@antelopejs/dms-mailing 0.8.0 → 0.9.0

package/src/hooks/tenant-export.ts

@@ -11,11 +11,11 @@ import {
 import { MODULE_ID } from "../constants";
 import {
   type MailingTemplate,
-  SettingsModel,
   SuppressionModel,
   TemplateModel,
   TemplateVersionModel,
 } from "../db";
+import { findSettings } from "../services/settings";
 import type { MailingSettingsValues } from "../types";
 
 export type ExportedSettings = Omit<MailingSettingsValues, "webhookSecret">;
@@ -26,7 +26,7 @@ export type ExportPageLoader<T> = (
 ) => Promise<T[]>;
 
 interface RowCodec<T> {
-  fromDatabase(row: unknown): T | undefined;
+  fromDatabase(row: T): T | undefined;
 }
 
 export interface ExportedCollection {
@@ -72,18 +72,16 @@ export async function* jsonArrayChunks<T>(
 async function exportedSettings(
   tenantId: string,
 ): Promise<ExportedSettings | null> {
-  const row = await GetModel(SettingsModel, tenantId).get(tenantId);
-  if (!row) return null;
+  const settings = await findSettings(tenantId);
+  if (!settings) return null;
   return {
-    fallbackLocale: row.fallbackLocale,
-    logRetentionDays: row.logRetentionDays,
-    blockOnMissingVariables: row.blockOnMissingVariables,
-    senderName: row.senderName,
-    senderEmail: row.senderEmail,
-    replyTo: row.replyTo,
-    categories: JSON.parse(
-      row.json_categories,
-    ) as ExportedSettings["categories"],
+    fallbackLocale: settings.fallbackLocale,
+    logRetentionDays: settings.logRetentionDays,
+    blockOnMissingVariables: settings.blockOnMissingVariables,
+    senderName: settings.senderName,
+    senderEmail: settings.senderEmail,
+    replyTo: settings.replyTo,
+    categories: settings.categories,
   };
 }
 

package/src/pages/templates.ts

@@ -109,7 +109,9 @@ export class TemplatesPageController extends PageController(
       },
       async edit(ctx, { id, body, current }) {
         await assertEditable(getRequestTenantId(ctx), body, current);
-        return afterEdit(this.model, id, body.name, localeOfRequest(ctx));
+        return body.name === undefined
+          ? undefined
+          : afterEdit(this.model, id, localeOfRequest(ctx));
       },
     },
     rowActions: {

package/src/routes/events.ts

@@ -18,13 +18,16 @@ import {
   WEBHOOK_SECRET_HEADER,
 } from "../services/webhook-status";
 import type { WebhookRefusal } from "../types";
+import type { JsonValue } from "../types/json";
+import { parseJson } from "../validation/json";
+import { jsonObjectSchema } from "../validation/json.schema";
 import { sendEventTypeSchema } from "../validation/send-event-type.schema";
 
 const eventSchema = z.object({
   messageId: z.string().min(1),
   type: sendEventTypeSchema,
   at: z.coerce.date().optional(),
-  details: z.record(z.unknown()).optional(),
+  details: jsonObjectSchema.optional(),
 });
 
 type ParsedEvent = z.infer<typeof eventSchema>;
@@ -38,7 +41,7 @@ const STATUS_OF_REFUSAL: Record<WebhookRefusal, number> = {
 interface ReceivedEvent {
   provider: string;
   secret: string | undefined;
-  body: unknown;
+  body: JsonValue | undefined;
   /** The tenant the URL names. */
   tenantId: string;
 }
@@ -54,9 +57,9 @@ export interface WebhookResponse {
  * The body as JSON, `undefined` when it is not: a malformed body is refused
  * as an invalid event, after the secret, never answered with a parser error.
  */
-function parseBody(raw: Buffer): unknown {
+function parseBody(raw: Buffer): JsonValue | undefined {
   try {
-    return JSON.parse(raw.toString("utf8"));
+    return parseJson(raw.toString("utf8"));
   } catch {
     return undefined;
   }

package/src/routes/index.ts

@@ -5,5 +5,6 @@ export * from "./provider";
 export * from "./sends";
 export * from "./settings";
 export * from "./suppressions";
+export * from "./template-content";
 export * from "./template-versions";
 export * from "./templates";

package/src/routes/metrics.ts

@@ -63,16 +63,16 @@ const TEMPLATE_VOLUME_KEY = "$dms_mailing.metrics.template_volume";
 const FIRST_ROW_OFFSET = 0;
 const SINGLE_ROW = 1;
 
-const KPI_EXTRACTORS: Record<string, TotalsExtractor> = {
-  sends: (totals) => totals.sends,
-  deliverability: (totals) => totals.deliverability,
-  "open-rate": (totals) => totals.openRate,
-  "click-rate": (totals) => totals.clickRate,
-  bounces: (totals) => totals.bounced,
-  unsubscribes: (totals) => totals.unsubscribed,
-  queued: (totals) => totals.queued,
-  latency: (totals) => totals.latencyMedian,
-};
+const KPI_EXTRACTORS = new Map<string, TotalsExtractor>([
+  ["sends", (totals) => totals.sends],
+  ["deliverability", (totals) => totals.deliverability],
+  ["open-rate", (totals) => totals.openRate],
+  ["click-rate", (totals) => totals.clickRate],
+  ["bounces", (totals) => totals.bounced],
+  ["unsubscribes", (totals) => totals.unsubscribed],
+  ["queued", (totals) => totals.queued],
+  ["latency", (totals) => totals.latencyMedian],
+]);
 
 /** The KPIs read from delivery events: unmeasured when nothing reports them. */
 const DELIVERY_METRICS = new Set(["deliverability", "open-rate", "click-rate"]);
@@ -88,14 +88,17 @@ const OPEN_RATE_METRIC: TopMetric = {
   minDeliveries: MIN_RANKED_DELIVERIES,
 };
 
-const TOP_METRICS: Record<string, TopMetric> = {
-  "open-rate": OPEN_RATE_METRIC,
-  "click-rate": {
-    extract: (totals) => totals.clickRate,
-    minDeliveries: MIN_RANKED_DELIVERIES,
-  },
-  sends: { extract: (totals) => totals.sends, minDeliveries: 0 },
-};
+const TOP_METRICS = new Map<string, TopMetric>([
+  ["open-rate", OPEN_RATE_METRIC],
+  [
+    "click-rate",
+    {
+      extract: (totals) => totals.clickRate,
+      minDeliveries: MIN_RANKED_DELIVERIES,
+    },
+  ],
+  ["sends", { extract: (totals) => totals.sends, minDeliveries: 0 }],
+]);
 const DEFAULT_TOP_METRIC = OPEN_RATE_METRIC;
 
 interface FunnelStepDefinition {
@@ -225,7 +228,7 @@ export class MetricsController extends Controller(`${API_BASE_PATH}/metrics`) {
   async kpi(
     @Parameter("metric", "param") metric: string,
   ): Promise<KpiCardData> {
-    const extract = KPI_EXTRACTORS[metric];
+    const extract = KPI_EXTRACTORS.get(metric);
     assert(extract, HTTP_NOT_FOUND, UNKNOWN_METRIC);
     const range = currentRange(this.ctx);
     const [current, previous, tracking] = await Promise.all([
@@ -254,7 +257,7 @@ export class MetricsController extends Controller(`${API_BASE_PATH}/metrics`) {
   @Get("/top-templates")
   async topTemplates() {
     const metric =
-      TOP_METRICS[this.ctx.url.searchParams.get("metric") ?? ""] ??
+      TOP_METRICS.get(this.ctx.url.searchParams.get("metric") ?? "") ??
       DEFAULT_TOP_METRIC;
     const range = currentRange(this.ctx);
     const [sends, previous, templates] = await Promise.all([
@@ -469,22 +472,19 @@ export function comparedSteps(
 /** Which sends the funnel counts: all, or one side of the marketing split. */
 export type FunnelKind = "all" | "marketing" | "transactional";
 
-const FUNNEL_KINDS: Record<string, FunnelKind> = {
-  all: "all",
-  marketing: "marketing",
-  transactional: "transactional",
-};
-
-export function readFunnelKind(raw: string | null): FunnelKind {
-  return FUNNEL_KINDS[raw ?? ""] ?? "all";
-}
-
 const KIND_KEEPS: Record<FunnelKind, (category: string) => boolean> = {
   all: () => true,
   marketing: (category) => isMarketingCategory(category),
   transactional: (category) => !isMarketingCategory(category),
 };
 
+const isFunnelKind = (raw: string): raw is FunnelKind =>
+  Object.hasOwn(KIND_KEEPS, raw);
+
+export function readFunnelKind(raw: string | null): FunnelKind {
+  return raw !== null && isFunnelKind(raw) ? raw : "all";
+}
+
 /**
  * Sends of the templates on one side of the split. A template's category
  * decides: "marketing" is the campaign side, everything else transactional.

package/src/routes/period.ts

@@ -18,10 +18,10 @@ const PREVIOUS_YEAR = "previous-year";
  * What the comparison series is called, by the selector's `comparison`. A
  * custom window, or a caller naming none, is neither of the two.
  */
-const COMPARISON_SERIES_LABELS: Record<string, string> = {
-  "previous-period": "$dms_mailing.metrics.previous",
-  [PREVIOUS_YEAR]: "$dms_mailing.metrics.previous_year",
-};
+const COMPARISON_SERIES_LABELS = new Map([
+  ["previous-period", "$dms_mailing.metrics.previous"],
+  [PREVIOUS_YEAR, "$dms_mailing.metrics.previous_year"],
+]);
 const COMPARED_SERIES_LABEL = "$dms_mailing.metrics.compared";
 
 function readQuery(ctx: RangeContext, key: string): string | undefined {
@@ -67,7 +67,7 @@ export function isComparisonWanted(ctx: RangeContext): boolean {
 /** The label of the comparison series, for the comparison the caller asks. */
 export function comparisonLabel(ctx: RangeContext): string {
   const comparison = readQuery(ctx, "comparison") ?? "previous-period";
-  return COMPARISON_SERIES_LABELS[comparison] ?? COMPARED_SERIES_LABEL;
+  return COMPARISON_SERIES_LABELS.get(comparison) ?? COMPARED_SERIES_LABEL;
 }
 
 function yearBefore(date: Date): Date {

package/src/routes/sends.ts

@@ -69,6 +69,7 @@ import {
   snapshotOfVersion,
 } from "../services/templates";
 import type { SendStatus, SuppressionSummary, TemplateStatus } from "../types";
+import type { JsonObject } from "../types/json";
 import {
   type previewVersionSchema,
   realSendSchema,
@@ -184,10 +185,10 @@ const sameAddress = (left: string, right: string): boolean =>
   normalizeAddress(left) === normalizeAddress(right);
 
 /** A bad address gets its own message; any other invalid field is the content's. */
-function sendInputError(error: unknown): string {
-  const isRecipient =
-    error instanceof ZodError &&
-    error.issues.some((issue) => issue.path[0] === RECIPIENT_FIELD);
+function sendInputError(error: ZodError): string {
+  const isRecipient = error.issues.some(
+    (issue) => issue.path[0] === RECIPIENT_FIELD,
+  );
   return isRecipient ? INVALID_RECIPIENT : INVALID_CONTENT;
 }
 
@@ -255,7 +256,8 @@ export class SendsController extends Controller(API_BASE_PATH) {
     const input = assertValidation(
       body,
       (value) => testSendSchema.parse(value),
-      sendInputError,
+      (error) =>
+        error instanceof ZodError ? sendInputError(error) : INVALID_CONTENT,
     );
     const template = await requireTemplate(this.templates, id);
     const ownAddressSuppressed = await this.ownSuppression(input.to);
@@ -301,7 +303,8 @@ export class SendsController extends Controller(API_BASE_PATH) {
     const input = assertValidation(
       body,
       (value) => realSendSchema.parse(value),
-      sendInputError,
+      (error) =>
+        error instanceof ZodError ? sendInputError(error) : INVALID_CONTENT,
     );
     const template = await requireTemplate(this.templates, id);
     const result = await this.send(
@@ -574,8 +577,10 @@ function requestedVersionOf(
   return version === "draft" || version === "published" ? undefined : version;
 }
 
-function variablesOf(send: MailingSend): Record<string, unknown> {
-  return JSON.parse(send.json_variables || "{}") as Record<string, unknown>;
+function variablesOf(send: MailingSend): JsonObject {
+  // SAFETY: json_variables is written only as JSON.stringify(params.variables ?? {}) (services/send.ts) or
+  // JSON.stringify(send.variables) (services/send-import.ts), both a JsonObject.
+  return JSON.parse(send.json_variables || "{}") as JsonObject;
 }
 
 function summarize(template: MailingTemplate): SendTemplateSummary {

package/src/routes/settings.ts

@@ -48,7 +48,8 @@ import {
   settingsPatchSchema,
 } from "../validation/settings.schema";
 import { retentionLimit } from "../crons/retention";
-import { isJsonObject } from "../validation/guards";
+import { isJsonObject } from "../validation/json";
+import { zodIssuesJson } from "./zod-json";
 
 const INVALID_SETTINGS = "$dms_mailing.errors.invalid_settings";
 const CATEGORIES_REASSIGNED = "$dms_mailing.settings.categories.reassigned";
@@ -90,7 +91,7 @@ export interface MailingSettingsResponse extends MailingSettingsValues {
 export interface SettingsNotice {
   title: string;
   color?: string;
-  params?: Record<string, unknown>;
+  params?: Record<string, number | string>;
 }
 
 export interface SettingsWriteResponse extends MailingSettingsValues {
@@ -147,9 +148,11 @@ function formIssue(issue: z.ZodIssue): z.ZodIssue {
 }
 
 /** A refused write: the generic message, and each issue for its field. */
-function invalidSettings(error: unknown) {
-  if (!(error instanceof z.ZodError)) return INVALID_SETTINGS;
-  return { message: INVALID_SETTINGS, issues: error.issues.map(formIssue) };
+function invalidSettings(error: z.ZodError) {
+  return {
+    message: INVALID_SETTINGS,
+    issues: zodIssuesJson(error.issues.map(formIssue)),
+  };
 }
 
 function senderNotice(values: MailingSettingsValues): SettingsNotice[] {
@@ -241,7 +244,8 @@ export class MailingSettingsController extends Controller(
     return assertValidation(
       clearedToEmpty(body),
       (value) => settingsPatchSchema.parse(value),
-      invalidSettings,
+      (error) =>
+        error instanceof z.ZodError ? invalidSettings(error) : INVALID_SETTINGS,
     );
   }
 
@@ -295,7 +299,8 @@ export class MailingSettingsController extends Controller(
     return assertValidation(
       raw,
       (value) => retentionDaysSchema.parse(value),
-      invalidSettings,
+      (error) =>
+        error instanceof z.ZodError ? invalidSettings(error) : INVALID_SETTINGS,
     );
   }
 
@@ -306,12 +311,12 @@ export class MailingSettingsController extends Controller(
   @Get("/category-usage")
   async categoryUsage(): Promise<{ counts: Record<string, number> }> {
     const templates = await this.templates.getAll();
-    const counts: Record<string, number> = {};
+    const counts = new Map<string, number>();
     for (const template of templates) {
       if (!template.category || template.status === ARCHIVED_STATUS) continue;
-      counts[template.category] = (counts[template.category] ?? 0) + 1;
+      counts.set(template.category, (counts.get(template.category) ?? 0) + 1);
     }
-    return { counts };
+    return { counts: Object.fromEntries(counts) };
   }
 
   /**

package/src/routes/suppressions.ts

@@ -18,6 +18,7 @@ import { API_BASE_PATH, HTTP_CONFLICT, HTTP_NOT_FOUND } from "../constants";
 import { SuppressionModel } from "../db";
 import { SuppressionsPageController } from "../pages/suppressions";
 import { suppressAddress } from "../services/suppressions";
+import { zodIssuesJson } from "./zod-json";
 
 const INVALID_SUPPRESSION = "$dms_mailing.suppressions.errors.invalid";
 const ALREADY_SUPPRESSED = "$dms_mailing.suppressions.errors.already";
@@ -32,12 +33,6 @@ const manualSuppressionSchema = z.object({
   note: z.string().trim().max(MAX_NOTE_LENGTH).optional(),
 });
 
-/** A refused entry: the generic message, and each issue under its field. */
-function invalidSuppression(error: unknown) {
-  if (!(error instanceof z.ZodError)) return INVALID_SUPPRESSION;
-  return { message: INVALID_SUPPRESSION, issues: error.issues };
-}
-
 /** An address already on the list, told under the address field. */
 const alreadySuppressed = () => ({
   message: ALREADY_SUPPRESSED,
@@ -56,13 +51,22 @@ export class SuppressionsController extends Controller(
   @TenantScopedModel(SuppressionModel)
   declare suppressions: SuppressionModel;
 
-  /** Puts an address on the list by hand: nothing is sent to it any more. */
+  /**
+   * Puts an address on the list by hand: nothing is sent to it any more. A
+   * refused entry answers the generic message, and each issue under its field.
+   */
   @Post("")
   async add(@JSONBody() body: unknown): Promise<{ added: true }> {
     const input = assertValidation(
       body ?? {},
       (value) => manualSuppressionSchema.parse(value),
-      invalidSuppression,
+      (error) => {
+        if (!(error instanceof z.ZodError)) return INVALID_SUPPRESSION;
+        return {
+          message: INVALID_SUPPRESSION,
+          issues: zodIssuesJson(error.issues),
+        };
+      },
     );
     const isAdded = await suppressAddress(getRequestTenantId(this.ctx), {
       email: input.email,

package/src/routes/template-content.ts

@@ -0,0 +1,45 @@
+import type { MailingTemplate } from "../db";
+import type { TemplateChange } from "../engine";
+import type {
+  CategoryInLocale,
+  TemplateContent,
+  VariableDefinition,
+} from "../types";
+import type { JsonObject } from "../types/json";
+
+export interface TemplateSender {
+  name: string;
+  email: string;
+  replyTo: string;
+}
+
+export interface TemplateContentResponse {
+  /** The template, its name in the reader's language. */
+  template: MailingTemplate;
+  /** The content the editor works on: the draft, else the published one. */
+  content: TemplateContent;
+  /** What customers receive; `null` when the template was never published. */
+  publishedContent: TemplateContent | null;
+  hasDraft: boolean;
+  /** Version customers receive; 0 when never published. */
+  version: number;
+  /** The draft revision a save or a publish must carry back. */
+  revision: number;
+  changes: TemplateChange[];
+  /** The declarations the editor works on: the draft's, else the published. */
+  variables: VariableDefinition[];
+  /** Paths the working content references, across every locale. */
+  detectedVariables: string[];
+  /**
+   * The contract callers send against: the published declarations and the
+   * paths the published content references; `null` when never published.
+   */
+  publishedVariables: VariableDefinition[] | null;
+  publishedDetectedVariables: string[] | null;
+  testData: JsonObject;
+  fallbackLocale: string;
+  /** Whether a send missing a variable fails rather than goes out blank. */
+  blockOnMissingVariables: boolean;
+  categories: CategoryInLocale[];
+  sender: TemplateSender;
+}

package/src/routes/templates.ts

@@ -22,7 +22,6 @@ import {
 import {
   collectContentVariablePaths,
   resolveEmail,
-  type TemplateChange,
   valueFormatOf,
 } from "../engine";
 import {
@@ -31,7 +30,7 @@ import {
   type TemplateFields,
   TemplateModel,
 } from "../db";
-import { saveDetails } from "../data/templates-table";
+import { INVALID_TEMPLATE, saveDetails } from "../data/templates-table";
 import { TemplatesPageController } from "../pages/templates";
 import { forAudience, statsWindowStart } from "../services/metrics";
 import { refreshTemplateAttention } from "../services/template-attention";
@@ -75,18 +74,18 @@ import {
 import {
   BUSINESS_AUDIENCE,
   type CategoryInLocale,
-  type TemplateContent,
   type TemplateStatus,
-  type VariableDefinition,
 } from "../types";
 import {
   duplicateSchema,
   previewSchema,
   publishSchema,
   saveContentSchema,
+  templateDetailsSchema,
   testDataSchema,
   variablesSchema,
 } from "../validation/templates.schema";
+import type { TemplateContentResponse } from "./template-content";
 
 const STARTER_NOT_FOUND = "$dms_mailing.errors.starter_not_found";
 const INVALID_CONTENT = "$dms_mailing.errors.invalid_content";
@@ -125,43 +124,6 @@ export interface CategoriesResponse {
   categories: CategoryInLocale[];
 }
 
-export interface TemplateSender {
-  name: string;
-  email: string;
-  replyTo: string;
-}
-
-export interface TemplateContentResponse {
-  /** The template, its name in the reader's language. */
-  template: MailingTemplate;
-  /** The content the editor works on: the draft, else the published one. */
-  content: TemplateContent;
-  /** What customers receive; `null` when the template was never published. */
-  publishedContent: TemplateContent | null;
-  hasDraft: boolean;
-  /** Version customers receive; 0 when never published. */
-  version: number;
-  /** The draft revision a save or a publish must carry back. */
-  revision: number;
-  changes: TemplateChange[];
-  /** The declarations the editor works on: the draft's, else the published. */
-  variables: VariableDefinition[];
-  /** Paths the working content references, across every locale. */
-  detectedVariables: string[];
-  /**
-   * The contract callers send against: the published declarations and the
-   * paths the published content references; `null` when never published.
-   */
-  publishedVariables: VariableDefinition[] | null;
-  publishedDetectedVariables: string[] | null;
-  testData: Record<string, unknown>;
-  fallbackLocale: string;
-  /** Whether a send missing a variable fails rather than goes out blank. */
-  blockOnMissingVariables: boolean;
-  categories: CategoryInLocale[];
-  sender: TemplateSender;
-}
-
 export interface StarterSummary {
   id: string;
   name: string;
@@ -221,9 +183,9 @@ export class TemplatesController extends Controller(
   }
 
   @Get("/starters")
-  starters(): { starters: StarterSummary[] } {
+  starters() {
     return {
-      starters: STARTER_TEMPLATES.map((starter) => ({
+      starters: STARTER_TEMPLATES.map((starter): StarterSummary => ({
         id: starter.id,
         name: starter.name,
         slug: starter.slug,
@@ -559,7 +521,12 @@ export class TemplatesController extends Controller(
     @JSONBody() body: unknown,
   ) {
     const template = await requireTemplate(this.templates, id);
-    await saveDetails(this.ctx, template, body, this.author);
+    const details = assertValidation(
+      body,
+      (value) => templateDetailsSchema.parse(value),
+      () => INVALID_TEMPLATE,
+    );
+    await saveDetails(this.ctx, template, details, this.author);
     return { id };
   }
 

package/src/routes/zod-json.ts

@@ -0,0 +1,28 @@
+import type { HTTPBody } from "@antelopejs/interface-api";
+import type { ZodIssue } from "zod";
+
+function isJson(value: unknown): value is HTTPBody {
+  if (
+    value === null ||
+    typeof value === "string" ||
+    typeof value === "number" ||
+    typeof value === "boolean"
+  ) {
+    return true;
+  }
+  if (Array.isArray(value)) return value.every(isJson);
+  return typeof value === "object" && Object.values(value).every(isJson);
+}
+
+/**
+ * zod's issues as the JSON value `JSON.stringify` writes for them, so a body
+ * holding it serializes byte for byte as one holding the issues. A `ZodError`
+ * nested in an issue (`unionErrors`, `argumentsError`, `returnTypeError`)
+ * becomes its enumerable fields, `issues` and `name`.
+ */
+export function zodIssuesJson(issues: readonly ZodIssue[]): HTTPBody {
+  const json: unknown = JSON.parse(JSON.stringify(issues));
+  if (!isJson(json))
+    throw new TypeError("zod issues did not serialize to JSON");
+  return json;
+}

package/src/services/attention.ts

@@ -375,20 +375,21 @@ type TemplateAttentionRule = (
   context: TemplateAttentionContext,
 ) => boolean;
 
-const TEMPLATE_ATTENTION_RULES: Record<
+const TEMPLATE_ATTENTION_RULES = new Map<
   TemplateAttentionReason,
   TemplateAttentionRule
-> = {
-  stale_draft: (template, context) => isStaleDraft(template, context.now),
-  never_sent: (template, context) =>
-    template.status === "live" && !context.sentSlugs.has(template.slug),
-  missing_locale: (template, context) =>
-    isMissingLocale(template, context.knownLocales),
-};
-
-const TEMPLATE_ATTENTION_REASONS = Object.keys(
-  TEMPLATE_ATTENTION_RULES,
-) as TemplateAttentionReason[];
+>([
+  ["stale_draft", (template, context) => isStaleDraft(template, context.now)],
+  [
+    "never_sent",
+    (template, context) =>
+      template.status === "live" && !context.sentSlugs.has(template.slug),
+  ],
+  [
+    "missing_locale",
+    (template, context) => isMissingLocale(template, context.knownLocales),
+  ],
+]);
 
 /**
  * Why a template needs a look, in a stable order: a draft never published and
@@ -399,7 +400,7 @@ export function templateAttentionReasons(
   template: MailingTemplate,
   context: TemplateAttentionContext,
 ): TemplateAttentionReason[] {
-  return TEMPLATE_ATTENTION_REASONS.filter((reason) =>
-    TEMPLATE_ATTENTION_RULES[reason](template, context),
-  );
+  return [...TEMPLATE_ATTENTION_RULES]
+    .filter(([, applies]) => applies(template, context))
+    .map(([reason]) => reason);
 }

package/src/services/catalog.ts

@@ -1,21 +1,17 @@
 import { readFileSync } from "node:fs";
 import path from "node:path";
 import type { ModuleStatus } from "@antelopejs/interface-dms/page";
+import { isText } from "../validation/guards";
+import { parseJsonObject } from "../validation/json";
 import { readCapabilities } from "./provider";
 
 const PACKAGE_JSON_PATH = path.join(__dirname, "../../package.json");
 
-interface PackageManifest {
-  version?: string;
-}
-
 /** The module's published version, as the catalog tile and the sidebar show it. */
 export function moduleVersion(): string | undefined {
   try {
-    const manifest = JSON.parse(
-      readFileSync(PACKAGE_JSON_PATH, "utf8"),
-    ) as PackageManifest;
-    return manifest.version;
+    const manifest = parseJsonObject(readFileSync(PACKAGE_JSON_PATH, "utf8"));
+    return isText(manifest.version) ? manifest.version : undefined;
   } catch {
     return undefined;
   }

package/src/services/declaration-error.ts

@@ -26,7 +26,7 @@ function describeIssues(error: ZodError): string {
 /** `input` parsed by `schema`, or a `DeclarationError` under `code`. */
 export function parseDeclared<Output, Input>(
   schema: ZodType<Output, ZodTypeDef, Input>,
-  input: unknown,
+  input: Input,
   code: string,
   subject: string,
 ): Output {