@shware/workflow 0.0.0-stage → 0.0.0

package/dist/cloudflare/worker.mjs

@@ -0,0 +1,224 @@
+import { TemplateValidationError, registryValidator } from "../templates.mjs";
+import { compileConfig } from "../config.mjs";
+import { ContractValidationError, checkEvent } from "../contract.mjs";
+import "../store/tables.mjs";
+import { registryRenderer } from "../react-email.mjs";
+import { handleTracking } from "../reporting/tracking.mjs";
+import { SchemaMismatchError } from "../store/index.mjs";
+import { d1Store } from "./d1-env.mjs";
+import { deployBundle, handleRequest, ingestEvent, sweepSegments } from "./router.mjs";
+import { channelsFromConfig, runtimeFromConfig } from "./channels.mjs";
+import { scaleSegmentWindows } from "../engine/time-scale.mjs";
+import { JourneyRunner } from "./runner.mjs";
+import { reportingObserver } from "../reporting/observer.mjs";
+import * as z from "zod/mini";
+//#region src/cloudflare/worker.ts
+/**
+* A complete journey host in one call: the runner class with the app's store,
+* outlets and runtime plugged in, and the fetch handler that serves the ingest
+* API around them.
+*
+*   const journeys = journeyWorker<Env>({
+*     config,   // workflow.config.ts (defineConfig)
+*     store: (env, database) => postgresJsStore(env.HYPERDRIVE.connectionString, database),
+*   });
+*   export const MyRunner = journeys.Runner;
+*   export default { fetch: journeys.fetch };
+*/
+/** The Worker's environment failed its schema (`journeyWorker({ env })`). */
+var EnvValidationError = class extends Error {
+	issues;
+	name = "EnvValidationError";
+	constructor(issues) {
+		super(`the Worker's environment is invalid:\n  ${issues.join("\n  ")}`);
+		this.issues = issues;
+	}
+};
+function journeyWorker(options) {
+	const { config } = options;
+	const checked = /* @__PURE__ */ new WeakMap();
+	const checkEnv = (env) => {
+		if (options.env === void 0) return env;
+		const cached = checked.get(env);
+		if (cached !== void 0) return cached;
+		const result = z.safeParse(options.env, env);
+		if (!result.success) throw new EnvValidationError(result.error.issues.map((issue) => `${issue.path.join(".") || "(root)"}: ${issue.message}`));
+		const merged = {
+			...env,
+			...result.data
+		};
+		checked.set(env, merged);
+		return merged;
+	};
+	const bundle = () => compileConfig(config);
+	const emails = config.templates?.email;
+	const database = { schema: config.database?.schema ?? "workflow" };
+	const lease = (env) => {
+		const opened = options.store === void 0 ? d1Store(env) : options.store(env, database);
+		const noop = async () => {};
+		const factor = runtimeFromConfig(config, env).timeScale;
+		return "store" in opened ? {
+			store: scaleSegmentWindows(opened.store, factor),
+			close: opened.close ?? noop
+		} : {
+			store: scaleSegmentWindows(opened, factor),
+			close: noop
+		};
+	};
+	class Runner extends JourneyRunner {
+		leases = /* @__PURE__ */ new WeakMap();
+		current;
+		createStore() {
+			const { store, close } = lease(checkEnv(this.env));
+			this.leases.set(store, close);
+			this.current = store;
+			return store;
+		}
+		async closeStore(store) {
+			await this.leases.get(store)?.();
+		}
+		contract() {
+			return config.contract;
+		}
+		createMessageValidator() {
+			return registryValidator(config.templates ?? {});
+		}
+		createMessageSender() {
+			if (this.current === void 0) return super.createMessageSender();
+			if (options.messages !== void 0) return options.messages(checkEnv(this.env), this.current);
+			return channelsFromConfig(config, checkEnv(this.env), { store: this.current });
+		}
+		createObserver(store) {
+			if (options.observer !== void 0) return options.observer(checkEnv(this.env), store);
+			return store.reporting === void 0 ? void 0 : reportingObserver(store.reporting, checkEnv(this.env).WORKFLOW_ORIGIN);
+		}
+		runtime(params) {
+			const env = checkEnv(this.env);
+			if (options.runtime !== void 0) return options.runtime(env, params);
+			return runtimeFromConfig(config, env);
+		}
+		actions() {
+			return config.actions ?? [];
+		}
+	}
+	const json = (body, status = 200) => new Response(JSON.stringify(body), {
+		status,
+		headers: { "content-type": "application/json" }
+	});
+	const authorized = (request, env) => env.API_TOKEN === void 0 || request.headers.get("authorization") === `Bearer ${env.API_TOKEN}`;
+	const preview = emails === void 0 ? void 0 : registryRenderer(emails);
+	const fetch = async (request, rawEnv, ctx) => {
+		let env;
+		try {
+			env = checkEnv(rawEnv);
+		} catch (error) {
+			if (!(error instanceof EnvValidationError)) throw error;
+			console.error(`[workflow] ${error.message}`);
+			return json({ error: error.message }, 500);
+		}
+		const url = new URL(request.url);
+		const { store, close } = lease(env);
+		try {
+			if (url.pathname.startsWith("/t/") && store.reporting !== void 0) {
+				const openedEvent = config.webPush?.openedEvent;
+				const tracked = await handleTracking(request, store.reporting, {
+					unsubscribe: config.emails?.unsubscribe,
+					product: config.title,
+					quickMs: config.emails?.tracking?.quickClickMs,
+					pushOpened: openedEvent === void 0 ? void 0 : async ({ messageId, userId, at }) => {
+						const payload = { message_id: messageId };
+						const contract = config.contract;
+						const verdict = contract === void 0 ? void 0 : checkEvent(contract, openedEvent, payload);
+						if (verdict !== void 0 && !verdict.ok) throw new ContractValidationError(openedEvent, verdict.issues);
+						await ingestEvent(env, {
+							id: `${openedEvent}:${messageId}`,
+							userId,
+							event: openedEvent,
+							payload: verdict?.data ?? payload,
+							ts: at
+						}, store);
+					}
+				});
+				if (tracked !== void 0) return tracked;
+			}
+			if (url.pathname === "/segments/sweep") {
+				if (!authorized(request, env)) return json({ error: "unauthorized" }, 401);
+				if (request.method !== "POST") return json({ error: "method not allowed" }, 405);
+				return json(await sweepSegments(env, store));
+			}
+			if (url.pathname === "/bundle") {
+				if (!authorized(request, env)) return json({ error: "unauthorized" }, 401);
+				if (request.method !== "GET") return json({ error: "method not allowed" }, 405);
+				return json(bundle());
+			}
+			if (url.pathname === "/bundle/deploy") {
+				if (!authorized(request, env)) return json({ error: "unauthorized" }, 401);
+				if (request.method !== "POST") return json({ error: "method not allowed" }, 405);
+				try {
+					return json(await deployBundle(env, bundle(), store));
+				} catch (error) {
+					if (!(error instanceof SchemaMismatchError)) throw error;
+					return json({
+						error: error.message,
+						problems: error.problems
+					}, 503);
+				}
+			}
+			if (emails !== void 0 && preview !== void 0 && url.pathname.startsWith("/preview/")) {
+				if (!authorized(request, env)) return json({ error: "unauthorized" }, 401);
+				if (request.method !== "GET") return json({ error: "method not allowed" }, 405);
+				const key = url.pathname.slice(9);
+				if (!Object.hasOwn(emails, key)) return json({ error: `unknown email template: ${key}` }, 404);
+				let props = {};
+				try {
+					props = JSON.parse(url.searchParams.get("props") ?? "{}");
+				} catch {
+					return json({ error: "props must be a JSON object" }, 400);
+				}
+				if (typeof props !== "object" || props === null || Array.isArray(props)) return json({ error: "props must be a JSON object" }, 400);
+				try {
+					const { subject, html } = await preview(key, props);
+					return new Response(html, { headers: {
+						"content-type": "text/html; charset=utf-8",
+						"x-subject": subject
+					} });
+				} catch (error) {
+					if (error instanceof TemplateValidationError) return json({
+						error: error.message,
+						issues: error.issues
+					}, 400);
+					throw error;
+				}
+			}
+			return await handleRequest(request, env, store, {
+				contract: config.contract,
+				mode: options.contractMode
+			});
+		} finally {
+			if (ctx === void 0) await close();
+			else ctx.waitUntil(close());
+		}
+	};
+	const sweep = async (rawEnv) => {
+		const env = checkEnv(rawEnv);
+		const { store, close } = lease(env);
+		try {
+			return await sweepSegments(env, store);
+		} finally {
+			await close();
+		}
+	};
+	const scheduled = async (_controller, env, ctx) => {
+		ctx.waitUntil(sweep(env));
+	};
+	return {
+		Runner,
+		fetch,
+		sweep,
+		scheduled
+	};
+}
+//#endregion
+export { EnvValidationError, journeyWorker };
+
+//# sourceMappingURL=worker.mjs.map

package/dist/cloudflare/worker.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.mjs","names":[],"sources":["../../src/cloudflare/worker.ts"],"sourcesContent":["import * as z from 'zod/mini';\nimport type * as core from 'zod/v4/core';\nimport { type JourneyConfig, compileConfig } from '../config';\nimport { type Contract, ContractValidationError, checkEvent } from '../contract';\nimport type { RegisteredAction } from '../engine/actions';\nimport type { JourneyObserver, MessageSender, MessageValidator } from '../engine/ports';\nimport { scaleSegmentWindows } from '../engine/time-scale';\nimport type { ScalarIR } from '../ir';\nimport { registryRenderer } from '../react-email';\nimport { reportingObserver } from '../reporting/observer';\nimport { handleTracking } from '../reporting/tracking';\nimport type { JourneyRuntimeOptions } from '../runtime';\nimport { type JourneyStore, SchemaMismatchError, type StoreLease } from '../store/index';\nimport { DEFAULT_SCHEMA } from '../store/tables';\nimport { TemplateValidationError, registryValidator } from '../templates';\nimport type { JourneyEnv, JourneyParams } from './bindings';\nimport { channelsFromConfig, runtimeFromConfig } from './channels';\nimport { d1Store } from './d1-env';\nimport {\n  type SweepResult,\n  deployBundle,\n  handleRequest,\n  ingestEvent,\n  sweepSegments,\n} from './router';\nimport { JourneyRunner } from './runner';\n\n/** The fetch handler's execution context (the subset used). */\nexport interface ExecutionContextLike {\n  waitUntil(promise: Promise<unknown>): void;\n}\n\nexport interface JourneyWorkerOptions<Env extends JourneyEnv> {\n  /**\n   * The project's `workflow.config.ts` (`defineConfig`): what the Worker\n   * deploys (`GET /bundle`, `POST /bundle/deploy` serve `compileConfig`), the\n   * template registries the senders, the validator and `/preview` render from,\n   * the contract every `/events` and `/identify` is checked against, the email\n   * envelope, actions, and the runtime / APNs / FCM settings. Secrets come\n   * from the env under the names `JourneyEnv` documents.\n   */\n  config: JourneyConfig;\n  /**\n   * The data plane, opened per request and per workflow run. Return a\n   * `StoreLease` when the client must be released afterwards (a Postgres\n   * connection); defaults to D1 + KV from the env's bindings. `database` is\n   * the config's (`schema` defaulting to `workflow`), for a Postgres store:\n   *\n   *   store: (env, database) => postgresJsStore(env.HYPERDRIVE.connectionString, database)\n   */\n  store?: (env: Env, database: { schema: string }) => JourneyStore | StoreLease;\n  /**\n   * Reporting hooks: node arrivals, every copy sent (with the tracking it should carry — click\n   * links and an open pixel for email, payload data for a push), and how each instance ended.\n   * By default a store that keeps reporting (Postgres) records them itself, and the Worker\n   * serves the email tracking routes (`/t/...`, on `WORKFLOW_ORIGIN`); override to report\n   * elsewhere.\n   */\n  observer?: (env: Env, store: JourneyStore) => JourneyObserver;\n  /** Message outlet override (tests, a custom gateway); by default the channels the config describes. */\n  messages?: (env: Env, store: JourneyStore) => MessageSender;\n  /** Per-instance runtime options override (a tester in fast-forward); by default `config.runtime` for `ENVIRONMENT`. */\n  runtime?: (env: Env, params: JourneyParams) => JourneyRuntimeOptions;\n  /**\n   * The host's environment, as a zod schema over its vars and secrets (bindings pass through\n   * untouched): checked the first time the Worker runs, so a missing or malformed variable fails\n   * there — every problem listed — not at the send that needs it. Webhook templates read their\n   * URL from the parsed values: `webhook: (env: Env) => env.WEBHOOK_DISCORD_ALERTS`.\n   */\n  env?: core.$ZodType<object>;\n  /** 'enforce' (default) answers an event or patch the contract refuses with a 400; 'report' only logs it. */\n  contractMode?: 'enforce' | 'report';\n}\n\nexport interface JourneyWorker<Env extends JourneyEnv> {\n  /** Export this under the `class_name` of the wrangler `workflows` binding. */\n  Runner: new (...args: never[]) => JourneyRunner;\n  /** The Worker's fetch handler: `/health`, `/events`, `/identify`, `/devices`, `/messages/opened`, `/segments/sweep`, `/t/*` (email tracking), `/deploy`, `/bundle`, `/bundle/deploy` and `/preview/*`. */\n  fetch: (request: Request, env: Env, ctx?: ExecutionContextLike) => Promise<Response>;\n  /**\n   * The segment sweep (`sweepSegments`): membership of every deployed segment for every known\n   * user, the journeys of segments entered by the clock alone (`not(performed(e.login, { within:\n   * '7 days' }))` has no event to ride on), and each segment's size. Also served as\n   * `POST /segments/sweep`.\n   */\n  sweep: (env: Env) => Promise<SweepResult>;\n  /** The cron trigger's handler: runs the sweep. Export it beside `fetch` with a `triggers.crons` entry. */\n  scheduled: (controller: unknown, env: Env, ctx: ExecutionContextLike) => Promise<void>;\n}\n\n/**\n * A complete journey host in one call: the runner class with the app's store,\n * outlets and runtime plugged in, and the fetch handler that serves the ingest\n * API around them.\n *\n *   const journeys = journeyWorker<Env>({\n *     config,   // workflow.config.ts (defineConfig)\n *     store: (env, database) => postgresJsStore(env.HYPERDRIVE.connectionString, database),\n *   });\n *   export const MyRunner = journeys.Runner;\n *   export default { fetch: journeys.fetch };\n */\n/** The Worker's environment failed its schema (`journeyWorker({ env })`). */\nexport class EnvValidationError extends Error {\n  override readonly name = 'EnvValidationError';\n  constructor(readonly issues: readonly string[]) {\n    super(`the Worker's environment is invalid:\\n  ${issues.join('\\n  ')}`);\n  }\n}\n\nexport function journeyWorker<Env extends JourneyEnv>(\n  options: JourneyWorkerOptions<Env>\n): JourneyWorker<Env> {\n  const { config } = options;\n  // Parsed once per env object: the runtime hands the same one to every request of an isolate\n  const checked = new WeakMap<object, Env>();\n  const checkEnv = (env: Env): Env => {\n    if (options.env === undefined) return env;\n    const cached = checked.get(env);\n    if (cached !== undefined) return cached;\n    const result = z.safeParse(options.env, env);\n    if (!result.success) {\n      // Names and reasons only: the values are secrets\n      throw new EnvValidationError(\n        result.error.issues.map((issue) => `${issue.path.join('.') || '(root)'}: ${issue.message}`)\n      );\n    }\n    const merged: Env = { ...env, ...result.data };\n    checked.set(env, merged);\n    return merged;\n  };\n  const bundle = () => compileConfig(config);\n  const emails = config.templates?.email;\n  const database = { schema: config.database?.schema ?? DEFAULT_SCHEMA };\n  // In fast-forward, segment windows scale with the journeys reading them (time-scale.ts)\n  const lease = (env: Env): Required<StoreLease> => {\n    const opened = options.store === undefined ? d1Store(env) : options.store(env, database);\n    const noop = async () => {};\n    const factor = runtimeFromConfig(config, env).timeScale;\n    return 'store' in opened\n      ? { store: scaleSegmentWindows(opened.store, factor), close: opened.close ?? noop }\n      : { store: scaleSegmentWindows(opened, factor), close: noop };\n  };\n\n  class Runner extends JourneyRunner {\n    private readonly leases = new WeakMap<JourneyStore, () => Promise<void>>();\n    private current: JourneyStore | undefined;\n\n    protected override createStore(): JourneyStore {\n      // A run fails at its start on an invalid environment, not at the send that needs it\n      const { store, close } = lease(checkEnv(this.env as Env));\n      this.leases.set(store, close);\n      this.current = store;\n      return store;\n    }\n\n    protected override async closeStore(store: JourneyStore): Promise<void> {\n      await this.leases.get(store)?.();\n    }\n\n    protected override contract(): Contract | undefined {\n      return config.contract;\n    }\n\n    protected override createMessageValidator(): MessageValidator {\n      return registryValidator(config.templates ?? {});\n    }\n\n    protected override createMessageSender(): MessageSender {\n      if (this.current === undefined) return super.createMessageSender();\n      if (options.messages !== undefined) {\n        return options.messages(checkEnv(this.env as Env), this.current);\n      }\n      return channelsFromConfig(config, checkEnv(this.env as Env), { store: this.current });\n    }\n\n    protected override createObserver(store: JourneyStore): JourneyObserver | undefined {\n      if (options.observer !== undefined) return options.observer(checkEnv(this.env as Env), store);\n      return store.reporting === undefined\n        ? undefined\n        : reportingObserver(store.reporting, checkEnv(this.env as Env).WORKFLOW_ORIGIN);\n    }\n\n    protected override runtime(params: JourneyParams): JourneyRuntimeOptions {\n      const env = checkEnv(this.env as Env);\n      if (options.runtime !== undefined) return options.runtime(env, params);\n      return runtimeFromConfig(config, env);\n    }\n\n    protected override actions(): readonly RegisteredAction[] {\n      // An action ref is a registered action structurally: the same object carries name, code and hash\n      return config.actions ?? [];\n    }\n  }\n\n  const json = (body: unknown, status = 200): Response =>\n    new Response(JSON.stringify(body), {\n      status,\n      headers: { 'content-type': 'application/json' },\n    });\n\n  const authorized = (request: Request, env: Env): boolean =>\n    env.API_TOKEN === undefined ||\n    request.headers.get('authorization') === `Bearer ${env.API_TOKEN}`;\n\n  const preview = emails === undefined ? undefined : registryRenderer(emails);\n\n  const fetch = async (request: Request, rawEnv: Env, ctx?: ExecutionContextLike) => {\n    // Everything below reads the validated environment (the schema's defaults applied)\n    let env: Env;\n    try {\n      env = checkEnv(rawEnv);\n    } catch (error) {\n      if (!(error instanceof EnvValidationError)) throw error;\n      console.error(`[workflow] ${error.message}`);\n      return json({ error: error.message }, 500);\n    }\n    const url = new URL(request.url);\n    const { store, close } = lease(env);\n    try {\n      // Opened by recipients, so no bearer: the routes only record, and redirect to recorded URLs\n      if (url.pathname.startsWith('/t/') && store.reporting !== undefined) {\n        const openedEvent = config.webPush?.openedEvent;\n        const tracked = await handleTracking(request, store.reporting, {\n          unsubscribe: config.emails?.unsubscribe,\n          product: config.title,\n          quickMs: config.emails?.tracking?.quickClickMs,\n          pushOpened:\n            openedEvent === undefined\n              ? undefined\n              : async ({ messageId, userId, at }) => {\n                  const payload: Record<string, unknown> = { message_id: messageId };\n                  const contract = config.contract;\n                  const verdict =\n                    contract === undefined ? undefined : checkEvent(contract, openedEvent, payload);\n                  if (verdict !== undefined && !verdict.ok) {\n                    throw new ContractValidationError(openedEvent, verdict.issues);\n                  }\n                  // Keyed by the copy: a second tap of the same notification is the same event\n                  await ingestEvent(\n                    env,\n                    {\n                      id: `${openedEvent}:${messageId}`,\n                      userId,\n                      event: openedEvent,\n                      payload: verdict?.data ?? payload,\n                      ts: at,\n                    },\n                    store\n                  );\n                },\n        });\n        if (tracked !== undefined) return tracked;\n      }\n      if (url.pathname === '/segments/sweep') {\n        if (!authorized(request, env)) return json({ error: 'unauthorized' }, 401);\n        if (request.method !== 'POST') return json({ error: 'method not allowed' }, 405);\n        return json(await sweepSegments(env, store));\n      }\n      if (url.pathname === '/bundle') {\n        if (!authorized(request, env)) return json({ error: 'unauthorized' }, 401);\n        if (request.method !== 'GET') return json({ error: 'method not allowed' }, 405);\n        return json(bundle());\n      }\n      if (url.pathname === '/bundle/deploy') {\n        if (!authorized(request, env)) return json({ error: 'unauthorized' }, 401);\n        if (request.method !== 'POST') return json({ error: 'method not allowed' }, 405);\n        try {\n          return json(await deployBundle(env, bundle(), store));\n        } catch (error) {\n          if (!(error instanceof SchemaMismatchError)) throw error;\n          return json({ error: error.message, problems: error.problems }, 503);\n        }\n      }\n      if (emails !== undefined && preview !== undefined && url.pathname.startsWith('/preview/')) {\n        if (!authorized(request, env)) return json({ error: 'unauthorized' }, 401);\n        if (request.method !== 'GET') return json({ error: 'method not allowed' }, 405);\n        const key = url.pathname.slice('/preview/'.length);\n        if (!Object.hasOwn(emails, key))\n          return json({ error: `unknown email template: ${key}` }, 404);\n        // `?props=<JSON object>`: JSON keeps numbers and booleans typed, which query strings cannot\n        let props: unknown = {};\n        try {\n          props = JSON.parse(url.searchParams.get('props') ?? '{}');\n        } catch {\n          return json({ error: 'props must be a JSON object' }, 400);\n        }\n        if (typeof props !== 'object' || props === null || Array.isArray(props)) {\n          return json({ error: 'props must be a JSON object' }, 400);\n        }\n        try {\n          const { subject, html } = await preview(key, props as Record<string, ScalarIR>);\n          return new Response(html, {\n            headers: { 'content-type': 'text/html; charset=utf-8', 'x-subject': subject },\n          });\n        } catch (error) {\n          // The query string is the props: a refusal is the caller's to fix, with the field paths\n          if (error instanceof TemplateValidationError) {\n            return json({ error: error.message, issues: error.issues }, 400);\n          }\n          throw error;\n        }\n      }\n      return await handleRequest(request, env, store, {\n        contract: config.contract,\n        mode: options.contractMode,\n      });\n    } finally {\n      // After the response when the runtime offers waitUntil, inline otherwise (tests).\n      if (ctx === undefined) await close();\n      else ctx.waitUntil(close());\n    }\n  };\n\n  const sweep = async (rawEnv: Env) => {\n    const env = checkEnv(rawEnv);\n    const { store, close } = lease(env);\n    try {\n      return await sweepSegments(env, store);\n    } finally {\n      await close();\n    }\n  };\n\n  const scheduled = async (_controller: unknown, env: Env, ctx: ExecutionContextLike) => {\n    ctx.waitUntil(sweep(env));\n  };\n\n  return { Runner, fetch, sweep, scheduled };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuGA,IAAa,qBAAb,cAAwC,MAAM;CAEvB;CADrB,OAAyB;CACzB,YAAY,QAAoC;EAC9C,MAAM,2CAA2C,OAAO,KAAK,MAAM,GAAG;EADnD,KAAA,SAAA;CAErB;AACF;AAEA,SAAgB,cACd,SACoB;CACpB,MAAM,EAAE,WAAW;CAEnB,MAAM,0BAAU,IAAI,QAAqB;CACzC,MAAM,YAAY,QAAkB;EAClC,IAAI,QAAQ,QAAQ,KAAA,GAAW,OAAO;EACtC,MAAM,SAAS,QAAQ,IAAI,GAAG;EAC9B,IAAI,WAAW,KAAA,GAAW,OAAO;EACjC,MAAM,SAAS,EAAE,UAAU,QAAQ,KAAK,GAAG;EAC3C,IAAI,CAAC,OAAO,SAEV,MAAM,IAAI,mBACR,OAAO,MAAM,OAAO,KAAK,UAAU,GAAG,MAAM,KAAK,KAAK,GAAG,KAAK,SAAS,IAAI,MAAM,SAAS,CAC5F;EAEF,MAAM,SAAc;GAAE,GAAG;GAAK,GAAG,OAAO;EAAK;EAC7C,QAAQ,IAAI,KAAK,MAAM;EACvB,OAAO;CACT;CACA,MAAM,eAAe,cAAc,MAAM;CACzC,MAAM,SAAS,OAAO,WAAW;CACjC,MAAM,WAAW,EAAE,QAAQ,OAAO,UAAU,UAAA,WAAyB;CAErE,MAAM,SAAS,QAAmC;EAChD,MAAM,SAAS,QAAQ,UAAU,KAAA,IAAY,QAAQ,GAAG,IAAI,QAAQ,MAAM,KAAK,QAAQ;EACvF,MAAM,OAAO,YAAY,CAAC;EAC1B,MAAM,SAAS,kBAAkB,QAAQ,GAAG,CAAC,CAAC;EAC9C,OAAO,WAAW,SACd;GAAE,OAAO,oBAAoB,OAAO,OAAO,MAAM;GAAG,OAAO,OAAO,SAAS;EAAK,IAChF;GAAE,OAAO,oBAAoB,QAAQ,MAAM;GAAG,OAAO;EAAK;CAChE;CAEA,MAAM,eAAe,cAAc;EACjC,yBAA0B,IAAI,QAA2C;EACzE;EAEA,cAA+C;GAE7C,MAAM,EAAE,OAAO,UAAU,MAAM,SAAS,KAAK,GAAU,CAAC;GACxD,KAAK,OAAO,IAAI,OAAO,KAAK;GAC5B,KAAK,UAAU;GACf,OAAO;EACT;EAEA,MAAyB,WAAW,OAAoC;GACtE,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG;EACjC;EAEA,WAAoD;GAClD,OAAO,OAAO;EAChB;EAEA,yBAA8D;GAC5D,OAAO,kBAAkB,OAAO,aAAa,CAAC,CAAC;EACjD;EAEA,sBAAwD;GACtD,IAAI,KAAK,YAAY,KAAA,GAAW,OAAO,MAAM,oBAAoB;GACjE,IAAI,QAAQ,aAAa,KAAA,GACvB,OAAO,QAAQ,SAAS,SAAS,KAAK,GAAU,GAAG,KAAK,OAAO;GAEjE,OAAO,mBAAmB,QAAQ,SAAS,KAAK,GAAU,GAAG,EAAE,OAAO,KAAK,QAAQ,CAAC;EACtF;EAEA,eAAkC,OAAkD;GAClF,IAAI,QAAQ,aAAa,KAAA,GAAW,OAAO,QAAQ,SAAS,SAAS,KAAK,GAAU,GAAG,KAAK;GAC5F,OAAO,MAAM,cAAc,KAAA,IACvB,KAAA,IACA,kBAAkB,MAAM,WAAW,SAAS,KAAK,GAAU,CAAC,CAAC,eAAe;EAClF;EAEA,QAA2B,QAA8C;GACvE,MAAM,MAAM,SAAS,KAAK,GAAU;GACpC,IAAI,QAAQ,YAAY,KAAA,GAAW,OAAO,QAAQ,QAAQ,KAAK,MAAM;GACrE,OAAO,kBAAkB,QAAQ,GAAG;EACtC;EAEA,UAA0D;GAExD,OAAO,OAAO,WAAW,CAAC;EAC5B;CACF;CAEA,MAAM,QAAQ,MAAe,SAAS,QACpC,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;EACjC;EACA,SAAS,EAAE,gBAAgB,mBAAmB;CAChD,CAAC;CAEH,MAAM,cAAc,SAAkB,QACpC,IAAI,cAAc,KAAA,KAClB,QAAQ,QAAQ,IAAI,eAAe,MAAM,UAAU,IAAI;CAEzD,MAAM,UAAU,WAAW,KAAA,IAAY,KAAA,IAAY,iBAAiB,MAAM;CAE1E,MAAM,QAAQ,OAAO,SAAkB,QAAa,QAA+B;EAEjF,IAAI;EACJ,IAAI;GACF,MAAM,SAAS,MAAM;EACvB,SAAS,OAAO;GACd,IAAI,EAAE,iBAAiB,qBAAqB,MAAM;GAClD,QAAQ,MAAM,cAAc,MAAM,SAAS;GAC3C,OAAO,KAAK,EAAE,OAAO,MAAM,QAAQ,GAAG,GAAG;EAC3C;EACA,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;EAC/B,MAAM,EAAE,OAAO,UAAU,MAAM,GAAG;EAClC,IAAI;GAEF,IAAI,IAAI,SAAS,WAAW,KAAK,KAAK,MAAM,cAAc,KAAA,GAAW;IACnE,MAAM,cAAc,OAAO,SAAS;IACpC,MAAM,UAAU,MAAM,eAAe,SAAS,MAAM,WAAW;KAC7D,aAAa,OAAO,QAAQ;KAC5B,SAAS,OAAO;KAChB,SAAS,OAAO,QAAQ,UAAU;KAClC,YACE,gBAAgB,KAAA,IACZ,KAAA,IACA,OAAO,EAAE,WAAW,QAAQ,SAAS;MACnC,MAAM,UAAmC,EAAE,YAAY,UAAU;MACjE,MAAM,WAAW,OAAO;MACxB,MAAM,UACJ,aAAa,KAAA,IAAY,KAAA,IAAY,WAAW,UAAU,aAAa,OAAO;MAChF,IAAI,YAAY,KAAA,KAAa,CAAC,QAAQ,IACpC,MAAM,IAAI,wBAAwB,aAAa,QAAQ,MAAM;MAG/D,MAAM,YACJ,KACA;OACE,IAAI,GAAG,YAAY,GAAG;OACtB;OACA,OAAO;OACP,SAAS,SAAS,QAAQ;OAC1B,IAAI;MACN,GACA,KACF;KACF;IACR,CAAC;IACD,IAAI,YAAY,KAAA,GAAW,OAAO;GACpC;GACA,IAAI,IAAI,aAAa,mBAAmB;IACtC,IAAI,CAAC,WAAW,SAAS,GAAG,GAAG,OAAO,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;IACzE,IAAI,QAAQ,WAAW,QAAQ,OAAO,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;IAC/E,OAAO,KAAK,MAAM,cAAc,KAAK,KAAK,CAAC;GAC7C;GACA,IAAI,IAAI,aAAa,WAAW;IAC9B,IAAI,CAAC,WAAW,SAAS,GAAG,GAAG,OAAO,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;IACzE,IAAI,QAAQ,WAAW,OAAO,OAAO,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;IAC9E,OAAO,KAAK,OAAO,CAAC;GACtB;GACA,IAAI,IAAI,aAAa,kBAAkB;IACrC,IAAI,CAAC,WAAW,SAAS,GAAG,GAAG,OAAO,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;IACzE,IAAI,QAAQ,WAAW,QAAQ,OAAO,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;IAC/E,IAAI;KACF,OAAO,KAAK,MAAM,aAAa,KAAK,OAAO,GAAG,KAAK,CAAC;IACtD,SAAS,OAAO;KACd,IAAI,EAAE,iBAAiB,sBAAsB,MAAM;KACnD,OAAO,KAAK;MAAE,OAAO,MAAM;MAAS,UAAU,MAAM;KAAS,GAAG,GAAG;IACrE;GACF;GACA,IAAI,WAAW,KAAA,KAAa,YAAY,KAAA,KAAa,IAAI,SAAS,WAAW,WAAW,GAAG;IACzF,IAAI,CAAC,WAAW,SAAS,GAAG,GAAG,OAAO,KAAK,EAAE,OAAO,eAAe,GAAG,GAAG;IACzE,IAAI,QAAQ,WAAW,OAAO,OAAO,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;IAC9E,MAAM,MAAM,IAAI,SAAS,MAAM,CAAkB;IACjD,IAAI,CAAC,OAAO,OAAO,QAAQ,GAAG,GAC5B,OAAO,KAAK,EAAE,OAAO,2BAA2B,MAAM,GAAG,GAAG;IAE9D,IAAI,QAAiB,CAAC;IACtB,IAAI;KACF,QAAQ,KAAK,MAAM,IAAI,aAAa,IAAI,OAAO,KAAK,IAAI;IAC1D,QAAQ;KACN,OAAO,KAAK,EAAE,OAAO,8BAA8B,GAAG,GAAG;IAC3D;IACA,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GACpE,OAAO,KAAK,EAAE,OAAO,8BAA8B,GAAG,GAAG;IAE3D,IAAI;KACF,MAAM,EAAE,SAAS,SAAS,MAAM,QAAQ,KAAK,KAAiC;KAC9E,OAAO,IAAI,SAAS,MAAM,EACxB,SAAS;MAAE,gBAAgB;MAA4B,aAAa;KAAQ,EAC9E,CAAC;IACH,SAAS,OAAO;KAEd,IAAI,iBAAiB,yBACnB,OAAO,KAAK;MAAE,OAAO,MAAM;MAAS,QAAQ,MAAM;KAAO,GAAG,GAAG;KAEjE,MAAM;IACR;GACF;GACA,OAAO,MAAM,cAAc,SAAS,KAAK,OAAO;IAC9C,UAAU,OAAO;IACjB,MAAM,QAAQ;GAChB,CAAC;EACH,UAAU;GAER,IAAI,QAAQ,KAAA,GAAW,MAAM,MAAM;QAC9B,IAAI,UAAU,MAAM,CAAC;EAC5B;CACF;CAEA,MAAM,QAAQ,OAAO,WAAgB;EACnC,MAAM,MAAM,SAAS,MAAM;EAC3B,MAAM,EAAE,OAAO,UAAU,MAAM,GAAG;EAClC,IAAI;GACF,OAAO,MAAM,cAAc,KAAK,KAAK;EACvC,UAAU;GACR,MAAM,MAAM;EACd;CACF;CAEA,MAAM,YAAY,OAAO,aAAsB,KAAU,QAA8B;EACrF,IAAI,UAAU,MAAM,GAAG,CAAC;CAC1B;CAEA,OAAO;EAAE;EAAQ;EAAO;EAAO;CAAU;AAC3C"}

package/dist/cloudflare/workers.d.cts

@@ -0,0 +1,44 @@
+//#region src/cloudflare/workers.d.ts
+/**
+ * Minimal ambient declaration for cloudflare:workers — only the surface
+ * JourneyRunner actually uses. @cloudflare/workers-types is avoided because its
+ * global types clash with react/DOM. Shapes follow the official API:
+ * https://developers.cloudflare.com/workflows/build/workers-api/
+ */
+declare module 'cloudflare:workers' {
+  export interface WorkflowEvent<Params = unknown> {
+    payload: Readonly<Params>;
+    timestamp: Date;
+    instanceId: string;
+  }
+  export interface WorkflowStepEvent<Payload = unknown> {
+    payload: Payload;
+    timestamp: Date;
+    type: string;
+  }
+  export interface WorkflowStep {
+    do<T>(name: string, callback: () => Promise<T>): Promise<T>;
+    sleep(name: string, durationMs: number | string): Promise<void>;
+    sleepUntil(name: string, timestamp: Date | number): Promise<void>;
+    waitForEvent<Payload = unknown>(name: string, options: {
+      type: string;
+      timeout?: number | string;
+    }): Promise<WorkflowStepEvent<Payload>>;
+  }
+  export abstract class WorkflowEntrypoint<Env = unknown, Params = unknown> {
+    /** The runtime constructs it with the execution context and the bindings. */
+    constructor(ctx: unknown, env: Env);
+    protected readonly ctx: unknown;
+    protected readonly env: Env;
+    abstract run(event: WorkflowEvent<Params>, step: WorkflowStep): Promise<unknown>;
+  }
+}
+/** The one export of cloudflare:workflows the runner uses: an error that ends the step without retries. */
+declare module 'cloudflare:workflows' {
+  export class NonRetryableError extends Error {
+    constructor(message: string, name?: string);
+  }
+}
+//#endregion
+export {};
+//# sourceMappingURL=workers.d.cts.map

package/dist/cloudflare/workers.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workers.d.cts","names":[],"sources":["../../src/cloudflare/workers.d.ts"],"mappings":";;;;;;;;mBAOmB,cAAc;IAC7B,SAAS,SAAS;IAClB,WAAW;IACX;;mBAGe,kBAAkB;IACjC,SAAS;IACT,WAAW;IACX;;mBAGe;IACf,GAAG,GAAG,cAAc,gBAAgB,QAAQ,KAAK,QAAQ;IACzD,MAAM,cAAc,8BAA8B;IAClD,WAAW,cAAc,WAAW,gBAAgB;IACpD,aAAa,mBACX,cACA;MAAW;MAAc;QACxB,QAAQ,kBAAkB;;wBAGT,mBAAmB,eAAe;;IAEtD,YAAY,cAAc,KAAK;uBACZ;uBACA,KAAK;aACf,IAAI,OAAO,cAAc,SAAS,MAAM,eAAe;;;;;eAMrD,0BAA0B;IACrC,YAAY,iBAAiB"}

package/dist/cloudflare/workers.d.mts

@@ -0,0 +1,44 @@
+//#region src/cloudflare/workers.d.ts
+/**
+ * Minimal ambient declaration for cloudflare:workers — only the surface
+ * JourneyRunner actually uses. @cloudflare/workers-types is avoided because its
+ * global types clash with react/DOM. Shapes follow the official API:
+ * https://developers.cloudflare.com/workflows/build/workers-api/
+ */
+declare module 'cloudflare:workers' {
+  export interface WorkflowEvent<Params = unknown> {
+    payload: Readonly<Params>;
+    timestamp: Date;
+    instanceId: string;
+  }
+  export interface WorkflowStepEvent<Payload = unknown> {
+    payload: Payload;
+    timestamp: Date;
+    type: string;
+  }
+  export interface WorkflowStep {
+    do<T>(name: string, callback: () => Promise<T>): Promise<T>;
+    sleep(name: string, durationMs: number | string): Promise<void>;
+    sleepUntil(name: string, timestamp: Date | number): Promise<void>;
+    waitForEvent<Payload = unknown>(name: string, options: {
+      type: string;
+      timeout?: number | string;
+    }): Promise<WorkflowStepEvent<Payload>>;
+  }
+  export abstract class WorkflowEntrypoint<Env = unknown, Params = unknown> {
+    /** The runtime constructs it with the execution context and the bindings. */
+    constructor(ctx: unknown, env: Env);
+    protected readonly ctx: unknown;
+    protected readonly env: Env;
+    abstract run(event: WorkflowEvent<Params>, step: WorkflowStep): Promise<unknown>;
+  }
+}
+/** The one export of cloudflare:workflows the runner uses: an error that ends the step without retries. */
+declare module 'cloudflare:workflows' {
+  export class NonRetryableError extends Error {
+    constructor(message: string, name?: string);
+  }
+}
+//#endregion
+export {};
+//# sourceMappingURL=workers.d.mts.map

package/dist/cloudflare/workers.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workers.d.mts","names":[],"sources":["../../src/cloudflare/workers.d.ts"],"mappings":";;;;;;;;mBAOmB,cAAc;IAC7B,SAAS,SAAS;IAClB,WAAW;IACX;;mBAGe,kBAAkB;IACjC,SAAS;IACT,WAAW;IACX;;mBAGe;IACf,GAAG,GAAG,cAAc,gBAAgB,QAAQ,KAAK,QAAQ;IACzD,MAAM,cAAc,8BAA8B;IAClD,WAAW,cAAc,WAAW,gBAAgB;IACpD,aAAa,mBACX,cACA;MAAW;MAAc;QACxB,QAAQ,kBAAkB;;wBAGT,mBAAmB,eAAe;;IAEtD,YAAY,cAAc,KAAK;uBACZ;uBACA,KAAK;aACf,IAAI,OAAO,cAAc,SAAS,MAAM,eAAe;;;;;eAMrD,0BAA0B;IACrC,YAAY,iBAAiB"}

package/dist/config.cjs

@@ -0,0 +1,151 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_runtime = require("./_virtual/_rolldown/runtime.cjs");
+const require_dsl_template = require("./dsl/template.cjs");
+const require_dsl_bundle = require("./dsl/bundle.cjs");
+require("./dsl/index.cjs");
+let zod_mini = require("zod/mini");
+zod_mini = require_runtime.__toESM(zod_mini, 1);
+//#region src/config.ts
+/** `Name <email>`, or the bare address. */
+function formatEmailAddress(address) {
+	if (typeof address === "string") return address;
+	return address.name === void 0 ? address.email : `${address.name} <${address.email}>`;
+}
+function defineConfig(definition) {
+	return {
+		kind: "journey-config",
+		...definition
+	};
+}
+function isConfig(value) {
+	return typeof value === "object" && value !== null && value.kind === "journey-config";
+}
+/** The APNs environment for `mode`: the configured one, else production only for production. */
+function apnsEnvironment(config, mode) {
+	return config.environment?.[mode] ?? (mode === "production" ? "production" : "sandbox");
+}
+/** A message node the config's registries cannot serve, or whose literal props its template refuses. */
+var ConfigCompileError = class extends Error {
+	name = "ConfigCompileError";
+};
+/**
+* Compile the config: the bundle `compileBundle` would produce, with the
+* template manifest generated from the registries (every registered template,
+* not a hand-kept list), after checking every message node against them —
+* an unregistered or cross-channel template reference fails with the workflow,
+* node and channel named, and so does a literal prop the template's schema
+* refuses (a missing required prop, an undeclared one, a wrong literal).
+* User-property references cannot be parsed here (their values exist only at
+* send time) — they are checked by name only, and parsed before sending.
+*/
+function compileConfig(config) {
+	const registered = (channel) => Object.keys(registryOf(config, channel) ?? {});
+	const bundle = require_dsl_bundle.compileBundle({
+		workflows: config.workflows,
+		...config.segments === void 0 ? {} : { segments: config.segments },
+		...config.actions === void 0 ? {} : { actions: config.actions },
+		templates: [
+			...registered("email").map((key) => require_dsl_template.template.email(key)),
+			...registered("push").map((key) => require_dsl_template.template.push(key)),
+			...registered("discord").map((key) => require_dsl_template.template.discord(key)),
+			...registered("slack").map((key) => require_dsl_template.template.slack(key))
+		]
+	});
+	for (const workflow of bundle.workflows) checkMessages(workflow, workflow.flow, config);
+	return bundle;
+}
+const TEMPLATE_CHANNELS = [
+	"email",
+	"push",
+	"discord",
+	"slack"
+];
+/** The config's registry for a channel; undefined for a channel templates cannot be declared for. */
+function registryOf(config, channel) {
+	switch (channel) {
+		case "email": return config.templates?.email;
+		case "push": return config.templates?.push;
+		case "discord": return config.templates?.discord;
+		case "slack": return config.templates?.slack;
+		default: return;
+	}
+}
+/** A field that may be left out: optional, or with a default the schema fills in. */
+function canBeOmitted(schema) {
+	const type = schema._zod.def.type;
+	return type === "optional" || type === "default" || type === "prefault";
+}
+function checkMessages(workflow, nodes, config) {
+	for (const node of nodes) switch (node.type) {
+		case "message":
+			checkMessage(workflow, node, config);
+			break;
+		case "send_event":
+			checkEmit(workflow, node, config);
+			break;
+		case "branch":
+			for (const c of node.cases) checkMessages(workflow, c.flow, config);
+			if (node.otherwise) checkMessages(workflow, node.otherwise, config);
+			break;
+		case "cohort":
+			for (const arm of node.arms) checkMessages(workflow, arm.flow, config);
+			break;
+		case "wait_until": if (Array.isArray(node.onTimeout)) checkMessages(workflow, node.onTimeout, config);
+	}
+}
+function checkMessage(workflow, node, config) {
+	const where = `workflow '${workflow.id}' node ${node.id}`;
+	const registry = registryOf(config, node.channel);
+	if (registry === void 0 && !TEMPLATE_CHANNELS.includes(node.channel)) return;
+	if (registry === void 0 || !Object.hasOwn(registry, node.template)) {
+		const other = TEMPLATE_CHANNELS.find((channel) => channel !== node.channel && Object.hasOwn(registryOf(config, channel) ?? {}, node.template));
+		const hint = other === void 0 ? "" : ` (it is registered as a ${other} template)`;
+		throw new ConfigCompileError(`${where}: ${node.channel} template '${node.template}' is not registered${hint}`);
+	}
+	const shape = registry[node.template].props._zod.def.shape;
+	const problems = [];
+	for (const [field, value] of Object.entries(node.props)) {
+		if (!Object.hasOwn(shape, field)) {
+			problems.push(`'${field}' is not a prop of the template`);
+			continue;
+		}
+		if (typeof value === "object" && value !== null && "type" in value) {
+			const profile = config.contract?.schemas.profile._zod.def;
+			if (profile !== void 0 && value.path !== "userId" && !Object.hasOwn(profile.shape, value.path)) problems.push(`'${field}' reads u.${value.path}, which the contract's profile does not declare`);
+			continue;
+		}
+		if (!zod_mini.safeParse(shape[field], value).success) problems.push(`'${field}' = ${JSON.stringify(value)} is refused by the schema`);
+	}
+	for (const [field, schema] of Object.entries(shape)) if (!canBeOmitted(schema) && !Object.hasOwn(node.props, field)) problems.push(`required prop '${field}' is missing`);
+	if (problems.length > 0) throw new ConfigCompileError(`${where}: ${node.channel} '${node.template}': ${problems.join("; ")}`);
+}
+/**
+* An emitted event against the contract, as far as compile time can see: the
+* event is declared, literal payload values parse against their field, and no
+* required field is missing. Values read from the profile are checked when the
+* event is emitted, by the same contract.
+*/
+function checkEmit(workflow, node, config) {
+	const contract = config.contract;
+	if (contract === void 0) return;
+	const where = `workflow '${workflow.id}' node ${node.id}`;
+	if (!contract.isEvent(node.event)) throw new ConfigCompileError(`${where}: emits '${String(node.event)}', which is not in the contract`);
+	const shape = contract.schemas.events[node.event]._zod.def.shape;
+	const problems = [];
+	for (const [field, value] of Object.entries(node.payload)) {
+		if (typeof value === "object" && value !== null && "type" in value) continue;
+		if (!Object.hasOwn(shape, field)) continue;
+		if (!zod_mini.safeParse(shape[field], value).success) problems.push(`'${field}' = ${JSON.stringify(value)} is refused by the contract`);
+	}
+	for (const [field, fieldSchema] of Object.entries(shape)) if (!canBeOmitted(fieldSchema) && !Object.hasOwn(node.payload, field)) problems.push(`required field '${field}' is missing`);
+	if (problems.length > 0) throw new ConfigCompileError(`${where}: event '${node.event}': ${problems.join("; ")}`);
+}
+//#endregion
+exports.ConfigCompileError = ConfigCompileError;
+exports.apnsEnvironment = apnsEnvironment;
+exports.compileConfig = compileConfig;
+exports.defineConfig = defineConfig;
+exports.formatEmailAddress = formatEmailAddress;
+exports.isConfig = isConfig;
+
+//# sourceMappingURL=config.cjs.map

package/dist/config.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.cjs","names":["compileBundle","template","z"],"sources":["../src/config.ts"],"sourcesContent":["import * as z from 'zod/mini';\nimport type * as core from 'zod/v4/core';\nimport type { Contract } from './contract';\nimport {\n  type ActionRef,\n  type SegmentRef,\n  type TemplateRegistry,\n  type WorkflowBuilder,\n  compileBundle,\n  template,\n} from './dsl';\nimport type { BundleIR, ChannelIR, NodeIR, WorkflowIR } from './ir';\nimport type { JourneyMode, JourneyRuntimeConfig } from './runtime';\nimport type { EmailTemplate, PropsSchema, PushTemplate } from './templates';\n\n/**\n * `workflow.config.ts` — the project's journey configuration, typed, flat and\n * committed with the code: what it deploys (workflows, segments, actions),\n * the template registries behind them, the contract every inbound event is\n * checked against, the email envelope, and how the engine runs per\n * environment (time scale, APNs, FCM). The compiler (`compileConfig`), the\n * Worker (`journeyWorker({ config })`) and the Workflow Studio all read this\n * one object, so everything is registered exactly once:\n *\n *   export default defineConfig({\n *     title: 'Workflow Studio · Acme',\n *     contract,\n *     workflows: [onboarding, notificationTest],\n *     templates: registry, // { email, push }; `t = templates(registry)` for the workflows\n *     emails: { from: { email: 'noreply@acme.test', name: 'Acme' } },\n *     runtime: { development: { timeScale: 600, logMessages: true } },\n *     apns: { topic: 'io.acme.app', keyId: 'ABC123DEFG', teamId: 'TEAM123456' },\n *   });\n *\n * Secrets are the one thing that stay out: a `.p8`, a service account, the\n * ingest bearer. The host reads them from its environment under fixed names\n * (see `JourneyEnv`), so the config says *which* key without carrying it. The\n * config is a source object (schemas, components, functions); only its\n * compiled bundle and preview-safe template data may cross to a browser.\n */\n\n/** An address as the transports take it: bare, or with a display name. */\nexport type EmailAddress = string | { email: string; name?: string };\n\n/** `Name <email>`, or the bare address. */\nexport function formatEmailAddress(address: EmailAddress): string {\n  if (typeof address === 'string') return address;\n  return address.name === undefined ? address.email : `${address.name} <${address.email}>`;\n}\n\n/** The envelope every journey email goes out with (and the studio shows). */\nexport interface EmailConfig {\n  from: EmailAddress;\n  replyTo?: EmailAddress;\n  /**\n   * The unsubscribe link the templates' footer carries. Tracked like every link, but following\n   * it shows a confirmation page, and only the confirmation (a POST no link scanner sends) is\n   * recorded as the message's unsubscribe.\n   */\n  unsubscribe?: string;\n  /** How the Worker tells a person's opens and clicks from a machine's (see the reporting classifier). */\n  tracking?: {\n    /**\n     * An open or click this many milliseconds after delivery is a weak machine signal — machine\n     * only together with another (a second link within seconds); 1000 by default. A person\n     * tapping a mail notification can click within a few seconds, so keep it short.\n     */\n    quickClickMs?: number;\n  };\n}\n\n/** Token-based APNs, the `.p8` auth key; the key itself is `APNS_PRIVATE_KEY_BASE64` in the environment. */\nexport interface ApnsConfig {\n  /** The app's bundle id (`apns-topic`). */\n  topic: string;\n  /** The key's 10-character id. */\n  keyId: string;\n  /** The Apple Developer team id. */\n  teamId: string;\n  /**\n   * Which APNs host each mode's device tokens belong to: `sandbox` for builds\n   * signed with `aps-environment: development` (Xcode, the simulator),\n   * `production` for App Store and TestFlight builds. Unlisted modes default\n   * to `production` for the production mode and `sandbox` for every other.\n   */\n  environment?: Partial<Record<JourneyMode, 'sandbox' | 'production'>>;\n}\n\n/**\n * Standard Web Push for browsers (VAPID); the key pair is `VAPID_PUBLIC_KEY` /\n * `VAPID_PRIVATE_KEY` in the environment, and the site subscribes with the same public key.\n */\nexport interface WebPushConfig {\n  /** Who push services may contact about this sender: `mailto:` or an `https:` URL. */\n  subject: string;\n  /**\n   * The contract event a notification tap the browser reports (`opened_url`) is also recorded\n   * as, with `{ message_id }`: the app reports its own taps as an event, and a service worker has\n   * no session to do so — without this, browser opens reach the reports but not the conditions\n   * (a `performed(e.push_opened)` segment). One event per copy, however often it is tapped.\n   */\n  openedEvent?: string;\n}\n\n/** FCM HTTP v1 for Android; the service account is `GOOGLE_APPLICATION_CREDENTIALS_BASE64` in the environment. */\nexport interface FcmConfig {\n  /** Android notification channel the pushes land in (`android.notification.channel_id`). */\n  androidChannelId?: string;\n}\n\n/**\n * The engine's tables live in a Postgres schema of their own, so their short names (`event`,\n * `profile`, `message`, …) never meet the app's. `workflow-ui generate` writes them as one drizzle\n * file on this schema; the host migrates it with its own tooling.\n */\nexport interface DatabaseConfig {\n  /** The Postgres schema; `workflow` by default. */\n  schema?: string;\n}\n\nexport interface JourneyConfigDefinition<\n  E extends Record<string, EmailTemplate> = Record<string, EmailTemplate>,\n  P extends Record<string, PushTemplate> = Record<string, PushTemplate>,\n> {\n  /** Studio title (the browser tab names the project). */\n  title?: string;\n  /** The shared `defineContract(...)` the Worker validates ingest against. */\n  contract?: Contract;\n  workflows: readonly WorkflowBuilder[];\n  segments?: readonly SegmentRef[];\n  actions?: readonly ActionRef<object>[];\n  templates?: TemplateRegistry<E, P>;\n  emails?: EmailConfig;\n  /** How the engine behaves per mode (`development`, `production`, …): time scale, message logging. */\n  runtime?: JourneyRuntimeConfig;\n  apns?: ApnsConfig;\n  fcm?: FcmConfig;\n  webPush?: WebPushConfig;\n  /** Where a Postgres store keeps the engine's tables (the D1 store ignores it). */\n  database?: DatabaseConfig;\n}\n\nexport interface JourneyConfig<\n  E extends Record<string, EmailTemplate> = Record<string, EmailTemplate>,\n  P extends Record<string, PushTemplate> = Record<string, PushTemplate>,\n> extends JourneyConfigDefinition<E, P> {\n  readonly kind: 'journey-config';\n}\n\nexport function defineConfig<\n  E extends Record<string, EmailTemplate> = Record<never, never>,\n  P extends Record<string, PushTemplate> = Record<never, never>,\n>(definition: JourneyConfigDefinition<E, P>): JourneyConfig<E, P> {\n  return { kind: 'journey-config', ...definition };\n}\n\nexport function isConfig(value: unknown): value is JourneyConfig {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    (value as { kind?: unknown }).kind === 'journey-config'\n  );\n}\n\n/** The APNs environment for `mode`: the configured one, else production only for production. */\nexport function apnsEnvironment(config: ApnsConfig, mode: JourneyMode): 'sandbox' | 'production' {\n  return config.environment?.[mode] ?? (mode === 'production' ? 'production' : 'sandbox');\n}\n\n/** A message node the config's registries cannot serve, or whose literal props its template refuses. */\nexport class ConfigCompileError extends Error {\n  override readonly name = 'ConfigCompileError';\n}\n\n/**\n * Compile the config: the bundle `compileBundle` would produce, with the\n * template manifest generated from the registries (every registered template,\n * not a hand-kept list), after checking every message node against them —\n * an unregistered or cross-channel template reference fails with the workflow,\n * node and channel named, and so does a literal prop the template's schema\n * refuses (a missing required prop, an undeclared one, a wrong literal).\n * User-property references cannot be parsed here (their values exist only at\n * send time) — they are checked by name only, and parsed before sending.\n */\nexport function compileConfig(config: JourneyConfig): BundleIR {\n  const registered = (channel: ChannelIR) => Object.keys(registryOf(config, channel) ?? {});\n  const bundle = compileBundle({\n    workflows: config.workflows,\n    ...(config.segments === undefined ? {} : { segments: config.segments }),\n    ...(config.actions === undefined ? {} : { actions: config.actions }),\n    templates: [\n      ...registered('email').map((key) => template.email(key)),\n      ...registered('push').map((key) => template.push(key)),\n      ...registered('discord').map((key) => template.discord(key)),\n      ...registered('slack').map((key) => template.slack(key)),\n    ],\n  });\n  for (const workflow of bundle.workflows) checkMessages(workflow, workflow.flow, config);\n  return bundle;\n}\n\nconst TEMPLATE_CHANNELS: readonly ChannelIR[] = ['email', 'push', 'discord', 'slack'];\n\n/** The config's registry for a channel; undefined for a channel templates cannot be declared for. */\nfunction registryOf(\n  config: JourneyConfig,\n  channel: ChannelIR\n): Readonly<Record<string, { props: PropsSchema }>> | undefined {\n  switch (channel) {\n    case 'email':\n      return config.templates?.email;\n    case 'push':\n      return config.templates?.push;\n    case 'discord':\n      return config.templates?.discord;\n    case 'slack':\n      return config.templates?.slack;\n    default:\n      return undefined;\n  }\n}\n\n/** A field that may be left out: optional, or with a default the schema fills in. */\nfunction canBeOmitted(schema: core.$ZodType): boolean {\n  const type = schema._zod.def.type;\n  return type === 'optional' || type === 'default' || type === 'prefault';\n}\n\nfunction checkMessages(\n  workflow: WorkflowIR,\n  nodes: readonly NodeIR[],\n  config: JourneyConfig\n): void {\n  for (const node of nodes) {\n    switch (node.type) {\n      case 'message':\n        checkMessage(workflow, node, config);\n        break;\n      case 'send_event':\n        checkEmit(workflow, node, config);\n        break;\n      case 'branch':\n        for (const c of node.cases) checkMessages(workflow, c.flow, config);\n        if (node.otherwise) checkMessages(workflow, node.otherwise, config);\n        break;\n      case 'cohort':\n        for (const arm of node.arms) checkMessages(workflow, arm.flow, config);\n        break;\n      case 'wait_until':\n        if (Array.isArray(node.onTimeout)) checkMessages(workflow, node.onTimeout, config);\n        break;\n      default:\n        break;\n    }\n  }\n}\n\nfunction checkMessage(\n  workflow: WorkflowIR,\n  node: Extract<NodeIR, { type: 'message' }>,\n  config: JourneyConfig\n): void {\n  const where = `workflow '${workflow.id}' node ${node.id}`;\n  const registry = registryOf(config, node.channel);\n  // Channels without a registry (sms, …) are rendered by app-supplied senders\n  if (registry === undefined && !TEMPLATE_CHANNELS.includes(node.channel)) return;\n  if (registry === undefined || !Object.hasOwn(registry, node.template)) {\n    const other = TEMPLATE_CHANNELS.find(\n      (channel) =>\n        channel !== node.channel && Object.hasOwn(registryOf(config, channel) ?? {}, node.template)\n    );\n    const hint = other === undefined ? '' : ` (it is registered as a ${other} template)`;\n    throw new ConfigCompileError(\n      `${where}: ${node.channel} template '${node.template}' is not registered${hint}`\n    );\n  }\n  const entry = registry[node.template];\n  const shape = (entry.props._zod.def as core.$ZodObjectDef).shape;\n  const problems: string[] = [];\n  for (const [field, value] of Object.entries(node.props)) {\n    if (!Object.hasOwn(shape, field)) {\n      problems.push(`'${field}' is not a prop of the template`);\n      continue;\n    }\n    if (typeof value === 'object' && value !== null && 'type' in value) {\n      // A user ref's value exists only at send time (parsed then); here its name can be checked\n      const profile = config.contract?.schemas.profile._zod.def;\n      if (\n        profile !== undefined &&\n        value.path !== 'userId' &&\n        !Object.hasOwn(profile.shape, value.path)\n      ) {\n        problems.push(\n          `'${field}' reads u.${value.path}, which the contract's profile does not declare`\n        );\n      }\n      continue;\n    }\n    const result = z.safeParse(shape[field], value);\n    if (!result.success)\n      problems.push(`'${field}' = ${JSON.stringify(value)} is refused by the schema`);\n  }\n  for (const [field, schema] of Object.entries(shape)) {\n    const optional = canBeOmitted(schema);\n    if (!optional && !Object.hasOwn(node.props, field))\n      problems.push(`required prop '${field}' is missing`);\n  }\n  if (problems.length > 0) {\n    throw new ConfigCompileError(\n      `${where}: ${node.channel} '${node.template}': ${problems.join('; ')}`\n    );\n  }\n}\n\n/**\n * An emitted event against the contract, as far as compile time can see: the\n * event is declared, literal payload values parse against their field, and no\n * required field is missing. Values read from the profile are checked when the\n * event is emitted, by the same contract.\n */\nfunction checkEmit(\n  workflow: WorkflowIR,\n  node: Extract<NodeIR, { type: 'send_event' }>,\n  config: JourneyConfig\n): void {\n  const contract = config.contract;\n  if (contract === undefined) return;\n  const where = `workflow '${workflow.id}' node ${node.id}`;\n  if (!contract.isEvent(node.event)) {\n    throw new ConfigCompileError(\n      `${where}: emits '${String(node.event)}', which is not in the contract`\n    );\n  }\n  const schema = contract.schemas.events[node.event];\n  const shape = (schema._zod.def as core.$ZodObjectDef).shape;\n  const problems: string[] = [];\n  for (const [field, value] of Object.entries(node.payload)) {\n    if (typeof value === 'object' && value !== null && 'type' in value) continue; // read at emit time\n    if (!Object.hasOwn(shape, field)) continue; // a loose payload may carry extra fields\n    const result = z.safeParse(shape[field], value);\n    if (!result.success)\n      problems.push(`'${field}' = ${JSON.stringify(value)} is refused by the contract`);\n  }\n  for (const [field, fieldSchema] of Object.entries(shape)) {\n    const optional = canBeOmitted(fieldSchema);\n    if (!optional && !Object.hasOwn(node.payload, field))\n      problems.push(`required field '${field}' is missing`);\n  }\n  if (problems.length > 0) {\n    throw new ConfigCompileError(`${where}: event '${node.event}': ${problems.join('; ')}`);\n  }\n}\n"],"mappings":";;;;;;;;;AA6CA,SAAgB,mBAAmB,SAA+B;CAChE,IAAI,OAAO,YAAY,UAAU,OAAO;CACxC,OAAO,QAAQ,SAAS,KAAA,IAAY,QAAQ,QAAQ,GAAG,QAAQ,KAAK,IAAI,QAAQ,MAAM;AACxF;AAqGA,SAAgB,aAGd,YAAgE;CAChE,OAAO;EAAE,MAAM;EAAkB,GAAG;CAAW;AACjD;AAEA,SAAgB,SAAS,OAAwC;CAC/D,OACE,OAAO,UAAU,YACjB,UAAU,QACT,MAA6B,SAAS;AAE3C;;AAGA,SAAgB,gBAAgB,QAAoB,MAA6C;CAC/F,OAAO,OAAO,cAAc,UAAU,SAAS,eAAe,eAAe;AAC/E;;AAGA,IAAa,qBAAb,cAAwC,MAAM;CAC5C,OAAyB;AAC3B;;;;;;;;;;;AAYA,SAAgB,cAAc,QAAiC;CAC7D,MAAM,cAAc,YAAuB,OAAO,KAAK,WAAW,QAAQ,OAAO,KAAK,CAAC,CAAC;CACxF,MAAM,SAASA,mBAAAA,cAAc;EAC3B,WAAW,OAAO;EAClB,GAAI,OAAO,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,OAAO,SAAS;EACrE,GAAI,OAAO,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,OAAO,QAAQ;EAClE,WAAW;GACT,GAAG,WAAW,OAAO,CAAC,CAAC,KAAK,QAAQC,qBAAAA,SAAS,MAAM,GAAG,CAAC;GACvD,GAAG,WAAW,MAAM,CAAC,CAAC,KAAK,QAAQA,qBAAAA,SAAS,KAAK,GAAG,CAAC;GACrD,GAAG,WAAW,SAAS,CAAC,CAAC,KAAK,QAAQA,qBAAAA,SAAS,QAAQ,GAAG,CAAC;GAC3D,GAAG,WAAW,OAAO,CAAC,CAAC,KAAK,QAAQA,qBAAAA,SAAS,MAAM,GAAG,CAAC;EACzD;CACF,CAAC;CACD,KAAK,MAAM,YAAY,OAAO,WAAW,cAAc,UAAU,SAAS,MAAM,MAAM;CACtF,OAAO;AACT;AAEA,MAAM,oBAA0C;CAAC;CAAS;CAAQ;CAAW;AAAO;;AAGpF,SAAS,WACP,QACA,SAC8D;CAC9D,QAAQ,SAAR;EACE,KAAK,SACH,OAAO,OAAO,WAAW;EAC3B,KAAK,QACH,OAAO,OAAO,WAAW;EAC3B,KAAK,WACH,OAAO,OAAO,WAAW;EAC3B,KAAK,SACH,OAAO,OAAO,WAAW;EAC3B,SACE;CACJ;AACF;;AAGA,SAAS,aAAa,QAAgC;CACpD,MAAM,OAAO,OAAO,KAAK,IAAI;CAC7B,OAAO,SAAS,cAAc,SAAS,aAAa,SAAS;AAC/D;AAEA,SAAS,cACP,UACA,OACA,QACM;CACN,KAAK,MAAM,QAAQ,OACjB,QAAQ,KAAK,MAAb;EACE,KAAK;GACH,aAAa,UAAU,MAAM,MAAM;GACnC;EACF,KAAK;GACH,UAAU,UAAU,MAAM,MAAM;GAChC;EACF,KAAK;GACH,KAAK,MAAM,KAAK,KAAK,OAAO,cAAc,UAAU,EAAE,MAAM,MAAM;GAClE,IAAI,KAAK,WAAW,cAAc,UAAU,KAAK,WAAW,MAAM;GAClE;EACF,KAAK;GACH,KAAK,MAAM,OAAO,KAAK,MAAM,cAAc,UAAU,IAAI,MAAM,MAAM;GACrE;EACF,KAAK,cACH,IAAI,MAAM,QAAQ,KAAK,SAAS,GAAG,cAAc,UAAU,KAAK,WAAW,MAAM;CAIrF;AAEJ;AAEA,SAAS,aACP,UACA,MACA,QACM;CACN,MAAM,QAAQ,aAAa,SAAS,GAAG,SAAS,KAAK;CACrD,MAAM,WAAW,WAAW,QAAQ,KAAK,OAAO;CAEhD,IAAI,aAAa,KAAA,KAAa,CAAC,kBAAkB,SAAS,KAAK,OAAO,GAAG;CACzE,IAAI,aAAa,KAAA,KAAa,CAAC,OAAO,OAAO,UAAU,KAAK,QAAQ,GAAG;EACrE,MAAM,QAAQ,kBAAkB,MAC7B,YACC,YAAY,KAAK,WAAW,OAAO,OAAO,WAAW,QAAQ,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAC9F;EACA,MAAM,OAAO,UAAU,KAAA,IAAY,KAAK,2BAA2B,MAAM;EACzE,MAAM,IAAI,mBACR,GAAG,MAAM,IAAI,KAAK,QAAQ,aAAa,KAAK,SAAS,qBAAqB,MAC5E;CACF;CAEA,MAAM,QADQ,SAAS,KAAK,SACR,CAAC,MAAM,KAAK,IAA2B;CAC3D,MAAM,WAAqB,CAAC;CAC5B,KAAK,MAAM,CAAC,OAAO,UAAU,OAAO,QAAQ,KAAK,KAAK,GAAG;EACvD,IAAI,CAAC,OAAO,OAAO,OAAO,KAAK,GAAG;GAChC,SAAS,KAAK,IAAI,MAAM,gCAAgC;GACxD;EACF;EACA,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,UAAU,OAAO;GAElE,MAAM,UAAU,OAAO,UAAU,QAAQ,QAAQ,KAAK;GACtD,IACE,YAAY,KAAA,KACZ,MAAM,SAAS,YACf,CAAC,OAAO,OAAO,QAAQ,OAAO,MAAM,IAAI,GAExC,SAAS,KACP,IAAI,MAAM,YAAY,MAAM,KAAK,gDACnC;GAEF;EACF;EAEA,IAAI,CADWC,SAAE,UAAU,MAAM,QAAQ,KAC/B,CAAC,CAAC,SACV,SAAS,KAAK,IAAI,MAAM,MAAM,KAAK,UAAU,KAAK,EAAE,0BAA0B;CAClF;CACA,KAAK,MAAM,CAAC,OAAO,WAAW,OAAO,QAAQ,KAAK,GAEhD,IAAI,CADa,aAAa,MAClB,KAAK,CAAC,OAAO,OAAO,KAAK,OAAO,KAAK,GAC/C,SAAS,KAAK,kBAAkB,MAAM,aAAa;CAEvD,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,mBACR,GAAG,MAAM,IAAI,KAAK,QAAQ,IAAI,KAAK,SAAS,KAAK,SAAS,KAAK,IAAI,GACrE;AAEJ;;;;;;;AAQA,SAAS,UACP,UACA,MACA,QACM;CACN,MAAM,WAAW,OAAO;CACxB,IAAI,aAAa,KAAA,GAAW;CAC5B,MAAM,QAAQ,aAAa,SAAS,GAAG,SAAS,KAAK;CACrD,IAAI,CAAC,SAAS,QAAQ,KAAK,KAAK,GAC9B,MAAM,IAAI,mBACR,GAAG,MAAM,WAAW,OAAO,KAAK,KAAK,EAAE,gCACzC;CAGF,MAAM,QADS,SAAS,QAAQ,OAAO,KAAK,MACvB,CAAC,KAAK,IAA2B;CACtD,MAAM,WAAqB,CAAC;CAC5B,KAAK,MAAM,CAAC,OAAO,UAAU,OAAO,QAAQ,KAAK,OAAO,GAAG;EACzD,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,UAAU,OAAO;EACpE,IAAI,CAAC,OAAO,OAAO,OAAO,KAAK,GAAG;EAElC,IAAI,CADWA,SAAE,UAAU,MAAM,QAAQ,KAC/B,CAAC,CAAC,SACV,SAAS,KAAK,IAAI,MAAM,MAAM,KAAK,UAAU,KAAK,EAAE,4BAA4B;CACpF;CACA,KAAK,MAAM,CAAC,OAAO,gBAAgB,OAAO,QAAQ,KAAK,GAErD,IAAI,CADa,aAAa,WAClB,KAAK,CAAC,OAAO,OAAO,KAAK,SAAS,KAAK,GACjD,SAAS,KAAK,mBAAmB,MAAM,aAAa;CAExD,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,mBAAmB,GAAG,MAAM,WAAW,KAAK,MAAM,KAAK,SAAS,KAAK,IAAI,GAAG;AAE1F"}