@marlinjai/mail-contract 0.10.0 → 0.12.0

package/dist/index.js

@@ -209,6 +209,7 @@ __export(index_exports, {
   InviteListQuery: () => InviteListQuery,
   InviteStatus: () => InviteStatus,
   JsonValue: () => JsonValue,
+  LETTER_ONLY_MERGE_FIELDS: () => LETTER_ONLY_MERGE_FIELDS,
   LETTER_RECIPIENT_REFUSAL: () => LETTER_RECIPIENT_REFUSAL,
   LIST_UNSUBSCRIBE_POST_VALUE: () => LIST_UNSUBSCRIBE_POST_VALUE,
   LOCALE_TAG_PATTERN: () => LOCALE_TAG_PATTERN,
@@ -277,7 +278,10 @@ __export(index_exports, {
   MailingLanguageReport: () => MailingLanguageReport,
   MailingLanguageStatus: () => MailingLanguageStatus,
   MailingListQuery: () => MailingListQuery,
+  MailingMerge: () => MailingMerge,
   MailingMetadata: () => MailingMetadata,
+  MailingResolveRequest: () => MailingResolveRequest,
+  MailingResolveResult: () => MailingResolveResult,
   MailingRetryFailedRequest: () => MailingRetryFailedRequest,
   MailingScheduleFailedData: () => MailingScheduleFailedData,
   MailingScheduleRequest: () => MailingScheduleRequest,
@@ -302,6 +306,8 @@ __export(index_exports, {
   MessageOutcome: () => MessageOutcome,
   MessageSentData: () => MessageSentData,
   MessageSummary: () => MessageSummary,
+  MessageValues: () => MessageValues,
+  NAME_ON_BROADCAST_REFUSAL: () => NAME_ON_BROADCAST_REFUSAL,
   NotifyRecipients: () => NotifyRecipients,
   NotifyStep: () => NotifyStep,
   ON_BEHALF_OF_HEADER: () => ON_BEHALF_OF_HEADER,
@@ -337,6 +343,8 @@ __export(index_exports, {
   REQUEST_ID_HEADER: () => REQUEST_ID_HEADER,
   RESEND_EVENT_TYPES: () => RESEND_EVENT_TYPES,
   RESERVED_MERGE_FIELDS: () => RESERVED_MERGE_FIELDS,
+  RESOLVE_PROBLEMS: () => RESOLVE_PROBLEMS,
+  RESOLVE_REJECTIONS: () => RESOLVE_REJECTIONS,
   RETRYABLE_ERRORS: () => RETRYABLE_ERRORS,
   RETRY_AFTER_HEADER: () => RETRY_AFTER_HEADER,
   RE_ENTRY_MODES: () => RE_ENTRY_MODES,
@@ -349,6 +357,9 @@ __export(index_exports, {
   RecipientStatus: () => RecipientStatus,
   RemoteImage: () => RemoteImage,
   ResendSigningSecret: () => ResendSigningSecret,
+  ResolveProblem: () => ResolveProblem,
+  ResolvedRecipient: () => ResolvedRecipient,
+  ResolvedValue: () => ResolvedValue,
   SERVICE_FILLED_MERGE_FIELDS: () => SERVICE_FILLED_MERGE_FIELDS,
   SIGNUP_FORM_FIELDS: () => SIGNUP_FORM_FIELDS,
   SKIP_REASONS: () => SKIP_REASONS,
@@ -385,6 +396,8 @@ __export(index_exports, {
   TEMPLATE_SORTS: () => TEMPLATE_SORTS,
   TEMPLATE_SORT_DEFAULT_ORDER: () => TEMPLATE_SORT_DEFAULT_ORDER,
   TERMINAL_MAILING_STATUSES: () => TERMINAL_MAILING_STATUSES,
+  TRUSTED_APPS: () => TRUSTED_APPS,
+  TRUSTED_APP_OPERATIONS: () => TRUSTED_APP_OPERATIONS,
   Tag: () => Tag,
   TagAssignment: () => TagAssignment,
   TagCreate: () => TagCreate,
@@ -430,15 +443,19 @@ __export(index_exports, {
   TrackingSettings: () => TrackingSettings,
   TranslationInsertion: () => TranslationInsertion,
   TranslationInsertions: () => TranslationInsertions,
+  TrustedApp: () => TrustedApp,
   UNSUBSCRIBE_PATH_PREFIX: () => UNSUBSCRIBE_PATH_PREFIX,
   UNSUBSCRIBE_SOURCES: () => UNSUBSCRIBE_SOURCES,
   USAGE_METRICS: () => USAGE_METRICS,
   USAGE_WARNING_HEADER: () => USAGE_WARNING_HEADER,
   USAGE_WARNING_RATIO: () => USAGE_WARNING_RATIO,
+  UnfilledLink: () => UnfilledLink,
   Usage: () => Usage,
   UsageMetric: () => UsageMetric,
   UsageWarning: () => UsageWarning,
+  VALUE_LAYERS: () => VALUE_LAYERS,
   ValidationIssue: () => ValidationIssue,
+  ValueLayer: () => ValueLayer,
   VariantAnalytics: () => VariantAnalytics,
   WEBHOOK_DELIVERY_STATUSES: () => WEBHOOK_DELIVERY_STATUSES,
   WEBHOOK_EVENT_ID_HEADER: () => WEBHOOK_EVENT_ID_HEADER,
@@ -502,6 +519,7 @@ __export(index_exports, {
   editMainInsertions: () => editMainInsertions,
   effectivePreviewPicks: () => effectivePreviewPicks,
   emptyFlow: () => emptyFlow,
+  emptyLinkValues: () => emptyLinkValues,
   errorBody: () => errorBody,
   escapeMergeHtml: () => escapeMergeHtml,
   exportFilename: () => exportFilename,
@@ -532,6 +550,8 @@ __export(index_exports, {
   languageInsertions: () => languageInsertions,
   languageName: () => languageName,
   languageTabs: () => languageTabs,
+  letterOnlyValues: () => letterOnlyValues,
+  linkTokens: () => linkTokens,
   mainInsertionText: () => mainInsertionText,
   matchLocale: () => matchLocale,
   matchRoute: () => matchRoute,
@@ -552,6 +572,8 @@ __export(index_exports, {
   previewInsertions: () => previewInsertions,
   previewPersonalization: () => previewPersonalization,
   primaryLanguage: () => primaryLanguage,
+  printedFields: () => printedFields,
+  rawMergeValue: () => rawMergeValue,
   reachable: () => reachable,
   readyWithoutInsertions: () => readyWithoutInsertions,
   readyWithoutSubject: () => readyWithoutSubject,
@@ -568,6 +590,7 @@ __export(index_exports, {
   renameTokenInDocument: () => renameTokenInDocument,
   renameTokenInText: () => renameTokenInText,
   resolveInsertions: () => resolveInsertions,
+  resolveValue: () => resolveValue,
   restorePatch: () => restorePatch,
   routes: () => routes,
   sameJson: () => sameJson,
@@ -591,9 +614,12 @@ __export(index_exports, {
   translationInsertionProblems: () => translationInsertionProblems,
   translationTextFromInput: () => translationTextFromInput,
   triggerKey: () => triggerKey,
+  trustedAppMayCall: () => trustedAppMayCall,
   unknownRefusedInsertions: () => unknownRefusedInsertions,
   unplacedInsertions: () => unplacedInsertions,
   validateAutomation: () => validateAutomation,
+  valueNames: () => valueNames,
+  valuesRead: () => valuesRead,
   verifyWebhook: () => verifyWebhook
 });
 module.exports = __toCommonJS(index_exports);
@@ -677,6 +703,12 @@ var ERROR_STATUS = {
   invalid_mjml: 422,
   missing_unsubscribe_url: 422,
   mailing_not_ready: 422,
+  /**
+   * A value placed inside a link's address comes out empty for at least one
+   * recipient, so the mailing does not start; `details.values` lists each such
+   * value with how many recipients it is empty for.
+   */
+  unfilled_link: 422,
   unknown_topic: 422,
   unknown_provider: 422,
   /**
@@ -745,10 +777,10 @@ var API_VERSION_PREFIX = "/v1";
 var HEALTH_PATH = "/healthz";
 
 // src/workspace.ts
-var import_zod10 = require("zod");
+var import_zod11 = require("zod");
 
 // src/automations.ts
-var import_zod9 = require("zod");
+var import_zod10 = require("zod");
 
 // src/templates.ts
 var import_zod5 = require("zod");
@@ -769,11 +801,11 @@ var RESERVED_MERGE_FIELDS = {
 };
 var MERGE_FIELD_PATTERN = /\{\{\s*([a-z][a-z0-9_]*)\s*(?:\|([^}]*))?\}\}/g;
 function findMergeFields(html) {
-  const uses = [];
+  const uses2 = [];
   for (const match of html.matchAll(MERGE_FIELD_PATTERN)) {
-    uses.push({ name: match[1], fallback: match[2] === void 0 ? null : match[2].trim() });
+    uses2.push({ name: match[1], fallback: match[2] === void 0 ? null : match[2].trim() });
   }
-  return uses;
+  return uses2;
 }
 function missingRequiredMergeFields(html) {
   const used = new Set(findMergeFields(html).map((u) => u.name));
@@ -1456,10 +1488,10 @@ function exportFilename(name, format) {
 }
 
 // src/platform.ts
-var import_zod8 = require("zod");
+var import_zod9 = require("zod");
 
 // src/mailings.ts
-var import_zod7 = require("zod");
+var import_zod8 = require("zod");
 
 // src/ab-test.ts
 var import_zod6 = require("zod");
@@ -1510,6 +1542,167 @@ function testGroupSize(total, fraction, variants) {
   return Math.min(total, Math.max(variants, Math.ceil(total * fraction)));
 }
 
+// src/values.ts
+var import_zod7 = require("zod");
+var MAX_MERGE_DEFAULTS = 50;
+var MAX_MERGE_DEFAULT_LENGTH = 2e3;
+var MergeFieldName = import_zod7.z.string().regex(/^[a-z][a-z0-9_]*$/, "a merge-field name: lowercase letters, digits and underscores, starting with a letter").max(64);
+var MergeDefaultValue = import_zod7.z.union([import_zod7.z.string().max(MAX_MERGE_DEFAULT_LENGTH), import_zod7.z.number().finite(), import_zod7.z.boolean()]);
+var MailingMerge = import_zod7.z.record(MergeFieldName, MergeDefaultValue).refine((m) => Object.keys(m).length <= MAX_MERGE_DEFAULTS, `at most ${MAX_MERGE_DEFAULTS} values on a mailing`).refine((m) => !Object.keys(m).some((k) => SERVICE_FILLED_MERGE_FIELDS.includes(k)), {
+  message: `the service fills ${SERVICE_FILLED_MERGE_FIELDS.join(" and ")}; a mailing cannot set them`
+});
+var LETTER_ONLY_MERGE_FIELDS = ["first_name", "last_name"];
+var NAME_ON_BROADCAST_REFUSAL = "name_on_broadcast";
+function letterOnlyValues(merge) {
+  return LETTER_ONLY_MERGE_FIELDS.filter((name) => ownEntry(merge, name) !== void 0);
+}
+var VALUE_LAYERS = ["recipient", "mailing", "contact", "workspace", "fallback", "empty"];
+var ValueLayer = import_zod7.z.enum(VALUE_LAYERS);
+var ResolvedValue = import_zod7.z.object({ text: import_zod7.z.string(), layer: ValueLayer });
+var MessageValues = import_zod7.z.record(ResolvedValue);
+function scalarText(value) {
+  if (typeof value === "string") return value;
+  if (typeof value === "number" && Number.isFinite(value)) return String(value);
+  if (typeof value === "boolean") return String(value);
+  return null;
+}
+function isNameField(name) {
+  return name === "first_name" || name === "last_name";
+}
+function rawMergeValue(name, sources) {
+  const own = ownEntry(sources.recipient, name);
+  if (scalarText(own) !== null) return { value: own, layer: "recipient" };
+  const held = ownEntry(sources.mailing, name);
+  if (scalarText(held) !== null) return { value: held, layer: "mailing" };
+  if (isNameField(name)) {
+    const stored = sources.contact?.[name];
+    return typeof stored === "string" ? { value: stored, layer: "contact" } : null;
+  }
+  const property = ownEntry(sources.contact?.properties, name);
+  if (scalarText(property) !== null) return { value: property, layer: "contact" };
+  const byDefault = ownEntry(sources.workspace, name);
+  return scalarText(byDefault) !== null ? { value: byDefault, layer: "workspace" } : null;
+}
+function resolveValue(name, fallback, sources) {
+  const found = rawMergeValue(name, sources);
+  const text = found === null ? null : scalarText(found.value);
+  if (found !== null && text !== null && text.trim() !== "") return { text, layer: found.layer };
+  const instead = fallback?.trim() ?? "";
+  return instead === "" ? { text: "", layer: "empty" } : { text: instead, layer: "fallback" };
+}
+function pattern2() {
+  return new RegExp(MERGE_FIELD_PATTERN.source, "g");
+}
+function isServiceFilled(name) {
+  return SERVICE_FILLED_MERGE_FIELDS.includes(name);
+}
+function uses(text) {
+  return [...text.matchAll(pattern2())].map((m) => ({ name: m[1], fallback: m[2] === void 0 ? null : m[2].trim() }));
+}
+function valueNames(texts, insertions) {
+  const names = [];
+  const add = (name) => {
+    if (!isServiceFilled(name) && !names.includes(name)) names.push(name);
+  };
+  for (const text of texts) {
+    for (const use of uses(text ?? "")) {
+      const def = ownEntry(insertions, use.name);
+      if (!def) {
+        add(use.name);
+        continue;
+      }
+      add(def.by);
+      for (const inner of [...Object.values(def.choices), def.filled ?? "", def.otherwise]) for (const u of uses(inner)) add(u.name);
+    }
+  }
+  return names;
+}
+function printedFields(texts, insertions, chosen2) {
+  const out = [];
+  const add = (use) => {
+    if (isServiceFilled(use.name)) return;
+    if (!out.some((o) => o.name === use.name && o.fallback === use.fallback)) out.push(use);
+  };
+  for (const text of texts) {
+    for (const use of uses(text ?? "")) {
+      if (!ownEntry(insertions, use.name)) add(use);
+      else for (const inner of uses(ownEntry(chosen2, use.name)?.text ?? "")) add(inner);
+    }
+  }
+  return out;
+}
+function valuesRead(texts, insertions, chosen2, resolve) {
+  const out = {};
+  const read = (use) => {
+    if (isServiceFilled(use.name)) return;
+    const value = resolve(use.name, use.fallback);
+    const seen = ownEntry(out, use.name);
+    if (seen === void 0 || value.layer === "empty" && seen.layer !== "empty") out[use.name] = value;
+  };
+  for (const text of texts) {
+    for (const use of uses(text ?? "")) {
+      const def = ownEntry(insertions, use.name);
+      if (!def) {
+        read(use);
+        continue;
+      }
+      read({ name: def.by, fallback: null });
+      for (const inner of uses(ownEntry(chosen2, use.name)?.text ?? "")) read(inner);
+    }
+  }
+  return out;
+}
+var HREF = /\bhref\s*=\s*(?:"([^"]*)"|'([^']*)')/gi;
+function linkTokens(html) {
+  const out = [];
+  for (const match of html.matchAll(HREF)) {
+    for (const use of uses(match[1] ?? match[2] ?? "")) {
+      if (isServiceFilled(use.name)) continue;
+      if (!out.some((o) => o.name === use.name && o.fallback === use.fallback)) out.push(use);
+    }
+  }
+  return out;
+}
+function emptyLinkValues(tokens, p) {
+  const empty = [];
+  for (const token of tokens) {
+    const ins = ownEntry(p.insertions, token.name);
+    const text = ins ? ins.text.replace(pattern2(), (_m, name, fallback) => p.value(name, fallback)) : p.value(token.name, token.fallback ?? void 0);
+    if (text.trim() === "" && !empty.includes(token.name)) empty.push(token.name);
+  }
+  return empty;
+}
+var UnfilledLink = import_zod7.z.object({
+  /** The value, or the insertion, that comes out empty. */
+  value: import_zod7.z.string(),
+  /** How many recipients it is empty for. */
+  recipients: import_zod7.z.number().int().min(1)
+});
+var RESOLVE_PROBLEMS = ["unfilled_link", "empty_value", "insertion_miss"];
+var ResolveProblem = import_zod7.z.object({
+  kind: import_zod7.z.enum(RESOLVE_PROBLEMS),
+  severity: import_zod7.z.enum(["blocking", "note"]),
+  value: import_zod7.z.string(),
+  message: import_zod7.z.string()
+});
+var ResolvedRecipient = import_zod7.z.object({
+  /** The recipient's index in the request; null for the reader with nothing of their own. */
+  index: import_zod7.z.number().int().min(0).nullable(),
+  /** The address the message would go to; null for the reader with nothing of their own. */
+  email: Email.nullable(),
+  /** The contact found for the recipient; null when the address has none yet (a send creates it, empty). */
+  contact_id: Id.nullable(),
+  /** The language version this recipient would get. */
+  locale: LocaleTag,
+  /** The subject line as they would read it. */
+  subject: import_zod7.z.string(),
+  values: MessageValues,
+  /** The choice each insertion would make; null when the content has none. */
+  insertions: InsertionChoices.nullable(),
+  problems: import_zod7.z.array(ResolveProblem)
+});
+var RESOLVE_REJECTIONS = ["unknown_contact", "duplicate_in_batch"];
+
 // src/mailings.ts
 var MAILING_STATUSES = [
   "draft",
@@ -1520,9 +1713,9 @@ var MAILING_STATUSES = [
   "partially_failed",
   "cancelled"
 ];
-var MailingStatus = import_zod7.z.enum(MAILING_STATUSES);
+var MailingStatus = import_zod8.z.enum(MAILING_STATUSES);
 var MAILING_ACTIONS = ["send", "schedule", "unschedule", "pause", "resume", "cancel", "retry-failed"];
-var MailingAction = import_zod7.z.enum(MAILING_ACTIONS);
+var MailingAction = import_zod8.z.enum(MAILING_ACTIONS);
 var MAILING_TRANSITIONS = {
   draft: ["send", "schedule", "cancel"],
   scheduled: ["send", "schedule", "unschedule", "cancel"],
@@ -1537,23 +1730,23 @@ function canTransition(status, action) {
 }
 var EDITABLE_MAILING_STATUSES = ["draft", "scheduled"];
 var TERMINAL_MAILING_STATUSES = ["sent", "cancelled"];
-var MailingMetadata = import_zod7.z.record(import_zod7.z.string().max(500)).refine((v) => Object.keys(v).length <= 20, "at most 20 keys").refine((v) => Object.keys(v).every((k) => k.length >= 1 && k.length <= 64), "keys are 1 to 64 characters");
-var MailingCounts = import_zod7.z.object({
-  total: import_zod7.z.number().int().min(0),
-  queued: import_zod7.z.number().int().min(0),
-  sending: import_zod7.z.number().int().min(0),
-  sent: import_zod7.z.number().int().min(0),
-  failed: import_zod7.z.number().int().min(0),
-  skipped: import_zod7.z.number().int().min(0)
+var MailingMetadata = import_zod8.z.record(import_zod8.z.string().max(500)).refine((v) => Object.keys(v).length <= 20, "at most 20 keys").refine((v) => Object.keys(v).every((k) => k.length >= 1 && k.length <= 64), "keys are 1 to 64 characters");
+var MailingCounts = import_zod8.z.object({
+  total: import_zod8.z.number().int().min(0),
+  queued: import_zod8.z.number().int().min(0),
+  sending: import_zod8.z.number().int().min(0),
+  sent: import_zod8.z.number().int().min(0),
+  failed: import_zod8.z.number().int().min(0),
+  skipped: import_zod8.z.number().int().min(0)
 });
 var MAILING_KINDS = ["broadcast", "automation", "notification"];
-var MailingKind = import_zod7.z.enum(MAILING_KINDS);
-var Mailing = import_zod7.z.object({
+var MailingKind = import_zod8.z.enum(MAILING_KINDS);
+var Mailing = import_zod8.z.object({
   id: Id,
   kind: MailingKind,
-  name: import_zod7.z.string().max(200).nullable(),
-  subject: import_zod7.z.string().min(1).max(998),
-  preheader: import_zod7.z.string().max(500).nullable(),
+  name: import_zod8.z.string().max(200).nullable(),
+  subject: import_zod8.z.string().min(1).max(998),
+  preheader: import_zod8.z.string().max(500).nullable(),
   /**
    * The template the document was taken from, if any. The snapshot is what is
    * sent in the main language; the template's other language versions are
@@ -1595,6 +1788,12 @@ var Mailing = import_zod7.z.object({
   status: MailingStatus,
   counts: MailingCounts,
   metadata: MailingMetadata,
+  /**
+   * The values held on this mailing (see `MailingMerge`): the same for
+   * everyone who gets it, above the contact's stored name and properties and
+   * the workspace's defaults, below the recipient's own. Empty by default.
+   */
+  merge: MailingMerge.default({}),
   scheduled_at: Timestamp.nullable(),
   /** The A/B test on subject or content (S4), null when there is none. */
   ab_test: AbTestState.nullable(),
@@ -1606,15 +1805,15 @@ var Mailing = import_zod7.z.object({
    * recipients refused as dead addresses in one run (see the provider's
    * `rejections.anomaly`). Resuming clears it and starts a new run.
    */
-  pause_reason: import_zod7.z.string().nullable().default(null),
+  pause_reason: import_zod8.z.string().nullable().default(null),
   created_at: Timestamp,
   updated_at: Timestamp
 });
 var MailingSummary = Mailing.omit({ document: true });
 var MailingContent = {
-  name: import_zod7.z.string().max(200).optional(),
-  subject: import_zod7.z.string().min(1).max(998),
-  preheader: import_zod7.z.string().max(500).optional(),
+  name: import_zod8.z.string().max(200).optional(),
+  subject: import_zod8.z.string().min(1).max(998),
+  preheader: import_zod8.z.string().max(500).optional(),
   /** See `Mailing.send_locale`. */
   send_locale: LocaleTag.nullable().optional(),
   /**
@@ -1625,9 +1824,11 @@ var MailingContent = {
    */
   topic: Slug.nullable().optional(),
   provider_id: Id,
-  metadata: MailingMetadata.optional()
+  metadata: MailingMetadata.optional(),
+  /** See `Mailing.merge`. `first_name` and `last_name` only on a letter (no topic). */
+  merge: MailingMerge.optional()
 };
-var MailingCreate = import_zod7.z.object({
+var MailingCreate = import_zod8.z.object({
   ...MailingContent,
   subject: MailingContent.subject.optional(),
   document: TemplateDocument.optional(),
@@ -1643,15 +1844,22 @@ var MailingCreate = import_zod7.z.object({
   message: "a mailing made from a document needs a subject",
   path: ["subject"]
 });
-var MailingUpdate = import_zod7.z.object({
-  name: import_zod7.z.string().max(200).nullable().optional(),
+var MailingUpdate = import_zod8.z.object({
+  name: import_zod8.z.string().max(200).nullable().optional(),
   subject: MailingContent.subject.optional(),
-  preheader: import_zod7.z.string().max(500).nullable().optional(),
+  preheader: import_zod8.z.string().max(500).nullable().optional(),
   /** Null turns a draft into a letter, which it can only be with at most one recipient. */
   topic: Slug.nullable().optional(),
   send_locale: LocaleTag.nullable().optional(),
   provider_id: Id.optional(),
   metadata: MailingMetadata.optional(),
+  /**
+   * Replaces the mailing's values whole (see `Mailing.merge`). Giving a
+   * mailing that holds `first_name` or `last_name` a topic is refused
+   * (`name_on_broadcast`) unless the same call replaces its values without
+   * them.
+   */
+  merge: MailingMerge.optional(),
   document: TemplateDocument.optional()
 }).refine((v) => Object.keys(v).length > 0, "at least one field");
 var MailingListQuery = PageQuery.extend({
@@ -1660,30 +1868,30 @@ var MailingListQuery = PageQuery.extend({
   kind: MailingKind.optional(),
   automation_id: Id.optional()
 });
-var MailingSendRequest = import_zod7.z.object({}).strict();
-var MailingRetryFailedRequest = import_zod7.z.object({
+var MailingSendRequest = import_zod8.z.object({}).strict();
+var MailingRetryFailedRequest = import_zod8.z.object({
   /**
    * Also requeue recipients whose outcome is unknown after a crash. They may
    * already have received the message, so this is a human's decision, never a
    * default.
    */
-  include_outcome_unknown: import_zod7.z.boolean().optional()
+  include_outcome_unknown: import_zod8.z.boolean().optional()
 }).strict();
-var MailingActionRequest = import_zod7.z.object({}).strict();
-var MailingTestRequest = import_zod7.z.object({
+var MailingActionRequest = import_zod8.z.object({}).strict();
+var MailingTestRequest = import_zod8.z.object({
   to: Email,
   merge: Properties.optional(),
   locale: LocaleTag.optional()
 });
-var MailingTestResult = import_zod7.z.object({
+var MailingTestResult = import_zod8.z.object({
   message_id: Id,
-  provider_message_id: import_zod7.z.string().nullable()
+  provider_message_id: import_zod8.z.string().nullable()
 });
 var RECIPIENT_STATUSES = ["queued", "sending", "sent", "failed", "skipped"];
-var RecipientStatus = import_zod7.z.enum(RECIPIENT_STATUSES);
+var RecipientStatus = import_zod8.z.enum(RECIPIENT_STATUSES);
 var SKIP_REASONS = ["suppressed", "not_subscribed", "contact_erased", "cancelled", "outcome_unknown"];
-var SkipReason = import_zod7.z.enum(SKIP_REASONS);
-var Recipient = import_zod7.z.object({
+var SkipReason = import_zod8.z.enum(SKIP_REASONS);
+var Recipient = import_zod8.z.object({
   id: Id,
   mailing_id: Id,
   contact_id: Id.nullable(),
@@ -1691,55 +1899,55 @@ var Recipient = import_zod7.z.object({
   merge: Properties,
   status: RecipientStatus,
   skip_reason: SkipReason.nullable(),
-  attempts: import_zod7.z.number().int().min(0),
+  attempts: import_zod8.z.number().int().min(0),
   message_id: Id.nullable(),
-  last_error: import_zod7.z.string().nullable(),
+  last_error: import_zod8.z.string().nullable(),
   created_at: Timestamp,
   updated_at: Timestamp
 });
 var MAX_RECIPIENTS_PER_BATCH = 1e3;
 var MAX_LETTER_RECIPIENTS = 1;
 var LETTER_RECIPIENT_REFUSAL = "letter_has_one_recipient";
-var RecipientInput = import_zod7.z.object({
+var RecipientInput = import_zod8.z.object({
   contact_id: Id.optional(),
-  external_id: import_zod7.z.string().min(1).max(255).optional(),
+  external_id: import_zod8.z.string().min(1).max(255).optional(),
   email: Email.optional(),
   merge: Properties.optional()
 }).refine((v) => v.contact_id !== void 0 || v.external_id !== void 0 || v.email !== void 0, {
   message: "contact_id, external_id or email is required",
   path: ["email"]
 });
-var RecipientBatch = import_zod7.z.object({
-  recipients: import_zod7.z.array(RecipientInput).min(1).max(MAX_RECIPIENTS_PER_BATCH)
+var RecipientBatch = import_zod8.z.object({
+  recipients: import_zod8.z.array(RecipientInput).min(1).max(MAX_RECIPIENTS_PER_BATCH)
 });
 var RECIPIENT_REJECTIONS = ["unknown_contact", "duplicate_in_batch"];
-var RecipientBatchResult = import_zod7.z.object({
+var RecipientBatchResult = import_zod8.z.object({
   /** Newly queued. */
-  added: import_zod7.z.number().int().min(0),
+  added: import_zod8.z.number().int().min(0),
   /** Already on the mailing from an earlier batch: left unchanged. */
-  already_present: import_zod7.z.number().int().min(0),
+  already_present: import_zod8.z.number().int().min(0),
   /** Items not added, by their index in the request. */
-  rejected: import_zod7.z.array(import_zod7.z.object({ index: import_zod7.z.number().int().min(0), reason: import_zod7.z.enum(RECIPIENT_REJECTIONS) }))
+  rejected: import_zod8.z.array(import_zod8.z.object({ index: import_zod8.z.number().int().min(0), reason: import_zod8.z.enum(RECIPIENT_REJECTIONS) }))
 });
 var RecipientListQuery = PageQuery.extend({
   status: RecipientStatus.optional(),
   skip_reason: SkipReason.optional()
 });
 var MESSAGE_OUTCOMES = ["sent", "failed"];
-var MessageOutcome = import_zod7.z.enum(MESSAGE_OUTCOMES);
-var MessageSummary = import_zod7.z.object({
+var MessageOutcome = import_zod8.z.enum(MESSAGE_OUTCOMES);
+var MessageSummary = import_zod8.z.object({
   id: Id,
   mailing_id: Id.nullable(),
   recipient_id: Id.nullable(),
   contact_id: Id.nullable(),
   to: Email,
-  subject: import_zod7.z.string(),
+  subject: import_zod8.z.string(),
   provider_id: Id,
-  provider_message_id: import_zod7.z.string().nullable(),
+  provider_message_id: import_zod8.z.string().nullable(),
   outcome: MessageOutcome,
-  error: import_zod7.z.string().nullable(),
-  is_test: import_zod7.z.boolean(),
-  recipient_count: import_zod7.z.number().int().min(1),
+  error: import_zod8.z.string().nullable(),
+  is_test: import_zod8.z.boolean(),
+  recipient_count: import_zod8.z.number().int().min(1),
   /** The language version the message was sent in; null for messages archived before languages existed. */
   locale: LocaleTag.nullable(),
   /**
@@ -1749,24 +1957,32 @@ var MessageSummary = import_zod7.z.object({
    * "otherwise" text. Null when the message had no insertions.
    */
   insertions: InsertionChoices.nullable(),
+  /**
+   * The values the message was written with, by name: the text each one
+   * printed and the layer it came from (see `MessageValues`), recorded when it
+   * was sent, so a later change to a default never rewrites what a reader got.
+   * Null for a message archived before values were recorded, and for a signup
+   * form's confirmation, which belongs to no mailing.
+   */
+  values: MessageValues.nullable().default(null),
   created_at: Timestamp
 });
-var Message = MessageSummary.extend({ html: import_zod7.z.string() });
-var MailingLanguageStatus = import_zod7.z.enum(["main", "ready", "draft", "not_a_workspace_language"]);
-var MailingLanguage = import_zod7.z.object({
+var Message = MessageSummary.extend({ html: import_zod8.z.string() });
+var MailingLanguageStatus = import_zod8.z.enum(["main", "ready", "draft", "not_a_workspace_language"]);
+var MailingLanguage = import_zod8.z.object({
   locale: LocaleTag,
   status: MailingLanguageStatus,
   /** Queued recipients who will get this version. */
-  planned: import_zod7.z.number().int().min(0),
+  planned: import_zod8.z.number().int().min(0),
   /** Messages already sent in this language (tests excluded). */
-  sent: import_zod7.z.number().int().min(0)
+  sent: import_zod8.z.number().int().min(0)
 });
-var MailingLanguageReport = import_zod7.z.object({
+var MailingLanguageReport = import_zod8.z.object({
   main_locale: LocaleTag,
   send_locale: LocaleTag.nullable(),
-  languages: import_zod7.z.array(MailingLanguage),
-  fallback: import_zod7.z.array(import_zod7.z.object({ wanted: import_zod7.z.string(), planned: import_zod7.z.number().int().min(1) })),
-  no_language: import_zod7.z.number().int().min(0),
+  languages: import_zod8.z.array(MailingLanguage),
+  fallback: import_zod8.z.array(import_zod8.z.object({ wanted: import_zod8.z.string(), planned: import_zod8.z.number().int().min(1) })),
+  no_language: import_zod8.z.number().int().min(0),
   /**
    * Values that no choice of an insertion takes, so the "otherwise" text goes
    * out (docs/plans/2026-09-25-translated-insertions.md, decision 3): per
@@ -1775,41 +1991,56 @@ var MailingLanguageReport = import_zod7.z.object({
    * template's keys never produces one; a non-empty list means the client and
    * the template have drifted apart.
    */
-  insertion_misses: import_zod7.z.array(
-    import_zod7.z.object({
-      insertion: import_zod7.z.string(),
-      value: import_zod7.z.string(),
-      planned: import_zod7.z.number().int().min(0),
-      sent: import_zod7.z.number().int().min(0)
+  insertion_misses: import_zod8.z.array(
+    import_zod8.z.object({
+      insertion: import_zod8.z.string(),
+      value: import_zod8.z.string(),
+      planned: import_zod8.z.number().int().min(0),
+      sent: import_zod8.z.number().int().min(0)
     })
   )
 });
+var MailingResolveRequest = import_zod8.z.object({
+  recipients: import_zod8.z.array(RecipientInput).max(MAX_RECIPIENTS_PER_BATCH).optional()
+});
+var MailingResolveResult = import_zod8.z.object({
+  /** Every value the mailing's content can read, in order of first appearance, without `email` and `unsubscribe_url`. */
+  names: import_zod8.z.array(import_zod8.z.string()),
+  /** The values and insertions placed inside a link's address: one of them empty for anybody refuses the send. */
+  link_values: import_zod8.z.array(import_zod8.z.string()),
+  /** One entry per resolved recipient, in the request's order; a single entry with `index: null` when none were given. */
+  recipients: import_zod8.z.array(ResolvedRecipient),
+  /** Items not resolved, by their index in the request, for the reasons `mailings.addRecipients` rejects one. */
+  rejected: import_zod8.z.array(import_zod8.z.object({ index: import_zod8.z.number().int().min(0), reason: import_zod8.z.enum(RESOLVE_REJECTIONS) })),
+  /** What would refuse `mailings.send` for these recipients, as its `unfilled_link` refusal lists it; empty means none. */
+  blocking: import_zod8.z.array(UnfilledLink)
+});
 var MessageListQuery = PageQuery.extend({
   mailing_id: Id.optional(),
   outcome: MessageOutcome.optional()
 });
 
 // src/platform.ts
-var Tag = import_zod8.z.object({
+var Tag = import_zod9.z.object({
   id: Id,
   slug: Slug,
-  name: import_zod8.z.string().min(1).max(120),
-  contact_count: import_zod8.z.number().int().min(0),
+  name: import_zod9.z.string().min(1).max(120),
+  contact_count: import_zod9.z.number().int().min(0),
   created_at: Timestamp
 });
-var TagCreate = import_zod8.z.object({ slug: Slug, name: import_zod8.z.string().min(1).max(120) });
-var TagAssignment = import_zod8.z.object({
-  contact_ids: import_zod8.z.array(Id).min(1).max(1e3)
+var TagCreate = import_zod9.z.object({ slug: Slug, name: import_zod9.z.string().min(1).max(120) });
+var TagAssignment = import_zod9.z.object({
+  contact_ids: import_zod9.z.array(Id).min(1).max(1e3)
 });
 var CONTACT_PROPERTY_TYPES = ["string", "number", "boolean", "date"];
-var ContactPropertyType = import_zod8.z.enum(CONTACT_PROPERTY_TYPES);
-var ContactPropertyKey = import_zod8.z.string().regex(/^[A-Za-z0-9_.-]{1,64}$/, "letters, digits, dot, underscore and hyphen, 1 to 64");
-var ContactPropertyDefinition = import_zod8.z.object({
+var ContactPropertyType = import_zod9.z.enum(CONTACT_PROPERTY_TYPES);
+var ContactPropertyKey = import_zod9.z.string().regex(/^[A-Za-z0-9_.-]{1,64}$/, "letters, digits, dot, underscore and hyphen, 1 to 64");
+var ContactPropertyDefinition = import_zod9.z.object({
   key: ContactPropertyKey,
-  label: import_zod8.z.string().min(1).max(120),
+  label: import_zod9.z.string().min(1).max(120),
   type: ContactPropertyType
 });
-var ContactPropertyParams = import_zod8.z.object({ key: ContactPropertyKey });
+var ContactPropertyParams = import_zod9.z.object({ key: ContactPropertyKey });
 var FILTER_OPERATORS = [
   "eq",
   "neq",
@@ -1825,8 +2056,8 @@ var FILTER_OPERATORS = [
   "in",
   "not_in"
 ];
-var FilterOperator = import_zod8.z.enum(FILTER_OPERATORS);
-var FilterField = import_zod8.z.string().regex(
+var FilterOperator = import_zod9.z.enum(FILTER_OPERATORS);
+var FilterField = import_zod9.z.string().regex(
   /^(email|first_name|last_name|locale|created_at|tag|topic|engagement:(opened|clicked)|property:[A-Za-z0-9_.-]{1,64})$/,
   "unknown filter field"
 );
@@ -1842,18 +2073,18 @@ var FILTER_FIELD_OPERATORS = {
   property: FILTER_OPERATORS
 };
 var MAX_FILTER_DEPTH = 5;
-var FilterCondition = import_zod8.z.object({ field: FilterField, op: FilterOperator, value: JsonValue.optional() }).strict().refine((c) => (c.op === "exists" || c.op === "not_exists") === (c.value === void 0), {
+var FilterCondition = import_zod9.z.object({ field: FilterField, op: FilterOperator, value: JsonValue.optional() }).strict().refine((c) => (c.op === "exists" || c.op === "not_exists") === (c.value === void 0), {
   message: "exists and not_exists take no value; every other operator needs one",
   path: ["value"]
 }).refine((c) => c.op !== "in" && c.op !== "not_in" || Array.isArray(c.value), {
   message: "in and not_in take an array",
   path: ["value"]
 });
-var SegmentFilter = import_zod8.z.lazy(
-  () => import_zod8.z.union([
-    import_zod8.z.object({ and: import_zod8.z.array(SegmentFilter).min(1).max(50) }).strict(),
-    import_zod8.z.object({ or: import_zod8.z.array(SegmentFilter).min(1).max(50) }).strict(),
-    import_zod8.z.object({ not: SegmentFilter }).strict(),
+var SegmentFilter = import_zod9.z.lazy(
+  () => import_zod9.z.union([
+    import_zod9.z.object({ and: import_zod9.z.array(SegmentFilter).min(1).max(50) }).strict(),
+    import_zod9.z.object({ or: import_zod9.z.array(SegmentFilter).min(1).max(50) }).strict(),
+    import_zod9.z.object({ not: SegmentFilter }).strict(),
     FilterCondition
   ])
 );
@@ -1941,42 +2172,42 @@ function untypedValueProblem(c, every) {
   if (orderOp) return every(isFilterNumber, "numbers (define the property to compare dates)");
   return every((v) => isScalar(v) || v === null, "strings, numbers, booleans or null");
 }
-var Segment = import_zod8.z.object({
+var Segment = import_zod9.z.object({
   id: Id,
-  name: import_zod8.z.string().min(1).max(120),
+  name: import_zod9.z.string().min(1).max(120),
   filter: SegmentFilter,
   /** Computed on read. */
-  contact_count: import_zod8.z.number().int().min(0),
+  contact_count: import_zod9.z.number().int().min(0),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var SegmentCreate = import_zod8.z.object({ name: import_zod8.z.string().min(1).max(120), filter: BoundedSegmentFilter });
-var SegmentPreviewRequest = import_zod8.z.object({ filter: BoundedSegmentFilter });
-var SegmentPreview = import_zod8.z.object({
-  contact_count: import_zod8.z.number().int().min(0),
+var SegmentCreate = import_zod9.z.object({ name: import_zod9.z.string().min(1).max(120), filter: BoundedSegmentFilter });
+var SegmentPreviewRequest = import_zod9.z.object({ filter: BoundedSegmentFilter });
+var SegmentPreview = import_zod9.z.object({
+  contact_count: import_zod9.z.number().int().min(0),
   /** Up to five matching contacts, for a human to sanity-check the filter. */
-  sample: import_zod8.z.array(import_zod8.z.object({ id: Id, email: Email })).max(5)
+  sample: import_zod9.z.array(import_zod9.z.object({ id: Id, email: Email })).max(5)
 });
-var MailingAudienceFromSegment = import_zod8.z.object({ segment_id: Id });
+var MailingAudienceFromSegment = import_zod9.z.object({ segment_id: Id });
 var SIGNUP_FORM_FIELDS = ["first_name", "last_name"];
 var HOSTED_PAGE_LOCALES = ["en", "de", "it", "fr", "es"];
-var SignupFormTranslation = import_zod8.z.object({
-  title: import_zod8.z.string().min(1).max(120),
-  consent_text: import_zod8.z.string().min(1).max(2e3)
+var SignupFormTranslation = import_zod9.z.object({
+  title: import_zod9.z.string().min(1).max(120),
+  consent_text: import_zod9.z.string().min(1).max(2e3)
 });
-var SignupForm = import_zod8.z.object({
+var SignupForm = import_zod9.z.object({
   id: Id,
-  name: import_zod8.z.string().min(1).max(120),
+  name: import_zod9.z.string().min(1).max(120),
   /** The heading of the hosted page. */
-  title: import_zod8.z.string().min(1).max(120),
+  title: import_zod9.z.string().min(1).max(120),
   /** What the person agrees to, shown above the button and recorded with the confirmation. */
-  consent_text: import_zod8.z.string().min(1).max(2e3),
-  translations: import_zod8.z.record(SignupFormTranslation),
-  topics: import_zod8.z.array(Slug).min(1),
-  tags: import_zod8.z.array(Slug),
+  consent_text: import_zod9.z.string().min(1).max(2e3),
+  translations: import_zod9.z.record(SignupFormTranslation),
+  topics: import_zod9.z.array(Slug).min(1),
+  tags: import_zod9.z.array(Slug),
   /** Fields shown besides email. */
-  fields: import_zod8.z.array(import_zod8.z.enum(SIGNUP_FORM_FIELDS)),
-  double_opt_in: import_zod8.z.literal(true),
+  fields: import_zod9.z.array(import_zod9.z.enum(SIGNUP_FORM_FIELDS)),
+  double_opt_in: import_zod9.z.literal(true),
   /** The provider the confirmation mail is sent through. */
   provider_id: Id,
   /**
@@ -1985,11 +2216,11 @@ var SignupForm = import_zod8.z.object({
    */
   confirmation_template_id: Id.nullable(),
   /** Where the person lands after confirming. Null shows the hosted confirmation page. */
-  redirect_url: import_zod8.z.string().url().nullable(),
+  redirect_url: import_zod9.z.string().url().nullable(),
   /** Origins allowed to embed the form and call the submission route from a browser. */
-  allowed_origins: import_zod8.z.array(import_zod8.z.string().url()).max(20),
+  allowed_origins: import_zod9.z.array(import_zod9.z.string().url()).max(20),
   /** Bumped on every change; recorded with each confirmation. */
-  version: import_zod8.z.number().int().min(1),
+  version: import_zod9.z.number().int().min(1),
   created_at: Timestamp,
   updated_at: Timestamp
 });
@@ -2004,56 +2235,56 @@ var SignupFormCreate = SignupForm.omit({
   tags: SignupForm.shape.tags.optional(),
   fields: SignupForm.shape.fields.optional(),
   confirmation_template_id: Id.nullable().optional(),
-  redirect_url: import_zod8.z.string().url().nullable().optional(),
+  redirect_url: import_zod9.z.string().url().nullable().optional(),
   allowed_origins: SignupForm.shape.allowed_origins.optional()
 });
-var SignupFormEmbed = import_zod8.z.object({
-  hosted_url: import_zod8.z.string().url(),
+var SignupFormEmbed = import_zod9.z.object({
+  hosted_url: import_zod9.z.string().url(),
   /** A plain HTML form posting to the hosted page; works without JavaScript. */
-  html: import_zod8.z.string(),
+  html: import_zod9.z.string(),
   /** A small optional script that adds the time check and submits in place. */
-  script_url: import_zod8.z.string().url(),
+  script_url: import_zod9.z.string().url(),
   /** Where a browser fetches a fresh `form_token` from (GET, public, CORS for `allowed_origins`). */
-  token_url: import_zod8.z.string().url()
+  token_url: import_zod9.z.string().url()
 });
-var SignupSubmission = import_zod8.z.object({
+var SignupSubmission = import_zod9.z.object({
   email: Email,
-  first_name: import_zod8.z.string().max(200).optional(),
-  last_name: import_zod8.z.string().max(200).optional(),
-  locale: import_zod8.z.string().min(2).max(35).optional(),
+  first_name: import_zod9.z.string().max(200).optional(),
+  last_name: import_zod9.z.string().max(200).optional(),
+  locale: import_zod9.z.string().min(2).max(35).optional(),
   /** Honeypot: must be empty. */
-  website: import_zod8.z.string().max(0).optional(),
+  website: import_zod9.z.string().max(0).optional(),
   /**
    * The signed render time from the form's token URL: a submission sooner than a
    * human could fill the form, or long after, is refused.
    */
-  form_token: import_zod8.z.string().min(1).max(512)
+  form_token: import_zod9.z.string().min(1).max(512)
 });
 var IMPORT_STATUSES = ["uploaded", "validating", "validated", "committing", "completed", "failed", "cancelled"];
-var ImportStatus = import_zod8.z.enum(IMPORT_STATUSES);
+var ImportStatus = import_zod9.z.enum(IMPORT_STATUSES);
 var IMPORT_TERMINAL_STATUSES = ["completed", "failed", "cancelled"];
-var ImportColumnMapping = import_zod8.z.record(
-  import_zod8.z.string().regex(/^(email|external_id|first_name|last_name|locale|property:[A-Za-z0-9_.-]{1,64}|ignore)$/)
+var ImportColumnMapping = import_zod9.z.record(
+  import_zod9.z.string().regex(/^(email|external_id|first_name|last_name|locale|property:[A-Za-z0-9_.-]{1,64}|ignore)$/)
 );
 var IMPORT_FILE_FIELD = "file";
 var MAX_IMPORT_BYTES = 50 * 1024 * 1024;
 var MAX_IMPORT_ROWS = 2e5;
-var ImportMappingRequest = import_zod8.z.object({
+var ImportMappingRequest = import_zod9.z.object({
   /** CSV header -> contact field. Exactly one column maps to `email`. */
   mapping: ImportColumnMapping.refine(
     (m) => Object.values(m).filter((v) => v === "email").length === 1,
     "exactly one column maps to email"
   ),
-  topics: import_zod8.z.array(Slug).max(100),
-  tags: import_zod8.z.array(Slug).max(100),
+  topics: import_zod9.z.array(Slug).max(100),
+  tags: import_zod9.z.array(Slug).max(100),
   /** Existing contacts get the mapped fields overwritten; false only adds topics, tags and missing fields. */
-  update_existing: import_zod8.z.boolean().optional(),
+  update_existing: import_zod9.z.boolean().optional(),
   /** The importer states the people consented; the service records who said so and when. */
-  consent_confirmed: import_zod8.z.literal(true)
+  consent_confirmed: import_zod9.z.literal(true)
 });
-var ImportCommitRequest = import_zod8.z.object({ mapping_version: import_zod8.z.number().int().min(1) });
+var ImportCommitRequest = import_zod9.z.object({ mapping_version: import_zod9.z.number().int().min(1) });
 var IMPORT_ROW_OUTCOMES = ["created", "updated", "unchanged", "suppressed", "skipped"];
-var ImportRowOutcome = import_zod8.z.enum(IMPORT_ROW_OUTCOMES);
+var ImportRowOutcome = import_zod9.z.enum(IMPORT_ROW_OUTCOMES);
 var IMPORT_SKIP_REASONS = [
   "missing_email",
   "invalid_email",
@@ -2062,90 +2293,90 @@ var IMPORT_SKIP_REASONS = [
   "external_id_conflict",
   "wrong_column_count"
 ];
-var ImportSkipReason = import_zod8.z.enum(IMPORT_SKIP_REASONS);
-var ImportReport = import_zod8.z.object({
-  created: import_zod8.z.number().int().min(0),
-  updated: import_zod8.z.number().int().min(0),
-  unchanged: import_zod8.z.number().int().min(0),
-  suppressed: import_zod8.z.number().int().min(0),
-  skipped: import_zod8.z.number().int().min(0),
-  skipped_by_reason: import_zod8.z.record(ImportSkipReason, import_zod8.z.number().int().min(0)),
+var ImportSkipReason = import_zod9.z.enum(IMPORT_SKIP_REASONS);
+var ImportReport = import_zod9.z.object({
+  created: import_zod9.z.number().int().min(0),
+  updated: import_zod9.z.number().int().min(0),
+  unchanged: import_zod9.z.number().int().min(0),
+  suppressed: import_zod9.z.number().int().min(0),
+  skipped: import_zod9.z.number().int().min(0),
+  skipped_by_reason: import_zod9.z.record(ImportSkipReason, import_zod9.z.number().int().min(0)),
   /** Rows whose contact was subscribed without some topic, because the address is blocked for it. */
-  topics_withheld: import_zod8.z.number().int().min(0)
+  topics_withheld: import_zod9.z.number().int().min(0)
 });
-var ImportJob = import_zod8.z.object({
+var ImportJob = import_zod9.z.object({
   id: Id,
   status: ImportStatus,
-  file_name: import_zod8.z.string().max(255).nullable(),
-  file_bytes: import_zod8.z.number().int().min(0),
-  total_rows: import_zod8.z.number().int().min(0),
+  file_name: import_zod9.z.string().max(255).nullable(),
+  file_bytes: import_zod9.z.number().int().min(0),
+  total_rows: import_zod9.z.number().int().min(0),
   /** The header row, as in the file. */
-  columns: import_zod8.z.array(import_zod8.z.string()),
+  columns: import_zod9.z.array(import_zod9.z.string()),
   /** The first rows, for the mapping screen. */
-  sample: import_zod8.z.array(import_zod8.z.array(import_zod8.z.string())).max(5),
+  sample: import_zod9.z.array(import_zod9.z.array(import_zod9.z.string())).max(5),
   /** A mapping guessed from the headers, for the mapping screen to start from. */
   suggested_mapping: ImportColumnMapping,
   mapping: ImportColumnMapping.nullable(),
-  mapping_version: import_zod8.z.number().int().min(0),
-  topics: import_zod8.z.array(Slug),
-  tags: import_zod8.z.array(Slug),
-  update_existing: import_zod8.z.boolean(),
+  mapping_version: import_zod9.z.number().int().min(0),
+  topics: import_zod9.z.array(Slug),
+  tags: import_zod9.z.array(Slug),
+  update_existing: import_zod9.z.boolean(),
   /** The dry run of the current mapping; null before one finished. */
   dry_run: ImportReport.nullable(),
   /** What the commit has written so far; null before it started. */
   result: ImportReport.nullable(),
   /** Rows the current phase (dry run or commit) has processed. */
-  processed_rows: import_zod8.z.number().int().min(0),
+  processed_rows: import_zod9.z.number().int().min(0),
   /** Why a `failed` import failed. */
-  error: import_zod8.z.string().nullable(),
+  error: import_zod9.z.string().nullable(),
   created_at: Timestamp,
   updated_at: Timestamp,
   finished_at: Timestamp.nullable()
 });
-var ImportRow = import_zod8.z.object({
+var ImportRow = import_zod9.z.object({
   /** The line in the file, 1 being the first line after the header. */
-  row: import_zod8.z.number().int().min(1),
-  email: import_zod8.z.string().nullable(),
+  row: import_zod9.z.number().int().min(1),
+  email: import_zod9.z.string().nullable(),
   outcome: ImportRowOutcome,
   reason: ImportSkipReason.nullable(),
   /** A human explanation for a skipped row (which value, which column). */
-  message: import_zod8.z.string().nullable(),
+  message: import_zod9.z.string().nullable(),
   contact_id: Id.nullable()
 });
 var ImportRowListQuery = PageQuery.extend({ outcome: ImportRowOutcome.optional() });
-var MailingScheduleRequest = import_zod8.z.object({ send_at: Timestamp });
-var TrackingSettings = import_zod8.z.object({ opens: import_zod8.z.boolean(), clicks: import_zod8.z.boolean() });
-var VariantAnalytics = import_zod8.z.object({
-  key: import_zod8.z.string(),
-  sent: import_zod8.z.number().int().min(0),
-  unique_opens: import_zod8.z.number().int().min(0).nullable(),
-  unique_clicks: import_zod8.z.number().int().min(0).nullable()
-});
-var MailingAnalytics = import_zod8.z.object({
+var MailingScheduleRequest = import_zod9.z.object({ send_at: Timestamp });
+var TrackingSettings = import_zod9.z.object({ opens: import_zod9.z.boolean(), clicks: import_zod9.z.boolean() });
+var VariantAnalytics = import_zod9.z.object({
+  key: import_zod9.z.string(),
+  sent: import_zod9.z.number().int().min(0),
+  unique_opens: import_zod9.z.number().int().min(0).nullable(),
+  unique_clicks: import_zod9.z.number().int().min(0).nullable()
+});
+var MailingAnalytics = import_zod9.z.object({
   mailing_id: Id,
   counts: MailingCounts,
   /** What was tracked for this mailing, fixed when it started; null before it started. */
   tracking: TrackingSettings.nullable(),
   /** Unique recipients with a human open. Null when opens were not tracked. */
-  unique_opens: import_zod8.z.number().int().min(0).nullable(),
+  unique_opens: import_zod9.z.number().int().min(0).nullable(),
   /**
    * Recipients whose only opens came from Apple Mail Privacy Protection, which
    * loads every image on delivery: counted apart, never as human opens.
    */
-  apple_mpp_opens: import_zod8.z.number().int().min(0).nullable(),
+  apple_mpp_opens: import_zod9.z.number().int().min(0).nullable(),
   /** Opens and clicks from security scanners and prefetchers, filtered out of the unique counts. */
-  machine_events: import_zod8.z.number().int().min(0).nullable(),
-  unique_clicks: import_zod8.z.number().int().min(0).nullable(),
-  unsubscribes: import_zod8.z.number().int().min(0),
-  bounces: import_zod8.z.number().int().min(0),
-  complaints: import_zod8.z.number().int().min(0),
-  links: import_zod8.z.array(import_zod8.z.object({ url: import_zod8.z.string(), unique_clicks: import_zod8.z.number().int().min(0) })).nullable(),
-  variants: import_zod8.z.array(VariantAnalytics).nullable()
+  machine_events: import_zod9.z.number().int().min(0).nullable(),
+  unique_clicks: import_zod9.z.number().int().min(0).nullable(),
+  unsubscribes: import_zod9.z.number().int().min(0),
+  bounces: import_zod9.z.number().int().min(0),
+  complaints: import_zod9.z.number().int().min(0),
+  links: import_zod9.z.array(import_zod9.z.object({ url: import_zod9.z.string(), unique_clicks: import_zod9.z.number().int().min(0) })).nullable(),
+  variants: import_zod9.z.array(VariantAnalytics).nullable()
 });
 
 // src/automations.ts
 var AUTOMATION_FILTER_FIELD_PATTERN = /^(email|first_name|last_name|locale|created_at|tag|topic|segment|engagement:(opened|clicked)|step:(opened|clicked)|property:[A-Za-z0-9_.-]{1,64}|event:[A-Za-z0-9_.-]{1,64})$/;
-var AutomationFilterField = import_zod9.z.string().regex(AUTOMATION_FILTER_FIELD_PATTERN, "unknown filter field");
+var AutomationFilterField = import_zod10.z.string().regex(AUTOMATION_FILTER_FIELD_PATTERN, "unknown filter field");
 var AUTOMATION_FILTER_FIELD_OPERATORS = {
   ...FILTER_FIELD_OPERATORS,
   segment: ["eq", "neq", "in", "not_in"],
@@ -2155,18 +2386,18 @@ var AUTOMATION_FILTER_FIELD_OPERATORS = {
   step: ["eq", "neq"]
 };
 var automationFilterFamily = filterFieldFamily;
-var AutomationFilterCondition = import_zod9.z.object({ field: AutomationFilterField, op: FilterOperator, value: JsonValue.optional() }).strict().refine((c) => (c.op === "exists" || c.op === "not_exists") === (c.value === void 0), {
+var AutomationFilterCondition = import_zod10.z.object({ field: AutomationFilterField, op: FilterOperator, value: JsonValue.optional() }).strict().refine((c) => (c.op === "exists" || c.op === "not_exists") === (c.value === void 0), {
   message: "exists and not_exists take no value; every other operator needs one",
   path: ["value"]
 }).refine((c) => c.op !== "in" && c.op !== "not_in" || Array.isArray(c.value), {
   message: "in and not_in take an array",
   path: ["value"]
 });
-var AutomationFilter = import_zod9.z.lazy(
-  () => import_zod9.z.union([
-    import_zod9.z.object({ and: import_zod9.z.array(AutomationFilter).min(1).max(50) }).strict(),
-    import_zod9.z.object({ or: import_zod9.z.array(AutomationFilter).min(1).max(50) }).strict(),
-    import_zod9.z.object({ not: AutomationFilter }).strict(),
+var AutomationFilter = import_zod10.z.lazy(
+  () => import_zod10.z.union([
+    import_zod10.z.object({ and: import_zod10.z.array(AutomationFilter).min(1).max(50) }).strict(),
+    import_zod10.z.object({ or: import_zod10.z.array(AutomationFilter).min(1).max(50) }).strict(),
+    import_zod10.z.object({ not: AutomationFilter }).strict(),
     AutomationFilterCondition
   ])
 );
@@ -2179,20 +2410,20 @@ function filterConditions(filter) {
   if ("not" in filter) return filterConditions(filter.not);
   return [filter];
 }
-var StepId = import_zod9.z.string().regex(/^[A-Za-z0-9_-]{1,64}$/, "letters, digits, underscore and hyphen, 1 to 64");
-var TimeOfDay = import_zod9.z.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "HH:MM in 24 hours");
-var Weekday = import_zod9.z.number().int().min(0).max(6);
-var TimezoneName = import_zod9.z.string().min(1).max(64).regex(/^(UTC|[A-Za-z][A-Za-z0-9_+-]*(?:\/[A-Za-z0-9_+-]+)+)$/, "an IANA time zone name such as Europe/Berlin");
+var StepId = import_zod10.z.string().regex(/^[A-Za-z0-9_-]{1,64}$/, "letters, digits, underscore and hyphen, 1 to 64");
+var TimeOfDay = import_zod10.z.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "HH:MM in 24 hours");
+var Weekday = import_zod10.z.number().int().min(0).max(6);
+var TimezoneName = import_zod10.z.string().min(1).max(64).regex(/^(UTC|[A-Za-z][A-Za-z0-9_+-]*(?:\/[A-Za-z0-9_+-]+)+)$/, "an IANA time zone name such as Europe/Berlin");
 var MAX_DELAY_SECONDS = 365 * 24 * 60 * 60;
-var DateOnly = import_zod9.z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "a calendar date such as 2026-09-20").refine((v) => {
+var DateOnly = import_zod10.z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "a calendar date such as 2026-09-20").refine((v) => {
   const [y, m, d] = v.split("-").map(Number);
   const t = new Date(Date.UTC(y, m - 1, d));
   return t.getUTCFullYear() === y && t.getUTCMonth() + 1 === m && t.getUTCDate() === d;
 }, "a real calendar date");
-var OffsetDays = import_zod9.z.number().int().min(-365).max(365);
+var OffsetDays = import_zod10.z.number().int().min(-365).max(365);
 var DATE_PASSED_ANSWERS = ["skip", "stop", "continue"];
-var DatePassedAnswer = import_zod9.z.enum(DATE_PASSED_ANSWERS);
-var EventName = import_zod9.z.string().regex(/^[A-Za-z0-9][A-Za-z0-9_.:-]{0,79}$/, "letters, digits, dot, colon, underscore and hyphen, 1 to 80");
+var DatePassedAnswer = import_zod10.z.enum(DATE_PASSED_ANSWERS);
+var EventName = import_zod10.z.string().regex(/^[A-Za-z0-9][A-Za-z0-9_.:-]{0,79}$/, "letters, digits, dot, colon, underscore and hyphen, 1 to 80");
 var AUTOMATION_TRIGGER_KINDS = [
   "topic_subscribed",
   "form_confirmed",
@@ -2205,17 +2436,17 @@ var AUTOMATION_TRIGGER_KINDS = [
   "segment_entered",
   "link_clicked"
 ];
-var AutomationTriggerKind = import_zod9.z.enum(AUTOMATION_TRIGGER_KINDS);
+var AutomationTriggerKind = import_zod10.z.enum(AUTOMATION_TRIGGER_KINDS);
 var exclude = { exclude: BoundedAutomationFilter.nullish() };
-var AutomationTrigger = import_zod9.z.discriminatedUnion("kind", [
-  import_zod9.z.object({ kind: import_zod9.z.literal("topic_subscribed"), topic: Slug, ...exclude }).strict(),
-  import_zod9.z.object({ kind: import_zod9.z.literal("form_confirmed"), form_id: Id, ...exclude }).strict(),
-  import_zod9.z.object({ kind: import_zod9.z.literal("tag_added"), tag: Slug, ...exclude }).strict(),
+var AutomationTrigger = import_zod10.z.discriminatedUnion("kind", [
+  import_zod10.z.object({ kind: import_zod10.z.literal("topic_subscribed"), topic: Slug, ...exclude }).strict(),
+  import_zod10.z.object({ kind: import_zod10.z.literal("form_confirmed"), form_id: Id, ...exclude }).strict(),
+  import_zod10.z.object({ kind: import_zod10.z.literal("tag_added"), tag: Slug, ...exclude }).strict(),
   /** `to` given: only a change that lands on this value fires. Absent: any change of the key. */
-  import_zod9.z.object({ kind: import_zod9.z.literal("property_changed"), key: ContactPropertyKey, to: JsonValue.optional(), ...exclude }).strict(),
+  import_zod10.z.object({ kind: import_zod10.z.literal("property_changed"), key: ContactPropertyKey, to: JsonValue.optional(), ...exclude }).strict(),
   /** `where` filters the event's own data, so only `event:<key>` leaves belong in it. */
-  import_zod9.z.object({ kind: import_zod9.z.literal("event"), name: EventName, where: BoundedAutomationFilter.nullish(), ...exclude }).strict(),
-  import_zod9.z.object({ kind: import_zod9.z.literal("manual"), ...exclude }).strict(),
+  import_zod10.z.object({ kind: import_zod10.z.literal("event"), name: EventName, where: BoundedAutomationFilter.nullish(), ...exclude }).strict(),
+  import_zod10.z.object({ kind: import_zod10.z.literal("manual"), ...exclude }).strict(),
   /**
    * Every year on a date the contact carries: a birthday, a joining date, a
    * renewal. `offset_days` moves it ("three days before"), `at` is the wall
@@ -2225,8 +2456,8 @@ var AutomationTrigger = import_zod9.z.discriminatedUnion("kind", [
    * A 29 February date fires on 1 March in a year that has no 29 February, so
    * nobody is skipped every fourth year.
    */
-  import_zod9.z.object({
-    kind: import_zod9.z.literal("date_anniversary"),
+  import_zod10.z.object({
+    kind: import_zod10.z.literal("date_anniversary"),
     key: ContactPropertyKey,
     offset_days: OffsetDays,
     at: TimeOfDay,
@@ -2238,8 +2469,8 @@ var AutomationTrigger = import_zod9.z.discriminatedUnion("kind", [
    * not ask about a segment or about an event's data: there is no event, and a
    * segment is its own trigger kind.
    */
-  import_zod9.z.object({
-    kind: import_zod9.z.literal("exact_date"),
+  import_zod10.z.object({
+    kind: import_zod10.z.literal("exact_date"),
     on: DateOnly,
     at: TimeOfDay,
     where: BoundedAutomationFilter.nullish(),
@@ -2258,7 +2489,7 @@ var AutomationTrigger = import_zod9.z.discriminatedUnion("kind", [
    * already exists. Entering those people as well is the publish dialog's
    * backfill question, answered by a person rather than by the sweep.
    */
-  import_zod9.z.object({ kind: import_zod9.z.literal("segment_entered"), segment_id: Id, ...exclude }).strict(),
+  import_zod10.z.object({ kind: import_zod10.z.literal("segment_entered"), segment_id: Id, ...exclude }).strict(),
   /**
    * S4. When somebody clicks a link in a mailing that has already gone out.
    *
@@ -2268,7 +2499,7 @@ var AutomationTrigger = import_zod9.z.discriminatedUnion("kind", [
    * tracking off there is no click to hear about, so the validator refuses it
    * rather than leaving an automation that can never fire.
    */
-  import_zod9.z.object({ kind: import_zod9.z.literal("link_clicked"), mailing_id: Id, url: import_zod9.z.string().min(1).max(2048).optional(), ...exclude }).strict()
+  import_zod10.z.object({ kind: import_zod10.z.literal("link_clicked"), mailing_id: Id, url: import_zod10.z.string().min(1).max(2048).optional(), ...exclude }).strict()
 ]);
 var AUTOMATION_DATE_TRIGGER_KINDS = ["date_anniversary", "exact_date"];
 var MAX_TRIGGERS = 10;
@@ -2287,45 +2518,45 @@ var AUTOMATION_STEP_KINDS = [
   "webhook",
   "notify"
 ];
-var AutomationStepKind = import_zod9.z.enum(AUTOMATION_STEP_KINDS);
+var AutomationStepKind = import_zod10.z.enum(AUTOMATION_STEP_KINDS);
 var next = { next: StepId.nullable() };
-var Unchosen = import_zod9.z.literal("");
-var DraftSlug = import_zod9.z.union([Slug, Unchosen]);
-var DraftPropertyKey = import_zod9.z.union([ContactPropertyKey, Unchosen]);
-var label2 = { label: import_zod9.z.string().max(120).nullish() };
-var EmailStepLanguage = import_zod9.z.object({
-  subject: import_zod9.z.string().min(1).max(998),
-  preheader: import_zod9.z.string().max(500).nullable(),
+var Unchosen = import_zod10.z.literal("");
+var DraftSlug = import_zod10.z.union([Slug, Unchosen]);
+var DraftPropertyKey = import_zod10.z.union([ContactPropertyKey, Unchosen]);
+var label2 = { label: import_zod10.z.string().max(120).nullish() };
+var EmailStepLanguage = import_zod10.z.object({
+  subject: import_zod10.z.string().min(1).max(998),
+  preheader: import_zod10.z.string().max(500).nullable(),
   document: TemplateDocument,
   /** This language's insertions, its texts over the template's structure (every text present). */
   insertions: Insertions.nullish()
 }).strict();
-var EmailStep = import_zod9.z.object({
-  kind: import_zod9.z.literal("email"),
+var EmailStep = import_zod10.z.object({
+  kind: import_zod10.z.literal("email"),
   ...label2,
   ...next,
   template_id: Id.nullish(),
   document: TemplateDocument.nullish(),
   /** Empty while the step is being written, or when its template has a subject; else `not_chosen` refuses to publish it. */
-  subject: import_zod9.z.string().max(998),
-  preheader: import_zod9.z.string().max(500).nullish(),
+  subject: import_zod10.z.string().max(998),
+  preheader: import_zod10.z.string().max(500).nullish(),
   locale: LocaleTag.nullish(),
-  languages: import_zod9.z.record(LocaleTag, EmailStepLanguage).nullish(),
+  languages: import_zod10.z.record(LocaleTag, EmailStepLanguage).nullish(),
   /** The main language's insertions, snapshot from the template when the automation is published. */
   insertions: Insertions.nullish()
 }).strict();
-var DelayStep = import_zod9.z.object({
-  kind: import_zod9.z.literal("delay"),
+var DelayStep = import_zod10.z.object({
+  kind: import_zod10.z.literal("delay"),
   ...label2,
   ...next,
-  wait: import_zod9.z.discriminatedUnion("mode", [
-    import_zod9.z.object({ mode: import_zod9.z.literal("duration"), seconds: import_zod9.z.number().int().min(1).max(MAX_DELAY_SECONDS) }).strict(),
-    import_zod9.z.object({ mode: import_zod9.z.literal("time_of_day"), at: TimeOfDay }).strict(),
-    import_zod9.z.object({ mode: import_zod9.z.literal("weekday"), weekday: Weekday, at: TimeOfDay }).strict(),
+  wait: import_zod10.z.discriminatedUnion("mode", [
+    import_zod10.z.object({ mode: import_zod10.z.literal("duration"), seconds: import_zod10.z.number().int().min(1).max(MAX_DELAY_SECONDS) }).strict(),
+    import_zod10.z.object({ mode: import_zod10.z.literal("time_of_day"), at: TimeOfDay }).strict(),
+    import_zod10.z.object({ mode: import_zod10.z.literal("weekday"), weekday: Weekday, at: TimeOfDay }).strict(),
     /** A fixed day has no next occurrence, so `continue` is not one of its answers. */
-    import_zod9.z.object({ mode: import_zod9.z.literal("date"), on: DateOnly, at: TimeOfDay, passed: import_zod9.z.enum(["skip", "stop"]) }).strict(),
-    import_zod9.z.object({
-      mode: import_zod9.z.literal("date_property"),
+    import_zod10.z.object({ mode: import_zod10.z.literal("date"), on: DateOnly, at: TimeOfDay, passed: import_zod10.z.enum(["skip", "stop"]) }).strict(),
+    import_zod10.z.object({
+      mode: import_zod10.z.literal("date_property"),
       key: ContactPropertyKey,
       offset_days: OffsetDays,
       at: TimeOfDay,
@@ -2333,8 +2564,8 @@ var DelayStep = import_zod9.z.object({
     }).strict()
   ])
 }).strict();
-var ConditionStep = import_zod9.z.object({
-  kind: import_zod9.z.literal("condition"),
+var ConditionStep = import_zod10.z.object({
+  kind: import_zod10.z.literal("condition"),
   ...label2,
   filter: BoundedAutomationFilter,
   yes: StepId.nullable(),
@@ -2345,49 +2576,49 @@ var ConditionStep = import_zod9.z.object({
    * neither half means anything without the other: a window with no answer
    * for the end of it would be a silent decision.
    */
-  wait_for: import_zod9.z.object({ up_to_s: import_zod9.z.number().int().min(1).max(MAX_DELAY_SECONDS), on_timeout: import_zod9.z.enum(["yes", "no"]) }).strict().nullish()
+  wait_for: import_zod10.z.object({ up_to_s: import_zod10.z.number().int().min(1).max(MAX_DELAY_SECONDS), on_timeout: import_zod10.z.enum(["yes", "no"]) }).strict().nullish()
 }).strict();
-var SplitBranchKey = import_zod9.z.string().regex(/^[A-Za-z0-9_-]{1,32}$/, "letters, digits, underscore and hyphen, 1 to 32");
+var SplitBranchKey = import_zod10.z.string().regex(/^[A-Za-z0-9_-]{1,32}$/, "letters, digits, underscore and hyphen, 1 to 32");
 var MIN_SPLIT_BRANCHES = 2;
 var MAX_SPLIT_BRANCHES = 4;
-var SplitStep = import_zod9.z.object({
-  kind: import_zod9.z.literal("split"),
+var SplitStep = import_zod10.z.object({
+  kind: import_zod10.z.literal("split"),
   ...label2,
-  branches: import_zod9.z.array(
-    import_zod9.z.object({
+  branches: import_zod10.z.array(
+    import_zod10.z.object({
       key: SplitBranchKey,
       /** A whole percentage. Zero is allowed: a branch kept in the flow but switched off. */
-      weight: import_zod9.z.number().int().min(0).max(100),
+      weight: import_zod10.z.number().int().min(0).max(100),
       next: StepId.nullable()
     }).strict()
   ).min(MIN_SPLIT_BRANCHES).max(MAX_SPLIT_BRANCHES).refine((bs) => new Set(bs.map((b) => b.key)).size === bs.length, "each branch needs its own key").refine((bs) => bs.reduce((sum, b) => sum + b.weight, 0) === 100, "the weights have to come to 100")
 }).strict();
-var GotoStep = import_zod9.z.object({ kind: import_zod9.z.literal("goto"), ...label2, target: StepId.nullable() }).strict();
+var GotoStep = import_zod10.z.object({ kind: import_zod10.z.literal("goto"), ...label2, target: StepId.nullable() }).strict();
 var MAX_STEP_VISITS = 20;
-var WebhookStep = import_zod9.z.object({ kind: import_zod9.z.literal("webhook"), ...label2, ...next, endpoint_id: Id.nullable(), payload: JsonValue.nullish() }).strict();
-var NotifyRecipients = import_zod9.z.union([import_zod9.z.literal("owner"), import_zod9.z.literal("admins"), import_zod9.z.object({ member_id: Id }).strict()]);
-var NotifyStep = import_zod9.z.object({
-  kind: import_zod9.z.literal("notify"),
+var WebhookStep = import_zod10.z.object({ kind: import_zod10.z.literal("webhook"), ...label2, ...next, endpoint_id: Id.nullable(), payload: JsonValue.nullish() }).strict();
+var NotifyRecipients = import_zod10.z.union([import_zod10.z.literal("owner"), import_zod10.z.literal("admins"), import_zod10.z.object({ member_id: Id }).strict()]);
+var NotifyStep = import_zod10.z.object({
+  kind: import_zod10.z.literal("notify"),
   ...label2,
   ...next,
   to: NotifyRecipients,
   /** Empty while the step is being written; `not_chosen` refuses to publish it. */
-  subject: import_zod9.z.string().max(998),
-  body: import_zod9.z.string().max(1e4)
+  subject: import_zod10.z.string().max(998),
+  body: import_zod10.z.string().max(1e4)
 }).strict();
-var AutomationStep = import_zod9.z.discriminatedUnion("kind", [
+var AutomationStep = import_zod10.z.discriminatedUnion("kind", [
   EmailStep,
   DelayStep,
   ConditionStep,
-  import_zod9.z.object({ kind: import_zod9.z.literal("add_tag"), ...label2, ...next, tag: DraftSlug }).strict(),
-  import_zod9.z.object({ kind: import_zod9.z.literal("remove_tag"), ...label2, ...next, tag: DraftSlug }).strict(),
+  import_zod10.z.object({ kind: import_zod10.z.literal("add_tag"), ...label2, ...next, tag: DraftSlug }).strict(),
+  import_zod10.z.object({ kind: import_zod10.z.literal("remove_tag"), ...label2, ...next, tag: DraftSlug }).strict(),
   /** `value` null clears the property, as a contact upsert does. */
-  import_zod9.z.object({ kind: import_zod9.z.literal("set_property"), ...label2, ...next, key: DraftPropertyKey, value: JsonValue }).strict(),
+  import_zod10.z.object({ kind: import_zod10.z.literal("set_property"), ...label2, ...next, key: DraftPropertyKey, value: JsonValue }).strict(),
   /** Subscribing never lifts a suppression: the service checks that, not the flow. */
-  import_zod9.z.object({ kind: import_zod9.z.literal("subscribe_topic"), ...label2, ...next, topic: DraftSlug }).strict(),
+  import_zod10.z.object({ kind: import_zod10.z.literal("subscribe_topic"), ...label2, ...next, topic: DraftSlug }).strict(),
   /** `topic` unsubscribes from the automation's own topic, `all` from every topic. */
-  import_zod9.z.object({ kind: import_zod9.z.literal("unsubscribe"), ...label2, ...next, scope: import_zod9.z.enum(["topic", "all"]) }).strict(),
-  import_zod9.z.object({ kind: import_zod9.z.literal("exit"), ...label2 }).strict(),
+  import_zod10.z.object({ kind: import_zod10.z.literal("unsubscribe"), ...label2, ...next, scope: import_zod10.z.enum(["topic", "all"]) }).strict(),
+  import_zod10.z.object({ kind: import_zod10.z.literal("exit"), ...label2 }).strict(),
   SplitStep,
   GotoStep,
   WebhookStep,
@@ -2411,25 +2642,25 @@ function stepTargets(step) {
   }
 }
 var MAX_STEPS = 200;
-var AutomationFlow = import_zod9.z.object({
-  triggers: import_zod9.z.array(AutomationTrigger).max(MAX_TRIGGERS),
+var AutomationFlow = import_zod10.z.object({
+  triggers: import_zod10.z.array(AutomationTrigger).max(MAX_TRIGGERS),
   /** The first step. `null` is an empty flow. */
   entry: StepId.nullable(),
-  steps: import_zod9.z.record(StepId, AutomationStep)
+  steps: import_zod10.z.record(StepId, AutomationStep)
 }).strict();
 var emptyFlow = () => ({ triggers: [], entry: null, steps: {} });
-var QuietHours = import_zod9.z.object({
+var QuietHours = import_zod10.z.object({
   start: TimeOfDay,
   end: TimeOfDay,
-  weekdays: import_zod9.z.array(Weekday).min(1).max(7).nullish()
+  weekdays: import_zod10.z.array(Weekday).min(1).max(7).nullish()
 }).strict();
 var RE_ENTRY_MODES = ["off", "after_exit"];
-var ReEntryMode = import_zod9.z.enum(RE_ENTRY_MODES);
+var ReEntryMode = import_zod10.z.enum(RE_ENTRY_MODES);
 var MAX_RE_ENTRY_COOLDOWN_SECONDS = 365 * 24 * 60 * 60;
-var AutomationSettings = import_zod9.z.object({
+var AutomationSettings = import_zod10.z.object({
   re_entry: ReEntryMode,
   /** Seconds a person must wait after leaving before entering again. Only with `after_exit`. */
-  re_entry_cooldown_s: import_zod9.z.number().int().min(0).max(MAX_RE_ENTRY_COOLDOWN_SECONDS).nullish(),
+  re_entry_cooldown_s: import_zod10.z.number().int().min(0).max(MAX_RE_ENTRY_COOLDOWN_SECONDS).nullish(),
   quiet_hours: QuietHours.nullish(),
   /** Checked before every step; when it matches, the run ends. */
   exit_filter: BoundedAutomationFilter.nullish()
@@ -2487,18 +2718,18 @@ var AUTOMATION_ISSUE_CODES = [
   /** A one-off date that is already over everywhere on earth, so it would fire for nobody. */
   "date_in_the_past"
 ];
-var AutomationIssueCode = import_zod9.z.enum(AUTOMATION_ISSUE_CODES);
-var AutomationIssue = import_zod9.z.object({
+var AutomationIssueCode = import_zod10.z.enum(AUTOMATION_ISSUE_CODES);
+var AutomationIssue = import_zod10.z.object({
   code: AutomationIssueCode,
   /** The step the issue is about, when it is about one. */
   step_id: StepId.nullable(),
   /** Where inside the document, for the canvas to point at a field. */
-  path: import_zod9.z.array(import_zod9.z.union([import_zod9.z.string(), import_zod9.z.number()])),
-  message: import_zod9.z.string()
+  path: import_zod10.z.array(import_zod10.z.union([import_zod10.z.string(), import_zod10.z.number()])),
+  message: import_zod10.z.string()
 });
-var AutomationValidation = import_zod9.z.object({
-  ok: import_zod9.z.boolean(),
-  issues: import_zod9.z.array(AutomationIssue)
+var AutomationValidation = import_zod10.z.object({
+  ok: import_zod10.z.boolean(),
+  issues: import_zod10.z.array(AutomationIssue)
 });
 function validateAutomation(flow, settings, ctx) {
   const issues = [];
@@ -2889,7 +3120,7 @@ function cycles(flow) {
   return out.sort();
 }
 var AUTOMATION_STATUSES = ["draft", "active", "paused", "archived"];
-var AutomationStatus = import_zod9.z.enum(AUTOMATION_STATUSES);
+var AutomationStatus = import_zod10.z.enum(AUTOMATION_STATUSES);
 var AUTOMATION_END_REASONS = [
   "completed",
   "exit_filter",
@@ -2908,9 +3139,9 @@ var AUTOMATION_END_REASONS = [
   "ended_by_hand",
   "failed"
 ];
-var AutomationEndReason = import_zod9.z.enum(AUTOMATION_END_REASONS);
+var AutomationEndReason = import_zod10.z.enum(AUTOMATION_END_REASONS);
 var AUTOMATION_WAIT_REASONS = ["delay", "quiet_hours", "plan_limit", "sending", "condition"];
-var AutomationWaitReason = import_zod9.z.enum(AUTOMATION_WAIT_REASONS);
+var AutomationWaitReason = import_zod10.z.enum(AUTOMATION_WAIT_REASONS);
 var AUTOMATION_ENTRY_REFUSALS = [
   "already_inside",
   "re_entry_off",
@@ -2921,26 +3152,26 @@ var AUTOMATION_ENTRY_REFUSALS = [
   "not_active",
   "unknown_contact"
 ];
-var AutomationEntryRefusal = import_zod9.z.enum(AUTOMATION_ENTRY_REFUSALS);
-var AutomationCounts = import_zod9.z.object({
-  started: import_zod9.z.number().int().min(0),
-  in_progress: import_zod9.z.number().int().min(0),
-  completed: import_zod9.z.number().int().min(0),
-  exited: import_zod9.z.number().int().min(0),
-  failed: import_zod9.z.number().int().min(0)
-});
-var Automation = import_zod9.z.object({
+var AutomationEntryRefusal = import_zod10.z.enum(AUTOMATION_ENTRY_REFUSALS);
+var AutomationCounts = import_zod10.z.object({
+  started: import_zod10.z.number().int().min(0),
+  in_progress: import_zod10.z.number().int().min(0),
+  completed: import_zod10.z.number().int().min(0),
+  exited: import_zod10.z.number().int().min(0),
+  failed: import_zod10.z.number().int().min(0)
+});
+var Automation = import_zod10.z.object({
   id: Id,
-  name: import_zod9.z.string().min(1).max(200),
+  name: import_zod10.z.string().min(1).max(200),
   status: AutomationStatus,
   /** Every automation sends under one topic; there are no transactional automations. */
   topic: Slug,
   provider_id: Id.nullable(),
   settings: AutomationSettings,
   /** The flow people are running through, null while the automation has never been published. */
-  published_version: import_zod9.z.number().int().min(1).nullable(),
+  published_version: import_zod10.z.number().int().min(1).nullable(),
   /** The flow being edited. Increments on every save, like a template's version. */
-  draft_version: import_zod9.z.number().int().min(1),
+  draft_version: import_zod10.z.number().int().min(1),
   counts: AutomationCounts,
   created_at: Timestamp,
   updated_at: Timestamp,
@@ -2953,16 +3184,16 @@ var AutomationWithFlow = Automation.extend({
   published_flow: AutomationFlow.nullable()
 });
 var AutomationSummary = Automation;
-var AutomationCreate = import_zod9.z.object({
-  name: import_zod9.z.string().min(1).max(200),
+var AutomationCreate = import_zod10.z.object({
+  name: import_zod10.z.string().min(1).max(200),
   topic: Slug,
   provider_id: Id.optional(),
   flow: AutomationFlow.optional(),
   settings: AutomationSettings.partial().optional()
 });
-var AutomationUpdate = import_zod9.z.object({
-  base_version: import_zod9.z.number().int().min(1),
-  name: import_zod9.z.string().min(1).max(200).optional(),
+var AutomationUpdate = import_zod10.z.object({
+  base_version: import_zod10.z.number().int().min(1),
+  name: import_zod10.z.string().min(1).max(200).optional(),
   topic: Slug.optional(),
   provider_id: Id.optional(),
   flow: AutomationFlow.optional(),
@@ -2975,42 +3206,42 @@ var AutomationListQuery = PageQuery.extend({
   status: AutomationStatus.optional(),
   topic: Slug.optional()
 });
-var AutomationPublishRequest = import_zod9.z.object({
+var AutomationPublishRequest = import_zod10.z.object({
   /**
    * Answer what this publish would do and change nothing, whatever the flow
    * looks like. Without it a publish that has no issues and moves nobody
    * simply goes ahead, which is right for an API caller and wrong for a
    * dialog that is only showing somebody what they are about to do.
    */
-  dry_run: import_zod9.z.boolean().optional(),
-  confirm: import_zod9.z.boolean().optional(),
+  dry_run: import_zod10.z.boolean().optional(),
+  confirm: import_zod10.z.boolean().optional(),
   /** Per removed step: the step its waiting runs move to, or null to end them. */
-  moves: import_zod9.z.record(StepId, StepId.nullable()).optional(),
+  moves: import_zod10.z.record(StepId, StepId.nullable()).optional(),
   /** Also enter everyone who matches a trigger's condition right now. */
-  backfill: import_zod9.z.boolean().optional()
+  backfill: import_zod10.z.boolean().optional()
 }).strict();
-var AutomationPublishMove = import_zod9.z.object({
+var AutomationPublishMove = import_zod10.z.object({
   step_id: StepId,
   /** Why the step's people have to move: it is gone, or its delay changed. */
-  change: import_zod9.z.enum(["removed", "delay_changed", "kind_changed"]),
-  waiting: import_zod9.z.number().int().min(0),
+  change: import_zod10.z.enum(["removed", "delay_changed", "kind_changed"]),
+  waiting: import_zod10.z.number().int().min(0),
   /** Where they go: a step id, or null to end their runs with `step_removed`. */
   destination: StepId.nullable()
 });
-var AutomationPublishResult = import_zod9.z.object({
-  published: import_zod9.z.boolean(),
+var AutomationPublishResult = import_zod10.z.object({
+  published: import_zod10.z.boolean(),
   automation: Automation,
   /** Empty when nothing has to move; non-empty and `published` false asks for a confirmation. */
-  moves: import_zod9.z.array(AutomationPublishMove),
+  moves: import_zod10.z.array(AutomationPublishMove),
   /** How many people the backfill entered, or would enter when it is not confirmed. */
-  backfill: import_zod9.z.number().int().min(0),
-  issues: import_zod9.z.array(AutomationIssue)
-});
-var AutomationDuplicateRequest = import_zod9.z.object({ name: import_zod9.z.string().min(1).max(200).optional() }).strict();
-var AutomationEnrollRequest = import_zod9.z.object({
-  contact_ids: import_zod9.z.array(Id).min(1).max(1e3).optional(),
-  external_ids: import_zod9.z.array(import_zod9.z.string().min(1).max(255)).min(1).max(1e3).optional(),
-  emails: import_zod9.z.array(Email).min(1).max(1e3).optional(),
+  backfill: import_zod10.z.number().int().min(0),
+  issues: import_zod10.z.array(AutomationIssue)
+});
+var AutomationDuplicateRequest = import_zod10.z.object({ name: import_zod10.z.string().min(1).max(200).optional() }).strict();
+var AutomationEnrollRequest = import_zod10.z.object({
+  contact_ids: import_zod10.z.array(Id).min(1).max(1e3).optional(),
+  external_ids: import_zod10.z.array(import_zod10.z.string().min(1).max(255)).min(1).max(1e3).optional(),
+  emails: import_zod10.z.array(Email).min(1).max(1e3).optional(),
   segment_id: Id.optional(),
   /** Where to start them; the flow's entry step by default. */
   step_id: StepId.optional()
@@ -3018,34 +3249,34 @@ var AutomationEnrollRequest = import_zod9.z.object({
   (v) => [v.contact_ids, v.external_ids, v.emails, v.segment_id].filter((x) => x !== void 0).length === 1,
   "name the people exactly one way: contact_ids, external_ids, emails or segment_id"
 );
-var AutomationEnrollment = import_zod9.z.object({
+var AutomationEnrollment = import_zod10.z.object({
   contact_id: Id.nullable(),
   email: Email.nullable(),
-  external_id: import_zod9.z.string().nullable(),
-  entered: import_zod9.z.boolean(),
+  external_id: import_zod10.z.string().nullable(),
+  entered: import_zod10.z.boolean(),
   run_id: Id.nullable(),
   reason: AutomationEntryRefusal.nullable()
 });
-var AutomationEnrollResult = import_zod9.z.object({
-  entered: import_zod9.z.number().int().min(0),
-  refused: import_zod9.z.number().int().min(0),
-  results: import_zod9.z.array(AutomationEnrollment)
+var AutomationEnrollResult = import_zod10.z.object({
+  entered: import_zod10.z.number().int().min(0),
+  refused: import_zod10.z.number().int().min(0),
+  results: import_zod10.z.array(AutomationEnrollment)
 });
-var AutomationRunStatus = import_zod9.z.enum(["active", "waiting", "completed", "exited", "failed"]);
-var AutomationRun = import_zod9.z.object({
+var AutomationRunStatus = import_zod10.z.enum(["active", "waiting", "completed", "exited", "failed"]);
+var AutomationRun = import_zod10.z.object({
   id: Id,
   automation_id: Id,
   contact_id: Id,
   email: Email,
-  external_id: import_zod9.z.string().nullable(),
-  version: import_zod9.z.number().int().min(1),
+  external_id: import_zod10.z.string().nullable(),
+  version: import_zod10.z.number().int().min(1),
   status: AutomationRunStatus,
   current_step_id: StepId.nullable(),
   next_action_at: Timestamp.nullable(),
   wait_reason: AutomationWaitReason.nullable(),
-  end_reason: import_zod9.z.string().nullable(),
+  end_reason: import_zod10.z.string().nullable(),
   /** What went wrong the last time this run tried to take its step, null otherwise. */
-  last_error: import_zod9.z.string().nullable(),
+  last_error: import_zod10.z.string().nullable(),
   entered_at: Timestamp,
   ended_at: Timestamp.nullable()
 });
@@ -3055,13 +3286,13 @@ var AutomationRunListQuery = PageQuery.extend({
   contact_id: Id.optional()
 });
 var ContactAutomationRun = AutomationRun.extend({
-  automation: import_zod9.z.object({ id: Id, name: import_zod9.z.string(), status: AutomationStatus })
+  automation: import_zod10.z.object({ id: Id, name: import_zod10.z.string(), status: AutomationStatus })
 });
 var ContactAutomationListQuery = PageQuery.extend({ status: AutomationRunStatus.optional() });
-var AutomationStepExecution = import_zod9.z.object({
+var AutomationStepExecution = import_zod10.z.object({
   step_id: StepId,
   step_kind: AutomationStepKind,
-  visit: import_zod9.z.number().int().min(1),
+  visit: import_zod10.z.number().int().min(1),
   started_at: Timestamp,
   finished_at: Timestamp.nullable(),
   /**
@@ -3073,48 +3304,48 @@ var AutomationStepExecution = import_zod9.z.object({
    */
   outcome: Properties
 });
-var AutomationJourney = import_zod9.z.object({
+var AutomationJourney = import_zod10.z.object({
   run: AutomationRun,
-  steps: import_zod9.z.array(AutomationStepExecution)
+  steps: import_zod10.z.array(AutomationStepExecution)
 });
-var AutomationStepReport = import_zod9.z.object({
+var AutomationStepReport = import_zod10.z.object({
   step_id: StepId,
   step_kind: AutomationStepKind,
-  reached: import_zod9.z.number().int().min(0),
-  waiting: import_zod9.z.number().int().min(0),
-  passed: import_zod9.z.number().int().min(0),
+  reached: import_zod10.z.number().int().min(0),
+  waiting: import_zod10.z.number().int().min(0),
+  passed: import_zod10.z.number().int().min(0),
   /** Per branch, for a condition: how many took `yes` and how many `no`. */
-  branches: import_zod9.z.record(import_zod9.z.number().int().min(0)),
+  branches: import_zod10.z.record(import_zod10.z.number().int().min(0)),
   /** The step mailing's id, for an email step of the published version. */
   mailing_id: Id.nullable()
 });
-var AutomationReport = import_zod9.z.object({
+var AutomationReport = import_zod10.z.object({
   counts: AutomationCounts,
   /** Why the people who left did: `AutomationEndReason` to a count. */
-  end_reasons: import_zod9.z.record(import_zod9.z.number().int().min(0)),
+  end_reasons: import_zod10.z.record(import_zod10.z.number().int().min(0)),
   /**
    * Why people a trigger named did not enter: `AutomationEntryRefusal` to a
    * count. Without it a pause, an exclusion or a missing subscription would
    * turn people away invisibly.
    */
-  refusals: import_zod9.z.record(import_zod9.z.number().int().min(0)),
-  steps: import_zod9.z.array(AutomationStepReport)
-});
-var AutomationExitRunRequest = import_zod9.z.object({ reason: import_zod9.z.string().max(200).optional() }).strict();
-var AutomationRunParams = import_zod9.z.object({ id: Id, run_id: Id });
-var AutomationStepParams = import_zod9.z.object({ id: Id, step_id: StepId });
-var AutomationTestEmailRequest = import_zod9.z.object({ to: Email, merge: Properties.optional(), locale: LocaleTag.optional() }).strict();
-var AutomationValidateRequest = import_zod9.z.object({ flow: AutomationFlow.optional(), settings: AutomationSettings.partial().optional() }).strict();
-var EventCreate = import_zod9.z.object({
+  refusals: import_zod10.z.record(import_zod10.z.number().int().min(0)),
+  steps: import_zod10.z.array(AutomationStepReport)
+});
+var AutomationExitRunRequest = import_zod10.z.object({ reason: import_zod10.z.string().max(200).optional() }).strict();
+var AutomationRunParams = import_zod10.z.object({ id: Id, run_id: Id });
+var AutomationStepParams = import_zod10.z.object({ id: Id, step_id: StepId });
+var AutomationTestEmailRequest = import_zod10.z.object({ to: Email, merge: Properties.optional(), locale: LocaleTag.optional() }).strict();
+var AutomationValidateRequest = import_zod10.z.object({ flow: AutomationFlow.optional(), settings: AutomationSettings.partial().optional() }).strict();
+var EventCreate = import_zod10.z.object({
   name: EventName,
-  contact: import_zod9.z.object({ external_id: import_zod9.z.string().min(1).max(255).optional(), email: Email.optional(), id: Id.optional() }).refine((c) => [c.external_id, c.email, c.id].filter((x) => x !== void 0).length === 1, "name the contact exactly one way"),
+  contact: import_zod10.z.object({ external_id: import_zod10.z.string().min(1).max(255).optional(), email: Email.optional(), id: Id.optional() }).refine((c) => [c.external_id, c.email, c.id].filter((x) => x !== void 0).length === 1, "name the contact exactly one way"),
   data: Properties.optional(),
   occurred_at: Timestamp.optional(),
-  id: import_zod9.z.string().min(1).max(128).optional()
+  id: import_zod10.z.string().min(1).max(128).optional()
 }).strict();
-var Event = import_zod9.z.object({
+var Event = import_zod10.z.object({
   id: Id,
-  client_event_id: import_zod9.z.string().nullable(),
+  client_event_id: import_zod10.z.string().nullable(),
   name: EventName,
   contact_id: Id,
   data: Properties,
@@ -3125,7 +3356,7 @@ var Event = import_zod9.z.object({
    * hand. Each is then admitted or refused by the runtime on its own rules
    * (consent, exclusions, re-entry), which `automations.report` counts.
    */
-  entered: import_zod9.z.number().int().min(0)
+  entered: import_zod10.z.number().int().min(0)
 });
 var EventListQuery = PageQuery.extend({
   name: EventName.optional(),
@@ -3133,19 +3364,15 @@ var EventListQuery = PageQuery.extend({
 });
 
 // src/workspace.ts
-var CompanyId = import_zod10.z.string().min(1).max(64);
+var CompanyId = import_zod11.z.string().min(1).max(64);
 var ASSET_POLICIES = ["any", "service_only"];
-var AssetPolicy = import_zod10.z.enum(ASSET_POLICIES);
+var AssetPolicy = import_zod11.z.enum(ASSET_POLICIES);
 var MAX_ALLOWED_ASSET_HOSTS = 20;
-var AssetHost = import_zod10.z.string().trim().toLowerCase().min(1).max(253).regex(/^(?=.{1,253}(?::\d{1,5})?$)[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?(\.[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)+(:\d{1,5})?$/, "a host name such as example.com");
-var MAX_MERGE_DEFAULTS = 50;
-var MAX_MERGE_DEFAULT_LENGTH = 2e3;
-var MergeFieldName = import_zod10.z.string().regex(/^[a-z][a-z0-9_]*$/, "a merge-field name: lowercase letters, digits and underscores, starting with a letter").max(64);
-var MergeDefaultValue = import_zod10.z.union([import_zod10.z.string().max(MAX_MERGE_DEFAULT_LENGTH), import_zod10.z.number().finite(), import_zod10.z.boolean()]);
-var MergeDefaults = import_zod10.z.record(MergeFieldName, MergeDefaultValue).refine((m) => Object.keys(m).length <= MAX_MERGE_DEFAULTS, `at most ${MAX_MERGE_DEFAULTS} merge defaults`).refine((m) => !Object.keys(m).some((k) => k in RESERVED_MERGE_FIELDS), {
+var AssetHost = import_zod11.z.string().trim().toLowerCase().min(1).max(253).regex(/^(?=.{1,253}(?::\d{1,5})?$)[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?(\.[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)+(:\d{1,5})?$/, "a host name such as example.com");
+var MergeDefaults = import_zod11.z.record(MergeFieldName, MergeDefaultValue).refine((m) => Object.keys(m).length <= MAX_MERGE_DEFAULTS, `at most ${MAX_MERGE_DEFAULTS} merge defaults`).refine((m) => !Object.keys(m).some((k) => k in RESERVED_MERGE_FIELDS), {
   message: `a reserved merge field (${Object.keys(RESERVED_MERGE_FIELDS).join(", ")}) cannot have a workspace default`
 });
-var WorkspaceSettings = import_zod10.z.object({
+var WorkspaceSettings = import_zod11.z.object({
   /**
    * The workspace's main language (a {@link LocaleTag}, e.g. "de"): the main
    * language of a new template, and of the hosted pages when nothing else
@@ -3158,9 +3385,9 @@ var WorkspaceSettings = import_zod10.z.object({
    * each; the hosted pages are offered in those of them they support (English,
    * German, French, Italian, Spanish). The service stores canonical casing.
    */
-  locales: import_zod10.z.array(LocaleTag).min(1).max(20).refine((l) => new Set(l.map((t) => t.toLowerCase())).size === l.length, "a language appears twice"),
+  locales: import_zod11.z.array(LocaleTag).min(1).max(20).refine((l) => new Set(l.map((t) => t.toLowerCase())).size === l.length, "a language appears twice"),
   /** Open and click tracking. Off by default, opt-in per workspace. */
-  tracking_enabled: import_zod10.z.boolean(),
+  tracking_enabled: import_zod11.z.boolean(),
   /** Where images, stylesheets and fonts in a mail may load from. `any` by default. */
   asset_policy: AssetPolicy,
   /**
@@ -3168,7 +3395,7 @@ var WorkspaceSettings = import_zod10.z.object({
    * the workspace's website, typically. Empty by default. Ignored under `any`,
    * which allows everything already.
    */
-  allowed_asset_hosts: import_zod10.z.array(AssetHost).max(MAX_ALLOWED_ASSET_HOSTS),
+  allowed_asset_hosts: import_zod11.z.array(AssetHost).max(MAX_ALLOWED_ASSET_HOSTS),
   /** Merge values every mail of the workspace can use (see `MergeDefaults`). Empty by default. */
   merge_defaults: MergeDefaults,
   /**
@@ -3177,10 +3404,10 @@ var WorkspaceSettings = import_zod10.z.object({
    */
   default_timezone: TimezoneName.nullable()
 });
-var Workspace = import_zod10.z.object({
+var Workspace = import_zod11.z.object({
   id: Id,
   slug: Slug,
-  name: import_zod10.z.string().min(1).max(120),
+  name: import_zod11.z.string().min(1).max(120),
   settings: WorkspaceSettings,
   /**
    * The auth-brain company (tenant) the workspace was created for, or null for
@@ -3191,13 +3418,13 @@ var Workspace = import_zod10.z.object({
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var WorkspaceCreate = import_zod10.z.object({
+var WorkspaceCreate = import_zod11.z.object({
   slug: Slug,
-  name: import_zod10.z.string().min(1).max(120),
+  name: import_zod11.z.string().min(1).max(120),
   settings: WorkspaceSettings.partial().optional(),
-  owner: import_zod10.z.object({
+  owner: import_zod11.z.object({
     email: Email,
-    name: import_zod10.z.string().max(200).nullable().optional()
+    name: import_zod11.z.string().max(200).nullable().optional()
   }),
   /**
    * The signed-in person's active auth-brain company. The dashboard always
@@ -3207,49 +3434,49 @@ var WorkspaceCreate = import_zod10.z.object({
    */
   company_id: CompanyId.optional()
 });
-var WorkspaceUpdate = import_zod10.z.object({
-  name: import_zod10.z.string().min(1).max(120),
+var WorkspaceUpdate = import_zod11.z.object({
+  name: import_zod11.z.string().min(1).max(120),
   settings: WorkspaceSettings.partial()
 }).partial().refine((v) => Object.keys(v).length > 0, "at least one field");
-var WorkspaceMove = import_zod10.z.object({ company_id: CompanyId });
+var WorkspaceMove = import_zod11.z.object({ company_id: CompanyId });
 var MEMBER_ROLES = ["owner", "admin", "editor", "viewer"];
-var MemberRole = import_zod10.z.enum(MEMBER_ROLES);
+var MemberRole = import_zod11.z.enum(MEMBER_ROLES);
 var WorkspaceMembership = Workspace.extend({ role: MemberRole });
-var Member = import_zod10.z.object({
+var Member = import_zod11.z.object({
   id: Id,
   /** The person's auth-brain subject. */
-  subject: import_zod10.z.string().min(1).max(255),
+  subject: import_zod11.z.string().min(1).max(255),
   email: Email,
-  name: import_zod10.z.string().max(200).nullable(),
+  name: import_zod11.z.string().max(200).nullable(),
   role: MemberRole,
   created_at: Timestamp
 });
-var MemberCreate = import_zod10.z.object({
-  subject: import_zod10.z.string().min(1).max(255),
+var MemberCreate = import_zod11.z.object({
+  subject: import_zod11.z.string().min(1).max(255),
   email: Email,
-  name: import_zod10.z.string().max(200).nullable().optional(),
+  name: import_zod11.z.string().max(200).nullable().optional(),
   role: MemberRole
 });
-var MemberUpdate = import_zod10.z.object({ role: MemberRole });
+var MemberUpdate = import_zod11.z.object({ role: MemberRole });
 var API_KEY_SCOPES = ["full", "read", "send"];
-var ApiKeyScope = import_zod10.z.enum(API_KEY_SCOPES);
-var ApiKey = import_zod10.z.object({
+var ApiKeyScope = import_zod11.z.enum(API_KEY_SCOPES);
+var ApiKey = import_zod11.z.object({
   id: Id,
-  name: import_zod10.z.string().min(1).max(120),
+  name: import_zod11.z.string().min(1).max(120),
   /** The first characters of the key, for recognising it in a list. */
-  prefix: import_zod10.z.string().min(4).max(32),
+  prefix: import_zod11.z.string().min(4).max(32),
   scope: ApiKeyScope,
   last_used_at: Timestamp.nullable(),
   revoked_at: Timestamp.nullable(),
   created_at: Timestamp
 });
-var ApiKeyCreate = import_zod10.z.object({
-  name: import_zod10.z.string().min(1).max(120),
+var ApiKeyCreate = import_zod11.z.object({
+  name: import_zod11.z.string().min(1).max(120),
   /** Omitted means `full`. */
   scope: ApiKeyScope.optional()
 });
-var ApiKeyCreated = import_zod10.z.object({
-  key: import_zod10.z.string().min(20),
+var ApiKeyCreated = import_zod11.z.object({
+  key: import_zod11.z.string().min(20),
   api_key: ApiKey
 });
 var AUDIT_ACTIONS = [
@@ -3338,29 +3565,41 @@ var AUDIT_ACTIONS = [
   "automation.run_ended",
   "event.recorded"
 ];
-var AuditAction = import_zod10.z.enum(AUDIT_ACTIONS);
-var AuditActor = import_zod10.z.discriminatedUnion("type", [
-  import_zod10.z.object({ type: import_zod10.z.literal("member"), member_id: Id, subject: import_zod10.z.string().min(1) }),
-  import_zod10.z.object({
-    type: import_zod10.z.literal("api_key"),
+var AuditAction = import_zod11.z.enum(AUDIT_ACTIONS);
+var TRUSTED_APPS = ["booking"];
+var TrustedApp = import_zod11.z.enum(TRUSTED_APPS);
+var AuditActor = import_zod11.z.discriminatedUnion("type", [
+  import_zod11.z.object({
+    type: import_zod11.z.literal("member"),
+    member_id: Id,
+    subject: import_zod11.z.string().min(1),
+    /**
+     * The application the person acted through, when it was not the dashboard:
+     * the service set it from the service token the call carried, so it is
+     * verified, unlike a key's `on_behalf_of`. Absent for the dashboard.
+     */
+    app: TrustedApp.optional()
+  }),
+  import_zod11.z.object({
+    type: import_zod11.z.literal("api_key"),
     api_key_id: Id,
     /**
      * Who the client's application said it was acting for, from
      * `ON_BEHALF_OF_HEADER`: reported by that application, never verified.
      * Absent when the call carried no label.
      */
-    on_behalf_of: import_zod10.z.string().min(1).max(ON_BEHALF_OF_MAX_LENGTH).optional()
+    on_behalf_of: import_zod11.z.string().min(1).max(ON_BEHALF_OF_MAX_LENGTH).optional()
   }),
   /** The service itself (the worker, a bounce, the hosted unsubscribe page). */
-  import_zod10.z.object({ type: import_zod10.z.literal("system"), reason: import_zod10.z.string().min(1).max(200) })
+  import_zod11.z.object({ type: import_zod11.z.literal("system"), reason: import_zod11.z.string().min(1).max(200) })
 ]);
-var AuditEntry = import_zod10.z.object({
+var AuditEntry = import_zod11.z.object({
   id: Id,
   action: AuditAction,
   actor: AuditActor,
-  target_type: import_zod10.z.string().min(1).max(64),
+  target_type: import_zod11.z.string().min(1).max(64),
   target_id: Id.nullable(),
-  details: import_zod10.z.record(import_zod10.z.unknown()),
+  details: import_zod11.z.record(import_zod11.z.unknown()),
   created_at: Timestamp
 });
 var AuditQuery = PageQuery.extend({
@@ -3369,12 +3608,12 @@ var AuditQuery = PageQuery.extend({
 });
 
 // src/invites.ts
-var import_zod11 = require("zod");
+var import_zod12 = require("zod");
 var INVITE_STATUSES = ["pending", "accepted", "revoked", "expired"];
-var InviteStatus = import_zod11.z.enum(INVITE_STATUSES);
+var InviteStatus = import_zod12.z.enum(INVITE_STATUSES);
 var DEFAULT_INVITE_TTL_DAYS = 7;
 var MAX_INVITE_TTL_DAYS = 30;
-var Invite = import_zod11.z.object({
+var Invite = import_zod12.z.object({
   id: Id,
   /** Stored lowercased; only a person signed in with this address can accept. */
   email: Email,
@@ -3382,32 +3621,32 @@ var Invite = import_zod11.z.object({
   /** Derived from the timestamps below, never stored. */
   status: InviteStatus,
   /** The member who invited, while they are still one (null after they left). */
-  invited_by: import_zod11.z.object({ member_id: Id.nullable(), email: Email.nullable() }),
+  invited_by: import_zod12.z.object({ member_id: Id.nullable(), email: Email.nullable() }),
   expires_at: Timestamp,
   accepted_at: Timestamp.nullable(),
   revoked_at: Timestamp.nullable(),
   created_at: Timestamp
 });
-var InviteCreate = import_zod11.z.object({
+var InviteCreate = import_zod12.z.object({
   email: Email,
   role: MemberRole,
-  expires_in_days: import_zod11.z.number().int().min(1).max(MAX_INVITE_TTL_DAYS).optional()
+  expires_in_days: import_zod12.z.number().int().min(1).max(MAX_INVITE_TTL_DAYS).optional()
 });
-var InviteCreated = import_zod11.z.object({
+var InviteCreated = import_zod12.z.object({
   invite: Invite,
-  token: import_zod11.z.string().min(32).max(128)
+  token: import_zod12.z.string().min(32).max(128)
 });
 var InviteListQuery = PageQuery.extend({
   status: InviteStatus.optional()
 });
-var InviteAccept = import_zod11.z.object({
-  token: import_zod11.z.string().min(32).max(128),
+var InviteAccept = import_zod12.z.object({
+  token: import_zod12.z.string().min(32).max(128),
   email: Email,
-  name: import_zod11.z.string().max(200).nullable().optional()
+  name: import_zod12.z.string().max(200).nullable().optional()
 });
-var InviteAccepted = import_zod11.z.object({
+var InviteAccepted = import_zod12.z.object({
   workspace: WorkspaceMembership,
-  already_member: import_zod11.z.boolean()
+  already_member: import_zod12.z.boolean()
 });
 var INVITE_REFUSAL_REASONS = ["email_mismatch", "inviter_lacks_role", "expired", "revoked", "accepted"];
 
@@ -4037,13 +4276,13 @@ function renameInsertionEverywhere(drafts, from, rawTo) {
 }
 
 // src/providers.ts
-var import_zod12 = require("zod");
+var import_zod13 = require("zod");
 var PROVIDER_KINDS = ["smtp", "resend"];
-var ProviderKind = import_zod12.z.enum(PROVIDER_KINDS);
-var ProviderPolicy = import_zod12.z.object({
-  daily_recipient_budget: import_zod12.z.number().int().min(1).max(1e7),
-  min_interval_ms: import_zod12.z.number().int().min(0).max(36e5),
-  max_recipients_per_message: import_zod12.z.number().int().min(1).max(1e3)
+var ProviderKind = import_zod13.z.enum(PROVIDER_KINDS);
+var ProviderPolicy = import_zod13.z.object({
+  daily_recipient_budget: import_zod13.z.number().int().min(1).max(1e7),
+  min_interval_ms: import_zod13.z.number().int().min(0).max(36e5),
+  max_recipients_per_message: import_zod13.z.number().int().min(1).max(1e3)
 });
 var ICLOUD_SMTP_POLICY = {
   daily_recipient_budget: 800,
@@ -4051,17 +4290,17 @@ var ICLOUD_SMTP_POLICY = {
   max_recipients_per_message: 1
 };
 var SMTP_SECURITY = ["tls", "starttls"];
-var SmtpConfigBase = import_zod12.z.object({
-  host: import_zod12.z.string().min(1).max(255),
-  port: import_zod12.z.number().int().min(1).max(65535),
+var SmtpConfigBase = import_zod13.z.object({
+  host: import_zod13.z.string().min(1).max(255),
+  port: import_zod13.z.number().int().min(1).max(65535),
   /** `tls` connects encrypted (465), `starttls` upgrades (587). Never plaintext. */
-  security: import_zod12.z.enum(SMTP_SECURITY),
-  username: import_zod12.z.string().min(1).max(255)
+  security: import_zod13.z.enum(SMTP_SECURITY),
+  username: import_zod13.z.string().min(1).max(255)
 });
-var ResendConfigBase = import_zod12.z.object({});
-var ProviderRejections = import_zod12.z.object({
-  count: import_zod12.z.number().int().min(0),
-  last_error: import_zod12.z.string().nullable(),
+var ResendConfigBase = import_zod13.z.object({});
+var ProviderRejections = import_zod13.z.object({
+  count: import_zod13.z.number().int().min(0),
+  last_error: import_zod13.z.string().nullable(),
   last_at: Timestamp.nullable(),
   /**
    * The last time the bounce circuit breaker tripped on one of this provider's
@@ -4071,59 +4310,59 @@ var ProviderRejections = import_zod12.z.object({
    * run's bounce blocks were undone and the mailing paused. `sample` is the
    * reply that tripped it.
    */
-  anomaly: import_zod12.z.object({
+  anomaly: import_zod13.z.object({
     at: Timestamp,
     /** `mailing`: one mailing was paused. `provider`: 5 refusals in a row with the same reply across the provider's sends (test sends and one-recipient mailings included) within 24 hours. */
-    scope: import_zod12.z.enum(["mailing", "provider"]),
+    scope: import_zod13.z.enum(["mailing", "provider"]),
     /**
      * True while the provider-wide breaker is open: no bounce blocks through
      * this provider, test sends refused and mailings not started or resumed
      * (`provider_anomaly`), until an admin clears it (`providers.clearAnomaly`).
      */
-    blocking: import_zod12.z.boolean(),
+    blocking: import_zod13.z.boolean(),
     mailing_id: Id.nullable(),
-    reason: import_zod12.z.string(),
-    sample: import_zod12.z.string()
+    reason: import_zod13.z.string(),
+    sample: import_zod13.z.string()
   }).nullable()
 });
-var ProviderEvents = import_zod12.z.object({
-  status: import_zod12.z.enum(["active", "needs_secret"]),
-  source: import_zod12.z.enum(["automatic", "manual"]).nullable(),
-  url: import_zod12.z.string().url(),
-  error: import_zod12.z.string().nullable(),
+var ProviderEvents = import_zod13.z.object({
+  status: import_zod13.z.enum(["active", "needs_secret"]),
+  source: import_zod13.z.enum(["automatic", "manual"]).nullable(),
+  url: import_zod13.z.string().url(),
+  error: import_zod13.z.string().nullable(),
   /**
    * Events that named an email this provider never sent through the service
    * (another workspace or system sharing the Resend account): counted, never
    * acted on.
    */
-  unmatched: import_zod12.z.number().int().min(0)
+  unmatched: import_zod13.z.number().int().min(0)
 });
 var RESEND_EVENT_TYPES = ["email.bounced", "email.complained", "email.delivery_delayed"];
-var ResendSigningSecret = import_zod12.z.string().max(200).regex(/^whsec_[A-Za-z0-9+/]{16,}={0,2}$/, "must be the signing secret Resend shows, starting with whsec_");
-var ProviderEventsSecret = import_zod12.z.object({ signing_secret: ResendSigningSecret });
+var ResendSigningSecret = import_zod13.z.string().max(200).regex(/^whsec_[A-Za-z0-9+/]{16,}={0,2}$/, "must be the signing secret Resend shows, starting with whsec_");
+var ProviderEventsSecret = import_zod13.z.object({ signing_secret: ResendSigningSecret });
 var ProviderFields = {
-  name: import_zod12.z.string().min(1).max(120),
-  from_name: import_zod12.z.string().min(1).max(120),
+  name: import_zod13.z.string().min(1).max(120),
+  from_name: import_zod13.z.string().min(1).max(120),
   from_email: Email,
   reply_to: Email.nullable(),
   policy: ProviderPolicy
 };
-var Provider = import_zod12.z.discriminatedUnion("kind", [
-  import_zod12.z.object({
+var Provider = import_zod13.z.discriminatedUnion("kind", [
+  import_zod13.z.object({
     id: Id,
-    kind: import_zod12.z.literal("smtp"),
+    kind: import_zod13.z.literal("smtp"),
     config: SmtpConfigBase,
-    has_secret: import_zod12.z.boolean(),
+    has_secret: import_zod13.z.boolean(),
     ...ProviderFields,
     rejections: ProviderRejections,
     created_at: Timestamp,
     updated_at: Timestamp
   }),
-  import_zod12.z.object({
+  import_zod13.z.object({
     id: Id,
-    kind: import_zod12.z.literal("resend"),
+    kind: import_zod13.z.literal("resend"),
     config: ResendConfigBase,
-    has_secret: import_zod12.z.boolean(),
+    has_secret: import_zod13.z.boolean(),
     ...ProviderFields,
     rejections: ProviderRejections,
     events: ProviderEvents,
@@ -4131,31 +4370,31 @@ var Provider = import_zod12.z.discriminatedUnion("kind", [
     updated_at: Timestamp
   })
 ]);
-var ProviderCreate = import_zod12.z.discriminatedUnion("kind", [
-  import_zod12.z.object({
-    kind: import_zod12.z.literal("smtp"),
-    config: SmtpConfigBase.extend({ password: import_zod12.z.string().min(1).max(1024) }),
+var ProviderCreate = import_zod13.z.discriminatedUnion("kind", [
+  import_zod13.z.object({
+    kind: import_zod13.z.literal("smtp"),
+    config: SmtpConfigBase.extend({ password: import_zod13.z.string().min(1).max(1024) }),
     ...ProviderFields
   }),
-  import_zod12.z.object({
-    kind: import_zod12.z.literal("resend"),
-    config: ResendConfigBase.extend({ api_key: import_zod12.z.string().min(1).max(1024) }),
+  import_zod13.z.object({
+    kind: import_zod13.z.literal("resend"),
+    config: ResendConfigBase.extend({ api_key: import_zod13.z.string().min(1).max(1024) }),
     ...ProviderFields
   })
 ]);
-var ProviderUpdate = import_zod12.z.discriminatedUnion("kind", [
-  import_zod12.z.object({
-    kind: import_zod12.z.literal("smtp"),
-    config: SmtpConfigBase.extend({ password: import_zod12.z.string().min(1).max(1024).optional() }).partial().optional(),
+var ProviderUpdate = import_zod13.z.discriminatedUnion("kind", [
+  import_zod13.z.object({
+    kind: import_zod13.z.literal("smtp"),
+    config: SmtpConfigBase.extend({ password: import_zod13.z.string().min(1).max(1024).optional() }).partial().optional(),
     name: ProviderFields.name.optional(),
     from_name: ProviderFields.from_name.optional(),
     from_email: ProviderFields.from_email.optional(),
     reply_to: ProviderFields.reply_to.optional(),
     policy: ProviderPolicy.partial().optional()
   }),
-  import_zod12.z.object({
-    kind: import_zod12.z.literal("resend"),
-    config: ResendConfigBase.extend({ api_key: import_zod12.z.string().min(1).max(1024).optional() }).optional(),
+  import_zod13.z.object({
+    kind: import_zod13.z.literal("resend"),
+    config: ResendConfigBase.extend({ api_key: import_zod13.z.string().min(1).max(1024).optional() }).optional(),
     name: ProviderFields.name.optional(),
     from_name: ProviderFields.from_name.optional(),
     from_email: ProviderFields.from_email.optional(),
@@ -4163,48 +4402,48 @@ var ProviderUpdate = import_zod12.z.discriminatedUnion("kind", [
     policy: ProviderPolicy.partial().optional()
   })
 ]);
-var ProviderUsage = import_zod12.z.object({
+var ProviderUsage = import_zod13.z.object({
   provider_id: Id,
-  recipients_last_24h: import_zod12.z.number().int().min(0),
-  remaining_budget: import_zod12.z.number().int().min(0),
+  recipients_last_24h: import_zod13.z.number().int().min(0),
+  remaining_budget: import_zod13.z.number().int().min(0),
   /** When enough of the rolling window frees up to send again, if exhausted. */
   next_capacity_at: Timestamp.nullable()
 });
-var ProviderVerifyResult = import_zod12.z.object({
-  ok: import_zod12.z.boolean(),
-  error: import_zod12.z.string().nullable()
+var ProviderVerifyResult = import_zod13.z.object({
+  ok: import_zod13.z.boolean(),
+  error: import_zod13.z.string().nullable()
 });
 
 // src/contacts.ts
-var import_zod13 = require("zod");
-var Topic = import_zod13.z.object({
+var import_zod14 = require("zod");
+var Topic = import_zod14.z.object({
   id: Id,
   slug: Slug,
-  name: import_zod13.z.string().min(1).max(120),
+  name: import_zod14.z.string().min(1).max(120),
   /** Shown on the hosted preference page. */
-  description: import_zod13.z.string().max(1e3).nullable(),
+  description: import_zod14.z.string().max(1e3).nullable(),
   /** Translations of `name` and `description` per locale, for the hosted page. */
-  translations: import_zod13.z.record(
-    import_zod13.z.object({ name: import_zod13.z.string().min(1).max(120), description: import_zod13.z.string().max(1e3).nullable() })
+  translations: import_zod14.z.record(
+    import_zod14.z.object({ name: import_zod14.z.string().min(1).max(120), description: import_zod14.z.string().max(1e3).nullable() })
   ),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var TopicCreate = import_zod13.z.object({
+var TopicCreate = import_zod14.z.object({
   slug: Slug,
-  name: import_zod13.z.string().min(1).max(120),
-  description: import_zod13.z.string().max(1e3).optional(),
+  name: import_zod14.z.string().min(1).max(120),
+  description: import_zod14.z.string().max(1e3).optional(),
   translations: Topic.shape.translations.optional()
 });
 var TopicUpdate = TopicCreate.omit({ slug: true }).partial().refine((v) => Object.keys(v).length > 0, "at least one field");
-var Contact = import_zod13.z.object({
+var Contact = import_zod14.z.object({
   id: Id,
-  external_id: import_zod13.z.string().min(1).max(255).nullable(),
+  external_id: import_zod14.z.string().min(1).max(255).nullable(),
   /** Stored lowercased, unique per workspace. */
   email: Email,
-  first_name: import_zod13.z.string().max(200).nullable(),
-  last_name: import_zod13.z.string().max(200).nullable(),
-  locale: import_zod13.z.string().min(2).max(35).nullable(),
+  first_name: import_zod14.z.string().max(200).nullable(),
+  last_name: import_zod14.z.string().max(200).nullable(),
+  locale: import_zod14.z.string().min(2).max(35).nullable(),
   /**
    * The person's own time zone, an IANA name such as `Europe/Berlin` (A1).
    * Every wall clock an automation waits for is read in it, falling back to the
@@ -4212,65 +4451,65 @@ var Contact = import_zod13.z.object({
    */
   timezone: TimezoneName.nullable(),
   properties: Properties,
-  topics: import_zod13.z.array(Slug),
+  topics: import_zod14.z.array(Slug),
   /** The slugs of the contact's tags (S4). */
-  tags: import_zod13.z.array(Slug),
+  tags: import_zod14.z.array(Slug),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var ContactUpsert = import_zod13.z.object({
-  external_id: import_zod13.z.string().min(1).max(255).optional(),
+var ContactUpsert = import_zod14.z.object({
+  external_id: import_zod14.z.string().min(1).max(255).optional(),
   email: Email.optional(),
-  first_name: import_zod13.z.string().max(200).nullable().optional(),
-  last_name: import_zod13.z.string().max(200).nullable().optional(),
-  locale: import_zod13.z.string().min(2).max(35).nullable().optional(),
+  first_name: import_zod14.z.string().max(200).nullable().optional(),
+  last_name: import_zod14.z.string().max(200).nullable().optional(),
+  locale: import_zod14.z.string().min(2).max(35).nullable().optional(),
   timezone: TimezoneName.nullable().optional(),
   properties: Properties.optional(),
-  topics: import_zod13.z.array(Slug).max(100).optional()
+  topics: import_zod14.z.array(Slug).max(100).optional()
 }).refine((v) => v.external_id !== void 0 || v.email !== void 0, {
   message: "external_id or email is required",
   path: ["email"]
 });
-var ContactUpsertResult = import_zod13.z.object({
+var ContactUpsertResult = import_zod14.z.object({
   contact: Contact,
-  created: import_zod13.z.boolean()
+  created: import_zod14.z.boolean()
 });
 var ContactListQuery = PageQuery.extend({
-  email: import_zod13.z.string().min(1).max(254).optional(),
-  external_id: import_zod13.z.string().min(1).max(255).optional(),
+  email: import_zod14.z.string().min(1).max(254).optional(),
+  external_id: import_zod14.z.string().min(1).max(255).optional(),
   topic: Slug.optional()
 });
-var ContactErased = import_zod13.z.object({
-  ok: import_zod13.z.literal(true),
-  erased_messages: import_zod13.z.number().int().min(0),
-  erased_recipients: import_zod13.z.number().int().min(0),
-  suppressions_kept: import_zod13.z.number().int().min(0)
+var ContactErased = import_zod14.z.object({
+  ok: import_zod14.z.literal(true),
+  erased_messages: import_zod14.z.number().int().min(0),
+  erased_recipients: import_zod14.z.number().int().min(0),
+  suppressions_kept: import_zod14.z.number().int().min(0)
 });
 var SUPPRESSION_REASONS = ["unsubscribed", "bounced", "complained", "manual"];
-var SuppressionReason = import_zod13.z.enum(SUPPRESSION_REASONS);
-var Suppression = import_zod13.z.object({
+var SuppressionReason = import_zod14.z.enum(SUPPRESSION_REASONS);
+var Suppression = import_zod14.z.object({
   id: Id,
   email: Email,
   reason: SuppressionReason,
   topic: Slug.nullable(),
   source_message_id: Id.nullable(),
-  note: import_zod13.z.string().max(1e3).nullable(),
+  note: import_zod14.z.string().max(1e3).nullable(),
   created_at: Timestamp
 });
-var SuppressionCreate = import_zod13.z.object({
+var SuppressionCreate = import_zod14.z.object({
   email: Email,
-  reason: import_zod13.z.enum(["manual", "unsubscribed"]),
+  reason: import_zod14.z.enum(["manual", "unsubscribed"]),
   topic: Slug.nullable().optional(),
-  note: import_zod13.z.string().max(1e3).optional()
+  note: import_zod14.z.string().max(1e3).optional()
 });
 var SuppressionListQuery = PageQuery.extend({
-  email: import_zod13.z.string().min(1).max(254).optional(),
+  email: import_zod14.z.string().min(1).max(254).optional(),
   reason: SuppressionReason.optional(),
   topic: Slug.optional()
 });
 
 // src/webhooks.ts
-var import_zod14 = require("zod");
+var import_zod15 = require("zod");
 var WEBHOOK_EVENT_TYPES = [
   "message.sent",
   "message.failed",
@@ -4314,23 +4553,23 @@ var WEBHOOK_EVENT_TYPES = [
   "template.updated",
   "template.deleted"
 ];
-var WebhookEventType = import_zod14.z.enum(WEBHOOK_EVENT_TYPES);
-var MessageEventBase = import_zod14.z.object({
+var WebhookEventType = import_zod15.z.enum(WEBHOOK_EVENT_TYPES);
+var MessageEventBase = import_zod15.z.object({
   message_id: Id,
   mailing_id: Id.nullable(),
   mailing_metadata: MailingMetadata.nullable(),
   recipient_id: Id.nullable(),
   contact_id: Id.nullable(),
-  external_id: import_zod14.z.string().nullable(),
+  external_id: import_zod15.z.string().nullable(),
   email: Email,
-  subject: import_zod14.z.string(),
+  subject: import_zod15.z.string(),
   topic: Slug.nullable(),
-  provider_message_id: import_zod14.z.string().nullable(),
-  is_test: import_zod14.z.boolean()
+  provider_message_id: import_zod15.z.string().nullable(),
+  is_test: import_zod15.z.boolean()
 });
 var MessageSentData = MessageEventBase.extend({
   /** The final HTML as sent, so the client can archive it beside its own records. */
-  html: import_zod14.z.string(),
+  html: import_zod15.z.string(),
   sent_at: Timestamp,
   /**
    * The choice each insertion made (see `Message.insertions`); absent or null
@@ -4341,20 +4580,20 @@ var MessageSentData = MessageEventBase.extend({
   insertions: InsertionChoices.nullish()
 });
 var MessageFailedData = MessageEventBase.extend({
-  error: import_zod14.z.string(),
+  error: import_zod15.z.string(),
   /** False when the provider rejected permanently; the recipient will not be retried. */
-  retryable: import_zod14.z.boolean(),
+  retryable: import_zod15.z.boolean(),
   failed_at: Timestamp
 });
 var UNSUBSCRIBE_SOURCES = ["hosted_page", "one_click", "api", "dashboard", "signup_form"];
-var ContactUnsubscribedData = import_zod14.z.object({
+var ContactUnsubscribedData = import_zod15.z.object({
   contact_id: Id.nullable(),
-  external_id: import_zod14.z.string().nullable(),
+  external_id: import_zod15.z.string().nullable(),
   email: Email,
   /** The topic unsubscribed from; null means every topic. */
   topic: Slug.nullable(),
   mailing_id: Id.nullable(),
-  source: import_zod14.z.enum(UNSUBSCRIBE_SOURCES),
+  source: import_zod15.z.enum(UNSUBSCRIBE_SOURCES),
   unsubscribed_at: Timestamp
 });
 var ContactResubscribedData = ContactUnsubscribedData.omit({ unsubscribed_at: true }).extend({
@@ -4363,142 +4602,142 @@ var ContactResubscribedData = ContactUnsubscribedData.omit({ unsubscribed_at: tr
    * breaker undid a `bounced` block it judged false (a `contact.bounced` for the
    * same address and mailing went out before); `topic` is null.
    */
-  source: import_zod14.z.enum([...UNSUBSCRIBE_SOURCES, "bounce_reverted"]),
+  source: import_zod15.z.enum([...UNSUBSCRIBE_SOURCES, "bounce_reverted"]),
   resubscribed_at: Timestamp
 });
-var ContactBouncedData = import_zod14.z.object({
+var ContactBouncedData = import_zod15.z.object({
   contact_id: Id.nullable(),
-  external_id: import_zod14.z.string().nullable(),
+  external_id: import_zod15.z.string().nullable(),
   email: Email,
   /** `bounced` for a hard bounce, `complained` for a spam complaint. */
-  reason: import_zod14.z.enum(["bounced", "complained"]),
+  reason: import_zod15.z.enum(["bounced", "complained"]),
   message_id: Id.nullable(),
-  diagnostic: import_zod14.z.string().nullable(),
+  diagnostic: import_zod15.z.string().nullable(),
   bounced_at: Timestamp
 });
-var MailingFinishedData = import_zod14.z.object({
+var MailingFinishedData = import_zod15.z.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  status: import_zod14.z.enum(["sent", "partially_failed", "cancelled"]),
+  status: import_zod15.z.enum(["sent", "partially_failed", "cancelled"]),
   counts: MailingCounts,
   finished_at: Timestamp
 });
-var ContactSubscribedData = import_zod14.z.object({
+var ContactSubscribedData = import_zod15.z.object({
   contact_id: Id,
-  external_id: import_zod14.z.string().nullable(),
+  external_id: import_zod15.z.string().nullable(),
   email: Email,
-  topics: import_zod14.z.array(Slug),
-  source: import_zod14.z.enum(["signup_form", "api", "dashboard", "automation"]),
+  topics: import_zod15.z.array(Slug),
+  source: import_zod15.z.enum(["signup_form", "api", "dashboard", "automation"]),
   signup_form_id: Id.nullable(),
-  signup_form_version: import_zod14.z.number().int().min(1).nullable(),
+  signup_form_version: import_zod15.z.number().int().min(1).nullable(),
   subscribed_at: Timestamp
 });
-var ImportFinishedData = import_zod14.z.object({
+var ImportFinishedData = import_zod15.z.object({
   import_id: Id,
-  status: import_zod14.z.enum(["completed", "cancelled", "failed"]),
+  status: import_zod15.z.enum(["completed", "cancelled", "failed"]),
   result: ImportReport.nullable(),
-  error: import_zod14.z.string().nullable(),
+  error: import_zod15.z.string().nullable(),
   finished_at: Timestamp
 });
-var MailingScheduledData = import_zod14.z.object({
+var MailingScheduledData = import_zod15.z.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
   scheduled_at: Timestamp.nullable()
 });
-var MailingStartedData = import_zod14.z.object({
+var MailingStartedData = import_zod15.z.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  trigger: import_zod14.z.enum(["send", "schedule"]),
-  recipients: import_zod14.z.number().int().min(0),
+  trigger: import_zod15.z.enum(["send", "schedule"]),
+  recipients: import_zod15.z.number().int().min(0),
   started_at: Timestamp
 });
-var MailingScheduleFailedData = import_zod14.z.object({
+var MailingScheduleFailedData = import_zod15.z.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  code: import_zod14.z.string(),
-  message: import_zod14.z.string(),
+  code: import_zod15.z.string(),
+  message: import_zod15.z.string(),
   failed_at: Timestamp
 });
-var MailingAbWinnerSelectedData = import_zod14.z.object({
+var MailingAbWinnerSelectedData = import_zod15.z.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  winner: import_zod14.z.string(),
-  decided_by: import_zod14.z.enum(["metric", "manual"]),
-  variants: import_zod14.z.array(VariantAnalytics),
+  winner: import_zod15.z.string(),
+  decided_by: import_zod15.z.enum(["metric", "manual"]),
+  variants: import_zod15.z.array(VariantAnalytics),
   decided_at: Timestamp
 });
-var ContactTaggedData = import_zod14.z.object({
+var ContactTaggedData = import_zod15.z.object({
   contact_id: Id,
-  external_id: import_zod14.z.string().nullable(),
+  external_id: import_zod15.z.string().nullable(),
   email: Email,
   /** Only the tags the contact did not already have. */
-  tags: import_zod14.z.array(Slug).min(1),
-  source: import_zod14.z.enum(["api", "dashboard", "signup_form", "import", "automation"]),
+  tags: import_zod15.z.array(Slug).min(1),
+  source: import_zod15.z.enum(["api", "dashboard", "signup_form", "import", "automation"]),
   tagged_at: Timestamp
 });
-var ContactUpdatedData = import_zod14.z.object({
+var ContactUpdatedData = import_zod15.z.object({
   contact_id: Id,
-  external_id: import_zod14.z.string().nullable(),
+  external_id: import_zod15.z.string().nullable(),
   email: Email,
-  changed: import_zod14.z.array(import_zod14.z.string()).min(1),
+  changed: import_zod15.z.array(import_zod15.z.string()).min(1),
   properties: Properties,
-  source: import_zod14.z.enum(["api", "dashboard", "signup_form", "import", "automation"]),
+  source: import_zod15.z.enum(["api", "dashboard", "signup_form", "import", "automation"]),
   updated_at: Timestamp
 });
-var AutomationRunEventBase = import_zod14.z.object({
+var AutomationRunEventBase = import_zod15.z.object({
   automation_id: Id,
-  automation_name: import_zod14.z.string(),
+  automation_name: import_zod15.z.string(),
   run_id: Id,
-  version: import_zod14.z.number().int().min(1),
+  version: import_zod15.z.number().int().min(1),
   contact_id: Id,
-  external_id: import_zod14.z.string().nullable(),
+  external_id: import_zod15.z.string().nullable(),
   email: Email
 });
 var AutomationRunStartedData = AutomationRunEventBase.extend({
   /** What let them in: a trigger kind, or `manual` for an explicit enrolment. */
-  trigger_kind: import_zod14.z.string(),
+  trigger_kind: import_zod15.z.string(),
   entered_at: Timestamp
 });
 var AutomationRunCompletedData = AutomationRunEventBase.extend({
-  last_step_id: import_zod14.z.string().nullable(),
+  last_step_id: import_zod15.z.string().nullable(),
   completed_at: Timestamp
 });
 var AutomationRunExitedData = AutomationRunEventBase.extend({
   reason: AutomationEndReason,
-  step_id: import_zod14.z.string().nullable(),
+  step_id: import_zod15.z.string().nullable(),
   exited_at: Timestamp
 });
 var AutomationRunFailedData = AutomationRunEventBase.extend({
-  reason: import_zod14.z.string(),
-  step_id: import_zod14.z.string().nullable(),
+  reason: import_zod15.z.string(),
+  step_id: import_zod15.z.string().nullable(),
   failed_at: Timestamp
 });
 var AutomationWebhookData = AutomationRunEventBase.extend({
-  step_id: import_zod14.z.string(),
+  step_id: import_zod15.z.string(),
   /** The step's own label, when it was given one, so a receiver can branch on a name. */
-  step_label: import_zod14.z.string().nullable(),
+  step_label: import_zod15.z.string().nullable(),
   /** Whatever the step carries, verbatim. Null when it carries nothing. */
   payload: JsonValue.nullable(),
   fired_at: Timestamp
 });
-var TemplateEventBase = import_zod14.z.object({
+var TemplateEventBase = import_zod15.z.object({
   template_id: Id,
-  name: import_zod14.z.string().min(1).max(200),
-  version: import_zod14.z.number().int().min(1),
-  source: import_zod14.z.enum(["api", "dashboard", "mjml_import"])
+  name: import_zod15.z.string().min(1).max(200),
+  version: import_zod15.z.number().int().min(1),
+  source: import_zod15.z.enum(["api", "dashboard", "mjml_import"])
 });
 var TemplateCreatedData = TemplateEventBase.extend({ created_at: Timestamp });
-var TemplateUpdatedData = TemplateEventBase.extend({ archived: import_zod14.z.boolean(), updated_at: Timestamp });
+var TemplateUpdatedData = TemplateEventBase.extend({ archived: import_zod15.z.boolean(), updated_at: Timestamp });
 var TemplateDeletedData = TemplateEventBase.extend({ deleted_at: Timestamp });
-var envelope = (type, data) => import_zod14.z.object({
+var envelope = (type, data) => import_zod15.z.object({
   /** Unique per event: a receiver deduplicates on it (deliveries may repeat). */
   id: Id,
-  type: import_zod14.z.literal(type),
+  type: import_zod15.z.literal(type),
   created_at: Timestamp,
   workspace_id: Id,
   data
 });
-var WebhookEvent = import_zod14.z.discriminatedUnion("type", [
+var WebhookEvent = import_zod15.z.discriminatedUnion("type", [
   envelope("message.sent", MessageSentData),
   envelope("message.failed", MessageFailedData),
   envelope("contact.unsubscribed", ContactUnsubscribedData),
@@ -4522,16 +4761,16 @@ var WebhookEvent = import_zod14.z.discriminatedUnion("type", [
   envelope("template.updated", TemplateUpdatedData),
   envelope("template.deleted", TemplateDeletedData)
 ]);
-var WebhookEndpoint = import_zod14.z.object({
+var WebhookEndpoint = import_zod15.z.object({
   id: Id,
-  url: import_zod14.z.string().url(),
-  description: import_zod14.z.string().max(500).nullable(),
-  events: import_zod14.z.array(WebhookEventType).min(1),
-  enabled: import_zod14.z.boolean(),
+  url: import_zod15.z.string().url(),
+  description: import_zod15.z.string().max(500).nullable(),
+  events: import_zod15.z.array(WebhookEventType).min(1),
+  enabled: import_zod15.z.boolean(),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var WebhookUrl = import_zod14.z.string().url().refine((u) => {
+var WebhookUrl = import_zod15.z.string().url().refine((u) => {
   try {
     const url = new URL(u);
     if (url.protocol === "https:") return true;
@@ -4540,35 +4779,35 @@ var WebhookUrl = import_zod14.z.string().url().refine((u) => {
     return false;
   }
 }, "must be https (http only for localhost)");
-var WebhookEndpointCreate = import_zod14.z.object({
+var WebhookEndpointCreate = import_zod15.z.object({
   url: WebhookUrl,
-  description: import_zod14.z.string().max(500).optional(),
-  events: import_zod14.z.array(WebhookEventType).min(1),
-  enabled: import_zod14.z.boolean().optional()
+  description: import_zod15.z.string().max(500).optional(),
+  events: import_zod15.z.array(WebhookEventType).min(1),
+  enabled: import_zod15.z.boolean().optional()
 });
-var WebhookEndpointUpdate = import_zod14.z.object({
+var WebhookEndpointUpdate = import_zod15.z.object({
   url: WebhookUrl,
-  description: import_zod14.z.string().max(500).nullable(),
-  events: import_zod14.z.array(WebhookEventType).min(1),
-  enabled: import_zod14.z.boolean()
+  description: import_zod15.z.string().max(500).nullable(),
+  events: import_zod15.z.array(WebhookEventType).min(1),
+  enabled: import_zod15.z.boolean()
 }).partial().refine((v) => Object.keys(v).length > 0, "at least one field");
-var WebhookEndpointWithSecret = import_zod14.z.object({
+var WebhookEndpointWithSecret = import_zod15.z.object({
   endpoint: WebhookEndpoint,
-  secret: import_zod14.z.string().min(32)
+  secret: import_zod15.z.string().min(32)
 });
 var WEBHOOK_DELIVERY_STATUSES = ["pending", "succeeded", "failed"];
-var WebhookDeliveryStatus = import_zod14.z.enum(WEBHOOK_DELIVERY_STATUSES);
+var WebhookDeliveryStatus = import_zod15.z.enum(WEBHOOK_DELIVERY_STATUSES);
 var WEBHOOK_MAX_ATTEMPTS = 8;
 var WEBHOOK_RETRY_DELAYS_SECONDS = [30, 120, 600, 1800, 3600, 7200, 21600];
-var WebhookDelivery = import_zod14.z.object({
+var WebhookDelivery = import_zod15.z.object({
   id: Id,
   endpoint_id: Id,
   event_id: Id,
   event_type: WebhookEventType,
   status: WebhookDeliveryStatus,
-  attempts: import_zod14.z.number().int().min(0),
-  last_status_code: import_zod14.z.number().int().min(100).max(599).nullable(),
-  last_error: import_zod14.z.string().nullable(),
+  attempts: import_zod15.z.number().int().min(0),
+  last_status_code: import_zod15.z.number().int().min(100).max(599).nullable(),
+  last_error: import_zod15.z.string().nullable(),
   next_attempt_at: Timestamp.nullable(),
   delivered_at: Timestamp.nullable(),
   created_at: Timestamp
@@ -4577,7 +4816,7 @@ var WebhookDeliveryListQuery = PageQuery.extend({
   status: WebhookDeliveryStatus.optional(),
   event_type: WebhookEventType.optional()
 });
-var WebhookDeliveryParams = import_zod14.z.object({ id: Id, delivery_id: Id });
+var WebhookDeliveryParams = import_zod15.z.object({ id: Id, delivery_id: Id });
 
 // src/webhook-signing.ts
 var WEBHOOK_SIGNATURE_HEADER = "x-mail-signature";
@@ -4644,79 +4883,79 @@ async function verifyWebhook(input) {
 }
 
 // src/billing.ts
-var import_zod15 = require("zod");
+var import_zod16 = require("zod");
 var PLAN_IDS = ["free", "starter", "growth", "design_partner"];
-var PlanId = import_zod15.z.enum(PLAN_IDS);
-var PlanLimits = import_zod15.z.object({
-  monthly_messages: import_zod15.z.number().int().min(0).nullable(),
-  contacts: import_zod15.z.number().int().min(0).nullable(),
-  members: import_zod15.z.number().int().min(1).nullable(),
-  providers: import_zod15.z.number().int().min(1).nullable(),
-  webhook_endpoints: import_zod15.z.number().int().min(0).nullable(),
+var PlanId = import_zod16.z.enum(PLAN_IDS);
+var PlanLimits = import_zod16.z.object({
+  monthly_messages: import_zod16.z.number().int().min(0).nullable(),
+  contacts: import_zod16.z.number().int().min(0).nullable(),
+  members: import_zod16.z.number().int().min(1).nullable(),
+  providers: import_zod16.z.number().int().min(1).nullable(),
+  webhook_endpoints: import_zod16.z.number().int().min(0).nullable(),
   /** Automations that may be live (active or paused) at once (A1). */
-  active_automations: import_zod15.z.number().int().min(0).nullable(),
+  active_automations: import_zod16.z.number().int().min(0).nullable(),
   /** Steps one automation may hold. Null is the flow's own cap, not unlimited. */
-  automation_steps: import_zod15.z.number().int().min(1).nullable()
+  automation_steps: import_zod16.z.number().int().min(1).nullable()
 });
-var PlanFeatures = import_zod15.z.object({
+var PlanFeatures = import_zod16.z.object({
   /** A/B tests of subject and content on a mailing (S4). */
-  ab_testing: import_zod15.z.boolean(),
+  ab_testing: import_zod16.z.boolean(),
   /** Open and click tracking, still off until a workspace turns it on (`settings.tracking_enabled`). */
-  tracking: import_zod15.z.boolean(),
+  tracking: import_zod16.z.boolean(),
   /** Sending and hosting pages on the workspace's own domain (a later phase). */
-  custom_domains: import_zod15.z.boolean(),
+  custom_domains: import_zod16.z.boolean(),
   /** Automations: flows a person walks through step by step (A1). */
-  automations: import_zod15.z.boolean()
+  automations: import_zod16.z.boolean()
 });
 var PLAN_FEATURES = ["ab_testing", "tracking", "custom_domains", "automations"];
-var Plan = import_zod15.z.object({
+var Plan = import_zod16.z.object({
   id: PlanId,
-  name: import_zod15.z.string().min(1),
+  name: import_zod16.z.string().min(1),
   /** Price in the smallest currency unit per month; null for plans not sold. */
-  monthly_price_cents: import_zod15.z.number().int().min(0).nullable(),
-  currency: import_zod15.z.string().length(3),
+  monthly_price_cents: import_zod16.z.number().int().min(0).nullable(),
+  currency: import_zod16.z.string().length(3),
   limits: PlanLimits,
   features: PlanFeatures
 });
-var CatalogPlan = Plan.extend({ sellable: import_zod15.z.boolean() });
-var Subscription = import_zod15.z.object({
+var CatalogPlan = Plan.extend({ sellable: import_zod16.z.boolean() });
+var Subscription = import_zod16.z.object({
   workspace_id: Id,
   plan: PlanId,
-  status: import_zod15.z.enum(["active", "trialing", "past_due", "cancelled"]),
+  status: import_zod16.z.enum(["active", "trialing", "past_due", "cancelled"]),
   current_period_start: Timestamp,
   current_period_end: Timestamp,
-  cancel_at_period_end: import_zod15.z.boolean(),
+  cancel_at_period_end: import_zod16.z.boolean(),
   /**
    * A design partner outside billing (plan `design_partner`, no limits, no
    * checkout). Set only by an operator, never through the API.
    */
-  billing_exempt: import_zod15.z.boolean()
+  billing_exempt: import_zod16.z.boolean()
 });
 var USAGE_METRICS = ["messages", "contacts", "members", "providers", "webhook_endpoints", "active_automations"];
-var UsageMetric = import_zod15.z.enum(USAGE_METRICS);
+var UsageMetric = import_zod16.z.enum(USAGE_METRICS);
 var USAGE_WARNING_RATIO = 0.8;
-var UsageWarning = import_zod15.z.object({
+var UsageWarning = import_zod16.z.object({
   metric: UsageMetric,
-  used: import_zod15.z.number().int().min(0),
-  limit: import_zod15.z.number().int().min(0),
+  used: import_zod16.z.number().int().min(0),
+  limit: import_zod16.z.number().int().min(0),
   /** `approaching`: at or above USAGE_WARNING_RATIO of the limit; `reached`: at or above the limit. */
-  level: import_zod15.z.enum(["approaching", "reached"])
+  level: import_zod16.z.enum(["approaching", "reached"])
 });
-var Usage = import_zod15.z.object({
+var Usage = import_zod16.z.object({
   plan: PlanId,
   period_start: Timestamp,
   period_end: Timestamp,
-  metrics: import_zod15.z.record(UsageMetric, import_zod15.z.object({ used: import_zod15.z.number().int().min(0), limit: import_zod15.z.number().int().min(0).nullable() })),
-  warnings: import_zod15.z.array(UsageWarning)
+  metrics: import_zod16.z.record(UsageMetric, import_zod16.z.object({ used: import_zod16.z.number().int().min(0), limit: import_zod16.z.number().int().min(0).nullable() })),
+  warnings: import_zod16.z.array(UsageWarning)
 });
-var CheckoutRequest = import_zod15.z.object({
-  plan: import_zod15.z.enum(["starter", "growth"]),
-  success_url: import_zod15.z.string().url(),
-  cancel_url: import_zod15.z.string().url()
+var CheckoutRequest = import_zod16.z.object({
+  plan: import_zod16.z.enum(["starter", "growth"]),
+  success_url: import_zod16.z.string().url(),
+  cancel_url: import_zod16.z.string().url()
 });
-var CheckoutSession = import_zod15.z.object({ url: import_zod15.z.string().url() });
-var PortalRequest = import_zod15.z.object({ return_url: import_zod15.z.string().url() });
-var PortalSession = import_zod15.z.object({ url: import_zod15.z.string().url() });
+var CheckoutSession = import_zod16.z.object({ url: import_zod16.z.string().url() });
+var PortalRequest = import_zod16.z.object({ return_url: import_zod16.z.string().url() });
+var PortalSession = import_zod16.z.object({ url: import_zod16.z.string().url() });
 var USAGE_WARNING_HEADER = "x-mail-usage-warning";
 function formatUsageWarningHeader(warnings) {
   if (warnings.length === 0) return null;
@@ -4736,7 +4975,7 @@ function parseUsageWarningHeader(value) {
 }
 
 // src/routes.ts
-var import_zod16 = require("zod");
+var import_zod17 = require("zod");
 var list = (item) => page(item);
 var foundationRoutes = {
   "workspaces.create": {
@@ -4964,7 +5203,7 @@ var templateRoutes = {
     path: "/v1/templates/:id/export",
     params: IdParams,
     query: TemplateExportQuery,
-    response: import_zod16.z.string(),
+    response: import_zod17.z.string(),
     responseType: "text",
     status: 200,
     access: "read",
@@ -5288,7 +5527,7 @@ var sendingRoutes = {
     path: "/v1/mailings/:id/export",
     params: IdParams,
     query: MailingExportQuery,
-    response: import_zod16.z.string(),
+    response: import_zod17.z.string(),
     responseType: "text",
     status: 200,
     access: "read",
@@ -5334,6 +5573,21 @@ var sendingRoutes = {
     access: "write",
     phase: "S2"
   },
+  /**
+   * A dry run: what each given recipient would be sent (every value's text and
+   * the layer it comes from, each insertion's choice, the problems found),
+   * without adding anybody. Reads only, in any state of the mailing.
+   */
+  "mailings.resolve": {
+    method: "POST",
+    path: "/v1/mailings/:id/resolve",
+    params: IdParams,
+    body: MailingResolveRequest,
+    response: MailingResolveResult,
+    status: 200,
+    access: "read",
+    phase: "S2"
+  },
   "mailings.send": {
     method: "POST",
     path: "/v1/mailings/:id/send",
@@ -5521,7 +5775,7 @@ var platformRoutes = {
   "contactProperties.list": {
     method: "GET",
     path: "/v1/contact-properties",
-    response: import_zod16.z.object({ data: import_zod16.z.array(ContactPropertyDefinition) }),
+    response: import_zod17.z.object({ data: import_zod17.z.array(ContactPropertyDefinition) }),
     status: 200,
     access: "read",
     phase: "S4"
@@ -5820,7 +6074,7 @@ var billingRoutes = {
   "billing.plans": {
     method: "GET",
     path: "/v1/billing/plans",
-    response: import_zod16.z.object({ data: import_zod16.z.array(CatalogPlan) }),
+    response: import_zod17.z.object({ data: import_zod17.z.array(CatalogPlan) }),
     status: 200,
     access: "read",
     phase: "S5"
@@ -5962,7 +6216,7 @@ var automationRoutes = {
     method: "POST",
     path: "/v1/automations/:id/pause",
     params: IdParams,
-    body: import_zod16.z.object({}).strict(),
+    body: import_zod17.z.object({}).strict(),
     response: Automation,
     status: 200,
     access: "write",
@@ -5972,7 +6226,7 @@ var automationRoutes = {
     method: "POST",
     path: "/v1/automations/:id/resume",
     params: IdParams,
-    body: import_zod16.z.object({}).strict(),
+    body: import_zod17.z.object({}).strict(),
     response: Automation,
     status: 200,
     access: "write",
@@ -5982,7 +6236,7 @@ var automationRoutes = {
     method: "POST",
     path: "/v1/automations/:id/archive",
     params: IdParams,
-    body: import_zod16.z.object({}).strict(),
+    body: import_zod17.z.object({}).strict(),
     response: Automation,
     status: 200,
     access: "write",
@@ -6099,6 +6353,12 @@ var routes = {
   ...billingRoutes,
   ...automationRoutes
 };
+var TRUSTED_APP_OPERATIONS = {
+  booking: ["workspaces.list", "workspace.update", "providers.list", "apiKeys.create", "apiKeys.revoke"]
+};
+function trustedAppMayCall(app, id) {
+  return TRUSTED_APP_OPERATIONS[app].includes(id);
+}
 function acceptsIdempotencyKey(route) {
   return route.method !== "GET";
 }
@@ -6116,13 +6376,13 @@ function matchRoute(method, pathname) {
   for (const [id, route] of Object.entries(routes)) {
     if (route.method !== method) continue;
     const names = [];
-    const pattern2 = new RegExp(
+    const pattern3 = new RegExp(
       "^" + route.path.replace(/[.*+?^${}()|[\]\\]/g, "\\$&").replace(/:([a-z_]+)/g, (_, name) => {
         names.push(name);
         return "([^/]+)";
       }) + "$"
     );
-    const match = pattern2.exec(pathname);
+    const match = pattern3.exec(pathname);
     if (!match) continue;
     const params = {};
     names.forEach((name, i) => {
@@ -6323,6 +6583,7 @@ function matchRoute(method, pathname) {
   InviteListQuery,
   InviteStatus,
   JsonValue,
+  LETTER_ONLY_MERGE_FIELDS,
   LETTER_RECIPIENT_REFUSAL,
   LIST_UNSUBSCRIBE_POST_VALUE,
   LOCALE_TAG_PATTERN,
@@ -6391,7 +6652,10 @@ function matchRoute(method, pathname) {
   MailingLanguageReport,
   MailingLanguageStatus,
   MailingListQuery,
+  MailingMerge,
   MailingMetadata,
+  MailingResolveRequest,
+  MailingResolveResult,
   MailingRetryFailedRequest,
   MailingScheduleFailedData,
   MailingScheduleRequest,
@@ -6416,6 +6680,8 @@ function matchRoute(method, pathname) {
   MessageOutcome,
   MessageSentData,
   MessageSummary,
+  MessageValues,
+  NAME_ON_BROADCAST_REFUSAL,
   NotifyRecipients,
   NotifyStep,
   ON_BEHALF_OF_HEADER,
@@ -6451,6 +6717,8 @@ function matchRoute(method, pathname) {
   REQUEST_ID_HEADER,
   RESEND_EVENT_TYPES,
   RESERVED_MERGE_FIELDS,
+  RESOLVE_PROBLEMS,
+  RESOLVE_REJECTIONS,
   RETRYABLE_ERRORS,
   RETRY_AFTER_HEADER,
   RE_ENTRY_MODES,
@@ -6463,6 +6731,9 @@ function matchRoute(method, pathname) {
   RecipientStatus,
   RemoteImage,
   ResendSigningSecret,
+  ResolveProblem,
+  ResolvedRecipient,
+  ResolvedValue,
   SERVICE_FILLED_MERGE_FIELDS,
   SIGNUP_FORM_FIELDS,
   SKIP_REASONS,
@@ -6499,6 +6770,8 @@ function matchRoute(method, pathname) {
   TEMPLATE_SORTS,
   TEMPLATE_SORT_DEFAULT_ORDER,
   TERMINAL_MAILING_STATUSES,
+  TRUSTED_APPS,
+  TRUSTED_APP_OPERATIONS,
   Tag,
   TagAssignment,
   TagCreate,
@@ -6544,15 +6817,19 @@ function matchRoute(method, pathname) {
   TrackingSettings,
   TranslationInsertion,
   TranslationInsertions,
+  TrustedApp,
   UNSUBSCRIBE_PATH_PREFIX,
   UNSUBSCRIBE_SOURCES,
   USAGE_METRICS,
   USAGE_WARNING_HEADER,
   USAGE_WARNING_RATIO,
+  UnfilledLink,
   Usage,
   UsageMetric,
   UsageWarning,
+  VALUE_LAYERS,
   ValidationIssue,
+  ValueLayer,
   VariantAnalytics,
   WEBHOOK_DELIVERY_STATUSES,
   WEBHOOK_EVENT_ID_HEADER,
@@ -6616,6 +6893,7 @@ function matchRoute(method, pathname) {
   editMainInsertions,
   effectivePreviewPicks,
   emptyFlow,
+  emptyLinkValues,
   errorBody,
   escapeMergeHtml,
   exportFilename,
@@ -6646,6 +6924,8 @@ function matchRoute(method, pathname) {
   languageInsertions,
   languageName,
   languageTabs,
+  letterOnlyValues,
+  linkTokens,
   mainInsertionText,
   matchLocale,
   matchRoute,
@@ -6666,6 +6946,8 @@ function matchRoute(method, pathname) {
   previewInsertions,
   previewPersonalization,
   primaryLanguage,
+  printedFields,
+  rawMergeValue,
   reachable,
   readyWithoutInsertions,
   readyWithoutSubject,
@@ -6682,6 +6964,7 @@ function matchRoute(method, pathname) {
   renameTokenInDocument,
   renameTokenInText,
   resolveInsertions,
+  resolveValue,
   restorePatch,
   routes,
   sameJson,
@@ -6705,8 +6988,11 @@ function matchRoute(method, pathname) {
   translationInsertionProblems,
   translationTextFromInput,
   triggerKey,
+  trustedAppMayCall,
   unknownRefusedInsertions,
   unplacedInsertions,
   validateAutomation,
+  valueNames,
+  valuesRead,
   verifyWebhook
 });