@shware/workflow 1.0.0 → 2.0.0

package/dist/reporting/tracking.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"tracking.d.cts","names":[],"sources":["../../src/reporting/tracking.ts"],"mappings":";;;;;;;;;;;;;;;;;;;iBAqBiB;;EAEf;;EAEA;;EAEA;;EAEA,eACM;IAAQ;IAAmB;IAAgB;QAAiB;;;wBAgC9C,eACpB,SAAS,SACT,WAAW,kBACX,UAAS,kBACR,QAAQ;;;;;;wBAiEW,eACpB,WAAW,kBACX,gBACA,mBACA,cACC"}
+{"version":3,"file":"tracking.d.cts","names":[],"sources":["../../src/reporting/tracking.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8BiB;;;;;EAKf;;EAEA;;EAEA;;EAEA,eACM;IAAQ;IAAmB;IAAgB;QAAiB;;;wBAgC9C,eACpB,SAAS,SACT,WAAW,kBACX,UAAS,kBACR,QAAQ;;;;;;wBAmEW,eACpB,WAAW,kBACX,gBACA,mBACA,cACC"}

package/dist/reporting/tracking.d.mts

@@ -5,24 +5,35 @@ import { JourneyReporting } from "../store/index.mjs";
  * without a bearer — recipients open them:
  *
  *   GET /t/o/<message>             the open pixel: records the open, answers a 1×1 GIF
- *   GET /t/c/<message>/<position>  a link: records the click, redirects to the recorded URL
+ *   GET /t/l/<message>/<position>  a link: records the click, redirects to the recorded URL
+ *   GET /t/u/<message>/<position>  the unsubscribe link: records the click, asks to confirm
  *   POST /t/u/<message>            the unsubscribe confirmation
+ *   GET /t/c/<message>/<position>  a link of an email sent before links carried their purpose
  *   POST /t/d/<message>            a push the device received (iOS's notification service
  *                                  extension, a browser's service worker)
  *   POST /t/p/<message>            a push opened, reported by a browser's service worker
  *
  * Every open and click is recorded with its verdict (./classify.ts), and the message keeps its
  * first open and click of each kind. The redirect goes only to the URL recorded for that position,
- * never to one the request carries, so the endpoint cannot bounce visitors anywhere else. The
- * config's unsubscribe link (`emails.unsubscribe`) is a tracked link too: following it shows a
- * confirmation page, and only the confirmation — a POST, which no link scanner sends — counts.
+ * never to one the request carries, so the endpoint cannot bounce visitors anywhere else. An
+ * email's unsubscribe link is a tracked link too, and which link it is was fixed when the email was
+ * sent (its route): following it shows a confirmation page, and only the confirmation — a POST,
+ * which no link scanner sends — counts. Changing a template's or the config's unsubscribe URL, or
+ * removing the template, changes nothing for emails already sent.
+ *
+ * Emails sent before that carry `/t/c/` links, which say nothing of their purpose: one is the
+ * unsubscribe link when its recorded URL is `legacyUnsubscribeUrl` (the global unsubscribe URL
+ * those emails were all sent with), as it was then.
  */
 export interface TrackingOptions {
-  /** `emails.unsubscribe` from the config: the footer link that asks for confirmation instead of redirecting. */
-  unsubscribe?: string | undefined;
+  /**
+   * The unsubscribe URL emails sent with `/t/c/` links carried (the config's `email.unsubscribeUrl`
+   * by default): following such a link to it asks for confirmation instead of redirecting.
+   */
+  legacyUnsubscribeUrl?: string | undefined;
   /** The name the confirmation pages show (the config's `title`). */
   product?: string | undefined;
-  /** `emails.tracking.quickClickMs`: how soon after delivery an open or click is a weak machine signal. */
+  /** `email.tracking.quickClickMs`: how soon after delivery an open or click is a weak machine signal. */
   quickMs?: number | undefined;
   /** A browser reported a push tapped (`/t/p`): the host records it as an event too (`webPush.openedEvent`). */
   pushOpened?: ((open: {

package/dist/reporting/tracking.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"tracking.d.mts","names":[],"sources":["../../src/reporting/tracking.ts"],"mappings":";;;;;;;;;;;;;;;;;;;iBAqBiB;;EAEf;;EAEA;;EAEA;;EAEA,eACM;IAAQ;IAAmB;IAAgB;QAAiB;;;wBAgC9C,eACpB,SAAS,SACT,WAAW,kBACX,UAAS,kBACR,QAAQ;;;;;;wBAiEW,eACpB,WAAW,kBACX,gBACA,mBACA,cACC"}
+{"version":3,"file":"tracking.d.mts","names":[],"sources":["../../src/reporting/tracking.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8BiB;;;;;EAKf;;EAEA;;EAEA;;EAEA,eACM;IAAQ;IAAmB;IAAgB;QAAiB;;;wBAgC9C,eACpB,SAAS,SACT,WAAW,kBACX,UAAS,kBACR,QAAQ;;;;;;wBAmEW,eACpB,WAAW,kBACX,gBACA,mBACA,cACC"}

package/dist/reporting/tracking.mjs

@@ -1,3 +1,4 @@
+import { isUnsubscribeLink } from "../email.mjs";
 import { BURST_WINDOW_MS, classifyClick, classifyOpen } from "./classify.mjs";
 //#region src/reporting/tracking.ts
 const GIF = Uint8Array.from(atob("R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7"), (char) => char.charCodeAt(0));
@@ -25,10 +26,10 @@ async function handleTracking(request, reporting, options = {}) {
 			"cache-control": "no-store, max-age=0"
 		} });
 	}
-	if (kind === "c" && position !== void 0 && read) {
+	if ((kind === "l" || kind === "u" || kind === "c") && position !== void 0 && read) {
 		const target = await recordClick(reporting, id, Number(position), who, options);
 		if (target === void 0) return page(options, "This link has expired.", 404);
-		if (options.unsubscribe !== void 0 && sameLink(target, options.unsubscribe)) return page(options, `Unsubscribe from ${escape(options.product ?? "these")} emails?`, 200, `<form method="post" action="/t/u/${id}"><button type="submit">Unsubscribe</button></form>`);
+		if (kind === "u" || kind === "c" && isUnsubscribeLink(target, options.legacyUnsubscribeUrl)) return page(options, `Unsubscribe from ${escape(options.product ?? "these")} emails?`, 200, `<form method="post" action="/t/u/${id}"><button type="submit">Unsubscribe</button></form>`);
 		return Response.redirect(target, 302);
 	}
 	if (kind === "d" && who.method === "POST") {
@@ -125,16 +126,6 @@ async function recordClick(reporting, id, position, who, options) {
 		};
 	}))?.url;
 }
-/** The unsubscribe link may carry its own query (a token, a list): the path names it. */
-function sameLink(target, unsubscribe) {
-	try {
-		const a = new URL(target);
-		const b = new URL(unsubscribe);
-		return a.origin === b.origin && a.pathname === b.pathname;
-	} catch {
-		return false;
-	}
-}
 function escape(text) {
 	return text.replace(/[&<>"']/g, (c) => `&#${c.charCodeAt(0)};`);
 }

package/dist/reporting/tracking.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"tracking.mjs","names":[],"sources":["../../src/reporting/tracking.ts"],"sourcesContent":["import type { JourneyReporting } from '../store';\nimport { BURST_WINDOW_MS, classifyClick, classifyOpen } from './classify';\n\n/**\n * The endpoints a journey email's tracking points at (see ./observer.ts), served by journeyWorker\n * without a bearer — recipients open them:\n *\n *   GET /t/o/<message>             the open pixel: records the open, answers a 1×1 GIF\n *   GET /t/c/<message>/<position>  a link: records the click, redirects to the recorded URL\n *   POST /t/u/<message>            the unsubscribe confirmation\n *   POST /t/d/<message>            a push the device received (iOS's notification service\n *                                  extension, a browser's service worker)\n *   POST /t/p/<message>            a push opened, reported by a browser's service worker\n *\n * Every open and click is recorded with its verdict (./classify.ts), and the message keeps its\n * first open and click of each kind. The redirect goes only to the URL recorded for that position,\n * never to one the request carries, so the endpoint cannot bounce visitors anywhere else. The\n * config's unsubscribe link (`emails.unsubscribe`) is a tracked link too: following it shows a\n * confirmation page, and only the confirmation — a POST, which no link scanner sends — counts.\n */\n\nexport interface TrackingOptions {\n  /** `emails.unsubscribe` from the config: the footer link that asks for confirmation instead of redirecting. */\n  unsubscribe?: string | undefined;\n  /** The name the confirmation pages show (the config's `title`). */\n  product?: string | undefined;\n  /** `emails.tracking.quickClickMs`: how soon after delivery an open or click is a weak machine signal. */\n  quickMs?: number | undefined;\n  /** A browser reported a push tapped (`/t/p`): the host records it as an event too (`webPush.openedEvent`). */\n  pushOpened?:\n    | ((open: { messageId: string; userId: string; at: number }) => Promise<void>)\n    | undefined;\n}\n\nconst GIF = Uint8Array.from(\n  atob('R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7'),\n  (char) => char.charCodeAt(0)\n);\nconst UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\ninterface Requester {\n  method: string;\n  userAgent: string | null;\n  asn: number | null;\n  organization: string | null;\n  country: string | null;\n}\n\nfunction requester(request: Request): Requester {\n  const cf = (\n    request as Request & { cf?: { asn?: number; asOrganization?: string; country?: string } }\n  ).cf;\n  return {\n    method: request.method,\n    userAgent: request.headers.get('user-agent'),\n    asn: cf?.asn ?? null,\n    organization: cf?.asOrganization ?? null,\n    country: cf?.country ?? null,\n  };\n}\n\n/** A `/t/...` request's response, or undefined when the path is not a tracking route. */\nexport async function handleTracking(\n  request: Request,\n  reporting: JourneyReporting,\n  options: TrackingOptions = {}\n): Promise<Response | undefined> {\n  const url = new URL(request.url);\n  const [, root, kind, id, position] = url.pathname.split('/');\n  if (root !== 't' || id === undefined || !UUID.test(id)) return undefined;\n  const who = requester(request);\n  const read = who.method === 'GET' || who.method === 'HEAD';\n  if (kind === 'o' && read) {\n    await recordOpen(reporting, id, who, options);\n    return new Response(who.method === 'HEAD' ? null : GIF, {\n      headers: { 'content-type': 'image/gif', 'cache-control': 'no-store, max-age=0' },\n    });\n  }\n  if (kind === 'c' && position !== undefined && read) {\n    const target = await recordClick(reporting, id, Number(position), who, options);\n    if (target === undefined) return page(options, 'This link has expired.', 404);\n    if (options.unsubscribe !== undefined && sameLink(target, options.unsubscribe)) {\n      return page(\n        options,\n        `Unsubscribe from ${escape(options.product ?? 'these')} emails?`,\n        200,\n        `<form method=\"post\" action=\"/t/u/${id}\"><button type=\"submit\">Unsubscribe</button></form>`\n      );\n    }\n    return Response.redirect(target, 302);\n  }\n  if (kind === 'd' && who.method === 'POST') {\n    const known = await reporting.recordDeviceDelivered(id, Date.now());\n    return new Response(null, { status: known ? 204 : 404 });\n  }\n  if (kind === 'p' && who.method === 'POST') {\n    // A notification tap: a person, as the message id is what proves it is theirs\n    const at = Date.now();\n    let userId: string | undefined;\n    const known = await reporting.recordOpen(id, (message) => {\n      userId = message.userId;\n      return { at, machine: false, reason: null, ...network(who) };\n    });\n    if (known && userId !== undefined && options.pushOpened !== undefined) {\n      try {\n        await options.pushOpened({ messageId: id, userId, at });\n      } catch (error) {\n        // The open is recorded; the event is the host's extra, never a reason to fail the beacon\n        console.error(`[workflow] recording push open ${id} as an event failed`, error);\n      }\n    }\n    return new Response(null, { status: known ? 204 : 404 });\n  }\n  if (kind === 'u' && who.method === 'POST') {\n    const known = await reporting.recordUnsubscribe(id, Date.now());\n    if (!known) return page(options, 'This link has expired.', 404);\n    return page(\n      options,\n      options.product === undefined\n        ? \"You won't get these emails anymore.\"\n        : `You won't get these emails from ${escape(options.product)} anymore.`\n    );\n  }\n  return undefined;\n}\n\n/**\n * A journey push tapped open, as the app reports it (`JourneyClient.messageOpened`): an open on\n * the copy — only the recipient's own, and never a machine, since no proxy or scanner taps a\n * notification. False when the message is unknown or not the user's.\n */\nexport async function recordPushOpen(\n  reporting: JourneyReporting,\n  userId: string,\n  messageId: string,\n  at = Date.now()\n): Promise<boolean> {\n  if (!UUID.test(messageId)) return false;\n  let recorded = false;\n  await reporting.recordOpen(messageId, (message) => {\n    if (message.userId !== userId) return undefined;\n    recorded = true;\n    return {\n      at,\n      machine: false,\n      reason: null,\n      userAgent: null,\n      asn: null,\n      organization: null,\n      country: null,\n    };\n  });\n  return recorded;\n}\n\nasync function recordOpen(\n  reporting: JourneyReporting,\n  id: string,\n  who: Requester,\n  options: TrackingOptions\n) {\n  const at = Date.now();\n  await reporting.recordOpen(id, (message) => ({\n    at,\n    ...classifyOpen(\n      { ...who, sinceDeliveredMs: at - message.deliveredAt },\n      { quickMs: options.quickMs }\n    ),\n    ...network(who),\n  }));\n}\n\nconst network = (who: Requester) => ({\n  userAgent: who.userAgent,\n  asn: who.asn,\n  organization: who.organization,\n  country: who.country,\n});\n\n/** Records the click and answers the URL to send the visitor to, or undefined for an unknown link. */\nasync function recordClick(\n  reporting: JourneyReporting,\n  id: string,\n  position: number,\n  who: Requester,\n  options: TrackingOptions\n): Promise<string | undefined> {\n  if (!Number.isInteger(position) || position < 0) return undefined;\n  const at = Date.now();\n  const recorded = await reporting.recordClick(id, position, at, BURST_WINDOW_MS, (link) => {\n    const linksInBurst = new Set([position, ...link.recent.map((click) => click.position)]).size;\n    const verdict = classifyClick(\n      { ...who, sinceDeliveredMs: at - link.deliveredAt, linksInBurst, linkCount: link.linkCount },\n      { quickMs: options.quickMs }\n    );\n    return {\n      engagement: { at, ...verdict, ...network(who) },\n      backdate: verdict.reason === 'link_burst' || verdict.reason === 'quick+link_pair',\n    };\n  });\n  return recorded?.url;\n}\n\n/** The unsubscribe link may carry its own query (a token, a list): the path names it. */\nfunction sameLink(target: string, unsubscribe: string): boolean {\n  try {\n    const a = new URL(target);\n    const b = new URL(unsubscribe);\n    return a.origin === b.origin && a.pathname === b.pathname;\n  } catch {\n    return false;\n  }\n}\n\nfunction escape(text: string): string {\n  return text.replace(/[&<>\"']/g, (c) => `&#${c.charCodeAt(0)};`);\n}\n\nfunction page(options: TrackingOptions, message: string, status = 200, extra = ''): Response {\n  const title = escape(options.product ?? 'Email');\n  const html = `<!doctype html><html><head><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"><title>${title}</title><style>body{font:16px system-ui;margin:0;display:grid;place-items:center;min-height:100vh;background:#fafafa;color:#18181b}main{text-align:center;padding:24px}button{font:inherit;padding:10px 20px;border-radius:9999px;border:0;background:#18181b;color:#fff;cursor:pointer}</style></head><body><main><p>${message}</p>${extra}</main></body></html>`;\n  return new Response(html, { status, headers: { 'content-type': 'text/html; charset=utf-8' } });\n}\n"],"mappings":";;AAkCA,MAAM,MAAM,WAAW,KACrB,KAAK,0DAA0D,IAC9D,SAAS,KAAK,WAAW,CAAC,CAC7B;AACA,MAAM,OAAO;AAUb,SAAS,UAAU,SAA6B;CAC9C,MAAM,KACJ,QACA;CACF,OAAO;EACL,QAAQ,QAAQ;EAChB,WAAW,QAAQ,QAAQ,IAAI,YAAY;EAC3C,KAAK,IAAI,OAAO;EAChB,cAAc,IAAI,kBAAkB;EACpC,SAAS,IAAI,WAAW;CAC1B;AACF;;AAGA,eAAsB,eACpB,SACA,WACA,UAA2B,CAAC,GACG;CAE/B,MAAM,GAAG,MAAM,MAAM,IAAI,YAAY,IADrB,IAAI,QAAQ,GACW,CAAC,CAAC,SAAS,MAAM,GAAG;CAC3D,IAAI,SAAS,OAAO,OAAO,KAAA,KAAa,CAAC,KAAK,KAAK,EAAE,GAAG,OAAO,KAAA;CAC/D,MAAM,MAAM,UAAU,OAAO;CAC7B,MAAM,OAAO,IAAI,WAAW,SAAS,IAAI,WAAW;CACpD,IAAI,SAAS,OAAO,MAAM;EACxB,MAAM,WAAW,WAAW,IAAI,KAAK,OAAO;EAC5C,OAAO,IAAI,SAAS,IAAI,WAAW,SAAS,OAAO,KAAK,EACtD,SAAS;GAAE,gBAAgB;GAAa,iBAAiB;EAAsB,EACjF,CAAC;CACH;CACA,IAAI,SAAS,OAAO,aAAa,KAAA,KAAa,MAAM;EAClD,MAAM,SAAS,MAAM,YAAY,WAAW,IAAI,OAAO,QAAQ,GAAG,KAAK,OAAO;EAC9E,IAAI,WAAW,KAAA,GAAW,OAAO,KAAK,SAAS,0BAA0B,GAAG;EAC5E,IAAI,QAAQ,gBAAgB,KAAA,KAAa,SAAS,QAAQ,QAAQ,WAAW,GAC3E,OAAO,KACL,SACA,oBAAoB,OAAO,QAAQ,WAAW,OAAO,EAAE,WACvD,KACA,oCAAoC,GAAG,oDACzC;EAEF,OAAO,SAAS,SAAS,QAAQ,GAAG;CACtC;CACA,IAAI,SAAS,OAAO,IAAI,WAAW,QAAQ;EACzC,MAAM,QAAQ,MAAM,UAAU,sBAAsB,IAAI,KAAK,IAAI,CAAC;EAClE,OAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,QAAQ,MAAM,IAAI,CAAC;CACzD;CACA,IAAI,SAAS,OAAO,IAAI,WAAW,QAAQ;EAEzC,MAAM,KAAK,KAAK,IAAI;EACpB,IAAI;EACJ,MAAM,QAAQ,MAAM,UAAU,WAAW,KAAK,YAAY;GACxD,SAAS,QAAQ;GACjB,OAAO;IAAE;IAAI,SAAS;IAAO,QAAQ;IAAM,GAAG,QAAQ,GAAG;GAAE;EAC7D,CAAC;EACD,IAAI,SAAS,WAAW,KAAA,KAAa,QAAQ,eAAe,KAAA,GAC1D,IAAI;GACF,MAAM,QAAQ,WAAW;IAAE,WAAW;IAAI;IAAQ;GAAG,CAAC;EACxD,SAAS,OAAO;GAEd,QAAQ,MAAM,kCAAkC,GAAG,sBAAsB,KAAK;EAChF;EAEF,OAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,QAAQ,MAAM,IAAI,CAAC;CACzD;CACA,IAAI,SAAS,OAAO,IAAI,WAAW,QAAQ;EAEzC,IAAI,CAAC,MADe,UAAU,kBAAkB,IAAI,KAAK,IAAI,CAAC,GAClD,OAAO,KAAK,SAAS,0BAA0B,GAAG;EAC9D,OAAO,KACL,SACA,QAAQ,YAAY,KAAA,IAChB,wCACA,mCAAmC,OAAO,QAAQ,OAAO,EAAE,UACjE;CACF;AAEF;;;;;;AAOA,eAAsB,eACpB,WACA,QACA,WACA,KAAK,KAAK,IAAI,GACI;CAClB,IAAI,CAAC,KAAK,KAAK,SAAS,GAAG,OAAO;CAClC,IAAI,WAAW;CACf,MAAM,UAAU,WAAW,YAAY,YAAY;EACjD,IAAI,QAAQ,WAAW,QAAQ,OAAO,KAAA;EACtC,WAAW;EACX,OAAO;GACL;GACA,SAAS;GACT,QAAQ;GACR,WAAW;GACX,KAAK;GACL,cAAc;GACd,SAAS;EACX;CACF,CAAC;CACD,OAAO;AACT;AAEA,eAAe,WACb,WACA,IACA,KACA,SACA;CACA,MAAM,KAAK,KAAK,IAAI;CACpB,MAAM,UAAU,WAAW,KAAK,aAAa;EAC3C;EACA,GAAG,aACD;GAAE,GAAG;GAAK,kBAAkB,KAAK,QAAQ;EAAY,GACrD,EAAE,SAAS,QAAQ,QAAQ,CAC7B;EACA,GAAG,QAAQ,GAAG;CAChB,EAAE;AACJ;AAEA,MAAM,WAAW,SAAoB;CACnC,WAAW,IAAI;CACf,KAAK,IAAI;CACT,cAAc,IAAI;CAClB,SAAS,IAAI;AACf;;AAGA,eAAe,YACb,WACA,IACA,UACA,KACA,SAC6B;CAC7B,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,WAAW,GAAG,OAAO,KAAA;CACxD,MAAM,KAAK,KAAK,IAAI;CAYpB,QAAO,MAXgB,UAAU,YAAY,IAAI,UAAU,IAAI,kBAAkB,SAAS;EACxF,MAAM,gCAAe,IAAI,IAAI,CAAC,UAAU,GAAG,KAAK,OAAO,KAAK,UAAU,MAAM,QAAQ,CAAC,CAAC,EAAA,CAAE;EACxF,MAAM,UAAU,cACd;GAAE,GAAG;GAAK,kBAAkB,KAAK,KAAK;GAAa;GAAc,WAAW,KAAK;EAAU,GAC3F,EAAE,SAAS,QAAQ,QAAQ,CAC7B;EACA,OAAO;GACL,YAAY;IAAE;IAAI,GAAG;IAAS,GAAG,QAAQ,GAAG;GAAE;GAC9C,UAAU,QAAQ,WAAW,gBAAgB,QAAQ,WAAW;EAClE;CACF,CAAC,EAAA,EACgB;AACnB;;AAGA,SAAS,SAAS,QAAgB,aAA8B;CAC9D,IAAI;EACF,MAAM,IAAI,IAAI,IAAI,MAAM;EACxB,MAAM,IAAI,IAAI,IAAI,WAAW;EAC7B,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE;CACnD,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,OAAO,MAAsB;CACpC,OAAO,KAAK,QAAQ,aAAa,MAAM,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE;AAChE;AAEA,SAAS,KAAK,SAA0B,SAAiB,SAAS,KAAK,QAAQ,IAAc;CAE3F,MAAM,OAAO,8HADC,OAAO,QAAQ,WAAW,OACuG,EAAE,wTAAwT,QAAQ,MAAM,MAAM;CAC7d,OAAO,IAAI,SAAS,MAAM;EAAE;EAAQ,SAAS,EAAE,gBAAgB,2BAA2B;CAAE,CAAC;AAC/F"}
+{"version":3,"file":"tracking.mjs","names":[],"sources":["../../src/reporting/tracking.ts"],"sourcesContent":["import { isUnsubscribeLink } from '../email';\nimport type { JourneyReporting } from '../store';\nimport { BURST_WINDOW_MS, classifyClick, classifyOpen } from './classify';\n\n/**\n * The endpoints a journey email's tracking points at (see ./observer.ts), served by journeyWorker\n * without a bearer — recipients open them:\n *\n *   GET /t/o/<message>             the open pixel: records the open, answers a 1×1 GIF\n *   GET /t/l/<message>/<position>  a link: records the click, redirects to the recorded URL\n *   GET /t/u/<message>/<position>  the unsubscribe link: records the click, asks to confirm\n *   POST /t/u/<message>            the unsubscribe confirmation\n *   GET /t/c/<message>/<position>  a link of an email sent before links carried their purpose\n *   POST /t/d/<message>            a push the device received (iOS's notification service\n *                                  extension, a browser's service worker)\n *   POST /t/p/<message>            a push opened, reported by a browser's service worker\n *\n * Every open and click is recorded with its verdict (./classify.ts), and the message keeps its\n * first open and click of each kind. The redirect goes only to the URL recorded for that position,\n * never to one the request carries, so the endpoint cannot bounce visitors anywhere else. An\n * email's unsubscribe link is a tracked link too, and which link it is was fixed when the email was\n * sent (its route): following it shows a confirmation page, and only the confirmation — a POST,\n * which no link scanner sends — counts. Changing a template's or the config's unsubscribe URL, or\n * removing the template, changes nothing for emails already sent.\n *\n * Emails sent before that carry `/t/c/` links, which say nothing of their purpose: one is the\n * unsubscribe link when its recorded URL is `legacyUnsubscribeUrl` (the global unsubscribe URL\n * those emails were all sent with), as it was then.\n */\n\nexport interface TrackingOptions {\n  /**\n   * The unsubscribe URL emails sent with `/t/c/` links carried (the config's `email.unsubscribeUrl`\n   * by default): following such a link to it asks for confirmation instead of redirecting.\n   */\n  legacyUnsubscribeUrl?: string | undefined;\n  /** The name the confirmation pages show (the config's `title`). */\n  product?: string | undefined;\n  /** `email.tracking.quickClickMs`: how soon after delivery an open or click is a weak machine signal. */\n  quickMs?: number | undefined;\n  /** A browser reported a push tapped (`/t/p`): the host records it as an event too (`webPush.openedEvent`). */\n  pushOpened?:\n    | ((open: { messageId: string; userId: string; at: number }) => Promise<void>)\n    | undefined;\n}\n\nconst GIF = Uint8Array.from(\n  atob('R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7'),\n  (char) => char.charCodeAt(0)\n);\nconst UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\ninterface Requester {\n  method: string;\n  userAgent: string | null;\n  asn: number | null;\n  organization: string | null;\n  country: string | null;\n}\n\nfunction requester(request: Request): Requester {\n  const cf = (\n    request as Request & { cf?: { asn?: number; asOrganization?: string; country?: string } }\n  ).cf;\n  return {\n    method: request.method,\n    userAgent: request.headers.get('user-agent'),\n    asn: cf?.asn ?? null,\n    organization: cf?.asOrganization ?? null,\n    country: cf?.country ?? null,\n  };\n}\n\n/** A `/t/...` request's response, or undefined when the path is not a tracking route. */\nexport async function handleTracking(\n  request: Request,\n  reporting: JourneyReporting,\n  options: TrackingOptions = {}\n): Promise<Response | undefined> {\n  const url = new URL(request.url);\n  const [, root, kind, id, position] = url.pathname.split('/');\n  if (root !== 't' || id === undefined || !UUID.test(id)) return undefined;\n  const who = requester(request);\n  const read = who.method === 'GET' || who.method === 'HEAD';\n  if (kind === 'o' && read) {\n    await recordOpen(reporting, id, who, options);\n    return new Response(who.method === 'HEAD' ? null : GIF, {\n      headers: { 'content-type': 'image/gif', 'cache-control': 'no-store, max-age=0' },\n    });\n  }\n  if ((kind === 'l' || kind === 'u' || kind === 'c') && position !== undefined && read) {\n    const target = await recordClick(reporting, id, Number(position), who, options);\n    if (target === undefined) return page(options, 'This link has expired.', 404);\n    const unsubscribe =\n      kind === 'u' || (kind === 'c' && isUnsubscribeLink(target, options.legacyUnsubscribeUrl));\n    if (unsubscribe) {\n      return page(\n        options,\n        `Unsubscribe from ${escape(options.product ?? 'these')} emails?`,\n        200,\n        `<form method=\"post\" action=\"/t/u/${id}\"><button type=\"submit\">Unsubscribe</button></form>`\n      );\n    }\n    return Response.redirect(target, 302);\n  }\n  if (kind === 'd' && who.method === 'POST') {\n    const known = await reporting.recordDeviceDelivered(id, Date.now());\n    return new Response(null, { status: known ? 204 : 404 });\n  }\n  if (kind === 'p' && who.method === 'POST') {\n    // A notification tap: a person, as the message id is what proves it is theirs\n    const at = Date.now();\n    let userId: string | undefined;\n    const known = await reporting.recordOpen(id, (message) => {\n      userId = message.userId;\n      return { at, machine: false, reason: null, ...network(who) };\n    });\n    if (known && userId !== undefined && options.pushOpened !== undefined) {\n      try {\n        await options.pushOpened({ messageId: id, userId, at });\n      } catch (error) {\n        // The open is recorded; the event is the host's extra, never a reason to fail the beacon\n        console.error(`[workflow] recording push open ${id} as an event failed`, error);\n      }\n    }\n    return new Response(null, { status: known ? 204 : 404 });\n  }\n  if (kind === 'u' && who.method === 'POST') {\n    const known = await reporting.recordUnsubscribe(id, Date.now());\n    if (!known) return page(options, 'This link has expired.', 404);\n    return page(\n      options,\n      options.product === undefined\n        ? \"You won't get these emails anymore.\"\n        : `You won't get these emails from ${escape(options.product)} anymore.`\n    );\n  }\n  return undefined;\n}\n\n/**\n * A journey push tapped open, as the app reports it (`JourneyClient.messageOpened`): an open on\n * the copy — only the recipient's own, and never a machine, since no proxy or scanner taps a\n * notification. False when the message is unknown or not the user's.\n */\nexport async function recordPushOpen(\n  reporting: JourneyReporting,\n  userId: string,\n  messageId: string,\n  at = Date.now()\n): Promise<boolean> {\n  if (!UUID.test(messageId)) return false;\n  let recorded = false;\n  await reporting.recordOpen(messageId, (message) => {\n    if (message.userId !== userId) return undefined;\n    recorded = true;\n    return {\n      at,\n      machine: false,\n      reason: null,\n      userAgent: null,\n      asn: null,\n      organization: null,\n      country: null,\n    };\n  });\n  return recorded;\n}\n\nasync function recordOpen(\n  reporting: JourneyReporting,\n  id: string,\n  who: Requester,\n  options: TrackingOptions\n) {\n  const at = Date.now();\n  await reporting.recordOpen(id, (message) => ({\n    at,\n    ...classifyOpen(\n      { ...who, sinceDeliveredMs: at - message.deliveredAt },\n      { quickMs: options.quickMs }\n    ),\n    ...network(who),\n  }));\n}\n\nconst network = (who: Requester) => ({\n  userAgent: who.userAgent,\n  asn: who.asn,\n  organization: who.organization,\n  country: who.country,\n});\n\n/** Records the click and answers the URL to send the visitor to, or undefined for an unknown link. */\nasync function recordClick(\n  reporting: JourneyReporting,\n  id: string,\n  position: number,\n  who: Requester,\n  options: TrackingOptions\n): Promise<string | undefined> {\n  if (!Number.isInteger(position) || position < 0) return undefined;\n  const at = Date.now();\n  const recorded = await reporting.recordClick(id, position, at, BURST_WINDOW_MS, (link) => {\n    const linksInBurst = new Set([position, ...link.recent.map((click) => click.position)]).size;\n    const verdict = classifyClick(\n      { ...who, sinceDeliveredMs: at - link.deliveredAt, linksInBurst, linkCount: link.linkCount },\n      { quickMs: options.quickMs }\n    );\n    return {\n      engagement: { at, ...verdict, ...network(who) },\n      backdate: verdict.reason === 'link_burst' || verdict.reason === 'quick+link_pair',\n    };\n  });\n  return recorded?.url;\n}\n\nfunction escape(text: string): string {\n  return text.replace(/[&<>\"']/g, (c) => `&#${c.charCodeAt(0)};`);\n}\n\nfunction page(options: TrackingOptions, message: string, status = 200, extra = ''): Response {\n  const title = escape(options.product ?? 'Email');\n  const html = `<!doctype html><html><head><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"><title>${title}</title><style>body{font:16px system-ui;margin:0;display:grid;place-items:center;min-height:100vh;background:#fafafa;color:#18181b}main{text-align:center;padding:24px}button{font:inherit;padding:10px 20px;border-radius:9999px;border:0;background:#18181b;color:#fff;cursor:pointer}</style></head><body><main><p>${message}</p>${extra}</main></body></html>`;\n  return new Response(html, { status, headers: { 'content-type': 'text/html; charset=utf-8' } });\n}\n"],"mappings":";;;AA8CA,MAAM,MAAM,WAAW,KACrB,KAAK,0DAA0D,IAC9D,SAAS,KAAK,WAAW,CAAC,CAC7B;AACA,MAAM,OAAO;AAUb,SAAS,UAAU,SAA6B;CAC9C,MAAM,KACJ,QACA;CACF,OAAO;EACL,QAAQ,QAAQ;EAChB,WAAW,QAAQ,QAAQ,IAAI,YAAY;EAC3C,KAAK,IAAI,OAAO;EAChB,cAAc,IAAI,kBAAkB;EACpC,SAAS,IAAI,WAAW;CAC1B;AACF;;AAGA,eAAsB,eACpB,SACA,WACA,UAA2B,CAAC,GACG;CAE/B,MAAM,GAAG,MAAM,MAAM,IAAI,YAAY,IADrB,IAAI,QAAQ,GACW,CAAC,CAAC,SAAS,MAAM,GAAG;CAC3D,IAAI,SAAS,OAAO,OAAO,KAAA,KAAa,CAAC,KAAK,KAAK,EAAE,GAAG,OAAO,KAAA;CAC/D,MAAM,MAAM,UAAU,OAAO;CAC7B,MAAM,OAAO,IAAI,WAAW,SAAS,IAAI,WAAW;CACpD,IAAI,SAAS,OAAO,MAAM;EACxB,MAAM,WAAW,WAAW,IAAI,KAAK,OAAO;EAC5C,OAAO,IAAI,SAAS,IAAI,WAAW,SAAS,OAAO,KAAK,EACtD,SAAS;GAAE,gBAAgB;GAAa,iBAAiB;EAAsB,EACjF,CAAC;CACH;CACA,KAAK,SAAS,OAAO,SAAS,OAAO,SAAS,QAAQ,aAAa,KAAA,KAAa,MAAM;EACpF,MAAM,SAAS,MAAM,YAAY,WAAW,IAAI,OAAO,QAAQ,GAAG,KAAK,OAAO;EAC9E,IAAI,WAAW,KAAA,GAAW,OAAO,KAAK,SAAS,0BAA0B,GAAG;EAG5E,IADE,SAAS,OAAQ,SAAS,OAAO,kBAAkB,QAAQ,QAAQ,oBAAoB,GAEvF,OAAO,KACL,SACA,oBAAoB,OAAO,QAAQ,WAAW,OAAO,EAAE,WACvD,KACA,oCAAoC,GAAG,oDACzC;EAEF,OAAO,SAAS,SAAS,QAAQ,GAAG;CACtC;CACA,IAAI,SAAS,OAAO,IAAI,WAAW,QAAQ;EACzC,MAAM,QAAQ,MAAM,UAAU,sBAAsB,IAAI,KAAK,IAAI,CAAC;EAClE,OAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,QAAQ,MAAM,IAAI,CAAC;CACzD;CACA,IAAI,SAAS,OAAO,IAAI,WAAW,QAAQ;EAEzC,MAAM,KAAK,KAAK,IAAI;EACpB,IAAI;EACJ,MAAM,QAAQ,MAAM,UAAU,WAAW,KAAK,YAAY;GACxD,SAAS,QAAQ;GACjB,OAAO;IAAE;IAAI,SAAS;IAAO,QAAQ;IAAM,GAAG,QAAQ,GAAG;GAAE;EAC7D,CAAC;EACD,IAAI,SAAS,WAAW,KAAA,KAAa,QAAQ,eAAe,KAAA,GAC1D,IAAI;GACF,MAAM,QAAQ,WAAW;IAAE,WAAW;IAAI;IAAQ;GAAG,CAAC;EACxD,SAAS,OAAO;GAEd,QAAQ,MAAM,kCAAkC,GAAG,sBAAsB,KAAK;EAChF;EAEF,OAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,QAAQ,MAAM,IAAI,CAAC;CACzD;CACA,IAAI,SAAS,OAAO,IAAI,WAAW,QAAQ;EAEzC,IAAI,CAAC,MADe,UAAU,kBAAkB,IAAI,KAAK,IAAI,CAAC,GAClD,OAAO,KAAK,SAAS,0BAA0B,GAAG;EAC9D,OAAO,KACL,SACA,QAAQ,YAAY,KAAA,IAChB,wCACA,mCAAmC,OAAO,QAAQ,OAAO,EAAE,UACjE;CACF;AAEF;;;;;;AAOA,eAAsB,eACpB,WACA,QACA,WACA,KAAK,KAAK,IAAI,GACI;CAClB,IAAI,CAAC,KAAK,KAAK,SAAS,GAAG,OAAO;CAClC,IAAI,WAAW;CACf,MAAM,UAAU,WAAW,YAAY,YAAY;EACjD,IAAI,QAAQ,WAAW,QAAQ,OAAO,KAAA;EACtC,WAAW;EACX,OAAO;GACL;GACA,SAAS;GACT,QAAQ;GACR,WAAW;GACX,KAAK;GACL,cAAc;GACd,SAAS;EACX;CACF,CAAC;CACD,OAAO;AACT;AAEA,eAAe,WACb,WACA,IACA,KACA,SACA;CACA,MAAM,KAAK,KAAK,IAAI;CACpB,MAAM,UAAU,WAAW,KAAK,aAAa;EAC3C;EACA,GAAG,aACD;GAAE,GAAG;GAAK,kBAAkB,KAAK,QAAQ;EAAY,GACrD,EAAE,SAAS,QAAQ,QAAQ,CAC7B;EACA,GAAG,QAAQ,GAAG;CAChB,EAAE;AACJ;AAEA,MAAM,WAAW,SAAoB;CACnC,WAAW,IAAI;CACf,KAAK,IAAI;CACT,cAAc,IAAI;CAClB,SAAS,IAAI;AACf;;AAGA,eAAe,YACb,WACA,IACA,UACA,KACA,SAC6B;CAC7B,IAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,WAAW,GAAG,OAAO,KAAA;CACxD,MAAM,KAAK,KAAK,IAAI;CAYpB,QAAO,MAXgB,UAAU,YAAY,IAAI,UAAU,IAAI,kBAAkB,SAAS;EACxF,MAAM,gCAAe,IAAI,IAAI,CAAC,UAAU,GAAG,KAAK,OAAO,KAAK,UAAU,MAAM,QAAQ,CAAC,CAAC,EAAA,CAAE;EACxF,MAAM,UAAU,cACd;GAAE,GAAG;GAAK,kBAAkB,KAAK,KAAK;GAAa;GAAc,WAAW,KAAK;EAAU,GAC3F,EAAE,SAAS,QAAQ,QAAQ,CAC7B;EACA,OAAO;GACL,YAAY;IAAE;IAAI,GAAG;IAAS,GAAG,QAAQ,GAAG;GAAE;GAC9C,UAAU,QAAQ,WAAW,gBAAgB,QAAQ,WAAW;EAClE;CACF,CAAC,EAAA,EACgB;AACnB;AAEA,SAAS,OAAO,MAAsB;CACpC,OAAO,KAAK,QAAQ,aAAa,MAAM,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE;AAChE;AAEA,SAAS,KAAK,SAA0B,SAAiB,SAAS,KAAK,QAAQ,IAAc;CAE3F,MAAM,OAAO,8HADC,OAAO,QAAQ,WAAW,OACuG,EAAE,wTAAwT,QAAQ,MAAM,MAAM;CAC7d,OAAO,IAAI,SAAS,MAAM;EAAE;EAAQ,SAAS,EAAE,gBAAgB,2BAA2B;CAAE,CAAC;AAC/F"}

package/dist/templates.cjs

@@ -1,5 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_runtime = require("./_virtual/_rolldown/runtime.cjs");
+const require_email = require("./email.cjs");
 let zod_mini = require("zod/mini");
 zod_mini = require_runtime.__toESM(zod_mini, 1);
 //#region src/templates.ts
@@ -25,9 +26,13 @@ function slackTemplate(definition) {
 		...definition
 	};
 }
-/** Declare an email template. Throws when `props` uses an unsupported schema or `preview` does not parse. */
+/**
+* Declare an email template. Throws when `from` is missing or invalid, `replyTo` or `unsubscribeUrl`
+* is invalid, `props` uses an unsupported schema or `preview` does not parse.
+*/
 function emailTemplate(definition) {
 	assertTemplateId(definition.id, "emailTemplate");
+	require_email.assertEmailMetadata(definition, `emailTemplate('${definition.id}')`);
 	assertSupportedSchema(definition.props, definition.title);
 	parsePreview(definition.props, definition.preview, "email", definition.title);
 	return {

package/dist/templates.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"templates.cjs","names":["z"],"sources":["../src/templates.ts"],"sourcesContent":["import type { Block, KnownBlock } from '@slack/types';\nimport type { RESTPostAPIWebhookWithTokenJSONBody } from 'discord-api-types/v10';\nimport * as z from 'zod/mini';\nimport type * as core from 'zod/v4/core';\nimport type { ScalarIR } from './ir';\n\n/**\n * Template definitions — `emailTemplate`, `pushTemplate`, `discordTemplate` and `slackTemplate`. One\n * object per template, identified by its own `id` (unique per channel): workflows take the\n * definition itself (`.email(welcome, props)`), the config registers it, and the IR, the manifest,\n * the senders and the studio all find it by that id. Its Zod `props` schema is the only source of the\n * props type: the DSL's `.email()/.push()` arguments, the `preview`, and the\n * `component`/`content` parameter are all derived from it, and every render\n * parses the props against it first (types alone check nothing at run time).\n *\n * Kept free of React and of any renderer: the definitions are plain data plus\n * a function, so the DSL, the Worker and the studio can all import them; the\n * React rendering lives in `@shware/workflow/react-email`.\n *\n * Supported schemas (v1): a strict object (`z.strictObject`) whose fields are\n * string / number / boolean — optionally as enums or literals, optionally\n * `.optional()`, with the built-in checks (min, email, …). That is exactly\n * what IR message props can carry, and it keeps input and output identical, so\n * producer, studio and sender never disagree about a transformed value.\n * Anything else (nested objects, arrays, null, default/transform/coerce,\n * custom refinements) is rejected when the template is declared.\n */\n\n/** A strict Zod object schema of scalar fields — the accepted shape of `props`. */\nexport type PropsSchema = core.$ZodObject;\n\n/** What a push template's `content` returns: the notification itself. */\nexport interface PushContent {\n  title: string;\n  body: string;\n  /** Rich image URL (iOS attachment / Android BigPicture). */\n  image?: string;\n  /** Where a tap leads: the page a browser push opens (the site's root when absent). */\n  url?: string;\n}\n\n/** A Discord webhook message (`discord-api-types`): content, embeds, username, allowed mentions… */\nexport type DiscordContent = RESTPostAPIWebhookWithTokenJSONBody;\n\n/** A Slack incoming-webhook message: the fallback `text` and, usually, Block Kit `blocks`. */\nexport interface SlackContent {\n  /** Shown in notifications and wherever blocks cannot be; required even with blocks. */\n  text: string;\n  blocks?: (KnownBlock | Block)[];\n  username?: string;\n  icon_emoji?: string;\n  icon_url?: string;\n  mrkdwn?: boolean;\n  unfurl_links?: boolean;\n  unfurl_media?: boolean;\n}\n\n/** The channels a template can be declared for. */\nexport type TemplateChannel = 'email' | 'push' | 'discord' | 'slack';\n\ninterface TemplateBase<S extends PropsSchema> {\n  /**\n   * Wire identity, unique per channel: message nodes, the template manifest, every send and the\n   * studio's preview links name the template by it. Not something to rename for readability —\n   * `title` is; the property a registry holds it under is only a JavaScript name.\n   */\n  readonly id: string;\n  /** Display name in the studio (not the email subject, not the notification title). */\n  readonly title: string;\n  readonly description?: string | undefined;\n  readonly props: S;\n  /** Sample props for the studio; parsed against `props` when the template is declared. */\n  readonly preview: core.input<S>;\n}\n\nexport interface EmailTemplate<S extends PropsSchema = PropsSchema> extends TemplateBase<S> {\n  readonly kind: 'email-template';\n  readonly version: 1;\n  readonly subject: string;\n  /** The email body: a component over the parsed props (rendered by `@shware/workflow/react-email`). */\n  readonly component: (props: Readonly<core.output<S>>) => unknown;\n}\n\nexport interface PushTemplate<S extends PropsSchema = PropsSchema> extends TemplateBase<S> {\n  readonly kind: 'push-template';\n  readonly version: 1;\n  /** The notification, from the parsed props. Synchronous and pure; its result is checked before sending. */\n  readonly content: (props: Readonly<core.output<S>>) => PushContent;\n}\n\n/**\n * A message posted to a team channel through an incoming webhook (Discord, Slack). The webhook\n * URL is a secret, so it lives in the Worker's environment and the template reads it from there\n * at send time: `webhook: (env: Env) => env.WEBHOOK_DISCORD_ALERTS`, with `Env` the host's\n * zod-validated environment (`journeyWorker({ env: schema })`). The studio never calls it.\n */\ninterface WebhookTemplateBase<S extends PropsSchema, Env> extends TemplateBase<S> {\n  readonly version: 1;\n  // A method, so a template typed by the host's Env still fits a registry of any Env\n  webhook(env: Env): string | undefined;\n}\n\nexport interface DiscordTemplate<\n  S extends PropsSchema = PropsSchema,\n  Env = Record<string, unknown>,\n> extends WebhookTemplateBase<S, Env> {\n  readonly kind: 'discord-template';\n  /** The message, from the parsed props. Synchronous and pure; checked before sending. */\n  readonly content: (props: Readonly<core.output<S>>) => DiscordContent;\n}\n\nexport interface SlackTemplate<\n  S extends PropsSchema = PropsSchema,\n  Env = Record<string, unknown>,\n> extends WebhookTemplateBase<S, Env> {\n  readonly kind: 'slack-template';\n  /** The message, from the parsed props. Synchronous and pure; checked before sending. */\n  readonly content: (props: Readonly<core.output<S>>) => SlackContent;\n}\n\n/** Strips a Promise return out of the accepted callback types: async content is rejected at the type level. */\ntype Sync<T> = T extends Promise<unknown> ? never : T;\n\nexport interface EmailTemplateDefinition<S extends PropsSchema> {\n  id: string;\n  title: string;\n  description?: string;\n  props: S;\n  subject: string;\n  preview: NoInfer<core.input<S>>;\n  component: (props: NoInfer<Readonly<core.output<S>>>) => unknown;\n}\n\nexport interface PushTemplateDefinition<S extends PropsSchema, R> {\n  id: string;\n  title: string;\n  description?: string;\n  props: S;\n  preview: NoInfer<core.input<S>>;\n  content: (props: NoInfer<Readonly<core.output<S>>>) => Sync<R> & PushContent;\n}\n\nexport interface WebhookTemplateDefinition<S extends PropsSchema, Env, C> {\n  id: string;\n  title: string;\n  description?: string;\n  props: S;\n  preview: NoInfer<core.input<S>>;\n  /** The webhook URL, read from the Worker's environment when a message is sent. */\n  webhook: (env: Env) => string | undefined;\n  content: (props: NoInfer<Readonly<core.output<S>>>) => Sync<C>;\n}\n\n/** Declare a Discord webhook template. Throws when `props` is unsupported or `preview` does not parse. */\nexport function discordTemplate<S extends PropsSchema, Env = Record<string, unknown>>(\n  definition: WebhookTemplateDefinition<S, Env, DiscordContent>\n): DiscordTemplate<S, Env> {\n  assertTemplateId(definition.id, 'discordTemplate');\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'discord', definition.title);\n  return { kind: 'discord-template', version: 1, ...definition };\n}\n\n/** Declare a Slack webhook template. Throws when `props` is unsupported or `preview` does not parse. */\nexport function slackTemplate<S extends PropsSchema, Env = Record<string, unknown>>(\n  definition: WebhookTemplateDefinition<S, Env, SlackContent>\n): SlackTemplate<S, Env> {\n  assertTemplateId(definition.id, 'slackTemplate');\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'slack', definition.title);\n  return { kind: 'slack-template', version: 1, ...definition };\n}\n\n/** Declare an email template. Throws when `props` uses an unsupported schema or `preview` does not parse. */\nexport function emailTemplate<S extends PropsSchema>(\n  definition: EmailTemplateDefinition<S>\n): EmailTemplate<S> {\n  assertTemplateId(definition.id, 'emailTemplate');\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'email', definition.title);\n  return { kind: 'email-template', version: 1, ...definition };\n}\n\n/** Declare a push template. Throws when `props` uses an unsupported schema or `preview` does not parse. */\nexport function pushTemplate<S extends PropsSchema, R extends PushContent>(\n  definition: PushTemplateDefinition<S, R>\n): PushTemplate<S> {\n  assertTemplateId(definition.id, 'pushTemplate');\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'push', definition.title);\n  return { kind: 'push-template', version: 1, ...definition } as unknown as PushTemplate<S>;\n}\n\nfunction assertTemplateId(id: unknown, factory: string): void {\n  if (!isTemplateId(id)) {\n    throw new TypeError(`${factory}(): 'id' must be a non-empty string`);\n  }\n}\n\nfunction isTemplateId(id: unknown): id is string {\n  return typeof id === 'string' && id.trim() !== '';\n}\n\nexport function isEmailTemplate(value: unknown): value is EmailTemplate {\n  return isMarked(value, 'email-template');\n}\n\nexport function isPushTemplate(value: unknown): value is PushTemplate {\n  return isMarked(value, 'push-template');\n}\n\nexport function isDiscordTemplate(value: unknown): value is DiscordTemplate {\n  return isMarked(value, 'discord-template');\n}\n\nexport function isSlackTemplate(value: unknown): value is SlackTemplate {\n  return isMarked(value, 'slack-template');\n}\n\n/** Any declared template. */\nexport type AnyTemplate = EmailTemplate | PushTemplate | DiscordTemplate | SlackTemplate;\n\nexport const CHANNEL_OF: Record<AnyTemplate['kind'], TemplateChannel> = {\n  'email-template': 'email',\n  'push-template': 'push',\n  'discord-template': 'discord',\n  'slack-template': 'slack',\n};\n\nfunction isMarked(value: unknown, kind: string): boolean {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    (value as { kind?: unknown }).kind === kind &&\n    (value as { version?: unknown }).version === 1\n  );\n}\n\n/** Any template definition, whatever its channel. */\nexport function isTemplate(value: unknown): value is AnyTemplate {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    Object.hasOwn(CHANNEL_OF, (value as { kind?: unknown }).kind as string) &&\n    (value as { version?: unknown }).version === 1\n  );\n}\n\n/* --------------------------------- registry -------------------------------- */\n\n/**\n * The template registry: per channel, the definitions the project registers. Each channel is a\n * plain object whose property names are JavaScript names only — a template is identified by its\n * own `id` (`indexTemplates`).\n */\nexport interface TemplateRegistry {\n  readonly email?: Readonly<Record<string, EmailTemplate>>;\n  readonly push?: Readonly<Record<string, PushTemplate>>;\n  /** Discord webhook templates, each typed by the host's Env its `webhook` reads. */\n  readonly discord?: Readonly<Record<string, DiscordTemplate<PropsSchema, never>>>;\n  readonly slack?: Readonly<Record<string, SlackTemplate<PropsSchema, never>>>;\n}\n\n/** The template a channel's registry holds. */\nexport interface ChannelTemplate {\n  email: EmailTemplate;\n  push: PushTemplate;\n  discord: DiscordTemplate;\n  slack: SlackTemplate;\n}\n\nconst IS_TEMPLATE: Record<TemplateChannel, (value: unknown) => boolean> = {\n  email: isEmailTemplate,\n  push: isPushTemplate,\n  discord: isDiscordTemplate,\n  slack: isSlackTemplate,\n};\n\n/**\n * A channel's registry by template id — how everything that turns an id back into a definition\n * (the compiler, the validator, the renderers, the senders, the studio) looks it up. Throws when\n * an entry is not a template of the channel, has no id, or shares its id with another entry: an id\n * is registered once per channel, so two registrations (even of the same object) are an error,\n * not a silent last-wins. Insertion order is the registry's.\n */\nexport function indexTemplates<C extends TemplateChannel>(\n  channel: C,\n  registry: Readonly<Record<string, unknown>> | undefined\n): ReadonlyMap<string, ChannelTemplate[C]> {\n  const index = new Map<string, ChannelTemplate[C]>();\n  const paths = new Map<string, string>();\n  for (const [name, entry] of Object.entries(registry ?? {})) {\n    const path = `templates.${channel}.${name}`;\n    if (!IS_TEMPLATE[channel](entry)) {\n      throw new TypeError(`${path} is not a ${channel} template`);\n    }\n    const id = (entry as AnyTemplate).id;\n    if (!isTemplateId(id)) throw new TypeError(`${path} has no id`);\n    const previous = paths.get(id);\n    if (previous !== undefined) {\n      throw new TypeError(\n        `${channel} template id '${id}' is registered twice: ${previous} and ${path}`\n      );\n    }\n    paths.set(id, path);\n    index.set(id, entry as ChannelTemplate[C]);\n  }\n  return index;\n}\n\n/** A registered template by id; throws naming the channel and id when there is none. */\nexport function lookupTemplate<T>(index: ReadonlyMap<string, T>, channel: string, id: string): T {\n  const template = index.get(id);\n  if (template === undefined) throw new Error(`${channel} template '${id}' is not registered`);\n  return template;\n}\n\n/* ------------------------------- validation -------------------------------- */\n\n/** One failed field, with the dotted path the studio and the logs show. */\nexport interface TemplateIssue {\n  path: string;\n  message: string;\n}\n\n/**\n * A template refused its input (`phase: 'props'` — the component/content was\n * never called) or its content function returned something that is not a\n * notification (`phase: 'content'` — called, but nothing is sent). Never a\n * provider failure: a sender must not read it as a dead device token.\n */\nexport class TemplateValidationError extends Error {\n  override readonly name = 'TemplateValidationError';\n  constructor(\n    readonly channel: TemplateChannel,\n    readonly template: string,\n    readonly phase: 'props' | 'content',\n    readonly issues: TemplateIssue[]\n  ) {\n    super(\n      `${channel} template '${template}' ${phase === 'props' ? 'rejected its props' : 'returned invalid content'}: ${issues\n        .map((i) => `${i.path || '(root)'} ${i.message}`)\n        .join('; ')}`\n    );\n  }\n}\n\nfunction issuesOf(error: core.$ZodError): TemplateIssue[] {\n  return error.issues.map((issue) => ({\n    path: issue.path.map(String).join('.'),\n    message: issue.message,\n  }));\n}\n\n/**\n * Parse message props against a template's schema and return the parsed value\n * — the only value anything downstream may use. Throws TemplateValidationError.\n */\nexport function parseTemplateProps<S extends PropsSchema>(\n  template: EmailTemplate<S> | PushTemplate<S> | DiscordTemplate<S> | SlackTemplate<S>,\n  props: Record<string, unknown>\n): core.output<S> {\n  const channel = CHANNEL_OF[template.kind];\n  const result = z.safeParse(template.props, props);\n  if (!result.success) {\n    throw new TemplateValidationError(channel, template.id, 'props', issuesOf(result.error));\n  }\n  return result.data;\n}\n\nconst pushContentSchema = z.strictObject({\n  title: z.string(),\n  body: z.string(),\n  image: z.optional(z.string()),\n  url: z.optional(z.string()),\n});\n\n/** Run a push template's content over parsed props and check the notification it returns. */\nexport function renderPushContent(\n  template: PushTemplate,\n  props: Record<string, unknown>\n): PushContent {\n  const parsed = parseTemplateProps(template, props);\n  const output: unknown = template.content(parsed);\n  // A Promise (async content smuggled past the types) is an object without title/body: refused here\n  const result = z.safeParse(pushContentSchema, output);\n  if (!result.success) {\n    throw new TemplateValidationError('push', template.id, 'content', issuesOf(result.error));\n  }\n  return result.data;\n}\n\n/**\n * What a Discord webhook accepts at all: something to show (content, an embed, a poll or\n * components) and content within Discord's 2000 characters. The rest of the body is Discord's to\n * judge; its types come from `discord-api-types`.\n */\nconst discordContentSchema = z.looseObject({\n  content: z.optional(z.string().check(z.maxLength(2000))),\n  embeds: z.optional(z.array(z.looseObject({}))),\n});\n\nconst slackContentSchema = z.looseObject({\n  text: z.string().check(z.minLength(1)),\n  blocks: z.optional(z.array(z.looseObject({ type: z.string() }))),\n});\n\n/** Run a Discord template's content over parsed props and check the message it returns. */\nexport function renderDiscordContent(\n  template: DiscordTemplate,\n  props: Record<string, unknown>\n): DiscordContent {\n  const output: unknown = template.content(parseTemplateProps(template, props));\n  const result = z.safeParse(discordContentSchema, output);\n  const empty =\n    result.success &&\n    !result.data.content &&\n    (result.data.embeds?.length ?? 0) === 0 &&\n    (output as { poll?: unknown; components?: unknown[] }).poll === undefined &&\n    ((output as { components?: unknown[] }).components?.length ?? 0) === 0;\n  if (!result.success || empty) {\n    const issues = result.success\n      ? [{ path: '', message: 'a Discord message needs content, an embed, a poll or components' }]\n      : issuesOf(result.error);\n    throw new TemplateValidationError('discord', template.id, 'content', issues);\n  }\n  return output as DiscordContent;\n}\n\n/** Run a Slack template's content over parsed props and check the message it returns. */\nexport function renderSlackContent(\n  template: SlackTemplate,\n  props: Record<string, unknown>\n): SlackContent {\n  const output: unknown = template.content(parseTemplateProps(template, props));\n  const result = z.safeParse(slackContentSchema, output);\n  if (!result.success) {\n    throw new TemplateValidationError('slack', template.id, 'content', issuesOf(result.error));\n  }\n  return output as SlackContent;\n}\n\nfunction parsePreview(\n  schema: PropsSchema,\n  preview: unknown,\n  channel: TemplateChannel,\n  title: string\n) {\n  const result = z.safeParse(schema, preview);\n  if (!result.success) {\n    throw new TemplateValidationError(\n      channel,\n      title,\n      'props',\n      issuesOf(result.error).map((i) => Object.assign(i, { message: `preview: ${i.message}` }))\n    );\n  }\n}\n\n/* ---------------------------- supported schemas ---------------------------- */\n\nconst SCALAR_TYPES = new Set(['string', 'number', 'boolean', 'enum']);\n\n/** Throws when `schema` is outside the v1 subset (see the header). */\nexport function assertSupportedSchema(schema: unknown, where: string): void {\n  const fail = (reason: string): never => {\n    throw new TypeError(`template '${where}': unsupported props schema — ${reason}`);\n  };\n  const def = (schema as core.$ZodType | undefined)?._zod?.def;\n  if (def?.type !== 'object') fail('props must be a z.strictObject({...})');\n  const object = def as core.$ZodObjectDef;\n  if (object.catchall?._zod.def.type !== 'never') {\n    fail(\n      'props must be strict (z.strictObject): unknown fields would be dropped or passed through'\n    );\n  }\n  rejectCustomChecks(object, where, fail);\n  for (const [field, value] of Object.entries(object.shape)) {\n    let fieldDef = value._zod.def;\n    if (fieldDef.type === 'optional') {\n      // The wrapper carries checks of its own (`.optional().overwrite(...)`): refuse them too\n      rejectCustomChecks(fieldDef, `${where}.${field}`, fail);\n      fieldDef = (fieldDef as core.$ZodOptionalDef).innerType._zod.def;\n    }\n    if (fieldDef.type === 'literal') {\n      const values = (fieldDef as core.$ZodLiteralDef<core.util.Literal>).values;\n      if (!values.every((v) => ['string', 'number', 'boolean'].includes(typeof v))) {\n        fail(`field '${field}' is a literal of a non-scalar value`);\n      }\n    } else if (!SCALAR_TYPES.has(fieldDef.type)) {\n      fail(\n        `field '${field}' is ${fieldDef.type}; only string, number, boolean, enum and literal fields (optionally .optional()) are supported`\n      );\n    }\n    if ((fieldDef as { coerce?: boolean }).coerce === true) {\n      fail(`field '${field}' coerces its input (z.coerce), which would change what the props mean`);\n    }\n    rejectCustomChecks(fieldDef, `${where}.${field}`, fail);\n  }\n}\n\n/**\n * Checks the subset refuses: `custom` runs arbitrary code (`.refine()`), and\n * `overwrite` changes the value (`.overwrite()`, `.trim()`, `.toLowerCase()`…)\n * — the props are parsed more than once on the way to a send (the validator,\n * then the renderer), so a value-changing check would apply twice and the\n * email would differ from the preview.\n */\nfunction rejectCustomChecks(def: core.$ZodTypeDef, where: string, fail: (reason: string) => never) {\n  for (const check of def.checks ?? []) {\n    if (check._zod.def.check === 'custom') {\n      fail(`'${where}' uses a custom refinement, which the template subset does not support`);\n    }\n    if (check._zod.def.check === 'overwrite') {\n      fail(\n        `'${where}' changes the value (.overwrite, .trim, .toLowerCase, …), which the template subset does not support`\n      );\n    }\n  }\n}\n\n/** The scalar props a template accepts, as the IR resolves them before parsing. */\nexport type ResolvedProps = Record<string, ScalarIR | undefined>;\n\n/**\n * The engine's MessageValidator over the template registries: the message's\n * props are parsed by its template (the parsed value is what gets sent); a\n * push's content is also run once and checked, so an invalid notification\n * stops the send before any device; Discord and Slack content likewise. Channels without a\n * registry here (sms, …) pass through to their app-supplied senders.\n */\nexport function registryValidator(registry: TemplateRegistry): {\n  validate(message: { channel: string; template: string; props: ResolvedProps }): ResolvedProps;\n} {\n  const email = indexTemplates('email', registry.email);\n  const push = indexTemplates('push', registry.push);\n  const discord = indexTemplates('discord', registry.discord);\n  const slack = indexTemplates('slack', registry.slack);\n  return {\n    validate({ channel, template, props }) {\n      if (channel === 'email') {\n        const entry = lookupTemplate(email, 'email', template);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      if (channel === 'push') {\n        const entry = lookupTemplate(push, 'push', template);\n        renderPushContent(entry, props);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      if (channel === 'discord') {\n        const entry = lookupTemplate(discord, 'discord', template);\n        renderDiscordContent(entry, props);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      if (channel === 'slack') {\n        const entry = lookupTemplate(slack, 'slack', template);\n        renderSlackContent(entry, props);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      return props;\n    },\n  };\n}\n"],"mappings":";;;;;;AA0JA,SAAgB,gBACd,YACyB;CACzB,iBAAiB,WAAW,IAAI,iBAAiB;CACjD,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,WAAW,WAAW,KAAK;CAC9E,OAAO;EAAE,MAAM;EAAoB,SAAS;EAAG,GAAG;CAAW;AAC/D;;AAGA,SAAgB,cACd,YACuB;CACvB,iBAAiB,WAAW,IAAI,eAAe;CAC/C,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,SAAS,WAAW,KAAK;CAC5E,OAAO;EAAE,MAAM;EAAkB,SAAS;EAAG,GAAG;CAAW;AAC7D;;AAGA,SAAgB,cACd,YACkB;CAClB,iBAAiB,WAAW,IAAI,eAAe;CAC/C,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,SAAS,WAAW,KAAK;CAC5E,OAAO;EAAE,MAAM;EAAkB,SAAS;EAAG,GAAG;CAAW;AAC7D;;AAGA,SAAgB,aACd,YACiB;CACjB,iBAAiB,WAAW,IAAI,cAAc;CAC9C,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,QAAQ,WAAW,KAAK;CAC3E,OAAO;EAAE,MAAM;EAAiB,SAAS;EAAG,GAAG;CAAW;AAC5D;AAEA,SAAS,iBAAiB,IAAa,SAAuB;CAC5D,IAAI,CAAC,aAAa,EAAE,GAClB,MAAM,IAAI,UAAU,GAAG,QAAQ,oCAAoC;AAEvE;AAEA,SAAS,aAAa,IAA2B;CAC/C,OAAO,OAAO,OAAO,YAAY,GAAG,KAAK,MAAM;AACjD;AAEA,SAAgB,gBAAgB,OAAwC;CACtE,OAAO,SAAS,OAAO,gBAAgB;AACzC;AAEA,SAAgB,eAAe,OAAuC;CACpE,OAAO,SAAS,OAAO,eAAe;AACxC;AAEA,SAAgB,kBAAkB,OAA0C;CAC1E,OAAO,SAAS,OAAO,kBAAkB;AAC3C;AAEA,SAAgB,gBAAgB,OAAwC;CACtE,OAAO,SAAS,OAAO,gBAAgB;AACzC;AAKA,MAAa,aAA2D;CACtE,kBAAkB;CAClB,iBAAiB;CACjB,oBAAoB;CACpB,kBAAkB;AACpB;AAEA,SAAS,SAAS,OAAgB,MAAuB;CACvD,OACE,OAAO,UAAU,YACjB,UAAU,QACT,MAA6B,SAAS,QACtC,MAAgC,YAAY;AAEjD;;AAGA,SAAgB,WAAW,OAAsC;CAC/D,OACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAO,OAAO,YAAa,MAA6B,IAAc,KACrE,MAAgC,YAAY;AAEjD;AAyBA,MAAM,cAAoE;CACxE,OAAO;CACP,MAAM;CACN,SAAS;CACT,OAAO;AACT;;;;;;;;AASA,SAAgB,eACd,SACA,UACyC;CACzC,MAAM,wBAAQ,IAAI,IAAgC;CAClD,MAAM,wBAAQ,IAAI,IAAoB;CACtC,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,YAAY,CAAC,CAAC,GAAG;EAC1D,MAAM,OAAO,aAAa,QAAQ,GAAG;EACrC,IAAI,CAAC,YAAY,QAAQ,CAAC,KAAK,GAC7B,MAAM,IAAI,UAAU,GAAG,KAAK,YAAY,QAAQ,UAAU;EAE5D,MAAM,KAAM,MAAsB;EAClC,IAAI,CAAC,aAAa,EAAE,GAAG,MAAM,IAAI,UAAU,GAAG,KAAK,WAAW;EAC9D,MAAM,WAAW,MAAM,IAAI,EAAE;EAC7B,IAAI,aAAa,KAAA,GACf,MAAM,IAAI,UACR,GAAG,QAAQ,gBAAgB,GAAG,yBAAyB,SAAS,OAAO,MACzE;EAEF,MAAM,IAAI,IAAI,IAAI;EAClB,MAAM,IAAI,IAAI,KAA2B;CAC3C;CACA,OAAO;AACT;;AAGA,SAAgB,eAAkB,OAA+B,SAAiB,IAAe;CAC/F,MAAM,WAAW,MAAM,IAAI,EAAE;CAC7B,IAAI,aAAa,KAAA,GAAW,MAAM,IAAI,MAAM,GAAG,QAAQ,aAAa,GAAG,oBAAoB;CAC3F,OAAO;AACT;;;;;;;AAgBA,IAAa,0BAAb,cAA6C,MAAM;CAGtC;CACA;CACA;CACA;CALX,OAAyB;CACzB,YACE,SACA,UACA,OACA,QACA;EACA,MACE,GAAG,QAAQ,aAAa,SAAS,IAAI,UAAU,UAAU,uBAAuB,2BAA2B,IAAI,OAC5G,KAAK,MAAM,GAAG,EAAE,QAAQ,SAAS,GAAG,EAAE,SAAS,CAAC,CAChD,KAAK,IAAI,GACd;EATS,KAAA,UAAA;EACA,KAAA,WAAA;EACA,KAAA,QAAA;EACA,KAAA,SAAA;CAOX;AACF;AAEA,SAAS,SAAS,OAAwC;CACxD,OAAO,MAAM,OAAO,KAAK,WAAW;EAClC,MAAM,MAAM,KAAK,IAAI,MAAM,CAAC,CAAC,KAAK,GAAG;EACrC,SAAS,MAAM;CACjB,EAAE;AACJ;;;;;AAMA,SAAgB,mBACd,UACA,OACgB;CAChB,MAAM,UAAU,WAAW,SAAS;CACpC,MAAM,SAASA,SAAE,UAAU,SAAS,OAAO,KAAK;CAChD,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBAAwB,SAAS,SAAS,IAAI,SAAS,SAAS,OAAO,KAAK,CAAC;CAEzF,OAAO,OAAO;AAChB;AAEA,MAAM,oBAAoBA,SAAE,aAAa;CACvC,OAAOA,SAAE,OAAO;CAChB,MAAMA,SAAE,OAAO;CACf,OAAOA,SAAE,SAASA,SAAE,OAAO,CAAC;CAC5B,KAAKA,SAAE,SAASA,SAAE,OAAO,CAAC;AAC5B,CAAC;;AAGD,SAAgB,kBACd,UACA,OACa;CACb,MAAM,SAAS,mBAAmB,UAAU,KAAK;CACjD,MAAM,SAAkB,SAAS,QAAQ,MAAM;CAE/C,MAAM,SAASA,SAAE,UAAU,mBAAmB,MAAM;CACpD,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBAAwB,QAAQ,SAAS,IAAI,WAAW,SAAS,OAAO,KAAK,CAAC;CAE1F,OAAO,OAAO;AAChB;;;;;;AAOA,MAAM,uBAAuBA,SAAE,YAAY;CACzC,SAASA,SAAE,SAASA,SAAE,OAAO,CAAC,CAAC,MAAMA,SAAE,UAAU,GAAI,CAAC,CAAC;CACvD,QAAQA,SAAE,SAASA,SAAE,MAAMA,SAAE,YAAY,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,qBAAqBA,SAAE,YAAY;CACvC,MAAMA,SAAE,OAAO,CAAC,CAAC,MAAMA,SAAE,UAAU,CAAC,CAAC;CACrC,QAAQA,SAAE,SAASA,SAAE,MAAMA,SAAE,YAAY,EAAE,MAAMA,SAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;;AAGD,SAAgB,qBACd,UACA,OACgB;CAChB,MAAM,SAAkB,SAAS,QAAQ,mBAAmB,UAAU,KAAK,CAAC;CAC5E,MAAM,SAASA,SAAE,UAAU,sBAAsB,MAAM;CACvD,MAAM,QACJ,OAAO,WACP,CAAC,OAAO,KAAK,YACZ,OAAO,KAAK,QAAQ,UAAU,OAAO,KACrC,OAAsD,SAAS,KAAA,MAC9D,OAAsC,YAAY,UAAU,OAAO;CACvE,IAAI,CAAC,OAAO,WAAW,OAAO;EAC5B,MAAM,SAAS,OAAO,UAClB,CAAC;GAAE,MAAM;GAAI,SAAS;EAAkE,CAAC,IACzF,SAAS,OAAO,KAAK;EACzB,MAAM,IAAI,wBAAwB,WAAW,SAAS,IAAI,WAAW,MAAM;CAC7E;CACA,OAAO;AACT;;AAGA,SAAgB,mBACd,UACA,OACc;CACd,MAAM,SAAkB,SAAS,QAAQ,mBAAmB,UAAU,KAAK,CAAC;CAC5E,MAAM,SAASA,SAAE,UAAU,oBAAoB,MAAM;CACrD,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBAAwB,SAAS,SAAS,IAAI,WAAW,SAAS,OAAO,KAAK,CAAC;CAE3F,OAAO;AACT;AAEA,SAAS,aACP,QACA,SACA,SACA,OACA;CACA,MAAM,SAASA,SAAE,UAAU,QAAQ,OAAO;CAC1C,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBACR,SACA,OACA,SACA,SAAS,OAAO,KAAK,CAAC,CAAC,KAAK,MAAM,OAAO,OAAO,GAAG,EAAE,SAAS,YAAY,EAAE,UAAU,CAAC,CAAC,CAC1F;AAEJ;AAIA,MAAM,+BAAe,IAAI,IAAI;CAAC;CAAU;CAAU;CAAW;AAAM,CAAC;;AAGpE,SAAgB,sBAAsB,QAAiB,OAAqB;CAC1E,MAAM,QAAQ,WAA0B;EACtC,MAAM,IAAI,UAAU,aAAa,MAAM,gCAAgC,QAAQ;CACjF;CACA,MAAM,MAAO,QAAsC,MAAM;CACzD,IAAI,KAAK,SAAS,UAAU,KAAK,uCAAuC;CACxE,MAAM,SAAS;CACf,IAAI,OAAO,UAAU,KAAK,IAAI,SAAS,SACrC,KACE,0FACF;CAEF,mBAAmB,QAAQ,OAAO,IAAI;CACtC,KAAK,MAAM,CAAC,OAAO,UAAU,OAAO,QAAQ,OAAO,KAAK,GAAG;EACzD,IAAI,WAAW,MAAM,KAAK;EAC1B,IAAI,SAAS,SAAS,YAAY;GAEhC,mBAAmB,UAAU,GAAG,MAAM,GAAG,SAAS,IAAI;GACtD,WAAY,SAAkC,UAAU,KAAK;EAC/D;EACA,IAAI,SAAS,SAAS,WAEhB;OAAA,CADY,SAAoD,OACxD,OAAO,MAAM;IAAC;IAAU;IAAU;GAAS,CAAC,CAAC,SAAS,OAAO,CAAC,CAAC,GACzE,KAAK,UAAU,MAAM,qCAAqC;EAAA,OAEvD,IAAI,CAAC,aAAa,IAAI,SAAS,IAAI,GACxC,KACE,UAAU,MAAM,OAAO,SAAS,KAAK,+FACvC;EAEF,IAAK,SAAkC,WAAW,MAChD,KAAK,UAAU,MAAM,uEAAuE;EAE9F,mBAAmB,UAAU,GAAG,MAAM,GAAG,SAAS,IAAI;CACxD;AACF;;;;;;;;AASA,SAAS,mBAAmB,KAAuB,OAAe,MAAiC;CACjG,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,GAAG;EACpC,IAAI,MAAM,KAAK,IAAI,UAAU,UAC3B,KAAK,IAAI,MAAM,uEAAuE;EAExF,IAAI,MAAM,KAAK,IAAI,UAAU,aAC3B,KACE,IAAI,MAAM,qGACZ;CAEJ;AACF;;;;;;;;AAYA,SAAgB,kBAAkB,UAEhC;CACA,MAAM,QAAQ,eAAe,SAAS,SAAS,KAAK;CACpD,MAAM,OAAO,eAAe,QAAQ,SAAS,IAAI;CACjD,MAAM,UAAU,eAAe,WAAW,SAAS,OAAO;CAC1D,MAAM,QAAQ,eAAe,SAAS,SAAS,KAAK;CACpD,OAAO,EACL,SAAS,EAAE,SAAS,UAAU,SAAS;EACrC,IAAI,YAAY,SAEd,OAAO,mBADO,eAAe,OAAO,SAAS,QACf,GAAG,KAAK;EAExC,IAAI,YAAY,QAAQ;GACtB,MAAM,QAAQ,eAAe,MAAM,QAAQ,QAAQ;GACnD,kBAAkB,OAAO,KAAK;GAC9B,OAAO,mBAAmB,OAAO,KAAK;EACxC;EACA,IAAI,YAAY,WAAW;GACzB,MAAM,QAAQ,eAAe,SAAS,WAAW,QAAQ;GACzD,qBAAqB,OAAO,KAAK;GACjC,OAAO,mBAAmB,OAAO,KAAK;EACxC;EACA,IAAI,YAAY,SAAS;GACvB,MAAM,QAAQ,eAAe,OAAO,SAAS,QAAQ;GACrD,mBAAmB,OAAO,KAAK;GAC/B,OAAO,mBAAmB,OAAO,KAAK;EACxC;EACA,OAAO;CACT,EACF;AACF"}
+{"version":3,"file":"templates.cjs","names":["z"],"sources":["../src/templates.ts"],"sourcesContent":["import type { Block, KnownBlock } from '@slack/types';\nimport type { RESTPostAPIWebhookWithTokenJSONBody } from 'discord-api-types/v10';\nimport * as z from 'zod/mini';\nimport type * as core from 'zod/v4/core';\nimport { type EmailAddress, assertEmailMetadata } from './email';\nimport type { ScalarIR } from './ir';\n\n/**\n * Template definitions — `emailTemplate`, `pushTemplate`, `discordTemplate` and `slackTemplate`. One\n * object per template, identified by its own `id` (unique per channel): workflows take the\n * definition itself (`.email(welcome, props)`), the config registers it, and the IR, the manifest,\n * the senders and the studio all find it by that id. Its Zod `props` schema is the only source of the\n * props type: the DSL's `.email()/.push()` arguments, the `preview`, and the\n * `component`/`content` parameter are all derived from it, and every render\n * parses the props against it first (types alone check nothing at run time).\n *\n * Kept free of React and of any renderer: the definitions are plain data plus\n * a function, so the DSL, the Worker and the studio can all import them; the\n * React rendering lives in `@shware/workflow/react-email`.\n *\n * Supported schemas (v1): a strict object (`z.strictObject`) whose fields are\n * string / number / boolean — optionally as enums or literals, optionally\n * `.optional()`, with the built-in checks (min, email, …). That is exactly\n * what IR message props can carry, and it keeps input and output identical, so\n * producer, studio and sender never disagree about a transformed value.\n * Anything else (nested objects, arrays, null, default/transform/coerce,\n * custom refinements) is rejected when the template is declared.\n */\n\n/** A strict Zod object schema of scalar fields — the accepted shape of `props`. */\nexport type PropsSchema = core.$ZodObject;\n\n/** What a push template's `content` returns: the notification itself. */\nexport interface PushContent {\n  title: string;\n  body: string;\n  /** Rich image URL (iOS attachment / Android BigPicture). */\n  image?: string;\n  /** Where a tap leads: the page a browser push opens (the site's root when absent). */\n  url?: string;\n}\n\n/** A Discord webhook message (`discord-api-types`): content, embeds, username, allowed mentions… */\nexport type DiscordContent = RESTPostAPIWebhookWithTokenJSONBody;\n\n/** A Slack incoming-webhook message: the fallback `text` and, usually, Block Kit `blocks`. */\nexport interface SlackContent {\n  /** Shown in notifications and wherever blocks cannot be; required even with blocks. */\n  text: string;\n  blocks?: (KnownBlock | Block)[];\n  username?: string;\n  icon_emoji?: string;\n  icon_url?: string;\n  mrkdwn?: boolean;\n  unfurl_links?: boolean;\n  unfurl_media?: boolean;\n}\n\n/** The channels a template can be declared for. */\nexport type TemplateChannel = 'email' | 'push' | 'discord' | 'slack';\n\ninterface TemplateBase<S extends PropsSchema> {\n  /**\n   * Wire identity, unique per channel: message nodes, the template manifest, every send and the\n   * studio's preview links name the template by it. Not something to rename for readability —\n   * `title` is; the property a registry holds it under is only a JavaScript name.\n   */\n  readonly id: string;\n  /** Display name in the studio (not the email subject, not the notification title). */\n  readonly title: string;\n  readonly description?: string | undefined;\n  readonly props: S;\n  /** Sample props for the studio; parsed against `props` when the template is declared. */\n  readonly preview: core.input<S>;\n}\n\n/**\n * Who an email comes from and where it leads: declared on each template, never inherited from a\n * global sender. Metadata, not props — the component never receives it; its layout reads the\n * resolved unsubscribe link with `useEmailContext()` (`@shware/workflow/email-context`).\n */\nexport interface EmailMetadata {\n  readonly from: EmailAddress;\n  /** Where replies go; left out, the email has no Reply-To (it is not `from`, and not inherited). */\n  readonly replyTo?: EmailAddress | undefined;\n  /** This template's unsubscribe link; left out, the config's `email.unsubscribeUrl` (if any). */\n  readonly unsubscribeUrl?: string | undefined;\n}\n\nexport interface EmailTemplate<S extends PropsSchema = PropsSchema>\n  extends TemplateBase<S>, EmailMetadata {\n  readonly kind: 'email-template';\n  readonly version: 1;\n  readonly subject: string;\n  /** The email body: a component over the parsed props (rendered by `@shware/workflow/react-email`). */\n  readonly component: (props: Readonly<core.output<S>>) => unknown;\n}\n\nexport interface PushTemplate<S extends PropsSchema = PropsSchema> extends TemplateBase<S> {\n  readonly kind: 'push-template';\n  readonly version: 1;\n  /** The notification, from the parsed props. Synchronous and pure; its result is checked before sending. */\n  readonly content: (props: Readonly<core.output<S>>) => PushContent;\n}\n\n/**\n * A message posted to a team channel through an incoming webhook (Discord, Slack). The webhook\n * URL is a secret, so it lives in the Worker's environment and the template reads it from there\n * at send time: `webhook: (env: Env) => env.WEBHOOK_DISCORD_ALERTS`, with `Env` the host's\n * zod-validated environment (`journeyWorker({ env: schema })`). The studio never calls it.\n */\ninterface WebhookTemplateBase<S extends PropsSchema, Env> extends TemplateBase<S> {\n  readonly version: 1;\n  // A method, so a template typed by the host's Env still fits a registry of any Env\n  webhook(env: Env): string | undefined;\n}\n\nexport interface DiscordTemplate<\n  S extends PropsSchema = PropsSchema,\n  Env = Record<string, unknown>,\n> extends WebhookTemplateBase<S, Env> {\n  readonly kind: 'discord-template';\n  /** The message, from the parsed props. Synchronous and pure; checked before sending. */\n  readonly content: (props: Readonly<core.output<S>>) => DiscordContent;\n}\n\nexport interface SlackTemplate<\n  S extends PropsSchema = PropsSchema,\n  Env = Record<string, unknown>,\n> extends WebhookTemplateBase<S, Env> {\n  readonly kind: 'slack-template';\n  /** The message, from the parsed props. Synchronous and pure; checked before sending. */\n  readonly content: (props: Readonly<core.output<S>>) => SlackContent;\n}\n\n/** Strips a Promise return out of the accepted callback types: async content is rejected at the type level. */\ntype Sync<T> = T extends Promise<unknown> ? never : T;\n\nexport interface EmailTemplateDefinition<S extends PropsSchema> {\n  id: string;\n  title: string;\n  description?: string;\n  from: EmailAddress;\n  replyTo?: EmailAddress;\n  unsubscribeUrl?: string;\n  props: S;\n  subject: string;\n  preview: NoInfer<core.input<S>>;\n  component: (props: NoInfer<Readonly<core.output<S>>>) => unknown;\n}\n\nexport interface PushTemplateDefinition<S extends PropsSchema, R> {\n  id: string;\n  title: string;\n  description?: string;\n  props: S;\n  preview: NoInfer<core.input<S>>;\n  content: (props: NoInfer<Readonly<core.output<S>>>) => Sync<R> & PushContent;\n}\n\nexport interface WebhookTemplateDefinition<S extends PropsSchema, Env, C> {\n  id: string;\n  title: string;\n  description?: string;\n  props: S;\n  preview: NoInfer<core.input<S>>;\n  /** The webhook URL, read from the Worker's environment when a message is sent. */\n  webhook: (env: Env) => string | undefined;\n  content: (props: NoInfer<Readonly<core.output<S>>>) => Sync<C>;\n}\n\n/** Declare a Discord webhook template. Throws when `props` is unsupported or `preview` does not parse. */\nexport function discordTemplate<S extends PropsSchema, Env = Record<string, unknown>>(\n  definition: WebhookTemplateDefinition<S, Env, DiscordContent>\n): DiscordTemplate<S, Env> {\n  assertTemplateId(definition.id, 'discordTemplate');\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'discord', definition.title);\n  return { kind: 'discord-template', version: 1, ...definition };\n}\n\n/** Declare a Slack webhook template. Throws when `props` is unsupported or `preview` does not parse. */\nexport function slackTemplate<S extends PropsSchema, Env = Record<string, unknown>>(\n  definition: WebhookTemplateDefinition<S, Env, SlackContent>\n): SlackTemplate<S, Env> {\n  assertTemplateId(definition.id, 'slackTemplate');\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'slack', definition.title);\n  return { kind: 'slack-template', version: 1, ...definition };\n}\n\n/**\n * Declare an email template. Throws when `from` is missing or invalid, `replyTo` or `unsubscribeUrl`\n * is invalid, `props` uses an unsupported schema or `preview` does not parse.\n */\nexport function emailTemplate<S extends PropsSchema>(\n  definition: EmailTemplateDefinition<S>\n): EmailTemplate<S> {\n  assertTemplateId(definition.id, 'emailTemplate');\n  assertEmailMetadata(definition, `emailTemplate('${definition.id}')`);\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'email', definition.title);\n  return { kind: 'email-template', version: 1, ...definition };\n}\n\n/** Declare a push template. Throws when `props` uses an unsupported schema or `preview` does not parse. */\nexport function pushTemplate<S extends PropsSchema, R extends PushContent>(\n  definition: PushTemplateDefinition<S, R>\n): PushTemplate<S> {\n  assertTemplateId(definition.id, 'pushTemplate');\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'push', definition.title);\n  return { kind: 'push-template', version: 1, ...definition } as unknown as PushTemplate<S>;\n}\n\nfunction assertTemplateId(id: unknown, factory: string): void {\n  if (!isTemplateId(id)) {\n    throw new TypeError(`${factory}(): 'id' must be a non-empty string`);\n  }\n}\n\nfunction isTemplateId(id: unknown): id is string {\n  return typeof id === 'string' && id.trim() !== '';\n}\n\nexport function isEmailTemplate(value: unknown): value is EmailTemplate {\n  return isMarked(value, 'email-template');\n}\n\nexport function isPushTemplate(value: unknown): value is PushTemplate {\n  return isMarked(value, 'push-template');\n}\n\nexport function isDiscordTemplate(value: unknown): value is DiscordTemplate {\n  return isMarked(value, 'discord-template');\n}\n\nexport function isSlackTemplate(value: unknown): value is SlackTemplate {\n  return isMarked(value, 'slack-template');\n}\n\n/** Any declared template. */\nexport type AnyTemplate = EmailTemplate | PushTemplate | DiscordTemplate | SlackTemplate;\n\nexport const CHANNEL_OF: Record<AnyTemplate['kind'], TemplateChannel> = {\n  'email-template': 'email',\n  'push-template': 'push',\n  'discord-template': 'discord',\n  'slack-template': 'slack',\n};\n\nfunction isMarked(value: unknown, kind: string): boolean {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    (value as { kind?: unknown }).kind === kind &&\n    (value as { version?: unknown }).version === 1\n  );\n}\n\n/** Any template definition, whatever its channel. */\nexport function isTemplate(value: unknown): value is AnyTemplate {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    Object.hasOwn(CHANNEL_OF, (value as { kind?: unknown }).kind as string) &&\n    (value as { version?: unknown }).version === 1\n  );\n}\n\n/* --------------------------------- registry -------------------------------- */\n\n/**\n * The template registry: per channel, the definitions the project registers. Each channel is a\n * plain object whose property names are JavaScript names only — a template is identified by its\n * own `id` (`indexTemplates`).\n */\nexport interface TemplateRegistry {\n  readonly email?: Readonly<Record<string, EmailTemplate>>;\n  readonly push?: Readonly<Record<string, PushTemplate>>;\n  /** Discord webhook templates, each typed by the host's Env its `webhook` reads. */\n  readonly discord?: Readonly<Record<string, DiscordTemplate<PropsSchema, never>>>;\n  readonly slack?: Readonly<Record<string, SlackTemplate<PropsSchema, never>>>;\n}\n\n/** The template a channel's registry holds. */\nexport interface ChannelTemplate {\n  email: EmailTemplate;\n  push: PushTemplate;\n  discord: DiscordTemplate;\n  slack: SlackTemplate;\n}\n\nconst IS_TEMPLATE: Record<TemplateChannel, (value: unknown) => boolean> = {\n  email: isEmailTemplate,\n  push: isPushTemplate,\n  discord: isDiscordTemplate,\n  slack: isSlackTemplate,\n};\n\n/**\n * A channel's registry by template id — how everything that turns an id back into a definition\n * (the compiler, the validator, the renderers, the senders, the studio) looks it up. Throws when\n * an entry is not a template of the channel, has no id, or shares its id with another entry: an id\n * is registered once per channel, so two registrations (even of the same object) are an error,\n * not a silent last-wins. Insertion order is the registry's.\n */\nexport function indexTemplates<C extends TemplateChannel>(\n  channel: C,\n  registry: Readonly<Record<string, unknown>> | undefined\n): ReadonlyMap<string, ChannelTemplate[C]> {\n  const index = new Map<string, ChannelTemplate[C]>();\n  const paths = new Map<string, string>();\n  for (const [name, entry] of Object.entries(registry ?? {})) {\n    const path = `templates.${channel}.${name}`;\n    if (!IS_TEMPLATE[channel](entry)) {\n      throw new TypeError(`${path} is not a ${channel} template`);\n    }\n    const id = (entry as AnyTemplate).id;\n    if (!isTemplateId(id)) throw new TypeError(`${path} has no id`);\n    const previous = paths.get(id);\n    if (previous !== undefined) {\n      throw new TypeError(\n        `${channel} template id '${id}' is registered twice: ${previous} and ${path}`\n      );\n    }\n    paths.set(id, path);\n    index.set(id, entry as ChannelTemplate[C]);\n  }\n  return index;\n}\n\n/** A registered template by id; throws naming the channel and id when there is none. */\nexport function lookupTemplate<T>(index: ReadonlyMap<string, T>, channel: string, id: string): T {\n  const template = index.get(id);\n  if (template === undefined) throw new Error(`${channel} template '${id}' is not registered`);\n  return template;\n}\n\n/* ------------------------------- validation -------------------------------- */\n\n/** One failed field, with the dotted path the studio and the logs show. */\nexport interface TemplateIssue {\n  path: string;\n  message: string;\n}\n\n/**\n * A template refused its input (`phase: 'props'` — the component/content was\n * never called) or its content function returned something that is not a\n * notification (`phase: 'content'` — called, but nothing is sent). Never a\n * provider failure: a sender must not read it as a dead device token.\n */\nexport class TemplateValidationError extends Error {\n  override readonly name = 'TemplateValidationError';\n  constructor(\n    readonly channel: TemplateChannel,\n    readonly template: string,\n    readonly phase: 'props' | 'content',\n    readonly issues: TemplateIssue[]\n  ) {\n    super(\n      `${channel} template '${template}' ${phase === 'props' ? 'rejected its props' : 'returned invalid content'}: ${issues\n        .map((i) => `${i.path || '(root)'} ${i.message}`)\n        .join('; ')}`\n    );\n  }\n}\n\nfunction issuesOf(error: core.$ZodError): TemplateIssue[] {\n  return error.issues.map((issue) => ({\n    path: issue.path.map(String).join('.'),\n    message: issue.message,\n  }));\n}\n\n/**\n * Parse message props against a template's schema and return the parsed value\n * — the only value anything downstream may use. Throws TemplateValidationError.\n */\nexport function parseTemplateProps<S extends PropsSchema>(\n  template: EmailTemplate<S> | PushTemplate<S> | DiscordTemplate<S> | SlackTemplate<S>,\n  props: Record<string, unknown>\n): core.output<S> {\n  const channel = CHANNEL_OF[template.kind];\n  const result = z.safeParse(template.props, props);\n  if (!result.success) {\n    throw new TemplateValidationError(channel, template.id, 'props', issuesOf(result.error));\n  }\n  return result.data;\n}\n\nconst pushContentSchema = z.strictObject({\n  title: z.string(),\n  body: z.string(),\n  image: z.optional(z.string()),\n  url: z.optional(z.string()),\n});\n\n/** Run a push template's content over parsed props and check the notification it returns. */\nexport function renderPushContent(\n  template: PushTemplate,\n  props: Record<string, unknown>\n): PushContent {\n  const parsed = parseTemplateProps(template, props);\n  const output: unknown = template.content(parsed);\n  // A Promise (async content smuggled past the types) is an object without title/body: refused here\n  const result = z.safeParse(pushContentSchema, output);\n  if (!result.success) {\n    throw new TemplateValidationError('push', template.id, 'content', issuesOf(result.error));\n  }\n  return result.data;\n}\n\n/**\n * What a Discord webhook accepts at all: something to show (content, an embed, a poll or\n * components) and content within Discord's 2000 characters. The rest of the body is Discord's to\n * judge; its types come from `discord-api-types`.\n */\nconst discordContentSchema = z.looseObject({\n  content: z.optional(z.string().check(z.maxLength(2000))),\n  embeds: z.optional(z.array(z.looseObject({}))),\n});\n\nconst slackContentSchema = z.looseObject({\n  text: z.string().check(z.minLength(1)),\n  blocks: z.optional(z.array(z.looseObject({ type: z.string() }))),\n});\n\n/** Run a Discord template's content over parsed props and check the message it returns. */\nexport function renderDiscordContent(\n  template: DiscordTemplate,\n  props: Record<string, unknown>\n): DiscordContent {\n  const output: unknown = template.content(parseTemplateProps(template, props));\n  const result = z.safeParse(discordContentSchema, output);\n  const empty =\n    result.success &&\n    !result.data.content &&\n    (result.data.embeds?.length ?? 0) === 0 &&\n    (output as { poll?: unknown; components?: unknown[] }).poll === undefined &&\n    ((output as { components?: unknown[] }).components?.length ?? 0) === 0;\n  if (!result.success || empty) {\n    const issues = result.success\n      ? [{ path: '', message: 'a Discord message needs content, an embed, a poll or components' }]\n      : issuesOf(result.error);\n    throw new TemplateValidationError('discord', template.id, 'content', issues);\n  }\n  return output as DiscordContent;\n}\n\n/** Run a Slack template's content over parsed props and check the message it returns. */\nexport function renderSlackContent(\n  template: SlackTemplate,\n  props: Record<string, unknown>\n): SlackContent {\n  const output: unknown = template.content(parseTemplateProps(template, props));\n  const result = z.safeParse(slackContentSchema, output);\n  if (!result.success) {\n    throw new TemplateValidationError('slack', template.id, 'content', issuesOf(result.error));\n  }\n  return output as SlackContent;\n}\n\nfunction parsePreview(\n  schema: PropsSchema,\n  preview: unknown,\n  channel: TemplateChannel,\n  title: string\n) {\n  const result = z.safeParse(schema, preview);\n  if (!result.success) {\n    throw new TemplateValidationError(\n      channel,\n      title,\n      'props',\n      issuesOf(result.error).map((i) => Object.assign(i, { message: `preview: ${i.message}` }))\n    );\n  }\n}\n\n/* ---------------------------- supported schemas ---------------------------- */\n\nconst SCALAR_TYPES = new Set(['string', 'number', 'boolean', 'enum']);\n\n/** Throws when `schema` is outside the v1 subset (see the header). */\nexport function assertSupportedSchema(schema: unknown, where: string): void {\n  const fail = (reason: string): never => {\n    throw new TypeError(`template '${where}': unsupported props schema — ${reason}`);\n  };\n  const def = (schema as core.$ZodType | undefined)?._zod?.def;\n  if (def?.type !== 'object') fail('props must be a z.strictObject({...})');\n  const object = def as core.$ZodObjectDef;\n  if (object.catchall?._zod.def.type !== 'never') {\n    fail(\n      'props must be strict (z.strictObject): unknown fields would be dropped or passed through'\n    );\n  }\n  rejectCustomChecks(object, where, fail);\n  for (const [field, value] of Object.entries(object.shape)) {\n    let fieldDef = value._zod.def;\n    if (fieldDef.type === 'optional') {\n      // The wrapper carries checks of its own (`.optional().overwrite(...)`): refuse them too\n      rejectCustomChecks(fieldDef, `${where}.${field}`, fail);\n      fieldDef = (fieldDef as core.$ZodOptionalDef).innerType._zod.def;\n    }\n    if (fieldDef.type === 'literal') {\n      const values = (fieldDef as core.$ZodLiteralDef<core.util.Literal>).values;\n      if (!values.every((v) => ['string', 'number', 'boolean'].includes(typeof v))) {\n        fail(`field '${field}' is a literal of a non-scalar value`);\n      }\n    } else if (!SCALAR_TYPES.has(fieldDef.type)) {\n      fail(\n        `field '${field}' is ${fieldDef.type}; only string, number, boolean, enum and literal fields (optionally .optional()) are supported`\n      );\n    }\n    if ((fieldDef as { coerce?: boolean }).coerce === true) {\n      fail(`field '${field}' coerces its input (z.coerce), which would change what the props mean`);\n    }\n    rejectCustomChecks(fieldDef, `${where}.${field}`, fail);\n  }\n}\n\n/**\n * Checks the subset refuses: `custom` runs arbitrary code (`.refine()`), and\n * `overwrite` changes the value (`.overwrite()`, `.trim()`, `.toLowerCase()`…)\n * — the props are parsed more than once on the way to a send (the validator,\n * then the renderer), so a value-changing check would apply twice and the\n * email would differ from the preview.\n */\nfunction rejectCustomChecks(def: core.$ZodTypeDef, where: string, fail: (reason: string) => never) {\n  for (const check of def.checks ?? []) {\n    if (check._zod.def.check === 'custom') {\n      fail(`'${where}' uses a custom refinement, which the template subset does not support`);\n    }\n    if (check._zod.def.check === 'overwrite') {\n      fail(\n        `'${where}' changes the value (.overwrite, .trim, .toLowerCase, …), which the template subset does not support`\n      );\n    }\n  }\n}\n\n/** The scalar props a template accepts, as the IR resolves them before parsing. */\nexport type ResolvedProps = Record<string, ScalarIR | undefined>;\n\n/**\n * The engine's MessageValidator over the template registries: the message's\n * props are parsed by its template (the parsed value is what gets sent); a\n * push's content is also run once and checked, so an invalid notification\n * stops the send before any device; Discord and Slack content likewise. Channels without a\n * registry here (sms, …) pass through to their app-supplied senders.\n */\nexport function registryValidator(registry: TemplateRegistry): {\n  validate(message: { channel: string; template: string; props: ResolvedProps }): ResolvedProps;\n} {\n  const email = indexTemplates('email', registry.email);\n  const push = indexTemplates('push', registry.push);\n  const discord = indexTemplates('discord', registry.discord);\n  const slack = indexTemplates('slack', registry.slack);\n  return {\n    validate({ channel, template, props }) {\n      if (channel === 'email') {\n        const entry = lookupTemplate(email, 'email', template);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      if (channel === 'push') {\n        const entry = lookupTemplate(push, 'push', template);\n        renderPushContent(entry, props);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      if (channel === 'discord') {\n        const entry = lookupTemplate(discord, 'discord', template);\n        renderDiscordContent(entry, props);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      if (channel === 'slack') {\n        const entry = lookupTemplate(slack, 'slack', template);\n        renderSlackContent(entry, props);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      return props;\n    },\n  };\n}\n"],"mappings":";;;;;;;AA4KA,SAAgB,gBACd,YACyB;CACzB,iBAAiB,WAAW,IAAI,iBAAiB;CACjD,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,WAAW,WAAW,KAAK;CAC9E,OAAO;EAAE,MAAM;EAAoB,SAAS;EAAG,GAAG;CAAW;AAC/D;;AAGA,SAAgB,cACd,YACuB;CACvB,iBAAiB,WAAW,IAAI,eAAe;CAC/C,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,SAAS,WAAW,KAAK;CAC5E,OAAO;EAAE,MAAM;EAAkB,SAAS;EAAG,GAAG;CAAW;AAC7D;;;;;AAMA,SAAgB,cACd,YACkB;CAClB,iBAAiB,WAAW,IAAI,eAAe;CAC/C,cAAA,oBAAoB,YAAY,kBAAkB,WAAW,GAAG,GAAG;CACnE,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,SAAS,WAAW,KAAK;CAC5E,OAAO;EAAE,MAAM;EAAkB,SAAS;EAAG,GAAG;CAAW;AAC7D;;AAGA,SAAgB,aACd,YACiB;CACjB,iBAAiB,WAAW,IAAI,cAAc;CAC9C,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,QAAQ,WAAW,KAAK;CAC3E,OAAO;EAAE,MAAM;EAAiB,SAAS;EAAG,GAAG;CAAW;AAC5D;AAEA,SAAS,iBAAiB,IAAa,SAAuB;CAC5D,IAAI,CAAC,aAAa,EAAE,GAClB,MAAM,IAAI,UAAU,GAAG,QAAQ,oCAAoC;AAEvE;AAEA,SAAS,aAAa,IAA2B;CAC/C,OAAO,OAAO,OAAO,YAAY,GAAG,KAAK,MAAM;AACjD;AAEA,SAAgB,gBAAgB,OAAwC;CACtE,OAAO,SAAS,OAAO,gBAAgB;AACzC;AAEA,SAAgB,eAAe,OAAuC;CACpE,OAAO,SAAS,OAAO,eAAe;AACxC;AAEA,SAAgB,kBAAkB,OAA0C;CAC1E,OAAO,SAAS,OAAO,kBAAkB;AAC3C;AAEA,SAAgB,gBAAgB,OAAwC;CACtE,OAAO,SAAS,OAAO,gBAAgB;AACzC;AAKA,MAAa,aAA2D;CACtE,kBAAkB;CAClB,iBAAiB;CACjB,oBAAoB;CACpB,kBAAkB;AACpB;AAEA,SAAS,SAAS,OAAgB,MAAuB;CACvD,OACE,OAAO,UAAU,YACjB,UAAU,QACT,MAA6B,SAAS,QACtC,MAAgC,YAAY;AAEjD;;AAGA,SAAgB,WAAW,OAAsC;CAC/D,OACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAO,OAAO,YAAa,MAA6B,IAAc,KACrE,MAAgC,YAAY;AAEjD;AAyBA,MAAM,cAAoE;CACxE,OAAO;CACP,MAAM;CACN,SAAS;CACT,OAAO;AACT;;;;;;;;AASA,SAAgB,eACd,SACA,UACyC;CACzC,MAAM,wBAAQ,IAAI,IAAgC;CAClD,MAAM,wBAAQ,IAAI,IAAoB;CACtC,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,YAAY,CAAC,CAAC,GAAG;EAC1D,MAAM,OAAO,aAAa,QAAQ,GAAG;EACrC,IAAI,CAAC,YAAY,QAAQ,CAAC,KAAK,GAC7B,MAAM,IAAI,UAAU,GAAG,KAAK,YAAY,QAAQ,UAAU;EAE5D,MAAM,KAAM,MAAsB;EAClC,IAAI,CAAC,aAAa,EAAE,GAAG,MAAM,IAAI,UAAU,GAAG,KAAK,WAAW;EAC9D,MAAM,WAAW,MAAM,IAAI,EAAE;EAC7B,IAAI,aAAa,KAAA,GACf,MAAM,IAAI,UACR,GAAG,QAAQ,gBAAgB,GAAG,yBAAyB,SAAS,OAAO,MACzE;EAEF,MAAM,IAAI,IAAI,IAAI;EAClB,MAAM,IAAI,IAAI,KAA2B;CAC3C;CACA,OAAO;AACT;;AAGA,SAAgB,eAAkB,OAA+B,SAAiB,IAAe;CAC/F,MAAM,WAAW,MAAM,IAAI,EAAE;CAC7B,IAAI,aAAa,KAAA,GAAW,MAAM,IAAI,MAAM,GAAG,QAAQ,aAAa,GAAG,oBAAoB;CAC3F,OAAO;AACT;;;;;;;AAgBA,IAAa,0BAAb,cAA6C,MAAM;CAGtC;CACA;CACA;CACA;CALX,OAAyB;CACzB,YACE,SACA,UACA,OACA,QACA;EACA,MACE,GAAG,QAAQ,aAAa,SAAS,IAAI,UAAU,UAAU,uBAAuB,2BAA2B,IAAI,OAC5G,KAAK,MAAM,GAAG,EAAE,QAAQ,SAAS,GAAG,EAAE,SAAS,CAAC,CAChD,KAAK,IAAI,GACd;EATS,KAAA,UAAA;EACA,KAAA,WAAA;EACA,KAAA,QAAA;EACA,KAAA,SAAA;CAOX;AACF;AAEA,SAAS,SAAS,OAAwC;CACxD,OAAO,MAAM,OAAO,KAAK,WAAW;EAClC,MAAM,MAAM,KAAK,IAAI,MAAM,CAAC,CAAC,KAAK,GAAG;EACrC,SAAS,MAAM;CACjB,EAAE;AACJ;;;;;AAMA,SAAgB,mBACd,UACA,OACgB;CAChB,MAAM,UAAU,WAAW,SAAS;CACpC,MAAM,SAASA,SAAE,UAAU,SAAS,OAAO,KAAK;CAChD,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBAAwB,SAAS,SAAS,IAAI,SAAS,SAAS,OAAO,KAAK,CAAC;CAEzF,OAAO,OAAO;AAChB;AAEA,MAAM,oBAAoBA,SAAE,aAAa;CACvC,OAAOA,SAAE,OAAO;CAChB,MAAMA,SAAE,OAAO;CACf,OAAOA,SAAE,SAASA,SAAE,OAAO,CAAC;CAC5B,KAAKA,SAAE,SAASA,SAAE,OAAO,CAAC;AAC5B,CAAC;;AAGD,SAAgB,kBACd,UACA,OACa;CACb,MAAM,SAAS,mBAAmB,UAAU,KAAK;CACjD,MAAM,SAAkB,SAAS,QAAQ,MAAM;CAE/C,MAAM,SAASA,SAAE,UAAU,mBAAmB,MAAM;CACpD,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBAAwB,QAAQ,SAAS,IAAI,WAAW,SAAS,OAAO,KAAK,CAAC;CAE1F,OAAO,OAAO;AAChB;;;;;;AAOA,MAAM,uBAAuBA,SAAE,YAAY;CACzC,SAASA,SAAE,SAASA,SAAE,OAAO,CAAC,CAAC,MAAMA,SAAE,UAAU,GAAI,CAAC,CAAC;CACvD,QAAQA,SAAE,SAASA,SAAE,MAAMA,SAAE,YAAY,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,qBAAqBA,SAAE,YAAY;CACvC,MAAMA,SAAE,OAAO,CAAC,CAAC,MAAMA,SAAE,UAAU,CAAC,CAAC;CACrC,QAAQA,SAAE,SAASA,SAAE,MAAMA,SAAE,YAAY,EAAE,MAAMA,SAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;;AAGD,SAAgB,qBACd,UACA,OACgB;CAChB,MAAM,SAAkB,SAAS,QAAQ,mBAAmB,UAAU,KAAK,CAAC;CAC5E,MAAM,SAASA,SAAE,UAAU,sBAAsB,MAAM;CACvD,MAAM,QACJ,OAAO,WACP,CAAC,OAAO,KAAK,YACZ,OAAO,KAAK,QAAQ,UAAU,OAAO,KACrC,OAAsD,SAAS,KAAA,MAC9D,OAAsC,YAAY,UAAU,OAAO;CACvE,IAAI,CAAC,OAAO,WAAW,OAAO;EAC5B,MAAM,SAAS,OAAO,UAClB,CAAC;GAAE,MAAM;GAAI,SAAS;EAAkE,CAAC,IACzF,SAAS,OAAO,KAAK;EACzB,MAAM,IAAI,wBAAwB,WAAW,SAAS,IAAI,WAAW,MAAM;CAC7E;CACA,OAAO;AACT;;AAGA,SAAgB,mBACd,UACA,OACc;CACd,MAAM,SAAkB,SAAS,QAAQ,mBAAmB,UAAU,KAAK,CAAC;CAC5E,MAAM,SAASA,SAAE,UAAU,oBAAoB,MAAM;CACrD,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBAAwB,SAAS,SAAS,IAAI,WAAW,SAAS,OAAO,KAAK,CAAC;CAE3F,OAAO;AACT;AAEA,SAAS,aACP,QACA,SACA,SACA,OACA;CACA,MAAM,SAASA,SAAE,UAAU,QAAQ,OAAO;CAC1C,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBACR,SACA,OACA,SACA,SAAS,OAAO,KAAK,CAAC,CAAC,KAAK,MAAM,OAAO,OAAO,GAAG,EAAE,SAAS,YAAY,EAAE,UAAU,CAAC,CAAC,CAC1F;AAEJ;AAIA,MAAM,+BAAe,IAAI,IAAI;CAAC;CAAU;CAAU;CAAW;AAAM,CAAC;;AAGpE,SAAgB,sBAAsB,QAAiB,OAAqB;CAC1E,MAAM,QAAQ,WAA0B;EACtC,MAAM,IAAI,UAAU,aAAa,MAAM,gCAAgC,QAAQ;CACjF;CACA,MAAM,MAAO,QAAsC,MAAM;CACzD,IAAI,KAAK,SAAS,UAAU,KAAK,uCAAuC;CACxE,MAAM,SAAS;CACf,IAAI,OAAO,UAAU,KAAK,IAAI,SAAS,SACrC,KACE,0FACF;CAEF,mBAAmB,QAAQ,OAAO,IAAI;CACtC,KAAK,MAAM,CAAC,OAAO,UAAU,OAAO,QAAQ,OAAO,KAAK,GAAG;EACzD,IAAI,WAAW,MAAM,KAAK;EAC1B,IAAI,SAAS,SAAS,YAAY;GAEhC,mBAAmB,UAAU,GAAG,MAAM,GAAG,SAAS,IAAI;GACtD,WAAY,SAAkC,UAAU,KAAK;EAC/D;EACA,IAAI,SAAS,SAAS,WAEhB;OAAA,CADY,SAAoD,OACxD,OAAO,MAAM;IAAC;IAAU;IAAU;GAAS,CAAC,CAAC,SAAS,OAAO,CAAC,CAAC,GACzE,KAAK,UAAU,MAAM,qCAAqC;EAAA,OAEvD,IAAI,CAAC,aAAa,IAAI,SAAS,IAAI,GACxC,KACE,UAAU,MAAM,OAAO,SAAS,KAAK,+FACvC;EAEF,IAAK,SAAkC,WAAW,MAChD,KAAK,UAAU,MAAM,uEAAuE;EAE9F,mBAAmB,UAAU,GAAG,MAAM,GAAG,SAAS,IAAI;CACxD;AACF;;;;;;;;AASA,SAAS,mBAAmB,KAAuB,OAAe,MAAiC;CACjG,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,GAAG;EACpC,IAAI,MAAM,KAAK,IAAI,UAAU,UAC3B,KAAK,IAAI,MAAM,uEAAuE;EAExF,IAAI,MAAM,KAAK,IAAI,UAAU,aAC3B,KACE,IAAI,MAAM,qGACZ;CAEJ;AACF;;;;;;;;AAYA,SAAgB,kBAAkB,UAEhC;CACA,MAAM,QAAQ,eAAe,SAAS,SAAS,KAAK;CACpD,MAAM,OAAO,eAAe,QAAQ,SAAS,IAAI;CACjD,MAAM,UAAU,eAAe,WAAW,SAAS,OAAO;CAC1D,MAAM,QAAQ,eAAe,SAAS,SAAS,KAAK;CACpD,OAAO,EACL,SAAS,EAAE,SAAS,UAAU,SAAS;EACrC,IAAI,YAAY,SAEd,OAAO,mBADO,eAAe,OAAO,SAAS,QACf,GAAG,KAAK;EAExC,IAAI,YAAY,QAAQ;GACtB,MAAM,QAAQ,eAAe,MAAM,QAAQ,QAAQ;GACnD,kBAAkB,OAAO,KAAK;GAC9B,OAAO,mBAAmB,OAAO,KAAK;EACxC;EACA,IAAI,YAAY,WAAW;GACzB,MAAM,QAAQ,eAAe,SAAS,WAAW,QAAQ;GACzD,qBAAqB,OAAO,KAAK;GACjC,OAAO,mBAAmB,OAAO,KAAK;EACxC;EACA,IAAI,YAAY,SAAS;GACvB,MAAM,QAAQ,eAAe,OAAO,SAAS,QAAQ;GACrD,mBAAmB,OAAO,KAAK;GAC/B,OAAO,mBAAmB,OAAO,KAAK;EACxC;EACA,OAAO;CACT,EACF;AACF"}

package/dist/templates.d.cts

@@ -1,4 +1,5 @@
 import { ScalarIR } from "./ir.cjs";
+import { EmailAddress } from "./email.cjs";
 import { Block, KnownBlock } from "@slack/types";
 import { RESTPostAPIWebhookWithTokenJSONBody } from "discord-api-types/v10";
 import * as core from "zod/v4/core";
@@ -65,7 +66,19 @@ interface TemplateBase<S extends PropsSchema> {
   /** Sample props for the studio; parsed against `props` when the template is declared. */
   readonly preview: core.input<S>;
 }
-export interface EmailTemplate<S extends PropsSchema = PropsSchema> extends TemplateBase<S> {
+/**
+ * Who an email comes from and where it leads: declared on each template, never inherited from a
+ * global sender. Metadata, not props — the component never receives it; its layout reads the
+ * resolved unsubscribe link with `useEmailContext()` (`@shware/workflow/email-context`).
+ */
+export interface EmailMetadata {
+  readonly from: EmailAddress;
+  /** Where replies go; left out, the email has no Reply-To (it is not `from`, and not inherited). */
+  readonly replyTo?: EmailAddress | undefined;
+  /** This template's unsubscribe link; left out, the config's `email.unsubscribeUrl` (if any). */
+  readonly unsubscribeUrl?: string | undefined;
+}
+export interface EmailTemplate<S extends PropsSchema = PropsSchema> extends TemplateBase<S>, EmailMetadata {
   readonly kind: 'email-template';
   readonly version: 1;
   readonly subject: string;
@@ -104,6 +117,9 @@ export interface EmailTemplateDefinition<S extends PropsSchema> {
   id: string;
   title: string;
   description?: string;
+  from: EmailAddress;
+  replyTo?: EmailAddress;
+  unsubscribeUrl?: string;
   props: S;
   subject: string;
   preview: NoInfer<core.input<S>>;
@@ -131,7 +147,10 @@ export interface WebhookTemplateDefinition<S extends PropsSchema, Env, C> {
 export declare function discordTemplate<S extends PropsSchema, Env = Record<string, unknown>>(definition: WebhookTemplateDefinition<S, Env, DiscordContent>): DiscordTemplate<S, Env>;
 /** Declare a Slack webhook template. Throws when `props` is unsupported or `preview` does not parse. */
 export declare function slackTemplate<S extends PropsSchema, Env = Record<string, unknown>>(definition: WebhookTemplateDefinition<S, Env, SlackContent>): SlackTemplate<S, Env>;
-/** Declare an email template. Throws when `props` uses an unsupported schema or `preview` does not parse. */
+/**
+ * Declare an email template. Throws when `from` is missing or invalid, `replyTo` or `unsubscribeUrl`
+ * is invalid, `props` uses an unsupported schema or `preview` does not parse.
+ */
 export declare function emailTemplate<S extends PropsSchema>(definition: EmailTemplateDefinition<S>): EmailTemplate<S>;
 /** Declare a push template. Throws when `props` uses an unsupported schema or `preview` does not parse. */
 export declare function pushTemplate<S extends PropsSchema, R extends PushContent>(definition: PushTemplateDefinition<S, R>): PushTemplate<S>;

package/dist/templates.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"templates.d.cts","names":[],"sources":["../src/templates.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;YA6BY,cAAc,KAAK;;iBAGd;EACf;EACA;;EAEA;;EAEA;;;YAIU,iBAAiB;;iBAGZ;;EAEf;EACA,UAAU,aAAa;EACvB;EACA;EACA;EACA;EACA;EACA;;;YAIU;UAEF,aAAa,UAAU;;;;;;WAMtB;;WAEA;WACA;WACA,OAAO;;WAEP,SAAS,KAAK,MAAM;;iBAGd,cAAc,UAAU,cAAc,qBAAqB,aAAa;WAC9E;WACA;WACA;;WAEA,YAAY,OAAO,SAAS,KAAK,OAAO;;iBAGlC,aAAa,UAAU,cAAc,qBAAqB,aAAa;WAC7E;WACA;;WAEA,UAAU,OAAO,SAAS,KAAK,OAAO,QAAQ;;;;;;;;UAS/C,oBAAoB,UAAU,aAAa,aAAa,aAAa;WACpE;EAET,QAAQ,KAAK;;iBAGE,gBACf,UAAU,cAAc,aACxB,MAAM,iCACE,oBAAoB,GAAG;WACtB;;WAEA,UAAU,OAAO,SAAS,KAAK,OAAO,QAAQ;;iBAGxC,cACf,UAAU,cAAc,aACxB,MAAM,iCACE,oBAAoB,GAAG;WACtB;;WAEA,UAAU,OAAO,SAAS,KAAK,OAAO,QAAQ;;;KAIpD,KAAK,KAAK,UAAU,2BAA2B;iBAEnC,wBAAwB,UAAU;EACjD;EACA;EACA;EACA,OAAO;EACP;EACA,SAAS,QAAQ,KAAK,MAAM;EAC5B,YAAY,OAAO,QAAQ,SAAS,KAAK,OAAO;;iBAGjC,uBAAuB,UAAU,aAAa;EAC7D;EACA;EACA;EACA,OAAO;EACP,SAAS,QAAQ,KAAK,MAAM;EAC5B,UAAU,OAAO,QAAQ,SAAS,KAAK,OAAO,SAAS,KAAK,KAAK;;iBAGlD,0BAA0B,UAAU,aAAa,KAAK;EACrE;EACA;EACA;EACA,OAAO;EACP,SAAS,QAAQ,KAAK,MAAM;;EAE5B,UAAU,KAAK;EACf,UAAU,OAAO,QAAQ,SAAS,KAAK,OAAO,SAAS,KAAK;;;wBAI9C,gBAAgB,UAAU,aAAa,MAAM,yBAC3D,YAAY,0BAA0B,GAAG,KAAK,kBAC7C,gBAAgB,GAAG;;wBAQN,cAAc,UAAU,aAAa,MAAM,yBACzD,YAAY,0BAA0B,GAAG,KAAK,gBAC7C,cAAc,GAAG;;wBAQJ,cAAc,UAAU,aACtC,YAAY,wBAAwB,KACnC,cAAc;;wBAQD,aAAa,UAAU,aAAa,UAAU,aAC5D,YAAY,uBAAuB,GAAG,KACrC,aAAa;wBAiBA,gBAAgB,iBAAiB,SAAS;wBAI1C,eAAe,iBAAiB,SAAS;wBAIzC,kBAAkB,iBAAiB,SAAS;wBAI5C,gBAAgB,iBAAiB,SAAS;;YAK9C,cAAc,gBAAgB,eAAe,kBAAkB;qBAE9D,YAAY,OAAO,qBAAqB;;wBAiBrC,WAAW,iBAAiB,SAAS;;;;;;iBAgBpC;WACN,QAAQ,SAAS,eAAe;WAChC,OAAO,SAAS,eAAe;;WAE/B,UAAU,SAAS,eAAe,gBAAgB;WAClD,QAAQ,SAAS,eAAe,cAAc;;;iBAIxC;EACf,OAAO;EACP,MAAM;EACN,SAAS;EACT,OAAO;;;;;;;;;wBAiBO,eAAe,UAAU,iBACvC,SAAS,GACT,UAAU,SAAS,uCAClB,oBAAoB,gBAAgB;;wBAuBvB,eAAe,GAAG,OAAO,oBAAoB,IAAI,iBAAiB,aAAa;;iBAS9E;EACf;EACA;;;;;;;;qBASW,gCAAgC;WAGhC,SAAS;WACT;WACA;WACA,QAAQ;WALD;EAClB,YACW,SAAS,iBACT,kBACA,4BACA,QAAQ;;;;;;wBAqBL,mBAAmB,UAAU,aAC3C,UAAU,cAAc,KAAK,aAAa,KAAK,gBAAgB,KAAK,cAAc,IAClF,OAAO,0BACN,KAAK,OAAO;;wBAiBC,kBACd,UAAU,cACV,OAAO,0BACN;;wBA2Ba,qBACd,UAAU,iBACV,OAAO,0BACN;;wBAmBa,mBACd,UAAU,eACV,OAAO,0BACN;;wBA+Ba,sBAAsB,iBAAiB;;YA0D3C,gBAAgB,eAAe;;;;;;;;wBAS3B,kBAAkB,UAAU;EAC1C,SAAS;IAAW;IAAiB;IAAkB,OAAO;MAAkB"}
+{"version":3,"file":"templates.d.cts","names":[],"sources":["../src/templates.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;YA8BY,cAAc,KAAK;;iBAGd;EACf;EACA;;EAEA;;EAEA;;;YAIU,iBAAiB;;iBAGZ;;EAEf;EACA,UAAU,aAAa;EACvB;EACA;EACA;EACA;EACA;EACA;;;YAIU;UAEF,aAAa,UAAU;;;;;;WAMtB;;WAEA;WACA;WACA,OAAO;;WAEP,SAAS,KAAK,MAAM;;;;;;;iBAQd;WACN,MAAM;;WAEN,UAAU;;WAEV;;iBAGM,cAAc,UAAU,cAAc,qBAC7C,aAAa,IAAI;WAChB;WACA;WACA;;WAEA,YAAY,OAAO,SAAS,KAAK,OAAO;;iBAGlC,aAAa,UAAU,cAAc,qBAAqB,aAAa;WAC7E;WACA;;WAEA,UAAU,OAAO,SAAS,KAAK,OAAO,QAAQ;;;;;;;;UAS/C,oBAAoB,UAAU,aAAa,aAAa,aAAa;WACpE;EAET,QAAQ,KAAK;;iBAGE,gBACf,UAAU,cAAc,aACxB,MAAM,iCACE,oBAAoB,GAAG;WACtB;;WAEA,UAAU,OAAO,SAAS,KAAK,OAAO,QAAQ;;iBAGxC,cACf,UAAU,cAAc,aACxB,MAAM,iCACE,oBAAoB,GAAG;WACtB;;WAEA,UAAU,OAAO,SAAS,KAAK,OAAO,QAAQ;;;KAIpD,KAAK,KAAK,UAAU,2BAA2B;iBAEnC,wBAAwB,UAAU;EACjD;EACA;EACA;EACA,MAAM;EACN,UAAU;EACV;EACA,OAAO;EACP;EACA,SAAS,QAAQ,KAAK,MAAM;EAC5B,YAAY,OAAO,QAAQ,SAAS,KAAK,OAAO;;iBAGjC,uBAAuB,UAAU,aAAa;EAC7D;EACA;EACA;EACA,OAAO;EACP,SAAS,QAAQ,KAAK,MAAM;EAC5B,UAAU,OAAO,QAAQ,SAAS,KAAK,OAAO,SAAS,KAAK,KAAK;;iBAGlD,0BAA0B,UAAU,aAAa,KAAK;EACrE;EACA;EACA;EACA,OAAO;EACP,SAAS,QAAQ,KAAK,MAAM;;EAE5B,UAAU,KAAK;EACf,UAAU,OAAO,QAAQ,SAAS,KAAK,OAAO,SAAS,KAAK;;;wBAI9C,gBAAgB,UAAU,aAAa,MAAM,yBAC3D,YAAY,0BAA0B,GAAG,KAAK,kBAC7C,gBAAgB,GAAG;;wBAQN,cAAc,UAAU,aAAa,MAAM,yBACzD,YAAY,0BAA0B,GAAG,KAAK,gBAC7C,cAAc,GAAG;;;;;wBAWJ,cAAc,UAAU,aACtC,YAAY,wBAAwB,KACnC,cAAc;;wBASD,aAAa,UAAU,aAAa,UAAU,aAC5D,YAAY,uBAAuB,GAAG,KACrC,aAAa;wBAiBA,gBAAgB,iBAAiB,SAAS;wBAI1C,eAAe,iBAAiB,SAAS;wBAIzC,kBAAkB,iBAAiB,SAAS;wBAI5C,gBAAgB,iBAAiB,SAAS;;YAK9C,cAAc,gBAAgB,eAAe,kBAAkB;qBAE9D,YAAY,OAAO,qBAAqB;;wBAiBrC,WAAW,iBAAiB,SAAS;;;;;;iBAgBpC;WACN,QAAQ,SAAS,eAAe;WAChC,OAAO,SAAS,eAAe;;WAE/B,UAAU,SAAS,eAAe,gBAAgB;WAClD,QAAQ,SAAS,eAAe,cAAc;;;iBAIxC;EACf,OAAO;EACP,MAAM;EACN,SAAS;EACT,OAAO;;;;;;;;;wBAiBO,eAAe,UAAU,iBACvC,SAAS,GACT,UAAU,SAAS,uCAClB,oBAAoB,gBAAgB;;wBAuBvB,eAAe,GAAG,OAAO,oBAAoB,IAAI,iBAAiB,aAAa;;iBAS9E;EACf;EACA;;;;;;;;qBASW,gCAAgC;WAGhC,SAAS;WACT;WACA;WACA,QAAQ;WALD;EAClB,YACW,SAAS,iBACT,kBACA,4BACA,QAAQ;;;;;;wBAqBL,mBAAmB,UAAU,aAC3C,UAAU,cAAc,KAAK,aAAa,KAAK,gBAAgB,KAAK,cAAc,IAClF,OAAO,0BACN,KAAK,OAAO;;wBAiBC,kBACd,UAAU,cACV,OAAO,0BACN;;wBA2Ba,qBACd,UAAU,iBACV,OAAO,0BACN;;wBAmBa,mBACd,UAAU,eACV,OAAO,0BACN;;wBA+Ba,sBAAsB,iBAAiB;;YA0D3C,gBAAgB,eAAe;;;;;;;;wBAS3B,kBAAkB,UAAU;EAC1C,SAAS;IAAW;IAAiB;IAAkB,OAAO;MAAkB"}

package/dist/templates.d.mts

@@ -1,4 +1,5 @@
 import { ScalarIR } from "./ir.mjs";
+import { EmailAddress } from "./email.mjs";
 import { Block, KnownBlock } from "@slack/types";
 import { RESTPostAPIWebhookWithTokenJSONBody } from "discord-api-types/v10";
 import * as core from "zod/v4/core";
@@ -65,7 +66,19 @@ interface TemplateBase<S extends PropsSchema> {
   /** Sample props for the studio; parsed against `props` when the template is declared. */
   readonly preview: core.input<S>;
 }
-export interface EmailTemplate<S extends PropsSchema = PropsSchema> extends TemplateBase<S> {
+/**
+ * Who an email comes from and where it leads: declared on each template, never inherited from a
+ * global sender. Metadata, not props — the component never receives it; its layout reads the
+ * resolved unsubscribe link with `useEmailContext()` (`@shware/workflow/email-context`).
+ */
+export interface EmailMetadata {
+  readonly from: EmailAddress;
+  /** Where replies go; left out, the email has no Reply-To (it is not `from`, and not inherited). */
+  readonly replyTo?: EmailAddress | undefined;
+  /** This template's unsubscribe link; left out, the config's `email.unsubscribeUrl` (if any). */
+  readonly unsubscribeUrl?: string | undefined;
+}
+export interface EmailTemplate<S extends PropsSchema = PropsSchema> extends TemplateBase<S>, EmailMetadata {
   readonly kind: 'email-template';
   readonly version: 1;
   readonly subject: string;
@@ -104,6 +117,9 @@ export interface EmailTemplateDefinition<S extends PropsSchema> {
   id: string;
   title: string;
   description?: string;
+  from: EmailAddress;
+  replyTo?: EmailAddress;
+  unsubscribeUrl?: string;
   props: S;
   subject: string;
   preview: NoInfer<core.input<S>>;
@@ -131,7 +147,10 @@ export interface WebhookTemplateDefinition<S extends PropsSchema, Env, C> {
 export declare function discordTemplate<S extends PropsSchema, Env = Record<string, unknown>>(definition: WebhookTemplateDefinition<S, Env, DiscordContent>): DiscordTemplate<S, Env>;
 /** Declare a Slack webhook template. Throws when `props` is unsupported or `preview` does not parse. */
 export declare function slackTemplate<S extends PropsSchema, Env = Record<string, unknown>>(definition: WebhookTemplateDefinition<S, Env, SlackContent>): SlackTemplate<S, Env>;
-/** Declare an email template. Throws when `props` uses an unsupported schema or `preview` does not parse. */
+/**
+ * Declare an email template. Throws when `from` is missing or invalid, `replyTo` or `unsubscribeUrl`
+ * is invalid, `props` uses an unsupported schema or `preview` does not parse.
+ */
 export declare function emailTemplate<S extends PropsSchema>(definition: EmailTemplateDefinition<S>): EmailTemplate<S>;
 /** Declare a push template. Throws when `props` uses an unsupported schema or `preview` does not parse. */
 export declare function pushTemplate<S extends PropsSchema, R extends PushContent>(definition: PushTemplateDefinition<S, R>): PushTemplate<S>;

package/dist/templates.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"templates.d.mts","names":[],"sources":["../src/templates.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;YA6BY,cAAc,KAAK;;iBAGd;EACf;EACA;;EAEA;;EAEA;;;YAIU,iBAAiB;;iBAGZ;;EAEf;EACA,UAAU,aAAa;EACvB;EACA;EACA;EACA;EACA;EACA;;;YAIU;UAEF,aAAa,UAAU;;;;;;WAMtB;;WAEA;WACA;WACA,OAAO;;WAEP,SAAS,KAAK,MAAM;;iBAGd,cAAc,UAAU,cAAc,qBAAqB,aAAa;WAC9E;WACA;WACA;;WAEA,YAAY,OAAO,SAAS,KAAK,OAAO;;iBAGlC,aAAa,UAAU,cAAc,qBAAqB,aAAa;WAC7E;WACA;;WAEA,UAAU,OAAO,SAAS,KAAK,OAAO,QAAQ;;;;;;;;UAS/C,oBAAoB,UAAU,aAAa,aAAa,aAAa;WACpE;EAET,QAAQ,KAAK;;iBAGE,gBACf,UAAU,cAAc,aACxB,MAAM,iCACE,oBAAoB,GAAG;WACtB;;WAEA,UAAU,OAAO,SAAS,KAAK,OAAO,QAAQ;;iBAGxC,cACf,UAAU,cAAc,aACxB,MAAM,iCACE,oBAAoB,GAAG;WACtB;;WAEA,UAAU,OAAO,SAAS,KAAK,OAAO,QAAQ;;;KAIpD,KAAK,KAAK,UAAU,2BAA2B;iBAEnC,wBAAwB,UAAU;EACjD;EACA;EACA;EACA,OAAO;EACP;EACA,SAAS,QAAQ,KAAK,MAAM;EAC5B,YAAY,OAAO,QAAQ,SAAS,KAAK,OAAO;;iBAGjC,uBAAuB,UAAU,aAAa;EAC7D;EACA;EACA;EACA,OAAO;EACP,SAAS,QAAQ,KAAK,MAAM;EAC5B,UAAU,OAAO,QAAQ,SAAS,KAAK,OAAO,SAAS,KAAK,KAAK;;iBAGlD,0BAA0B,UAAU,aAAa,KAAK;EACrE;EACA;EACA;EACA,OAAO;EACP,SAAS,QAAQ,KAAK,MAAM;;EAE5B,UAAU,KAAK;EACf,UAAU,OAAO,QAAQ,SAAS,KAAK,OAAO,SAAS,KAAK;;;wBAI9C,gBAAgB,UAAU,aAAa,MAAM,yBAC3D,YAAY,0BAA0B,GAAG,KAAK,kBAC7C,gBAAgB,GAAG;;wBAQN,cAAc,UAAU,aAAa,MAAM,yBACzD,YAAY,0BAA0B,GAAG,KAAK,gBAC7C,cAAc,GAAG;;wBAQJ,cAAc,UAAU,aACtC,YAAY,wBAAwB,KACnC,cAAc;;wBAQD,aAAa,UAAU,aAAa,UAAU,aAC5D,YAAY,uBAAuB,GAAG,KACrC,aAAa;wBAiBA,gBAAgB,iBAAiB,SAAS;wBAI1C,eAAe,iBAAiB,SAAS;wBAIzC,kBAAkB,iBAAiB,SAAS;wBAI5C,gBAAgB,iBAAiB,SAAS;;YAK9C,cAAc,gBAAgB,eAAe,kBAAkB;qBAE9D,YAAY,OAAO,qBAAqB;;wBAiBrC,WAAW,iBAAiB,SAAS;;;;;;iBAgBpC;WACN,QAAQ,SAAS,eAAe;WAChC,OAAO,SAAS,eAAe;;WAE/B,UAAU,SAAS,eAAe,gBAAgB;WAClD,QAAQ,SAAS,eAAe,cAAc;;;iBAIxC;EACf,OAAO;EACP,MAAM;EACN,SAAS;EACT,OAAO;;;;;;;;;wBAiBO,eAAe,UAAU,iBACvC,SAAS,GACT,UAAU,SAAS,uCAClB,oBAAoB,gBAAgB;;wBAuBvB,eAAe,GAAG,OAAO,oBAAoB,IAAI,iBAAiB,aAAa;;iBAS9E;EACf;EACA;;;;;;;;qBASW,gCAAgC;WAGhC,SAAS;WACT;WACA;WACA,QAAQ;WALD;EAClB,YACW,SAAS,iBACT,kBACA,4BACA,QAAQ;;;;;;wBAqBL,mBAAmB,UAAU,aAC3C,UAAU,cAAc,KAAK,aAAa,KAAK,gBAAgB,KAAK,cAAc,IAClF,OAAO,0BACN,KAAK,OAAO;;wBAiBC,kBACd,UAAU,cACV,OAAO,0BACN;;wBA2Ba,qBACd,UAAU,iBACV,OAAO,0BACN;;wBAmBa,mBACd,UAAU,eACV,OAAO,0BACN;;wBA+Ba,sBAAsB,iBAAiB;;YA0D3C,gBAAgB,eAAe;;;;;;;;wBAS3B,kBAAkB,UAAU;EAC1C,SAAS;IAAW;IAAiB;IAAkB,OAAO;MAAkB"}
+{"version":3,"file":"templates.d.mts","names":[],"sources":["../src/templates.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;YA8BY,cAAc,KAAK;;iBAGd;EACf;EACA;;EAEA;;EAEA;;;YAIU,iBAAiB;;iBAGZ;;EAEf;EACA,UAAU,aAAa;EACvB;EACA;EACA;EACA;EACA;EACA;;;YAIU;UAEF,aAAa,UAAU;;;;;;WAMtB;;WAEA;WACA;WACA,OAAO;;WAEP,SAAS,KAAK,MAAM;;;;;;;iBAQd;WACN,MAAM;;WAEN,UAAU;;WAEV;;iBAGM,cAAc,UAAU,cAAc,qBAC7C,aAAa,IAAI;WAChB;WACA;WACA;;WAEA,YAAY,OAAO,SAAS,KAAK,OAAO;;iBAGlC,aAAa,UAAU,cAAc,qBAAqB,aAAa;WAC7E;WACA;;WAEA,UAAU,OAAO,SAAS,KAAK,OAAO,QAAQ;;;;;;;;UAS/C,oBAAoB,UAAU,aAAa,aAAa,aAAa;WACpE;EAET,QAAQ,KAAK;;iBAGE,gBACf,UAAU,cAAc,aACxB,MAAM,iCACE,oBAAoB,GAAG;WACtB;;WAEA,UAAU,OAAO,SAAS,KAAK,OAAO,QAAQ;;iBAGxC,cACf,UAAU,cAAc,aACxB,MAAM,iCACE,oBAAoB,GAAG;WACtB;;WAEA,UAAU,OAAO,SAAS,KAAK,OAAO,QAAQ;;;KAIpD,KAAK,KAAK,UAAU,2BAA2B;iBAEnC,wBAAwB,UAAU;EACjD;EACA;EACA;EACA,MAAM;EACN,UAAU;EACV;EACA,OAAO;EACP;EACA,SAAS,QAAQ,KAAK,MAAM;EAC5B,YAAY,OAAO,QAAQ,SAAS,KAAK,OAAO;;iBAGjC,uBAAuB,UAAU,aAAa;EAC7D;EACA;EACA;EACA,OAAO;EACP,SAAS,QAAQ,KAAK,MAAM;EAC5B,UAAU,OAAO,QAAQ,SAAS,KAAK,OAAO,SAAS,KAAK,KAAK;;iBAGlD,0BAA0B,UAAU,aAAa,KAAK;EACrE;EACA;EACA;EACA,OAAO;EACP,SAAS,QAAQ,KAAK,MAAM;;EAE5B,UAAU,KAAK;EACf,UAAU,OAAO,QAAQ,SAAS,KAAK,OAAO,SAAS,KAAK;;;wBAI9C,gBAAgB,UAAU,aAAa,MAAM,yBAC3D,YAAY,0BAA0B,GAAG,KAAK,kBAC7C,gBAAgB,GAAG;;wBAQN,cAAc,UAAU,aAAa,MAAM,yBACzD,YAAY,0BAA0B,GAAG,KAAK,gBAC7C,cAAc,GAAG;;;;;wBAWJ,cAAc,UAAU,aACtC,YAAY,wBAAwB,KACnC,cAAc;;wBASD,aAAa,UAAU,aAAa,UAAU,aAC5D,YAAY,uBAAuB,GAAG,KACrC,aAAa;wBAiBA,gBAAgB,iBAAiB,SAAS;wBAI1C,eAAe,iBAAiB,SAAS;wBAIzC,kBAAkB,iBAAiB,SAAS;wBAI5C,gBAAgB,iBAAiB,SAAS;;YAK9C,cAAc,gBAAgB,eAAe,kBAAkB;qBAE9D,YAAY,OAAO,qBAAqB;;wBAiBrC,WAAW,iBAAiB,SAAS;;;;;;iBAgBpC;WACN,QAAQ,SAAS,eAAe;WAChC,OAAO,SAAS,eAAe;;WAE/B,UAAU,SAAS,eAAe,gBAAgB;WAClD,QAAQ,SAAS,eAAe,cAAc;;;iBAIxC;EACf,OAAO;EACP,MAAM;EACN,SAAS;EACT,OAAO;;;;;;;;;wBAiBO,eAAe,UAAU,iBACvC,SAAS,GACT,UAAU,SAAS,uCAClB,oBAAoB,gBAAgB;;wBAuBvB,eAAe,GAAG,OAAO,oBAAoB,IAAI,iBAAiB,aAAa;;iBAS9E;EACf;EACA;;;;;;;;qBASW,gCAAgC;WAGhC,SAAS;WACT;WACA;WACA,QAAQ;WALD;EAClB,YACW,SAAS,iBACT,kBACA,4BACA,QAAQ;;;;;;wBAqBL,mBAAmB,UAAU,aAC3C,UAAU,cAAc,KAAK,aAAa,KAAK,gBAAgB,KAAK,cAAc,IAClF,OAAO,0BACN,KAAK,OAAO;;wBAiBC,kBACd,UAAU,cACV,OAAO,0BACN;;wBA2Ba,qBACd,UAAU,iBACV,OAAO,0BACN;;wBAmBa,mBACd,UAAU,eACV,OAAO,0BACN;;wBA+Ba,sBAAsB,iBAAiB;;YA0D3C,gBAAgB,eAAe;;;;;;;;wBAS3B,kBAAkB,UAAU;EAC1C,SAAS;IAAW;IAAiB;IAAkB,OAAO;MAAkB"}

package/dist/templates.mjs

@@ -1,3 +1,4 @@
+import { assertEmailMetadata } from "./email.mjs";
 import * as z from "zod/mini";
 //#region src/templates.ts
 /** Declare a Discord webhook template. Throws when `props` is unsupported or `preview` does not parse. */
@@ -22,9 +23,13 @@ function slackTemplate(definition) {
 		...definition
 	};
 }
-/** Declare an email template. Throws when `props` uses an unsupported schema or `preview` does not parse. */
+/**
+* Declare an email template. Throws when `from` is missing or invalid, `replyTo` or `unsubscribeUrl`
+* is invalid, `props` uses an unsupported schema or `preview` does not parse.
+*/
 function emailTemplate(definition) {
 	assertTemplateId(definition.id, "emailTemplate");
+	assertEmailMetadata(definition, `emailTemplate('${definition.id}')`);
 	assertSupportedSchema(definition.props, definition.title);
 	parsePreview(definition.props, definition.preview, "email", definition.title);
 	return {