backend-manager 5.0.185 → 5.0.186

package/CHANGELOG.md

@@ -14,6 +14,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - `Fixed` for any bug fixes.
 - `Security` in case of vulnerabilities.
 
+# [5.0.186] - 2026-04-01
+### Fixed
+- Move markdown rendering and UTM link tagging to run after `_.merge()` so caller overrides to `body.message` and `email.body` are properly processed
+
 # [5.0.185] - 2026-04-01
 ### Changed
 - Use `_.merge` for dynamic template data so callers can override any nested field (e.g. `email.preview`, `personalization.name`, `data.body.*`)

package/TODO-2.md

@@ -10,10 +10,26 @@ payments/reactivate
 payments/upgrade
   * takes a subscription id and a new plan id and upgrades the user's subscription to the new plan. this can only be done if the user has an active subscription.
 
+I'd call that cancellation-reversed — it pairs naturally with the existing cancellation-requested transition and clearly communicates the action (they reversed/undid the pending cancellation).
+
+on the email we send, for payment recovered what is the category
+Let me check the handler.
+
+Read payment-recovered.js
+The category is order/payment-recovered (line 13).
+
+TODO-2.md
+waht about when they request a cancel
+Read cancellation-requested.js
+The category is order/cancellation-requested (line 13).
+
 ---
 GHOSTII REVAMP
 * better logic for generating posts. better model? claude?
 
+---- MCP
+* ability for consuming prjec to specify MCP functions
+
 -------
 UPSELL
 * products in BEM can have an UPSELL where you link another product ID and it allows you to add it to your cart OR shows you after checkout?

package/TODO-email-auth.md

@@ -0,0 +1,14 @@
+https://github.com/disposable-email-domains/disposable-email-domains?tab=readme-ov-file
+https://www.npmjs.com/package/disposable-domains
+https://github.com/tompec/disposable-email-domains
+
+Two repos:
+
+Repo	Domains	Approach
+disposable-email-domains/disposable-email-domains	5,359	Curated, conservative, high confidence
+ivolo/disposable-email-domains	121,569	Aggressive, aggregated from many sources, more false positives
+Our current list has 854 — so even the smaller curated list is 6x larger.
+
+For our use case (currently only used to skip marketing sync, not blocking signups), I'd recommend the 5,359 curated list — it's comprehensive enough without being overly aggressive. And if we ever do use it for blocking signups, the false positive risk is much lower.
+
+Want to swap to that one?

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "backend-manager",
-  "version": "5.0.185",
+  "version": "5.0.186",
   "description": "Quick tools for developing Firebase functions",
   "main": "src/manager/index.js",
   "bin": {

package/src/manager/libraries/email/transactional/index.js

@@ -188,30 +188,6 @@ Transactional.prototype.build = async function (settings) {
     signoff.urlText = signoff.urlText || '@ianwieds';
   }
 
-  // Process markdown in body fields
-  if (settings?.data?.body?.message) {
-    settings.data.body.message = md.render(settings.data.body.message);
-  }
-  if (settings?.data?.email?.body) {
-    settings.data.email.body = md.render(settings.data.email.body);
-  }
-
-  // Tag links with UTM params for attribution
-  const utmOptions = {
-    brandUrl: brand?.url,
-    brandId: brand?.id,
-    campaign: settings.sender || templateId,
-    type: 'transactional',
-    utm: settings.utm,
-  };
-
-  if (settings?.data?.body?.message) {
-    settings.data.body.message = tagLinks(settings.data.body.message, utmOptions);
-  }
-  if (settings?.data?.email?.body) {
-    settings.data.email.body = tagLinks(settings.data.email.body, utmOptions);
-  }
-
   // Build dynamic template data defaults
   const dynamicTemplateData = {
     email: {
@@ -242,6 +218,30 @@ Transactional.prototype.build = async function (settings) {
     _.merge(dynamicTemplateData, settings.data);
   }
 
+  // Process markdown in body fields (after merge so all data paths are resolved)
+  if (dynamicTemplateData.data?.body?.message) {
+    dynamicTemplateData.data.body.message = md.render(dynamicTemplateData.data.body.message);
+  }
+  if (dynamicTemplateData.email?.body) {
+    dynamicTemplateData.email.body = md.render(dynamicTemplateData.email.body);
+  }
+
+  // Tag links with UTM params for attribution
+  const utmOptions = {
+    brandUrl: brand?.url,
+    brandId: brand?.id,
+    campaign: settings.sender || templateId,
+    type: 'transactional',
+    utm: settings.utm,
+  };
+
+  if (dynamicTemplateData.data?.body?.message) {
+    dynamicTemplateData.data.body.message = tagLinks(dynamicTemplateData.data.body.message, utmOptions);
+  }
+  if (dynamicTemplateData.email?.body) {
+    dynamicTemplateData.email.body = tagLinks(dynamicTemplateData.email.body, utmOptions);
+  }
+
   // Build the email object
   const email = {
     to,