@digimuza/saas-core 0.0.2

package/dist/db/schema/webhooks.js

@@ -0,0 +1,147 @@
+import { relations, sql } from "drizzle-orm";
+import { boolean, index, integer, jsonb, pgEnum, pgTable, text, timestamp, unique, uuid, } from "drizzle-orm/pg-core";
+import { events } from "./events.js";
+import { primaryId, timestamps } from "./_shared.js";
+import { workspaces } from "./workspaces.js";
+export const webhookDeliveryStatus = pgEnum("webhook_delivery_status", [
+    "pending",
+    "succeeded",
+    "failed",
+    /** Retries exhausted. Terminal, and worth alerting on. */
+    "exhausted",
+]);
+export const inboundWebhookStatus = pgEnum("inbound_webhook_status", [
+    "pending",
+    "processed",
+    "failed",
+    "ignored",
+]);
+/**
+ * An outgoing webhook endpoint a workspace has registered.
+ *
+ * The signing secret is stored in the clear, unlike an API key. It has to be: the
+ * core signs every payload with it, and the receiving system needs the same value
+ * to verify. A one-way hash would make both impossible. Encryption at rest is the
+ * mitigation, and rotation is exposed so a leaked secret can be replaced without
+ * recreating the endpoint.
+ */
+export const webhookEndpoints = pgTable("webhook_endpoints", {
+    id: primaryId(),
+    workspaceId: uuid("workspace_id")
+        .notNull()
+        .references(() => workspaces.id, { onDelete: "cascade" }),
+    url: text("url").notNull(),
+    description: text("description"),
+    /** HMAC-SHA256 signing secret. Rotatable. */
+    secret: text("secret").notNull(),
+    /** Event types this endpoint wants. Empty means every type. */
+    eventTypes: text("event_types").array().notNull().default(sql `'{}'::text[]`),
+    isActive: boolean("is_active").notNull().default(true),
+    /**
+     * Consecutive failed deliveries, reset by any success.
+     *
+     * An endpoint that has been broken for days should stop consuming retry
+     * budget — this is what lets a caller decide when to give up on it, without
+     * having to aggregate the delivery table on every dispatch.
+     */
+    consecutiveFailures: integer("consecutive_failures").notNull().default(0),
+    /** Set when the endpoint was disabled for repeated failure. */
+    disabledAt: timestamp("disabled_at", { withTimezone: true, mode: "date" }),
+    ...timestamps,
+}, (table) => [
+    index("webhook_endpoints_workspace_idx").on(table.workspaceId),
+    // One registration per URL per workspace; a duplicate is always a mistake.
+    unique("webhook_endpoints_workspace_url_unique").on(table.workspaceId, table.url),
+]);
+/**
+ * One attempt-tracked delivery of one event to one endpoint.
+ *
+ * A row per (endpoint, event) pair, created when the event is dispatched and
+ * updated as attempts happen. The unique constraint is the idempotency guarantee:
+ * dispatching the same event twice — a retried job, a replayed event — cannot
+ * produce a second delivery.
+ *
+ * Delivery is deliberately a *record*, not an in-flight promise. The HTTP call is
+ * driven by a durable worker reading this table, so a process dying mid-attempt
+ * loses nothing.
+ */
+export const webhookDeliveries = pgTable("webhook_deliveries", {
+    id: primaryId(),
+    endpointId: uuid("endpoint_id")
+        .notNull()
+        .references(() => webhookEndpoints.id, { onDelete: "cascade" }),
+    /**
+     * The event being delivered. Cascades: an event that has been pruned has no
+     * delivery worth retrying.
+     */
+    eventId: uuid("event_id")
+        .notNull()
+        .references(() => events.id, { onDelete: "cascade" }),
+    /** Denormalised so a worker can filter without joining. */
+    eventType: text("event_type").notNull(),
+    /** Exactly what will be sent, frozen at dispatch. */
+    payload: jsonb("payload").notNull(),
+    status: webhookDeliveryStatus("status").notNull().default("pending"),
+    attemptCount: integer("attempt_count").notNull().default(0),
+    /** When the next attempt becomes due. Null once terminal. */
+    nextAttemptAt: timestamp("next_attempt_at", { withTimezone: true, mode: "date" }),
+    lastAttemptedAt: timestamp("last_attempted_at", { withTimezone: true, mode: "date" }),
+    /** HTTP status of the last attempt, when there was a response at all. */
+    responseStatus: integer("response_status"),
+    /** Truncated failure detail. Never contains the signing secret. */
+    error: text("error"),
+    ...timestamps,
+}, (table) => [
+    unique("webhook_deliveries_endpoint_event_unique").on(table.endpointId, table.eventId),
+    /**
+     * The worker's query: "what is due now?". Ordered so pending work is found
+     * without scanning succeeded history.
+     */
+    index("webhook_deliveries_due_idx").on(table.status, table.nextAttemptAt),
+    index("webhook_deliveries_endpoint_idx").on(table.endpointId, table.createdAt.desc()),
+]);
+/**
+ * A webhook received *from* an external system.
+ *
+ * Generalises what billing already does for Revolut: `(source, external_id)` is
+ * unique, and the insert is what claims an event for processing — so at-least-once
+ * delivery is handled by PostgreSQL rather than a check-then-act two concurrent
+ * requests could both pass.
+ *
+ * The raw payload is retained so a failed handler can be replayed without asking
+ * the sender to redeliver.
+ */
+export const inboundWebhooks = pgTable("inbound_webhooks", {
+    id: primaryId(),
+    /** Which system sent it, e.g. `"github"`. */
+    source: text("source").notNull(),
+    /** The sender's own event id. The idempotency key. */
+    externalId: text("external_id").notNull(),
+    type: text("type").notNull(),
+    payload: jsonb("payload").notNull(),
+    /** Set when the sender identifies a tenant we can resolve. */
+    workspaceId: uuid("workspace_id").references(() => workspaces.id, { onDelete: "cascade" }),
+    status: inboundWebhookStatus("status").notNull().default("pending"),
+    processedAt: timestamp("processed_at", { withTimezone: true, mode: "date" }),
+    error: text("error"),
+    ...timestamps,
+}, (table) => [
+    unique("inbound_webhooks_source_external_unique").on(table.source, table.externalId),
+    index("inbound_webhooks_status_idx").on(table.status),
+    index("inbound_webhooks_source_idx").on(table.source, table.createdAt.desc()),
+]);
+export const webhookEndpointsRelations = relations(webhookEndpoints, ({ one, many }) => ({
+    workspace: one(workspaces, {
+        fields: [webhookEndpoints.workspaceId],
+        references: [workspaces.id],
+    }),
+    deliveries: many(webhookDeliveries),
+}));
+export const webhookDeliveriesRelations = relations(webhookDeliveries, ({ one }) => ({
+    endpoint: one(webhookEndpoints, {
+        fields: [webhookDeliveries.endpointId],
+        references: [webhookEndpoints.id],
+    }),
+    event: one(events, { fields: [webhookDeliveries.eventId], references: [events.id] }),
+}));
+//# sourceMappingURL=webhooks.js.map

package/dist/db/schema/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../../src/db/schema/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EACL,OAAO,EACP,KAAK,EACL,OAAO,EACP,KAAK,EACL,MAAM,EACN,OAAO,EACP,IAAI,EACJ,SAAS,EACT,MAAM,EACN,IAAI,GACL,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,yBAAyB,EAAE;IACrE,SAAS;IACT,WAAW;IACX,QAAQ;IACR,0DAA0D;IAC1D,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,wBAAwB,EAAE;IACnE,SAAS;IACT,WAAW;IACX,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CACrC,mBAAmB,EACnB;IACE,EAAE,EAAE,SAAS,EAAE;IACf,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;SAC9B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAE3D,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE;IAC1B,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC;IAEhC,6CAA6C;IAC7C,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAEhC,+DAA+D;IAC/D,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,cAAc,CAAC;IAE5E,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAEtD;;;;;;OAMG;IACH,mBAAmB,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAEzE,+DAA+D;IAC/D,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAE1E,GAAG,UAAU;CACd,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;IAC9D,2EAA2E;IAC3E,MAAM,CAAC,wCAAwC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC;CAClF,CACF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CACtC,oBAAoB,EACpB;IACE,EAAE,EAAE,SAAS,EAAE;IACf,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;SAC5B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAEjE;;;OAGG;IACH,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;SACtB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAEvD,2DAA2D;IAC3D,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAEvC,qDAAqD;IACrD,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IAEnC,MAAM,EAAE,qBAAqB,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACpE,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAE3D,6DAA6D;IAC7D,aAAa,EAAE,SAAS,CAAC,iBAAiB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACjF,eAAe,EAAE,SAAS,CAAC,mBAAmB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAErF,yEAAyE;IACzE,cAAc,EAAE,OAAO,CAAC,iBAAiB,CAAC;IAC1C,mEAAmE;IACnE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;IAEpB,GAAG,UAAU;CACd,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,MAAM,CAAC,0CAA0C,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC;IAEtF;;;OAGG;IACH,KAAK,CAAC,4BAA4B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC;IACzE,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;CACtF,CACF,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CACpC,kBAAkB,EAClB;IACE,EAAE,EAAE,SAAS,EAAE;IAEf,6CAA6C;IAC7C,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC,sDAAsD;IACtD,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IAEzC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IAEnC,8DAA8D;IAC9D,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAE1F,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACnE,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC5E,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC;IAEpB,GAAG,UAAU;CACd,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,MAAM,CAAC,yCAAyC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC;IACpF,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IACrD,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;CAC9E,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAS,CAAC,gBAAgB,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACvF,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE;QACzB,MAAM,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC;QACtC,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;KAC5B,CAAC;IACF,UAAU,EAAE,IAAI,CAAC,iBAAiB,CAAC;CACpC,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,0BAA0B,GAAG,SAAS,CAAC,iBAAiB,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACnF,QAAQ,EAAE,GAAG,CAAC,gBAAgB,EAAE;QAC9B,MAAM,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC;QACtC,UAAU,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;KAClC,CAAC;IACF,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;CACrF,CAAC,CAAC,CAAC"}

package/dist/db/schema/workspaces.d.ts

@@ -0,0 +1,196 @@
+/**
+ * A tenant. Every tenant-scoped row in the system hangs off a workspace.
+ *
+ * `slug` is not in the original column list but is included because workspaces
+ * are addressed in URLs (`/w/acme/projects`); without it every route would have
+ * to expose a UUID.
+ */
+export declare const workspaces: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "workspaces";
+    schema: undefined;
+    columns: {
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "workspaces";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at";
+            tableName: "workspaces";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "workspaces";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        name: import("drizzle-orm/pg-core").PgColumn<{
+            name: "name";
+            tableName: "workspaces";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        slug: import("drizzle-orm/pg-core").PgColumn<{
+            name: "slug";
+            tableName: "workspaces";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: 'pg';
+}>;
+/**
+ * The user-to-workspace relationship.
+ *
+ * A user's membership is the *only* thing that grants access to a workspace, so
+ * `workspace_id` never appears on `users`: a user belongs to many workspaces.
+ *
+ * The composite primary key doubles as the foreign-key target that
+ * `workspace_member_roles` uses to make cross-workspace role assignment
+ * structurally impossible.
+ */
+export declare const workspaceMembers: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "workspace_members";
+    schema: undefined;
+    columns: {
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "workspace_members";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at";
+            tableName: "workspace_members";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        workspaceId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "workspace_id";
+            tableName: "workspace_members";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        userId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "user_id";
+            tableName: "workspace_members";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: 'pg';
+}>;
+export declare const workspacesRelations: import("drizzle-orm").Relations<"workspaces", {
+    members: import("drizzle-orm").Many<"workspace_members">;
+}>;
+export declare const workspaceMembersRelations: import("drizzle-orm").Relations<"workspace_members", {
+    workspace: import("drizzle-orm").One<"workspaces", true>;
+    user: import("drizzle-orm").One<"users", true>;
+}>;
+export type Workspace = typeof workspaces.$inferSelect;
+export type NewWorkspace = typeof workspaces.$inferInsert;
+export type WorkspaceMember = typeof workspaceMembers.$inferSelect;
+export type NewWorkspaceMember = typeof workspaceMembers.$inferInsert;
+//# sourceMappingURL=workspaces.d.ts.map

package/dist/db/schema/workspaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../../src/db/schema/workspaces.ts"],"names":[],"mappings":"AAMA;;;;;;GAMG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKrB,CAAC;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmB5B,CAAC;AAEF,eAAO,MAAM,mBAAmB;;EAE7B,CAAC;AAEJ,eAAO,MAAM,yBAAyB;;;EASnC,CAAC;AAEJ,MAAM,MAAM,SAAS,GAAG,OAAO,UAAU,CAAC,YAAY,CAAC;AACvD,MAAM,MAAM,YAAY,GAAG,OAAO,UAAU,CAAC,YAAY,CAAC;AAC1D,MAAM,MAAM,eAAe,GAAG,OAAO,gBAAgB,CAAC,YAAY,CAAC;AACnE,MAAM,MAAM,kBAAkB,GAAG,OAAO,gBAAgB,CAAC,YAAY,CAAC"}

package/dist/db/schema/workspaces.js

@@ -0,0 +1,57 @@
+import { relations } from "drizzle-orm";
+import { index, pgTable, primaryKey, text, uuid } from "drizzle-orm/pg-core";
+import { primaryId, timestamps } from "./_shared.js";
+import { users } from "./users.js";
+/**
+ * A tenant. Every tenant-scoped row in the system hangs off a workspace.
+ *
+ * `slug` is not in the original column list but is included because workspaces
+ * are addressed in URLs (`/w/acme/projects`); without it every route would have
+ * to expose a UUID.
+ */
+export const workspaces = pgTable("workspaces", {
+    id: primaryId(),
+    name: text("name").notNull(),
+    slug: text("slug").notNull().unique(),
+    ...timestamps,
+});
+/**
+ * The user-to-workspace relationship.
+ *
+ * A user's membership is the *only* thing that grants access to a workspace, so
+ * `workspace_id` never appears on `users`: a user belongs to many workspaces.
+ *
+ * The composite primary key doubles as the foreign-key target that
+ * `workspace_member_roles` uses to make cross-workspace role assignment
+ * structurally impossible.
+ */
+export const workspaceMembers = pgTable("workspace_members", {
+    workspaceId: uuid("workspace_id")
+        .notNull()
+        .references(() => workspaces.id, { onDelete: "cascade" }),
+    userId: uuid("user_id")
+        .notNull()
+        .references(() => users.id, { onDelete: "cascade" }),
+    ...timestamps,
+}, (table) => [
+    primaryKey({ columns: [table.workspaceId, table.userId] }),
+    /**
+     * "Which workspaces does this user belong to?" cannot use the primary key,
+     * whose leading column is `workspace_id`.
+     */
+    index("workspace_members_user_id_idx").on(table.userId),
+]);
+export const workspacesRelations = relations(workspaces, ({ many }) => ({
+    members: many(workspaceMembers),
+}));
+export const workspaceMembersRelations = relations(workspaceMembers, ({ one }) => ({
+    workspace: one(workspaces, {
+        fields: [workspaceMembers.workspaceId],
+        references: [workspaces.id],
+    }),
+    user: one(users, {
+        fields: [workspaceMembers.userId],
+        references: [users.id],
+    }),
+}));
+//# sourceMappingURL=workspaces.js.map

package/dist/db/schema/workspaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.js","sourceRoot":"","sources":["../../../src/db/schema/workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAE7E,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE;IAC9C,EAAE,EAAE,SAAS,EAAE;IACf,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IACrC,GAAG,UAAU;CACd,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CACrC,mBAAmB,EACnB;IACE,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;SAC9B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC3D,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;SACpB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtD,GAAG,UAAU;CACd,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1D;;;OAGG;IACH,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;CACxD,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACtE,OAAO,EAAE,IAAI,CAAC,gBAAgB,CAAC;CAChC,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAS,CAAC,gBAAgB,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACjF,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE;QACzB,MAAM,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC;QACtC,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;KAC5B,CAAC;IACF,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE;QACf,MAAM,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC;QACjC,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;KACvB,CAAC;CACH,CAAC,CAAC,CAAC"}

package/dist/db/types.d.ts

@@ -0,0 +1,18 @@
+import type { ExtractTablesWithRelations } from "drizzle-orm";
+import type { PgDatabase, PgQueryResultHKT, PgTransaction } from "drizzle-orm/pg-core";
+import type * as schema from "./schema/index.ts";
+export type CoreSchema = typeof schema;
+type CoreRelations = ExtractTablesWithRelations<CoreSchema>;
+/**
+ * A database handle typed against the core schema, independent of the driver.
+ *
+ * Services accept this rather than a concrete `PostgresJsDatabase` so the same
+ * code runs against postgres.js in production and PGlite in tests. A
+ * `PgTransaction` is assignable to it, so any service also composes inside a
+ * transaction.
+ */
+export type CoreDatabase = PgDatabase<PgQueryResultHKT, CoreSchema, CoreRelations>;
+/** A transaction over the core schema, as passed to `db.transaction(...)`. */
+export type CoreTransaction = PgTransaction<PgQueryResultHKT, CoreSchema, CoreRelations>;
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/db/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/db/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEvF,OAAO,KAAK,KAAK,MAAM,MAAM,mBAAmB,CAAC;AAEjD,MAAM,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC;AAEvC,KAAK,aAAa,GAAG,0BAA0B,CAAC,UAAU,CAAC,CAAC;AAE5D;;;;;;;GAOG;AACH,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,gBAAgB,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AAEnF,8EAA8E;AAC9E,MAAM,MAAM,eAAe,GAAG,aAAa,CAAC,gBAAgB,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC"}

package/dist/db/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/db/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/db/types.ts"],"names":[],"mappings":""}

package/dist/email/adapters.d.ts

@@ -0,0 +1,29 @@
+import type { EmailProvider, OutgoingEmail } from "./provider.ts";
+/**
+ * Logs instead of sending.
+ *
+ * The right default for local development: it needs no credentials, and it makes
+ * the message visible without a third-party inbox. Deliberately refuses to run in
+ * production, because silently discarding a password reset is worse than failing.
+ */
+export interface ConsoleEmailOptions {
+    readonly log?: (line: string) => void;
+    /** Set true to allow it outside development. Almost always a mistake. */
+    readonly allowInProduction?: boolean;
+    readonly isProduction?: boolean;
+}
+export declare function createConsoleEmailProvider(options?: ConsoleEmailOptions): EmailProvider;
+export interface MemoryEmailProvider extends EmailProvider {
+    readonly sent: OutgoingEmail[];
+    /** Every message sent to this address, for assertions. */
+    to(address: string): OutgoingEmail[];
+    clear(): void;
+}
+/**
+ * Collects messages in memory. For tests.
+ *
+ * Deduplicates on `idempotencyKey` so a test can assert retry-safety without a
+ * real provider — the behaviour a good provider gives you, made observable.
+ */
+export declare function createMemoryEmailProvider(): MemoryEmailProvider;
+//# sourceMappingURL=adapters.d.ts.map

package/dist/email/adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../src/email/adapters.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAa,MAAM,eAAe,CAAC;AAG7E;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,yEAAyE;IACzE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,wBAAgB,0BAA0B,CAAC,OAAO,GAAE,mBAAwB,GAAG,aAAa,CA6B3F;AAED,MAAM,WAAW,mBAAoB,SAAQ,aAAa;IACxD,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC;IAC/B,0DAA0D;IAC1D,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,EAAE,CAAC;IACrC,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,IAAI,mBAAmB,CAmC/D"}

package/dist/email/adapters.js

@@ -0,0 +1,60 @@
+import { createHash, randomUUID } from "node:crypto";
+import { formatAddress } from "./provider.js";
+export function createConsoleEmailProvider(options = {}) {
+    const log = options.log ?? ((line) => console.info(line));
+    return {
+        name: "console",
+        async send(message) {
+            if (options.isProduction === true && options.allowInProduction !== true) {
+                throw new Error("The console email provider is refusing to run in production. " +
+                    "Configure a real provider, or pass allowInProduction to override.");
+            }
+            log([
+                "--- email ---",
+                `to:      ${message.to.map(formatAddress).join(", ")}`,
+                `from:    ${formatAddress(message.from)}`,
+                `subject: ${message.subject}`,
+                "",
+                message.text,
+                "-------------",
+            ].join("\n"));
+            return { id: `console_${randomUUID()}`, provider: "console" };
+        },
+    };
+}
+/**
+ * Collects messages in memory. For tests.
+ *
+ * Deduplicates on `idempotencyKey` so a test can assert retry-safety without a
+ * real provider — the behaviour a good provider gives you, made observable.
+ */
+export function createMemoryEmailProvider() {
+    const sent = [];
+    const seenKeys = new Set();
+    return {
+        name: "memory",
+        sent,
+        async send(message) {
+            if (message.idempotencyKey !== undefined) {
+                if (seenKeys.has(message.idempotencyKey)) {
+                    return { id: `memory_dedup_${message.idempotencyKey}`, provider: "memory" };
+                }
+                seenKeys.add(message.idempotencyKey);
+            }
+            sent.push(message);
+            const digest = createHash("sha256")
+                .update(`${message.subject}:${sent.length}`)
+                .digest("hex")
+                .slice(0, 16);
+            return { id: `memory_${digest}`, provider: "memory" };
+        },
+        to(address) {
+            return sent.filter((message) => message.to.some((recipient) => recipient.address.toLowerCase() === address.toLowerCase()));
+        },
+        clear() {
+            sent.length = 0;
+            seenKeys.clear();
+        },
+    };
+}
+//# sourceMappingURL=adapters.js.map

package/dist/email/adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../src/email/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGrD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAgB9C,MAAM,UAAU,0BAA0B,CAAC,OAAO,GAAwB,EAAE;IAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAElE,OAAO;QACL,IAAI,EAAE,SAAS;QAEf,KAAK,CAAC,IAAI,CAAC,OAAsB;YAC/B,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,IAAI,OAAO,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CACb,+DAA+D;oBAC7D,mEAAmE,CACtE,CAAC;YACJ,CAAC;YAED,GAAG,CACD;gBACE,eAAe;gBACf,YAAY,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACtD,YAAY,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;gBACzC,YAAY,OAAO,CAAC,OAAO,EAAE;gBAC7B,EAAE;gBACF,OAAO,CAAC,IAAI;gBACZ,eAAe;aAChB,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;YAEF,OAAO,EAAE,EAAE,EAAE,WAAW,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QAChE,CAAC;KACF,CAAC;AACJ,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,IAAI;QAEJ,KAAK,CAAC,IAAI,CAAC,OAAO;YAChB,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;gBACzC,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;oBACzC,OAAO,EAAE,EAAE,EAAE,gBAAgB,OAAO,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;gBAC9E,CAAC;gBACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YACvC,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;iBAChC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;iBAC3C,MAAM,CAAC,KAAK,CAAC;iBACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,UAAU,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACxD,CAAC;QAED,EAAE,CAAC,OAAO;YACR,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAC1F,CAAC;QACJ,CAAC;QAED,KAAK;YACH,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;YAChB,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/email/index.d.ts

@@ -0,0 +1,20 @@
+import type { EmailProvider } from "./provider.ts";
+export { createConsoleEmailProvider, createMemoryEmailProvider, type ConsoleEmailOptions, type MemoryEmailProvider, } from "./adapters.ts";
+export { formatAddress, type EmailAddress, type EmailProvider, type OutgoingEmail, type SentEmail, } from "./provider.ts";
+export { createResendProvider, type ResendAdapterOptions } from "./resend.ts";
+export { createEmailService, type EmailService, type EmailServiceDeps, type SendEmailInput, type SendTemplateInput, } from "./service.ts";
+export { coreEmailTemplates, defineEmailTemplates, emailTemplate, mergeEmailTemplates, overrideEmailTemplates, type CoreEmailTemplates, type EmailTemplate, type EmailTemplateMap, type EmailTemplateName, type EmailTemplateRegistry, } from "./templates.ts";
+/**
+ * A provider built from the `email` configuration section.
+ *
+ * Resend outside development, the console logger inside it — so a fresh checkout
+ * can send an invitation without credentials, while production refuses to
+ * silently discard one.
+ */
+export declare function createConfiguredEmailProvider(): EmailProvider;
+/** The configured default sender. */
+export declare function configuredSender(): {
+    address: string;
+    name?: string;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/email/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/email/index.ts"],"names":[],"mappings":"AAkDA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,aAAa,EACb,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,SAAS,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,oBAAoB,EAAE,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAE9E,OAAO,EACL,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,gBAAgB,CAAC;AAExB;;;;;;GAMG;AACH,wBAAgB,6BAA6B,IAAI,aAAa,CAQ7D;AAED,qCAAqC;AACrC,wBAAgB,gBAAgB,IAAI;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAMrE"}

package/dist/email/index.js

@@ -0,0 +1,79 @@
+/**
+ * Public email surface: `@digimuza/saas-core/email`. Server-only.
+ *
+ * Provider-independent by construction: everything above {@link EmailProvider} is
+ * generic, so adopting another provider means writing a ~20-line adapter.
+ *
+ * Templates are typed the same way events are — a Zod schema per template gives
+ * the compile-time payload type *and* validates at runtime, so a template
+ * rendered with the wrong data fails before a message is built rather than
+ * emailing a customer the word "undefined".
+ *
+ * ```ts
+ * import { z } from "zod";
+ * import {
+ *   coreEmailTemplates, createEmailService, defineEmailTemplates,
+ *   emailTemplate, mergeEmailTemplates, createResendProvider,
+ * } from "@digimuza/saas-core/email";
+ * import { config } from "@digimuza/saas-core/config";
+ *
+ * const templates = mergeEmailTemplates(
+ *   coreEmailTemplates,
+ *   defineEmailTemplates({
+ *     "project.shared": emailTemplate({
+ *       schema: z.object({ projectName: z.string() }),
+ *       subject: (data) => `${data.projectName} was shared with you`,
+ *       text: (data) => `Someone shared ${data.projectName}.`,
+ *     }),
+ *   }),
+ * );
+ *
+ * export const email = createEmailService({
+ *   provider: createResendProvider({ apiKey: config.email.apiKey }),
+ *   templates,
+ *   from: { address: config.email.fromAddress, name: config.email.fromName },
+ * });
+ *
+ * await email.sendTemplate({
+ *   to: "new@example.com",
+ *   template: "project.shared",     // autocompleted
+ *   data: { projectName: "Apollo" },  // narrowed to that template's schema
+ *   idempotencyKey: requestId,
+ * });
+ * ```
+ *
+ * Sending is **not** transactional with the database. A retried request can send
+ * twice, and `idempotencyKey` is the only defence — pass one for anything a
+ * customer would notice receiving twice.
+ */
+import { config } from "../config/index.js";
+import { createConsoleEmailProvider } from "./adapters.js";
+import { createResendProvider } from "./resend.js";
+export { createConsoleEmailProvider, createMemoryEmailProvider, } from "./adapters.js";
+export { formatAddress, } from "./provider.js";
+export { createResendProvider } from "./resend.js";
+export { createEmailService, } from "./service.js";
+export { coreEmailTemplates, defineEmailTemplates, emailTemplate, mergeEmailTemplates, overrideEmailTemplates, } from "./templates.js";
+/**
+ * A provider built from the `email` configuration section.
+ *
+ * Resend outside development, the console logger inside it — so a fresh checkout
+ * can send an invitation without credentials, while production refuses to
+ * silently discard one.
+ */
+export function createConfiguredEmailProvider() {
+    const emailConfig = config.email;
+    if (!config.app.isProduction && emailConfig.apiKey.startsWith("console")) {
+        return createConsoleEmailProvider({ isProduction: false });
+    }
+    return createResendProvider({ apiKey: emailConfig.apiKey });
+}
+/** The configured default sender. */
+export function configuredSender() {
+    const emailConfig = config.email;
+    return {
+        address: emailConfig.fromAddress,
+        ...(emailConfig.fromName !== undefined ? { name: emailConfig.fromName } : {}),
+    };
+}
+//# sourceMappingURL=index.js.map