@marlinjai/mail-contract 0.6.1 → 0.8.0

package/dist/index.js

@@ -248,6 +248,13 @@ __export(index_exports, {
   MAX_STEPS: () => MAX_STEPS,
   MAX_STEP_VISITS: () => MAX_STEP_VISITS,
   MAX_SUBJECT_LENGTH: () => MAX_SUBJECT_LENGTH,
+  MAX_TEMPLATE_INPUTS: () => MAX_TEMPLATE_INPUTS,
+  MAX_TEMPLATE_INPUTS_APP_LENGTH: () => MAX_TEMPLATE_INPUTS_APP_LENGTH,
+  MAX_TEMPLATE_INPUTS_SEEN: () => MAX_TEMPLATE_INPUTS_SEEN,
+  MAX_TEMPLATE_INPUT_EXAMPLE_LENGTH: () => MAX_TEMPLATE_INPUT_EXAMPLE_LENGTH,
+  MAX_TEMPLATE_INPUT_LABEL_LENGTH: () => MAX_TEMPLATE_INPUT_LABEL_LENGTH,
+  MAX_TEMPLATE_INPUT_NOTE_LENGTH: () => MAX_TEMPLATE_INPUT_NOTE_LENGTH,
+  MAX_TEMPLATE_INPUT_VALUES: () => MAX_TEMPLATE_INPUT_VALUES,
   MAX_TEMPLATE_TRANSLATIONS: () => MAX_TEMPLATE_TRANSLATIONS,
   MAX_TRIGGERS: () => MAX_TRIGGERS,
   MEMBER_ROLES: () => MEMBER_ROLES,
@@ -342,6 +349,7 @@ __export(index_exports, {
   RecipientStatus: () => RecipientStatus,
   RemoteImage: () => RemoteImage,
   ResendSigningSecret: () => ResendSigningSecret,
+  SERVICE_FILLED_MERGE_FIELDS: () => SERVICE_FILLED_MERGE_FIELDS,
   SIGNUP_FORM_FIELDS: () => SIGNUP_FORM_FIELDS,
   SKIP_REASONS: () => SKIP_REASONS,
   SMTP_SECURITY: () => SMTP_SECURITY,
@@ -371,6 +379,8 @@ __export(index_exports, {
   SuppressionCreate: () => SuppressionCreate,
   SuppressionListQuery: () => SuppressionListQuery,
   SuppressionReason: () => SuppressionReason,
+  TEMPLATE_INPUT_KINDS: () => TEMPLATE_INPUT_KINDS,
+  TEMPLATE_INPUT_PROBLEM_REASONS: () => TEMPLATE_INPUT_PROBLEM_REASONS,
   TEMPLATE_LANGUAGE_STATUSES: () => TEMPLATE_LANGUAGE_STATUSES,
   TERMINAL_MAILING_STATUSES: () => TERMINAL_MAILING_STATUSES,
   Tag: () => Tag,
@@ -387,6 +397,16 @@ __export(index_exports, {
   TemplateImportPreview: () => TemplateImportPreview,
   TemplateImportPreviewRequest: () => TemplateImportPreviewRequest,
   TemplateImportResult: () => TemplateImportResult,
+  TemplateInput: () => TemplateInput,
+  TemplateInputMap: () => TemplateInputMap,
+  TemplateInputName: () => TemplateInputName,
+  TemplateInputSeen: () => TemplateInputSeen,
+  TemplateInputSource: () => TemplateInputSource,
+  TemplateInputValue: () => TemplateInputValue,
+  TemplateInputs: () => TemplateInputs,
+  TemplateInputsDeclaration: () => TemplateInputsDeclaration,
+  TemplateInputsDeclared: () => TemplateInputsDeclared,
+  TemplateInputsSeen: () => TemplateInputsSeen,
   TemplateLanguageStatus: () => TemplateLanguageStatus,
   TemplateListQuery: () => TemplateListQuery,
   TemplatePreheader: () => TemplatePreheader,
@@ -540,6 +560,10 @@ __export(index_exports, {
   renameInsertionChecked: () => renameInsertionChecked,
   renameInsertionChoice: () => renameInsertionChoice,
   renameInsertionChoiceChecked: () => renameInsertionChoiceChecked,
+  renameInsertionEverywhere: () => renameInsertionEverywhere,
+  renameInsertionPlacements: () => renameInsertionPlacements,
+  renameTokenInDocument: () => renameTokenInDocument,
+  renameTokenInText: () => renameTokenInText,
   resolveInsertions: () => resolveInsertions,
   restorePatch: () => restorePatch,
   routes: () => routes,
@@ -555,6 +579,8 @@ __export(index_exports, {
   stepTargets: () => stepTargets,
   storedTemplateLine: () => storedTemplateLine,
   stronglyConnected: () => stronglyConnected,
+  templateInputDrift: () => templateInputDrift,
+  templateInputProblems: () => templateInputProblems,
   templateRoutes: () => templateRoutes,
   testGroupSize: () => testGroupSize,
   tightLoops: () => tightLoops,
@@ -562,6 +588,7 @@ __export(index_exports, {
   translationInsertionProblems: () => translationInsertionProblems,
   translationTextFromInput: () => translationTextFromInput,
   triggerKey: () => triggerKey,
+  unknownRefusedInsertions: () => unknownRefusedInsertions,
   unplacedInsertions: () => unplacedInsertions,
   validateAutomation: () => validateAutomation,
   verifyWebhook: () => verifyWebhook
@@ -715,13 +742,13 @@ var API_VERSION_PREFIX = "/v1";
 var HEALTH_PATH = "/healthz";
 
 // src/workspace.ts
-var import_zod9 = require("zod");
+var import_zod10 = require("zod");
 
 // src/automations.ts
-var import_zod8 = require("zod");
+var import_zod9 = require("zod");
 
 // src/templates.ts
-var import_zod4 = require("zod");
+var import_zod5 = require("zod");
 
 // src/insertions.ts
 var import_zod3 = require("zod");
@@ -1012,22 +1039,133 @@ function sampleMergeValue(values) {
   };
 }
 
+// src/template-inputs.ts
+var import_zod4 = require("zod");
+var MAX_TEMPLATE_INPUTS = 50;
+var MAX_TEMPLATE_INPUT_VALUES = 30;
+var MAX_TEMPLATE_INPUT_LABEL_LENGTH = 80;
+var MAX_TEMPLATE_INPUT_NOTE_LENGTH = 300;
+var MAX_TEMPLATE_INPUT_EXAMPLE_LENGTH = 500;
+var MAX_TEMPLATE_INPUTS_APP_LENGTH = 80;
+var MAX_TEMPLATE_INPUTS_SEEN = 200;
+var SERVICE_FILLED_MERGE_FIELDS = ["email", "unsubscribe_url"];
+var line = (max) => import_zod4.z.string().min(1).max(max).regex(/^[^\x00-\x1f\x7f]*$/, "one line, without control characters").refine((s) => s.trim() !== "", "not blank");
+var label = line(MAX_TEMPLATE_INPUT_LABEL_LENGTH);
+var note = line(MAX_TEMPLATE_INPUT_NOTE_LENGTH);
+var TemplateInputName = InsertionName;
+var TemplateInputSource = import_zod4.z.discriminatedUnion("kind", [
+  import_zod4.z.object({ kind: import_zod4.z.literal("form_field"), form: label, field: label, note: note.optional() }),
+  import_zod4.z.object({ kind: import_zod4.z.literal("derived"), note })
+]);
+var TemplateInputValue = import_zod4.z.object({
+  /** The key the app sends, in an insertion choice's syntax, so a row "When it is venue" matches it exactly. */
+  value: InsertionChoiceKey,
+  label
+});
+var HttpUrl = import_zod4.z.string().max(MAX_TEMPLATE_INPUT_EXAMPLE_LENGTH).url().refine((u) => {
+  try {
+    const { protocol } = new URL(u);
+    return protocol === "https:" || protocol === "http:";
+  } catch {
+    return false;
+  }
+}, "an http or https address");
+var common = {
+  /** What an author sees: "Contact reason", "First name". */
+  label,
+  source: TemplateInputSource,
+  /** The app may send it empty or not at all (a name nobody typed). Absent means it is always sent. */
+  optional: import_zod4.z.boolean().optional()
+};
+var TemplateInput = import_zod4.z.discriminatedUnion("kind", [
+  import_zod4.z.object({ kind: import_zod4.z.literal("text"), ...common, example: import_zod4.z.string().max(MAX_TEMPLATE_INPUT_EXAMPLE_LENGTH).optional() }),
+  import_zod4.z.object({ kind: import_zod4.z.literal("url"), ...common, example: HttpUrl.optional() }),
+  import_zod4.z.object({ kind: import_zod4.z.literal("boolean"), ...common, example: import_zod4.z.boolean().optional() }),
+  import_zod4.z.object({
+    kind: import_zod4.z.literal("one_of"),
+    ...common,
+    values: import_zod4.z.array(TemplateInputValue).min(1).max(MAX_TEMPLATE_INPUT_VALUES),
+    example: InsertionChoiceKey.optional()
+  })
+]);
+var TEMPLATE_INPUT_KINDS = ["text", "url", "boolean", "one_of"];
+var TemplateInputMap = import_zod4.z.record(TemplateInputName, TemplateInput).refine((m) => Object.keys(m).length <= MAX_TEMPLATE_INPUTS, `at most ${MAX_TEMPLATE_INPUTS} inputs`);
+var TemplateInputsDeclaration = import_zod4.z.object({
+  app: line(MAX_TEMPLATE_INPUTS_APP_LENGTH),
+  app_version: line(MAX_TEMPLATE_INPUTS_APP_LENGTH).optional(),
+  inputs: TemplateInputMap
+});
+var TemplateInputs = import_zod4.z.object({
+  app: import_zod4.z.string(),
+  app_version: import_zod4.z.string().nullable(),
+  inputs: TemplateInputMap,
+  declared_by: import_zod4.z.object({ api_key_id: Id, api_key_name: import_zod4.z.string() }),
+  declared_at: Timestamp
+});
+var TemplateInputSeen = import_zod4.z.object({
+  count: import_zod4.z.number().int().min(1),
+  first_seen_at: Timestamp,
+  last_seen_at: Timestamp
+});
+var TemplateInputsSeen = import_zod4.z.record(TemplateInputName, TemplateInputSeen);
+var TemplateInputsDeclared = import_zod4.z.object({
+  template_id: Id,
+  inputs: TemplateInputs,
+  /** False when the stored declaration already said exactly this (a redeploy of the same commit). */
+  changed: import_zod4.z.boolean()
+});
+var TEMPLATE_INPUT_PROBLEM_REASONS = [
+  /** `email` or `unsubscribe_url`: the service fills it, a client's value is never read. */
+  "input_reserved",
+  /** A `one_of` input lists the same value twice. */
+  "input_values",
+  /** A `one_of` input's example is not one of its values. */
+  "input_example"
+];
+function templateInputProblems(inputs) {
+  const problems = [];
+  for (const [name, input] of Object.entries(inputs)) {
+    if (SERVICE_FILLED_MERGE_FIELDS.includes(name)) {
+      problems.push({ reason: "input_reserved", path: name, message: `"${name}" is filled by the service, never by the app; leave it out of the declaration` });
+    }
+    if (input.kind !== "one_of") continue;
+    const seen = /* @__PURE__ */ new Set();
+    input.values.forEach((v, i) => {
+      if (seen.has(v.value)) {
+        problems.push({ reason: "input_values", path: `${name}.values.${i}`, message: `"${v.value}" is listed twice` });
+      }
+      seen.add(v.value);
+    });
+    if (input.example !== void 0 && !seen.has(input.example)) {
+      problems.push({ reason: "input_example", path: `${name}.example`, message: `the example "${input.example}" is not one of the values` });
+    }
+  }
+  return problems;
+}
+function templateInputDrift(inputs, seen) {
+  const declared = inputs ? Object.keys(inputs.inputs) : [];
+  return {
+    declared_not_seen: declared.filter((name) => ownEntry(seen, name) === void 0).sort(),
+    seen_not_declared: Object.keys(seen).filter((name) => ownEntry(inputs?.inputs, name) === void 0).sort()
+  };
+}
+
 // src/templates.ts
 var DOCUMENT_SCHEMA_VERSIONS = ["1.0", "1.1"];
-var DocumentSchemaVersion = import_zod4.z.enum(DOCUMENT_SCHEMA_VERSIONS);
-var TemplateDocument = import_zod4.z.object({
+var DocumentSchemaVersion = import_zod5.z.enum(DOCUMENT_SCHEMA_VERSIONS);
+var TemplateDocument = import_zod5.z.object({
   version: DocumentSchemaVersion,
-  metadata: import_zod4.z.record(import_zod4.z.unknown()),
-  sections: import_zod4.z.array(import_zod4.z.record(import_zod4.z.unknown()))
+  metadata: import_zod5.z.record(import_zod5.z.unknown()),
+  sections: import_zod5.z.array(import_zod5.z.record(import_zod5.z.unknown()))
 }).passthrough();
 var MAX_DOCUMENT_BYTES = 1e6;
 var MAX_SUBJECT_LENGTH = 998;
 var MAX_PREHEADER_LENGTH = 500;
-var TemplateSubject = import_zod4.z.string().max(MAX_SUBJECT_LENGTH).regex(/^[^\x00-\x1f\x7f]*$/, "one line, without control characters");
-var TemplatePreheader = import_zod4.z.string().max(MAX_PREHEADER_LENGTH).regex(/^[^\x00-\x1f\x7f]*$/, "one line, without control characters");
+var TemplateSubject = import_zod5.z.string().max(MAX_SUBJECT_LENGTH).regex(/^[^\x00-\x1f\x7f]*$/, "one line, without control characters");
+var TemplatePreheader = import_zod5.z.string().max(MAX_PREHEADER_LENGTH).regex(/^[^\x00-\x1f\x7f]*$/, "one line, without control characters");
 var TEMPLATE_LANGUAGE_STATUSES = ["draft", "ready"];
-var TemplateLanguageStatus = import_zod4.z.enum(TEMPLATE_LANGUAGE_STATUSES);
-var TemplateTranslation = import_zod4.z.object({
+var TemplateLanguageStatus = import_zod5.z.enum(TEMPLATE_LANGUAGE_STATUSES);
+var TemplateTranslation = import_zod5.z.object({
   subject: TemplateSubject.nullable(),
   preheader: TemplatePreheader.nullable(),
   document: TemplateDocument,
@@ -1045,11 +1183,11 @@ var TemplateTranslation = import_zod4.z.object({
   insertions: TranslationInsertions.optional()
 });
 var MAX_TEMPLATE_TRANSLATIONS = 19;
-var TemplateTranslations = import_zod4.z.record(LocaleTag, TemplateTranslation).refine((t) => Object.keys(t).length <= MAX_TEMPLATE_TRANSLATIONS, `at most ${MAX_TEMPLATE_TRANSLATIONS} language versions`);
-var Template = import_zod4.z.object({
+var TemplateTranslations = import_zod5.z.record(LocaleTag, TemplateTranslation).refine((t) => Object.keys(t).length <= MAX_TEMPLATE_TRANSLATIONS, `at most ${MAX_TEMPLATE_TRANSLATIONS} language versions`);
+var Template = import_zod5.z.object({
   id: Id,
-  name: import_zod4.z.string().min(1).max(200),
-  description: import_zod4.z.string().max(2e3).nullable(),
+  name: import_zod5.z.string().min(1).max(200),
+  description: import_zod5.z.string().max(2e3).nullable(),
   /**
    * The main language: what `subject`, `preheader` and `document` are written
    * in, and what every recipient without a ready version of their own gets.
@@ -1073,21 +1211,33 @@ var Template = import_zod4.z.object({
    * texts in `translations[tag].insertions`.
    */
   insertions: Insertions,
+  /**
+   * What the sending app declared this template receives
+   * (`templates.declareInputs`); null until an app declares. Not part of a
+   * version: declaring never changes `version` or `updated_at`.
+   */
+  inputs: TemplateInputs.nullable(),
+  /**
+   * The merge names real sends of this template carried, with a count and
+   * when first and last seen. Names only, never values. `{}` before the
+   * first send.
+   */
+  inputs_seen: TemplateInputsSeen,
   /** Increments on every saved change, of any language. */
-  version: import_zod4.z.number().int().min(1),
-  thumbnail_url: import_zod4.z.string().url().nullable(),
+  version: import_zod5.z.number().int().min(1),
+  thumbnail_url: import_zod5.z.string().url().nullable(),
   archived_at: Timestamp.nullable(),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var TemplateSummary = Template.omit({ document: true, translations: true, insertions: true }).extend({
-  languages: import_zod4.z.record(LocaleTag, TemplateLanguageStatus),
+var TemplateSummary = Template.omit({ document: true, translations: true, insertions: true, inputs: true, inputs_seen: true }).extend({
+  languages: import_zod5.z.record(LocaleTag, TemplateLanguageStatus),
   /** The names of the template's insertions, sorted alphabetically. */
-  insertion_names: import_zod4.z.array(import_zod4.z.string())
+  insertion_names: import_zod5.z.array(import_zod5.z.string())
 });
-var TemplateCreate = import_zod4.z.object({
-  name: import_zod4.z.string().min(1).max(200),
-  description: import_zod4.z.string().max(2e3).optional(),
+var TemplateCreate = import_zod5.z.object({
+  name: import_zod5.z.string().min(1).max(200),
+  description: import_zod5.z.string().max(2e3).optional(),
   locale: LocaleTag.optional(),
   subject: TemplateSubject.nullable().optional(),
   preheader: TemplatePreheader.nullable().optional(),
@@ -1095,15 +1245,15 @@ var TemplateCreate = import_zod4.z.object({
   translations: TemplateTranslations.optional(),
   insertions: Insertions.optional()
 });
-var TemplateUpdate = import_zod4.z.object({
-  base_version: import_zod4.z.number().int().min(1),
-  name: import_zod4.z.string().min(1).max(200).optional(),
-  description: import_zod4.z.string().max(2e3).nullable().optional(),
+var TemplateUpdate = import_zod5.z.object({
+  base_version: import_zod5.z.number().int().min(1),
+  name: import_zod5.z.string().min(1).max(200).optional(),
+  description: import_zod5.z.string().max(2e3).nullable().optional(),
   locale: LocaleTag.optional(),
   subject: TemplateSubject.nullable().optional(),
   preheader: TemplatePreheader.nullable().optional(),
   document: TemplateDocument.optional(),
-  translations: import_zod4.z.record(LocaleTag, TemplateTranslation.nullable()).optional(),
+  translations: import_zod5.z.record(LocaleTag, TemplateTranslation.nullable()).optional(),
   /**
    * The main language's insertions, whole: what is left out is removed, from
    * every language in the same save. A rename is a removal and an addition,
@@ -1111,87 +1261,87 @@ var TemplateUpdate = import_zod4.z.object({
    * save (it sends those languages in `translations`).
    */
   insertions: Insertions.optional(),
-  archived: import_zod4.z.boolean().optional()
+  archived: import_zod5.z.boolean().optional()
 }).refine(
   (v) => v.name !== void 0 || v.description !== void 0 || v.locale !== void 0 || v.subject !== void 0 || v.preheader !== void 0 || v.document !== void 0 || v.translations !== void 0 || v.insertions !== void 0 || v.archived !== void 0,
   "at least one field besides base_version"
 );
-var SavedSectionBody = import_zod4.z.record(import_zod4.z.unknown());
+var SavedSectionBody = import_zod5.z.record(import_zod5.z.unknown());
 var MAX_SAVED_SECTIONS = 50;
-var SavedSection = import_zod4.z.object({
+var SavedSection = import_zod5.z.object({
   id: Id,
-  name: import_zod4.z.string().min(1).max(200),
-  description: import_zod4.z.string().max(2e3).nullable(),
+  name: import_zod5.z.string().min(1).max(200),
+  description: import_zod5.z.string().max(2e3).nullable(),
   section: SavedSectionBody,
-  created_by: import_zod4.z.string().nullable(),
+  created_by: import_zod5.z.string().nullable(),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var SavedSectionCreate = import_zod4.z.object({
-  name: import_zod4.z.string().min(1).max(200),
-  description: import_zod4.z.string().max(2e3).optional(),
+var SavedSectionCreate = import_zod5.z.object({
+  name: import_zod5.z.string().min(1).max(200),
+  description: import_zod5.z.string().max(2e3).optional(),
   section: SavedSectionBody
 });
-var SavedSectionUpdate = import_zod4.z.object({
-  name: import_zod4.z.string().min(1).max(200).optional(),
-  description: import_zod4.z.string().max(2e3).nullable().optional(),
+var SavedSectionUpdate = import_zod5.z.object({
+  name: import_zod5.z.string().min(1).max(200).optional(),
+  description: import_zod5.z.string().max(2e3).nullable().optional(),
   section: SavedSectionBody.optional()
 }).refine((v) => v.name !== void 0 || v.description !== void 0 || v.section !== void 0, "at least one field");
 var TemplateListQuery = PageQuery.extend({
-  archived: import_zod4.z.enum(["true", "false"]).optional()
+  archived: import_zod5.z.enum(["true", "false"]).optional()
 });
-var TemplateVersion = import_zod4.z.object({
+var TemplateVersion = import_zod5.z.object({
   template_id: Id,
-  version: import_zod4.z.number().int().min(1),
+  version: import_zod5.z.number().int().min(1),
   locale: LocaleTag,
   subject: TemplateSubject.nullable(),
   preheader: TemplatePreheader.nullable(),
   document: TemplateDocument,
   translations: TemplateTranslations,
   insertions: Insertions,
-  created_by: import_zod4.z.string().nullable(),
+  created_by: import_zod5.z.string().nullable(),
   created_at: Timestamp
 });
-var TemplateVersionParams = import_zod4.z.object({
+var TemplateVersionParams = import_zod5.z.object({
   id: Id,
-  version: import_zod4.z.coerce.number().int().min(1)
+  version: import_zod5.z.coerce.number().int().min(1)
 });
-var CompileMessage = import_zod4.z.object({
-  message: import_zod4.z.string().min(1),
+var CompileMessage = import_zod5.z.object({
+  message: import_zod5.z.string().min(1),
   /** Where in the document or the MJML the message points, when known. */
-  path: import_zod4.z.string().optional(),
-  line: import_zod4.z.number().int().min(1).optional()
+  path: import_zod5.z.string().optional(),
+  line: import_zod5.z.number().int().min(1).optional()
 });
-var CompileResult = import_zod4.z.object({
-  mjml: import_zod4.z.string(),
-  html: import_zod4.z.string(),
-  warnings: import_zod4.z.array(CompileMessage),
-  errors: import_zod4.z.array(CompileMessage)
+var CompileResult = import_zod5.z.object({
+  mjml: import_zod5.z.string(),
+  html: import_zod5.z.string(),
+  warnings: import_zod5.z.array(CompileMessage),
+  errors: import_zod5.z.array(CompileMessage)
 });
-var TemplateCompileRequest = import_zod4.z.object({
-  version: import_zod4.z.number().int().min(1).optional(),
+var TemplateCompileRequest = import_zod5.z.object({
+  version: import_zod5.z.number().int().min(1).optional(),
   locale: LocaleTag.optional()
 });
-var CompileRequest = import_zod4.z.object({
+var CompileRequest = import_zod5.z.object({
   document: TemplateDocument
 });
 var ASSET_CONTENT_TYPES = ["image/png", "image/jpeg", "image/gif", "image/webp"];
-var AssetContentType = import_zod4.z.enum(ASSET_CONTENT_TYPES);
+var AssetContentType = import_zod5.z.enum(ASSET_CONTENT_TYPES);
 var MAX_ASSET_BYTES = 10 * 1024 * 1024;
-var Asset = import_zod4.z.object({
+var Asset = import_zod5.z.object({
   id: Id,
-  url: import_zod4.z.string().url(),
+  url: import_zod5.z.string().url(),
   content_type: AssetContentType,
-  size_bytes: import_zod4.z.number().int().min(1).max(MAX_ASSET_BYTES),
-  width: import_zod4.z.number().int().min(1).nullable(),
-  height: import_zod4.z.number().int().min(1).nullable(),
-  filename: import_zod4.z.string().min(1).max(255),
+  size_bytes: import_zod5.z.number().int().min(1).max(MAX_ASSET_BYTES),
+  width: import_zod5.z.number().int().min(1).nullable(),
+  height: import_zod5.z.number().int().min(1).nullable(),
+  filename: import_zod5.z.string().min(1).max(255),
   created_at: Timestamp
 });
 var ASSET_UPLOAD_FIELD = "file";
 var MAX_IMPORT_URL_LENGTH = 2048;
-var AssetImport = import_zod4.z.object({
-  url: import_zod4.z.string().max(MAX_IMPORT_URL_LENGTH).url().refine((u) => {
+var AssetImport = import_zod5.z.object({
+  url: import_zod5.z.string().max(MAX_IMPORT_URL_LENGTH).url().refine((u) => {
     try {
       const url = new URL(u);
       if (url.protocol === "https:") return true;
@@ -1201,7 +1351,7 @@ var AssetImport = import_zod4.z.object({
     }
   }, "must be https (http only for localhost)"),
   /** The stored file name; derived from the address when omitted. */
-  filename: import_zod4.z.string().min(1).max(255).optional()
+  filename: import_zod5.z.string().min(1).max(255).optional()
 });
 var MAX_MJML_IMPORT_BYTES = 512 * 1024;
 var MAX_MJML_DEPTH = 32;
@@ -1216,56 +1366,56 @@ var MJML_IMPORT_REFUSALS = [
   "too_complex",
   "invalid_document"
 ];
-var ImportWarning = import_zod4.z.object({
-  severity: import_zod4.z.enum(["info", "warning"]),
+var ImportWarning = import_zod5.z.object({
+  severity: import_zod5.z.enum(["info", "warning"]),
   /** Stable kind, e.g. `kept_as_html`, `unknown_component`, `remote_image_not_imported`. */
-  code: import_zod4.z.string().min(1).max(64),
+  code: import_zod5.z.string().min(1).max(64),
   /** Where in the source, e.g. `mj-body > mj-section[2] > mj-column[1] > mj-social[1]`. */
-  path: import_zod4.z.string(),
-  line: import_zod4.z.number().int().min(1).optional(),
-  message: import_zod4.z.string().min(1),
-  fragment: import_zod4.z.string().optional()
+  path: import_zod5.z.string(),
+  line: import_zod5.z.number().int().min(1).optional(),
+  message: import_zod5.z.string().min(1),
+  fragment: import_zod5.z.string().optional()
 });
-var RemoteImage = import_zod4.z.object({
-  url: import_zod4.z.string().min(1),
+var RemoteImage = import_zod5.z.object({
+  url: import_zod5.z.string().min(1),
   /** The element and attribute it is loaded from, e.g. `<img src>`. */
-  where: import_zod4.z.string()
+  where: import_zod5.z.string()
 });
-var ImportedAsset = import_zod4.z.object({
-  source_url: import_zod4.z.string().min(1),
+var ImportedAsset = import_zod5.z.object({
+  source_url: import_zod5.z.string().min(1),
   asset_id: Id,
-  url: import_zod4.z.string().url()
+  url: import_zod5.z.string().url()
 });
-var mjmlSource = import_zod4.z.string().min(1, "paste or upload the MJML");
-var TemplateImportPreviewRequest = import_zod4.z.object({ mjml: mjmlSource });
-var TemplateImportPreview = import_zod4.z.object({
+var mjmlSource = import_zod5.z.string().min(1, "paste or upload the MJML");
+var TemplateImportPreviewRequest = import_zod5.z.object({ mjml: mjmlSource });
+var TemplateImportPreview = import_zod5.z.object({
   document: TemplateDocument,
-  warnings: import_zod4.z.array(ImportWarning),
+  warnings: import_zod5.z.array(ImportWarning),
   /** The document compiled under the workspace's asset policy, exactly as a send would. */
   compiled: CompileResult,
   /** Images loaded from outside the service; under `service_only` each is also a compile error. */
-  remote_images: import_zod4.z.array(RemoteImage),
-  asset_policy: import_zod4.z.enum(["any", "service_only"])
+  remote_images: import_zod5.z.array(RemoteImage),
+  asset_policy: import_zod5.z.enum(["any", "service_only"])
 });
-var TemplateImport = import_zod4.z.object({
-  name: import_zod4.z.string().min(1).max(200),
-  description: import_zod4.z.string().max(2e3).optional(),
+var TemplateImport = import_zod5.z.object({
+  name: import_zod5.z.string().min(1).max(200),
+  description: import_zod5.z.string().max(2e3).optional(),
   mjml: mjmlSource,
-  import_remote_assets: import_zod4.z.boolean().optional()
+  import_remote_assets: import_zod5.z.boolean().optional()
 });
-var TemplateImportResult = import_zod4.z.object({
+var TemplateImportResult = import_zod5.z.object({
   template: Template,
-  warnings: import_zod4.z.array(ImportWarning),
-  imported_assets: import_zod4.z.array(ImportedAsset)
+  warnings: import_zod5.z.array(ImportWarning),
+  imported_assets: import_zod5.z.array(ImportedAsset)
 });
 var EXPORT_FORMATS = ["mjml", "html"];
-var ExportFormat = import_zod4.z.enum(EXPORT_FORMATS);
-var TemplateExportQuery = import_zod4.z.object({
+var ExportFormat = import_zod5.z.enum(EXPORT_FORMATS);
+var TemplateExportQuery = import_zod5.z.object({
   format: ExportFormat,
-  version: import_zod4.z.coerce.number().int().min(1).optional(),
+  version: import_zod5.z.coerce.number().int().min(1).optional(),
   locale: LocaleTag.optional()
 });
-var MailingExportQuery = import_zod4.z.object({ format: ExportFormat });
+var MailingExportQuery = import_zod5.z.object({ format: ExportFormat });
 var EXPORT_CONTENT_TYPES = {
   mjml: "text/plain; charset=utf-8",
   html: "text/html; charset=utf-8"
@@ -1284,7 +1434,7 @@ function formatExportWarningsHeader(messages) {
 function parseExportWarningsHeader(value) {
   if (!value) return [];
   try {
-    const parsed = import_zod4.z.array(CompileMessage).safeParse(JSON.parse(decodeURIComponent(value)));
+    const parsed = import_zod5.z.array(CompileMessage).safeParse(JSON.parse(decodeURIComponent(value)));
     return parsed.success ? parsed.data : [];
   } catch {
     return [];
@@ -1296,32 +1446,32 @@ function exportFilename(name, format) {
 }
 
 // src/platform.ts
-var import_zod7 = require("zod");
+var import_zod8 = require("zod");
 
 // src/mailings.ts
-var import_zod6 = require("zod");
+var import_zod7 = require("zod");
 
 // src/ab-test.ts
-var import_zod5 = require("zod");
-var AbVariant = import_zod5.z.object({
-  key: import_zod5.z.string().regex(/^[a-z]$/, "a single lowercase letter"),
-  subject: import_zod5.z.string().min(1).max(998).optional(),
+var import_zod6 = require("zod");
+var AbVariant = import_zod6.z.object({
+  key: import_zod6.z.string().regex(/^[a-z]$/, "a single lowercase letter"),
+  subject: import_zod6.z.string().min(1).max(998).optional(),
   /** Replaces the mailing's document for this variant. */
-  document: import_zod5.z.record(import_zod5.z.unknown()).optional(),
+  document: import_zod6.z.record(import_zod6.z.unknown()).optional(),
   /**
    * Keeps the document this variant key already has in the mailing's current
    * test, so a test can be changed without sending every document again. The
    * service refuses it (`validation_failed`) when that variant has none.
    */
-  keep_document: import_zod5.z.literal(true).optional()
+  keep_document: import_zod6.z.literal(true).optional()
 });
 var AB_WINNER_METRICS = ["opens", "clicks", "manual"];
-var AbTestConfig = import_zod5.z.object({
-  variants: import_zod5.z.array(AbVariant).min(2).max(5),
+var AbTestConfig = import_zod6.z.object({
+  variants: import_zod6.z.array(AbVariant).min(2).max(5),
   /** Share of recipients in the test group, split evenly across variants; the rest get the winner. */
-  test_fraction: import_zod5.z.number().gt(0).lte(1),
-  winner_metric: import_zod5.z.enum(AB_WINNER_METRICS),
-  decide_after_minutes: import_zod5.z.number().int().min(15).max(10080).optional()
+  test_fraction: import_zod6.z.number().gt(0).lte(1),
+  winner_metric: import_zod6.z.enum(AB_WINNER_METRICS),
+  decide_after_minutes: import_zod6.z.number().int().min(15).max(10080).optional()
 }).refine((c) => new Set(c.variants.map((v) => v.key)).size === c.variants.length, "variant keys must be unique").refine((c) => c.variants.every((v) => v.subject !== void 0 || v.document !== void 0 || v.keep_document === true), {
   message: "every variant changes the subject, the document or both",
   path: ["variants"]
@@ -1333,19 +1483,19 @@ var AbTestConfig = import_zod5.z.object({
   path: ["decide_after_minutes"]
 });
 var AB_TEST_STATUSES = ["pending", "testing", "awaiting_pick", "decided"];
-var AbTestState = import_zod5.z.object({
-  variants: import_zod5.z.array(import_zod5.z.object({ key: import_zod5.z.string(), subject: import_zod5.z.string().nullable(), has_document: import_zod5.z.boolean() })),
-  test_fraction: import_zod5.z.number(),
-  winner_metric: import_zod5.z.enum(AB_WINNER_METRICS),
-  decide_after_minutes: import_zod5.z.number().int().nullable(),
-  status: import_zod5.z.enum(AB_TEST_STATUSES),
+var AbTestState = import_zod6.z.object({
+  variants: import_zod6.z.array(import_zod6.z.object({ key: import_zod6.z.string(), subject: import_zod6.z.string().nullable(), has_document: import_zod6.z.boolean() })),
+  test_fraction: import_zod6.z.number(),
+  winner_metric: import_zod6.z.enum(AB_WINNER_METRICS),
+  decide_after_minutes: import_zod6.z.number().int().nullable(),
+  status: import_zod6.z.enum(AB_TEST_STATUSES),
   /** When the metric decides; null for manual or before the start. */
   decide_at: Timestamp.nullable(),
-  winner: import_zod5.z.string().nullable(),
-  decided_by: import_zod5.z.enum(["metric", "manual"]).nullable(),
+  winner: import_zod6.z.string().nullable(),
+  decided_by: import_zod6.z.enum(["metric", "manual"]).nullable(),
   decided_at: Timestamp.nullable()
 });
-var AbWinnerRequest = import_zod5.z.object({ variant: import_zod5.z.string().regex(/^[a-z]$/) });
+var AbWinnerRequest = import_zod6.z.object({ variant: import_zod6.z.string().regex(/^[a-z]$/) });
 function testGroupSize(total, fraction, variants) {
   return Math.min(total, Math.max(variants, Math.ceil(total * fraction)));
 }
@@ -1360,9 +1510,9 @@ var MAILING_STATUSES = [
   "partially_failed",
   "cancelled"
 ];
-var MailingStatus = import_zod6.z.enum(MAILING_STATUSES);
+var MailingStatus = import_zod7.z.enum(MAILING_STATUSES);
 var MAILING_ACTIONS = ["send", "schedule", "unschedule", "pause", "resume", "cancel", "retry-failed"];
-var MailingAction = import_zod6.z.enum(MAILING_ACTIONS);
+var MailingAction = import_zod7.z.enum(MAILING_ACTIONS);
 var MAILING_TRANSITIONS = {
   draft: ["send", "schedule", "cancel"],
   scheduled: ["send", "schedule", "unschedule", "cancel"],
@@ -1377,23 +1527,23 @@ function canTransition(status, action) {
 }
 var EDITABLE_MAILING_STATUSES = ["draft", "scheduled"];
 var TERMINAL_MAILING_STATUSES = ["sent", "cancelled"];
-var MailingMetadata = import_zod6.z.record(import_zod6.z.string().max(500)).refine((v) => Object.keys(v).length <= 20, "at most 20 keys").refine((v) => Object.keys(v).every((k) => k.length >= 1 && k.length <= 64), "keys are 1 to 64 characters");
-var MailingCounts = import_zod6.z.object({
-  total: import_zod6.z.number().int().min(0),
-  queued: import_zod6.z.number().int().min(0),
-  sending: import_zod6.z.number().int().min(0),
-  sent: import_zod6.z.number().int().min(0),
-  failed: import_zod6.z.number().int().min(0),
-  skipped: import_zod6.z.number().int().min(0)
+var MailingMetadata = import_zod7.z.record(import_zod7.z.string().max(500)).refine((v) => Object.keys(v).length <= 20, "at most 20 keys").refine((v) => Object.keys(v).every((k) => k.length >= 1 && k.length <= 64), "keys are 1 to 64 characters");
+var MailingCounts = import_zod7.z.object({
+  total: import_zod7.z.number().int().min(0),
+  queued: import_zod7.z.number().int().min(0),
+  sending: import_zod7.z.number().int().min(0),
+  sent: import_zod7.z.number().int().min(0),
+  failed: import_zod7.z.number().int().min(0),
+  skipped: import_zod7.z.number().int().min(0)
 });
 var MAILING_KINDS = ["broadcast", "automation", "notification"];
-var MailingKind = import_zod6.z.enum(MAILING_KINDS);
-var Mailing = import_zod6.z.object({
+var MailingKind = import_zod7.z.enum(MAILING_KINDS);
+var Mailing = import_zod7.z.object({
   id: Id,
   kind: MailingKind,
-  name: import_zod6.z.string().max(200).nullable(),
-  subject: import_zod6.z.string().min(1).max(998),
-  preheader: import_zod6.z.string().max(500).nullable(),
+  name: import_zod7.z.string().max(200).nullable(),
+  subject: import_zod7.z.string().min(1).max(998),
+  preheader: import_zod7.z.string().max(500).nullable(),
   /**
    * The template the document was taken from, if any. The snapshot is what is
    * sent in the main language; the template's other language versions are
@@ -1438,15 +1588,15 @@ var Mailing = import_zod6.z.object({
    * recipients refused as dead addresses in one run (see the provider's
    * `rejections.anomaly`). Resuming clears it and starts a new run.
    */
-  pause_reason: import_zod6.z.string().nullable().default(null),
+  pause_reason: import_zod7.z.string().nullable().default(null),
   created_at: Timestamp,
   updated_at: Timestamp
 });
 var MailingSummary = Mailing.omit({ document: true });
 var MailingContent = {
-  name: import_zod6.z.string().max(200).optional(),
-  subject: import_zod6.z.string().min(1).max(998),
-  preheader: import_zod6.z.string().max(500).optional(),
+  name: import_zod7.z.string().max(200).optional(),
+  subject: import_zod7.z.string().min(1).max(998),
+  preheader: import_zod7.z.string().max(500).optional(),
   /** See `Mailing.send_locale`. */
   send_locale: LocaleTag.nullable().optional(),
   /**
@@ -1459,7 +1609,7 @@ var MailingContent = {
   provider_id: Id,
   metadata: MailingMetadata.optional()
 };
-var MailingCreate = import_zod6.z.object({
+var MailingCreate = import_zod7.z.object({
   ...MailingContent,
   subject: MailingContent.subject.optional(),
   document: TemplateDocument.optional(),
@@ -1471,10 +1621,10 @@ var MailingCreate = import_zod6.z.object({
   message: "a mailing made from a document needs a subject",
   path: ["subject"]
 });
-var MailingUpdate = import_zod6.z.object({
-  name: import_zod6.z.string().max(200).nullable().optional(),
+var MailingUpdate = import_zod7.z.object({
+  name: import_zod7.z.string().max(200).nullable().optional(),
   subject: MailingContent.subject.optional(),
-  preheader: import_zod6.z.string().max(500).nullable().optional(),
+  preheader: import_zod7.z.string().max(500).nullable().optional(),
   /** Null turns a draft into a letter, which it can only be with at most one recipient. */
   topic: Slug.nullable().optional(),
   send_locale: LocaleTag.nullable().optional(),
@@ -1488,30 +1638,30 @@ var MailingListQuery = PageQuery.extend({
   kind: MailingKind.optional(),
   automation_id: Id.optional()
 });
-var MailingSendRequest = import_zod6.z.object({}).strict();
-var MailingRetryFailedRequest = import_zod6.z.object({
+var MailingSendRequest = import_zod7.z.object({}).strict();
+var MailingRetryFailedRequest = import_zod7.z.object({
   /**
    * Also requeue recipients whose outcome is unknown after a crash. They may
    * already have received the message, so this is a human's decision, never a
    * default.
    */
-  include_outcome_unknown: import_zod6.z.boolean().optional()
+  include_outcome_unknown: import_zod7.z.boolean().optional()
 }).strict();
-var MailingActionRequest = import_zod6.z.object({}).strict();
-var MailingTestRequest = import_zod6.z.object({
+var MailingActionRequest = import_zod7.z.object({}).strict();
+var MailingTestRequest = import_zod7.z.object({
   to: Email,
   merge: Properties.optional(),
   locale: LocaleTag.optional()
 });
-var MailingTestResult = import_zod6.z.object({
+var MailingTestResult = import_zod7.z.object({
   message_id: Id,
-  provider_message_id: import_zod6.z.string().nullable()
+  provider_message_id: import_zod7.z.string().nullable()
 });
 var RECIPIENT_STATUSES = ["queued", "sending", "sent", "failed", "skipped"];
-var RecipientStatus = import_zod6.z.enum(RECIPIENT_STATUSES);
+var RecipientStatus = import_zod7.z.enum(RECIPIENT_STATUSES);
 var SKIP_REASONS = ["suppressed", "not_subscribed", "contact_erased", "cancelled", "outcome_unknown"];
-var SkipReason = import_zod6.z.enum(SKIP_REASONS);
-var Recipient = import_zod6.z.object({
+var SkipReason = import_zod7.z.enum(SKIP_REASONS);
+var Recipient = import_zod7.z.object({
   id: Id,
   mailing_id: Id,
   contact_id: Id.nullable(),
@@ -1519,55 +1669,55 @@ var Recipient = import_zod6.z.object({
   merge: Properties,
   status: RecipientStatus,
   skip_reason: SkipReason.nullable(),
-  attempts: import_zod6.z.number().int().min(0),
+  attempts: import_zod7.z.number().int().min(0),
   message_id: Id.nullable(),
-  last_error: import_zod6.z.string().nullable(),
+  last_error: import_zod7.z.string().nullable(),
   created_at: Timestamp,
   updated_at: Timestamp
 });
 var MAX_RECIPIENTS_PER_BATCH = 1e3;
 var MAX_LETTER_RECIPIENTS = 1;
 var LETTER_RECIPIENT_REFUSAL = "letter_has_one_recipient";
-var RecipientInput = import_zod6.z.object({
+var RecipientInput = import_zod7.z.object({
   contact_id: Id.optional(),
-  external_id: import_zod6.z.string().min(1).max(255).optional(),
+  external_id: import_zod7.z.string().min(1).max(255).optional(),
   email: Email.optional(),
   merge: Properties.optional()
 }).refine((v) => v.contact_id !== void 0 || v.external_id !== void 0 || v.email !== void 0, {
   message: "contact_id, external_id or email is required",
   path: ["email"]
 });
-var RecipientBatch = import_zod6.z.object({
-  recipients: import_zod6.z.array(RecipientInput).min(1).max(MAX_RECIPIENTS_PER_BATCH)
+var RecipientBatch = import_zod7.z.object({
+  recipients: import_zod7.z.array(RecipientInput).min(1).max(MAX_RECIPIENTS_PER_BATCH)
 });
 var RECIPIENT_REJECTIONS = ["unknown_contact", "duplicate_in_batch"];
-var RecipientBatchResult = import_zod6.z.object({
+var RecipientBatchResult = import_zod7.z.object({
   /** Newly queued. */
-  added: import_zod6.z.number().int().min(0),
+  added: import_zod7.z.number().int().min(0),
   /** Already on the mailing from an earlier batch: left unchanged. */
-  already_present: import_zod6.z.number().int().min(0),
+  already_present: import_zod7.z.number().int().min(0),
   /** Items not added, by their index in the request. */
-  rejected: import_zod6.z.array(import_zod6.z.object({ index: import_zod6.z.number().int().min(0), reason: import_zod6.z.enum(RECIPIENT_REJECTIONS) }))
+  rejected: import_zod7.z.array(import_zod7.z.object({ index: import_zod7.z.number().int().min(0), reason: import_zod7.z.enum(RECIPIENT_REJECTIONS) }))
 });
 var RecipientListQuery = PageQuery.extend({
   status: RecipientStatus.optional(),
   skip_reason: SkipReason.optional()
 });
 var MESSAGE_OUTCOMES = ["sent", "failed"];
-var MessageOutcome = import_zod6.z.enum(MESSAGE_OUTCOMES);
-var MessageSummary = import_zod6.z.object({
+var MessageOutcome = import_zod7.z.enum(MESSAGE_OUTCOMES);
+var MessageSummary = import_zod7.z.object({
   id: Id,
   mailing_id: Id.nullable(),
   recipient_id: Id.nullable(),
   contact_id: Id.nullable(),
   to: Email,
-  subject: import_zod6.z.string(),
+  subject: import_zod7.z.string(),
   provider_id: Id,
-  provider_message_id: import_zod6.z.string().nullable(),
+  provider_message_id: import_zod7.z.string().nullable(),
   outcome: MessageOutcome,
-  error: import_zod6.z.string().nullable(),
-  is_test: import_zod6.z.boolean(),
-  recipient_count: import_zod6.z.number().int().min(1),
+  error: import_zod7.z.string().nullable(),
+  is_test: import_zod7.z.boolean(),
+  recipient_count: import_zod7.z.number().int().min(1),
   /** The language version the message was sent in; null for messages archived before languages existed. */
   locale: LocaleTag.nullable(),
   /**
@@ -1579,22 +1729,22 @@ var MessageSummary = import_zod6.z.object({
   insertions: InsertionChoices.nullable(),
   created_at: Timestamp
 });
-var Message = MessageSummary.extend({ html: import_zod6.z.string() });
-var MailingLanguageStatus = import_zod6.z.enum(["main", "ready", "draft", "not_a_workspace_language"]);
-var MailingLanguage = import_zod6.z.object({
+var Message = MessageSummary.extend({ html: import_zod7.z.string() });
+var MailingLanguageStatus = import_zod7.z.enum(["main", "ready", "draft", "not_a_workspace_language"]);
+var MailingLanguage = import_zod7.z.object({
   locale: LocaleTag,
   status: MailingLanguageStatus,
   /** Queued recipients who will get this version. */
-  planned: import_zod6.z.number().int().min(0),
+  planned: import_zod7.z.number().int().min(0),
   /** Messages already sent in this language (tests excluded). */
-  sent: import_zod6.z.number().int().min(0)
+  sent: import_zod7.z.number().int().min(0)
 });
-var MailingLanguageReport = import_zod6.z.object({
+var MailingLanguageReport = import_zod7.z.object({
   main_locale: LocaleTag,
   send_locale: LocaleTag.nullable(),
-  languages: import_zod6.z.array(MailingLanguage),
-  fallback: import_zod6.z.array(import_zod6.z.object({ wanted: import_zod6.z.string(), planned: import_zod6.z.number().int().min(1) })),
-  no_language: import_zod6.z.number().int().min(0),
+  languages: import_zod7.z.array(MailingLanguage),
+  fallback: import_zod7.z.array(import_zod7.z.object({ wanted: import_zod7.z.string(), planned: import_zod7.z.number().int().min(1) })),
+  no_language: import_zod7.z.number().int().min(0),
   /**
    * Values that no choice of an insertion takes, so the "otherwise" text goes
    * out (docs/plans/2026-09-25-translated-insertions.md, decision 3): per
@@ -1603,12 +1753,12 @@ var MailingLanguageReport = import_zod6.z.object({
    * template's keys never produces one; a non-empty list means the client and
    * the template have drifted apart.
    */
-  insertion_misses: import_zod6.z.array(
-    import_zod6.z.object({
-      insertion: import_zod6.z.string(),
-      value: import_zod6.z.string(),
-      planned: import_zod6.z.number().int().min(0),
-      sent: import_zod6.z.number().int().min(0)
+  insertion_misses: import_zod7.z.array(
+    import_zod7.z.object({
+      insertion: import_zod7.z.string(),
+      value: import_zod7.z.string(),
+      planned: import_zod7.z.number().int().min(0),
+      sent: import_zod7.z.number().int().min(0)
     })
   )
 });
@@ -1618,26 +1768,26 @@ var MessageListQuery = PageQuery.extend({
 });
 
 // src/platform.ts
-var Tag = import_zod7.z.object({
+var Tag = import_zod8.z.object({
   id: Id,
   slug: Slug,
-  name: import_zod7.z.string().min(1).max(120),
-  contact_count: import_zod7.z.number().int().min(0),
+  name: import_zod8.z.string().min(1).max(120),
+  contact_count: import_zod8.z.number().int().min(0),
   created_at: Timestamp
 });
-var TagCreate = import_zod7.z.object({ slug: Slug, name: import_zod7.z.string().min(1).max(120) });
-var TagAssignment = import_zod7.z.object({
-  contact_ids: import_zod7.z.array(Id).min(1).max(1e3)
+var TagCreate = import_zod8.z.object({ slug: Slug, name: import_zod8.z.string().min(1).max(120) });
+var TagAssignment = import_zod8.z.object({
+  contact_ids: import_zod8.z.array(Id).min(1).max(1e3)
 });
 var CONTACT_PROPERTY_TYPES = ["string", "number", "boolean", "date"];
-var ContactPropertyType = import_zod7.z.enum(CONTACT_PROPERTY_TYPES);
-var ContactPropertyKey = import_zod7.z.string().regex(/^[A-Za-z0-9_.-]{1,64}$/, "letters, digits, dot, underscore and hyphen, 1 to 64");
-var ContactPropertyDefinition = import_zod7.z.object({
+var ContactPropertyType = import_zod8.z.enum(CONTACT_PROPERTY_TYPES);
+var ContactPropertyKey = import_zod8.z.string().regex(/^[A-Za-z0-9_.-]{1,64}$/, "letters, digits, dot, underscore and hyphen, 1 to 64");
+var ContactPropertyDefinition = import_zod8.z.object({
   key: ContactPropertyKey,
-  label: import_zod7.z.string().min(1).max(120),
+  label: import_zod8.z.string().min(1).max(120),
   type: ContactPropertyType
 });
-var ContactPropertyParams = import_zod7.z.object({ key: ContactPropertyKey });
+var ContactPropertyParams = import_zod8.z.object({ key: ContactPropertyKey });
 var FILTER_OPERATORS = [
   "eq",
   "neq",
@@ -1653,8 +1803,8 @@ var FILTER_OPERATORS = [
   "in",
   "not_in"
 ];
-var FilterOperator = import_zod7.z.enum(FILTER_OPERATORS);
-var FilterField = import_zod7.z.string().regex(
+var FilterOperator = import_zod8.z.enum(FILTER_OPERATORS);
+var FilterField = import_zod8.z.string().regex(
   /^(email|first_name|last_name|locale|created_at|tag|topic|engagement:(opened|clicked)|property:[A-Za-z0-9_.-]{1,64})$/,
   "unknown filter field"
 );
@@ -1670,18 +1820,18 @@ var FILTER_FIELD_OPERATORS = {
   property: FILTER_OPERATORS
 };
 var MAX_FILTER_DEPTH = 5;
-var FilterCondition = import_zod7.z.object({ field: FilterField, op: FilterOperator, value: JsonValue.optional() }).strict().refine((c) => (c.op === "exists" || c.op === "not_exists") === (c.value === void 0), {
+var FilterCondition = import_zod8.z.object({ field: FilterField, op: FilterOperator, value: JsonValue.optional() }).strict().refine((c) => (c.op === "exists" || c.op === "not_exists") === (c.value === void 0), {
   message: "exists and not_exists take no value; every other operator needs one",
   path: ["value"]
 }).refine((c) => c.op !== "in" && c.op !== "not_in" || Array.isArray(c.value), {
   message: "in and not_in take an array",
   path: ["value"]
 });
-var SegmentFilter = import_zod7.z.lazy(
-  () => import_zod7.z.union([
-    import_zod7.z.object({ and: import_zod7.z.array(SegmentFilter).min(1).max(50) }).strict(),
-    import_zod7.z.object({ or: import_zod7.z.array(SegmentFilter).min(1).max(50) }).strict(),
-    import_zod7.z.object({ not: SegmentFilter }).strict(),
+var SegmentFilter = import_zod8.z.lazy(
+  () => import_zod8.z.union([
+    import_zod8.z.object({ and: import_zod8.z.array(SegmentFilter).min(1).max(50) }).strict(),
+    import_zod8.z.object({ or: import_zod8.z.array(SegmentFilter).min(1).max(50) }).strict(),
+    import_zod8.z.object({ not: SegmentFilter }).strict(),
     FilterCondition
   ])
 );
@@ -1769,42 +1919,42 @@ function untypedValueProblem(c, every) {
   if (orderOp) return every(isFilterNumber, "numbers (define the property to compare dates)");
   return every((v) => isScalar(v) || v === null, "strings, numbers, booleans or null");
 }
-var Segment = import_zod7.z.object({
+var Segment = import_zod8.z.object({
   id: Id,
-  name: import_zod7.z.string().min(1).max(120),
+  name: import_zod8.z.string().min(1).max(120),
   filter: SegmentFilter,
   /** Computed on read. */
-  contact_count: import_zod7.z.number().int().min(0),
+  contact_count: import_zod8.z.number().int().min(0),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var SegmentCreate = import_zod7.z.object({ name: import_zod7.z.string().min(1).max(120), filter: BoundedSegmentFilter });
-var SegmentPreviewRequest = import_zod7.z.object({ filter: BoundedSegmentFilter });
-var SegmentPreview = import_zod7.z.object({
-  contact_count: import_zod7.z.number().int().min(0),
+var SegmentCreate = import_zod8.z.object({ name: import_zod8.z.string().min(1).max(120), filter: BoundedSegmentFilter });
+var SegmentPreviewRequest = import_zod8.z.object({ filter: BoundedSegmentFilter });
+var SegmentPreview = import_zod8.z.object({
+  contact_count: import_zod8.z.number().int().min(0),
   /** Up to five matching contacts, for a human to sanity-check the filter. */
-  sample: import_zod7.z.array(import_zod7.z.object({ id: Id, email: Email })).max(5)
+  sample: import_zod8.z.array(import_zod8.z.object({ id: Id, email: Email })).max(5)
 });
-var MailingAudienceFromSegment = import_zod7.z.object({ segment_id: Id });
+var MailingAudienceFromSegment = import_zod8.z.object({ segment_id: Id });
 var SIGNUP_FORM_FIELDS = ["first_name", "last_name"];
 var HOSTED_PAGE_LOCALES = ["en", "de", "it", "fr", "es"];
-var SignupFormTranslation = import_zod7.z.object({
-  title: import_zod7.z.string().min(1).max(120),
-  consent_text: import_zod7.z.string().min(1).max(2e3)
+var SignupFormTranslation = import_zod8.z.object({
+  title: import_zod8.z.string().min(1).max(120),
+  consent_text: import_zod8.z.string().min(1).max(2e3)
 });
-var SignupForm = import_zod7.z.object({
+var SignupForm = import_zod8.z.object({
   id: Id,
-  name: import_zod7.z.string().min(1).max(120),
+  name: import_zod8.z.string().min(1).max(120),
   /** The heading of the hosted page. */
-  title: import_zod7.z.string().min(1).max(120),
+  title: import_zod8.z.string().min(1).max(120),
   /** What the person agrees to, shown above the button and recorded with the confirmation. */
-  consent_text: import_zod7.z.string().min(1).max(2e3),
-  translations: import_zod7.z.record(SignupFormTranslation),
-  topics: import_zod7.z.array(Slug).min(1),
-  tags: import_zod7.z.array(Slug),
+  consent_text: import_zod8.z.string().min(1).max(2e3),
+  translations: import_zod8.z.record(SignupFormTranslation),
+  topics: import_zod8.z.array(Slug).min(1),
+  tags: import_zod8.z.array(Slug),
   /** Fields shown besides email. */
-  fields: import_zod7.z.array(import_zod7.z.enum(SIGNUP_FORM_FIELDS)),
-  double_opt_in: import_zod7.z.literal(true),
+  fields: import_zod8.z.array(import_zod8.z.enum(SIGNUP_FORM_FIELDS)),
+  double_opt_in: import_zod8.z.literal(true),
   /** The provider the confirmation mail is sent through. */
   provider_id: Id,
   /**
@@ -1813,11 +1963,11 @@ var SignupForm = import_zod7.z.object({
    */
   confirmation_template_id: Id.nullable(),
   /** Where the person lands after confirming. Null shows the hosted confirmation page. */
-  redirect_url: import_zod7.z.string().url().nullable(),
+  redirect_url: import_zod8.z.string().url().nullable(),
   /** Origins allowed to embed the form and call the submission route from a browser. */
-  allowed_origins: import_zod7.z.array(import_zod7.z.string().url()).max(20),
+  allowed_origins: import_zod8.z.array(import_zod8.z.string().url()).max(20),
   /** Bumped on every change; recorded with each confirmation. */
-  version: import_zod7.z.number().int().min(1),
+  version: import_zod8.z.number().int().min(1),
   created_at: Timestamp,
   updated_at: Timestamp
 });
@@ -1832,56 +1982,56 @@ var SignupFormCreate = SignupForm.omit({
   tags: SignupForm.shape.tags.optional(),
   fields: SignupForm.shape.fields.optional(),
   confirmation_template_id: Id.nullable().optional(),
-  redirect_url: import_zod7.z.string().url().nullable().optional(),
+  redirect_url: import_zod8.z.string().url().nullable().optional(),
   allowed_origins: SignupForm.shape.allowed_origins.optional()
 });
-var SignupFormEmbed = import_zod7.z.object({
-  hosted_url: import_zod7.z.string().url(),
+var SignupFormEmbed = import_zod8.z.object({
+  hosted_url: import_zod8.z.string().url(),
   /** A plain HTML form posting to the hosted page; works without JavaScript. */
-  html: import_zod7.z.string(),
+  html: import_zod8.z.string(),
   /** A small optional script that adds the time check and submits in place. */
-  script_url: import_zod7.z.string().url(),
+  script_url: import_zod8.z.string().url(),
   /** Where a browser fetches a fresh `form_token` from (GET, public, CORS for `allowed_origins`). */
-  token_url: import_zod7.z.string().url()
+  token_url: import_zod8.z.string().url()
 });
-var SignupSubmission = import_zod7.z.object({
+var SignupSubmission = import_zod8.z.object({
   email: Email,
-  first_name: import_zod7.z.string().max(200).optional(),
-  last_name: import_zod7.z.string().max(200).optional(),
-  locale: import_zod7.z.string().min(2).max(35).optional(),
+  first_name: import_zod8.z.string().max(200).optional(),
+  last_name: import_zod8.z.string().max(200).optional(),
+  locale: import_zod8.z.string().min(2).max(35).optional(),
   /** Honeypot: must be empty. */
-  website: import_zod7.z.string().max(0).optional(),
+  website: import_zod8.z.string().max(0).optional(),
   /**
    * The signed render time from the form's token URL: a submission sooner than a
    * human could fill the form, or long after, is refused.
    */
-  form_token: import_zod7.z.string().min(1).max(512)
+  form_token: import_zod8.z.string().min(1).max(512)
 });
 var IMPORT_STATUSES = ["uploaded", "validating", "validated", "committing", "completed", "failed", "cancelled"];
-var ImportStatus = import_zod7.z.enum(IMPORT_STATUSES);
+var ImportStatus = import_zod8.z.enum(IMPORT_STATUSES);
 var IMPORT_TERMINAL_STATUSES = ["completed", "failed", "cancelled"];
-var ImportColumnMapping = import_zod7.z.record(
-  import_zod7.z.string().regex(/^(email|external_id|first_name|last_name|locale|property:[A-Za-z0-9_.-]{1,64}|ignore)$/)
+var ImportColumnMapping = import_zod8.z.record(
+  import_zod8.z.string().regex(/^(email|external_id|first_name|last_name|locale|property:[A-Za-z0-9_.-]{1,64}|ignore)$/)
 );
 var IMPORT_FILE_FIELD = "file";
 var MAX_IMPORT_BYTES = 50 * 1024 * 1024;
 var MAX_IMPORT_ROWS = 2e5;
-var ImportMappingRequest = import_zod7.z.object({
+var ImportMappingRequest = import_zod8.z.object({
   /** CSV header -> contact field. Exactly one column maps to `email`. */
   mapping: ImportColumnMapping.refine(
     (m) => Object.values(m).filter((v) => v === "email").length === 1,
     "exactly one column maps to email"
   ),
-  topics: import_zod7.z.array(Slug).max(100),
-  tags: import_zod7.z.array(Slug).max(100),
+  topics: import_zod8.z.array(Slug).max(100),
+  tags: import_zod8.z.array(Slug).max(100),
   /** Existing contacts get the mapped fields overwritten; false only adds topics, tags and missing fields. */
-  update_existing: import_zod7.z.boolean().optional(),
+  update_existing: import_zod8.z.boolean().optional(),
   /** The importer states the people consented; the service records who said so and when. */
-  consent_confirmed: import_zod7.z.literal(true)
+  consent_confirmed: import_zod8.z.literal(true)
 });
-var ImportCommitRequest = import_zod7.z.object({ mapping_version: import_zod7.z.number().int().min(1) });
+var ImportCommitRequest = import_zod8.z.object({ mapping_version: import_zod8.z.number().int().min(1) });
 var IMPORT_ROW_OUTCOMES = ["created", "updated", "unchanged", "suppressed", "skipped"];
-var ImportRowOutcome = import_zod7.z.enum(IMPORT_ROW_OUTCOMES);
+var ImportRowOutcome = import_zod8.z.enum(IMPORT_ROW_OUTCOMES);
 var IMPORT_SKIP_REASONS = [
   "missing_email",
   "invalid_email",
@@ -1890,90 +2040,90 @@ var IMPORT_SKIP_REASONS = [
   "external_id_conflict",
   "wrong_column_count"
 ];
-var ImportSkipReason = import_zod7.z.enum(IMPORT_SKIP_REASONS);
-var ImportReport = import_zod7.z.object({
-  created: import_zod7.z.number().int().min(0),
-  updated: import_zod7.z.number().int().min(0),
-  unchanged: import_zod7.z.number().int().min(0),
-  suppressed: import_zod7.z.number().int().min(0),
-  skipped: import_zod7.z.number().int().min(0),
-  skipped_by_reason: import_zod7.z.record(ImportSkipReason, import_zod7.z.number().int().min(0)),
+var ImportSkipReason = import_zod8.z.enum(IMPORT_SKIP_REASONS);
+var ImportReport = import_zod8.z.object({
+  created: import_zod8.z.number().int().min(0),
+  updated: import_zod8.z.number().int().min(0),
+  unchanged: import_zod8.z.number().int().min(0),
+  suppressed: import_zod8.z.number().int().min(0),
+  skipped: import_zod8.z.number().int().min(0),
+  skipped_by_reason: import_zod8.z.record(ImportSkipReason, import_zod8.z.number().int().min(0)),
   /** Rows whose contact was subscribed without some topic, because the address is blocked for it. */
-  topics_withheld: import_zod7.z.number().int().min(0)
+  topics_withheld: import_zod8.z.number().int().min(0)
 });
-var ImportJob = import_zod7.z.object({
+var ImportJob = import_zod8.z.object({
   id: Id,
   status: ImportStatus,
-  file_name: import_zod7.z.string().max(255).nullable(),
-  file_bytes: import_zod7.z.number().int().min(0),
-  total_rows: import_zod7.z.number().int().min(0),
+  file_name: import_zod8.z.string().max(255).nullable(),
+  file_bytes: import_zod8.z.number().int().min(0),
+  total_rows: import_zod8.z.number().int().min(0),
   /** The header row, as in the file. */
-  columns: import_zod7.z.array(import_zod7.z.string()),
+  columns: import_zod8.z.array(import_zod8.z.string()),
   /** The first rows, for the mapping screen. */
-  sample: import_zod7.z.array(import_zod7.z.array(import_zod7.z.string())).max(5),
+  sample: import_zod8.z.array(import_zod8.z.array(import_zod8.z.string())).max(5),
   /** A mapping guessed from the headers, for the mapping screen to start from. */
   suggested_mapping: ImportColumnMapping,
   mapping: ImportColumnMapping.nullable(),
-  mapping_version: import_zod7.z.number().int().min(0),
-  topics: import_zod7.z.array(Slug),
-  tags: import_zod7.z.array(Slug),
-  update_existing: import_zod7.z.boolean(),
+  mapping_version: import_zod8.z.number().int().min(0),
+  topics: import_zod8.z.array(Slug),
+  tags: import_zod8.z.array(Slug),
+  update_existing: import_zod8.z.boolean(),
   /** The dry run of the current mapping; null before one finished. */
   dry_run: ImportReport.nullable(),
   /** What the commit has written so far; null before it started. */
   result: ImportReport.nullable(),
   /** Rows the current phase (dry run or commit) has processed. */
-  processed_rows: import_zod7.z.number().int().min(0),
+  processed_rows: import_zod8.z.number().int().min(0),
   /** Why a `failed` import failed. */
-  error: import_zod7.z.string().nullable(),
+  error: import_zod8.z.string().nullable(),
   created_at: Timestamp,
   updated_at: Timestamp,
   finished_at: Timestamp.nullable()
 });
-var ImportRow = import_zod7.z.object({
+var ImportRow = import_zod8.z.object({
   /** The line in the file, 1 being the first line after the header. */
-  row: import_zod7.z.number().int().min(1),
-  email: import_zod7.z.string().nullable(),
+  row: import_zod8.z.number().int().min(1),
+  email: import_zod8.z.string().nullable(),
   outcome: ImportRowOutcome,
   reason: ImportSkipReason.nullable(),
   /** A human explanation for a skipped row (which value, which column). */
-  message: import_zod7.z.string().nullable(),
+  message: import_zod8.z.string().nullable(),
   contact_id: Id.nullable()
 });
 var ImportRowListQuery = PageQuery.extend({ outcome: ImportRowOutcome.optional() });
-var MailingScheduleRequest = import_zod7.z.object({ send_at: Timestamp });
-var TrackingSettings = import_zod7.z.object({ opens: import_zod7.z.boolean(), clicks: import_zod7.z.boolean() });
-var VariantAnalytics = import_zod7.z.object({
-  key: import_zod7.z.string(),
-  sent: import_zod7.z.number().int().min(0),
-  unique_opens: import_zod7.z.number().int().min(0).nullable(),
-  unique_clicks: import_zod7.z.number().int().min(0).nullable()
-});
-var MailingAnalytics = import_zod7.z.object({
+var MailingScheduleRequest = import_zod8.z.object({ send_at: Timestamp });
+var TrackingSettings = import_zod8.z.object({ opens: import_zod8.z.boolean(), clicks: import_zod8.z.boolean() });
+var VariantAnalytics = import_zod8.z.object({
+  key: import_zod8.z.string(),
+  sent: import_zod8.z.number().int().min(0),
+  unique_opens: import_zod8.z.number().int().min(0).nullable(),
+  unique_clicks: import_zod8.z.number().int().min(0).nullable()
+});
+var MailingAnalytics = import_zod8.z.object({
   mailing_id: Id,
   counts: MailingCounts,
   /** What was tracked for this mailing, fixed when it started; null before it started. */
   tracking: TrackingSettings.nullable(),
   /** Unique recipients with a human open. Null when opens were not tracked. */
-  unique_opens: import_zod7.z.number().int().min(0).nullable(),
+  unique_opens: import_zod8.z.number().int().min(0).nullable(),
   /**
    * Recipients whose only opens came from Apple Mail Privacy Protection, which
    * loads every image on delivery: counted apart, never as human opens.
    */
-  apple_mpp_opens: import_zod7.z.number().int().min(0).nullable(),
+  apple_mpp_opens: import_zod8.z.number().int().min(0).nullable(),
   /** Opens and clicks from security scanners and prefetchers, filtered out of the unique counts. */
-  machine_events: import_zod7.z.number().int().min(0).nullable(),
-  unique_clicks: import_zod7.z.number().int().min(0).nullable(),
-  unsubscribes: import_zod7.z.number().int().min(0),
-  bounces: import_zod7.z.number().int().min(0),
-  complaints: import_zod7.z.number().int().min(0),
-  links: import_zod7.z.array(import_zod7.z.object({ url: import_zod7.z.string(), unique_clicks: import_zod7.z.number().int().min(0) })).nullable(),
-  variants: import_zod7.z.array(VariantAnalytics).nullable()
+  machine_events: import_zod8.z.number().int().min(0).nullable(),
+  unique_clicks: import_zod8.z.number().int().min(0).nullable(),
+  unsubscribes: import_zod8.z.number().int().min(0),
+  bounces: import_zod8.z.number().int().min(0),
+  complaints: import_zod8.z.number().int().min(0),
+  links: import_zod8.z.array(import_zod8.z.object({ url: import_zod8.z.string(), unique_clicks: import_zod8.z.number().int().min(0) })).nullable(),
+  variants: import_zod8.z.array(VariantAnalytics).nullable()
 });
 
 // src/automations.ts
 var AUTOMATION_FILTER_FIELD_PATTERN = /^(email|first_name|last_name|locale|created_at|tag|topic|segment|engagement:(opened|clicked)|step:(opened|clicked)|property:[A-Za-z0-9_.-]{1,64}|event:[A-Za-z0-9_.-]{1,64})$/;
-var AutomationFilterField = import_zod8.z.string().regex(AUTOMATION_FILTER_FIELD_PATTERN, "unknown filter field");
+var AutomationFilterField = import_zod9.z.string().regex(AUTOMATION_FILTER_FIELD_PATTERN, "unknown filter field");
 var AUTOMATION_FILTER_FIELD_OPERATORS = {
   ...FILTER_FIELD_OPERATORS,
   segment: ["eq", "neq", "in", "not_in"],
@@ -1983,18 +2133,18 @@ var AUTOMATION_FILTER_FIELD_OPERATORS = {
   step: ["eq", "neq"]
 };
 var automationFilterFamily = filterFieldFamily;
-var AutomationFilterCondition = import_zod8.z.object({ field: AutomationFilterField, op: FilterOperator, value: JsonValue.optional() }).strict().refine((c) => (c.op === "exists" || c.op === "not_exists") === (c.value === void 0), {
+var AutomationFilterCondition = import_zod9.z.object({ field: AutomationFilterField, op: FilterOperator, value: JsonValue.optional() }).strict().refine((c) => (c.op === "exists" || c.op === "not_exists") === (c.value === void 0), {
   message: "exists and not_exists take no value; every other operator needs one",
   path: ["value"]
 }).refine((c) => c.op !== "in" && c.op !== "not_in" || Array.isArray(c.value), {
   message: "in and not_in take an array",
   path: ["value"]
 });
-var AutomationFilter = import_zod8.z.lazy(
-  () => import_zod8.z.union([
-    import_zod8.z.object({ and: import_zod8.z.array(AutomationFilter).min(1).max(50) }).strict(),
-    import_zod8.z.object({ or: import_zod8.z.array(AutomationFilter).min(1).max(50) }).strict(),
-    import_zod8.z.object({ not: AutomationFilter }).strict(),
+var AutomationFilter = import_zod9.z.lazy(
+  () => import_zod9.z.union([
+    import_zod9.z.object({ and: import_zod9.z.array(AutomationFilter).min(1).max(50) }).strict(),
+    import_zod9.z.object({ or: import_zod9.z.array(AutomationFilter).min(1).max(50) }).strict(),
+    import_zod9.z.object({ not: AutomationFilter }).strict(),
     AutomationFilterCondition
   ])
 );
@@ -2007,20 +2157,20 @@ function filterConditions(filter) {
   if ("not" in filter) return filterConditions(filter.not);
   return [filter];
 }
-var StepId = import_zod8.z.string().regex(/^[A-Za-z0-9_-]{1,64}$/, "letters, digits, underscore and hyphen, 1 to 64");
-var TimeOfDay = import_zod8.z.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "HH:MM in 24 hours");
-var Weekday = import_zod8.z.number().int().min(0).max(6);
-var TimezoneName = import_zod8.z.string().min(1).max(64).regex(/^(UTC|[A-Za-z][A-Za-z0-9_+-]*(?:\/[A-Za-z0-9_+-]+)+)$/, "an IANA time zone name such as Europe/Berlin");
+var StepId = import_zod9.z.string().regex(/^[A-Za-z0-9_-]{1,64}$/, "letters, digits, underscore and hyphen, 1 to 64");
+var TimeOfDay = import_zod9.z.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/, "HH:MM in 24 hours");
+var Weekday = import_zod9.z.number().int().min(0).max(6);
+var TimezoneName = import_zod9.z.string().min(1).max(64).regex(/^(UTC|[A-Za-z][A-Za-z0-9_+-]*(?:\/[A-Za-z0-9_+-]+)+)$/, "an IANA time zone name such as Europe/Berlin");
 var MAX_DELAY_SECONDS = 365 * 24 * 60 * 60;
-var DateOnly = import_zod8.z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "a calendar date such as 2026-09-20").refine((v) => {
+var DateOnly = import_zod9.z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "a calendar date such as 2026-09-20").refine((v) => {
   const [y, m, d] = v.split("-").map(Number);
   const t = new Date(Date.UTC(y, m - 1, d));
   return t.getUTCFullYear() === y && t.getUTCMonth() + 1 === m && t.getUTCDate() === d;
 }, "a real calendar date");
-var OffsetDays = import_zod8.z.number().int().min(-365).max(365);
+var OffsetDays = import_zod9.z.number().int().min(-365).max(365);
 var DATE_PASSED_ANSWERS = ["skip", "stop", "continue"];
-var DatePassedAnswer = import_zod8.z.enum(DATE_PASSED_ANSWERS);
-var EventName = import_zod8.z.string().regex(/^[A-Za-z0-9][A-Za-z0-9_.:-]{0,79}$/, "letters, digits, dot, colon, underscore and hyphen, 1 to 80");
+var DatePassedAnswer = import_zod9.z.enum(DATE_PASSED_ANSWERS);
+var EventName = import_zod9.z.string().regex(/^[A-Za-z0-9][A-Za-z0-9_.:-]{0,79}$/, "letters, digits, dot, colon, underscore and hyphen, 1 to 80");
 var AUTOMATION_TRIGGER_KINDS = [
   "topic_subscribed",
   "form_confirmed",
@@ -2033,17 +2183,17 @@ var AUTOMATION_TRIGGER_KINDS = [
   "segment_entered",
   "link_clicked"
 ];
-var AutomationTriggerKind = import_zod8.z.enum(AUTOMATION_TRIGGER_KINDS);
+var AutomationTriggerKind = import_zod9.z.enum(AUTOMATION_TRIGGER_KINDS);
 var exclude = { exclude: BoundedAutomationFilter.nullish() };
-var AutomationTrigger = import_zod8.z.discriminatedUnion("kind", [
-  import_zod8.z.object({ kind: import_zod8.z.literal("topic_subscribed"), topic: Slug, ...exclude }).strict(),
-  import_zod8.z.object({ kind: import_zod8.z.literal("form_confirmed"), form_id: Id, ...exclude }).strict(),
-  import_zod8.z.object({ kind: import_zod8.z.literal("tag_added"), tag: Slug, ...exclude }).strict(),
+var AutomationTrigger = import_zod9.z.discriminatedUnion("kind", [
+  import_zod9.z.object({ kind: import_zod9.z.literal("topic_subscribed"), topic: Slug, ...exclude }).strict(),
+  import_zod9.z.object({ kind: import_zod9.z.literal("form_confirmed"), form_id: Id, ...exclude }).strict(),
+  import_zod9.z.object({ kind: import_zod9.z.literal("tag_added"), tag: Slug, ...exclude }).strict(),
   /** `to` given: only a change that lands on this value fires. Absent: any change of the key. */
-  import_zod8.z.object({ kind: import_zod8.z.literal("property_changed"), key: ContactPropertyKey, to: JsonValue.optional(), ...exclude }).strict(),
+  import_zod9.z.object({ kind: import_zod9.z.literal("property_changed"), key: ContactPropertyKey, to: JsonValue.optional(), ...exclude }).strict(),
   /** `where` filters the event's own data, so only `event:<key>` leaves belong in it. */
-  import_zod8.z.object({ kind: import_zod8.z.literal("event"), name: EventName, where: BoundedAutomationFilter.nullish(), ...exclude }).strict(),
-  import_zod8.z.object({ kind: import_zod8.z.literal("manual"), ...exclude }).strict(),
+  import_zod9.z.object({ kind: import_zod9.z.literal("event"), name: EventName, where: BoundedAutomationFilter.nullish(), ...exclude }).strict(),
+  import_zod9.z.object({ kind: import_zod9.z.literal("manual"), ...exclude }).strict(),
   /**
    * Every year on a date the contact carries: a birthday, a joining date, a
    * renewal. `offset_days` moves it ("three days before"), `at` is the wall
@@ -2053,8 +2203,8 @@ var AutomationTrigger = import_zod8.z.discriminatedUnion("kind", [
    * A 29 February date fires on 1 March in a year that has no 29 February, so
    * nobody is skipped every fourth year.
    */
-  import_zod8.z.object({
-    kind: import_zod8.z.literal("date_anniversary"),
+  import_zod9.z.object({
+    kind: import_zod9.z.literal("date_anniversary"),
     key: ContactPropertyKey,
     offset_days: OffsetDays,
     at: TimeOfDay,
@@ -2066,8 +2216,8 @@ var AutomationTrigger = import_zod8.z.discriminatedUnion("kind", [
    * not ask about a segment or about an event's data: there is no event, and a
    * segment is its own trigger kind.
    */
-  import_zod8.z.object({
-    kind: import_zod8.z.literal("exact_date"),
+  import_zod9.z.object({
+    kind: import_zod9.z.literal("exact_date"),
     on: DateOnly,
     at: TimeOfDay,
     where: BoundedAutomationFilter.nullish(),
@@ -2086,7 +2236,7 @@ var AutomationTrigger = import_zod8.z.discriminatedUnion("kind", [
    * already exists. Entering those people as well is the publish dialog's
    * backfill question, answered by a person rather than by the sweep.
    */
-  import_zod8.z.object({ kind: import_zod8.z.literal("segment_entered"), segment_id: Id, ...exclude }).strict(),
+  import_zod9.z.object({ kind: import_zod9.z.literal("segment_entered"), segment_id: Id, ...exclude }).strict(),
   /**
    * S4. When somebody clicks a link in a mailing that has already gone out.
    *
@@ -2096,7 +2246,7 @@ var AutomationTrigger = import_zod8.z.discriminatedUnion("kind", [
    * tracking off there is no click to hear about, so the validator refuses it
    * rather than leaving an automation that can never fire.
    */
-  import_zod8.z.object({ kind: import_zod8.z.literal("link_clicked"), mailing_id: Id, url: import_zod8.z.string().min(1).max(2048).optional(), ...exclude }).strict()
+  import_zod9.z.object({ kind: import_zod9.z.literal("link_clicked"), mailing_id: Id, url: import_zod9.z.string().min(1).max(2048).optional(), ...exclude }).strict()
 ]);
 var AUTOMATION_DATE_TRIGGER_KINDS = ["date_anniversary", "exact_date"];
 var MAX_TRIGGERS = 10;
@@ -2115,45 +2265,45 @@ var AUTOMATION_STEP_KINDS = [
   "webhook",
   "notify"
 ];
-var AutomationStepKind = import_zod8.z.enum(AUTOMATION_STEP_KINDS);
+var AutomationStepKind = import_zod9.z.enum(AUTOMATION_STEP_KINDS);
 var next = { next: StepId.nullable() };
-var Unchosen = import_zod8.z.literal("");
-var DraftSlug = import_zod8.z.union([Slug, Unchosen]);
-var DraftPropertyKey = import_zod8.z.union([ContactPropertyKey, Unchosen]);
-var label = { label: import_zod8.z.string().max(120).nullish() };
-var EmailStepLanguage = import_zod8.z.object({
-  subject: import_zod8.z.string().min(1).max(998),
-  preheader: import_zod8.z.string().max(500).nullable(),
+var Unchosen = import_zod9.z.literal("");
+var DraftSlug = import_zod9.z.union([Slug, Unchosen]);
+var DraftPropertyKey = import_zod9.z.union([ContactPropertyKey, Unchosen]);
+var label2 = { label: import_zod9.z.string().max(120).nullish() };
+var EmailStepLanguage = import_zod9.z.object({
+  subject: import_zod9.z.string().min(1).max(998),
+  preheader: import_zod9.z.string().max(500).nullable(),
   document: TemplateDocument,
   /** This language's insertions, its texts over the template's structure (every text present). */
   insertions: Insertions.nullish()
 }).strict();
-var EmailStep = import_zod8.z.object({
-  kind: import_zod8.z.literal("email"),
-  ...label,
+var EmailStep = import_zod9.z.object({
+  kind: import_zod9.z.literal("email"),
+  ...label2,
   ...next,
   template_id: Id.nullish(),
   document: TemplateDocument.nullish(),
   /** Empty while the step is being written, or when its template has a subject; else `not_chosen` refuses to publish it. */
-  subject: import_zod8.z.string().max(998),
-  preheader: import_zod8.z.string().max(500).nullish(),
+  subject: import_zod9.z.string().max(998),
+  preheader: import_zod9.z.string().max(500).nullish(),
   locale: LocaleTag.nullish(),
-  languages: import_zod8.z.record(LocaleTag, EmailStepLanguage).nullish(),
+  languages: import_zod9.z.record(LocaleTag, EmailStepLanguage).nullish(),
   /** The main language's insertions, snapshot from the template when the automation is published. */
   insertions: Insertions.nullish()
 }).strict();
-var DelayStep = import_zod8.z.object({
-  kind: import_zod8.z.literal("delay"),
-  ...label,
+var DelayStep = import_zod9.z.object({
+  kind: import_zod9.z.literal("delay"),
+  ...label2,
   ...next,
-  wait: import_zod8.z.discriminatedUnion("mode", [
-    import_zod8.z.object({ mode: import_zod8.z.literal("duration"), seconds: import_zod8.z.number().int().min(1).max(MAX_DELAY_SECONDS) }).strict(),
-    import_zod8.z.object({ mode: import_zod8.z.literal("time_of_day"), at: TimeOfDay }).strict(),
-    import_zod8.z.object({ mode: import_zod8.z.literal("weekday"), weekday: Weekday, at: TimeOfDay }).strict(),
+  wait: import_zod9.z.discriminatedUnion("mode", [
+    import_zod9.z.object({ mode: import_zod9.z.literal("duration"), seconds: import_zod9.z.number().int().min(1).max(MAX_DELAY_SECONDS) }).strict(),
+    import_zod9.z.object({ mode: import_zod9.z.literal("time_of_day"), at: TimeOfDay }).strict(),
+    import_zod9.z.object({ mode: import_zod9.z.literal("weekday"), weekday: Weekday, at: TimeOfDay }).strict(),
     /** A fixed day has no next occurrence, so `continue` is not one of its answers. */
-    import_zod8.z.object({ mode: import_zod8.z.literal("date"), on: DateOnly, at: TimeOfDay, passed: import_zod8.z.enum(["skip", "stop"]) }).strict(),
-    import_zod8.z.object({
-      mode: import_zod8.z.literal("date_property"),
+    import_zod9.z.object({ mode: import_zod9.z.literal("date"), on: DateOnly, at: TimeOfDay, passed: import_zod9.z.enum(["skip", "stop"]) }).strict(),
+    import_zod9.z.object({
+      mode: import_zod9.z.literal("date_property"),
       key: ContactPropertyKey,
       offset_days: OffsetDays,
       at: TimeOfDay,
@@ -2161,9 +2311,9 @@ var DelayStep = import_zod8.z.object({
     }).strict()
   ])
 }).strict();
-var ConditionStep = import_zod8.z.object({
-  kind: import_zod8.z.literal("condition"),
-  ...label,
+var ConditionStep = import_zod9.z.object({
+  kind: import_zod9.z.literal("condition"),
+  ...label2,
   filter: BoundedAutomationFilter,
   yes: StepId.nullable(),
   no: StepId.nullable(),
@@ -2173,49 +2323,49 @@ var ConditionStep = import_zod8.z.object({
    * neither half means anything without the other: a window with no answer
    * for the end of it would be a silent decision.
    */
-  wait_for: import_zod8.z.object({ up_to_s: import_zod8.z.number().int().min(1).max(MAX_DELAY_SECONDS), on_timeout: import_zod8.z.enum(["yes", "no"]) }).strict().nullish()
+  wait_for: import_zod9.z.object({ up_to_s: import_zod9.z.number().int().min(1).max(MAX_DELAY_SECONDS), on_timeout: import_zod9.z.enum(["yes", "no"]) }).strict().nullish()
 }).strict();
-var SplitBranchKey = import_zod8.z.string().regex(/^[A-Za-z0-9_-]{1,32}$/, "letters, digits, underscore and hyphen, 1 to 32");
+var SplitBranchKey = import_zod9.z.string().regex(/^[A-Za-z0-9_-]{1,32}$/, "letters, digits, underscore and hyphen, 1 to 32");
 var MIN_SPLIT_BRANCHES = 2;
 var MAX_SPLIT_BRANCHES = 4;
-var SplitStep = import_zod8.z.object({
-  kind: import_zod8.z.literal("split"),
-  ...label,
-  branches: import_zod8.z.array(
-    import_zod8.z.object({
+var SplitStep = import_zod9.z.object({
+  kind: import_zod9.z.literal("split"),
+  ...label2,
+  branches: import_zod9.z.array(
+    import_zod9.z.object({
       key: SplitBranchKey,
       /** A whole percentage. Zero is allowed: a branch kept in the flow but switched off. */
-      weight: import_zod8.z.number().int().min(0).max(100),
+      weight: import_zod9.z.number().int().min(0).max(100),
       next: StepId.nullable()
     }).strict()
   ).min(MIN_SPLIT_BRANCHES).max(MAX_SPLIT_BRANCHES).refine((bs) => new Set(bs.map((b) => b.key)).size === bs.length, "each branch needs its own key").refine((bs) => bs.reduce((sum, b) => sum + b.weight, 0) === 100, "the weights have to come to 100")
 }).strict();
-var GotoStep = import_zod8.z.object({ kind: import_zod8.z.literal("goto"), ...label, target: StepId.nullable() }).strict();
+var GotoStep = import_zod9.z.object({ kind: import_zod9.z.literal("goto"), ...label2, target: StepId.nullable() }).strict();
 var MAX_STEP_VISITS = 20;
-var WebhookStep = import_zod8.z.object({ kind: import_zod8.z.literal("webhook"), ...label, ...next, endpoint_id: Id.nullable(), payload: JsonValue.nullish() }).strict();
-var NotifyRecipients = import_zod8.z.union([import_zod8.z.literal("owner"), import_zod8.z.literal("admins"), import_zod8.z.object({ member_id: Id }).strict()]);
-var NotifyStep = import_zod8.z.object({
-  kind: import_zod8.z.literal("notify"),
-  ...label,
+var WebhookStep = import_zod9.z.object({ kind: import_zod9.z.literal("webhook"), ...label2, ...next, endpoint_id: Id.nullable(), payload: JsonValue.nullish() }).strict();
+var NotifyRecipients = import_zod9.z.union([import_zod9.z.literal("owner"), import_zod9.z.literal("admins"), import_zod9.z.object({ member_id: Id }).strict()]);
+var NotifyStep = import_zod9.z.object({
+  kind: import_zod9.z.literal("notify"),
+  ...label2,
   ...next,
   to: NotifyRecipients,
   /** Empty while the step is being written; `not_chosen` refuses to publish it. */
-  subject: import_zod8.z.string().max(998),
-  body: import_zod8.z.string().max(1e4)
+  subject: import_zod9.z.string().max(998),
+  body: import_zod9.z.string().max(1e4)
 }).strict();
-var AutomationStep = import_zod8.z.discriminatedUnion("kind", [
+var AutomationStep = import_zod9.z.discriminatedUnion("kind", [
   EmailStep,
   DelayStep,
   ConditionStep,
-  import_zod8.z.object({ kind: import_zod8.z.literal("add_tag"), ...label, ...next, tag: DraftSlug }).strict(),
-  import_zod8.z.object({ kind: import_zod8.z.literal("remove_tag"), ...label, ...next, tag: DraftSlug }).strict(),
+  import_zod9.z.object({ kind: import_zod9.z.literal("add_tag"), ...label2, ...next, tag: DraftSlug }).strict(),
+  import_zod9.z.object({ kind: import_zod9.z.literal("remove_tag"), ...label2, ...next, tag: DraftSlug }).strict(),
   /** `value` null clears the property, as a contact upsert does. */
-  import_zod8.z.object({ kind: import_zod8.z.literal("set_property"), ...label, ...next, key: DraftPropertyKey, value: JsonValue }).strict(),
+  import_zod9.z.object({ kind: import_zod9.z.literal("set_property"), ...label2, ...next, key: DraftPropertyKey, value: JsonValue }).strict(),
   /** Subscribing never lifts a suppression: the service checks that, not the flow. */
-  import_zod8.z.object({ kind: import_zod8.z.literal("subscribe_topic"), ...label, ...next, topic: DraftSlug }).strict(),
+  import_zod9.z.object({ kind: import_zod9.z.literal("subscribe_topic"), ...label2, ...next, topic: DraftSlug }).strict(),
   /** `topic` unsubscribes from the automation's own topic, `all` from every topic. */
-  import_zod8.z.object({ kind: import_zod8.z.literal("unsubscribe"), ...label, ...next, scope: import_zod8.z.enum(["topic", "all"]) }).strict(),
-  import_zod8.z.object({ kind: import_zod8.z.literal("exit"), ...label }).strict(),
+  import_zod9.z.object({ kind: import_zod9.z.literal("unsubscribe"), ...label2, ...next, scope: import_zod9.z.enum(["topic", "all"]) }).strict(),
+  import_zod9.z.object({ kind: import_zod9.z.literal("exit"), ...label2 }).strict(),
   SplitStep,
   GotoStep,
   WebhookStep,
@@ -2239,25 +2389,25 @@ function stepTargets(step) {
   }
 }
 var MAX_STEPS = 200;
-var AutomationFlow = import_zod8.z.object({
-  triggers: import_zod8.z.array(AutomationTrigger).max(MAX_TRIGGERS),
+var AutomationFlow = import_zod9.z.object({
+  triggers: import_zod9.z.array(AutomationTrigger).max(MAX_TRIGGERS),
   /** The first step. `null` is an empty flow. */
   entry: StepId.nullable(),
-  steps: import_zod8.z.record(StepId, AutomationStep)
+  steps: import_zod9.z.record(StepId, AutomationStep)
 }).strict();
 var emptyFlow = () => ({ triggers: [], entry: null, steps: {} });
-var QuietHours = import_zod8.z.object({
+var QuietHours = import_zod9.z.object({
   start: TimeOfDay,
   end: TimeOfDay,
-  weekdays: import_zod8.z.array(Weekday).min(1).max(7).nullish()
+  weekdays: import_zod9.z.array(Weekday).min(1).max(7).nullish()
 }).strict();
 var RE_ENTRY_MODES = ["off", "after_exit"];
-var ReEntryMode = import_zod8.z.enum(RE_ENTRY_MODES);
+var ReEntryMode = import_zod9.z.enum(RE_ENTRY_MODES);
 var MAX_RE_ENTRY_COOLDOWN_SECONDS = 365 * 24 * 60 * 60;
-var AutomationSettings = import_zod8.z.object({
+var AutomationSettings = import_zod9.z.object({
   re_entry: ReEntryMode,
   /** Seconds a person must wait after leaving before entering again. Only with `after_exit`. */
-  re_entry_cooldown_s: import_zod8.z.number().int().min(0).max(MAX_RE_ENTRY_COOLDOWN_SECONDS).nullish(),
+  re_entry_cooldown_s: import_zod9.z.number().int().min(0).max(MAX_RE_ENTRY_COOLDOWN_SECONDS).nullish(),
   quiet_hours: QuietHours.nullish(),
   /** Checked before every step; when it matches, the run ends. */
   exit_filter: BoundedAutomationFilter.nullish()
@@ -2315,18 +2465,18 @@ var AUTOMATION_ISSUE_CODES = [
   /** A one-off date that is already over everywhere on earth, so it would fire for nobody. */
   "date_in_the_past"
 ];
-var AutomationIssueCode = import_zod8.z.enum(AUTOMATION_ISSUE_CODES);
-var AutomationIssue = import_zod8.z.object({
+var AutomationIssueCode = import_zod9.z.enum(AUTOMATION_ISSUE_CODES);
+var AutomationIssue = import_zod9.z.object({
   code: AutomationIssueCode,
   /** The step the issue is about, when it is about one. */
   step_id: StepId.nullable(),
   /** Where inside the document, for the canvas to point at a field. */
-  path: import_zod8.z.array(import_zod8.z.union([import_zod8.z.string(), import_zod8.z.number()])),
-  message: import_zod8.z.string()
+  path: import_zod9.z.array(import_zod9.z.union([import_zod9.z.string(), import_zod9.z.number()])),
+  message: import_zod9.z.string()
 });
-var AutomationValidation = import_zod8.z.object({
-  ok: import_zod8.z.boolean(),
-  issues: import_zod8.z.array(AutomationIssue)
+var AutomationValidation = import_zod9.z.object({
+  ok: import_zod9.z.boolean(),
+  issues: import_zod9.z.array(AutomationIssue)
 });
 function validateAutomation(flow, settings, ctx) {
   const issues = [];
@@ -2717,7 +2867,7 @@ function cycles(flow) {
   return out.sort();
 }
 var AUTOMATION_STATUSES = ["draft", "active", "paused", "archived"];
-var AutomationStatus = import_zod8.z.enum(AUTOMATION_STATUSES);
+var AutomationStatus = import_zod9.z.enum(AUTOMATION_STATUSES);
 var AUTOMATION_END_REASONS = [
   "completed",
   "exit_filter",
@@ -2736,9 +2886,9 @@ var AUTOMATION_END_REASONS = [
   "ended_by_hand",
   "failed"
 ];
-var AutomationEndReason = import_zod8.z.enum(AUTOMATION_END_REASONS);
+var AutomationEndReason = import_zod9.z.enum(AUTOMATION_END_REASONS);
 var AUTOMATION_WAIT_REASONS = ["delay", "quiet_hours", "plan_limit", "sending", "condition"];
-var AutomationWaitReason = import_zod8.z.enum(AUTOMATION_WAIT_REASONS);
+var AutomationWaitReason = import_zod9.z.enum(AUTOMATION_WAIT_REASONS);
 var AUTOMATION_ENTRY_REFUSALS = [
   "already_inside",
   "re_entry_off",
@@ -2749,26 +2899,26 @@ var AUTOMATION_ENTRY_REFUSALS = [
   "not_active",
   "unknown_contact"
 ];
-var AutomationEntryRefusal = import_zod8.z.enum(AUTOMATION_ENTRY_REFUSALS);
-var AutomationCounts = import_zod8.z.object({
-  started: import_zod8.z.number().int().min(0),
-  in_progress: import_zod8.z.number().int().min(0),
-  completed: import_zod8.z.number().int().min(0),
-  exited: import_zod8.z.number().int().min(0),
-  failed: import_zod8.z.number().int().min(0)
-});
-var Automation = import_zod8.z.object({
+var AutomationEntryRefusal = import_zod9.z.enum(AUTOMATION_ENTRY_REFUSALS);
+var AutomationCounts = import_zod9.z.object({
+  started: import_zod9.z.number().int().min(0),
+  in_progress: import_zod9.z.number().int().min(0),
+  completed: import_zod9.z.number().int().min(0),
+  exited: import_zod9.z.number().int().min(0),
+  failed: import_zod9.z.number().int().min(0)
+});
+var Automation = import_zod9.z.object({
   id: Id,
-  name: import_zod8.z.string().min(1).max(200),
+  name: import_zod9.z.string().min(1).max(200),
   status: AutomationStatus,
   /** Every automation sends under one topic; there are no transactional automations. */
   topic: Slug,
   provider_id: Id.nullable(),
   settings: AutomationSettings,
   /** The flow people are running through, null while the automation has never been published. */
-  published_version: import_zod8.z.number().int().min(1).nullable(),
+  published_version: import_zod9.z.number().int().min(1).nullable(),
   /** The flow being edited. Increments on every save, like a template's version. */
-  draft_version: import_zod8.z.number().int().min(1),
+  draft_version: import_zod9.z.number().int().min(1),
   counts: AutomationCounts,
   created_at: Timestamp,
   updated_at: Timestamp,
@@ -2781,16 +2931,16 @@ var AutomationWithFlow = Automation.extend({
   published_flow: AutomationFlow.nullable()
 });
 var AutomationSummary = Automation;
-var AutomationCreate = import_zod8.z.object({
-  name: import_zod8.z.string().min(1).max(200),
+var AutomationCreate = import_zod9.z.object({
+  name: import_zod9.z.string().min(1).max(200),
   topic: Slug,
   provider_id: Id.optional(),
   flow: AutomationFlow.optional(),
   settings: AutomationSettings.partial().optional()
 });
-var AutomationUpdate = import_zod8.z.object({
-  base_version: import_zod8.z.number().int().min(1),
-  name: import_zod8.z.string().min(1).max(200).optional(),
+var AutomationUpdate = import_zod9.z.object({
+  base_version: import_zod9.z.number().int().min(1),
+  name: import_zod9.z.string().min(1).max(200).optional(),
   topic: Slug.optional(),
   provider_id: Id.optional(),
   flow: AutomationFlow.optional(),
@@ -2803,42 +2953,42 @@ var AutomationListQuery = PageQuery.extend({
   status: AutomationStatus.optional(),
   topic: Slug.optional()
 });
-var AutomationPublishRequest = import_zod8.z.object({
+var AutomationPublishRequest = import_zod9.z.object({
   /**
    * Answer what this publish would do and change nothing, whatever the flow
    * looks like. Without it a publish that has no issues and moves nobody
    * simply goes ahead, which is right for an API caller and wrong for a
    * dialog that is only showing somebody what they are about to do.
    */
-  dry_run: import_zod8.z.boolean().optional(),
-  confirm: import_zod8.z.boolean().optional(),
+  dry_run: import_zod9.z.boolean().optional(),
+  confirm: import_zod9.z.boolean().optional(),
   /** Per removed step: the step its waiting runs move to, or null to end them. */
-  moves: import_zod8.z.record(StepId, StepId.nullable()).optional(),
+  moves: import_zod9.z.record(StepId, StepId.nullable()).optional(),
   /** Also enter everyone who matches a trigger's condition right now. */
-  backfill: import_zod8.z.boolean().optional()
+  backfill: import_zod9.z.boolean().optional()
 }).strict();
-var AutomationPublishMove = import_zod8.z.object({
+var AutomationPublishMove = import_zod9.z.object({
   step_id: StepId,
   /** Why the step's people have to move: it is gone, or its delay changed. */
-  change: import_zod8.z.enum(["removed", "delay_changed", "kind_changed"]),
-  waiting: import_zod8.z.number().int().min(0),
+  change: import_zod9.z.enum(["removed", "delay_changed", "kind_changed"]),
+  waiting: import_zod9.z.number().int().min(0),
   /** Where they go: a step id, or null to end their runs with `step_removed`. */
   destination: StepId.nullable()
 });
-var AutomationPublishResult = import_zod8.z.object({
-  published: import_zod8.z.boolean(),
+var AutomationPublishResult = import_zod9.z.object({
+  published: import_zod9.z.boolean(),
   automation: Automation,
   /** Empty when nothing has to move; non-empty and `published` false asks for a confirmation. */
-  moves: import_zod8.z.array(AutomationPublishMove),
+  moves: import_zod9.z.array(AutomationPublishMove),
   /** How many people the backfill entered, or would enter when it is not confirmed. */
-  backfill: import_zod8.z.number().int().min(0),
-  issues: import_zod8.z.array(AutomationIssue)
-});
-var AutomationDuplicateRequest = import_zod8.z.object({ name: import_zod8.z.string().min(1).max(200).optional() }).strict();
-var AutomationEnrollRequest = import_zod8.z.object({
-  contact_ids: import_zod8.z.array(Id).min(1).max(1e3).optional(),
-  external_ids: import_zod8.z.array(import_zod8.z.string().min(1).max(255)).min(1).max(1e3).optional(),
-  emails: import_zod8.z.array(Email).min(1).max(1e3).optional(),
+  backfill: import_zod9.z.number().int().min(0),
+  issues: import_zod9.z.array(AutomationIssue)
+});
+var AutomationDuplicateRequest = import_zod9.z.object({ name: import_zod9.z.string().min(1).max(200).optional() }).strict();
+var AutomationEnrollRequest = import_zod9.z.object({
+  contact_ids: import_zod9.z.array(Id).min(1).max(1e3).optional(),
+  external_ids: import_zod9.z.array(import_zod9.z.string().min(1).max(255)).min(1).max(1e3).optional(),
+  emails: import_zod9.z.array(Email).min(1).max(1e3).optional(),
   segment_id: Id.optional(),
   /** Where to start them; the flow's entry step by default. */
   step_id: StepId.optional()
@@ -2846,34 +2996,34 @@ var AutomationEnrollRequest = import_zod8.z.object({
   (v) => [v.contact_ids, v.external_ids, v.emails, v.segment_id].filter((x) => x !== void 0).length === 1,
   "name the people exactly one way: contact_ids, external_ids, emails or segment_id"
 );
-var AutomationEnrollment = import_zod8.z.object({
+var AutomationEnrollment = import_zod9.z.object({
   contact_id: Id.nullable(),
   email: Email.nullable(),
-  external_id: import_zod8.z.string().nullable(),
-  entered: import_zod8.z.boolean(),
+  external_id: import_zod9.z.string().nullable(),
+  entered: import_zod9.z.boolean(),
   run_id: Id.nullable(),
   reason: AutomationEntryRefusal.nullable()
 });
-var AutomationEnrollResult = import_zod8.z.object({
-  entered: import_zod8.z.number().int().min(0),
-  refused: import_zod8.z.number().int().min(0),
-  results: import_zod8.z.array(AutomationEnrollment)
+var AutomationEnrollResult = import_zod9.z.object({
+  entered: import_zod9.z.number().int().min(0),
+  refused: import_zod9.z.number().int().min(0),
+  results: import_zod9.z.array(AutomationEnrollment)
 });
-var AutomationRunStatus = import_zod8.z.enum(["active", "waiting", "completed", "exited", "failed"]);
-var AutomationRun = import_zod8.z.object({
+var AutomationRunStatus = import_zod9.z.enum(["active", "waiting", "completed", "exited", "failed"]);
+var AutomationRun = import_zod9.z.object({
   id: Id,
   automation_id: Id,
   contact_id: Id,
   email: Email,
-  external_id: import_zod8.z.string().nullable(),
-  version: import_zod8.z.number().int().min(1),
+  external_id: import_zod9.z.string().nullable(),
+  version: import_zod9.z.number().int().min(1),
   status: AutomationRunStatus,
   current_step_id: StepId.nullable(),
   next_action_at: Timestamp.nullable(),
   wait_reason: AutomationWaitReason.nullable(),
-  end_reason: import_zod8.z.string().nullable(),
+  end_reason: import_zod9.z.string().nullable(),
   /** What went wrong the last time this run tried to take its step, null otherwise. */
-  last_error: import_zod8.z.string().nullable(),
+  last_error: import_zod9.z.string().nullable(),
   entered_at: Timestamp,
   ended_at: Timestamp.nullable()
 });
@@ -2883,13 +3033,13 @@ var AutomationRunListQuery = PageQuery.extend({
   contact_id: Id.optional()
 });
 var ContactAutomationRun = AutomationRun.extend({
-  automation: import_zod8.z.object({ id: Id, name: import_zod8.z.string(), status: AutomationStatus })
+  automation: import_zod9.z.object({ id: Id, name: import_zod9.z.string(), status: AutomationStatus })
 });
 var ContactAutomationListQuery = PageQuery.extend({ status: AutomationRunStatus.optional() });
-var AutomationStepExecution = import_zod8.z.object({
+var AutomationStepExecution = import_zod9.z.object({
   step_id: StepId,
   step_kind: AutomationStepKind,
-  visit: import_zod8.z.number().int().min(1),
+  visit: import_zod9.z.number().int().min(1),
   started_at: Timestamp,
   finished_at: Timestamp.nullable(),
   /**
@@ -2901,48 +3051,48 @@ var AutomationStepExecution = import_zod8.z.object({
    */
   outcome: Properties
 });
-var AutomationJourney = import_zod8.z.object({
+var AutomationJourney = import_zod9.z.object({
   run: AutomationRun,
-  steps: import_zod8.z.array(AutomationStepExecution)
+  steps: import_zod9.z.array(AutomationStepExecution)
 });
-var AutomationStepReport = import_zod8.z.object({
+var AutomationStepReport = import_zod9.z.object({
   step_id: StepId,
   step_kind: AutomationStepKind,
-  reached: import_zod8.z.number().int().min(0),
-  waiting: import_zod8.z.number().int().min(0),
-  passed: import_zod8.z.number().int().min(0),
+  reached: import_zod9.z.number().int().min(0),
+  waiting: import_zod9.z.number().int().min(0),
+  passed: import_zod9.z.number().int().min(0),
   /** Per branch, for a condition: how many took `yes` and how many `no`. */
-  branches: import_zod8.z.record(import_zod8.z.number().int().min(0)),
+  branches: import_zod9.z.record(import_zod9.z.number().int().min(0)),
   /** The step mailing's id, for an email step of the published version. */
   mailing_id: Id.nullable()
 });
-var AutomationReport = import_zod8.z.object({
+var AutomationReport = import_zod9.z.object({
   counts: AutomationCounts,
   /** Why the people who left did: `AutomationEndReason` to a count. */
-  end_reasons: import_zod8.z.record(import_zod8.z.number().int().min(0)),
+  end_reasons: import_zod9.z.record(import_zod9.z.number().int().min(0)),
   /**
    * Why people a trigger named did not enter: `AutomationEntryRefusal` to a
    * count. Without it a pause, an exclusion or a missing subscription would
    * turn people away invisibly.
    */
-  refusals: import_zod8.z.record(import_zod8.z.number().int().min(0)),
-  steps: import_zod8.z.array(AutomationStepReport)
-});
-var AutomationExitRunRequest = import_zod8.z.object({ reason: import_zod8.z.string().max(200).optional() }).strict();
-var AutomationRunParams = import_zod8.z.object({ id: Id, run_id: Id });
-var AutomationStepParams = import_zod8.z.object({ id: Id, step_id: StepId });
-var AutomationTestEmailRequest = import_zod8.z.object({ to: Email, merge: Properties.optional(), locale: LocaleTag.optional() }).strict();
-var AutomationValidateRequest = import_zod8.z.object({ flow: AutomationFlow.optional(), settings: AutomationSettings.partial().optional() }).strict();
-var EventCreate = import_zod8.z.object({
+  refusals: import_zod9.z.record(import_zod9.z.number().int().min(0)),
+  steps: import_zod9.z.array(AutomationStepReport)
+});
+var AutomationExitRunRequest = import_zod9.z.object({ reason: import_zod9.z.string().max(200).optional() }).strict();
+var AutomationRunParams = import_zod9.z.object({ id: Id, run_id: Id });
+var AutomationStepParams = import_zod9.z.object({ id: Id, step_id: StepId });
+var AutomationTestEmailRequest = import_zod9.z.object({ to: Email, merge: Properties.optional(), locale: LocaleTag.optional() }).strict();
+var AutomationValidateRequest = import_zod9.z.object({ flow: AutomationFlow.optional(), settings: AutomationSettings.partial().optional() }).strict();
+var EventCreate = import_zod9.z.object({
   name: EventName,
-  contact: import_zod8.z.object({ external_id: import_zod8.z.string().min(1).max(255).optional(), email: Email.optional(), id: Id.optional() }).refine((c) => [c.external_id, c.email, c.id].filter((x) => x !== void 0).length === 1, "name the contact exactly one way"),
+  contact: import_zod9.z.object({ external_id: import_zod9.z.string().min(1).max(255).optional(), email: Email.optional(), id: Id.optional() }).refine((c) => [c.external_id, c.email, c.id].filter((x) => x !== void 0).length === 1, "name the contact exactly one way"),
   data: Properties.optional(),
   occurred_at: Timestamp.optional(),
-  id: import_zod8.z.string().min(1).max(128).optional()
+  id: import_zod9.z.string().min(1).max(128).optional()
 }).strict();
-var Event = import_zod8.z.object({
+var Event = import_zod9.z.object({
   id: Id,
-  client_event_id: import_zod8.z.string().nullable(),
+  client_event_id: import_zod9.z.string().nullable(),
   name: EventName,
   contact_id: Id,
   data: Properties,
@@ -2953,7 +3103,7 @@ var Event = import_zod8.z.object({
    * hand. Each is then admitted or refused by the runtime on its own rules
    * (consent, exclusions, re-entry), which `automations.report` counts.
    */
-  entered: import_zod8.z.number().int().min(0)
+  entered: import_zod9.z.number().int().min(0)
 });
 var EventListQuery = PageQuery.extend({
   name: EventName.optional(),
@@ -2961,19 +3111,19 @@ var EventListQuery = PageQuery.extend({
 });
 
 // src/workspace.ts
-var CompanyId = import_zod9.z.string().min(1).max(64);
+var CompanyId = import_zod10.z.string().min(1).max(64);
 var ASSET_POLICIES = ["any", "service_only"];
-var AssetPolicy = import_zod9.z.enum(ASSET_POLICIES);
+var AssetPolicy = import_zod10.z.enum(ASSET_POLICIES);
 var MAX_ALLOWED_ASSET_HOSTS = 20;
-var AssetHost = import_zod9.z.string().trim().toLowerCase().min(1).max(253).regex(/^(?=.{1,253}(?::\d{1,5})?$)[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?(\.[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)+(:\d{1,5})?$/, "a host name such as example.com");
+var AssetHost = import_zod10.z.string().trim().toLowerCase().min(1).max(253).regex(/^(?=.{1,253}(?::\d{1,5})?$)[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?(\.[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)+(:\d{1,5})?$/, "a host name such as example.com");
 var MAX_MERGE_DEFAULTS = 50;
 var MAX_MERGE_DEFAULT_LENGTH = 2e3;
-var MergeFieldName = import_zod9.z.string().regex(/^[a-z][a-z0-9_]*$/, "a merge-field name: lowercase letters, digits and underscores, starting with a letter").max(64);
-var MergeDefaultValue = import_zod9.z.union([import_zod9.z.string().max(MAX_MERGE_DEFAULT_LENGTH), import_zod9.z.number().finite(), import_zod9.z.boolean()]);
-var MergeDefaults = import_zod9.z.record(MergeFieldName, MergeDefaultValue).refine((m) => Object.keys(m).length <= MAX_MERGE_DEFAULTS, `at most ${MAX_MERGE_DEFAULTS} merge defaults`).refine((m) => !Object.keys(m).some((k) => k in RESERVED_MERGE_FIELDS), {
+var MergeFieldName = import_zod10.z.string().regex(/^[a-z][a-z0-9_]*$/, "a merge-field name: lowercase letters, digits and underscores, starting with a letter").max(64);
+var MergeDefaultValue = import_zod10.z.union([import_zod10.z.string().max(MAX_MERGE_DEFAULT_LENGTH), import_zod10.z.number().finite(), import_zod10.z.boolean()]);
+var MergeDefaults = import_zod10.z.record(MergeFieldName, MergeDefaultValue).refine((m) => Object.keys(m).length <= MAX_MERGE_DEFAULTS, `at most ${MAX_MERGE_DEFAULTS} merge defaults`).refine((m) => !Object.keys(m).some((k) => k in RESERVED_MERGE_FIELDS), {
   message: `a reserved merge field (${Object.keys(RESERVED_MERGE_FIELDS).join(", ")}) cannot have a workspace default`
 });
-var WorkspaceSettings = import_zod9.z.object({
+var WorkspaceSettings = import_zod10.z.object({
   /**
    * The workspace's main language (a {@link LocaleTag}, e.g. "de"): the main
    * language of a new template, and of the hosted pages when nothing else
@@ -2986,9 +3136,9 @@ var WorkspaceSettings = import_zod9.z.object({
    * each; the hosted pages are offered in those of them they support (English,
    * German, French, Italian, Spanish). The service stores canonical casing.
    */
-  locales: import_zod9.z.array(LocaleTag).min(1).max(20).refine((l) => new Set(l.map((t) => t.toLowerCase())).size === l.length, "a language appears twice"),
+  locales: import_zod10.z.array(LocaleTag).min(1).max(20).refine((l) => new Set(l.map((t) => t.toLowerCase())).size === l.length, "a language appears twice"),
   /** Open and click tracking. Off by default, opt-in per workspace. */
-  tracking_enabled: import_zod9.z.boolean(),
+  tracking_enabled: import_zod10.z.boolean(),
   /** Where images, stylesheets and fonts in a mail may load from. `any` by default. */
   asset_policy: AssetPolicy,
   /**
@@ -2996,7 +3146,7 @@ var WorkspaceSettings = import_zod9.z.object({
    * the workspace's website, typically. Empty by default. Ignored under `any`,
    * which allows everything already.
    */
-  allowed_asset_hosts: import_zod9.z.array(AssetHost).max(MAX_ALLOWED_ASSET_HOSTS),
+  allowed_asset_hosts: import_zod10.z.array(AssetHost).max(MAX_ALLOWED_ASSET_HOSTS),
   /** Merge values every mail of the workspace can use (see `MergeDefaults`). Empty by default. */
   merge_defaults: MergeDefaults,
   /**
@@ -3005,10 +3155,10 @@ var WorkspaceSettings = import_zod9.z.object({
    */
   default_timezone: TimezoneName.nullable()
 });
-var Workspace = import_zod9.z.object({
+var Workspace = import_zod10.z.object({
   id: Id,
   slug: Slug,
-  name: import_zod9.z.string().min(1).max(120),
+  name: import_zod10.z.string().min(1).max(120),
   settings: WorkspaceSettings,
   /**
    * The auth-brain company (tenant) the workspace was created for, or null for
@@ -3019,13 +3169,13 @@ var Workspace = import_zod9.z.object({
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var WorkspaceCreate = import_zod9.z.object({
+var WorkspaceCreate = import_zod10.z.object({
   slug: Slug,
-  name: import_zod9.z.string().min(1).max(120),
+  name: import_zod10.z.string().min(1).max(120),
   settings: WorkspaceSettings.partial().optional(),
-  owner: import_zod9.z.object({
+  owner: import_zod10.z.object({
     email: Email,
-    name: import_zod9.z.string().max(200).nullable().optional()
+    name: import_zod10.z.string().max(200).nullable().optional()
   }),
   /**
    * The signed-in person's active auth-brain company. The dashboard always
@@ -3035,49 +3185,49 @@ var WorkspaceCreate = import_zod9.z.object({
    */
   company_id: CompanyId.optional()
 });
-var WorkspaceUpdate = import_zod9.z.object({
-  name: import_zod9.z.string().min(1).max(120),
+var WorkspaceUpdate = import_zod10.z.object({
+  name: import_zod10.z.string().min(1).max(120),
   settings: WorkspaceSettings.partial()
 }).partial().refine((v) => Object.keys(v).length > 0, "at least one field");
-var WorkspaceMove = import_zod9.z.object({ company_id: CompanyId });
+var WorkspaceMove = import_zod10.z.object({ company_id: CompanyId });
 var MEMBER_ROLES = ["owner", "admin", "editor", "viewer"];
-var MemberRole = import_zod9.z.enum(MEMBER_ROLES);
+var MemberRole = import_zod10.z.enum(MEMBER_ROLES);
 var WorkspaceMembership = Workspace.extend({ role: MemberRole });
-var Member = import_zod9.z.object({
+var Member = import_zod10.z.object({
   id: Id,
   /** The person's auth-brain subject. */
-  subject: import_zod9.z.string().min(1).max(255),
+  subject: import_zod10.z.string().min(1).max(255),
   email: Email,
-  name: import_zod9.z.string().max(200).nullable(),
+  name: import_zod10.z.string().max(200).nullable(),
   role: MemberRole,
   created_at: Timestamp
 });
-var MemberCreate = import_zod9.z.object({
-  subject: import_zod9.z.string().min(1).max(255),
+var MemberCreate = import_zod10.z.object({
+  subject: import_zod10.z.string().min(1).max(255),
   email: Email,
-  name: import_zod9.z.string().max(200).nullable().optional(),
+  name: import_zod10.z.string().max(200).nullable().optional(),
   role: MemberRole
 });
-var MemberUpdate = import_zod9.z.object({ role: MemberRole });
+var MemberUpdate = import_zod10.z.object({ role: MemberRole });
 var API_KEY_SCOPES = ["full", "read", "send"];
-var ApiKeyScope = import_zod9.z.enum(API_KEY_SCOPES);
-var ApiKey = import_zod9.z.object({
+var ApiKeyScope = import_zod10.z.enum(API_KEY_SCOPES);
+var ApiKey = import_zod10.z.object({
   id: Id,
-  name: import_zod9.z.string().min(1).max(120),
+  name: import_zod10.z.string().min(1).max(120),
   /** The first characters of the key, for recognising it in a list. */
-  prefix: import_zod9.z.string().min(4).max(32),
+  prefix: import_zod10.z.string().min(4).max(32),
   scope: ApiKeyScope,
   last_used_at: Timestamp.nullable(),
   revoked_at: Timestamp.nullable(),
   created_at: Timestamp
 });
-var ApiKeyCreate = import_zod9.z.object({
-  name: import_zod9.z.string().min(1).max(120),
+var ApiKeyCreate = import_zod10.z.object({
+  name: import_zod10.z.string().min(1).max(120),
   /** Omitted means `full`. */
   scope: ApiKeyScope.optional()
 });
-var ApiKeyCreated = import_zod9.z.object({
-  key: import_zod9.z.string().min(20),
+var ApiKeyCreated = import_zod10.z.object({
+  key: import_zod10.z.string().min(20),
   api_key: ApiKey
 });
 var AUDIT_ACTIONS = [
@@ -3104,6 +3254,7 @@ var AUDIT_ACTIONS = [
   "template.created",
   "template.updated",
   "template.deleted",
+  "template.inputs_declared",
   "saved_section.created",
   "saved_section.updated",
   "saved_section.deleted",
@@ -3165,29 +3316,29 @@ var AUDIT_ACTIONS = [
   "automation.run_ended",
   "event.recorded"
 ];
-var AuditAction = import_zod9.z.enum(AUDIT_ACTIONS);
-var AuditActor = import_zod9.z.discriminatedUnion("type", [
-  import_zod9.z.object({ type: import_zod9.z.literal("member"), member_id: Id, subject: import_zod9.z.string().min(1) }),
-  import_zod9.z.object({
-    type: import_zod9.z.literal("api_key"),
+var AuditAction = import_zod10.z.enum(AUDIT_ACTIONS);
+var AuditActor = import_zod10.z.discriminatedUnion("type", [
+  import_zod10.z.object({ type: import_zod10.z.literal("member"), member_id: Id, subject: import_zod10.z.string().min(1) }),
+  import_zod10.z.object({
+    type: import_zod10.z.literal("api_key"),
     api_key_id: Id,
     /**
      * Who the client's application said it was acting for, from
      * `ON_BEHALF_OF_HEADER`: reported by that application, never verified.
      * Absent when the call carried no label.
      */
-    on_behalf_of: import_zod9.z.string().min(1).max(ON_BEHALF_OF_MAX_LENGTH).optional()
+    on_behalf_of: import_zod10.z.string().min(1).max(ON_BEHALF_OF_MAX_LENGTH).optional()
   }),
   /** The service itself (the worker, a bounce, the hosted unsubscribe page). */
-  import_zod9.z.object({ type: import_zod9.z.literal("system"), reason: import_zod9.z.string().min(1).max(200) })
+  import_zod10.z.object({ type: import_zod10.z.literal("system"), reason: import_zod10.z.string().min(1).max(200) })
 ]);
-var AuditEntry = import_zod9.z.object({
+var AuditEntry = import_zod10.z.object({
   id: Id,
   action: AuditAction,
   actor: AuditActor,
-  target_type: import_zod9.z.string().min(1).max(64),
+  target_type: import_zod10.z.string().min(1).max(64),
   target_id: Id.nullable(),
-  details: import_zod9.z.record(import_zod9.z.unknown()),
+  details: import_zod10.z.record(import_zod10.z.unknown()),
   created_at: Timestamp
 });
 var AuditQuery = PageQuery.extend({
@@ -3196,12 +3347,12 @@ var AuditQuery = PageQuery.extend({
 });
 
 // src/invites.ts
-var import_zod10 = require("zod");
+var import_zod11 = require("zod");
 var INVITE_STATUSES = ["pending", "accepted", "revoked", "expired"];
-var InviteStatus = import_zod10.z.enum(INVITE_STATUSES);
+var InviteStatus = import_zod11.z.enum(INVITE_STATUSES);
 var DEFAULT_INVITE_TTL_DAYS = 7;
 var MAX_INVITE_TTL_DAYS = 30;
-var Invite = import_zod10.z.object({
+var Invite = import_zod11.z.object({
   id: Id,
   /** Stored lowercased; only a person signed in with this address can accept. */
   email: Email,
@@ -3209,32 +3360,32 @@ var Invite = import_zod10.z.object({
   /** Derived from the timestamps below, never stored. */
   status: InviteStatus,
   /** The member who invited, while they are still one (null after they left). */
-  invited_by: import_zod10.z.object({ member_id: Id.nullable(), email: Email.nullable() }),
+  invited_by: import_zod11.z.object({ member_id: Id.nullable(), email: Email.nullable() }),
   expires_at: Timestamp,
   accepted_at: Timestamp.nullable(),
   revoked_at: Timestamp.nullable(),
   created_at: Timestamp
 });
-var InviteCreate = import_zod10.z.object({
+var InviteCreate = import_zod11.z.object({
   email: Email,
   role: MemberRole,
-  expires_in_days: import_zod10.z.number().int().min(1).max(MAX_INVITE_TTL_DAYS).optional()
+  expires_in_days: import_zod11.z.number().int().min(1).max(MAX_INVITE_TTL_DAYS).optional()
 });
-var InviteCreated = import_zod10.z.object({
+var InviteCreated = import_zod11.z.object({
   invite: Invite,
-  token: import_zod10.z.string().min(32).max(128)
+  token: import_zod11.z.string().min(32).max(128)
 });
 var InviteListQuery = PageQuery.extend({
   status: InviteStatus.optional()
 });
-var InviteAccept = import_zod10.z.object({
-  token: import_zod10.z.string().min(32).max(128),
+var InviteAccept = import_zod11.z.object({
+  token: import_zod11.z.string().min(32).max(128),
   email: Email,
-  name: import_zod10.z.string().max(200).nullable().optional()
+  name: import_zod11.z.string().max(200).nullable().optional()
 });
-var InviteAccepted = import_zod10.z.object({
+var InviteAccepted = import_zod11.z.object({
   workspace: WorkspaceMembership,
-  already_member: import_zod10.z.boolean()
+  already_member: import_zod11.z.boolean()
 });
 var INVITE_REFUSAL_REASONS = ["email_mismatch", "inviter_lacks_role", "expired", "revoked", "accepted"];
 
@@ -3541,14 +3692,14 @@ function insertionNameProblem(insertions, name, current) {
   if (has(RESERVED_MERGE_FIELDS, name)) return `"${name}" is a merge field the service fills itself. Choose another name.`;
   if (name !== current && has(insertions, name)) return `There is already an insertion called "${name}".`;
   const chooser = Object.entries(insertions).find(([other, def]) => def.by === name && other !== current);
-  if (chooser) return `"${name}" is the value that chooses "${chooser[0]}". Choose another name.`;
-  if (current !== void 0 && ownEntry(insertions, current)?.by === name) return `"${name}" is the value that chooses this insertion. Choose another name.`;
+  if (chooser) return `"${name}" is the value "${chooser[0]}" depends on. Choose another name.`;
+  if (current !== void 0 && ownEntry(insertions, current)?.by === name) return `"${name}" is the value this insertion depends on. Choose another name.`;
   return null;
 }
 function insertionByProblem(insertions, by, self) {
-  if (!InsertionName.safeParse(by).success) return "The value that chooses is a merge-field name: lowercase letters, digits and underscores (like reason).";
-  if (by === "unsubscribe_url") return "The unsubscribe link cannot choose a text. Use a value the client or the contact provides.";
-  if (by === self || has(insertions, by)) return `"${by}" is an insertion, not a value. Use a value the client or the contact provides.`;
+  if (!InsertionName.safeParse(by).success) return "The value it depends on is a merge-field name: lowercase letters, digits and underscores (like reason).";
+  if (by === "unsubscribe_url") return "An insertion cannot depend on the unsubscribe link. Use a value the app or the contact provides.";
+  if (by === self || has(insertions, by)) return `"${by}" is an insertion, not a value. Use a value the app or the contact provides.`;
   return null;
 }
 function normalizeChoiceKey(raw) {
@@ -3556,10 +3707,10 @@ function normalizeChoiceKey(raw) {
 }
 function choiceKeyProblem(insertion, key, current) {
   if (INSERTION_TEXT_SLOTS.includes(key)) {
-    return `"${key}" names the insertion's ${key === "filled" ? '"any other filled value"' : '"otherwise"'} text, so it cannot be a choice. Choose another value.`;
+    return `"${key}" is kept for the insertion's ${key === "filled" ? '"any other value"' : '"empty"'} sentence, so it cannot be a value. Choose another value.`;
   }
-  if (!InsertionChoiceKey.safeParse(key).success) return "A choice is the value a client sends: lowercase letters, digits, hyphens and underscores (like venue).";
-  if (key !== current && has(insertion.choices, key)) return `There is already a choice "${key}".`;
+  if (!InsertionChoiceKey.safeParse(key).success) return "A value is written exactly as the app sends it: lowercase letters, digits, hyphens and underscores (like venue).";
+  if (key !== current && has(insertion.choices, key)) return `"${key}" already has its own sentence.`;
   return null;
 }
 function addInsertion(drafts, rawName, rawBy) {
@@ -3568,7 +3719,7 @@ function addInsertion(drafts, rawName, rawBy) {
   if (Object.keys(drafts.insertions).length >= MAX_INSERTIONS) return { ok: false, message: `A template holds at most ${MAX_INSERTIONS} insertions.` };
   const nameProblem = insertionNameProblem(drafts.insertions, name);
   if (nameProblem) return { ok: false, message: nameProblem };
-  if (name === by) return { ok: false, message: "An insertion cannot be chosen by its own name. Use the value the client sends (like reason)." };
+  if (name === by) return { ok: false, message: "An insertion cannot depend on its own name. Use the value the app sends (like reason)." };
   const byProblem = insertionByProblem(drafts.insertions, by);
   if (byProblem) return { ok: false, message: byProblem };
   return { ok: true, drafts: editMainInsertions(drafts, { ...drafts.insertions, [name]: { by, choices: {}, filled: null, otherwise: "" } }) };
@@ -3751,6 +3902,25 @@ var REFUSAL_HINTS = {
   insertion_with_fallback: 'Remove the |fallback from the insertion in the subject, preheader or body: its "otherwise" text is the fallback.',
   unknown_translation_insertion: "A language names an insertion or a choice the main language no longer has. Reload the template and try again."
 };
+function unknownRefusedInsertions(details, drafts) {
+  const reason = details?.reason;
+  if (typeof reason !== "string" || !has(REFUSAL_HINTS, reason)) return [];
+  const names = [];
+  const add = (name) => {
+    if (typeof name === "string" && name !== "" && ownEntry(drafts.insertions, name) === void 0 && !names.includes(name)) names.push(name);
+  };
+  if (Array.isArray(details?.missing)) {
+    for (const m of details.missing) if (typeof m === "object" && m !== null) add(m.insertion);
+  }
+  if (Array.isArray(details?.issues)) {
+    for (const issue of details.issues) {
+      const path = typeof issue === "object" && issue !== null && Array.isArray(issue.path) ? issue.path.map(String) : [];
+      const at = path.indexOf("insertions");
+      if (at >= 0) add(path[at + 1]);
+    }
+  }
+  return names;
+}
 function insertionRefusalHint(details) {
   const reason = details?.reason;
   if (typeof reason !== "string" || !has(REFUSAL_HINTS, reason)) return null;
@@ -3759,15 +3929,99 @@ function insertionRefusalHint(details) {
   const missing = Array.isArray(details?.missing) ? details.missing.filter((m) => typeof m === "object" && m !== null && typeof m.insertion === "string" && typeof m.choice === "string") : [];
   return missing.length > 0 ? `The language has ${describeMissingTexts(missing)}. ${hint}` : hint;
 }
+function tokenOf(name) {
+  return new RegExp(String.raw`\{\{(\s*)${name}(\s*)(\|[^}]*)?\}\}`, "g");
+}
+function renameTokenInText(text, from, to) {
+  let count = 0;
+  const out = text.replace(tokenOf(from), (_m, before, after, fallback) => {
+    count++;
+    return `{{${before}${to}${after}${fallback ?? ""}}}`;
+  });
+  return { text: count > 0 ? out : text, count };
+}
+function renameTokenInDocument(document, from, to) {
+  let count = 0;
+  const walk = (value) => {
+    if (typeof value === "string") {
+      const r = renameTokenInText(value, from, to);
+      count += r.count;
+      return r.text;
+    }
+    if (Array.isArray(value)) {
+      let changed = false;
+      const next2 = value.map((v) => {
+        const w = walk(v);
+        if (w !== v) changed = true;
+        return w;
+      });
+      return changed ? next2 : value;
+    }
+    if (value && typeof value === "object") {
+      let changed = false;
+      const next2 = {};
+      for (const [k, v] of Object.entries(value)) {
+        const w = walk(v);
+        if (w !== v) changed = true;
+        next2[k] = w;
+      }
+      return changed ? next2 : value;
+    }
+    return value;
+  };
+  const renamed = walk(document);
+  return { document: renamed, count };
+}
+function renameInsertionPlacements(drafts, from, to) {
+  if (from === to) return { drafts, places: [] };
+  const places = [];
+  const note2 = (locale, where, count) => {
+    if (count > 0) places.push({ locale, where, count });
+  };
+  const body = renameTokenInDocument(drafts.main.document, from, to);
+  const subject = renameTokenInText(drafts.main.subject, from, to);
+  const preheader = renameTokenInText(drafts.main.preheader, from, to);
+  note2(null, "body", body.count);
+  note2(null, "subject", subject.count);
+  note2(null, "preheader", preheader.count);
+  let out = {
+    ...drafts,
+    main: { subject: subject.text, preheader: preheader.text, document: body.document },
+    mainDocumentChanged: drafts.mainDocumentChanged || body.count > 0
+  };
+  for (const [tag, version] of Object.entries(drafts.translations)) {
+    const b = renameTokenInDocument(version.document, from, to);
+    const s = version.subject === null ? { text: null, count: 0 } : renameTokenInText(version.subject, from, to);
+    const p = version.preheader === null ? { text: null, count: 0 } : renameTokenInText(version.preheader, from, to);
+    note2(tag, "body", b.count);
+    note2(tag, "subject", s.count);
+    note2(tag, "preheader", p.count);
+    if (b.count + s.count + p.count === 0) continue;
+    out = {
+      ...out,
+      translations: { ...out.translations, [tag]: { ...version, document: b.document, subject: s.text, preheader: p.text } },
+      changed: out.changed.includes(tag) ? out.changed : [...out.changed, tag]
+    };
+  }
+  return { drafts: out, places };
+}
+function renameInsertionEverywhere(drafts, from, rawTo) {
+  const renamed = renameInsertionChecked(drafts, from, rawTo);
+  if (!renamed.ok) return renamed;
+  const to = rawTo.trim();
+  if (to === from) return { ok: true, drafts, places: [] };
+  const placed = renameInsertionPlacements(renamed.drafts, from, to);
+  return { ok: true, drafts: placed.drafts, places: placed.places };
+}
 
 // src/providers.ts
-var import_zod11 = require("zod");
+var import_zod12 = require("zod");
 var PROVIDER_KINDS = ["smtp", "resend"];
-var ProviderKind = import_zod11.z.enum(PROVIDER_KINDS);
-var ProviderPolicy = import_zod11.z.object({
-  daily_recipient_budget: import_zod11.z.number().int().min(1).max(1e7),
-  min_interval_ms: import_zod11.z.number().int().min(0).max(36e5),
-  max_recipients_per_message: import_zod11.z.number().int().min(1).max(1e3)
+var ProviderKind = import_zod12.z.enum(PROVIDER_KINDS);
+var ProviderPolicy = import_zod12.z.object({
+  daily_recipient_budget: import_zod12.z.number().int().min(1).max(1e7),
+  min_interval_ms: import_zod12.z.number().int().min(0).max(36e5),
+  max_recipients_per_message: import_zod12.z.number().int().min(1).max(1e3)
 });
 var ICLOUD_SMTP_POLICY = {
   daily_recipient_budget: 800,
@@ -3775,17 +4029,17 @@ var ICLOUD_SMTP_POLICY = {
   max_recipients_per_message: 1
 };
 var SMTP_SECURITY = ["tls", "starttls"];
-var SmtpConfigBase = import_zod11.z.object({
-  host: import_zod11.z.string().min(1).max(255),
-  port: import_zod11.z.number().int().min(1).max(65535),
+var SmtpConfigBase = import_zod12.z.object({
+  host: import_zod12.z.string().min(1).max(255),
+  port: import_zod12.z.number().int().min(1).max(65535),
   /** `tls` connects encrypted (465), `starttls` upgrades (587). Never plaintext. */
-  security: import_zod11.z.enum(SMTP_SECURITY),
-  username: import_zod11.z.string().min(1).max(255)
+  security: import_zod12.z.enum(SMTP_SECURITY),
+  username: import_zod12.z.string().min(1).max(255)
 });
-var ResendConfigBase = import_zod11.z.object({});
-var ProviderRejections = import_zod11.z.object({
-  count: import_zod11.z.number().int().min(0),
-  last_error: import_zod11.z.string().nullable(),
+var ResendConfigBase = import_zod12.z.object({});
+var ProviderRejections = import_zod12.z.object({
+  count: import_zod12.z.number().int().min(0),
+  last_error: import_zod12.z.string().nullable(),
   last_at: Timestamp.nullable(),
   /**
    * The last time the bounce circuit breaker tripped on one of this provider's
@@ -3795,59 +4049,59 @@ var ProviderRejections = import_zod11.z.object({
    * run's bounce blocks were undone and the mailing paused. `sample` is the
    * reply that tripped it.
    */
-  anomaly: import_zod11.z.object({
+  anomaly: import_zod12.z.object({
     at: Timestamp,
     /** `mailing`: one mailing was paused. `provider`: 5 refusals in a row with the same reply across the provider's sends (test sends and one-recipient mailings included) within 24 hours. */
-    scope: import_zod11.z.enum(["mailing", "provider"]),
+    scope: import_zod12.z.enum(["mailing", "provider"]),
     /**
      * True while the provider-wide breaker is open: no bounce blocks through
      * this provider, test sends refused and mailings not started or resumed
      * (`provider_anomaly`), until an admin clears it (`providers.clearAnomaly`).
      */
-    blocking: import_zod11.z.boolean(),
+    blocking: import_zod12.z.boolean(),
     mailing_id: Id.nullable(),
-    reason: import_zod11.z.string(),
-    sample: import_zod11.z.string()
+    reason: import_zod12.z.string(),
+    sample: import_zod12.z.string()
   }).nullable()
 });
-var ProviderEvents = import_zod11.z.object({
-  status: import_zod11.z.enum(["active", "needs_secret"]),
-  source: import_zod11.z.enum(["automatic", "manual"]).nullable(),
-  url: import_zod11.z.string().url(),
-  error: import_zod11.z.string().nullable(),
+var ProviderEvents = import_zod12.z.object({
+  status: import_zod12.z.enum(["active", "needs_secret"]),
+  source: import_zod12.z.enum(["automatic", "manual"]).nullable(),
+  url: import_zod12.z.string().url(),
+  error: import_zod12.z.string().nullable(),
   /**
    * Events that named an email this provider never sent through the service
    * (another workspace or system sharing the Resend account): counted, never
    * acted on.
    */
-  unmatched: import_zod11.z.number().int().min(0)
+  unmatched: import_zod12.z.number().int().min(0)
 });
 var RESEND_EVENT_TYPES = ["email.bounced", "email.complained", "email.delivery_delayed"];
-var ResendSigningSecret = import_zod11.z.string().max(200).regex(/^whsec_[A-Za-z0-9+/]{16,}={0,2}$/, "must be the signing secret Resend shows, starting with whsec_");
-var ProviderEventsSecret = import_zod11.z.object({ signing_secret: ResendSigningSecret });
+var ResendSigningSecret = import_zod12.z.string().max(200).regex(/^whsec_[A-Za-z0-9+/]{16,}={0,2}$/, "must be the signing secret Resend shows, starting with whsec_");
+var ProviderEventsSecret = import_zod12.z.object({ signing_secret: ResendSigningSecret });
 var ProviderFields = {
-  name: import_zod11.z.string().min(1).max(120),
-  from_name: import_zod11.z.string().min(1).max(120),
+  name: import_zod12.z.string().min(1).max(120),
+  from_name: import_zod12.z.string().min(1).max(120),
   from_email: Email,
   reply_to: Email.nullable(),
   policy: ProviderPolicy
 };
-var Provider = import_zod11.z.discriminatedUnion("kind", [
-  import_zod11.z.object({
+var Provider = import_zod12.z.discriminatedUnion("kind", [
+  import_zod12.z.object({
     id: Id,
-    kind: import_zod11.z.literal("smtp"),
+    kind: import_zod12.z.literal("smtp"),
     config: SmtpConfigBase,
-    has_secret: import_zod11.z.boolean(),
+    has_secret: import_zod12.z.boolean(),
     ...ProviderFields,
     rejections: ProviderRejections,
     created_at: Timestamp,
     updated_at: Timestamp
   }),
-  import_zod11.z.object({
+  import_zod12.z.object({
     id: Id,
-    kind: import_zod11.z.literal("resend"),
+    kind: import_zod12.z.literal("resend"),
     config: ResendConfigBase,
-    has_secret: import_zod11.z.boolean(),
+    has_secret: import_zod12.z.boolean(),
     ...ProviderFields,
     rejections: ProviderRejections,
     events: ProviderEvents,
@@ -3855,31 +4109,31 @@ var Provider = import_zod11.z.discriminatedUnion("kind", [
     updated_at: Timestamp
   })
 ]);
-var ProviderCreate = import_zod11.z.discriminatedUnion("kind", [
-  import_zod11.z.object({
-    kind: import_zod11.z.literal("smtp"),
-    config: SmtpConfigBase.extend({ password: import_zod11.z.string().min(1).max(1024) }),
+var ProviderCreate = import_zod12.z.discriminatedUnion("kind", [
+  import_zod12.z.object({
+    kind: import_zod12.z.literal("smtp"),
+    config: SmtpConfigBase.extend({ password: import_zod12.z.string().min(1).max(1024) }),
     ...ProviderFields
   }),
-  import_zod11.z.object({
-    kind: import_zod11.z.literal("resend"),
-    config: ResendConfigBase.extend({ api_key: import_zod11.z.string().min(1).max(1024) }),
+  import_zod12.z.object({
+    kind: import_zod12.z.literal("resend"),
+    config: ResendConfigBase.extend({ api_key: import_zod12.z.string().min(1).max(1024) }),
     ...ProviderFields
   })
 ]);
-var ProviderUpdate = import_zod11.z.discriminatedUnion("kind", [
-  import_zod11.z.object({
-    kind: import_zod11.z.literal("smtp"),
-    config: SmtpConfigBase.extend({ password: import_zod11.z.string().min(1).max(1024).optional() }).partial().optional(),
+var ProviderUpdate = import_zod12.z.discriminatedUnion("kind", [
+  import_zod12.z.object({
+    kind: import_zod12.z.literal("smtp"),
+    config: SmtpConfigBase.extend({ password: import_zod12.z.string().min(1).max(1024).optional() }).partial().optional(),
     name: ProviderFields.name.optional(),
     from_name: ProviderFields.from_name.optional(),
     from_email: ProviderFields.from_email.optional(),
     reply_to: ProviderFields.reply_to.optional(),
     policy: ProviderPolicy.partial().optional()
   }),
-  import_zod11.z.object({
-    kind: import_zod11.z.literal("resend"),
-    config: ResendConfigBase.extend({ api_key: import_zod11.z.string().min(1).max(1024).optional() }).optional(),
+  import_zod12.z.object({
+    kind: import_zod12.z.literal("resend"),
+    config: ResendConfigBase.extend({ api_key: import_zod12.z.string().min(1).max(1024).optional() }).optional(),
     name: ProviderFields.name.optional(),
     from_name: ProviderFields.from_name.optional(),
     from_email: ProviderFields.from_email.optional(),
@@ -3887,48 +4141,48 @@ var ProviderUpdate = import_zod11.z.discriminatedUnion("kind", [
     policy: ProviderPolicy.partial().optional()
   })
 ]);
-var ProviderUsage = import_zod11.z.object({
+var ProviderUsage = import_zod12.z.object({
   provider_id: Id,
-  recipients_last_24h: import_zod11.z.number().int().min(0),
-  remaining_budget: import_zod11.z.number().int().min(0),
+  recipients_last_24h: import_zod12.z.number().int().min(0),
+  remaining_budget: import_zod12.z.number().int().min(0),
   /** When enough of the rolling window frees up to send again, if exhausted. */
   next_capacity_at: Timestamp.nullable()
 });
-var ProviderVerifyResult = import_zod11.z.object({
-  ok: import_zod11.z.boolean(),
-  error: import_zod11.z.string().nullable()
+var ProviderVerifyResult = import_zod12.z.object({
+  ok: import_zod12.z.boolean(),
+  error: import_zod12.z.string().nullable()
 });
 
 // src/contacts.ts
-var import_zod12 = require("zod");
-var Topic = import_zod12.z.object({
+var import_zod13 = require("zod");
+var Topic = import_zod13.z.object({
   id: Id,
   slug: Slug,
-  name: import_zod12.z.string().min(1).max(120),
+  name: import_zod13.z.string().min(1).max(120),
   /** Shown on the hosted preference page. */
-  description: import_zod12.z.string().max(1e3).nullable(),
+  description: import_zod13.z.string().max(1e3).nullable(),
   /** Translations of `name` and `description` per locale, for the hosted page. */
-  translations: import_zod12.z.record(
-    import_zod12.z.object({ name: import_zod12.z.string().min(1).max(120), description: import_zod12.z.string().max(1e3).nullable() })
+  translations: import_zod13.z.record(
+    import_zod13.z.object({ name: import_zod13.z.string().min(1).max(120), description: import_zod13.z.string().max(1e3).nullable() })
   ),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var TopicCreate = import_zod12.z.object({
+var TopicCreate = import_zod13.z.object({
   slug: Slug,
-  name: import_zod12.z.string().min(1).max(120),
-  description: import_zod12.z.string().max(1e3).optional(),
+  name: import_zod13.z.string().min(1).max(120),
+  description: import_zod13.z.string().max(1e3).optional(),
   translations: Topic.shape.translations.optional()
 });
 var TopicUpdate = TopicCreate.omit({ slug: true }).partial().refine((v) => Object.keys(v).length > 0, "at least one field");
-var Contact = import_zod12.z.object({
+var Contact = import_zod13.z.object({
   id: Id,
-  external_id: import_zod12.z.string().min(1).max(255).nullable(),
+  external_id: import_zod13.z.string().min(1).max(255).nullable(),
   /** Stored lowercased, unique per workspace. */
   email: Email,
-  first_name: import_zod12.z.string().max(200).nullable(),
-  last_name: import_zod12.z.string().max(200).nullable(),
-  locale: import_zod12.z.string().min(2).max(35).nullable(),
+  first_name: import_zod13.z.string().max(200).nullable(),
+  last_name: import_zod13.z.string().max(200).nullable(),
+  locale: import_zod13.z.string().min(2).max(35).nullable(),
   /**
    * The person's own time zone, an IANA name such as `Europe/Berlin` (A1).
    * Every wall clock an automation waits for is read in it, falling back to the
@@ -3936,65 +4190,65 @@ var Contact = import_zod12.z.object({
    */
   timezone: TimezoneName.nullable(),
   properties: Properties,
-  topics: import_zod12.z.array(Slug),
+  topics: import_zod13.z.array(Slug),
   /** The slugs of the contact's tags (S4). */
-  tags: import_zod12.z.array(Slug),
+  tags: import_zod13.z.array(Slug),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var ContactUpsert = import_zod12.z.object({
-  external_id: import_zod12.z.string().min(1).max(255).optional(),
+var ContactUpsert = import_zod13.z.object({
+  external_id: import_zod13.z.string().min(1).max(255).optional(),
   email: Email.optional(),
-  first_name: import_zod12.z.string().max(200).nullable().optional(),
-  last_name: import_zod12.z.string().max(200).nullable().optional(),
-  locale: import_zod12.z.string().min(2).max(35).nullable().optional(),
+  first_name: import_zod13.z.string().max(200).nullable().optional(),
+  last_name: import_zod13.z.string().max(200).nullable().optional(),
+  locale: import_zod13.z.string().min(2).max(35).nullable().optional(),
   timezone: TimezoneName.nullable().optional(),
   properties: Properties.optional(),
-  topics: import_zod12.z.array(Slug).max(100).optional()
+  topics: import_zod13.z.array(Slug).max(100).optional()
 }).refine((v) => v.external_id !== void 0 || v.email !== void 0, {
   message: "external_id or email is required",
   path: ["email"]
 });
-var ContactUpsertResult = import_zod12.z.object({
+var ContactUpsertResult = import_zod13.z.object({
   contact: Contact,
-  created: import_zod12.z.boolean()
+  created: import_zod13.z.boolean()
 });
 var ContactListQuery = PageQuery.extend({
-  email: import_zod12.z.string().min(1).max(254).optional(),
-  external_id: import_zod12.z.string().min(1).max(255).optional(),
+  email: import_zod13.z.string().min(1).max(254).optional(),
+  external_id: import_zod13.z.string().min(1).max(255).optional(),
   topic: Slug.optional()
 });
-var ContactErased = import_zod12.z.object({
-  ok: import_zod12.z.literal(true),
-  erased_messages: import_zod12.z.number().int().min(0),
-  erased_recipients: import_zod12.z.number().int().min(0),
-  suppressions_kept: import_zod12.z.number().int().min(0)
+var ContactErased = import_zod13.z.object({
+  ok: import_zod13.z.literal(true),
+  erased_messages: import_zod13.z.number().int().min(0),
+  erased_recipients: import_zod13.z.number().int().min(0),
+  suppressions_kept: import_zod13.z.number().int().min(0)
 });
 var SUPPRESSION_REASONS = ["unsubscribed", "bounced", "complained", "manual"];
-var SuppressionReason = import_zod12.z.enum(SUPPRESSION_REASONS);
-var Suppression = import_zod12.z.object({
+var SuppressionReason = import_zod13.z.enum(SUPPRESSION_REASONS);
+var Suppression = import_zod13.z.object({
   id: Id,
   email: Email,
   reason: SuppressionReason,
   topic: Slug.nullable(),
   source_message_id: Id.nullable(),
-  note: import_zod12.z.string().max(1e3).nullable(),
+  note: import_zod13.z.string().max(1e3).nullable(),
   created_at: Timestamp
 });
-var SuppressionCreate = import_zod12.z.object({
+var SuppressionCreate = import_zod13.z.object({
   email: Email,
-  reason: import_zod12.z.enum(["manual", "unsubscribed"]),
+  reason: import_zod13.z.enum(["manual", "unsubscribed"]),
   topic: Slug.nullable().optional(),
-  note: import_zod12.z.string().max(1e3).optional()
+  note: import_zod13.z.string().max(1e3).optional()
 });
 var SuppressionListQuery = PageQuery.extend({
-  email: import_zod12.z.string().min(1).max(254).optional(),
+  email: import_zod13.z.string().min(1).max(254).optional(),
   reason: SuppressionReason.optional(),
   topic: Slug.optional()
 });
 
 // src/webhooks.ts
-var import_zod13 = require("zod");
+var import_zod14 = require("zod");
 var WEBHOOK_EVENT_TYPES = [
   "message.sent",
   "message.failed",
@@ -4038,23 +4292,23 @@ var WEBHOOK_EVENT_TYPES = [
   "template.updated",
   "template.deleted"
 ];
-var WebhookEventType = import_zod13.z.enum(WEBHOOK_EVENT_TYPES);
-var MessageEventBase = import_zod13.z.object({
+var WebhookEventType = import_zod14.z.enum(WEBHOOK_EVENT_TYPES);
+var MessageEventBase = import_zod14.z.object({
   message_id: Id,
   mailing_id: Id.nullable(),
   mailing_metadata: MailingMetadata.nullable(),
   recipient_id: Id.nullable(),
   contact_id: Id.nullable(),
-  external_id: import_zod13.z.string().nullable(),
+  external_id: import_zod14.z.string().nullable(),
   email: Email,
-  subject: import_zod13.z.string(),
+  subject: import_zod14.z.string(),
   topic: Slug.nullable(),
-  provider_message_id: import_zod13.z.string().nullable(),
-  is_test: import_zod13.z.boolean()
+  provider_message_id: import_zod14.z.string().nullable(),
+  is_test: import_zod14.z.boolean()
 });
 var MessageSentData = MessageEventBase.extend({
   /** The final HTML as sent, so the client can archive it beside its own records. */
-  html: import_zod13.z.string(),
+  html: import_zod14.z.string(),
   sent_at: Timestamp,
   /**
    * The choice each insertion made (see `Message.insertions`); absent or null
@@ -4065,20 +4319,20 @@ var MessageSentData = MessageEventBase.extend({
   insertions: InsertionChoices.nullish()
 });
 var MessageFailedData = MessageEventBase.extend({
-  error: import_zod13.z.string(),
+  error: import_zod14.z.string(),
   /** False when the provider rejected permanently; the recipient will not be retried. */
-  retryable: import_zod13.z.boolean(),
+  retryable: import_zod14.z.boolean(),
   failed_at: Timestamp
 });
 var UNSUBSCRIBE_SOURCES = ["hosted_page", "one_click", "api", "dashboard", "signup_form"];
-var ContactUnsubscribedData = import_zod13.z.object({
+var ContactUnsubscribedData = import_zod14.z.object({
   contact_id: Id.nullable(),
-  external_id: import_zod13.z.string().nullable(),
+  external_id: import_zod14.z.string().nullable(),
   email: Email,
   /** The topic unsubscribed from; null means every topic. */
   topic: Slug.nullable(),
   mailing_id: Id.nullable(),
-  source: import_zod13.z.enum(UNSUBSCRIBE_SOURCES),
+  source: import_zod14.z.enum(UNSUBSCRIBE_SOURCES),
   unsubscribed_at: Timestamp
 });
 var ContactResubscribedData = ContactUnsubscribedData.omit({ unsubscribed_at: true }).extend({
@@ -4087,142 +4341,142 @@ var ContactResubscribedData = ContactUnsubscribedData.omit({ unsubscribed_at: tr
    * breaker undid a `bounced` block it judged false (a `contact.bounced` for the
    * same address and mailing went out before); `topic` is null.
    */
-  source: import_zod13.z.enum([...UNSUBSCRIBE_SOURCES, "bounce_reverted"]),
+  source: import_zod14.z.enum([...UNSUBSCRIBE_SOURCES, "bounce_reverted"]),
   resubscribed_at: Timestamp
 });
-var ContactBouncedData = import_zod13.z.object({
+var ContactBouncedData = import_zod14.z.object({
   contact_id: Id.nullable(),
-  external_id: import_zod13.z.string().nullable(),
+  external_id: import_zod14.z.string().nullable(),
   email: Email,
   /** `bounced` for a hard bounce, `complained` for a spam complaint. */
-  reason: import_zod13.z.enum(["bounced", "complained"]),
+  reason: import_zod14.z.enum(["bounced", "complained"]),
   message_id: Id.nullable(),
-  diagnostic: import_zod13.z.string().nullable(),
+  diagnostic: import_zod14.z.string().nullable(),
   bounced_at: Timestamp
 });
-var MailingFinishedData = import_zod13.z.object({
+var MailingFinishedData = import_zod14.z.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  status: import_zod13.z.enum(["sent", "partially_failed", "cancelled"]),
+  status: import_zod14.z.enum(["sent", "partially_failed", "cancelled"]),
   counts: MailingCounts,
   finished_at: Timestamp
 });
-var ContactSubscribedData = import_zod13.z.object({
+var ContactSubscribedData = import_zod14.z.object({
   contact_id: Id,
-  external_id: import_zod13.z.string().nullable(),
+  external_id: import_zod14.z.string().nullable(),
   email: Email,
-  topics: import_zod13.z.array(Slug),
-  source: import_zod13.z.enum(["signup_form", "api", "dashboard", "automation"]),
+  topics: import_zod14.z.array(Slug),
+  source: import_zod14.z.enum(["signup_form", "api", "dashboard", "automation"]),
   signup_form_id: Id.nullable(),
-  signup_form_version: import_zod13.z.number().int().min(1).nullable(),
+  signup_form_version: import_zod14.z.number().int().min(1).nullable(),
   subscribed_at: Timestamp
 });
-var ImportFinishedData = import_zod13.z.object({
+var ImportFinishedData = import_zod14.z.object({
   import_id: Id,
-  status: import_zod13.z.enum(["completed", "cancelled", "failed"]),
+  status: import_zod14.z.enum(["completed", "cancelled", "failed"]),
   result: ImportReport.nullable(),
-  error: import_zod13.z.string().nullable(),
+  error: import_zod14.z.string().nullable(),
   finished_at: Timestamp
 });
-var MailingScheduledData = import_zod13.z.object({
+var MailingScheduledData = import_zod14.z.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
   scheduled_at: Timestamp.nullable()
 });
-var MailingStartedData = import_zod13.z.object({
+var MailingStartedData = import_zod14.z.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  trigger: import_zod13.z.enum(["send", "schedule"]),
-  recipients: import_zod13.z.number().int().min(0),
+  trigger: import_zod14.z.enum(["send", "schedule"]),
+  recipients: import_zod14.z.number().int().min(0),
   started_at: Timestamp
 });
-var MailingScheduleFailedData = import_zod13.z.object({
+var MailingScheduleFailedData = import_zod14.z.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  code: import_zod13.z.string(),
-  message: import_zod13.z.string(),
+  code: import_zod14.z.string(),
+  message: import_zod14.z.string(),
   failed_at: Timestamp
 });
-var MailingAbWinnerSelectedData = import_zod13.z.object({
+var MailingAbWinnerSelectedData = import_zod14.z.object({
   mailing_id: Id,
   mailing_metadata: MailingMetadata,
-  winner: import_zod13.z.string(),
-  decided_by: import_zod13.z.enum(["metric", "manual"]),
-  variants: import_zod13.z.array(VariantAnalytics),
+  winner: import_zod14.z.string(),
+  decided_by: import_zod14.z.enum(["metric", "manual"]),
+  variants: import_zod14.z.array(VariantAnalytics),
   decided_at: Timestamp
 });
-var ContactTaggedData = import_zod13.z.object({
+var ContactTaggedData = import_zod14.z.object({
   contact_id: Id,
-  external_id: import_zod13.z.string().nullable(),
+  external_id: import_zod14.z.string().nullable(),
   email: Email,
   /** Only the tags the contact did not already have. */
-  tags: import_zod13.z.array(Slug).min(1),
-  source: import_zod13.z.enum(["api", "dashboard", "signup_form", "import", "automation"]),
+  tags: import_zod14.z.array(Slug).min(1),
+  source: import_zod14.z.enum(["api", "dashboard", "signup_form", "import", "automation"]),
   tagged_at: Timestamp
 });
-var ContactUpdatedData = import_zod13.z.object({
+var ContactUpdatedData = import_zod14.z.object({
   contact_id: Id,
-  external_id: import_zod13.z.string().nullable(),
+  external_id: import_zod14.z.string().nullable(),
   email: Email,
-  changed: import_zod13.z.array(import_zod13.z.string()).min(1),
+  changed: import_zod14.z.array(import_zod14.z.string()).min(1),
   properties: Properties,
-  source: import_zod13.z.enum(["api", "dashboard", "signup_form", "import", "automation"]),
+  source: import_zod14.z.enum(["api", "dashboard", "signup_form", "import", "automation"]),
   updated_at: Timestamp
 });
-var AutomationRunEventBase = import_zod13.z.object({
+var AutomationRunEventBase = import_zod14.z.object({
   automation_id: Id,
-  automation_name: import_zod13.z.string(),
+  automation_name: import_zod14.z.string(),
   run_id: Id,
-  version: import_zod13.z.number().int().min(1),
+  version: import_zod14.z.number().int().min(1),
   contact_id: Id,
-  external_id: import_zod13.z.string().nullable(),
+  external_id: import_zod14.z.string().nullable(),
   email: Email
 });
 var AutomationRunStartedData = AutomationRunEventBase.extend({
   /** What let them in: a trigger kind, or `manual` for an explicit enrolment. */
-  trigger_kind: import_zod13.z.string(),
+  trigger_kind: import_zod14.z.string(),
   entered_at: Timestamp
 });
 var AutomationRunCompletedData = AutomationRunEventBase.extend({
-  last_step_id: import_zod13.z.string().nullable(),
+  last_step_id: import_zod14.z.string().nullable(),
   completed_at: Timestamp
 });
 var AutomationRunExitedData = AutomationRunEventBase.extend({
   reason: AutomationEndReason,
-  step_id: import_zod13.z.string().nullable(),
+  step_id: import_zod14.z.string().nullable(),
   exited_at: Timestamp
 });
 var AutomationRunFailedData = AutomationRunEventBase.extend({
-  reason: import_zod13.z.string(),
-  step_id: import_zod13.z.string().nullable(),
+  reason: import_zod14.z.string(),
+  step_id: import_zod14.z.string().nullable(),
   failed_at: Timestamp
 });
 var AutomationWebhookData = AutomationRunEventBase.extend({
-  step_id: import_zod13.z.string(),
+  step_id: import_zod14.z.string(),
   /** The step's own label, when it was given one, so a receiver can branch on a name. */
-  step_label: import_zod13.z.string().nullable(),
+  step_label: import_zod14.z.string().nullable(),
   /** Whatever the step carries, verbatim. Null when it carries nothing. */
   payload: JsonValue.nullable(),
   fired_at: Timestamp
 });
-var TemplateEventBase = import_zod13.z.object({
+var TemplateEventBase = import_zod14.z.object({
   template_id: Id,
-  name: import_zod13.z.string().min(1).max(200),
-  version: import_zod13.z.number().int().min(1),
-  source: import_zod13.z.enum(["api", "dashboard", "mjml_import"])
+  name: import_zod14.z.string().min(1).max(200),
+  version: import_zod14.z.number().int().min(1),
+  source: import_zod14.z.enum(["api", "dashboard", "mjml_import"])
 });
 var TemplateCreatedData = TemplateEventBase.extend({ created_at: Timestamp });
-var TemplateUpdatedData = TemplateEventBase.extend({ archived: import_zod13.z.boolean(), updated_at: Timestamp });
+var TemplateUpdatedData = TemplateEventBase.extend({ archived: import_zod14.z.boolean(), updated_at: Timestamp });
 var TemplateDeletedData = TemplateEventBase.extend({ deleted_at: Timestamp });
-var envelope = (type, data) => import_zod13.z.object({
+var envelope = (type, data) => import_zod14.z.object({
   /** Unique per event: a receiver deduplicates on it (deliveries may repeat). */
   id: Id,
-  type: import_zod13.z.literal(type),
+  type: import_zod14.z.literal(type),
   created_at: Timestamp,
   workspace_id: Id,
   data
 });
-var WebhookEvent = import_zod13.z.discriminatedUnion("type", [
+var WebhookEvent = import_zod14.z.discriminatedUnion("type", [
   envelope("message.sent", MessageSentData),
   envelope("message.failed", MessageFailedData),
   envelope("contact.unsubscribed", ContactUnsubscribedData),
@@ -4246,16 +4500,16 @@ var WebhookEvent = import_zod13.z.discriminatedUnion("type", [
   envelope("template.updated", TemplateUpdatedData),
   envelope("template.deleted", TemplateDeletedData)
 ]);
-var WebhookEndpoint = import_zod13.z.object({
+var WebhookEndpoint = import_zod14.z.object({
   id: Id,
-  url: import_zod13.z.string().url(),
-  description: import_zod13.z.string().max(500).nullable(),
-  events: import_zod13.z.array(WebhookEventType).min(1),
-  enabled: import_zod13.z.boolean(),
+  url: import_zod14.z.string().url(),
+  description: import_zod14.z.string().max(500).nullable(),
+  events: import_zod14.z.array(WebhookEventType).min(1),
+  enabled: import_zod14.z.boolean(),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var WebhookUrl = import_zod13.z.string().url().refine((u) => {
+var WebhookUrl = import_zod14.z.string().url().refine((u) => {
   try {
     const url = new URL(u);
     if (url.protocol === "https:") return true;
@@ -4264,35 +4518,35 @@ var WebhookUrl = import_zod13.z.string().url().refine((u) => {
     return false;
   }
 }, "must be https (http only for localhost)");
-var WebhookEndpointCreate = import_zod13.z.object({
+var WebhookEndpointCreate = import_zod14.z.object({
   url: WebhookUrl,
-  description: import_zod13.z.string().max(500).optional(),
-  events: import_zod13.z.array(WebhookEventType).min(1),
-  enabled: import_zod13.z.boolean().optional()
+  description: import_zod14.z.string().max(500).optional(),
+  events: import_zod14.z.array(WebhookEventType).min(1),
+  enabled: import_zod14.z.boolean().optional()
 });
-var WebhookEndpointUpdate = import_zod13.z.object({
+var WebhookEndpointUpdate = import_zod14.z.object({
   url: WebhookUrl,
-  description: import_zod13.z.string().max(500).nullable(),
-  events: import_zod13.z.array(WebhookEventType).min(1),
-  enabled: import_zod13.z.boolean()
+  description: import_zod14.z.string().max(500).nullable(),
+  events: import_zod14.z.array(WebhookEventType).min(1),
+  enabled: import_zod14.z.boolean()
 }).partial().refine((v) => Object.keys(v).length > 0, "at least one field");
-var WebhookEndpointWithSecret = import_zod13.z.object({
+var WebhookEndpointWithSecret = import_zod14.z.object({
   endpoint: WebhookEndpoint,
-  secret: import_zod13.z.string().min(32)
+  secret: import_zod14.z.string().min(32)
 });
 var WEBHOOK_DELIVERY_STATUSES = ["pending", "succeeded", "failed"];
-var WebhookDeliveryStatus = import_zod13.z.enum(WEBHOOK_DELIVERY_STATUSES);
+var WebhookDeliveryStatus = import_zod14.z.enum(WEBHOOK_DELIVERY_STATUSES);
 var WEBHOOK_MAX_ATTEMPTS = 8;
 var WEBHOOK_RETRY_DELAYS_SECONDS = [30, 120, 600, 1800, 3600, 7200, 21600];
-var WebhookDelivery = import_zod13.z.object({
+var WebhookDelivery = import_zod14.z.object({
   id: Id,
   endpoint_id: Id,
   event_id: Id,
   event_type: WebhookEventType,
   status: WebhookDeliveryStatus,
-  attempts: import_zod13.z.number().int().min(0),
-  last_status_code: import_zod13.z.number().int().min(100).max(599).nullable(),
-  last_error: import_zod13.z.string().nullable(),
+  attempts: import_zod14.z.number().int().min(0),
+  last_status_code: import_zod14.z.number().int().min(100).max(599).nullable(),
+  last_error: import_zod14.z.string().nullable(),
   next_attempt_at: Timestamp.nullable(),
   delivered_at: Timestamp.nullable(),
   created_at: Timestamp
@@ -4301,7 +4555,7 @@ var WebhookDeliveryListQuery = PageQuery.extend({
   status: WebhookDeliveryStatus.optional(),
   event_type: WebhookEventType.optional()
 });
-var WebhookDeliveryParams = import_zod13.z.object({ id: Id, delivery_id: Id });
+var WebhookDeliveryParams = import_zod14.z.object({ id: Id, delivery_id: Id });
 
 // src/webhook-signing.ts
 var WEBHOOK_SIGNATURE_HEADER = "x-mail-signature";
@@ -4368,79 +4622,79 @@ async function verifyWebhook(input) {
 }
 
 // src/billing.ts
-var import_zod14 = require("zod");
+var import_zod15 = require("zod");
 var PLAN_IDS = ["free", "starter", "growth", "design_partner"];
-var PlanId = import_zod14.z.enum(PLAN_IDS);
-var PlanLimits = import_zod14.z.object({
-  monthly_messages: import_zod14.z.number().int().min(0).nullable(),
-  contacts: import_zod14.z.number().int().min(0).nullable(),
-  members: import_zod14.z.number().int().min(1).nullable(),
-  providers: import_zod14.z.number().int().min(1).nullable(),
-  webhook_endpoints: import_zod14.z.number().int().min(0).nullable(),
+var PlanId = import_zod15.z.enum(PLAN_IDS);
+var PlanLimits = import_zod15.z.object({
+  monthly_messages: import_zod15.z.number().int().min(0).nullable(),
+  contacts: import_zod15.z.number().int().min(0).nullable(),
+  members: import_zod15.z.number().int().min(1).nullable(),
+  providers: import_zod15.z.number().int().min(1).nullable(),
+  webhook_endpoints: import_zod15.z.number().int().min(0).nullable(),
   /** Automations that may be live (active or paused) at once (A1). */
-  active_automations: import_zod14.z.number().int().min(0).nullable(),
+  active_automations: import_zod15.z.number().int().min(0).nullable(),
   /** Steps one automation may hold. Null is the flow's own cap, not unlimited. */
-  automation_steps: import_zod14.z.number().int().min(1).nullable()
+  automation_steps: import_zod15.z.number().int().min(1).nullable()
 });
-var PlanFeatures = import_zod14.z.object({
+var PlanFeatures = import_zod15.z.object({
   /** A/B tests of subject and content on a mailing (S4). */
-  ab_testing: import_zod14.z.boolean(),
+  ab_testing: import_zod15.z.boolean(),
   /** Open and click tracking, still off until a workspace turns it on (`settings.tracking_enabled`). */
-  tracking: import_zod14.z.boolean(),
+  tracking: import_zod15.z.boolean(),
   /** Sending and hosting pages on the workspace's own domain (a later phase). */
-  custom_domains: import_zod14.z.boolean(),
+  custom_domains: import_zod15.z.boolean(),
   /** Automations: flows a person walks through step by step (A1). */
-  automations: import_zod14.z.boolean()
+  automations: import_zod15.z.boolean()
 });
 var PLAN_FEATURES = ["ab_testing", "tracking", "custom_domains", "automations"];
-var Plan = import_zod14.z.object({
+var Plan = import_zod15.z.object({
   id: PlanId,
-  name: import_zod14.z.string().min(1),
+  name: import_zod15.z.string().min(1),
   /** Price in the smallest currency unit per month; null for plans not sold. */
-  monthly_price_cents: import_zod14.z.number().int().min(0).nullable(),
-  currency: import_zod14.z.string().length(3),
+  monthly_price_cents: import_zod15.z.number().int().min(0).nullable(),
+  currency: import_zod15.z.string().length(3),
   limits: PlanLimits,
   features: PlanFeatures
 });
-var CatalogPlan = Plan.extend({ sellable: import_zod14.z.boolean() });
-var Subscription = import_zod14.z.object({
+var CatalogPlan = Plan.extend({ sellable: import_zod15.z.boolean() });
+var Subscription = import_zod15.z.object({
   workspace_id: Id,
   plan: PlanId,
-  status: import_zod14.z.enum(["active", "trialing", "past_due", "cancelled"]),
+  status: import_zod15.z.enum(["active", "trialing", "past_due", "cancelled"]),
   current_period_start: Timestamp,
   current_period_end: Timestamp,
-  cancel_at_period_end: import_zod14.z.boolean(),
+  cancel_at_period_end: import_zod15.z.boolean(),
   /**
    * A design partner outside billing (plan `design_partner`, no limits, no
    * checkout). Set only by an operator, never through the API.
    */
-  billing_exempt: import_zod14.z.boolean()
+  billing_exempt: import_zod15.z.boolean()
 });
 var USAGE_METRICS = ["messages", "contacts", "members", "providers", "webhook_endpoints", "active_automations"];
-var UsageMetric = import_zod14.z.enum(USAGE_METRICS);
+var UsageMetric = import_zod15.z.enum(USAGE_METRICS);
 var USAGE_WARNING_RATIO = 0.8;
-var UsageWarning = import_zod14.z.object({
+var UsageWarning = import_zod15.z.object({
   metric: UsageMetric,
-  used: import_zod14.z.number().int().min(0),
-  limit: import_zod14.z.number().int().min(0),
+  used: import_zod15.z.number().int().min(0),
+  limit: import_zod15.z.number().int().min(0),
   /** `approaching`: at or above USAGE_WARNING_RATIO of the limit; `reached`: at or above the limit. */
-  level: import_zod14.z.enum(["approaching", "reached"])
+  level: import_zod15.z.enum(["approaching", "reached"])
 });
-var Usage = import_zod14.z.object({
+var Usage = import_zod15.z.object({
   plan: PlanId,
   period_start: Timestamp,
   period_end: Timestamp,
-  metrics: import_zod14.z.record(UsageMetric, import_zod14.z.object({ used: import_zod14.z.number().int().min(0), limit: import_zod14.z.number().int().min(0).nullable() })),
-  warnings: import_zod14.z.array(UsageWarning)
+  metrics: import_zod15.z.record(UsageMetric, import_zod15.z.object({ used: import_zod15.z.number().int().min(0), limit: import_zod15.z.number().int().min(0).nullable() })),
+  warnings: import_zod15.z.array(UsageWarning)
 });
-var CheckoutRequest = import_zod14.z.object({
-  plan: import_zod14.z.enum(["starter", "growth"]),
-  success_url: import_zod14.z.string().url(),
-  cancel_url: import_zod14.z.string().url()
+var CheckoutRequest = import_zod15.z.object({
+  plan: import_zod15.z.enum(["starter", "growth"]),
+  success_url: import_zod15.z.string().url(),
+  cancel_url: import_zod15.z.string().url()
 });
-var CheckoutSession = import_zod14.z.object({ url: import_zod14.z.string().url() });
-var PortalRequest = import_zod14.z.object({ return_url: import_zod14.z.string().url() });
-var PortalSession = import_zod14.z.object({ url: import_zod14.z.string().url() });
+var CheckoutSession = import_zod15.z.object({ url: import_zod15.z.string().url() });
+var PortalRequest = import_zod15.z.object({ return_url: import_zod15.z.string().url() });
+var PortalSession = import_zod15.z.object({ url: import_zod15.z.string().url() });
 var USAGE_WARNING_HEADER = "x-mail-usage-warning";
 function formatUsageWarningHeader(warnings) {
   if (warnings.length === 0) return null;
@@ -4460,7 +4714,7 @@ function parseUsageWarningHeader(value) {
 }
 
 // src/routes.ts
-var import_zod15 = require("zod");
+var import_zod16 = require("zod");
 var list = (item) => page(item);
 var foundationRoutes = {
   "workspaces.create": {
@@ -4617,6 +4871,25 @@ var templateRoutes = {
     access: "write",
     phase: "S1"
   },
+  /**
+   * The sending app declares what the template receives (see
+   * `template-inputs.ts`). Replaces the stored declaration whole; the same
+   * declaration again is a no-op (`changed: false`). Creates no template
+   * version and takes no `base_version`, so it never conflicts with an edit.
+   * An API key only (`send` or `full`): the declaration is the app's statement
+   * about its own code, so a dashboard member is refused with `forbidden`, a
+   * rule the access levels cannot express and the service enforces itself.
+   */
+  "templates.declareInputs": {
+    method: "PUT",
+    path: "/v1/templates/:id/inputs",
+    params: IdParams,
+    body: TemplateInputsDeclaration,
+    response: TemplateInputsDeclared,
+    status: 200,
+    access: "write",
+    phase: "S1"
+  },
   "templates.delete": {
     method: "DELETE",
     path: "/v1/templates/:id",
@@ -4668,7 +4941,7 @@ var templateRoutes = {
     path: "/v1/templates/:id/export",
     params: IdParams,
     query: TemplateExportQuery,
-    response: import_zod15.z.string(),
+    response: import_zod16.z.string(),
     responseType: "text",
     status: 200,
     access: "read",
@@ -4992,7 +5265,7 @@ var sendingRoutes = {
     path: "/v1/mailings/:id/export",
     params: IdParams,
     query: MailingExportQuery,
-    response: import_zod15.z.string(),
+    response: import_zod16.z.string(),
     responseType: "text",
     status: 200,
     access: "read",
@@ -5225,7 +5498,7 @@ var platformRoutes = {
   "contactProperties.list": {
     method: "GET",
     path: "/v1/contact-properties",
-    response: import_zod15.z.object({ data: import_zod15.z.array(ContactPropertyDefinition) }),
+    response: import_zod16.z.object({ data: import_zod16.z.array(ContactPropertyDefinition) }),
     status: 200,
     access: "read",
     phase: "S4"
@@ -5524,7 +5797,7 @@ var billingRoutes = {
   "billing.plans": {
     method: "GET",
     path: "/v1/billing/plans",
-    response: import_zod15.z.object({ data: import_zod15.z.array(CatalogPlan) }),
+    response: import_zod16.z.object({ data: import_zod16.z.array(CatalogPlan) }),
     status: 200,
     access: "read",
     phase: "S5"
@@ -5666,7 +5939,7 @@ var automationRoutes = {
     method: "POST",
     path: "/v1/automations/:id/pause",
     params: IdParams,
-    body: import_zod15.z.object({}).strict(),
+    body: import_zod16.z.object({}).strict(),
     response: Automation,
     status: 200,
     access: "write",
@@ -5676,7 +5949,7 @@ var automationRoutes = {
     method: "POST",
     path: "/v1/automations/:id/resume",
     params: IdParams,
-    body: import_zod15.z.object({}).strict(),
+    body: import_zod16.z.object({}).strict(),
     response: Automation,
     status: 200,
     access: "write",
@@ -5686,7 +5959,7 @@ var automationRoutes = {
     method: "POST",
     path: "/v1/automations/:id/archive",
     params: IdParams,
-    body: import_zod15.z.object({}).strict(),
+    body: import_zod16.z.object({}).strict(),
     response: Automation,
     status: 200,
     access: "write",
@@ -6066,6 +6339,13 @@ function matchRoute(method, pathname) {
   MAX_STEPS,
   MAX_STEP_VISITS,
   MAX_SUBJECT_LENGTH,
+  MAX_TEMPLATE_INPUTS,
+  MAX_TEMPLATE_INPUTS_APP_LENGTH,
+  MAX_TEMPLATE_INPUTS_SEEN,
+  MAX_TEMPLATE_INPUT_EXAMPLE_LENGTH,
+  MAX_TEMPLATE_INPUT_LABEL_LENGTH,
+  MAX_TEMPLATE_INPUT_NOTE_LENGTH,
+  MAX_TEMPLATE_INPUT_VALUES,
   MAX_TEMPLATE_TRANSLATIONS,
   MAX_TRIGGERS,
   MEMBER_ROLES,
@@ -6160,6 +6440,7 @@ function matchRoute(method, pathname) {
   RecipientStatus,
   RemoteImage,
   ResendSigningSecret,
+  SERVICE_FILLED_MERGE_FIELDS,
   SIGNUP_FORM_FIELDS,
   SKIP_REASONS,
   SMTP_SECURITY,
@@ -6189,6 +6470,8 @@ function matchRoute(method, pathname) {
   SuppressionCreate,
   SuppressionListQuery,
   SuppressionReason,
+  TEMPLATE_INPUT_KINDS,
+  TEMPLATE_INPUT_PROBLEM_REASONS,
   TEMPLATE_LANGUAGE_STATUSES,
   TERMINAL_MAILING_STATUSES,
   Tag,
@@ -6205,6 +6488,16 @@ function matchRoute(method, pathname) {
   TemplateImportPreview,
   TemplateImportPreviewRequest,
   TemplateImportResult,
+  TemplateInput,
+  TemplateInputMap,
+  TemplateInputName,
+  TemplateInputSeen,
+  TemplateInputSource,
+  TemplateInputValue,
+  TemplateInputs,
+  TemplateInputsDeclaration,
+  TemplateInputsDeclared,
+  TemplateInputsSeen,
   TemplateLanguageStatus,
   TemplateListQuery,
   TemplatePreheader,
@@ -6358,6 +6651,10 @@ function matchRoute(method, pathname) {
   renameInsertionChecked,
   renameInsertionChoice,
   renameInsertionChoiceChecked,
+  renameInsertionEverywhere,
+  renameInsertionPlacements,
+  renameTokenInDocument,
+  renameTokenInText,
   resolveInsertions,
   restorePatch,
   routes,
@@ -6373,6 +6670,8 @@ function matchRoute(method, pathname) {
   stepTargets,
   storedTemplateLine,
   stronglyConnected,
+  templateInputDrift,
+  templateInputProblems,
   templateRoutes,
   testGroupSize,
   tightLoops,
@@ -6380,6 +6679,7 @@ function matchRoute(method, pathname) {
   translationInsertionProblems,
   translationTextFromInput,
   triggerKey,
+  unknownRefusedInsertions,
   unplacedInsertions,
   validateAutomation,
   verifyWebhook