Email content
Markdown supports GFM. MDX combines Markdown, JSX, and permitted React Email components. Authored JavaScript runs only in QuickJS WebAssembly, with memory, CPU, size, and depth limits.
The interpreter has no access to Node, files, the network, or environment variables. Only a serialized element tree leaves it; the application validates that tree, renders it, and sanitizes the HTML. Previews use an authenticated route and a sandboxed iframe.
Edit wrappers in resources/js/emails, run npm run build:emails, and commit resources/emails as well. The outer document, branding, and unsubscribe footer are controlled by the application.