@vibesdotdev/integrations-resend 0.0.0-stage → 1.0.0-rc.0

package/dist/resend/resend-webhook.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend-webhook.descriptor.js","sourceRoot":"","sources":["../../src/resend/resend-webhook.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAGjE,eAAe,kBAAkB,CAAgC;IAChE,IAAI,EAAE,uBAAuB;IAC7B,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EACV,kFAAkF;IACnF,QAAQ,EAAE,QAAQ;IAClB,eAAe,EAAE,gBAAgB;IACjC,OAAO,EAAE,IAAI;IACb,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;CAC5C,CAAC,CAAC"}

package/dist/resend/resend-webhook.impl.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Resend webhook handler implementation.
+ *
+ * Svix-style HMAC-SHA256 verification — no `svix` SDK dependency. The
+ * algorithm lives once in `./resend-signature.ts` (Web Crypto only, so the
+ * pack is universal scope); this handler adds the per-delivery secret lookup,
+ * the distinct failure messages, and the event normalization.
+ */
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+import type { EmailWebhookHandlerDescriptor, EmailWebhookHandlerImplementation } from '@vibesdotdev/email/schemas/email-webhook';
+/**
+ * Factory: returns a verifier impl bound to the descriptor + the integration
+ * id whose `webhookSecret` credential we'll use to verify deliveries. The
+ * plugin wires this for the canonical Resend integration; multi-tenant apps
+ * with multiple Resend accounts register additional descriptors and call
+ * this factory for each.
+ */
+export declare function createResendWebhookHandler(runtime: Pick<RuntimeRef, 'query'>, descriptor: EmailWebhookHandlerDescriptor, integrationId: string): EmailWebhookHandlerImplementation;
+//# sourceMappingURL=resend-webhook.impl.d.ts.map

package/dist/resend/resend-webhook.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend-webhook.impl.d.ts","sourceRoot":"","sources":["../../src/resend/resend-webhook.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EACX,6BAA6B,EAC7B,iCAAiC,EAEjC,MAAM,0CAA0C,CAAC;AAqDlD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACzC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,EAClC,UAAU,EAAE,6BAA6B,EACzC,aAAa,EAAE,MAAM,GACnB,iCAAiC,CAsDnC"}

package/dist/resend/resend-webhook.impl.js

@@ -0,0 +1,111 @@
+/**
+ * Resend webhook handler implementation.
+ *
+ * Svix-style HMAC-SHA256 verification — no `svix` SDK dependency. The
+ * algorithm lives once in `./resend-signature.ts` (Web Crypto only, so the
+ * pack is universal scope); this handler adds the per-delivery secret lookup,
+ * the distinct failure messages, and the event normalization.
+ */
+import { CapabilityError, CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+import { webhookPayloadSchema } from "../schemas/resend.js";
+import { SVIX_REPLAY_WINDOW_SEC, computeSvixSignature, svixSignatureMatches } from "./resend-signature.js";
+/** Maximum allowed clock-skew between the webhook timestamp and now. */
+const REPLAY_WINDOW_MS = SVIX_REPLAY_WINDOW_SEC * 1000;
+/**
+ * Map Resend's webhook event types to the substrate's canonical status enum.
+ * Keep in sync with `mapResendStatus` in `resend.impl.ts`.
+ */
+function mapEventStatus(type) {
+    switch (type) {
+        case 'email.sent':
+            return 'sent';
+        case 'email.delivered':
+            return 'delivered';
+        case 'email.bounced':
+            return 'bounced';
+        case 'email.complained':
+            return 'complained';
+        case 'email.opened':
+            return 'opened';
+        case 'email.clicked':
+            return 'clicked';
+        case 'email.delivery_delayed':
+            return 'queued';
+        case 'email.failed':
+            return 'failed';
+    }
+}
+/**
+ * Resolve the active Resend integration so we can read its `webhookSecret`
+ * credential. Webhooks arrive at the platform without per-call auth, so the
+ * secret has to come from the registered integration the descriptor refers
+ * to. The resolved impl satisfies `IntegrationProviderImplementation` —
+ * `getCredentials()` is the canonical path; no provider-specific casts.
+ */
+async function resolveWebhookSecret(runtime, integrationId) {
+    const impl = await runtime
+        .query('integration/provider')
+        .withId(integrationId)
+        .resolve();
+    const credentials = await impl.getCredentials();
+    const secret = credentials.webhookSecret;
+    return secret && secret.length > 0 ? secret : null;
+}
+/**
+ * Factory: returns a verifier impl bound to the descriptor + the integration
+ * id whose `webhookSecret` credential we'll use to verify deliveries. The
+ * plugin wires this for the canonical Resend integration; multi-tenant apps
+ * with multiple Resend accounts register additional descriptors and call
+ * this factory for each.
+ */
+export function createResendWebhookHandler(runtime, descriptor, integrationId) {
+    return {
+        descriptor,
+        async verify({ headers, rawBody }) {
+            const svixId = headers['svix-id'];
+            const svixTimestamp = headers['svix-timestamp'];
+            const svixSignature = headers['svix-signature'];
+            if (!svixId || !svixTimestamp || !svixSignature) {
+                throw new CapabilityError('Resend webhook missing required svix-id / svix-timestamp / svix-signature header.', 'INVALID_INPUT', { reason: 'resend-webhook-invalid' });
+            }
+            const timestampSec = Number(svixTimestamp);
+            if (!Number.isFinite(timestampSec)) {
+                throw new CapabilityError('Resend webhook svix-timestamp is not a number.', 'INVALID_INPUT', { reason: 'resend-webhook-invalid' });
+            }
+            const ageMs = Math.abs(Date.now() - timestampSec * 1000);
+            if (ageMs > REPLAY_WINDOW_MS) {
+                throw new CapabilityError(`Resend webhook timestamp outside ${REPLAY_WINDOW_MS / 1000}s replay window (age ${Math.round(ageMs / 1000)}s).`, 'PERMISSION_DENIED', { reason: 'resend-signature-invalid' });
+            }
+            const secret = await resolveWebhookSecret(runtime, integrationId);
+            if (!secret) {
+                throw new CapabilityError(`Resend webhook secret not configured on integration '${integrationId}'.`, 'AUTH_REQUIRED', { reason: 'resend-webhook-secret-missing' });
+            }
+            const expected = await computeSvixSignature(secret, svixId, svixTimestamp, rawBody);
+            const matched = svixSignatureMatches(svixSignature, expected);
+            if (!matched)
+                throw new CapabilityError('Resend webhook signature verification failed.', 'PERMISSION_DENIED', { reason: 'resend-signature-invalid' });
+            let body;
+            try {
+                body = JSON.parse(rawBody);
+            }
+            catch (cause) {
+                throw new CapabilityError('Resend webhook body is not valid JSON.', 'INVALID_INPUT', { reason: 'resend-webhook-invalid', details: { failure: valueFreeFailure(CaughtFailureSchema.parse(cause)) } });
+            }
+            const admitted = webhookPayloadSchema.safeParse(body);
+            if (!admitted.success)
+                throw new CapabilityError('Resend webhook payload missing `type` or `data.email_id`, or has an invalid event shape.', 'INVALID_INPUT', { reason: 'resend-webhook-invalid' });
+            const payload = admitted.data;
+            const event = {
+                provider: 'resend',
+                messageId: payload.data.email_id,
+                status: mapEventStatus(payload.type),
+                to: payload.data.to?.[0],
+                reason: payload.data.bounce?.message ?? payload.data.failed?.reason,
+                timestamp: payload.created_at,
+                raw: payload
+            };
+            return [event];
+        }
+    };
+}
+//# sourceMappingURL=resend-webhook.impl.js.map

package/dist/resend/resend-webhook.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend-webhook.impl.js","sourceRoot":"","sources":["../../src/resend/resend-webhook.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAA6B,MAAM,sBAAsB,CAAC;AASvF,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE3G,wEAAwE;AACxE,MAAM,gBAAgB,GAAG,sBAAsB,GAAG,IAAI,CAAC;AAEvD;;;GAGG;AACH,SAAS,cAAc,CAAC,IAAkC;IACzD,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,YAAY;YAChB,OAAO,MAAM,CAAC;QACf,KAAK,iBAAiB;YACrB,OAAO,WAAW,CAAC;QACpB,KAAK,eAAe;YACnB,OAAO,SAAS,CAAC;QAClB,KAAK,kBAAkB;YACtB,OAAO,YAAY,CAAC;QACrB,KAAK,cAAc;YAClB,OAAO,QAAQ,CAAC;QACjB,KAAK,eAAe;YACnB,OAAO,SAAS,CAAC;QAClB,KAAK,wBAAwB;YAC5B,OAAO,QAAQ,CAAC;QACjB,KAAK,cAAc;YAClB,OAAO,QAAQ,CAAC;IAClB,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,oBAAoB,CAClC,OAAkC,EAClC,aAAqB;IAErB,MAAM,IAAI,GAAG,MAAM,OAAO;SACxB,KAAK,CAAsI,sBAAsB,CAAC;SAClK,MAAM,CAAC,aAAa,CAAC;SACrB,OAAO,EAAE,CAAC;IACZ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC;IACzC,OAAO,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACzC,OAAkC,EAClC,UAAyC,EACzC,aAAqB;IAErB,OAAO;QACN,UAAU;QACV,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE;YAChC,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YAClC,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAEhD,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,EAAE,CAAC;gBACjD,MAAM,IAAI,eAAe,CACxB,mFAAmF,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAC1I,CAAC;YACH,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,eAAe,CAAC,gDAAgD,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;YACpI,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,GAAG,IAAI,CAAC,CAAC;YACzD,IAAI,KAAK,GAAG,gBAAgB,EAAE,CAAC;gBAC9B,MAAM,IAAI,eAAe,CACxB,oCAAoC,gBAAgB,GAAG,IAAI,wBAAwB,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAC7K,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAClE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,IAAI,eAAe,CACxB,wDAAwD,aAAa,IAAI,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,+BAA+B,EAAE,CACvI,CAAC;YACH,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;YACpF,MAAM,OAAO,GAAG,oBAAoB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,eAAe,CAAC,+CAA+C,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAEtJ,IAAI,IAAI,CAAC;YACT,IAAI,CAAC;gBAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACnC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,IAAI,eAAe,CAAC,wCAAwC,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAAC,CAAC;YACvN,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAAE,MAAM,IAAI,eAAe,CAAC,0FAA0F,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;YACpM,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC;YAE9B,MAAM,KAAK,GAAsB;gBAChC,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;gBAChC,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC;gBACpC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBACxB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM;gBACnE,SAAS,EAAE,OAAO,CAAC,UAAU;gBAC7B,GAAG,EAAE,OAAO;aACZ,CAAC;YACF,OAAO,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/resend/resend.descriptor.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Resend `integration/provider` descriptor.
+ *
+ * Vendor pack for the Resend HTTP email API. Registers under
+ * `category: 'email'` so `packages/email`'s `EmailClient` picks it up at
+ * dispatch time alongside any other email integrations the app registers.
+ *
+ * Credentials:
+ *   - `apiKey`        Resend API key, scoped per org so multi-tenant apps can
+ *                     route different orgs through different Resend accounts.
+ *   - `webhookSecret` Svix signing secret (Resend uses Svix for webhooks).
+ *                     Required for the `email/webhook-handler` to verify
+ *                     inbound delivery events.
+ *
+ * Config:
+ *   - `defaultFrom`   Optional fallback `from` address when the caller
+ *                     doesn't supply one on the `EmailSendInput`.
+ *
+ * Operations are the substrate canonical `send`/`check`/`receive`. Resend
+ * is webhook-push for inbound; `receive` is not supported and surfaces as
+ * `EmailReceiveNotSupportedError`.
+ */
+import { type IntegrationProviderDescriptorInput } from '@vibesdotdev/integrations/schemas/integration-descriptor';
+import { type ResendHostOptions } from '../schemas/resend.ts';
+export type { ResendHostOptions } from '../schemas/resend.ts';
+type ResendDescriptor = IntegrationProviderDescriptorInput & Required<Pick<IntegrationProviderDescriptorInput, 'name' | 'provider' | 'config'>>;
+declare const resendDescriptor: ResendDescriptor;
+/**
+ * The Resend descriptor with the host's declared default sender. A descriptor
+ * that carries a host credential reference takes its config from the
+ * descriptor alone (never from tenant settings), so the host declares
+ * `defaultFrom` here, the same way `createHostSmtpDescriptor` declares SMTP's.
+ * Callers then send without a `from`: the provider fills it.
+ */
+export declare function createHostResendDescriptor(options: ResendHostOptions): ResendDescriptor;
+export default resendDescriptor;
+//# sourceMappingURL=resend.descriptor.d.ts.map

package/dist/resend/resend.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend.descriptor.d.ts","sourceRoot":"","sources":["../../src/resend/resend.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EACN,KAAK,kCAAkC,EACvC,MAAM,0DAA0D,CAAC;AAElE,OAAO,EAA2B,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACvF,YAAY,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,KAAK,gBAAgB,GAAG,kCAAkC,GACzD,QAAQ,CAAC,IAAI,CAAC,kCAAkC,EAAE,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC;AAEpF,QAAA,MAAM,gBAAgB,kBAmEpB,CAAC;AAEH;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,iBAAiB,GAAG,gBAAgB,CAMvF;AAED,eAAe,gBAAgB,CAAC"}

package/dist/resend/resend.descriptor.js

@@ -0,0 +1,107 @@
+/**
+ * Resend `integration/provider` descriptor.
+ *
+ * Vendor pack for the Resend HTTP email API. Registers under
+ * `category: 'email'` so `packages/email`'s `EmailClient` picks it up at
+ * dispatch time alongside any other email integrations the app registers.
+ *
+ * Credentials:
+ *   - `apiKey`        Resend API key, scoped per org so multi-tenant apps can
+ *                     route different orgs through different Resend accounts.
+ *   - `webhookSecret` Svix signing secret (Resend uses Svix for webhooks).
+ *                     Required for the `email/webhook-handler` to verify
+ *                     inbound delivery events.
+ *
+ * Config:
+ *   - `defaultFrom`   Optional fallback `from` address when the caller
+ *                     doesn't supply one on the `EmailSendInput`.
+ *
+ * Operations are the substrate canonical `send`/`check`/`receive`. Resend
+ * is webhook-push for inbound; `receive` is not supported and surfaces as
+ * `EmailReceiveNotSupportedError`.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel/factory';
+import {} from '@vibesdotdev/integrations/schemas/integration-descriptor';
+import { emailCapabilityEgressSchema } from '@vibesdotdev/email/schemas/email-egress';
+import { resendHostOptionsSchema } from "../schemas/resend.js";
+const resendDescriptor = createRuntimeAsset({
+    kind: 'integration/provider',
+    id: 'integration.email.resend',
+    name: 'Resend',
+    description: 'Resend HTTP email API. Outbound send + status lookup; inbound delivery events via Svix-signed webhooks.',
+    provider: 'resend',
+    category: 'email',
+    enabled: true,
+    priority: 100,
+    baseUrl: 'https://api.resend.com',
+    configSettingKey: 'integrations.email.resend.config',
+    config: {
+        defaultFrom: '',
+        emailEgress: emailCapabilityEgressSchema.parse({ kind: 'fixed-https', host: 'api.resend.com', baseUrlKey: 'baseUrl' })
+    },
+    credentials: [
+        {
+            key: 'apiKey',
+            source: 'secret',
+            providerType: 'resend',
+            scope: 'org',
+            required: false
+        },
+        {
+            key: 'apiKey',
+            source: 'secret',
+            reference: { source: 'secret', key: 'RESEND_API_KEY' },
+            required: false
+        },
+        {
+            key: 'webhookSecret',
+            source: 'secret',
+            providerType: 'resend',
+            scope: 'org',
+            required: false
+        }
+    ],
+    operations: [
+        {
+            id: 'get-received-attachment',
+            name: 'Download received attachment',
+            description: 'Retrieve received attachment bytes through the selected account and a fresh provider download URL.',
+            requiresOrg: false
+        },
+        {
+            id: 'send',
+            name: 'Send email',
+            description: 'POST /emails — deliver a message via the Resend HTTP API.',
+            requiresOrg: false
+        },
+        {
+            id: 'check',
+            name: 'Check status / health',
+            description: 'GET /emails/{id} for status lookup, or GET /domains as a health probe.',
+            requiresOrg: false
+        },
+        {
+            id: 'get-received',
+            name: 'Retrieve received email',
+            description: 'GET /emails/receiving/{emailId} — retrieve the complete body and headers with the selected account.',
+            requiresOrg: false
+        }
+    ],
+    tags: ['email', 'resend', 'http'],
+});
+/**
+ * The Resend descriptor with the host's declared default sender. A descriptor
+ * that carries a host credential reference takes its config from the
+ * descriptor alone (never from tenant settings), so the host declares
+ * `defaultFrom` here, the same way `createHostSmtpDescriptor` declares SMTP's.
+ * Callers then send without a `from`: the provider fills it.
+ */
+export function createHostResendDescriptor(options) {
+    const { defaultFrom } = resendHostOptionsSchema.parse(options);
+    return createRuntimeAsset({
+        ...resendDescriptor,
+        config: { ...resendDescriptor.config, defaultFrom }
+    });
+}
+export default resendDescriptor;
+//# sourceMappingURL=resend.descriptor.js.map

package/dist/resend/resend.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend.descriptor.js","sourceRoot":"","sources":["../../src/resend/resend.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAEN,MAAM,0DAA0D,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAA0B,MAAM,sBAAsB,CAAC;AAMvF,MAAM,gBAAgB,GAAG,kBAAkB,CAAmB;IAC7D,IAAI,EAAE,sBAAsB;IAC5B,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,QAAQ;IACd,WAAW,EACV,yGAAyG;IAC1G,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,OAAO;IACjB,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,GAAG;IACb,OAAO,EAAE,wBAAwB;IACjC,gBAAgB,EAAE,kCAAkC;IACpD,MAAM,EAAE;QACP,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,2BAA2B,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;KACtH;IACD,WAAW,EAAE;QACZ;YACC,GAAG,EAAE,QAAQ;YACb,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE,QAAQ;YACtB,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,KAAK;SACf;QACD;YACC,GAAG,EAAE,QAAQ;YACb,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE;YACtD,QAAQ,EAAE,KAAK;SACf;QACD;YACC,GAAG,EAAE,eAAe;YACpB,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE,QAAQ;YACtB,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,KAAK;SACf;KACD;IACD,UAAU,EAAE;QACX;YACC,EAAE,EAAE,yBAAyB;YAC7B,IAAI,EAAE,8BAA8B;YACpC,WAAW,EAAE,oGAAoG;YACjH,WAAW,EAAE,KAAK;SAClB;QACD;YACC,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,2DAA2D;YACxE,WAAW,EAAE,KAAK;SAClB;QACD;YACC,EAAE,EAAE,OAAO;YACX,IAAI,EAAE,uBAAuB;YAC7B,WAAW,EACV,wEAAwE;YACzE,WAAW,EAAE,KAAK;SAClB;QACD;YACC,EAAE,EAAE,cAAc;YAClB,IAAI,EAAE,yBAAyB;YAC/B,WAAW,EACV,qGAAqG;YACtG,WAAW,EAAE,KAAK;SAClB;KACD;IACD,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC;CACjC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAA0B;IACpE,MAAM,EAAE,WAAW,EAAE,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/D,OAAO,kBAAkB,CAAmB;QAC3C,GAAG,gBAAgB;QACnB,MAAM,EAAE,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE;KACnD,CAAC,CAAC;AACJ,CAAC;AAED,eAAe,gBAAgB,CAAC"}

package/dist/resend/resend.impl.d.ts

@@ -0,0 +1,24 @@
+import type { EmailIntegrationImplementation } from '@vibesdotdev/email/services/email-integration';
+import { BaseIntegrationProvider } from '@vibesdotdev/integrations/kinds/integration';
+import type { IntegrationConnectionSelector, IntegrationOperationResult } from '@vibesdotdev/integrations/schemas/integration-descriptor';
+import type { EmailSendInput, EmailSendResult, EmailStatusResult, EmailHealthResult } from '@vibesdotdev/email/schemas/email-data';
+export declare class ResendEmailIntegration extends BaseIntegrationProvider implements EmailIntegrationImplementation {
+    invokeOperation<T = unknown>(opId: string, args?: import('../schemas/resend.ts').ResendOperationArgs): Promise<IntegrationOperationResult<T>>;
+    invokeOperationForConnection<T = unknown>(selector: Readonly<IntegrationConnectionSelector>, opId: string, args?: import('../schemas/resend.ts').ResendOperationArgs): Promise<IntegrationOperationResult<T>>;
+    /**
+     * Bearer-token POST to Resend's send endpoint. Network egress is the
+     * canonical work; everything else is shape translation + error mapping.
+     * Throws on non-2xx so the typed `send` contract returns either a valid
+     * `EmailSendResult` or a thrown error (which `EmailClient.send` and
+     * `invokeOperation` translate into the right surface for each caller).
+     */
+    send(input: EmailSendInput, selector?: Readonly<IntegrationConnectionSelector>): Promise<EmailSendResult>;
+    /**
+     * `check(messageId)` performs a status lookup; `check()` performs a
+     * health probe by verifying the API key works against Resend's
+     * `GET /domains` endpoint.
+     */
+    check(messageId?: string, selector?: Readonly<IntegrationConnectionSelector>): Promise<EmailStatusResult | EmailHealthResult>;
+}
+export default ResendEmailIntegration;
+//# sourceMappingURL=resend.impl.d.ts.map

package/dist/resend/resend.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend.impl.d.ts","sourceRoot":"","sources":["../../src/resend/resend.impl.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACtF,OAAO,KAAK,EAAE,6BAA6B,EAAE,0BAA0B,EAAE,MAAM,0DAA0D,CAAC;AAG1I,OAAO,KAAK,EACX,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EAEjB,MAAM,uCAAuC,CAAC;AAiF/C,qBAAa,sBACZ,SAAQ,uBACR,YAAW,8BAA8B;IAE1B,eAAe,CAAC,CAAC,GAAG,OAAO,EACzC,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,OAAO,sBAAsB,EAAE,mBAAmB,GACvD,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;IAInC,4BAA4B,CAAC,CAAC,GAAG,OAAO,EAC7C,QAAQ,EAAE,QAAQ,CAAC,6BAA6B,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,sBAAsB,EAAE,mBAAmB,GACxH,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;IA+CzC;;;;;;OAMG;IACG,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,6BAA6B,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC;IAgD/G;;;;OAIG;IACG,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,6BAA6B,CAAC,GAAG,OAAO,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;CA6CnI;AAED,eAAe,sBAAsB,CAAC"}

package/dist/resend/resend.impl.js

@@ -0,0 +1,258 @@
+import { readResendResponse } from "./resend-response.js";
+/**
+ * Resend integration implementation.
+ *
+ * Extends the Integrations-owned `BaseIntegrationProvider`, so live config and
+ * credentials stay runtime-backed while `send`, `check`, and optional
+ * `receive` are wired through the substrate's `EmailClient` and canonical
+ * `email` tool. Generic operations delegate to the Email-owned dispatcher.
+ *
+ * Resend's inbound surface is webhook-push only — there is no IMAP / poll
+ * endpoint. The dispatcher reports `EmailReceiveNotSupportedError` when
+ * `receive()` is absent; `EmailClient.receive()` catches that and returns `[]`
+ * so the typed surface stays uniform across packs.
+ */
+import { CapabilityError, CaughtFailureSchema, valueFreeFailure } from '@vibesdotdev/kernel';
+import { emailSendInputSchema } from '@vibesdotdev/email/schemas/email-data';
+import { attachmentInputSchema, attachmentReceiptSchema, receivedInputSchema, resendConfigSchema, sendResponseSchema, statusResponseSchema } from "../schemas/resend.js";
+import { invokeEmailIntegrationOperation } from '@vibesdotdev/email/services/email-integration';
+import { BaseIntegrationProvider } from '@vibesdotdev/integrations/kinds/integration';
+import { retrieveResendReceivedEmail } from "./resend-received.js";
+import { resolveResendBaseUrl } from "../config/resend.config.descriptor.js";
+/**
+ * Map Resend's `last_event` strings to the substrate's canonical
+ * `EmailDeliveryStatus` enum. `created` collapses to `queued` since Resend
+ * has accepted the message but has not yet handed it to a downstream MTA.
+ * `delivery_delayed` also collapses to `queued` because the message hasn't
+ * reached its terminal state yet.
+ */
+function mapResendStatus(event) {
+    switch (event) {
+        case 'created':
+        case 'delivery_delayed':
+            return 'queued';
+        case 'sent':
+            return 'sent';
+        case 'delivered':
+            return 'delivered';
+        case 'bounced':
+            return 'bounced';
+        case 'complained':
+            return 'complained';
+        case 'opened':
+            return 'opened';
+        case 'clicked':
+            return 'clicked';
+        case 'failed':
+            return 'failed';
+    }
+}
+/**
+ * Translate the substrate's canonical `EmailSendInput` into Resend's request
+ * body. Drops fields Resend doesn't accept (`idempotencyKey`) and renames
+ * the ones it spells differently (`replyTo` → `reply_to`, attachment
+ * `disposition` → omitted because Resend infers from `contentId`).
+ */
+function toResendBody(input, fallbackFrom) {
+    const from = input.from ?? fallbackFrom;
+    if (!from) {
+        throw new CapabilityError('Resend send requires a `from` address. Pass one on the EmailSendInput or set the `defaultFrom` config on the integration.', 'INVALID_INPUT', { reason: 'resend-sender-missing' });
+    }
+    return {
+        from, to: Array.isArray(input.to) ? input.to : [input.to],
+        cc: input.cc, bcc: input.bcc, reply_to: input.replyTo,
+        subject: input.subject, html: input.html, text: input.text,
+        headers: input.inReplyTo ? { ...input.headers, 'In-Reply-To': input.inReplyTo } : input.headers,
+        attachments: input.attachments?.map(a => ({
+            filename: a.filename, content: a.content, content_type: a.contentType, content_id: a.contentId
+        })),
+        tags: input.tags?.map(name => ({ name, value: 'true' }))
+    };
+}
+async function readAttachment(response, maxBytes) {
+    if (!response.body)
+        throw new CapabilityError('Attachment body is missing', 'UNAVAILABLE', { reason: 'resend-attachment-invalid' });
+    const reader = response.body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            total += value.byteLength;
+            if (total > maxBytes) {
+                await reader.cancel();
+                throw new CapabilityError('Attachment exceeds its allowed size', 'UNAVAILABLE', { reason: 'resend-attachment-invalid' });
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const bytes = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return bytes;
+}
+export class ResendEmailIntegration extends BaseIntegrationProvider {
+    async invokeOperation(opId, args) {
+        return invokeEmailIntegrationOperation(this, opId, args);
+    }
+    async invokeOperationForConnection(selector, opId, args) {
+        this.requireDeclaredOperation(opId);
+        try {
+            if (opId === 'get-received-attachment') {
+                const input = attachmentInputSchema.parse(args);
+                const { credentials } = await this.getResolvedConfiguration(selector);
+                if (!credentials.apiKey)
+                    throw new CapabilityError('Selected account credential is missing', 'AUTH_REQUIRED', { reason: 'resend-credential-missing' });
+                const baseUrl = await resolveResendBaseUrl(this.context.runtime, this.descriptor.baseUrl);
+                const metadataResponse = await fetch(`${baseUrl.replace(/\/$/, '')}/emails/receiving/${encodeURIComponent(input.emailId)}/attachments/${encodeURIComponent(input.attachmentId)}`, {
+                    headers: { Authorization: `Bearer ${credentials.apiKey}` }, redirect: 'error', signal: AbortSignal.timeout(15_000)
+                });
+                if (!metadataResponse.ok)
+                    throw new CapabilityError('Resend attachment lookup was refused.', 'UNAVAILABLE', { reason: 'resend-upstream-refused', details: { status: metadataResponse.status } });
+                const receipt = attachmentReceiptSchema.safeParse(await readResendResponse(metadataResponse));
+                if (!receipt.success)
+                    throw new CapabilityError('Invalid attachment receipt', 'UNAVAILABLE', { reason: 'resend-attachment-invalid' });
+                const metadata = receipt.data;
+                if (metadata.id !== input.attachmentId)
+                    throw new CapabilityError('Invalid attachment receipt identity', 'UNAVAILABLE', { reason: 'resend-attachment-invalid' });
+                const url = new URL(metadata.download_url);
+                // The short-lived CDN URL is provider-signed. Never forward the account API key.
+                const response = await fetch(url, { redirect: 'error', signal: AbortSignal.timeout(20_000) });
+                if (!response.ok)
+                    throw new CapabilityError('Resend attachment download was refused.', 'UNAVAILABLE', { reason: 'resend-upstream-refused', details: { status: response.status } });
+                const bytes = await readAttachment(response, metadata.size);
+                if (bytes.byteLength !== metadata.size)
+                    throw new CapabilityError('Attachment size does not match its provider receipt', 'UNAVAILABLE', { reason: 'resend-attachment-invalid' });
+                let binary = '';
+                for (let offset = 0; offset < bytes.length; offset += 8192)
+                    binary += String.fromCharCode(...bytes.subarray(offset, offset + 8192));
+                // SAFETY: the legacy owner generic binds T at dispatch; this branch constructs the declared attachment result.
+                return { ok: true, data: { content: btoa(binary) } };
+            }
+            if (opId === 'get-received') {
+                const { emailId } = receivedInputSchema.parse(args);
+                const { credentials } = await this.getResolvedConfiguration(selector);
+                // SAFETY: the owner dispatch generic associates T with get-received; hydration validates the normalized result.
+                return { ok: true, data: await retrieveResendReceivedEmail({ emailId, apiKey: credentials.apiKey, baseUrl: await resolveResendBaseUrl(this.context.runtime, this.descriptor.baseUrl) }) };
+            }
+            if (opId === 'send' || opId === 'check') {
+                return invokeEmailIntegrationOperation({
+                    descriptor: this.descriptor,
+                    send: (input) => this.send(input, selector),
+                    check: (messageId) => this.check(messageId, selector)
+                }, opId, args);
+            }
+            throw new Error(`Resend selected-account operation '${opId}' is not implemented.`);
+        }
+        catch (error) {
+            const refusal = { ok: false, errors: ['Resend selected-account operation failed.'], failure: valueFreeFailure(CaughtFailureSchema.parse(error)) };
+            return refusal;
+        }
+    }
+    /**
+     * Bearer-token POST to Resend's send endpoint. Network egress is the
+     * canonical work; everything else is shape translation + error mapping.
+     * Throws on non-2xx so the typed `send` contract returns either a valid
+     * `EmailSendResult` or a thrown error (which `EmailClient.send` and
+     * `invokeOperation` translate into the right surface for each caller).
+     */
+    async send(input, selector) {
+        const { config, credentials } = await this.getResolvedConfiguration(selector);
+        const apiKey = credentials.apiKey;
+        if (!apiKey) {
+            throw new CapabilityError(`Resend integration '${this.descriptor.id}' has no apiKey credential. ` +
+                `Connect the integration via the credentials API before calling send.`, 'AUTH_REQUIRED', { reason: 'resend-credential-missing' });
+        }
+        const baseUrl = await resolveResendBaseUrl(this.context.runtime, this.descriptor.baseUrl);
+        const defaultFrom = resendConfigSchema.parse(config).defaultFrom || undefined;
+        input = emailSendInputSchema.parse(input);
+        if (selector && (!defaultFrom || (input.from && input.from !== defaultFrom))) {
+            throw new CapabilityError('Selected Resend delivery requires the saved connection sender; an unrelated From address is not allowed.', 'PERMISSION_DENIED', { reason: 'resend-sender-mismatch' });
+        }
+        const body = toResendBody(input, defaultFrom);
+        const t0 = Date.now();
+        const response = await fetch(`${baseUrl}/emails`, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${apiKey}`,
+                'Content-Type': 'application/json',
+                ...Object.fromEntries(input.idempotencyKey ? [['Idempotency-Key', input.idempotencyKey]] : [])
+            },
+            body: JSON.stringify(body)
+        });
+        const durationMs = Date.now() - t0;
+        if (!response.ok) {
+            throw new CapabilityError(`Resend send returned ${response.status}.`, 'UNAVAILABLE', {
+                reason: 'resend-upstream-refused', details: { status: response.status }
+            });
+        }
+        const admitted = sendResponseSchema.safeParse(await readResendResponse(response));
+        if (!admitted.success)
+            throw new CapabilityError('Resend send response missing or invalid id field.', 'UNAVAILABLE', { reason: 'resend-result-invalid' });
+        const parsed = admitted.data;
+        return {
+            messageId: parsed.id,
+            providerId: this.descriptor.id,
+            durationMs
+        };
+    }
+    /**
+     * `check(messageId)` performs a status lookup; `check()` performs a
+     * health probe by verifying the API key works against Resend's
+     * `GET /domains` endpoint.
+     */
+    async check(messageId, selector) {
+        const { credentials } = await this.getResolvedConfiguration(selector);
+        const apiKey = credentials.apiKey;
+        if (!apiKey) {
+            return {
+                ok: false,
+                providerId: this.descriptor.id,
+                error: 'Resend integration has no apiKey credential.'
+            };
+        }
+        const baseUrl = await resolveResendBaseUrl(this.context.runtime, this.descriptor.baseUrl);
+        if (messageId) {
+            const response = await fetch(`${baseUrl}/emails/${encodeURIComponent(messageId)}`, {
+                headers: { Authorization: `Bearer ${apiKey}` }
+            });
+            if (!response.ok) {
+                throw new CapabilityError('Resend status lookup was refused.', 'UNAVAILABLE', {
+                    reason: 'resend-upstream-refused', details: { status: response.status }
+                });
+            }
+            const admitted = statusResponseSchema.safeParse(await readResendResponse(response));
+            if (!admitted.success || admitted.data.id !== messageId)
+                throw new CapabilityError('Invalid Resend status response identity or shape.', 'UNAVAILABLE', { reason: 'resend-result-invalid' });
+            const data = admitted.data;
+            return {
+                messageId: data.id,
+                status: mapResendStatus(data.last_event),
+                providerId: this.descriptor.id,
+                timestamp: data.created_at
+            };
+        }
+        // Health probe: any authenticated endpoint will do; /domains is cheap.
+        const response = await fetch(`${baseUrl}/domains`, {
+            headers: { Authorization: `Bearer ${apiKey}` }
+        });
+        if (!response.ok) {
+            return {
+                ok: false,
+                providerId: this.descriptor.id,
+                error: `Resend /domains returned ${response.status}.`
+            };
+        }
+        return { ok: true, providerId: this.descriptor.id };
+    }
+}
+export default ResendEmailIntegration;
+//# sourceMappingURL=resend.impl.js.map

package/dist/resend/resend.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend.impl.js","sourceRoot":"","sources":["../../src/resend/resend.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,oBAAoB,EAA+B,MAAM,sBAAsB,CAAC;AACtM,OAAO,EAAE,+BAA+B,EAAE,MAAM,+CAA+C,CAAC;AAEhG,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AAEtF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAS7E;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,KAA2C;IACnE,QAAQ,KAAK,EAAE,CAAC;QACf,KAAK,SAAS,CAAC;QACf,KAAK,kBAAkB;YACtB,OAAO,QAAQ,CAAC;QACjB,KAAK,MAAM;YACV,OAAO,MAAM,CAAC;QACf,KAAK,WAAW;YACf,OAAO,WAAW,CAAC;QACpB,KAAK,SAAS;YACb,OAAO,SAAS,CAAC;QAClB,KAAK,YAAY;YAChB,OAAO,YAAY,CAAC;QACrB,KAAK,QAAQ;YACZ,OAAO,QAAQ,CAAC;QACjB,KAAK,SAAS;YACb,OAAO,SAAS,CAAC;QAClB,KAAK,QAAQ;YACZ,OAAO,QAAQ,CAAC;IAClB,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,KAAqB,EAAE,YAAgC;IAC5E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,YAAY,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACxB,2HAA2H,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CACjL,CAAC;IACH,CAAC;IACD,OAAO;QACN,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO;QACrD,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI;QAC1D,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO;QAC/F,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS;SAC9F,CAAC,CAAC;QACH,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;KACxD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAkB,EAAE,QAAgB;IACjE,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,MAAM,IAAI,eAAe,CAAC,4BAA4B,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACpI,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACJ,OAAO,IAAI,EAAE,CAAC;YACb,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACtB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,IAAI,eAAe,CAAC,qCAAqC,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC1H,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACF,CAAC;YAAS,CAAC;QACV,MAAM,CAAC,WAAW,EAAE,CAAC;IACtB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAAC,CAAC;IACrF,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,OAAO,sBACZ,SAAQ,uBAAuB;IAGtB,KAAK,CAAC,eAAe,CAC7B,IAAY,EACZ,IAAyD;QAEzD,OAAO,+BAA+B,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,4BAA4B,CACjC,QAAiD,EAAE,IAAY,EAAE,IAAyD;QAE1H,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC;YACJ,IAAI,IAAI,KAAK,yBAAyB,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;gBACtE,IAAI,CAAC,WAAW,CAAC,MAAM;oBAAE,MAAM,IAAI,eAAe,CAAC,wCAAwC,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBACvJ,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBAC1F,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE;oBACjL,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,CAAC,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;iBAClH,CAAC,CAAC;gBACH,IAAI,CAAC,gBAAgB,CAAC,EAAE;oBAAE,MAAM,IAAI,eAAe,CAAC,uCAAuC,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACjM,MAAM,OAAO,GAAG,uBAAuB,CAAC,SAAS,CAAC,MAAM,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBAC9F,IAAI,CAAC,OAAO,CAAC,OAAO;oBAAE,MAAM,IAAI,eAAe,CAAC,4BAA4B,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBACtI,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;gBAC9B,IAAI,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,YAAY;oBAAE,MAAM,IAAI,eAAe,CAAC,qCAAqC,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBACjK,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAC3C,iFAAiF;gBACjF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC9F,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAAE,MAAM,IAAI,eAAe,CAAC,yCAAyC,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACnL,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC5D,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,IAAI;oBAAE,MAAM,IAAI,eAAe,CAAC,qDAAqD,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBACjL,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI;oBAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;gBACpI,+GAA+G;gBAC/G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAO,EAAE,CAAC;YAC3D,CAAC;YACD,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACpD,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;gBACtE,gHAAgH;gBAChH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,2BAA2B,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAM,EAAE,CAAC;YAChM,CAAC;YACD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACzC,OAAO,+BAA+B,CAAI;oBACzC,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;oBAC3C,KAAK,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC;iBACrD,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAChB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,uBAAuB,CAAC,CAAC;QACpF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,2CAA2C,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAClJ,OAAO,OAAO,CAAC;QAChB,CAAC;IACF,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CAAC,KAAqB,EAAE,QAAkD;QACnF,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,eAAe,CACxB,uBAAuB,IAAI,CAAC,UAAU,CAAC,EAAE,8BAA8B;gBACtE,sEAAsE,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,CACjI,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1F,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,WAAW,IAAI,SAAS,CAAC;QAC9E,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,QAAQ,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,eAAe,CAAC,0GAA0G,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAClM,CAAC;QAED,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC9C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEtB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,SAAS,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,cAAc,EAAE,kBAAkB;gBAClC,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9F;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;QAEnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CAAC,wBAAwB,QAAQ,CAAC,MAAM,GAAG,EAAE,aAAa,EAAE;gBACpF,MAAM,EAAE,yBAAyB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;aACvE,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,MAAM,IAAI,eAAe,CAAC,mDAAmD,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC1J,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC;QAE7B,OAAO;YACN,SAAS,EAAE,MAAM,CAAC,EAAE;YACpB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE;YAC9B,UAAU;SACV,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,SAAkB,EAAE,QAAkD;QACjF,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE;gBAC9B,KAAK,EAAE,8CAA8C;aACrD,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAE1F,IAAI,SAAS,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,WAAW,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAAE;gBAClF,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;aAC9C,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,IAAI,eAAe,CAAC,mCAAmC,EAAE,aAAa,EAAE;oBAC7E,MAAM,EAAE,yBAAyB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;iBACvE,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpF,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,SAAS;gBAAE,MAAM,IAAI,eAAe,CAAC,mDAAmD,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC5L,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC3B,OAAO;gBACN,SAAS,EAAE,IAAI,CAAC,EAAE;gBAClB,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC;gBACxC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE;gBAC9B,SAAS,EAAE,IAAI,CAAC,UAAU;aAC1B,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,UAAU,EAAE;YAClD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE;gBAC9B,KAAK,EAAE,4BAA4B,QAAQ,CAAC,MAAM,GAAG;aACrD,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;IACrD,CAAC;CACD;AAED,eAAe,sBAAsB,CAAC"}

package/dist/resend.plugin.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Runtime plugin for the Resend email integration vendor pack.
+ *
+ * Registers:
+ *   1. The `integration/provider` descriptor + `ResendEmailIntegration` loader.
+ *      `packages/email`'s `EmailClient` picks this up automatically by
+ *      filtering `category === 'email'` at dispatch time.
+ *   2. The `email/webhook-handler` descriptor + loader for the platform-app
+ *      `+server.ts` route that ingests Resend webhooks.
+ *
+ * Also registers the account-aware consumer client and inbound agent source.
+ * Hosts register the owning kind plugins before this vendor plugin.
+ */
+import { type ResendHostOptions } from './resend/resend.descriptor.ts';
+/** Omit options to leave the sender to callers; pass options to declare the host's default sender. */
+export declare function createResendPlugin(options?: ResendHostOptions): import("@vibesdotdev/kernel").RuntimePlugin;
+export declare const resendPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default resendPlugin;
+//# sourceMappingURL=resend.plugin.d.ts.map

package/dist/resend.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend.plugin.d.ts","sourceRoot":"","sources":["../src/resend.plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAQH,OAA6B,EAA8B,KAAK,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AASzH,sGAAsG;AACtG,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE,iBAAiB,+CA6D7D;AAED,eAAO,MAAM,YAAY,6CAAuB,CAAC;AAEjD,eAAe,YAAY,CAAC"}