@cosmicdrift/kumiko-bundled-features 0.207.0 → 0.208.0

package/src/tier-engine/i18n.ts

@@ -1,37 +1,17 @@
 // @runtime client
 // Default-Bundles für den TierAdminScreen. Werden vom tierEngineClient()
 // als Fallback-Bundle in den LocaleProvider gehängt — Apps überschreiben
-// einzelne Keys via `tierEngineClient({ translations: { de: { … } } })`.
+// einzelne Keys via `tierEngineClient({ translations })`.
 
 import type { TranslationsByLocale } from "@cosmicdrift/kumiko-renderer";
 
-type LocalizedString = { readonly de: string; readonly en: string; readonly es: string };
+type LocalizedString = { readonly en: string };
 
 export const TIER_ENGINE_I18N: Readonly<Record<string, LocalizedString>> = {
-  "screen:tier-admin.title": {
-    de: "Tier manuell zuweisen",
-    en: "Assign tier manually",
-    es: "Asignar tier manualmente",
-  },
+  "screen:tier-admin.title": { en: "Assign tier manually" },
 };
 
 export const defaultTranslations: TranslationsByLocale = {
-  de: {
-    "screen:tier-admin.title": "Tier manuell zuweisen",
-    "tier-admin.title": "Tier manuell zuweisen",
-    "tier-admin.explainer":
-      "Weise einem Tenant ein Tier ohne Kauf zu. Der Grant wird als „manuell“ markiert und von einem späteren Billing-Sync nicht überschrieben.",
-    "tier-admin.tenant.label": "Tenant",
-    "tier-admin.current.label": "Aktuelles Tier",
-    "tier-admin.current.none": "— noch keins —",
-    "tier-admin.tier.label": "Neues Tier",
-    "tier-admin.submit": "Tier zuweisen",
-    "tier-admin.success": "Tier „{tier}“ zugewiesen.",
-    "tier-admin.error.generic": "Konnte das Tier nicht zuweisen.",
-    "tier-admin.error.load": "Tenants konnten nicht geladen werden.",
-    "tier-admin.error.noTiers":
-      "Diese App hat keine TierMap konfiguriert — es gibt keine zuweisbaren Tiers.",
-  },
   en: {
     "screen:tier-admin.title": "Assign tier manually",
     "tier-admin.title": "Assign tier manually",
@@ -48,20 +28,4 @@ export const defaultTranslations: TranslationsByLocale = {
     "tier-admin.error.noTiers":
       "This app has no TierMap configured — there are no assignable tiers.",
   },
-  es: {
-    "screen:tier-admin.title": "Asignar tier manualmente",
-    "tier-admin.title": "Asignar tier manualmente",
-    "tier-admin.explainer":
-      "Asigna un tier a un tenant sin necesidad de compra. La asignación se marca como «manual» y no será sobrescrita por una sincronización de facturación posterior.",
-    "tier-admin.tenant.label": "Tenant",
-    "tier-admin.current.label": "Tier actual",
-    "tier-admin.current.none": "— aún ninguno —",
-    "tier-admin.tier.label": "Nuevo tier",
-    "tier-admin.submit": "Asignar tier",
-    "tier-admin.success": "Tier «{tier}» asignado.",
-    "tier-admin.error.generic": "No se pudo asignar el tier.",
-    "tier-admin.error.load": "No se pudieron cargar los tenants.",
-    "tier-admin.error.noTiers":
-      "Esta aplicación no tiene una TierMap configurada — no hay tiers asignables.",
-  },
 };

package/src/user/i18n.ts

@@ -1,38 +1,20 @@
-type LocalizedString = { readonly de: string; readonly en: string; readonly es: string };
+type LocalizedString = { readonly en: string };
 
 export const USER_I18N: Readonly<Record<string, LocalizedString>> = {
-  "screen:user-list.title": { de: "Benutzer", en: "Users", es: "Usuarios" },
-  "screen:user-edit.title": { de: "Benutzer bearbeiten", en: "Edit user", es: "Editar usuario" },
-  "user:entity:user:field:email": { de: "E-Mail", en: "Email", es: "Correo electrónico" },
-  "user:entity:user:field:displayName": {
-    de: "Anzeigename",
-    en: "Display name",
-    es: "Nombre para mostrar",
-  },
-  "user:entity:user:field:status": { de: "Status", en: "Status", es: "Estado" },
-  "user:entity:user:field:emailVerified": {
-    de: "E-Mail bestätigt",
-    en: "Email verified",
-    es: "Correo verificado",
-  },
-  "user:entity:user:field:locale": { de: "Sprache", en: "Locale", es: "Idioma" },
-  "user:entity:user:field:timezone": { de: "Zeitzone", en: "Timezone", es: "Zona horaria" },
-  "user:entity:user:field:status:option:active": { de: "Aktiv", en: "Active", es: "Activo" },
-  "user:entity:user:field:status:option:restricted": {
-    de: "Eingeschränkt",
-    en: "Restricted",
-    es: "Restringido",
-  },
+  "screen:user-list.title": { en: "Users" },
+  "screen:user-edit.title": { en: "Edit user" },
+  "user:entity:user:field:email": { en: "Email" },
+  "user:entity:user:field:displayName": { en: "Display name" },
+  "user:entity:user:field:status": { en: "Status" },
+  "user:entity:user:field:emailVerified": { en: "Email verified" },
+  "user:entity:user:field:locale": { en: "Locale" },
+  "user:entity:user:field:timezone": { en: "Timezone" },
+  "user:entity:user:field:status:option:active": { en: "Active" },
+  "user:entity:user:field:status:option:restricted": { en: "Restricted" },
   "user:entity:user:field:status:option:deletionRequested": {
-    de: "Löschung angefordert",
     en: "Deletion requested",
-    es: "Eliminación solicitada",
-  },
-  "user:entity:user:field:status:option:deleted": {
-    de: "Gelöscht",
-    en: "Deleted",
-    es: "Eliminado",
   },
-  "user:entity:user:field:emailVerified:option:true": { de: "Ja", en: "Yes", es: "Sí" },
-  "user:entity:user:field:emailVerified:option:false": { de: "Nein", en: "No", es: "No" },
+  "user:entity:user:field:status:option:deleted": { en: "Deleted" },
+  "user:entity:user:field:emailVerified:option:true": { en: "Yes" },
+  "user:entity:user:field:emailVerified:option:false": { en: "No" },
 };

package/src/user-data-rights/__tests__/default-mailers.test.ts

@@ -10,6 +10,8 @@ import type {
   EmailTransport,
 } from "@cosmicdrift/kumiko-bundled-features/channel-email";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
+import { registerMailTranslations } from "@cosmicdrift/kumiko-framework/i18n";
+import { localeDeBundle } from "@cosmicdrift/kumiko-locale-de";
 import {
   makeDefaultDeletionExecutedEmail,
   makeDefaultExportReadyEmail,
@@ -27,6 +29,8 @@ function capturingTransport(): { transport: EmailTransport; sent: EmailMessage[]
 
 const TENANT_A = "00000000-0000-4000-8000-00000000000a" as TenantId;
 
+registerMailTranslations("de", localeDeBundle);
+
 describe("default-mailers dispatch", () => {
   test("export-ready: rendert Template + sendet an userEmail ueber tenant-transport", async () => {
     const cap = capturingTransport();

package/src/user-data-rights/__tests__/email-templates.test.ts

@@ -1,4 +1,6 @@
 import { describe, expect, test } from "bun:test";
+import { registerMailTranslations } from "@cosmicdrift/kumiko-framework/i18n";
+import { localeDeBundle } from "@cosmicdrift/kumiko-locale-de";
 import {
   renderDeletionExecutedEmail,
   renderDeletionRequestedEmail,
@@ -6,6 +8,8 @@ import {
   renderExportReadyEmail,
 } from "../email-templates";
 
+registerMailTranslations("de", localeDeBundle);
+
 describe("gdpr email-templates", () => {
   test("export-ready: subject + download-button + formatted expiry, de/en differ", () => {
     const en = renderExportReadyEmail({

package/src/user-data-rights/__tests__/mail-default-bridge.integration.test.ts

@@ -21,6 +21,7 @@ import {
 } from "@cosmicdrift/kumiko-framework/stack";
 import { resetTestTables, seedRow } from "@cosmicdrift/kumiko-framework/testing";
 import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
+import { localeDe } from "@cosmicdrift/kumiko-locale-de";
 import { createComplianceProfilesFeature } from "../../compliance-profiles";
 import { configValuesTable, createConfigFeature, createConfigResolver } from "../../config";
 import { createDataRetentionFeature, tenantRetentionOverrideEntity } from "../../data-retention";
@@ -63,6 +64,7 @@ beforeAll(async () => {
       mailTransportInMemoryFeature,
       // KEINE send*Email-Opts — die mail-foundation-Defaults muessen greifen.
       createUserDataRightsFeature(),
+      localeDe(),
       createUserDataRightsDefaultsFeature(),
     ],
   });

package/src/user-data-rights/__tests__/run-export-jobs-cron-context.integration.test.ts

@@ -14,6 +14,7 @@ import { authFoundationFeature } from "@cosmicdrift/kumiko-bundled-features/auth
 import { asRawClient, selectMany } from "@cosmicdrift/kumiko-framework/bun-db";
 import { type JobContext, SYSTEM_USER_ID } from "@cosmicdrift/kumiko-framework/engine";
 import { createEventsTable } from "@cosmicdrift/kumiko-framework/event-store";
+import { registerMailTranslations } from "@cosmicdrift/kumiko-framework/i18n";
 import {
   setupTestStack,
   type TestStack,
@@ -22,6 +23,7 @@ import {
 } from "@cosmicdrift/kumiko-framework/stack";
 import { seedRow } from "@cosmicdrift/kumiko-framework/testing";
 import { getTemporal } from "@cosmicdrift/kumiko-framework/time";
+import { localeDeBundle } from "@cosmicdrift/kumiko-locale-de";
 import {
   createComplianceProfilesFeature,
   tenantComplianceProfileEntity,
@@ -134,6 +136,8 @@ async function seedPendingJob(): Promise<string> {
   return res.jobId;
 }
 
+registerMailTranslations("de", localeDeBundle);
+
 describe("run-export-jobs cron-context", () => {
   test("Cron-Job-Kontext (configResolver, KEIN config) → Export läuft durch, bytesWritten > 0", async () => {
     const jobId = await seedPendingJob();

package/src/user-data-rights/email-templates.ts

@@ -1,34 +1,46 @@
-// Default-HTML-Renderer fuer die GDPR-Notification-Mails (Export-bereit,
-// Export-fehlgeschlagen, Loeschung-angefordert, Loeschung-ausgefuehrt).
-// Damit eine App keine eigenen send*Email-Callbacks schreiben muss: sie
-// mountet mail-foundation + einen mail-transport-* und user-data-rights
-// rendert + versendet ueber diese Templates (siehe lib/default-mailers.ts).
-//
-// Apps die ihr eigenes Branding wollen, uebergeben eigene send*Email-Opts —
-// dann greifen diese Defaults nicht. Pattern + plain-inline-HTML gespiegelt
-// von auth-email-password/email-templates.ts (kein CSS-Framework, kein
-// Bild-Asset; Mail-Clients rendern table-layout + inline-CSS verlaesslich).
-//
-// Locale: de + en. Apps mit anderen Sprachen uebergeben eigene Callbacks.
+// Default HTML renderers for GDPR notification mails. English ships here;
+// other languages register via @cosmicdrift/kumiko-locale-* (localeDe() /
+// localeEs() call registerMailTranslations). Apps that want their own
+// branding pass send*Email callbacks and these defaults do not run.
 
+import { mailT, registerMailTranslations } from "@cosmicdrift/kumiko-framework/i18n";
 import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-headless";
 import { Temporal } from "temporal-polyfill";
 
-export type GdprMailLocale = "de" | "en";
+export type GdprMailLocale = string;
 
-// user.locale ist Freitext ("de", "en", "de-DE", "fr", null). Die Templates
-// koennen nur de/en — alles andere (inkl. unbekannte Sprachen) faellt auf
-// undefined zurueck, sodass der Caller auf mailDefaults.locale bzw. "en" geht.
 export function normalizeGdprMailLocale(
   raw: string | null | undefined,
 ): GdprMailLocale | undefined {
   if (!raw) return undefined;
-  const lower = raw.toLowerCase();
-  if (lower.startsWith("de")) return "de";
-  if (lower.startsWith("en")) return "en";
-  return undefined;
+  const root = raw.toLowerCase().split("-")[0];
+  return root && root.length > 0 ? root : undefined;
 }
 
+const GDPR_MAIL_EN: Readonly<Record<string, string>> = {
+  "gdpr.mail.appNameDefault": "Account",
+  "gdpr.mail.greeting": "Hi,",
+  "gdpr.mail.exportReady.subject": "{app} — Your data export is ready",
+  "gdpr.mail.exportReady.intro":
+    "your requested data export for {app} is ready. Download it using the link below:",
+  "gdpr.mail.exportReady.button": "Download data export",
+  "gdpr.mail.exportReady.expiry": "The download link expires on {when}.",
+  "gdpr.mail.exportFailed.subject": "{app} — Your data export failed",
+  "gdpr.mail.exportFailed.intro":
+    "your requested data export for {app} could not be created. Please request the export again.",
+  "gdpr.mail.deletionRequested.subject": "{app} — Account deletion requested",
+  "gdpr.mail.deletionRequested.intro":
+    "we received your request to delete your {app} account. Your account and associated data will be permanently deleted on {when}.",
+  "gdpr.mail.deletionRequested.cancel":
+    "If you didn't request this, sign in and cancel the deletion in your account settings before the deadline.",
+  "gdpr.mail.deletionExecuted.subject": "{app} — Your account has been deleted",
+  "gdpr.mail.deletionExecuted.intro":
+    "your {app} account and the associated personal data were deleted on {when}. This action is permanent.",
+  "gdpr.mail.fallbackUrl": "If the button doesn't work, copy this link into your browser:",
+};
+
+registerMailTranslations("en", GDPR_MAIL_EN);
+
 export type RenderedEmail = {
   readonly subject: string;
   readonly html: string;
@@ -58,76 +70,35 @@ export type RenderDeletionExecutedEmailArgs = {
   readonly appName?: string;
 };
 
-const STRINGS = {
-  de: {
-    greeting: "Hallo,",
-    exportReadySubject: (app: string) => `${app} — Dein Datenexport ist bereit`,
-    exportReadyIntro: (app: string) =>
-      `dein angeforderter Datenexport fuer ${app} ist fertig. Lade ihn ueber den folgenden Link herunter:`,
-    exportReadyButton: "Datenexport herunterladen",
-    exportReadyExpiry: (when: string) => `Der Download-Link laeuft am ${when} ab.`,
-    exportFailedSubject: (app: string) => `${app} — Dein Datenexport ist fehlgeschlagen`,
-    exportFailedIntro: (app: string) =>
-      `dein angeforderter Datenexport fuer ${app} konnte leider nicht erstellt werden. Bitte fordere den Export erneut an.`,
-    deletionRequestedSubject: (app: string) => `${app} — Loeschung deines Kontos angefordert`,
-    deletionRequestedIntro: (app: string, when: string) =>
-      `wir haben deinen Antrag zur Loeschung deines ${app}-Kontos erhalten. Dein Konto und die zugehoerigen Daten werden am ${when} endgueltig geloescht.`,
-    deletionRequestedCancel:
-      "Falls du das nicht angefordert hast, melde dich an und brich die Loeschung in den Kontoeinstellungen ab, bevor die Frist ablaeuft.",
-    deletionExecutedSubject: (app: string) => `${app} — Dein Konto wurde geloescht`,
-    deletionExecutedIntro: (app: string, when: string) =>
-      `dein ${app}-Konto und die zugehoerigen personenbezogenen Daten wurden am ${when} geloescht. Diese Aktion ist endgueltig.`,
-    fallbackUrl: "Falls der Button nicht funktioniert, kopiere diesen Link in den Browser:",
-  },
-  en: {
-    greeting: "Hi,",
-    exportReadySubject: (app: string) => `${app} — Your data export is ready`,
-    exportReadyIntro: (app: string) =>
-      `your requested data export for ${app} is ready. Download it using the link below:`,
-    exportReadyButton: "Download data export",
-    exportReadyExpiry: (when: string) => `The download link expires on ${when}.`,
-    exportFailedSubject: (app: string) => `${app} — Your data export failed`,
-    exportFailedIntro: (app: string) =>
-      `your requested data export for ${app} could not be created. Please request the export again.`,
-    deletionRequestedSubject: (app: string) => `${app} — Account deletion requested`,
-    deletionRequestedIntro: (app: string, when: string) =>
-      `we received your request to delete your ${app} account. Your account and associated data will be permanently deleted on ${when}.`,
-    deletionRequestedCancel:
-      "If you didn't request this, sign in and cancel the deletion in your account settings before the deadline.",
-    deletionExecutedSubject: (app: string) => `${app} — Your account has been deleted`,
-    deletionExecutedIntro: (app: string, when: string) =>
-      `your ${app} account and the associated personal data were deleted on ${when}. This action is permanent.`,
-    fallbackUrl: "If the button doesn't work, copy this link into your browser:",
-  },
-} as const;
+function t(locale: string, key: string, params?: Readonly<Record<string, string>>): string {
+  return mailT(locale, key, params);
+}
 
 function appNameFor(args: { locale?: GdprMailLocale; appName?: string }): string {
   const locale = args.locale ?? "en";
-  return args.appName ?? (locale === "de" ? "Konto" : "Account");
+  return args.appName ?? t(locale, "gdpr.mail.appNameDefault");
 }
 
 export function renderExportReadyEmail(args: RenderExportReadyEmailArgs): RenderedEmail {
   const locale = args.locale ?? "en";
   const app = appNameFor(args);
-  const t = STRINGS[locale];
-  const subject = t.exportReadySubject(app);
+  const subject = t(locale, "gdpr.mail.exportReady.subject", { app });
   const body = `
-    <p style="margin: 0 0 16px; font-size: 16px;">${escapeHtml(t.greeting)}</p>
-    <p style="margin: 0 0 24px; font-size: 14px; line-height: 1.5;">${escapeHtml(t.exportReadyIntro(app))}</p>
-    <p style="margin: 0 0 24px;">${renderButton({ url: args.downloadUrl, label: t.exportReadyButton })}</p>
-    <p style="margin: 0 0 8px; font-size: 13px; color: #555;">${escapeHtml(t.exportReadyExpiry(formatTimestamp(args.expiresAt)))}</p>
-    ${renderFallbackUrl({ url: args.downloadUrl, label: t.fallbackUrl })}`;
+    <p style="margin: 0 0 16px; font-size: 16px;">${escapeHtml(t(locale, "gdpr.mail.greeting"))}</p>
+    <p style="margin: 0 0 24px; font-size: 14px; line-height: 1.5;">${escapeHtml(t(locale, "gdpr.mail.exportReady.intro", { app }))}</p>
+    <p style="margin: 0 0 24px;">${renderButton({ url: args.downloadUrl, label: t(locale, "gdpr.mail.exportReady.button") })}</p>
+    <p style="margin: 0 0 8px; font-size: 13px; color: #555;">${escapeHtml(t(locale, "gdpr.mail.exportReady.expiry", { when: formatTimestamp(args.expiresAt) }))}</p>
+    ${renderFallbackUrl({ url: args.downloadUrl, label: t(locale, "gdpr.mail.fallbackUrl") })}`;
   return { subject, html: renderShell({ title: subject, bodyHtml: wrapCell(body), locale }) };
 }
 
 export function renderExportFailedEmail(args: RenderExportFailedEmailArgs): RenderedEmail {
   const locale = args.locale ?? "en";
   const app = appNameFor(args);
-  const t = STRINGS[locale];
-  const subject = t.exportFailedSubject(app);
+  const subject = t(locale, "gdpr.mail.exportFailed.subject", { app });
   const body = `
-    <p style="margin: 0 0 16px; font-size: 16px;">${escapeHtml(t.greeting)}</p>
-    <p style="margin: 0; font-size: 14px; line-height: 1.5;">${escapeHtml(t.exportFailedIntro(app))}</p>`;
+    <p style="margin: 0 0 16px; font-size: 16px;">${escapeHtml(t(locale, "gdpr.mail.greeting"))}</p>
+    <p style="margin: 0; font-size: 14px; line-height: 1.5;">${escapeHtml(t(locale, "gdpr.mail.exportFailed.intro", { app }))}</p>`;
   return { subject, html: renderShell({ title: subject, bodyHtml: wrapCell(body), locale }) };
 }
 
@@ -136,23 +107,23 @@ export function renderDeletionRequestedEmail(
 ): RenderedEmail {
   const locale = args.locale ?? "en";
   const app = appNameFor(args);
-  const t = STRINGS[locale];
-  const subject = t.deletionRequestedSubject(app);
+  const when = formatTimestamp(args.gracePeriodEnd);
+  const subject = t(locale, "gdpr.mail.deletionRequested.subject", { app });
   const body = `
-    <p style="margin: 0 0 16px; font-size: 16px;">${escapeHtml(t.greeting)}</p>
-    <p style="margin: 0 0 16px; font-size: 14px; line-height: 1.5;">${escapeHtml(t.deletionRequestedIntro(app, formatTimestamp(args.gracePeriodEnd)))}</p>
-    <p style="margin: 0; font-size: 13px; color: #555;">${escapeHtml(t.deletionRequestedCancel)}</p>`;
+    <p style="margin: 0 0 16px; font-size: 16px;">${escapeHtml(t(locale, "gdpr.mail.greeting"))}</p>
+    <p style="margin: 0 0 16px; font-size: 14px; line-height: 1.5;">${escapeHtml(t(locale, "gdpr.mail.deletionRequested.intro", { app, when }))}</p>
+    <p style="margin: 0; font-size: 13px; color: #555;">${escapeHtml(t(locale, "gdpr.mail.deletionRequested.cancel"))}</p>`;
   return { subject, html: renderShell({ title: subject, bodyHtml: wrapCell(body), locale }) };
 }
 
 export function renderDeletionExecutedEmail(args: RenderDeletionExecutedEmailArgs): RenderedEmail {
   const locale = args.locale ?? "en";
   const app = appNameFor(args);
-  const t = STRINGS[locale];
-  const subject = t.deletionExecutedSubject(app);
+  const when = formatTimestamp(args.executedAt);
+  const subject = t(locale, "gdpr.mail.deletionExecuted.subject", { app });
   const body = `
-    <p style="margin: 0 0 16px; font-size: 16px;">${escapeHtml(t.greeting)}</p>
-    <p style="margin: 0; font-size: 14px; line-height: 1.5;">${escapeHtml(t.deletionExecutedIntro(app, formatTimestamp(args.executedAt)))}</p>`;
+    <p style="margin: 0 0 16px; font-size: 16px;">${escapeHtml(t(locale, "gdpr.mail.greeting"))}</p>
+    <p style="margin: 0; font-size: 14px; line-height: 1.5;">${escapeHtml(t(locale, "gdpr.mail.deletionExecuted.intro", { app, when }))}</p>`;
   return { subject, html: renderShell({ title: subject, bodyHtml: wrapCell(body), locale }) };
 }
 
@@ -160,11 +131,9 @@ function wrapCell(bodyHtml: string): string {
   return `<tr><td>${bodyHtml}</td></tr>`;
 }
 
-// Plain inline-styled HTML — gespiegelt von auth-email-password.
-// guard:dup-ok — Email-HTML (table-layout, inline CSS) ≠ Web-HTML (legal-pages/markdown.ts)
 function renderShell(args: { title: string; bodyHtml: string; locale: GdprMailLocale }): string {
   return `<!DOCTYPE html>
-<html lang="${args.locale}">
+<html lang="${escapeHtmlAttr(args.locale)}">
   <head>
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
@@ -184,19 +153,14 @@ function renderShell(args: { title: string; bodyHtml: string; locale: GdprMailLo
 </html>`;
 }
 
-// guard:dup-ok — Email-HTML-Helper; selbe normalisierte AST-Form wie auth-email-password, verschiedene Semantik
 function renderButton(args: { url: string; label: string }): string {
   return `<a href="${escapeHtmlAttr(args.url)}" style="display: inline-block; background: #1a1a1a; color: #ffffff; padding: 12px 24px; border-radius: 6px; text-decoration: none; font-weight: 500;">${escapeHtml(args.label)}</a>`;
 }
 
-// guard:dup-ok — Email-HTML-Helper; selbe normalisierte AST-Form wie auth-email-password, verschiedene Semantik
 function renderFallbackUrl(args: { url: string; label: string }): string {
   return `<p style="margin: 24px 0 0; font-size: 12px; color: #666;">${escapeHtml(args.label)}<br /><a href="${escapeHtmlAttr(args.url)}" style="color: #1a1a1a; word-break: break-all;">${escapeHtml(args.url)}</a></p>`;
 }
 
-// ISO-Timestamp → "2026-05-04 13:45 UTC". Locale-unabhaengig + UTC-Suffix
-// damit der User unabhaengig von seiner Tz sieht wann etwas passiert; bei
-// un-parsbarem Input faellt's auf den raw-string zurueck.
 function formatTimestamp(iso: string): string {
   try {
     const z = Temporal.Instant.from(iso).toZonedDateTimeISO("UTC");

package/src/user-data-rights/i18n.ts

@@ -1,88 +1,36 @@
 // @runtime client
 // Server + client i18n for user-data-rights (operator screens + nav). Pure
 // data, importable from the web bundle (web/i18n.ts derives the client keys).
-type LocalizedString = { readonly de: string; readonly en: string; readonly es: string };
+type LocalizedString = { readonly en: string };
 
 export const USER_DATA_RIGHTS_I18N: Readonly<Record<string, LocalizedString>> = {
-  "user-data-rights:nav.exportJobs": {
-    de: "DSGVO-Exporte",
-    en: "GDPR exports",
-    es: "Exportaciones RGPD",
-  },
-  "screen:export-job-list.title": {
-    de: "DSGVO-Exporte",
-    en: "GDPR exports",
-    es: "Exportaciones RGPD",
-  },
-  "screen:export-job-detail.title": {
-    de: "Export-Job",
-    en: "Export job",
-    es: "Trabajo de exportación",
-  },
-  "screen:download-attempt-list.title": {
-    de: "Download-Versuche",
-    en: "Download attempts",
-    es: "Intentos de descarga",
-  },
-  "screen:privacy-center.title": { de: "Datenschutz", en: "Privacy", es: "Privacidad" },
-  "user-data-rights:entity:export-job:field:userId": { de: "Benutzer", en: "User", es: "Usuario" },
-  "user-data-rights:entity:export-job:field:status": { de: "Status", en: "Status", es: "Estado" },
-  "user-data-rights:entity:export-job:field:requestedAt": {
-    de: "Angefordert",
-    en: "Requested",
-    es: "Solicitado",
-  },
-  "user-data-rights:entity:export-job:field:completedAt": {
-    de: "Abgeschlossen",
-    en: "Completed",
-    es: "Completado",
-  },
-  "user-data-rights:entity:export-job:field:expiresAt": {
-    de: "Läuft ab",
-    en: "Expires",
-    es: "Caduca",
-  },
+  "user-data-rights:nav.exportJobs": { en: "GDPR exports" },
+  "screen:export-job-list.title": { en: "GDPR exports" },
+  "screen:export-job-detail.title": { en: "Export job" },
+  "screen:download-attempt-list.title": { en: "Download attempts" },
+  "screen:privacy-center.title": { en: "Privacy" },
+  "user-data-rights:entity:export-job:field:userId": { en: "User" },
+  "user-data-rights:entity:export-job:field:status": { en: "Status" },
+  "user-data-rights:entity:export-job:field:requestedAt": { en: "Requested" },
+  "user-data-rights:entity:export-job:field:completedAt": { en: "Completed" },
+  "user-data-rights:entity:export-job:field:expiresAt": { en: "Expires" },
   "user-data-rights:entity:export-job:field:requestedFromTenantId": {
-    de: "Mandant",
     en: "Tenant",
-    es: "Organización",
-  },
-  "user-data-rights:entity:export-job:field:startedAt": {
-    de: "Gestartet",
-    en: "Started",
-    es: "Iniciado",
   },
+  "user-data-rights:entity:export-job:field:startedAt": { en: "Started" },
   "user-data-rights:entity:export-job:field:downloadStorageKey": {
-    de: "Speicher-Schlüssel",
     en: "Storage key",
-    es: "Clave de almacenamiento",
-  },
-  "user-data-rights:entity:export-job:field:bytesWritten": {
-    de: "Bytes",
-    en: "Bytes",
-    es: "Bytes",
-  },
-  "user-data-rights:entity:export-job:field:errorMessage": {
-    de: "Fehler",
-    en: "Error",
-    es: "Error",
   },
+  "user-data-rights:entity:export-job:field:bytesWritten": { en: "Bytes" },
+  "user-data-rights:entity:export-job:field:errorMessage": { en: "Error" },
   "user-data-rights:entity:download-attempt:field:attemptedAt": {
-    de: "Zeitpunkt",
     en: "Attempted at",
-    es: "Fecha y hora",
-  },
-  "user-data-rights:entity:download-attempt:field:result": {
-    de: "Ergebnis",
-    en: "Result",
-    es: "Resultado",
   },
-  "user-data-rights:entity:download-attempt:field:via": { de: "Via", en: "Via", es: "Vía" },
-  "user-data-rights:entity:download-attempt:field:ip": { de: "IP", en: "IP", es: "IP" },
+  "user-data-rights:entity:download-attempt:field:result": { en: "Result" },
+  "user-data-rights:entity:download-attempt:field:via": { en: "Via" },
+  "user-data-rights:entity:download-attempt:field:ip": { en: "IP" },
   "user-data-rights:entity:download-attempt:field:attemptedByUserId": {
-    de: "Benutzer",
     en: "User",
-    es: "Usuario",
   },
-  "user-data-rights:entity:download-attempt:field:jobId": { de: "Job", en: "Job", es: "Trabajo" },
+  "user-data-rights:entity:download-attempt:field:jobId": { en: "Job" },
 };

package/src/user-data-rights/lib/default-mailers.ts

@@ -11,6 +11,7 @@
 
 import type { EmailTransport } from "@cosmicdrift/kumiko-bundled-features/channel-email";
 import type { Registry } from "@cosmicdrift/kumiko-framework/engine";
+import { hasMailTranslations } from "@cosmicdrift/kumiko-framework/i18n";
 import {
   type GdprMailLocale,
   normalizeGdprMailLocale,
@@ -44,7 +45,9 @@ function localeFor(
   userLocale: string | null,
   defaults: GdprMailDefaults,
 ): GdprMailLocale | undefined {
-  return normalizeGdprMailLocale(userLocale) ?? defaults.locale;
+  const user = normalizeGdprMailLocale(userLocale);
+  if (user !== undefined && hasMailTranslations(user)) return user;
+  return defaults.locale;
 }
 
 export function makeDefaultExportReadyEmail(

package/src/user-data-rights/web/__tests__/deletion-screens.test.tsx

@@ -14,7 +14,7 @@ import { ConfirmAccountDeletionScreen } from "../confirm-deletion-screen";
 import { defaultTranslations } from "../i18n";
 import { RequestAccountDeletionScreen } from "../request-deletion-screen";
 
-const resolver = createStaticLocaleResolver({ locale: "de" });
+const resolver = createStaticLocaleResolver({ locale: "en" });
 
 type WriteCall = { readonly type: string; readonly payload: unknown };
 
@@ -62,7 +62,7 @@ describe("RequestAccountDeletionScreen", () => {
     const ui = renderWith(<RequestAccountDeletionScreen />, makeDispatcher(true, calls));
     fireEvent.change(ui.getByRole("textbox"), { target: { value: "a@b.com" } });
     fireEvent.click(ui.getByRole("button"));
-    await waitFor(() => expect(ui.getByText(/Mail gesendet/)).toBeTruthy());
+    await waitFor(() => expect(ui.getByText(/Email sent/)).toBeTruthy());
     await waitFor(() => expect(calls).toHaveLength(1));
     expect(calls[0]?.type).toBe("user-data-rights:write:request-deletion-by-email");
     expect(calls[0]?.payload).toEqual({ email: "a@b.com" });
@@ -73,8 +73,8 @@ describe("RequestAccountDeletionScreen", () => {
     const ui = renderWith(<RequestAccountDeletionScreen />, makeDispatcher(false, calls));
     fireEvent.change(ui.getByRole("textbox"), { target: { value: "a@b.com" } });
     fireEvent.click(ui.getByRole("button"));
-    await waitFor(() => expect(ui.getByText(/schief gegangen/)).toBeTruthy());
-    expect(ui.queryByText(/Mail gesendet/)).toBeNull();
+    await waitFor(() => expect(ui.getByText(/went wrong/)).toBeTruthy());
+    expect(ui.queryByText(/Email sent/)).toBeNull();
   });
 });
 
@@ -82,7 +82,7 @@ describe("ConfirmAccountDeletionScreen", () => {
   test("ohne #token → missingToken, kein Confirm-Button", () => {
     window.history.replaceState({}, "", "/delete-account/confirm");
     const ui = renderWith(<ConfirmAccountDeletionScreen />, makeDispatcher(true, []));
-    expect(ui.getByText(/Kein Token/)).toBeTruthy();
+    expect(ui.getByText(/No token/)).toBeTruthy();
     expect(ui.queryByRole("button")).toBeNull();
   });
 
@@ -91,7 +91,7 @@ describe("ConfirmAccountDeletionScreen", () => {
     const calls: WriteCall[] = [];
     const ui = renderWith(<ConfirmAccountDeletionScreen />, makeDispatcher(true, calls));
     fireEvent.click(ui.getByRole("button"));
-    await waitFor(() => expect(ui.getByText(/vorgemerkt/)).toBeTruthy());
+    await waitFor(() => expect(ui.getByText(/Deletion scheduled/)).toBeTruthy());
     await waitFor(() => expect(calls).toHaveLength(1));
     expect(calls[0]?.type).toBe("user-data-rights:write:confirm-deletion-by-token");
     expect(calls[0]?.payload).toEqual({ token: "tok-123" });
@@ -101,16 +101,16 @@ describe("ConfirmAccountDeletionScreen", () => {
     window.history.replaceState({}, "", "/delete-account/confirm#token=bad");
     const ui = renderWith(<ConfirmAccountDeletionScreen />, makeDispatcher(false, []));
     fireEvent.click(ui.getByRole("button"));
-    await waitFor(() => expect(ui.getByText(/ungültig oder abgelaufen/)).toBeTruthy());
-    expect(ui.queryByText(/vorgemerkt/)).toBeNull();
+    await waitFor(() => expect(ui.getByText(/invalid or expired/)).toBeTruthy());
+    expect(ui.queryByText(/Deletion scheduled/)).toBeNull();
   });
 
   test("write wirft → generischer Error-Banner, NICHT invalidToken", async () => {
     window.history.replaceState({}, "", "/delete-account/confirm#token=tok-123");
     const ui = renderWith(<ConfirmAccountDeletionScreen />, makeThrowingDispatcher());
     fireEvent.click(ui.getByRole("button"));
-    await waitFor(() => expect(ui.getByText(/schief gegangen/)).toBeTruthy());
-    expect(ui.queryByText(/ungültig oder abgelaufen/)).toBeNull();
-    expect(ui.queryByText(/vorgemerkt/)).toBeNull();
+    await waitFor(() => expect(ui.getByText(/went wrong/)).toBeTruthy());
+    expect(ui.queryByText(/invalid or expired/)).toBeNull();
+    expect(ui.queryByText(/Deletion scheduled/)).toBeNull();
   });
 });