@endora-commerce/mod-newsletter 0.100.0

package/dist/backend/services/content.service.js

@@ -0,0 +1,48 @@
+import { renderEmailHtml } from '@endora-commerce/email-components/render/render-email-html';
+import { renderEmailText } from '@endora-commerce/email-components/render/render-email-text';
+import { renderDirectives } from '@endora-commerce/email-components/directives/directive-engine';
+const EMPTY_EMBEDS = { blocks: {}, templates: {} };
+/** Merge channel branding into the directive variable map (logo + accent). */
+export async function withEmailBranding(variables, salesChannelId, resolve) {
+    if (!resolve)
+        return { variables };
+    const branding = await resolve(salesChannelId);
+    return {
+        variables: {
+            ...variables,
+            branding: { logoUrl: branding.logoUrl, accentColor: branding.accentColor },
+        },
+        accentColor: branding.accentColor,
+    };
+}
+/**
+ * Pure render: tree → email-safe HTML + plain-text, then resolve `{{var}}` /
+ * `{{if}}` / `{{for}}` directives against the recipient context. HTML values
+ * are escaped; text values are raw. Missing variables resolve to empty strings
+ * (the engine never throws), so no literal `{{...}}` ever ships (FR-028).
+ */
+export function renderNewsletterEmail(input) {
+    const embeds = input.embeds ?? EMPTY_EMBEDS;
+    const directiveCtx = {
+        ...input.context.variables,
+        unsubscribeUrl: input.context.unsubscribeUrl,
+        ...(input.context.webviewUrl !== undefined ? { webviewUrl: input.context.webviewUrl } : {}),
+    };
+    const htmlOpts = input.accentColor !== undefined
+        ? { embeds, accentColor: input.accentColor }
+        : { embeds };
+    const rawHtml = renderEmailHtml(input.content, htmlOpts);
+    const rawText = renderEmailText(input.content, { embeds });
+    return {
+        subject: renderDirectives(input.subject, directiveCtx),
+        html: renderDirectives(rawHtml, directiveCtx, { escape: true }),
+        text: renderDirectives(rawText, directiveCtx),
+    };
+}
+export class NewsletterContentService {
+    /** Render a campaign/automation email for one recipient. */
+    render(input) {
+        return renderNewsletterEmail(input);
+    }
+}
+//# sourceMappingURL=content.service.js.map

package/dist/backend/services/content.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.service.js","sourceRoot":"","sources":["../../../src/backend/services/content.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,4DAA4D,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,4DAA4D,CAAC;AAC7F,OAAO,EAAE,gBAAgB,EAAE,MAAM,+DAA+D,CAAC;AAsCjG,MAAM,YAAY,GAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAMhE,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAkC,EAClC,cAA6B,EAC7B,OAA+B;IAE/B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/C,OAAO;QACL,SAAS,EAAE;YACT,GAAG,SAAS;YACZ,QAAQ,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE;SAC3E;QACD,WAAW,EAAE,QAAQ,CAAC,WAAW;KAClC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAkB;IACtD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,YAAY,CAAC;IAC5C,MAAM,YAAY,GAA4B;QAC5C,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;QAC5C,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5F,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,KAAK,SAAS;QAC9C,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;QAC5C,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAE3D,OAAO;QACL,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC;QACtD,IAAI,EAAE,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC/D,IAAI,EAAE,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,wBAAwB;IACnC,4DAA4D;IAC5D,MAAM,CAAC,KAAkB;QACvB,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/backend/services/custom-field.service.d.ts

@@ -0,0 +1,16 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { type CreateNewsletterCustomFieldRequest, type NewsletterCustomField as NewsletterCustomFieldDto, type UpdateNewsletterCustomFieldRequest } from '@endora-commerce/contracts';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+/** Newsletter custom-field definition CRUD (feature 048, US3). */
+export declare class NewsletterCustomFieldService {
+    #private;
+    private readonly emFactory;
+    private readonly auditLog?;
+    constructor(emFactory: () => EntityManager, auditLog?: AuditPort | undefined);
+    list(): Promise<NewsletterCustomFieldDto[]>;
+    create(input: CreateNewsletterCustomFieldRequest): Promise<NewsletterCustomFieldDto>;
+    update(id: string, input: UpdateNewsletterCustomFieldRequest): Promise<NewsletterCustomFieldDto>;
+    remove(id: string): Promise<void>;
+    private toDto;
+}
+//# sourceMappingURL=custom-field.service.d.ts.map

package/dist/backend/services/custom-field.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-field.service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/custom-field.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAEL,KAAK,kCAAkC,EACvC,KAAK,qBAAqB,IAAI,wBAAwB,EACtD,KAAK,kCAAkC,EACxC,MAAM,4BAA4B,CAAC;AAIpC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAElE,kEAAkE;AAClE,qBAAa,4BAA4B;;IAErC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBADT,SAAS,EAAE,MAAM,aAAa,EAC9B,QAAQ,CAAC,EAAE,SAAS,YAAA;IAejC,IAAI,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;IAM3C,MAAM,CAAC,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAepF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAUhG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQvC,OAAO,CAAC,KAAK;CAGd"}

package/dist/backend/services/custom-field.service.js

@@ -0,0 +1,67 @@
+import { ERROR_CODES, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { NewsletterCustomField } from '../entities/newsletter-custom-field.entity.js';
+import { recordAuditFromContext } from '@endora-commerce/platform/commands';
+/** Newsletter custom-field definition CRUD (feature 048, US3). */
+export class NewsletterCustomFieldService {
+    emFactory;
+    auditLog;
+    constructor(emFactory, auditLog) {
+        this.emFactory = emFactory;
+        this.auditLog = auditLog;
+    }
+    #audit(em, action, objectId, stateAfter) {
+        if (this.auditLog) {
+            recordAuditFromContext(this.auditLog, em, {
+                action,
+                objectType: 'newsletter_custom_field',
+                objectId,
+                stateBefore: null,
+                stateAfter,
+            });
+        }
+    }
+    async list() {
+        const em = this.emFactory();
+        const rows = await em.find(NewsletterCustomField, {}, { orderBy: { key: 'asc' } });
+        return rows.map((f) => this.toDto(f));
+    }
+    async create(input) {
+        const em = this.emFactory();
+        const existing = await em.findOne(NewsletterCustomField, { key: input.key });
+        if (existing)
+            throw new HttpError(409, ERROR_CODES.VALIDATION_FAILED, 'Field key already exists.');
+        const field = em.create(NewsletterCustomField, {
+            key: input.key,
+            label: input.label,
+            type: input.type,
+        });
+        em.persist(field);
+        this.#audit(em, 'newsletter_custom_field.create', field.id, { key: field.key });
+        await em.flush();
+        return this.toDto(field);
+    }
+    async update(id, input) {
+        const em = this.emFactory();
+        const field = await em.findOne(NewsletterCustomField, { id });
+        if (!field)
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Field not found.');
+        if (input.label !== undefined)
+            field.label = input.label;
+        this.#audit(em, 'newsletter_custom_field.update', field.id, { label: field.label });
+        await em.persistAndFlush(field);
+        return this.toDto(field);
+    }
+    async remove(id) {
+        const em = this.emFactory();
+        const field = await em.findOne(NewsletterCustomField, { id });
+        if (!field)
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Field not found.');
+        this.#audit(em, 'newsletter_custom_field.delete', field.id, null);
+        await em.removeAndFlush(field);
+    }
+    toDto(f) {
+        return { id: f.id, key: f.key, label: f.label, type: f.type };
+    }
+}
+//# sourceMappingURL=custom-field.service.js.map

package/dist/backend/services/custom-field.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-field.service.js","sourceRoot":"","sources":["../../../src/backend/services/custom-field.service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,GAIZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AACtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAG5E,kEAAkE;AAClE,MAAM,OAAO,4BAA4B;IAEpB;IACA;IAFnB,YACmB,SAA8B,EAC9B,QAAoB;QADpB,cAAS,GAAT,SAAS,CAAqB;QAC9B,aAAQ,GAAR,QAAQ,CAAY;IACpC,CAAC;IAEJ,MAAM,CAAC,EAAiB,EAAE,MAAc,EAAE,QAAgB,EAAE,UAA0C;QACpG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE;gBACxC,MAAM;gBACN,UAAU,EAAE,yBAAyB;gBACrC,QAAQ;gBACR,WAAW,EAAE,IAAI;gBACjB,UAAU;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAyC;QACpD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7E,IAAI,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;QACnG,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,CAAC,qBAAqB,EAAE;YAC7C,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;QACH,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,gCAAgC,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAChF,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAAyC;QAChE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QAChF,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,gCAAgC,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACpF,MAAM,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QAChF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,gCAAgC,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAClE,MAAM,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,CAAwB;QACpC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,CAAC;CACF"}

package/dist/backend/services/email-block.service.d.ts

@@ -0,0 +1,26 @@
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { type CreateNewsletterEmailBlockRequest, type NewsletterEmailBlockDetail, type NewsletterEmailBlockSummary, type UpdateNewsletterEmailBlockRequest } from '@endora-commerce/contracts';
+import type { EmailEmbeds } from './content.service.js';
+import type { AuditPort } from '@endora-commerce/platform/kernel';
+/**
+ * Reusable email-safe blocks (feature 048, US5). Global blocks embedded into
+ * campaign/automation content via the shared renderer's embeds map. System
+ * blocks (seeded header/footer) cannot be deleted.
+ */
+export declare class NewsletterEmailBlockService {
+    #private;
+    private readonly emFactory;
+    private readonly auditLog?;
+    constructor(emFactory: () => EntityManager, auditLog?: AuditPort | undefined);
+    list(): Promise<NewsletterEmailBlockSummary[]>;
+    get(id: string): Promise<NewsletterEmailBlockDetail>;
+    create(input: CreateNewsletterEmailBlockRequest): Promise<NewsletterEmailBlockDetail>;
+    update(id: string, input: UpdateNewsletterEmailBlockRequest): Promise<NewsletterEmailBlockDetail>;
+    remove(id: string): Promise<void>;
+    /** Build the renderer embeds map from active blocks for the given language. */
+    resolveEmbeds(language: string): Promise<EmailEmbeds>;
+    private load;
+    private toSummary;
+    private toDetail;
+}
+//# sourceMappingURL=email-block.service.d.ts.map

package/dist/backend/services/email-block.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-block.service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/email-block.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAEL,KAAK,iCAAiC,EACtC,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,iCAAiC,EACvC,MAAM,4BAA4B,CAAC;AAGpC,OAAO,KAAK,EAAe,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAErE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAmBlE;;;;GAIG;AACH,qBAAa,2BAA2B;;IAEpC,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBADT,SAAS,EAAE,MAAM,aAAa,EAC9B,QAAQ,CAAC,EAAE,SAAS,YAAA;IAejC,IAAI,IAAI,OAAO,CAAC,2BAA2B,EAAE,CAAC;IAM9C,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAIpD,MAAM,CAAC,KAAK,EAAE,iCAAiC,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAgBrF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iCAAiC,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAgBjG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUvC,+EAA+E;IACzE,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;YAQ7C,IAAI;IAMlB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,QAAQ;CASjB"}

package/dist/backend/services/email-block.service.js

@@ -0,0 +1,120 @@
+import { ERROR_CODES, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { NewsletterEmailBlock } from '../entities/newsletter-email-block.entity.js';
+import { recordAuditFromContext } from '@endora-commerce/platform/commands';
+function wrap(tree) {
+    return { schema_version: 1, languages: { default: tree } };
+}
+function unwrap(content, language) {
+    const env = content;
+    if (!env.languages)
+        return content;
+    if (language && env.languages[language])
+        return env.languages[language];
+    const first = Object.values(env.languages)[0];
+    return first ?? {};
+}
+/**
+ * Reusable email-safe blocks (feature 048, US5). Global blocks embedded into
+ * campaign/automation content via the shared renderer's embeds map. System
+ * blocks (seeded header/footer) cannot be deleted.
+ */
+export class NewsletterEmailBlockService {
+    emFactory;
+    auditLog;
+    constructor(emFactory, auditLog) {
+        this.emFactory = emFactory;
+        this.auditLog = auditLog;
+    }
+    #audit(em, action, objectId, stateAfter) {
+        if (this.auditLog) {
+            recordAuditFromContext(this.auditLog, em, {
+                action,
+                objectType: 'newsletter_email_block',
+                objectId,
+                stateBefore: null,
+                stateAfter,
+            });
+        }
+    }
+    async list() {
+        const em = this.emFactory();
+        const rows = await em.find(NewsletterEmailBlock, {}, { orderBy: { code: 'asc' } });
+        return rows.map((b) => this.toSummary(b));
+    }
+    async get(id) {
+        return this.toDetail(await this.load(this.emFactory(), id));
+    }
+    async create(input) {
+        const em = this.emFactory();
+        const existing = await em.findOne(NewsletterEmailBlock, { code: input.code });
+        if (existing)
+            throw new HttpError(409, ERROR_CODES.VALIDATION_FAILED, 'Block code already exists.');
+        const block = em.create(NewsletterEmailBlock, {
+            code: input.code,
+            name: input.name,
+            description: input.description ?? null,
+            content: wrap(input.content),
+        });
+        em.persist(block);
+        this.#audit(em, 'newsletter_email_block.create', block.id, { code: block.code });
+        await em.flush();
+        return this.toDetail(block);
+    }
+    async update(id, input) {
+        const em = this.emFactory();
+        const block = await this.load(em, id);
+        if (block.version !== input.expectedVersion) {
+            throw new HttpError(409, ERROR_CODES.VERSION_CONFLICT, 'Block was modified.');
+        }
+        if (input.name !== undefined)
+            block.name = input.name;
+        if (input.description !== undefined)
+            block.description = input.description;
+        if (input.active !== undefined)
+            block.active = input.active;
+        if (input.content !== undefined)
+            block.content = wrap(input.content);
+        block.version += 1;
+        this.#audit(em, 'newsletter_email_block.update', block.id, { name: block.name });
+        await em.persistAndFlush(block);
+        return this.toDetail(block);
+    }
+    async remove(id) {
+        const em = this.emFactory();
+        const block = await this.load(em, id);
+        if (block.isSystem) {
+            throw new HttpError(422, ERROR_CODES.VALIDATION_FAILED, 'System blocks cannot be deleted.');
+        }
+        this.#audit(em, 'newsletter_email_block.delete', block.id, null);
+        await em.removeAndFlush(block);
+    }
+    /** Build the renderer embeds map from active blocks for the given language. */
+    async resolveEmbeds(language) {
+        const em = this.emFactory();
+        const rows = await em.find(NewsletterEmailBlock, { active: true });
+        const blocks = {};
+        for (const b of rows)
+            blocks[b.code] = unwrap(b.content, language);
+        return { blocks, templates: {} };
+    }
+    async load(em, id) {
+        const block = await em.findOne(NewsletterEmailBlock, { id });
+        if (!block)
+            throw new HttpError(404, ERROR_CODES.NOT_FOUND, 'Block not found.');
+        return block;
+    }
+    toSummary(b) {
+        return { id: b.id, code: b.code, name: b.name, active: b.active, isSystem: b.isSystem };
+    }
+    toDetail(b) {
+        return {
+            ...this.toSummary(b),
+            description: b.description,
+            content: unwrap(b.content),
+            salesChannelId: null,
+            version: b.version,
+        };
+    }
+}
+//# sourceMappingURL=email-block.service.js.map

package/dist/backend/services/email-block.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-block.service.js","sourceRoot":"","sources":["../../../src/backend/services/email-block.service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,GAKZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8CAA8C,CAAC;AAEpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAQ5E,SAAS,IAAI,CAAC,IAAiB;IAC7B,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,MAAM,CAAC,OAAgC,EAAE,QAAiB;IACjE,MAAM,GAAG,GAAG,OAAqC,CAAC;IAClD,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,OAAsB,CAAC;IAClD,IAAI,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,OAAO,KAAK,IAAK,EAAkB,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,2BAA2B;IAEnB;IACA;IAFnB,YACmB,SAA8B,EAC9B,QAAoB;QADpB,cAAS,GAAT,SAAS,CAAqB;QAC9B,aAAQ,GAAR,QAAQ,CAAY;IACpC,CAAC;IAEJ,MAAM,CAAC,EAAiB,EAAE,MAAc,EAAE,QAAgB,EAAE,UAA0C;QACpG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE;gBACxC,MAAM;gBACN,UAAU,EAAE,wBAAwB;gBACpC,QAAQ;gBACR,WAAW,EAAE,IAAI;gBACjB,UAAU;aACX,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAwC;QACnD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,IAAI,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;QACpG,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE;YAC5C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACtC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuC;SACnE,CAAC,CAAC;QACH,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,+BAA+B,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAAwC;QAC/D,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,eAAe,EAAE,CAAC;YAC5C,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACtD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;YAAE,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QAC3E,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5D,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuC,CAAC;QAC3G,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,+BAA+B,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,MAAM,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,kCAAkC,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,+BAA+B,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjE,MAAM,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,MAAM,GAAgC,EAAE,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,EAAiB,EAAE,EAAU;QAC9C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,SAAS,CAAC,CAAuB;QACvC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1F,CAAC;IAEO,QAAQ,CAAC,CAAuB;QACtC,OAAO;YACL,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YACpB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1B,cAAc,EAAE,IAAI;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC;IACJ,CAAC;CACF"}

package/dist/backend/services/opt-in.service.d.ts

@@ -0,0 +1,25 @@
+import type { NewsletterOptInMode } from '@endora-commerce/contracts';
+import type { SettingsReadPort } from '@endora-commerce/platform/kernel';
+import type { NewsletterTokenHelper } from './token.helper.js';
+/**
+ * Per-sales-channel opt-in policy (feature 048, research R5). Resolves the
+ * single/double mode and confirmation TTL from Settings, and mints the signed
+ * confirm/unsubscribe tokens.
+ */
+export declare class NewsletterOptInService {
+    private readonly settings;
+    private readonly tokens;
+    constructor(settings: SettingsReadPort, tokens: NewsletterTokenHelper);
+    /**
+     * `null` = no channel for this subscriber, so the platform-wide value applies
+     * (feature 072, D-41). Both are per-storefront settings, which is why the
+     * caller resolves the *system-default channel* first and only reaches `null`
+     * when the deployment has none.
+     */
+    resolveMode(salesChannelId: string | null): Promise<NewsletterOptInMode>;
+    confirmTtlSeconds(salesChannelId: string | null): Promise<number>;
+    mintConfirmToken(subscriberId: string, salesChannelId: string | null): Promise<string>;
+    /** Unsubscribe tokens are long-lived (1 year) so links in old mail keep working. */
+    mintUnsubscribeToken(subscriberId: string): string;
+}
+//# sourceMappingURL=opt-in.service.d.ts.map

package/dist/backend/services/opt-in.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opt-in.service.d.ts","sourceRoot":"","sources":["../../../src/backend/services/opt-in.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE/D;;;;GAIG;AACH,qBAAa,sBAAsB;IAE/B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE,qBAAqB;IAGhD;;;;;OAKG;IACG,WAAW,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAYxE,iBAAiB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAajE,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;IAI5F,oFAAoF;IACpF,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM;CAGnD"}

package/dist/backend/services/opt-in.service.js

@@ -0,0 +1,46 @@
+import { z } from 'zod';
+import { NEWSLETTER_SETTING_CODES, newsletterOptInModeSchema } from '@endora-commerce/contracts';
+/**
+ * Per-sales-channel opt-in policy (feature 048, research R5). Resolves the
+ * single/double mode and confirmation TTL from Settings, and mints the signed
+ * confirm/unsubscribe tokens.
+ */
+export class NewsletterOptInService {
+    settings;
+    tokens;
+    constructor(settings, tokens) {
+        this.settings = settings;
+        this.tokens = tokens;
+    }
+    /**
+     * `null` = no channel for this subscriber, so the platform-wide value applies
+     * (feature 072, D-41). Both are per-storefront settings, which is why the
+     * caller resolves the *system-default channel* first and only reaches `null`
+     * when the deployment has none.
+     */
+    async resolveMode(salesChannelId) {
+        try {
+            return await this.settings.get(NEWSLETTER_SETTING_CODES.OPT_IN_MODE, salesChannelId, newsletterOptInModeSchema);
+        }
+        catch {
+            return 'double';
+        }
+    }
+    async confirmTtlSeconds(salesChannelId) {
+        try {
+            const hours = await this.settings.get(NEWSLETTER_SETTING_CODES.CONFIRM_TTL_HOURS, salesChannelId, z.number());
+            return Math.max(1, Math.floor(hours)) * 3600;
+        }
+        catch {
+            return 168 * 3600;
+        }
+    }
+    async mintConfirmToken(subscriberId, salesChannelId) {
+        return this.tokens.mint('confirm', { id: subscriberId }, await this.confirmTtlSeconds(salesChannelId));
+    }
+    /** Unsubscribe tokens are long-lived (1 year) so links in old mail keep working. */
+    mintUnsubscribeToken(subscriberId) {
+        return this.tokens.mint('unsubscribe', { id: subscriberId }, 365 * 24 * 3600);
+    }
+}
+//# sourceMappingURL=opt-in.service.js.map

package/dist/backend/services/opt-in.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opt-in.service.js","sourceRoot":"","sources":["../../../src/backend/services/opt-in.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAKjG;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IAEd;IACA;IAFnB,YACmB,QAA0B,EAC1B,MAA6B;QAD7B,aAAQ,GAAR,QAAQ,CAAkB;QAC1B,WAAM,GAAN,MAAM,CAAuB;IAC7C,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,cAA6B;QAC7C,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAC5B,wBAAwB,CAAC,WAAW,EACpC,cAAc,EACd,yBAAyB,CAC1B,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,cAA6B;QACnD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CACnC,wBAAwB,CAAC,iBAAiB,EAC1C,cAAc,EACd,CAAC,CAAC,MAAM,EAAE,CACX,CAAC;YACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,YAAoB,EAAE,cAA6B;QACxE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC;IACzG,CAAC;IAED,oFAAoF;IACpF,oBAAoB,CAAC,YAAoB;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAChF,CAAC;CACF"}

package/dist/backend/services/provider/console-provider.d.ts

@@ -0,0 +1,32 @@
+import type { NewsletterSendMessage, NewsletterSendProvider } from '@endora-commerce/contracts';
+/**
+ * Default newsletter provider for dev/tests (feature 048). Logs the message and
+ * is idempotent on `messageId`, mirroring the transactional ConsoleMailer. Real
+ * bulk delivery uses the SmtpProvider configured from Settings.
+ */
+export declare class ConsoleNewsletterProvider implements NewsletterSendProvider {
+    private readonly seen;
+    send(msg: NewsletterSendMessage): Promise<{
+        providerMessageId?: string;
+    }>;
+    verify(): Promise<{
+        ok: true;
+    } | {
+        ok: false;
+        error: string;
+    }>;
+}
+/** In-memory provider for tests — captures every dispatched message. */
+export declare class InMemoryNewsletterProvider implements NewsletterSendProvider {
+    readonly sent: NewsletterSendMessage[];
+    send(msg: NewsletterSendMessage): Promise<{
+        providerMessageId?: string;
+    }>;
+    verify(): Promise<{
+        ok: true;
+    } | {
+        ok: false;
+        error: string;
+    }>;
+}
+//# sourceMappingURL=console-provider.d.ts.map

package/dist/backend/services/provider/console-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"console-provider.d.ts","sourceRoot":"","sources":["../../../../src/backend/services/provider/console-provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEhG;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,sBAAsB;IACtE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;IAEpC,IAAI,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAUzE,MAAM,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAGrE;AAED,wEAAwE;AACxE,qBAAa,0BAA2B,YAAW,sBAAsB;IACvE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,EAAE,CAAM;IAEtC,IAAI,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAKzE,MAAM,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAGrE"}

package/dist/backend/services/provider/console-provider.js

@@ -0,0 +1,31 @@
+/**
+ * Default newsletter provider for dev/tests (feature 048). Logs the message and
+ * is idempotent on `messageId`, mirroring the transactional ConsoleMailer. Real
+ * bulk delivery uses the SmtpProvider configured from Settings.
+ */
+export class ConsoleNewsletterProvider {
+    seen = new Set();
+    async send(msg) {
+        if (this.seen.has(msg.messageId))
+            return { providerMessageId: msg.messageId };
+        this.seen.add(msg.messageId);
+        // eslint-disable-next-line no-console
+        console.log(JSON.stringify({ msg: 'console-newsletter', to: msg.to, subject: msg.subject }));
+        return { providerMessageId: msg.messageId };
+    }
+    async verify() {
+        return { ok: true };
+    }
+}
+/** In-memory provider for tests — captures every dispatched message. */
+export class InMemoryNewsletterProvider {
+    sent = [];
+    async send(msg) {
+        this.sent.push(msg);
+        return { providerMessageId: msg.messageId };
+    }
+    async verify() {
+        return { ok: true };
+    }
+}
+//# sourceMappingURL=console-provider.js.map

package/dist/backend/services/provider/console-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"console-provider.js","sourceRoot":"","sources":["../../../../src/backend/services/provider/console-provider.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IACnB,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1C,KAAK,CAAC,IAAI,CAAC,GAA0B;QACnC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,sCAAsC;QACtC,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAChF,CAAC;QACF,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,OAAO,0BAA0B;IAC5B,IAAI,GAA4B,EAAE,CAAC;IAE5C,KAAK,CAAC,IAAI,CAAC,GAA0B;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;CACF"}

package/dist/backend/services/provider/provider-registry.d.ts

@@ -0,0 +1,51 @@
+import type { NewsletterSendProvider, ResolveResult } from '@endora-commerce/contracts';
+import type { SettingsReadPort } from '@endora-commerce/platform/kernel';
+export interface ResolvedSender {
+    fromEmail: string;
+    fromName: string;
+}
+/**
+ * Narrow port over CredentialsService.resolve (feature 058). The newsletter
+ * module reaches credentials ONLY through this shape (Principle I).
+ */
+export interface CredentialResolvePort {
+    resolve(configurationCode: string): Promise<ResolveResult>;
+}
+/**
+ * Selects and builds the active newsletter sending provider (feature 048,
+ * research R7; feature 058 — the credential reference is the single source).
+ *
+ * The `newsletter.email_credentials` reference (a reusable `email_adapter`
+ * credential configuration) supplies the SMTP transport. When it is unset or
+ * unresolvable, dispatch fails closed to the console (dev) sink — the pre-058
+ * default. Secrets are decrypted in-memory by `CredentialsService.resolve`.
+ */
+export declare class NewsletterProviderRegistry {
+    private readonly settings;
+    private readonly credentials?;
+    constructor(settings: SettingsReadPort, credentials?: CredentialResolvePort | undefined);
+    /**
+     * Platform-wide (feature 072, D-41). The sending provider is one SMTP
+     * transport for the deployment — `NewsletterProviderAdminService` writes it
+     * with `setValueForAllChannels` — so a read scoped to a channel was always
+     * asking the wrong question. It used to take a `platformChannelId` the root
+     * resolved to the system-default channel, falling back to the `'default'`
+     * sentinel; the name is gone rather than corrected, because a DI name
+     * carrying a sentinel is one no static check can see.
+     */
+    private getString;
+    /**
+     * Resolve the referenced SMTP config, or `null` when no usable reference is
+     * configured (caller then uses the console dev sink).
+     */
+    private resolveCredentialSmtp;
+    resolveProvider(): Promise<NewsletterSendProvider>;
+    /**
+     * Gate for campaign sends (FR-017). A transport is always available — a
+     * resolvable `email_adapter` credential gives a real SMTP transport, otherwise
+     * the console dev sink (the pre-058 default) — so sends are never blocked here.
+     */
+    isConfigured(): Promise<boolean>;
+    resolveSender(): Promise<ResolvedSender>;
+}
+//# sourceMappingURL=provider-registry.d.ts.map

package/dist/backend/services/provider/provider-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-registry.d.ts","sourceRoot":"","sources":["../../../../src/backend/services/provider/provider-registry.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACxF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAIzE,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAC5D;AAED;;;;;;;;GAQG;AACH,qBAAa,0BAA0B;IAEnC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;gBADZ,QAAQ,EAAE,gBAAgB,EAC1B,WAAW,CAAC,EAAE,qBAAqB,YAAA;IAGtD;;;;;;;;OAQG;YACW,SAAS;IAIvB;;;OAGG;YACW,qBAAqB;IA0B7B,eAAe,IAAI,OAAO,CAAC,sBAAsB,CAAC;IASxD;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC;IAIhC,aAAa,IAAI,OAAO,CAAC,cAAc,CAAC;CAO/C"}

package/dist/backend/services/provider/provider-registry.js

@@ -0,0 +1,84 @@
+import { z } from 'zod';
+import { NEWSLETTER_SETTING_CODES } from '@endora-commerce/contracts';
+import { ConsoleNewsletterProvider } from './console-provider.js';
+import { SmtpProvider } from './smtp-provider.js';
+/**
+ * Selects and builds the active newsletter sending provider (feature 048,
+ * research R7; feature 058 — the credential reference is the single source).
+ *
+ * The `newsletter.email_credentials` reference (a reusable `email_adapter`
+ * credential configuration) supplies the SMTP transport. When it is unset or
+ * unresolvable, dispatch fails closed to the console (dev) sink — the pre-058
+ * default. Secrets are decrypted in-memory by `CredentialsService.resolve`.
+ */
+export class NewsletterProviderRegistry {
+    settings;
+    credentials;
+    constructor(settings, credentials) {
+        this.settings = settings;
+        this.credentials = credentials;
+    }
+    /**
+     * Platform-wide (feature 072, D-41). The sending provider is one SMTP
+     * transport for the deployment — `NewsletterProviderAdminService` writes it
+     * with `setValueForAllChannels` — so a read scoped to a channel was always
+     * asking the wrong question. It used to take a `platformChannelId` the root
+     * resolved to the system-default channel, falling back to the `'default'`
+     * sentinel; the name is gone rather than corrected, because a DI name
+     * carrying a sentinel is one no static check can see.
+     */
+    async getString(code) {
+        return this.settings.get(code, null, z.string());
+    }
+    /**
+     * Resolve the referenced SMTP config, or `null` when no usable reference is
+     * configured (caller then uses the console dev sink).
+     */
+    async resolveCredentialSmtp() {
+        if (!this.credentials)
+            return null;
+        const ref = await this.getString(NEWSLETTER_SETTING_CODES.EMAIL_CREDENTIALS).catch(() => '');
+        if (!ref)
+            return null;
+        const resolved = await this.credentials.resolve(ref);
+        // Only the `smtp` provider variant has a wired transport today; any other
+        // provider (or an unavailable/inert reference) falls back to the dev sink.
+        if (resolved.status !== 'ok' || resolved.providerCode !== 'smtp')
+            return null;
+        const v = resolved.values;
+        const host = typeof v['host'] === 'string' ? v['host'] : '';
+        if (!host)
+            return null;
+        return {
+            host,
+            port: typeof v['port'] === 'number' ? v['port'] : 587,
+            secure: typeof v['secure'] === 'boolean' ? v['secure'] : false,
+            username: typeof v['username'] === 'string' ? v['username'] : '',
+            password: typeof v['password'] === 'string' ? v['password'] : '',
+        };
+    }
+    async resolveProvider() {
+        const credentialSmtp = await this.resolveCredentialSmtp();
+        if (credentialSmtp) {
+            return new SmtpProvider(credentialSmtp);
+        }
+        // Fail closed to the console dev sink when no email credential is set.
+        return new ConsoleNewsletterProvider();
+    }
+    /**
+     * Gate for campaign sends (FR-017). A transport is always available — a
+     * resolvable `email_adapter` credential gives a real SMTP transport, otherwise
+     * the console dev sink (the pre-058 default) — so sends are never blocked here.
+     */
+    async isConfigured() {
+        return true;
+    }
+    async resolveSender() {
+        const [fromEmail, fromName] = await Promise.all([
+            this.getString(NEWSLETTER_SETTING_CODES.SENDER_FROM_EMAIL),
+            this.getString(NEWSLETTER_SETTING_CODES.SENDER_FROM_NAME),
+        ]);
+        return { fromEmail, fromName };
+    }
+}
+//# sourceMappingURL=provider-registry.js.map

package/dist/backend/services/provider/provider-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-registry.js","sourceRoot":"","sources":["../../../../src/backend/services/provider/provider-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAGtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAelD;;;;;;;;GAQG;AACH,MAAM,OAAO,0BAA0B;IAElB;IACA;IAFnB,YACmB,QAA0B,EAC1B,WAAmC;QADnC,aAAQ,GAAR,QAAQ,CAAkB;QAC1B,gBAAW,GAAX,WAAW,CAAwB;IACnD,CAAC;IAEJ;;;;;;;;OAQG;IACK,KAAK,CAAC,SAAS,CAAC,IAAY;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,qBAAqB;QAOjC,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7F,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrD,0EAA0E;QAC1E,2EAA2E;QAC3E,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,YAAY,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAC9E,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG;YACrD,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK;YAC9D,QAAQ,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;YAChE,QAAQ,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;SACjE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC1D,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,IAAI,YAAY,CAAC,cAAc,CAAC,CAAC;QAC1C,CAAC;QACD,uEAAuE;QACvE,OAAO,IAAI,yBAAyB,EAAE,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,iBAAiB,CAAC;YAC1D,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,gBAAgB,CAAC;SAC1D,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACjC,CAAC;CACF"}