@ultimat3/mail 1.0.0

package/src/templates/index.d.ts

@@ -0,0 +1,9 @@
+import type { AnyMailDefinition } from '../mail';
+export { type InviteInput, inviteInput, inviteMail } from './invite';
+export { MFA_METHODS, type MfaEnrolledInput, mfaEnrolledInput, mfaEnrolledMail, } from './mfa-enrolled';
+export { type ResetPasswordInput, resetPasswordInput, resetPasswordMail, } from './reset-password';
+export { type SecurityAlertInput, securityAlertInput, securityAlertMail, } from './security-alert';
+export { type VerifyEmailInput, verifyEmailInput, verifyEmailMail } from './verify-email';
+export { type WelcomeInput, welcomeInput, welcomeMail } from './welcome';
+export declare const FRAMEWORK_MAILS: readonly AnyMailDefinition[];
+//# sourceMappingURL=index.d.ts.map

package/src/templates/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAQjD,OAAO,EAAE,KAAK,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACrE,OAAO,EACL,WAAW,EACX,KAAK,gBAAgB,EACrB,gBAAgB,EAChB,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,kBAAkB,EACvB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,kBAAkB,EACvB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAEzE,eAAO,MAAM,eAAe,EAAE,SAAS,iBAAiB,EAOvD,CAAC"}

package/src/templates/index.js

@@ -0,0 +1,23 @@
+// Single responsibility: the framework's own transactional mails, gathered. `FRAMEWORK_MAILS`
+// is what `x mail list` prints and what the i18n audit walks for missing keys.
+import { inviteMail } from './invite';
+import { mfaEnrolledMail } from './mfa-enrolled';
+import { resetPasswordMail } from './reset-password';
+import { securityAlertMail } from './security-alert';
+import { verifyEmailMail } from './verify-email';
+import { welcomeMail } from './welcome';
+export { inviteInput, inviteMail } from './invite';
+export { MFA_METHODS, mfaEnrolledInput, mfaEnrolledMail, } from './mfa-enrolled';
+export { resetPasswordInput, resetPasswordMail, } from './reset-password';
+export { securityAlertInput, securityAlertMail, } from './security-alert';
+export { verifyEmailInput, verifyEmailMail } from './verify-email';
+export { welcomeInput, welcomeMail } from './welcome';
+export const FRAMEWORK_MAILS = [
+    welcomeMail,
+    verifyEmailMail,
+    resetPasswordMail,
+    inviteMail,
+    mfaEnrolledMail,
+    securityAlertMail,
+];
+//# sourceMappingURL=index.js.map

package/src/templates/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,+EAA+E;AAG/E,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAoB,WAAW,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACrE,OAAO,EACL,WAAW,EAEX,gBAAgB,EAChB,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEL,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAyB,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EAAqB,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAEzE,MAAM,CAAC,MAAM,eAAe,GAAiC;IAC3D,WAAW;IACX,eAAe;IACf,iBAAiB;IACjB,UAAU;IACV,eAAe;IACf,iBAAiB;CAClB,CAAC"}

package/src/templates/index.ts

@@ -0,0 +1,39 @@
+// Single responsibility: the framework's own transactional mails, gathered. `FRAMEWORK_MAILS`
+// is what `x mail list` prints and what the i18n audit walks for missing keys.
+
+import type { AnyMailDefinition } from '../mail';
+import { inviteMail } from './invite';
+import { mfaEnrolledMail } from './mfa-enrolled';
+import { resetPasswordMail } from './reset-password';
+import { securityAlertMail } from './security-alert';
+import { verifyEmailMail } from './verify-email';
+import { welcomeMail } from './welcome';
+
+export { type InviteInput, inviteInput, inviteMail } from './invite';
+export {
+  MFA_METHODS,
+  type MfaEnrolledInput,
+  mfaEnrolledInput,
+  mfaEnrolledMail,
+} from './mfa-enrolled';
+export {
+  type ResetPasswordInput,
+  resetPasswordInput,
+  resetPasswordMail,
+} from './reset-password';
+export {
+  type SecurityAlertInput,
+  securityAlertInput,
+  securityAlertMail,
+} from './security-alert';
+export { type VerifyEmailInput, verifyEmailInput, verifyEmailMail } from './verify-email';
+export { type WelcomeInput, welcomeInput, welcomeMail } from './welcome';
+
+export const FRAMEWORK_MAILS: readonly AnyMailDefinition[] = [
+  welcomeMail,
+  verifyEmailMail,
+  resetPasswordMail,
+  inviteMail,
+  mfaEnrolledMail,
+  securityAlertMail,
+];

package/src/templates/invite.d.ts

@@ -0,0 +1,15 @@
+import { type Infer } from '@ultimat3/schema';
+export declare const inviteInput: import("@ultimat3/schema").ObjectSchema<{
+    inviterName: import("@ultimat3/schema").StringSchema;
+    orgName: import("@ultimat3/schema").StringSchema;
+    url: import("@ultimat3/schema").StringSchema;
+    expiresHours: import("@ultimat3/schema").NumberSchema;
+}>;
+export type InviteInput = Infer<typeof inviteInput>;
+export declare const inviteMail: import("..").MailDefinition<{
+    expiresHours: number;
+    inviterName: string;
+    orgName: string;
+    url: string;
+}>;
+//# sourceMappingURL=invite.d.ts.map

package/src/templates/invite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.d.ts","sourceRoot":"","sources":["invite.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,KAAK,EAAK,MAAM,kBAAkB,CAAC;AAIjD,eAAO,MAAM,WAAW;;;;;EAKtB,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEpD,eAAO,MAAM,UAAU;;;;;EAarB,CAAC"}

package/src/templates/invite.js

@@ -0,0 +1,25 @@
+// Single responsibility: the org-invitation mail.
+import { t } from '@ultimat3/schema';
+import { blocks } from '../blocks';
+import { defineMail } from '../mail';
+export const inviteInput = t.object({
+    inviterName: t.string,
+    orgName: t.string,
+    url: t.url,
+    expiresHours: t.number.int().min(1),
+});
+export const inviteMail = defineMail({
+    id: 'invite',
+    subject: 'mail.invite.subject',
+    input: inviteInput,
+    template: ({ data }) => [
+        blocks.heading('mail.invite.heading', { orgName: data.orgName }),
+        blocks.paragraph('mail.invite.body', {
+            inviterName: data.inviterName,
+            orgName: data.orgName,
+        }),
+        blocks.button('mail.invite.cta', data.url),
+        blocks.paragraph('mail.invite.expiry', { count: data.expiresHours }),
+    ],
+});
+//# sourceMappingURL=invite.js.map

package/src/templates/invite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.js","sourceRoot":"","sources":["invite.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAElD,OAAO,EAAc,CAAC,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM;IACjB,GAAG,EAAE,CAAC,CAAC,GAAG;IACV,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACpC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,UAAU,GAAG,UAAU,CAAc;IAChD,EAAE,EAAE,QAAQ;IACZ,OAAO,EAAE,qBAAqB;IAC9B,KAAK,EAAE,WAAW;IAClB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACtB,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,kBAAkB,EAAE;YACnC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC;QAC1C,MAAM,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;KACrE;CACF,CAAC,CAAC"}

package/src/templates/invite.ts

@@ -0,0 +1,29 @@
+// Single responsibility: the org-invitation mail.
+
+import { type Infer, t } from '@ultimat3/schema';
+import { blocks } from '../blocks';
+import { defineMail } from '../mail';
+
+export const inviteInput = t.object({
+  inviterName: t.string,
+  orgName: t.string,
+  url: t.url,
+  expiresHours: t.number.int().min(1),
+});
+
+export type InviteInput = Infer<typeof inviteInput>;
+
+export const inviteMail = defineMail<InviteInput>({
+  id: 'invite',
+  subject: 'mail.invite.subject',
+  input: inviteInput,
+  template: ({ data }) => [
+    blocks.heading('mail.invite.heading', { orgName: data.orgName }),
+    blocks.paragraph('mail.invite.body', {
+      inviterName: data.inviterName,
+      orgName: data.orgName,
+    }),
+    blocks.button('mail.invite.cta', data.url),
+    blocks.paragraph('mail.invite.expiry', { count: data.expiresHours }),
+  ],
+});

package/src/templates/mfa-enrolled.d.ts

@@ -0,0 +1,14 @@
+import { type Infer } from '@ultimat3/schema';
+export declare const MFA_METHODS: readonly ['totp', 'webauthn', 'sms'];
+export declare const mfaEnrolledInput: import("@ultimat3/schema").ObjectSchema<{
+    name: import("@ultimat3/schema").StringSchema;
+    method: import("@ultimat3/schema").Schema<"sms" | "totp" | "webauthn", "sms" | "totp" | "webauthn">;
+    at: import("@ultimat3/schema").Schema<string | number | Date, Date>;
+}>;
+export type MfaEnrolledInput = Infer<typeof mfaEnrolledInput>;
+export declare const mfaEnrolledMail: import("..").MailDefinition<{
+    at: Date;
+    method: "sms" | "totp" | "webauthn";
+    name: string;
+}>;
+//# sourceMappingURL=mfa-enrolled.d.ts.map

package/src/templates/mfa-enrolled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa-enrolled.d.ts","sourceRoot":"","sources":["mfa-enrolled.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,KAAK,EAAK,MAAM,kBAAkB,CAAC;AAKjD,eAAO,MAAM,WAAW,YAAI,MAAM,EAAE,UAAU,EAAE,KAAK,CAAU,CAAC;AAEhE,eAAO,MAAM,gBAAgB;;;;EAI3B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE9D,eAAO,MAAM,eAAe;;;;EAkB1B,CAAC"}

package/src/templates/mfa-enrolled.js

@@ -0,0 +1,26 @@
+// Single responsibility: the "a second factor was added" notice. The enrolment time is
+// formatted in the recipient's zone — "at 03:12" is only useful if it is their 03:12.
+import { t } from '@ultimat3/schema';
+import { formatDateTime, instant } from '@ultimat3/time';
+import { blocks } from '../blocks';
+import { defineMail } from '../mail';
+export const MFA_METHODS = ['totp', 'webauthn', 'sms'];
+export const mfaEnrolledInput = t.object({
+    name: t.string,
+    method: t.enum(MFA_METHODS),
+    at: t.date,
+});
+export const mfaEnrolledMail = defineMail({
+    id: 'mfa-enrolled',
+    subject: 'mail.mfa-enrolled.subject',
+    input: mfaEnrolledInput,
+    template: ({ data, t: translate, locale, tz }) => [
+        blocks.heading('mail.mfa-enrolled.heading', { name: data.name }),
+        blocks.paragraph('mail.mfa-enrolled.body'),
+        blocks.detail('mail.mfa-enrolled.method-label', translate(`mail.mfa-enrolled.method-${data.method}`)),
+        blocks.detail('mail.mfa-enrolled.at-label', formatDateTime(instant(data.at), { locale, zone: tz, style: 'medium' })),
+        blocks.divider(),
+        blocks.paragraph('mail.mfa-enrolled.help'),
+    ],
+});
+//# sourceMappingURL=mfa-enrolled.js.map

package/src/templates/mfa-enrolled.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa-enrolled.js","sourceRoot":"","sources":["mfa-enrolled.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,sFAAsF;AAEtF,OAAO,EAAc,CAAC,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAU,CAAC;AAEhE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM;IACd,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAC3B,EAAE,EAAE,CAAC,CAAC,IAAI;CACX,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAmB;IAC1D,EAAE,EAAE,cAAc;IAClB,OAAO,EAAE,2BAA2B;IACpC,KAAK,EAAE,gBAAgB;IACvB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,wBAAwB,CAAC;QAC1C,MAAM,CAAC,MAAM,CACX,gCAAgC,EAChC,SAAS,CAAC,4BAA4B,IAAI,CAAC,MAAM,EAAE,CAAC,CACrD;QACD,MAAM,CAAC,MAAM,CACX,4BAA4B,EAC5B,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CACxE;QACD,MAAM,CAAC,OAAO,EAAE;QAChB,MAAM,CAAC,SAAS,CAAC,wBAAwB,CAAC;KAC3C;CACF,CAAC,CAAC"}

package/src/templates/mfa-enrolled.ts

@@ -0,0 +1,37 @@
+// Single responsibility: the "a second factor was added" notice. The enrolment time is
+// formatted in the recipient's zone — "at 03:12" is only useful if it is their 03:12.
+
+import { type Infer, t } from '@ultimat3/schema';
+import { formatDateTime, instant } from '@ultimat3/time';
+import { blocks } from '../blocks';
+import { defineMail } from '../mail';
+
+export const MFA_METHODS = ['totp', 'webauthn', 'sms'] as const;
+
+export const mfaEnrolledInput = t.object({
+  name: t.string,
+  method: t.enum(MFA_METHODS),
+  at: t.date,
+});
+
+export type MfaEnrolledInput = Infer<typeof mfaEnrolledInput>;
+
+export const mfaEnrolledMail = defineMail<MfaEnrolledInput>({
+  id: 'mfa-enrolled',
+  subject: 'mail.mfa-enrolled.subject',
+  input: mfaEnrolledInput,
+  template: ({ data, t: translate, locale, tz }) => [
+    blocks.heading('mail.mfa-enrolled.heading', { name: data.name }),
+    blocks.paragraph('mail.mfa-enrolled.body'),
+    blocks.detail(
+      'mail.mfa-enrolled.method-label',
+      translate(`mail.mfa-enrolled.method-${data.method}`),
+    ),
+    blocks.detail(
+      'mail.mfa-enrolled.at-label',
+      formatDateTime(instant(data.at), { locale, zone: tz, style: 'medium' }),
+    ),
+    blocks.divider(),
+    blocks.paragraph('mail.mfa-enrolled.help'),
+  ],
+});

package/src/templates/reset-password.d.ts

@@ -0,0 +1,13 @@
+import { type Infer } from '@ultimat3/schema';
+export declare const resetPasswordInput: import("@ultimat3/schema").ObjectSchema<{
+    name: import("@ultimat3/schema").StringSchema;
+    url: import("@ultimat3/schema").StringSchema;
+    expiresMinutes: import("@ultimat3/schema").NumberSchema;
+}>;
+export type ResetPasswordInput = Infer<typeof resetPasswordInput>;
+export declare const resetPasswordMail: import("..").MailDefinition<{
+    expiresMinutes: number;
+    name: string;
+    url: string;
+}>;
+//# sourceMappingURL=reset-password.d.ts.map

package/src/templates/reset-password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-password.d.ts","sourceRoot":"","sources":["reset-password.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,KAAK,EAAK,MAAM,kBAAkB,CAAC;AAIjD,eAAO,MAAM,kBAAkB;;;;EAI7B,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE,eAAO,MAAM,iBAAiB;;;;EAW5B,CAAC"}

package/src/templates/reset-password.js

@@ -0,0 +1,23 @@
+// Single responsibility: the password-reset mail. The "you did not ask for this" line is not
+// optional politeness — it is how a targeted reset attempt gets reported.
+import { t } from '@ultimat3/schema';
+import { blocks } from '../blocks';
+import { defineMail } from '../mail';
+export const resetPasswordInput = t.object({
+    name: t.string,
+    url: t.url,
+    expiresMinutes: t.number.int().min(1),
+});
+export const resetPasswordMail = defineMail({
+    id: 'reset-password',
+    subject: 'mail.reset-password.subject',
+    input: resetPasswordInput,
+    template: ({ data }) => [
+        blocks.heading('mail.reset-password.heading', { name: data.name }),
+        blocks.paragraph('mail.reset-password.body'),
+        blocks.button('mail.reset-password.cta', data.url),
+        blocks.paragraph('mail.reset-password.expiry', { count: data.expiresMinutes }),
+        blocks.paragraph('mail.reset-password.ignore'),
+    ],
+});
+//# sourceMappingURL=reset-password.js.map

package/src/templates/reset-password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset-password.js","sourceRoot":"","sources":["reset-password.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,0EAA0E;AAE1E,OAAO,EAAc,CAAC,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM;IACd,GAAG,EAAE,CAAC,CAAC,GAAG;IACV,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAqB;IAC9D,EAAE,EAAE,gBAAgB;IACpB,OAAO,EAAE,6BAA6B;IACtC,KAAK,EAAE,kBAAkB;IACzB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACtB,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,CAAC,SAAS,CAAC,0BAA0B,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,yBAAyB,EAAE,IAAI,CAAC,GAAG,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;QAC9E,MAAM,CAAC,SAAS,CAAC,4BAA4B,CAAC;KAC/C;CACF,CAAC,CAAC"}

package/src/templates/reset-password.ts

@@ -0,0 +1,27 @@
+// Single responsibility: the password-reset mail. The "you did not ask for this" line is not
+// optional politeness — it is how a targeted reset attempt gets reported.
+
+import { type Infer, t } from '@ultimat3/schema';
+import { blocks } from '../blocks';
+import { defineMail } from '../mail';
+
+export const resetPasswordInput = t.object({
+  name: t.string,
+  url: t.url,
+  expiresMinutes: t.number.int().min(1),
+});
+
+export type ResetPasswordInput = Infer<typeof resetPasswordInput>;
+
+export const resetPasswordMail = defineMail<ResetPasswordInput>({
+  id: 'reset-password',
+  subject: 'mail.reset-password.subject',
+  input: resetPasswordInput,
+  template: ({ data }) => [
+    blocks.heading('mail.reset-password.heading', { name: data.name }),
+    blocks.paragraph('mail.reset-password.body'),
+    blocks.button('mail.reset-password.cta', data.url),
+    blocks.paragraph('mail.reset-password.expiry', { count: data.expiresMinutes }),
+    blocks.paragraph('mail.reset-password.ignore'),
+  ],
+});

package/src/templates/security-alert.d.ts

@@ -0,0 +1,16 @@
+import { type Infer } from '@ultimat3/schema';
+export declare const securityAlertInput: import("@ultimat3/schema").ObjectSchema<{
+    name: import("@ultimat3/schema").StringSchema;
+    /** A machine event id (`session.new-device`), not prose. */
+    event: import("@ultimat3/schema").StringSchema;
+    ip: import("@ultimat3/schema").StringSchema;
+    at: import("@ultimat3/schema").Schema<string | number | Date, Date>;
+}>;
+export type SecurityAlertInput = Infer<typeof securityAlertInput>;
+export declare const securityAlertMail: import("..").MailDefinition<{
+    at: Date;
+    event: string;
+    ip: string;
+    name: string;
+}>;
+//# sourceMappingURL=security-alert.d.ts.map

package/src/templates/security-alert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-alert.d.ts","sourceRoot":"","sources":["security-alert.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,KAAK,EAAK,MAAM,kBAAkB,CAAC;AAKjD,eAAO,MAAM,kBAAkB;;IAE7B,4DAA4D;;;;EAI5D,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAElE,eAAO,MAAM,iBAAiB;;;;;EAgB5B,CAAC"}

package/src/templates/security-alert.js

@@ -0,0 +1,29 @@
+// Single responsibility: the security-alert mail — the one transactional mail that is allowed
+// to alarm. Event, IP and time are rendered as details, never woven into a sentence, so they
+// survive translation intact.
+import { t } from '@ultimat3/schema';
+import { formatDateTime, instant } from '@ultimat3/time';
+import { blocks } from '../blocks';
+import { defineMail } from '../mail';
+export const securityAlertInput = t.object({
+    name: t.string,
+    /** A machine event id (`session.new-device`), not prose. */
+    event: t.string,
+    ip: t.string,
+    at: t.date,
+});
+export const securityAlertMail = defineMail({
+    id: 'security-alert',
+    subject: 'mail.security-alert.subject',
+    input: securityAlertInput,
+    template: ({ data, locale, tz }) => [
+        blocks.heading('mail.security-alert.heading', { name: data.name }),
+        blocks.callout('mail.security-alert.alert', 'danger'),
+        blocks.detail('mail.security-alert.event-label', data.event),
+        blocks.detail('mail.security-alert.ip-label', data.ip),
+        blocks.detail('mail.security-alert.at-label', formatDateTime(instant(data.at), { locale, zone: tz, style: 'medium' })),
+        blocks.divider(),
+        blocks.paragraph('mail.security-alert.help'),
+    ],
+});
+//# sourceMappingURL=security-alert.js.map

package/src/templates/security-alert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-alert.js","sourceRoot":"","sources":["security-alert.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,6FAA6F;AAC7F,8BAA8B;AAE9B,OAAO,EAAc,CAAC,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM;IACd,4DAA4D;IAC5D,KAAK,EAAE,CAAC,CAAC,MAAM;IACf,EAAE,EAAE,CAAC,CAAC,MAAM;IACZ,EAAE,EAAE,CAAC,CAAC,IAAI;CACX,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAqB;IAC9D,EAAE,EAAE,gBAAgB;IACpB,OAAO,EAAE,6BAA6B;IACtC,KAAK,EAAE,kBAAkB;IACzB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,CAAC,OAAO,CAAC,2BAA2B,EAAE,QAAQ,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,iCAAiC,EAAE,IAAI,CAAC,KAAK,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,8BAA8B,EAAE,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,MAAM,CACX,8BAA8B,EAC9B,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CACxE;QACD,MAAM,CAAC,OAAO,EAAE;QAChB,MAAM,CAAC,SAAS,CAAC,0BAA0B,CAAC;KAC7C;CACF,CAAC,CAAC"}

package/src/templates/security-alert.ts

@@ -0,0 +1,36 @@
+// Single responsibility: the security-alert mail — the one transactional mail that is allowed
+// to alarm. Event, IP and time are rendered as details, never woven into a sentence, so they
+// survive translation intact.
+
+import { type Infer, t } from '@ultimat3/schema';
+import { formatDateTime, instant } from '@ultimat3/time';
+import { blocks } from '../blocks';
+import { defineMail } from '../mail';
+
+export const securityAlertInput = t.object({
+  name: t.string,
+  /** A machine event id (`session.new-device`), not prose. */
+  event: t.string,
+  ip: t.string,
+  at: t.date,
+});
+
+export type SecurityAlertInput = Infer<typeof securityAlertInput>;
+
+export const securityAlertMail = defineMail<SecurityAlertInput>({
+  id: 'security-alert',
+  subject: 'mail.security-alert.subject',
+  input: securityAlertInput,
+  template: ({ data, locale, tz }) => [
+    blocks.heading('mail.security-alert.heading', { name: data.name }),
+    blocks.callout('mail.security-alert.alert', 'danger'),
+    blocks.detail('mail.security-alert.event-label', data.event),
+    blocks.detail('mail.security-alert.ip-label', data.ip),
+    blocks.detail(
+      'mail.security-alert.at-label',
+      formatDateTime(instant(data.at), { locale, zone: tz, style: 'medium' }),
+    ),
+    blocks.divider(),
+    blocks.paragraph('mail.security-alert.help'),
+  ],
+});

package/src/templates/verify-email.d.ts

@@ -0,0 +1,13 @@
+import { type Infer } from '@ultimat3/schema';
+export declare const verifyEmailInput: import("@ultimat3/schema").ObjectSchema<{
+    name: import("@ultimat3/schema").StringSchema;
+    url: import("@ultimat3/schema").StringSchema;
+    expiresMinutes: import("@ultimat3/schema").NumberSchema;
+}>;
+export type VerifyEmailInput = Infer<typeof verifyEmailInput>;
+export declare const verifyEmailMail: import("..").MailDefinition<{
+    expiresMinutes: number;
+    name: string;
+    url: string;
+}>;
+//# sourceMappingURL=verify-email.d.ts.map

package/src/templates/verify-email.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-email.d.ts","sourceRoot":"","sources":["verify-email.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,KAAK,EAAK,MAAM,kBAAkB,CAAC;AAIjD,eAAO,MAAM,gBAAgB;;;;EAI3B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE9D,eAAO,MAAM,eAAe;;;;EAW1B,CAAC"}

package/src/templates/verify-email.js

@@ -0,0 +1,23 @@
+// Single responsibility: the email-verification mail. The expiry line is a plural key, so a
+// 1-minute link never reads "1 minutes".
+import { t } from '@ultimat3/schema';
+import { blocks } from '../blocks';
+import { defineMail } from '../mail';
+export const verifyEmailInput = t.object({
+    name: t.string,
+    url: t.url,
+    expiresMinutes: t.number.int().min(1),
+});
+export const verifyEmailMail = defineMail({
+    id: 'verify-email',
+    subject: 'mail.verify-email.subject',
+    input: verifyEmailInput,
+    template: ({ data }) => [
+        blocks.heading('mail.verify-email.heading', { name: data.name }),
+        blocks.paragraph('mail.verify-email.body'),
+        blocks.button('mail.verify-email.cta', data.url),
+        blocks.paragraph('mail.verify-email.expiry', { count: data.expiresMinutes }),
+        blocks.paragraph('mail.verify-email.ignore'),
+    ],
+});
+//# sourceMappingURL=verify-email.js.map

package/src/templates/verify-email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-email.js","sourceRoot":"","sources":["verify-email.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,yCAAyC;AAEzC,OAAO,EAAc,CAAC,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM;IACd,GAAG,EAAE,CAAC,CAAC,GAAG;IACV,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAmB;IAC1D,EAAE,EAAE,cAAc;IAClB,OAAO,EAAE,2BAA2B;IACpC,KAAK,EAAE,gBAAgB;IACvB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACtB,MAAM,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,wBAAwB,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,IAAI,CAAC,GAAG,CAAC;QAChD,MAAM,CAAC,SAAS,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5E,MAAM,CAAC,SAAS,CAAC,0BAA0B,CAAC;KAC7C;CACF,CAAC,CAAC"}

package/src/templates/verify-email.ts

@@ -0,0 +1,27 @@
+// Single responsibility: the email-verification mail. The expiry line is a plural key, so a
+// 1-minute link never reads "1 minutes".
+
+import { type Infer, t } from '@ultimat3/schema';
+import { blocks } from '../blocks';
+import { defineMail } from '../mail';
+
+export const verifyEmailInput = t.object({
+  name: t.string,
+  url: t.url,
+  expiresMinutes: t.number.int().min(1),
+});
+
+export type VerifyEmailInput = Infer<typeof verifyEmailInput>;
+
+export const verifyEmailMail = defineMail<VerifyEmailInput>({
+  id: 'verify-email',
+  subject: 'mail.verify-email.subject',
+  input: verifyEmailInput,
+  template: ({ data }) => [
+    blocks.heading('mail.verify-email.heading', { name: data.name }),
+    blocks.paragraph('mail.verify-email.body'),
+    blocks.button('mail.verify-email.cta', data.url),
+    blocks.paragraph('mail.verify-email.expiry', { count: data.expiresMinutes }),
+    blocks.paragraph('mail.verify-email.ignore'),
+  ],
+});

package/src/templates/welcome.d.ts

@@ -0,0 +1,13 @@
+import { type Infer } from '@ultimat3/schema';
+export declare const welcomeInput: import("@ultimat3/schema").ObjectSchema<{
+    name: import("@ultimat3/schema").StringSchema;
+    appName: import("@ultimat3/schema").StringSchema;
+    url: import("@ultimat3/schema").StringSchema;
+}>;
+export type WelcomeInput = Infer<typeof welcomeInput>;
+export declare const welcomeMail: import("..").MailDefinition<{
+    appName: string;
+    name: string;
+    url: string;
+}>;
+//# sourceMappingURL=welcome.d.ts.map

package/src/templates/welcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"welcome.d.ts","sourceRoot":"","sources":["welcome.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,KAAK,EAAK,MAAM,kBAAkB,CAAC;AAIjD,eAAO,MAAM,YAAY;;;;EAIvB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAEtD,eAAO,MAAM,WAAW;;;;EAStB,CAAC"}

package/src/templates/welcome.js

@@ -0,0 +1,20 @@
+// Single responsibility: the welcome mail, as data. Keys only — the words live in a catalog.
+import { t } from '@ultimat3/schema';
+import { blocks } from '../blocks';
+import { defineMail } from '../mail';
+export const welcomeInput = t.object({
+    name: t.string,
+    appName: t.string,
+    url: t.url,
+});
+export const welcomeMail = defineMail({
+    id: 'welcome',
+    subject: 'mail.welcome.subject',
+    input: welcomeInput,
+    template: ({ data }) => [
+        blocks.heading('mail.welcome.heading', { name: data.name }),
+        blocks.paragraph('mail.welcome.body', { appName: data.appName }),
+        blocks.button('mail.welcome.cta', data.url, { appName: data.appName }),
+    ],
+});
+//# sourceMappingURL=welcome.js.map

package/src/templates/welcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"welcome.js","sourceRoot":"","sources":["welcome.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAE7F,OAAO,EAAc,CAAC,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM;IACd,OAAO,EAAE,CAAC,CAAC,MAAM;IACjB,GAAG,EAAE,CAAC,CAAC,GAAG;CACX,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,WAAW,GAAG,UAAU,CAAe;IAClD,EAAE,EAAE,SAAS;IACb,OAAO,EAAE,sBAAsB;IAC/B,KAAK,EAAE,YAAY;IACnB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACtB,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3D,MAAM,CAAC,SAAS,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;KACvE;CACF,CAAC,CAAC"}

package/src/templates/welcome.ts

@@ -0,0 +1,24 @@
+// Single responsibility: the welcome mail, as data. Keys only — the words live in a catalog.
+
+import { type Infer, t } from '@ultimat3/schema';
+import { blocks } from '../blocks';
+import { defineMail } from '../mail';
+
+export const welcomeInput = t.object({
+  name: t.string,
+  appName: t.string,
+  url: t.url,
+});
+
+export type WelcomeInput = Infer<typeof welcomeInput>;
+
+export const welcomeMail = defineMail<WelcomeInput>({
+  id: 'welcome',
+  subject: 'mail.welcome.subject',
+  input: welcomeInput,
+  template: ({ data }) => [
+    blocks.heading('mail.welcome.heading', { name: data.name }),
+    blocks.paragraph('mail.welcome.body', { appName: data.appName }),
+    blocks.button('mail.welcome.cta', data.url, { appName: data.appName }),
+  ],
+});