@antelopejs/dms-mailing 0.7.0 → 0.8.0

package/skills/dms-mailing/SKILL.md

@@ -23,9 +23,9 @@ https://dms.antelopejs.com/docs/modules/mailing (sending from code and the webho
 
 - `ajs project modules add @antelopejs/dms-mailing`, plus a module implementing `@antelopejs/interface-email`
   (`@antelopejs/nodemailer`, `config: { ethereal: true }` in dev).
-- Mailing 0.6 requires `@antelopejs/dms` >=0.9 (interface-dms 0.7, renderer `@antelopejs/dms-frontend` 0.6);
-  0.4 is the DMS 0.8 line. Mailing 0.6 implements `@antelopejs/interface-dms-mailing` `>=0.8.0 <0.9.0`, adding declaration and import calls;
-  interface 0.9 adds `DeclareSender`; `SendTemplate` / `RecordEmailEvent` callers do not change.
+- Mailing 0.7.1 requires `@antelopejs/dms` `>=0.11.0 <1.0.0`, so DMS 0.11 or later (interface-dms 0.9, renderer `@antelopejs/dms-frontend` `>=0.9.1 <0.10.0`);
+  0.7.0 is the DMS 0.10 line. It implements `@antelopejs/interface-dms-mailing` `>=0.9.0 <0.10.0`: declaration and import calls,
+  and `DeclareSender` since interface 0.9; `SendTemplate` / `RecordEmailEvent` callers do not change.
 - Module option: `useHtmlRender` (default `true`, DMS html-render chain; `false` = built-in standalone HTML).
 - Set the DMS `clientBaseUrl`: the webhook URL and the e-mail logo are built on it.
 - Per-workspace settings (sender, missing-variable guard, fallback locale, webhook secret, retention,
@@ -68,23 +68,17 @@ export async function declareMailingContent(tenantId: string) {
     content: { locales: { en: { subject: "Your {{plan.name}} plan is renewed", preheader: "", blocks: [] } } },
     variables: [{ path: "plan.name", type: "string", required: true }],
     testData: { plan: { name: "Pro" } },
-  }); // created | updated | unchanged | kept
+  }); // created | kept
 }
 ```
 
-- Require explicit non-blank `tenantId` for declarations and imports, including an explicitly selected default tenant.
-  The application must authorize the target and establish provisioning readiness.
-- For SaaS initialization, follow the consumer reference's **Initialize new SaaS workspaces** section:
-  register the durable `created` consumer synchronously in `construct()`, without awaiting declarations,
-  before startup reconciliation; deduplicate `operationId`, bind resources
-  durably, then return a receipt. Mailing registers no consumer. `start()` is process-global, not per tenant;
-  `TENANT_BEING_PROVISIONED` is prepayment and is not the durable `created` transition.
-  Deployment updates/backfills require an authorized inventory and `IsWorkspaceProvisioningCommitted`, failing closed.
-- Idempotent on the tenant's slug, published at once (v1, version rows, slug claim, attention refresh: a normal template).
-- Rule: same declaration → `unchanged`; changed declaration → `updated` only if the template is live, has no
-  draft and still holds exactly the last declaration (fingerprint on `declaredHash`); otherwise `kept`.
-  A dashboard-made template under that slug is never taken over. Deleted → recreated next boot; archive instead.
-- Categories: added once; a category a user relabelled/removed, or a default one, is `kept`.
+- Require explicit non-blank `tenantId` for declarations and imports. Call them once per tenant, from a
+  `Hook.TENANT_BEING_PROVISIONED` handler (the DMS fires it for `default` on the start that creates it, after
+  `DATABASE_INITIALIZED`; dms-saas for each workspace). Never from `start()` or `DATABASE_INITIALIZED`.
+- Written once: a missing slug is created and published (v1, version rows, unique slug, attention refresh: a normal
+  template) → `created`; a slug the tenant already has (declared or made in the dashboard) is left as it is → `kept`.
+  No fingerprint, no refresh: from its creation on, the template belongs to the tenant.
+- Categories: a missing id is added → `created`; an existing one, a default included, is `kept`.
 - `name` / `label` are localized texts `{ en, fr, … }` (stored `@Localized`, `en` required as fallback), never `$`
   i18n keys; each user reads, searches and sorts them in their language (`x-content-language`).
 - `DeclareSender({ tenantId, email, name?, replyTo? })` writes the settings' sender (resolves `void`); call it once

package/skills/dms-mailing/cases.json

@@ -0,0 +1,49 @@
+{
+  "version": 1,
+  "cases": [
+    {
+      "id": "mailing-send-template",
+      "area": "modules",
+      "style": "clean",
+      "prompt": "Send the welcome e-mail template when a user signs up.",
+      "expect": {
+        "skills": ["dms-mailing"],
+        "acceptable": ["dms", "dms-auth"],
+        "mustMention": ["SendTemplate"]
+      }
+    },
+    {
+      "id": "mailing-bounces",
+      "area": "modules",
+      "style": "clean",
+      "prompt": "Our e-mail provider reports bounces through a webhook. How do we record them?",
+      "expect": {
+        "skills": ["dms-mailing"],
+        "acceptable": ["dms"],
+        "mustMention": ["RecordEmailEvent"]
+      }
+    },
+    {
+      "id": "mailing-missing-variable-casual",
+      "area": "modules",
+      "style": "casual",
+      "prompt": "mail send says missing variable firstName??",
+      "expect": {
+        "skills": ["dms-mailing"],
+        "acceptable": ["dms"]
+      }
+    },
+    {
+      "id": "dms-mailing-avoid-tracker",
+      "area": "modules",
+      "style": "clean",
+      "prompt": "Put the tracking script on our public website and count how many visitors click the signup button.",
+      "expect": {
+        "skills": ["dms-marketing"],
+        "acceptable": ["dms"],
+        "mustMention": ["data-website-id"],
+        "avoid": ["dms-mailing"]
+      }
+    }
+  ]
+}

package/src/constants.ts

@@ -23,8 +23,6 @@ export const GALLERY_DISPLAY_ID = `${MODULE_ID}:gallery`;
 export const TEMPLATE_CATEGORIES_TYPE_ID = "mailing_template_categories";
 export const TEMPLATE_CATEGORY_TYPE_ID = "mailing_template_category";
 
-export const DEFAULT_FALLBACK_LOCALE = "en";
-export const DEFAULT_LOG_RETENTION_DAYS = 90;
 export const MAX_SLUG_LENGTH = 64;
 export const MAX_NAME_LENGTH = 120;
 export const SLUG_PATTERN = /^[a-z0-9][a-z0-9-]*$/;

package/src/crons/jobs.ts

@@ -5,7 +5,7 @@ import cron, { type ScheduledTask } from "node-cron";
 export interface CronJob {
   name: string;
   schedule: string;
-  run: () => Promise<unknown>;
+  run: () => Promise<number | void>;
 }
 
 /** A job as it runs once scheduled. */

package/src/data/body.ts

@@ -1,10 +1,11 @@
 import { HTTPResult } from "@antelopejs/interface-api";
 import { HTTP_BAD_REQUEST } from "../constants";
+import { isText } from "../validation/guards";
 
 const INVALID_BODY = "$dms_mailing.errors.invalid_body";
 
 export function parseBody(body: Buffer | string): Record<string, unknown> {
-  const raw = typeof body === "string" ? body : body.toString("utf8");
+  const raw = isText(body) ? body : body.toString("utf8");
   if (!raw) return {};
   try {
     return JSON.parse(raw) as Record<string, unknown>;

package/src/data/templates-table.ts

@@ -71,13 +71,12 @@ import { findCategory, getSettings } from "../services/settings";
 import { findStarter, starterFields } from "../services/starters";
 import { refreshTemplateAttention } from "../services/template-attention";
 import {
-  assertSlugClaimed,
   blankContent,
   blankFields,
   contentFieldsOf,
   displayName,
   initializeTemplate,
-  releaseTemplateSlugs,
+  refuseTakenSlug,
 } from "../services/templates";
 import type { TemplateCategory } from "../types";
 
@@ -85,10 +84,10 @@ import {
   createTemplateSchema,
   templateDetailsSchema,
 } from "../validation/templates.schema";
+import { isObject, isText } from "../validation/guards";
 import { parseBody } from "./body";
 import { CategoryDisplay, LocaleChipsDisplay } from "./displays";
 
-const DUPLICATE_SLUG = "$dms_mailing.errors.duplicate_slug";
 const SLUG_IMMUTABLE = "$dms_mailing.errors.slug_immutable";
 const SOURCE_NOT_FOUND = "$dms_mailing.errors.template_not_found";
 const STARTER_NOT_FOUND = "$dms_mailing.errors.starter_not_found";
@@ -157,7 +156,7 @@ function assertKnownCategory(
   category: unknown,
 ): void {
   if (isBlank(category)) return;
-  if (typeof category === "string" && findCategory(categories, category)) {
+  if (isText(category) && findCategory(categories, category)) {
     return;
   }
   throw new HTTPResult(HTTP_UNPROCESSABLE, UNKNOWN_CATEGORY);
@@ -173,7 +172,8 @@ interface CreatedRow {
  * The creation's seed, and the body to store: slug trimmed, and the name
  * typed in the reader's language as every language of the localized field,
  * the fallback one included until someone translates it. A body a guard
- * already parsed arrives as an object.
+ * already parsed arrives as an object. The body to store is handed on as an
+ * object: interface-data-api 0.3 refuses a JSON string.
  */
 function parseCreation(body: Validation.WrittenBody, locale: string) {
   const raw = Buffer.isBuffer(body) ? parseBody(body) : body;
@@ -183,7 +183,6 @@ function parseCreation(body: Validation.WrittenBody, locale: string) {
     () => INVALID_TEMPLATE,
     HTTP_BAD_REQUEST,
   );
-  // Handed as an object: interface-data-api 0.3 refuses a JSON string.
   const normalized = {
     ...raw,
     slug: seed.slug,
@@ -200,6 +199,12 @@ interface LocalizedController {
 /** The key that writes every language of a localized field at once. */
 const ALL_LANGUAGES = "*";
 
+/**
+ * The data API's `new` callback, seeding the template it creates. The
+ * module's creation dialogs send one typed name, and the stored name holds
+ * every language, written at once: the controller's language key is set to
+ * all languages before the creation.
+ */
 function withSeeding(base: DataControllerCallback): DataControllerCallback {
   return {
     ...base,
@@ -212,25 +217,14 @@ function withSeeding(base: DataControllerCallback): DataControllerCallback {
     ) {
       const { seed, normalized } = parseCreation(body, localeOfRequest(ctx));
       const tenantId = getRequestTenantId(ctx);
-      const model = GetModel(TemplateModel, tenantId);
-      if (await model.getBySlug(seed.slug)) {
-        throw new HTTPResult(HTTP_CONFLICT, DUPLICATE_SLUG);
-      }
       const settings = await getSettings(tenantId);
       assertKnownCategory(settings.categories, seed.category);
       const fields = await seedFields(tenantId, seed, settings.fallbackLocale);
-      // The module's creation dialogs send one typed name; the stored name
-      // holds every language, written at once.
       (this as LocalizedController).language = ALL_LANGUAGES;
-      const created = (await base.func.call(
-        this,
-        ctx,
-        params,
-        normalized,
-        ...rest,
+      const created = (await refuseTakenSlug(
+        base.func.call(this, ctx, params, normalized, ...rest),
       )) as CreatedRow;
       const templateId = created._id;
-      await assertSlugClaimed(tenantId, seed.slug, templateId);
       const user = await authenticateTenantRequest(ctx);
       await initializeTemplate(tenantId, templateId, displayName(user), fields);
       return created;
@@ -291,7 +285,6 @@ export function afterDelete(tenantId: string, ids: string[]): AfterWrite {
     await Promise.all(
       ids.map((id) => versions.getAll(id, "templateId").delete().run()),
     );
-    await releaseTemplateSlugs(tenantId, ids);
     await refreshTemplateAttention(tenantId);
   };
 }
@@ -346,8 +339,8 @@ export async function saveDetails(
  * or, from a form editing every language, all of them.
  */
 function isBlankName(name: unknown): boolean {
-  const texts = typeof name === "object" && name ? Object.values(name) : [name];
-  return !texts.some((text) => typeof text === "string" && text.trim());
+  const texts = isObject(name) ? Object.values(name) : [name];
+  return !texts.some((text) => isText(text) && text.trim());
 }
 
 /** The names trimmed, blank ones left out, the fallback language filled. */

package/src/db/models/index.ts

@@ -2,7 +2,6 @@ export * from "./send-events.model";
 export * from "./sends.model";
 export * from "./settings.model";
 export * from "./suppressions.model";
-export * from "./template-slugs.model";
 export * from "./template-versions.model";
 export * from "./templates.model";
 export * from "./webhook-status.model";

package/src/db/models/send-events.model.ts

@@ -1,3 +1,4 @@
+import { IsDuplicateKeyError } from "@antelopejs/interface-database";
 import { BasicDataModel } from "@antelopejs/interface-database-decorators";
 import { MAILING_SEND_EVENTS_TABLE_NAME, MailingSendEvent } from "../tables";
 import { SendModel } from "./sends.model";
@@ -28,11 +29,10 @@ export class SendEventModel extends BasicDataModel(
    * the same import already did.
    */
   async insertImported(event: MailingSendEvent): Promise<void> {
-    if (await this.get(event._id)) return;
     try {
       await this.insert(event);
     } catch (error) {
-      if (!(await this.get(event._id))) throw error;
+      if (!IsDuplicateKeyError(error)) throw error;
     }
   }
 

package/src/db/models/sends.model.ts

@@ -1,8 +1,9 @@
 import { randomUUID } from "node:crypto";
 import { BasicDataModel } from "@antelopejs/interface-database-decorators";
-import type {
-  AtomicMutationOutcome,
-  ValueProxy,
+import {
+  type AtomicMutationOutcome,
+  IsDuplicateKeyError,
+  type ValueProxy,
 } from "@antelopejs/interface-database";
 import { isResolvedStage, stageOf } from "../../types";
 import { MAILING_SENDS_TABLE_NAME, MailingSend } from "../tables";
@@ -89,17 +90,15 @@ export class SendModel extends BasicDataModel(
   }
 
   /**
-   * Writes an imported send under its own id; false when that id is already
-   * taken, by an earlier run of the same import. Probed by state like the
-   * slug claims, since the database exposes no typed conflict error.
+   * Writes an imported send under its own id; false when an earlier run of
+   * the same import already wrote it (its id is derived from the import's).
    */
   async insertImported(send: ImportedSendRow): Promise<boolean> {
-    if (await this.get(send._id)) return false;
     try {
       await this.table.insert({ ...send, revision: randomUUID() }).run();
       return true;
     } catch (error) {
-      if (await this.get(send._id)) return false;
+      if (IsDuplicateKeyError(error)) return false;
       throw error;
     }
   }

package/src/db/models/template-versions.model.ts

@@ -45,8 +45,12 @@ export class TemplateVersionModel extends BasicDataModel(
     }
   }
 
+  /**
+   * The published versions of a template, newest first. It reads the
+   * template's publication before the version rows: any later publication
+   * must have materialized the version that read names.
+   */
   async listForTemplate(templateId: string): Promise<MailingTemplateVersion[]> {
-    // Read the publication first: any later publication must have materialized it.
     const template = await new TemplateModel(this.database).get(templateId);
     if (!template) return [];
     const rows = await this.getBy("templateId", templateId);

package/src/db/models/templates.model.ts

@@ -5,7 +5,7 @@ import {
 } from "@antelopejs/interface-database-decorators";
 import type { LocalizedText } from "@antelopejs/interface-dms-mailing";
 import { MAILING_TEMPLATES_TABLE_NAME, MailingTemplate } from "../tables";
-import { TemplateSlugModel } from "./template-slugs.model";
+import { isText } from "../../validation/guards";
 
 /** The attention fields of a template, as the refresh writes them. */
 export type TemplateAttentionFields = Pick<
@@ -16,7 +16,7 @@ export type TemplateAttentionFields = Pick<
 const isLocalizedText = (value: unknown): value is LocalizedText =>
   typeof value === "object" &&
   value !== null &&
-  Object.values(value).every((text) => typeof text === "string");
+  Object.values(value).every(isText);
 
 /** Where a row keeps its modifier-held fields, the localized name among them. */
 const MODIFIER_CONTAINER = "_internal";
@@ -38,9 +38,11 @@ export class TemplateModel extends BasicDataModel(
     return TemplateModel.fromPlainData(fields).localize("*", ["name"]);
   }
 
-  /** The names of `template`, one per language. */
+  /**
+   * The names of `template`, one per language: unlocked with `"*"`, the
+   * localized field holds the whole per-language record.
+   */
   static namesOf(template: MailingTemplate): LocalizedText {
-    // Unlocked with "*", the localized field holds the whole per-language record.
     const names: unknown = template.localize("*", ["name"]).name;
     return isLocalizedText(names) ? names : {};
   }
@@ -90,19 +92,10 @@ export class TemplateModel extends BasicDataModel(
     return outcome === "applied";
   }
 
+  /** The template holding `slug`: the unique index keeps it to one. */
   async getBySlug(slug: string): Promise<MailingTemplate | undefined> {
-    const rows = await this.getBy("slug", slug);
-    // A losing creation can still be cleaning up (or its process can crash).
-    // Senders must see the claimed template, not an earlier draft candidate.
-    if (rows.length > 1) {
-      const claims = await new TemplateSlugModel(this.database).getBy(
-        "templateId",
-        ...rows.map((row) => row._id),
-      );
-      const claim = claims.find((candidate) => candidate.slug === slug);
-      if (claim) return rows.find((row) => row._id === claim.templateId);
-    }
-    return rows[0];
+    const [template] = await this.getBy("slug", slug);
+    return template;
   }
 
   /**

package/src/db/tables/index.ts

@@ -2,7 +2,6 @@ export * from "./send-events.table";
 export * from "./sends.table";
 export * from "./settings.table";
 export * from "./suppressions.table";
-export * from "./template-slugs.table";
 export * from "./template-versions.table";
 export * from "./templates.table";
 export * from "./webhook-status.table";

package/src/db/tables/settings.table.ts

@@ -46,12 +46,4 @@ export class MailingSettings extends Table {
 
   @Field("string")
   declare webhookSecret: string;
-
-  /**
-   * JSON-serialized fingerprint of each category `DeclareTemplateCategory`
-   * applied, by its id: what tells a category untouched since from one a
-   * user relabelled or removed.
-   */
-  @Field("string")
-  declare json_declared_categories?: string;
 }

package/src/db/tables/templates.table.ts

@@ -31,7 +31,8 @@ export class MailingTemplate extends Table.with(LocalizationModifier) {
   @Field("date")
   declare updatedAt: Date;
 
-  @Index()
+  /** What sends name the template by: one template per slug in a tenant. */
+  @Index({ unique: true })
   @Field("string")
   declare slug: string;
 
@@ -141,25 +142,10 @@ export class MailingTemplate extends Table.with(LocalizationModifier) {
   @Field("date")
   declare unpublishedAt?: Date;
 
-  /**
-   * Fingerprint of the last declaration `DeclareTemplate` applied; blank for
-   * a template made in the dashboard. A template still matching it is
-   * untouched since, and the next declaration may refresh it.
-   */
-  @Field("string")
-  declare declaredHash?: string;
-
   /** Every semantic edit invalidates a publication's optimistic snapshot. */
   @Field("string")
   declare revision?: string;
 
-  /** An unmodified declaration seed can be completed after a crashed creator. */
-  @Field("string")
-  declare declarationSeedRevision?: string;
-
-  @Field("string")
-  declare pendingDeclaredHash?: string;
-
   /**
    * Complete latest version row, committed atomically with its content. Its
    * history row can be recovered after an interrupted publication.

package/src/engine/changes.ts

@@ -6,6 +6,7 @@ import type {
   VariableDefinition,
 } from "../types";
 import { walkBlocks } from "./walk";
+import { isObject } from "../validation/guards";
 
 export type TemplateChangeKind =
   | "locale_added"
@@ -51,11 +52,11 @@ const NESTED_KEYS = new Set(["children", "elseChildren"]);
  */
 function canonical(value: unknown): unknown {
   if (Array.isArray(value)) return value.map(canonical);
-  if (!value || typeof value !== "object") return value;
+  if (!isObject(value)) return value;
   return Object.fromEntries(
     Object.keys(value)
       .sort()
-      .map((key) => [key, canonical((value as Record<string, unknown>)[key])]),
+      .map((key) => [key, canonical(value[key])]),
   );
 }
 

package/src/engine/conditions.ts

@@ -3,15 +3,13 @@ import { getPath } from "./paths";
 
 type Evaluator = (actual: unknown, expected: string) => boolean;
 
-const asNumber = (value: unknown): number => Number(value);
-
 const EVALUATORS: Record<ConditionOperator, Evaluator> = {
   truthy: (actual) => Boolean(actual),
   falsy: (actual) => !actual,
   eq: (actual, expected) => String(actual) === expected,
   ne: (actual, expected) => String(actual) !== expected,
-  gt: (actual, expected) => asNumber(actual) > asNumber(expected),
-  lt: (actual, expected) => asNumber(actual) < asNumber(expected),
+  gt: (actual, expected) => Number(actual) > Number(expected),
+  lt: (actual, expected) => Number(actual) < Number(expected),
 };
 
 /** Whether `data` passes the condition a block is shown under. */

package/src/engine/fallback-html.ts

@@ -1,15 +1,15 @@
 import type { ResolvedBlock, ResolvedEmail } from "../types";
 
-const ESCAPES: Record<string, string> = {
-  "&": "&amp;",
-  "<": "&lt;",
-  ">": "&gt;",
-  '"': "&quot;",
-  "'": "&#39;",
-};
+const ESCAPES = new Map([
+  ["&", "&amp;"],
+  ["<", "&lt;"],
+  [">", "&gt;"],
+  ['"', "&quot;"],
+  ["'", "&#39;"],
+]);
 
 export const escapeHtml = (value: string): string =>
-  value.replace(/[&<>"']/g, (char) => ESCAPES[char] ?? char);
+  value.replace(/[&<>"']/g, (char) => ESCAPES.get(char) ?? char);
 
 const LINE_BREAK = /\r?\n/g;
 
@@ -77,7 +77,7 @@ const row = (label: string, value: string, weight: string): string =>
 const table = (rows: string): string =>
   `<table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="${BLOCK_SPACING}">${rows}</table>`;
 
-const TEXT_RENDERERS: Record<string, BlockHtml> = {
+const TEXT_RENDERERS = {
   heading: (block) =>
     block.type === "heading"
       ? `<h1 style="${FONT};font-size:${block.size}px;font-weight:600;color:${HEADING_COLOR};text-align:${block.align};margin:0 0 24px;${WRAP}">${escapeLines(block.text)}</h1>`
@@ -94,7 +94,7 @@ const TEXT_RENDERERS: Record<string, BlockHtml> = {
     block.type === "button"
       ? `<div style="text-align:${block.align};margin:24px 0"><a href="${escapeHtml(safeUrl(block.href))}" style="${FONT};${BUTTON_STYLE}">${escapeHtml(block.text)}</a></div>`
       : "",
-};
+} satisfies Record<string, BlockHtml>;
 
 const footerHtml = (block: ResolvedBlock): string => {
   if (block.type !== "footer") return "";
@@ -109,7 +109,7 @@ const footerHtml = (block: ResolvedBlock): string => {
   return `${DIVIDER}<p style="${FOOTER_STYLE}">${escapeLines(block.text)}${linkLine}</p>`;
 };
 
-const LAYOUT_RENDERERS: Record<string, BlockHtml> = {
+const LAYOUT_RENDERERS = {
   hero: (block) =>
     block.type === "hero" && block.imageUrl
       ? `<img src="${escapeHtml(safeUrl(block.imageUrl))}" alt="${escapeHtml(block.alt)}" style="display:block;width:100%;border-radius:8px;margin:0 0 20px">`
@@ -124,12 +124,12 @@ const LAYOUT_RENDERERS: Record<string, BlockHtml> = {
     block.type === "total" ? table(row(block.label, block.value, "600")) : "",
   divider: () => DIVIDER,
   footer: footerHtml,
-};
+} satisfies Record<string, BlockHtml>;
 
 const RENDERERS: Record<ResolvedBlock["type"], BlockHtml> = {
   ...TEXT_RENDERERS,
   ...LAYOUT_RENDERERS,
-} as Record<ResolvedBlock["type"], BlockHtml>;
+};
 
 const FOOTER_TYPE = "footer";
 

package/src/engine/formats.ts

@@ -1,4 +1,5 @@
 import type { VariableDefinition } from "../types";
+import { isObject, isText } from "../validation/guards";
 
 /**
  * An amount in the minor unit of its currency (cents for `EUR`), like the
@@ -55,12 +56,11 @@ export function valueFormatOf(
 }
 
 export function isMoneyValue(value: unknown): value is MoneyValue {
-  if (!value || typeof value !== "object") return false;
-  const candidate = value as Partial<MoneyValue>;
+  if (!isObject(value)) return false;
   return (
-    typeof candidate.value === "number" &&
-    Number.isFinite(candidate.value) &&
-    typeof candidate.currency === "string"
+    typeof value.value === "number" &&
+    Number.isFinite(value.value) &&
+    typeof value.currency === "string"
   );
 }
 
@@ -118,7 +118,7 @@ export function formatValue(
     return Number.isNaN(value.getTime())
       ? String(value)
       : formatDate(value, DATE_STYLE, locale);
-  if (typeof value === "string" && format?.datePaths.has(path))
+  if (isText(value) && format?.datePaths.has(path))
     return formatIsoDate(value, locale) ?? value;
   return String(value);
 }

package/src/engine/paths.ts

@@ -1,3 +1,5 @@
+import { isObject } from "../validation/guards";
+
 const PATH_SEPARATOR = ".";
 const ARRAY_SUFFIX = "[]";
 
@@ -16,10 +18,9 @@ export function normalizePath(path: string): string {
 const RESERVED_SEGMENTS = ["__proto__", "constructor", "prototype"];
 
 function readSegment(current: unknown, segment: string): unknown {
-  if (current === null || current === undefined) return undefined;
-  if (typeof current !== "object") return undefined;
+  if (!isObject(current)) return undefined;
   if (RESERVED_SEGMENTS.includes(segment)) return undefined;
-  return (current as Record<string, unknown>)[segment];
+  return current[segment];
 }
 
 export function getPath(data: unknown, path: string): unknown {

package/src/engine/system-variables.ts

@@ -22,7 +22,10 @@ export const MARKETING_CATEGORY = "marketing";
 
 const SYSTEM_VARIABLE_TYPE = "url";
 
-type FooterLabelKey = "unsubscribeLabel" | "preferencesLabel";
+/** The footer fields that label a link, in the order the links show. */
+const LABEL_KEYS = ["unsubscribeLabel", "preferencesLabel"] as const;
+
+type FooterLabelKey = (typeof LABEL_KEYS)[number];
 
 /** Each footer link: the label that shows it and the URL the caller passes. */
 const FOOTER_LINKS: Record<FooterLabelKey, string> = {
@@ -30,8 +33,6 @@ const FOOTER_LINKS: Record<FooterLabelKey, string> = {
   preferencesLabel: PREFERENCES_URL_PATH,
 };
 
-const LABEL_KEYS = Object.keys(FOOTER_LINKS) as FooterLabelKey[];
-
 export function isMarketingCategory(category?: string | null): boolean {
   return category === MARKETING_CATEGORY;
 }

package/src/engine/tokens.ts

@@ -21,8 +21,7 @@ const MISSING_TOKEN: Record<InterpolationMode, (token: string) => string> = {
 
 export function extractTokens(text: string): string[] {
   const found = new Set<string>();
-  for (const match of text.matchAll(TOKEN_PATTERN))
-    found.add(match[1] as string);
+  for (const match of text.matchAll(TOKEN_PATTERN)) found.add(match[1]);
   return [...found];
 }
 

package/src/hooks/index.ts

@@ -1,2 +1 @@
-export * from "./database-ready";
 export * from "./tenant-export";