@allbluecn/web-app 0.10.3 → 0.11.1

package/src/server/email/__tests__/deliverability.test.ts

@@ -0,0 +1,68 @@
+import { describe, it, expect, vi, afterEach } from 'vitest'
+import { signUnsubscribeToken, verifyUnsubscribeToken, buildUnsubscribeHeaders } from '../deliverability'
+
+describe('unsubscribe HMAC token', () => {
+  it('签名后可验签还原 payload', () => {
+    const token = signUnsubscribeToken({ userId: 'u1', email: 'a@b.com', category: 'notification' })
+    const payload = verifyUnsubscribeToken(token)
+    expect(payload).toMatchObject({ userId: 'u1', email: 'a@b.com', category: 'notification' })
+  })
+
+  it('篡改 token 验签失败返回 null', () => {
+    const token = signUnsubscribeToken({ userId: 'u1', email: 'a@b.com', category: 'notification' })
+    expect(verifyUnsubscribeToken(token.slice(0, -2) + 'xx')).toBeNull()
+  })
+
+  it('过期 token（exp 过去）返回 null', () => {
+    const token = signUnsubscribeToken({ userId: 'u1', email: 'a@b.com', category: 'notification' }, -1000)
+    expect(verifyUnsubscribeToken(token)).toBeNull()
+  })
+
+  it('buildUnsubscribeHeaders 输出标准 List-Unsubscribe 双通道与 One-Click 声明', () => {
+    const headers = buildUnsubscribeHeaders({
+      appUrl: 'http://localhost:3000',
+      userId: 'u1',
+      email: 'a@b.com',
+      category: 'notification',
+    })
+    expect(headers['List-Unsubscribe']).toContain('<mailto:unsubscribe@allblue.local?subject=unsubscribe>')
+    expect(headers['List-Unsubscribe']).toContain('/email-unsubscribe?token=')
+    expect(headers['List-Unsubscribe'].trim().startsWith('<')).toBe(true)
+    expect(headers['List-Unsubscribe-Post']).toBe('One-Click=List-Unsubscribe')
+  })
+
+  it('空 token / 无分隔符 / 非法 base64 均返回 null', () => {
+    expect(verifyUnsubscribeToken('')).toBeNull()
+    expect(verifyUnsubscribeToken('nodot')).toBeNull()
+    expect(verifyUnsubscribeToken('.')).toBeNull()
+    const valid = signUnsubscribeToken({ userId: 'u1', email: 'a@b.com', category: 'notification' })
+    const [body] = valid.split('.')
+    expect(verifyUnsubscribeToken(`${body}.${'!!!'}`)).toBeNull()
+  })
+
+  it('过期 token 边界：exp 等于当前时间仍有效', () => {
+    const now = signUnsubscribeToken({ userId: 'u1', email: 'a@b.com', category: 'notification' }, 1000)
+    expect(verifyUnsubscribeToken(now)).not.toBeNull()
+  })
+
+  it('篡改 body 后验签失败', () => {
+    const valid = signUnsubscribeToken({ userId: 'u1', email: 'a@b.com', category: 'notification' })
+    const [, sig] = valid.split('.')
+    const tampered = Buffer.from(
+      JSON.stringify({ userId: 'attacker', email: 'a@b.com', category: 'notification', exp: Date.now() + 1000 }),
+      'utf8',
+    ).toString('base64url')
+    expect(verifyUnsubscribeToken(`${tampered}.${sig}`)).toBeNull()
+  })
+})
+
+describe('unsubscribe HMAC token - key isolation', () => {
+  afterEach(() => vi.unstubAllEnvs())
+
+  it('不同密钥签名的 token 无法互验', () => {
+    vi.stubEnv('AUTH_SECRET', 'secret-a')
+    const token = signUnsubscribeToken({ userId: 'u1', email: 'a@b.com', category: 'notification' })
+    vi.stubEnv('AUTH_SECRET', 'secret-b')
+    expect(verifyUnsubscribeToken(token)).toBeNull()
+  })
+})

package/src/server/email/__tests__/index.test.ts

@@ -0,0 +1,32 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+
+vi.mock('../outbox', () => ({
+  outboxSend: vi.fn().mockResolvedValue({ sent: true }),
+  generateEmailToken: vi.fn().mockReturnValue('tok-123'),
+}))
+
+import { sendTemplateEmail, generateEmailToken } from '../index'
+import { outboxSend } from '../outbox'
+
+beforeEach(() => {
+  vi.clearAllMocks()
+})
+
+describe('sendTemplateEmail', () => {
+  it('locale=en 归一为 en', async () => {
+    await sendTemplateEmail({ key: 'auth.welcome', to: 'a@b.com', locale: 'en', vars: {} })
+    expect(outboxSend).toHaveBeenCalledWith(expect.objectContaining({ locale: 'en' }))
+  })
+
+  it('locale=zh / undefined / 未知语言均归一为 zh', async () => {
+    for (const locale of ['zh', undefined, 'fr'] as const) {
+      vi.clearAllMocks()
+      await sendTemplateEmail({ key: 'auth.welcome', to: 'a@b.com', locale, vars: {} })
+      expect(outboxSend).toHaveBeenCalledWith(expect.objectContaining({ locale: 'zh' }))
+    }
+  })
+
+  it('generateEmailToken 透传 outbox 实现', () => {
+    expect(generateEmailToken()).toBe('tok-123')
+  })
+})

package/src/server/email/__tests__/outbox.test.tsx

@@ -0,0 +1,129 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+
+vi.mock('@allbluecn/database', () => ({
+  prisma: {
+    emailLog: {
+      create: vi.fn().mockResolvedValue({ id: 'log1' }),
+      update: vi.fn().mockResolvedValue({}),
+      count: vi.fn().mockResolvedValue(0),
+      findUnique: vi.fn().mockResolvedValue(null),
+    },
+    emailPreference: { findUnique: vi.fn().mockResolvedValue(null) },
+  },
+}))
+
+vi.mock('../sender', () => ({
+  sendByDriver: vi.fn().mockResolvedValue({ ok: true, messageId: 'm1', bounced: false }),
+  resolveDriver: () => 'console',
+}))
+
+import { outboxSend } from '../outbox'
+import { registerTemplate } from '../registry'
+import { prisma } from '@allbluecn/database'
+
+const GUEST_KEY = `test.guest-${Math.random().toString(36).slice(2, 8)}`
+const TX_KEY = `test.tx-${Math.random().toString(36).slice(2, 8)}`
+const NON_TX_KEY = `test.nontx-${Math.random().toString(36).slice(2, 8)}`
+
+registerTemplate({
+  key: GUEST_KEY,
+  category: 'auth',
+  transactional: true,
+  subject: { zh: 'g', en: 'g' },
+  component: () => <div>g</div>,
+})
+registerTemplate({
+  key: TX_KEY,
+  category: 'auth',
+  transactional: true,
+  subject: { zh: 't', en: 't' },
+  component: () => <div>t</div>,
+})
+registerTemplate({
+  key: NON_TX_KEY,
+  category: 'notification',
+  transactional: false,
+  subject: { zh: 'n', en: 'n' },
+  component: () => <div>n</div>,
+})
+
+beforeEach(() => {
+  vi.clearAllMocks()
+})
+
+describe('outbox 管道', () => {
+  it('guest 身份邮件被短路跳过（不写日志不发送）', async () => {
+    const result = await outboxSend({
+      key: GUEST_KEY,
+      to: 'guest@localhost',
+      locale: 'zh',
+      userId: 'local-guest',
+      vars: {},
+    })
+    expect(result.skipped).toBe(true)
+    expect(result.skipReason).toBe('guest')
+  })
+
+  it('未注册模板抛错', async () => {
+    await expect(
+      outboxSend({ key: 'nope.missing', to: 'a@b.com', locale: 'zh', vars: {} }),
+    ).rejects.toThrow(/not registered/)
+  })
+
+  it('事务性模板跳过退订检查（无 userId 时直接发送）', async () => {
+    const result = await outboxSend({ key: TX_KEY, to: 'a@b.com', locale: 'zh', vars: {} })
+    expect(result.sent).toBe(true)
+  })
+
+  it('dedupeKey 已存在 → 跳过（不发送不写日志）', async () => {
+    vi.mocked(prisma.emailLog.findUnique).mockResolvedValueOnce({ id: 'old' } as never)
+    const result = await outboxSend({ key: TX_KEY, to: 'a@b.com', locale: 'zh', vars: {}, dedupeKey: 'dup-1' })
+    expect(result).toEqual({ sent: false, skipped: true, skipReason: 'dedupe' })
+    expect(prisma.emailLog.create).not.toHaveBeenCalled()
+  })
+
+  it('dedupeKey 并发撞唯一键（P2002）→ 回退跳过而非抛错', async () => {
+    const p2002 = Object.assign(new Error('Unique constraint failed'), { code: 'P2002' })
+    vi.mocked(prisma.emailLog.create).mockRejectedValueOnce(p2002)
+    const result = await outboxSend({ key: TX_KEY, to: 'a@b.com', locale: 'zh', vars: {}, dedupeKey: 'dup-2' })
+    expect(result).toEqual({ sent: false, skipped: true, skipReason: 'dedupe' })
+    expect(prisma.emailLog.update).not.toHaveBeenCalled()
+  })
+
+  it('dedupeKey 非唯一键错误 → 原样抛错', async () => {
+    vi.mocked(prisma.emailLog.create).mockRejectedValueOnce(new Error('db down'))
+    await expect(
+      outboxSend({ key: TX_KEY, to: 'a@b.com', locale: 'zh', vars: {}, dedupeKey: 'dup-3' }),
+    ).rejects.toThrow('db down')
+  })
+
+  it('非事务模板传 unsubscribeUrl → headers 使用覆盖 URL，不调 HMAC', async () => {
+    const customUrl = 'http://localhost:3000/email-unsubscribe?token=db-token'
+    await outboxSend({
+      key: NON_TX_KEY,
+      to: 'a@b.com',
+      locale: 'zh',
+      unsubscribeUrl: customUrl,
+      vars: {},
+    })
+    const { sendByDriver } = await import('../sender')
+    const msg = vi.mocked(sendByDriver).mock.calls.at(-1)?.[0]
+    expect(msg?.headers?.['List-Unsubscribe']).toContain(`<${customUrl}>`)
+    expect(msg?.headers?.['List-Unsubscribe']).toContain('<mailto:unsubscribe@allblue.local?subject=unsubscribe>')
+    expect(msg?.headers?.['List-Unsubscribe-Post']).toBe('One-Click=List-Unsubscribe')
+  })
+
+  it('非事务模板无 unsubscribeUrl 有 userId → 回落 HMAC 路径', async () => {
+    await outboxSend({
+      key: NON_TX_KEY,
+      to: 'a@b.com',
+      locale: 'zh',
+      userId: 'u1',
+      vars: {},
+    })
+    const { sendByDriver } = await import('../sender')
+    const msg = vi.mocked(sendByDriver).mock.calls.at(-1)?.[0]
+    expect(msg?.headers?.['List-Unsubscribe']).toContain('/email-unsubscribe?token=')
+    expect(msg?.headers?.['List-Unsubscribe-Post']).toBe('One-Click=List-Unsubscribe')
+  })
+})

package/src/server/email/__tests__/product-templates.test.tsx

@@ -0,0 +1,106 @@
+import { describe, expect, it, vi } from 'vitest'
+
+vi.mock('@allbluecn/database', () => ({
+  prisma: {
+    emailLog: {
+      create: vi.fn().mockResolvedValue({ id: 'log1' }),
+      update: vi.fn().mockResolvedValue({}),
+      count: vi.fn().mockResolvedValue(0),
+      findUnique: vi.fn().mockResolvedValue(null),
+    },
+    emailPreference: { findUnique: vi.fn().mockResolvedValue(null) },
+  },
+}))
+
+vi.mock('../sender', () => ({
+  sendByDriver: vi.fn().mockResolvedValue({ ok: true, messageId: 'm1', bounced: false }),
+  resolveDriver: () => 'console',
+}))
+
+vi.mock('../preferences', () => ({
+  checkEmailEligibility: vi.fn().mockResolvedValue({ sendable: true }),
+}))
+
+import { createElement } from 'react'
+import { render } from '@react-email/render'
+import { outboxSend } from '../outbox'
+import { getTemplate } from '../registry'
+import { registerChangelogConfirmTemplate } from '../templates/product/changelog-confirm'
+import { registerChangelogReleaseTemplate } from '../templates/product/changelog-release'
+
+registerChangelogConfirmTemplate()
+registerChangelogReleaseTemplate()
+
+describe('product 模板', () => {
+  it('confirm 模板渲染按钮与提示', async () => {
+    const meta = getTemplate('product.changelog-confirm')!
+    const html = await render(createElement(meta.component, {
+      locale: 'zh',
+      confirmUrl: 'http://x/changelog/confirm?token=abc',
+    } as never))
+    expect(html).toContain('确认订阅')
+    expect(html).toContain('24 小时')
+    expect(html).toContain('token=abc')
+    expect(meta.transactional).toBe(false)
+    expect(meta.subject.zh).toBe('确认订阅 AllBlue 开发更新')
+  })
+
+  it('release 模板渲染版本与 highlights', async () => {
+    const meta = getTemplate('product.changelog-release')!
+    const html = await render(createElement(meta.component, {
+      locale: 'zh',
+      version: '1.2.3',
+      highlights: '新编辑器\n更快的搜索',
+      detailUrl: 'http://x/changelog',
+    } as never))
+    expect(html).toContain('v1.2.3')
+    expect(html).toContain('新编辑器')
+    expect(html).toContain('更快的搜索')
+    expect(html).toContain('查看更新日志')
+  })
+
+  it('release 模板 highlights 为空时不渲染该段', async () => {
+    const meta = getTemplate('product.changelog-release')!
+    const html = await render(createElement(meta.component, {
+      locale: 'zh',
+      version: '1.2.3',
+      highlights: '',
+      detailUrl: 'http://x/changelog',
+    } as never))
+    expect(html).toContain('v1.2.3')
+    expect(html).not.toContain('新编辑器')
+  })
+
+  it('release subject 动态插值 version', () => {
+    const meta = getTemplate('product.changelog-release')!
+    expect(typeof meta.subject.zh).toBe('function')
+    expect((meta.subject.zh as (v: Record<string, unknown>) => string)({ version: '9.9.9' })).toBe('AllBlue v9.9.9 发布')
+    expect((meta.subject.en as (v: Record<string, unknown>) => string)({ version: '9.9.9' })).toBe('AllBlue v9.9.9 released')
+  })
+
+  it('outbox 解析函数式 subject 并发送', async () => {
+    const r = await outboxSend({
+      key: 'product.changelog-release',
+      to: 'a@b.com',
+      locale: 'zh',
+      vars: { version: '1.0.0', highlights: '', detailUrl: 'http://x/changelog' },
+    })
+    expect(r).toEqual({ sent: true })
+    const { sendByDriver } = await import('../sender')
+    const msg = vi.mocked(sendByDriver).mock.calls.at(-1)?.[0]
+    expect(msg?.subject).toBe('AllBlue v1.0.0 发布')
+  })
+
+  it('confirm 模板游客路径（无 userId）跳过退订头', async () => {
+    await outboxSend({
+      key: 'product.changelog-confirm',
+      to: 'a@b.com',
+      locale: 'zh',
+      vars: { confirmUrl: 'http://x/c?token=t' },
+    })
+    const { sendByDriver } = await import('../sender')
+    const msg = vi.mocked(sendByDriver).mock.calls.at(-1)?.[0]
+    expect(msg?.headers).toEqual({})
+    expect(msg?.subject).toBe('确认订阅 AllBlue 开发更新')
+  })
+})

package/src/server/email/__tests__/registry.test.tsx

@@ -0,0 +1,50 @@
+import { describe, it, expect } from 'vitest'
+import { registerTemplate, getTemplate, listTemplates } from '../registry'
+
+const UNIQUE = `test.hello-${Math.random().toString(36).slice(2, 8)}`
+
+describe('email template registry', () => {
+  it('注册后可按 key 取回元数据', () => {
+    const Comp = () => <div>hi</div>
+    registerTemplate({
+      key: UNIQUE,
+      category: 'auth',
+      transactional: true,
+      subject: { zh: '你好', en: 'Hello' },
+      component: Comp,
+    })
+    const meta = getTemplate(UNIQUE)!
+    expect(meta).toBeDefined()
+    expect(meta.subject.zh).toBe('你好')
+    expect(meta.transactional).toBe(true)
+    expect(meta.component).toBe(Comp)
+  })
+
+  it('未注册 key 返回 undefined', () => {
+    expect(getTemplate('test.not-exist')).toBeUndefined()
+  })
+
+  it('重复注册同 key 抛错（防拼写冲突）', () => {
+    const dupKey = `test.dup-${Math.random().toString(36).slice(2, 8)}`
+    registerTemplate({
+      key: dupKey,
+      category: 'auth',
+      transactional: true,
+      subject: { zh: 'a', en: 'a' },
+      component: () => <div />,
+    })
+    expect(() =>
+      registerTemplate({
+        key: dupKey,
+        category: 'auth',
+        transactional: true,
+        subject: { zh: 'a', en: 'a' },
+        component: () => <div />,
+      }),
+    ).toThrow(/already registered/)
+  })
+
+  it('listTemplates 返回全部 key', () => {
+    expect(listTemplates().map((t) => t.key)).toContain(UNIQUE)
+  })
+})

package/src/server/email/deliverability.ts

@@ -0,0 +1,57 @@
+import { createHmac, timingSafeEqual } from 'crypto'
+
+const UNSUB_TTL_MS = 10 * 365 * 24 * 60 * 60 * 1000 // 10 年（退订链接长期有效）
+
+function secret(): string {
+  return process.env.AUTH_SECRET ?? 'dev-only-secret'
+}
+
+export interface UnsubscribePayload {
+  userId: string
+  email: string
+  category: string
+  exp: number
+}
+
+function base64url(input: string | Buffer): string {
+  return Buffer.from(input).toString('base64url')
+}
+
+export function signUnsubscribeToken(
+  data: { userId: string; email: string; category: string },
+  ttlMs: number = UNSUB_TTL_MS,
+): string {
+  const payload: UnsubscribePayload = { ...data, exp: Date.now() + ttlMs }
+  const body = base64url(JSON.stringify(payload))
+  const sig = createHmac('sha256', secret()).update(body).digest('base64url')
+  return `${body}.${sig}`
+}
+
+export function verifyUnsubscribeToken(token: string): UnsubscribePayload | null {
+  const [body, sig] = token.split('.')
+  if (!body || !sig) return null
+  const expected = createHmac('sha256', secret()).update(body).digest()
+  const got = Buffer.from(sig, 'base64url')
+  if (expected.length !== got.length || !timingSafeEqual(expected, got)) return null
+  try {
+    const payload = JSON.parse(Buffer.from(body, 'base64url').toString()) as UnsubscribePayload
+    if (Date.now() > payload.exp) return null
+    return payload
+  } catch {
+    return null
+  }
+}
+
+export function buildUnsubscribeHeaders(params: {
+  appUrl: string
+  userId: string
+  email: string
+  category: string
+}): Record<string, string> {
+  const token = signUnsubscribeToken({ userId: params.userId, email: params.email, category: params.category })
+  const url = `${params.appUrl}/email-unsubscribe?token=${encodeURIComponent(token)}`
+  return {
+    'List-Unsubscribe': `<${url}>, <mailto:unsubscribe@allblue.local?subject=unsubscribe>`,
+    'List-Unsubscribe-Post': 'One-Click=List-Unsubscribe',
+  }
+}

package/src/server/email/drivers/console.ts

@@ -0,0 +1,11 @@
+import type { EmailMessage } from '../sender'
+
+function maskEmail(address: string): string {
+  const [local, domain] = address.split('@')
+  return domain && local ? `${local.slice(0, 1)}***@${domain}` : '***'
+}
+
+export async function sendByConsole(msg: EmailMessage): Promise<{ messageId: string | null; bounced: boolean }> {
+  console.log(`[email:console] To: ${maskEmail(msg.to)}, Subject: ${msg.subject}, ${msg.text?.length ?? 0} chars text`)
+  return { messageId: null, bounced: false }
+}

package/src/server/email/drivers/resend.ts

@@ -0,0 +1,31 @@
+import type { EmailMessage } from '../sender'
+
+interface ResendSendResponse {
+  id?: string
+  message?: string
+}
+
+export async function sendByResend(msg: EmailMessage): Promise<{ messageId: string | null; bounced: boolean }> {
+  const res = await fetch('https://api.resend.com/emails', {
+    method: 'POST',
+    headers: {
+      Authorization: `Bearer ${process.env.RESEND_API_KEY}`,
+      'Content-Type': 'application/json',
+    },
+    body: JSON.stringify({
+      from: process.env.EMAIL_FROM,
+      to: [msg.to],
+      reply_to: msg.replyTo,
+      subject: msg.subject,
+      html: msg.html,
+      text: msg.text,
+      headers: msg.headers,
+    }),
+  })
+  if (!res.ok) {
+    const body = (await res.json().catch(() => ({}))) as ResendSendResponse
+    throw new Error(`Resend ${res.status}: ${body.message ?? 'send failed'}`)
+  }
+  const data = (await res.json()) as ResendSendResponse
+  return { messageId: data.id ?? null, bounced: false }
+}

package/src/server/email/drivers/smtp.ts

@@ -0,0 +1,27 @@
+import nodemailer from 'nodemailer'
+import type { EmailMessage } from '../sender'
+
+export async function sendBySmtp(msg: EmailMessage): Promise<{ messageId: string | null; bounced: boolean }> {
+  const transport = nodemailer.createTransport({
+    host: process.env.EMAIL_HOST,
+    port: Number(process.env.EMAIL_PORT ?? 587),
+    secure: Number(process.env.EMAIL_PORT) === 465,
+    auth: process.env.EMAIL_USER
+      ? { user: process.env.EMAIL_USER, pass: process.env.EMAIL_PASS }
+      : undefined,
+  })
+  try {
+    const info = await transport.sendMail({
+      from: process.env.EMAIL_FROM ?? 'AllBlue <no-reply@localhost>',
+      to: msg.to,
+      replyTo: msg.replyTo,
+      subject: msg.subject,
+      html: msg.html,
+      text: msg.text,
+      headers: msg.headers,
+    })
+    return { messageId: info.messageId ?? null, bounced: info.rejected.length > 0 }
+  } finally {
+    transport.close()
+  }
+}

package/src/server/email/index.ts

@@ -0,0 +1,56 @@
+import { outboxSend, generateEmailToken } from './outbox'
+import type { EmailLocale } from './registry'
+
+import { registerVerifyEmailTemplate } from './templates/auth/verify-email'
+import { registerResetPasswordTemplate } from './templates/auth/reset-password'
+import { registerWelcomeTemplate } from './templates/auth/welcome'
+import { registerNotificationMirrorTemplate } from './templates/notification/mirror'
+import { registerPaymentReceiptTemplate } from './templates/billing/payment-receipt'
+import { registerSubscriptionEndingTemplate } from './templates/billing/subscription-ending'
+import { registerSubscriptionCanceledTemplate } from './templates/billing/subscription-canceled'
+import { registerChangelogConfirmTemplate } from './templates/product/changelog-confirm'
+import { registerChangelogReleaseTemplate } from './templates/product/changelog-release'
+import { registerTeamInviteTemplate } from './templates/team/invite'
+import { registerTeamApplyNotifyTemplate } from './templates/team/apply-notify'
+import { registerTeamApprovedTemplate } from './templates/team/approved'
+
+let registered = false
+function ensureRegistered() {
+  if (registered) return
+  registerVerifyEmailTemplate()
+  registerResetPasswordTemplate()
+  registerWelcomeTemplate()
+  registerNotificationMirrorTemplate()
+  registerPaymentReceiptTemplate()
+  registerSubscriptionEndingTemplate()
+  registerSubscriptionCanceledTemplate()
+  registerChangelogConfirmTemplate()
+  registerChangelogReleaseTemplate()
+  registerTeamInviteTemplate()
+  registerTeamApplyNotifyTemplate()
+  registerTeamApprovedTemplate()
+  registered = true
+}
+
+export interface SendTemplateEmailParams {
+  key: string
+  to: string
+  locale?: string
+  userId?: string
+  dedupeKey?: string
+  vars: Record<string, unknown>
+  /** 覆盖默认 HMAC 退订 URL（DB-token 场景，如 changelog 订阅者退订）。 */
+  unsubscribeUrl?: string
+  /** 回复收件人（如团队邀请邮件的邀请人邮箱），透传给底层 driver。 */
+  replyTo?: string
+}
+
+export async function sendTemplateEmail(
+  params: SendTemplateEmailParams,
+): Promise<{ sent: boolean; skipped?: boolean; skipReason?: string }> {
+  ensureRegistered()
+  const locale: EmailLocale = params.locale === 'en' ? 'en' : 'zh'
+  return outboxSend({ ...params, locale })
+}
+
+export { generateEmailToken }