@ingram-tech/newsletter 0.1.0

package/README.md

@@ -0,0 +1,72 @@
+# @ingram-tech/newsletter
+
+Supabase-backed newsletter subscriptions and sending, with idempotent
+subscribe/resubscribe, token-based unsubscribe, and RFC 8058 one-click
+unsubscribe. Ported from fabrile's battle-tested implementation; sends via
+[`@ingram-tech/email`](../email).
+
+This package **owns its tables** and ships the migrations; you inject a Supabase
+client and a base URL. It defines its own row types (it does not import your
+generated `Database`), so it drops into any Supabase project.
+
+## Install
+
+```bash
+bun add @ingram-tech/newsletter @supabase/supabase-js
+```
+
+## 1. Apply the schema
+
+Copy the migrations into your `supabase/migrations` (they live in the package):
+
+```bash
+cp node_modules/@ingram-tech/newsletter/migrations/0001_newsletters.sql \
+   supabase/migrations/$(date +%Y%m%d%H%M%S)_newsletters.sql
+```
+
+`0001_newsletters.sql` creates `newsletters` + `newsletter_subscriptions` (UUID
+keys, RLS, indexes). Apply `0002_newsletters_auth_link.sql` **only** if your site
+has user signups and you want pre-signup subscriptions back-linked to users.
+
+Then seed a newsletter row (slug, name, from_name, from_local_part).
+
+## 2. Use it
+
+```ts
+import { createNewsletter } from "@ingram-tech/newsletter";
+import { createClient } from "@supabase/supabase-js";
+
+const newsletter = createNewsletter({
+	supabase: createClient(url, serviceRoleKey), // service-role: writes bypass RLS
+	baseUrl: "https://example.com",
+});
+
+// Subscribe (idempotent) — e.g. in POST /api/newsletter/subscribe
+await newsletter.subscribe({ newsletterSlug: "product-updates", email });
+
+// Unsubscribe — e.g. in your /api/newsletter/unsubscribe route
+await newsletter.unsubscribe(token);
+
+// Send to all active subscribers (per-recipient one-click unsubscribe)
+const result = await newsletter.send({
+	newsletterSlug: "product-updates",
+	subject: "What's new",
+	content: "First line.\n\nSecond paragraph.",
+	cta: { label: "Read more", href: "https://example.com/post" },
+	// onlyTo: ["you@example.com"], // for a test send
+});
+```
+
+Requires `@ingram-tech/email`'s env (`CLOUDFLARE_*`, `EMAIL_FROM_DOMAIN`). The
+sending address is `<from_local_part>@<EMAIL_FROM_DOMAIN>`.
+
+## Rendering
+
+The built-in renderer produces a clean, dependency-free HTML + text email.
+Override it with `createNewsletter({ render })` to use your own template
+(e.g. React Email).
+
+## Not included (by design)
+
+Open/click tracking and "view in browser" are a separate concern (a future
+`email-tracking` package) — this package focuses on subscriptions + delivery.

package/dist/client.d.ts

@@ -0,0 +1,58 @@
+import type { SupabaseClient } from "@supabase/supabase-js";
+import { type NewsletterRenderInput } from "./render";
+import type { Newsletter, Subscription } from "./types";
+export interface NewsletterConfig {
+    /** A Supabase client with service-role access (writes bypass RLS). */
+    supabase: SupabaseClient;
+    /** Absolute base URL for the unsubscribe link, e.g. "https://example.com". */
+    baseUrl: string;
+    /** Unsubscribe route path. Default "/api/newsletter/unsubscribe". */
+    unsubscribePath?: string;
+    /** Override the built-in HTML/text rendering. */
+    render?: (input: NewsletterRenderInput) => {
+        html: string;
+        text: string;
+    };
+}
+export interface SubscribeOptions {
+    newsletterSlug: string;
+    email: string;
+    source?: string;
+    userId?: string;
+}
+export interface SendOptions {
+    newsletterSlug: string;
+    subject: string;
+    /** Plain-text body; blank lines split paragraphs in the default renderer. */
+    content: string;
+    previewText?: string;
+    cta?: {
+        label: string;
+        href: string;
+    };
+    /** If set, only send to these addresses (case-insensitive). For test sends. */
+    onlyTo?: string[];
+}
+export interface SendResult {
+    newsletter: Newsletter;
+    totalRecipients: number;
+    sentCount: number;
+    failedCount: number;
+    failures: {
+        email: string;
+        error: string;
+    }[];
+}
+/**
+ * Build a newsletter client bound to a Supabase project. The package owns its
+ * tables (see migrations/) and defines its own row types; you inject the client
+ * and base URL. Ported from the battle-tested fabrile implementation.
+ */
+export declare const createNewsletter: (config: NewsletterConfig) => {
+    getBySlug: (slug: string) => Promise<Newsletter | null>;
+    subscribe: (options: SubscribeOptions) => Promise<Subscription>;
+    unsubscribe: (token: string) => Promise<boolean>;
+    listActiveSubscribers: (newsletterSlug: string) => Promise<Subscription[]>;
+    send: (options: SendOptions) => Promise<SendResult>;
+};
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAGN,KAAK,qBAAqB,EAG1B,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAExD,MAAM,WAAW,gBAAgB;IAChC,sEAAsE;IACtE,QAAQ,EAAE,cAAc,CAAC;IACzB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iDAAiD;IACjD,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1E;AAED,MAAM,WAAW,gBAAgB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC7C;AAED;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAAI,QAAQ,gBAAgB;sBAczB,MAAM,KAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;yBAchC,gBAAgB,KAAG,OAAO,CAAC,YAAY,CAAC;yBAmDxC,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;4CAsB1C,MAAM,KACpB,OAAO,CAAC,YAAY,EAAE,CAAC;oBAkBG,WAAW,KAAG,OAAO,CAAC,UAAU,CAAC;CAwD9D,CAAC"}

package/dist/client.js

@@ -0,0 +1,177 @@
+import { fromAddress, sendEmail } from "@ingram-tech/email";
+import { buildListUnsubscribeHeaders, derivePreviewText, renderNewsletterHtml, renderNewsletterText, } from "./render";
+/**
+ * Build a newsletter client bound to a Supabase project. The package owns its
+ * tables (see migrations/) and defines its own row types; you inject the client
+ * and base URL. Ported from the battle-tested fabrile implementation.
+ */
+export const createNewsletter = (config) => {
+    const { supabase, baseUrl } = config;
+    const unsubscribePath = config.unsubscribePath ?? "/api/newsletter/unsubscribe";
+    const normalize = (email) => email.trim().toLowerCase();
+    const unsubscribeUrl = (token) => `${baseUrl}${unsubscribePath}?token=${encodeURIComponent(token)}`;
+    const renderFn = config.render ??
+        ((input) => ({
+            html: renderNewsletterHtml(input),
+            text: renderNewsletterText(input),
+        }));
+    const getBySlug = async (slug) => {
+        const { data, error } = await supabase
+            .from("newsletters")
+            .select("*")
+            .eq("slug", slug)
+            .maybeSingle();
+        if (error)
+            throw new Error(`Failed to load newsletter: ${error.message}`);
+        return data ?? null;
+    };
+    /**
+     * Idempotent subscribe: new email → insert; active sub → noop; previously
+     * unsubscribed → resurrect (clear unsubscribed_at).
+     */
+    const subscribe = async (options) => {
+        const email = normalize(options.email);
+        const newsletter = await getBySlug(options.newsletterSlug);
+        if (!newsletter) {
+            throw new Error(`Unknown newsletter: ${options.newsletterSlug}`);
+        }
+        if (!newsletter.is_active) {
+            throw new Error(`Newsletter is not active: ${options.newsletterSlug}`);
+        }
+        const { data: existingData } = await supabase
+            .from("newsletter_subscriptions")
+            .select("*")
+            .eq("newsletter_id", newsletter.id)
+            .eq("email", email)
+            .maybeSingle();
+        const existing = existingData;
+        if (existing) {
+            if (!existing.unsubscribed_at && (!options.userId || existing.user_id)) {
+                return existing;
+            }
+            const { data: updated, error } = await supabase
+                .from("newsletter_subscriptions")
+                .update({
+                unsubscribed_at: null,
+                source: options.source ?? existing.source,
+                user_id: existing.user_id ?? options.userId ?? null,
+            })
+                .eq("id", existing.id)
+                .select()
+                .single();
+            if (error)
+                throw new Error(`Failed to resubscribe: ${error.message}`);
+            return updated;
+        }
+        const { data: inserted, error } = await supabase
+            .from("newsletter_subscriptions")
+            .insert({
+            newsletter_id: newsletter.id,
+            email,
+            source: options.source ?? null,
+            user_id: options.userId ?? null,
+        })
+            .select()
+            .single();
+        if (error)
+            throw new Error(`Failed to subscribe: ${error.message}`);
+        return inserted;
+    };
+    /** Unsubscribe by token. Idempotent; returns false only for unknown tokens. */
+    const unsubscribe = async (token) => {
+        const { data, error } = await supabase
+            .from("newsletter_subscriptions")
+            .select("id, unsubscribed_at")
+            .eq("unsubscribe_token", token)
+            .maybeSingle();
+        if (error)
+            throw new Error(`Failed to look up token: ${error.message}`);
+        const row = data;
+        if (!row)
+            return false;
+        if (row.unsubscribed_at)
+            return true;
+        const { error: updateError } = await supabase
+            .from("newsletter_subscriptions")
+            .update({ unsubscribed_at: new Date().toISOString() })
+            .eq("id", row.id);
+        if (updateError) {
+            throw new Error(`Failed to unsubscribe: ${updateError.message}`);
+        }
+        return true;
+    };
+    const listActiveSubscribers = async (newsletterSlug) => {
+        const newsletter = await getBySlug(newsletterSlug);
+        if (!newsletter)
+            throw new Error(`Unknown newsletter: ${newsletterSlug}`);
+        const { data, error } = await supabase
+            .from("newsletter_subscriptions")
+            .select("*")
+            .eq("newsletter_id", newsletter.id)
+            .is("unsubscribed_at", null)
+            .order("subscribed_at", { ascending: true });
+        if (error)
+            throw new Error(`Failed to list subscribers: ${error.message}`);
+        return data ?? [];
+    };
+    /**
+     * Send to all active subscribers (or just `onlyTo`). Each recipient gets a
+     * per-row List-Unsubscribe header. Failures are caught per-recipient so one
+     * bad address doesn't poison the batch.
+     */
+    const send = async (options) => {
+        const newsletter = await getBySlug(options.newsletterSlug);
+        if (!newsletter) {
+            throw new Error(`Unknown newsletter: ${options.newsletterSlug}`);
+        }
+        const subscribers = await listActiveSubscribers(options.newsletterSlug);
+        const targets = options.onlyTo
+            ? (() => {
+                const allowed = new Set(options.onlyTo.map(normalize));
+                return subscribers.filter((s) => allowed.has(s.email));
+            })()
+            : subscribers;
+        const fromAddr = fromAddress(newsletter.from_name, newsletter.from_local_part);
+        const previewText = options.previewText ?? derivePreviewText(options.content);
+        const result = {
+            newsletter,
+            totalRecipients: targets.length,
+            sentCount: 0,
+            failedCount: 0,
+            failures: [],
+        };
+        for (const sub of targets) {
+            const unsubUrl = unsubscribeUrl(sub.unsubscribe_token);
+            try {
+                const { html, text } = renderFn({
+                    newsletterName: newsletter.name,
+                    subject: options.subject,
+                    content: options.content,
+                    cta: options.cta,
+                    unsubscribeUrl: unsubUrl,
+                    previewText,
+                });
+                await sendEmail({
+                    to: sub.email,
+                    from: fromAddr,
+                    replyTo: newsletter.reply_to ?? undefined,
+                    subject: options.subject,
+                    html,
+                    text,
+                    headers: buildListUnsubscribeHeaders(unsubUrl, fromAddr),
+                });
+                result.sentCount += 1;
+            }
+            catch (err) {
+                result.failedCount += 1;
+                result.failures.push({
+                    email: sub.email,
+                    error: err instanceof Error ? err.message : String(err),
+                });
+            }
+        }
+        return result;
+    };
+    return { getBySlug, subscribe, unsubscribe, listActiveSubscribers, send };
+};
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,EACN,2BAA2B,EAC3B,iBAAiB,EAEjB,oBAAoB,EACpB,oBAAoB,GACpB,MAAM,UAAU,CAAC;AAwClB;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAwB,EAAE,EAAE;IAC5D,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IACrC,MAAM,eAAe,GACpB,MAAM,CAAC,eAAe,IAAI,6BAA6B,CAAC;IACzD,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChE,MAAM,cAAc,GAAG,CAAC,KAAa,EAAE,EAAE,CACxC,GAAG,OAAO,GAAG,eAAe,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;IACnE,MAAM,QAAQ,GACb,MAAM,CAAC,MAAM;QACb,CAAC,CAAC,KAA4B,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,EAAE,oBAAoB,CAAC,KAAK,CAAC;YACjC,IAAI,EAAE,oBAAoB,CAAC,KAAK,CAAC;SACjC,CAAC,CAAC,CAAC;IAEL,MAAM,SAAS,GAAG,KAAK,EAAE,IAAY,EAA8B,EAAE;QACpE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ;aACpC,IAAI,CAAC,aAAa,CAAC;aACnB,MAAM,CAAC,GAAG,CAAC;aACX,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC;aAChB,WAAW,EAAE,CAAC;QAChB,IAAI,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,OAAQ,IAA0B,IAAI,IAAI,CAAC;IAC5C,CAAC,CAAC;IAEF;;;OAGG;IACH,MAAM,SAAS,GAAG,KAAK,EAAE,OAAyB,EAAyB,EAAE;QAC5E,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,QAAQ;aAC3C,IAAI,CAAC,0BAA0B,CAAC;aAChC,MAAM,CAAC,GAAG,CAAC;aACX,EAAE,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,CAAC;aAClC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC;aAClB,WAAW,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,YAAmC,CAAC;QAErD,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxE,OAAO,QAAQ,CAAC;YACjB,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ;iBAC7C,IAAI,CAAC,0BAA0B,CAAC;iBAChC,MAAM,CAAC;gBACP,eAAe,EAAE,IAAI;gBACrB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM;gBACzC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI;aACnD,CAAC;iBACD,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;iBACrB,MAAM,EAAE;iBACR,MAAM,EAAE,CAAC;YACX,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACtE,OAAO,OAAuB,CAAC;QAChC,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ;aAC9C,IAAI,CAAC,0BAA0B,CAAC;aAChC,MAAM,CAAC;YACP,aAAa,EAAE,UAAU,CAAC,EAAE;YAC5B,KAAK;YACL,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;YAC9B,OAAO,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;SAC/B,CAAC;aACD,MAAM,EAAE;aACR,MAAM,EAAE,CAAC;QACX,IAAI,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,OAAO,QAAwB,CAAC;IACjC,CAAC,CAAC;IAEF,+EAA+E;IAC/E,MAAM,WAAW,GAAG,KAAK,EAAE,KAAa,EAAoB,EAAE;QAC7D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ;aACpC,IAAI,CAAC,0BAA0B,CAAC;aAChC,MAAM,CAAC,qBAAqB,CAAC;aAC7B,EAAE,CAAC,mBAAmB,EAAE,KAAK,CAAC;aAC9B,WAAW,EAAE,CAAC;QAChB,IAAI,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,IAA2D,CAAC;QACxE,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,IAAI,GAAG,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAErC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,QAAQ;aAC3C,IAAI,CAAC,0BAA0B,CAAC;aAChC,MAAM,CAAC,EAAE,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;aACrD,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACnB,IAAI,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,qBAAqB,GAAG,KAAK,EAClC,cAAsB,EACI,EAAE;QAC5B,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,cAAc,EAAE,CAAC,CAAC;QAC1E,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ;aACpC,IAAI,CAAC,0BAA0B,CAAC;aAChC,MAAM,CAAC,GAAG,CAAC;aACX,EAAE,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,CAAC;aAClC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC;aAC3B,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,OAAQ,IAA8B,IAAI,EAAE,CAAC;IAC9C,CAAC,CAAC;IAEF;;;;OAIG;IACH,MAAM,IAAI,GAAG,KAAK,EAAE,OAAoB,EAAuB,EAAE;QAChE,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM;YAC7B,CAAC,CAAC,CAAC,GAAG,EAAE;gBACN,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;gBACvD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACxD,CAAC,CAAC,EAAE;YACL,CAAC,CAAC,WAAW,CAAC;QAEf,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAe;YAC1B,UAAU;YACV,eAAe,EAAE,OAAO,CAAC,MAAM;YAC/B,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,CAAC;YACd,QAAQ,EAAE,EAAE;SACZ,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YACvD,IAAI,CAAC;gBACJ,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;oBAC/B,cAAc,EAAE,UAAU,CAAC,IAAI;oBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,cAAc,EAAE,QAAQ;oBACxB,WAAW;iBACX,CAAC,CAAC;gBACH,MAAM,SAAS,CAAC;oBACf,EAAE,EAAE,GAAG,CAAC,KAAK;oBACb,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,UAAU,CAAC,QAAQ,IAAI,SAAS;oBACzC,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,IAAI;oBACJ,IAAI;oBACJ,OAAO,EAAE,2BAA2B,CAAC,QAAQ,EAAE,QAAQ,CAAC;iBACxD,CAAC,CAAC;gBACH,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;YACvB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;gBACxB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACpB,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACvD,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC,CAAC;IAEF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;AAC3E,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { createNewsletter, type NewsletterConfig, type SendOptions, type SendResult, type SubscribeOptions, } from "./client";
+export { buildListUnsubscribeHeaders, derivePreviewText, type NewsletterRenderInput, renderNewsletterHtml, renderNewsletterText, } from "./render";
+export type { Newsletter, Subscription } from "./types";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,gBAAgB,EAChB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,gBAAgB,GACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EACN,2BAA2B,EAC3B,iBAAiB,EACjB,KAAK,qBAAqB,EAC1B,oBAAoB,EACpB,oBAAoB,GACpB,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export { createNewsletter, } from "./client";
+export { buildListUnsubscribeHeaders, derivePreviewText, renderNewsletterHtml, renderNewsletterText, } from "./render";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,gBAAgB,GAKhB,MAAM,UAAU,CAAC;AAClB,OAAO,EACN,2BAA2B,EAC3B,iBAAiB,EAEjB,oBAAoB,EACpB,oBAAoB,GACpB,MAAM,UAAU,CAAC"}

package/dist/render.d.ts

@@ -0,0 +1,25 @@
+/** Inputs the default renderer (or a custom one) receives per send. */
+export interface NewsletterRenderInput {
+    newsletterName: string;
+    subject: string;
+    /** Plain-text body; blank lines split paragraphs. */
+    content: string;
+    cta?: {
+        label: string;
+        href: string;
+    } | null;
+    unsubscribeUrl: string;
+    /** Inbox-preview headline. */
+    previewText?: string;
+}
+/** Minimal, dependency-free HTML email. Override via `createNewsletter({ render })`. */
+export declare const renderNewsletterHtml: (input: NewsletterRenderInput) => string;
+export declare const renderNewsletterText: (input: NewsletterRenderInput) => string;
+/**
+ * RFC 8058 List-Unsubscribe headers for one-click unsubscribe in Gmail/Apple
+ * Mail. `fromAddr` may be "Name <local@domain>" or a bare address.
+ */
+export declare const buildListUnsubscribeHeaders: (unsubscribeUrl: string, fromAddr: string) => Record<string, string>;
+/** First non-empty line, trimmed to ~140 chars — a sensible preview default. */
+export declare const derivePreviewText: (content: string) => string;
+//# sourceMappingURL=render.d.ts.map

package/dist/render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,MAAM,WAAW,qBAAqB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7C,cAAc,EAAE,MAAM,CAAC;IACvB,8BAA8B;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAUD,wFAAwF;AACxF,eAAO,MAAM,oBAAoB,GAAI,OAAO,qBAAqB,KAAG,MAuBnE,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAAI,OAAO,qBAAqB,KAAG,MAGkD,CAAC;AAEvH;;;GAGG;AACH,eAAO,MAAM,2BAA2B,GACvC,gBAAgB,MAAM,EACtB,UAAU,MAAM,KACd,MAAM,CAAC,MAAM,EAAE,MAAM,CAOvB,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,GAAI,SAAS,MAAM,KAAG,MAOnD,CAAC"}

package/dist/render.js

@@ -0,0 +1,50 @@
+const escapeHtml = (value) => value
+    .replace(/&/g, "&")
+    .replace(/</g, "&lt;")
+    .replace(/>/g, "&gt;")
+    .replace(/"/g, "&quot;")
+    .replace(/'/g, "&#39;");
+/** Minimal, dependency-free HTML email. Override via `createNewsletter({ render })`. */
+export const renderNewsletterHtml = (input) => {
+    const paragraphs = input.content
+        .split(/\n\s*\n/)
+        .map((p) => p.trim())
+        .filter(Boolean)
+        .map((p) => `<p style="margin:0 0 16px;line-height:1.6;">${escapeHtml(p).replace(/\n/g, "<br/>")}</p>`)
+        .join("\n");
+    const cta = input.cta
+        ? `<p style="margin:24px 0;"><a href="${escapeHtml(input.cta.href)}" style="background:#111;color:#fff;padding:12px 20px;border-radius:8px;text-decoration:none;display:inline-block;">${escapeHtml(input.cta.label)}</a></p>`
+        : "";
+    return `<!doctype html><html><body style="font-family:Arial,Helvetica,sans-serif;max-width:600px;margin:0 auto;padding:24px;color:#111;">
+<div style="display:none;max-height:0;overflow:hidden;">${escapeHtml(input.previewText ?? "")}</div>
+<h1 style="font-size:20px;margin:0 0 16px;">${escapeHtml(input.subject)}</h1>
+${paragraphs}
+${cta}
+<hr style="border:none;border-top:1px solid #e5e5e5;margin:32px 0 16px;"/>
+<p style="font-size:12px;color:#888;">You're receiving this because you subscribed to ${escapeHtml(input.newsletterName)}. <a href="${escapeHtml(input.unsubscribeUrl)}" style="color:#888;">Unsubscribe</a>.</p>
+</body></html>`;
+};
+export const renderNewsletterText = (input) => `${input.subject}\n\n${input.content}\n\n${input.cta ? `${input.cta.label}: ${input.cta.href}\n\n` : ""}---\nYou're receiving this because you subscribed to ${input.newsletterName}.\nUnsubscribe: ${input.unsubscribeUrl}`;
+/**
+ * RFC 8058 List-Unsubscribe headers for one-click unsubscribe in Gmail/Apple
+ * Mail. `fromAddr` may be "Name <local@domain>" or a bare address.
+ */
+export const buildListUnsubscribeHeaders = (unsubscribeUrl, fromAddr) => {
+    const match = fromAddr.match(/<([^>]+)>/);
+    const mailto = match?.[1] ?? fromAddr;
+    return {
+        "List-Unsubscribe": `<${unsubscribeUrl}>, <mailto:${mailto}?subject=unsubscribe>`,
+        "List-Unsubscribe-Post": "List-Unsubscribe=One-Click",
+    };
+};
+/** First non-empty line, trimmed to ~140 chars — a sensible preview default. */
+export const derivePreviewText = (content) => {
+    const first = content
+        .split("\n")
+        .map((line) => line.trim())
+        .find((line) => line.length > 0);
+    if (!first)
+        return "";
+    return first.length > 140 ? `${first.slice(0, 137)}…` : first;
+};
+//# sourceMappingURL=render.js.map

package/dist/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE,CAC5C,KAAK;KACH,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;KACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;KACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;KACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;KACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAE1B,wFAAwF;AACxF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAA4B,EAAU,EAAE;IAC5E,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO;SAC9B,KAAK,CAAC,SAAS,CAAC;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CACH,CAAC,CAAC,EAAE,EAAE,CACL,+CAA+C,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAC3F;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG;QACpB,CAAC,CAAC,sCAAsC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,uHAAuH,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU;QAC9N,CAAC,CAAC,EAAE,CAAC;IAEN,OAAO;0DACkD,UAAU,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;8CAC/C,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;EACrE,UAAU;EACV,GAAG;;wFAEmF,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,cAAc,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC;eACvJ,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAA4B,EAAU,EAAE,CAC5E,GAAG,KAAK,CAAC,OAAO,OAAO,KAAK,CAAC,OAAO,OACnC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAC3D,wDAAwD,KAAK,CAAC,cAAc,mBAAmB,KAAK,CAAC,cAAc,EAAE,CAAC;AAEvH;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAC1C,cAAsB,EACtB,QAAgB,EACS,EAAE;IAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC;IACtC,OAAO;QACN,kBAAkB,EAAE,IAAI,cAAc,cAAc,MAAM,uBAAuB;QACjF,uBAAuB,EAAE,4BAA4B;KACrD,CAAC;AACH,CAAC,CAAC;AAEF,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAU,EAAE;IAC5D,MAAM,KAAK,GAAG,OAAO;SACnB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/D,CAAC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,28 @@
+/** Row of the `newsletters` table (see migrations/0001_newsletters.sql). */
+export interface Newsletter {
+    id: string;
+    slug: string;
+    name: string;
+    description: string | null;
+    from_name: string;
+    from_local_part: string;
+    reply_to: string | null;
+    is_active: boolean;
+    created_at: string;
+    updated_at: string;
+}
+/** Row of the `newsletter_subscriptions` table. */
+export interface Subscription {
+    id: string;
+    newsletter_id: string;
+    email: string;
+    user_id: string | null;
+    unsubscribe_token: string;
+    subscribed_at: string;
+    unsubscribed_at: string | null;
+    source: string | null;
+    metadata: Record<string, unknown>;
+    created_at: string;
+    updated_at: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,mDAAmD;AACnD,MAAM,WAAW,YAAY;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACnB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/migrations/0001_newsletters.sql

@@ -0,0 +1,88 @@
+-- @ingram-tech/newsletter — base schema.
+--
+-- Portable across any Supabase project: standard UUID primary keys, no
+-- project-specific ID helpers. Two tables:
+--   newsletters              — registry of lists (slug, name, sender)
+--   newsletter_subscriptions — one row per (newsletter, email), optionally
+--                              linked to an auth user (cascade-deleted with it)
+--
+-- This file owns the package's tables. Apply it into your supabase/migrations.
+-- For auto-linking subscriptions to users on signup, also apply
+-- 0002_newsletters_auth_link.sql (optional).
+
+create extension if not exists "pgcrypto" with schema "extensions";
+
+create table if not exists "public"."newsletters" (
+	"id" uuid primary key default gen_random_uuid(),
+	"slug" text not null unique,
+	"name" text not null,
+	"description" text,
+	"from_name" text not null,
+	"from_local_part" text not null default 'news',
+	"reply_to" text,
+	"is_active" boolean not null default true,
+	"created_at" timestamptz not null default now(),
+	"updated_at" timestamptz not null default now(),
+	constraint "newsletters_slug_format" check ("slug" ~ '^[a-z0-9][a-z0-9-]*$'),
+	constraint "newsletters_from_local_part_format" check ("from_local_part" ~ '^[a-z0-9][a-z0-9._-]*$')
+);
+
+comment on table "public"."newsletters" is 'Registry of newsletters. The sending address is "<from_local_part>@<EMAIL_FROM_DOMAIN>".';
+
+create table if not exists "public"."newsletter_subscriptions" (
+	"id" uuid primary key default gen_random_uuid(),
+	"newsletter_id" uuid not null references "public"."newsletters" ("id") on delete cascade,
+	"email" text not null,
+	"user_id" uuid references "auth"."users" ("id") on delete cascade,
+	"unsubscribe_token" text not null unique default encode("extensions"."gen_random_bytes" (32), 'hex'),
+	"subscribed_at" timestamptz not null default now(),
+	"unsubscribed_at" timestamptz,
+	"source" text,
+	"metadata" jsonb not null default '{}'::jsonb,
+	"created_at" timestamptz not null default now(),
+	"updated_at" timestamptz not null default now(),
+	constraint "newsletter_subscriptions_email_lower" check ("email" = lower("email")),
+	constraint "newsletter_subscriptions_email_format" check ("email" ~ '^[^@\s]+@[^@\s]+\.[^@\s]+$'),
+	constraint "newsletter_subscriptions_newsletter_email_key" unique ("newsletter_id", "email")
+);
+
+comment on column "public"."newsletter_subscriptions"."unsubscribe_token" is '256-bit random token used in the List-Unsubscribe URL; regenerated per row, never exposes the id.';
+comment on column "public"."newsletter_subscriptions"."unsubscribed_at" is 'NULL while subscribed; set on unsubscribe. Row is kept so re-subscriptions are detectable.';
+
+create index if not exists "idx_newsletter_subscriptions_newsletter_id" on "public"."newsletter_subscriptions" ("newsletter_id");
+create index if not exists "idx_newsletter_subscriptions_email" on "public"."newsletter_subscriptions" ("email");
+create index if not exists "idx_newsletter_subscriptions_user_id" on "public"."newsletter_subscriptions" ("user_id") where "user_id" is not null;
+-- Hot path: enumerating active subscribers for a send.
+create index if not exists "idx_newsletter_subscriptions_active" on "public"."newsletter_subscriptions" ("newsletter_id") where "unsubscribed_at" is null;
+
+-- updated_at maintenance
+create or replace function "public"."newsletters_set_updated_at" () returns "trigger" language "plpgsql" set "search_path" to '' as $$
+begin
+	new.updated_at = now();
+	return new;
+end;
+$$;
+
+drop trigger if exists "newsletters_updated_at" on "public"."newsletters";
+create trigger "newsletters_updated_at" before update on "public"."newsletters" for each row execute function "public"."newsletters_set_updated_at" ();
+
+drop trigger if exists "newsletter_subscriptions_updated_at" on "public"."newsletter_subscriptions";
+create trigger "newsletter_subscriptions_updated_at" before update on "public"."newsletter_subscriptions" for each row execute function "public"."newsletters_set_updated_at" ();
+
+-- Row Level Security.
+alter table "public"."newsletters" enable row level security;
+alter table "public"."newsletter_subscriptions" enable row level security;
+
+-- newsletters: publicly readable (preference pages list them). Writes are
+-- service-role only (admin tooling / seeds).
+drop policy if exists "Newsletters are publicly readable" on "public"."newsletters";
+create policy "Newsletters are publicly readable" on "public"."newsletters" for select using (true);
+
+-- subscriptions: authenticated users manage only their own rows. Anonymous
+-- subscribe/unsubscribe goes through service-role API routes.
+drop policy if exists "Users can view their own subscriptions" on "public"."newsletter_subscriptions";
+create policy "Users can view their own subscriptions" on "public"."newsletter_subscriptions" for select using ("user_id" = "auth"."uid" ());
+drop policy if exists "Users can update their own subscriptions" on "public"."newsletter_subscriptions";
+create policy "Users can update their own subscriptions" on "public"."newsletter_subscriptions" for update using ("user_id" = "auth"."uid" ());
+drop policy if exists "Users can delete their own subscriptions" on "public"."newsletter_subscriptions";
+create policy "Users can delete their own subscriptions" on "public"."newsletter_subscriptions" for delete using ("user_id" = "auth"."uid" ());

package/migrations/0002_newsletters_auth_link.sql

@@ -0,0 +1,22 @@
+-- @ingram-tech/newsletter — OPTIONAL auth-linking add-on.
+--
+-- Apply this ONLY on sites that have user signups and want a subscription made
+-- before signup (e.g. a blog-footer signup) to be back-linked to the user when
+-- they later create an account with the same email. Requires 0001 first.
+--
+-- Marketing sites without auth should NOT apply this.
+
+create or replace function "public"."link_newsletter_subscriptions_on_signup" () returns "trigger" language "plpgsql" security definer set "search_path" to '' as $$
+begin
+	update public.newsletter_subscriptions
+	set user_id = new.id
+	where user_id is null
+		and email = lower(new.email);
+	return new;
+end;
+$$;
+
+drop trigger if exists "link_newsletter_subscriptions_on_signup" on "auth"."users";
+create trigger "link_newsletter_subscriptions_on_signup"
+after insert on "auth"."users" for each row
+execute function "public"."link_newsletter_subscriptions_on_signup" ();

package/package.json

@@ -0,0 +1,44 @@
+{
+	"name": "@ingram-tech/newsletter",
+	"version": "0.1.0",
+	"description": "Supabase-backed newsletter subscriptions + sending, with RFC 8058 one-click unsubscribe.",
+	"license": "MIT",
+	"type": "module",
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/ingram-technologies/nextkit.git",
+		"directory": "packages/newsletter"
+	},
+	"publishConfig": {
+		"access": "public"
+	},
+	"files": [
+		"dist",
+		"migrations"
+	],
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"import": "./dist/index.js"
+		},
+		"./migrations/*": "./migrations/*"
+	},
+	"scripts": {
+		"build": "tsc -p tsconfig.json",
+		"type-check": "tsc -p tsconfig.json --noEmit",
+		"test": "vitest run"
+	},
+	"dependencies": {
+		"@ingram-tech/email": "^0.1.0"
+	},
+	"devDependencies": {
+		"@ingram-tech/typescript-config": "0.1.0",
+		"@supabase/supabase-js": "^2.45.0",
+		"@types/node": "^20.0.0",
+		"typescript": "^6.0.3",
+		"vitest": "^4.1.6"
+	},
+	"peerDependencies": {
+		"@supabase/supabase-js": ">=2.0.0"
+	}
+}