@wizeworks/lens-cloud 0.3.0-alpha.1 → 0.3.0-alpha.3

package/dist/mail/mailer.js

@@ -0,0 +1,50 @@
+import { suppressionOf } from "../repo/suppressions.js";
+import { resendSender } from "./resend.js";
+/** Kinds a spam complaint does not stop: the person asked for them, or they protect the account. */
+const ALWAYS = new Set(["account", "security"]);
+async function smtpSender(config) {
+    const { createTransport } = await import("nodemailer");
+    const defaults = { from: config.mailFrom, ...(config.mailReplyTo ? { replyTo: config.mailReplyTo } : {}) };
+    const transport = createTransport(config.smtpUrl, defaults);
+    return { via: "smtp", send: async (m) => void (await transport.sendMail({ ...defaults, ...m })), close: async () => transport.close() };
+}
+const logSender = async (m) => console.info(`[wizelens-cloud] mail (no mail service set, not sent) to ${m.to}: ${m.subject}\n${m.text}\n`);
+/** The test sender, then Resend, then SMTP, then the log. */
+async function transportOf(config) {
+    if (config.sendMail)
+        return { via: "test", send: config.sendMail };
+    if (config.resendApiKey)
+        return { via: "resend", send: resendSender({ apiKey: config.resendApiKey, from: config.mailFrom, replyTo: config.mailReplyTo, fetch: config.fetch }) };
+    if (config.smtpUrl)
+        return smtpSender(config);
+    return { via: "log", send: logSender };
+}
+/** A bounce skips every email. A complaint skips mail the person did not ask for. */
+async function skipReason(db, mail) {
+    const reason = await suppressionOf(db, mail.to);
+    if (reason === "bounce")
+        return "it bounced before";
+    if (reason === "complaint" && !ALWAYS.has(mail.kind))
+        return "it marked our mail as spam";
+    return null;
+}
+/** The cloud's mail, with the suppression list checked before each send. */
+export async function createMailer(config, db) {
+    const t = await transportOf(config);
+    const deliver = async (pending) => {
+        const mail = await pending;
+        const skip = await skipReason(db, mail);
+        if (skip)
+            return console.info(`[wizelens-cloud] mail to ${mail.to} skipped: ${skip}.`);
+        await t.send(mail).catch((err) => {
+            throw new Error(`mail to ${mail.to} failed: ${err instanceof Error ? err.message : String(err)}`);
+        });
+    };
+    return {
+        live: t.via !== "log",
+        via: t.via,
+        send: (mail) => void deliver(mail).catch((err) => console.error("[wizelens-cloud]", err instanceof Error ? err.message : err)),
+        close: async () => t.close?.(),
+    };
+}
+//# sourceMappingURL=mailer.js.map

package/dist/mail/mailer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mailer.js","sourceRoot":"","sources":["../../src/mail/mailer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAK3C,oGAAoG;AACpG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAW,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AA8B1D,KAAK,UAAU,UAAU,CAAC,MAAmB;IAC3C,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3G,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,OAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7D,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;AAC1I,CAAC;AAED,MAAM,SAAS,GAAW,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;AAEnJ,6DAA6D;AAC7D,KAAK,UAAU,WAAW,CAAC,MAAmB;IAC5C,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IACnE,IAAI,MAAM,CAAC,YAAY;QAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;IAChL,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACzC,CAAC;AAED,qFAAqF;AACrF,KAAK,UAAU,UAAU,CAAC,EAAa,EAAE,IAAU;IACjD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC;IACpD,IAAI,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,4BAA4B,CAAC;IAC1F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAmB,EAAE,EAAa;IACnE,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,KAAK,EAAE,OAA6B,EAAE,EAAE;QACtD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,IAAI;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,4BAA4B,IAAI,CAAC,EAAE,aAAa,IAAI,GAAG,CAAC,CAAC;QACvF,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,EAAE,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpG,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,GAAG,KAAK,KAAK;QACrB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACvI,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE;KAC/B,CAAC;AACJ,CAAC"}

package/dist/mail/preview.d.ts

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+import { SAMPLES } from "./samples.js";
+export { SAMPLES };
+/** Write each sample as .html and .txt, plus an index page that links them. */
+export declare function writePreviews(dir: string): Promise<string[]>;
+//# sourceMappingURL=preview.d.ts.map

package/dist/mail/preview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview.d.ts","sourceRoot":"","sources":["../../src/mail/preview.ts"],"names":[],"mappings":";AAIA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAGvC,OAAO,EAAE,OAAO,EAAE,CAAC;AAEnB,+EAA+E;AAC/E,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAWlE"}

package/dist/mail/preview.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+import { mkdir, writeFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+import { SAMPLES } from "./samples.js";
+import { renderMail } from "./templates.js";
+export { SAMPLES };
+/** Write each sample as .html and .txt, plus an index page that links them. */
+export async function writePreviews(dir) {
+    await mkdir(dir, { recursive: true });
+    const names = Object.keys(SAMPLES);
+    for (const name of names) {
+        const mail = await renderMail("ann@acme.io", SAMPLES[name]);
+        await writeFile(join(dir, `${name}.html`), mail.html);
+        await writeFile(join(dir, `${name}.txt`), `Subject: ${mail.subject}\n\n${mail.text}`);
+    }
+    const links = names.map((n) => `<li><a href="${n}.html">${n}</a> · <a href="${n}.txt">text</a></li>`).join("");
+    await writeFile(join(dir, "index.html"), `<!doctype html><meta charset="utf-8"><title>WizeLens emails</title><ul>${links}</ul>`);
+    return names;
+}
+if (import.meta.url === pathToFileURL(process.argv[1] ?? "").href) {
+    const dir = resolve(process.argv[2] ?? "email-preview");
+    const names = await writePreviews(dir);
+    console.log(`Wrote ${names.length} emails to ${dir}. Open index.html.`);
+}
+//# sourceMappingURL=preview.js.map

package/dist/mail/preview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview.js","sourceRoot":"","sources":["../../src/mail/preview.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAAE,OAAO,EAAE,CAAC;AAEnB,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAE,CAAC,CAAC;QAC7D,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,MAAM,CAAC,EAAE,YAAY,IAAI,CAAC,OAAO,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/G,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,0EAA0E,KAAK,OAAO,CAAC,CAAC;IACjI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,MAAM,cAAc,GAAG,oBAAoB,CAAC,CAAC;AAC1E,CAAC"}

package/dist/mail/resend.d.ts

@@ -0,0 +1,13 @@
+import type { Mail } from "./mailer.js";
+export interface ResendSettings {
+    apiKey: string;
+    from: string;
+    /** Where replies go. Left out when unset. */
+    replyTo?: string;
+    fetch: typeof fetch;
+    /** Wait between tries. Tests pass a fast one. */
+    sleep?: (ms: number) => Promise<void>;
+}
+/** Send one email through the Resend API. The same Idempotency-Key on every try, so a retry never sends it twice. */
+export declare function resendSender(s: ResendSettings): (mail: Mail) => Promise<void>;
+//# sourceMappingURL=resend.d.ts.map

package/dist/mail/resend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend.d.ts","sourceRoot":"","sources":["../../src/mail/resend.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAKxC,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,iDAAiD;IACjD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAaD,qHAAqH;AACrH,wBAAgB,YAAY,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAkB7E"}

package/dist/mail/resend.js

@@ -0,0 +1,34 @@
+import { randomUUID } from "node:crypto";
+const API = "https://api.resend.com/emails";
+const TRIES = 4;
+const pause = (ms) => new Promise((r) => setTimeout(r, ms));
+/** 429 and 5xx are worth another try, except a used-up daily or monthly quota. */
+const retryable = (status, body) => (status === 429 && !/quota_exceeded/.test(body)) || status >= 500;
+/** Seconds from Retry-After, else 1 s, 2 s, 4 s. At most 30 s. */
+const waitMs = (res, attempt) => Math.min(30_000, Number(res?.headers.get("retry-after")) * 1000 || 1000 * 2 ** attempt);
+const payload = (s, m) => JSON.stringify({ from: s.from, ...(s.replyTo ? { reply_to: s.replyTo } : {}), to: [m.to], subject: m.subject, html: m.html, text: m.text, tags: [{ name: "kind", value: m.kind }], ...(m.headers ? { headers: m.headers } : {}) });
+/** Send one email through the Resend API. The same Idempotency-Key on every try, so a retry never sends it twice. */
+export function resendSender(s) {
+    const sleep = s.sleep ?? pause;
+    return async (mail) => {
+        const headers = { Authorization: `Bearer ${s.apiKey}`, "Content-Type": "application/json", "Idempotency-Key": randomUUID() };
+        let problem = "";
+        for (let attempt = 0; attempt < TRIES; attempt++) {
+            const res = await s.fetch(API, { method: "POST", headers, body: payload(s, mail), signal: AbortSignal.timeout(15_000) }).catch((err) => {
+                problem = err instanceof Error ? err.message : String(err);
+                return null;
+            });
+            if (res?.ok)
+                return;
+            const body = res ? await res.text().catch(() => "") : "";
+            if (res)
+                problem = `Resend answered ${res.status}: ${body.slice(0, 300)}`;
+            if (res && !retryable(res.status, body))
+                break;
+            if (attempt < TRIES - 1)
+                await sleep(waitMs(res, attempt));
+        }
+        throw new Error(problem);
+    };
+}
+//# sourceMappingURL=resend.js.map

package/dist/mail/resend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend.js","sourceRoot":"","sources":["../../src/mail/resend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,GAAG,GAAG,+BAA+B,CAAC;AAC5C,MAAM,KAAK,GAAG,CAAC,CAAC;AAYhB,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAE1E,kFAAkF;AAClF,MAAM,SAAS,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,IAAI,GAAG,CAAC;AAEtH,kEAAkE;AAClE,MAAM,MAAM,GAAG,CAAC,GAAoB,EAAE,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;AAElJ,MAAM,OAAO,GAAG,CAAC,CAAiB,EAAE,CAAO,EAAE,EAAE,CAC7C,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAErO,qHAAqH;AACrH,MAAM,UAAU,YAAY,CAAC,CAAiB;IAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;IAC/B,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;QACpB,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,UAAU,EAAE,EAAE,CAAC;QAC7H,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;YACjD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC9I,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC3D,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YACH,IAAI,GAAG,EAAE,EAAE;gBAAE,OAAO;YACpB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,IAAI,GAAG;gBAAE,OAAO,GAAG,mBAAmB,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YAC1E,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;gBAAE,MAAM;YAC/C,IAAI,OAAO,GAAG,KAAK,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC"}

package/dist/mail/samples.d.ts

@@ -0,0 +1,3 @@
+import type { EmailContent } from "./content.js";
+export declare const SAMPLES: Record<string, EmailContent>;
+//# sourceMappingURL=samples.d.ts.map

package/dist/mail/samples.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"samples.d.ts","sourceRoot":"","sources":["../../src/mail/samples.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AA8CjD,eAAO,MAAM,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAqBhD,CAAC"}

package/dist/mail/samples.js

@@ -0,0 +1,63 @@
+import * as emails from "./emails.js";
+import { digest } from "./emails-digest.js";
+import { projectBack, projectQuiet } from "./emails-health.js";
+import * as security from "./emails-security.js";
+import { orgDeleted, roleChanged, teamChanges } from "./emails-team.js";
+// Sample data for every email, for the preview command and the template tests.
+const APP = "https://app.wizelens.com/_wizelens";
+const LINK = `${APP}/#/verify-email?token=sample-token`;
+const STOP = `${APP}/api/mail/unsubscribe?token=sample`;
+const AT = Date.UTC(2026, 9, 18, 14, 30);
+const LINKS = { account: `${APP}/#/account`, forgot: `${APP}/#/forgot-password` };
+const notice = (state) => ({
+    rule: "Checkout errors",
+    project: "shop",
+    state,
+    message: state === "fired" ? "Error rate is 7.4% (above 5)" : "Error rate is 1.2% (no longer above 5)",
+    value: state === "fired" ? 7.4 : 1.2,
+    threshold: 5,
+    timeMs: AT,
+    url: `${APP}/#/alerts?project=p1`,
+});
+const h = (value, previous) => ({ value, previous, change: ((value - previous) / previous) * 100, series: [] });
+const WEEK = {
+    empty: false,
+    requests: h(48_210, 41_900),
+    errorRate: h(1.8, 1.1),
+    avgMs: h(132, 140),
+    sqlQueries: h(310_442, 306_100),
+    p95Ms: 412,
+    errors: [
+        { type: "TimeoutError", message: "payments-api did not answer in 5000 ms", count: 214 },
+        { type: "TypeError", message: "Cannot read properties of null (reading 'total')", count: 37 },
+    ],
+    slowest: [
+        { endpoint: "POST /checkout", p95Ms: 1840, count: 3120 },
+        { endpoint: "GET /orders/:id", p95Ms: 620, count: 9811 },
+    ],
+    insights: [{ title: "N+1 query: SELECT * FROM order_items WHERE order_id = ?", occurrences: 9811 }],
+    alertsFired: 1,
+};
+export const SAMPLES = {
+    "verify-email": emails.verifyEmail(LINK),
+    "reset-password": emails.resetPassword(LINK),
+    "change-email": emails.changeEmail("new@acme.io", LINK),
+    "delete-account": emails.deleteAccount(LINK),
+    invite: emails.invite("Olive", "Acme", "member", LINK),
+    "alert-fired": emails.alert(notice("fired")),
+    "alert-resolved": emails.alert(notice("resolved")),
+    "security-password": security.passwordChanged(LINKS, AT),
+    "security-email": security.emailChanged(LINKS, "olive@new.io", AT),
+    "security-2fa-off": security.twoFactorChanged(LINKS, false, AT),
+    "security-passkey": security.passkeyChanged(LINKS, true, "MacBook Touch ID", AT),
+    "security-backup-codes": security.backupCodesMade(LINKS, AT),
+    "security-new-sign-in": security.newSignIn(LINKS, "Chrome on Windows", "203.0.113.7", AT),
+    "team-changes": teamChanges("Acme", [{ text: "Vic (vic@acme.io) made an ingest key for shop.", timeMs: AT }, { text: "Vic (vic@acme.io) invited ann@acme.io as member.", timeMs: AT + 60_000 }], `${APP}/#/team`, STOP),
+    "team-role": roleChanged("Acme", "admin", `${APP}/#/team`, STOP),
+    "team-org-deleted": orgDeleted("Acme", "Olive (olive@acme.io)", `${APP}/`),
+    "health-quiet": projectQuiet("shop", "Acme", AT, AT + 3 * 3_600_000, `${APP}/#/`, STOP),
+    "health-back": projectBack("shop", "Acme", 5 * 3_600_000, `${APP}/#/`, STOP),
+    "digest-weekly": digest("shop", "Acme", "weekly", WEEK, { project: `${APP}/#/`, stop: STOP }),
+    "digest-daily": digest("shop", "Acme", "daily", { ...WEEK, alertsFired: 0, errorRate: h(0.9, 1.4), errors: [] }, { project: `${APP}/#/`, stop: STOP }),
+};
+//# sourceMappingURL=samples.js.map

package/dist/mail/samples.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"samples.js","sourceRoot":"","sources":["../../src/mail/samples.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,QAAQ,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAExE,+EAA+E;AAC/E,MAAM,GAAG,GAAG,oCAAoC,CAAC;AACjD,MAAM,IAAI,GAAG,GAAG,GAAG,oCAAoC,CAAC;AACxD,MAAM,IAAI,GAAG,GAAG,GAAG,oCAAoC,CAAC;AACxD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AACzC,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,GAAG,GAAG,YAAY,EAAE,MAAM,EAAE,GAAG,GAAG,oBAAoB,EAAE,CAAC;AAElF,MAAM,MAAM,GAAG,CAAC,KAA2B,EAAE,EAAE,CAAC,CAAC;IAC/C,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,MAAM;IACf,KAAK;IACL,OAAO,EAAE,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,wCAAwC;IACtG,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IACpC,SAAS,EAAE,CAAC;IACZ,MAAM,EAAE,EAAE;IACV,GAAG,EAAE,GAAG,GAAG,sBAAsB;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAY,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,GAAG,QAAQ,CAAC,GAAG,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;AAE1I,MAAM,IAAI,GAAe;IACvB,KAAK,EAAE,KAAK;IACZ,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC;IACtB,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC;IAC/B,KAAK,EAAE,GAAG;IACV,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,wCAAwC,EAAE,KAAK,EAAE,GAAG,EAAE;QACvF,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kDAAkD,EAAE,KAAK,EAAE,EAAE,EAAE;KAC9F;IACD,OAAO,EAAE;QACP,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;QACxD,EAAE,QAAQ,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE;KACzD;IACD,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,yDAAyD,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACnG,WAAW,EAAE,CAAC;CACf,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAiC;IACnD,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;IACxC,gBAAgB,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC;IAC5C,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,IAAI,CAAC;IACvD,gBAAgB,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC;IAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC;IACtD,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAClD,mBAAmB,EAAE,QAAQ,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC;IACxD,gBAAgB,EAAE,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;IAClE,kBAAkB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;IAC/D,kBAAkB,EAAE,QAAQ,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,CAAC;IAChF,uBAAuB,EAAE,QAAQ,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC;IAC5D,sBAAsB,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,EAAE,CAAC;IACzF,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,gDAAgD,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,kDAAkD,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,EAAE,GAAG,GAAG,SAAS,EAAE,IAAI,CAAC;IACvN,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,SAAS,EAAE,IAAI,CAAC;IAChE,kBAAkB,EAAE,UAAU,CAAC,MAAM,EAAE,uBAAuB,EAAE,GAAG,GAAG,GAAG,CAAC;IAC1E,cAAc,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,GAAG,KAAK,EAAE,IAAI,CAAC;IACvF,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,SAAS,EAAE,GAAG,GAAG,KAAK,EAAE,IAAI,CAAC;IAC5E,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC7F,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;CACvJ,CAAC"}

package/dist/mail/stop-route.d.ts

@@ -0,0 +1,4 @@
+import type { Ctx } from "../app.js";
+/** GET shows a button (mail scanners open links, so a GET changes nothing). POST turns the mail off; it is also the RFC 8058 one-click call. */
+export declare function stopRoute(ctx: Ctx): Promise<void>;
+//# sourceMappingURL=stop-route.d.ts.map

package/dist/mail/stop-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop-route.d.ts","sourceRoot":"","sources":["../../src/mail/stop-route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AA0BrC,gJAAgJ;AAChJ,wBAAsB,SAAS,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAavD"}

package/dist/mail/stop-route.js

@@ -0,0 +1,41 @@
+import { readRawBody } from "../http/http.js";
+import { applyStop } from "../repo/mail-prefs.js";
+import { theme } from "./theme.js";
+import { readStop } from "./unsubscribe.js";
+const escape = (s) => s.replace(/[&<>"']/g, (c) => `&#${c.charCodeAt(0)};`);
+async function labelOf(ctx, scope) {
+    if (scope === "team")
+        return "emails about team changes";
+    if (scope === "health")
+        return "emails when a project goes quiet";
+    if (scope === "digests")
+        return "every digest";
+    const [p] = await ctx.app.db.query("SELECT name FROM projects WHERE id = $1", [scope.projectId]);
+    return `the ${scope.period} digest for ${p?.name ?? "this project"}`;
+}
+function page(ctx, status, title, body) {
+    const html = `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="robots" content="noindex">
+<title>${escape(title)}</title><style>body{margin:0;padding:48px 16px;background:${theme.page};font-family:${theme.sans};color:${theme.body}}
+main{max-width:480px;margin:0 auto;background:${theme.card};border:1px solid ${theme.line};border-radius:${theme.radius};padding:32px}
+h1{margin:0 0 12px;font-size:24px;letter-spacing:-0.02em;color:${theme.ink}}button{background:${theme.accent};color:#fff;border:0;border-radius:8px;padding:12px 20px;font:600 15px ${theme.sans};cursor:pointer}
+a{color:${theme.accent}}</style></head><body><main><h1>${escape(title)}</h1>${body}</main></body></html>`;
+    ctx.res.writeHead(status, { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store", "Content-Security-Policy": "default-src 'none'; style-src 'unsafe-inline'; form-action 'self'" });
+    ctx.res.end(html);
+}
+/** GET shows a button (mail scanners open links, so a GET changes nothing). POST turns the mail off; it is also the RFC 8058 one-click call. */
+export async function stopRoute(ctx) {
+    const token = ctx.url.searchParams.get("token") ?? "";
+    const stop = readStop(ctx.app.secrets, token);
+    if (!stop)
+        return page(ctx, 400, "This link does not work.", "<p>Change your emails on the Account page in WizeLens instead.</p>");
+    const label = await labelOf(ctx, stop.scope);
+    const account = `${ctx.app.baseUrl()}/_wizelens/#/account`;
+    if (ctx.req.method !== "POST") {
+        const form = `<form method="post" action="?token=${escape(encodeURIComponent(token))}"><button type="submit">Stop ${escape(label)}</button></form>`;
+        return page(ctx, 200, "Stop these emails?", `<p>You will not get ${escape(label)} any more.</p>${form}`);
+    }
+    await readRawBody(ctx.req);
+    await applyStop(ctx.app.db, stop.userId, stop.scope);
+    page(ctx, 200, "Done.", `<p>You will not get ${escape(label)} any more. Turn it back on any time on <a href="${escape(account)}">your Account page</a>.</p>`);
+}
+//# sourceMappingURL=stop-route.js.map

package/dist/mail/stop-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop-route.js","sourceRoot":"","sources":["../../src/mail/stop-route.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAkB,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAEpF,KAAK,UAAU,OAAO,CAAC,GAAQ,EAAE,KAAgB;IAC/C,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,2BAA2B,CAAC;IACzD,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,kCAAkC,CAAC;IAClE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC;IAC/C,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAmB,yCAAyC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACnH,OAAO,OAAO,KAAK,CAAC,MAAM,eAAe,CAAC,EAAE,IAAI,IAAI,cAAc,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,IAAI,CAAC,GAAQ,EAAE,MAAc,EAAE,KAAa,EAAE,IAAY;IACjE,MAAM,IAAI,GAAG;SACN,MAAM,CAAC,KAAK,CAAC,6DAA6D,KAAK,CAAC,IAAI,gBAAgB,KAAK,CAAC,IAAI,UAAU,KAAK,CAAC,IAAI;gDAC3F,KAAK,CAAC,IAAI,qBAAqB,KAAK,CAAC,IAAI,kBAAkB,KAAK,CAAC,MAAM;iEACtD,KAAK,CAAC,GAAG,sBAAsB,KAAK,CAAC,MAAM,0EAA0E,KAAK,CAAC,IAAI;UACtL,KAAK,CAAC,MAAM,mCAAmC,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,uBAAuB,CAAC;IACxG,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,eAAe,EAAE,UAAU,EAAE,yBAAyB,EAAE,mEAAmE,EAAE,CAAC,CAAC;IACvM,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC;AAED,gJAAgJ;AAChJ,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAQ;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,0BAA0B,EAAE,oEAAoE,CAAC,CAAC;IACnI,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAC3D,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,sCAAsC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,gCAAgC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACpJ,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,uBAAuB,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,uBAAuB,MAAM,CAAC,KAAK,CAAC,mDAAmD,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAChK,CAAC"}

package/dist/mail/svix.d.ts

@@ -0,0 +1,8 @@
+export interface SvixHeaders {
+    id: string | undefined;
+    timestamp: string | undefined;
+    signature: string | undefined;
+}
+/** True when a webhook body was signed with this `whsec_` secret (Svix, used by Resend) within the last 5 minutes. */
+export declare function verifySvix(secret: string, h: SvixHeaders, rawBody: string, nowMs: number): boolean;
+//# sourceMappingURL=svix.d.ts.map

package/dist/mail/svix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"svix.d.ts","sourceRoot":"","sources":["../../src/mail/svix.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,GAAG,SAAS,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/B;AAED,sHAAsH;AACtH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAUlG"}

package/dist/mail/svix.js

@@ -0,0 +1,17 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+const TOLERANCE_S = 5 * 60;
+/** True when a webhook body was signed with this `whsec_` secret (Svix, used by Resend) within the last 5 minutes. */
+export function verifySvix(secret, h, rawBody, nowMs) {
+    if (!h.id || !h.timestamp || !h.signature || !/^\d+$/.test(h.timestamp))
+        return false;
+    if (Math.abs(nowMs / 1000 - Number(h.timestamp)) > TOLERANCE_S)
+        return false;
+    const key = Buffer.from(secret.replace(/^whsec_/, ""), "base64");
+    const expected = createHmac("sha256", key).update(`${h.id}.${h.timestamp}.${rawBody}`).digest();
+    return h.signature.split(" ").some((entry) => {
+        const [version, sig = ""] = entry.split(",");
+        const given = Buffer.from(sig, "base64");
+        return version === "v1" && given.length === expected.length && timingSafeEqual(given, expected);
+    });
+}
+//# sourceMappingURL=svix.js.map

package/dist/mail/svix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"svix.js","sourceRoot":"","sources":["../../src/mail/svix.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,CAAC;AAQ3B,sHAAsH;AACtH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,CAAc,EAAE,OAAe,EAAE,KAAa;IACvF,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,WAAW;QAAE,OAAO,KAAK,CAAC;IAC7E,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAChG,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3C,MAAM,CAAC,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACzC,OAAO,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/mail/templates.d.ts

@@ -0,0 +1,12 @@
+import type { Notice } from "../alerts/notify.js";
+import type { EmailContent } from "./content.js";
+import type { Mail } from "./mailer.js";
+/** One email for one address: the layout as HTML, and the same content as plain text. */
+export declare function renderMail(to: string, content: EmailContent): Promise<Mail>;
+export declare const verifyEmailMail: (to: string, url: string) => Promise<Mail>;
+export declare const resetPasswordMail: (to: string, url: string) => Promise<Mail>;
+export declare const changeEmailMail: (to: string, newEmail: string, url: string) => Promise<Mail>;
+export declare const deleteAccountMail: (to: string, url: string) => Promise<Mail>;
+export declare const inviteMail: (to: string, inviter: string, org: string, role: string, url: string) => Promise<Mail>;
+export declare const alertMail: (to: string, notice: Notice) => Promise<Mail>;
+//# sourceMappingURL=templates.d.ts.map

package/dist/mail/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../src/mail/templates.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAGjD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAGxC,yFAAyF;AACzF,wBAAsB,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAIjF;AAED,eAAO,MAAM,eAAe,OAAQ,MAAM,OAAO,MAAM,kBAA4C,CAAC;AACpG,eAAO,MAAM,iBAAiB,OAAQ,MAAM,OAAO,MAAM,kBAA8C,CAAC;AACxG,eAAO,MAAM,eAAe,OAAQ,MAAM,YAAY,MAAM,OAAO,MAAM,kBAAsD,CAAC;AAChI,eAAO,MAAM,iBAAiB,OAAQ,MAAM,OAAO,MAAM,kBAA8C,CAAC;AACxG,eAAO,MAAM,UAAU,OAAQ,MAAM,WAAW,MAAM,OAAO,MAAM,QAAQ,MAAM,OAAO,MAAM,kBAA2D,CAAC;AAC1J,eAAO,MAAM,SAAS,OAAQ,MAAM,UAAU,MAAM,kBAAyC,CAAC"}

package/dist/mail/templates.js

@@ -0,0 +1,18 @@
+import { render } from "@react-email/components";
+import { createElement } from "react";
+import * as emails from "./emails.js";
+import { EmailLayout } from "./layout.js";
+import { textOf } from "./text.js";
+/** One email for one address: the layout as HTML, and the same content as plain text. */
+export async function renderMail(to, content) {
+    const html = await render(createElement(EmailLayout, { content }));
+    const headers = content.unsubscribe && { "List-Unsubscribe": `<${content.unsubscribe.url}>`, "List-Unsubscribe-Post": "List-Unsubscribe=One-Click" };
+    return { kind: content.kind, to, subject: content.subject, html, text: textOf(content), ...(headers ? { headers } : {}) };
+}
+export const verifyEmailMail = (to, url) => renderMail(to, emails.verifyEmail(url));
+export const resetPasswordMail = (to, url) => renderMail(to, emails.resetPassword(url));
+export const changeEmailMail = (to, newEmail, url) => renderMail(to, emails.changeEmail(newEmail, url));
+export const deleteAccountMail = (to, url) => renderMail(to, emails.deleteAccount(url));
+export const inviteMail = (to, inviter, org, role, url) => renderMail(to, emails.invite(inviter, org, role, url));
+export const alertMail = (to, notice) => renderMail(to, emails.alert(notice));
+//# sourceMappingURL=templates.js.map

package/dist/mail/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/mail/templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAGtC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEnC,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAU,EAAE,OAAqB;IAChE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,kBAAkB,EAAE,IAAI,OAAO,CAAC,WAAW,CAAC,GAAG,GAAG,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,CAAC;IACrJ,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC5H,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAAU,EAAE,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;AACpG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,EAAU,EAAE,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;AACxG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAAU,EAAE,QAAgB,EAAE,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;AAChI,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,EAAU,EAAE,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;AACxG,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,EAAU,EAAE,OAAe,EAAE,GAAW,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AAC1J,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,MAAc,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC"}

package/dist/mail/text.d.ts

@@ -0,0 +1,4 @@
+import type { EmailContent } from "./content.js";
+/** The plain-text version. Each link sits on its own line, so mail apps keep it whole. */
+export declare function textOf(c: EmailContent): string;
+//# sourceMappingURL=text.d.ts.map

package/dist/mail/text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.d.ts","sourceRoot":"","sources":["../../src/mail/text.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAS,YAAY,EAAE,MAAM,cAAc,CAAC;AAUxD,0FAA0F;AAC1F,wBAAgB,MAAM,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAI9C"}

package/dist/mail/text.js

@@ -0,0 +1,17 @@
+import { theme } from "./theme.js";
+const block = (b) => {
+    if (b.kind === "facts")
+        return b.rows.map((r) => `${r.label}: ${r.value}`).join("\n");
+    if (b.kind === "stats")
+        return b.items.map((s) => `${s.label}: ${s.value}${s.change ? ` (${s.change})` : ""}`).join("\n");
+    if (b.kind === "list")
+        return [b.title, ...b.items.map((i) => `- ${i.text}${i.meta ? ` (${i.meta})` : ""}`)].join("\n");
+    return b.text;
+};
+/** The plain-text version. Each link sits on its own line, so mail apps keep it whole. */
+export function textOf(c) {
+    const action = c.action ? [`${c.action.label}:`, c.action.url, ""] : [];
+    const stop = c.unsubscribe ? [`${c.unsubscribe.label}:`, c.unsubscribe.url] : [];
+    return [c.heading, "", ...c.blocks.flatMap((b) => [block(b), ""]), ...action, "--", c.footer, ...stop, theme.company, ""].join("\n");
+}
+//# sourceMappingURL=text.js.map

package/dist/mail/text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.js","sourceRoot":"","sources":["../../src/mail/text.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,MAAM,KAAK,GAAG,CAAC,CAAQ,EAAU,EAAE;IACjC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1H,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxH,OAAO,CAAC,CAAC,IAAI,CAAC;AAChB,CAAC,CAAC;AAEF,0FAA0F;AAC1F,MAAM,UAAU,MAAM,CAAC,CAAe;IACpC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvI,CAAC"}

package/dist/mail/theme.d.ts

@@ -0,0 +1,32 @@
+export declare const theme: {
+    readonly page: "#f6f7f9";
+    readonly card: "#ffffff";
+    readonly line: "#e5e8ee";
+    readonly ink: "#1f1f1f";
+    readonly body: "#3d4350";
+    readonly muted: "#586273";
+    readonly accent: "#2563eb";
+    readonly accentText: "#ffffff";
+    readonly factsBg: "#f6f7f9";
+    readonly tone: {
+        readonly neutral: "#2563eb";
+        readonly good: "#22c55e";
+        readonly warn: "#f4b400";
+        readonly bad: "#e63946";
+    };
+    readonly sans: 'Inter, ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif';
+    readonly mono: 'ui-monospace, SFMono-Regular, Menlo, Consolas, "Liberation Mono", monospace';
+    readonly radius: "12px";
+    readonly width: 560;
+    /** The mark with its center dot in the tone color. The site build makes these (site/scripts/og/build.mjs). */
+    readonly markUrl: {
+        readonly neutral: "https://wizelens.com/brand/mail-neutral.png";
+        readonly good: "https://wizelens.com/brand/mail-good.png";
+        readonly warn: "https://wizelens.com/brand/mail-warn.png";
+        readonly bad: "https://wizelens.com/brand/mail-bad.png";
+    };
+    readonly homeUrl: "https://wizelens.com";
+    readonly company: "WizeLens by WizeWorks LLC, Visalia, California";
+};
+export type Tone = keyof typeof theme.tone;
+//# sourceMappingURL=theme.d.ts.map

package/dist/mail/theme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme.d.ts","sourceRoot":"","sources":["../../src/mail/theme.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,KAAK;aAChB,IAAI,EAAE,SAAS;aACf,IAAI,EAAE,SAAS;aACf,IAAI,EAAE,SAAS;aACf,GAAG,EAAE,SAAS;aACd,IAAI,EAAE,SAAS;aACf,KAAK,EAAE,SAAS;aAChB,MAAM,EAAE,SAAS;aACjB,UAAU,EAAE,SAAS;aACrB,OAAO,EAAE,SAAS;aAClB,IAAI;iBAAI,OAAO,EAAE,SAAS;iBAAE,IAAI,EAAE,SAAS;iBAAE,IAAI,EAAE,SAAS;iBAAE,GAAG,EAAE,SAAS;;aAC5E,IAAI,EAAE,kGAAkG;aACxG,IAAI,EAAE,6EAA6E;aACnF,MAAM,EAAE,MAAM;aACd,KAAK,EAAE,GAAG;IACV,8GAA8G;aAC9G,OAAO;iBACL,OAAO,EAAE,6CAA6C;iBACtD,IAAI,EAAE,0CAA0C;iBAChD,IAAI,EAAE,0CAA0C;iBAChD,GAAG,EAAE,yCAAyC;;aAEhD,OAAO,EAAE,sBAAsB;aAC/B,OAAO,EAAE,gDAAgD;CACjD,CAAC;AAEX,MAAM,MAAM,IAAI,GAAG,MAAM,OAAO,KAAK,CAAC,IAAI,CAAC"}

package/dist/mail/theme.js

@@ -0,0 +1,27 @@
+// The look of every email, from the WizeLens brand guide. Solid colors only. A new design changes this file and layout.tsx.
+export const theme = {
+    page: "#f6f7f9",
+    card: "#ffffff",
+    line: "#e5e8ee",
+    ink: "#1f1f1f",
+    body: "#3d4350",
+    muted: "#586273",
+    accent: "#2563eb",
+    accentText: "#ffffff",
+    factsBg: "#f6f7f9",
+    tone: { neutral: "#2563eb", good: "#22c55e", warn: "#f4b400", bad: "#e63946" },
+    sans: 'Inter, ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif',
+    mono: 'ui-monospace, SFMono-Regular, Menlo, Consolas, "Liberation Mono", monospace',
+    radius: "12px",
+    width: 560,
+    /** The mark with its center dot in the tone color. The site build makes these (site/scripts/og/build.mjs). */
+    markUrl: {
+        neutral: "https://wizelens.com/brand/mail-neutral.png",
+        good: "https://wizelens.com/brand/mail-good.png",
+        warn: "https://wizelens.com/brand/mail-warn.png",
+        bad: "https://wizelens.com/brand/mail-bad.png",
+    },
+    homeUrl: "https://wizelens.com",
+    company: "WizeLens by WizeWorks LLC, Visalia, California",
+};
+//# sourceMappingURL=theme.js.map

package/dist/mail/theme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"theme.js","sourceRoot":"","sources":["../../src/mail/theme.ts"],"names":[],"mappings":"AAAA,4HAA4H;AAC5H,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;IACjB,UAAU,EAAE,SAAS;IACrB,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE;IAC9E,IAAI,EAAE,kGAAkG;IACxG,IAAI,EAAE,6EAA6E;IACnF,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,GAAG;IACV,8GAA8G;IAC9G,OAAO,EAAE;QACP,OAAO,EAAE,6CAA6C;QACtD,IAAI,EAAE,0CAA0C;QAChD,IAAI,EAAE,0CAA0C;QAChD,GAAG,EAAE,yCAAyC;KAC/C;IACD,OAAO,EAAE,sBAAsB;IAC/B,OAAO,EAAE,gDAAgD;CACjD,CAAC"}

package/dist/mail/unsubscribe.d.ts

@@ -0,0 +1,14 @@
+import type { CloudApp } from "../app.js";
+import { type StopScope } from "../repo/mail-prefs.js";
+export declare const UNSUBSCRIBE_PATH = "api/mail/unsubscribe";
+export declare function signStop(secret: string, userId: string, scope: StopScope): string;
+/** Who and what a stop token names, when any of the secrets signed it. */
+export declare function readStop(secrets: readonly {
+    value: string;
+}[], token: string): {
+    userId: string;
+    scope: StopScope;
+} | null;
+/** The stop link for one person and one kind of mail. */
+export declare const stopUrl: (app: CloudApp, userId: string, scope: StopScope) => string;
+//# sourceMappingURL=unsubscribe.d.ts.map

package/dist/mail/unsubscribe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsubscribe.d.ts","sourceRoot":"","sources":["../../src/mail/unsubscribe.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAqC,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAE1F,eAAO,MAAM,gBAAgB,yBAAyB,CAAC;AAcvD,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,MAAM,CAGjF;AAED,0EAA0E;AAC1E,wBAAgB,QAAQ,CAAC,OAAO,EAAE,SAAS;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAAG,IAAI,CAe1H;AAED,yDAAyD;AACzD,eAAO,MAAM,OAAO,QAAS,QAAQ,UAAU,MAAM,SAAS,SAAS,KAAG,MACgC,CAAC"}

package/dist/mail/unsubscribe.js

@@ -0,0 +1,39 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { DIGEST_PERIODS } from "../repo/mail-prefs.js";
+export const UNSUBSCRIBE_PATH = "api/mail/unsubscribe";
+// Stop links carry who and what, signed with the auth secret. They never expire: a stop link must keep working.
+const keyOf = (secret) => createHmac("sha256", secret).update("wizelens-unsubscribe").digest();
+const mac = (secret, payload) => createHmac("sha256", keyOf(secret)).update(payload).digest();
+const scopeText = (s) => (typeof s === "object" ? `digest:${s.projectId}:${s.period}` : s);
+function scopeOf(text) {
+    if (text === "team" || text === "health" || text === "digests")
+        return text;
+    const m = /^digest:([^:]+):([a-z]+)$/.exec(text);
+    return m && DIGEST_PERIODS.includes(m[2]) ? { projectId: m[1], period: m[2] } : null;
+}
+export function signStop(secret, userId, scope) {
+    const payload = Buffer.from(JSON.stringify([userId, scopeText(scope)])).toString("base64url");
+    return `${payload}.${mac(secret, payload).toString("base64url")}`;
+}
+/** Who and what a stop token names, when any of the secrets signed it. */
+export function readStop(secrets, token) {
+    const [payload = "", sig = ""] = token.split(".");
+    const given = Buffer.from(sig, "base64url");
+    const ok = secrets.some((s) => {
+        const want = mac(s.value, payload);
+        return given.length === want.length && timingSafeEqual(given, want);
+    });
+    if (!ok)
+        return null;
+    try {
+        const [userId, scope] = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+        const parsed = typeof scope === "string" ? scopeOf(scope) : null;
+        return typeof userId === "string" && parsed ? { userId, scope: parsed } : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** The stop link for one person and one kind of mail. */
+export const stopUrl = (app, userId, scope) => `${app.baseUrl()}/_wizelens/${UNSUBSCRIBE_PATH}?token=${signStop(app.secrets[0].value, userId, scope)}`;
+//# sourceMappingURL=unsubscribe.js.map

package/dist/mail/unsubscribe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsubscribe.js","sourceRoot":"","sources":["../../src/mail/unsubscribe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,cAAc,EAAqC,MAAM,uBAAuB,CAAC;AAE1F,MAAM,CAAC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAEvD,gHAAgH;AAChH,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,MAAM,EAAE,CAAC;AACvG,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AAE9G,MAAM,SAAS,GAAG,CAAC,CAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtG,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5E,MAAM,CAAC,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACxH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,MAAc,EAAE,KAAgB;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC9F,OAAO,GAAG,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,QAAQ,CAAC,OAAqC,EAAE,KAAa;IAC3E,MAAM,CAAC,OAAO,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAuB,CAAC;QAC7G,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjE,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAa,EAAE,MAAc,EAAE,KAAgB,EAAU,EAAE,CACjF,GAAG,GAAG,CAAC,OAAO,EAAE,cAAc,gBAAgB,UAAU,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC"}

package/dist/mail/webhook.d.ts

@@ -0,0 +1,5 @@
+import type { Ctx } from "../app.js";
+export declare const RESEND_WEBHOOK_PATH = "api/mail/resend";
+/** POST from Resend's webhook, signed with the endpoint's secret. Hard bounces and complaints go on the suppression list. */
+export declare function resendWebhook(ctx: Ctx): Promise<void>;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/mail/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/mail/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAKrC,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAoBrD,6HAA6H;AAC7H,wBAAsB,aAAa,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB3D"}