mailery 0.16.4 → 0.16.6

package/dist/index.cjs

@@ -8271,7 +8271,35 @@ function unitToMs2(value, unit) {
 }
 
 // src/server/api/agent.ts
-var VERSION = "0.16.4" ;
+var VERSION = "0.16.6" ;
+var agentTagsInputSchema = zod.z.object({
+  add: zod.z.array(zod.z.string().min(1).max(128)).max(25).default([]),
+  remove: zod.z.array(zod.z.string().min(1).max(128)).max(25).default([])
+});
+var publishTemplateInputSchema = zod.z.object({
+  name: zod.z.string().min(1).max(200),
+  description: zod.z.string().max(2e3).default(""),
+  kind: zod.z.enum(["marketing", "transactional"]),
+  fromName: zod.z.string().min(1).max(200),
+  fromEmail: zod.z.string().email(),
+  replyTo: zod.z.string().email().nullable().default(null),
+  providerOverride: zod.z.string().min(1).nullable().default(null),
+  subject: zod.z.string().min(1).max(998),
+  preheader: zod.z.string().max(998).default(""),
+  body: zod.z.object({
+    mjml: zod.z.string().default(""),
+    editorJson: zod.z.record(zod.z.string(), zod.z.unknown()).nullable().default(null),
+    html: zod.z.string().default(""),
+    plainText: zod.z.string().default("")
+  }),
+  variablesSchema: zod.z.record(zod.z.string(), zod.z.unknown()).default({}),
+  tags: zod.z.array(zod.z.string().min(1).max(100)).max(50).default([]),
+  bodyFormat: zod.z.enum(["multipart", "text_only"]).default("multipart"),
+  trackOpens: zod.z.boolean().default(true),
+  trackClicks: zod.z.boolean().default(true),
+  /** Recorded as the publisher; defaults to the token's actor. */
+  publishedBy: zod.z.string().min(1).max(200).optional()
+});
 var MIN_AGENT_TOKEN_LENGTH = 24;
 function createAgentRouter(mailer, opts) {
   if (!opts || !Array.isArray(opts.tokens) || opts.tokens.length === 0) {
@@ -8454,6 +8482,119 @@ function createAgentRouter(mailer, opts) {
       res.status(201).json({ sendId, dedupeKey, dispatched: dispatchNow, send: send ? sendSummary(send) : null });
     })
   );
+  router.put(
+    "/templates/:slug",
+    wrap2(async (req, res) => {
+      const slugParse = slugSchema.safeParse(String(req.params.slug));
+      if (!slugParse.success) {
+        return res.status(400).json({ error: "validation_failed", message: "slug must be lowercase letters, digits and hyphens" });
+      }
+      const slug = slugParse.data;
+      const parsed = publishTemplateInputSchema.safeParse(req.body ?? {});
+      if (!parsed.success) {
+        return res.status(400).json({
+          error: "validation_failed",
+          message: parsed.error.issues.map((i) => `${i.path.join(".") || "body"}: ${i.message}`).join("; ")
+        });
+      }
+      const input = parsed.data;
+      if (!input.body.html.trim()) {
+        return res.status(400).json({
+          error: "empty_body",
+          message: "body.html is required \u2014 this route publishes compiled HTML; a draft goes through POST /api/templates/:slug/publish"
+        });
+      }
+      const senderCheck = validateSenderDomain(input.fromEmail, input.kind, mailer.config.senderDomains);
+      if (!senderCheck.ok) {
+        return res.status(400).json({ error: "sender_domain_invalid", code: senderCheck.code, message: senderCheck.reason });
+      }
+      const plainText = input.body.plainText.trim() ? input.body.plainText : derivePlaintext(input.body.html);
+      const lint = lintTemplate(
+        {
+          subject: input.subject,
+          preheader: input.preheader,
+          mjml: input.body.mjml,
+          editorJson: input.body.editorJson ?? void 0,
+          html: input.body.html,
+          plainText,
+          kind: input.kind,
+          fromEmail: input.fromEmail
+        },
+        { senderDomains: mailer.config.senderDomains, varsJsonSchema: varsSchema }
+      );
+      if (lint.errors.length > 0) {
+        return res.status(422).json({
+          error: "lint_failed",
+          message: `Template publish blocked by ${lint.errors.length} content issue(s).`,
+          lint
+        });
+      }
+      const now = /* @__PURE__ */ new Date();
+      const publishedBy = input.publishedBy ?? actorOf(req);
+      const set = {
+        slug,
+        name: input.name,
+        description: input.description,
+        kind: input.kind,
+        fromName: input.fromName,
+        fromEmail: input.fromEmail,
+        replyTo: input.replyTo,
+        providerOverride: input.providerOverride,
+        subject: input.subject,
+        preheader: input.preheader,
+        body: {
+          mjml: input.body.mjml,
+          editorJson: input.body.editorJson,
+          html: input.body.html,
+          plainText,
+          compiledAt: now
+        },
+        variablesSchema: input.variablesSchema,
+        draft: null,
+        tags: input.tags,
+        bodyFormat: input.bodyFormat,
+        trackOpens: input.trackOpens,
+        trackClicks: input.trackClicks,
+        publishedAt: now,
+        publishedBy,
+        updatedAt: now
+      };
+      const result = await c.templates.updateOne(
+        { slug },
+        {
+          $set: set,
+          $setOnInsert: {
+            createdAt: now,
+            stats: { sent: 0, delivered: 0, opened: 0, clicked: 0, bounced: 0, complained: 0, unsubscribed: 0, lastSentAt: null }
+          }
+        },
+        { upsert: true }
+      );
+      const created = result.upsertedCount > 0;
+      const stored = await c.templates.findOne({ slug });
+      await mailer.audit({
+        actor: actorOf(req),
+        action: "agent.template.publish",
+        resource: { collection: "mailer_templates", id: stored?._id, slug },
+        diffSummary: `${created ? "created" : "updated"} kind=${input.kind} html=${Buffer.byteLength(input.body.html, "utf8")}B trackOpens=${input.trackOpens} trackClicks=${input.trackClicks}`
+      });
+      res.status(created ? 201 : 200).json({
+        slug,
+        created,
+        lint: { warnings: lint.warnings, infos: lint.infos },
+        template: {
+          slug,
+          kind: input.kind,
+          subject: input.subject,
+          fromEmail: input.fromEmail,
+          trackOpens: input.trackOpens,
+          trackClicks: input.trackClicks,
+          publishedAt: now,
+          publishedBy
+        }
+      });
+    })
+  );
   router.get(
     "/sends/:id/wait",
     wrap2(async (req, res) => {
@@ -8738,6 +8879,41 @@ function createAgentRouter(mailer, opts) {
       res.json({ subscription: sub });
     })
   );
+  router.post(
+    "/contacts/:externalId/tags",
+    wrap2(async (req, res) => {
+      const contact = await loadContact(res, String(req.params.externalId));
+      if (!contact) return;
+      if (!guardTestContact(res, contact)) return;
+      const parsed = agentTagsInputSchema.safeParse(req.body ?? {});
+      if (!parsed.success) {
+        return res.status(400).json({ error: "validation_failed", issues: parsed.error.issues });
+      }
+      const { add, remove } = parsed.data;
+      if (add.length === 0 && remove.length === 0) {
+        return res.status(400).json({ error: "no_tags", message: "Pass {add: [...]} and/or {remove: [...]}." });
+      }
+      const overlap = add.filter((t) => remove.includes(t));
+      if (overlap.length > 0) {
+        return res.status(400).json({ error: "tag_conflict", tags: overlap });
+      }
+      for (const tag of add) await mailer.tag(contact.externalId, tag);
+      for (const tag of remove) await mailer.untag(contact.externalId, tag);
+      const after = await mailer.adapter.getById(contact.externalId);
+      await mailer.audit({
+        actor: actorOf(req),
+        action: "agent.contact.tags",
+        resource: { collection: "contacts", id: contact.externalId },
+        diffSummary: `${contact.email}: ${add.length ? `+${add.join(", +")}` : ""}${add.length && remove.length ? " " : ""}${remove.length ? `-${remove.join(", -")}` : ""}`
+      });
+      res.json({
+        contact: { externalId: contact.externalId, email: contact.email },
+        added: add,
+        removed: remove,
+        tags: after?.tags ?? []
+      });
+    })
+  );
   router.post(
     "/contacts/:externalId/reset",
     wrap2(async (req, res) => {
@@ -9238,6 +9414,7 @@ var ENDPOINTS = [
   { method: "POST", path: "/templates/verify-all", summary: "Verify every template (or {slugs}) for each of {contactIds}; a matrix of pass/fail." },
   { method: "POST", path: "/templates/:slug/render", summary: "Render for a contact and return subject, preheader, HTML, plain text, resolved vars and the signed unsubscribe URL." },
   { method: "POST", path: "/templates/:slug/send", summary: 'A real send through the pipeline to a test contact ({contactId}); dispatched inline unless {dispatch: "queue"}. Returns the sendId.', testContactsOnly: true },
+  { method: "PUT", path: "/templates/:slug", summary: "Publish a compiled template document (html, plain text, kind, sender, subject, tracking flags) with the sender-domain and lint gates; upserts on slug, keeping createdAt and stats. The deploy-script path over HTTP." },
   { method: "GET", path: "/sends/:id/wait?status=delivered&timeoutMs=30000", summary: "Long-poll a send until it reaches sent | delivered | opened | clicked | terminal, with its webhook events." },
   { method: "POST", path: "/sends/:id/dispatch", summary: "Dispatch a queued send now (test contacts only).", testContactsOnly: true },
   { method: "POST", path: "/flows/:slug/simulate", summary: "Dry-run the flow for {contactId} from {at} with {eventProperties}: the path taken, every gate verdict, projected send times, where it ends. Writes nothing." },
@@ -9255,6 +9432,7 @@ var ENDPOINTS = [
   { method: "GET", path: "/contacts/:externalId/unsubscribe-url", summary: "A signed one-click unsubscribe URL for a test contact, to exercise POST /m/unsub/:token.", testContactsOnly: true },
   { method: "POST", path: "/contacts/:externalId/subscribe", summary: "Subscribe a test contact.", testContactsOnly: true },
   { method: "POST", path: "/contacts/:externalId/unsubscribe", summary: "Unsubscribe a test contact (marketing scope).", testContactsOnly: true },
+  { method: "POST", path: "/contacts/:externalId/tags", summary: "Add or remove tags on a test contact ({add: [...], remove: [...]}), so a gated flow lets it through.", testContactsOnly: true },
   { method: "POST", path: "/contacts/:externalId/reset", summary: "Delete a test contact's runs, sends, events ({events: [names]} to narrow) and suppressions, then resubscribe. Each part can be turned off with false.", testContactsOnly: true },
   { method: "POST", path: "/tick", summary: "Run the runner tick now (trigger scan, sweeps, outbox, webhook backlog)." },
   { method: "GET", path: "/webhooks/status", summary: "Provider webhook ingest: last event received, counts by type (24h), unprocessed backlog." },
@@ -9971,7 +10149,7 @@ var DEDUPE_POLICIES = [
 ];
 
 // src/server/index.ts
-var VERSION2 = "0.16.4" ;
+var VERSION2 = "0.16.6" ;
 
 exports.DEDUPE_POLICIES = DEDUPE_POLICIES;
 exports.DEFAULT_BOT_UA_RE = DEFAULT_BOT_UA_RE;