Google Calendar still sends its own update invite; this carries only the organizer's note.",
-    recipientLabel: "Event attendees",
-    recipient:
-      "Every attendee on the event with a syntactically valid address, excluding the organizer's own `self` attendee row. One email per address.",
-    senderLabel: "Default, reply-to organizer",
-    sender:
-      "The configured EMAIL_FROM, with reply-to set to the organizer running the update.",
-    preview: () =>
-      renderEventGuestNote({
-        title: "Design review",
-        organizer: "Dana Hill",
-        message: "Moving this an hour later so the whole team can join.",
-        when: SAMPLE_WHEN,
-        kind: "update",
-        htmlLink: "https://calendar.example.com/event/sample",
-      }),
-  });
-
-  defineTransactionalEmail({
-    id: CALENDAR_EVENT_CANCELLATION_NOTE_EMAIL_ID,
-    name: "Event cancellation note",
-    trigger:
-      "`delete-event` runs with guest notification requested and a non-empty message. Google Calendar sends the cancellation itself; this carries only the organizer's note.",
-    recipientLabel: "Event attendees",
-    recipient:
-      "Every attendee on the deleted event with a syntactically valid address, excluding the organizer's own `self` attendee row. One email per address.",
-    senderLabel: "Default, reply-to organizer",
-    sender:
-      "The configured EMAIL_FROM, with reply-to set to the organizer running the deletion.",
-    preview: () =>
-      renderEventGuestNote({
-        title: "Design review",
-        organizer: "Dana Hill",
-        message: "Cancelling this week — we will pick it up after the launch.",
-        when: SAMPLE_WHEN,
-        kind: "cancellation",
-        appliesTo: "all events in the series",
-      }),
-  });
-}

package/corpus/templates/calendar/server/plugins/transactional-emails.ts

@@ -1,5 +0,0 @@
-import { registerCalendarEmails } from "../lib/emails.js";
-
-export default function registerTransactionalEmails(): void {
-  registerCalendarEmails();
-}