@aglyn/shared-util-email 1.0.0-beta.143

package/src/lib/system-email-catalog.js

@@ -0,0 +1,828 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * Origins used as merge-token SAMPLE values in the staff email designer
+ * (AGL-2202).
+ *
+ * These are never sent — they render in the template preview so an author can
+ * see what `{{console.url}}` will become. That still made them wrong on a
+ * self-host install: the preview showed Aglyn's console as the example for a
+ * link that will resolve to the operator's, which is exactly the sort of
+ * quiet mis-teaching that ends up copied into a hand-written template.
+ *
+ * Read from the environment rather than through `@aglyn/aglyn`'s
+ * `platform-brand` / `constants`: `shared-util-email` is tagged `scope:shared`
+ * and `@nx/enforce-module-boundaries` refuses the edge. Same defaults, so a
+ * deployment that configures nothing sees exactly what it saw before.
+ */ const SAMPLE_CONSOLE_ORIGIN = (process.env.NEXT_PUBLIC_CONSOLE_URL || '').trim().replace(/\/+$/, '') || 'https://app.aglyn.com';
+/**
+ * Mirrors `PLATFORM_SUPPORT_URL`'s precedence, including the step that makes
+ * the operator identity sufficient on its own: a configured support URL, else
+ * the operator's support mailbox as a `mailto:`, else ours.
+ */ const SAMPLE_SUPPORT_URL = (process.env.NEXT_PUBLIC_PLATFORM_SUPPORT_URL || '').trim() || ((process.env.NEXT_PUBLIC_OPERATOR_SUPPORT_EMAIL || '').trim() ? `mailto:${(process.env.NEXT_PUBLIC_OPERATOR_SUPPORT_EMAIL || '').trim()}` : 'https://aglyn.com/support');
+// Deep import, NOT the barrel (AGL-1151): `@aglyn/shared-data-enums` re-exports
+// `firebase-auth`, whose `AuthErrorCodes` is a VALUE import of `firebase/auth`.
+// This module is reachable from the email plugin's site half, which a PUBLISHED
+// tenant page loads, so the barrel put the Firebase auth client into that
+// page's chunks for one brand constant.
+import { BRAND } from "@aglyn/shared-data-enums/aglyn";
+import { EMAIL_NODE_ROOT_ID } from "./email-render.js";
+/**
+ * Every system email Aglyn sends.
+ *
+ * Deliberately **code-defined and fixed**: staff edit the system emails that
+ * exist, they do not create or delete them. Adding one is a code change,
+ * which is what keeps this list from drifting into advertising an email the
+ * product never actually sends — the failure mode a Firestore-backed list
+ * would have.
+ *
+ * The staff page renders from this registry, not from Firestore, so an email
+ * with no template designed yet still appears (as "Using default").
+ */ /**
+ * Brand tokens EVERY system email resolves (AGL-2139).
+ *
+ * White-label used to invert precisely when staff published a template: the
+ * designed template wins over each sender's branded fallback, and the copy
+ * here hard-coded "Aglyn". Nor was there anything to design against — the
+ * merge maps carried `org.name`, `invite.role`, `signInUrl` and friends and
+ * nothing about the brand, while `blankUnresolvedTokens` DELETES any token
+ * the caller did not supply, so a designer who typed `{{brand.productName}}`
+ * would have shipped an email with a hole in the sentence.
+ *
+ * Declared once and appended to every template's own list rather than copied
+ * into each: 13 hand-maintained copies is how the token list falls behind the
+ * copy, and the editor renders this list as the palette a designer picks
+ * from — a token missing here is a token nobody knows exists.
+ *
+ * The samples are the DEPLOYMENT's own values (`BRAND.ORG_NAME`, AGL-2319),
+ * because that is what an unbranded org genuinely renders — on a self-host
+ * install a hardcoded "Aglyn" would preview a brand that appears nowhere in
+ * the mail the designer is editing.
+ */ export const BRAND_MERGE_TOKENS = [
+    {
+        name: 'brand.productName',
+        description: "The sender's product name — the org's own on white-label",
+        sample: BRAND.ORG_NAME
+    },
+    {
+        name: 'brand.fromName',
+        description: 'Sender display name the mail is delivered under',
+        sample: BRAND.ORG_NAME
+    },
+    {
+        name: 'brand.supportUrl',
+        description: 'Where the recipient should go for help',
+        sample: SAMPLE_SUPPORT_URL
+    }
+];
+// NOT declared: a `brand.logoUrl` token. The logo is STRUCTURAL — the
+// renderer emits it as a header row above the designed body, or emits
+// nothing — so a designer never places it, and a palette entry for it would
+// need a sample URL that a staff test-send would render as a broken image.
+// The three tokens above are the ones that belong in copy.
+const BASE_SYSTEM_EMAIL_TEMPLATES = [
+    {
+        key: 'org-invite',
+        name: 'Organization invite',
+        description: 'Sent when an admin invites someone to an organization from the ' + 'Team page.',
+        deliveredBy: 'resend',
+        defaultSubject: "You've been invited to {{org.name}} on {{brand.productName}}",
+        mergeTokens: [
+            {
+                name: 'org.name',
+                description: 'Name of the inviting organization',
+                sample: 'Test Org'
+            },
+            {
+                name: 'invite.role',
+                description: 'Role the person is invited as',
+                sample: 'editor'
+            },
+            {
+                name: 'signInUrl',
+                description: 'Console URL to sign in and accept',
+                sample: SAMPLE_CONSOLE_ORIGIN
+            }
+        ],
+        // Mirrors the fallbackText in invites/route.ts.
+        defaultBody: [
+            {
+                block: 'text',
+                text: "You've been invited to join {{org.name}} as {{invite.role}}.",
+                variant: 'body'
+            },
+            {
+                block: 'text',
+                text: 'Sign in with this email address and accept the invite from ' + 'your dashboard.',
+                variant: 'body'
+            },
+            {
+                block: 'button',
+                label: 'Sign in',
+                href: '{{signInUrl}}'
+            }
+        ],
+        source: 'apps/console/app/api/orgs/invites/route.ts'
+    },
+    {
+        key: 'usage-summary',
+        name: 'Monthly usage summary',
+        description: 'Monthly per-organization usage and metered-cost summary, sent by ' + 'the scheduled job.',
+        deliveredBy: 'resend',
+        defaultSubject: 'Your {{brand.productName}} usage summary for {{month}}',
+        mergeTokens: [
+            {
+                name: 'month',
+                description: 'Billing month as YYYY-MM',
+                sample: '2026-06'
+            },
+            {
+                name: 'org.name',
+                description: 'Organization the summary is for',
+                sample: 'Test Org'
+            },
+            {
+                name: 'usage.summary',
+                description: 'Pre-formatted usage lines',
+                sample: 'Page views: 12,400'
+            }
+        ],
+        // Mirrors the summary lines assembled in usage-email/route.ts.
+        defaultBody: [
+            {
+                block: 'text',
+                text: 'Usage summary for {{org.name}}',
+                variant: 'heading'
+            },
+            {
+                block: 'text',
+                text: 'Here is your {{brand.productName}} usage summary for {{month}}.',
+                variant: 'body'
+            },
+            {
+                block: 'text',
+                text: '{{usage.summary}}',
+                variant: 'body'
+            }
+        ],
+        source: 'apps/console/app/api/billing/usage-email/route.ts'
+    },
+    {
+        key: 'erasure-hold-alert',
+        name: 'Erasure hold staff alert',
+        description: 'Internal alert to STAFF_ALERT_EMAIL when GDPR erasure requests ' + 'pass their 7-day hold.',
+        deliveredBy: 'resend',
+        defaultSubject: '{{count}} erasure request(s) past the 7-day hold',
+        mergeTokens: [
+            {
+                name: 'count',
+                description: 'How many organizations are past the hold',
+                sample: '3'
+            },
+            {
+                name: 'orgs.list',
+                description: 'The organizations, one per line',
+                sample: '- Test Org (org_123), requested 2026-07-01'
+            }
+        ],
+        // Mirrors the staff-alert text in audit-archive/route.ts.
+        defaultBody: [
+            {
+                block: 'text',
+                text: 'These organizations are past their GDPR erasure hold. Run ' + 'tools/scripts/erase-tenant.mjs to hard-delete. No copy is kept:',
+                variant: 'body'
+            },
+            {
+                block: 'text',
+                text: '{{orgs.list}}',
+                variant: 'body'
+            }
+        ],
+        source: 'apps/console/app/api/admin/audit-archive/route.ts'
+    },
+    {
+        key: 'welcome',
+        name: 'Welcome',
+        description: 'Sent to a new owner the first time they create an organization ' + '(not on every organization they later create).',
+        deliveredBy: 'resend',
+        defaultSubject: 'Welcome to {{brand.productName}}',
+        mergeTokens: [
+            {
+                name: 'name',
+                description: "The new owner's display name",
+                sample: 'Alex'
+            },
+            {
+                name: 'org.name',
+                description: 'The organization they just created',
+                sample: 'Test Org'
+            },
+            {
+                name: 'consoleUrl',
+                description: 'Console dashboard URL',
+                sample: SAMPLE_CONSOLE_ORIGIN
+            }
+        ],
+        // Mirrors the fallbackText in orgs/create/route.ts.
+        defaultBody: [
+            {
+                block: 'text',
+                text: 'Welcome to {{brand.productName}}',
+                variant: 'heading'
+            },
+            {
+                block: 'text',
+                text: 'Hi {{name}}, thanks for creating {{org.name}}. Your workspace ' + 'is ready.',
+                variant: 'body'
+            },
+            {
+                block: 'text',
+                text: 'From your dashboard you can add a site, invite your team, and ' + 'start building.',
+                variant: 'body'
+            },
+            {
+                block: 'button',
+                label: 'Open your dashboard',
+                href: '{{consoleUrl}}'
+            }
+        ],
+        source: 'apps/console/app/api/orgs/create/route.ts'
+    },
+    {
+        key: 'member-added',
+        name: 'Added to an organization',
+        description: `Sent when an existing ${BRAND.ORG_NAME} account is added directly ` + 'to an organization. People who do not have an account yet get the ' + 'organization invite email instead.',
+        deliveredBy: 'resend',
+        defaultSubject: "You've been added to {{org.name}}",
+        mergeTokens: [
+            {
+                name: 'org.name',
+                description: 'The organization they were added to',
+                sample: 'Test Org'
+            },
+            {
+                name: 'member.role',
+                description: 'Role they were given',
+                sample: 'editor'
+            },
+            {
+                name: 'signInUrl',
+                description: 'Console URL to open the organization',
+                sample: SAMPLE_CONSOLE_ORIGIN
+            }
+        ],
+        // Mirrors the fallbackText in orgs/members/route.ts.
+        defaultBody: [
+            {
+                block: 'text',
+                text: 'You were added to {{org.name}} as {{member.role}}.',
+                variant: 'body'
+            },
+            {
+                block: 'text',
+                text: 'Sign in to switch to it from your dashboard.',
+                variant: 'body'
+            },
+            {
+                block: 'button',
+                label: 'Open {{brand.productName}}',
+                href: '{{signInUrl}}'
+            }
+        ],
+        source: 'apps/console/app/api/orgs/members/route.ts'
+    },
+    {
+        key: 'erasure-confirmation',
+        name: 'Erasure completed',
+        description: 'Sent to an organization owner once its data has been permanently ' + 'erased under a GDPR request.',
+        deliveredBy: 'resend',
+        defaultSubject: 'Your {{brand.productName}} data has been erased',
+        mergeTokens: [
+            {
+                name: 'org.name',
+                description: 'The organization that was erased',
+                sample: 'Test Org'
+            }
+        ],
+        // Mirrors the fallbackText in admin/run-erasures/route.ts.
+        defaultBody: [
+            {
+                block: 'text',
+                text: 'Your data has been erased',
+                variant: 'heading'
+            },
+            {
+                block: 'text',
+                text: '{{org.name}} and all of its data have been permanently erased ' + 'from {{brand.productName}}, as requested.',
+                variant: 'body'
+            },
+            {
+                block: 'text',
+                text: 'This is complete and cannot be undone.',
+                variant: 'body'
+            }
+        ],
+        source: 'apps/console/app/api/admin/run-erasures/route.ts'
+    },
+    {
+        key: 'erasure-requested',
+        name: 'Erasure requested',
+        description: 'Confirms to an organization owner that a GDPR erasure request was ' + 'recorded, and that deletion follows after a 7-day hold.',
+        deliveredBy: 'resend',
+        defaultSubject: 'We received your erasure request',
+        mergeTokens: [
+            {
+                name: 'org.name',
+                description: 'The organization to be erased',
+                sample: 'Test Org'
+            }
+        ],
+        // Mirrors the fallbackText in admin/erasure-request/route.ts.
+        defaultBody: [
+            {
+                block: 'text',
+                text: 'Erasure request received',
+                variant: 'heading'
+            },
+            {
+                block: 'text',
+                text: 'We have recorded a request to erase {{org.name}} and all of ' + 'its data from {{brand.productName}}.',
+                variant: 'body'
+            },
+            {
+                block: 'text',
+                text: 'Deletion is permanent and happens after a 7-day hold. If this ' + 'was not intended, contact support before then to cancel.',
+                variant: 'body'
+            }
+        ],
+        source: 'apps/console/app/api/admin/erasure-request/route.ts'
+    },
+    // Admin-initiated password mail (AGL-910). Unlike the self-serve
+    // `password-reset` below, Aglyn composes and sends these itself — the
+    // reset LINK still comes from Firebase (generatePasswordResetLink), but
+    // the message around it is ours, so both are designable.
+    {
+        key: 'admin-password-reset',
+        name: 'Password reset (sent by an admin)',
+        description: 'Password reset link sent on someone else\'s behalf from the ' + 'console — by staff from a user\'s detail page, or by an ' + 'organization admin from a team member\'s page.',
+        deliveredBy: 'resend',
+        defaultSubject: 'Reset your {{brand.productName}} password',
+        mergeTokens: [
+            {
+                name: 'resetUrl',
+                description: 'One-time link that opens the reset form',
+                sample: `${SAMPLE_CONSOLE_ORIGIN}/reset-password?oobCode=…`
+            },
+            {
+                name: 'actor.name',
+                description: 'Who asked for the reset',
+                sample: '{{brand.productName}} support'
+            }
+        ],
+        // Mirrors the fallbackText in _lib/password-admin.ts.
+        defaultBody: [
+            {
+                block: 'text',
+                text: 'Reset your password',
+                variant: 'heading'
+            },
+            {
+                block: 'text',
+                text: '{{actor.name}} started a password reset for your {{brand.productName}} ' + 'account. Choose a new password here:',
+                variant: 'body'
+            },
+            {
+                block: 'button',
+                label: 'Set a new password',
+                href: '{{resetUrl}}'
+            },
+            {
+                block: 'text',
+                text: 'The link expires shortly. If you were not expecting this, you ' + 'can ignore this email — your password stays as it is.',
+                variant: 'caption'
+            }
+        ],
+        source: 'apps/console/app/api/_lib/password-admin.ts'
+    },
+    {
+        key: 'password-changed-by-admin',
+        name: 'Password changed by an admin',
+        description: 'Notice sent to the account holder after an admin sets their ' + 'password directly. Always sent — it is how someone finds out an ' + 'administrator changed their credentials.',
+        deliveredBy: 'resend',
+        defaultSubject: 'Your {{brand.productName}} password was changed',
+        mergeTokens: [
+            {
+                name: 'actor.name',
+                description: 'Who changed the password',
+                sample: '{{brand.productName}} support'
+            },
+            {
+                name: 'signInUrl',
+                description: 'Where to sign in with the new password',
+                sample: SAMPLE_CONSOLE_ORIGIN
+            }
+        ],
+        // Mirrors the fallbackText in _lib/password-admin.ts.
+        defaultBody: [
+            {
+                block: 'text',
+                text: 'Your password was changed',
+                variant: 'heading'
+            },
+            {
+                block: 'text',
+                text: '{{actor.name}} set a new password on your account. You have ' + 'been signed out everywhere and will need the new password to ' + 'sign back in.',
+                variant: 'body'
+            },
+            {
+                block: 'button',
+                label: 'Sign in',
+                href: '{{signInUrl}}'
+            },
+            {
+                block: 'text',
+                text: 'If you did not expect this, contact whoever administers your ' + 'account straight away.',
+                variant: 'caption'
+            }
+        ],
+        source: 'apps/console/app/api/_lib/password-admin.ts'
+    },
+    // Security alerts (AGL-665). Factual and actionable: what happened, from
+    // where, and one button to the account-security surface. These must be
+    // believed, so the send path only fires them on genuinely new devices —
+    // never on every sign-in.
+    {
+        key: 'security-new-device',
+        name: 'New device sign-in',
+        description: 'Security alert sent when an account signs in from a device it has ' + 'not used before. Not sent on routine sign-ins from known devices.',
+        deliveredBy: 'resend',
+        defaultSubject: 'New sign-in to your {{brand.productName}} account',
+        mergeTokens: [
+            {
+                name: 'device.name',
+                description: 'Browser and operating system that signed in',
+                sample: 'Chrome on macOS'
+            },
+            {
+                name: 'device.location',
+                description: 'Approximate location, from the request IP',
+                sample: 'Denver, CO, US'
+            },
+            {
+                name: 'device.ip',
+                description: 'IP address the sign-in came from',
+                sample: '203.0.113.7'
+            },
+            {
+                name: 'device.time',
+                description: 'When the sign-in happened (UTC)',
+                sample: '2026-08-08 14:03 UTC'
+            },
+            {
+                name: 'accountSecurityUrl',
+                description: 'Manage-account Security section — Recent sign-ins, where the ' + 'device can be signed out, plus password and passkeys',
+                sample: `${SAMPLE_CONSOLE_ORIGIN}/manage/user/security`
+            }
+        ],
+        // Mirrors the fallbackText in _lib/security-alerts.ts.
+        defaultBody: [
+            {
+                block: 'text',
+                text: 'New device sign-in',
+                variant: 'heading'
+            },
+            {
+                block: 'text',
+                text: 'Your {{brand.productName}} account was just signed in to from a device it has ' + 'not used before.',
+                variant: 'body'
+            },
+            {
+                block: 'text',
+                text: 'Device: {{device.name}}',
+                variant: 'body'
+            },
+            {
+                block: 'text',
+                text: 'Location: {{device.location}}',
+                variant: 'body'
+            },
+            {
+                block: 'text',
+                text: 'IP address: {{device.ip}}',
+                variant: 'body'
+            },
+            {
+                block: 'text',
+                text: 'When: {{device.time}}',
+                variant: 'body'
+            },
+            {
+                // AGL-1959. The button used to say "Review account security" and
+                // land on the account page's DEFAULT tab, which offered a password
+                // change and nothing about the device the mail is about. AGL-665
+                // asked for this: "'Manage your devices' has to land somewhere that
+                // can list and revoke sessions, or the alert tells you something is
+                // wrong and offers no way to act on it — which is worse than sending
+                // nothing."
+                block: 'button',
+                label: 'Manage your devices',
+                href: '{{accountSecurityUrl}}'
+            },
+            {
+                block: 'text',
+                text: 'If this was you, no action is needed. If it was not, sign this ' + 'device out from Recent sign-ins and change your password right ' + 'away.',
+                variant: 'caption'
+            }
+        ],
+        source: 'apps/console/app/api/_lib/security-alerts.ts'
+    },
+    {
+        key: 'security-passkey-added',
+        name: 'New passkey added',
+        description: 'Security alert sent when a passkey is registered on an account. ' + 'The trigger ships with passkey support (AGL-662); until then no ' + 'call site sends this.',
+        deliveredBy: 'resend',
+        defaultSubject: 'A passkey was added to your {{brand.productName}} account',
+        mergeTokens: [
+            {
+                name: 'passkey.label',
+                description: 'Name the passkey was saved under',
+                sample: 'MacBook Touch ID'
+            },
+            {
+                name: 'device.time',
+                description: 'When the passkey was added (UTC)',
+                sample: '2026-08-08 14:03 UTC'
+            },
+            {
+                name: 'accountSecurityUrl',
+                description: 'Manage-account page where credentials are reviewed',
+                sample: `${SAMPLE_CONSOLE_ORIGIN}/manage/user`
+            }
+        ],
+        // Mirrors the fallbackText in _lib/security-alerts.ts.
+        defaultBody: [
+            {
+                block: 'text',
+                text: 'New passkey added',
+                variant: 'heading'
+            },
+            {
+                block: 'text',
+                text: 'A passkey ("{{passkey.label}}") was just added to your {{brand.productName}} ' + 'account. It can be used to sign in without your password.',
+                variant: 'body'
+            },
+            {
+                block: 'text',
+                text: 'When: {{device.time}}',
+                variant: 'body'
+            },
+            {
+                block: 'button',
+                label: 'Review account security',
+                href: '{{accountSecurityUrl}}'
+            },
+            {
+                block: 'text',
+                text: 'If you did not add this passkey, change your password from ' + 'Manage account right away.',
+                variant: 'caption'
+            }
+        ],
+        source: 'apps/console/app/api/_lib/security-alerts.ts'
+    },
+    // Aglyn composes and sends both of these now (AGL-1112). They were
+    // Firebase's, from a template nobody could edit — the subject still
+    // carried `[aglyn.io]`, a domain the company no longer uses, and the link
+    // landed on `aglyn-main.firebaseapp.com`. Neither could be fixed: every
+    // write under `notification.sendEmail` is refused with
+    // `EMAIL_TEMPLATE_UPDATE_NOT_ALLOWED`.
+    //
+    // Firebase still MINTS the one-time code, which is the part that has to
+    // be its. Only the message around it, and the host the link points at,
+    // became ours. So editing these here now does what it says.
+    {
+        key: 'password-reset',
+        name: 'Forgot password',
+        description: 'Password reset link, sent when someone asks for one from Account ' + 'recovery.',
+        deliveredBy: 'resend',
+        defaultSubject: 'Reset your {{brand.productName}} password',
+        mergeTokens: [
+            {
+                name: 'resetUrl',
+                description: 'One-time link that opens the choose-a-new-password page',
+                sample: `${SAMPLE_CONSOLE_ORIGIN}/reset-password?oobCode=\u2026`
+            }
+        ],
+        // Mirrors the fallbackText in the route, so the designed and undesigned
+        // versions say the same thing.
+        defaultBody: [
+            {
+                block: 'text',
+                text: 'Reset your password',
+                variant: 'heading'
+            },
+            {
+                block: 'text',
+                text: 'Someone asked to reset the password for your {{brand.productName}} account. ' + 'Choose a new one here:',
+                variant: 'body'
+            },
+            {
+                block: 'button',
+                label: 'Choose a new password',
+                href: '{{resetUrl}}'
+            },
+            {
+                block: 'text',
+                text: 'The link expires shortly. If this was not you, you can ignore ' + 'this email — your password stays as it is.',
+                variant: 'caption'
+            }
+        ],
+        source: 'apps/console/app/api/auth/send-password-reset/route.ts'
+    },
+    {
+        key: 'email-verification',
+        name: 'Confirm email',
+        description: 'Address verification link, sent after sign-up and whenever someone ' + 'asks for another from the verify screen.',
+        deliveredBy: 'resend',
+        defaultSubject: 'Confirm your email address',
+        mergeTokens: [
+            {
+                name: 'verifyUrl',
+                description: 'One-time link that confirms the address',
+                sample: `${SAMPLE_CONSOLE_ORIGIN}/verify-email?oobCode=\u2026`
+            }
+        ],
+        defaultBody: [
+            {
+                block: 'text',
+                text: 'Confirm your email',
+                variant: 'heading'
+            },
+            {
+                block: 'text',
+                text: 'Confirm this address to finish setting up your {{brand.productName}} account:',
+                variant: 'body'
+            },
+            {
+                block: 'button',
+                label: 'Confirm my email',
+                href: '{{verifyUrl}}'
+            },
+            {
+                block: 'text',
+                text: 'If you did not create an {{brand.productName}} account, you can ignore this ' + 'email.',
+                variant: 'caption'
+            }
+        ],
+        source: 'apps/console/app/api/auth/send-verification/route.ts'
+    },
+    // Stripe-delivered billing email (AGL-767). Aglyn never composes these —
+    // Stripe sends them from the Dashboard's Customer-emails and Subscription
+    // settings, so they are listed for visibility only and are not designable.
+    // Whether each actually sends is a Dashboard toggle the code cannot read;
+    // the descriptions say "if enabled" rather than asserting it is on.
+    {
+        key: 'stripe-receipt',
+        name: 'Payment receipt',
+        description: 'Receipt for a successful subscription or invoice payment. Sent by ' + 'Stripe if "Successful payments" is enabled under Customer emails.',
+        deliveredBy: 'stripe',
+        defaultSubject: `Your receipt from ${BRAND.ORG_NAME}`,
+        mergeTokens: [],
+        source: 'Stripe Dashboard → Settings → Customer emails'
+    },
+    {
+        key: 'stripe-payment-failed',
+        name: 'Payment failed',
+        description: 'Dunning notice when a subscription charge fails and Stripe retries ' + 'it. Sent by Stripe if failed-payment emails are enabled under ' + 'Subscriptions and emails.',
+        deliveredBy: 'stripe',
+        defaultSubject: `Your ${BRAND.ORG_NAME} payment could not be processed`,
+        mergeTokens: [],
+        source: 'Stripe Dashboard → Settings → Subscriptions and emails'
+    },
+    {
+        key: 'stripe-refund',
+        name: 'Refund confirmation',
+        description: 'Confirms a refund back to the customer. Sent by Stripe if ' + '"Refunds" is enabled under Customer emails.',
+        deliveredBy: 'stripe',
+        defaultSubject: `Your ${BRAND.ORG_NAME} refund`,
+        mergeTokens: [],
+        source: 'Stripe Dashboard → Settings → Customer emails'
+    },
+    {
+        key: 'stripe-card-expiring',
+        name: 'Card expiring soon',
+        description: 'Reminder that the card on file is about to expire. Sent by Stripe ' + 'if expiring-card reminders are enabled under Subscriptions and ' + 'emails.',
+        deliveredBy: 'stripe',
+        defaultSubject: 'Your card on file is expiring soon',
+        mergeTokens: [],
+        source: 'Stripe Dashboard → Settings → Subscriptions and emails'
+    },
+    {
+        key: 'stripe-invoice',
+        name: 'Invoice',
+        description: 'A finalized invoice emailed to the organization. Sent by Stripe ' + 'when invoice emails are enabled for the billing configuration.',
+        deliveredBy: 'stripe',
+        defaultSubject: `Your ${BRAND.ORG_NAME} invoice`,
+        mergeTokens: [],
+        source: 'Stripe Dashboard → Settings → Customer emails'
+    }
+];
+/**
+ * Every system email Aglyn sends, each with the universal brand tokens
+ * appended to its own (AGL-2139).
+ *
+ * The template's own tokens come FIRST so the editor's palette still leads
+ * with what is specific to that email; the brand block reads as the shared
+ * footer it is.
+ */ export const SYSTEM_EMAIL_TEMPLATES = BASE_SYSTEM_EMAIL_TEMPLATES.map((entry)=>_extends({}, entry, {
+        mergeTokens: [
+            ...entry.mergeTokens,
+            ...BRAND_MERGE_TOKENS
+        ]
+    }));
+/** Firestore collection holding the designed templates. */ export const SYSTEM_EMAIL_COLLECTION = 'systemEmailTemplates';
+export function getSystemEmailTemplate(key) {
+    return SYSTEM_EMAIL_TEMPLATES.find((entry)=>entry.key === key);
+}
+/** True when a besigner template can actually change what is delivered. */ export function isSystemEmailEditable(definition) {
+    return definition.deliveredBy === 'resend';
+}
+const PLACEHOLDER_DEFAULT_BODY = [
+    {
+        block: 'text',
+        text: 'Hello,',
+        variant: 'body'
+    }
+];
+/**
+ * Turns a template's `defaultBody` into the besigner node map the editor
+ * seeds and the send-time default renders (AGL-764/766).
+ *
+ * One place builds this so the two never diverge — the version a staffer
+ * opens is byte-for-byte what a test/send renders when nothing is published.
+ * Rooted at {@link EMAIL_NODE_ROOT_ID} so `renderEmailHtml` finds it (AGL-765),
+ * with deterministic ids: a version doc only needs ids unique within itself,
+ * and determinism keeps the map stable and diffable.
+ */ export function buildDefaultEmailNodeMap(// Structural so the tenant catalog (AGL-770) can seed the same way — every
+// definition that carries a `defaultBody` builds an identical node map.
+definition) {
+    var _definition_defaultBody;
+    const blocks = ((_definition_defaultBody = definition.defaultBody) == null ? void 0 : _definition_defaultBody.length) ? definition.defaultBody : PLACEHOLDER_DEFAULT_BODY;
+    const sectionId = 'default-section';
+    const childIds = [];
+    const map = {};
+    blocks.forEach((block, index)=>{
+        var _block_variant;
+        const id = `default-${index}`;
+        childIds.push(id);
+        map[id] = block.block === 'button' ? {
+            $id: id,
+            componentId: 'emailButton',
+            pluginId: 'email',
+            parentId: sectionId,
+            props: {
+                children: block.label,
+                href: block.href
+            }
+        } : {
+            $id: id,
+            componentId: 'emailText',
+            pluginId: 'email',
+            parentId: sectionId,
+            props: {
+                children: block.text,
+                variant: (_block_variant = block.variant) != null ? _block_variant : 'body'
+            }
+        };
+    });
+    map[EMAIL_NODE_ROOT_ID] = {
+        $id: EMAIL_NODE_ROOT_ID,
+        componentId: 'div',
+        nodes: [
+            sectionId
+        ]
+    };
+    map[sectionId] = {
+        $id: sectionId,
+        componentId: 'emailSection',
+        pluginId: 'email',
+        parentId: EMAIL_NODE_ROOT_ID,
+        nodes: childIds
+    };
+    return map;
+}
+
+//# sourceMappingURL=system-email-catalog.js.map