@h-ai/reach 1.0.0-beta.18 → 1.0.0-beta.19

package/dist/index.js

@@ -1,7 +1,7 @@
 import { z } from 'zod';
 import { core, err, ok } from '@h-ai/core';
 import process from 'process';
-import { reldb, migrateSchema, schemaColumns, BaseReldbCrudRepository } from '@h-ai/reldb';
+import { reldb, BaseReldbCrudRepository } from '@h-ai/reldb';
 import { randomUUID, createHash, createHmac } from 'crypto';
 import { addAbortListener } from 'events';
 import { createRequire } from 'module';
@@ -23,6 +23,7 @@ var en_US_default = {
   reach_providerRequired: "No provider specified, set provider field in message or template",
   reach_dndBlocked: "Message discarded by Do Not Disturb period",
   reach_dndPersistenceRequired: "DND delay requires an initialized database and a ready queue table",
+  reach_templatePersistenceRequired: "Configured notification templates require an initialized database and successful template persistence",
   reach_dndEnqueueFailed: "The message could not be reliably queued; try again later",
   reach_sendRecordSaveFailed: "Failed to persist the reach send record",
   reach_invalidStoredInteger: "Send record {field} is not a safe non-negative integer",
@@ -30,13 +31,13 @@ var en_US_default = {
   reach_unknownResolutionFailed: "Unknown delivery was not found or has already been resolved",
   reach_queueInputInvalid: "Invalid queue receipt or manual resolution parameters",
   reach_deliveryUnknown: "The external delivery outcome is unknown; manual review is required and automatic redelivery has stopped",
-  reach_smsSendFailed: "SMS send failed: {error}",
+  reach_smsSendFailed: "SMS send failed. Please try again later.",
   reach_smsGatewayFailed: "The SMS gateway request failed or timed out. Delivery is unconfirmed",
   reach_gatewayUrlInvalid: "Use a full HTTPS gateway URL without credentials, a query, or a fragment. For HTTP on a trusted private network, explicitly enable allowInsecureHttp",
   reach_gatewayHeadersInvalid: "Gateway headers are invalid or include a header managed by the HTTP client",
   reach_gatewayBodyInvalid: "The gateway request body must be a JSON object, an array, or text",
   reach_gatewayHookInvalid: "Gateway hooks must be bound to an SMS provider with a gateway configured",
-  reach_emailSendFailed: "Email send failed: {error}",
+  reach_emailSendFailed: "Email send failed. Please try again later.",
   reach_apiSendFailed: "API callback send failed: {error}",
   reach_configError: "Reach config validation failed: {error}",
   reach_config_nameRequired: "Provider name is required",
@@ -81,6 +82,7 @@ var ja_JP_default = {
   reach_providerRequired: "\u30D7\u30ED\u30D0\u30A4\u30C0\u30FC\u304C\u6307\u5B9A\u3055\u308C\u3066\u3044\u307E\u305B\u3093\u3002\u30E1\u30C3\u30BB\u30FC\u30B8\u307E\u305F\u306F\u30C6\u30F3\u30D7\u30EC\u30FC\u30C8\u306Eprovider\u3092\u8A2D\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044",
   reach_dndBlocked: "\u901A\u77E5\u3092\u505C\u6B62\u3059\u308B\u6642\u9593\u5E2F\u306E\u305F\u3081\u3001\u30E1\u30C3\u30BB\u30FC\u30B8\u3092\u7834\u68C4\u3057\u307E\u3057\u305F",
   reach_dndPersistenceRequired: "\u901A\u77E5\u5236\u9650\u6642\u9593\u5E2F\u306E\u914D\u4FE1\u5EF6\u671F\u306B\u306F\u521D\u671F\u5316\u6E08\u307F\u306E\u30C7\u30FC\u30BF\u30D9\u30FC\u30B9\u3068\u6E96\u5099\u6E08\u307F\u306E\u30AD\u30E5\u30FC\u30C6\u30FC\u30D6\u30EB\u304C\u5FC5\u8981\u3067\u3059",
+  reach_templatePersistenceRequired: "\u901A\u77E5\u30C6\u30F3\u30D7\u30EC\u30FC\u30C8\u306E\u8A2D\u5B9A\u306B\u306F\u521D\u671F\u5316\u6E08\u307F\u306E\u30C7\u30FC\u30BF\u30D9\u30FC\u30B9\u3068\u30C6\u30F3\u30D7\u30EC\u30FC\u30C8\u306E\u4FDD\u5B58\u6210\u529F\u304C\u5FC5\u8981\u3067\u3059",
   reach_dndEnqueueFailed: "\u30E1\u30C3\u30BB\u30FC\u30B8\u3092\u78BA\u5B9F\u306B\u30AD\u30E5\u30FC\u3078\u767B\u9332\u3067\u304D\u307E\u305B\u3093\u3067\u3057\u305F\u3002\u3057\u3070\u3089\u304F\u3057\u3066\u304B\u3089\u518D\u8A66\u884C\u3057\u3066\u304F\u3060\u3055\u3044",
   reach_sendRecordSaveFailed: "\u914D\u4FE1\u8A18\u9332\u306E\u6C38\u7D9A\u5316\u306B\u5931\u6557\u3057\u307E\u3057\u305F",
   reach_invalidStoredInteger: "\u914D\u4FE1\u8A18\u9332\u306E {field} \u306F\u5B89\u5168\u306A\u975E\u8CA0\u6574\u6570\u3067\u306F\u3042\u308A\u307E\u305B\u3093",
@@ -88,13 +90,13 @@ var ja_JP_default = {
   reach_unknownResolutionFailed: "\u7D50\u679C\u4E0D\u660E\u306E\u914D\u4FE1\u304C\u898B\u3064\u304B\u3089\u306A\u3044\u304B\u3001\u65E2\u306B\u89E3\u6C7A\u3055\u308C\u3066\u3044\u307E\u3059",
   reach_queueInputInvalid: "\u30AD\u30E5\u30FC\u306E\u53D7\u9818\u8A18\u9332\u307E\u305F\u306F\u624B\u52D5\u89E3\u6C7A\u306E\u30D1\u30E9\u30E1\u30FC\u30BF\u30FC\u304C\u7121\u52B9\u3067\u3059",
   reach_deliveryUnknown: "\u5916\u90E8\u3078\u306E\u914D\u4FE1\u7D50\u679C\u306F\u4E0D\u660E\u3067\u3059\u3002\u624B\u52D5\u78BA\u8A8D\u304C\u5FC5\u8981\u306A\u305F\u3081\u3001\u81EA\u52D5\u518D\u914D\u4FE1\u3092\u505C\u6B62\u3057\u307E\u3057\u305F",
-  reach_smsSendFailed: "SMS\u306E\u9001\u4FE1\u306B\u5931\u6557\u3057\u307E\u3057\u305F: {error}",
+  reach_smsSendFailed: "SMS\u306E\u9001\u4FE1\u306B\u5931\u6557\u3057\u307E\u3057\u305F\u3002\u3057\u3070\u3089\u304F\u3057\u3066\u304B\u3089\u3082\u3046\u4E00\u5EA6\u304A\u8A66\u3057\u304F\u3060\u3055\u3044",
   reach_smsGatewayFailed: "SMS \u30B2\u30FC\u30C8\u30A6\u30A7\u30A4\u3078\u306E\u30EA\u30AF\u30A8\u30B9\u30C8\u304C\u5931\u6557\u307E\u305F\u306F\u30BF\u30A4\u30E0\u30A2\u30A6\u30C8\u3057\u3001\u914D\u4FE1\u3092\u78BA\u8A8D\u3067\u304D\u307E\u305B\u3093\u3067\u3057\u305F",
   reach_gatewayUrlInvalid: "\u30B2\u30FC\u30C8\u30A6\u30A7\u30A4\u306B\u306F\u8A8D\u8A3C\u60C5\u5831\u3001\u30AF\u30A8\u30EA\u3001\u30D5\u30E9\u30B0\u30E1\u30F3\u30C8\u3092\u542B\u307E\u306A\u3044\u5B8C\u5168\u306A HTTPS URL \u3092\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u4FE1\u983C\u3067\u304D\u308B\u5185\u90E8\u30CD\u30C3\u30C8\u30EF\u30FC\u30AF\u3067 HTTP \u3092\u4F7F\u7528\u3059\u308B\u5834\u5408\u306F allowInsecureHttp \u3092\u660E\u793A\u7684\u306B\u6709\u52B9\u306B\u3057\u3066\u304F\u3060\u3055\u3044",
   reach_gatewayHeadersInvalid: "\u30B2\u30FC\u30C8\u30A6\u30A7\u30A4\u306E\u30EA\u30AF\u30A8\u30B9\u30C8\u30D8\u30C3\u30C0\u30FC\u304C\u7121\u52B9\u304B\u3001HTTP \u30AF\u30E9\u30A4\u30A2\u30F3\u30C8\u304C\u7BA1\u7406\u3059\u308B\u30D8\u30C3\u30C0\u30FC\u304C\u542B\u307E\u308C\u3066\u3044\u307E\u3059",
   reach_gatewayBodyInvalid: "\u30B2\u30FC\u30C8\u30A6\u30A7\u30A4\u306E\u30EA\u30AF\u30A8\u30B9\u30C8\u30DC\u30C7\u30A3\u306B\u306F JSON \u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u3001\u914D\u5217\u3001\u307E\u305F\u306F\u30C6\u30AD\u30B9\u30C8\u3092\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044",
   reach_gatewayHookInvalid: "\u30B2\u30FC\u30C8\u30A6\u30A7\u30A4\u306E\u30D5\u30C3\u30AF\u306F\u3001\u30B2\u30FC\u30C8\u30A6\u30A7\u30A4\u3092\u8A2D\u5B9A\u3057\u305F SMS Provider \u306B\u5272\u308A\u5F53\u3066\u3066\u304F\u3060\u3055\u3044",
-  reach_emailSendFailed: "\u30E1\u30FC\u30EB\u306E\u9001\u4FE1\u306B\u5931\u6557\u3057\u307E\u3057\u305F: {error}",
+  reach_emailSendFailed: "\u30E1\u30FC\u30EB\u306E\u9001\u4FE1\u306B\u5931\u6557\u3057\u307E\u3057\u305F\u3002\u3057\u3070\u3089\u304F\u3057\u3066\u304B\u3089\u3082\u3046\u4E00\u5EA6\u304A\u8A66\u3057\u304F\u3060\u3055\u3044",
   reach_apiSendFailed: "API\u30B3\u30FC\u30EB\u30D0\u30C3\u30AF\u306E\u9001\u4FE1\u306B\u5931\u6557\u3057\u307E\u3057\u305F: {error}",
   reach_configError: "\u901A\u77E5\u8A2D\u5B9A\u306E\u691C\u8A3C\u306B\u5931\u6557\u3057\u307E\u3057\u305F: {error}",
   reach_config_nameRequired: "\u30D7\u30ED\u30D0\u30A4\u30C0\u30FC\u540D\u306F\u5FC5\u9808\u3067\u3059",
@@ -139,6 +141,7 @@ var zh_CN_default = {
   reach_providerRequired: "\u672A\u6307\u5B9A Provider\uFF0C\u8BF7\u5728\u6D88\u606F\u6216\u6A21\u677F\u4E2D\u8BBE\u7F6E provider \u5B57\u6BB5",
   reach_dndBlocked: "\u5F53\u524D\u5904\u4E8E\u514D\u6253\u6270\u65F6\u6BB5\uFF0C\u6D88\u606F\u5DF2\u4E22\u5F03",
   reach_dndPersistenceRequired: "\u542F\u7528\u514D\u6253\u6270\u5EF6\u8FDF\u53D1\u9001\u9700\u8981\u5148\u521D\u59CB\u5316\u6570\u636E\u5E93\u5E76\u786E\u4FDD\u961F\u5217\u8868\u53EF\u7528",
+  reach_templatePersistenceRequired: "\u914D\u7F6E\u901A\u77E5\u6A21\u677F\u524D\u9700\u8981\u5148\u521D\u59CB\u5316\u6570\u636E\u5E93\uFF0C\u5E76\u786E\u4FDD\u6A21\u677F\u80FD\u591F\u4FDD\u5B58",
   reach_dndEnqueueFailed: "\u6D88\u606F\u672A\u80FD\u53EF\u9760\u4FDD\u5B58\u5230\u5EF6\u8FDF\u961F\u5217\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5",
   reach_sendRecordSaveFailed: "\u4FDD\u5B58\u89E6\u8FBE\u53D1\u9001\u8BB0\u5F55\u5931\u8D25",
   reach_invalidStoredInteger: "\u53D1\u9001\u8BB0\u5F55\u7684 {field} \u4E0D\u662F\u5B89\u5168\u7684\u975E\u8D1F\u6574\u6570",
@@ -146,13 +149,13 @@ var zh_CN_default = {
   reach_unknownResolutionFailed: "\u672A\u77E5\u6295\u9012\u7ED3\u679C\u4E0D\u5B58\u5728\u6216\u5DF2\u88AB\u5176\u5B83\u64CD\u4F5C\u88C1\u5B9A",
   reach_queueInputInvalid: "\u961F\u5217\u56DE\u6267\u6216\u4EBA\u5DE5\u88C1\u5B9A\u53C2\u6570\u65E0\u6548",
   reach_deliveryUnknown: "\u5916\u90E8\u6295\u9012\u7ED3\u679C\u672A\u77E5\uFF0C\u9700\u8981\u4EBA\u5DE5\u6838\u5BF9\uFF0C\u5DF2\u505C\u6B62\u81EA\u52A8\u91CD\u53D1",
-  reach_smsSendFailed: "\u77ED\u4FE1\u53D1\u9001\u5931\u8D25: {error}",
+  reach_smsSendFailed: "\u77ED\u4FE1\u53D1\u9001\u5931\u8D25\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5",
   reach_smsGatewayFailed: "\u77ED\u4FE1\u7F51\u5173\u8BF7\u6C42\u5931\u8D25\u6216\u8D85\u65F6\uFF0C\u6295\u9012\u7ED3\u679C\u672A\u786E\u8BA4",
   reach_gatewayUrlInvalid: "\u7F51\u5173\u987B\u4F7F\u7528\u5B8C\u6574\u7684 HTTPS URL\uFF0C\u4E14\u4E0D\u80FD\u5305\u542B\u51ED\u636E\u3001\u67E5\u8BE2\u53C2\u6570\u6216\u7247\u6BB5\u3002\u53D7\u4FE1\u5185\u7F51\u4F7F\u7528 HTTP \u65F6\u987B\u663E\u5F0F\u542F\u7528 allowInsecureHttp",
   reach_gatewayHeadersInvalid: "\u7F51\u5173\u8BF7\u6C42\u5934\u683C\u5F0F\u65E0\u6548\uFF0C\u6216\u5305\u542B\u7531 HTTP \u5BA2\u6237\u7AEF\u7BA1\u7406\u7684\u8BF7\u6C42\u5934",
   reach_gatewayBodyInvalid: "\u7F51\u5173\u8BF7\u6C42\u4F53\u5FC5\u987B\u662F JSON \u5BF9\u8C61\u3001\u6570\u7EC4\u6216\u6587\u672C",
   reach_gatewayHookInvalid: "\u7F51\u5173\u51FD\u6570\u5FC5\u987B\u7ED1\u5B9A\u5230\u542F\u7528\u4E86\u7F51\u5173\u7684\u77ED\u4FE1 Provider",
-  reach_emailSendFailed: "\u90AE\u4EF6\u53D1\u9001\u5931\u8D25: {error}",
+  reach_emailSendFailed: "\u90AE\u4EF6\u53D1\u9001\u5931\u8D25\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5",
   reach_apiSendFailed: "API \u56DE\u8C03\u53D1\u9001\u5931\u8D25: {error}",
   reach_configError: "\u89E6\u8FBE\u914D\u7F6E\u6821\u9A8C\u5931\u8D25\uFF1A{error}",
   reach_config_nameRequired: "Provider \u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A",
@@ -197,13 +200,19 @@ var gatewayFields = {
   /** 网关自定义请求头；连接与消息长度相关的头由 HTTP 客户端管理。 */
   headers: z.record(z.string(), z.string()).refine((headers) => {
     try {
-      return [...new Headers(headers).keys()].every((name) => !transportHeader.test(name));
+      return [
+        ...new Headers(headers).keys()
+      ].every((name) => !transportHeader.test(name));
     } catch {
       return false;
     }
   }, reachM("reach_gatewayHeadersInvalid")).optional(),
   /** 网关请求体；对象和数组序列化为 JSON，字符串原样发送。省略时不发请求体。 */
-  body: z.union([z.string(), z.array(jsonValue), z.record(z.string(), jsonValue)], reachM("reach_gatewayBodyInvalid")).optional()
+  body: z.union([
+    z.string(),
+    z.array(jsonValue),
+    z.record(z.string(), jsonValue)
+  ], reachM("reach_gatewayBodyInvalid")).optional()
 };
 var ReachGatewayFieldsSchema = z.strictObject(gatewayFields);
 var ReachGatewayConfigSchema = z.strictObject({
@@ -215,7 +224,10 @@ var ReachGatewayConfigSchema = z.strictObject({
 }).refine(({ url, allowInsecureHttp }) => {
   const target = URL.parse(url);
   return target !== null && /^https?:\/\//i.test(url) && !/[?#]/.test(url) && !target.username && !target.password && (target.protocol === "https:" || target.protocol === "http:" && allowInsecureHttp);
-}, { path: ["url"], message: reachM("reach_gatewayUrlInvalid") });
+}, {
+  path: ["url"],
+  message: reachM("reach_gatewayUrlInvalid")
+});
 
 // src/reach-config.ts
 var ConsoleProviderConfigSchema = z.object({
@@ -356,13 +368,10 @@ var ISO_MILLISECONDS_SUFFIX_REGEX = /\.\d{3}Z$/;
 var RFC3986_RESERVED_CHARACTERS_REGEX = /[!'()*]/g;
 var GATEWAY_TIMEOUT_MS = 1e4;
 var GATEWAY_RESPONSE_LIMIT_BYTES = 64 * 1024;
-function toReachError(error) {
+function toReachError() {
   return {
-    code: HaiReachError.SEND_FAILED.code,
-    message: reachM("reach_smsSendFailed", {
-      params: { error: error instanceof Error ? error.message : String(error) }
-    }),
-    cause: error
+    ...HaiReachError.SEND_FAILED,
+    message: reachM("reach_smsSendFailed")
   };
 }
 function percentEncode(str) {
@@ -389,7 +398,12 @@ async function prepareGatewayRequest(gateway, url, signal, hook) {
     });
     try {
       const output = await Promise.race([
-        Promise.resolve().then(() => hook({ method: "POST", url, body: typeof body === "string" ? body : JSON.stringify(body), signal })),
+        Promise.resolve().then(() => hook({
+          method: "POST",
+          url,
+          body: typeof body === "string" ? body : JSON.stringify(body),
+          signal
+        })),
         aborted
       ]);
       const patch = ReachGatewayFieldsSchema.parse(output === void 0 ? {} : output);
@@ -400,9 +414,16 @@ async function prepareGatewayRequest(gateway, url, signal, hook) {
       listener?.[Symbol.dispose]();
     }
   }
-  if (body !== void 0 && !headers.has("Content-Type"))
+  if (body !== void 0 && !headers.has("Content-Type")) {
     headers.set("Content-Type", typeof body === "string" ? "text/plain; charset=utf-8" : "application/json");
-  return { method: "POST", headers, body: typeof body === "string" ? body : JSON.stringify(body), redirect: "error", signal };
+  }
+  return {
+    method: "POST",
+    headers,
+    body: typeof body === "string" ? body : JSON.stringify(body),
+    redirect: "error",
+    signal
+  };
 }
 async function readGatewayResponse(response) {
   if (response.ok && response.body) {
@@ -436,7 +457,9 @@ function createAliyunSmsProvider(gatewayHook) {
       if (config.type !== "aliyun-sms") {
         return err(
           HaiReachError.CONFIG_ERROR,
-          reachM("reach_unsupportedType", { params: { type: config.type } })
+          reachM("reach_unsupportedType", {
+            params: { type: config.type }
+          })
         );
       }
       smsConfig = config;
@@ -499,7 +522,7 @@ function createAliyunSmsProvider(gatewayHook) {
           logger.warn("SMS send returned non-OK status", { code: body.Code });
           return err(
             HaiReachError.SEND_FAILED,
-            reachM("reach_smsSendFailed", { params: { error: body.Message } })
+            reachM("reach_smsSendFailed")
           );
         }
         logger.info("SMS sent", { to: message.to, bizId: body.BizId });
@@ -510,7 +533,7 @@ function createAliyunSmsProvider(gatewayHook) {
           return err(HaiReachError.SEND_FAILED, reachM("reach_smsGatewayFailed"));
         }
         logger.error("SMS send failed", { to: message.to, error });
-        return err(toReachError(error));
+        return err(toReachError());
       }
     }
   };
@@ -525,9 +548,11 @@ function getSafeEndpoint(url) {
 }
 function toReachError2() {
   return {
-    code: HaiReachError.SEND_FAILED.code,
+    ...HaiReachError.SEND_FAILED,
     message: reachM("reach_apiSendFailed", {
-      params: { error: reachM("reach_apiRequestFailed") }
+      params: {
+        error: reachM("reach_apiRequestFailed")
+      }
     })
   };
 }
@@ -559,7 +584,10 @@ async function readAcknowledgement(response) {
     const messageId = "messageId" in result ? result.messageId : void 0;
     if (messageId !== void 0 && (typeof messageId !== "string" || messageId.length > 255))
       return err(HaiReachError.SEND_FAILED, reachM("reach_apiResponseInvalid"));
-    return ok({ success: true, ...messageId === void 0 ? {} : { messageId } });
+    return ok({
+      success: true,
+      ...messageId === void 0 ? {} : { messageId }
+    });
   } catch {
     return err(HaiReachError.SEND_FAILED, reachM("reach_apiResponseInvalid"));
   } finally {
@@ -579,7 +607,9 @@ function createApiProvider() {
       if (config.type !== "api") {
         return err(
           HaiReachError.CONFIG_ERROR,
-          reachM("reach_unsupportedType", { params: { type: config.type } })
+          reachM("reach_unsupportedType", {
+            params: { type: config.type }
+          })
         );
       }
       apiConfig = config;
@@ -587,7 +617,10 @@ function createApiProvider() {
         apiConfig = null;
         return err(HaiReachError.CONFIG_ERROR, reachM("reach_apiHttpsRequired"));
       }
-      logger2.info("API provider connected", { endpoint: getSafeEndpoint(config.url), method: config.method });
+      logger2.info("API provider connected", {
+        endpoint: getSafeEndpoint(config.url),
+        method: config.method
+      });
       return ok(void 0);
     },
     async close() {
@@ -604,7 +637,9 @@ function createApiProvider() {
           reachM("reach_notInitialized")
         );
       }
-      logger2.debug("Sending via API callback", { endpoint: getSafeEndpoint(apiConfig.url) });
+      logger2.debug("Sending via API callback", {
+        endpoint: getSafeEndpoint(apiConfig.url)
+      });
       const requireHttps = apiConfig.requireHttps ?? (message.sensitive === true && core.module.requiresSharedState(process.env));
       if (requireHttps && new URL(apiConfig.url).protocol !== "https:")
         return err(HaiReachError.CONFIG_ERROR, reachM("reach_apiHttpsRequired"));
@@ -638,7 +673,9 @@ function createApiProvider() {
             const rejected = response.status >= 300 && response.status < 400 || response.status >= 400 && response.status < 500 && ![408, 425, 429].includes(response.status);
             return err(
               rejected ? HaiReachError.DELIVERY_REJECTED : HaiReachError.SEND_FAILED,
-              reachM("reach_apiSendFailed", { params: { error: `HTTP ${response.status}` } })
+              reachM("reach_apiSendFailed", {
+                params: { error: `HTTP ${response.status}` }
+              })
             );
           }
           const result = await readAcknowledgement(response);
@@ -688,13 +725,10 @@ function createConsoleProvider() {
   };
 }
 var logger4 = core.logger.child({ module: "reach", scope: "provider-smtp" });
-function toReachError3(error) {
+function toReachError3() {
   return {
-    code: HaiReachError.SEND_FAILED.code,
-    message: reachM("reach_emailSendFailed", {
-      params: { error: error instanceof Error ? error.message : String(error) }
-    }),
-    cause: error
+    ...HaiReachError.SEND_FAILED,
+    message: reachM("reach_emailSendFailed")
   };
 }
 function createSmtpProvider() {
@@ -707,7 +741,9 @@ function createSmtpProvider() {
       if (config.type !== "smtp") {
         return err(
           HaiReachError.CONFIG_ERROR,
-          reachM("reach_unsupportedType", { params: { type: config.type } })
+          reachM("reach_unsupportedType", {
+            params: { type: config.type }
+          })
         );
       }
       try {
@@ -724,7 +760,7 @@ function createSmtpProvider() {
         return ok(void 0);
       } catch (error) {
         logger4.error("SMTP connection failed", { error });
-        return err(toReachError3(error));
+        return err(toReachError3());
       }
     },
     async close() {
@@ -758,7 +794,7 @@ function createSmtpProvider() {
         return ok({ success: true, messageId: info.messageId });
       } catch (error) {
         logger4.error("Email send failed", { to: message.to, error });
-        return err(toReachError3(error));
+        return err(toReachError3());
       }
     }
   };
@@ -850,14 +886,25 @@ function previousResult(row) {
   return row.status === "sent" ? ok({ success: true, receiptId: row.queueId ?? void 0 }) : unconfirmed(row.queueId);
 }
 function unconfirmed(receiptId) {
-  return { success: false, error: { ...HaiReachError.SEND_FAILED, message: reachM("reach_sensitiveDeliveryUnconfirmed"), ext: { receiptId } } };
+  return {
+    success: false,
+    error: {
+      ...HaiReachError.SEND_FAILED,
+      message: reachM("reach_sensitiveDeliveryUnconfirmed"),
+      ext: { receiptId }
+    }
+  };
 }
 async function sendSensitive(message, provider, repo, blocked) {
   if (!repo || !message.idempotencyKey?.trim() || message.idempotencyKey.length > 255 || !Number.isSafeInteger(message.expiresAt))
     return err(HaiReachError.CONFIG_ERROR, reachM("reach_sensitivePolicyRequired"));
   const hash = createHash("sha256").update(JSON.stringify([message.provider, message.to, message.idempotencyKey])).digest("hex");
   const queueId = `${hash.slice(0, 8)}-${hash.slice(8, 12)}-5${hash.slice(13, 16)}-a${hash.slice(17, 20)}-${hash.slice(20, 32)}`;
-  const find = () => repo.findAll({ where: "queue_id = ?", params: [queueId], limit: 1 });
+  const find = () => repo.findAll({
+    where: "queue_id = ?",
+    params: [queueId],
+    limit: 1
+  });
   const existing = await find();
   if (!existing.success)
     return existing;
@@ -906,6 +953,106 @@ async function sendSensitive(message, provider, repo, blocked) {
     return unconfirmed(queueId);
   return ok({ success: true, receiptId: queueId });
 }
+function renderString(template, vars) {
+  return template.replace(/\{(\w+)\}/g, (match, key) => {
+    return Object.hasOwn(vars, key) ? vars[key] : match;
+  });
+}
+function renderTemplate(template, vars) {
+  try {
+    const rendered = {
+      subject: template.subject ? renderString(template.subject, vars) : void 0,
+      body: renderString(template.body, vars)
+    };
+    return ok(rendered);
+  } catch (error) {
+    return err(
+      HaiReachError.TEMPLATE_RENDER_FAILED,
+      reachM("reach_templateRenderFailed", {
+        params: {
+          error: error instanceof Error ? error.message : String(error)
+        }
+      }),
+      error
+    );
+  }
+}
+function noDbError(msgKey) {
+  return err(
+    HaiReachError.SEND_FAILED,
+    reachM(msgKey, {
+      params: { error: "database not available" }
+    })
+  );
+}
+function createTemplateRegistry(repo) {
+  return {
+    async resolve(name) {
+      if (!repo) {
+        return err(
+          HaiReachError.TEMPLATE_NOT_FOUND,
+          reachM("reach_templateNotFound", {
+            params: { template: name }
+          })
+        );
+      }
+      const dbResult = await repo.findByName(name);
+      if (!dbResult.success) {
+        return dbResult;
+      }
+      if (dbResult.data) {
+        return ok({
+          name: dbResult.data.name,
+          provider: dbResult.data.provider,
+          subject: dbResult.data.subject ?? void 0,
+          body: dbResult.data.body
+        });
+      }
+      return err(
+        HaiReachError.TEMPLATE_NOT_FOUND,
+        reachM("reach_templateNotFound", {
+          params: { template: name }
+        })
+      );
+    },
+    async save(template) {
+      if (!repo) {
+        return noDbError("reach_templateSaveFailed");
+      }
+      return repo.upsert(template);
+    },
+    async saveBatch(templates) {
+      if (!repo) {
+        return noDbError("reach_templateSaveFailed");
+      }
+      const results = await Promise.all(templates.map((t) => repo.upsert(t)));
+      const failed = results.find((r) => !r.success);
+      if (failed) {
+        return failed;
+      }
+      return ok(void 0);
+    },
+    async remove(name) {
+      if (!repo) {
+        return noDbError("reach_templateDeleteFailed");
+      }
+      return repo.deleteByName(name);
+    },
+    async list() {
+      if (!repo) {
+        return ok([]);
+      }
+      return repo.listTemplates();
+    },
+    async render(name, vars) {
+      const resolved = await this.resolve(name);
+      if (!resolved.success) {
+        return resolved;
+      }
+      return renderTemplate(resolved.data, vars);
+    }
+  };
+}
 
 // src/reach-send.ts
 var logger6 = core.logger.child({ module: "reach", scope: "send" });
@@ -947,14 +1094,16 @@ async function preprocessMessage(message, templateRegistry2) {
   if (!message.template) {
     return ok(message);
   }
-  const rendered = await templateRegistry2.render(message.template, message.vars ?? {});
+  const template = await templateRegistry2.resolve(message.template);
+  if (!template.success)
+    return template;
+  const rendered = renderTemplate(template.data, message.vars ?? {});
   if (!rendered.success) {
     return rendered;
   }
-  const template = await templateRegistry2.resolve(message.template);
   const processed = {
     ...message,
-    provider: message.provider || (template.success ? template.data.provider : "") || "",
+    provider: message.provider || template.data.provider || "",
     subject: message.subject ?? rendered.data.subject,
     body: message.body ?? rendered.data.body
   };
@@ -1118,7 +1267,9 @@ async function executeSend(message, providers2, templateRegistry2, dndConfig2, r
   if (!message.to) {
     return err(
       HaiReachError.INVALID_RECIPIENT,
-      reachM("reach_invalidRecipient", { params: { recipient: "" } })
+      reachM("reach_invalidRecipient", {
+        params: { recipient: "" }
+      })
     );
   }
   const preprocessed = await preprocessMessage(message, templateRegistry2);
@@ -1135,7 +1286,9 @@ async function executeSend(message, providers2, templateRegistry2, dndConfig2, r
   if (!providers2.has(providerName)) {
     return err(
       HaiReachError.PROVIDER_NOT_FOUND,
-      reachM("reach_providerNotFound", { params: { provider: providerName } })
+      reachM("reach_providerNotFound", {
+        params: { provider: providerName }
+      })
     );
   }
   if (preprocessed.data.sensitive)
@@ -1189,202 +1342,130 @@ async function executeSend(message, providers2, templateRegistry2, dndConfig2, r
   }
   return result;
 }
-function renderString(template, vars) {
-  return template.replace(/\{(\w+)\}/g, (match, key) => {
-    return Object.hasOwn(vars, key) ? vars[key] : match;
-  });
-}
-function renderTemplate(template, vars) {
-  try {
-    const rendered = {
-      subject: template.subject ? renderString(template.subject, vars) : void 0,
-      body: renderString(template.body, vars)
-    };
-    return ok(rendered);
-  } catch (error) {
-    return err(
-      HaiReachError.TEMPLATE_RENDER_FAILED,
-      reachM("reach_templateRenderFailed", {
-        params: { error: error instanceof Error ? error.message : String(error) }
-      }),
-      error
-    );
-  }
-}
-function noDbError(msgKey) {
-  return err(
-    HaiReachError.SEND_FAILED,
-    reachM(msgKey, { params: { error: "database not available" } })
-  );
-}
-function createTemplateRegistry(repo) {
-  return {
-    async resolve(name) {
-      if (!repo) {
-        return err(
-          HaiReachError.TEMPLATE_NOT_FOUND,
-          reachM("reach_templateNotFound", { params: { template: name } })
-        );
-      }
-      const dbResult = await repo.findByName(name);
-      if (!dbResult.success) {
-        return dbResult;
-      }
-      if (dbResult.data) {
-        return ok({
-          name: dbResult.data.name,
-          provider: dbResult.data.provider,
-          subject: dbResult.data.subject ?? void 0,
-          body: dbResult.data.body
-        });
-      }
-      return err(
-        HaiReachError.TEMPLATE_NOT_FOUND,
-        reachM("reach_templateNotFound", { params: { template: name } })
-      );
-    },
-    async save(template) {
-      if (!repo) {
-        return noDbError("reach_templateSaveFailed");
-      }
-      return repo.upsert(template);
-    },
-    async saveBatch(templates) {
-      if (!repo) {
-        return noDbError("reach_templateSaveFailed");
-      }
-      const results = await Promise.all(templates.map((t) => repo.upsert(t)));
-      const failed = results.find((r) => !r.success);
-      if (failed) {
-        return failed;
-      }
-      return ok(void 0);
-    },
-    async remove(name) {
-      if (!repo) {
-        return noDbError("reach_templateDeleteFailed");
-      }
-      return repo.deleteByName(name);
-    },
-    async list() {
-      if (!repo) {
-        return ok([]);
-      }
-      return repo.listTemplates();
-    },
-    async render(name, vars) {
-      const resolved = await this.resolve(name);
-      if (!resolved.success) {
-        return resolved;
-      }
-      return renderTemplate(resolved.data, vars);
-    }
-  };
-}
 function migrateReach(options = {}, db = reldb) {
-  const definitions = { queue_id: db.config?.type === "mysql" ? "VARCHAR(255)" : "TEXT", retry_safe: "BOOLEAN NOT NULL DEFAULT FALSE", attempt_count: "BIGINT NOT NULL DEFAULT 0", max_attempts: "BIGINT NOT NULL DEFAULT 5", next_attempt_at: "BIGINT NOT NULL DEFAULT 0", retry_delay_ms: "BIGINT NOT NULL DEFAULT 60000", max_retry_delay_ms: "BIGINT NOT NULL DEFAULT 3600000", last_failure: "TEXT" };
-  const steps = [{
-    version: 1,
-    name: "durable-delivery-ledger",
-    async needed(sql) {
-      const found = await schemaColumns(db, "hai_reach_send_log", sql);
-      return found.success ? ok(found.data.length > 0 && Object.keys(definitions).some((name) => !found.data.includes(name))) : found;
-    },
-    async apply(sql) {
-      const found = await schemaColumns(db, "hai_reach_send_log", sql);
-      if (!found.success)
-        return found;
-      for (const [name, definition] of Object.entries(definitions)) {
-        if (found.data.includes(name))
-          continue;
-        const added = await sql.execute(`ALTER TABLE hai_reach_send_log ADD COLUMN ${name} ${definition}`);
-        if (!added.success)
-          return added;
+  const definitions = {
+    queue_id: db.config?.type === "mysql" ? "VARCHAR(255)" : "TEXT",
+    retry_safe: "BOOLEAN NOT NULL DEFAULT FALSE",
+    attempt_count: "BIGINT NOT NULL DEFAULT 0",
+    max_attempts: "BIGINT NOT NULL DEFAULT 5",
+    next_attempt_at: "BIGINT NOT NULL DEFAULT 0",
+    retry_delay_ms: "BIGINT NOT NULL DEFAULT 60000",
+    max_retry_delay_ms: "BIGINT NOT NULL DEFAULT 3600000",
+    last_failure: "TEXT"
+  };
+  const steps = [
+    {
+      version: 1,
+      name: "durable-delivery-ledger",
+      async needed(sql) {
+        const found = await db.schemaColumns("hai_reach_send_log", sql);
+        return found.success ? ok(found.data.length > 0 && Object.keys(definitions).some((name) => !found.data.includes(name))) : found;
+      },
+      async apply(sql) {
+        const found = await db.schemaColumns("hai_reach_send_log", sql);
+        if (!found.success)
+          return found;
+        for (const [name, definition] of Object.entries(definitions)) {
+          if (found.data.includes(name))
+            continue;
+          const added = await sql.execute(`ALTER TABLE hai_reach_send_log ADD COLUMN ${name} ${definition}`);
+          if (!added.success)
+            return added;
+        }
+        return ok(void 0);
       }
-      return ok(void 0);
-    }
-  }, {
-    version: 2,
-    name: "legacy-delivery-isolation",
-    async needed(sql) {
-      const found = await schemaColumns(db, "hai_reach_send_log", sql);
-      if (!found.success || !found.data.length)
-        return found.success ? ok(false) : found;
-      if (!found.data.includes("queue_id"))
-        return ok(true);
-      const row = await sql.get("SELECT id FROM hai_reach_send_log WHERE queue_id IS NULL AND status IN ('pending','processing','unknown') LIMIT 1");
-      return row.success ? ok(Boolean(row.data)) : row;
     },
-    async apply(sql) {
-      const isolated = await sql.execute("UPDATE hai_reach_send_log SET status='unknown',processing_owner=NULL,locked_until=NULL WHERE status='processing' AND queue_id IS NULL");
-      if (!isolated.success)
-        return isolated;
-      while (true) {
-        const rows = await sql.query("SELECT id FROM hai_reach_send_log WHERE queue_id IS NULL AND status IN ('pending','unknown') ORDER BY id LIMIT 100");
-        if (!rows.success)
-          return rows;
-        for (const row of rows.data) {
-          const saved = await sql.execute("UPDATE hai_reach_send_log SET queue_id=? WHERE id=? AND queue_id IS NULL", [randomUUID(), row.id]);
-          if (!saved.success)
-            return saved;
+    {
+      version: 2,
+      name: "legacy-delivery-isolation",
+      async needed(sql) {
+        const found = await db.schemaColumns("hai_reach_send_log", sql);
+        if (!found.success || !found.data.length) {
+          return found.success ? ok(false) : found;
+        }
+        if (!found.data.includes("queue_id"))
+          return ok(true);
+        const row = await sql.get("SELECT id FROM hai_reach_send_log WHERE queue_id IS NULL AND status IN ('pending','processing','unknown') LIMIT 1");
+        return row.success ? ok(Boolean(row.data)) : row;
+      },
+      async apply(sql) {
+        const isolated = await sql.execute("UPDATE hai_reach_send_log SET status='unknown',processing_owner=NULL,locked_until=NULL WHERE status='processing' AND queue_id IS NULL");
+        if (!isolated.success)
+          return isolated;
+        while (true) {
+          const rows = await sql.query("SELECT id FROM hai_reach_send_log WHERE queue_id IS NULL AND status IN ('pending','unknown') ORDER BY id LIMIT 100");
+          if (!rows.success)
+            return rows;
+          for (const row of rows.data) {
+            const saved = await sql.execute("UPDATE hai_reach_send_log SET queue_id=? WHERE id=? AND queue_id IS NULL", [
+              randomUUID(),
+              row.id
+            ]);
+            if (!saved.success)
+              return saved;
+          }
+          if (rows.data.length < 100)
+            return ok(void 0);
         }
-        if (rows.data.length < 100)
-          return ok(void 0);
       }
-    }
-  }, {
-    version: 3,
-    name: "credential-payload-retirement",
-    async needed(sql) {
-      const found = await schemaColumns(db, "hai_reach_send_log", sql);
-      if (!found.success || !found.data.length)
-        return found.success ? ok(false) : found;
-      const ledger = await schemaColumns(db, "hai_schema_migrations", sql);
-      if (!ledger.success)
-        return ledger;
-      const version = ledger.data.length ? await sql.get("SELECT version FROM hai_schema_migrations WHERE module=?", ["reach"]) : ok(null);
-      if (!version.success)
-        return version;
-      if (Number(version.data?.version ?? 0) >= 3)
-        return ok(false);
-      const row = await sql.get("SELECT id FROM hai_reach_send_log WHERE subject IS NOT NULL OR body IS NOT NULL OR template IS NOT NULL OR vars_json IS NOT NULL OR extra_json IS NOT NULL LIMIT 1");
-      return row.success ? ok(Boolean(row.data)) : row;
     },
-    async apply(sql) {
-      return sql.execute("UPDATE hai_reach_send_log SET body=NULL,subject=NULL,vars_json=NULL,extra_json=NULL,template=NULL,status=CASE WHEN status IN ('pending','processing') THEN 'discarded' WHEN status='sending' THEN 'unknown' ELSE status END,processing_owner=NULL,locked_until=NULL WHERE subject IS NOT NULL OR body IS NOT NULL OR template IS NOT NULL OR vars_json IS NOT NULL OR extra_json IS NOT NULL");
-    }
-  }, {
-    version: 4,
-    name: "unique-operation-receipts",
-    async needed(sql) {
-      const columns = await schemaColumns(db, "hai_reach_send_log", sql);
-      if (!columns.success || !columns.data.length)
-        return columns.success ? ok(false) : columns;
-      if (!columns.data.includes("queue_id"))
-        return ok(true);
-      if (db.config?.type === "sqlite") {
-        const indexes = await sql.query("PRAGMA index_list(hai_reach_send_log)");
-        if (!indexes.success)
-          return indexes;
-        for (const index of indexes.data) {
-          if (!index.unique || !/^\w+$/.test(index.name))
-            continue;
-          const fields = await sql.query(`PRAGMA index_info(${index.name})`);
-          if (!fields.success)
-            return fields;
-          if (fields.data.length === 1 && fields.data[0]?.name === "queue_id")
-            return ok(false);
+    {
+      version: 3,
+      name: "credential-payload-retirement",
+      async needed(sql) {
+        const found = await db.schemaColumns("hai_reach_send_log", sql);
+        if (!found.success || !found.data.length) {
+          return found.success ? ok(false) : found;
         }
-        return ok(true);
+        const ledger = await db.schemaColumns("hai_schema_migrations", sql);
+        if (!ledger.success)
+          return ledger;
+        const version = ledger.data.length ? await sql.get("SELECT version FROM hai_schema_migrations WHERE module=?", ["reach"]) : ok(null);
+        if (!version.success)
+          return version;
+        if (Number(version.data?.version ?? 0) >= 3)
+          return ok(false);
+        const row = await sql.get("SELECT id FROM hai_reach_send_log WHERE subject IS NOT NULL OR body IS NOT NULL OR template IS NOT NULL OR vars_json IS NOT NULL OR extra_json IS NOT NULL LIMIT 1");
+        return row.success ? ok(Boolean(row.data)) : row;
+      },
+      async apply(sql) {
+        return sql.execute("UPDATE hai_reach_send_log SET body=NULL,subject=NULL,vars_json=NULL,extra_json=NULL,template=NULL,status=CASE WHEN status IN ('pending','processing') THEN 'discarded' WHEN status='sending' THEN 'unknown' ELSE status END,processing_owner=NULL,locked_until=NULL WHERE subject IS NOT NULL OR body IS NOT NULL OR template IS NOT NULL OR vars_json IS NOT NULL OR extra_json IS NOT NULL");
       }
-      const found = db.config?.type === "mysql" ? await sql.get("SELECT index_name FROM information_schema.statistics WHERE table_schema=DATABASE() AND table_name=? AND non_unique=0 GROUP BY index_name HAVING COUNT(*)=1 AND MAX(column_name)=?", ["hai_reach_send_log", "queue_id"]) : await sql.get("SELECT i.indexrelid FROM pg_index i JOIN pg_class t ON t.oid=i.indrelid JOIN pg_namespace n ON n.oid=t.relnamespace JOIN pg_attribute a ON a.attrelid=t.oid AND a.attnum=ANY(i.indkey) WHERE t.relname=? AND n.nspname=current_schema() AND i.indisunique AND i.indnatts=1 AND a.attname=?", ["hai_reach_send_log", "queue_id"]);
-      return found.success ? ok(!found.data) : found;
     },
-    async apply(sql) {
-      return sql.execute("CREATE UNIQUE INDEX uq_hai_reach_queue_v1 ON hai_reach_send_log(queue_id)");
+    {
+      version: 4,
+      name: "unique-operation-receipts",
+      async needed(sql) {
+        const columns = await db.schemaColumns("hai_reach_send_log", sql);
+        if (!columns.success || !columns.data.length) {
+          return columns.success ? ok(false) : columns;
+        }
+        if (!columns.data.includes("queue_id"))
+          return ok(true);
+        if (db.config?.type === "sqlite") {
+          const indexes = await sql.query("PRAGMA index_list(hai_reach_send_log)");
+          if (!indexes.success)
+            return indexes;
+          for (const index of indexes.data) {
+            if (!index.unique || !/^\w+$/.test(index.name))
+              continue;
+            const fields = await sql.query(`PRAGMA index_info(${index.name})`);
+            if (!fields.success)
+              return fields;
+            if (fields.data.length === 1 && fields.data[0]?.name === "queue_id")
+              return ok(false);
+          }
+          return ok(true);
+        }
+        const found = db.config?.type === "mysql" ? await sql.get("SELECT index_name FROM information_schema.statistics WHERE table_schema=DATABASE() AND table_name=? AND non_unique=0 GROUP BY index_name HAVING COUNT(*)=1 AND MAX(column_name)=?", ["hai_reach_send_log", "queue_id"]) : await sql.get("SELECT i.indexrelid FROM pg_index i JOIN pg_class t ON t.oid=i.indrelid JOIN pg_namespace n ON n.oid=t.relnamespace JOIN pg_attribute a ON a.attrelid=t.oid AND a.attnum=ANY(i.indkey) WHERE t.relname=? AND n.nspname=current_schema() AND i.indisunique AND i.indnatts=1 AND a.attname=?", ["hai_reach_send_log", "queue_id"]);
+        return found.success ? ok(!found.data) : found;
+      },
+      async apply(sql) {
+        return sql.execute("CREATE UNIQUE INDEX uq_hai_reach_queue_v1 ON hai_reach_send_log(queue_id)");
+      }
     }
-  }];
-  return migrateSchema(db, "reach", steps, options);
+  ];
+  return db.migrateSchema("reach", steps, options);
 }
 
 // src/repositories/reach-repository-send-log.ts
@@ -1395,25 +1476,47 @@ function claimableWhere(clock) {
   return `(attempt_count < max_attempts AND ((status = ? AND next_attempt_at <= ?) OR (status = ? AND updated_at < ? AND (locked_until IS NULL OR locked_until <= ${clock})) OR (status = ? AND updated_at < ? AND retry_safe = TRUE AND locked_until <= ${clock})))`;
 }
 function claimableParams(eligibleBefore) {
-  return ["pending", eligibleBefore, "processing", eligibleBefore, "sending", eligibleBefore];
+  return [
+    "pending",
+    eligibleBefore,
+    "processing",
+    eligibleBefore,
+    "sending",
+    eligibleBefore
+  ];
 }
 function buildSendLogError(detail, cause) {
   return err(
     HaiReachError.SEND_FAILED,
-    reachM("reach_sendFailed", { params: { error: detail } }),
+    reachM("reach_sendFailed", {
+      params: { error: detail }
+    }),
     cause
   );
 }
 function normalizeSendLog(row) {
   const normalized = { ...row };
-  for (const field of ["id", "createdAt", "updatedAt", "lockedUntil", "nextAttemptAt", "attemptCount", "maxAttempts", "retryDelayMs", "maxRetryDelayMs"]) {
+  for (const field of [
+    "id",
+    "createdAt",
+    "updatedAt",
+    "lockedUntil",
+    "nextAttemptAt",
+    "attemptCount",
+    "maxAttempts",
+    "retryDelayMs",
+    "maxRetryDelayMs"
+  ]) {
     const value = row[field];
     if (value === void 0 && (field === "updatedAt" || field === "lockedUntil"))
       continue;
     const validType = typeof value === "number" || typeof value === "bigint" || typeof value === "string" && /^\d+$/.test(value);
     const integer = validType ? Number(value) : Number.NaN;
-    if (!Number.isSafeInteger(integer) || integer < 0)
-      return buildSendLogError(reachM("reach_invalidStoredInteger", { params: { field } }));
+    if (!Number.isSafeInteger(integer) || integer < 0) {
+      return buildSendLogError(reachM("reach_invalidStoredInteger", {
+        params: { field }
+      }));
+    }
     Object.assign(normalized, { [field]: integer });
   }
   return ok(normalized);
@@ -1597,7 +1700,9 @@ async function createSendLogRepository(db) {
   if (!initResult.success) {
     return err(
       HaiReachError.SEND_FAILED,
-      reachM("reach_sendFailed", { params: { error: initResult.error.message } }),
+      reachM("reach_sendFailed", {
+        params: { error: initResult.error.message }
+      }),
       initResult.error
     );
   }
@@ -1621,7 +1726,12 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
   async settleSensitive(queueId, status, messageId) {
     const settled = await this.sql().execute(
       `UPDATE ${TABLE_NAME} SET status = ?, message_id = ?, locked_until = NULL, updated_at = ? WHERE queue_id = ? AND status = 'sending' AND body IS NULL AND vars_json IS NULL AND retry_safe = FALSE`,
-      [status, messageId ?? null, Date.now(), queueId]
+      [
+        status,
+        messageId ?? null,
+        Date.now(),
+        queueId
+      ]
     );
     if (!settled.success)
       return settled;
@@ -1663,7 +1773,11 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
   }
   /** 获取所有待发送记录 */
   async findPending(tx) {
-    const result = await this.findAll({ where: "status = ?", params: ["pending"], orderBy: "created_at ASC" }, tx);
+    const result = await this.findAll({
+      where: "status = ?",
+      params: ["pending"],
+      orderBy: "created_at ASC"
+    }, tx);
     if (!result.success) {
       return result;
     }
@@ -1685,7 +1799,10 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
        ORDER BY created_at ASC
        LIMIT ?
        FOR UPDATE SKIP LOCKED`,
-      [...claimableParams(eligibleBefore), limit]
+      [
+        ...claimableParams(eligibleBefore),
+        limit
+      ]
     );
     if (!lockedRowsResult.success) {
       throw lockedRowsResult.error;
@@ -1705,7 +1822,12 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
       `UPDATE ${TABLE_NAME}
        SET status = ?, processing_owner = ?, locked_until = ${clock} + ?, updated_at = ${clock}, attempt_count = attempt_count + 1
        WHERE id IN (${placeholders})`,
-      ["processing", owner, lockMs, ...claimedIds]
+      [
+        "processing",
+        owner,
+        lockMs,
+        ...claimedIds
+      ]
     );
     if (!updateResult.success) {
       throw updateResult.error;
@@ -1735,7 +1857,13 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
         `UPDATE ${TABLE_NAME}
          SET status = ?, processing_owner = ?, locked_until = ${clock} + ?, updated_at = ${clock}, attempt_count = attempt_count + 1
          WHERE id = ? AND ${claimableWhere(clock)}`,
-        ["processing", owner, lockMs, row.id, ...claimableParams(eligibleBefore)]
+        [
+          "processing",
+          owner,
+          lockMs,
+          row.id,
+          ...claimableParams(eligibleBefore)
+        ]
       );
       if (!updateResult.success) {
         throw updateResult.error;
@@ -1789,7 +1917,13 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
          WHERE attempt_count >= max_attempts
            AND (status = ? OR (status = ? AND (locked_until IS NULL OR locked_until <= ${clock}))
              OR (status = ? AND retry_safe = TRUE AND locked_until <= ${clock}))`,
-        ["dead", "attempts_exhausted", "pending", "processing", "sending"]
+        [
+          "dead",
+          "attempts_exhausted",
+          "pending",
+          "processing",
+          "sending"
+        ]
       );
       if (!exhausted.success)
         throw exhausted.error;
@@ -1829,7 +1963,16 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
        SET status = ?, last_failure = ?, next_attempt_at = ${dead ? "0" : `${clock} + ?`}, processing_owner = NULL, locked_until = NULL, updated_at = ${clock}
        WHERE id = ? AND processing_owner = ? AND locked_until > ${clock} AND attempt_count = ?
          AND (status = ? OR (status = ? AND retry_safe = TRUE))`,
-      [dead ? "dead" : "pending", reason, ...dead ? [] : [delay], row.id, owner, row.attemptCount, "processing", "sending"]
+      [
+        dead ? "dead" : "pending",
+        reason,
+        ...dead ? [] : [delay],
+        row.id,
+        owner,
+        row.attemptCount,
+        "processing",
+        "sending"
+      ]
     );
     if (!result.success) {
       return buildSendLogError(result.error.message, result.error);
@@ -1845,7 +1988,12 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
     const result = await this.sql().execute(
       `UPDATE ${TABLE_NAME} SET status = ?, attempt_count = 0, next_attempt_at = ${clock}, last_failure = NULL, updated_at = CASE WHEN updated_at >= ${clock} THEN updated_at + 1 ELSE ${clock} END
        WHERE queue_id = ? AND status = ? AND updated_at = ?`,
-      ["pending", queueId, "dead", expectedUpdatedAt]
+      [
+        "pending",
+        queueId,
+        "dead",
+        expectedUpdatedAt
+      ]
     );
     return result.success && result.data.changes === 1 ? ok(void 0) : buildSendLogError(reachM("reach_deadRequeueFailed"));
   }
@@ -1856,7 +2004,14 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
     const result = await this.sql().execute(
       `UPDATE ${TABLE_NAME} SET status = ?, retry_safe = ?, locked_until = ${clock} + ?, updated_at = ${clock}
        WHERE id = ? AND status = ? AND processing_owner = ? AND locked_until > ${clock}`,
-      ["sending", flag, lockMs, id, "processing", owner]
+      [
+        "sending",
+        flag,
+        lockMs,
+        id,
+        "processing",
+        owner
+      ]
     );
     return result.success && result.data.changes === 1 ? ok(void 0) : buildSendLogError(reachM("reach_claimLost"));
   }
@@ -1866,7 +2021,13 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
     const result = await this.sql().execute(
       `UPDATE ${TABLE_NAME} SET locked_until = ${clock} + ?, updated_at = ${clock}
        WHERE id = ? AND processing_owner = ? AND status IN (?, ?) AND locked_until > ${clock}`,
-      [lockMs, id, owner, "processing", "sending"]
+      [
+        lockMs,
+        id,
+        owner,
+        "processing",
+        "sending"
+      ]
     );
     return result.success && result.data.changes === 1 ? ok(void 0) : buildSendLogError(reachM("reach_claimLost"));
   }
@@ -1875,7 +2036,13 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
     const result = await this.sql().execute(
       `UPDATE ${TABLE_NAME} SET status = ?, processing_owner = NULL, locked_until = NULL, next_attempt_at = 0, updated_at = ${this.clockSql()}
        WHERE id = ? AND processing_owner = ? AND status IN (?, ?)`,
-      ["unknown", id, owner, "processing", "sending"]
+      [
+        "unknown",
+        id,
+        owner,
+        "processing",
+        "sending"
+      ]
     );
     return result.success && result.data.changes === 1 ? ok(void 0) : buildSendLogError(reachM("reach_claimLost"));
   }
@@ -1883,7 +2050,12 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
   async resolveUnknown(queueId, resolution) {
     const result = await this.sql().execute(
       `UPDATE ${TABLE_NAME} SET status = ?, message_id = ?, next_attempt_at = 0, updated_at = ${this.clockSql()} WHERE queue_id = ? AND status = ?`,
-      [resolution.status, resolution.messageId ?? null, queueId, "unknown"]
+      [
+        resolution.status,
+        resolution.messageId ?? null,
+        queueId,
+        "unknown"
+      ]
     );
     return result.success && result.data.changes === 1 ? ok(void 0) : buildSendLogError(reachM("reach_unknownResolutionFailed"));
   }
@@ -1894,7 +2066,13 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
       `UPDATE ${TABLE_NAME}
        SET status = ?, message_id = ?, processing_owner = NULL, locked_until = NULL, next_attempt_at = 0, updated_at = ${clock}
        WHERE id = ? AND status = ? AND processing_owner = ? AND locked_until > ${clock}`,
-      ["sent", messageId ?? null, id, "sending", owner]
+      [
+        "sent",
+        messageId ?? null,
+        id,
+        "sending",
+        owner
+      ]
     );
     if (!result.success) {
       return buildSendLogError(result.error.message, result.error);
@@ -1978,7 +2156,9 @@ async function createTemplateRepository(db) {
   if (!initResult.success) {
     return err(
       HaiReachError.SEND_FAILED,
-      reachM("reach_templateDbInitFailed", { params: { error: initResult.error.message } }),
+      reachM("reach_templateDbInitFailed", {
+        params: { error: initResult.error.message }
+      }),
       initResult.error
     );
   }
@@ -2006,7 +2186,11 @@ var DbTemplateRepository = class extends BaseReldbCrudRepository {
   }
   /** 按名称查找模板 */
   async findByName(name, tx) {
-    const result = await this.findAll({ where: "name = ?", params: [name], limit: 1 }, tx);
+    const result = await this.findAll({
+      where: "name = ?",
+      params: [name],
+      limit: 1
+    }, tx);
     if (!result.success) {
       return result;
     }
@@ -2083,7 +2267,6 @@ var currentConfig = null;
 var dndConfig;
 var templateRegistry = createTemplateRegistry();
 var sendLogRepo = null;
-var templateRepo = null;
 var initInProgress = false;
 var initCompletion = null;
 var closeInProgress = null;
@@ -2115,7 +2298,9 @@ async function tryInitSendLogRepo() {
     }
     return result.data;
   } catch (error) {
-    logger7.debug("Send log repository not initialized", { error: error instanceof Error ? error.message : String(error) });
+    logger7.debug("Send log repository not initialized", {
+      error: error instanceof Error ? error.message : String(error)
+    });
     return null;
   }
 }
@@ -2132,7 +2317,9 @@ async function tryInitTemplateRepo() {
     }
     return result.data;
   } catch (error) {
-    logger7.debug("Template repository not initialized", { error: error instanceof Error ? error.message : String(error) });
+    logger7.debug("Template repository not initialized", {
+      error: error instanceof Error ? error.message : String(error)
+    });
     return null;
   }
 }
@@ -2158,7 +2345,6 @@ async function doClose() {
   dndConfig = void 0;
   templateRegistry = createTemplateRegistry();
   sendLogRepo = null;
-  templateRepo = null;
   resetSendLogRepoSingleton();
   resetTemplateRepoSingleton();
   resetSendState();
@@ -2175,7 +2361,9 @@ async function doInit(config, options) {
     logger7.error("Reach config validation failed", { error: parseResult.error.message });
     return err(
       HaiReachError.CONFIG_ERROR,
-      reachM("reach_configError", { params: { error: parseResult.error.message } }),
+      reachM("reach_configError", {
+        params: { error: parseResult.error.message }
+      }),
       parseResult.error
     );
   }
@@ -2187,6 +2375,10 @@ async function doInit(config, options) {
   }
   if (core.module.requiresSharedState(process.env) && parsed.providers.some((provider) => provider.type === "console"))
     return err(HaiReachError.CONFIG_ERROR, reachM("reach_productionProviderRequired"));
+  if (parsed.templates?.length && !reldb.isInitialized)
+    return err(HaiReachError.CONFIG_ERROR, reachM("reach_templatePersistenceRequired"));
+  const newProviders = /* @__PURE__ */ new Map();
+  let published = false;
   try {
     let requiredQueue = null;
     if (parsed.dnd?.enabled && parsed.dnd.strategy === "delay") {
@@ -2197,9 +2389,9 @@ async function doInit(config, options) {
         return err(HaiReachError.CONFIG_ERROR, reachM("reach_dndPersistenceRequired"), queue.error);
       requiredQueue = queue.data;
     }
-    const newProviders = /* @__PURE__ */ new Map();
     for (const providerConfig of parsed.providers) {
       const provider = createProvider(providerConfig, gatewayHooks.get(providerConfig.name));
+      newProviders.set(providerConfig.name, provider);
       const connectResult = await provider.connect(providerConfig);
       if (!connectResult.success) {
         logger7.error("Provider initialization failed", {
@@ -2208,30 +2400,27 @@ async function doInit(config, options) {
           code: connectResult.error.code,
           message: connectResult.error.message
         });
-        logger7.info("Rolling back connected providers", { count: newProviders.size });
-        for (const [name, p] of newProviders.entries()) {
-          try {
-            await p.close();
-          } catch (rollbackError) {
-            logger7.error("Provider rollback close failed", { name, error: rollbackError });
-          }
-        }
         return connectResult;
       }
-      newProviders.set(providerConfig.name, provider);
     }
-    providers = newProviders;
-    currentConfig = parsed;
-    dndConfig = parsed.dnd;
-    templateRepo = await tryInitTemplateRepo();
-    templateRegistry = createTemplateRegistry(templateRepo);
-    if (parsed.templates && templateRepo) {
-      const saveResult = await templateRegistry.saveBatch(parsed.templates);
+    const candidateTemplateRepo = await tryInitTemplateRepo();
+    if (parsed.templates?.length && !candidateTemplateRepo)
+      return err(HaiReachError.CONFIG_ERROR, reachM("reach_templatePersistenceRequired"));
+    const candidateRegistry = createTemplateRegistry(candidateTemplateRepo);
+    if (parsed.templates?.length) {
+      const saveResult = await candidateRegistry.saveBatch(parsed.templates);
       if (!saveResult.success) {
-        logger7.warn("Failed to save config templates to database", { error: saveResult.error.message });
+        logger7.warn("Failed to save config templates to database", { errorCode: saveResult.error.code });
+        return err(HaiReachError.CONFIG_ERROR, reachM("reach_templatePersistenceRequired"), saveResult.error);
       }
     }
-    sendLogRepo = requiredQueue ?? await tryInitSendLogRepo();
+    const candidateSendLogRepo = requiredQueue ?? await tryInitSendLogRepo();
+    providers = newProviders;
+    currentConfig = parsed;
+    dndConfig = parsed.dnd;
+    templateRegistry = candidateRegistry;
+    sendLogRepo = candidateSendLogRepo;
+    published = true;
     if (dndConfig) {
       startDndScheduler(dndConfig, providers, sendLogRepo);
     }
@@ -2243,10 +2432,22 @@ async function doInit(config, options) {
     return err(
       HaiReachError.CONFIG_ERROR,
       reachM("reach_initFailed", {
-        params: { error: error instanceof Error ? error.message : String(error) }
+        params: {
+          error: error instanceof Error ? error.message : String(error)
+        }
       }),
       error
     );
+  } finally {
+    if (!published) {
+      for (const [name, provider] of newProviders) {
+        try {
+          await provider.close();
+        } catch {
+          logger7.error("Candidate provider cleanup failed", { name });
+        }
+      }
+    }
   }
 }
 function queueEntry(row) {
@@ -2271,7 +2472,11 @@ var reach = {
         return err(HaiReachError.CONFIG_ERROR, reachM("reach_dndPersistenceRequired"));
       if (!ReachQueueIdSchema.safeParse(queueId).success)
         return err(HaiReachError.CONFIG_ERROR, reachM("reach_queueInputInvalid"));
-      const rows = await sendLogRepo.findAll({ where: "queue_id = ?", params: [queueId], limit: 1 });
+      const rows = await sendLogRepo.findAll({
+        where: "queue_id = ?",
+        params: [queueId],
+        limit: 1
+      });
       if (!rows.success)
         return rows;
       const row = rows.data[0];
@@ -2320,7 +2525,9 @@ var reach = {
       logger7.warn("Reach module init already in progress, skipping");
       return err(
         HaiReachError.CONFIG_ERROR,
-        reachM("reach_configError", { params: { error: "init already in progress" } })
+        reachM("reach_configError", {
+          params: { error: "init already in progress" }
+        })
       );
     }
     initInProgress = true;
@@ -2346,10 +2553,19 @@ var reach = {
     if (!currentConfig)
       return null;
     const safeProviders = currentConfig.providers.map((provider) => {
+      if (provider.type === "api" && provider.headers) {
+        return {
+          ...provider,
+          headers: Object.fromEntries(Object.keys(provider.headers).map((name) => [name, core.sanitize.defaultSensitiveReplacement]))
+        };
+      }
       if (provider.type !== "aliyun-sms" || !provider.gateway)
         return provider;
       const { url, allowInsecureHttp } = provider.gateway;
-      return { ...provider, gateway: { url, allowInsecureHttp } };
+      return {
+        ...provider,
+        gateway: { url, allowInsecureHttp }
+      };
     });
     return core.sanitize.sanitizeSensitiveFields({ ...currentConfig, providers: safeProviders });
   },