@cosmicdrift/kumiko-bundled-features 0.174.0 → 0.176.0

package/src/legal-pages/feature.ts

@@ -1,7 +1,8 @@
 import {
-  requireTextContent,
-  type TextContentApi,
-} from "@cosmicdrift/kumiko-bundled-features/text-content";
+  requireTemplateResolver,
+  TEXT_BLOCK_KIND,
+  type TemplateResolverApi,
+} from "@cosmicdrift/kumiko-bundled-features/template-resolver";
 import { computeRevisionEtag, etagMatches } from "@cosmicdrift/kumiko-framework/api";
 import {
   defineFeature,
@@ -12,22 +13,26 @@ import { cachedSecurePageResponse } from "../page-render";
 import { LEGAL_REQUIRED_BLOCKS, LEGAL_ROUTES } from "./constants";
 import { renderMarkdownToHtml, wrapInLayout } from "./markdown";
 
-// QN-Konstante als dokumentierter Public-Contract des text-content-
+// QN-Konstante als dokumentierter Public-Contract des template-resolver-
 // Features. Ein magic-string statt eines Code-Imports ist hier explizit
 // gewollt: Cross-Feature-Calls gehen nur über stable Public-API
 // (handler-name + payload-shape), nicht über interne Module-Refs. Wenn
-// text-content's Handler-Name sich ändert, ist das ein semver-major
+// template-resolver's Handler-Name sich ändert, ist das ein semver-major
 // und muss in beiden Features synchronisiert werden — gleiches Risiko
 // wie bei jedem API-Endpunkt.
-const TEXT_CONTENT_BY_SLUG_QN = "text-content:query:by-slug";
+const TEXT_BLOCK_BY_SLUG_QN = "template-resolver:query:by-slug";
 
-// Return-Shape von bySlugQuery (text-content/handlers/by-slug.query.ts).
-type TextBlockQueryResult = { title: string; body: string | null; updatedAt: string } | null;
+// Return shape of bySlugQuery (template-resolver/handlers/by-slug.query.ts).
+type TextBlockQueryResult = {
+  title: string | null;
+  content: string | null;
+  updatedAt: string;
+} | null;
 
 // 60s-shared-cache saves the origin-revalidate roundtrip; legal-content edits are live within 60s.
 const PUBLIC_PAGE_CACHE = { kind: "revalidate", maxAgeSeconds: 60 } as const;
 
-// legal-pages — Opt-in-Wrapper um text-content für DACH-Compliance.
+// legal-pages — Opt-in-Wrapper um template-resolver (kind text-block) für DACH-Compliance.
 // Liefert vier feste Public-HTML-Routes (/legal/impressum,
 // /legal/datenschutz, /legal/imprint, /legal/privacy) mit
 // Markdown→HTML-Rendering und einen Boot-Check der in Production hart
@@ -35,14 +40,14 @@ const PUBLIC_PAGE_CACHE = { kind: "revalidate", maxAgeSeconds: 60 } as const;
 //
 // Cross-Feature-Decoupling:
 //   • Routes nutzen app.fetch zu "/api/query" mit dem QN-string
-//     `text-content:query:by-slug` — kein Code-Import von text-content
-//   • Boot-Check nutzt ctx.textContent (über extraContext) — symmetrisch
+//     `template-resolver:query:by-slug` — kein Code-Import von template-resolver
+//   • Boot-Check nutzt ctx.templateResolver (über extraContext) — symmetrisch
 //     zum config/tenant-Pattern
-//   • Single Type-Import (TextContentApi) bleibt — type-only verstößt
+//   • Single Type-Import (TemplateResolverApi) bleibt — type-only verstößt
 //     nicht gegen Cross-Feature-Coupling
 //
 // Voraussetzungen für Production:
-//   • App-Bootstrap muss extraContext: { textContent: createTextContentApi(db) }
+//   • App-Bootstrap muss extraContext: { templateResolver: createTemplateResolverApi(db) }
 //     setzen — sonst wirft Boot-Check beim Start
 //   • anonymousAccess: { defaultTenantId: SYSTEM_TENANT_ID } — sonst
 //     antworten die Routes mit 503
@@ -65,14 +70,14 @@ export function createLegalPagesFeature(opts: LegalPagesOptions = {}): FeatureDe
   const wrapLayout = opts.wrapLayout ?? wrapInLayout;
   return defineFeature("legal-pages", (r) => {
     r.describe(
-      "Opt-in wrapper around `text-content` that registers four public HTML routes (`/legal/impressum`, `/legal/datenschutz`, `/legal/imprint`, `/legal/privacy`) with Markdown-to-HTML rendering and a boot-time job that hard-fails in production when the required DE blocks (`imprint/de`, `privacy/de`) are not seeded in `SYSTEM_TENANT`. Requires `anonymousAccess: { defaultTenantId: SYSTEM_TENANT_ID }` and `extraContext.textContent` to be wired at app bootstrap; for per-tenant imprints or a custom layout call `text-content:query:by-slug` directly.",
+      "Opt-in wrapper around `template-resolver` text-blocks that registers four public HTML routes (`/legal/impressum`, `/legal/datenschutz`, `/legal/imprint`, `/legal/privacy`) with Markdown-to-HTML rendering and a boot-time job that hard-fails in production when the required DE blocks (`imprint/de`, `privacy/de`) are not seeded in `SYSTEM_TENANT`. Requires `anonymousAccess: { defaultTenantId: SYSTEM_TENANT_ID }` and `extraContext.templateResolver` to be wired at app bootstrap; for per-tenant imprints or a custom layout call `template-resolver:query:by-slug` directly.",
     );
     r.uiHints({
       displayLabel: "Legal Pages",
       category: "content",
       recommended: false,
     });
-    r.requires("text-content");
+    r.requires("template-resolver");
 
     // 4 Public-HTML-Routes
     for (const route of LEGAL_ROUTES) {
@@ -92,19 +97,19 @@ export function createLegalPagesFeature(opts: LegalPagesOptions = {}): FeatureDe
           try {
             // @cast-boundary engine-payload — dispatcher.query returnt
             // unknown; Shape ist durch bySlugQuery's Handler-Return-Type
-            // (siehe text-content/handlers/by-slug.query.ts) vertraut.
+            // (siehe template-resolver/handlers/by-slug.query.ts) vertraut.
             data = (await systemQuery(
-              TEXT_CONTENT_BY_SLUG_QN,
-              { slug: route.slug, lang: route.lang },
+              TEXT_BLOCK_BY_SLUG_QN,
+              { slug: route.slug, locale: route.lang },
               SYSTEM_TENANT_ID,
             )) as TextBlockQueryResult;
           } catch (err) {
             // biome-ignore lint/suspicious/noConsole: ops-visible fallback, no logger wired into HttpRouteHandlerDeps
-            console.error(`legal-pages: text-content query failed for slug="${route.slug}"`, err);
+            console.error(`legal-pages: text-block query failed for slug="${route.slug}"`, err);
             return c.text("legal page unavailable", 503);
           }
 
-          if (!data?.body) {
+          if (!data?.content) {
             return c.text(
               `${route.titleFallback} not configured. Tenant-Admin must set this text-block.`,
               404,
@@ -134,7 +139,7 @@ export function createLegalPagesFeature(opts: LegalPagesOptions = {}): FeatureDe
 
           const html = wrapLayout({
             title: data.title || route.titleFallback,
-            bodyHtml: renderMarkdownToHtml(data.body),
+            bodyHtml: renderMarkdownToHtml(data.content),
             lang: route.lang,
             slug: route.slug,
           });
@@ -149,8 +154,8 @@ export function createLegalPagesFeature(opts: LegalPagesOptions = {}): FeatureDe
       });
     }
 
-    // Boot-Check via ctx.textContent (extraContext-Pattern, symmetrisch
-    // zu requireConfigResolver in config). App-Bootstrap muss textContent
+    // Boot-Check via ctx.templateResolver (extraContext-Pattern, symmetrisch
+    // zu requireConfigResolver in config). App-Bootstrap muss templateResolver
     // wired haben — der Helper gibt einen klaren Wiring-Hinweis wenn nicht.
     //
     // Body als named function extrahiert (`runLegalPagesBootCheck`) damit
@@ -173,31 +178,35 @@ export function createLegalPagesFeature(opts: LegalPagesOptions = {}): FeatureDe
 
 // Minimal-shape für die Boot-Check-Logik — nur die Felder die der Check
 // braucht. Akzeptiert HandlerContext + AppContext + jeden anderen
-// Container der textContent + log mitbringt. Macht den Check direkt
+// Container der templateResolver + log mitbringt. Macht den Check direkt
 // unit-testbar mit constructed ctx-Objects.
 export type LegalPagesBootCheckCtx = {
-  readonly textContent?: TextContentApi;
+  readonly templateResolver?: TemplateResolverApi;
   readonly log?: {
     readonly info?: (msg: string) => void;
     readonly warn?: (msg: string) => void;
   };
 };
 
-// Exportiert für direkte Tests. Wirft InternalError wenn ctx.textContent
+// Exportiert für direkte Tests. Wirft InternalError wenn ctx.templateResolver
 // nicht gewired ist (Hinweis auf fehlenden extraContext). Wirft Error
 // in NODE_ENV=production wenn Pflicht-Blocks fehlen, sonst log.warn.
 // Logged log.info wenn alles vorhanden ist (kein silent-skip).
 export async function runLegalPagesBootCheck(ctx: LegalPagesBootCheckCtx): Promise<void> {
-  const textContent: TextContentApi = requireTextContent(ctx, "legal-pages-boot-check");
+  const templateResolver: TemplateResolverApi = requireTemplateResolver(
+    ctx,
+    "legal-pages-boot-check",
+  );
   const missing: { slug: string; lang: string }[] = [];
 
   for (const required of LEGAL_REQUIRED_BLOCKS) {
-    const block = await textContent.getBlock({
+    const block = await templateResolver.findExact({
       tenantId: SYSTEM_TENANT_ID,
       slug: required.slug,
-      lang: required.lang,
+      kind: TEXT_BLOCK_KIND,
+      locale: required.lang,
     });
-    if (!block?.body) {
+    if (!block?.content) {
       missing.push({ slug: required.slug, lang: required.lang });
     }
   }
@@ -208,7 +217,7 @@ export async function runLegalPagesBootCheck(ctx: LegalPagesBootCheckCtx): Promi
     const message =
       `legal-pages: missing ${missing.length} required text-block(s) in SYSTEM_TENANT: ` +
       missing.map((m) => `${m.slug}/${m.lang}`).join(", ") +
-      ". Seed via text-content:write:set or seedTextBlock helper.";
+      ". Seed via template-resolver:write:set or the seedTextBlock helper.";
 
     if (process.env["NODE_ENV"] === "production") {
       throw new Error(`Boot-Validation failed: ${message}`);

package/src/legal-pages/web/__tests__/client-plugin.test.ts

@@ -43,11 +43,11 @@ describe("legalPagesClient", () => {
     expect(emitted.length).toBeGreaterThan(0);
 
     // Jeder Top-Level-Knoten ist ein slug-Folder mit lang-Leaves, die per
-    // Cross-Link auf text-content:edit zeigen.
+    // Cross-Link auf template-resolver:edit zeigen.
     const folder = emitted[0];
     expect(Array.isArray(folder?.children)).toBe(true);
     const langLeaf = Array.isArray(folder?.children) ? folder?.children[0] : undefined;
-    expect(langLeaf?.target?.featureId).toBe("text-content");
+    expect(langLeaf?.target?.featureId).toBe("template-resolver");
     expect(langLeaf?.target?.action).toBe("edit");
   });
 });

package/src/legal-pages/web/client-plugin.ts

@@ -33,7 +33,7 @@ const treeProvider: TreeChildrenSubscribe = () => (emit) => {
   // Slug ist der Übersetzungs-Anker — User pflegt DE+EN-Versionen
   // desselben Inhalts zusammen statt nach Sprache zu gruppieren.
   // Sub-Items sind reine Sprach-Leaves; Label = Sprache, target zeigt
-  // auf text-content:edit mit slug+lang.
+  // auf template-resolver:edit mit slug+locale.
 
   // Group all blocks by slug, collect set of langs per slug.
   const bySlug = new Map<string, string[]>();
@@ -50,9 +50,9 @@ const treeProvider: TreeChildrenSubscribe = () => (emit) => {
     const langLeaves: TreeNode[] = langs.sort().map((lang) => ({
       label: lang,
       target: {
-        featureId: "text-content",
+        featureId: "template-resolver",
         action: "edit",
-        args: { slug, lang },
+        args: { slug, locale: lang },
       },
     }));
     slugFolders.push({

package/src/managed-pages/screens/branding-screen.ts

@@ -42,7 +42,7 @@ export function createBrandingSettingsScreen(opts: {
       description: createTextField({
         maxLength: 500,
         multiline: { rows: 3 },
-        allowPlaintext: "tenant branding copy, business content not personal data",
+        allowPlaintext: "is-business-data",
       }),
       siteUrl: createTextField({ maxLength: 2000, format: "url" }),
       accentColor: createTextField({ maxLength: 9 }),

package/src/presets/dsgvo-self-service.ts

@@ -6,19 +6,19 @@ import { createUserDataRightsFeature, type UserDataRightsOptions } from "../user
 import { createUserProfileFeature } from "../user-profile";
 
 export type DsgvoSelfServiceOptions = {
-  /** Durchgereicht an createUserDataRightsFeature — Export-/Deletion-Mail-
-   *  Callbacks + Apex-Deletion-HMAC. Default {} (no-op Mail-Side). */
+  /** Passed through to createUserDataRightsFeature — export/deletion mail
+   *  callbacks + Apex deletion HMAC. Default {} (no-op mail side). */
   readonly userDataRights?: UserDataRightsOptions;
 };
 
-// DSGVO- + Account-Self-Service-Kette, die jede Kumiko-SaaS-App mountet
-// (Privacy-Center, Account-Löschung Art. 17, Export Art. 20, Sessions).
-// Order is load-bearing (Require-Order): user-data-rights braucht
-// data-retention + compliance-profiles + sessions, user-profile braucht
-// user-data-rights. Genau diese Order stand bisher in jeder App handkopiert
-// mit Erklär-Kommentar. text-content + legal-pages bleiben bewusst draußen —
-// legal-pages hat ein app-spezifisches wrapLayout, text-content ist
-// standalone Foundation; beide spreaded die App selbst dazu.
+// DSGVO + account self-service chain every Kumiko SaaS app mounts (privacy
+// center, account deletion Art. 17, export Art. 20, sessions). Order is
+// load-bearing (require-order): user-data-rights needs data-retention +
+// compliance-profiles + sessions, user-profile needs user-data-rights. This
+// exact order used to be hand-copied into every app with an explainer
+// comment. text-content + legal-pages stay out deliberately — legal-pages
+// has an app-specific wrapLayout, text-content is a standalone foundation;
+// both are spread in by the app itself.
 export function dsgvoSelfServiceFeatures(opts: DsgvoSelfServiceOptions = {}): FeatureDefinition[] {
   return [
     createDataRetentionFeature(),

package/src/seo/__tests__/robots-txt.test.ts

@@ -15,4 +15,25 @@ describe("buildRobotsTxt", () => {
       "User-agent: *\nDisallow:\nSitemap: https://acme.test/sitemap.xml\n",
     );
   });
+
+  test("aiCrawlers: true + allow: true → explicit Allow block per AI bot", () => {
+    expect(buildRobotsTxt({ allow: true, aiCrawlers: true })).toBe(
+      "User-agent: *\nDisallow:\n" +
+        "User-agent: GPTBot\nAllow: /\n" +
+        "User-agent: ClaudeBot\nAllow: /\n" +
+        "User-agent: anthropic-ai\nAllow: /\n" +
+        "User-agent: PerplexityBot\nAllow: /\n" +
+        "User-agent: Google-Extended\nAllow: /\n",
+    );
+  });
+
+  test("aiCrawlers: true + allow: false → no per-bot block (blanket Disallow already covers it)", () => {
+    expect(buildRobotsTxt({ allow: false, aiCrawlers: true })).toBe("User-agent: *\nDisallow: /\n");
+  });
+
+  test("contentSignal appends a Content-Signal line", () => {
+    expect(
+      buildRobotsTxt({ allow: true, contentSignal: "ai-train=no, search=yes, ai-input=yes" }),
+    ).toBe("User-agent: *\nDisallow:\nContent-Signal: ai-train=no, search=yes, ai-input=yes\n");
+  });
 });

package/src/seo/__tests__/seo.integration.test.ts

@@ -6,11 +6,11 @@ import {
 } from "@cosmicdrift/kumiko-bundled-features/managed-pages";
 import { seedPage } from "@cosmicdrift/kumiko-bundled-features/managed-pages/seeding";
 import {
-  createTextContentApi,
-  createTextContentFeature,
-  textBlockEntity,
-} from "@cosmicdrift/kumiko-bundled-features/text-content";
-import { seedTextBlock } from "@cosmicdrift/kumiko-bundled-features/text-content/seeding";
+  createTemplateResolverApi,
+  createTemplateResolverFeature,
+  templateResourceEntity,
+} from "@cosmicdrift/kumiko-bundled-features/template-resolver";
+import { seedTextBlock } from "@cosmicdrift/kumiko-bundled-features/template-resolver/seeding";
 import { SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
 import {
@@ -42,39 +42,39 @@ const managed = createManagedPagesFeature({
 });
 const legal = createLegalPagesFeature();
 const configFeature = createConfigFeature();
-const textContent = createTextContentFeature();
+const templateResolver = createTemplateResolverFeature();
 
 beforeAll(async () => {
   const resolver = createConfigResolver();
   stack = await setupTestStack({
-    features: [configFeature, textContent, managed, legal, seo],
+    features: [configFeature, templateResolver, managed, legal, seo],
     anonymousAccess: {
       tenantExists: async (id) => id === TENANT_A || id === SYSTEM_TENANT_ID,
     },
     extraContext: ({ registry, db }) => ({
       configResolver: resolver,
       _configAccessorFactory: createConfigAccessorFactory(registry, resolver),
-      textContent: createTextContentApi(db),
+      templateResolver: createTemplateResolverApi(db),
     }),
   });
   await unsafeCreateEntityTable(stack.db, pageEntity);
-  await unsafeCreateEntityTable(stack.db, textBlockEntity);
+  await unsafeCreateEntityTable(stack.db, templateResourceEntity);
   await unsafePushTables(stack.db, { configValuesTable });
   await createEventsTable(stack.db);
 
   await seedTextBlock(stack.db, {
     tenantId: SYSTEM_TENANT_ID,
     slug: "imprint",
-    lang: "de",
+    locale: "de",
     title: "Impressum",
-    body: "## Test\n\nAcme",
+    content: "## Test\n\nAcme",
   });
   await seedTextBlock(stack.db, {
     tenantId: SYSTEM_TENANT_ID,
     slug: "privacy",
-    lang: "de",
+    locale: "de",
     title: "Datenschutz",
-    body: "## Test\n\nAcme",
+    content: "## Test\n\nAcme",
   });
 
   await seedPage(stack.db, {

package/src/seo/robots-txt.ts

@@ -1,13 +1,33 @@
 export type RobotsPolicy = {
   readonly allow: boolean;
   readonly sitemapUrl?: string;
+  /** Emit explicit Allow rules for known AI crawlers (GPTBot, ClaudeBot,
+   *  anthropic-ai, PerplexityBot, Google-Extended). No-op when allow:false —
+   *  a blanket Disallow already covers every bot. */
+  readonly aiCrawlers?: boolean;
+  /** Raw value for the Content-Signal directive (contentsignals.org), e.g.
+   *  "ai-train=no, search=yes, ai-input=yes". Emitted verbatim. */
+  readonly contentSignal?: string;
 };
 
+const AI_CRAWLER_USER_AGENTS = [
+  "GPTBot",
+  "ClaudeBot",
+  "anthropic-ai",
+  "PerplexityBot",
+  "Google-Extended",
+] as const;
+
 // Only used when an app opts into GET /robots.txt (SeoOptions.robotsPolicy) —
 // the common case (no per-host logic) is already covered by dev-server's
 // static public/robots.txt passthrough.
 export function buildRobotsTxt(policy: RobotsPolicy): string {
   const rule = policy.allow ? "Disallow:" : "Disallow: /";
+  const aiCrawlerBlocks =
+    policy.aiCrawlers && policy.allow
+      ? AI_CRAWLER_USER_AGENTS.map((ua) => `\nUser-agent: ${ua}\nAllow: /`).join("")
+      : "";
+  const contentSignal = policy.contentSignal ? `\nContent-Signal: ${policy.contentSignal}` : "";
   const sitemap = policy.sitemapUrl ? `\nSitemap: ${policy.sitemapUrl}` : "";
-  return `User-agent: *\n${rule}${sitemap}\n`;
+  return `User-agent: *\n${rule}${aiCrawlerBlocks}${contentSignal}${sitemap}\n`;
 }

package/src/sessions/handlers/revoke-all-for-user.write.ts

@@ -1,6 +1,7 @@
 import { requestContext } from "@cosmicdrift/kumiko-framework/api";
 import { updateMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { access, defineWriteHandler, SYSTEM_TENANT_ID } from "@cosmicdrift/kumiko-framework/engine";
+import { UnprocessableError, writeFailure } from "@cosmicdrift/kumiko-framework/errors";
 import { append } from "@cosmicdrift/kumiko-framework/event-store";
 import { generateId } from "@cosmicdrift/kumiko-framework/utils";
 import { Temporal } from "temporal-polyfill";
@@ -55,6 +56,14 @@ export const revokeAllForUserWrite = defineWriteHandler({
     // parse explicitly before the raw append so a shape drift fails loudly
     // here instead of landing unvalidated on the events table.
     if (updated.length > 0) {
+      const eventDef = ctx.registry.getEvent(SESSION_REVOKED_EVENT_QN);
+      if (!eventDef) {
+        return writeFailure(
+          new UnprocessableError("session_revoked_event_not_registered", {
+            details: { eventQn: SESSION_REVOKED_EVENT_QN },
+          }),
+        );
+      }
       const payload = sessionRevokedSchema.parse({
         userId: event.payload.userId,
         sessionIds: updated.map((row) => row.id),
@@ -66,7 +75,7 @@ export const revokeAllForUserWrite = defineWriteHandler({
         tenantId: SYSTEM_TENANT_ID,
         expectedVersion: 0,
         type: SESSION_REVOKED_EVENT_QN,
-        eventVersion: ctx.registry.getEvent(SESSION_REVOKED_EVENT_QN)?.version ?? 1,
+        eventVersion: eventDef.version,
         payload,
         metadata: {
           userId: event.user.id,

package/src/shared/classify-stored-envelope.ts

@@ -0,0 +1,21 @@
+import { isStoredEnvelope } from "@cosmicdrift/kumiko-framework/secrets";
+
+export type StoredEnvelopeClassification = "rotate" | "current" | "unrecognized";
+
+// Shared by every KEK-rotation job (config, auth-mfa, ...): a row whose value
+// isn't a current-cipher envelope (malformed JSON, or any pre-envelope
+// format) is never a supported re-encrypt input — classify it "unrecognized"
+// so callers fail it loudly instead of handing it to cipher.decrypt.
+export function classifyStoredEnvelope(
+  value: string,
+  targetVersion: number,
+): StoredEnvelopeClassification {
+  let parsed: unknown;
+  try {
+    parsed = JSON.parse(value);
+  } catch {
+    return "unrecognized";
+  }
+  if (!isStoredEnvelope(parsed)) return "unrecognized";
+  return parsed.kekVersion === targetVersion ? "current" : "rotate";
+}

package/src/shared/index.ts

@@ -5,6 +5,10 @@ export {
   type MigrationRowOutcome,
   runChunkedMigration,
 } from "./chunked-entity-migration";
+export {
+  classifyStoredEnvelope,
+  type StoredEnvelopeClassification,
+} from "./classify-stored-envelope";
 export { decryptStoredPii } from "./decrypt-stored-pii";
 export { encryptForDirectWrite } from "./encrypt-for-direct-write";
 export { entitiesOf } from "./entities-of";

package/src/template-resolver/README.md

@@ -1,6 +1,6 @@
 # template-resolver
 
-Strukturierter Template-Storage mit Tenant-Override-Hierarchie, Locale-Fallback und Resource-Linking via `file-foundation`.
+Strukturierter Content-Storage mit Tenant-Override-Hierarchie, Locale-Fallback und Resource-Linking via `file-foundation`. Eine Entity (`template-resource`) für alle Content-Arten — Render-Templates (`mail-html`, `document-pdf`, `notification`, `image-snapshot`), Markdown-Textblöcke (`text-block`, ex `text-content`-Feature) und AI-Prompts (`ai-prompt`).
 
 **Plan-Doc:** [`kumiko-platform/docs/plans/features/template-resolver.md`](../../../../../../kumiko-platform/docs/plans/features/template-resolver.md)
 
@@ -120,6 +120,35 @@ describe("my-mail-renderer :: template-resolver conformance", () => {
 
 The harness checks `TemplateNotFoundError` propagation, locale-fallback, and (when `resolveResources` is provided) missing resource keys.
 
+## Text-Blöcke (`kind: "text-block"`)
+
+Marketing-, FAQ- und Legal-Texte laufen über denselben Store, aber über einen
+eigenen Write-Pfad: `set.write` trägt `title` + `folder` (Content-Tree) und
+kennt keinen draft-Status — Speichern veröffentlicht.
+
+| Handler | QN | Wer | Was |
+|---|---|---|---|
+| `TemplateResolverHandlers.set` | `template-resolver:write:set` | TenantAdmin + SystemAdmin (via `tenantIdOverride` auch auf `SYSTEM_TENANT_ID`) | Upsert eines Text-Blocks pro `(tenantId, slug, locale)` |
+| `TemplateResolverQueries.bySlug` | `template-resolver:query:by-slug` | anonymous + User + Admins | Ein Text-Block — der Public-Read für Landing-/Legal-Pages |
+| `TemplateResolverQueries.byTenant` | `template-resolver:query:by-tenant` | anonymous + User + Admins | Alle Text-Blöcke eines Tenants für den Content-Tree |
+
+Die beiden Queries sind fest auf `kind: "text-block"` verdrahtet: Mail-Templates
+und AI-Prompts liegen in derselben Tabelle und dürfen nicht über den anonymen
+Pfad rausfallen.
+
+Seed-Helper: `seedTextBlock` / `seedLegalContentFromJson` aus
+`@cosmicdrift/kumiko-bundled-features/template-resolver/seeding`.
+
+Content-Tree + Editor (Desktop-Web):
+
+```typescript
+import { textBlocksClient } from "@cosmicdrift/kumiko-bundled-features/template-resolver/web";
+
+createKumikoApp({
+  clientFeatures: [textBlocksClient({ navId: "myapp:nav:content", tenantId: SYSTEM_TENANT_ID })],
+});
+```
+
 ## Out-of-Scope
 
 - Rendering (Markdown/MJML → HTML/PDF) — siehe `renderer-foundation`

package/src/{text-content → template-resolver}/__tests__/seed-legal-content.integration.test.ts

@@ -7,9 +7,10 @@ import {
   type TestStack,
   unsafeCreateEntityTable,
 } from "@cosmicdrift/kumiko-framework/stack";
-import { createTextContentFeature } from "../feature";
+import { TEXT_BLOCK_KIND } from "../constants";
+import { createTemplateResolverFeature } from "../feature";
 import { type LegalContentBlock, seedLegalContentFromJson } from "../seeding";
-import { type TextBlockRow, textBlockEntity, textBlocksTable } from "../table";
+import { type TemplateResourceRow, templateResourceEntity, templateResourcesTable } from "../table";
 
 // Pins seedLegalContentFromJson: seeds into SYSTEM_TENANT_ID by default and
 // re-seeds with ifExists:"update" so a changed template body lands on an
@@ -19,9 +20,9 @@ let stack: TestStack;
 let db: DbConnection;
 
 beforeAll(async () => {
-  stack = await setupTestStack({ features: [createTextContentFeature()] });
+  stack = await setupTestStack({ features: [createTemplateResolverFeature()] });
   db = stack.db;
-  await unsafeCreateEntityTable(db, textBlockEntity);
+  await unsafeCreateEntityTable(db, templateResourceEntity);
   await createEventsTable(db);
 });
 
@@ -29,60 +30,70 @@ afterAll(async () => {
   await stack.cleanup();
 });
 
-function read(slug: string, lang: string) {
-  return fetchOne<TextBlockRow>(db, textBlocksTable, { tenantId: SYSTEM_TENANT_ID, slug, lang });
+function read(slug: string, locale: string) {
+  return fetchOne<TemplateResourceRow>(db, templateResourcesTable, {
+    tenantId: SYSTEM_TENANT_ID,
+    slug,
+    kind: TEXT_BLOCK_KIND,
+    locale,
+  });
 }
 
 describe("seedLegalContentFromJson", () => {
   test("seeds all blocks into SYSTEM_TENANT_ID as SYSTEM_USER", async () => {
     const blocks: LegalContentBlock[] = [
-      { slug: "imprint", lang: "de", title: "Impressum", body: "Marc Frost" },
-      { slug: "imprint", lang: "en", title: "Imprint", body: "Marc Frost" },
+      { slug: "imprint", locale: "de", title: "Impressum", content: "Marc Frost" },
+      { slug: "imprint", locale: "en", title: "Imprint", content: "Marc Frost" },
     ];
     await seedLegalContentFromJson(db, blocks);
 
-    const de = (await read("imprint", "de")) as TextBlockRow & {
+    const de = (await read("imprint", "de")) as TemplateResourceRow & {
       insertedById: string;
       modifiedById: string | null;
     };
-    expect(de).toMatchObject({ title: "Impressum", body: "Marc Frost" });
+    expect(de).toMatchObject({ title: "Impressum", content: "Marc Frost" });
     expect(de.insertedById).toBe(SYSTEM_USER_ID);
-    expect(await read("imprint", "en")).toMatchObject({ title: "Imprint", body: "Marc Frost" });
+    expect(await read("imprint", "en")).toMatchObject({ title: "Imprint", content: "Marc Frost" });
   });
 
   test("re-seed lifts an existing block to the new template state (ifExists:update)", async () => {
     const v1: LegalContentBlock[] = [
-      { slug: "privacy", lang: "de", title: "Datenschutz", body: "v1" },
+      { slug: "privacy", locale: "de", title: "Datenschutz", content: "v1" },
     ];
     await seedLegalContentFromJson(db, v1);
-    expect(await read("privacy", "de")).toMatchObject({ body: "v1" });
+    expect(await read("privacy", "de")).toMatchObject({ content: "v1" });
 
     const v2: LegalContentBlock[] = [
-      { slug: "privacy", lang: "de", title: "Datenschutz", body: "v2 + Sub-Processor-Tabelle" },
+      {
+        slug: "privacy",
+        locale: "de",
+        title: "Datenschutz",
+        content: "v2 + Sub-Processor-Tabelle",
+      },
     ];
     await seedLegalContentFromJson(db, v2);
-    const row = (await read("privacy", "de")) as TextBlockRow & { modifiedById: string };
-    expect(row).toMatchObject({ body: "v2 + Sub-Processor-Tabelle" });
+    const row = (await read("privacy", "de")) as TemplateResourceRow & { modifiedById: string };
+    expect(row).toMatchObject({ content: "v2 + Sub-Processor-Tabelle" });
     expect(row.modifiedById).toBe(SYSTEM_USER_ID);
   });
 
   test("identical re-seed is a no-op (no update event, version/modifiedAt stable)", async () => {
     const blocks: LegalContentBlock[] = [
-      { slug: "terms", lang: "de", title: "AGB", body: "stable" },
+      { slug: "terms", locale: "de", title: "AGB", content: "stable" },
     ];
     await seedLegalContentFromJson(db, blocks);
-    const before = (await read("terms", "de")) as TextBlockRow & {
+    const before = (await read("terms", "de")) as TemplateResourceRow & {
       modifiedAt: unknown;
     };
     expect(before).not.toBeNull();
 
     await seedLegalContentFromJson(db, blocks);
-    const after = (await read("terms", "de")) as TextBlockRow & { modifiedAt: unknown };
+    const after = (await read("terms", "de")) as TemplateResourceRow & { modifiedAt: unknown };
     expect(after.version).toBe(before.version);
-    expect(after.body).toBe("stable");
+    expect(after.content).toBe("stable");
     expect(after.modifiedAt).toEqual(before.modifiedAt);
 
     const events = await selectMany(db, eventsTable, { aggregateId: String(before.id) });
-    expect(events.map((e) => e.type)).toEqual(["text-block.created"]);
+    expect(events.map((e) => e.type)).toEqual(["template-resource.created"]);
   });
 });