@shware/workflow 2.0.0 → 3.0.0

package/dist/templates.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"templates.mjs","names":[],"sources":["../src/templates.ts"],"sourcesContent":["import type { Block, KnownBlock } from '@slack/types';\nimport type { RESTPostAPIWebhookWithTokenJSONBody } from 'discord-api-types/v10';\nimport * as z from 'zod/mini';\nimport type * as core from 'zod/v4/core';\nimport { type EmailAddress, assertEmailMetadata } from './email';\nimport type { ScalarIR } from './ir';\n\n/**\n * Template definitions — `emailTemplate`, `pushTemplate`, `discordTemplate` and `slackTemplate`. One\n * object per template, identified by its own `id` (unique per channel): workflows take the\n * definition itself (`.email(welcome, props)`), the config registers it, and the IR, the manifest,\n * the senders and the studio all find it by that id. Its Zod `props` schema is the only source of the\n * props type: the DSL's `.email()/.push()` arguments, the `preview`, and the\n * `component`/`content` parameter are all derived from it, and every render\n * parses the props against it first (types alone check nothing at run time).\n *\n * Kept free of React and of any renderer: the definitions are plain data plus\n * a function, so the DSL, the Worker and the studio can all import them; the\n * React rendering lives in `@shware/workflow/react-email`.\n *\n * Supported schemas (v1): a strict object (`z.strictObject`) whose fields are\n * string / number / boolean — optionally as enums or literals, optionally\n * `.optional()`, with the built-in checks (min, email, …). That is exactly\n * what IR message props can carry, and it keeps input and output identical, so\n * producer, studio and sender never disagree about a transformed value.\n * Anything else (nested objects, arrays, null, default/transform/coerce,\n * custom refinements) is rejected when the template is declared.\n */\n\n/** A strict Zod object schema of scalar fields — the accepted shape of `props`. */\nexport type PropsSchema = core.$ZodObject;\n\n/** What a push template's `content` returns: the notification itself. */\nexport interface PushContent {\n  title: string;\n  body: string;\n  /** Rich image URL (iOS attachment / Android BigPicture). */\n  image?: string;\n  /** Where a tap leads: the page a browser push opens (the site's root when absent). */\n  url?: string;\n}\n\n/** A Discord webhook message (`discord-api-types`): content, embeds, username, allowed mentions… */\nexport type DiscordContent = RESTPostAPIWebhookWithTokenJSONBody;\n\n/** A Slack incoming-webhook message: the fallback `text` and, usually, Block Kit `blocks`. */\nexport interface SlackContent {\n  /** Shown in notifications and wherever blocks cannot be; required even with blocks. */\n  text: string;\n  blocks?: (KnownBlock | Block)[];\n  username?: string;\n  icon_emoji?: string;\n  icon_url?: string;\n  mrkdwn?: boolean;\n  unfurl_links?: boolean;\n  unfurl_media?: boolean;\n}\n\n/** The channels a template can be declared for. */\nexport type TemplateChannel = 'email' | 'push' | 'discord' | 'slack';\n\ninterface TemplateBase<S extends PropsSchema> {\n  /**\n   * Wire identity, unique per channel: message nodes, the template manifest, every send and the\n   * studio's preview links name the template by it. Not something to rename for readability —\n   * `title` is; the property a registry holds it under is only a JavaScript name.\n   */\n  readonly id: string;\n  /** Display name in the studio (not the email subject, not the notification title). */\n  readonly title: string;\n  readonly description?: string | undefined;\n  readonly props: S;\n  /** Sample props for the studio; parsed against `props` when the template is declared. */\n  readonly preview: core.input<S>;\n}\n\n/**\n * Who an email comes from and where it leads: declared on each template, never inherited from a\n * global sender. Metadata, not props — the component never receives it; its layout reads the\n * resolved unsubscribe link with `useEmailContext()` (`@shware/workflow/email-context`).\n */\nexport interface EmailMetadata {\n  readonly from: EmailAddress;\n  /** Where replies go; left out, the email has no Reply-To (it is not `from`, and not inherited). */\n  readonly replyTo?: EmailAddress | undefined;\n  /** This template's unsubscribe link; left out, the config's `email.unsubscribeUrl` (if any). */\n  readonly unsubscribeUrl?: string | undefined;\n}\n\nexport interface EmailTemplate<S extends PropsSchema = PropsSchema>\n  extends TemplateBase<S>, EmailMetadata {\n  readonly kind: 'email-template';\n  readonly version: 1;\n  readonly subject: string;\n  /** The email body: a component over the parsed props (rendered by `@shware/workflow/react-email`). */\n  readonly component: (props: Readonly<core.output<S>>) => unknown;\n}\n\nexport interface PushTemplate<S extends PropsSchema = PropsSchema> extends TemplateBase<S> {\n  readonly kind: 'push-template';\n  readonly version: 1;\n  /** The notification, from the parsed props. Synchronous and pure; its result is checked before sending. */\n  readonly content: (props: Readonly<core.output<S>>) => PushContent;\n}\n\n/**\n * A message posted to a team channel through an incoming webhook (Discord, Slack). The webhook\n * URL is a secret, so it lives in the Worker's environment and the template reads it from there\n * at send time: `webhook: (env: Env) => env.WEBHOOK_DISCORD_ALERTS`, with `Env` the host's\n * zod-validated environment (`journeyWorker({ env: schema })`). The studio never calls it.\n */\ninterface WebhookTemplateBase<S extends PropsSchema, Env> extends TemplateBase<S> {\n  readonly version: 1;\n  // A method, so a template typed by the host's Env still fits a registry of any Env\n  webhook(env: Env): string | undefined;\n}\n\nexport interface DiscordTemplate<\n  S extends PropsSchema = PropsSchema,\n  Env = Record<string, unknown>,\n> extends WebhookTemplateBase<S, Env> {\n  readonly kind: 'discord-template';\n  /** The message, from the parsed props. Synchronous and pure; checked before sending. */\n  readonly content: (props: Readonly<core.output<S>>) => DiscordContent;\n}\n\nexport interface SlackTemplate<\n  S extends PropsSchema = PropsSchema,\n  Env = Record<string, unknown>,\n> extends WebhookTemplateBase<S, Env> {\n  readonly kind: 'slack-template';\n  /** The message, from the parsed props. Synchronous and pure; checked before sending. */\n  readonly content: (props: Readonly<core.output<S>>) => SlackContent;\n}\n\n/** Strips a Promise return out of the accepted callback types: async content is rejected at the type level. */\ntype Sync<T> = T extends Promise<unknown> ? never : T;\n\nexport interface EmailTemplateDefinition<S extends PropsSchema> {\n  id: string;\n  title: string;\n  description?: string;\n  from: EmailAddress;\n  replyTo?: EmailAddress;\n  unsubscribeUrl?: string;\n  props: S;\n  subject: string;\n  preview: NoInfer<core.input<S>>;\n  component: (props: NoInfer<Readonly<core.output<S>>>) => unknown;\n}\n\nexport interface PushTemplateDefinition<S extends PropsSchema, R> {\n  id: string;\n  title: string;\n  description?: string;\n  props: S;\n  preview: NoInfer<core.input<S>>;\n  content: (props: NoInfer<Readonly<core.output<S>>>) => Sync<R> & PushContent;\n}\n\nexport interface WebhookTemplateDefinition<S extends PropsSchema, Env, C> {\n  id: string;\n  title: string;\n  description?: string;\n  props: S;\n  preview: NoInfer<core.input<S>>;\n  /** The webhook URL, read from the Worker's environment when a message is sent. */\n  webhook: (env: Env) => string | undefined;\n  content: (props: NoInfer<Readonly<core.output<S>>>) => Sync<C>;\n}\n\n/** Declare a Discord webhook template. Throws when `props` is unsupported or `preview` does not parse. */\nexport function discordTemplate<S extends PropsSchema, Env = Record<string, unknown>>(\n  definition: WebhookTemplateDefinition<S, Env, DiscordContent>\n): DiscordTemplate<S, Env> {\n  assertTemplateId(definition.id, 'discordTemplate');\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'discord', definition.title);\n  return { kind: 'discord-template', version: 1, ...definition };\n}\n\n/** Declare a Slack webhook template. Throws when `props` is unsupported or `preview` does not parse. */\nexport function slackTemplate<S extends PropsSchema, Env = Record<string, unknown>>(\n  definition: WebhookTemplateDefinition<S, Env, SlackContent>\n): SlackTemplate<S, Env> {\n  assertTemplateId(definition.id, 'slackTemplate');\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'slack', definition.title);\n  return { kind: 'slack-template', version: 1, ...definition };\n}\n\n/**\n * Declare an email template. Throws when `from` is missing or invalid, `replyTo` or `unsubscribeUrl`\n * is invalid, `props` uses an unsupported schema or `preview` does not parse.\n */\nexport function emailTemplate<S extends PropsSchema>(\n  definition: EmailTemplateDefinition<S>\n): EmailTemplate<S> {\n  assertTemplateId(definition.id, 'emailTemplate');\n  assertEmailMetadata(definition, `emailTemplate('${definition.id}')`);\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'email', definition.title);\n  return { kind: 'email-template', version: 1, ...definition };\n}\n\n/** Declare a push template. Throws when `props` uses an unsupported schema or `preview` does not parse. */\nexport function pushTemplate<S extends PropsSchema, R extends PushContent>(\n  definition: PushTemplateDefinition<S, R>\n): PushTemplate<S> {\n  assertTemplateId(definition.id, 'pushTemplate');\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'push', definition.title);\n  return { kind: 'push-template', version: 1, ...definition } as unknown as PushTemplate<S>;\n}\n\nfunction assertTemplateId(id: unknown, factory: string): void {\n  if (!isTemplateId(id)) {\n    throw new TypeError(`${factory}(): 'id' must be a non-empty string`);\n  }\n}\n\nfunction isTemplateId(id: unknown): id is string {\n  return typeof id === 'string' && id.trim() !== '';\n}\n\nexport function isEmailTemplate(value: unknown): value is EmailTemplate {\n  return isMarked(value, 'email-template');\n}\n\nexport function isPushTemplate(value: unknown): value is PushTemplate {\n  return isMarked(value, 'push-template');\n}\n\nexport function isDiscordTemplate(value: unknown): value is DiscordTemplate {\n  return isMarked(value, 'discord-template');\n}\n\nexport function isSlackTemplate(value: unknown): value is SlackTemplate {\n  return isMarked(value, 'slack-template');\n}\n\n/** Any declared template. */\nexport type AnyTemplate = EmailTemplate | PushTemplate | DiscordTemplate | SlackTemplate;\n\nexport const CHANNEL_OF: Record<AnyTemplate['kind'], TemplateChannel> = {\n  'email-template': 'email',\n  'push-template': 'push',\n  'discord-template': 'discord',\n  'slack-template': 'slack',\n};\n\nfunction isMarked(value: unknown, kind: string): boolean {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    (value as { kind?: unknown }).kind === kind &&\n    (value as { version?: unknown }).version === 1\n  );\n}\n\n/** Any template definition, whatever its channel. */\nexport function isTemplate(value: unknown): value is AnyTemplate {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    Object.hasOwn(CHANNEL_OF, (value as { kind?: unknown }).kind as string) &&\n    (value as { version?: unknown }).version === 1\n  );\n}\n\n/* --------------------------------- registry -------------------------------- */\n\n/**\n * The template registry: per channel, the definitions the project registers. Each channel is a\n * plain object whose property names are JavaScript names only — a template is identified by its\n * own `id` (`indexTemplates`).\n */\nexport interface TemplateRegistry {\n  readonly email?: Readonly<Record<string, EmailTemplate>>;\n  readonly push?: Readonly<Record<string, PushTemplate>>;\n  /** Discord webhook templates, each typed by the host's Env its `webhook` reads. */\n  readonly discord?: Readonly<Record<string, DiscordTemplate<PropsSchema, never>>>;\n  readonly slack?: Readonly<Record<string, SlackTemplate<PropsSchema, never>>>;\n}\n\n/** The template a channel's registry holds. */\nexport interface ChannelTemplate {\n  email: EmailTemplate;\n  push: PushTemplate;\n  discord: DiscordTemplate;\n  slack: SlackTemplate;\n}\n\nconst IS_TEMPLATE: Record<TemplateChannel, (value: unknown) => boolean> = {\n  email: isEmailTemplate,\n  push: isPushTemplate,\n  discord: isDiscordTemplate,\n  slack: isSlackTemplate,\n};\n\n/**\n * A channel's registry by template id — how everything that turns an id back into a definition\n * (the compiler, the validator, the renderers, the senders, the studio) looks it up. Throws when\n * an entry is not a template of the channel, has no id, or shares its id with another entry: an id\n * is registered once per channel, so two registrations (even of the same object) are an error,\n * not a silent last-wins. Insertion order is the registry's.\n */\nexport function indexTemplates<C extends TemplateChannel>(\n  channel: C,\n  registry: Readonly<Record<string, unknown>> | undefined\n): ReadonlyMap<string, ChannelTemplate[C]> {\n  const index = new Map<string, ChannelTemplate[C]>();\n  const paths = new Map<string, string>();\n  for (const [name, entry] of Object.entries(registry ?? {})) {\n    const path = `templates.${channel}.${name}`;\n    if (!IS_TEMPLATE[channel](entry)) {\n      throw new TypeError(`${path} is not a ${channel} template`);\n    }\n    const id = (entry as AnyTemplate).id;\n    if (!isTemplateId(id)) throw new TypeError(`${path} has no id`);\n    const previous = paths.get(id);\n    if (previous !== undefined) {\n      throw new TypeError(\n        `${channel} template id '${id}' is registered twice: ${previous} and ${path}`\n      );\n    }\n    paths.set(id, path);\n    index.set(id, entry as ChannelTemplate[C]);\n  }\n  return index;\n}\n\n/** A registered template by id; throws naming the channel and id when there is none. */\nexport function lookupTemplate<T>(index: ReadonlyMap<string, T>, channel: string, id: string): T {\n  const template = index.get(id);\n  if (template === undefined) throw new Error(`${channel} template '${id}' is not registered`);\n  return template;\n}\n\n/* ------------------------------- validation -------------------------------- */\n\n/** One failed field, with the dotted path the studio and the logs show. */\nexport interface TemplateIssue {\n  path: string;\n  message: string;\n}\n\n/**\n * A template refused its input (`phase: 'props'` — the component/content was\n * never called) or its content function returned something that is not a\n * notification (`phase: 'content'` — called, but nothing is sent). Never a\n * provider failure: a sender must not read it as a dead device token.\n */\nexport class TemplateValidationError extends Error {\n  override readonly name = 'TemplateValidationError';\n  constructor(\n    readonly channel: TemplateChannel,\n    readonly template: string,\n    readonly phase: 'props' | 'content',\n    readonly issues: TemplateIssue[]\n  ) {\n    super(\n      `${channel} template '${template}' ${phase === 'props' ? 'rejected its props' : 'returned invalid content'}: ${issues\n        .map((i) => `${i.path || '(root)'} ${i.message}`)\n        .join('; ')}`\n    );\n  }\n}\n\nfunction issuesOf(error: core.$ZodError): TemplateIssue[] {\n  return error.issues.map((issue) => ({\n    path: issue.path.map(String).join('.'),\n    message: issue.message,\n  }));\n}\n\n/**\n * Parse message props against a template's schema and return the parsed value\n * — the only value anything downstream may use. Throws TemplateValidationError.\n */\nexport function parseTemplateProps<S extends PropsSchema>(\n  template: EmailTemplate<S> | PushTemplate<S> | DiscordTemplate<S> | SlackTemplate<S>,\n  props: Record<string, unknown>\n): core.output<S> {\n  const channel = CHANNEL_OF[template.kind];\n  const result = z.safeParse(template.props, props);\n  if (!result.success) {\n    throw new TemplateValidationError(channel, template.id, 'props', issuesOf(result.error));\n  }\n  return result.data;\n}\n\nconst pushContentSchema = z.strictObject({\n  title: z.string(),\n  body: z.string(),\n  image: z.optional(z.string()),\n  url: z.optional(z.string()),\n});\n\n/** Run a push template's content over parsed props and check the notification it returns. */\nexport function renderPushContent(\n  template: PushTemplate,\n  props: Record<string, unknown>\n): PushContent {\n  const parsed = parseTemplateProps(template, props);\n  const output: unknown = template.content(parsed);\n  // A Promise (async content smuggled past the types) is an object without title/body: refused here\n  const result = z.safeParse(pushContentSchema, output);\n  if (!result.success) {\n    throw new TemplateValidationError('push', template.id, 'content', issuesOf(result.error));\n  }\n  return result.data;\n}\n\n/**\n * What a Discord webhook accepts at all: something to show (content, an embed, a poll or\n * components) and content within Discord's 2000 characters. The rest of the body is Discord's to\n * judge; its types come from `discord-api-types`.\n */\nconst discordContentSchema = z.looseObject({\n  content: z.optional(z.string().check(z.maxLength(2000))),\n  embeds: z.optional(z.array(z.looseObject({}))),\n});\n\nconst slackContentSchema = z.looseObject({\n  text: z.string().check(z.minLength(1)),\n  blocks: z.optional(z.array(z.looseObject({ type: z.string() }))),\n});\n\n/** Run a Discord template's content over parsed props and check the message it returns. */\nexport function renderDiscordContent(\n  template: DiscordTemplate,\n  props: Record<string, unknown>\n): DiscordContent {\n  const output: unknown = template.content(parseTemplateProps(template, props));\n  const result = z.safeParse(discordContentSchema, output);\n  const empty =\n    result.success &&\n    !result.data.content &&\n    (result.data.embeds?.length ?? 0) === 0 &&\n    (output as { poll?: unknown; components?: unknown[] }).poll === undefined &&\n    ((output as { components?: unknown[] }).components?.length ?? 0) === 0;\n  if (!result.success || empty) {\n    const issues = result.success\n      ? [{ path: '', message: 'a Discord message needs content, an embed, a poll or components' }]\n      : issuesOf(result.error);\n    throw new TemplateValidationError('discord', template.id, 'content', issues);\n  }\n  return output as DiscordContent;\n}\n\n/** Run a Slack template's content over parsed props and check the message it returns. */\nexport function renderSlackContent(\n  template: SlackTemplate,\n  props: Record<string, unknown>\n): SlackContent {\n  const output: unknown = template.content(parseTemplateProps(template, props));\n  const result = z.safeParse(slackContentSchema, output);\n  if (!result.success) {\n    throw new TemplateValidationError('slack', template.id, 'content', issuesOf(result.error));\n  }\n  return output as SlackContent;\n}\n\nfunction parsePreview(\n  schema: PropsSchema,\n  preview: unknown,\n  channel: TemplateChannel,\n  title: string\n) {\n  const result = z.safeParse(schema, preview);\n  if (!result.success) {\n    throw new TemplateValidationError(\n      channel,\n      title,\n      'props',\n      issuesOf(result.error).map((i) => Object.assign(i, { message: `preview: ${i.message}` }))\n    );\n  }\n}\n\n/* ---------------------------- supported schemas ---------------------------- */\n\nconst SCALAR_TYPES = new Set(['string', 'number', 'boolean', 'enum']);\n\n/** Throws when `schema` is outside the v1 subset (see the header). */\nexport function assertSupportedSchema(schema: unknown, where: string): void {\n  const fail = (reason: string): never => {\n    throw new TypeError(`template '${where}': unsupported props schema — ${reason}`);\n  };\n  const def = (schema as core.$ZodType | undefined)?._zod?.def;\n  if (def?.type !== 'object') fail('props must be a z.strictObject({...})');\n  const object = def as core.$ZodObjectDef;\n  if (object.catchall?._zod.def.type !== 'never') {\n    fail(\n      'props must be strict (z.strictObject): unknown fields would be dropped or passed through'\n    );\n  }\n  rejectCustomChecks(object, where, fail);\n  for (const [field, value] of Object.entries(object.shape)) {\n    let fieldDef = value._zod.def;\n    if (fieldDef.type === 'optional') {\n      // The wrapper carries checks of its own (`.optional().overwrite(...)`): refuse them too\n      rejectCustomChecks(fieldDef, `${where}.${field}`, fail);\n      fieldDef = (fieldDef as core.$ZodOptionalDef).innerType._zod.def;\n    }\n    if (fieldDef.type === 'literal') {\n      const values = (fieldDef as core.$ZodLiteralDef<core.util.Literal>).values;\n      if (!values.every((v) => ['string', 'number', 'boolean'].includes(typeof v))) {\n        fail(`field '${field}' is a literal of a non-scalar value`);\n      }\n    } else if (!SCALAR_TYPES.has(fieldDef.type)) {\n      fail(\n        `field '${field}' is ${fieldDef.type}; only string, number, boolean, enum and literal fields (optionally .optional()) are supported`\n      );\n    }\n    if ((fieldDef as { coerce?: boolean }).coerce === true) {\n      fail(`field '${field}' coerces its input (z.coerce), which would change what the props mean`);\n    }\n    rejectCustomChecks(fieldDef, `${where}.${field}`, fail);\n  }\n}\n\n/**\n * Checks the subset refuses: `custom` runs arbitrary code (`.refine()`), and\n * `overwrite` changes the value (`.overwrite()`, `.trim()`, `.toLowerCase()`…)\n * — the props are parsed more than once on the way to a send (the validator,\n * then the renderer), so a value-changing check would apply twice and the\n * email would differ from the preview.\n */\nfunction rejectCustomChecks(def: core.$ZodTypeDef, where: string, fail: (reason: string) => never) {\n  for (const check of def.checks ?? []) {\n    if (check._zod.def.check === 'custom') {\n      fail(`'${where}' uses a custom refinement, which the template subset does not support`);\n    }\n    if (check._zod.def.check === 'overwrite') {\n      fail(\n        `'${where}' changes the value (.overwrite, .trim, .toLowerCase, …), which the template subset does not support`\n      );\n    }\n  }\n}\n\n/** The scalar props a template accepts, as the IR resolves them before parsing. */\nexport type ResolvedProps = Record<string, ScalarIR | undefined>;\n\n/**\n * The engine's MessageValidator over the template registries: the message's\n * props are parsed by its template (the parsed value is what gets sent); a\n * push's content is also run once and checked, so an invalid notification\n * stops the send before any device; Discord and Slack content likewise. Channels without a\n * registry here (sms, …) pass through to their app-supplied senders.\n */\nexport function registryValidator(registry: TemplateRegistry): {\n  validate(message: { channel: string; template: string; props: ResolvedProps }): ResolvedProps;\n} {\n  const email = indexTemplates('email', registry.email);\n  const push = indexTemplates('push', registry.push);\n  const discord = indexTemplates('discord', registry.discord);\n  const slack = indexTemplates('slack', registry.slack);\n  return {\n    validate({ channel, template, props }) {\n      if (channel === 'email') {\n        const entry = lookupTemplate(email, 'email', template);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      if (channel === 'push') {\n        const entry = lookupTemplate(push, 'push', template);\n        renderPushContent(entry, props);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      if (channel === 'discord') {\n        const entry = lookupTemplate(discord, 'discord', template);\n        renderDiscordContent(entry, props);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      if (channel === 'slack') {\n        const entry = lookupTemplate(slack, 'slack', template);\n        renderSlackContent(entry, props);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      return props;\n    },\n  };\n}\n"],"mappings":";;;;AA4KA,SAAgB,gBACd,YACyB;CACzB,iBAAiB,WAAW,IAAI,iBAAiB;CACjD,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,WAAW,WAAW,KAAK;CAC9E,OAAO;EAAE,MAAM;EAAoB,SAAS;EAAG,GAAG;CAAW;AAC/D;;AAGA,SAAgB,cACd,YACuB;CACvB,iBAAiB,WAAW,IAAI,eAAe;CAC/C,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,SAAS,WAAW,KAAK;CAC5E,OAAO;EAAE,MAAM;EAAkB,SAAS;EAAG,GAAG;CAAW;AAC7D;;;;;AAMA,SAAgB,cACd,YACkB;CAClB,iBAAiB,WAAW,IAAI,eAAe;CAC/C,oBAAoB,YAAY,kBAAkB,WAAW,GAAG,GAAG;CACnE,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,SAAS,WAAW,KAAK;CAC5E,OAAO;EAAE,MAAM;EAAkB,SAAS;EAAG,GAAG;CAAW;AAC7D;;AAGA,SAAgB,aACd,YACiB;CACjB,iBAAiB,WAAW,IAAI,cAAc;CAC9C,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,QAAQ,WAAW,KAAK;CAC3E,OAAO;EAAE,MAAM;EAAiB,SAAS;EAAG,GAAG;CAAW;AAC5D;AAEA,SAAS,iBAAiB,IAAa,SAAuB;CAC5D,IAAI,CAAC,aAAa,EAAE,GAClB,MAAM,IAAI,UAAU,GAAG,QAAQ,oCAAoC;AAEvE;AAEA,SAAS,aAAa,IAA2B;CAC/C,OAAO,OAAO,OAAO,YAAY,GAAG,KAAK,MAAM;AACjD;AAEA,SAAgB,gBAAgB,OAAwC;CACtE,OAAO,SAAS,OAAO,gBAAgB;AACzC;AAEA,SAAgB,eAAe,OAAuC;CACpE,OAAO,SAAS,OAAO,eAAe;AACxC;AAEA,SAAgB,kBAAkB,OAA0C;CAC1E,OAAO,SAAS,OAAO,kBAAkB;AAC3C;AAEA,SAAgB,gBAAgB,OAAwC;CACtE,OAAO,SAAS,OAAO,gBAAgB;AACzC;AAKA,MAAa,aAA2D;CACtE,kBAAkB;CAClB,iBAAiB;CACjB,oBAAoB;CACpB,kBAAkB;AACpB;AAEA,SAAS,SAAS,OAAgB,MAAuB;CACvD,OACE,OAAO,UAAU,YACjB,UAAU,QACT,MAA6B,SAAS,QACtC,MAAgC,YAAY;AAEjD;;AAGA,SAAgB,WAAW,OAAsC;CAC/D,OACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAO,OAAO,YAAa,MAA6B,IAAc,KACrE,MAAgC,YAAY;AAEjD;AAyBA,MAAM,cAAoE;CACxE,OAAO;CACP,MAAM;CACN,SAAS;CACT,OAAO;AACT;;;;;;;;AASA,SAAgB,eACd,SACA,UACyC;CACzC,MAAM,wBAAQ,IAAI,IAAgC;CAClD,MAAM,wBAAQ,IAAI,IAAoB;CACtC,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,YAAY,CAAC,CAAC,GAAG;EAC1D,MAAM,OAAO,aAAa,QAAQ,GAAG;EACrC,IAAI,CAAC,YAAY,QAAQ,CAAC,KAAK,GAC7B,MAAM,IAAI,UAAU,GAAG,KAAK,YAAY,QAAQ,UAAU;EAE5D,MAAM,KAAM,MAAsB;EAClC,IAAI,CAAC,aAAa,EAAE,GAAG,MAAM,IAAI,UAAU,GAAG,KAAK,WAAW;EAC9D,MAAM,WAAW,MAAM,IAAI,EAAE;EAC7B,IAAI,aAAa,KAAA,GACf,MAAM,IAAI,UACR,GAAG,QAAQ,gBAAgB,GAAG,yBAAyB,SAAS,OAAO,MACzE;EAEF,MAAM,IAAI,IAAI,IAAI;EAClB,MAAM,IAAI,IAAI,KAA2B;CAC3C;CACA,OAAO;AACT;;AAGA,SAAgB,eAAkB,OAA+B,SAAiB,IAAe;CAC/F,MAAM,WAAW,MAAM,IAAI,EAAE;CAC7B,IAAI,aAAa,KAAA,GAAW,MAAM,IAAI,MAAM,GAAG,QAAQ,aAAa,GAAG,oBAAoB;CAC3F,OAAO;AACT;;;;;;;AAgBA,IAAa,0BAAb,cAA6C,MAAM;CAGtC;CACA;CACA;CACA;CALX,OAAyB;CACzB,YACE,SACA,UACA,OACA,QACA;EACA,MACE,GAAG,QAAQ,aAAa,SAAS,IAAI,UAAU,UAAU,uBAAuB,2BAA2B,IAAI,OAC5G,KAAK,MAAM,GAAG,EAAE,QAAQ,SAAS,GAAG,EAAE,SAAS,CAAC,CAChD,KAAK,IAAI,GACd;EATS,KAAA,UAAA;EACA,KAAA,WAAA;EACA,KAAA,QAAA;EACA,KAAA,SAAA;CAOX;AACF;AAEA,SAAS,SAAS,OAAwC;CACxD,OAAO,MAAM,OAAO,KAAK,WAAW;EAClC,MAAM,MAAM,KAAK,IAAI,MAAM,CAAC,CAAC,KAAK,GAAG;EACrC,SAAS,MAAM;CACjB,EAAE;AACJ;;;;;AAMA,SAAgB,mBACd,UACA,OACgB;CAChB,MAAM,UAAU,WAAW,SAAS;CACpC,MAAM,SAAS,EAAE,UAAU,SAAS,OAAO,KAAK;CAChD,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBAAwB,SAAS,SAAS,IAAI,SAAS,SAAS,OAAO,KAAK,CAAC;CAEzF,OAAO,OAAO;AAChB;AAEA,MAAM,oBAAoB,EAAE,aAAa;CACvC,OAAO,EAAE,OAAO;CAChB,MAAM,EAAE,OAAO;CACf,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;CAC5B,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC;AAC5B,CAAC;;AAGD,SAAgB,kBACd,UACA,OACa;CACb,MAAM,SAAS,mBAAmB,UAAU,KAAK;CACjD,MAAM,SAAkB,SAAS,QAAQ,MAAM;CAE/C,MAAM,SAAS,EAAE,UAAU,mBAAmB,MAAM;CACpD,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBAAwB,QAAQ,SAAS,IAAI,WAAW,SAAS,OAAO,KAAK,CAAC;CAE1F,OAAO,OAAO;AAChB;;;;;;AAOA,MAAM,uBAAuB,EAAE,YAAY;CACzC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,MAAM,EAAE,UAAU,GAAI,CAAC,CAAC;CACvD,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,qBAAqB,EAAE,YAAY;CACvC,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CACrC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;;AAGD,SAAgB,qBACd,UACA,OACgB;CAChB,MAAM,SAAkB,SAAS,QAAQ,mBAAmB,UAAU,KAAK,CAAC;CAC5E,MAAM,SAAS,EAAE,UAAU,sBAAsB,MAAM;CACvD,MAAM,QACJ,OAAO,WACP,CAAC,OAAO,KAAK,YACZ,OAAO,KAAK,QAAQ,UAAU,OAAO,KACrC,OAAsD,SAAS,KAAA,MAC9D,OAAsC,YAAY,UAAU,OAAO;CACvE,IAAI,CAAC,OAAO,WAAW,OAAO;EAC5B,MAAM,SAAS,OAAO,UAClB,CAAC;GAAE,MAAM;GAAI,SAAS;EAAkE,CAAC,IACzF,SAAS,OAAO,KAAK;EACzB,MAAM,IAAI,wBAAwB,WAAW,SAAS,IAAI,WAAW,MAAM;CAC7E;CACA,OAAO;AACT;;AAGA,SAAgB,mBACd,UACA,OACc;CACd,MAAM,SAAkB,SAAS,QAAQ,mBAAmB,UAAU,KAAK,CAAC;CAC5E,MAAM,SAAS,EAAE,UAAU,oBAAoB,MAAM;CACrD,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBAAwB,SAAS,SAAS,IAAI,WAAW,SAAS,OAAO,KAAK,CAAC;CAE3F,OAAO;AACT;AAEA,SAAS,aACP,QACA,SACA,SACA,OACA;CACA,MAAM,SAAS,EAAE,UAAU,QAAQ,OAAO;CAC1C,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBACR,SACA,OACA,SACA,SAAS,OAAO,KAAK,CAAC,CAAC,KAAK,MAAM,OAAO,OAAO,GAAG,EAAE,SAAS,YAAY,EAAE,UAAU,CAAC,CAAC,CAC1F;AAEJ;AAIA,MAAM,+BAAe,IAAI,IAAI;CAAC;CAAU;CAAU;CAAW;AAAM,CAAC;;AAGpE,SAAgB,sBAAsB,QAAiB,OAAqB;CAC1E,MAAM,QAAQ,WAA0B;EACtC,MAAM,IAAI,UAAU,aAAa,MAAM,gCAAgC,QAAQ;CACjF;CACA,MAAM,MAAO,QAAsC,MAAM;CACzD,IAAI,KAAK,SAAS,UAAU,KAAK,uCAAuC;CACxE,MAAM,SAAS;CACf,IAAI,OAAO,UAAU,KAAK,IAAI,SAAS,SACrC,KACE,0FACF;CAEF,mBAAmB,QAAQ,OAAO,IAAI;CACtC,KAAK,MAAM,CAAC,OAAO,UAAU,OAAO,QAAQ,OAAO,KAAK,GAAG;EACzD,IAAI,WAAW,MAAM,KAAK;EAC1B,IAAI,SAAS,SAAS,YAAY;GAEhC,mBAAmB,UAAU,GAAG,MAAM,GAAG,SAAS,IAAI;GACtD,WAAY,SAAkC,UAAU,KAAK;EAC/D;EACA,IAAI,SAAS,SAAS,WAEhB;OAAA,CADY,SAAoD,OACxD,OAAO,MAAM;IAAC;IAAU;IAAU;GAAS,CAAC,CAAC,SAAS,OAAO,CAAC,CAAC,GACzE,KAAK,UAAU,MAAM,qCAAqC;EAAA,OAEvD,IAAI,CAAC,aAAa,IAAI,SAAS,IAAI,GACxC,KACE,UAAU,MAAM,OAAO,SAAS,KAAK,+FACvC;EAEF,IAAK,SAAkC,WAAW,MAChD,KAAK,UAAU,MAAM,uEAAuE;EAE9F,mBAAmB,UAAU,GAAG,MAAM,GAAG,SAAS,IAAI;CACxD;AACF;;;;;;;;AASA,SAAS,mBAAmB,KAAuB,OAAe,MAAiC;CACjG,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,GAAG;EACpC,IAAI,MAAM,KAAK,IAAI,UAAU,UAC3B,KAAK,IAAI,MAAM,uEAAuE;EAExF,IAAI,MAAM,KAAK,IAAI,UAAU,aAC3B,KACE,IAAI,MAAM,qGACZ;CAEJ;AACF;;;;;;;;AAYA,SAAgB,kBAAkB,UAEhC;CACA,MAAM,QAAQ,eAAe,SAAS,SAAS,KAAK;CACpD,MAAM,OAAO,eAAe,QAAQ,SAAS,IAAI;CACjD,MAAM,UAAU,eAAe,WAAW,SAAS,OAAO;CAC1D,MAAM,QAAQ,eAAe,SAAS,SAAS,KAAK;CACpD,OAAO,EACL,SAAS,EAAE,SAAS,UAAU,SAAS;EACrC,IAAI,YAAY,SAEd,OAAO,mBADO,eAAe,OAAO,SAAS,QACf,GAAG,KAAK;EAExC,IAAI,YAAY,QAAQ;GACtB,MAAM,QAAQ,eAAe,MAAM,QAAQ,QAAQ;GACnD,kBAAkB,OAAO,KAAK;GAC9B,OAAO,mBAAmB,OAAO,KAAK;EACxC;EACA,IAAI,YAAY,WAAW;GACzB,MAAM,QAAQ,eAAe,SAAS,WAAW,QAAQ;GACzD,qBAAqB,OAAO,KAAK;GACjC,OAAO,mBAAmB,OAAO,KAAK;EACxC;EACA,IAAI,YAAY,SAAS;GACvB,MAAM,QAAQ,eAAe,OAAO,SAAS,QAAQ;GACrD,mBAAmB,OAAO,KAAK;GAC/B,OAAO,mBAAmB,OAAO,KAAK;EACxC;EACA,OAAO;CACT,EACF;AACF"}
+{"version":3,"file":"templates.mjs","names":[],"sources":["../src/templates.ts"],"sourcesContent":["import type { Block, KnownBlock } from '@slack/types';\nimport type { RESTPostAPIWebhookWithTokenJSONBody } from 'discord-api-types/v10';\nimport * as z from 'zod/mini';\nimport type * as core from 'zod/v4/core';\nimport { type EmailAddress, assertEmailMetadata } from './email';\nimport type { ScalarIR } from './ir';\n\n/**\n * Template definitions — `emailTemplate`, `pushTemplate`, `discordTemplate` and `slackTemplate`. One\n * object per template, identified by its own `id` (unique per channel): workflows take the\n * definition itself (`.email(welcome, props)`), the config registers it, and the IR, the manifest,\n * the senders and the studio all find it by that id. Its Zod `props` schema is the only source of the\n * props type: the DSL's `.email()/.push()` arguments, the `preview`, and the\n * `component`/`content` parameter are all derived from it, and every render\n * parses the props against it first (types alone check nothing at run time).\n *\n * Kept free of React and of any renderer: the definitions are plain data plus\n * a function, so the DSL, the Worker and the studio can all import them; the\n * React rendering lives in `@shware/workflow/react-email`.\n *\n * Supported schemas (v1): a strict object (`z.strictObject`) whose fields are\n * string / number / boolean — optionally as enums or literals, optionally\n * `.optional()`, with the built-in checks (min, email, …). That is exactly\n * what IR message props can carry, and it keeps input and output identical, so\n * producer, studio and sender never disagree about a transformed value.\n * Anything else (nested objects, arrays, null, default/transform/coerce,\n * custom refinements) is rejected when the template is declared.\n */\n\n/** A strict Zod object schema of scalar fields — the accepted shape of `props`. */\nexport type PropsSchema = core.$ZodObject;\n\n/** What a push template's `content` returns: the notification itself. */\nexport interface PushContent {\n  title: string;\n  body: string;\n  /** Rich image URL (iOS attachment / Android BigPicture). */\n  image?: string;\n  /** Where a tap leads: the page a browser push opens (the site's root when absent). */\n  url?: string;\n}\n\n/** A Discord webhook message (`discord-api-types`): content, embeds, username, allowed mentions… */\nexport type DiscordContent = RESTPostAPIWebhookWithTokenJSONBody;\n\n/** A Slack incoming-webhook message: the fallback `text` and, usually, Block Kit `blocks`. */\nexport interface SlackContent {\n  /** Shown in notifications and wherever blocks cannot be; required even with blocks. */\n  text: string;\n  blocks?: (KnownBlock | Block)[];\n  username?: string;\n  icon_emoji?: string;\n  icon_url?: string;\n  mrkdwn?: boolean;\n  unfurl_links?: boolean;\n  unfurl_media?: boolean;\n}\n\n/** The channels a template can be declared for. */\nexport type TemplateChannel = 'email' | 'push' | 'discord' | 'slack';\n\ninterface TemplateBase<S extends PropsSchema> {\n  /**\n   * Wire identity, unique per channel: message nodes, the template manifest, every send and the\n   * studio's preview links name the template by it. Not something to rename for readability —\n   * `title` is; the property a registry holds it under is only a JavaScript name.\n   */\n  readonly id: string;\n  /** Display name in the studio (not the email subject, not the notification title). */\n  readonly title: string;\n  readonly description?: string | undefined;\n  readonly props: S;\n  /** Sample props for the studio; parsed against `props` when the template is declared. */\n  readonly preview: core.input<S>;\n}\n\n/**\n * Who an email comes from and where it leads: declared on each template, never inherited from a\n * global sender. Metadata, not props — the component never receives it; its layout reads the\n * resolved unsubscribe link with `useEmailContext()` (`@shware/workflow/email-context`).\n */\nexport interface EmailMetadata {\n  readonly from: EmailAddress;\n  /** Where replies go; left out, the email has no Reply-To (it is not `from`, and not inherited). */\n  readonly replyTo?: EmailAddress | undefined;\n  /** This template's unsubscribe link; left out, the config's `email.unsubscribeUrl` (if any). */\n  readonly unsubscribeUrl?: string | undefined;\n}\n\nexport interface EmailTemplate<S extends PropsSchema = PropsSchema>\n  extends TemplateBase<S>, EmailMetadata {\n  readonly kind: 'email-template';\n  readonly version: 1;\n  readonly subject: string;\n  /** The email body: a component over the parsed props (rendered by `@shware/workflow/react-email`). */\n  readonly component: (props: Readonly<core.output<S>>) => unknown;\n}\n\nexport interface PushTemplate<S extends PropsSchema = PropsSchema> extends TemplateBase<S> {\n  readonly kind: 'push-template';\n  readonly version: 1;\n  /** The notification, from the parsed props. Synchronous and pure; its result is checked before sending. */\n  readonly content: (props: Readonly<core.output<S>>) => PushContent;\n}\n\n/**\n * A message posted to a team channel through an incoming webhook (Discord, Slack). The webhook\n * URL is a secret, so it lives in the Worker's environment and the template reads it from there\n * at send time: `webhook: (env: Env) => env.WEBHOOK_DISCORD_ALERTS`, with `Env` the host's\n * zod-validated environment (`journeyWorker({ env: schema })`). The studio never calls it.\n */\ninterface WebhookTemplateBase<S extends PropsSchema, Env> extends TemplateBase<S> {\n  readonly version: 1;\n  // A method, so a template typed by the host's Env still fits a registry of any Env\n  webhook(env: Env): string | undefined;\n}\n\nexport interface DiscordTemplate<\n  S extends PropsSchema = PropsSchema,\n  Env = Record<string, unknown>,\n> extends WebhookTemplateBase<S, Env> {\n  readonly kind: 'discord-template';\n  /** The message, from the parsed props. Synchronous and pure; checked before sending. */\n  readonly content: (props: Readonly<core.output<S>>) => DiscordContent;\n}\n\nexport interface SlackTemplate<\n  S extends PropsSchema = PropsSchema,\n  Env = Record<string, unknown>,\n> extends WebhookTemplateBase<S, Env> {\n  readonly kind: 'slack-template';\n  /** The message, from the parsed props. Synchronous and pure; checked before sending. */\n  readonly content: (props: Readonly<core.output<S>>) => SlackContent;\n}\n\n/** Strips a Promise return out of the accepted callback types: async content is rejected at the type level. */\ntype Sync<T> = T extends Promise<unknown> ? never : T;\n\nexport interface EmailTemplateDefinition<S extends PropsSchema> {\n  id: string;\n  title: string;\n  description?: string;\n  from: EmailAddress;\n  replyTo?: EmailAddress;\n  unsubscribeUrl?: string;\n  props: S;\n  subject: string;\n  preview: NoInfer<core.input<S>>;\n  component: (props: NoInfer<Readonly<core.output<S>>>) => unknown;\n}\n\nexport interface PushTemplateDefinition<S extends PropsSchema, R> {\n  id: string;\n  title: string;\n  description?: string;\n  props: S;\n  preview: NoInfer<core.input<S>>;\n  content: (props: NoInfer<Readonly<core.output<S>>>) => Sync<R> & PushContent;\n}\n\nexport interface WebhookTemplateDefinition<S extends PropsSchema, Env, C> {\n  id: string;\n  title: string;\n  description?: string;\n  props: S;\n  preview: NoInfer<core.input<S>>;\n  /** The webhook URL, read from the Worker's environment when a message is sent. */\n  webhook: (env: Env) => string | undefined;\n  content: (props: NoInfer<Readonly<core.output<S>>>) => Sync<C>;\n}\n\n/** Declare a Discord webhook template. Throws when `props` is unsupported or `preview` does not parse. */\nexport function discordTemplate<S extends PropsSchema, Env = Record<string, unknown>>(\n  definition: WebhookTemplateDefinition<S, Env, DiscordContent>\n): DiscordTemplate<S, Env> {\n  assertTemplateId(definition.id, 'discordTemplate');\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'discord', definition.title);\n  return { kind: 'discord-template', version: 1, ...definition };\n}\n\n/** Declare a Slack webhook template. Throws when `props` is unsupported or `preview` does not parse. */\nexport function slackTemplate<S extends PropsSchema, Env = Record<string, unknown>>(\n  definition: WebhookTemplateDefinition<S, Env, SlackContent>\n): SlackTemplate<S, Env> {\n  assertTemplateId(definition.id, 'slackTemplate');\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'slack', definition.title);\n  return { kind: 'slack-template', version: 1, ...definition };\n}\n\n/**\n * Declare an email template. Throws when `from` is missing or invalid, `replyTo` or `unsubscribeUrl`\n * is invalid, `props` uses an unsupported schema or `preview` does not parse.\n */\nexport function emailTemplate<S extends PropsSchema>(\n  definition: EmailTemplateDefinition<S>\n): EmailTemplate<S> {\n  assertTemplateId(definition.id, 'emailTemplate');\n  assertEmailMetadata(definition, `emailTemplate('${definition.id}')`);\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'email', definition.title);\n  return { kind: 'email-template', version: 1, ...definition };\n}\n\n/** Declare a push template. Throws when `props` uses an unsupported schema or `preview` does not parse. */\nexport function pushTemplate<S extends PropsSchema, R extends PushContent>(\n  definition: PushTemplateDefinition<S, R>\n): PushTemplate<S> {\n  assertTemplateId(definition.id, 'pushTemplate');\n  assertSupportedSchema(definition.props, definition.title);\n  parsePreview(definition.props, definition.preview, 'push', definition.title);\n  return { kind: 'push-template', version: 1, ...definition } as unknown as PushTemplate<S>;\n}\n\nfunction assertTemplateId(id: unknown, factory: string): void {\n  if (!isTemplateId(id)) {\n    throw new TypeError(`${factory}(): 'id' must be a non-empty string`);\n  }\n}\n\nfunction isTemplateId(id: unknown): id is string {\n  return typeof id === 'string' && id.trim() !== '';\n}\n\nexport function isEmailTemplate(value: unknown): value is EmailTemplate {\n  return isMarked(value, 'email-template');\n}\n\nexport function isPushTemplate(value: unknown): value is PushTemplate {\n  return isMarked(value, 'push-template');\n}\n\nexport function isDiscordTemplate(value: unknown): value is DiscordTemplate {\n  return isMarked(value, 'discord-template');\n}\n\nexport function isSlackTemplate(value: unknown): value is SlackTemplate {\n  return isMarked(value, 'slack-template');\n}\n\n/** Any declared template. */\nexport type AnyTemplate = EmailTemplate | PushTemplate | DiscordTemplate | SlackTemplate;\n\nexport const CHANNEL_OF: Record<AnyTemplate['kind'], TemplateChannel> = {\n  'email-template': 'email',\n  'push-template': 'push',\n  'discord-template': 'discord',\n  'slack-template': 'slack',\n};\n\nfunction isMarked(value: unknown, kind: string): boolean {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    (value as { kind?: unknown }).kind === kind &&\n    (value as { version?: unknown }).version === 1\n  );\n}\n\n/** Any template definition, whatever its channel. */\nexport function isTemplate(value: unknown): value is AnyTemplate {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    Object.hasOwn(CHANNEL_OF, (value as { kind?: unknown }).kind as string) &&\n    (value as { version?: unknown }).version === 1\n  );\n}\n\n/* --------------------------------- registry -------------------------------- */\n\n/**\n * The template registry: per channel, the definitions the project registers. Each channel is a\n * plain object whose property names are JavaScript names only — a template is identified by its\n * own `id` (`indexTemplates`).\n */\nexport interface TemplateRegistry {\n  readonly email?: Readonly<Record<string, EmailTemplate>>;\n  readonly push?: Readonly<Record<string, PushTemplate>>;\n  /** Discord webhook templates, each typed by the host's Env its `webhook` reads. */\n  readonly discord?: Readonly<Record<string, DiscordTemplate<PropsSchema, never>>>;\n  readonly slack?: Readonly<Record<string, SlackTemplate<PropsSchema, never>>>;\n}\n\n/** The template a channel's registry holds. */\nexport interface ChannelTemplate {\n  email: EmailTemplate;\n  push: PushTemplate;\n  discord: DiscordTemplate;\n  slack: SlackTemplate;\n}\n\nconst IS_TEMPLATE: Record<TemplateChannel, (value: unknown) => boolean> = {\n  email: isEmailTemplate,\n  push: isPushTemplate,\n  discord: isDiscordTemplate,\n  slack: isSlackTemplate,\n};\n\n/**\n * A channel's registry by template id — how everything that turns an id back into a definition\n * (the compiler, the validator, the renderers, the senders, the studio) looks it up. Throws when\n * an entry is not a template of the channel, has no id, or shares its id with another entry: an id\n * is registered once per channel, so two registrations (even of the same object) are an error,\n * not a silent last-wins. Insertion order is the registry's.\n */\nexport function indexTemplates<C extends TemplateChannel>(\n  channel: C,\n  registry: Readonly<Record<string, unknown>> | undefined\n): ReadonlyMap<string, ChannelTemplate[C]> {\n  const index = new Map<string, ChannelTemplate[C]>();\n  const paths = new Map<string, string>();\n  for (const [name, entry] of Object.entries(registry ?? {})) {\n    const path = `templates.${channel}.${name}`;\n    if (!IS_TEMPLATE[channel](entry)) {\n      throw new TypeError(`${path} is not a ${channel} template`);\n    }\n    const id = (entry as AnyTemplate).id;\n    if (!isTemplateId(id)) throw new TypeError(`${path} has no id`);\n    const previous = paths.get(id);\n    if (previous !== undefined) {\n      throw new TypeError(\n        `${channel} template id '${id}' is registered twice: ${previous} and ${path}`\n      );\n    }\n    paths.set(id, path);\n    index.set(id, entry as ChannelTemplate[C]);\n  }\n  return index;\n}\n\n/** A registered template by id; throws naming the channel and id when there is none. */\nexport function lookupTemplate<T>(index: ReadonlyMap<string, T>, channel: string, id: string): T {\n  const template = index.get(id);\n  if (template === undefined) throw new Error(`${channel} template '${id}' is not registered`);\n  return template;\n}\n\n/* ------------------------------- validation -------------------------------- */\n\n/** One failed field, with the dotted path the studio and the logs show. */\nexport interface TemplateIssue {\n  path: string;\n  message: string;\n}\n\n/**\n * A template refused its input (`phase: 'props'` — the component/content was\n * never called) or its content function returned something that is not a\n * notification (`phase: 'content'` — called, but nothing is sent). Never a\n * provider failure: a sender must not read it as a dead device token.\n */\nexport class TemplateValidationError extends Error {\n  override readonly name = 'TemplateValidationError';\n  constructor(\n    readonly channel: TemplateChannel,\n    readonly template: string,\n    readonly phase: 'props' | 'content',\n    readonly issues: TemplateIssue[]\n  ) {\n    super(\n      `${channel} template '${template}' ${phase === 'props' ? 'rejected its props' : 'returned invalid content'}: ${issues\n        .map((i) => `${i.path || '(root)'} ${i.message}`)\n        .join('; ')}`\n    );\n  }\n}\n\nfunction issuesOf(error: core.$ZodError): TemplateIssue[] {\n  return error.issues.map((issue) => ({\n    path: issue.path.map(String).join('.'),\n    message: issue.message,\n  }));\n}\n\n/**\n * Parse message props against a template's schema and return the parsed value\n * — the only value anything downstream may use. Throws TemplateValidationError.\n */\nexport function parseTemplateProps<S extends PropsSchema>(\n  template: EmailTemplate<S> | PushTemplate<S> | DiscordTemplate<S> | SlackTemplate<S>,\n  props: Record<string, unknown>\n): core.output<S> {\n  const channel = CHANNEL_OF[template.kind];\n  const result = z.safeParse(template.props, props);\n  if (!result.success) {\n    throw new TemplateValidationError(channel, template.id, 'props', issuesOf(result.error));\n  }\n  return result.data;\n}\n\nconst pushContentSchema = z.strictObject({\n  title: z.string(),\n  body: z.string(),\n  image: z.optional(z.string()),\n  url: z.optional(z.string()),\n});\n\n/** Run a push template's content over parsed props and check the notification it returns. */\nexport function renderPushContent(\n  template: PushTemplate,\n  props: Record<string, unknown>\n): PushContent {\n  const parsed = parseTemplateProps(template, props);\n  const output: unknown = template.content(parsed);\n  // A Promise (async content smuggled past the types) is an object without title/body: refused here\n  const result = z.safeParse(pushContentSchema, output);\n  if (!result.success) {\n    throw new TemplateValidationError('push', template.id, 'content', issuesOf(result.error));\n  }\n  return result.data;\n}\n\n/**\n * What a Discord webhook accepts at all: something to show (content, an embed, a poll or\n * components) and content within Discord's 2000 characters. The rest of the body is Discord's to\n * judge; its types come from `discord-api-types`.\n */\nconst discordContentSchema = z.looseObject({\n  content: z.optional(z.string().check(z.maxLength(2000))),\n  embeds: z.optional(z.array(z.looseObject({}))),\n});\n\nconst slackContentSchema = z.looseObject({\n  text: z.string().check(z.minLength(1)),\n  blocks: z.optional(z.array(z.looseObject({ type: z.string() }))),\n});\n\n/** Run a Discord template's content over parsed props and check the message it returns. */\nexport function renderDiscordContent(\n  template: DiscordTemplate,\n  props: Record<string, unknown>\n): DiscordContent {\n  const output: unknown = template.content(parseTemplateProps(template, props));\n  const result = z.safeParse(discordContentSchema, output);\n  const empty =\n    result.success &&\n    !result.data.content &&\n    (result.data.embeds?.length ?? 0) === 0 &&\n    (output as { poll?: unknown; components?: unknown[] }).poll === undefined &&\n    ((output as { components?: unknown[] }).components?.length ?? 0) === 0;\n  if (!result.success || empty) {\n    const issues = result.success\n      ? [{ path: '', message: 'a Discord message needs content, an embed, a poll or components' }]\n      : issuesOf(result.error);\n    throw new TemplateValidationError('discord', template.id, 'content', issues);\n  }\n  return output as DiscordContent;\n}\n\n/** Run a Slack template's content over parsed props and check the message it returns. */\nexport function renderSlackContent(\n  template: SlackTemplate,\n  props: Record<string, unknown>\n): SlackContent {\n  const output: unknown = template.content(parseTemplateProps(template, props));\n  const result = z.safeParse(slackContentSchema, output);\n  if (!result.success) {\n    throw new TemplateValidationError('slack', template.id, 'content', issuesOf(result.error));\n  }\n  return output as SlackContent;\n}\n\nfunction parsePreview(\n  schema: PropsSchema,\n  preview: unknown,\n  channel: TemplateChannel,\n  title: string\n) {\n  const result = z.safeParse(schema, preview);\n  if (!result.success) {\n    throw new TemplateValidationError(\n      channel,\n      title,\n      'props',\n      issuesOf(result.error).map((i) => Object.assign(i, { message: `preview: ${i.message}` }))\n    );\n  }\n}\n\n/* ---------------------------- supported schemas ---------------------------- */\n\nconst SCALAR_TYPES = new Set(['string', 'number', 'boolean', 'enum']);\n\n/** Throws when `schema` is outside the v1 subset (see the header). */\nexport function assertSupportedSchema(schema: unknown, where: string): void {\n  const fail = (reason: string): never => {\n    throw new TypeError(`template '${where}': unsupported props schema — ${reason}`);\n  };\n  const def = (schema as { _zod?: { def?: core.$ZodTypeDef } } | null | undefined)?._zod?.def;\n  if (def?.type !== 'object') fail('props must be a z.strictObject({...})');\n  const object = def as core.$ZodObjectDef;\n  if (object.catchall?._zod.def.type !== 'never') {\n    fail(\n      'props must be strict (z.strictObject): unknown fields would be dropped or passed through'\n    );\n  }\n  rejectCustomChecks(object, where, fail);\n  for (const [field, value] of Object.entries(object.shape)) {\n    let fieldDef = value._zod.def;\n    if (fieldDef.type === 'optional') {\n      // The wrapper carries checks of its own (`.optional().overwrite(...)`): refuse them too\n      rejectCustomChecks(fieldDef, `${where}.${field}`, fail);\n      fieldDef = (fieldDef as core.$ZodOptionalDef).innerType._zod.def;\n    }\n    if (fieldDef.type === 'literal') {\n      const values = (fieldDef as core.$ZodLiteralDef<core.util.Literal>).values;\n      if (!values.every((v) => ['string', 'number', 'boolean'].includes(typeof v))) {\n        fail(`field '${field}' is a literal of a non-scalar value`);\n      }\n    } else if (!SCALAR_TYPES.has(fieldDef.type)) {\n      fail(\n        `field '${field}' is ${fieldDef.type}; only string, number, boolean, enum and literal fields (optionally .optional()) are supported`\n      );\n    }\n    if ((fieldDef as { coerce?: boolean }).coerce === true) {\n      fail(`field '${field}' coerces its input (z.coerce), which would change what the props mean`);\n    }\n    rejectCustomChecks(fieldDef, `${where}.${field}`, fail);\n  }\n}\n\n/**\n * Checks the subset refuses: `custom` runs arbitrary code (`.refine()`), and\n * `overwrite` changes the value (`.overwrite()`, `.trim()`, `.toLowerCase()`…)\n * — the props are parsed more than once on the way to a send (the validator,\n * then the renderer), so a value-changing check would apply twice and the\n * email would differ from the preview.\n */\nfunction rejectCustomChecks(def: core.$ZodTypeDef, where: string, fail: (reason: string) => never) {\n  for (const check of def.checks ?? []) {\n    if (check._zod.def.check === 'custom') {\n      fail(`'${where}' uses a custom refinement, which the template subset does not support`);\n    }\n    if (check._zod.def.check === 'overwrite') {\n      fail(\n        `'${where}' changes the value (.overwrite, .trim, .toLowerCase, …), which the template subset does not support`\n      );\n    }\n  }\n}\n\n/** The scalar props a template accepts, as the IR resolves them before parsing. */\nexport type ResolvedProps = Record<string, ScalarIR | undefined>;\n\n/**\n * The engine's MessageValidator over the template registries: the message's\n * props are parsed by its template (the parsed value is what gets sent); a\n * push's content is also run once and checked, so an invalid notification\n * stops the send before any device; Discord and Slack content likewise. Channels without a\n * registry here (sms, …) pass through to their app-supplied senders.\n */\nexport function registryValidator(registry: TemplateRegistry): {\n  validate(message: { channel: string; template: string; props: ResolvedProps }): ResolvedProps;\n} {\n  const email = indexTemplates('email', registry.email);\n  const push = indexTemplates('push', registry.push);\n  const discord = indexTemplates('discord', registry.discord);\n  const slack = indexTemplates('slack', registry.slack);\n  return {\n    validate({ channel, template, props }) {\n      if (channel === 'email') {\n        const entry = lookupTemplate(email, 'email', template);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      if (channel === 'push') {\n        const entry = lookupTemplate(push, 'push', template);\n        renderPushContent(entry, props);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      if (channel === 'discord') {\n        const entry = lookupTemplate(discord, 'discord', template);\n        renderDiscordContent(entry, props);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      if (channel === 'slack') {\n        const entry = lookupTemplate(slack, 'slack', template);\n        renderSlackContent(entry, props);\n        return parseTemplateProps(entry, props) as ResolvedProps;\n      }\n      return props;\n    },\n  };\n}\n"],"mappings":";;;;AA4KA,SAAgB,gBACd,YACyB;CACzB,iBAAiB,WAAW,IAAI,iBAAiB;CACjD,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,WAAW,WAAW,KAAK;CAC9E,OAAO;EAAE,MAAM;EAAoB,SAAS;EAAG,GAAG;CAAW;AAC/D;;AAGA,SAAgB,cACd,YACuB;CACvB,iBAAiB,WAAW,IAAI,eAAe;CAC/C,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,SAAS,WAAW,KAAK;CAC5E,OAAO;EAAE,MAAM;EAAkB,SAAS;EAAG,GAAG;CAAW;AAC7D;;;;;AAMA,SAAgB,cACd,YACkB;CAClB,iBAAiB,WAAW,IAAI,eAAe;CAC/C,oBAAoB,YAAY,kBAAkB,WAAW,GAAG,GAAG;CACnE,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,SAAS,WAAW,KAAK;CAC5E,OAAO;EAAE,MAAM;EAAkB,SAAS;EAAG,GAAG;CAAW;AAC7D;;AAGA,SAAgB,aACd,YACiB;CACjB,iBAAiB,WAAW,IAAI,cAAc;CAC9C,sBAAsB,WAAW,OAAO,WAAW,KAAK;CACxD,aAAa,WAAW,OAAO,WAAW,SAAS,QAAQ,WAAW,KAAK;CAC3E,OAAO;EAAE,MAAM;EAAiB,SAAS;EAAG,GAAG;CAAW;AAC5D;AAEA,SAAS,iBAAiB,IAAa,SAAuB;CAC5D,IAAI,CAAC,aAAa,EAAE,GAClB,MAAM,IAAI,UAAU,GAAG,QAAQ,oCAAoC;AAEvE;AAEA,SAAS,aAAa,IAA2B;CAC/C,OAAO,OAAO,OAAO,YAAY,GAAG,KAAK,MAAM;AACjD;AAEA,SAAgB,gBAAgB,OAAwC;CACtE,OAAO,SAAS,OAAO,gBAAgB;AACzC;AAEA,SAAgB,eAAe,OAAuC;CACpE,OAAO,SAAS,OAAO,eAAe;AACxC;AAEA,SAAgB,kBAAkB,OAA0C;CAC1E,OAAO,SAAS,OAAO,kBAAkB;AAC3C;AAEA,SAAgB,gBAAgB,OAAwC;CACtE,OAAO,SAAS,OAAO,gBAAgB;AACzC;AAKA,MAAa,aAA2D;CACtE,kBAAkB;CAClB,iBAAiB;CACjB,oBAAoB;CACpB,kBAAkB;AACpB;AAEA,SAAS,SAAS,OAAgB,MAAuB;CACvD,OACE,OAAO,UAAU,YACjB,UAAU,QACT,MAA6B,SAAS,QACtC,MAAgC,YAAY;AAEjD;;AAGA,SAAgB,WAAW,OAAsC;CAC/D,OACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAO,OAAO,YAAa,MAA6B,IAAc,KACrE,MAAgC,YAAY;AAEjD;AAyBA,MAAM,cAAoE;CACxE,OAAO;CACP,MAAM;CACN,SAAS;CACT,OAAO;AACT;;;;;;;;AASA,SAAgB,eACd,SACA,UACyC;CACzC,MAAM,wBAAQ,IAAI,IAAgC;CAClD,MAAM,wBAAQ,IAAI,IAAoB;CACtC,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,YAAY,CAAC,CAAC,GAAG;EAC1D,MAAM,OAAO,aAAa,QAAQ,GAAG;EACrC,IAAI,CAAC,YAAY,QAAQ,CAAC,KAAK,GAC7B,MAAM,IAAI,UAAU,GAAG,KAAK,YAAY,QAAQ,UAAU;EAE5D,MAAM,KAAM,MAAsB;EAClC,IAAI,CAAC,aAAa,EAAE,GAAG,MAAM,IAAI,UAAU,GAAG,KAAK,WAAW;EAC9D,MAAM,WAAW,MAAM,IAAI,EAAE;EAC7B,IAAI,aAAa,KAAA,GACf,MAAM,IAAI,UACR,GAAG,QAAQ,gBAAgB,GAAG,yBAAyB,SAAS,OAAO,MACzE;EAEF,MAAM,IAAI,IAAI,IAAI;EAClB,MAAM,IAAI,IAAI,KAA2B;CAC3C;CACA,OAAO;AACT;;AAGA,SAAgB,eAAkB,OAA+B,SAAiB,IAAe;CAC/F,MAAM,WAAW,MAAM,IAAI,EAAE;CAC7B,IAAI,aAAa,KAAA,GAAW,MAAM,IAAI,MAAM,GAAG,QAAQ,aAAa,GAAG,oBAAoB;CAC3F,OAAO;AACT;;;;;;;AAgBA,IAAa,0BAAb,cAA6C,MAAM;CAGtC;CACA;CACA;CACA;CALX,OAAyB;CACzB,YACE,SACA,UACA,OACA,QACA;EACA,MACE,GAAG,QAAQ,aAAa,SAAS,IAAI,UAAU,UAAU,uBAAuB,2BAA2B,IAAI,OAC5G,KAAK,MAAM,GAAG,EAAE,QAAQ,SAAS,GAAG,EAAE,SAAS,CAAC,CAChD,KAAK,IAAI,GACd;EATS,KAAA,UAAA;EACA,KAAA,WAAA;EACA,KAAA,QAAA;EACA,KAAA,SAAA;CAOX;AACF;AAEA,SAAS,SAAS,OAAwC;CACxD,OAAO,MAAM,OAAO,KAAK,WAAW;EAClC,MAAM,MAAM,KAAK,IAAI,MAAM,CAAC,CAAC,KAAK,GAAG;EACrC,SAAS,MAAM;CACjB,EAAE;AACJ;;;;;AAMA,SAAgB,mBACd,UACA,OACgB;CAChB,MAAM,UAAU,WAAW,SAAS;CACpC,MAAM,SAAS,EAAE,UAAU,SAAS,OAAO,KAAK;CAChD,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBAAwB,SAAS,SAAS,IAAI,SAAS,SAAS,OAAO,KAAK,CAAC;CAEzF,OAAO,OAAO;AAChB;AAEA,MAAM,oBAAoB,EAAE,aAAa;CACvC,OAAO,EAAE,OAAO;CAChB,MAAM,EAAE,OAAO;CACf,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;CAC5B,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC;AAC5B,CAAC;;AAGD,SAAgB,kBACd,UACA,OACa;CACb,MAAM,SAAS,mBAAmB,UAAU,KAAK;CACjD,MAAM,SAAkB,SAAS,QAAQ,MAAM;CAE/C,MAAM,SAAS,EAAE,UAAU,mBAAmB,MAAM;CACpD,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBAAwB,QAAQ,SAAS,IAAI,WAAW,SAAS,OAAO,KAAK,CAAC;CAE1F,OAAO,OAAO;AAChB;;;;;;AAOA,MAAM,uBAAuB,EAAE,YAAY;CACzC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,MAAM,EAAE,UAAU,GAAI,CAAC,CAAC;CACvD,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,qBAAqB,EAAE,YAAY;CACvC,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CACrC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;;AAGD,SAAgB,qBACd,UACA,OACgB;CAChB,MAAM,SAAkB,SAAS,QAAQ,mBAAmB,UAAU,KAAK,CAAC;CAC5E,MAAM,SAAS,EAAE,UAAU,sBAAsB,MAAM;CACvD,MAAM,QACJ,OAAO,WACP,CAAC,OAAO,KAAK,YACZ,OAAO,KAAK,QAAQ,UAAU,OAAO,KACrC,OAAsD,SAAS,KAAA,MAC9D,OAAsC,YAAY,UAAU,OAAO;CACvE,IAAI,CAAC,OAAO,WAAW,OAAO;EAC5B,MAAM,SAAS,OAAO,UAClB,CAAC;GAAE,MAAM;GAAI,SAAS;EAAkE,CAAC,IACzF,SAAS,OAAO,KAAK;EACzB,MAAM,IAAI,wBAAwB,WAAW,SAAS,IAAI,WAAW,MAAM;CAC7E;CACA,OAAO;AACT;;AAGA,SAAgB,mBACd,UACA,OACc;CACd,MAAM,SAAkB,SAAS,QAAQ,mBAAmB,UAAU,KAAK,CAAC;CAC5E,MAAM,SAAS,EAAE,UAAU,oBAAoB,MAAM;CACrD,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBAAwB,SAAS,SAAS,IAAI,WAAW,SAAS,OAAO,KAAK,CAAC;CAE3F,OAAO;AACT;AAEA,SAAS,aACP,QACA,SACA,SACA,OACA;CACA,MAAM,SAAS,EAAE,UAAU,QAAQ,OAAO;CAC1C,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,wBACR,SACA,OACA,SACA,SAAS,OAAO,KAAK,CAAC,CAAC,KAAK,MAAM,OAAO,OAAO,GAAG,EAAE,SAAS,YAAY,EAAE,UAAU,CAAC,CAAC,CAC1F;AAEJ;AAIA,MAAM,+BAAe,IAAI,IAAI;CAAC;CAAU;CAAU;CAAW;AAAM,CAAC;;AAGpE,SAAgB,sBAAsB,QAAiB,OAAqB;CAC1E,MAAM,QAAQ,WAA0B;EACtC,MAAM,IAAI,UAAU,aAAa,MAAM,gCAAgC,QAAQ;CACjF;CACA,MAAM,MAAO,QAAqE,MAAM;CACxF,IAAI,KAAK,SAAS,UAAU,KAAK,uCAAuC;CACxE,MAAM,SAAS;CACf,IAAI,OAAO,UAAU,KAAK,IAAI,SAAS,SACrC,KACE,0FACF;CAEF,mBAAmB,QAAQ,OAAO,IAAI;CACtC,KAAK,MAAM,CAAC,OAAO,UAAU,OAAO,QAAQ,OAAO,KAAK,GAAG;EACzD,IAAI,WAAW,MAAM,KAAK;EAC1B,IAAI,SAAS,SAAS,YAAY;GAEhC,mBAAmB,UAAU,GAAG,MAAM,GAAG,SAAS,IAAI;GACtD,WAAY,SAAkC,UAAU,KAAK;EAC/D;EACA,IAAI,SAAS,SAAS,WAEhB;OAAA,CADY,SAAoD,OACxD,OAAO,MAAM;IAAC;IAAU;IAAU;GAAS,CAAC,CAAC,SAAS,OAAO,CAAC,CAAC,GACzE,KAAK,UAAU,MAAM,qCAAqC;EAAA,OAEvD,IAAI,CAAC,aAAa,IAAI,SAAS,IAAI,GACxC,KACE,UAAU,MAAM,OAAO,SAAS,KAAK,+FACvC;EAEF,IAAK,SAAkC,WAAW,MAChD,KAAK,UAAU,MAAM,uEAAuE;EAE9F,mBAAmB,UAAU,GAAG,MAAM,GAAG,SAAS,IAAI;CACxD;AACF;;;;;;;;AASA,SAAS,mBAAmB,KAAuB,OAAe,MAAiC;CACjG,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,GAAG;EACpC,IAAI,MAAM,KAAK,IAAI,UAAU,UAC3B,KAAK,IAAI,MAAM,uEAAuE;EAExF,IAAI,MAAM,KAAK,IAAI,UAAU,aAC3B,KACE,IAAI,MAAM,qGACZ;CAEJ;AACF;;;;;;;;AAYA,SAAgB,kBAAkB,UAEhC;CACA,MAAM,QAAQ,eAAe,SAAS,SAAS,KAAK;CACpD,MAAM,OAAO,eAAe,QAAQ,SAAS,IAAI;CACjD,MAAM,UAAU,eAAe,WAAW,SAAS,OAAO;CAC1D,MAAM,QAAQ,eAAe,SAAS,SAAS,KAAK;CACpD,OAAO,EACL,SAAS,EAAE,SAAS,UAAU,SAAS;EACrC,IAAI,YAAY,SAEd,OAAO,mBADO,eAAe,OAAO,SAAS,QACf,GAAG,KAAK;EAExC,IAAI,YAAY,QAAQ;GACtB,MAAM,QAAQ,eAAe,MAAM,QAAQ,QAAQ;GACnD,kBAAkB,OAAO,KAAK;GAC9B,OAAO,mBAAmB,OAAO,KAAK;EACxC;EACA,IAAI,YAAY,WAAW;GACzB,MAAM,QAAQ,eAAe,SAAS,WAAW,QAAQ;GACzD,qBAAqB,OAAO,KAAK;GACjC,OAAO,mBAAmB,OAAO,KAAK;EACxC;EACA,IAAI,YAAY,SAAS;GACvB,MAAM,QAAQ,eAAe,OAAO,SAAS,QAAQ;GACrD,mBAAmB,OAAO,KAAK;GAC/B,OAAO,mBAAmB,OAAO,KAAK;EACxC;EACA,OAAO;CACT,EACF;AACF"}

package/dist/transports/cloudflare-email.cjs

@@ -0,0 +1,59 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_email = require("../email.cjs");
+//#region src/transports/cloudflare-email.ts
+/** The REST API refused the email: `errors` are Cloudflare's `{ code, message }` pairs. */
+var CloudflareEmailError = class extends Error {
+	status;
+	errors;
+	name = "CloudflareEmailError";
+	constructor(status, errors) {
+		const said = errors.map((e) => `${e.code ?? "?"} ${e.message ?? ""}`.trim()).join("; ");
+		super(`Cloudflare Email send failed (${status})${said === "" ? "" : `: ${said}`}`);
+		this.status = status;
+		this.errors = errors;
+	}
+};
+function cloudflareEmailTransport(options) {
+	if (options.binding !== void 0) {
+		const { binding } = options;
+		return { async send(message) {
+			const id = (await binding.send(message))?.messageId;
+			return typeof id === "string" ? { providerMessageId: id } : {};
+		} };
+	}
+	const given = options;
+	if (typeof given.accountId !== "string" || typeof given.apiToken !== "string") throw new TypeError("cloudflareEmailTransport needs { binding } or { accountId, apiToken }");
+	const { accountId, apiToken } = options;
+	const endpoint = (options.endpoint ?? "https://api.cloudflare.com/client/v4").replace(/\/$/, "");
+	const fetchImpl = options.fetch ?? fetch;
+	return { async send(message) {
+		const response = await fetchImpl(`${endpoint}/accounts/${encodeURIComponent(accountId)}/email/sending/send`, {
+			method: "POST",
+			headers: {
+				authorization: `Bearer ${apiToken}`,
+				"content-type": "application/json"
+			},
+			body: JSON.stringify({
+				from: require_email.mimeAddress(message.from),
+				to: message.to,
+				...message.replyTo === void 0 ? {} : { reply_to: require_email.mimeAddress(message.replyTo) },
+				subject: message.subject,
+				html: message.html
+			})
+		});
+		let body = {};
+		try {
+			body = await response.json();
+		} catch {
+			body = {};
+		}
+		if (!response.ok || body.success !== true) throw new CloudflareEmailError(response.status, Array.isArray(body.errors) ? body.errors : []);
+		const id = body.result?.message_id;
+		return typeof id === "string" ? { providerMessageId: id } : {};
+	} };
+}
+//#endregion
+exports.CloudflareEmailError = CloudflareEmailError;
+exports.cloudflareEmailTransport = cloudflareEmailTransport;
+
+//# sourceMappingURL=cloudflare-email.cjs.map

package/dist/transports/cloudflare-email.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-email.cjs","names":["mimeAddress"],"sources":["../../src/transports/cloudflare-email.ts"],"sourcesContent":["import type { EmailBindingLike } from '../cloudflare/bindings';\nimport { mimeAddress } from '../email';\nimport type { EmailMessage, EmailTransport } from '../email-sender';\n\n/**\n * `@shware/workflow/transports/cloudflare-email` — Cloudflare Email Service, through the\n * Worker's `send_email` binding or, from anywhere else (a Lambda), its REST API. Both take the\n * same finished email; only the call and the way each reports a failure differ.\n */\n\nexport type CloudflareEmailTransportOptions =\n  | {\n      /** The Worker's `send_email` binding. */\n      binding: EmailBindingLike;\n      accountId?: never;\n      apiToken?: never;\n    }\n  | {\n      binding?: never;\n      accountId: string;\n      /** An API token allowed to send email for the account. */\n      apiToken: string;\n      /** Defaults to `https://api.cloudflare.com/client/v4`. */\n      endpoint?: string;\n      fetch?: typeof fetch;\n    };\n\n/** The REST API refused the email: `errors` are Cloudflare's `{ code, message }` pairs. */\nexport class CloudflareEmailError extends Error {\n  override readonly name = 'CloudflareEmailError';\n  constructor(\n    readonly status: number,\n    readonly errors: readonly { code?: number; message?: string }[]\n  ) {\n    const said = errors.map((e) => `${e.code ?? '?'} ${e.message ?? ''}`.trim()).join('; ');\n    super(`Cloudflare Email send failed (${status})${said === '' ? '' : `: ${said}`}`);\n  }\n}\n\nexport function cloudflareEmailTransport(options: CloudflareEmailTransportOptions): EmailTransport {\n  if (options.binding !== undefined) {\n    const { binding } = options;\n    return {\n      async send(message) {\n        // The binding takes the key and drops the duplicate a retry or replay produces\n        const result: unknown = await binding.send(message);\n        const id = (result as { messageId?: unknown } | null | undefined)?.messageId;\n        return typeof id === 'string' ? { providerMessageId: id } : {};\n      },\n    };\n  }\n  // Checked at runtime too: a JS caller can pass neither\n  const given = options as { accountId?: unknown; apiToken?: unknown };\n  if (typeof given.accountId !== 'string' || typeof given.apiToken !== 'string') {\n    throw new TypeError('cloudflareEmailTransport needs { binding } or { accountId, apiToken }');\n  }\n  const { accountId, apiToken } = options;\n  const endpoint = (options.endpoint ?? 'https://api.cloudflare.com/client/v4').replace(/\\/$/, '');\n  const fetchImpl = options.fetch ?? fetch;\n  return {\n    async send(message: EmailMessage) {\n      const response = await fetchImpl(\n        `${endpoint}/accounts/${encodeURIComponent(accountId)}/email/sending/send`,\n        {\n          method: 'POST',\n          headers: {\n            authorization: `Bearer ${apiToken}`,\n            'content-type': 'application/json',\n          },\n          body: JSON.stringify({\n            from: mimeAddress(message.from),\n            to: message.to,\n            ...(message.replyTo === undefined ? {} : { reply_to: mimeAddress(message.replyTo) }),\n            subject: message.subject,\n            html: message.html,\n          }),\n        }\n      );\n      let body: { success?: unknown; errors?: unknown; result?: { message_id?: unknown } } = {};\n      try {\n        body = (await response.json()) as typeof body;\n      } catch {\n        body = {};\n      }\n      if (!response.ok || body.success !== true) {\n        throw new CloudflareEmailError(\n          response.status,\n          Array.isArray(body.errors) ? (body.errors as { code?: number; message?: string }[]) : []\n        );\n      }\n      // No server-side de-duplication is documented for the REST API: a retry after an accepted\n      // send can deliver twice (at least once, like SES)\n      const id = body.result?.message_id;\n      return typeof id === 'string' ? { providerMessageId: id } : {};\n    },\n  };\n}\n"],"mappings":";;;;AA4BA,IAAa,uBAAb,cAA0C,MAAM;CAGnC;CACA;CAHX,OAAyB;CACzB,YACE,QACA,QACA;EACA,MAAM,OAAO,OAAO,KAAK,MAAM,GAAG,EAAE,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;EACtF,MAAM,iCAAiC,OAAO,GAAG,SAAS,KAAK,KAAK,KAAK,QAAQ;EAJxE,KAAA,SAAA;EACA,KAAA,SAAA;CAIX;AACF;AAEA,SAAgB,yBAAyB,SAA0D;CACjG,IAAI,QAAQ,YAAY,KAAA,GAAW;EACjC,MAAM,EAAE,YAAY;EACpB,OAAO,EACL,MAAM,KAAK,SAAS;GAGlB,MAAM,MAAM,MADkB,QAAQ,KAAK,OAAO,EAAA,EACiB;GACnE,OAAO,OAAO,OAAO,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;EAC/D,EACF;CACF;CAEA,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,cAAc,YAAY,OAAO,MAAM,aAAa,UACnE,MAAM,IAAI,UAAU,uEAAuE;CAE7F,MAAM,EAAE,WAAW,aAAa;CAChC,MAAM,YAAY,QAAQ,YAAY,uCAAA,CAAwC,QAAQ,OAAO,EAAE;CAC/F,MAAM,YAAY,QAAQ,SAAS;CACnC,OAAO,EACL,MAAM,KAAK,SAAuB;EAChC,MAAM,WAAW,MAAM,UACrB,GAAG,SAAS,YAAY,mBAAmB,SAAS,EAAE,sBACtD;GACE,QAAQ;GACR,SAAS;IACP,eAAe,UAAU;IACzB,gBAAgB;GAClB;GACA,MAAM,KAAK,UAAU;IACnB,MAAMA,cAAAA,YAAY,QAAQ,IAAI;IAC9B,IAAI,QAAQ;IACZ,GAAI,QAAQ,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,UAAUA,cAAAA,YAAY,QAAQ,OAAO,EAAE;IAClF,SAAS,QAAQ;IACjB,MAAM,QAAQ;GAChB,CAAC;EACH,CACF;EACA,IAAI,OAAmF,CAAC;EACxF,IAAI;GACF,OAAQ,MAAM,SAAS,KAAK;EAC9B,QAAQ;GACN,OAAO,CAAC;EACV;EACA,IAAI,CAAC,SAAS,MAAM,KAAK,YAAY,MACnC,MAAM,IAAI,qBACR,SAAS,QACT,MAAM,QAAQ,KAAK,MAAM,IAAK,KAAK,SAAmD,CAAC,CACzF;EAIF,MAAM,KAAK,KAAK,QAAQ;EACxB,OAAO,OAAO,OAAO,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC/D,EACF;AACF"}

package/dist/transports/cloudflare-email.d.cts

@@ -0,0 +1,38 @@
+import { EmailBindingLike } from "../cloudflare/bindings.cjs";
+import { EmailTransport } from "../email-sender.cjs";
+//#region src/transports/cloudflare-email.d.ts
+/**
+ * `@shware/workflow/transports/cloudflare-email` — Cloudflare Email Service, through the
+ * Worker's `send_email` binding or, from anywhere else (a Lambda), its REST API. Both take the
+ * same finished email; only the call and the way each reports a failure differ.
+ */
+export type CloudflareEmailTransportOptions = {
+  /** The Worker's `send_email` binding. */
+  binding: EmailBindingLike;
+  accountId?: never;
+  apiToken?: never;
+} | {
+  binding?: never;
+  accountId: string;
+  /** An API token allowed to send email for the account. */
+  apiToken: string;
+  /** Defaults to `https://api.cloudflare.com/client/v4`. */
+  endpoint?: string;
+  fetch?: typeof fetch;
+};
+/** The REST API refused the email: `errors` are Cloudflare's `{ code, message }` pairs. */
+export declare class CloudflareEmailError extends Error {
+  readonly status: number;
+  readonly errors: readonly {
+    code?: number;
+    message?: string;
+  }[];
+  readonly name = "CloudflareEmailError";
+  constructor(status: number, errors: readonly {
+    code?: number;
+    message?: string;
+  }[]);
+}
+export declare function cloudflareEmailTransport(options: CloudflareEmailTransportOptions): EmailTransport;
+//#endregion
+//# sourceMappingURL=cloudflare-email.d.cts.map

package/dist/transports/cloudflare-email.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-email.d.cts","names":[],"sources":["../../src/transports/cloudflare-email.ts"],"mappings":";;;;;;;;YAUY;;EAGN,SAAS;EACT;EACA;;EAGA;EACA;;EAEA;;EAEA;EACA,eAAe;;;qBAIR,6BAA6B;WAG7B;WACA;IAAmB;IAAe;;WAH3B;EAClB,YACW,gBACA;IAAmB;IAAe;;;wBAO/B,yBAAyB,SAAS,kCAAkC"}

package/dist/transports/cloudflare-email.d.mts

@@ -0,0 +1,38 @@
+import { EmailBindingLike } from "../cloudflare/bindings.mjs";
+import { EmailTransport } from "../email-sender.mjs";
+//#region src/transports/cloudflare-email.d.ts
+/**
+ * `@shware/workflow/transports/cloudflare-email` — Cloudflare Email Service, through the
+ * Worker's `send_email` binding or, from anywhere else (a Lambda), its REST API. Both take the
+ * same finished email; only the call and the way each reports a failure differ.
+ */
+export type CloudflareEmailTransportOptions = {
+  /** The Worker's `send_email` binding. */
+  binding: EmailBindingLike;
+  accountId?: never;
+  apiToken?: never;
+} | {
+  binding?: never;
+  accountId: string;
+  /** An API token allowed to send email for the account. */
+  apiToken: string;
+  /** Defaults to `https://api.cloudflare.com/client/v4`. */
+  endpoint?: string;
+  fetch?: typeof fetch;
+};
+/** The REST API refused the email: `errors` are Cloudflare's `{ code, message }` pairs. */
+export declare class CloudflareEmailError extends Error {
+  readonly status: number;
+  readonly errors: readonly {
+    code?: number;
+    message?: string;
+  }[];
+  readonly name = "CloudflareEmailError";
+  constructor(status: number, errors: readonly {
+    code?: number;
+    message?: string;
+  }[]);
+}
+export declare function cloudflareEmailTransport(options: CloudflareEmailTransportOptions): EmailTransport;
+//#endregion
+//# sourceMappingURL=cloudflare-email.d.mts.map

package/dist/transports/cloudflare-email.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-email.d.mts","names":[],"sources":["../../src/transports/cloudflare-email.ts"],"mappings":";;;;;;;;YAUY;;EAGN,SAAS;EACT;EACA;;EAGA;EACA;;EAEA;;EAEA;EACA,eAAe;;;qBAIR,6BAA6B;WAG7B;WACA;IAAmB;IAAe;;WAH3B;EAClB,YACW,gBACA;IAAmB;IAAe;;;wBAO/B,yBAAyB,SAAS,kCAAkC"}

package/dist/transports/cloudflare-email.mjs

@@ -0,0 +1,57 @@
+import { mimeAddress } from "../email.mjs";
+//#region src/transports/cloudflare-email.ts
+/** The REST API refused the email: `errors` are Cloudflare's `{ code, message }` pairs. */
+var CloudflareEmailError = class extends Error {
+	status;
+	errors;
+	name = "CloudflareEmailError";
+	constructor(status, errors) {
+		const said = errors.map((e) => `${e.code ?? "?"} ${e.message ?? ""}`.trim()).join("; ");
+		super(`Cloudflare Email send failed (${status})${said === "" ? "" : `: ${said}`}`);
+		this.status = status;
+		this.errors = errors;
+	}
+};
+function cloudflareEmailTransport(options) {
+	if (options.binding !== void 0) {
+		const { binding } = options;
+		return { async send(message) {
+			const id = (await binding.send(message))?.messageId;
+			return typeof id === "string" ? { providerMessageId: id } : {};
+		} };
+	}
+	const given = options;
+	if (typeof given.accountId !== "string" || typeof given.apiToken !== "string") throw new TypeError("cloudflareEmailTransport needs { binding } or { accountId, apiToken }");
+	const { accountId, apiToken } = options;
+	const endpoint = (options.endpoint ?? "https://api.cloudflare.com/client/v4").replace(/\/$/, "");
+	const fetchImpl = options.fetch ?? fetch;
+	return { async send(message) {
+		const response = await fetchImpl(`${endpoint}/accounts/${encodeURIComponent(accountId)}/email/sending/send`, {
+			method: "POST",
+			headers: {
+				authorization: `Bearer ${apiToken}`,
+				"content-type": "application/json"
+			},
+			body: JSON.stringify({
+				from: mimeAddress(message.from),
+				to: message.to,
+				...message.replyTo === void 0 ? {} : { reply_to: mimeAddress(message.replyTo) },
+				subject: message.subject,
+				html: message.html
+			})
+		});
+		let body = {};
+		try {
+			body = await response.json();
+		} catch {
+			body = {};
+		}
+		if (!response.ok || body.success !== true) throw new CloudflareEmailError(response.status, Array.isArray(body.errors) ? body.errors : []);
+		const id = body.result?.message_id;
+		return typeof id === "string" ? { providerMessageId: id } : {};
+	} };
+}
+//#endregion
+export { CloudflareEmailError, cloudflareEmailTransport };
+
+//# sourceMappingURL=cloudflare-email.mjs.map

package/dist/transports/cloudflare-email.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-email.mjs","names":[],"sources":["../../src/transports/cloudflare-email.ts"],"sourcesContent":["import type { EmailBindingLike } from '../cloudflare/bindings';\nimport { mimeAddress } from '../email';\nimport type { EmailMessage, EmailTransport } from '../email-sender';\n\n/**\n * `@shware/workflow/transports/cloudflare-email` — Cloudflare Email Service, through the\n * Worker's `send_email` binding or, from anywhere else (a Lambda), its REST API. Both take the\n * same finished email; only the call and the way each reports a failure differ.\n */\n\nexport type CloudflareEmailTransportOptions =\n  | {\n      /** The Worker's `send_email` binding. */\n      binding: EmailBindingLike;\n      accountId?: never;\n      apiToken?: never;\n    }\n  | {\n      binding?: never;\n      accountId: string;\n      /** An API token allowed to send email for the account. */\n      apiToken: string;\n      /** Defaults to `https://api.cloudflare.com/client/v4`. */\n      endpoint?: string;\n      fetch?: typeof fetch;\n    };\n\n/** The REST API refused the email: `errors` are Cloudflare's `{ code, message }` pairs. */\nexport class CloudflareEmailError extends Error {\n  override readonly name = 'CloudflareEmailError';\n  constructor(\n    readonly status: number,\n    readonly errors: readonly { code?: number; message?: string }[]\n  ) {\n    const said = errors.map((e) => `${e.code ?? '?'} ${e.message ?? ''}`.trim()).join('; ');\n    super(`Cloudflare Email send failed (${status})${said === '' ? '' : `: ${said}`}`);\n  }\n}\n\nexport function cloudflareEmailTransport(options: CloudflareEmailTransportOptions): EmailTransport {\n  if (options.binding !== undefined) {\n    const { binding } = options;\n    return {\n      async send(message) {\n        // The binding takes the key and drops the duplicate a retry or replay produces\n        const result: unknown = await binding.send(message);\n        const id = (result as { messageId?: unknown } | null | undefined)?.messageId;\n        return typeof id === 'string' ? { providerMessageId: id } : {};\n      },\n    };\n  }\n  // Checked at runtime too: a JS caller can pass neither\n  const given = options as { accountId?: unknown; apiToken?: unknown };\n  if (typeof given.accountId !== 'string' || typeof given.apiToken !== 'string') {\n    throw new TypeError('cloudflareEmailTransport needs { binding } or { accountId, apiToken }');\n  }\n  const { accountId, apiToken } = options;\n  const endpoint = (options.endpoint ?? 'https://api.cloudflare.com/client/v4').replace(/\\/$/, '');\n  const fetchImpl = options.fetch ?? fetch;\n  return {\n    async send(message: EmailMessage) {\n      const response = await fetchImpl(\n        `${endpoint}/accounts/${encodeURIComponent(accountId)}/email/sending/send`,\n        {\n          method: 'POST',\n          headers: {\n            authorization: `Bearer ${apiToken}`,\n            'content-type': 'application/json',\n          },\n          body: JSON.stringify({\n            from: mimeAddress(message.from),\n            to: message.to,\n            ...(message.replyTo === undefined ? {} : { reply_to: mimeAddress(message.replyTo) }),\n            subject: message.subject,\n            html: message.html,\n          }),\n        }\n      );\n      let body: { success?: unknown; errors?: unknown; result?: { message_id?: unknown } } = {};\n      try {\n        body = (await response.json()) as typeof body;\n      } catch {\n        body = {};\n      }\n      if (!response.ok || body.success !== true) {\n        throw new CloudflareEmailError(\n          response.status,\n          Array.isArray(body.errors) ? (body.errors as { code?: number; message?: string }[]) : []\n        );\n      }\n      // No server-side de-duplication is documented for the REST API: a retry after an accepted\n      // send can deliver twice (at least once, like SES)\n      const id = body.result?.message_id;\n      return typeof id === 'string' ? { providerMessageId: id } : {};\n    },\n  };\n}\n"],"mappings":";;;AA4BA,IAAa,uBAAb,cAA0C,MAAM;CAGnC;CACA;CAHX,OAAyB;CACzB,YACE,QACA,QACA;EACA,MAAM,OAAO,OAAO,KAAK,MAAM,GAAG,EAAE,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;EACtF,MAAM,iCAAiC,OAAO,GAAG,SAAS,KAAK,KAAK,KAAK,QAAQ;EAJxE,KAAA,SAAA;EACA,KAAA,SAAA;CAIX;AACF;AAEA,SAAgB,yBAAyB,SAA0D;CACjG,IAAI,QAAQ,YAAY,KAAA,GAAW;EACjC,MAAM,EAAE,YAAY;EACpB,OAAO,EACL,MAAM,KAAK,SAAS;GAGlB,MAAM,MAAM,MADkB,QAAQ,KAAK,OAAO,EAAA,EACiB;GACnE,OAAO,OAAO,OAAO,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;EAC/D,EACF;CACF;CAEA,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,cAAc,YAAY,OAAO,MAAM,aAAa,UACnE,MAAM,IAAI,UAAU,uEAAuE;CAE7F,MAAM,EAAE,WAAW,aAAa;CAChC,MAAM,YAAY,QAAQ,YAAY,uCAAA,CAAwC,QAAQ,OAAO,EAAE;CAC/F,MAAM,YAAY,QAAQ,SAAS;CACnC,OAAO,EACL,MAAM,KAAK,SAAuB;EAChC,MAAM,WAAW,MAAM,UACrB,GAAG,SAAS,YAAY,mBAAmB,SAAS,EAAE,sBACtD;GACE,QAAQ;GACR,SAAS;IACP,eAAe,UAAU;IACzB,gBAAgB;GAClB;GACA,MAAM,KAAK,UAAU;IACnB,MAAM,YAAY,QAAQ,IAAI;IAC9B,IAAI,QAAQ;IACZ,GAAI,QAAQ,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,YAAY,QAAQ,OAAO,EAAE;IAClF,SAAS,QAAQ;IACjB,MAAM,QAAQ;GAChB,CAAC;EACH,CACF;EACA,IAAI,OAAmF,CAAC;EACxF,IAAI;GACF,OAAQ,MAAM,SAAS,KAAK;EAC9B,QAAQ;GACN,OAAO,CAAC;EACV;EACA,IAAI,CAAC,SAAS,MAAM,KAAK,YAAY,MACnC,MAAM,IAAI,qBACR,SAAS,QACT,MAAM,QAAQ,KAAK,MAAM,IAAK,KAAK,SAAmD,CAAC,CACzF;EAIF,MAAM,KAAK,KAAK,QAAQ;EACxB,OAAO,OAAO,OAAO,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC/D,EACF;AACF"}

package/dist/transports/ses.cjs

@@ -0,0 +1,91 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_email = require("../email.cjs");
+const require_transports_sigv4 = require("./sigv4.cjs");
+//#region src/transports/ses.ts
+/** An SES error response: `type` is SES's error code (`MessageRejected`, `TooManyRequestsException`, ...). */
+var SesSendError = class extends Error {
+	status;
+	type;
+	name = "SesSendError";
+	constructor(status, type, message) {
+		super(`SES SendEmail failed (${status}${type === void 0 ? "" : ` ${type}`}): ${message}`);
+		this.status = status;
+		this.type = type;
+	}
+};
+function environmentCredentials() {
+	const env = globalThis.process?.env;
+	const accessKeyId = env?.AWS_ACCESS_KEY_ID;
+	const secretAccessKey = env?.AWS_SECRET_ACCESS_KEY;
+	if (accessKeyId === void 0 || secretAccessKey === void 0) throw new Error("sesEmailTransport: no credentials — pass `credentials`, or run where AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY are set (a Lambda execution role)");
+	return {
+		accessKeyId,
+		secretAccessKey,
+		sessionToken: env?.AWS_SESSION_TOKEN
+	};
+}
+function sesEmailTransport(options) {
+	const endpoint = (options.endpoint ?? `https://email.${options.region}.amazonaws.com`).replace(/\/$/, "");
+	const credentials = async () => {
+		const configured = options.credentials;
+		if (configured === void 0) return environmentCredentials();
+		return typeof configured === "function" ? configured() : configured;
+	};
+	const fetchImpl = options.fetch ?? fetch;
+	return { async send(message) {
+		const body = JSON.stringify({
+			FromEmailAddress: require_email.mimeAddress(message.from),
+			Destination: { ToAddresses: [message.to] },
+			...message.replyTo === void 0 ? {} : { ReplyToAddresses: [require_email.mimeAddress(message.replyTo)] },
+			Content: { Simple: {
+				Subject: {
+					Data: message.subject,
+					Charset: "UTF-8"
+				},
+				Body: { Html: {
+					Data: message.html,
+					Charset: "UTF-8"
+				} }
+			} },
+			...options.configurationSetName === void 0 ? {} : { ConfigurationSetName: options.configurationSetName }
+		});
+		const url = `${endpoint}/v2/email/outbound-emails`;
+		const headers = await require_transports_sigv4.signRequest({
+			method: "POST",
+			url,
+			headers: { "content-type": "application/json" },
+			body,
+			credentials: await credentials(),
+			region: options.region,
+			service: "ses"
+		});
+		const response = await fetchImpl(url, {
+			method: "POST",
+			headers,
+			body
+		});
+		const text = await response.text();
+		if (!response.ok) {
+			let detail = text;
+			try {
+				const parsed = JSON.parse(text);
+				const said = parsed.message ?? parsed.Message;
+				if (typeof said === "string") detail = said;
+			} catch {}
+			const type = response.headers.get("x-amzn-errortype")?.split(":")[0];
+			throw new SesSendError(response.status, type, detail);
+		}
+		let messageId;
+		try {
+			messageId = JSON.parse(text).MessageId;
+		} catch {
+			messageId = void 0;
+		}
+		return typeof messageId === "string" ? { providerMessageId: messageId } : {};
+	} };
+}
+//#endregion
+exports.SesSendError = SesSendError;
+exports.sesEmailTransport = sesEmailTransport;
+
+//# sourceMappingURL=ses.cjs.map

package/dist/transports/ses.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ses.cjs","names":["mimeAddress","signRequest"],"sources":["../../src/transports/ses.ts"],"sourcesContent":["import { mimeAddress } from '../email';\nimport type { EmailMessage, EmailTransport } from '../email-sender';\nimport { signRequest } from './sigv4';\n\n/**\n * `@shware/workflow/transports/ses` — email through Amazon SES (the v2 `SendEmail` API) over\n * plain `fetch` with a SigV4 signature, so the same transport runs in a Lambda and in a Worker.\n * Nothing here loads the AWS SDK or a Node-only credential chain.\n */\n\nexport interface AwsCredentials {\n  accessKeyId: string;\n  secretAccessKey: string;\n  /** Present for temporary credentials (a role's): signed with the request. */\n  sessionToken?: string | undefined;\n}\n\n/** Called on every send, so rotated temporary credentials are picked up rather than frozen. */\nexport type AwsCredentialProvider = () => AwsCredentials | Promise<AwsCredentials>;\n\nexport interface SesEmailTransportOptions {\n  region: string;\n  /**\n   * Fixed credentials, or a provider read on every send. Defaults to the process environment's\n   * `AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY` / `AWS_SESSION_TOKEN`, read at send time —\n   * a Lambda's execution role. A Worker passes them explicitly from its validated env.\n   */\n  credentials?: AwsCredentials | AwsCredentialProvider;\n  /** An SES configuration set (event publishing, a dedicated IP pool). */\n  configurationSetName?: string;\n  /** Defaults to `https://email.<region>.amazonaws.com`. */\n  endpoint?: string;\n  fetch?: typeof fetch;\n}\n\n/** An SES error response: `type` is SES's error code (`MessageRejected`, `TooManyRequestsException`, ...). */\nexport class SesSendError extends Error {\n  override readonly name = 'SesSendError';\n  constructor(\n    readonly status: number,\n    readonly type: string | undefined,\n    message: string\n  ) {\n    super(`SES SendEmail failed (${status}${type === undefined ? '' : ` ${type}`}): ${message}`);\n  }\n}\n\nfunction environmentCredentials(): AwsCredentials {\n  // Read through globalThis: a Worker has no `process`, and must pass credentials instead\n  const env = (globalThis as { process?: { env?: Record<string, string | undefined> } }).process\n    ?.env;\n  const accessKeyId = env?.AWS_ACCESS_KEY_ID;\n  const secretAccessKey = env?.AWS_SECRET_ACCESS_KEY;\n  if (accessKeyId === undefined || secretAccessKey === undefined) {\n    throw new Error(\n      'sesEmailTransport: no credentials — pass `credentials`, or run where AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY are set (a Lambda execution role)'\n    );\n  }\n  return { accessKeyId, secretAccessKey, sessionToken: env?.AWS_SESSION_TOKEN };\n}\n\nexport function sesEmailTransport(options: SesEmailTransportOptions): EmailTransport {\n  const endpoint = (options.endpoint ?? `https://email.${options.region}.amazonaws.com`).replace(\n    /\\/$/,\n    ''\n  );\n  const credentials = async (): Promise<AwsCredentials> => {\n    const configured = options.credentials;\n    if (configured === undefined) return environmentCredentials();\n    return typeof configured === 'function' ? configured() : configured;\n  };\n  const fetchImpl = options.fetch ?? fetch;\n\n  return {\n    async send(message: EmailMessage) {\n      const body = JSON.stringify({\n        FromEmailAddress: mimeAddress(message.from),\n        Destination: { ToAddresses: [message.to] },\n        ...(message.replyTo === undefined\n          ? {}\n          : { ReplyToAddresses: [mimeAddress(message.replyTo)] }),\n        Content: {\n          Simple: {\n            Subject: { Data: message.subject, Charset: 'UTF-8' },\n            Body: { Html: { Data: message.html, Charset: 'UTF-8' } },\n          },\n        },\n        ...(options.configurationSetName === undefined\n          ? {}\n          : { ConfigurationSetName: options.configurationSetName }),\n      });\n      const url = `${endpoint}/v2/email/outbound-emails`;\n      const headers = await signRequest({\n        method: 'POST',\n        url,\n        headers: { 'content-type': 'application/json' },\n        body,\n        credentials: await credentials(),\n        region: options.region,\n        service: 'ses',\n      });\n      // No retries here: the durable step owns them, and counts them — SES cannot de-duplicate,\n      // so every extra attempt of an accepted send is another chance to deliver twice\n      const response = await fetchImpl(url, { method: 'POST', headers, body });\n      const text = await response.text();\n      if (!response.ok) {\n        let detail = text;\n        try {\n          const parsed = JSON.parse(text) as { message?: unknown; Message?: unknown };\n          const said = parsed.message ?? parsed.Message;\n          if (typeof said === 'string') detail = said;\n        } catch {\n          // Not JSON: the raw body says what went wrong\n        }\n        const type = response.headers.get('x-amzn-errortype')?.split(':')[0];\n        throw new SesSendError(response.status, type, detail);\n      }\n      let messageId: unknown;\n      try {\n        messageId = (JSON.parse(text) as { MessageId?: unknown }).MessageId;\n      } catch {\n        messageId = undefined;\n      }\n      return typeof messageId === 'string' ? { providerMessageId: messageId } : {};\n    },\n  };\n}\n"],"mappings":";;;;;AAoCA,IAAa,eAAb,cAAkC,MAAM;CAG3B;CACA;CAHX,OAAyB;CACzB,YACE,QACA,MACA,SACA;EACA,MAAM,yBAAyB,SAAS,SAAS,KAAA,IAAY,KAAK,IAAI,OAAO,KAAK,SAAS;EAJlF,KAAA,SAAA;EACA,KAAA,OAAA;CAIX;AACF;AAEA,SAAS,yBAAyC;CAEhD,MAAM,MAAO,WAA0E,SACnF;CACJ,MAAM,cAAc,KAAK;CACzB,MAAM,kBAAkB,KAAK;CAC7B,IAAI,gBAAgB,KAAA,KAAa,oBAAoB,KAAA,GACnD,MAAM,IAAI,MACR,oJACF;CAEF,OAAO;EAAE;EAAa;EAAiB,cAAc,KAAK;CAAkB;AAC9E;AAEA,SAAgB,kBAAkB,SAAmD;CACnF,MAAM,YAAY,QAAQ,YAAY,iBAAiB,QAAQ,OAAO,gBAAA,CAAiB,QACrF,OACA,EACF;CACA,MAAM,cAAc,YAAqC;EACvD,MAAM,aAAa,QAAQ;EAC3B,IAAI,eAAe,KAAA,GAAW,OAAO,uBAAuB;EAC5D,OAAO,OAAO,eAAe,aAAa,WAAW,IAAI;CAC3D;CACA,MAAM,YAAY,QAAQ,SAAS;CAEnC,OAAO,EACL,MAAM,KAAK,SAAuB;EAChC,MAAM,OAAO,KAAK,UAAU;GAC1B,kBAAkBA,cAAAA,YAAY,QAAQ,IAAI;GAC1C,aAAa,EAAE,aAAa,CAAC,QAAQ,EAAE,EAAE;GACzC,GAAI,QAAQ,YAAY,KAAA,IACpB,CAAC,IACD,EAAE,kBAAkB,CAACA,cAAAA,YAAY,QAAQ,OAAO,CAAC,EAAE;GACvD,SAAS,EACP,QAAQ;IACN,SAAS;KAAE,MAAM,QAAQ;KAAS,SAAS;IAAQ;IACnD,MAAM,EAAE,MAAM;KAAE,MAAM,QAAQ;KAAM,SAAS;IAAQ,EAAE;GACzD,EACF;GACA,GAAI,QAAQ,yBAAyB,KAAA,IACjC,CAAC,IACD,EAAE,sBAAsB,QAAQ,qBAAqB;EAC3D,CAAC;EACD,MAAM,MAAM,GAAG,SAAS;EACxB,MAAM,UAAU,MAAMC,yBAAAA,YAAY;GAChC,QAAQ;GACR;GACA,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C;GACA,aAAa,MAAM,YAAY;GAC/B,QAAQ,QAAQ;GAChB,SAAS;EACX,CAAC;EAGD,MAAM,WAAW,MAAM,UAAU,KAAK;GAAE,QAAQ;GAAQ;GAAS;EAAK,CAAC;EACvE,MAAM,OAAO,MAAM,SAAS,KAAK;EACjC,IAAI,CAAC,SAAS,IAAI;GAChB,IAAI,SAAS;GACb,IAAI;IACF,MAAM,SAAS,KAAK,MAAM,IAAI;IAC9B,MAAM,OAAO,OAAO,WAAW,OAAO;IACtC,IAAI,OAAO,SAAS,UAAU,SAAS;GACzC,QAAQ,CAER;GACA,MAAM,OAAO,SAAS,QAAQ,IAAI,kBAAkB,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;GAClE,MAAM,IAAI,aAAa,SAAS,QAAQ,MAAM,MAAM;EACtD;EACA,IAAI;EACJ,IAAI;GACF,YAAa,KAAK,MAAM,IAAI,CAAC,CAA6B;EAC5D,QAAQ;GACN,YAAY,KAAA;EACd;EACA,OAAO,OAAO,cAAc,WAAW,EAAE,mBAAmB,UAAU,IAAI,CAAC;CAC7E,EACF;AACF"}

package/dist/transports/ses.d.cts

@@ -0,0 +1,39 @@
+import { EmailTransport } from "../email-sender.cjs";
+//#region src/transports/ses.d.ts
+/**
+ * `@shware/workflow/transports/ses` — email through Amazon SES (the v2 `SendEmail` API) over
+ * plain `fetch` with a SigV4 signature, so the same transport runs in a Lambda and in a Worker.
+ * Nothing here loads the AWS SDK or a Node-only credential chain.
+ */
+export interface AwsCredentials {
+  accessKeyId: string;
+  secretAccessKey: string;
+  /** Present for temporary credentials (a role's): signed with the request. */
+  sessionToken?: string | undefined;
+}
+/** Called on every send, so rotated temporary credentials are picked up rather than frozen. */
+export type AwsCredentialProvider = () => AwsCredentials | Promise<AwsCredentials>;
+export interface SesEmailTransportOptions {
+  region: string;
+  /**
+   * Fixed credentials, or a provider read on every send. Defaults to the process environment's
+   * `AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY` / `AWS_SESSION_TOKEN`, read at send time —
+   * a Lambda's execution role. A Worker passes them explicitly from its validated env.
+   */
+  credentials?: AwsCredentials | AwsCredentialProvider;
+  /** An SES configuration set (event publishing, a dedicated IP pool). */
+  configurationSetName?: string;
+  /** Defaults to `https://email.<region>.amazonaws.com`. */
+  endpoint?: string;
+  fetch?: typeof fetch;
+}
+/** An SES error response: `type` is SES's error code (`MessageRejected`, `TooManyRequestsException`, ...). */
+export declare class SesSendError extends Error {
+  readonly status: number;
+  readonly type: string | undefined;
+  readonly name = "SesSendError";
+  constructor(status: number, type: string | undefined, message: string);
+}
+export declare function sesEmailTransport(options: SesEmailTransportOptions): EmailTransport;
+//#endregion
+//# sourceMappingURL=ses.d.cts.map

package/dist/transports/ses.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ses.d.cts","names":[],"sources":["../../src/transports/ses.ts"],"mappings":";;;;;;;iBAUiB;EACf;EACA;;EAEA;;;YAIU,8BAA8B,iBAAiB,QAAQ;iBAElD;EACf;;;;;;EAMA,cAAc,iBAAiB;;EAE/B;;EAEA;EACA,eAAe;;;qBAIJ,qBAAqB;WAGrB;WACA;WAHO;EAClB,YACW,gBACA,0BACT;;wBAoBY,kBAAkB,SAAS,2BAA2B"}

package/dist/transports/ses.d.mts

@@ -0,0 +1,39 @@
+import { EmailTransport } from "../email-sender.mjs";
+//#region src/transports/ses.d.ts
+/**
+ * `@shware/workflow/transports/ses` — email through Amazon SES (the v2 `SendEmail` API) over
+ * plain `fetch` with a SigV4 signature, so the same transport runs in a Lambda and in a Worker.
+ * Nothing here loads the AWS SDK or a Node-only credential chain.
+ */
+export interface AwsCredentials {
+  accessKeyId: string;
+  secretAccessKey: string;
+  /** Present for temporary credentials (a role's): signed with the request. */
+  sessionToken?: string | undefined;
+}
+/** Called on every send, so rotated temporary credentials are picked up rather than frozen. */
+export type AwsCredentialProvider = () => AwsCredentials | Promise<AwsCredentials>;
+export interface SesEmailTransportOptions {
+  region: string;
+  /**
+   * Fixed credentials, or a provider read on every send. Defaults to the process environment's
+   * `AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY` / `AWS_SESSION_TOKEN`, read at send time —
+   * a Lambda's execution role. A Worker passes them explicitly from its validated env.
+   */
+  credentials?: AwsCredentials | AwsCredentialProvider;
+  /** An SES configuration set (event publishing, a dedicated IP pool). */
+  configurationSetName?: string;
+  /** Defaults to `https://email.<region>.amazonaws.com`. */
+  endpoint?: string;
+  fetch?: typeof fetch;
+}
+/** An SES error response: `type` is SES's error code (`MessageRejected`, `TooManyRequestsException`, ...). */
+export declare class SesSendError extends Error {
+  readonly status: number;
+  readonly type: string | undefined;
+  readonly name = "SesSendError";
+  constructor(status: number, type: string | undefined, message: string);
+}
+export declare function sesEmailTransport(options: SesEmailTransportOptions): EmailTransport;
+//#endregion
+//# sourceMappingURL=ses.d.mts.map

package/dist/transports/ses.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ses.d.mts","names":[],"sources":["../../src/transports/ses.ts"],"mappings":";;;;;;;iBAUiB;EACf;EACA;;EAEA;;;YAIU,8BAA8B,iBAAiB,QAAQ;iBAElD;EACf;;;;;;EAMA,cAAc,iBAAiB;;EAE/B;;EAEA;EACA,eAAe;;;qBAIJ,qBAAqB;WAGrB;WACA;WAHO;EAClB,YACW,gBACA,0BACT;;wBAoBY,kBAAkB,SAAS,2BAA2B"}