@pithy-sh/support 0.2.9 → 0.3.0

package/dist/capability.d.ts

@@ -7,6 +7,7 @@ import type { KvNamespaceSpecMap } from "@pithy-sh/core/src/kv/namespaces";
 import type { EmailCapability } from "@pithy-sh/email/src/capability";
 import { type SupportConfig, type SupportConfigInput } from "./config/config";
 import { type SupportCategories } from "./data/categories";
+import type { SenderPeers } from "./link/sender";
 import { type SupportReplySnippets } from "./reply/snippets";
 import { supportWorkflows } from "./workflows/specs";
 /**
@@ -43,6 +44,11 @@ export interface SupportWiring {
      * so with `support/reply_failed` rather than the capability refusing to start.
      */
     enqueueEmail: EmailCapability["enqueue"] | undefined;
+    /**
+     * The optional peers the sender link reads through — `auth()`'s and `payments()`'s surfaces, set by
+     * `compose` when each is composed. Found, never imported (#645): see `link/sender.ts`.
+     */
+    peers: SenderPeers;
     /**
      * The audit seam the inbound handler emits through.
      *

package/dist/capability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAGnE,OAAO,EAAE,KAAK,UAAU,EAAoB,MAAM,0CAA0C,CAAC;AAC7F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAItE,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,kBAAkB,EAGxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAO9E,OAAO,EAAkB,KAAK,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAI7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAE5C,+FAA+F;AAC/F,MAAM,MAAM,cAAc,GAAG,kBAAkB,GAAG;IAChD,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB,8BAA8B;IAC9B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,0CAA0C;IAC1C,QAAQ,EAAE,oBAAoB,CAAC;IAC/B;;;;;OAKG;IACH,YAAY,EAAE,eAAe,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;IACrD;;;;;;;;OAQG;IACH,IAAI,EAAE,SAAS,CAAC;CACjB;AA4ED;;;;;GAKG;AACH,MAAM,WAAW,iBACf,SAAQ,UAAU,CAAC,eAAe,EAAE,kBAAkB,EAAE,SAAS,EAAE,OAAO,gBAAgB,CAAC;IAC3F,mCAAmC;IACnC,aAAa,EAAE,aAAa,CAAC;IAC7B,wGAAwG;IACxG,UAAU,EAAE,iBAAiB,CAAC;IAC9B,0CAA0C;IAC1C,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,OAAO,CAAC,OAAO,GAAE,cAAmB,GAAG,iBAAiB,CAsGvE;AAED,2GAA2G;AAC3G,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,IAAI,iBAAiB,CAE3F"}
+{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAGnE,OAAO,EAAE,KAAK,UAAU,EAAoB,MAAM,0CAA0C,CAAC;AAC7F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAItE,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,kBAAkB,EAGxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAO9E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAAkB,KAAK,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAI7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAE5C,+FAA+F;AAC/F,MAAM,MAAM,cAAc,GAAG,kBAAkB,GAAG;IAChD,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB,8BAA8B;IAC9B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,0CAA0C;IAC1C,QAAQ,EAAE,oBAAoB,CAAC;IAC/B;;;;;OAKG;IACH,YAAY,EAAE,eAAe,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;IACrD;;;OAGG;IACH,KAAK,EAAE,WAAW,CAAC;IACnB;;;;;;;;OAQG;IACH,IAAI,EAAE,SAAS,CAAC;CACjB;AA4ED;;;;;GAKG;AACH,MAAM,WAAW,iBACf,SAAQ,UAAU,CAAC,eAAe,EAAE,kBAAkB,EAAE,SAAS,EAAE,OAAO,gBAAgB,CAAC;IAC3F,mCAAmC;IACnC,aAAa,EAAE,aAAa,CAAC;IAC7B,wGAAwG;IACxG,UAAU,EAAE,iBAAiB,CAAC;IAC9B,0CAA0C;IAC1C,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,OAAO,CAAC,OAAO,GAAE,cAAmB,GAAG,iBAAiB,CA0GvE;AAED,2GAA2G;AAC3G,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,IAAI,iBAAiB,CAE3F"}

package/dist/capability.js

@@ -10,6 +10,7 @@ import { makeResolveDeps } from "./http/resolve.js";
 import { supportAdminRoutes } from "./http/scopes.js";
 import { registerSupportRoutes } from "./http/routes.js";
 import { createSupportEmailHandler } from "./inbound/handler.js";
+import { senderPeers } from "./link/peers.js";
 import { support_0001_threads } from "./migrations/0001_threads.js";
 import { supportExampleSeed } from "./seeds/example.js";
 import { PACKAGE_NAME, PACKAGE_VERSION } from "./version.generated.js";
@@ -123,6 +124,7 @@ function support(options = {}) {
 		categories,
 		snippets,
 		enqueueEmail: void 0,
+		peers: {},
 		emit: noopEmit
 	};
 	const migrations = { "0001_threads": support_0001_threads };
@@ -165,6 +167,7 @@ function support(options = {}) {
 		compose: ({ capabilities }) => {
 			const email = capabilities.find(isEmailCapability);
 			wiring.enqueueEmail = email?.enqueue;
+			wiring.peers = senderPeers(capabilities, resolved);
 		},
 		client: () => clientProjection(resolved, mountPath),
 		adminRoutes: supportAdminRoutes(mountPath),

package/dist/http/handlers.d.ts

@@ -7,6 +7,7 @@ import type { ObjectStore } from "@pithy-sh/storage/src/object/store";
 import type { SupportConfig } from "../config/config";
 import type { SupportCategories } from "../data/categories";
 import type { SupportDatabase } from "../data/tables";
+import { type SenderPeers } from "../link/sender";
 import { sendReply } from "../reply/send";
 import type { SupportReplySnippets } from "../reply/snippets";
 import type { SupportFlagsResponse, SupportMyThreadResponse, SupportMyThreadsResponse, SupportReclassifiedResponse, SupportReplySentResponse, SupportReplyView, SupportSubmissionResponse, SupportThreadResponse, SupportThreadsResponse, SupportThreadView } from "./responses";
@@ -40,6 +41,8 @@ export interface HandlerDeps {
     enqueue?: Parameters<typeof sendReply>[0]["enqueue"];
     /** Start a classification for a message. Resolves to whether an instance actually started. */
     dispatchClassify: (messageId: string) => Promise<boolean>;
+    /** The optional peers the sender link reads through, as `compose` found them. Empty when none is composed. */
+    peers: SenderPeers;
     /** The audit seam. */
     emit: AuditEmit;
     /** The request logger. */

package/dist/http/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/http/handlers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAGtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGtD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAM9D,OAAO,KAAK,EAEV,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,EACxB,gBAAgB,EAChB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,UAAU,EACV,mBAAmB,EACpB,MAAM,WAAW,CAAC;AAGnB;;;;;;GAMG;AAEH,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,0BAA0B;IAC1B,EAAE,EAAE,eAAe,CAAC;IACpB,wFAAwF;IACxF,EAAE,EAAE,UAAU,CAAC;IACf,2BAA2B;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB,8BAA8B;IAC9B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,0CAA0C;IAC1C,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,0CAA0C;IAC1C,GAAG,EAAE,OAAO,CAAC;IACb,gDAAgD;IAChD,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,2FAA2F;IAC3F,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrD,8FAA8F;IAC9F,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,yBAAyB;IACzB,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,WAAW;IACX,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,sBAAsB;AACtB,wBAAsB,SAAS,CAC7B,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sBAAsB,CAAC,CAkBjC;AAqCD,qCAAqC;AACrC,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAsB1G;AAED,8CAA8C;AAC9C,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,kBAAkB,EACzB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AAED,2BAA2B;AAC3B,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAkBnC;AAED,0EAA0E;AAC1E,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,2BAA2B,CAAC,CAkCtC;AAED,sCAAsC;AACtC,wBAAsB,WAAW,CAC/B,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,oBAAoB,CAAC,CAa/B;AAED,gCAAgC;AAChC,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,GAAG,gBAAgB,EAAE,CAEtF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,yBAAyB,CAAC,CAuEpC;AAED,kDAAkD;AAClD,wBAAsB,aAAa,CACjC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAGnC;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,uBAAuB,CAAC,CAgBlC"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/http/handlers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAGtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAM9D,OAAO,KAAK,EAEV,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,EACxB,gBAAgB,EAChB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,UAAU,EACV,mBAAmB,EACpB,MAAM,WAAW,CAAC;AAGnB;;;;;;GAMG;AAEH,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,0BAA0B;IAC1B,EAAE,EAAE,eAAe,CAAC;IACpB,wFAAwF;IACxF,EAAE,EAAE,UAAU,CAAC;IACf,2BAA2B;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB,8BAA8B;IAC9B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,0CAA0C;IAC1C,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,0CAA0C;IAC1C,GAAG,EAAE,OAAO,CAAC;IACb,gDAAgD;IAChD,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,2FAA2F;IAC3F,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrD,8FAA8F;IAC9F,gBAAgB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,8GAA8G;IAC9G,KAAK,EAAE,WAAW,CAAC;IACnB,sBAAsB;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,yBAAyB;IACzB,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,WAAW;IACX,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,sBAAsB;AACtB,wBAAsB,SAAS,CAC7B,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,gBAAgB,EACvB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,sBAAsB,CAAC,CAkBjC;AAqCD,qCAAqC;AACrC,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA0B1G;AAED,8CAA8C;AAC9C,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,kBAAkB,EACzB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AAED,2BAA2B;AAC3B,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAkBnC;AAED,0EAA0E;AAC1E,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,2BAA2B,CAAC,CAkCtC;AAED,sCAAsC;AACtC,wBAAsB,WAAW,CAC/B,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,oBAAoB,CAAC,CAa/B;AAED,gCAAgC;AAChC,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,GAAG,gBAAgB,EAAE,CAEtF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,yBAAyB,CAAC,CAuEpC;AAED,kDAAkD;AAClD,wBAAsB,aAAa,CACjC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,wBAAwB,CAAC,CAGnC;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,uBAAuB,CAAC,CAgBlC"}

package/dist/http/handlers.js

@@ -69,7 +69,7 @@ async function presentAttachments(deps, attachments) {
 /** Read one conversation in full. */
 async function readConversation(deps, threadId) {
 	const detail = await readThread(deps.db, threadId);
-	const [attachments, sender] = await Promise.all([presentAttachments(deps, detail.attachments), detail.thread.accountLinkSource === "session" && detail.thread.userId ? resolveSubmitterContext(deps.d1, detail.thread.userId, deps.now()) : resolveSenderContext(deps.d1, detail.thread.fromAddress, deps.now(), { authenticated: detail.thread.senderAuthenticated })]);
+	const [attachments, sender] = await Promise.all([presentAttachments(deps, detail.attachments), detail.thread.accountLinkSource === "session" && detail.thread.userId ? resolveSubmitterContext(deps.d1, detail.thread.userId, deps.now(), deps.peers) : resolveSenderContext(deps.d1, detail.thread.fromAddress, deps.now(), { authenticated: detail.thread.senderAuthenticated }, deps.peers)]);
 	return {
 		thread: threadView(detail.thread),
 		messages: detail.messages.map(messageView),
@@ -185,7 +185,7 @@ async function submitFeedbackRequest(deps, input, userId) {
 		categories: deps.categories,
 		bucket: deps.bucket,
 		fts: deps.fts,
-		resolveAccount: (id) => resolveSubmitterAccount(deps.d1, id),
+		resolveAccount: (id) => resolveSubmitterAccount(deps.d1, id, deps.peers),
 		dispatchClassify: deps.dispatchClassify,
 		emit: deps.emit,
 		log: deps.log,

package/dist/http/resolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/http/resolve.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAE7E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAInD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;GAMG;AAEH,kCAAkC;AAClC,MAAM,WAAW,UAAW,SAAQ,eAAe;IACjD,qDAAqD;IACrD,EAAE,EAAE,UAAU,CAAC;IACf,mGAAmG;IACnG,cAAc,CAAC,EAAE,QAAQ,CAAC;CAC3B;AAED,iGAAiG;AACjG,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAUlE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,GAAG,EAAE,MAAM,GACV,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAUzC;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,CAAC,OAAO,WAAW,CAAC,GAAG,SAAS,CAGxF;AAED,kDAAkD;AAClD,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,CA2BzG"}
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/http/resolve.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAE7E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAInD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;GAMG;AAEH,kCAAkC;AAClC,MAAM,WAAW,UAAW,SAAQ,eAAe;IACjD,qDAAqD;IACrD,EAAE,EAAE,UAAU,CAAC;IACf,mGAAmG;IACnG,cAAc,CAAC,EAAE,QAAQ,CAAC;CAC3B;AAED,iGAAiG;AACjG,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAUlE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,GAAG,EAAE,MAAM,GACV,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAUzC;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,CAAC,OAAO,WAAW,CAAC,GAAG,SAAS,CAGxF;AAED,kDAAkD;AAClD,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,CA8BzG"}

package/dist/http/resolve.js

@@ -63,6 +63,7 @@ function makeResolveDeps(wiring) {
 			store: resolveStore(env),
 			enqueue: wiring.enqueueEmail ? (input) => wiring.enqueueEmail?.(env, input) : void 0,
 			dispatchClassify: makeClassifyDispatcher(env, log),
+			peers: wiring.peers,
 			emit: c.var.emit,
 			log,
 			newId: () => crypto.randomUUID(),

package/dist/inbound/handler.js

@@ -59,7 +59,7 @@ function createSupportEmailHandler(wiring) {
 				bucket: bindings.SUPPORT_BUCKET,
 				fts: wiring.config.search.fts,
 				dispatchClassify: makeClassifyDispatcher(env, log),
-				linkSender: (address) => resolveSenderUserId(d1, address),
+				linkSender: (address) => resolveSenderUserId(d1, address, wiring.peers),
 				emit: wiring.emit,
 				log,
 				newId: () => crypto.randomUUID(),

package/dist/link/peers.d.ts

@@ -0,0 +1,14 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+import type { Capability } from "@pithy-sh/core/src/capability/capability";
+import type { SupportConfig } from "../config/config";
+import type { SenderPeers } from "./sender";
+/**
+ * The peers a composition holds — what `support()`'s `compose` hook records — refusing one this Worker's config
+ * needs and cannot reach.
+ *
+ * With the in-app channel off, auth and payments may both be absent. A sender is then never linked to an account
+ * and a thread shows no purchases, which is exactly what a project with no accounts and no store has to show.
+ */
+export declare function senderPeers(capabilities: readonly Capability[], config: SupportConfig): SenderPeers;
+//# sourceMappingURL=peers.d.ts.map

package/dist/link/peers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peers.d.ts","sourceRoot":"","sources":["../../src/link/peers.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAC;AAG3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AA4C5C;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,SAAS,UAAU,EAAE,EAAE,MAAM,EAAE,aAAa,GAAG,WAAW,CA2BnG"}

package/dist/link/peers.js

@@ -0,0 +1,56 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+import { ValidationError } from "@pithy-sh/core/src/error/pithyError";
+//#region src/link/peers.ts
+/**
+* The named kit capability's peer surface: `undefined` when it is not composed, or a refusal when it is composed
+* from a release too old to carry one. Recognized by the config field it has always carried, not by the surface,
+* because a pre-#645 release has the one and not the other.
+*/
+function surface(capabilities, wanted) {
+	const found = capabilities.find((capability) => capability.name === wanted.name && wanted.config in capability);
+	if (found === void 0) return void 0;
+	const value = found[wanted.key];
+	if (typeof value?.[wanted.probe] !== "function") throw new ValidationError({
+		message: `The composed ${wanted.name} is too old for support to ${wanted.wants}.`,
+		action: `Upgrade ${wanted.pkg} to the version this @pithy-sh/support peers.`,
+		detail: `The composed ${wanted.name} capability carries no \`${wanted.key}\`. It was released before optional peers arrived through the composition (#645).`
+	});
+	return value;
+}
+/**
+* The peers a composition holds — what `support()`'s `compose` hook records — refusing one this Worker's config
+* needs and cannot reach.
+*
+* With the in-app channel off, auth and payments may both be absent. A sender is then never linked to an account
+* and a thread shows no purchases, which is exactly what a project with no accounts and no store has to show.
+*/
+function senderPeers(capabilities, config) {
+	const auth = surface(capabilities, {
+		name: "auth",
+		pkg: "@pithy-sh/auth",
+		config: "authConfig",
+		key: "authPeer",
+		probe: "authDatabase",
+		wants: "link a sender to an account"
+	});
+	const payments = surface(capabilities, {
+		name: "payments",
+		pkg: "@pithy-sh/payments",
+		config: "paymentsConfig",
+		key: "paymentsPeer",
+		probe: "resolveEntitlements",
+		wants: "show what a sender bought"
+	});
+	if (config.submission.enabled && auth === void 0) throw new ValidationError({
+		message: "No auth is composed in this Worker, and the in-app support channel needs it to know who is writing.",
+		action: "Compose `auth(...)` in this Worker, or turn the in-app channel off with `submission: { enabled: false }` for a mail-only inbox.",
+		detail: "`submission.enabled` defaults to true. A submission is keyed to the account its session proves, read through @pithy-sh/auth, so without auth in this Worker the channel refuses every report, and no sender on the mail path is ever linked to an account."
+	});
+	return {
+		...auth ? { auth } : {},
+		...payments ? { payments } : {}
+	};
+}
+//#endregion
+export { senderPeers };

package/dist/link/sender.d.ts

@@ -1,7 +1,9 @@
 // SPDX-FileCopyrightText: 2026 Pithy
 // SPDX-License-Identifier: MIT
 import type { D1Database } from "@cloudflare/workers-types";
+import type { AuthPeer } from "@pithy-sh/auth/src/peer";
 import type { Entitlement } from "@pithy-sh/core/src/entitlement/entitlement";
+import type { PaymentsPeer } from "@pithy-sh/payments/src/peer";
 /**
  * The link from an address in a `From` header to the customer the app already knows about.
  *
@@ -10,13 +12,18 @@ import type { Entitlement } from "@pithy-sh/core/src/entitlement/entitlement";
  * different object from a message in a mailbox — and every one of those facts is already in the
  * adopter's own D1, one table over, unused.
  *
- * ## Guarded dynamic imports, not dependencies
+ * ## Handed over by the composition, never imported
  *
  * `@pithy-sh/auth` and `@pithy-sh/payments` are **optional** here (principle 4: depend on core seams,
- * never on a sibling's internals), so both are reached the way `@pithy-sh/matchmaking` already
- * reaches auth — a dynamic import inside a `try`, degrading to "no link" when the package is not
- * installed. A support inbox in a project with no accounts and no payments is a perfectly reasonable
- * thing to run, and it must not fail to start, or to store mail, because of what it cannot see.
+ * never on a sibling's internals), so both reach this module from the composition: `support()`'s `compose`
+ * hook finds each one's peer surface among the composed capabilities and every function below is handed
+ * {@link SenderPeers}, degrading to "no link" when one is absent. They were reached by `import()` inside a
+ * `try` until #645, which is optional at runtime and required at bundle time — wrangler's esbuild resolves a
+ * literal specifier whether or not the branch holding it ever runs, so a project without either package
+ * could not deploy support at all. Only types name the two packages now, and a bundler never sees a type.
+ *
+ * A support inbox in a project with no accounts and no payments is a perfectly reasonable thing to run, and
+ * it must not fail to start, or to store mail, because of what it cannot see.
  *
  * Every function here is **best-effort by contract**: it returns nothing rather than throwing, and
  * the caller stores the message either way. Linkage is context, and context is never worth losing a
@@ -89,6 +96,16 @@ export interface SenderPurchase {
     /** When it was refunded or revoked; null while it stands. */
     revokedAt: Date | null;
 }
+/**
+ * The optional peers the link reads through — what `support()`'s `compose` hook found. Either may be absent,
+ * and an absent one is "no link", never a failure.
+ */
+export interface SenderPeers {
+    /** `auth()`'s surface, when auth is composed: who an address or a session id belongs to. */
+    readonly auth?: AuthPeer;
+    /** `payments()`'s surface, when payments is composed: what that account bought and holds. */
+    readonly payments?: PaymentsPeer;
+}
 /** How many purchases a thread view carries. Enough to see the pattern, bounded so a whale is not a slow page. */
 export declare const MAX_LINKED_PURCHASES = 25;
 /**
@@ -102,14 +119,14 @@ export declare const MAX_LINKED_PURCHASES = 25;
  * capitals by some other route simply does not link, which costs a line of context rather than a
  * customer's request.
  */
-export declare function resolveSenderUserId(d1: D1Database, address: string): Promise<string | null>;
+export declare function resolveSenderUserId(d1: D1Database, address: string, peers: SenderPeers): Promise<string | null>;
 /**
  * The address an operator's reply to an app thread will be sent to, or null when the account carries
  * nothing deliverable.
  *
  * Extracted rather than inlined because it is the one decision in {@link resolveSubmitterAccount} with
- * a wrong answer available, and inlining it puts that decision behind a guarded dynamic import where
- * no test can reach it.
+ * a wrong answer available, and inlining it puts that decision behind a peer read where no test can
+ * reach it.
  *
  * **`parseAddress` only, with no `normalizeAddress` fallback.** The fallback merely trims and
  * lowercases, so it would hand back an address this capability's own parser had just refused — and
@@ -127,11 +144,11 @@ export declare function submitterAddress(email: string | null | undefined): stri
  * back to. Deriving that from anything the client sent would hand a signed-in caller the ability to
  * point a support conversation — and every operator reply on it — at somebody else's mailbox.
  *
- * Returns null when `@pithy-sh/auth` is absent or the account is gone. A submission whose account
+ * Returns null when `@pithy-sh/auth` is not composed or the account is gone. A submission whose account
  * cannot be read is refused by the caller rather than stored with a guessed address: an app thread with
  * no working reply address is a report nobody can answer.
  */
-export declare function resolveSubmitterAccount(d1: D1Database, userId: string): Promise<{
+export declare function resolveSubmitterAccount(d1: D1Database, userId: string, peers: SenderPeers): Promise<{
     email: string;
     name?: string;
     emailVerified?: boolean;
@@ -146,7 +163,7 @@ export declare function resolveSubmitterAccount(d1: D1Database, userId: string):
  */
 export declare function resolveSenderContext(d1: D1Database, address: string, now: Date, options: {
     authenticated: boolean;
-}): Promise<SenderContext>;
+}, peers: SenderPeers): Promise<SenderContext>;
 /**
  * The customer context behind a **session-proven** link, resolved from the user id itself.
  *
@@ -156,7 +173,7 @@ export declare function resolveSenderContext(d1: D1Database, address: string, no
  * nobody — turning the one link that *is* certain into the one the console shows as unknown.
  *
  * Everything below the link degrades exactly as it does on the mail path: purchases and entitlements
- * are guarded dynamic imports and come back empty when `@pithy-sh/payments` is absent.
+ * come back empty when `@pithy-sh/payments` is not composed.
  */
-export declare function resolveSubmitterContext(d1: D1Database, userId: string, now: Date): Promise<SenderContext>;
+export declare function resolveSubmitterContext(d1: D1Database, userId: string, now: Date, peers: SenderPeers): Promise<SenderContext>;
 //# sourceMappingURL=sender.d.ts.map

package/dist/link/sender.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sender.d.ts","sourceRoot":"","sources":["../../src/link/sender.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4CAA4C,CAAC;AAG9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,qGAAqG;IACrG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6GAA6G;IAC7G,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;IACrC;;;OAGG;IACH,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;CACtC;AAED,iEAAiE;AACjE,MAAM,WAAW,cAAc;IAC7B,2BAA2B;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,WAAW,EAAE,IAAI,CAAC;IAClB,0DAA0D;IAC1D,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,6DAA6D;IAC7D,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB;AAED,kHAAkH;AAClH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBjG;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAEhF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,UAAU,EACd,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAAC,CAiB3E;AA4ED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,IAAI,EACT,OAAO,EAAE;IAAE,aAAa,EAAE,OAAO,CAAA;CAAE,GAClC,OAAO,CAAC,aAAa,CAAC,CAwBxB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAI/G"}
+{"version":3,"file":"sender.d.ts","sourceRoot":"","sources":["../../src/link/sender.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4CAA4C,CAAC;AAC9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,qGAAqG;IACrG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6GAA6G;IAC7G,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;IACrC;;;OAGG;IACH,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;CACtC;AAED,iEAAiE;AACjE,MAAM,WAAW,cAAc;IAC7B,2BAA2B;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,WAAW,EAAE,IAAI,CAAC;IAClB,0DAA0D;IAC1D,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,6DAA6D;IAC7D,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,4FAA4F;IAC5F,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;IACzB,6FAA6F;IAC7F,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;CAClC;AAED,kHAAkH;AAClH,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBrH;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAEhF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,UAAU,EACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAAC,CAiB3E;AAsFD;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,IAAI,EACT,OAAO,EAAE;IAAE,aAAa,EAAE,OAAO,CAAA;CAAE,EACnC,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,aAAa,CAAC,CAwBxB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,UAAU,EACd,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,IAAI,EACT,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC,aAAa,CAAC,CAIxB"}

package/dist/link/sender.js

@@ -16,12 +16,11 @@ const MAX_LINKED_PURCHASES = 25;
 * capitals by some other route simply does not link, which costs a line of context rather than a
 * customer's request.
 */
-async function resolveSenderUserId(d1, address) {
+async function resolveSenderUserId(d1, address, peers) {
 	const normalized = parseAddress(address);
-	if (!normalized) return null;
+	if (!normalized || !peers.auth) return null;
 	try {
-		const { authDatabase } = await import("@pithy-sh/auth/src/data/tables");
-		return (await authDatabase(d1).selectFrom("pithyAuthUsers").select(["id"]).where("email", "=", normalized).executeTakeFirst())?.id ?? null;
+		return (await peers.auth.authDatabase(d1).selectFrom("pithyAuthUsers").select(["id"]).where("email", "=", normalized).executeTakeFirst())?.id ?? null;
 	} catch {
 		return null;
 	}
@@ -31,8 +30,8 @@ async function resolveSenderUserId(d1, address) {
 * nothing deliverable.
 *
 * Extracted rather than inlined because it is the one decision in {@link resolveSubmitterAccount} with
-* a wrong answer available, and inlining it puts that decision behind a guarded dynamic import where
-* no test can reach it.
+* a wrong answer available, and inlining it puts that decision behind a peer read where no test can
+* reach it.
 *
 * **`parseAddress` only, with no `normalizeAddress` fallback.** The fallback merely trims and
 * lowercases, so it would hand back an address this capability's own parser had just refused — and
@@ -52,14 +51,14 @@ function submitterAddress(email) {
 * back to. Deriving that from anything the client sent would hand a signed-in caller the ability to
 * point a support conversation — and every operator reply on it — at somebody else's mailbox.
 *
-* Returns null when `@pithy-sh/auth` is absent or the account is gone. A submission whose account
+* Returns null when `@pithy-sh/auth` is not composed or the account is gone. A submission whose account
 * cannot be read is refused by the caller rather than stored with a guessed address: an app thread with
 * no working reply address is a report nobody can answer.
 */
-async function resolveSubmitterAccount(d1, userId) {
+async function resolveSubmitterAccount(d1, userId, peers) {
+	if (!peers.auth) return null;
+	const { authDatabase, User } = peers.auth;
 	try {
-		const { authDatabase } = await import("@pithy-sh/auth/src/data/tables");
-		const { User } = await import("@pithy-sh/auth/src/data/betterAuth");
 		const row = await authDatabase(d1).selectFrom("pithyAuthUsers").selectAll().where("id", "=", userId).executeTakeFirst();
 		if (!row) return null;
 		const user = User.parse(row);
@@ -75,10 +74,10 @@ async function resolveSubmitterAccount(d1, userId) {
 	}
 }
 /** Read the account's own fields, when auth is composed. */
-async function resolveAccount(d1, address) {
+async function resolveAccount(d1, address, peers) {
+	if (!peers.auth) return null;
+	const { authDatabase, User } = peers.auth;
 	try {
-		const { authDatabase } = await import("@pithy-sh/auth/src/data/tables");
-		const { User } = await import("@pithy-sh/auth/src/data/betterAuth");
 		const row = await authDatabase(d1).selectFrom("pithyAuthUsers").selectAll().where("email", "=", address).executeTakeFirst();
 		if (!row) return null;
 		const user = User.parse(row);
@@ -99,10 +98,10 @@ async function resolveAccount(d1, address) {
 * is the whole reason payments made the holder a pair. See {@link SUPPORT_BILLING_SCOPE} for why the
 * type half is pinned to `user` rather than resolved.
 */
-async function resolvePurchases(d1, userId) {
+async function resolvePurchases(d1, userId, peers) {
+	if (!peers.payments) return [];
+	const { PAYMENTS_PURCHASES_TABLE, paymentsDatabase, PaymentsPurchase } = peers.payments;
 	try {
-		const { PAYMENTS_PURCHASES_TABLE, paymentsDatabase } = await import("@pithy-sh/payments/src/data/tables");
-		const { PaymentsPurchase } = await import("@pithy-sh/payments/src/data/purchase");
 		return (await paymentsDatabase(d1).selectFrom(PAYMENTS_PURCHASES_TABLE).selectAll().where("subjectType", "=", SUPPORT_BILLING_SCOPE).where("subjectId", "=", userId).orderBy("purchasedAt", "desc").limit(25).execute()).map((row) => {
 			const purchase = PaymentsPurchase.parse(row);
 			return {
@@ -121,10 +120,10 @@ async function resolvePurchases(d1, userId) {
 	}
 }
 /** Read what the account is entitled to, when payments is composed — **`user`-subject rows only**. */
-async function resolveLinkedEntitlements(d1, userId, now) {
+async function resolveLinkedEntitlements(d1, userId, now, peers) {
+	if (!peers.payments) return [];
+	const { paymentsDatabase, resolveEntitlements } = peers.payments;
 	try {
-		const { paymentsDatabase } = await import("@pithy-sh/payments/src/data/tables");
-		const { resolveEntitlements } = await import("@pithy-sh/payments/src/projection/resolve");
 		return await resolveEntitlements(paymentsDatabase(d1), {
 			subjectType: SUPPORT_BILLING_SCOPE,
 			subjectId: userId
@@ -141,7 +140,7 @@ async function resolveLinkedEntitlements(d1, userId, now) {
 * That is the same rule the classification follows, applied to the half of the model that lives in
 * somebody else's tables.
 */
-async function resolveSenderContext(d1, address, now, options) {
+async function resolveSenderContext(d1, address, now, options, peers) {
 	const empty = {
 		authenticated: options.authenticated,
 		userId: null,
@@ -150,7 +149,7 @@ async function resolveSenderContext(d1, address, now, options) {
 	};
 	const normalized = parseAddress(address);
 	if (!normalized) return empty;
-	const account = await resolveAccount(d1, normalized);
+	const account = await resolveAccount(d1, normalized, peers);
 	if (!account) return empty;
 	if (!options.authenticated) return {
 		authenticated: false,
@@ -159,7 +158,7 @@ async function resolveSenderContext(d1, address, now, options) {
 		purchases: [],
 		entitlements: []
 	};
-	return provenContext(d1, account, now);
+	return provenContext(d1, account, now, peers);
 }
 /**
 * The customer context behind a **session-proven** link, resolved from the user id itself.
@@ -170,10 +169,10 @@ async function resolveSenderContext(d1, address, now, options) {
 * nobody — turning the one link that *is* certain into the one the console shows as unknown.
 *
 * Everything below the link degrades exactly as it does on the mail path: purchases and entitlements
-* are guarded dynamic imports and come back empty when `@pithy-sh/payments` is absent.
+* come back empty when `@pithy-sh/payments` is not composed.
 */
-async function resolveSubmitterContext(d1, userId, now) {
-	const account = await resolveSubmitterAccount(d1, userId);
+async function resolveSubmitterContext(d1, userId, now, peers) {
+	const account = await resolveSubmitterAccount(d1, userId, peers);
 	if (!account) return {
 		authenticated: true,
 		userId,
@@ -184,11 +183,11 @@ async function resolveSubmitterContext(d1, userId, now) {
 		userId,
 		name: account.name,
 		emailVerified: account.emailVerified
-	}, now);
+	}, now, peers);
 }
 /** The proven half, shared by both entry points: the account, plus what it bought and what it holds. */
-async function provenContext(d1, account, now) {
-	const [purchases, entitlements] = await Promise.all([resolvePurchases(d1, account.userId), resolveLinkedEntitlements(d1, account.userId, now)]);
+async function provenContext(d1, account, now, peers) {
+	const [purchases, entitlements] = await Promise.all([resolvePurchases(d1, account.userId, peers), resolveLinkedEntitlements(d1, account.userId, now, peers)]);
 	return {
 		authenticated: true,
 		userId: account.userId,

package/dist/version.generated.d.ts

@@ -3,5 +3,5 @@
 /** This package's npm name — the join key against a release feed. */
 export declare const PACKAGE_NAME = "@pithy-sh/support";
 /** This package's version, stamped from its own package.json at generation time. */
-export declare const PACKAGE_VERSION = "0.2.9";
+export declare const PACKAGE_VERSION = "0.3.0";
 //# sourceMappingURL=version.generated.d.ts.map

package/dist/version.generated.js

@@ -4,6 +4,6 @@
 /** This package's npm name — the join key against a release feed. */
 const PACKAGE_NAME = "@pithy-sh/support";
 /** This package's version, stamped from its own package.json at generation time. */
-const PACKAGE_VERSION = "0.2.9";
+const PACKAGE_VERSION = "0.3.0";
 //#endregion
 export { PACKAGE_NAME, PACKAGE_VERSION };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pithy-sh/support",
-  "version": "0.2.9",
+  "version": "0.3.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -40,10 +40,10 @@
     "tldts": "^7.4.10"
   },
   "peerDependencies": {
-    "@pithy-sh/auth": "^0.6.3",
+    "@pithy-sh/auth": "^0.6.4",
     "@pithy-sh/core": "^0.7.4",
     "@pithy-sh/email": "^0.3.8",
-    "@pithy-sh/payments": "^0.3.6",
+    "@pithy-sh/payments": "^0.3.7",
     "@pithy-sh/secrets": "^0.2.7",
     "@pithy-sh/storage": "^0.2.7",
     "hono": "^4.13.2",

package/src/capability.ts

@@ -24,6 +24,8 @@ import { makeResolveDeps } from "./http/resolve";
 import { registerSupportRoutes } from "./http/routes";
 import { supportAdminRoutes } from "./http/scopes";
 import { createSupportEmailHandler } from "./inbound/handler";
+import { senderPeers } from "./link/peers";
+import type { SenderPeers } from "./link/sender";
 import { support_0001_threads } from "./migrations/0001_threads";
 import { resolveReplies, type SupportReplySnippets } from "./reply/snippets";
 import { inapplicableAttachmentSecrets, SUPPORT_BUCKET_BINDING, supportSecretsRegistry } from "./secret/registry";
@@ -67,6 +69,11 @@ export interface SupportWiring {
    * so with `support/reply_failed` rather than the capability refusing to start.
    */
   enqueueEmail: EmailCapability["enqueue"] | undefined;
+  /**
+   * The optional peers the sender link reads through — `auth()`'s and `payments()`'s surfaces, set by
+   * `compose` when each is composed. Found, never imported (#645): see `link/sender.ts`.
+   */
+  peers: SenderPeers;
   /**
    * The audit seam the inbound handler emits through.
    *
@@ -202,6 +209,7 @@ export function support(options: SupportOptions = {}): SupportCapability {
     categories,
     snippets,
     enqueueEmail: undefined,
+    peers: {},
     emit: noopEmit,
   };
 
@@ -271,6 +279,9 @@ export function support(options: SupportOptions = {}): SupportCapability {
     compose: ({ capabilities }) => {
       const email = capabilities.find(isEmailCapability);
       wiring.enqueueEmail = email?.enqueue;
+      // Auth and payments, found rather than imported (#645), and refused here when this Worker's config needs
+      // one it cannot reach. See `link/peers.ts`.
+      wiring.peers = senderPeers(capabilities, resolved);
     },
     // What a browser may know. Built from the resolved `mountPath`, never the default — the whole
     // point is that moving the mount moves the address the client posts to. See `clientProjection`

package/src/http/handlers.ts

@@ -13,7 +13,12 @@ import type { SupportAttachment } from "../data/attachment";
 import type { SupportCategories } from "../data/categories";
 import type { SupportDatabase } from "../data/tables";
 import { SupportClassificationError, SupportNotFoundError } from "../error/errors";
-import { resolveSenderContext, resolveSubmitterAccount, resolveSubmitterContext } from "../link/sender";
+import {
+  resolveSenderContext,
+  resolveSubmitterAccount,
+  resolveSubmitterContext,
+  type SenderPeers,
+} from "../link/sender";
 import { sendReply } from "../reply/send";
 import type { SupportReplySnippets } from "../reply/snippets";
 import { repliesForCategory } from "../reply/snippets";
@@ -75,6 +80,8 @@ export interface HandlerDeps {
   enqueue?: Parameters<typeof sendReply>[0]["enqueue"];
   /** Start a classification for a message. Resolves to whether an instance actually started. */
   dispatchClassify: (messageId: string) => Promise<boolean>;
+  /** The optional peers the sender link reads through, as `compose` found them. Empty when none is composed. */
+  peers: SenderPeers;
   /** The audit seam. */
   emit: AuditEmit;
   /** The request logger. */
@@ -155,10 +162,14 @@ export async function readConversation(deps: HandlerDeps, threadId: string): Pro
     // the `email` column exactly, so an account stored with capitals by some other route would resolve
     // to nobody — turning the one link that *is* certain into the one the console shows as unknown.
     detail.thread.accountLinkSource === "session" && detail.thread.userId
-      ? resolveSubmitterContext(deps.d1, detail.thread.userId, deps.now())
-      : resolveSenderContext(deps.d1, detail.thread.fromAddress, deps.now(), {
-          authenticated: detail.thread.senderAuthenticated,
-        }),
+      ? resolveSubmitterContext(deps.d1, detail.thread.userId, deps.now(), deps.peers)
+      : resolveSenderContext(
+          deps.d1,
+          detail.thread.fromAddress,
+          deps.now(),
+          { authenticated: detail.thread.senderAuthenticated },
+          deps.peers,
+        ),
   ]);
 
   return {
@@ -343,7 +354,7 @@ export async function submitFeedbackRequest(
       categories: deps.categories,
       bucket: deps.bucket,
       fts: deps.fts,
-      resolveAccount: (id) => resolveSubmitterAccount(deps.d1, id),
+      resolveAccount: (id) => resolveSubmitterAccount(deps.d1, id, deps.peers),
       dispatchClassify: deps.dispatchClassify,
       emit: deps.emit,
       log: deps.log,

package/src/http/resolve.ts

@@ -100,6 +100,9 @@ export function makeResolveDeps(wiring: SupportWiring): (c: Context<PithyHonoEnv
         ? (input) => wiring.enqueueEmail?.(env as never, input) as Promise<{ jobId: string }>
         : undefined,
       dispatchClassify: makeClassifyDispatcher(env as unknown as Record<string, unknown>, log),
+      // What `compose` found — auth and payments, each only when composed. Read per request, because
+      // `compose` runs after the factory built this closure.
+      peers: wiring.peers,
       emit: c.var.emit,
       log,
       newId: () => crypto.randomUUID(),

package/src/inbound/handler.ts

@@ -76,7 +76,7 @@ export function createSupportEmailHandler(wiring: SupportWiring): CapabilityEmai
           bucket: bindings.SUPPORT_BUCKET,
           fts: wiring.config.search.fts,
           dispatchClassify: makeClassifyDispatcher(env, log),
-          linkSender: (address) => resolveSenderUserId(d1, address),
+          linkSender: (address) => resolveSenderUserId(d1, address, wiring.peers),
           emit: wiring.emit,
           log,
           newId: () => crypto.randomUUID(),

package/src/link/peers.ts

@@ -0,0 +1,87 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+
+import type { AuthPeer } from "@pithy-sh/auth/src/peer";
+import type { Capability } from "@pithy-sh/core/src/capability/capability";
+import { ValidationError } from "@pithy-sh/core/src/error/pithyError";
+import type { PaymentsPeer } from "@pithy-sh/payments/src/peer";
+import type { SupportConfig } from "../config/config";
+import type { SenderPeers } from "./sender";
+
+/**
+ * How `support()`'s `compose` hook finds the sender link's optional peers (#645). Its own module so
+ * `sender.ts` stays free of the capability contract, which a browser program has no use for.
+ *
+ * **Nothing degrades silently (#645 review).** A composed auth or payments released before its surface is
+ * refused, whatever the config: read as absent, a project that plainly has accounts stopped linking every sender,
+ * and one that plainly sells stopped showing an operator what anybody bought. The in-app channel, on by default,
+ * is refused without auth in this Worker: every submission is keyed to the account a session proves, and the
+ * account is read through auth, so the channel could not accept one report. Turning it off is the adopter's
+ * statement that this Worker is a mail inbox, and then an absent auth or payments proceeds — see
+ * {@link senderPeers}.
+ */
+
+/** One optional peer, as `senderPeers` looks for it. */
+interface Wanted {
+  readonly name: string;
+  readonly pkg: string;
+  readonly config: string;
+  readonly key: string;
+  readonly probe: string;
+  readonly wants: string;
+}
+
+/**
+ * The named kit capability's peer surface: `undefined` when it is not composed, or a refusal when it is composed
+ * from a release too old to carry one. Recognized by the config field it has always carried, not by the surface,
+ * because a pre-#645 release has the one and not the other.
+ */
+function surface<T>(capabilities: readonly Capability[], wanted: Wanted): T | undefined {
+  const found = capabilities.find((capability) => capability.name === wanted.name && wanted.config in capability);
+  if (found === undefined) return undefined;
+  const value = (found as unknown as Record<string, Record<string, unknown> | undefined>)[wanted.key];
+  if (typeof value?.[wanted.probe] !== "function") {
+    throw new ValidationError({
+      message: `The composed ${wanted.name} is too old for support to ${wanted.wants}.`,
+      action: `Upgrade ${wanted.pkg} to the version this @pithy-sh/support peers.`,
+      detail: `The composed ${wanted.name} capability carries no \`${wanted.key}\`. It was released before optional peers arrived through the composition (#645).`,
+    });
+  }
+  return value as T;
+}
+
+/**
+ * The peers a composition holds — what `support()`'s `compose` hook records — refusing one this Worker's config
+ * needs and cannot reach.
+ *
+ * With the in-app channel off, auth and payments may both be absent. A sender is then never linked to an account
+ * and a thread shows no purchases, which is exactly what a project with no accounts and no store has to show.
+ */
+export function senderPeers(capabilities: readonly Capability[], config: SupportConfig): SenderPeers {
+  const auth = surface<AuthPeer>(capabilities, {
+    name: "auth",
+    pkg: "@pithy-sh/auth",
+    config: "authConfig",
+    key: "authPeer",
+    probe: "authDatabase",
+    wants: "link a sender to an account",
+  });
+  const payments = surface<PaymentsPeer>(capabilities, {
+    name: "payments",
+    pkg: "@pithy-sh/payments",
+    config: "paymentsConfig",
+    key: "paymentsPeer",
+    probe: "resolveEntitlements",
+    wants: "show what a sender bought",
+  });
+  if (config.submission.enabled && auth === undefined) {
+    throw new ValidationError({
+      message: "No auth is composed in this Worker, and the in-app support channel needs it to know who is writing.",
+      action:
+        "Compose `auth(...)` in this Worker, or turn the in-app channel off with `submission: { enabled: false }` for a mail-only inbox.",
+      detail:
+        "`submission.enabled` defaults to true. A submission is keyed to the account its session proves, read through @pithy-sh/auth, so without auth in this Worker the channel refuses every report, and no sender on the mail path is ever linked to an account.",
+    });
+  }
+  return { ...(auth ? { auth } : {}), ...(payments ? { payments } : {}) };
+}

package/src/link/sender.ts

@@ -2,8 +2,10 @@
 // SPDX-License-Identifier: MIT
 
 import type { D1Database } from "@cloudflare/workers-types";
+import type { AuthPeer } from "@pithy-sh/auth/src/peer";
 import { parseAddress } from "@pithy-sh/core/src/address/address";
 import type { Entitlement } from "@pithy-sh/core/src/entitlement/entitlement";
+import type { PaymentsPeer } from "@pithy-sh/payments/src/peer";
 import { SUPPORT_BILLING_SCOPE } from "../data/billingScope";
 
 /**
@@ -14,13 +16,18 @@ import { SUPPORT_BILLING_SCOPE } from "../data/billingScope";
  * different object from a message in a mailbox — and every one of those facts is already in the
  * adopter's own D1, one table over, unused.
  *
- * ## Guarded dynamic imports, not dependencies
+ * ## Handed over by the composition, never imported
  *
  * `@pithy-sh/auth` and `@pithy-sh/payments` are **optional** here (principle 4: depend on core seams,
- * never on a sibling's internals), so both are reached the way `@pithy-sh/matchmaking` already
- * reaches auth — a dynamic import inside a `try`, degrading to "no link" when the package is not
- * installed. A support inbox in a project with no accounts and no payments is a perfectly reasonable
- * thing to run, and it must not fail to start, or to store mail, because of what it cannot see.
+ * never on a sibling's internals), so both reach this module from the composition: `support()`'s `compose`
+ * hook finds each one's peer surface among the composed capabilities and every function below is handed
+ * {@link SenderPeers}, degrading to "no link" when one is absent. They were reached by `import()` inside a
+ * `try` until #645, which is optional at runtime and required at bundle time — wrangler's esbuild resolves a
+ * literal specifier whether or not the branch holding it ever runs, so a project without either package
+ * could not deploy support at all. Only types name the two packages now, and a bundler never sees a type.
+ *
+ * A support inbox in a project with no accounts and no payments is a perfectly reasonable thing to run, and
+ * it must not fail to start, or to store mail, because of what it cannot see.
  *
  * Every function here is **best-effort by contract**: it returns nothing rather than throwing, and
  * the caller stores the message either way. Linkage is context, and context is never worth losing a
@@ -96,6 +103,17 @@ export interface SenderPurchase {
   revokedAt: Date | null;
 }
 
+/**
+ * The optional peers the link reads through — what `support()`'s `compose` hook found. Either may be absent,
+ * and an absent one is "no link", never a failure.
+ */
+export interface SenderPeers {
+  /** `auth()`'s surface, when auth is composed: who an address or a session id belongs to. */
+  readonly auth?: AuthPeer;
+  /** `payments()`'s surface, when payments is composed: what that account bought and holds. */
+  readonly payments?: PaymentsPeer;
+}
+
 /** How many purchases a thread view carries. Enough to see the pattern, bounded so a whale is not a slow page. */
 export const MAX_LINKED_PURCHASES = 25;
 
@@ -110,20 +128,20 @@ export const MAX_LINKED_PURCHASES = 25;
  * capitals by some other route simply does not link, which costs a line of context rather than a
  * customer's request.
  */
-export async function resolveSenderUserId(d1: D1Database, address: string): Promise<string | null> {
+export async function resolveSenderUserId(d1: D1Database, address: string, peers: SenderPeers): Promise<string | null> {
   const normalized = parseAddress(address);
-  if (!normalized) return null;
+  if (!normalized || !peers.auth) return null;
 
   try {
-    const { authDatabase } = await import("@pithy-sh/auth/src/data/tables");
-    const row = await authDatabase(d1)
+    const row = await peers.auth
+      .authDatabase(d1)
       .selectFrom("pithyAuthUsers")
       .select(["id"])
       .where("email", "=", normalized)
       .executeTakeFirst();
     return row?.id ?? null;
   } catch {
-    // `@pithy-sh/auth` is not installed, or the table does not exist yet. Both mean the same thing
+    // The auth table does not exist yet — composed but not migrated. It means what an absent auth means
     // here: nobody to link to.
     return null;
   }
@@ -134,8 +152,8 @@ export async function resolveSenderUserId(d1: D1Database, address: string): Prom
  * nothing deliverable.
  *
  * Extracted rather than inlined because it is the one decision in {@link resolveSubmitterAccount} with
- * a wrong answer available, and inlining it puts that decision behind a guarded dynamic import where
- * no test can reach it.
+ * a wrong answer available, and inlining it puts that decision behind a peer read where no test can
+ * reach it.
  *
  * **`parseAddress` only, with no `normalizeAddress` fallback.** The fallback merely trims and
  * lowercases, so it would hand back an address this capability's own parser had just refused — and
@@ -156,17 +174,18 @@ export function submitterAddress(email: string | null | undefined): string | nul
  * back to. Deriving that from anything the client sent would hand a signed-in caller the ability to
  * point a support conversation — and every operator reply on it — at somebody else's mailbox.
  *
- * Returns null when `@pithy-sh/auth` is absent or the account is gone. A submission whose account
+ * Returns null when `@pithy-sh/auth` is not composed or the account is gone. A submission whose account
  * cannot be read is refused by the caller rather than stored with a guessed address: an app thread with
  * no working reply address is a report nobody can answer.
  */
 export async function resolveSubmitterAccount(
   d1: D1Database,
   userId: string,
+  peers: SenderPeers,
 ): Promise<{ email: string; name?: string; emailVerified?: boolean } | null> {
+  if (!peers.auth) return null;
+  const { authDatabase, User } = peers.auth;
   try {
-    const { authDatabase } = await import("@pithy-sh/auth/src/data/tables");
-    const { User } = await import("@pithy-sh/auth/src/data/betterAuth");
     const row = await authDatabase(d1)
       .selectFrom("pithyAuthUsers")
       .selectAll()
@@ -186,10 +205,11 @@ export async function resolveSubmitterAccount(
 async function resolveAccount(
   d1: D1Database,
   address: string,
+  peers: SenderPeers,
 ): Promise<{ userId: string; name?: string; emailVerified?: boolean } | null> {
+  if (!peers.auth) return null;
+  const { authDatabase, User } = peers.auth;
   try {
-    const { authDatabase } = await import("@pithy-sh/auth/src/data/tables");
-    const { User } = await import("@pithy-sh/auth/src/data/betterAuth");
     const row = await authDatabase(d1)
       .selectFrom("pithyAuthUsers")
       .selectAll()
@@ -211,10 +231,14 @@ async function resolveAccount(
  * is the whole reason payments made the holder a pair. See {@link SUPPORT_BILLING_SCOPE} for why the
  * type half is pinned to `user` rather than resolved.
  */
-async function resolvePurchases(d1: D1Database, userId: string): Promise<readonly SenderPurchase[]> {
+async function resolvePurchases(
+  d1: D1Database,
+  userId: string,
+  peers: SenderPeers,
+): Promise<readonly SenderPurchase[]> {
+  if (!peers.payments) return [];
+  const { PAYMENTS_PURCHASES_TABLE, paymentsDatabase, PaymentsPurchase } = peers.payments;
   try {
-    const { PAYMENTS_PURCHASES_TABLE, paymentsDatabase } = await import("@pithy-sh/payments/src/data/tables");
-    const { PaymentsPurchase } = await import("@pithy-sh/payments/src/data/purchase");
     const rows = await paymentsDatabase(d1)
       .selectFrom(PAYMENTS_PURCHASES_TABLE)
       .selectAll()
@@ -242,10 +266,15 @@ async function resolvePurchases(d1: D1Database, userId: string): Promise<readonl
 }
 
 /** Read what the account is entitled to, when payments is composed — **`user`-subject rows only**. */
-async function resolveLinkedEntitlements(d1: D1Database, userId: string, now: Date): Promise<readonly Entitlement[]> {
+async function resolveLinkedEntitlements(
+  d1: D1Database,
+  userId: string,
+  now: Date,
+  peers: SenderPeers,
+): Promise<readonly Entitlement[]> {
+  if (!peers.payments) return [];
+  const { paymentsDatabase, resolveEntitlements } = peers.payments;
   try {
-    const { paymentsDatabase } = await import("@pithy-sh/payments/src/data/tables");
-    const { resolveEntitlements } = await import("@pithy-sh/payments/src/projection/resolve");
     return await resolveEntitlements(
       paymentsDatabase(d1),
       { subjectType: SUPPORT_BILLING_SCOPE, subjectId: userId },
@@ -269,13 +298,14 @@ export async function resolveSenderContext(
   address: string,
   now: Date,
   options: { authenticated: boolean },
+  peers: SenderPeers,
 ): Promise<SenderContext> {
   const empty: SenderContext = { authenticated: options.authenticated, userId: null, purchases: [], entitlements: [] };
 
   const normalized = parseAddress(address);
   if (!normalized) return empty;
 
-  const account = await resolveAccount(d1, normalized);
+  const account = await resolveAccount(d1, normalized, peers);
   if (!account) return empty;
 
   // **An unverified match is reported; its billing history is not.**
@@ -292,7 +322,7 @@ export async function resolveSenderContext(
     return { authenticated: false, userId: account.userId, name: account.name, purchases: [], entitlements: [] };
   }
 
-  return provenContext(d1, account, now);
+  return provenContext(d1, account, now, peers);
 }
 
 /**
@@ -304,12 +334,17 @@ export async function resolveSenderContext(
  * nobody — turning the one link that *is* certain into the one the console shows as unknown.
  *
  * Everything below the link degrades exactly as it does on the mail path: purchases and entitlements
- * are guarded dynamic imports and come back empty when `@pithy-sh/payments` is absent.
+ * come back empty when `@pithy-sh/payments` is not composed.
  */
-export async function resolveSubmitterContext(d1: D1Database, userId: string, now: Date): Promise<SenderContext> {
-  const account = await resolveSubmitterAccount(d1, userId);
+export async function resolveSubmitterContext(
+  d1: D1Database,
+  userId: string,
+  now: Date,
+  peers: SenderPeers,
+): Promise<SenderContext> {
+  const account = await resolveSubmitterAccount(d1, userId, peers);
   if (!account) return { authenticated: true, userId, purchases: [], entitlements: [] };
-  return provenContext(d1, { userId, name: account.name, emailVerified: account.emailVerified }, now);
+  return provenContext(d1, { userId, name: account.name, emailVerified: account.emailVerified }, now, peers);
 }
 
 /** The proven half, shared by both entry points: the account, plus what it bought and what it holds. */
@@ -317,10 +352,11 @@ async function provenContext(
   d1: D1Database,
   account: { userId: string; name?: string; emailVerified?: boolean },
   now: Date,
+  peers: SenderPeers,
 ): Promise<SenderContext> {
   const [purchases, entitlements] = await Promise.all([
-    resolvePurchases(d1, account.userId),
-    resolveLinkedEntitlements(d1, account.userId, now),
+    resolvePurchases(d1, account.userId, peers),
+    resolveLinkedEntitlements(d1, account.userId, now, peers),
   ]);
 
   return {

package/src/version.generated.ts

@@ -13,4 +13,4 @@
 export const PACKAGE_NAME = "@pithy-sh/support";
 
 /** This package's version, stamped from its own package.json at generation time. */
-export const PACKAGE_VERSION = "0.2.9";
+export const PACKAGE_VERSION = "0.3.0";