@private.me/xbind 3.0.0 → 3.0.2

package/dist-standalone/dual-mode.js

@@ -1 +1,247 @@
-import{ok,err}from"./_deps/shared/index.js";export var DualModeErrorCode;!function(a){a.BOTH_FAILED="DUAL_MODE_BOTH_FAILED",a.XBIND_FAILED="DUAL_MODE_XBIND_FAILED",a.FALLBACK_FAILED="DUAL_MODE_FALLBACK_FAILED",a.INVALID_CONFIG="DUAL_MODE_INVALID_CONFIG"}(DualModeErrorCode||(DualModeErrorCode={}));export class DualModeAdapter{xbind;fallback;metrics;constructor(a={}){this.xbind=a.xbind||null,this.fallback=a.fallback||null,this.metrics={totalCalls:0,xbindCalls:0,fallbackCalls:0,xbindPercentage:0,lastCall:(new Date).toISOString(),lastCallMethod:"xbind"}}setXBind(a){this.xbind=a}removeFallback(){this.fallback=null}async call(a,r={}){if(this.metrics.totalCalls++,this.xbind)try{const e=await this.callViaXBind(a,r);if(e.ok)return this.metrics.xbindCalls++,this.updateMetrics("xbind"),e;if(this.fallback){const t=await this.callViaFallback(a,r);return t.ok?(this.metrics.fallbackCalls++,this.updateMetrics("fallback"),t):err({code:DualModeErrorCode.BOTH_FAILED,message:"Both XBind and fallback failed",xbindError:e.error,fallbackError:t.error})}return err({code:DualModeErrorCode.XBIND_FAILED,message:"XBind failed and no fallback configured",xbindError:e.error})}catch(e){if(this.fallback){const e=await this.callViaFallback(a,r);if(e.ok)return this.metrics.fallbackCalls++,this.updateMetrics("fallback"),e}return err({code:DualModeErrorCode.XBIND_FAILED,message:e instanceof Error?e.message:"XBind exception",xbindError:e})}if(this.fallback){const e=await this.callViaFallback(a,r);return e.ok?(this.metrics.fallbackCalls++,this.updateMetrics("fallback"),e):err({code:DualModeErrorCode.FALLBACK_FAILED,message:"Fallback failed",fallbackError:e.error})}return err({code:DualModeErrorCode.INVALID_CONFIG,message:"Neither XBind nor fallback configured"})}getMetrics(){return{...this.metrics}}resetMetrics(){this.metrics={totalCalls:0,xbindCalls:0,fallbackCalls:0,xbindPercentage:0,lastCall:(new Date).toISOString(),lastCallMethod:"xbind"}}async callViaXBind(a,r){if(!this.xbind)return err({message:"XBind not configured"});try{return await this.xbind.send({to:this.xbind.did,payload:{action:a,params:r},scope:a})}catch(a){return err({message:a instanceof Error?a.message:"Unknown error"})}}async callViaFallback(a,r){if(!this.fallback)return err({message:"Fallback not configured"});try{const e=`${this.fallback.url}/${a}`,t=this.fallback.method||"POST",l={"Content-Type":"application/json",...this.fallback.headers};"api-key"===this.fallback.type&&this.fallback.key&&(l.Authorization=`Bearer ${this.fallback.key}`);const i=await fetch(e,{method:t,headers:l,body:"GET"!==t?JSON.stringify(r):void 0});if(!i.ok)return err({message:`HTTP ${i.status}`});const s=await i.json();return ok(s)}catch(a){return err({message:a instanceof Error?a.message:"Network error"})}}updateMetrics(a){this.metrics.lastCall=(new Date).toISOString(),this.metrics.lastCallMethod=a,this.metrics.xbindPercentage=this.metrics.totalCalls>0?this.metrics.xbindCalls/this.metrics.totalCalls*100:0}}
+/**
+ * @module dual-mode
+ * Dual-mode adapter: XBind + API key fallback.
+ *
+ * Enables zero-downtime migration:
+ * - Try XBind first
+ * - Fall back to API key if unavailable
+ * - Track usage metrics
+ *
+ * @example
+ * ```ts
+ * const adapter = new DualModeAdapter({
+ *   xbind: xbindAgent,
+ *   fallback: {
+ *     type: 'api-key',
+ *     key: process.env.API_KEY,
+ *     url: 'https://api.example.com',
+ *   },
+ * });
+ *
+ * // Will try xBind, fall back to API key
+ * const result = await adapter.call('createCharge', { amount: 100 });
+ * ```
+ */
+import { ok, err } from"./_deps/shared/index.js";
+/**
+ * Dual-mode error codes.
+ */
+export var DualModeErrorCode;
+(function (DualModeErrorCode) {
+    DualModeErrorCode["BOTH_FAILED"] = "DUAL_MODE_BOTH_FAILED";
+    DualModeErrorCode["XBIND_FAILED"] = "DUAL_MODE_XBIND_FAILED";
+    DualModeErrorCode["FALLBACK_FAILED"] = "DUAL_MODE_FALLBACK_FAILED";
+    DualModeErrorCode["INVALID_CONFIG"] = "DUAL_MODE_INVALID_CONFIG";
+})(DualModeErrorCode || (DualModeErrorCode = {}));
+/**
+ * Dual-mode adapter.
+ *
+ * Tries XBind first, falls back to API key if unavailable.
+ */
+export class DualModeAdapter {
+    xbind;
+    fallback;
+    metrics;
+    /**
+     * Create dual-mode adapter.
+     *
+     * @param options - Configuration
+     * @param options.xbind - xBind agent (optional, can be added later)
+     * @param options.fallback - Fallback config (optional, can be removed later)
+     */
+    constructor(options = {}) {
+        this.xbind = options.xbind || null;
+        this.fallback = options.fallback || null;
+        this.metrics = {
+            totalCalls: 0,
+            xbindCalls: 0,
+            fallbackCalls: 0,
+            xbindPercentage: 0,
+            lastCall: new Date().toISOString(),
+            lastCallMethod: 'xbind',
+        };
+    }
+    /**
+     * Set xBind agent (for gradual rollout).
+     *
+     * @param agent - xBind agent
+     */
+    setXBind(agent) {
+        this.xbind = agent;
+    }
+    /**
+     * Remove fallback (complete migration).
+     */
+    removeFallback() {
+        this.fallback = null;
+    }
+    /**
+     * Call an action (tries XBind first, falls back if needed).
+     *
+     * @param action - Action name
+     * @param params - Action parameters
+     * @returns Result or error
+     *
+     * @example
+     * ```ts
+     * const result = await adapter.call('createCharge', {
+     *   amount: 100,
+     *   currency: 'USD',
+     * });
+     * ```
+     */
+    async call(action, params = {}) {
+        this.metrics.totalCalls++;
+        // Try XBind first
+        if (this.xbind) {
+            try {
+                const result = await this.callViaXBind(action, params);
+                if (result.ok) {
+                    this.metrics.xbindCalls++;
+                    this.updateMetrics('xbind');
+                    return result;
+                }
+                // XBind failed, try fallback if available
+                if (this.fallback) {
+                    const fallbackResult = await this.callViaFallback(action, params);
+                    if (fallbackResult.ok) {
+                        this.metrics.fallbackCalls++;
+                        this.updateMetrics('fallback');
+                        return fallbackResult;
+                    }
+                    // Both failed
+                    return err({
+                        code: DualModeErrorCode.BOTH_FAILED,
+                        message: 'Both XBind and fallback failed',
+                        xbindError: result.error,
+                        fallbackError: fallbackResult.error,
+                    });
+                }
+                // No fallback, return XBind error
+                return err({
+                    code: DualModeErrorCode.XBIND_FAILED,
+                    message: 'XBind failed and no fallback configured',
+                    xbindError: result.error,
+                });
+            }
+            catch (error) {
+                // XBind exception, try fallback
+                if (this.fallback) {
+                    const fallbackResult = await this.callViaFallback(action, params);
+                    if (fallbackResult.ok) {
+                        this.metrics.fallbackCalls++;
+                        this.updateMetrics('fallback');
+                        return fallbackResult;
+                    }
+                }
+                return err({
+                    code: DualModeErrorCode.XBIND_FAILED,
+                    message: error instanceof Error ? error.message : 'XBind exception',
+                    xbindError: error,
+                });
+            }
+        }
+        // No xBind, try fallback only
+        if (this.fallback) {
+            const result = await this.callViaFallback(action, params);
+            if (result.ok) {
+                this.metrics.fallbackCalls++;
+                this.updateMetrics('fallback');
+                return result;
+            }
+            return err({
+                code: DualModeErrorCode.FALLBACK_FAILED,
+                message: 'Fallback failed',
+                fallbackError: result.error,
+            });
+        }
+        // Neither XBind nor fallback configured
+        return err({
+            code: DualModeErrorCode.INVALID_CONFIG,
+            message: 'Neither XBind nor fallback configured',
+        });
+    }
+    /**
+     * Get usage metrics.
+     *
+     * @returns Current metrics
+     */
+    getMetrics() {
+        return { ...this.metrics };
+    }
+    /**
+     * Reset metrics.
+     */
+    resetMetrics() {
+        this.metrics = {
+            totalCalls: 0,
+            xbindCalls: 0,
+            fallbackCalls: 0,
+            xbindPercentage: 0,
+            lastCall: new Date().toISOString(),
+            lastCallMethod: 'xbind',
+        };
+    }
+    /**
+     * Call via XBind.
+     */
+    async callViaXBind(action, params) {
+        if (!this.xbind) {
+            return err({ message: 'XBind not configured' });
+        }
+        try {
+            const result = await this.xbind.send({
+                to: this.xbind.did, // TODO: Get target DID from connection
+                payload: { action, params },
+                scope: action,
+            });
+            return result;
+        }
+        catch (error) {
+            return err({ message: error instanceof Error ? error.message : 'Unknown error' });
+        }
+    }
+    /**
+     * Call via fallback (API key, OAuth, etc.).
+     */
+    async callViaFallback(action, params) {
+        if (!this.fallback) {
+            return err({ message: 'Fallback not configured' });
+        }
+        try {
+            const url = `${this.fallback.url}/${action}`;
+            const method = this.fallback.method || 'POST';
+            const headers = {
+                'Content-Type': 'application/json',
+                ...this.fallback.headers,
+            };
+            // Add auth header based on type
+            if (this.fallback.type === 'api-key' && this.fallback.key) {
+                headers['Authorization'] = `Bearer ${this.fallback.key}`;
+            }
+            const response = await fetch(url, {
+                method,
+                headers,
+                body: method !== 'GET' ? JSON.stringify(params) : undefined,
+            });
+            if (!response.ok) {
+                return err({ message: `HTTP ${response.status}` });
+            }
+            const data = await response.json();
+            return ok(data);
+        }
+        catch (error) {
+            return err({ message: error instanceof Error ? error.message : 'Network error' });
+        }
+    }
+    /**
+     * Update metrics after a call.
+     */
+    updateMetrics(method) {
+        this.metrics.lastCall = new Date().toISOString();
+        this.metrics.lastCallMethod = method;
+        this.metrics.xbindPercentage = this.metrics.totalCalls > 0
+            ? (this.metrics.xbindCalls / this.metrics.totalCalls) * 100
+            : 0;
+    }
+}

package/dist-standalone/email-templates.js

@@ -1 +1,309 @@
-const PRIVACY_MASK_SVG='\n<svg width="32" height="32" viewBox="0 0 300 600" xmlns="http://www.w3.org/2000/svg">\n  <defs>\n    <linearGradient id="maskGradient" x1="0%" y1="0%" x2="100%" y2="100%">\n      <stop offset="0%" style="stop-color:#10B981;stop-opacity:1" />\n      <stop offset="100%" style="stop-color:#059669;stop-opacity:1" />\n    </linearGradient>\n  </defs>\n  \x3c!-- Top curve --\x3e\n  <path d="M50 100 Q150 50 250 100 L250 300 Q150 350 50 300 Z" fill="url(#maskGradient)"/>\n  \x3c!-- Eye holes --\x3e\n  <ellipse cx="100" cy="180" rx="25" ry="35" fill="#FFFFFF"/>\n  <ellipse cx="200" cy="180" rx="25" ry="35" fill="#FFFFFF"/>\n  \x3c!-- Bottom z-shape --\x3e\n  <path d="M270 575 L230 575 L270 525 L230 525" stroke="#10B981" stroke-width="8" fill="none"/>\n</svg>\n';export function renderInviteEmail(n){return`\n<!DOCTYPE html>\n<html lang="en">\n<head>\n  <meta charset="UTF-8">\n  <meta name="viewport" content="width=device-width, initial-scale=1.0">\n  <title>${escapeHtml(n.agentName)} wants to connect</title>\n  <style>\n    @import url('https://fonts.googleapis.com/css2?family=Outfit:wght@400;600;700&family=DM+Mono:wght@400;500&display=swap');\n    \n    body {\n      margin: 0;\n      padding: 0;\n      font-family: 'Outfit', -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;\n      background-color: #F9FAFB;\n      color: #1F2937;\n    }\n    \n    .container {\n      max-width: 600px;\n      margin: 0 auto;\n      background-color: #FFFFFF;\n    }\n    \n    .header {\n      background: linear-gradient(135deg, #10B981 0%, #059669 100%);\n      padding: 40px 24px;\n      text-align: center;\n    }\n    \n    .logo {\n      margin-bottom: 16px;\n    }\n    \n    .header h1 {\n      margin: 0;\n      font-size: 24px;\n      font-weight: 700;\n      color: #FFFFFF;\n      line-height: 1.3;\n    }\n    \n    .content {\n      padding: 40px 24px;\n    }\n    \n    .content p {\n      margin: 0 0 16px 0;\n      font-size: 16px;\n      line-height: 1.6;\n      color: #374151;\n    }\n    \n    .agent-info {\n      background-color: #F3F4F6;\n      border-left: 4px solid #10B981;\n      padding: 16px;\n      margin: 24px 0;\n      border-radius: 4px;\n    }\n    \n    .agent-name {\n      font-size: 18px;\n      font-weight: 600;\n      color: #1F2937;\n      margin-bottom: 8px;\n    }\n    \n    .did {\n      font-family: 'DM Mono', 'Courier New', monospace;\n      font-size: 12px;\n      color: #6B7280;\n      word-break: break-all;\n      line-height: 1.5;\n    }\n    \n    .message-box {\n      background-color: #F9FAFB;\n      border: 1px solid #E5E7EB;\n      padding: 16px;\n      margin: 24px 0;\n      border-radius: 8px;\n      font-style: italic;\n      color: #4B5563;\n    }\n    \n    .cta-container {\n      text-align: center;\n      margin: 32px 0;\n    }\n    \n    .cta-button {\n      display: inline-block;\n      background-color: #10B981;\n      color: #FFFFFF;\n      text-decoration: none;\n      padding: 14px 32px;\n      border-radius: 8px;\n      font-size: 16px;\n      font-weight: 600;\n      transition: background-color 0.2s;\n    }\n    \n    .cta-button:hover {\n      background-color: #059669;\n    }\n    \n    .footer {\n      padding: 24px;\n      text-align: center;\n      border-top: 1px solid #E5E7EB;\n    }\n    \n    .tagline {\n      font-size: 14px;\n      color: #6B7280;\n      margin-bottom: 12px;\n    }\n    \n    .brand {\n      font-size: 12px;\n      color: #9CA3AF;\n    }\n    \n    .security-note {\n      font-size: 13px;\n      color: #6B7280;\n      margin-top: 24px;\n      padding-top: 24px;\n      border-top: 1px solid #E5E7EB;\n    }\n  </style>\n</head>\n<body>\n  <div class="container">\n    \x3c!-- Header --\x3e\n    <div class="header">\n      <div class="logo">${PRIVACY_MASK_SVG}</div>\n      <h1>${escapeHtml(n.agentName)} wants to connect</h1>\n    </div>\n    \n    \x3c!-- Content --\x3e\n    <div class="content">\n      <p>You've been invited to establish an authenticated agent-to-agent connection.</p>\n      \n      \x3c!-- Agent Info --\x3e\n      <div class="agent-info">\n        <div class="agent-name">From: ${escapeHtml(n.agentName)}</div>\n        <div class="did">DID: ${escapeHtml(n.did)}</div>\n      </div>\n      \n      ${n.message?`\n      \x3c!-- Custom Message --\x3e\n      <div class="message-box">\n        "${escapeHtml(n.message)}"\n      </div>\n      `:""}\n      \n      <p>Click below to accept this invitation and establish a secure connection. No API keys or manual configuration required.</p>\n      \n      \x3c!-- CTA Button --\x3e\n      <div class="cta-container">\n        <a href="${escapeHtml(n.acceptUrl)}" class="cta-button">\n          Accept Invitation\n        </a>\n      </div>\n      \n      \x3c!-- Security Note --\x3e\n      <div class="security-note">\n        <strong>🔒 Secure connection:</strong> This invitation uses cryptographic identity (DID) instead of shared secrets. Your agent will verify the sender's signature before establishing trust.\n      </div>\n    </div>\n    \n    \x3c!-- Footer --\x3e\n    <div class="footer">\n      <div class="tagline">APIs have keys. ACIs have identity.</div>\n      <div class="brand">\n        <strong>private<span style="color: #10B981;">.me</span></strong> • Authenticated Agent Communication\n      </div>\n    </div>\n  </div>\n</body>\n</html>\n  `.trim()}export function renderAcceptedEmail(n){return`\n<!DOCTYPE html>\n<html lang="en">\n<head>\n  <meta charset="UTF-8">\n  <meta name="viewport" content="width=device-width, initial-scale=1.0">\n  <title>Connection Accepted</title>\n  <style>\n    @import url('https://fonts.googleapis.com/css2?family=Outfit:wght@400;600;700&family=DM+Mono:wght@400;500&display=swap');\n    body {\n      margin: 0;\n      padding: 0;\n      font-family: 'Outfit', -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;\n      background-color: #F9FAFB;\n      color: #1F2937;\n    }\n    .container {\n      max-width: 600px;\n      margin: 0 auto;\n      background-color: #FFFFFF;\n    }\n    .header {\n      background: linear-gradient(135deg, #10B981 0%, #059669 100%);\n      padding: 40px 24px;\n      text-align: center;\n      color: #FFFFFF;\n    }\n    .content {\n      padding: 40px 24px;\n    }\n    .success-icon {\n      font-size: 48px;\n      text-align: center;\n      margin-bottom: 16px;\n    }\n    .agent-name {\n      font-weight: 600;\n      color: #10B981;\n    }\n  </style>\n</head>\n<body>\n  <div class="container">\n    <div class="header">\n      <div class="logo">${PRIVACY_MASK_SVG}</div>\n      <h1>Connection Established</h1>\n    </div>\n    <div class="content">\n      <div class="success-icon">✅</div>\n      <p><span class="agent-name">${escapeHtml(n.recipientName)}</span> has accepted your invitation.</p>\n      <p>You can now send authenticated messages to:</p>\n      <div style="font-family: 'DM Mono', monospace; font-size: 12px; color: #6B7280; padding: 16px; background: #F3F4F6; border-radius: 8px; margin: 16px 0;">\n        ${escapeHtml(n.did)}\n      </div>\n      <p style="margin-top: 24px; padding-top: 24px; border-top: 1px solid #E5E7EB; font-size: 14px; color: #6B7280;">\n        APIs have keys. ACIs have identity.\n      </p>\n    </div>\n  </div>\n</body>\n</html>\n  `.trim()}function escapeHtml(n){const e={"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#039;"};return n.replace(/[&<>"']/g,n=>e[n]||n)}
+/**
+ * @module email-templates
+ * Branded HTML email templates for xBind invitations.
+ *
+ * Uses Private.Me brand guidelines:
+ * - Colors: Green #10B981, Ink #1F2937, White #FFFFFF
+ * - Fonts: Outfit (display), DM Mono (code/DIDs)
+ * - Logo: Privacy Mask SVG
+ * - Tagline: "APIs have keys. ACIs have identity."
+ */
+/**
+ * Privacy Mask logo SVG (complete with bottom z-shape).
+ * Per brand guidelines section 02.5.
+ */
+const PRIVACY_MASK_SVG = `
+<svg width="32" height="32" viewBox="0 0 300 600" xmlns="http://www.w3.org/2000/svg">
+  <defs>
+    <linearGradient id="maskGradient" x1="0%" y1="0%" x2="100%" y2="100%">
+      <stop offset="0%" style="stop-color:#10B981;stop-opacity:1" />
+      <stop offset="100%" style="stop-color:#059669;stop-opacity:1" />
+    </linearGradient>
+  </defs>
+  <!-- Top curve -->
+  <path d="M50 100 Q150 50 250 100 L250 300 Q150 350 50 300 Z" fill="url(#maskGradient)"/>
+  <!-- Eye holes -->
+  <ellipse cx="100" cy="180" rx="25" ry="35" fill="#FFFFFF"/>
+  <ellipse cx="200" cy="180" rx="25" ry="35" fill="#FFFFFF"/>
+  <!-- Bottom z-shape -->
+  <path d="M270 575 L230 575 L270 525 L230 525" stroke="#10B981" stroke-width="8" fill="none"/>
+</svg>
+`;
+/**
+ * Render invitation email with branded template.
+ *
+ * @param data - Template data
+ * @returns Rendered HTML email
+ */
+export function renderInviteEmail(data) {
+    return `
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>${escapeHtml(data.agentName)} wants to connect</title>
+  <style>
+    @import url('https://fonts.googleapis.com/css2?family=Outfit:wght@400;600;700&family=DM+Mono:wght@400;500&display=swap');
+    
+    body {
+      margin: 0;
+      padding: 0;
+      font-family: 'Outfit', -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
+      background-color: #F9FAFB;
+      color: #1F2937;
+    }
+    
+    .container {
+      max-width: 600px;
+      margin: 0 auto;
+      background-color: #FFFFFF;
+    }
+    
+    .header {
+      background: linear-gradient(135deg, #10B981 0%, #059669 100%);
+      padding: 40px 24px;
+      text-align: center;
+    }
+    
+    .logo {
+      margin-bottom: 16px;
+    }
+    
+    .header h1 {
+      margin: 0;
+      font-size: 24px;
+      font-weight: 700;
+      color: #FFFFFF;
+      line-height: 1.3;
+    }
+    
+    .content {
+      padding: 40px 24px;
+    }
+    
+    .content p {
+      margin: 0 0 16px 0;
+      font-size: 16px;
+      line-height: 1.6;
+      color: #374151;
+    }
+    
+    .agent-info {
+      background-color: #F3F4F6;
+      border-left: 4px solid #10B981;
+      padding: 16px;
+      margin: 24px 0;
+      border-radius: 4px;
+    }
+    
+    .agent-name {
+      font-size: 18px;
+      font-weight: 600;
+      color: #1F2937;
+      margin-bottom: 8px;
+    }
+    
+    .did {
+      font-family: 'DM Mono', 'Courier New', monospace;
+      font-size: 12px;
+      color: #6B7280;
+      word-break: break-all;
+      line-height: 1.5;
+    }
+    
+    .message-box {
+      background-color: #F9FAFB;
+      border: 1px solid #E5E7EB;
+      padding: 16px;
+      margin: 24px 0;
+      border-radius: 8px;
+      font-style: italic;
+      color: #4B5563;
+    }
+    
+    .cta-container {
+      text-align: center;
+      margin: 32px 0;
+    }
+    
+    .cta-button {
+      display: inline-block;
+      background-color: #10B981;
+      color: #FFFFFF;
+      text-decoration: none;
+      padding: 14px 32px;
+      border-radius: 8px;
+      font-size: 16px;
+      font-weight: 600;
+      transition: background-color 0.2s;
+    }
+    
+    .cta-button:hover {
+      background-color: #059669;
+    }
+    
+    .footer {
+      padding: 24px;
+      text-align: center;
+      border-top: 1px solid #E5E7EB;
+    }
+    
+    .tagline {
+      font-size: 14px;
+      color: #6B7280;
+      margin-bottom: 12px;
+    }
+    
+    .brand {
+      font-size: 12px;
+      color: #9CA3AF;
+    }
+    
+    .security-note {
+      font-size: 13px;
+      color: #6B7280;
+      margin-top: 24px;
+      padding-top: 24px;
+      border-top: 1px solid #E5E7EB;
+    }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <!-- Header -->
+    <div class="header">
+      <div class="logo">${PRIVACY_MASK_SVG}</div>
+      <h1>${escapeHtml(data.agentName)} wants to connect</h1>
+    </div>
+    
+    <!-- Content -->
+    <div class="content">
+      <p>You've been invited to establish an authenticated agent-to-agent connection.</p>
+      
+      <!-- Agent Info -->
+      <div class="agent-info">
+        <div class="agent-name">From: ${escapeHtml(data.agentName)}</div>
+        <div class="did">DID: ${escapeHtml(data.did)}</div>
+      </div>
+      
+      ${data.message ? `
+      <!-- Custom Message -->
+      <div class="message-box">
+        "${escapeHtml(data.message)}"
+      </div>
+      ` : ''}
+      
+      <p>Click below to accept this invitation and establish a secure connection. No API keys or manual configuration required.</p>
+      
+      <!-- CTA Button -->
+      <div class="cta-container">
+        <a href="${escapeHtml(data.acceptUrl)}" class="cta-button">
+          Accept Invitation
+        </a>
+      </div>
+      
+      <!-- Security Note -->
+      <div class="security-note">
+        <strong>🔒 Secure connection:</strong> This invitation uses cryptographic identity (DID) instead of shared secrets. Your agent will verify the sender's signature before establishing trust.
+      </div>
+    </div>
+    
+    <!-- Footer -->
+    <div class="footer">
+      <div class="tagline">APIs have keys. ACIs have identity.</div>
+      <div class="brand">
+        <strong>private<span style="color: #10B981;">.me</span></strong> • Authenticated Agent Communication
+      </div>
+    </div>
+  </div>
+</body>
+</html>
+  `.trim();
+}
+/**
+ * Render connection accepted confirmation email.
+ *
+ * @param data - Template data
+ * @returns Rendered HTML email
+ */
+export function renderAcceptedEmail(data) {
+    return `
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Connection Accepted</title>
+  <style>
+    @import url('https://fonts.googleapis.com/css2?family=Outfit:wght@400;600;700&family=DM+Mono:wght@400;500&display=swap');
+    body {
+      margin: 0;
+      padding: 0;
+      font-family: 'Outfit', -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
+      background-color: #F9FAFB;
+      color: #1F2937;
+    }
+    .container {
+      max-width: 600px;
+      margin: 0 auto;
+      background-color: #FFFFFF;
+    }
+    .header {
+      background: linear-gradient(135deg, #10B981 0%, #059669 100%);
+      padding: 40px 24px;
+      text-align: center;
+      color: #FFFFFF;
+    }
+    .content {
+      padding: 40px 24px;
+    }
+    .success-icon {
+      font-size: 48px;
+      text-align: center;
+      margin-bottom: 16px;
+    }
+    .agent-name {
+      font-weight: 600;
+      color: #10B981;
+    }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <div class="header">
+      <div class="logo">${PRIVACY_MASK_SVG}</div>
+      <h1>Connection Established</h1>
+    </div>
+    <div class="content">
+      <div class="success-icon">✅</div>
+      <p><span class="agent-name">${escapeHtml(data.recipientName)}</span> has accepted your invitation.</p>
+      <p>You can now send authenticated messages to:</p>
+      <div style="font-family: 'DM Mono', monospace; font-size: 12px; color: #6B7280; padding: 16px; background: #F3F4F6; border-radius: 8px; margin: 16px 0;">
+        ${escapeHtml(data.did)}
+      </div>
+      <p style="margin-top: 24px; padding-top: 24px; border-top: 1px solid #E5E7EB; font-size: 14px; color: #6B7280;">
+        APIs have keys. ACIs have identity.
+      </p>
+    </div>
+  </div>
+</body>
+</html>
+  `.trim();
+}
+/**
+ * Escape HTML special characters to prevent injection.
+ *
+ * @param text - Text to escape
+ * @returns Escaped text
+ */
+function escapeHtml(text) {
+    const map = {
+        '&': '&amp;',
+        '<': '&lt;',
+        '>': '&gt;',
+        '"': '&quot;',
+        "'": '&#039;',
+    };
+    return text.replace(/[&<>"']/g, (char) => map[char] || char);
+}