@suphark/notify 0.10.1 → 0.11.0

package/dist/{chunk-JN7P2CVF.js → chunk-SBQOHUW4.js}

@@ -1,6 +1,6 @@
 import {
   builtinFallback
-} from "./chunk-NNMV7FZ3.js";
+} from "./chunk-WXINJXF4.js";
 
 // src/address.ts
 var NAMED_RE = /^\s*(?:"?([^"<]*?)"?\s*)?<([^<>\s]+@[^<>\s]+)>\s*$/;
@@ -36,6 +36,346 @@ function formatAddress(a) {
   return `${name} <${a.email}>`;
 }
 
+// src/errors.ts
+var MailError = class extends Error {
+  kind;
+  provider;
+  status;
+  /** เวลาที่ปลายทางขอให้รอก่อนลองใหม่ (วินาที จาก Retry-After) — mailer ใช้เป็นเวลาพักแทน backoff */
+  retryAfterSec;
+  constructor(message, opts = {}) {
+    super(message, opts.cause === void 0 ? void 0 : { cause: opts.cause });
+    this.name = "MailError";
+    this.kind = opts.kind ?? "unknown";
+    this.provider = opts.provider;
+    this.status = opts.status;
+    this.retryAfterSec = opts.retryAfterSec;
+  }
+};
+function retryAfterOf(res, body) {
+  if (res.status !== 429 && res.status !== 503) return void 0;
+  const fromHeader = Number(res.headers?.get?.("Retry-After")?.trim() ?? "");
+  if (Number.isFinite(fromHeader) && fromHeader > 0) return Math.ceil(fromHeader);
+  const fromBody = body?.error?.retryAfterSec;
+  return typeof fromBody === "number" && fromBody > 0 ? Math.ceil(fromBody) : void 0;
+}
+var AllProvidersFailedError = class extends MailError {
+  attempts;
+  constructor(attempts) {
+    const tried = attempts.filter((a) => !a.skipped);
+    const summary = attempts.length === 0 ? "no providers configured" : attempts.map(
+      (a) => a.skipped ? `${a.provider}: skipped (${a.skipped})` : `${a.provider}: ${a.error}`
+    ).join(" | ");
+    super(`All mail providers failed (${tried.length}/${attempts.length} tried): ${summary}`);
+    this.name = "AllProvidersFailedError";
+    this.attempts = attempts;
+  }
+};
+var QUOTA_RE = /quota|limit exceeded|exceeded.*(limit|quota)|daily.*limit|monthly.*limit|sending limit|too many messages/i;
+var RATE_RE = /rate.?limit|too many requests|throttl|slow down/i;
+var AUTH_RE = /authenticat|credential|password|invalid.*(key|token)|api key|unauthori[sz]ed|forbidden|not verified|verify.*domain|domain.*verif/i;
+var NET_CODE_RE = /^(ECONN|ETIMEDOUT|ENOTFOUND|EAI_AGAIN|EPIPE|ESOCKET|EDNS|ECONNECTION)/i;
+var NET_RE = /ECONN|ETIMEDOUT|ENOTFOUND|EAI_AGAIN|socket|timed? ?out|network|fetch failed/i;
+var INVALID_RE = /invalid.*(email|address|recipient)|no recipients|recipient.*(rejected|invalid)|malformed|missing.*(to|subject|from)/i;
+function classifyError(err) {
+  if (err instanceof MailError)
+    return {
+      kind: err.kind,
+      message: err.message,
+      status: err.status,
+      retryAfterSec: err.retryAfterSec
+    };
+  const e = typeof err === "object" && err !== null ? err : {};
+  const message = String(e.message ?? e.response ?? err ?? "unknown error");
+  const code = typeof e.code === "string" ? e.code : void 0;
+  const status = [e.responseCode, e.status, e.statusCode].find(
+    (v) => typeof v === "number"
+  );
+  const text = `${code ?? ""} ${message} ${typeof e.response === "string" ? e.response : ""}`;
+  if (code && NET_CODE_RE.test(code)) return { kind: "network", message, status };
+  if (status === 552 || QUOTA_RE.test(text)) return { kind: "quota", message, status };
+  if (status === 429 || RATE_RE.test(text)) return { kind: "rate_limit", message, status };
+  if (status === 401 || status === 403 || status === 534 || status === 535 || AUTH_RE.test(text))
+    return { kind: "auth", message, status };
+  if (INVALID_RE.test(text)) return { kind: "invalid", message, status };
+  if (status !== void 0) {
+    if ([400, 422, 550, 553, 554].includes(status)) return { kind: "invalid", message, status };
+    if (status >= 420 && status < 460) return { kind: "server", message, status };
+    if (status >= 500) return { kind: "server", message, status };
+  }
+  if (NET_RE.test(text)) return { kind: "network", message, status };
+  return { kind: "unknown", message, status };
+}
+
+// src/providers/hub.ts
+var DEFAULT_HUB_URL = "https://notify.suphark.com";
+function createHubProvider(opts) {
+  const name = opts.name ?? "hub";
+  const url = `${(opts.url ?? DEFAULT_HUB_URL).replace(/\/$/, "")}/api/v1/send`;
+  const doFetch = opts.fetch ?? globalThis.fetch;
+  return {
+    name,
+    type: "hub",
+    from: opts.from,
+    optionalFrom: true,
+    async send(msg) {
+      const body = {
+        from: msg.from,
+        to: msg.to,
+        cc: msg.cc.length ? msg.cc : void 0,
+        bcc: msg.bcc.length ? msg.bcc : void 0,
+        replyTo: msg.replyTo.length ? msg.replyTo : void 0,
+        subject: msg.subject || (msg.template ? void 0 : msg.subject),
+        html: msg.html,
+        text: msg.text,
+        attachments: msg.attachments.length ? msg.attachments : void 0,
+        headers: Object.keys(msg.headers).length ? msg.headers : void 0,
+        tags: Object.keys(msg.tags).length ? msg.tags : void 0,
+        prefer: msg.prefer,
+        deliverWithin: msg.deliverWithin,
+        template: msg.template,
+        data: msg.template ? msg.data ?? {} : void 0
+      };
+      const res = await doFetch(url, {
+        method: "POST",
+        headers: {
+          Authorization: `Bearer ${opts.apiKey}`,
+          "Content-Type": "application/json",
+          ...msg.idempotencyKey ? { "Idempotency-Key": msg.idempotencyKey } : {}
+        },
+        body: JSON.stringify(body),
+        // mailer หมดเวลา → abort คำขอนี้ทิ้ง (Pi Notify อาจส่งไปแล้ว — แอปที่มีตัวสำรองในเครื่องอาจได้เมลซ้ำ ยอมรับได้)
+        signal: msg.signal
+      });
+      const data = await res.json().catch(() => ({}));
+      if (!res.ok) {
+        const err = data.error;
+        const kind = err?.kind ?? (res.status === 401 || res.status === 403 ? "auth" : res.status === 429 ? "rate_limit" : res.status === 400 || res.status === 422 ? "invalid" : "server");
+        throw new MailError(`Pi Notify ${res.status}: ${err?.message ?? res.statusText}`, {
+          kind,
+          provider: name,
+          status: res.status,
+          cause: data,
+          retryAfterSec: retryAfterOf(res, data)
+        });
+      }
+      const ok = data;
+      if (ok.status === "queued") return { id: ok.deliveryId, queued: true };
+      return { id: ok.id };
+    },
+    async listProviders() {
+      const res = await doFetch(url.replace(/\/send$/, "/providers"), {
+        headers: { Authorization: `Bearer ${opts.apiKey}` }
+      });
+      if (!res.ok)
+        throw new MailError(`Pi Notify ${res.status}: ${res.statusText}`, {
+          kind: res.status === 401 ? "auth" : "server",
+          provider: name,
+          status: res.status
+        });
+      const data = await res.json();
+      return data.providers.map((p) => ({ ...p, via: name }));
+    },
+    async verify() {
+      const res = await doFetch(url.replace(/\/send$/, "/status"), {
+        headers: { Authorization: `Bearer ${opts.apiKey}` }
+      });
+      if (!res.ok) {
+        throw new MailError(`Pi Notify ${res.status}: ${res.statusText}`, {
+          kind: res.status === 401 ? "auth" : "server",
+          provider: name,
+          status: res.status
+        });
+      }
+    }
+  };
+}
+
+// src/recipients.ts
+var emailOf = (r) => {
+  const raw = typeof r === "string" ? r : r?.email;
+  const email = raw?.trim().toLowerCase();
+  return email ? email : null;
+};
+function toEmails(to) {
+  if (Array.isArray(to)) {
+    const emails = [...new Set(to.map(emailOf).filter((e) => e !== null))];
+    if (emails.length === 0) throw invalidRecipient("\u0E44\u0E21\u0E48\u0E21\u0E35\u0E1C\u0E39\u0E49\u0E23\u0E31\u0E1A\u0E17\u0E35\u0E48\u0E21\u0E35\u0E2D\u0E35\u0E40\u0E21\u0E25\u0E40\u0E25\u0E22");
+    return emails;
+  }
+  const email = emailOf(to);
+  if (!email) throw invalidRecipient("\u0E1C\u0E39\u0E49\u0E23\u0E31\u0E1A\u0E44\u0E21\u0E48\u0E21\u0E35\u0E2D\u0E35\u0E40\u0E21\u0E25");
+  return email;
+}
+var invalidRecipient = (why) => new MailError(`notify(): ${why}`, { kind: "invalid", provider: "hub" });
+function toEmail(to) {
+  const email = toEmails(to);
+  if (Array.isArray(email)) throw invalidRecipient("\u0E15\u0E49\u0E2D\u0E07\u0E40\u0E1B\u0E47\u0E19\u0E1C\u0E39\u0E49\u0E23\u0E31\u0E1A\u0E04\u0E19\u0E40\u0E14\u0E35\u0E22\u0E27");
+  return email;
+}
+
+// src/notify.ts
+var NOTIFY_TIMEOUT_MS = { notify: 65e3, recipient: 1e4 };
+function resolve(opts) {
+  const env = opts.env ?? process.env;
+  const apiKey = opts.apiKey ?? env.PI_NOTIFY_KEY;
+  if (!apiKey) throw new MailError("notify(): PI_NOTIFY_KEY is required", { kind: "auth" });
+  const base = (opts.url ?? env.PI_NOTIFY_URL ?? DEFAULT_HUB_URL).replace(/\/$/, "");
+  return { apiKey, base, doFetch: opts.fetch ?? globalThis.fetch };
+}
+function hasNotifyKey(opts = {}) {
+  return Boolean(opts.apiKey ?? (opts.env ?? process.env).PI_NOTIFY_KEY);
+}
+async function hubRequest(opts, path, init) {
+  const { apiKey, base, doFetch } = resolve(opts);
+  const ms = opts.timeoutMs ?? init.timeoutMs;
+  const ac = new AbortController();
+  const timer = setTimeout(() => ac.abort(), ms);
+  const timedOut = () => new MailError(`Pi Notify timeout after ${ms}ms`, { kind: "network", provider: "hub" });
+  let res;
+  let data;
+  try {
+    res = await doFetch(`${base}${path}`, {
+      method: init.method ?? "GET",
+      headers: {
+        Authorization: `Bearer ${apiKey}`,
+        ...init.headers,
+        ...init.body !== void 0 ? { "Content-Type": "application/json" } : {}
+      },
+      body: init.body !== void 0 ? JSON.stringify(init.body) : void 0,
+      signal: ac.signal
+    });
+    data = await res.json().catch(() => ({}));
+  } catch (err) {
+    if (ac.signal.aborted) throw timedOut();
+    throw err;
+  } finally {
+    clearTimeout(timer);
+  }
+  if (ac.signal.aborted) throw timedOut();
+  if (!res.ok) {
+    const err = data?.error;
+    const kind = err?.kind ?? (res.status === 401 || res.status === 403 ? "auth" : res.status === 429 ? "rate_limit" : res.status === 400 || res.status === 422 ? "invalid" : "server");
+    throw new MailError(`Pi Notify ${res.status}: ${err?.message ?? res.statusText}`, {
+      kind,
+      provider: "hub",
+      status: res.status,
+      cause: data,
+      retryAfterSec: retryAfterOf(res, data)
+    });
+  }
+  return data;
+}
+function absoluteLink(link, opts = {}) {
+  if (!link.startsWith("/") || link.startsWith("//")) return link;
+  const env = opts.env ?? process.env;
+  const base = opts.appUrl ?? env.APP_URL ?? env.NEXT_PUBLIC_APP_URL;
+  if (!base)
+    throw new MailError(
+      `link "${link}" \u0E40\u0E1B\u0E47\u0E19\u0E25\u0E34\u0E07\u0E01\u0E4C relative \u2014 \u0E15\u0E31\u0E49\u0E07 APP_URL (\u0E2B\u0E23\u0E37\u0E2D NEXT_PUBLIC_APP_URL / opts.appUrl) \u0E2B\u0E23\u0E37\u0E2D\u0E2A\u0E48\u0E07 URL \u0E40\u0E15\u0E47\u0E21`,
+      { kind: "invalid", provider: "hub" }
+    );
+  return new URL(link, base.endsWith("/") ? base : `${base}/`).toString();
+}
+async function postNotify(body, idempotencyKey, opts) {
+  if (typeof body.link === "string") body = { ...body, link: absoluteLink(body.link, opts) };
+  const data = await hubRequest(opts, "/api/v1/notify", {
+    method: "POST",
+    body,
+    headers: idempotencyKey ? { "Idempotency-Key": idempotencyKey } : void 0,
+    timeoutMs: NOTIFY_TIMEOUT_MS.notify
+  });
+  return { results: data.results, ...data.summary };
+}
+async function notify(input, opts = {}) {
+  const { idempotencyKey, ...body } = input;
+  return postNotify({ ...body, to: toEmails(input.to) }, idempotencyKey, opts);
+}
+async function notifyTopic(input, opts = {}) {
+  const { idempotencyKey, ...body } = input;
+  return postNotify(body, idempotencyKey, opts);
+}
+async function getRequestStatus(idempotencyKey, opts = {}) {
+  try {
+    return await hubRequest(
+      opts,
+      `/api/v1/requests/${encodeURIComponent(idempotencyKey)}`,
+      { timeoutMs: NOTIFY_TIMEOUT_MS.recipient }
+    );
+  } catch (err) {
+    if (err instanceof MailError && err.status === 404) return null;
+    throw err;
+  }
+}
+async function getRecipient(email, opts = {}) {
+  return hubRequest(
+    opts,
+    `/api/v1/recipients/${encodeURIComponent(toEmail(email))}`,
+    {
+      timeoutMs: NOTIFY_TIMEOUT_MS.recipient
+    }
+  );
+}
+async function createLink(email, channel = "telegram", opts = {}) {
+  const { piUserId, ...rest } = opts;
+  const link = await hubRequest(rest, `/api/v1/recipients/${encodeURIComponent(toEmail(email))}/link`, {
+    method: "POST",
+    body: { channel, ...piUserId ? { piUserId } : {} },
+    timeoutMs: NOTIFY_TIMEOUT_MS.recipient
+  });
+  const code = link.code ?? safeStartParam(link.url);
+  return { ...link, code };
+}
+function safeStartParam(url) {
+  try {
+    return new URL(url).searchParams.get("start") ?? "";
+  } catch {
+    return "";
+  }
+}
+async function pauseChannel(email, channel, opts = {}) {
+  return hubRequest(
+    opts,
+    `/api/v1/recipients/${encodeURIComponent(toEmail(email))}/pause`,
+    { method: "POST", body: { channel }, timeoutMs: NOTIFY_TIMEOUT_MS.recipient }
+  );
+}
+async function getChannelStatus(email, channel = "telegram", opts = {}) {
+  const recipient2 = await getRecipient(email, opts);
+  const found = recipient2.channels.find((c) => c.type === channel && c.enabled);
+  const paused = !found && recipient2.channels.some((c) => c.type === channel && !c.enabled);
+  return {
+    linked: Boolean(found),
+    ...paused ? { paused: true } : {},
+    label: found?.label ?? null,
+    linkedAt: found?.linkedAt ?? null,
+    manageUrl: recipient2.linkUrl
+  };
+}
+async function getPushConfig(opts = {}) {
+  return hubRequest(opts, "/api/v1/push/config", { timeoutMs: NOTIFY_TIMEOUT_MS.recipient });
+}
+async function savePushSubscription(email, subscription, opts = {}) {
+  const { label, piUserId, ...rest } = opts;
+  return hubRequest(rest, `/api/v1/recipients/${encodeURIComponent(email)}/push`, {
+    method: "POST",
+    body: { subscription, ...label ? { label } : {}, ...piUserId ? { piUserId } : {} },
+    timeoutMs: NOTIFY_TIMEOUT_MS.recipient
+  });
+}
+async function deletePushSubscription(email, endpoint, opts = {}) {
+  return hubRequest(opts, `/api/v1/recipients/${encodeURIComponent(email)}/push`, {
+    method: "DELETE",
+    body: { endpoint },
+    timeoutMs: NOTIFY_TIMEOUT_MS.recipient
+  });
+}
+async function listPushDevices(email, opts = {}) {
+  return hubRequest(opts, `/api/v1/recipients/${encodeURIComponent(email)}/push`, {
+    timeoutMs: NOTIFY_TIMEOUT_MS.recipient
+  });
+}
+
 // src/providers/smtp.ts
 import nodemailer from "nodemailer";
 function createSmtpProvider(opts) {
@@ -218,77 +558,6 @@ function providersFromEnv(env = process.env) {
   return listed.some((p) => p.type === "hub") ? listed : [...hub, ...listed];
 }
 
-// src/errors.ts
-var MailError = class extends Error {
-  kind;
-  provider;
-  status;
-  /** เวลาที่ปลายทางขอให้รอก่อนลองใหม่ (วินาที จาก Retry-After) — mailer ใช้เป็นเวลาพักแทน backoff */
-  retryAfterSec;
-  constructor(message, opts = {}) {
-    super(message, opts.cause === void 0 ? void 0 : { cause: opts.cause });
-    this.name = "MailError";
-    this.kind = opts.kind ?? "unknown";
-    this.provider = opts.provider;
-    this.status = opts.status;
-    this.retryAfterSec = opts.retryAfterSec;
-  }
-};
-function retryAfterOf(res, body) {
-  if (res.status !== 429 && res.status !== 503) return void 0;
-  const fromHeader = Number(res.headers?.get?.("Retry-After")?.trim() ?? "");
-  if (Number.isFinite(fromHeader) && fromHeader > 0) return Math.ceil(fromHeader);
-  const fromBody = body?.error?.retryAfterSec;
-  return typeof fromBody === "number" && fromBody > 0 ? Math.ceil(fromBody) : void 0;
-}
-var AllProvidersFailedError = class extends MailError {
-  attempts;
-  constructor(attempts) {
-    const tried = attempts.filter((a) => !a.skipped);
-    const summary = attempts.length === 0 ? "no providers configured" : attempts.map(
-      (a) => a.skipped ? `${a.provider}: skipped (${a.skipped})` : `${a.provider}: ${a.error}`
-    ).join(" | ");
-    super(`All mail providers failed (${tried.length}/${attempts.length} tried): ${summary}`);
-    this.name = "AllProvidersFailedError";
-    this.attempts = attempts;
-  }
-};
-var QUOTA_RE = /quota|limit exceeded|exceeded.*(limit|quota)|daily.*limit|monthly.*limit|sending limit|too many messages/i;
-var RATE_RE = /rate.?limit|too many requests|throttl|slow down/i;
-var AUTH_RE = /authenticat|credential|password|invalid.*(key|token)|api key|unauthori[sz]ed|forbidden|not verified|verify.*domain|domain.*verif/i;
-var NET_CODE_RE = /^(ECONN|ETIMEDOUT|ENOTFOUND|EAI_AGAIN|EPIPE|ESOCKET|EDNS|ECONNECTION)/i;
-var NET_RE = /ECONN|ETIMEDOUT|ENOTFOUND|EAI_AGAIN|socket|timed? ?out|network|fetch failed/i;
-var INVALID_RE = /invalid.*(email|address|recipient)|no recipients|recipient.*(rejected|invalid)|malformed|missing.*(to|subject|from)/i;
-function classifyError(err) {
-  if (err instanceof MailError)
-    return {
-      kind: err.kind,
-      message: err.message,
-      status: err.status,
-      retryAfterSec: err.retryAfterSec
-    };
-  const e = typeof err === "object" && err !== null ? err : {};
-  const message = String(e.message ?? e.response ?? err ?? "unknown error");
-  const code = typeof e.code === "string" ? e.code : void 0;
-  const status = [e.responseCode, e.status, e.statusCode].find(
-    (v) => typeof v === "number"
-  );
-  const text = `${code ?? ""} ${message} ${typeof e.response === "string" ? e.response : ""}`;
-  if (code && NET_CODE_RE.test(code)) return { kind: "network", message, status };
-  if (status === 552 || QUOTA_RE.test(text)) return { kind: "quota", message, status };
-  if (status === 429 || RATE_RE.test(text)) return { kind: "rate_limit", message, status };
-  if (status === 401 || status === 403 || status === 534 || status === 535 || AUTH_RE.test(text))
-    return { kind: "auth", message, status };
-  if (INVALID_RE.test(text)) return { kind: "invalid", message, status };
-  if (status !== void 0) {
-    if ([400, 422, 550, 553, 554].includes(status)) return { kind: "invalid", message, status };
-    if (status >= 420 && status < 460) return { kind: "server", message, status };
-    if (status >= 500) return { kind: "server", message, status };
-  }
-  if (NET_RE.test(text)) return { kind: "network", message, status };
-  return { kind: "unknown", message, status };
-}
-
 // src/health.ts
 var DEFAULT_COOLDOWN = {
   network: 60,
@@ -402,153 +671,69 @@ var Health = class {
    */
   async allowProbe(name) {
     return await this.store.incr(`probe:${name}`, PROBE_INTERVAL_SEC) === 1;
-  }
-  async status(p, quota) {
-    const cd = await this.cooldownOf(p.name);
-    const usage = await this.usage(p, quota);
-    const failures = Number(await this.store.get(`fail:${p.name}`) ?? 0);
-    return {
-      name: p.name,
-      type: p.type,
-      available: !cd && usage.every((u) => u.used < u.limit),
-      cooldownUntil: cd?.until,
-      cooldownKind: cd?.kind,
-      failures,
-      quota: usage
-    };
-  }
-  /** cooldown ที่ยังไม่หมด (null = ใช้ได้) */
-  async cooldownOf(name) {
-    const raw = await this.store.get(`cd:${name}`);
-    if (!raw) return null;
-    try {
-      const cd = JSON.parse(raw);
-      return cd.until > Date.now() ? cd : null;
-    } catch {
-      return null;
-    }
-  }
-  async usage(p, quota) {
-    const out = [];
-    for (const w of WINDOWS) {
-      const limit = quota?.[w.key];
-      if (limit === void 0) continue;
-      const used = Number(
-        await this.store.get(`q:${p.name}:${w.window}:${windowId(w.window)}`) ?? 0
-      );
-      out.push({ window: w.window, used, limit });
-    }
-    return out;
-  }
-};
-
-// src/providers/console.ts
-function createConsoleProvider(opts = {}) {
-  const name = opts.name ?? "console";
-  const log = opts.log ?? ((l) => console.log(l));
-  let seq = 0;
-  return {
-    name,
-    type: "console",
-    from: opts.from,
-    async send(msg) {
-      const id = `console-${Date.now()}-${++seq}`;
-      const lines = [
-        `[mailer:${name}] ${id}`,
-        `  from:    ${msg.from ? formatAddress(msg.from) : "(hub default)"}`,
-        `  to:      ${msg.to.map(formatAddress).join(", ")}`,
-        ...msg.cc.length ? [`  cc:      ${msg.cc.map(formatAddress).join(", ")}`] : [],
-        ...msg.bcc.length ? [`  bcc:     ${msg.bcc.map(formatAddress).join(", ")}`] : [],
-        `  subject: ${msg.subject}`,
-        ...msg.attachments.length ? [`  files:   ${msg.attachments.map((a) => a.filename).join(", ")}`] : [],
-        ...opts.body ? [`  ---`, msg.text ?? msg.html ?? "(empty)"] : []
-      ];
-      log(lines.join("\n"));
-      return { id };
-    }
-  };
-}
-
-// src/providers/hub.ts
-var DEFAULT_HUB_URL = "https://notify.suphark.com";
-function createHubProvider(opts) {
-  const name = opts.name ?? "hub";
-  const url = `${(opts.url ?? DEFAULT_HUB_URL).replace(/\/$/, "")}/api/v1/send`;
-  const doFetch = opts.fetch ?? globalThis.fetch;
-  return {
-    name,
-    type: "hub",
-    from: opts.from,
-    optionalFrom: true,
-    async send(msg) {
-      const body = {
-        from: msg.from,
-        to: msg.to,
-        cc: msg.cc.length ? msg.cc : void 0,
-        bcc: msg.bcc.length ? msg.bcc : void 0,
-        replyTo: msg.replyTo.length ? msg.replyTo : void 0,
-        subject: msg.subject || (msg.template ? void 0 : msg.subject),
-        html: msg.html,
-        text: msg.text,
-        attachments: msg.attachments.length ? msg.attachments : void 0,
-        headers: Object.keys(msg.headers).length ? msg.headers : void 0,
-        tags: Object.keys(msg.tags).length ? msg.tags : void 0,
-        prefer: msg.prefer,
-        deliverWithin: msg.deliverWithin,
-        template: msg.template,
-        data: msg.template ? msg.data ?? {} : void 0
-      };
-      const res = await doFetch(url, {
-        method: "POST",
-        headers: {
-          Authorization: `Bearer ${opts.apiKey}`,
-          "Content-Type": "application/json",
-          ...msg.idempotencyKey ? { "Idempotency-Key": msg.idempotencyKey } : {}
-        },
-        body: JSON.stringify(body),
-        // mailer หมดเวลา → abort คำขอนี้ทิ้ง (Pi Notify อาจส่งไปแล้ว — แอปที่มีตัวสำรองในเครื่องอาจได้เมลซ้ำ ยอมรับได้)
-        signal: msg.signal
-      });
-      const data = await res.json().catch(() => ({}));
-      if (!res.ok) {
-        const err = data.error;
-        const kind = err?.kind ?? (res.status === 401 || res.status === 403 ? "auth" : res.status === 429 ? "rate_limit" : res.status === 400 || res.status === 422 ? "invalid" : "server");
-        throw new MailError(`Pi Notify ${res.status}: ${err?.message ?? res.statusText}`, {
-          kind,
-          provider: name,
-          status: res.status,
-          cause: data,
-          retryAfterSec: retryAfterOf(res, data)
-        });
-      }
-      const ok = data;
-      if (ok.status === "queued") return { id: ok.deliveryId, queued: true };
-      return { id: ok.id };
-    },
-    async listProviders() {
-      const res = await doFetch(url.replace(/\/send$/, "/providers"), {
-        headers: { Authorization: `Bearer ${opts.apiKey}` }
-      });
-      if (!res.ok)
-        throw new MailError(`Pi Notify ${res.status}: ${res.statusText}`, {
-          kind: res.status === 401 ? "auth" : "server",
-          provider: name,
-          status: res.status
-        });
-      const data = await res.json();
-      return data.providers.map((p) => ({ ...p, via: name }));
-    },
-    async verify() {
-      const res = await doFetch(url.replace(/\/send$/, "/status"), {
-        headers: { Authorization: `Bearer ${opts.apiKey}` }
-      });
-      if (!res.ok) {
-        throw new MailError(`Pi Notify ${res.status}: ${res.statusText}`, {
-          kind: res.status === 401 ? "auth" : "server",
-          provider: name,
-          status: res.status
-        });
-      }
+  }
+  async status(p, quota) {
+    const cd = await this.cooldownOf(p.name);
+    const usage = await this.usage(p, quota);
+    const failures = Number(await this.store.get(`fail:${p.name}`) ?? 0);
+    return {
+      name: p.name,
+      type: p.type,
+      available: !cd && usage.every((u) => u.used < u.limit),
+      cooldownUntil: cd?.until,
+      cooldownKind: cd?.kind,
+      failures,
+      quota: usage
+    };
+  }
+  /** cooldown ที่ยังไม่หมด (null = ใช้ได้) */
+  async cooldownOf(name) {
+    const raw = await this.store.get(`cd:${name}`);
+    if (!raw) return null;
+    try {
+      const cd = JSON.parse(raw);
+      return cd.until > Date.now() ? cd : null;
+    } catch {
+      return null;
+    }
+  }
+  async usage(p, quota) {
+    const out = [];
+    for (const w of WINDOWS) {
+      const limit = quota?.[w.key];
+      if (limit === void 0) continue;
+      const used = Number(
+        await this.store.get(`q:${p.name}:${w.window}:${windowId(w.window)}`) ?? 0
+      );
+      out.push({ window: w.window, used, limit });
+    }
+    return out;
+  }
+};
+
+// src/providers/console.ts
+function createConsoleProvider(opts = {}) {
+  const name = opts.name ?? "console";
+  const log = opts.log ?? ((l) => console.log(l));
+  let seq = 0;
+  return {
+    name,
+    type: "console",
+    from: opts.from,
+    async send(msg) {
+      const id = `console-${Date.now()}-${++seq}`;
+      const lines = [
+        `[mailer:${name}] ${id}`,
+        `  from:    ${msg.from ? formatAddress(msg.from) : "(hub default)"}`,
+        `  to:      ${msg.to.map(formatAddress).join(", ")}`,
+        ...msg.cc.length ? [`  cc:      ${msg.cc.map(formatAddress).join(", ")}`] : [],
+        ...msg.bcc.length ? [`  bcc:     ${msg.bcc.map(formatAddress).join(", ")}`] : [],
+        `  subject: ${msg.subject}`,
+        ...msg.attachments.length ? [`  files:   ${msg.attachments.map((a) => a.filename).join(", ")}`] : [],
+        ...opts.body ? [`  ---`, msg.text ?? msg.html ?? "(empty)"] : []
+      ];
+      log(lines.join("\n"));
+      return { id };
     }
   };
 }
@@ -956,7 +1141,8 @@ function createMailer(options = {}) {
     } catch (err) {
       const attempts = err instanceof AllProvidersFailedError ? err.attempts : [];
       const invalid = err instanceof MailError && err.kind === "invalid" && attempts.length === 0 || attempts.some((a) => a.kind === "invalid");
-      if (!fallback || !hasLocal || invalid) throw err;
+      const ambiguous = attempts.some((a) => a.error?.includes("send timed out after"));
+      if (!fallback || !hasLocal || invalid || ambiguous) throw err;
       emit({ type: "fallback", template: message.template });
       const r = await sendVia(asFallback(fallback), "local");
       return { ...r, failedOver: true, fallback: true, attempts: [...attempts, ...r.attempts] };
@@ -1121,174 +1307,6 @@ function resetMailer() {
   pending = void 0;
 }
 
-// src/recipients.ts
-var emailOf = (r) => {
-  const raw = typeof r === "string" ? r : r?.email;
-  const email = raw?.trim().toLowerCase();
-  return email ? email : null;
-};
-function toEmails(to) {
-  if (Array.isArray(to)) {
-    const emails = [...new Set(to.map(emailOf).filter((e) => e !== null))];
-    if (emails.length === 0) throw invalidRecipient("\u0E44\u0E21\u0E48\u0E21\u0E35\u0E1C\u0E39\u0E49\u0E23\u0E31\u0E1A\u0E17\u0E35\u0E48\u0E21\u0E35\u0E2D\u0E35\u0E40\u0E21\u0E25\u0E40\u0E25\u0E22");
-    return emails;
-  }
-  const email = emailOf(to);
-  if (!email) throw invalidRecipient("\u0E1C\u0E39\u0E49\u0E23\u0E31\u0E1A\u0E44\u0E21\u0E48\u0E21\u0E35\u0E2D\u0E35\u0E40\u0E21\u0E25");
-  return email;
-}
-var invalidRecipient = (why) => new MailError(`notify(): ${why}`, { kind: "invalid", provider: "hub" });
-function toEmail(to) {
-  const email = toEmails(to);
-  if (Array.isArray(email)) throw invalidRecipient("\u0E15\u0E49\u0E2D\u0E07\u0E40\u0E1B\u0E47\u0E19\u0E1C\u0E39\u0E49\u0E23\u0E31\u0E1A\u0E04\u0E19\u0E40\u0E14\u0E35\u0E22\u0E27");
-  return email;
-}
-
-// src/notify.ts
-var NOTIFY_TIMEOUT_MS = { notify: 65e3, recipient: 1e4 };
-function resolve(opts) {
-  const env = opts.env ?? process.env;
-  const apiKey = opts.apiKey ?? env.PI_NOTIFY_KEY;
-  if (!apiKey) throw new MailError("notify(): PI_NOTIFY_KEY is required", { kind: "auth" });
-  const base = (opts.url ?? env.PI_NOTIFY_URL ?? DEFAULT_HUB_URL).replace(/\/$/, "");
-  return { apiKey, base, doFetch: opts.fetch ?? globalThis.fetch };
-}
-function hasNotifyKey(opts = {}) {
-  return Boolean(opts.apiKey ?? (opts.env ?? process.env).PI_NOTIFY_KEY);
-}
-async function hubRequest(opts, path, init) {
-  const { apiKey, base, doFetch } = resolve(opts);
-  const ms = opts.timeoutMs ?? init.timeoutMs;
-  const ac = new AbortController();
-  const timer = setTimeout(() => ac.abort(), ms);
-  const timedOut = () => new MailError(`Pi Notify timeout after ${ms}ms`, { kind: "network", provider: "hub" });
-  let res;
-  let data;
-  try {
-    res = await doFetch(`${base}${path}`, {
-      method: init.method ?? "GET",
-      headers: {
-        Authorization: `Bearer ${apiKey}`,
-        ...init.headers,
-        ...init.body !== void 0 ? { "Content-Type": "application/json" } : {}
-      },
-      body: init.body !== void 0 ? JSON.stringify(init.body) : void 0,
-      signal: ac.signal
-    });
-    data = await res.json().catch(() => ({}));
-  } catch (err) {
-    if (ac.signal.aborted) throw timedOut();
-    throw err;
-  } finally {
-    clearTimeout(timer);
-  }
-  if (ac.signal.aborted) throw timedOut();
-  if (!res.ok) {
-    const err = data?.error;
-    const kind = err?.kind ?? (res.status === 401 || res.status === 403 ? "auth" : res.status === 429 ? "rate_limit" : res.status === 400 || res.status === 422 ? "invalid" : "server");
-    throw new MailError(`Pi Notify ${res.status}: ${err?.message ?? res.statusText}`, {
-      kind,
-      provider: "hub",
-      status: res.status,
-      cause: data,
-      retryAfterSec: retryAfterOf(res, data)
-    });
-  }
-  return data;
-}
-async function postNotify(body, idempotencyKey, opts) {
-  const data = await hubRequest(opts, "/api/v1/notify", {
-    method: "POST",
-    body,
-    headers: idempotencyKey ? { "Idempotency-Key": idempotencyKey } : void 0,
-    timeoutMs: NOTIFY_TIMEOUT_MS.notify
-  });
-  return { results: data.results, ...data.summary };
-}
-async function notify(input, opts = {}) {
-  const { idempotencyKey, ...body } = input;
-  return postNotify({ ...body, to: toEmails(input.to) }, idempotencyKey, opts);
-}
-async function notifyTopic(input, opts = {}) {
-  const { idempotencyKey, ...body } = input;
-  return postNotify(body, idempotencyKey, opts);
-}
-async function getRequestStatus(idempotencyKey, opts = {}) {
-  try {
-    return await hubRequest(
-      opts,
-      `/api/v1/requests/${encodeURIComponent(idempotencyKey)}`,
-      { timeoutMs: NOTIFY_TIMEOUT_MS.recipient }
-    );
-  } catch (err) {
-    if (err instanceof MailError && err.status === 404) return null;
-    throw err;
-  }
-}
-async function getRecipient(email, opts = {}) {
-  return hubRequest(
-    opts,
-    `/api/v1/recipients/${encodeURIComponent(toEmail(email))}`,
-    {
-      timeoutMs: NOTIFY_TIMEOUT_MS.recipient
-    }
-  );
-}
-async function createLink(email, channel = "telegram", opts = {}) {
-  const { piUserId, ...rest } = opts;
-  const link = await hubRequest(
-    rest,
-    `/api/v1/recipients/${encodeURIComponent(toEmail(email))}/link`,
-    {
-      method: "POST",
-      body: { channel, ...piUserId ? { piUserId } : {} },
-      timeoutMs: NOTIFY_TIMEOUT_MS.recipient
-    }
-  );
-  const code = link.code ?? safeStartParam(link.url);
-  return { ...link, code };
-}
-function safeStartParam(url) {
-  try {
-    return new URL(url).searchParams.get("start") ?? "";
-  } catch {
-    return "";
-  }
-}
-async function getChannelStatus(email, channel = "telegram", opts = {}) {
-  const recipient2 = await getRecipient(email, opts);
-  const found = recipient2.channels.find((c) => c.type === channel && c.enabled);
-  return {
-    linked: Boolean(found),
-    label: found?.label ?? null,
-    linkedAt: found?.linkedAt ?? null,
-    manageUrl: recipient2.linkUrl
-  };
-}
-async function getPushConfig(opts = {}) {
-  return hubRequest(opts, "/api/v1/push/config", { timeoutMs: NOTIFY_TIMEOUT_MS.recipient });
-}
-async function savePushSubscription(email, subscription, opts = {}) {
-  const { label, piUserId, ...rest } = opts;
-  return hubRequest(rest, `/api/v1/recipients/${encodeURIComponent(email)}/push`, {
-    method: "POST",
-    body: { subscription, ...label ? { label } : {}, ...piUserId ? { piUserId } : {} },
-    timeoutMs: NOTIFY_TIMEOUT_MS.recipient
-  });
-}
-async function deletePushSubscription(email, endpoint, opts = {}) {
-  return hubRequest(opts, `/api/v1/recipients/${encodeURIComponent(email)}/push`, {
-    method: "DELETE",
-    body: { endpoint },
-    timeoutMs: NOTIFY_TIMEOUT_MS.recipient
-  });
-}
-async function listPushDevices(email, opts = {}) {
-  return hubRequest(opts, `/api/v1/recipients/${encodeURIComponent(email)}/push`, {
-    timeoutMs: NOTIFY_TIMEOUT_MS.recipient
-  });
-}
-
 // src/safe.ts
 var warnedDisabled = false;
 function warnDisabled(what, env) {
@@ -1349,40 +1367,42 @@ export {
   requireFrom,
   parseAddressList,
   formatAddress,
-  createSmtpProvider,
-  SMTP_PRESETS,
-  createPresetSmtpProvider,
-  providersFromEnv,
   MailError,
   AllProvidersFailedError,
   classifyError,
-  DEFAULT_COOLDOWN,
-  createConsoleProvider,
   DEFAULT_HUB_URL,
   createHubProvider,
-  createResendProvider,
-  createZeptoMailProvider,
-  createMemoryStore,
-  createMailer,
-  configureMailer,
-  getMailer,
-  sendMail,
-  listProviders,
-  resetMailer,
   toEmails,
   NOTIFY_TIMEOUT_MS,
   hasNotifyKey,
   hubRequest,
+  absoluteLink,
   notify,
   notifyTopic,
   getRequestStatus,
   getRecipient,
   createLink,
+  pauseChannel,
   getChannelStatus,
   getPushConfig,
   savePushSubscription,
   deletePushSubscription,
   listPushDevices,
+  createSmtpProvider,
+  SMTP_PRESETS,
+  createPresetSmtpProvider,
+  providersFromEnv,
+  DEFAULT_COOLDOWN,
+  createConsoleProvider,
+  createResendProvider,
+  createZeptoMailProvider,
+  createMemoryStore,
+  createMailer,
+  configureMailer,
+  getMailer,
+  sendMail,
+  listProviders,
+  resetMailer,
   resetSafeWarnings,
   notifySafe,
   notifyTopicSafe,