@firedrill-tools/resend 0.1.1

package/firedrill/tools/resend/app/site/views.css

@@ -0,0 +1,141 @@
+.page-head { display: flex; align-items: center; justify-content: space-between; gap: 16px; margin-bottom: 24px; min-height: 36px; }
+.page-head h1 { font-size: 28px; line-height: 1.2; font-weight: 600; letter-spacing: -0.02em; margin: 0; }
+.head-actions { display: flex; gap: 8px; align-items: center; }
+.btn { display: inline-flex; align-items: center; justify-content: center; gap: 6px; height: 32px; padding: 0 12px; border-radius: 6px; border: 1px solid var(--border-strong); background: transparent; color: var(--text); font-size: 13.5px; font-weight: 500; cursor: pointer; white-space: nowrap; }
+.btn:hover { background: var(--hover); }
+.btn:disabled { opacity: 0.5; cursor: not-allowed; }
+.btn-primary { background: #fff; color: #000; border-color: #fff; }
+.btn-primary:hover { background: #e4e4e7; }
+.btn-danger { background: #e5484d; border-color: #e5484d; color: #fff; }
+.btn-danger:hover { background: #ec5d5e; }
+.btn-ghost { border-color: transparent; color: var(--muted); }
+.btn-ghost:hover { color: var(--text); }
+.btn.sm { height: 28px; padding: 0 10px; font-size: 13px; }
+.icon-btn { display: inline-grid; place-items: center; width: 28px; height: 28px; border: 0; border-radius: 6px; background: transparent; color: var(--muted); cursor: pointer; }
+.icon-btn:hover { background: var(--hover); color: var(--text); }
+.icon-btn.copy { width: 22px; height: 22px; }
+
+.tabs { display: flex; gap: 20px; border-bottom: 1px solid var(--border); margin-bottom: 20px; }
+.tabs button { position: relative; padding: 0 0 10px; border: 0; background: none; color: var(--muted); cursor: pointer; font-size: 14px; }
+.tabs button:hover { color: var(--text); }
+.tabs button[aria-selected="true"] { color: var(--text); }
+.tabs button[aria-selected="true"]::after { content: ""; position: absolute; left: 0; right: 0; bottom: -1px; height: 1px; background: var(--text); }
+
+.toolbar { display: flex; gap: 8px; margin-bottom: 16px; flex-wrap: wrap; }
+.search { position: relative; flex: 1 1 260px; max-width: 420px; }
+.search .i { position: absolute; left: 10px; top: 9px; color: var(--faint); }
+.input, .select, textarea.input { height: 32px; width: 100%; padding: 0 10px; border: 1px solid var(--border-strong); border-radius: 6px; background: transparent; color: var(--text); font-size: 13.5px; }
+.search .input { padding-left: 32px; }
+textarea.input { height: auto; min-height: 84px; padding: 8px 10px; resize: vertical; }
+.input::placeholder { color: var(--faint); }
+.input:focus, .select:focus { outline: none; border-color: rgba(255, 255, 255, 0.35); box-shadow: 0 0 0 3px rgba(255, 255, 255, 0.06); }
+.select { width: auto; min-width: 150px; appearance: none; padding-right: 30px; background-image: linear-gradient(45deg, transparent 50%, #a1a1aa 50%), linear-gradient(135deg, #a1a1aa 50%, transparent 50%); background-position: calc(100% - 15px) 14px, calc(100% - 11px) 14px; background-size: 4px 4px; background-repeat: no-repeat; }
+.select option { background: #111; }
+.fake-select { color: var(--muted); }
+
+.table-wrap { border: 1px solid var(--border); border-radius: var(--radius); overflow-x: auto; }
+table.table { width: 100%; border-collapse: collapse; }
+.table th { text-align: left; font-weight: 500; font-size: 13px; color: var(--muted); height: 40px; padding: 0 16px; border-bottom: 1px solid var(--border); background: var(--panel); white-space: nowrap; }
+.table td { height: 52px; padding: 0 16px; border-bottom: 1px solid var(--border); font-size: 14px; max-width: 360px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.table tbody tr:last-child td { border-bottom: 0; }
+.table tbody tr.row { cursor: pointer; }
+.table tbody tr.row:hover td { background: rgba(255, 255, 255, 0.025); }
+.table td.muted, .muted { color: var(--muted); }
+.table td.actions { width: 48px; text-align: right; }
+.cell-main { display: flex; align-items: center; gap: 12px; min-width: 0; }
+.cell-main > span:last-child { overflow: hidden; text-overflow: ellipsis; }
+.tile { display: grid; place-items: center; width: 32px; height: 32px; flex: none; border-radius: 7px; border: 1px solid var(--border-strong); background: linear-gradient(180deg, #1a1a1d, #0c0c0e); color: var(--text); }
+.tile.lg { width: 56px; height: 56px; border-radius: 12px; }
+.skeleton td .sk { display: block; height: 10px; width: 70%; border-radius: 4px; background: linear-gradient(90deg, #141416, #1f1f23, #141416); background-size: 200% 100%; animation: sk 1.2s linear infinite; }
+@keyframes sk { to { background-position: -200% 0; } }
+
+.badge { display: inline-flex; align-items: center; height: 22px; padding: 0 8px; border-radius: 6px; font-size: 12.5px; font-weight: 500; white-space: nowrap; }
+.tone-green { color: var(--green); background: var(--green-bg); }
+.tone-red { color: var(--red); background: var(--red-bg); }
+.tone-amber { color: var(--amber); background: var(--amber-bg); }
+.tone-blue { color: var(--blue); background: var(--blue-bg); }
+.tone-gray { color: #b4b4bb; background: var(--gray-bg); }
+
+.pager { display: flex; align-items: center; justify-content: space-between; margin-top: 12px; color: var(--muted); font-size: 13px; }
+.pager .btns { display: flex; gap: 6px; }
+.empty { border: 1px dashed var(--border-strong); border-radius: var(--radius); padding: 56px 24px; text-align: center; }
+.empty h3 { margin: 0 0 6px; font-size: 16px; font-weight: 600; }
+.empty p { margin: 0 auto 16px; color: var(--muted); max-width: 420px; }
+.callout { display: flex; align-items: flex-start; gap: 12px; padding: 12px 14px; border-radius: var(--radius); border: 1px solid; margin-bottom: 16px; }
+.callout strong { font-weight: 500; }
+.callout p { margin: 2px 0 0; color: var(--muted); }
+.callout .btn { margin-left: auto; }
+.callout-error { border-color: rgba(255, 99, 105, 0.3); background: var(--red-bg); color: var(--red); }
+.callout-warn { border-color: rgba(255, 202, 22, 0.25); background: var(--amber-bg); color: var(--amber); }
+.callout-info { border-color: rgba(112, 184, 255, 0.25); background: var(--blue-bg); color: var(--blue); }
+
+.overlay { position: fixed; inset: 0; background: rgba(0, 0, 0, 0.7); display: grid; place-items: center; z-index: 50; padding: 16px; }
+.dialog { width: 100%; max-width: 460px; background: #0d0d0f; border: 1px solid var(--border-strong); border-radius: 12px; padding: 20px; box-shadow: 0 20px 60px rgba(0, 0, 0, 0.6); }
+.dialog-wide { max-width: 620px; }
+.dialog-head { display: flex; align-items: center; justify-content: space-between; margin-bottom: 4px; }
+.dialog-head h2 { margin: 0; font-size: 17px; font-weight: 600; }
+.dialog-desc, .dialog-text { color: var(--muted); margin: 6px 0 16px; }
+.dialog-actions { display: flex; justify-content: flex-end; gap: 8px; margin-top: 20px; }
+.field { display: flex; flex-direction: column; gap: 6px; margin-top: 14px; }
+.field label { font-size: 13px; color: var(--text); font-weight: 500; }
+.hint { margin: 0; font-size: 12.5px; color: var(--faint); }
+.form-error { color: var(--red); font-size: 13px; margin: 12px 0 0; }
+.token-box { display: flex; align-items: center; gap: 8px; border: 1px solid var(--border-strong); border-radius: 6px; padding: 8px 10px; margin-top: 12px; background: var(--panel); word-break: break-all; }
+.toasts { position: fixed; right: 16px; bottom: 16px; display: flex; flex-direction: column; gap: 8px; z-index: 60; }
+.toast { display: flex; align-items: center; gap: 8px; padding: 10px 14px; border-radius: 8px; background: #161618; border: 1px solid var(--border-strong); font-size: 13.5px; }
+.toast-error { color: var(--red); }
+.back { display: inline-flex; align-items: center; gap: 4px; color: var(--muted); font-size: 13.5px; margin-bottom: 20px; }
+.back:hover { color: var(--text); }
+.detail-head { display: flex; align-items: center; gap: 16px; margin-bottom: 28px; }
+.detail-title { flex: 1; min-width: 0; }
+.detail-title h1 { margin: 2px 0 0; font-size: 24px; font-weight: 600; letter-spacing: -0.02em; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.eyebrow { margin: 0; font-size: 12px; color: var(--muted); text-transform: uppercase; letter-spacing: 0.04em; font-weight: 500; }
+.meta-grid { display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); gap: 20px 24px; padding-bottom: 24px; margin-bottom: 24px; border-bottom: 1px solid var(--border); }
+.meta-item > div { margin-top: 6px; overflow: hidden; text-overflow: ellipsis; }
+.meta-item .mono { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.tags { display: flex; flex-wrap: wrap; gap: 6px; }
+.section { margin-top: 28px; }
+.section h2 { font-size: 16px; font-weight: 600; margin: 0 0 14px; }
+.timeline { list-style: none; margin: 0; padding: 18px 20px; display: flex; align-items: center; gap: 12px; border: 1px solid var(--border); border-radius: var(--radius); flex-wrap: wrap; }
+.timeline li { display: flex; align-items: center; gap: 10px; }
+.timeline li strong { font-weight: 500; font-size: 13.5px; }
+.timeline li p { margin: 0; font-size: 12.5px; }
+.timeline li.line { flex: 1 1 40px; min-width: 24px; height: 1px; background: var(--border-strong); }
+.dot { display: grid; place-items: center; width: 28px; height: 28px; border-radius: 999px; }
+.content-panel { border: 1px solid var(--border); border-radius: var(--radius); min-height: 220px; overflow: auto; max-height: 560px; }
+.email-preview { background: #fff; color: #1c2024; padding: 28px 32px; font-size: 15px; line-height: 1.6; min-height: 220px; }
+.email-preview h1, .email-preview h2 { line-height: 1.25; }
+.email-preview .fake-link { color: #0d74ce; text-decoration: underline; }
+.email-preview table { border-collapse: collapse; }
+.email-preview td, .email-preview th { padding: 4px 8px; }
+pre.plain { margin: 0; padding: 20px; white-space: pre-wrap; word-break: break-word; font-family: var(--mono); font-size: 12.5px; color: var(--text); }
+@media (max-width: 900px) { .meta-grid { grid-template-columns: repeat(2, minmax(0, 1fr)); } }
+@media (max-width: 768px) {
+  .shell { grid-template-columns: 1fr; }
+  .sidebar { position: fixed; inset: 0 auto 0 0; width: 260px; z-index: 40; transform: translateX(-100%); transition: transform 0.15s; }
+  body.nav-open .sidebar { transform: none; }
+  .icon-btn.mobile-menu { display: inline-grid; position: absolute; top: 12px; left: 12px; }
+  #view { padding: 56px 16px 48px; }
+  .detail-head { flex-wrap: wrap; }
+}
+.tabs a.tab-link { position: relative; padding: 0 0 10px; color: var(--muted); font-size: 14px; }
+.tabs a.tab-link:hover { color: var(--text); }
+.tabs a.tab-link[aria-selected="true"] { color: var(--text); }
+.tabs a.tab-link[aria-selected="true"]::after { content: ""; position: absolute; left: 0; right: 0; bottom: -1px; height: 1px; background: var(--text); }
+.tile.avatar { border-radius: 999px; font-size: 12px; font-weight: 600; color: var(--muted); }
+.link-btn { border: 0; background: none; padding: 0; color: var(--text); cursor: pointer; font-size: 14px; }
+.link-btn:hover { text-decoration: underline; }
+.two { display: grid; grid-template-columns: 1fr 1fr; gap: 12px; }
+.checks { border: 0; padding: 0; margin: 14px 0 0; }
+.checks legend { font-size: 13px; font-weight: 500; margin-bottom: 6px; }
+.check { display: flex; align-items: center; gap: 8px; font-size: 13.5px; margin-top: 6px; cursor: pointer; }
+.check input { accent-color: #fff; width: 15px; height: 15px; }
+.toggle { margin-top: 16px; }
+.field .label { font-size: 13px; font-weight: 500; }
+.chips { display: flex; flex-wrap: wrap; gap: 6px; }
+.chip { display: inline-flex; align-items: center; gap: 2px; padding: 0 2px 0 8px; height: 24px; border-radius: 6px; background: var(--gray-bg); font-size: 12.5px; }
+.panel-meta { display: flex; align-items: center; gap: 10px; margin: 8px 0 4px; }
+.props { display: grid; grid-template-columns: max-content 1fr; gap: 6px 16px; margin: 0; padding: 10px 12px; border: 1px solid var(--border); border-radius: 6px; }
+.props dt { color: var(--muted); }
+.props dd { margin: 0; }
+.dialog-actions.split .spacer { flex: 1; }

package/firedrill/tools/resend/behavior.mjs

@@ -0,0 +1,114 @@
+// Synthetic Resend team for Firedrill. Every operation computes from `context.state`: ids from `meta/counters` plus
+// seeded randomness, timestamps from the virtual clock, delivery outcomes from a fixed documented rule (a recipient in
+// the reserved `.invalid` TLD bounces). Nothing here sends e-mail, queries DNS or contacts any real service.
+import { guardRoutes } from "./lib/json-depth.mjs";
+import { contactRef, encodeOutcome, header, isPlainObject, jsonObject, operationInput, pageArguments, pick, query } from "./lib/wire.mjs";
+import { contactsAddSegment, contactsCreate, contactsGet, contactsList, contactsListSegments, contactsRemove, contactsRemoveSegment, contactsUpdate } from "./ops/contacts.mjs";
+import { domainsCreate, domainsGet, domainsList, domainsRemove, domainsVerify } from "./ops/domains.mjs";
+import { emailsCancel, emailsGet, emailsList, emailsSend, emailsSendBatch, emailsUpdate } from "./ops/emails.mjs";
+import { apiKeysCreate, apiKeysList, apiKeysRemove, segmentsCreate, segmentsList, segmentsRemove, workspaceContext } from "./ops/keys-segments.mjs";
+
+const operations = {
+  "emails.send": emailsSend,
+  "emails.send_batch": emailsSendBatch,
+  "emails.list": emailsList,
+  "emails.get": emailsGet,
+  "emails.update": emailsUpdate,
+  "emails.cancel": emailsCancel,
+  "domains.create": domainsCreate,
+  "domains.list": domainsList,
+  "domains.get": domainsGet,
+  "domains.verify": domainsVerify,
+  "domains.remove": domainsRemove,
+  "api_keys.create": apiKeysCreate,
+  "api_keys.list": apiKeysList,
+  "api_keys.remove": apiKeysRemove,
+  "segments.create": segmentsCreate,
+  "segments.list": segmentsList,
+  "segments.remove": segmentsRemove,
+  "contacts.create": contactsCreate,
+  "contacts.list": contactsList,
+  "contacts.get": contactsGet,
+  "contacts.update": contactsUpdate,
+  "contacts.remove": contactsRemove,
+  "contacts.add_segment": contactsAddSegment,
+  "contacts.remove_segment": contactsRemoveSegment,
+  "contacts.list_segments": contactsListSegments,
+  "workspace.context": workspaceContext,
+};
+
+const SEND_FIELDS = [
+  ["from", "from"], ["to", "to"], ["subject", "subject"], ["html", "html"], ["text", "text"], ["cc", "cc"], ["bcc", "bcc"],
+  ["reply_to", "replyTo"], ["scheduled_at", "scheduledAt"], ["headers", "headers"], ["tags", "tags"],
+  ["attachments", "attachments"], ["template", "template"], ["topic_id", "topicId"],
+];
+const DOMAIN_FIELDS = [
+  ["name", "name"], ["region", "region"], ["custom_return_path", "customReturnPath"], ["open_tracking", "openTracking"],
+  ["click_tracking", "clickTracking"], ["tls", "tls"], ["capabilities", "capabilities"], ["tracking_subdomain", "trackingSubdomain"],
+];
+const CONTACT_FIELDS = [["first_name", "firstName"], ["last_name", "lastName"], ["unsubscribed", "unsubscribed"], ["properties", "properties"]];
+
+function route(decode) {
+  return { decode, encode: encodeOutcome };
+}
+
+const byPath = (name, argument = "id") => (request) => ({ arguments: { [argument]: request.path[name] } });
+const writeByPath = (name) => (request) => operationInput(request, { id: request.path[name] });
+const listOnly = (request) => ({ arguments: pageArguments(request) });
+
+function batchDecode(request) {
+  const args = {};
+  if (request.body.kind === "json" && Array.isArray(request.body.value)) {
+    args.emails = request.body.value.map((entry) => (isPlainObject(entry) ? pick(entry, SEND_FIELDS) : entry));
+  }
+  const mode = header(request, "x-batch-validation");
+  if (mode !== undefined && mode !== "strict") args.batchValidation = mode.length > 0 ? mode : "(empty)";
+  return operationInput(request, args);
+}
+
+function contactCreateDecode(request) {
+  const body = jsonObject(request);
+  const args = pick(body, [["email", "email"], ...CONTACT_FIELDS, ["topics", "topics"], ["audience_id", "audienceId"]]);
+  if (Object.hasOwn(body, "segments")) {
+    const segments = body.segments;
+    args.segmentIds = Array.isArray(segments)
+      ? segments.map((entry) => (isPlainObject(entry) && typeof entry.id === "string" ? entry.id : typeof entry === "string" ? entry : ""))
+      : [""];
+  }
+  return operationInput(request, args);
+}
+
+const http = {
+  "send-email": route((request) => operationInput(request, pick(jsonObject(request), SEND_FIELDS))),
+  "send-batch": route(batchDecode),
+  "list-emails": route(listOnly),
+  "get-email": route(byPath("email_id")),
+  "update-email": route((request) => operationInput(request, pick(jsonObject(request), [["scheduled_at", "scheduledAt"]], { id: request.path.email_id }))),
+  "cancel-email": route(writeByPath("email_id")),
+  "create-domain": route((request) => operationInput(request, pick(jsonObject(request), DOMAIN_FIELDS))),
+  "list-domains": route(listOnly),
+  "get-domain": route(byPath("domain_id")),
+  "verify-domain": route(writeByPath("domain_id")),
+  "remove-domain": route(writeByPath("domain_id")),
+  "create-api-key": route((request) => operationInput(request, pick(jsonObject(request), [["name", "name"], ["permission", "permission"], ["domain_id", "domainId"]]))),
+  "list-api-keys": route(listOnly),
+  "remove-api-key": route(writeByPath("api_key_id")),
+  "create-segment": route((request) => operationInput(request, pick(jsonObject(request), [["name", "name"], ["filter", "filter"], ["audience_id", "audienceId"]]))),
+  "list-segments": route(listOnly),
+  "remove-segment": route(writeByPath("id")),
+  "create-contact": route(contactCreateDecode),
+  "list-contacts": route((request) => {
+    const args = pageArguments(request);
+    const segment = query(request, "segment_id");
+    if (segment !== undefined) args.segmentId = segment;
+    return { arguments: args };
+  }),
+  "get-contact": route((request) => ({ arguments: contactRef(request.path.id, "id") })),
+  "update-contact": route((request) => operationInput(request, pick(jsonObject(request), [...CONTACT_FIELDS, ["email", "newEmail"]], contactRef(request.path.id, "id")))),
+  "remove-contact": route((request) => operationInput(request, contactRef(request.path.id, "id"))),
+  "list-contact-segments": route((request) => ({ arguments: pageArguments(request, contactRef(request.path.contact_id, "contactId")) })),
+  "add-contact-segment": route((request) => operationInput(request, contactRef(request.path.contact_id, "contactId", { segmentId: request.path.segment_id }))),
+  "remove-contact-segment": route((request) => operationInput(request, contactRef(request.path.contact_id, "contactId", { segmentId: request.path.segment_id }))),
+};
+
+export default { operations, http: guardRoutes(http) };

package/firedrill/tools/resend/lib/check.mjs

@@ -0,0 +1,75 @@
+// Input validation helpers raising Resend's declared errors. Every regex runs on length-bounded input.
+import { fail, hasReservedKey } from "./core.mjs";
+
+const ADDRESS = /^[A-Za-z0-9.!#$%&'*+/=?^_`{|}~-]+@([A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?(?:\.[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?)+)$/;
+const NAMED = /^([^<>]{0,200})<([^<>\s]+)>$/;
+
+export function present(value) {
+  return value !== undefined && value !== null && !(typeof value === "string" && value.trim().length === 0);
+}
+
+/** `addr` or `Name <addr>` → `{ address, domain }` (domain lowercased) or `null`. */
+export function parseAddress(text) {
+  if (typeof text !== "string" || text.length === 0 || text.length > 320 || text.includes("�")) return null;
+  const trimmed = text.trim();
+  const named = NAMED.exec(trimmed);
+  const address = named === null ? trimmed : named[2];
+  if (address.length > 254) return null;
+  const match = ADDRESS.exec(address);
+  if (match === null || address.split("@")[0].length > 64) return null;
+  return { address, domain: match[1].toLowerCase() };
+}
+
+/** Normalise a `string | string[]` recipient field into a list, validating each address. */
+export function addressList(context, value, field, { max = 50, required = false } = {}) {
+  if (!present(value) || (Array.isArray(value) && value.length === 0)) {
+    if (required) fail(context, "MISSING_REQUIRED_FIELD", `Missing \`${field}\` field.`);
+    return [];
+  }
+  const list = Array.isArray(value) ? value : [value];
+  if (list.length > max) fail(context, "VALIDATION_ERROR", `The \`${field}\` field must contain at most ${max} addresses.`);
+  for (const entry of list) {
+    if (parseAddress(entry) === null) {
+      fail(context, "VALIDATION_ERROR", `Invalid \`${field}\` field. The email address needs to follow the \`email@example.com\` or \`Name <email@example.com>\` format.`);
+    }
+  }
+  return list.map((entry) => entry.trim());
+}
+
+export function boundedString(context, value, field, { min = 1, max, code = "VALIDATION_ERROR" }) {
+  if (typeof value !== "string" || value.length < min || value.length > max) {
+    fail(context, code, `The \`${field}\` field must be between ${min} and ${max} characters.`);
+  }
+  return value;
+}
+
+export function utf8Bytes(text) {
+  let bytes = 0;
+  for (let i = 0; i < text.length; i += 1) {
+    const code = text.charCodeAt(i);
+    if (code < 0x80) bytes += 1;
+    else if (code < 0x800) bytes += 2;
+    else if (code >= 0xd800 && code <= 0xdbff) {
+      bytes += 4;
+      i += 1;
+    } else bytes += 3;
+  }
+  return bytes;
+}
+
+/** Plain object check that also refuses reserved prototype keys. */
+export function safeObject(context, value, field, maxKeys) {
+  if (typeof value !== "object" || value === null || Array.isArray(value) || hasReservedKey(value)) {
+    fail(context, "VALIDATION_ERROR", `The \`${field}\` field must be an object without reserved keys.`);
+  }
+  if (Object.keys(value).length > maxKeys) fail(context, "VALIDATION_ERROR", `The \`${field}\` field accepts at most ${maxKeys} keys.`);
+  return value;
+}
+
+export function rejectPresent(context, input, fields, message) {
+  for (const field of fields) {
+    if (Object.hasOwn(input, field) && input[field] !== null && input[field] !== undefined) {
+      fail(context, "VALIDATION_ERROR", message(field));
+    }
+  }
+}

package/firedrill/tools/resend/lib/core.mjs

@@ -0,0 +1,112 @@
+// Shared handler plumbing: declared failures, API-key resolution, bounded scans and id generation.
+// Everything reads and writes `context.state`; no module-level mutable state.
+
+export const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+const HEX = "0123456789abcdef";
+const DEFAULT_MAX_SCAN = 5000;
+const CHUNK = 500;
+
+export function fail(context, code, message) {
+  return context.fail({ code, message, retryable: code === "RATE_LIMIT_EXCEEDED" || code === "APPLICATION_ERROR" });
+}
+
+/** Lowercased UUID or `null` when the text is not a UUID. Input length is bounded before the regex. */
+export function normalizeUuid(value) {
+  if (typeof value !== "string" || value.length !== 36) return null;
+  const lower = value.toLowerCase();
+  return UUID_RE.test(lower) ? lower : null;
+}
+
+export function requireUuid(context, value, name = "id") {
+  const id = normalizeUuid(value);
+  if (id === null) fail(context, "INVALID_PARAMETER", `The \`${name}\` must be a valid UUID.`);
+  return id;
+}
+
+export function team(context) {
+  const row = context.state.get("meta", "team");
+  if (row === null) fail(context, "APPLICATION_ERROR", "The team record is missing from state.");
+  return row;
+}
+
+/**
+ * Resolve the calling API key. `resendApiKeyId` absent → the team's default key; present but unknown → INVALID_API_KEY.
+ * `options.send` marks operations a sending_access key may call.
+ */
+export function resolveKey(context, options = {}) {
+  const attributes = context.actor.attributes ?? {};
+  const claimed = Object.hasOwn(attributes, "resendApiKeyId") ? attributes.resendApiKeyId : undefined;
+  const teamRow = team(context);
+  const keyId = claimed === undefined ? teamRow.defaultApiKeyId : normalizeUuid(claimed);
+  const key = keyId === null ? null : context.state.get("api-keys", keyId);
+  if (key === null) fail(context, "INVALID_API_KEY", "API key is invalid");
+  if (key.permission !== "full_access" && options.send !== true) {
+    fail(context, "RESTRICTED_API_KEY", "This API key is restricted to only send emails");
+  }
+  return { key, team: teamRow };
+}
+
+export function checkIdempotencyKey(context, input) {
+  if (!Object.hasOwn(input, "idempotencyKey")) return;
+  const value = input.idempotencyKey;
+  if (typeof value !== "string" || value.length < 1 || value.length > 256) {
+    fail(context, "INVALID_IDEMPOTENCY_KEY", "Idempotency key must be between 1-256 characters");
+  }
+}
+
+function maxScanRows(context) {
+  const limits = context.state.get("meta", "limits");
+  const value = limits === null ? DEFAULT_MAX_SCAN : limits.maxScanRows;
+  return Number.isInteger(value) && value >= 1 && value <= 10000 ? value : DEFAULT_MAX_SCAN;
+}
+
+/**
+ * Every row of `namespace` (or only rows whose id starts with `prefix`), in row-id order. Exceeding the configured
+ * bound fails APPLICATION_ERROR instead of returning a truncated list.
+ */
+export function scanAll(context, namespace, prefix) {
+  const bound = maxScanRows(context);
+  const rows = [];
+  let after = prefix;
+  for (;;) {
+    const chunk = context.state.scan(namespace, after === undefined ? { limit: CHUNK } : { afterRowId: after, limit: CHUNK });
+    for (const record of chunk) {
+      if (prefix !== undefined && !record.rowId.startsWith(prefix)) return rows;
+      if (rows.length >= bound) {
+        fail(context, "APPLICATION_ERROR", `state exceeds the supported bound of ${bound} rows`);
+      }
+      rows.push(record);
+    }
+    if (chunk.length < CHUNK) return rows;
+    after = chunk[chunk.length - 1].rowId;
+  }
+}
+
+function randomHex(context, count) {
+  let out = "";
+  for (let i = 0; i < count; i += 1) out += HEX[context.random.nextInteger(0, 16)];
+  return out;
+}
+
+/**
+ * New UUID v4 whose first 8 hex digits hold a descending sequence, so row-id order is newest first.
+ * `counter` is the field of `meta/counters` to advance.
+ */
+export function newId(context, counter) {
+  const counters = context.state.get("meta", "counters") ?? { emails: 0, domains: 0, apiKeys: 0, segments: 0, contacts: 0 };
+  const seq = (counters[counter] ?? 0) + 1;
+  context.state.put("meta", "counters", { ...counters, [counter]: seq });
+  const prefix = (0xffffffff - seq).toString(16).padStart(8, "0");
+  const variant = "89ab"[context.random.nextInteger(0, 4)];
+  return `${prefix}-${randomHex(context, 4)}-4${randomHex(context, 3)}-${variant}${randomHex(context, 3)}-${randomHex(context, 12)}`;
+}
+
+export function randomChars(context, alphabet, count) {
+  let out = "";
+  for (let i = 0; i < count; i += 1) out += alphabet[context.random.nextInteger(0, alphabet.length)];
+  return out;
+}
+
+export function hasReservedKey(object) {
+  return Object.keys(object).some((key) => key === "__proto__" || key === "constructor" || key === "prototype");
+}

package/firedrill/tools/resend/lib/json-depth.mjs

@@ -0,0 +1,45 @@
+// Bounded JSON nesting guard for route decoders. The framework's body parser accepts bodies nested about 3,000 levels,
+// which later overflow recursive argument validation and answer an opaque 500. Every JSON route decode measures depth
+// iteratively (an explicit stack, never recursion) and throws above MAX_JSON_DEPTH, so the request answers 400 first.
+
+export const MAX_JSON_DEPTH = 512;
+
+/** Nesting depth of a JSON value (a scalar is 0, `[]` or `{}` is 1), stopping as soon as `limit` is exceeded. */
+export function jsonDepth(value, limit = MAX_JSON_DEPTH) {
+  let deepest = 0;
+  const stack = [[value, 1]];
+  while (stack.length > 0) {
+    const [node, depth] = stack.pop();
+    if (node === null || typeof node !== "object") continue;
+    if (depth > deepest) deepest = depth;
+    if (deepest > limit) return deepest;
+    const children = Array.isArray(node) ? node : Object.values(node);
+    for (const child of children) if (child !== null && typeof child === "object") stack.push([child, depth + 1]);
+  }
+  return deepest;
+}
+
+/** Throw when a JSON request body (or a text body that parses as JSON) is nested deeper than MAX_JSON_DEPTH. */
+export function assertBodyDepth(request) {
+  const body = request?.body;
+  if (body === null || typeof body !== "object") return;
+  let value;
+  if (body.kind === "json") value = body.value;
+  else if (body.kind === "text" && typeof body.value === "string") {
+    try {
+      value = JSON.parse(body.value);
+    } catch {
+      return;
+    }
+  } else return;
+  if (jsonDepth(value) > MAX_JSON_DEPTH) throw new TypeError(`request body is nested deeper than ${MAX_JSON_DEPTH} levels`);
+}
+
+/** Wrap every route codec's decode with the depth guard. */
+export function guardRoutes(http) {
+  for (const [id, codec] of Object.entries(http)) {
+    const decode = codec.decode;
+    http[id] = { ...codec, decode: (request, ...rest) => { assertBodyDepth(request); return decode(request, ...rest); } };
+  }
+  return http;
+}

package/firedrill/tools/resend/lib/page.mjs

@@ -0,0 +1,66 @@
+// Resend cursor pagination over a fully materialised, bounded row list: `limit` 1–100 (default 20), `after` and
+// `before` are exclusive object ids, output `{ object: "list", has_more, data }`.
+import { fail, normalizeUuid } from "./core.mjs";
+import { utf8Bytes } from "./check.mjs";
+
+// UTF-8 bytes of the rendered rows (plus separators), kept well under the 1 MiB response cap with room for the envelope.
+const MAX_PAGE_BYTES = 900_000;
+
+function parseLimit(context, raw) {
+  if (raw === undefined || raw === null) return 20;
+  let value = raw;
+  if (typeof raw === "string") value = /^[0-9]{1,6}$/.test(raw) ? Number(raw) : NaN;
+  if (!Number.isInteger(value) || value < 1 || value > 100) {
+    fail(context, "VALIDATION_ERROR", "The `limit` parameter must be an integer between 1 and 100.");
+  }
+  return value;
+}
+
+function cursorIndex(context, ids, raw, name) {
+  const id = normalizeUuid(raw);
+  if (id === null) fail(context, "VALIDATION_ERROR", `The \`${name}\` parameter must be a valid id.`);
+  const index = ids.indexOf(id);
+  if (index < 0) fail(context, "VALIDATION_ERROR", `The \`${name}\` cursor does not match any object in this list.`);
+  return index;
+}
+
+/** Read `limit`/`after`/`before` from `input` and slice `items` (each with a string `id`). `render` maps an item. */
+export function paginate(context, input, items, render) {
+  const limit = parseLimit(context, input.limit);
+  const hasAfter = input.after !== undefined && input.after !== null;
+  const hasBefore = input.before !== undefined && input.before !== null;
+  if (hasAfter && hasBefore) fail(context, "VALIDATION_ERROR", "You can only use `after` or `before`, not both.");
+  const ids = items.map((item) => item.id);
+  let start = 0;
+  let end = items.length;
+  if (hasAfter) start = cursorIndex(context, ids, input.after, "after") + 1;
+  const data = [];
+  let bytes = 0;
+  if (hasBefore) {
+    // Fill backward from the row just before the cursor so a byte-capped page stays adjacent to `before` and
+    // every earlier row remains reachable through `has_more`.
+    end = cursorIndex(context, ids, input.before, "before");
+    const floor = Math.max(0, end - limit);
+    let first = end;
+    for (let i = end - 1; i >= floor; i -= 1) {
+      const rendered = render(items[i]);
+      bytes += utf8Bytes(JSON.stringify(rendered)) + 1;
+      if (data.length > 0 && bytes > MAX_PAGE_BYTES) break;
+      data.push(rendered);
+      first = i;
+    }
+    data.reverse();
+    return { object: "list", has_more: first > 0, data };
+  }
+  end = Math.min(items.length, start + limit);
+  for (let i = start; i < end; i += 1) {
+    const rendered = render(items[i]);
+    bytes += utf8Bytes(JSON.stringify(rendered)) + 1;
+    if (data.length > 0 && bytes > MAX_PAGE_BYTES) {
+      end = i;
+      break;
+    }
+    data.push(rendered);
+  }
+  return { object: "list", has_more: end < items.length, data };
+}

package/firedrill/tools/resend/lib/time.mjs

@@ -0,0 +1,60 @@
+// Virtual-time helpers. All arithmetic is UTC and integer microseconds; nothing reads a wall clock.
+
+const US_PER_MS = 1000;
+export const US_PER_SECOND = 1_000_000;
+export const US_PER_DAY = 86_400 * US_PER_SECOND;
+
+function pad(value, width) {
+  return String(value).padStart(width, "0");
+}
+
+function isoParts(us) {
+  const ms = Math.floor(us / US_PER_MS);
+  const micros = us - ms * US_PER_MS;
+  const iso = new Date(ms).toISOString(); // always UTC: YYYY-MM-DDTHH:MM:SS.mmmZ
+  return { date: iso.slice(0, 10), time: iso.slice(11, 19), fraction: iso.slice(20, 23) + pad(micros, 3) };
+}
+
+/** Resend's timestamp rendering: `2026-09-15 14:00:00.000000+00`. */
+export function wireTime(us) {
+  if (us === null || us === undefined) return null;
+  const parts = isoParts(us);
+  return `${parts.date} ${parts.time}.${parts.fraction}+00`;
+}
+
+/** ISO-8601 with microseconds and `Z`: `2026-09-15T14:00:00.000000Z`. */
+export function isoTime(us) {
+  const parts = isoParts(us);
+  return `${parts.date}T${parts.time}.${parts.fraction}Z`;
+}
+
+export function utcDay(us) {
+  return isoParts(us).date;
+}
+
+const ISO = /^(\d{4})-(\d{2})-(\d{2})[T ](\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,6}))?(Z|z|[+-]\d{2}:?\d{2})$/;
+
+/**
+ * Parse an ISO-8601 timestamp that carries `Z` or a numeric offset into microseconds. Zone-less input, impossible
+ * calendar values (2026-02-31) and anything else return `null`; the caller raises the declared validation error.
+ */
+export function parseTimestamp(text) {
+  if (typeof text !== "string" || text.length > 40) return null;
+  const match = ISO.exec(text);
+  if (match === null) return null;
+  const [, y, mo, d, h, mi, s, frac, zone] = match;
+  const year = Number(y), month = Number(mo), day = Number(d), hour = Number(h), minute = Number(mi), second = Number(s);
+  if (month < 1 || month > 12 || day < 1 || hour > 23 || minute > 59 || second > 59) return null;
+  const ms = Date.UTC(year, month - 1, day, hour, minute, second);
+  const check = new Date(ms);
+  if (check.getUTCFullYear() !== year || check.getUTCMonth() !== month - 1 || check.getUTCDate() !== day) return null;
+  let offsetMinutes = 0;
+  if (zone !== "Z" && zone !== "z") {
+    const digits = zone.replace(":", "");
+    const oh = Number(digits.slice(1, 3)), om = Number(digits.slice(3, 5));
+    if (oh > 23 || om > 59) return null;
+    offsetMinutes = (oh * 60 + om) * (digits[0] === "-" ? -1 : 1);
+  }
+  const micros = frac === undefined ? 0 : Number(frac.padEnd(6, "0"));
+  return (ms - offsetMinutes * 60_000) * US_PER_MS + micros;
+}